diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
deleted file mode 100644
index e4682cb..0000000
--- a/.github/copilot-instructions.md
+++ /dev/null
@@ -1,89 +0,0 @@
-# Copilot instructions for ActivityWatch-Russian
-
-Purpose: help future Copilot sessions quickly understand how to build, validate, and modify this repo.
-
----
-
-## Build / test / lint (how-to)
-
-- Shell script checks (CI & local):
-  - Full: ./scripts/quality-gate.sh
-  - Single file (syntax): bash -n <script>. Example: bash -n scripts/install_aw_linux_client.sh
-  - Run shellcheck locally (same checks as CI): install shellcheck then run:
-    find . -type f -name "*.sh" -print0 | xargs -0 -r shellcheck -e SC1007,SC1090,SC2016
-
-- PowerShell checks (Windows / CI):
-  - Single-file analysis (locally in PowerShell):
-    Invoke-ScriptAnalyzer -Path windows/deploy-ensemble.ps1
-  - CI installs PSScriptAnalyzer and runs against windows/*.ps1, *.psm1, *.psd1
-
-- Python scripts / utilities:
-  - Run a single utility: python3 scripts/aggregate_dlp_events.py
-  - Many scripts are helpers for operations; no test harness in repo.
-
-- Monitoring stack (Docker Compose):
-  - Start: cd grafana-1c && docker-compose up -d
-  - Start a single service: docker-compose up -d grafana
-
-- Server install / deploy helpers:
-  - AW server install: aw-server/install_aw_server.sh
-  - Apply RU WebUI patch: aw-server/apply_webui_ru_patch.sh
-  - Windows deploy/validation: windows/deploy-ensemble.ps1 and windows/validate-deployment.ps1
-
-Notes: there is no unified unit-test suite. Use the script checks and CI pipeline (.github/workflows/ci.yml) as the canonical validation steps.
-
----
-
-## High-level architecture (short)
-
-- Windows collectors (PowerShell) run on endpoints and POST events to the ActivityWatch Server HTTP API.
-- ActivityWatch Server (deployed on Linux CT/LXC via Proxmox or Debian VM) stores events in PostgreSQL and serves WebUI.
-- Integration layer: pollers and aggregators (Python) for pfSense, DLP aggregation, Prometheus exporter.
-- Monitoring: Prometheus + Grafana (docker-compose in grafana-1c) and a SQL exporter for direct DB dashboards.
-
-Key ports: AW API 5600/5666, PostgreSQL 5432, Prometheus 9090, Grafana 3000, exporter 9398.
-
----
-
-## Key repository conventions
-
-- Branching / commits:
-  - Use feature branches. Commit style follows Conventional Commits (feat/fix/docs/chore).
-
-- Secrets and envs:
-  - Secrets live in secrets/*.env templates and must NOT be committed. Use secrets/deploy.secrets.env locally; CI and scripts expect templates (.example).
-
-- Preflight / PR checks:
-  - Run bash -n for shell scripts and Invoke-ScriptAnalyzer for PowerShell before opening PRs.
-  - Update docs/runbook.md and related runbooks when behavior changes.
-
-- RU patching:
-  - WebUI localization is applied via aw-server/aw-ru-patch.js and aw-server/apply_webui_ru_patch.sh — treat these as idempotent patch steps during deploy.
-
-- Systemd / deploy units:
-  - activitywatch-server.service / aw-worktime-api.service / aw-worktime-ui-bridge.service are included in aw-server/ for production use.
-
-- CI expectations:
-  - .github/workflows/ci.yml runs shellcheck and PSScriptAnalyzer. Use scripts/quality-gate.sh locally to replicate preflight.
-
----
-
-## Important files & quick references
-
-- docs/ (onboarding, deployment, runbook) — start here for operational context.
-- aw-server/ — server install script, env template, RU patch, systemd units.
-- ansible/ — automated provisioning playbooks for CT/Proxmox and Windows deploys.
-- windows/ — PowerShell collectors and orchestration; validation scripts are here.
-- scripts/ — helpers (aggregate_dlp_events.py, installers, quality-gate.sh).
-- grafana-1c/ — docker-compose monitoring stack and dashboards.
-
----
-
-## AI assistant & other tool configs to check
-
-- No Copilot-specific instruction file existed before this addition.
-- No CLAUDE.md, .cursorrules, AGENTS.md, .windsurfrules, CONVENTIONS.md, or AIDER_CONVENTIONS.md detected at repo root. If adding automated assistant rules, place them in repo root or .github and document cross-references here.
-
----
-
-If you need the Copilot instructions extended (e.g., adding run examples for specific scripts, more detailed CI breakdown, or mapping tests to files), say which area to expand.
diff --git a/.gitignore b/.gitignore
index 2efc8e1..62fb7b5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,29 +8,6 @@ secrets/runtime.env
 *.bak
 windows/*.report.json
 .rollout-logs/
-reports/
-tmp/
-graphify-out/cache/
-graphify-out/powershell-parse-results*.json
-graphify-out/powershell-pssa-warn-results.json
-graphify-out/shellcheck-*.txt
-graphify-out/validate_dryrun_out*.txt
-graphify-out/pssa_diffs.txt
-.graphify_analysis.json
-.graphify_ast.json
-.graphify_cached.json
-.graphify_chunk_list_*.txt
-.graphify_detect.json
-.graphify_extract.json
-.graphify_labels.json
-.graphify_python
-.graphify_semantic.json
-.graphify_uncached.txt
-graphify-out/GRAPH_REPORT.md
-graphify-out/graph.html
-graphify-out/graph.json
-.pssa_run.ps1
-data/
 
 # IDE
 .idea/
diff --git a/.graphify_ast.json b/.graphify_ast.json
new file mode 100644
index 0000000..1b73bfe
--- /dev/null
+++ b/.graphify_ast.json
@@ -0,0 +1,11236 @@
+{
+  "nodes": [
+    {
+      "id": "aw_server_aw_ru_patch_js",
+      "label": "aw-ru-patch.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1"
+    },
+    {
+      "id": "aw_ru_patch_replacetext",
+      "label": "replaceText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L269"
+    },
+    {
+      "id": "aw_ru_patch_walk",
+      "label": "walk()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L281"
+    },
+    {
+      "id": "aw_ru_patch_translateattributes",
+      "label": "translateAttributes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L293"
+    },
+    {
+      "id": "aw_ru_patch_injectstyles",
+      "label": "injectStyles()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L305"
+    },
+    {
+      "id": "aw_ru_patch_hidenoisenavigation",
+      "label": "hideNoiseNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L348"
+    },
+    {
+      "id": "aw_ru_patch_getcurrenthostfromhash",
+      "label": "getCurrentHostFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L360"
+    },
+    {
+      "id": "aw_ru_patch_ispvelikehost",
+      "label": "isPveLikeHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L369"
+    },
+    {
+      "id": "aw_ru_patch_islikelyclienthost",
+      "label": "isLikelyClientHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L373"
+    },
+    {
+      "id": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "label": "enforceSafeActivityViewForPveHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L383"
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfromsettings",
+      "label": "getDlpHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L397"
+    },
+    {
+      "id": "aw_ru_patch_getdlphref",
+      "label": "getDlpHref()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L405"
+    },
+    {
+      "id": "aw_ru_patch_isdlpsignalbucketroute",
+      "label": "isDlpSignalBucketRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L410"
+    },
+    {
+      "id": "aw_ru_patch_isalertsroute",
+      "label": "isAlertsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L414"
+    },
+    {
+      "id": "aw_ru_patch_getdlpbucketidfromhash",
+      "label": "getDlpBucketIdFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L418"
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfrombucketid",
+      "label": "getDlpHostFromBucketId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L424"
+    },
+    {
+      "id": "aw_ru_patch_escapehtml",
+      "label": "escapeHtml()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L429"
+    },
+    {
+      "id": "aw_ru_patch_normalizetext",
+      "label": "normalizeText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L438"
+    },
+    {
+      "id": "aw_ru_patch_builddlpkey",
+      "label": "buildDlpKey()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L442"
+    },
+    {
+      "id": "aw_ru_patch_generatedlpid",
+      "label": "generateDlpId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L454"
+    },
+    {
+      "id": "aw_ru_patch_awapijson",
+      "label": "awApiJson()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L458"
+    },
+    {
+      "id": "aw_ru_patch_ensureawbucket",
+      "label": "ensureAwBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L476"
+    },
+    {
+      "id": "aw_ru_patch_saveawheartbeat",
+      "label": "saveAwHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L487"
+    },
+    {
+      "id": "aw_ru_patch_loadbucketevents",
+      "label": "loadBucketEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L495"
+    },
+    {
+      "id": "aw_ru_patch_getrulematchfields",
+      "label": "getRuleMatchFields()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L503"
+    },
+    {
+      "id": "aw_ru_patch_serializerulematch",
+      "label": "serializeRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L515"
+    },
+    {
+      "id": "aw_ru_patch_getruleid",
+      "label": "getRuleId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L527"
+    },
+    {
+      "id": "aw_ru_patch_getreviewid",
+      "label": "getReviewId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L536"
+    },
+    {
+      "id": "aw_ru_patch_collapseruleevents",
+      "label": "collapseRuleEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L547"
+    },
+    {
+      "id": "aw_ru_patch_collapsereviewevents",
+      "label": "collapseReviewEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L560"
+    },
+    {
+      "id": "aw_ru_patch_rulematchesevent",
+      "label": "ruleMatchesEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L573"
+    },
+    {
+      "id": "aw_ru_patch_getsuppressionstate",
+      "label": "getSuppressionState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L582"
+    },
+    {
+      "id": "aw_ru_patch_removebaddlplinks",
+      "label": "removeBadDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L595"
+    },
+    {
+      "id": "aw_ru_patch_updatedlplinks",
+      "label": "updateDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L603"
+    },
+    {
+      "id": "aw_ru_patch_builddlpnavitem",
+      "label": "buildDlpNavItem()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L612"
+    },
+    {
+      "id": "aw_ru_patch_findprimarynavlist",
+      "label": "findPrimaryNavList()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L630"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpnavigation",
+      "label": "injectDlpNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L643"
+    },
+    {
+      "id": "aw_ru_patch_ishomeroute",
+      "label": "isHomeRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L675"
+    },
+    {
+      "id": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "label": "getDefaultHostGroupsConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L680"
+    },
+    {
+      "id": "aw_ru_patch_gethostgroupsstate",
+      "label": "getHostGroupsState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L722"
+    },
+    {
+      "id": "aw_ru_patch_ensurehostgroupsdata",
+      "label": "ensureHostGroupsData()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L733"
+    },
+    {
+      "id": "aw_ru_patch_ispveactivityroute",
+      "label": "isPveActivityRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L755"
+    },
+    {
+      "id": "aw_ru_patch_extracthostfrombucket",
+      "label": "extractHostFromBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L761"
+    },
+    {
+      "id": "aw_ru_patch_buildhostbucketmap",
+      "label": "buildHostBucketMap()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L788"
+    },
+    {
+      "id": "aw_ru_patch_hosthasbucketprefix",
+      "label": "hostHasBucketPrefix()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L804"
+    },
+    {
+      "id": "aw_ru_patch_matchhostgroup",
+      "label": "matchHostGroup()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L810"
+    },
+    {
+      "id": "aw_ru_patch_buildhostlink",
+      "label": "buildHostLink()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L839"
+    },
+    {
+      "id": "aw_ru_patch_renderhostgroupcards",
+      "label": "renderHostGroupCards()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L855"
+    },
+    {
+      "id": "aw_ru_patch_injecthostgroupscenter",
+      "label": "injectHostGroupsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L911"
+    },
+    {
+      "id": "aw_ru_patch_renderdlptablerows",
+      "label": "renderDlpTableRows()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L932"
+    },
+    {
+      "id": "aw_ru_patch_savedlpreview",
+      "label": "saveDlpReview()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L973"
+    },
+    {
+      "id": "aw_ru_patch_savedlpincident",
+      "label": "saveDlpIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1007"
+    },
+    {
+      "id": "aw_ru_patch_savedlprule",
+      "label": "saveDlpRule()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1031"
+    },
+    {
+      "id": "aw_ru_patch_binddlprowactions",
+      "label": "bindDlpRowActions()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1052"
+    },
+    {
+      "id": "aw_ru_patch_setdlpruleenabled",
+      "label": "setDlpRuleEnabled()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1087"
+    },
+    {
+      "id": "aw_ru_patch_setdlpreviewarchived",
+      "label": "setDlpReviewArchived()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1106"
+    },
+    {
+      "id": "aw_ru_patch_renderdlprulemanager",
+      "label": "renderDlpRuleManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1129"
+    },
+    {
+      "id": "aw_ru_patch_renderdlpreviewmanager",
+      "label": "renderDlpReviewManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1174"
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpcenter",
+      "label": "refreshDlpCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1220"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpreviewcenter",
+      "label": "injectDlpReviewCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1249"
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpalertscenter",
+      "label": "refreshDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1318"
+    },
+    {
+      "id": "aw_ru_patch_refreshpveauditcenter",
+      "label": "refreshPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1348"
+    },
+    {
+      "id": "aw_ru_patch_injectpveauditcenter",
+      "label": "injectPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1394"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpalertscenter",
+      "label": "injectDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1432"
+    },
+    {
+      "id": "aw_ru_patch_gettrendshostfromsettings",
+      "label": "getTrendsHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1475"
+    },
+    {
+      "id": "aw_ru_patch_gettrendspath",
+      "label": "getTrendsPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1483"
+    },
+    {
+      "id": "aw_ru_patch_shouldredirecttrends",
+      "label": "shouldRedirectTrends()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1489"
+    },
+    {
+      "id": "aw_ru_patch_redirectbaretrendsroute",
+      "label": "redirectBareTrendsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1494"
+    },
+    {
+      "id": "aw_ru_patch_ensuresettingshost",
+      "label": "ensureSettingsHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1517"
+    },
+    {
+      "id": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "label": "getPreferredWindowHostFromBuckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1535"
+    },
+    {
+      "id": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "label": "rewriteUnknownCategoryBuilderQueryBody()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1552"
+    },
+    {
+      "id": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "label": "installCategoryBuilderNetworkPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1578"
+    },
+    {
+      "id": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "label": "patchCategoryBuilderHostLabel()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1625"
+    },
+    {
+      "id": "aw_ru_patch_patchactivityheading",
+      "label": "patchActivityHeading()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1642"
+    },
+    {
+      "id": "aw_ru_patch_applypatch",
+      "label": "applyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1654"
+    },
+    {
+      "id": "aw_ru_patch_scheduleapplypatch",
+      "label": "scheduleApplyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1673"
+    },
+    {
+      "id": "aw_server_aw_sw_cleanup_js",
+      "label": "aw-sw-cleanup.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-sw-cleanup.js",
+      "source_location": "L1"
+    },
+    {
+      "id": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "label": "aw_activitywatch.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L1"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter",
+      "label": "ActivityWatchExporter",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L31"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_init",
+      "label": ".__init__()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L32"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "label": ".get_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L38"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "label": ".get_bucket_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L48"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "label": ".get_bucket_info()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L62"
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "label": ".collect_metrics()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L72"
+    },
+    {
+      "id": "aw_activitywatch_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L125"
+    },
+    {
+      "id": "aw_activitywatch_rationale_39",
+      "label": "Get all buckets from ActivityWatch API.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L39"
+    },
+    {
+      "id": "aw_activitywatch_rationale_49",
+      "label": "Get events from a specific bucket.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L49"
+    },
+    {
+      "id": "aw_activitywatch_rationale_63",
+      "label": "Get detailed info about a bucket.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L63"
+    },
+    {
+      "id": "aw_activitywatch_rationale_73",
+      "label": "Collect metrics from ActivityWatch.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L73"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "label": "aw-ru-patch.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1"
+    },
+    {
+      "id": "aw_ru_patch_replacetext",
+      "label": "replaceText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L269"
+    },
+    {
+      "id": "aw_ru_patch_walk",
+      "label": "walk()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L281"
+    },
+    {
+      "id": "aw_ru_patch_translateattributes",
+      "label": "translateAttributes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L293"
+    },
+    {
+      "id": "aw_ru_patch_injectstyles",
+      "label": "injectStyles()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L305"
+    },
+    {
+      "id": "aw_ru_patch_hidenoisenavigation",
+      "label": "hideNoiseNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L348"
+    },
+    {
+      "id": "aw_ru_patch_getcurrenthostfromhash",
+      "label": "getCurrentHostFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L360"
+    },
+    {
+      "id": "aw_ru_patch_ispvelikehost",
+      "label": "isPveLikeHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L369"
+    },
+    {
+      "id": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "label": "enforceSafeActivityViewForPveHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L373"
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfromsettings",
+      "label": "getDlpHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L387"
+    },
+    {
+      "id": "aw_ru_patch_getdlphref",
+      "label": "getDlpHref()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L395"
+    },
+    {
+      "id": "aw_ru_patch_isdlpsignalbucketroute",
+      "label": "isDlpSignalBucketRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L400"
+    },
+    {
+      "id": "aw_ru_patch_isalertsroute",
+      "label": "isAlertsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L404"
+    },
+    {
+      "id": "aw_ru_patch_getdlpbucketidfromhash",
+      "label": "getDlpBucketIdFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L408"
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfrombucketid",
+      "label": "getDlpHostFromBucketId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L414"
+    },
+    {
+      "id": "aw_ru_patch_escapehtml",
+      "label": "escapeHtml()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L419"
+    },
+    {
+      "id": "aw_ru_patch_normalizetext",
+      "label": "normalizeText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L428"
+    },
+    {
+      "id": "aw_ru_patch_builddlpkey",
+      "label": "buildDlpKey()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L432"
+    },
+    {
+      "id": "aw_ru_patch_generatedlpid",
+      "label": "generateDlpId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L444"
+    },
+    {
+      "id": "aw_ru_patch_awapijson",
+      "label": "awApiJson()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L448"
+    },
+    {
+      "id": "aw_ru_patch_ensureawbucket",
+      "label": "ensureAwBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L466"
+    },
+    {
+      "id": "aw_ru_patch_saveawheartbeat",
+      "label": "saveAwHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L477"
+    },
+    {
+      "id": "aw_ru_patch_loadbucketevents",
+      "label": "loadBucketEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L485"
+    },
+    {
+      "id": "aw_ru_patch_getrulematchfields",
+      "label": "getRuleMatchFields()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L493"
+    },
+    {
+      "id": "aw_ru_patch_serializerulematch",
+      "label": "serializeRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L505"
+    },
+    {
+      "id": "aw_ru_patch_getruleid",
+      "label": "getRuleId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L517"
+    },
+    {
+      "id": "aw_ru_patch_getreviewid",
+      "label": "getReviewId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L526"
+    },
+    {
+      "id": "aw_ru_patch_collapseruleevents",
+      "label": "collapseRuleEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L537"
+    },
+    {
+      "id": "aw_ru_patch_collapsereviewevents",
+      "label": "collapseReviewEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L550"
+    },
+    {
+      "id": "aw_ru_patch_rulematchesevent",
+      "label": "ruleMatchesEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L563"
+    },
+    {
+      "id": "aw_ru_patch_getsuppressionstate",
+      "label": "getSuppressionState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L572"
+    },
+    {
+      "id": "aw_ru_patch_removebaddlplinks",
+      "label": "removeBadDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L585"
+    },
+    {
+      "id": "aw_ru_patch_updatedlplinks",
+      "label": "updateDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L593"
+    },
+    {
+      "id": "aw_ru_patch_builddlpnavitem",
+      "label": "buildDlpNavItem()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L602"
+    },
+    {
+      "id": "aw_ru_patch_findprimarynavlist",
+      "label": "findPrimaryNavList()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L620"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpnavigation",
+      "label": "injectDlpNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L633"
+    },
+    {
+      "id": "aw_ru_patch_ishomeroute",
+      "label": "isHomeRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L665"
+    },
+    {
+      "id": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "label": "getDefaultHostGroupsConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L670"
+    },
+    {
+      "id": "aw_ru_patch_gethostgroupsstate",
+      "label": "getHostGroupsState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L699"
+    },
+    {
+      "id": "aw_ru_patch_ensurehostgroupsdata",
+      "label": "ensureHostGroupsData()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L710"
+    },
+    {
+      "id": "aw_ru_patch_ispveactivityroute",
+      "label": "isPveActivityRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L732"
+    },
+    {
+      "id": "aw_ru_patch_extracthostfrombucket",
+      "label": "extractHostFromBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L738"
+    },
+    {
+      "id": "aw_ru_patch_buildhostbucketmap",
+      "label": "buildHostBucketMap()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L757"
+    },
+    {
+      "id": "aw_ru_patch_matchhostgroup",
+      "label": "matchHostGroup()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L773"
+    },
+    {
+      "id": "aw_ru_patch_buildhostlink",
+      "label": "buildHostLink()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L788"
+    },
+    {
+      "id": "aw_ru_patch_renderhostgroupcards",
+      "label": "renderHostGroupCards()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L804"
+    },
+    {
+      "id": "aw_ru_patch_injecthostgroupscenter",
+      "label": "injectHostGroupsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L860"
+    },
+    {
+      "id": "aw_ru_patch_renderdlptablerows",
+      "label": "renderDlpTableRows()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L881"
+    },
+    {
+      "id": "aw_ru_patch_savedlpreview",
+      "label": "saveDlpReview()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L922"
+    },
+    {
+      "id": "aw_ru_patch_savedlpincident",
+      "label": "saveDlpIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L956"
+    },
+    {
+      "id": "aw_ru_patch_savedlprule",
+      "label": "saveDlpRule()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L980"
+    },
+    {
+      "id": "aw_ru_patch_binddlprowactions",
+      "label": "bindDlpRowActions()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1001"
+    },
+    {
+      "id": "aw_ru_patch_setdlpruleenabled",
+      "label": "setDlpRuleEnabled()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1036"
+    },
+    {
+      "id": "aw_ru_patch_setdlpreviewarchived",
+      "label": "setDlpReviewArchived()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1055"
+    },
+    {
+      "id": "aw_ru_patch_renderdlprulemanager",
+      "label": "renderDlpRuleManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1078"
+    },
+    {
+      "id": "aw_ru_patch_renderdlpreviewmanager",
+      "label": "renderDlpReviewManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1123"
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpcenter",
+      "label": "refreshDlpCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1169"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpreviewcenter",
+      "label": "injectDlpReviewCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1198"
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpalertscenter",
+      "label": "refreshDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1267"
+    },
+    {
+      "id": "aw_ru_patch_refreshpveauditcenter",
+      "label": "refreshPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1297"
+    },
+    {
+      "id": "aw_ru_patch_injectpveauditcenter",
+      "label": "injectPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1343"
+    },
+    {
+      "id": "aw_ru_patch_injectdlpalertscenter",
+      "label": "injectDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1381"
+    },
+    {
+      "id": "aw_ru_patch_gettrendshostfromsettings",
+      "label": "getTrendsHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1424"
+    },
+    {
+      "id": "aw_ru_patch_gettrendspath",
+      "label": "getTrendsPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1431"
+    },
+    {
+      "id": "aw_ru_patch_shouldredirecttrends",
+      "label": "shouldRedirectTrends()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1437"
+    },
+    {
+      "id": "aw_ru_patch_redirectbaretrendsroute",
+      "label": "redirectBareTrendsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1442"
+    },
+    {
+      "id": "aw_ru_patch_ensuresettingshost",
+      "label": "ensureSettingsHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1465"
+    },
+    {
+      "id": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "label": "getPreferredWindowHostFromBuckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1483"
+    },
+    {
+      "id": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "label": "rewriteUnknownCategoryBuilderQueryBody()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1501"
+    },
+    {
+      "id": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "label": "installCategoryBuilderNetworkPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1527"
+    },
+    {
+      "id": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "label": "patchCategoryBuilderHostLabel()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1572"
+    },
+    {
+      "id": "aw_ru_patch_patchactivityheading",
+      "label": "patchActivityHeading()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1589"
+    },
+    {
+      "id": "aw_ru_patch_applypatch",
+      "label": "applyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1601"
+    },
+    {
+      "id": "aw_ru_patch_scheduleapplypatch",
+      "label": "scheduleApplyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1620"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_aw_server_aw_sw_cleanup_js",
+      "label": "aw-sw-cleanup.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-sw-cleanup.js",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "label": "browser-domains-native-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "browser_domains_native_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42"
+    },
+    {
+      "id": "browser_domains_native_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109"
+    },
+    {
+      "id": "browser_domains_native_collector_write_dlpincidentlog",
+      "label": "Write-DlpIncidentLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123"
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainmatch",
+      "label": "Test-DomainMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137"
+    },
+    {
+      "id": "browser_domains_native_collector_get_hostfromurl",
+      "label": "Get-HostFromUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152"
+    },
+    {
+      "id": "browser_domains_native_collector_get_rootdomain",
+      "label": "Get-RootDomain()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173"
+    },
+    {
+      "id": "browser_domains_native_collector_convertto_normalizedurl",
+      "label": "ConvertTo-NormalizedUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194"
+    },
+    {
+      "id": "browser_domains_native_collector_load_customcategoryrules",
+      "label": "Load-CustomCategoryRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225"
+    },
+    {
+      "id": "browser_domains_native_collector_get_webcategory",
+      "label": "Get-WebCategory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274"
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainlistmatch",
+      "label": "Test-DomainListMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296"
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlpruletimewindow",
+      "label": "Test-DlpRuleTimeWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315"
+    },
+    {
+      "id": "browser_domains_native_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337"
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlprulematch",
+      "label": "Test-DlpRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398"
+    },
+    {
+      "id": "browser_domains_native_collector_get_dlpdecision",
+      "label": "Get-DlpDecision()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454"
+    },
+    {
+      "id": "browser_domains_native_collector_should_emitincident",
+      "label": "Should-EmitIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478"
+    },
+    {
+      "id": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496"
+    },
+    {
+      "id": "browser_domains_native_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565"
+    },
+    {
+      "id": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587"
+    },
+    {
+      "id": "browser_domains_native_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596"
+    },
+    {
+      "id": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "label": "Get-ForegroundWindowContext()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633"
+    },
+    {
+      "id": "browser_domains_native_collector_get_browserurlfromwindow",
+      "label": "Get-BrowserUrlFromWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693"
+    },
+    {
+      "id": "browser_domains_native_collector_send_heartbeat",
+      "label": "Send-Heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714"
+    },
+    {
+      "id": "browser_domains_native_collector_send_categoryheartbeat",
+      "label": "Send-CategoryHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_domain_users_ps1",
+      "label": "deploy-domain-users.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_ensemble_ps1",
+      "label": "deploy-ensemble.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_single_user_ps1",
+      "label": "deploy-single-user.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "label": "dlp-endpoint-signals-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_endpointlog",
+      "label": "Write-EndpointLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "label": "Send-EndpointSignalHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "label": "Invoke-ClipboardEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "label": "Invoke-UsbWriteBlockEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "label": "Invoke-PrintJobEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "label": "Evaluate-ClipboardRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "label": "Evaluate-UsbRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "label": "Evaluate-PrintRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "label": "Test-LooksLikeMojibakeQuestionMarks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "label": "Normalize-OwnerForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "label": "Test-OwnerLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "label": "Normalize-PrinterForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "label": "Test-PrinterLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "label": "Get-PrintServiceEventSummary()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "label": "Get-PrintServiceDocumentFallback()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "label": "Write-PrintServiceEventTrace()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "label": "Get-BetterDocumentNameFromPrintServiceEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "label": "email-outbound-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "email_outbound_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L39"
+    },
+    {
+      "id": "email_outbound_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L47"
+    },
+    {
+      "id": "email_outbound_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L56"
+    },
+    {
+      "id": "email_outbound_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L65"
+    },
+    {
+      "id": "email_outbound_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L81"
+    },
+    {
+      "id": "email_outbound_collector_send_emailheartbeat",
+      "label": "Send-EmailHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L92"
+    },
+    {
+      "id": "email_outbound_collector_send_emailincidentheartbeat",
+      "label": "Send-EmailIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L113"
+    },
+    {
+      "id": "email_outbound_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L141"
+    },
+    {
+      "id": "email_outbound_collector_load_emailpolicy",
+      "label": "Load-EmailPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L165"
+    },
+    {
+      "id": "email_outbound_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L202"
+    },
+    {
+      "id": "email_outbound_collector_evaluate_emailrules",
+      "label": "Evaluate-EmailRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L222"
+    },
+    {
+      "id": "email_outbound_collector_invoke_emailenforcement",
+      "label": "Invoke-EmailEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L302"
+    },
+    {
+      "id": "email_outbound_collector_initialize_outlookcom",
+      "label": "Initialize-OutlookCom()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L324"
+    },
+    {
+      "id": "email_outbound_collector_get_outlooksentitems",
+      "label": "Get-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L338"
+    },
+    {
+      "id": "email_outbound_collector_poll_outlooksentitems",
+      "label": "Poll-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L387"
+    },
+    {
+      "id": "email_outbound_collector_poll_smtpconnections",
+      "label": "Poll-SmtpConnections()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L437"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_hardening_recovery_ps1",
+      "label": "hardening-recovery.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "label": "migrate-awatch-rus-paths.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_directorycontents",
+      "label": "Copy-DirectoryContents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_ifexists",
+      "label": "Copy-IfExists()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_convert_pathvalue",
+      "label": "Convert-PathValue()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "label": "Stop-AWatchTaskSet()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "label": "Get-ExistingAWatchConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "label": "Update-AWatchConfigPaths()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_validate_deployment_ps1",
+      "label": "validate-deployment.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "label": "worktime-session-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "worktime_session_collector_get_config",
+      "label": "Get-Config()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L10"
+    },
+    {
+      "id": "worktime_session_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L20"
+    },
+    {
+      "id": "worktime_session_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L30"
+    },
+    {
+      "id": "worktime_session_collector_get_sessionrecords",
+      "label": "Get-SessionRecords()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L53"
+    },
+    {
+      "id": "pfsense_pfsense_aw_poller_py",
+      "label": "pfsense-aw-poller.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L1"
+    },
+    {
+      "id": "pfsense_aw_poller_utc_now_iso",
+      "label": "utc_now_iso()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L14"
+    },
+    {
+      "id": "pfsense_aw_poller_load_json",
+      "label": "load_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L18"
+    },
+    {
+      "id": "pfsense_aw_poller_build_ssl_context",
+      "label": "build_ssl_context()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L22"
+    },
+    {
+      "id": "pfsense_aw_poller_http_json",
+      "label": "http_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L31"
+    },
+    {
+      "id": "pfsense_aw_poller_ensure_bucket",
+      "label": "ensure_bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L44"
+    },
+    {
+      "id": "pfsense_aw_poller_send_heartbeat",
+      "label": "send_heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L58"
+    },
+    {
+      "id": "pfsense_aw_poller_normalize_headers",
+      "label": "normalize_headers()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L68"
+    },
+    {
+      "id": "pfsense_aw_poller_summarize_payload",
+      "label": "summarize_payload()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L82"
+    },
+    {
+      "id": "pfsense_aw_poller_poll_endpoint",
+      "label": "poll_endpoint()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L100"
+    },
+    {
+      "id": "pfsense_aw_poller_run_once",
+      "label": "run_once()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L173"
+    },
+    {
+      "id": "pfsense_aw_poller_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L187"
+    },
+    {
+      "id": "scripts_aggregate_dlp_events_py",
+      "label": "aggregate_dlp_events.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L1"
+    },
+    {
+      "id": "aggregate_dlp_events_bucket",
+      "label": "Bucket",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L49"
+    },
+    {
+      "id": "aggregate_dlp_events_awevent",
+      "label": "AwEvent",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L57"
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection",
+      "label": "PsycopgConnection",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67"
+    },
+    {
+      "id": "protocol",
+      "label": "Protocol",
+      "file_type": "code",
+      "source_file": "",
+      "source_location": ""
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection_cursor",
+      "label": ".cursor()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L68"
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection_commit",
+      "label": ".commit()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L71"
+    },
+    {
+      "id": "aggregate_dlp_events_utc_now",
+      "label": "utc_now()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L75"
+    },
+    {
+      "id": "aggregate_dlp_events_parse_timestamp",
+      "label": "parse_timestamp()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L79"
+    },
+    {
+      "id": "aggregate_dlp_events_format_aw_timestamp",
+      "label": "format_aw_timestamp()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L87"
+    },
+    {
+      "id": "aggregate_dlp_events_load_state",
+      "label": "load_state()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L91"
+    },
+    {
+      "id": "aggregate_dlp_events_save_state",
+      "label": "save_state()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L97"
+    },
+    {
+      "id": "aggregate_dlp_events_normalize_base_url",
+      "label": "normalize_base_url()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L102"
+    },
+    {
+      "id": "aggregate_dlp_events_aw_get_json",
+      "label": "aw_get_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L106"
+    },
+    {
+      "id": "aggregate_dlp_events_list_buckets",
+      "label": "list_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L113"
+    },
+    {
+      "id": "aggregate_dlp_events_bucket_stream_type",
+      "label": "bucket_stream_type()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L132"
+    },
+    {
+      "id": "aggregate_dlp_events_select_buckets",
+      "label": "select_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L140"
+    },
+    {
+      "id": "aggregate_dlp_events_build_events_path",
+      "label": "build_events_path()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L149"
+    },
+    {
+      "id": "aggregate_dlp_events_event_key",
+      "label": "event_key()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L160"
+    },
+    {
+      "id": "aggregate_dlp_events_fetch_bucket_events",
+      "label": "fetch_bucket_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L165"
+    },
+    {
+      "id": "aggregate_dlp_events_connect_sqlite",
+      "label": "connect_sqlite()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L201"
+    },
+    {
+      "id": "aggregate_dlp_events_ensure_schema",
+      "label": "ensure_schema()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L210"
+    },
+    {
+      "id": "aggregate_dlp_events_ensure_postgres_schema",
+      "label": "ensure_postgres_schema()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L258"
+    },
+    {
+      "id": "aggregate_dlp_events_first_string",
+      "label": "first_string()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L307"
+    },
+    {
+      "id": "aggregate_dlp_events_bool_as_int",
+      "label": "bool_as_int()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L315"
+    },
+    {
+      "id": "aggregate_dlp_events_event_row",
+      "label": "event_row()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L323"
+    },
+    {
+      "id": "aggregate_dlp_events_insert_events",
+      "label": "insert_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L351"
+    },
+    {
+      "id": "aggregate_dlp_events_insert_postgres_events",
+      "label": "insert_postgres_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L389"
+    },
+    {
+      "id": "aggregate_dlp_events_get_start_time",
+      "label": "get_start_time()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L416"
+    },
+    {
+      "id": "aggregate_dlp_events_parse_prefixes",
+      "label": "parse_prefixes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L424"
+    },
+    {
+      "id": "aggregate_dlp_events_build_parser",
+      "label": "build_parser()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L431"
+    },
+    {
+      "id": "aggregate_dlp_events_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L447"
+    },
+    {
+      "id": "scripts_merge_aw_server_dbs_py",
+      "label": "merge_aw_server_dbs.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L1"
+    },
+    {
+      "id": "merge_aw_server_dbs_connect",
+      "label": "connect()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L10"
+    },
+    {
+      "id": "merge_aw_server_dbs_bucket_key",
+      "label": "bucket_key()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L17"
+    },
+    {
+      "id": "merge_aw_server_dbs_ensure_parent",
+      "label": "ensure_parent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L26"
+    },
+    {
+      "id": "merge_aw_server_dbs_load_existing_events",
+      "label": "load_existing_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L30"
+    },
+    {
+      "id": "merge_aw_server_dbs_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L38"
+    },
+    {
+      "id": "windows_browser_domains_native_collector_ps1",
+      "label": "browser-domains-native-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "browser_domains_native_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42"
+    },
+    {
+      "id": "browser_domains_native_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109"
+    },
+    {
+      "id": "browser_domains_native_collector_write_dlpincidentlog",
+      "label": "Write-DlpIncidentLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123"
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainmatch",
+      "label": "Test-DomainMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137"
+    },
+    {
+      "id": "browser_domains_native_collector_get_hostfromurl",
+      "label": "Get-HostFromUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152"
+    },
+    {
+      "id": "browser_domains_native_collector_get_rootdomain",
+      "label": "Get-RootDomain()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173"
+    },
+    {
+      "id": "browser_domains_native_collector_convertto_normalizedurl",
+      "label": "ConvertTo-NormalizedUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194"
+    },
+    {
+      "id": "browser_domains_native_collector_load_customcategoryrules",
+      "label": "Load-CustomCategoryRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225"
+    },
+    {
+      "id": "browser_domains_native_collector_get_webcategory",
+      "label": "Get-WebCategory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274"
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainlistmatch",
+      "label": "Test-DomainListMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296"
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlpruletimewindow",
+      "label": "Test-DlpRuleTimeWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315"
+    },
+    {
+      "id": "browser_domains_native_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337"
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlprulematch",
+      "label": "Test-DlpRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398"
+    },
+    {
+      "id": "browser_domains_native_collector_get_dlpdecision",
+      "label": "Get-DlpDecision()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454"
+    },
+    {
+      "id": "browser_domains_native_collector_should_emitincident",
+      "label": "Should-EmitIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478"
+    },
+    {
+      "id": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496"
+    },
+    {
+      "id": "browser_domains_native_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565"
+    },
+    {
+      "id": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587"
+    },
+    {
+      "id": "browser_domains_native_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596"
+    },
+    {
+      "id": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "label": "Get-ForegroundWindowContext()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633"
+    },
+    {
+      "id": "browser_domains_native_collector_get_browserurlfromwindow",
+      "label": "Get-BrowserUrlFromWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661"
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693"
+    },
+    {
+      "id": "browser_domains_native_collector_send_heartbeat",
+      "label": "Send-Heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714"
+    },
+    {
+      "id": "browser_domains_native_collector_send_categoryheartbeat",
+      "label": "Send-CategoryHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739"
+    },
+    {
+      "id": "windows_deploy_domain_users_ps1",
+      "label": "deploy-domain-users.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-domain-users.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "windows_deploy_ensemble_ps1",
+      "label": "deploy-ensemble.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-ensemble.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "windows_deploy_single_user_ps1",
+      "label": "deploy-single-user.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-single-user.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "windows_dlp_endpoint_signals_collector_ps1",
+      "label": "dlp-endpoint-signals-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_endpointlog",
+      "label": "Write-EndpointLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "label": "Send-EndpointSignalHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "label": "Invoke-ClipboardEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "label": "Invoke-UsbWriteBlockEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "label": "Invoke-PrintJobEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "label": "Evaluate-ClipboardRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "label": "Evaluate-UsbRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "label": "Evaluate-PrintRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "label": "Test-LooksLikeMojibakeQuestionMarks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "label": "Normalize-OwnerForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "label": "Test-OwnerLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "label": "Normalize-PrinterForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "label": "Test-PrinterLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "label": "Get-PrintServiceEventSummary()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "label": "Get-PrintServiceDocumentFallback()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "label": "Write-PrintServiceEventTrace()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647"
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "label": "Get-BetterDocumentNameFromPrintServiceEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676"
+    },
+    {
+      "id": "windows_email_outbound_collector_ps1",
+      "label": "email-outbound-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "email_outbound_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L39"
+    },
+    {
+      "id": "email_outbound_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L47"
+    },
+    {
+      "id": "email_outbound_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L56"
+    },
+    {
+      "id": "email_outbound_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L65"
+    },
+    {
+      "id": "email_outbound_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L81"
+    },
+    {
+      "id": "email_outbound_collector_send_emailheartbeat",
+      "label": "Send-EmailHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L92"
+    },
+    {
+      "id": "email_outbound_collector_send_emailincidentheartbeat",
+      "label": "Send-EmailIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L113"
+    },
+    {
+      "id": "email_outbound_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L141"
+    },
+    {
+      "id": "email_outbound_collector_load_emailpolicy",
+      "label": "Load-EmailPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L165"
+    },
+    {
+      "id": "email_outbound_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L202"
+    },
+    {
+      "id": "email_outbound_collector_evaluate_emailrules",
+      "label": "Evaluate-EmailRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L222"
+    },
+    {
+      "id": "email_outbound_collector_invoke_emailenforcement",
+      "label": "Invoke-EmailEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L302"
+    },
+    {
+      "id": "email_outbound_collector_initialize_outlookcom",
+      "label": "Initialize-OutlookCom()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L324"
+    },
+    {
+      "id": "email_outbound_collector_get_outlooksentitems",
+      "label": "Get-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L338"
+    },
+    {
+      "id": "email_outbound_collector_poll_outlooksentitems",
+      "label": "Poll-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L387"
+    },
+    {
+      "id": "email_outbound_collector_poll_smtpconnections",
+      "label": "Poll-SmtpConnections()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L437"
+    },
+    {
+      "id": "windows_file_operations_collector_ps1",
+      "label": "file-operations-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "file_operations_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L30"
+    },
+    {
+      "id": "file_operations_collector_write_filecollectorlog",
+      "label": "Write-FileCollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L38"
+    },
+    {
+      "id": "file_operations_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L46"
+    },
+    {
+      "id": "file_operations_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L61"
+    },
+    {
+      "id": "file_operations_collector_send_fileoperationevent",
+      "label": "Send-FileOperationEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L77"
+    },
+    {
+      "id": "windows_hardening_recovery_ps1",
+      "label": "hardening-recovery.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/hardening-recovery.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "windows_migrate_awatch_rus_paths_ps1",
+      "label": "migrate-awatch-rus-paths.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_directorycontents",
+      "label": "Copy-DirectoryContents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_ifexists",
+      "label": "Copy-IfExists()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_convert_pathvalue",
+      "label": "Convert-PathValue()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "label": "Stop-AWatchTaskSet()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "label": "Get-ExistingAWatchConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67"
+    },
+    {
+      "id": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "label": "Update-AWatchConfigPaths()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88"
+    },
+    {
+      "id": "windows_validate_deployment_ps1",
+      "label": "validate-deployment.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/validate-deployment.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "windows_worktime_session_collector_ps1",
+      "label": "worktime-session-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L1"
+    },
+    {
+      "id": "worktime_session_collector_get_config",
+      "label": "Get-Config()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L10"
+    },
+    {
+      "id": "worktime_session_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L20"
+    },
+    {
+      "id": "worktime_session_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L30"
+    },
+    {
+      "id": "worktime_session_collector_get_sessionrecords",
+      "label": "Get-SessionRecords()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L53"
+    }
+  ],
+  "edges": [
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_walk",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L383",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L405",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L410",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L418",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L424",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L429",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L438",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L442",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L476",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L487",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L495",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L527",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L536",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L560",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L573",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L582",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L595",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L612",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L630",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L643",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L675",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L680",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L722",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L733",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L755",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L761",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hosthasbucketprefix",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L810",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L839",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L855",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L911",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L932",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L973",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1007",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1031",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1052",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1087",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1106",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1129",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1174",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1220",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1249",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1318",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1348",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1394",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1432",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1475",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1489",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1494",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1517",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1535",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1552",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1578",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1625",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1642",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1654",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_scheduleapplypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1673",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_walk",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L286",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_translateattributes",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L399",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L402",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensureawbucket",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L477",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_saveawheartbeat",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L489",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_loadbucketevents",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getrulematchfields",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L506",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L529",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L530",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L539",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L541",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapseruleevents",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L553",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapsereviewevents",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L566",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L574",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_findprimarynavlist",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L634",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L644",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L645",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L646",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L651",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L653",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L656",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L659",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L734",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L741",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L743",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ispveactivityroute",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L758",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_buildhostbucketmap",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L796",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_matchhostgroup",
+      "target": "aw_ru_patch_hosthasbucketprefix",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L812",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L856",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L858",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L867",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L876",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L877",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L912",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L928",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L929",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L933",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L939",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L942",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L944",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L968",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L969",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L970",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L975",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L979",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L984",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L990",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L999",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1009",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1010",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1015",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1021",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1033",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1037",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1042",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1047",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1053",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1059",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1064",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1066",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1075",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1076",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1091",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1096",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1108",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1111",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1116",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1119",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1130",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1140",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1140",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1145",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1162",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1163",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1163",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1165",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1187",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1187",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1209",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1210",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1210",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1211",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1221",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1226",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1226",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1229",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1236",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1240",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1250",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1251",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1252",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1266",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1302",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1305",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1308",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1321",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1328",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1354",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1380",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1395",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1396",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1428",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1433",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1434",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1448",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1460",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_gettrendshostfromsettings",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1480",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_shouldredirecttrends",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1490",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1495",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1503",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1504",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1526",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1531",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1536",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1538",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1547",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1560",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1590",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1627",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1655",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1656",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1657",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1658",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1659",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_walk",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1660",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1661",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1662",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1663",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1664",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1665",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1666",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1667",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1668",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1669",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1670",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_scheduleapplypatch",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1678",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "time",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "logging",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "requests",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "prometheus_client",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "aw_activitywatch_activitywatchexporter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L31",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_init",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L32",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L62",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L72",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "aw_activitywatch_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L125",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L95",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_main",
+      "target": "aw_activitywatch_activitywatchexporter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L126",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_main",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_39",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_49",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L49",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_63",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_73",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_walk",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L404",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L408",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L444",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L448",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L477",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L485",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L493",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L505",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L517",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L526",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L537",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L550",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L563",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L585",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L593",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L602",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L620",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L665",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L670",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L699",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L710",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L732",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L738",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L757",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L773",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L860",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L881",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L922",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L956",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L980",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1001",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1036",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1055",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1078",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1123",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1169",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1198",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1267",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1297",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1343",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1381",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1424",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1431",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1437",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1442",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1465",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1501",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1527",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1589",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1601",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_scheduleapplypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1620",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_walk",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L286",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_translateattributes",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L380",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L392",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensureawbucket",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_saveawheartbeat",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L479",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_loadbucketevents",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L486",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getrulematchfields",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L520",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L529",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L531",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapseruleevents",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapsereviewevents",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L556",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L567",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_findprimarynavlist",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L634",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L635",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L636",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L641",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L643",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L646",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L649",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L711",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L718",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ispveactivityroute",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L735",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_buildhostbucketmap",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L765",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L805",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L807",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L816",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L825",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L826",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L861",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L877",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L878",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L882",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L888",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L891",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L893",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L917",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L918",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L919",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L924",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L928",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L933",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L939",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L948",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L958",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L959",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L964",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L970",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L982",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L986",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L991",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L996",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1002",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1008",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1013",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1014",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1014",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1015",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1024",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1025",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1038",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1040",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1045",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1057",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1060",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1068",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1079",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1094",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1111",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1112",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1112",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1114",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1124",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1136",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1136",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1158",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1159",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1159",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1160",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1170",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1178",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1185",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1189",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1199",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1200",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1201",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1215",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1248",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1251",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1254",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1257",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1270",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1277",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1303",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1329",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1344",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1345",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1377",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1382",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1383",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1397",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1409",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_shouldredirecttrends",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1438",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1443",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1451",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1452",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1474",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1479",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1484",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1486",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1509",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1538",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1574",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1602",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1603",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1604",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1605",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1606",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_walk",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1607",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1608",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1609",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1610",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1611",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1612",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1613",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1614",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1615",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1616",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1617",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_scheduleapplypatch",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1625",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_dlpincidentlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_hostfromurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_rootdomain",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_customcategoryrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_webcategory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_dlpdecision",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_should_emitincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_browserurlfromwindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_categoryheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_customcategoryrules",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L266",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_webcategory",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L279",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_domainlistmatch",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_dlppolicy",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L341",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_dlpdecision",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L470",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L510",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L604",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L611",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L628",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_browserurlfromwindow",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L678",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_categoryheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L753",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_ensure_bucket",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L189",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L196",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L209",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L213",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L240",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L249",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L267",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L300",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L342",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L420",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L423",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L446",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L455",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L463",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L499",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L500",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L509",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L569",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L605",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L662",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L692",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L695",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L696",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L700",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_load_emailpolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_initialize_outlookcom",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_smtpconnections",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_ensure_bucket",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L98",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L110",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L138",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_load_emailpolicy",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L283",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L289",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L290",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L298",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_initialize_outlookcom",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L329",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_get_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L409",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L468",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_directorycontents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_ifexists",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L111",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_config",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_sessionrecords",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "weight": 1.0
+    },
+    {
+      "source": "worktime_session_collector_ensure_bucket",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L50",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "ssl",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "sys",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "time",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_error",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_parse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_request",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L14",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_load_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L18",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_build_ssl_context",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L22",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L31",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L44",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L58",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_normalize_headers",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L68",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_summarize_payload",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L82",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_poll_endpoint",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L100",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_run_once",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L187",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_ensure_bucket",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L45",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_send_heartbeat",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L59",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_normalize_headers",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L106",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L118",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L128",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_summarize_payload",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_send_heartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L145",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_run_once",
+      "target": "pfsense_aw_poller_build_ssl_context",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L179",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_run_once",
+      "target": "pfsense_aw_poller_poll_endpoint",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L183",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_load_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L193",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_run_once",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L197",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L198",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "os",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "sqlite3",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "sys",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_error",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_parse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_request",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "collections_abc",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "dataclasses",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L12",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L13",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "typing",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L14",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L49",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_awevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L57",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_psycopgconnection",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "protocol",
+      "relation": "inherits",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L68",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L71",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L75",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_parse_timestamp",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L79",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L87",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_load_state",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_save_state",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L97",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_normalize_base_url",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L106",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_list_buckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bucket_stream_type",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_select_buckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L140",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_build_events_path",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L149",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L160",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_fetch_bucket_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_connect_sqlite",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L201",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_ensure_schema",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L210",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_ensure_postgres_schema",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_first_string",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bool_as_int",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L323",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_insert_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L351",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_insert_postgres_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L389",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_get_start_time",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_parse_prefixes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L424",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_build_parser",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L431",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L447",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_aw_get_json",
+      "target": "aggregate_dlp_events_normalize_base_url",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_list_buckets",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L114",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_list_buckets",
+      "target": "aggregate_dlp_events_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_select_buckets",
+      "target": "aggregate_dlp_events_bucket_stream_type",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L143",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_build_events_path",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L174",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_build_events_path",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L174",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L186",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_awevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L255",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_postgres_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L259",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_postgres_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L304",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L325",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_first_string",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L331",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_bool_as_int",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L353",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L353",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L385",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L396",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L396",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_ensure_postgres_schema",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L405",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L406",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L408",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L412",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_get_start_time",
+      "target": "aggregate_dlp_events_parse_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L418",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_get_start_time",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_build_parser",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L448",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_load_state",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L450",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_get_start_time",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L451",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L452",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_select_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_list_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_fetch_bucket_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L457",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L464",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_insert_postgres_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_connect_sqlite",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L483",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_ensure_schema",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L485",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_insert_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L486",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_save_state",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "os",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "shutil",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "sqlite3",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_bucket_key",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L17",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_ensure_parent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L26",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_load_existing_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_ensure_parent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L52",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L58",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_bucket_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_load_existing_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_dlpincidentlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_hostfromurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_rootdomain",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_customcategoryrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_webcategory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_dlpdecision",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_should_emitincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_browserurlfromwindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_categoryheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_customcategoryrules",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L266",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_webcategory",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L279",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_domainlistmatch",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_dlppolicy",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L341",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_dlpdecision",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L470",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L510",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L604",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L611",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L628",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_browserurlfromwindow",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L678",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_categoryheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L753",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_ensure_bucket",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L189",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L196",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L209",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L213",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L240",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L249",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L267",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L300",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L342",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L420",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L423",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L446",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L455",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L463",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L499",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L500",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L509",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L569",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L605",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L662",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L692",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L695",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L696",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L700",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_load_emailpolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_initialize_outlookcom",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_smtpconnections",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_ensure_bucket",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L98",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L110",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L138",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_load_emailpolicy",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L283",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L289",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L290",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L298",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_initialize_outlookcom",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L329",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_get_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L409",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L468",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_write_filecollectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_send_fileoperationevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_invoke_awjsonpost",
+      "target": "file_operations_collector_write_filecollectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L57",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_ensure_bucket",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_send_fileoperationevent",
+      "target": "file_operations_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L86",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_send_fileoperationevent",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_directorycontents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_ifexists",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L111",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_config",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_sessionrecords",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "weight": 1.0
+    },
+    {
+      "source": "worktime_session_collector_ensure_bucket",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L50",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_connect_sqlite",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L203",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L404",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L117",
+      "weight": 1.0
+    }
+  ],
+  "input_tokens": 0,
+  "output_tokens": 0
+}
\ No newline at end of file
diff --git a/.graphify_detect.json b/.graphify_detect.json
new file mode 100644
index 0000000..d283e30
--- /dev/null
+++ b/.graphify_detect.json
@@ -0,0 +1 @@
+{"files": {"code": ["/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-sw-cleanup.js", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-sw-cleanup.js", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-domain-users.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-ensemble.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-single-user.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/hardening-recovery.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/validate-deployment.ps1", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1"], "document": ["/mnt/usb_hdd2/Projects/ActivityWatch-Russian/CONTRIBUTING.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/README.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/ansible/README.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/1C_GRAFANA_DEPLOYMENT_RU.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/console-ssh-logger.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/deployment.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/dlp-aggregator.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/dlp-enforcement.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/dlp-gap-analysis.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/dlp-reliability-roadmap.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/email-outbound-collector.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/FULL_DEPLOYMENT_MANUAL_RU.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/linux-client.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/linux-remote-worker.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/operations.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/pfsense.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/POST_MEMORY_2026-04-27.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/powershell-analysis.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/preparation.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/runbook.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/telegram_support_system_prompt_ru.txt", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/worktime_aql_detmir.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/windows/deployment.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/windows/ensemble.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/windows/innosetup-rdp-package-filelist.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/windows/troubleshooting.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/windows/validation.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/README.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/MANIFEST.txt", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/README-INSTALL-KIT.txt", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/ansible/README.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/installkit/innosetup/BUILD.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/installkit/innosetup/innosetup-rdp-package-filelist.md", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/installkit/innosetup/payload/README.md"], "paper": [], "image": [], "video": []}, "total_files": 63, "total_words": 51386, "needs_graph": true, "warning": null, "skipped_sensitive": ["/mnt/usb_hdd2/Projects/ActivityWatch-Russian/secrets/deploy.secrets.env", "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/secrets/deploy.secrets.env.example"], "graphifyignore_patterns": 0}
diff --git a/.planning/PROJECT.md b/.planning/PROJECT.md
deleted file mode 100644
index d65c4a5..0000000
--- a/.planning/PROJECT.md
+++ /dev/null
@@ -1,14 +0,0 @@
-# ActivityWatch-Russian
-
-## Current Milestone: v1.0 Data Pipeline Stability
-
-**Goal:** Ensure stable collection and rendering of endpoint activity data in AW Web UI.
-
-**Target features:**
-- Reliable ingestion from Windows collectors (`endpoint-signals`, `browser-domains`).
-- Stable AW server query/render path for worktime/activity pages.
-- Deployment/runbook consistency (Ansible + install kit + rollback notes).
-
-## Evolution
-
-This document evolves at phase transitions and milestone boundaries.
diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md
deleted file mode 100644
index 7aa7cb4..0000000
--- a/.planning/ROADMAP.md
+++ /dev/null
@@ -1,14 +0,0 @@
-# ROADMAP
-
-## 🚧 v1.0 Data Pipeline Stability
-
-- [ ] Phase 1: Collectors and API flow hardening
-- [ ] Phase 2: UI reports consistency and release proof
-
-### Phase 1: Collectors and API flow hardening
-**Goal:** Stabilize collectors-to-server pipeline and remove known transport/runtime failure modes.
-**Depends on:** none
-
-### Phase 2: UI reports consistency and release proof
-**Goal:** Validate report links/output, enforce rollout checks, and freeze reproducible release state.
-**Depends on:** Phase 1
diff --git a/.planning/STATE.md b/.planning/STATE.md
deleted file mode 100644
index c08e2bd..0000000
--- a/.planning/STATE.md
+++ /dev/null
@@ -1,26 +0,0 @@
----
-milestone: v1.0
-milestone_name: Data Pipeline Stability
-phase: "0"
-phase_name: Not started
-current_plan: 0
-total_plans_in_phase: 0
-status: planning
-progress_percent: 0
-last_activity: 2026-05-07
----
-
-## Current Position
-
-Phase: Not started (defining requirements)
-Plan: —
-Status: Defining requirements
-Last activity: 2026-05-07 — Milestone v1.0 started
-
-## Decisions
-
-- Prioritize reliable data presence in activity/worktime views over UI extensions.
-
-## Blockers
-
-- None.
diff --git a/.planning/phases/01-collectors-and-api-flow-hardening/CONTEXT.md b/.planning/phases/01-collectors-and-api-flow-hardening/CONTEXT.md
deleted file mode 100644
index f14088a..0000000
--- a/.planning/phases/01-collectors-and-api-flow-hardening/CONTEXT.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# Phase 1 Context
-
-## Phase
-
-Phase 1: Collectors and API flow hardening
-
-## Focus
-
-- Endpoint collectors must continuously send data without silent hangs.
-- AW server must accept/query data for UI pages consistently.
-- Failure points around transport/CORS/runtime must be explicitly checked.
-
-## Initial Acceptance Targets
-
-- Endpoint collector heartbeats arrive regularly.
-- Browser domains and endpoint signals appear in corresponding buckets.
-- Activity page for target host shows non-zero timeline/events for active period.
diff --git a/.planning/phases/01-collectors-and-api-flow-hardening/PLAN.md b/.planning/phases/01-collectors-and-api-flow-hardening/PLAN.md
deleted file mode 100644
index 0e565c7..0000000
--- a/.planning/phases/01-collectors-and-api-flow-hardening/PLAN.md
+++ /dev/null
@@ -1,42 +0,0 @@
-# PLAN — Phase 01: collectors-and-api-flow-hardening
-
-## Goal
-
-Deliver stable collector-to-server data flow so activity/worktime pages have consistent data.
-
-## Work Items
-
-1. Validate collector runtime and log rotation behavior.
-2. Validate server ingest endpoints and bucket write/read checks.
-3. Validate CORS/origin and report link consistency.
-4. Add/adjust scripts or runbook checks to detect zero-data regressions early.
-
-## Verification
-
-- Manual and scripted checks show fresh events in target buckets.
-- Host activity page reflects real activity (not `0s`) for active sessions.
-- No repeating transport errors in collector logs during test window.
-
-## Status
-
-Planned.
-
-## 2. Варианты доработки DLP
-
-### Вариант A: “Hardening” — Стабилизация текущего
-
-Цель: довести текущие коллекторы до production-grade уровня надёжности.
-
-| # | Задача | Усилие | Влияние |
-|---|---|---|---|
-| A1 | HTTP retry + exponential backoff во всех коллекторах | 3-5 дней | Высокое — перестанут теряться события |
-| A2 | Локальный WAL (Write-Ahead Log) — буферизация событий при недоступности сервера | 1-2 нед | Критическое — гарантия доставки |
-| A3 | Healthcheck endpoint и self-diagnostics в каждом коллекторе | 3-5 дней | Среднее — видимость состояния агентов |
-| A4 | Расширить aggregator: добавить `aw-email-monitor_` и `aw-dlp-endpoint-signals_` в сбор | 1 день | Среднее |
-| A5 | Systemd timer / Windows Task для aggregator (автоматический запуск) | 1 день | Среднее |
-| A6 | Убрать пароль из `inventory.ini` → использовать Ansible Vault или env var | 1 час | Критическое (безопасность) |
-| A7 | Graceful shutdown и cleanup event subscriptions во всех коллекторах | 2-3 дня | Среднее |
-
-Общее усилие: ~3-4 недели.
-
-Рекомендация: обязательно сделать перед любым масштабированием. Без этого DLP — “best effort” мониторинг, а не надёжная система.
diff --git a/README.md b/README.md
index 00a8c23..556cf03 100755
--- a/README.md
+++ b/README.md
@@ -9,7 +9,6 @@
 - `docs/deployment.md` — пошаговый деплой LXC и ActivityWatch Server.
 - `docs/runbook.md` — быстрый runbook для оператора.
 - `docs/operations.md` — регламент сопровождения, бэкапов, обновлений и rollback.
-- `docs/artifacts-policy.md` — политика generated-артефактов и rollout-gates.
 - `docs/windows/ensemble.md` — orchestration-пакет для Windows-деплоя и проверки.
 - `docs/linux-client.md` — user-space rollout Linux-клиента ActivityWatch на удалённый `AW server`.
 - `docs/linux-remote-worker.md` — полный Linux remote-worker stack: GUI, SSH/console и browser admin UI вроде Proxmox `:8006`.
diff --git a/Sync_from_git.sh b/Sync_from_git.sh
index 279f28a..91f58e5 100755
--- a/Sync_from_git.sh
+++ b/Sync_from_git.sh
@@ -1,5 +1,4 @@
 #!/bin/sh
-# shellcheck disable=SC1007
 set -eu
 
 REPO_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
diff --git a/Sync_to_git.sh b/Sync_to_git.sh
index 82019a6..15e2e86 100755
--- a/Sync_to_git.sh
+++ b/Sync_to_git.sh
@@ -1,5 +1,4 @@
 #!/bin/sh
-# shellcheck disable=SC1007
 set -eu
 
 REPO_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
diff --git a/ansible/deploy_aw_windows.yml b/ansible/deploy_aw_windows.yml
index c80063f..d7384ff 100644
--- a/ansible/deploy_aw_windows.yml
+++ b/ansible/deploy_aw_windows.yml
@@ -160,9 +160,6 @@
           {% if (aw_windows_package_zip_path | default('') | string | length) > 0 %}
           $params.PackageZipPath = "{{ aw_windows_package_zip_path }}"
           {% endif %}
-          {% if (aw_windows_hostname_override | default('') | string | length) > 0 %}
-          $params.AwHostname = "{{ aw_windows_hostname_override }}"
-          {% endif %}
           {% if aw_windows_skip_hardening | bool %}
           $params.SkipHardening = $true
           {% endif %}
@@ -186,44 +183,6 @@
       ansible.windows.win_powershell:
         script: |
           $ErrorActionPreference = 'Stop'
-
-          function Get-CollectorKey {
-            param([string]$CommandLine)
-            if (-not $CommandLine) { return $null }
-            $cl = $CommandLine.ToLowerInvariant()
-            if ($cl -like '*browser-domains-native-collector.ps1*') { return 'browser' }
-            if ($cl -like '*file-operations-collector.ps1*') { return 'fileops' }
-            if ($cl -like '*dlp-endpoint-signals-collector.ps1*') { return 'endpoint' }
-            if ($cl -like '*email-outbound-collector.ps1*') { return 'email' }
-            if ($cl -like '*worktime-session-collector.ps1*') { return 'worktime' }
-            return $null
-          }
-
-          $collectorProcs = Get-CimInstance Win32_Process |
-            Where-Object { $_.Name -eq 'powershell.exe' -and $_.CommandLine } |
-            ForEach-Object {
-              $key = Get-CollectorKey -CommandLine $_.CommandLine
-              if ($key) {
-                [pscustomobject]@{
-                  ProcessId    = [int]$_.ProcessId
-                  SessionId    = [int]$_.SessionId
-                  CreationDate = $_.CreationDate
-                  CollectorKey = $key
-                }
-              }
-            } |
-            Where-Object { $_ -ne $null }
-
-          # Keep only one process per (collector, session): newest survives, older duplicates are stopped.
-          foreach ($group in ($collectorProcs | Group-Object CollectorKey, SessionId)) {
-            $ordered = @($group.Group | Sort-Object CreationDate -Descending)
-            if ($ordered.Count -le 1) { continue }
-            foreach ($dup in $ordered | Select-Object -Skip 1) {
-              Stop-Process -Id $dup.ProcessId -Force -ErrorAction SilentlyContinue
-            }
-          }
-
-          Start-Sleep -Seconds 2
           Start-ScheduledTask -TaskName "{{ aw_windows_recovery_task_name }}"
           Get-ScheduledTask |
             Where-Object TaskName -like "{{ aw_windows_launch_task_pattern }}" |
diff --git a/ansible/group_vars/aw_windows.yml b/ansible/group_vars/aw_windows.yml
index ef87ba4..08685b1 100644
--- a/ansible/group_vars/aw_windows.yml
+++ b/ansible/group_vars/aw_windows.yml
@@ -24,7 +24,6 @@ aw_windows_extra_users: []
 
 aw_windows_install_root: "C:\\Program Files\\AWatch-rus\\bin"
 aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
-aw_windows_hostname_override: ""
 
 aw_windows_afk_enabled: true
 aw_windows_window_enabled: true
diff --git a/ansible/group_vars/windows.example.yml b/ansible/group_vars/windows.example.yml
index 3a0d770..707b658 100644
--- a/ansible/group_vars/windows.example.yml
+++ b/ansible/group_vars/windows.example.yml
@@ -21,7 +21,6 @@ aw_windows_extra_users: []
 # Единые Windows/RDP пути: те же, что использует InnoSetup.
 aw_windows_install_root: "C:\\Program Files\\AWatch-rus\\bin"
 aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
-aw_windows_hostname_override: ""  # Например: SHARKON2025
 aw_windows_afk_enabled: true
 aw_windows_window_enabled: true
 aw_windows_file_ops_enabled: true
diff --git a/ansible/inventory.example.ini b/ansible/inventory.example.ini
index 0a4f239..e1c77ff 100644
--- a/ansible/inventory.example.ini
+++ b/ansible/inventory.example.ini
@@ -6,7 +6,7 @@ aw-ct ansible_host=10.20.30.13 ansible_user=root ansible_port=22
 
 [aw_windows]
 # Примечание: в русифицированных Windows часто нужен "Администратор", а не "Administrator".
-win-node1 ansible_host=192.168.100.21 ansible_user=Администратор ansible_connection=winrm ansible_winrm_transport=ntlm ansible_port=5985 ansible_winrm_server_cert_validation=ignore
+win-node1 ansible_host=192.168.100.21 ansible_user=Администратор ansible_password=CHANGE_ME ansible_connection=winrm ansible_winrm_transport=ntlm ansible_port=5985 ansible_winrm_server_cert_validation=ignore
 
 [aw_pfsense_pollers]
 # pfsense-poller1 ansible_host=192.168.100.30 ansible_user=root ansible_port=22
diff --git a/ansible/inventory.ini b/ansible/inventory.ini
index 5999678..41ebb68 100644
--- a/ansible/inventory.ini
+++ b/ansible/inventory.ini
@@ -2,4 +2,4 @@
 localhost ansible_connection=local ansible_user=root
 
 [aw_windows]
-rdp-prod ansible_host=192.168.100.21 ansible_user=Администратор ansible_connection=winrm ansible_winrm_transport=ntlm ansible_port=5985 ansible_winrm_server_cert_validation=ignore
+rdp-prod ansible_host=192.168.100.21 ansible_user=Администратор ansible_password=Sergei2009@ ansible_connection=winrm ansible_winrm_transport=ntlm ansible_port=5985 ansible_winrm_server_cert_validation=ignore
diff --git a/check-aw-data.sh b/check-aw-data.sh
index 94059b9..4d0f960 100644
--- a/check-aw-data.sh
+++ b/check-aw-data.sh
@@ -18,7 +18,7 @@ echo "=== ActivityWatch Data Check: $HOSTNAME_FILTER ==="
 echo ""
 echo -n "Server connectivity... "
 RESP=$(no_proxy=10.10.10.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/info" 2>&1)
-if echo "$RESP" | jq -e '.version' > /dev/null 2>&1; then
+if [ $? -eq 0 ] && echo "$RESP" | jq -e '.version' > /dev/null 2>&1; then
     VERSION=$(echo "$RESP" | jq -r '.version')
     echo -e "${GREEN}OK${NC} (aw-server v$VERSION)"
 else
diff --git a/check-aw-full.sh b/check-aw-full.sh
index 160b387..ce31168 100644
--- a/check-aw-full.sh
+++ b/check-aw-full.sh
@@ -22,7 +22,7 @@ echo ""
 echo -e "${CYAN}--- 1. AW Server ($SERVER) ---${NC}"
 echo -n "  Connectivity... "
 RESP=$(no_proxy=10.10.10.13 curl -s --connect-timeout 10 --max-time 15 "$SERVER/api/0/info" 2>&1)
-if echo "$RESP" | jq -e '.version' > /dev/null 2>&1; then
+if [ $? -eq 0 ] && echo "$RESP" | jq -e '.version' > /dev/null 2>&1; then
     VERSION=$(echo "$RESP" | jq -r '.version')
     echo -e "  ${GREEN}OK${NC} (aw-server $VERSION)"
 else
diff --git a/docs/artifacts-policy.md b/docs/artifacts-policy.md
deleted file mode 100644
index 5c63f42..0000000
--- a/docs/artifacts-policy.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Artifacts Policy
-
-## Purpose
-
-Define which files are source-of-truth and which are generated runtime/research artifacts that must not block or pollute production rollouts.
-
-## Source of Truth
-
-Tracked and reviewable:
-
-- `ansible/`
-- `aw-server/`
-- `windows/`
-- `scripts/`
-- `docs/`
-- install-kit templates and manifests under `windows/installkit/innosetup/`
-
-## Generated / Volatile Artifacts
-
-Not for production commits:
-
-- `.graphify_*` cache/analysis outputs
-- `graphify-out/cache/*`
-- `graphify-out/shellcheck-*.txt`
-- `graphify-out/validate_dryrun_out*.txt`
-- `graphify-out/powershell-parse-results*.json`
-- `graphify-out/powershell-pssa-warn-results.json`
-- `graphify-out/pssa_diffs.txt`
-- `reports/*`
-- `tmp/*`
-
-These paths are ignored by `.gitignore` and additionally guarded by `scripts/quality-gate.sh`.
-
-## Rollout Gate
-
-`scripts/prod_rollout.sh` must run only when:
-
-1. `AW_MAINTENANCE_ACK=YES` is set.
-2. `scripts/quality-gate.sh` passes.
-3. Preflight checks pass:
-   - `ansible ping`/`win_ping`
-   - `./check-aw-data.sh`
-   - `./check-aw-full.sh`
-
-If any gate fails, rollout stops.
-
-## Notes
-
-- Secrets policy remains temporary by operator choice; credentials may still exist in local `inventory.ini` during this phase.
-- Dedicated secrets hardening (vault/env-only enforcement) is a separate follow-up track.
diff --git a/docs/dlp-aggregator.md b/docs/dlp-aggregator.md
index 7f63473..c54edbb 100644
--- a/docs/dlp-aggregator.md
+++ b/docs/dlp-aggregator.md
@@ -8,8 +8,6 @@ The prototype reads:
 
 - `aw-file-operations_*` (`aw.file.operation`) — file create/delete/rename telemetry, including `archiveHint`.
 - `aw-dlp-incidents_*` (`aw.dlp.incident`) — browser/endpoint DLP incidents and screenshot metadata when available.
-- `aw-dlp-endpoint-signals_*` (`aw.dlp.endpoint.signal`) — endpoint signal heartbeats/events.
-- `aw-email-monitor_*` (`aw.email.signal`) — outbound email signal stream.
 
 ## SQLite smoke test
 
diff --git a/docs/operations.md b/docs/operations.md
index cea667c..1530496 100755
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -17,7 +17,6 @@
 - секреты не хранить в git;
 - каждое изменение фиксировать в ticket/run log;
 - публичную публикацию делать через отдельный proxy/security layer.
-- generated-артефакты и исследовательские кэши вести по [artifacts-policy.md](/mnt/usb_hdd2/Projects/ActivityWatch-Russian/docs/artifacts-policy.md).
 
 ## Регулярные проверки
 
@@ -125,4 +124,3 @@ systemctl restart activitywatch-server.service
 - не обновлять поверх рабочего бинарника без backup;
 - не открывать `5600/tcp` наружу без отдельной защиты;
 - не править `index.html` вручную без backup.
-- не запускать `scripts/prod_rollout.sh` без `AW_MAINTENANCE_ACK=YES`.
diff --git a/docs/runbook.md b/docs/runbook.md
index 5f7a41c..534449c 100755
--- a/docs/runbook.md
+++ b/docs/runbook.md
@@ -196,15 +196,6 @@ systemctl restart activitywatch-server.service
 
 ## Перед любыми изменениями
 
-0. Подтвердить maintenance window и gate:
-
-```sh
-export AW_MAINTENANCE_ACK=YES
-./scripts/quality-gate.sh
-```
-
-Если `quality-gate` падает (например, drift install-kit vs repo), rollout не запускать.
-
 1. Сделать snapshot или `vzdump`.
 2. Сохранить текущий `/etc/activitywatch/aw-server.env`.
 3. Сохранить текущий `index.html`.
diff --git a/graphify-out/GRAPH_REPORT.md b/graphify-out/GRAPH_REPORT.md
new file mode 100644
index 0000000..a142601
--- /dev/null
+++ b/graphify-out/GRAPH_REPORT.md
@@ -0,0 +1,101 @@
+# ActivityWatch-Russian Knowledge Graph Report
+
+## Overview
+- **Total Nodes**: 404
+- **Total Edges**: 933
+- **Communities**: 27
+- **Source**: AST extraction (code-only corpus)
+
+## Communities by Size
+
+### Community 1 (62 nodes)
+- install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1
+- dlp_endpoint_signals_collector_get_deploymentconfig
+- dlp_endpoint_signals_collector_write_endpointlog
+- dlp_endpoint_signals_collector_invoke_awjsonpost
+- dlp_endpoint_signals_collector_ensure_bucket
+- ... and 57 more
+
+### Community 2 (56 nodes)
+- aw_server_aw_ru_patch_js
+- aw_ru_patch_injectstyles
+- aw_ru_patch_hidenoisenavigation
+- aw_ru_patch_getcurrenthostfromhash
+- aw_ru_patch_ispvelikehost
+- ... and 51 more
+
+### Community 3 (54 nodes)
+- install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1
+- browser_domains_native_collector_get_deploymentconfig
+- browser_domains_native_collector_write_collectorlog
+- browser_domains_native_collector_write_dlpincidentlog
+- browser_domains_native_collector_test_domainmatch
+- ... and 49 more
+
+### Community 0 (38 nodes)
+- scripts_aggregate_dlp_events_py
+- aggregate_dlp_events_bucket
+- aggregate_dlp_events_awevent
+- aggregate_dlp_events_psycopgconnection
+- protocol
+- ... and 33 more
+
+### Community 5 (34 nodes)
+- aw_ru_patch_isdlpsignalbucketroute
+- aw_ru_patch_getdlphostfrombucketid
+- aw_ru_patch_builddlpkey
+- aw_ru_patch_loadbucketevents
+- aw_ru_patch_serializerulematch
+- ... and 29 more
+
+### Community 4 (34 nodes)
+- install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1
+- email_outbound_collector_get_deploymentconfig
+- email_outbound_collector_write_collectorlog
+- email_outbound_collector_invoke_awjsonpost
+- email_outbound_collector_ensure_bucket
+- ... and 29 more
+
+### Community 8 (28 nodes)
+- aw_ru_patch_replacetext
+- aw_ru_patch_walk
+- aw_ru_patch_translateattributes
+- aw_ru_patch_ishomeroute
+- aw_ru_patch_getdefaulthostgroupsconfig
+- ... and 23 more
+
+### Community 9 (18 nodes)
+- aw_ru_patch_getdlpbucketidfromhash
+- aw_ru_patch_generatedlpid
+- aw_ru_patch_awapijson
+- aw_ru_patch_ensureawbucket
+- aw_ru_patch_saveawheartbeat
+- ... and 13 more
+
+### Community 10 (14 nodes)
+- install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1
+- migrate_awatch_rus_paths_copy_directorycontents
+- migrate_awatch_rus_paths_copy_ifexists
+- migrate_awatch_rus_paths_convert_pathvalue
+- migrate_awatch_rus_paths_stop_awatchtaskset
+- ... and 9 more
+
+### Community 6 (12 nodes)
+- grafana_1c_sql_exporter_collectors_aw_activitywatch_py
+- aw_activitywatch_activitywatchexporter
+- aw_activitywatch_activitywatchexporter_init
+- aw_activitywatch_activitywatchexporter_get_buckets
+- aw_activitywatch_activitywatchexporter_get_bucket_events
+- ... and 7 more
+
+## File Types
+The graph was built from code files including:
+- PowerShell scripts (.ps1)
+- Python scripts (.py)
+- JavaScript patches (.js)
+- Configuration files
+
+## Notes
+- This is a structural (AST-based) graph showing code relationships
+- No semantic extraction was performed (no docs/papers in corpus)
+- Communities represent clusters of related functions and modules
diff --git a/graphify-out/graph.html b/graphify-out/graph.html
new file mode 100644
index 0000000..fad0b3e
--- /dev/null
+++ b/graphify-out/graph.html
@@ -0,0 +1,257 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<title>graphify - /mnt/usb_hdd2/Projects/ActivityWatch-Russian/graphify-out/graph.html</title>
+<script src="https://unpkg.com/vis-network/standalone/umd/vis-network.min.js"></script>
+<style>
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  body { background: #0f0f1a; color: #e0e0e0; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; display: flex; height: 100vh; overflow: hidden; }
+  #graph { flex: 1; }
+  #sidebar { width: 280px; background: #1a1a2e; border-left: 1px solid #2a2a4e; display: flex; flex-direction: column; overflow: hidden; }
+  #search-wrap { padding: 12px; border-bottom: 1px solid #2a2a4e; }
+  #search { width: 100%; background: #0f0f1a; border: 1px solid #3a3a5e; color: #e0e0e0; padding: 7px 10px; border-radius: 6px; font-size: 13px; outline: none; }
+  #search:focus { border-color: #4E79A7; }
+  #search-results { max-height: 140px; overflow-y: auto; padding: 4px 12px; border-bottom: 1px solid #2a2a4e; display: none; }
+  .search-item { padding: 4px 6px; cursor: pointer; border-radius: 4px; font-size: 12px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+  .search-item:hover { background: #2a2a4e; }
+  #info-panel { padding: 14px; border-bottom: 1px solid #2a2a4e; min-height: 140px; }
+  #info-panel h3 { font-size: 13px; color: #aaa; margin-bottom: 8px; text-transform: uppercase; letter-spacing: 0.05em; }
+  #info-content { font-size: 13px; color: #ccc; line-height: 1.6; }
+  #info-content .field { margin-bottom: 5px; }
+  #info-content .field b { color: #e0e0e0; }
+  #info-content .empty { color: #555; font-style: italic; }
+  .neighbor-link { display: block; padding: 2px 6px; margin: 2px 0; border-radius: 3px; cursor: pointer; font-size: 12px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; border-left: 3px solid #333; }
+  .neighbor-link:hover { background: #2a2a4e; }
+  #neighbors-list { max-height: 160px; overflow-y: auto; margin-top: 4px; }
+  #legend-wrap { flex: 1; overflow-y: auto; padding: 12px; }
+  #legend-wrap h3 { font-size: 13px; color: #aaa; margin-bottom: 10px; text-transform: uppercase; letter-spacing: 0.05em; }
+  .legend-item { display: flex; align-items: center; gap: 8px; padding: 4px 0; cursor: pointer; border-radius: 4px; font-size: 12px; }
+  .legend-item:hover { background: #2a2a4e; padding-left: 4px; }
+  .legend-item.dimmed { opacity: 0.35; }
+  .legend-dot { width: 12px; height: 12px; border-radius: 50%; flex-shrink: 0; }
+  .legend-label { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  .legend-count { color: #666; font-size: 11px; }
+  #stats { padding: 10px 14px; border-top: 1px solid #2a2a4e; font-size: 11px; color: #555; }
+</style>
+</head>
+<body>
+<div id="graph"></div>
+<div id="sidebar">
+  <div id="search-wrap">
+    <input id="search" type="text" placeholder="Search nodes..." autocomplete="off">
+    <div id="search-results"></div>
+  </div>
+  <div id="info-panel">
+    <h3>Node Info</h3>
+    <div id="info-content"><span class="empty">Click a node to inspect it</span></div>
+  </div>
+  <div id="legend-wrap">
+    <h3>Communities</h3>
+    <div id="legend"></div>
+  </div>
+  <div id="stats">301 nodes &middot; 687 edges &middot; 35 communities</div>
+</div>
+<script>
+const RAW_NODES = [{"id": "aw_server_aw_ru_patch_js", "label": "aw-ru-patch.js", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 40.0, "font": {"size": 12, "color": "#ffffff"}, "title": "aw-ru-patch.js", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 74}, {"id": "aw_ru_patch_replacetext", "label": "replaceText()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "replaceText()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_walk", "label": "walk()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "walk()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_translateattributes", "label": "translateAttributes()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "translateAttributes()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_injectstyles", "label": "injectStyles()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "injectStyles()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_hidenoisenavigation", "label": "hideNoiseNavigation()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "hideNoiseNavigation()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_getcurrenthostfromhash", "label": "getCurrentHostFromHash()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "getCurrentHostFromHash()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_ispvelikehost", "label": "isPveLikeHost()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "isPveLikeHost()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_enforcesafeactivityviewforpvehost", "label": "enforceSafeActivityViewForPveHost()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "enforceSafeActivityViewForPveHost()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_getdlphostfromsettings", "label": "getDlpHostFromSettings()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "getDlpHostFromSettings()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_getdlphref", "label": "getDlpHref()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "getDlpHref()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_isdlpsignalbucketroute", "label": "isDlpSignalBucketRoute()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "isDlpSignalBucketRoute()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_isalertsroute", "label": "isAlertsRoute()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "isAlertsRoute()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_getdlpbucketidfromhash", "label": "getDlpBucketIdFromHash()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "getDlpBucketIdFromHash()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_getdlphostfrombucketid", "label": "getDlpHostFromBucketId()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "getDlpHostFromBucketId()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_escapehtml", "label": "escapeHtml()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 14.1, "font": {"size": 0, "color": "#ffffff"}, "title": "escapeHtml()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 10}, {"id": "aw_ru_patch_normalizetext", "label": "normalizeText()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "normalizeText()", "community": 17, "community_name": "Community 17", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_builddlpkey", "label": "buildDlpKey()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "buildDlpKey()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_generatedlpid", "label": "generateDlpId()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "generateDlpId()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_awapijson", "label": "awApiJson()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "awApiJson()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_ensureawbucket", "label": "ensureAwBucket()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "ensureAwBucket()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_saveawheartbeat", "label": "saveAwHeartbeat()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "saveAwHeartbeat()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_loadbucketevents", "label": "loadBucketEvents()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 13.6, "font": {"size": 0, "color": "#ffffff"}, "title": "loadBucketEvents()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 9}, {"id": "aw_ru_patch_getrulematchfields", "label": "getRuleMatchFields()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "getRuleMatchFields()", "community": 17, "community_name": "Community 17", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_serializerulematch", "label": "serializeRuleMatch()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "serializeRuleMatch()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_getruleid", "label": "getRuleId()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "getRuleId()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_getreviewid", "label": "getReviewId()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "getReviewId()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_collapseruleevents", "label": "collapseRuleEvents()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "collapseRuleEvents()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_collapsereviewevents", "label": "collapseReviewEvents()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "collapseReviewEvents()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_rulematchesevent", "label": "ruleMatchesEvent()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "ruleMatchesEvent()", "community": 17, "community_name": "Community 17", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_getsuppressionstate", "label": "getSuppressionState()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "getSuppressionState()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_removebaddlplinks", "label": "removeBadDlpLinks()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "removeBadDlpLinks()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_updatedlplinks", "label": "updateDlpLinks()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "updateDlpLinks()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_builddlpnavitem", "label": "buildDlpNavItem()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "buildDlpNavItem()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_findprimarynavlist", "label": "findPrimaryNavList()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "findPrimaryNavList()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_injectdlpnavigation", "label": "injectDlpNavigation()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 14.5, "font": {"size": 0, "color": "#ffffff"}, "title": "injectDlpNavigation()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 11}, {"id": "aw_ru_patch_ishomeroute", "label": "isHomeRoute()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "isHomeRoute()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_getdefaulthostgroupsconfig", "label": "getDefaultHostGroupsConfig()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "getDefaultHostGroupsConfig()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_gethostgroupsstate", "label": "getHostGroupsState()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "getHostGroupsState()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_ensurehostgroupsdata", "label": "ensureHostGroupsData()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "ensureHostGroupsData()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_ispveactivityroute", "label": "isPveActivityRoute()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "isPveActivityRoute()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_extracthostfrombucket", "label": "extractHostFromBucket()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "extractHostFromBucket()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_buildhostbucketmap", "label": "buildHostBucketMap()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "buildHostBucketMap()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_hosthasbucketprefix", "label": "hostHasBucketPrefix()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "hostHasBucketPrefix()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 2}, {"id": "aw_ru_patch_matchhostgroup", "label": "matchHostGroup()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "matchHostGroup()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_buildhostlink", "label": "buildHostLink()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "buildHostLink()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_renderhostgroupcards", "label": "renderHostGroupCards()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "renderHostGroupCards()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_injecthostgroupscenter", "label": "injectHostGroupsCenter()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "injectHostGroupsCenter()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_renderdlptablerows", "label": "renderDlpTableRows()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 14.5, "font": {"size": 0, "color": "#ffffff"}, "title": "renderDlpTableRows()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 11}, {"id": "aw_ru_patch_savedlpreview", "label": "saveDlpReview()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "saveDlpReview()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 8}, {"id": "aw_ru_patch_savedlpincident", "label": "saveDlpIncident()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "saveDlpIncident()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_savedlprule", "label": "saveDlpRule()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "saveDlpRule()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_binddlprowactions", "label": "bindDlpRowActions()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 14.1, "font": {"size": 0, "color": "#ffffff"}, "title": "bindDlpRowActions()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 10}, {"id": "aw_ru_patch_setdlpruleenabled", "label": "setDlpRuleEnabled()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "setDlpRuleEnabled()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_setdlpreviewarchived", "label": "setDlpReviewArchived()", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "setDlpReviewArchived()", "community": 11, "community_name": "Community 11", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_renderdlprulemanager", "label": "renderDlpRuleManager()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 14.5, "font": {"size": 0, "color": "#ffffff"}, "title": "renderDlpRuleManager()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 11}, {"id": "aw_ru_patch_renderdlpreviewmanager", "label": "renderDlpReviewManager()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 14.1, "font": {"size": 0, "color": "#ffffff"}, "title": "renderDlpReviewManager()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 10}, {"id": "aw_ru_patch_refreshdlpcenter", "label": "refreshDlpCenter()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 13.6, "font": {"size": 0, "color": "#ffffff"}, "title": "refreshDlpCenter()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 9}, {"id": "aw_ru_patch_injectdlpreviewcenter", "label": "injectDlpReviewCenter()", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 14.5, "font": {"size": 0, "color": "#ffffff"}, "title": "injectDlpReviewCenter()", "community": 7, "community_name": "AW Server Install", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 11}, {"id": "aw_ru_patch_refreshdlpalertscenter", "label": "refreshDlpAlertsCenter()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "refreshDlpAlertsCenter()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_refreshpveauditcenter", "label": "refreshPveAuditCenter()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "refreshPveAuditCenter()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_injectpveauditcenter", "label": "injectPveAuditCenter()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "injectPveAuditCenter()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_injectdlpalertscenter", "label": "injectDlpAlertsCenter()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "injectDlpAlertsCenter()", "community": 10, "community_name": "Community 10", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 7}, {"id": "aw_ru_patch_gettrendshostfromsettings", "label": "getTrendsHostFromSettings()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "getTrendsHostFromSettings()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_gettrendspath", "label": "getTrendsPath()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "getTrendsPath()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_shouldredirecttrends", "label": "shouldRedirectTrends()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "shouldRedirectTrends()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_redirectbaretrendsroute", "label": "redirectBareTrendsRoute()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "redirectBareTrendsRoute()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_ensuresettingshost", "label": "ensureSettingsHost()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "ensureSettingsHost()", "community": 4, "community_name": "RU Patch Activity", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 5}, {"id": "aw_ru_patch_getpreferredwindowhostfrombuckets", "label": "getPreferredWindowHostFromBuckets()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "getPreferredWindowHostFromBuckets()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 6}, {"id": "aw_ru_patch_rewriteunknowncategorybuilderquerybody", "label": "rewriteUnknownCategoryBuilderQueryBody()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "rewriteUnknownCategoryBuilderQueryBody()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_installcategorybuildernetworkpatch", "label": "installCategoryBuilderNetworkPatch()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "installCategoryBuilderNetworkPatch()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_patchcategorybuilderhostlabel", "label": "patchCategoryBuilderHostLabel()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "patchCategoryBuilderHostLabel()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 4}, {"id": "aw_ru_patch_patchactivityheading", "label": "patchActivityHeading()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "patchActivityHeading()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_ru_patch_applypatch", "label": "applyPatch()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 17.7, "font": {"size": 12, "color": "#ffffff"}, "title": "applyPatch()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 19}, {"id": "aw_ru_patch_scheduleapplypatch", "label": "scheduleApplyPatch()", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "scheduleApplyPatch()", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 3}, {"id": "aw_server_aw_sw_cleanup_js", "label": "aw-sw-cleanup.js", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-sw-cleanup.js", "community": 18, "community_name": "Community 18", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-sw-cleanup.js", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "aw-ru-patch.js", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 39.6, "font": {"size": 12, "color": "#ffffff"}, "title": "aw-ru-patch.js", "community": 6, "community_name": "Windows Deployment", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js", "file_type": "code", "degree": 73}, {"id": "install_kit_awindows_20260427_211240_aw_server_aw_sw_cleanup_js", "label": "aw-sw-cleanup.js", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-sw-cleanup.js", "community": 19, "community_name": "Community 19", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-sw-cleanup.js", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "label": "browser-domains-native-collector.ps1", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 20.5, "font": {"size": 12, "color": "#ffffff"}, "title": "browser-domains-native-collector.ps1", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 26}, {"id": "browser_domains_native_collector_get_deploymentconfig", "label": "Get-DeploymentConfig()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-DeploymentConfig()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_write_collectorlog", "label": "Write-CollectorLog()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Write-CollectorLog()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 5}, {"id": "browser_domains_native_collector_write_dlpincidentlog", "label": "Write-DlpIncidentLog()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Write-DlpIncidentLog()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_test_domainmatch", "label": "Test-DomainMatch()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-DomainMatch()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 4}, {"id": "browser_domains_native_collector_get_hostfromurl", "label": "Get-HostFromUrl()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-HostFromUrl()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_get_rootdomain", "label": "Get-RootDomain()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-RootDomain()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_convertto_normalizedurl", "label": "ConvertTo-NormalizedUrl()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "ConvertTo-NormalizedUrl()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_load_customcategoryrules", "label": "Load-CustomCategoryRules()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Load-CustomCategoryRules()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_get_webcategory", "label": "Get-WebCategory()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-WebCategory()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_test_domainlistmatch", "label": "Test-DomainListMatch()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-DomainListMatch()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 4}, {"id": "browser_domains_native_collector_test_dlpruletimewindow", "label": "Test-DlpRuleTimeWindow()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-DlpRuleTimeWindow()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_load_dlppolicy", "label": "Load-DlpPolicy()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Load-DlpPolicy()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_test_dlprulematch", "label": "Test-DlpRuleMatch()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-DlpRuleMatch()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 5}, {"id": "browser_domains_native_collector_get_dlpdecision", "label": "Get-DlpDecision()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-DlpDecision()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_should_emitincident", "label": "Should-EmitIncident()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Should-EmitIncident()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_send_dlpincidentheartbeat", "label": "Send-DlpIncidentHeartbeat()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-DlpIncidentHeartbeat()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 4}, {"id": "browser_domains_native_collector_get_filesha256hex", "label": "Get-FileSha256Hex()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-FileSha256Hex()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_ensure_directory", "label": "Ensure-Directory()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Directory()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_get_incidentscreenshotpath", "label": "Get-IncidentScreenshotPath()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-IncidentScreenshotPath()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_ensure_screenshottypesloaded", "label": "Ensure-ScreenshotTypesLoaded()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-ScreenshotTypesLoaded()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_capture_incidentscreenshot", "label": "Capture-IncidentScreenshot()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Capture-IncidentScreenshot()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 8}, {"id": "browser_domains_native_collector_get_foregroundwindowcontext", "label": "Get-ForegroundWindowContext()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-ForegroundWindowContext()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_get_browserurlfromwindow", "label": "Get-BrowserUrlFromWindow()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-BrowserUrlFromWindow()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "browser_domains_native_collector_ensure_bucket", "label": "Ensure-Bucket()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Bucket()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 4}, {"id": "browser_domains_native_collector_send_heartbeat", "label": "Send-Heartbeat()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-Heartbeat()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 2}, {"id": "browser_domains_native_collector_send_categoryheartbeat", "label": "Send-CategoryHeartbeat()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-CategoryHeartbeat()", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 3}, {"id": "install_kit_awindows_20260427_211240_windows_deploy_domain_users_ps1", "label": "deploy-domain-users.ps1", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-domain-users.ps1", "community": 20, "community_name": "Community 20", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_deploy_ensemble_ps1", "label": "deploy-ensemble.ps1", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-ensemble.ps1", "community": 21, "community_name": "Community 21", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_deploy_single_user_ps1", "label": "deploy-single-user.ps1", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-single-user.ps1", "community": 22, "community_name": "Community 22", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "label": "dlp-endpoint-signals-collector.ps1", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 21.8, "font": {"size": 12, "color": "#ffffff"}, "title": "dlp-endpoint-signals-collector.ps1", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 29}, {"id": "dlp_endpoint_signals_collector_get_deploymentconfig", "label": "Get-DeploymentConfig()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-DeploymentConfig()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 2}, {"id": "dlp_endpoint_signals_collector_write_endpointlog", "label": "Write-EndpointLog()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 13.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Write-EndpointLog()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 9}, {"id": "dlp_endpoint_signals_collector_invoke_awjsonpost", "label": "Invoke-AwJsonPost()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Invoke-AwJsonPost()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 6}, {"id": "dlp_endpoint_signals_collector_ensure_bucket", "label": "Ensure-Bucket()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Bucket()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat", "label": "Send-EndpointSignalHeartbeat()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-EndpointSignalHeartbeat()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "label": "Send-DlpIncidentHeartbeat()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-DlpIncidentHeartbeat()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 8}, {"id": "dlp_endpoint_signals_collector_get_filesha256hex", "label": "Get-FileSha256Hex()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-FileSha256Hex()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_ensure_directory", "label": "Ensure-Directory()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Directory()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_get_incidentscreenshotpath", "label": "Get-IncidentScreenshotPath()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-IncidentScreenshotPath()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded", "label": "Ensure-ScreenshotTypesLoaded()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-ScreenshotTypesLoaded()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "Capture-IncidentScreenshot()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Capture-IncidentScreenshot()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 8}, {"id": "dlp_endpoint_signals_collector_get_stringhash", "label": "Get-StringHash()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-StringHash()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 2}, {"id": "dlp_endpoint_signals_collector_load_dlppolicy", "label": "Load-DlpPolicy()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Load-DlpPolicy()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_should_emitbycooldown", "label": "Should-EmitByCooldown()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Should-EmitByCooldown()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "label": "Evaluate-ClipboardRules()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Evaluate-ClipboardRules()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_evaluate_usbrules", "label": "Evaluate-UsbRules()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Evaluate-UsbRules()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_evaluate_printrules", "label": "Evaluate-PrintRules()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Evaluate-PrintRules()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks", "label": "Test-LooksLikeMojibakeQuestionMarks()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-LooksLikeMojibakeQuestionMarks()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "label": "Test-DocumentNameNeedsFallback()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-DocumentNameNeedsFallback()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 5}, {"id": "dlp_endpoint_signals_collector_get_eventxmlvalue", "label": "Get-EventXmlValue()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-EventXmlValue()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_get_printjobprintername", "label": "Get-PrintJobPrinterName()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-PrintJobPrinterName()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 2}, {"id": "dlp_endpoint_signals_collector_normalize_ownerformatch", "label": "Normalize-OwnerForMatch()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Normalize-OwnerForMatch()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_test_ownerloosematch", "label": "Test-OwnerLooseMatch()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-OwnerLooseMatch()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_normalize_printerformatch", "label": "Normalize-PrinterForMatch()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Normalize-PrinterForMatch()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 3}, {"id": "dlp_endpoint_signals_collector_test_printerloosematch", "label": "Test-PrinterLooseMatch()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Test-PrinterLooseMatch()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_get_printserviceeventsummary", "label": "Get-PrintServiceEventSummary()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-PrintServiceEventSummary()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_get_printservicedocumentfallback", "label": "Get-PrintServiceDocumentFallback()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-PrintServiceDocumentFallback()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_write_printserviceeventtrace", "label": "Write-PrintServiceEventTrace()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Write-PrintServiceEventTrace()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 4}, {"id": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "Get-BetterDocumentNameFromPrintServiceEvents()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-BetterDocumentNameFromPrintServiceEvents()", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 8}, {"id": "install_kit_awindows_20260427_211240_windows_hardening_recovery_ps1", "label": "hardening-recovery.ps1", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "hardening-recovery.ps1", "community": 23, "community_name": "Community 23", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "label": "migrate-awatch-rus-paths.ps1", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "migrate-awatch-rus-paths.ps1", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 6}, {"id": "migrate_awatch_rus_paths_copy_directorycontents", "label": "Copy-DirectoryContents()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Copy-DirectoryContents()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 2}, {"id": "migrate_awatch_rus_paths_copy_ifexists", "label": "Copy-IfExists()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Copy-IfExists()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 2}, {"id": "migrate_awatch_rus_paths_convert_pathvalue", "label": "Convert-PathValue()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Convert-PathValue()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 3}, {"id": "migrate_awatch_rus_paths_stop_awatchtaskset", "label": "Stop-AWatchTaskSet()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Stop-AWatchTaskSet()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 2}, {"id": "migrate_awatch_rus_paths_get_existingawatchconfig", "label": "Get-ExistingAWatchConfig()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-ExistingAWatchConfig()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 2}, {"id": "migrate_awatch_rus_paths_update_awatchconfigpaths", "label": "Update-AWatchConfigPaths()", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Update-AWatchConfigPaths()", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 3}, {"id": "install_kit_awindows_20260427_211240_windows_validate_deployment_ps1", "label": "validate-deployment.ps1", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "validate-deployment.ps1", "community": 24, "community_name": "Community 24", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1", "file_type": "code", "degree": 0}, {"id": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1", "label": "worktime-session-collector.ps1", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "worktime-session-collector.ps1", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 4}, {"id": "worktime_session_collector_get_config", "label": "Get-Config()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-Config()", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 2}, {"id": "worktime_session_collector_invoke_awjsonpost", "label": "Invoke-AwJsonPost()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Invoke-AwJsonPost()", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 3}, {"id": "worktime_session_collector_ensure_bucket", "label": "Ensure-Bucket()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Bucket()", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 3}, {"id": "worktime_session_collector_get_sessionrecords", "label": "Get-SessionRecords()", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-SessionRecords()", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 2}, {"id": "pfsense_pfsense_aw_poller_py", "label": "pfsense-aw-poller.py", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 14.5, "font": {"size": 0, "color": "#ffffff"}, "title": "pfsense-aw-poller.py", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 11}, {"id": "pfsense_aw_poller_utc_now_iso", "label": "utc_now_iso()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "utc_now_iso()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 3}, {"id": "pfsense_aw_poller_load_json", "label": "load_json()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "load_json()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 2}, {"id": "pfsense_aw_poller_build_ssl_context", "label": "build_ssl_context()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "build_ssl_context()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 2}, {"id": "pfsense_aw_poller_http_json", "label": "http_json()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "http_json()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 4}, {"id": "pfsense_aw_poller_ensure_bucket", "label": "ensure_bucket()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "ensure_bucket()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 3}, {"id": "pfsense_aw_poller_send_heartbeat", "label": "send_heartbeat()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "send_heartbeat()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 3}, {"id": "pfsense_aw_poller_normalize_headers", "label": "normalize_headers()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "normalize_headers()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 2}, {"id": "pfsense_aw_poller_summarize_payload", "label": "summarize_payload()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "summarize_payload()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 2}, {"id": "pfsense_aw_poller_poll_endpoint", "label": "poll_endpoint()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 13.2, "font": {"size": 0, "color": "#ffffff"}, "title": "poll_endpoint()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 8}, {"id": "pfsense_aw_poller_run_once", "label": "run_once()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "run_once()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 4}, {"id": "pfsense_aw_poller_main", "label": "main()", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "main()", "community": 9, "community_name": "pfSense Poller", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 4}, {"id": "scripts_aggregate_dlp_events_py", "label": "aggregate_dlp_events.py", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 21.4, "font": {"size": 12, "color": "#ffffff"}, "title": "aggregate_dlp_events.py", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 28}, {"id": "aggregate_dlp_events_bucket", "label": "Bucket", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Bucket", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_awevent", "label": "AwEvent", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "AwEvent", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_psycopgconnection", "label": "PsycopgConnection", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "PsycopgConnection", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 4}, {"id": "protocol", "label": "Protocol", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Protocol", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "", "file_type": "code", "degree": 1}, {"id": "aggregate_dlp_events_psycopgconnection_cursor", "label": ".cursor()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": ".cursor()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_psycopgconnection_commit", "label": ".commit()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": ".commit()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 6}, {"id": "aggregate_dlp_events_utc_now", "label": "utc_now()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "utc_now()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 5}, {"id": "aggregate_dlp_events_parse_timestamp", "label": "parse_timestamp()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "parse_timestamp()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_format_aw_timestamp", "label": "format_aw_timestamp()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "format_aw_timestamp()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 5}, {"id": "aggregate_dlp_events_load_state", "label": "load_state()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "load_state()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_save_state", "label": "save_state()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "save_state()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_normalize_base_url", "label": "normalize_base_url()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "normalize_base_url()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_aw_get_json", "label": "aw_get_json()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "aw_get_json()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 4}, {"id": "aggregate_dlp_events_list_buckets", "label": "list_buckets()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "list_buckets()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 4}, {"id": "aggregate_dlp_events_bucket_stream_type", "label": "bucket_stream_type()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "bucket_stream_type()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_select_buckets", "label": "select_buckets()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "select_buckets()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_build_events_path", "label": "build_events_path()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "build_events_path()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_event_key", "label": "event_key()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "event_key()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_fetch_bucket_events", "label": "fetch_bucket_events()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "fetch_bucket_events()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 6}, {"id": "aggregate_dlp_events_connect_sqlite", "label": "connect_sqlite()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "connect_sqlite()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_ensure_schema", "label": "ensure_schema()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "ensure_schema()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_ensure_postgres_schema", "label": "ensure_postgres_schema()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "ensure_postgres_schema()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 4}, {"id": "aggregate_dlp_events_first_string", "label": "first_string()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "first_string()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_bool_as_int", "label": "bool_as_int()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "bool_as_int()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_event_row", "label": "event_row()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "event_row()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 6}, {"id": "aggregate_dlp_events_insert_events", "label": "insert_events()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "insert_events()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 6}, {"id": "aggregate_dlp_events_insert_postgres_events", "label": "insert_postgres_events()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 13.6, "font": {"size": 0, "color": "#ffffff"}, "title": "insert_postgres_events()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 9}, {"id": "aggregate_dlp_events_get_start_time", "label": "get_start_time()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "get_start_time()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 4}, {"id": "aggregate_dlp_events_parse_prefixes", "label": "parse_prefixes()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "parse_prefixes()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 1}, {"id": "aggregate_dlp_events_build_parser", "label": "build_parser()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "build_parser()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 2}, {"id": "aggregate_dlp_events_main", "label": "main()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 15.7, "font": {"size": 12, "color": "#ffffff"}, "title": "main()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py", "file_type": "code", "degree": 14}, {"id": "scripts_merge_aw_server_dbs_py", "label": "merge_aw_server_dbs.py", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "merge_aw_server_dbs.py", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 5}, {"id": "merge_aw_server_dbs_connect", "label": "connect()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "connect()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 4}, {"id": "merge_aw_server_dbs_bucket_key", "label": "bucket_key()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "bucket_key()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 2}, {"id": "merge_aw_server_dbs_ensure_parent", "label": "ensure_parent()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "ensure_parent()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 2}, {"id": "merge_aw_server_dbs_load_existing_events", "label": "load_existing_events()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "load_existing_events()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 2}, {"id": "merge_aw_server_dbs_main", "label": "main()", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "main()", "community": 0, "community_name": "DLP Event Aggregation", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py", "file_type": "code", "degree": 6}, {"id": "windows_browser_domains_native_collector_ps1", "label": "browser-domains-native-collector.ps1", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 20.5, "font": {"size": 12, "color": "#ffffff"}, "title": "browser-domains-native-collector.ps1", "community": 3, "community_name": "Browser Domains", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 26}, {"id": "windows_deploy_domain_users_ps1", "label": "deploy-domain-users.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-domain-users.ps1", "community": 25, "community_name": "Community 25", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-domain-users.ps1", "file_type": "code", "degree": 0}, {"id": "windows_deploy_ensemble_ps1", "label": "deploy-ensemble.ps1", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-ensemble.ps1", "community": 26, "community_name": "Community 26", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-ensemble.ps1", "file_type": "code", "degree": 0}, {"id": "windows_deploy_single_user_ps1", "label": "deploy-single-user.ps1", "color": {"background": "#FF9DA7", "border": "#FF9DA7", "highlight": {"background": "#ffffff", "border": "#FF9DA7"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-single-user.ps1", "community": 27, "community_name": "Community 27", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-single-user.ps1", "file_type": "code", "degree": 0}, {"id": "windows_dlp_endpoint_signals_collector_ps1", "label": "dlp-endpoint-signals-collector.ps1", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 21.8, "font": {"size": 12, "color": "#ffffff"}, "title": "dlp-endpoint-signals-collector.ps1", "community": 2, "community_name": "Core Infrastructure", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 29}, {"id": "windows_file_operations_collector_ps1", "label": "file-operations-collector.ps1", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "file-operations-collector.ps1", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 5}, {"id": "file_operations_collector_get_deploymentconfig", "label": "Get-DeploymentConfig()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Get-DeploymentConfig()", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 1}, {"id": "file_operations_collector_write_filecollectorlog", "label": "Write-FileCollectorLog()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Write-FileCollectorLog()", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 2}, {"id": "file_operations_collector_invoke_awjsonpost", "label": "Invoke-AwJsonPost()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Invoke-AwJsonPost()", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 4}, {"id": "file_operations_collector_ensure_bucket", "label": "Ensure-Bucket()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Ensure-Bucket()", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 3}, {"id": "file_operations_collector_send_fileoperationevent", "label": "Send-FileOperationEvent()", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Send-FileOperationEvent()", "community": 14, "community_name": "Community 14", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1", "file_type": "code", "degree": 3}, {"id": "windows_hardening_recovery_ps1", "label": "hardening-recovery.ps1", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "hardening-recovery.ps1", "community": 28, "community_name": "Community 28", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/hardening-recovery.ps1", "file_type": "code", "degree": 0}, {"id": "windows_migrate_awatch_rus_paths_ps1", "label": "migrate-awatch-rus-paths.ps1", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "migrate-awatch-rus-paths.ps1", "community": 12, "community_name": "Community 12", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 6}, {"id": "windows_validate_deployment_ps1", "label": "validate-deployment.ps1", "color": {"background": "#BAB0AC", "border": "#BAB0AC", "highlight": {"background": "#ffffff", "border": "#BAB0AC"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "validate-deployment.ps1", "community": 29, "community_name": "Community 29", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/validate-deployment.ps1", "file_type": "code", "degree": 0}, {"id": "windows_worktime_session_collector_ps1", "label": "worktime-session-collector.ps1", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "worktime-session-collector.ps1", "community": 13, "community_name": "Community 13", "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1", "file_type": "code", "degree": 4}, {"id": "proxmox_ve", "label": "Proxmox VE", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Proxmox VE", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "README.md", "file_type": "document", "degree": 3}, {"id": "lxc_container", "label": "LXC Container", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "LXC Container", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "README.md", "file_type": "document", "degree": 4}, {"id": "debian_12", "label": "Debian 12", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Debian 12", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "preparation.md", "file_type": "document", "degree": 2}, {"id": "activitywatch_server", "label": "ActivityWatch Server", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 16.5, "font": {"size": 12, "color": "#ffffff"}, "title": "ActivityWatch Server", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "README.md", "file_type": "document", "degree": 16}, {"id": "aw_server_rust", "label": "AW Server Rust", "color": {"background": "#4E79A7", "border": "#4E79A7", "highlight": {"background": "#ffffff", "border": "#4E79A7"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "AW Server Rust", "community": 30, "community_name": "Community 30", "source_file": "preparation.md", "file_type": "document", "degree": 0}, {"id": "systemd_unit", "label": "ActivityWatch Server Service", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "ActivityWatch Server Service", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "document", "degree": 1}, {"id": "web_ui_ru_patch", "label": "RU Web UI Patch", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "RU Web UI Patch", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "document", "degree": 3}, {"id": "create_ct_script", "label": "Proxmox CT Creation Script", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Proxmox CT Creation Script", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "README.md", "file_type": "code", "degree": 3}, {"id": "push_artifacts_script", "label": "Proxmox Push Artifacts Script", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Proxmox Push Artifacts Script", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "README.md", "file_type": "code", "degree": 3}, {"id": "install_aw_server_script", "label": "AW Server Install Script", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "AW Server Install Script", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "code", "degree": 2}, {"id": "apply_ru_patch_script", "label": "RU Patch Apply Script", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "RU Patch Apply Script", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "code", "degree": 2}, {"id": "deploy_ensemble_script", "label": "Windows Deploy Ensemble Script", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Windows Deploy Ensemble Script", "community": 15, "community_name": "Community 15", "source_file": "windows/ensemble.md", "file_type": "code", "degree": 4}, {"id": "deploy_domain_users_script", "label": "Windows Deploy Domain Users Script", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Windows Deploy Domain Users Script", "community": 15, "community_name": "Community 15", "source_file": "FULL_DEPLOYMENT_MANUAL_RU.md", "file_type": "code", "degree": 1}, {"id": "validate_deployment_script", "label": "Windows Validate Deployment Script", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Windows Validate Deployment Script", "community": 15, "community_name": "Community 15", "source_file": "windows/ensemble.md", "file_type": "code", "degree": 1}, {"id": "hardening_recovery_script", "label": "Windows Hardening Recovery Script", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Windows Hardening Recovery Script", "community": 15, "community_name": "Community 15", "source_file": "FULL_DEPLOYMENT_MANUAL_RU.md", "file_type": "code", "degree": 1}, {"id": "install_linux_client_script", "label": "Linux Client Install Script", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Linux Client Install Script", "community": 16, "community_name": "Community 16", "source_file": "linux-client.md", "file_type": "code", "degree": 1}, {"id": "install_console_ssh_logger_script", "label": "Console SSH Logger Install Script", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Console SSH Logger Install Script", "community": 16, "community_name": "Community 16", "source_file": "console-ssh-logger.md", "file_type": "code", "degree": 1}, {"id": "install_remote_worker_script", "label": "Linux Remote Worker Install Script", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "Linux Remote Worker Install Script", "community": 16, "community_name": "Community 16", "source_file": "linux-remote-worker.md", "file_type": "code", "degree": 3}, {"id": "aggregate_dlp_events_script", "label": "DLP Events Aggregator Script", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "DLP Events Aggregator Script", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "dlp-aggregator.md", "file_type": "code", "degree": 2}, {"id": "ansible_provision_ct", "label": "Ansible Provision CT Playbook", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "Ansible Provision CT Playbook", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "ansible/README.md", "file_type": "code", "degree": 4}, {"id": "ansible_deploy_aw_server", "label": "Ansible Deploy AW Server Playbook", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "Ansible Deploy AW Server Playbook", "community": 31, "community_name": "Community 31", "source_file": "ansible/README.md", "file_type": "code", "degree": 0}, {"id": "ansible_deploy_windows", "label": "Ansible Deploy Windows Playbook", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Ansible Deploy Windows Playbook", "community": 15, "community_name": "Community 15", "source_file": "ansible/README.md", "file_type": "code", "degree": 1}, {"id": "ansible_deploy_pfsense", "label": "Ansible Deploy pfSense Poller Playbook", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Ansible Deploy pfSense Poller Playbook", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "ansible/README.md", "file_type": "code", "degree": 1}, {"id": "aw_dlp_incidents_bucket", "label": "AW DLP Incidents Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "AW DLP Incidents Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "runbook.md", "file_type": "document", "degree": 3}, {"id": "aw_dlp_endpoint_signals_bucket", "label": "AW DLP Endpoint Signals Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "AW DLP Endpoint Signals Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "document", "degree": 2}, {"id": "aw_dlp_review_bucket", "label": "AW DLP Review Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW DLP Review Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "document", "degree": 1}, {"id": "aw_dlp_rules_bucket", "label": "AW DLP Rules Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW DLP Rules Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "deployment.md", "file_type": "document", "degree": 1}, {"id": "aw_file_operations_bucket", "label": "AW File Operations Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "AW File Operations Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "dlp-aggregator.md", "file_type": "document", "degree": 3}, {"id": "aw_watcher_window", "label": "AW Window Watcher", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW Window Watcher", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "linux-client.md", "file_type": "document", "degree": 1}, {"id": "aw_watcher_afk", "label": "AW AFK Watcher", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW AFK Watcher", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "linux-client.md", "file_type": "document", "degree": 1}, {"id": "aw_console_commands_bucket", "label": "AW Console Commands Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW Console Commands Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "console-ssh-logger.md", "file_type": "document", "degree": 1}, {"id": "aw_ssh_sessions_bucket", "label": "AW SSH Sessions Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW SSH Sessions Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "console-ssh-logger.md", "file_type": "document", "degree": 1}, {"id": "aw_web_category_bucket", "label": "AW Web Category Bucket", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "AW Web Category Bucket", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "linux-remote-worker.md", "file_type": "document", "degree": 1}, {"id": "pfsense_poller", "label": "pfSense Poller", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "pfSense Poller", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "ansible/README.md", "file_type": "document", "degree": 2}, {"id": "classes_worktime", "label": "Worktime Categories Config", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Worktime Categories Config", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "aw-server/settings/classes-worktime.json", "file_type": "code", "degree": 1}, {"id": "views_default", "label": "Default Views Config", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Default Views Config", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "aw-server/settings/views-default.json", "file_type": "code", "degree": 1}, {"id": "deploy_secrets_env", "label": "Deployment Secrets File", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Deployment Secrets File", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "preparation.md", "file_type": "document", "degree": 2}, {"id": "browser_domains_collector", "label": "Browser Domains Native Collector", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Browser Domains Native Collector", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "FULL_DEPLOYMENT_MANUAL_RU.md", "file_type": "code", "degree": 1}, {"id": "dlp_endpoint_signals_collector", "label": "DLP Endpoint Signals Collector", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "DLP Endpoint Signals Collector", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "runbook.md", "file_type": "code", "degree": 1}, {"id": "file_operations_collector", "label": "File Operations Collector", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "File Operations Collector", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "dlp-gap-analysis.md", "file_type": "code", "degree": 1}, {"id": "worktime_session_collector", "label": "Worktime Session Collector", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Worktime Session Collector", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "ansible/README.md", "file_type": "code", "degree": 1}, {"id": "web_category_logger", "label": "Linux Web Category Logger", "color": {"background": "#B07AA1", "border": "#B07AA1", "highlight": {"background": "#ffffff", "border": "#B07AA1"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Linux Web Category Logger", "community": 16, "community_name": "Community 16", "source_file": "linux-remote-worker.md", "file_type": "code", "degree": 1}, {"id": "deploy_single_user_ps1", "label": "deploy-single-user.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-single-user.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/deploy-single-user.ps1", "file_type": "code", "degree": 5}, {"id": "deploy_domain_users_ps1", "label": "deploy-domain-users.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.8, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-domain-users.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/deploy-domain-users.ps1", "file_type": "code", "degree": 7}, {"id": "deploy_ensemble_ps1", "label": "deploy-ensemble.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy-ensemble.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/deploy-ensemble.ps1", "file_type": "code", "degree": 4}, {"id": "validate_deployment_ps1", "label": "validate-deployment.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "validate-deployment.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/validate-deployment.ps1", "file_type": "code", "degree": 4}, {"id": "hardening_recovery_ps1", "label": "hardening-recovery.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "hardening-recovery.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/hardening-recovery.ps1", "file_type": "code", "degree": 6}, {"id": "browser_domains_native_collector_ps1", "label": "browser-domains-native-collector.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "browser-domains-native-collector.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/browser-domains-native-collector.ps1", "file_type": "code", "degree": 6}, {"id": "dlp_endpoint_signals_collector_ps1", "label": "dlp-endpoint-signals-collector.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "dlp-endpoint-signals-collector.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/dlp-endpoint-signals-collector.ps1", "file_type": "code", "degree": 6}, {"id": "file_operations_collector_ps1", "label": "file-operations-collector.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "file-operations-collector.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/file-operations-collector.ps1", "file_type": "code", "degree": 3}, {"id": "worktime_session_collector_ps1", "label": "worktime-session-collector.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "worktime-session-collector.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/worktime-session-collector.ps1", "file_type": "code", "degree": 4}, {"id": "migrate_awatch_rus_paths_ps1", "label": "migrate-awatch-rus-paths.ps1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "migrate-awatch-rus-paths.ps1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/migrate-awatch-rus-paths.ps1", "file_type": "code", "degree": 4}, {"id": "activitywatch_windows_common_psm1", "label": "ActivityWatch.Windows.Common.psm1", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.4, "font": {"size": 0, "color": "#ffffff"}, "title": "ActivityWatch.Windows.Common.psm1", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/ActivityWatch.Windows.Common.psm1", "file_type": "code", "degree": 6}, {"id": "pfsense_aw_poller_py", "label": "pfsense-aw-poller.py", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "pfsense-aw-poller.py", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "pfsense/pfsense-aw-poller.py", "file_type": "code", "degree": 2}, {"id": "dlp_policy_example_json", "label": "dlp-policy.example.json", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "dlp-policy.example.json", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/dlp-policy.example.json", "file_type": "document", "degree": 3}, {"id": "web_category_rules_example_json", "label": "web-category-rules.example.json", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "web-category-rules.example.json", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "windows/web-category-rules.example.json", "file_type": "document", "degree": 2}, {"id": "pfsense_aw_poller_example_json", "label": "pfsense-aw-poller.example.json", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "pfsense-aw-poller.example.json", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "pfsense/pfsense-aw-poller.example.json", "file_type": "document", "degree": 1}, {"id": "activitywatch_api", "label": "ActivityWatch API", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "ActivityWatch API", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "", "file_type": "concept", "degree": 5}, {"id": "deployment_config_json", "label": "deployment-config.json", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "deployment-config.json", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "", "file_type": "concept", "degree": 3}, {"id": "install_full_stack", "label": "install_full_stack", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "install_full_stack", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/install_full_stack.yml", "file_type": "code", "degree": 2}, {"id": "provision_proxmox_ct_and_deploy_aw", "label": "provision_proxmox_ct_and_deploy_aw", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "provision_proxmox_ct_and_deploy_aw", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/provision_proxmox_ct_and_deploy_aw.yml", "file_type": "code", "degree": 2}, {"id": "provision_proxmox_ct_matrix_and_deploy_aw", "label": "provision_proxmox_ct_matrix_and_deploy_aw", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "provision_proxmox_ct_matrix_and_deploy_aw", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/provision_proxmox_ct_matrix_and_deploy_aw.yml", "file_type": "code", "degree": 1}, {"id": "deploy_aw_windows", "label": "deploy_aw_windows", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "deploy_aw_windows", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/deploy_aw_windows.yml", "file_type": "code", "degree": 4}, {"id": "post_validate_aw_windows", "label": "post_validate_aw_windows", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "post_validate_aw_windows", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/post_validate_aw_windows.yml", "file_type": "code", "degree": 1}, {"id": "provision_ct_and_deploy_aw", "label": "provision_ct_and_deploy_aw", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 12.0, "font": {"size": 0, "color": "#ffffff"}, "title": "provision_ct_and_deploy_aw", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/tasks/provision_ct_and_deploy_aw.yml", "file_type": "code", "degree": 5}, {"id": "install_aw_server_sh", "label": "install_aw_server.sh", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 11.2, "font": {"size": 0, "color": "#ffffff"}, "title": "install_aw_server.sh", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/install_aw_server.sh", "file_type": "code", "degree": 3}, {"id": "apply_webui_ru_patch_sh", "label": "apply_webui_ru_patch.sh", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 11.6, "font": {"size": 0, "color": "#ffffff"}, "title": "apply_webui_ru_patch.sh", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/apply_webui_ru_patch.sh", "file_type": "code", "degree": 4}, {"id": "activitywatch_server_service", "label": "activitywatch-server.service", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "activitywatch-server.service", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/activitywatch-server.service", "file_type": "code", "degree": 2}, {"id": "aw_ru_patch_js", "label": "aw-ru-patch.js", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-ru-patch.js", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/aw-ru-patch.js", "file_type": "code", "degree": 2}, {"id": "aw_sw_cleanup_js", "label": "aw-sw-cleanup.js", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-sw-cleanup.js", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/aw-sw-cleanup.js", "file_type": "code", "degree": 1}, {"id": "aw_host_groups_json", "label": "aw-host-groups.json", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-host-groups.json", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/aw-host-groups.json", "file_type": "code", "degree": 2}, {"id": "aw_server_env_example", "label": "aw-server.env.example", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "aw-server.env.example", "community": 8, "community_name": "RU Patch Navigation", "source_file": "aw-server/aw-server.env.example", "file_type": "document", "degree": 2}, {"id": "inventory_ini", "label": "inventory.ini", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "inventory.ini", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/inventory.ini", "file_type": "document", "degree": 2}, {"id": "group_vars_all", "label": "group_vars/all.yml", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/all.yml", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/group_vars/all.yml", "file_type": "code", "degree": 2}, {"id": "group_vars_aw_server", "label": "group_vars/aw_server.yml", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/aw_server.yml", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/group_vars/aw_server.yml", "file_type": "code", "degree": 1}, {"id": "group_vars_aw_windows", "label": "group_vars/aw_windows.yml", "color": {"background": "#9C755F", "border": "#9C755F", "highlight": {"background": "#ffffff", "border": "#9C755F"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/aw_windows.yml", "community": 8, "community_name": "RU Patch Navigation", "source_file": "ansible/group_vars/aw_windows.yml", "file_type": "code", "degree": 2}, {"id": "group_vars_proxmox_example", "label": "group_vars/proxmox.example.yml", "color": {"background": "#E15759", "border": "#E15759", "highlight": {"background": "#ffffff", "border": "#E15759"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/proxmox.example.yml", "community": 32, "community_name": "Community 32", "source_file": "ansible/group_vars/proxmox.example.yml", "file_type": "document", "degree": 0}, {"id": "group_vars_proxmox_matrix_example", "label": "group_vars/proxmox-matrix.example.yml", "color": {"background": "#76B7B2", "border": "#76B7B2", "highlight": {"background": "#ffffff", "border": "#76B7B2"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/proxmox-matrix.example.yml", "community": 33, "community_name": "Community 33", "source_file": "ansible/group_vars/proxmox-matrix.example.yml", "file_type": "document", "degree": 0}, {"id": "group_vars_pfsense_poller_example", "label": "group_vars/pfsense-poller.example.yml", "color": {"background": "#59A14F", "border": "#59A14F", "highlight": {"background": "#ffffff", "border": "#59A14F"}}, "size": 10.0, "font": {"size": 0, "color": "#ffffff"}, "title": "group_vars/pfsense-poller.example.yml", "community": 34, "community_name": "Community 34", "source_file": "ansible/group_vars/pfsense-poller.example.yml", "file_type": "document", "degree": 0}, {"id": "devin_session_1", "label": "Devin Session: \u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0439 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0438\u0442\u0445\u0430\u0431\u0430", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "Devin Session: \u0421\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0439 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0433\u0438\u0442\u0445\u0430\u0431\u0430", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "file_type": "document", "degree": 2}, {"id": "devin_pr_11", "label": "PR #11 - merged", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "PR #11 - merged", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "file_type": "document", "degree": 2}, {"id": "devin_pr_10", "label": "PR #10 - open", "color": {"background": "#F28E2B", "border": "#F28E2B", "highlight": {"background": "#ffffff", "border": "#F28E2B"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "PR #10 - open", "community": 1, "community_name": "DLP Endpoint Signals", "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "file_type": "document", "degree": 1}, {"id": "devin_session_2", "label": "Devin Session: \u0420\u0443\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0439 \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell DLP", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.4, "font": {"size": 0, "color": "#ffffff"}, "title": "Devin Session: \u0420\u0443\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0439 \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell DLP", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "file_type": "document", "degree": 1}, {"id": "devin_pr_9", "label": "PR #9 - open", "color": {"background": "#EDC948", "border": "#EDC948", "highlight": {"background": "#ffffff", "border": "#EDC948"}}, "size": 10.8, "font": {"size": 0, "color": "#ffffff"}, "title": "PR #9 - open", "community": 5, "community_name": "RU Patch DLP Review", "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "file_type": "document", "degree": 2}];
+const RAW_EDGES = [{"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_replacetext", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_walk", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_translateattributes", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injectstyles", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_hidenoisenavigation", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getcurrenthostfromhash", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ispvelikehost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_enforcesafeactivityviewforpvehost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getdlphostfromsettings", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getdlphref", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_isdlpsignalbucketroute", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_isalertsroute", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getdlpbucketidfromhash", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getdlphostfrombucketid", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_escapehtml", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_normalizetext", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_builddlpkey", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_generatedlpid", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_awapijson", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ensureawbucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_saveawheartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_loadbucketevents", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getrulematchfields", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_serializerulematch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getruleid", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getreviewid", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_collapseruleevents", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_collapsereviewevents", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_rulematchesevent", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getsuppressionstate", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_removebaddlplinks", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_updatedlplinks", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_builddlpnavitem", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_findprimarynavlist", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injectdlpnavigation", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ishomeroute", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getdefaulthostgroupsconfig", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_gethostgroupsstate", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ensurehostgroupsdata", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ispveactivityroute", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_extracthostfrombucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_buildhostbucketmap", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_hosthasbucketprefix", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_matchhostgroup", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_buildhostlink", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_renderhostgroupcards", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injecthostgroupscenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_renderdlptablerows", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_savedlpreview", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_savedlpincident", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_savedlprule", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_binddlprowactions", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_setdlpruleenabled", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_setdlpreviewarchived", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_renderdlprulemanager", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_refreshdlpcenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_refreshdlpalertscenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_refreshpveauditcenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injectpveauditcenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_injectdlpalertscenter", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_gettrendshostfromsettings", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_gettrendspath", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_shouldredirecttrends", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_redirectbaretrendsroute", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_ensuresettingshost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_getpreferredwindowhostfrombuckets", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_rewriteunknowncategorybuilderquerybody", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_installcategorybuildernetworkpatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_patchcategorybuilderhostlabel", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_patchactivityheading", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_applypatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_aw_ru_patch_js", "to": "aw_ru_patch_scheduleapplypatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_replacetext", "to": "aw_ru_patch_walk", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_replacetext", "to": "aw_ru_patch_translateattributes", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_replacetext", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_walk", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_walk", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_translateattributes", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_translateattributes", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectstyles", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectstyles", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_hidenoisenavigation", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_hidenoisenavigation", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getcurrenthostfromhash", "to": "aw_ru_patch_getdlphostfromsettings", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getcurrenthostfromhash", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getcurrenthostfromhash", "to": "aw_ru_patch_injectpveauditcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getcurrenthostfromhash", "to": "aw_ru_patch_injectdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getcurrenthostfromhash", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispvelikehost", "to": "aw_ru_patch_enforcesafeactivityviewforpvehost", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispvelikehost", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispvelikehost", "to": "aw_ru_patch_ispveactivityroute", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispvelikehost", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_enforcesafeactivityviewforpvehost", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_enforcesafeactivityviewforpvehost", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "aw_ru_patch_getdlphostfrombucketid", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "aw_ru_patch_getdlpbucketidfromhash", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "aw_ru_patch_gettrendshostfromsettings", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "aw_ru_patch_redirectbaretrendsroute", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "aw_ru_patch_ensuresettingshost", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfromsettings", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphref", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphref", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_isdlpsignalbucketroute", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_isdlpsignalbucketroute", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_isalertsroute", "to": "aw_ru_patch_injectdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_isalertsroute", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "aw_ru_patch_savedlpreview", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "aw_ru_patch_savedlpincident", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "aw_ru_patch_setdlpreviewarchived", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlpbucketidfromhash", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfrombucketid", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdlphostfrombucketid", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_renderhostgroupcards", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_renderdlptablerows", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_refreshdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_refreshpveauditcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "aw_ru_patch_injectdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_escapehtml", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_getrulematchfields", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_getruleid", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_getreviewid", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_rulematchesevent", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_findprimarynavlist", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "aw_ru_patch_getpreferredwindowhostfrombuckets", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_normalizetext", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpkey", "to": "aw_ru_patch_getreviewid", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpkey", "to": "aw_ru_patch_renderdlptablerows", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpkey", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpkey", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_generatedlpid", "to": "aw_ru_patch_savedlpreview", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_generatedlpid", "to": "aw_ru_patch_savedlpincident", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_generatedlpid", "to": "aw_ru_patch_savedlprule", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_generatedlpid", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_awapijson", "to": "aw_ru_patch_ensureawbucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_awapijson", "to": "aw_ru_patch_saveawheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_awapijson", "to": "aw_ru_patch_loadbucketevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_awapijson", "to": "aw_ru_patch_ensurehostgroupsdata", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_awapijson", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "aw_ru_patch_savedlpreview", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "aw_ru_patch_savedlpincident", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "aw_ru_patch_savedlprule", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "aw_ru_patch_setdlpruleenabled", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "aw_ru_patch_setdlpreviewarchived", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensureawbucket", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "aw_ru_patch_savedlpreview", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "aw_ru_patch_savedlpincident", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "aw_ru_patch_savedlprule", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "aw_ru_patch_setdlpruleenabled", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "aw_ru_patch_setdlpreviewarchived", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_saveawheartbeat", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_refreshdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "aw_ru_patch_refreshpveauditcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_loadbucketevents", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getrulematchfields", "to": "aw_ru_patch_rulematchesevent", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getrulematchfields", "to": "aw_ru_patch_savedlprule", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getrulematchfields", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_serializerulematch", "to": "aw_ru_patch_getruleid", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_serializerulematch", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_serializerulematch", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getruleid", "to": "aw_ru_patch_collapseruleevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getruleid", "to": "aw_ru_patch_setdlpruleenabled", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getruleid", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getruleid", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getreviewid", "to": "aw_ru_patch_collapsereviewevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getreviewid", "to": "aw_ru_patch_setdlpreviewarchived", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getreviewid", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getreviewid", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapseruleevents", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapseruleevents", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapseruleevents", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapseruleevents", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapsereviewevents", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapsereviewevents", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapsereviewevents", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_collapsereviewevents", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_rulematchesevent", "to": "aw_ru_patch_renderdlptablerows", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_rulematchesevent", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "aw_ru_patch_renderdlptablerows", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getsuppressionstate", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_removebaddlplinks", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_removebaddlplinks", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_updatedlplinks", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_updatedlplinks", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpnavitem", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_builddlpnavitem", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_findprimarynavlist", "to": "aw_ru_patch_injectdlpnavigation", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_findprimarynavlist", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpnavigation", "to": "aw_ru_patch_ensuresettingshost", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpnavigation", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpnavigation", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ishomeroute", "to": "aw_ru_patch_injecthostgroupscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ishomeroute", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdefaulthostgroupsconfig", "to": "aw_ru_patch_ensurehostgroupsdata", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdefaulthostgroupsconfig", "to": "aw_ru_patch_renderhostgroupcards", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getdefaulthostgroupsconfig", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gethostgroupsstate", "to": "aw_ru_patch_ensurehostgroupsdata", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gethostgroupsstate", "to": "aw_ru_patch_getpreferredwindowhostfrombuckets", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gethostgroupsstate", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensurehostgroupsdata", "to": "aw_ru_patch_injecthostgroupscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensurehostgroupsdata", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensurehostgroupsdata", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispveactivityroute", "to": "aw_ru_patch_injectpveauditcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ispveactivityroute", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_extracthostfrombucket", "to": "aw_ru_patch_buildhostbucketmap", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_extracthostfrombucket", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_buildhostbucketmap", "to": "aw_ru_patch_renderhostgroupcards", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_buildhostbucketmap", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_hosthasbucketprefix", "to": "aw_ru_patch_matchhostgroup", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_matchhostgroup", "to": "aw_ru_patch_renderhostgroupcards", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_matchhostgroup", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_buildhostlink", "to": "aw_ru_patch_renderhostgroupcards", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_buildhostlink", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderhostgroupcards", "to": "aw_ru_patch_injecthostgroupscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderhostgroupcards", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injecthostgroupscenter", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injecthostgroupscenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "aw_ru_patch_refreshdlpcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlptablerows", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlpreview", "to": "aw_ru_patch_savedlpincident", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlpreview", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlpreview", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlpincident", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlprule", "to": "aw_ru_patch_binddlprowactions", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_savedlprule", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_binddlprowactions", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_setdlpruleenabled", "to": "aw_ru_patch_renderdlprulemanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_setdlpruleenabled", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_setdlpreviewarchived", "to": "aw_ru_patch_renderdlpreviewmanager", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_setdlpreviewarchived", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlprulemanager", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlprulemanager", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlpreviewmanager", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_renderdlpreviewmanager", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshdlpcenter", "to": "aw_ru_patch_injectdlpreviewcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshdlpcenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpreviewcenter", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpreviewcenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshdlpalertscenter", "to": "aw_ru_patch_injectdlpalertscenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshdlpalertscenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshpveauditcenter", "to": "aw_ru_patch_injectpveauditcenter", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_refreshpveauditcenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectpveauditcenter", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectpveauditcenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpalertscenter", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_injectdlpalertscenter", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gettrendshostfromsettings", "to": "aw_ru_patch_redirectbaretrendsroute", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gettrendshostfromsettings", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gettrendspath", "to": "aw_ru_patch_shouldredirecttrends", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_gettrendspath", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_shouldredirecttrends", "to": "aw_ru_patch_redirectbaretrendsroute", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_shouldredirecttrends", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_redirectbaretrendsroute", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_redirectbaretrendsroute", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensuresettingshost", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_ensuresettingshost", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getpreferredwindowhostfrombuckets", "to": "aw_ru_patch_rewriteunknowncategorybuilderquerybody", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getpreferredwindowhostfrombuckets", "to": "aw_ru_patch_patchcategorybuilderhostlabel", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_getpreferredwindowhostfrombuckets", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_rewriteunknowncategorybuilderquerybody", "to": "aw_ru_patch_installcategorybuildernetworkpatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_rewriteunknowncategorybuilderquerybody", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_installcategorybuildernetworkpatch", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_installcategorybuildernetworkpatch", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_patchcategorybuilderhostlabel", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_patchcategorybuilderhostlabel", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_patchactivityheading", "to": "aw_ru_patch_applypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_patchactivityheading", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_applypatch", "to": "aw_ru_patch_scheduleapplypatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_applypatch", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_scheduleapplypatch", "to": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_deploymentconfig", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_write_collectorlog", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_write_dlpincidentlog", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_test_domainmatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_hostfromurl", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_rootdomain", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_convertto_normalizedurl", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_load_customcategoryrules", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_webcategory", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_test_domainlistmatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_test_dlpruletimewindow", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_load_dlppolicy", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_test_dlprulematch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_dlpdecision", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_should_emitincident", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_send_dlpincidentheartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_filesha256hex", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_ensure_directory", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_incidentscreenshotpath", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_ensure_screenshottypesloaded", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_foregroundwindowcontext", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_get_browserurlfromwindow", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_ensure_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_send_heartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1", "to": "browser_domains_native_collector_send_categoryheartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_deploymentconfig", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_write_collectorlog", "to": "browser_domains_native_collector_load_customcategoryrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_write_collectorlog", "to": "browser_domains_native_collector_load_dlppolicy", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_write_collectorlog", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_write_collectorlog", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_write_dlpincidentlog", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_domainmatch", "to": "browser_domains_native_collector_get_webcategory", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_domainmatch", "to": "browser_domains_native_collector_test_domainlistmatch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_domainmatch", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_hostfromurl", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_rootdomain", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_convertto_normalizedurl", "to": "browser_domains_native_collector_get_browserurlfromwindow", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_convertto_normalizedurl", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_load_customcategoryrules", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_webcategory", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_domainlistmatch", "to": "browser_domains_native_collector_test_dlprulematch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_domainlistmatch", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_dlpruletimewindow", "to": "browser_domains_native_collector_test_dlprulematch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_dlpruletimewindow", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_load_dlppolicy", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_dlprulematch", "to": "browser_domains_native_collector_get_dlpdecision", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_test_dlprulematch", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_dlpdecision", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_should_emitincident", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_send_dlpincidentheartbeat", "to": "browser_domains_native_collector_ensure_bucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_send_dlpincidentheartbeat", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_send_dlpincidentheartbeat", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_filesha256hex", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_filesha256hex", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_directory", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_directory", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_incidentscreenshotpath", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_incidentscreenshotpath", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_screenshottypesloaded", "to": "browser_domains_native_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_screenshottypesloaded", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_capture_incidentscreenshot", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_foregroundwindowcontext", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_get_browserurlfromwindow", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_bucket", "to": "browser_domains_native_collector_send_categoryheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ensure_bucket", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_send_heartbeat", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_send_categoryheartbeat", "to": "windows_browser_domains_native_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_deploymentconfig", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_write_endpointlog", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_invoke_awjsonpost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_ensure_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_filesha256hex", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_ensure_directory", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_incidentscreenshotpath", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_stringhash", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_load_dlppolicy", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_should_emitbycooldown", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_evaluate_usbrules", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_evaluate_printrules", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_eventxmlvalue", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_printjobprintername", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_normalize_ownerformatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_test_ownerloosematch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_normalize_printerformatch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_test_printerloosematch", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_printserviceeventsummary", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_printservicedocumentfallback", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_write_printserviceeventtrace", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_deploymentconfig", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_load_dlppolicy", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_evaluate_usbrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_evaluate_printrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_write_printserviceeventtrace", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_endpointlog", "to": "dlp_endpoint_signals_collector_invoke_awjsonpost", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_invoke_awjsonpost", "to": "dlp_endpoint_signals_collector_ensure_bucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_invoke_awjsonpost", "to": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_invoke_awjsonpost", "to": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_invoke_awjsonpost", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_bucket", "to": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_bucket", "to": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_bucket", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "to": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "to": "dlp_endpoint_signals_collector_evaluate_usbrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "to": "dlp_endpoint_signals_collector_evaluate_printrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_filesha256hex", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_filesha256hex", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_directory", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_directory", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_incidentscreenshotpath", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_incidentscreenshotpath", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded", "to": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_capture_incidentscreenshot", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_stringhash", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_load_dlppolicy", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_should_emitbycooldown", "to": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_should_emitbycooldown", "to": "dlp_endpoint_signals_collector_evaluate_usbrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_should_emitbycooldown", "to": "dlp_endpoint_signals_collector_evaluate_printrules", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_should_emitbycooldown", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_evaluate_clipboardrules", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_evaluate_usbrules", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_evaluate_printrules", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks", "to": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "to": "dlp_endpoint_signals_collector_get_printservicedocumentfallback", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_documentnameneedsfallback", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_eventxmlvalue", "to": "dlp_endpoint_signals_collector_get_printserviceeventsummary", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_eventxmlvalue", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_printjobprintername", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_normalize_ownerformatch", "to": "dlp_endpoint_signals_collector_test_ownerloosematch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_normalize_ownerformatch", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_ownerloosematch", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_ownerloosematch", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_normalize_printerformatch", "to": "dlp_endpoint_signals_collector_test_printerloosematch", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_normalize_printerformatch", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_printerloosematch", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_test_printerloosematch", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_printserviceeventsummary", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_printserviceeventsummary", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_printservicedocumentfallback", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_printservicedocumentfallback", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_printserviceeventtrace", "to": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_write_printserviceeventtrace", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents", "to": "windows_dlp_endpoint_signals_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_copy_directorycontents", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_copy_ifexists", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_convert_pathvalue", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_stop_awatchtaskset", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_get_existingawatchconfig", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1", "to": "migrate_awatch_rus_paths_update_awatchconfigpaths", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_copy_directorycontents", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_copy_ifexists", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_convert_pathvalue", "to": "migrate_awatch_rus_paths_update_awatchconfigpaths", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_convert_pathvalue", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_stop_awatchtaskset", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_get_existingawatchconfig", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_update_awatchconfigpaths", "to": "windows_migrate_awatch_rus_paths_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1", "to": "worktime_session_collector_get_config", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1", "to": "worktime_session_collector_invoke_awjsonpost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1", "to": "worktime_session_collector_ensure_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1", "to": "worktime_session_collector_get_sessionrecords", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_get_config", "to": "windows_worktime_session_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_invoke_awjsonpost", "to": "worktime_session_collector_ensure_bucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_invoke_awjsonpost", "to": "windows_worktime_session_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_ensure_bucket", "to": "windows_worktime_session_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_get_sessionrecords", "to": "windows_worktime_session_collector_ps1", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_utc_now_iso", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_load_json", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_build_ssl_context", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_http_json", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_ensure_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_send_heartbeat", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_normalize_headers", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_summarize_payload", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_poll_endpoint", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_run_once", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_pfsense_aw_poller_py", "to": "pfsense_aw_poller_main", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_utc_now_iso", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_utc_now_iso", "to": "pfsense_aw_poller_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_load_json", "to": "pfsense_aw_poller_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_build_ssl_context", "to": "pfsense_aw_poller_run_once", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_http_json", "to": "pfsense_aw_poller_ensure_bucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_http_json", "to": "pfsense_aw_poller_send_heartbeat", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_http_json", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_ensure_bucket", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_send_heartbeat", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_normalize_headers", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_summarize_payload", "to": "pfsense_aw_poller_poll_endpoint", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_poll_endpoint", "to": "pfsense_aw_poller_run_once", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_run_once", "to": "pfsense_aw_poller_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_awevent", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_psycopgconnection", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_utc_now", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_parse_timestamp", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_format_aw_timestamp", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_load_state", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_save_state", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_normalize_base_url", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_aw_get_json", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_list_buckets", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_bucket_stream_type", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_select_buckets", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_build_events_path", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_event_key", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_fetch_bucket_events", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_connect_sqlite", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_ensure_schema", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_ensure_postgres_schema", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_first_string", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_bool_as_int", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_event_row", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_insert_events", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_insert_postgres_events", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_get_start_time", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_parse_prefixes", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_build_parser", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_aggregate_dlp_events_py", "to": "aggregate_dlp_events_main", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_bucket", "to": "aggregate_dlp_events_list_buckets", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_awevent", "to": "aggregate_dlp_events_fetch_bucket_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection", "to": "protocol", "label": "inherits", "title": "inherits [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection", "to": "aggregate_dlp_events_psycopgconnection_cursor", "label": "method", "title": "method [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection", "to": "aggregate_dlp_events_psycopgconnection_commit", "label": "method", "title": "method [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_cursor", "to": "aggregate_dlp_events_ensure_postgres_schema", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_cursor", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_commit", "to": "aggregate_dlp_events_ensure_schema", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_commit", "to": "aggregate_dlp_events_ensure_postgres_schema", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_commit", "to": "aggregate_dlp_events_insert_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_commit", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_psycopgconnection_commit", "to": "merge_aw_server_dbs_main", "label": "calls", "title": "calls [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "aggregate_dlp_events_utc_now", "to": "aggregate_dlp_events_insert_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_utc_now", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_utc_now", "to": "aggregate_dlp_events_get_start_time", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_utc_now", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_parse_timestamp", "to": "aggregate_dlp_events_get_start_time", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_format_aw_timestamp", "to": "aggregate_dlp_events_build_events_path", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_format_aw_timestamp", "to": "aggregate_dlp_events_insert_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_format_aw_timestamp", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_format_aw_timestamp", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_load_state", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_save_state", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_normalize_base_url", "to": "aggregate_dlp_events_aw_get_json", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_aw_get_json", "to": "aggregate_dlp_events_list_buckets", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_aw_get_json", "to": "aggregate_dlp_events_fetch_bucket_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_list_buckets", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_bucket_stream_type", "to": "aggregate_dlp_events_select_buckets", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_select_buckets", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_build_events_path", "to": "aggregate_dlp_events_fetch_bucket_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_event_key", "to": "aggregate_dlp_events_fetch_bucket_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_event_key", "to": "aggregate_dlp_events_event_row", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_fetch_bucket_events", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_connect_sqlite", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_connect_sqlite", "to": "merge_aw_server_dbs_connect", "label": "calls", "title": "calls [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "aggregate_dlp_events_ensure_schema", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_ensure_postgres_schema", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_first_string", "to": "aggregate_dlp_events_event_row", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_bool_as_int", "to": "aggregate_dlp_events_event_row", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_event_row", "to": "aggregate_dlp_events_insert_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_event_row", "to": "aggregate_dlp_events_insert_postgres_events", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_insert_events", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_insert_postgres_events", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_insert_postgres_events", "to": "merge_aw_server_dbs_connect", "label": "calls", "title": "calls [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "aggregate_dlp_events_get_start_time", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_build_parser", "to": "aggregate_dlp_events_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_merge_aw_server_dbs_py", "to": "merge_aw_server_dbs_connect", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_merge_aw_server_dbs_py", "to": "merge_aw_server_dbs_bucket_key", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_merge_aw_server_dbs_py", "to": "merge_aw_server_dbs_ensure_parent", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_merge_aw_server_dbs_py", "to": "merge_aw_server_dbs_load_existing_events", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "scripts_merge_aw_server_dbs_py", "to": "merge_aw_server_dbs_main", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "merge_aw_server_dbs_connect", "to": "merge_aw_server_dbs_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "merge_aw_server_dbs_bucket_key", "to": "merge_aw_server_dbs_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "merge_aw_server_dbs_ensure_parent", "to": "merge_aw_server_dbs_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "merge_aw_server_dbs_load_existing_events", "to": "merge_aw_server_dbs_main", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "windows_file_operations_collector_ps1", "to": "file_operations_collector_get_deploymentconfig", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "windows_file_operations_collector_ps1", "to": "file_operations_collector_write_filecollectorlog", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "windows_file_operations_collector_ps1", "to": "file_operations_collector_invoke_awjsonpost", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "windows_file_operations_collector_ps1", "to": "file_operations_collector_ensure_bucket", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "windows_file_operations_collector_ps1", "to": "file_operations_collector_send_fileoperationevent", "label": "contains", "title": "contains [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "file_operations_collector_write_filecollectorlog", "to": "file_operations_collector_invoke_awjsonpost", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "file_operations_collector_invoke_awjsonpost", "to": "file_operations_collector_ensure_bucket", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "file_operations_collector_invoke_awjsonpost", "to": "file_operations_collector_send_fileoperationevent", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "file_operations_collector_ensure_bucket", "to": "file_operations_collector_send_fileoperationevent", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "proxmox_ve", "to": "lxc_container", "label": "hosts", "title": "hosts [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "proxmox_ve", "to": "create_ct_script", "label": "uses", "title": "uses [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "proxmox_ve", "to": "push_artifacts_script", "label": "uses", "title": "uses [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "lxc_container", "to": "debian_12", "label": "runs_on", "title": "runs_on [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "lxc_container", "to": "install_aw_server_script", "label": "executes", "title": "executes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "lxc_container", "to": "apply_ru_patch_script", "label": "executes", "title": "executes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "debian_12", "to": "activitywatch_server", "label": "hosts", "title": "hosts [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "systemd_unit", "label": "implemented_as", "title": "implemented_as [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "web_ui_ru_patch", "label": "customized_by", "title": "customized_by [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_dlp_endpoint_signals_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_dlp_review_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_dlp_rules_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_dlp_incidents_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_watcher_window", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_watcher_afk", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_console_commands_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_ssh_sessions_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_web_category_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "aw_file_operations_bucket", "label": "stores", "title": "stores [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "pfsense_poller", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "worktime_session_collector", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "activitywatch_server", "to": "devin_pr_11", "label": "conceptually_related_to", "title": "conceptually_related_to [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "web_ui_ru_patch", "to": "views_default", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "web_ui_ru_patch", "to": "classes_worktime", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "create_ct_script", "to": "ansible_provision_ct", "label": "wraps", "title": "wraps [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "create_ct_script", "to": "deploy_secrets_env", "label": "referenced_by", "title": "referenced_by [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "push_artifacts_script", "to": "ansible_provision_ct", "label": "wraps", "title": "wraps [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "push_artifacts_script", "to": "deploy_secrets_env", "label": "referenced_by", "title": "referenced_by [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_aw_server_script", "to": "ansible_provision_ct", "label": "executes", "title": "executes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "apply_ru_patch_script", "to": "ansible_provision_ct", "label": "executes", "title": "executes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_script", "to": "deploy_domain_users_script", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_script", "to": "hardening_recovery_script", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_script", "to": "validate_deployment_script", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_script", "to": "ansible_deploy_windows", "label": "executes", "title": "executes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_linux_client_script", "to": "install_remote_worker_script", "label": "includes", "title": "includes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_console_ssh_logger_script", "to": "install_remote_worker_script", "label": "includes", "title": "includes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_remote_worker_script", "to": "web_category_logger", "label": "includes", "title": "includes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_script", "to": "aw_file_operations_bucket", "label": "reads", "title": "reads [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aggregate_dlp_events_script", "to": "aw_dlp_incidents_bucket", "label": "reads", "title": "reads [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "ansible_deploy_pfsense", "to": "pfsense_poller", "label": "deploys", "title": "deploys [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_dlp_incidents_bucket", "to": "browser_domains_collector", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_dlp_endpoint_signals_bucket", "to": "dlp_endpoint_signals_collector", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_file_operations_bucket", "to": "file_operations_collector", "label": "sends_data_to", "title": "sends_data_to [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_single_user_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_single_user_ps1", "to": "browser_domains_native_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_single_user_ps1", "to": "dlp_endpoint_signals_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_single_user_ps1", "to": "worktime_session_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_single_user_ps1", "to": "deployment_config_json", "label": "creates", "title": "creates [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "deploy_ensemble_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "browser_domains_native_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "dlp_endpoint_signals_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "file_operations_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "worktime_session_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_domain_users_ps1", "to": "deployment_config_json", "label": "creates", "title": "creates [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_ps1", "to": "hardening_recovery_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_ps1", "to": "validate_deployment_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_ensemble_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "validate_deployment_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "validate_deployment_ps1", "to": "migrate_awatch_rus_paths_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "validate_deployment_ps1", "to": "deployment_config_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "hardening_recovery_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "hardening_recovery_ps1", "to": "browser_domains_native_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "hardening_recovery_ps1", "to": "dlp_endpoint_signals_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "hardening_recovery_ps1", "to": "file_operations_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "hardening_recovery_ps1", "to": "worktime_session_collector_ps1", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ps1", "to": "web_category_rules_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ps1", "to": "dlp_policy_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "browser_domains_native_collector_ps1", "to": "activitywatch_api", "label": "shares_data_with", "title": "shares_data_with [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ps1", "to": "dlp_policy_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ps1", "to": "activitywatch_api", "label": "shares_data_with", "title": "shares_data_with [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "dlp_endpoint_signals_collector_ps1", "to": "devin_pr_9", "label": "conceptually_related_to", "title": "conceptually_related_to [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "file_operations_collector_ps1", "to": "activitywatch_api", "label": "shares_data_with", "title": "shares_data_with [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "worktime_session_collector_ps1", "to": "activitywatch_api", "label": "shares_data_with", "title": "shares_data_with [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_ps1", "to": "activitywatch_windows_common_psm1", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_ps1", "to": "web_category_rules_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "migrate_awatch_rus_paths_ps1", "to": "dlp_policy_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_py", "to": "pfsense_aw_poller_example_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "pfsense_aw_poller_py", "to": "activitywatch_api", "label": "shares_data_with", "title": "shares_data_with [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_full_stack", "to": "provision_proxmox_ct_and_deploy_aw", "label": "imports", "title": "imports [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_full_stack", "to": "deploy_aw_windows", "label": "imports", "title": "imports [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "provision_proxmox_ct_and_deploy_aw", "to": "provision_ct_and_deploy_aw", "label": "includes", "title": "includes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "provision_proxmox_ct_matrix_and_deploy_aw", "to": "provision_ct_and_deploy_aw", "label": "includes", "title": "includes [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_aw_windows", "to": "group_vars_aw_windows", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "deploy_aw_windows", "to": "post_validate_aw_windows", "label": "conceptually_related_to", "title": "conceptually_related_to [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "deploy_aw_windows", "to": "group_vars_all", "label": "references", "title": "references [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "provision_ct_and_deploy_aw", "to": "install_aw_server_sh", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "provision_ct_and_deploy_aw", "to": "apply_webui_ru_patch_sh", "label": "calls", "title": "calls [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "provision_ct_and_deploy_aw", "to": "activitywatch_server_service", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_aw_server_sh", "to": "activitywatch_server_service", "label": "implements", "title": "implements [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "install_aw_server_sh", "to": "aw_server_env_example", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "apply_webui_ru_patch_sh", "to": "aw_ru_patch_js", "label": "applies", "title": "applies [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "apply_webui_ru_patch_sh", "to": "aw_sw_cleanup_js", "label": "applies", "title": "applies [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "apply_webui_ru_patch_sh", "to": "aw_host_groups_json", "label": "applies", "title": "applies [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_ru_patch_js", "to": "aw_host_groups_json", "label": "references", "title": "references [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "aw_server_env_example", "to": "group_vars_all", "label": "shares_data_with", "title": "shares_data_with [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "inventory_ini", "to": "group_vars_aw_server", "label": "conceptually_related_to", "title": "conceptually_related_to [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "inventory_ini", "to": "group_vars_aw_windows", "label": "conceptually_related_to", "title": "conceptually_related_to [INFERRED]", "dashes": true, "width": 1, "color": {"opacity": 0.35}, "confidence": "INFERRED"}, {"from": "devin_session_1", "to": "devin_pr_11", "label": "created", "title": "created [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "devin_session_1", "to": "devin_pr_10", "label": "created", "title": "created [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}, {"from": "devin_session_2", "to": "devin_pr_9", "label": "created", "title": "created [EXTRACTED]", "dashes": false, "width": 2, "color": {"opacity": 0.7}, "confidence": "EXTRACTED"}];
+const LEGEND = [{"cid": 0, "color": "#4E79A7", "label": "DLP Event Aggregation", "count": 38}, {"cid": 1, "color": "#F28E2B", "label": "DLP Endpoint Signals", "count": 34}, {"cid": 2, "color": "#E15759", "label": "Core Infrastructure", "count": 31}, {"cid": 3, "color": "#76B7B2", "label": "Browser Domains", "count": 28}, {"cid": 4, "color": "#59A14F", "label": "RU Patch Activity", "count": 19}, {"cid": 5, "color": "#EDC948", "label": "RU Patch DLP Review", "count": 19}, {"cid": 6, "color": "#B07AA1", "label": "Windows Deployment", "count": 18}, {"cid": 7, "color": "#FF9DA7", "label": "AW Server Install", "count": 17}, {"cid": 8, "color": "#9C755F", "label": "RU Patch Navigation", "count": 17}, {"cid": 9, "color": "#BAB0AC", "label": "pfSense Poller", "count": 12}];
+
+// HTML-escape helper — prevents XSS when injecting graph data into innerHTML
+function esc(s) {
+  return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;').replace(/'/g,'&#39;');
+}
+
+// Build vis datasets
+const nodesDS = new vis.DataSet(RAW_NODES.map(n => ({
+  id: n.id, label: n.label, color: n.color, size: n.size,
+  font: n.font, title: n.title,
+  _community: n.community, _community_name: n.community_name,
+  _source_file: n.source_file, _file_type: n.file_type, _degree: n.degree,
+})));
+
+const edgesDS = new vis.DataSet(RAW_EDGES.map((e, i) => ({
+  id: i, from: e.from, to: e.to,
+  label: '',
+  title: e.title,
+  dashes: e.dashes,
+  width: e.width,
+  color: e.color,
+  arrows: { to: { enabled: true, scaleFactor: 0.5 } },
+})));
+
+const container = document.getElementById('graph');
+const network = new vis.Network(container, { nodes: nodesDS, edges: edgesDS }, {
+  physics: {
+    enabled: true,
+    solver: 'forceAtlas2Based',
+    forceAtlas2Based: {
+      gravitationalConstant: -60,
+      centralGravity: 0.005,
+      springLength: 120,
+      springConstant: 0.08,
+      damping: 0.4,
+      avoidOverlap: 0.8,
+    },
+    stabilization: { iterations: 200, fit: true },
+  },
+  interaction: {
+    hover: true,
+    tooltipDelay: 100,
+    hideEdgesOnDrag: true,
+    navigationButtons: false,
+    keyboard: false,
+  },
+  nodes: { shape: 'dot', borderWidth: 1.5 },
+  edges: { smooth: { type: 'continuous', roundness: 0.2 }, selectionWidth: 3 },
+});
+
+network.once('stabilizationIterationsDone', () => {
+  network.setOptions({ physics: { enabled: false } });
+});
+
+function showInfo(nodeId) {
+  const n = nodesDS.get(nodeId);
+  if (!n) return;
+  const neighborIds = network.getConnectedNodes(nodeId);
+  const neighborItems = neighborIds.map(nid => {
+    const nb = nodesDS.get(nid);
+    const color = nb ? nb.color.background : '#555';
+    return `<span class="neighbor-link" style="border-left-color:${esc(color)}" onclick="focusNode(${JSON.stringify(nid)})">${esc(nb ? nb.label : nid)}</span>`;
+  }).join('');
+  document.getElementById('info-content').innerHTML = `
+    <div class="field"><b>${esc(n.label)}</b></div>
+    <div class="field">Type: ${esc(n._file_type || 'unknown')}</div>
+    <div class="field">Community: ${esc(n._community_name)}</div>
+    <div class="field">Source: ${esc(n._source_file || '-')}</div>
+    <div class="field">Degree: ${n._degree}</div>
+    ${neighborIds.length ? `<div class="field" style="margin-top:8px;color:#aaa;font-size:11px">Neighbors (${neighborIds.length})</div><div id="neighbors-list">${neighborItems}</div>` : ''}
+  `;
+}
+
+function focusNode(nodeId) {
+  network.focus(nodeId, { scale: 1.4, animation: true });
+  network.selectNodes([nodeId]);
+  showInfo(nodeId);
+}
+
+// Track hovered node — hover detection is more reliable than click params
+let hoveredNodeId = null;
+network.on('hoverNode', params => {
+  hoveredNodeId = params.node;
+  container.style.cursor = 'pointer';
+});
+network.on('blurNode', () => {
+  hoveredNodeId = null;
+  container.style.cursor = 'default';
+});
+container.addEventListener('click', () => {
+  if (hoveredNodeId !== null) {
+    showInfo(hoveredNodeId);
+    network.selectNodes([hoveredNodeId]);
+  }
+});
+network.on('click', params => {
+  if (params.nodes.length > 0) {
+    showInfo(params.nodes[0]);
+  } else if (hoveredNodeId === null) {
+    document.getElementById('info-content').innerHTML = '<span class="empty">Click a node to inspect it</span>';
+  }
+});
+
+const searchInput = document.getElementById('search');
+const searchResults = document.getElementById('search-results');
+searchInput.addEventListener('input', () => {
+  const q = searchInput.value.toLowerCase().trim();
+  searchResults.innerHTML = '';
+  if (!q) { searchResults.style.display = 'none'; return; }
+  const matches = RAW_NODES.filter(n => n.label.toLowerCase().includes(q)).slice(0, 20);
+  if (!matches.length) { searchResults.style.display = 'none'; return; }
+  searchResults.style.display = 'block';
+  matches.forEach(n => {
+    const el = document.createElement('div');
+    el.className = 'search-item';
+    el.textContent = n.label;
+    el.style.borderLeft = `3px solid ${n.color.background}`;
+    el.style.paddingLeft = '8px';
+    el.onclick = () => {
+      network.focus(n.id, { scale: 1.5, animation: true });
+      network.selectNodes([n.id]);
+      showInfo(n.id);
+      searchResults.style.display = 'none';
+      searchInput.value = '';
+    };
+    searchResults.appendChild(el);
+  });
+});
+document.addEventListener('click', e => {
+  if (!searchResults.contains(e.target) && e.target !== searchInput)
+    searchResults.style.display = 'none';
+});
+
+const hiddenCommunities = new Set();
+const legendEl = document.getElementById('legend');
+LEGEND.forEach(c => {
+  const item = document.createElement('div');
+  item.className = 'legend-item';
+  item.innerHTML = `<div class="legend-dot" style="background:${c.color}"></div>
+    <span class="legend-label">${c.label}</span>
+    <span class="legend-count">${c.count}</span>`;
+  item.onclick = () => {
+    if (hiddenCommunities.has(c.cid)) {
+      hiddenCommunities.delete(c.cid);
+      item.classList.remove('dimmed');
+    } else {
+      hiddenCommunities.add(c.cid);
+      item.classList.add('dimmed');
+    }
+    const updates = RAW_NODES
+      .filter(n => n.community === c.cid)
+      .map(n => ({ id: n.id, hidden: hiddenCommunities.has(c.cid) }));
+    nodesDS.update(updates);
+  };
+  legendEl.appendChild(item);
+});
+</script>
+<script>
+// Render hyperedges as shaded regions
+const hyperedges = [{"id": "dlp_collector_stack", "label": "DLP Collector Stack", "nodes": ["browser_domains_collector", "dlp_endpoint_signals_collector", "file_operations_collector", "worktime_session_collector"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "dlp-gap-analysis.md"}, {"id": "windows_deployment_scripts", "label": "Windows Deployment Scripts", "nodes": ["deploy_ensemble_script", "deploy_domain_users_script", "hardening_recovery_script", "validate_deployment_script"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "windows/ensemble.md"}, {"id": "linux_remote_worker_stack", "label": "Linux Remote Worker Stack", "nodes": ["install_linux_client_script", "install_console_ssh_logger_script", "web_category_logger"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "linux-remote-worker.md"}, {"id": "ansible_playbooks", "label": "Ansible Playbooks", "nodes": ["ansible_provision_ct", "ansible_deploy_aw_server", "ansible_deploy_windows", "ansible_deploy_pfsense"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "ansible/README.md"}, {"id": "dlp_buckets", "label": "DLP Data Buckets", "nodes": ["aw_dlp_incidents_bucket", "aw_dlp_endpoint_signals_bucket", "aw_dlp_review_bucket", "aw_dlp_rules_bucket", "aw_file_operations_bucket"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "deployment.md"}, {"id": "activity_buckets", "label": "Activity Data Buckets", "nodes": ["aw_watcher_window", "aw_watcher_afk", "aw_console_commands_bucket", "aw_ssh_sessions_bucket", "aw_web_category_bucket"], "relation": "form", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "linux-client.md"}, {"id": "devin_workspace", "label": "Devin Workspace igor04091968", "nodes": ["devin_session_1", "devin_session_2", "devin_pr_9", "devin_pr_10", "devin_pr_11"], "relation": "belongs_to", "confidence": "EXTRACTED", "confidence_score": 1.0, "source_file": "~/\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438/sessions_2026-05-01_to_2026-06-01.json", "source_location": null}];
+// afterDrawing passes ctx already transformed to network coordinate space.
+// Draw node positions raw — no manual pan/zoom/DPR math needed.
+network.on('afterDrawing', function(ctx) {
+    hyperedges.forEach(h => {
+        const positions = h.nodes
+            .map(nid => network.getPositions([nid])[nid])
+            .filter(p => p !== undefined);
+        if (positions.length < 2) return;
+        ctx.save();
+        ctx.globalAlpha = 0.12;
+        ctx.fillStyle = '#6366f1';
+        ctx.strokeStyle = '#6366f1';
+        ctx.lineWidth = 2;
+        ctx.beginPath();
+        // Centroid and expanded hull in network coordinates
+        const cx = positions.reduce((s, p) => s + p.x, 0) / positions.length;
+        const cy = positions.reduce((s, p) => s + p.y, 0) / positions.length;
+        const expanded = positions.map(p => ({
+            x: cx + (p.x - cx) * 1.15,
+            y: cy + (p.y - cy) * 1.15
+        }));
+        ctx.moveTo(expanded[0].x, expanded[0].y);
+        expanded.slice(1).forEach(p => ctx.lineTo(p.x, p.y));
+        ctx.closePath();
+        ctx.fill();
+        ctx.globalAlpha = 0.4;
+        ctx.stroke();
+        // Label
+        ctx.globalAlpha = 0.8;
+        ctx.fillStyle = '#4f46e5';
+        ctx.font = 'bold 11px sans-serif';
+        ctx.textAlign = 'center';
+        ctx.fillText(h.label, cx, cy - 5);
+        ctx.restore();
+    });
+});
+</script>
+</body>
+</html>
\ No newline at end of file
diff --git a/graphify-out/graph.json b/graphify-out/graph.json
new file mode 100644
index 0000000..eb91b0d
--- /dev/null
+++ b/graphify-out/graph.json
@@ -0,0 +1,11645 @@
+{
+  "nodes": [
+    {
+      "id": "aw_server_aw_ru_patch_js",
+      "label": "aw-ru-patch.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_replacetext",
+      "label": "replaceText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_walk",
+      "label": "walk()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_translateattributes",
+      "label": "translateAttributes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_injectstyles",
+      "label": "injectStyles()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_hidenoisenavigation",
+      "label": "hideNoiseNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getcurrenthostfromhash",
+      "label": "getCurrentHostFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ispvelikehost",
+      "label": "isPveLikeHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_islikelyclienthost",
+      "label": "isLikelyClientHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "label": "enforceSafeActivityViewForPveHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L383",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfromsettings",
+      "label": "getDlpHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L397",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getdlphref",
+      "label": "getDlpHref()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L405",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_isdlpsignalbucketroute",
+      "label": "isDlpSignalBucketRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L410",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_isalertsroute",
+      "label": "isAlertsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_getdlpbucketidfromhash",
+      "label": "getDlpBucketIdFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L418",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfrombucketid",
+      "label": "getDlpHostFromBucketId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L424",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_escapehtml",
+      "label": "escapeHtml()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L429",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_normalizetext",
+      "label": "normalizeText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L438",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_builddlpkey",
+      "label": "buildDlpKey()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L442",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_generatedlpid",
+      "label": "generateDlpId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L454",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_awapijson",
+      "label": "awApiJson()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L458",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_ensureawbucket",
+      "label": "ensureAwBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L476",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_saveawheartbeat",
+      "label": "saveAwHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L487",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_loadbucketevents",
+      "label": "loadBucketEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L495",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getrulematchfields",
+      "label": "getRuleMatchFields()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L503",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_serializerulematch",
+      "label": "serializeRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L515",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getruleid",
+      "label": "getRuleId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L527",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getreviewid",
+      "label": "getReviewId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L536",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_collapseruleevents",
+      "label": "collapseRuleEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L547",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_collapsereviewevents",
+      "label": "collapseReviewEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L560",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_rulematchesevent",
+      "label": "ruleMatchesEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L573",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_getsuppressionstate",
+      "label": "getSuppressionState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L582",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_removebaddlplinks",
+      "label": "removeBadDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L595",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_updatedlplinks",
+      "label": "updateDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L603",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_builddlpnavitem",
+      "label": "buildDlpNavItem()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L612",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_findprimarynavlist",
+      "label": "findPrimaryNavList()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L630",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectdlpnavigation",
+      "label": "injectDlpNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L643",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ishomeroute",
+      "label": "isHomeRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L675",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "label": "getDefaultHostGroupsConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L680",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_gethostgroupsstate",
+      "label": "getHostGroupsState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L722",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_ensurehostgroupsdata",
+      "label": "ensureHostGroupsData()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L733",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_ispveactivityroute",
+      "label": "isPveActivityRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L755",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_extracthostfrombucket",
+      "label": "extractHostFromBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L761",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_buildhostbucketmap",
+      "label": "buildHostBucketMap()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_hosthasbucketprefix",
+      "label": "hostHasBucketPrefix()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_matchhostgroup",
+      "label": "matchHostGroup()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L810",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_buildhostlink",
+      "label": "buildHostLink()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L839",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_renderhostgroupcards",
+      "label": "renderHostGroupCards()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L855",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_injecthostgroupscenter",
+      "label": "injectHostGroupsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L911",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_renderdlptablerows",
+      "label": "renderDlpTableRows()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L932",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_savedlpreview",
+      "label": "saveDlpReview()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L973",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_savedlpincident",
+      "label": "saveDlpIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1007",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_savedlprule",
+      "label": "saveDlpRule()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1031",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_binddlprowactions",
+      "label": "bindDlpRowActions()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1052",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_setdlpruleenabled",
+      "label": "setDlpRuleEnabled()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1087",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_setdlpreviewarchived",
+      "label": "setDlpReviewArchived()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1106",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_renderdlprulemanager",
+      "label": "renderDlpRuleManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1129",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_renderdlpreviewmanager",
+      "label": "renderDlpReviewManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1174",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpcenter",
+      "label": "refreshDlpCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1220",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_injectdlpreviewcenter",
+      "label": "injectDlpReviewCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1249",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpalertscenter",
+      "label": "refreshDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1318",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_refreshpveauditcenter",
+      "label": "refreshPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1348",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectpveauditcenter",
+      "label": "injectPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1394",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectdlpalertscenter",
+      "label": "injectDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1432",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_gettrendshostfromsettings",
+      "label": "getTrendsHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1475",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_gettrendspath",
+      "label": "getTrendsPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_shouldredirecttrends",
+      "label": "shouldRedirectTrends()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1489",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_redirectbaretrendsroute",
+      "label": "redirectBareTrendsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1494",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ensuresettingshost",
+      "label": "ensureSettingsHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1517",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "label": "getPreferredWindowHostFromBuckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1535",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "label": "rewriteUnknownCategoryBuilderQueryBody()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1552",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "label": "installCategoryBuilderNetworkPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1578",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "label": "patchCategoryBuilderHostLabel()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1625",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_patchactivityheading",
+      "label": "patchActivityHeading()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1642",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_applypatch",
+      "label": "applyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1654",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_scheduleapplypatch",
+      "label": "scheduleApplyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1673",
+      "community": 2
+    },
+    {
+      "id": "aw_server_aw_sw_cleanup_js",
+      "label": "aw-sw-cleanup.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-sw-cleanup.js",
+      "source_location": "L1",
+      "community": 15
+    },
+    {
+      "id": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "label": "aw_activitywatch.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L1",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter",
+      "label": "ActivityWatchExporter",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L31",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_init",
+      "label": ".__init__()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L32",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "label": ".get_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L38",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "label": ".get_bucket_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L48",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "label": ".get_bucket_info()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L62",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "label": ".collect_metrics()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L72",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L125",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_rationale_39",
+      "label": "Get all buckets from ActivityWatch API.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L39",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_rationale_49",
+      "label": "Get events from a specific bucket.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L49",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_rationale_63",
+      "label": "Get detailed info about a bucket.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L63",
+      "community": 6
+    },
+    {
+      "id": "aw_activitywatch_rationale_73",
+      "label": "Collect metrics from ActivityWatch.",
+      "file_type": "rationale",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L73",
+      "community": 6
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "label": "aw-ru-patch.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_replacetext",
+      "label": "replaceText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_walk",
+      "label": "walk()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_translateattributes",
+      "label": "translateAttributes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_injectstyles",
+      "label": "injectStyles()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_hidenoisenavigation",
+      "label": "hideNoiseNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getcurrenthostfromhash",
+      "label": "getCurrentHostFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ispvelikehost",
+      "label": "isPveLikeHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "label": "enforceSafeActivityViewForPveHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfromsettings",
+      "label": "getDlpHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L387",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getdlphref",
+      "label": "getDlpHref()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L395",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_isdlpsignalbucketroute",
+      "label": "isDlpSignalBucketRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_isalertsroute",
+      "label": "isAlertsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L404",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_getdlpbucketidfromhash",
+      "label": "getDlpBucketIdFromHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L408",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_getdlphostfrombucketid",
+      "label": "getDlpHostFromBucketId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_escapehtml",
+      "label": "escapeHtml()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L419",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_normalizetext",
+      "label": "normalizeText()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L428",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_builddlpkey",
+      "label": "buildDlpKey()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L432",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_generatedlpid",
+      "label": "generateDlpId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L444",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_awapijson",
+      "label": "awApiJson()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L448",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_ensureawbucket",
+      "label": "ensureAwBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L466",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_saveawheartbeat",
+      "label": "saveAwHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L477",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_loadbucketevents",
+      "label": "loadBucketEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L485",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getrulematchfields",
+      "label": "getRuleMatchFields()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L493",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_serializerulematch",
+      "label": "serializeRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L505",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getruleid",
+      "label": "getRuleId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L517",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_getreviewid",
+      "label": "getReviewId()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L526",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_collapseruleevents",
+      "label": "collapseRuleEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L537",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_collapsereviewevents",
+      "label": "collapseReviewEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L550",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_rulematchesevent",
+      "label": "ruleMatchesEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L563",
+      "community": 14
+    },
+    {
+      "id": "aw_ru_patch_getsuppressionstate",
+      "label": "getSuppressionState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L572",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_removebaddlplinks",
+      "label": "removeBadDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L585",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_updatedlplinks",
+      "label": "updateDlpLinks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L593",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_builddlpnavitem",
+      "label": "buildDlpNavItem()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L602",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_findprimarynavlist",
+      "label": "findPrimaryNavList()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L620",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectdlpnavigation",
+      "label": "injectDlpNavigation()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L633",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ishomeroute",
+      "label": "isHomeRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L665",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "label": "getDefaultHostGroupsConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L670",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_gethostgroupsstate",
+      "label": "getHostGroupsState()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L699",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_ensurehostgroupsdata",
+      "label": "ensureHostGroupsData()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L710",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_ispveactivityroute",
+      "label": "isPveActivityRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L732",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_extracthostfrombucket",
+      "label": "extractHostFromBucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L738",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_buildhostbucketmap",
+      "label": "buildHostBucketMap()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L757",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_matchhostgroup",
+      "label": "matchHostGroup()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L773",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_buildhostlink",
+      "label": "buildHostLink()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_renderhostgroupcards",
+      "label": "renderHostGroupCards()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_injecthostgroupscenter",
+      "label": "injectHostGroupsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L860",
+      "community": 8
+    },
+    {
+      "id": "aw_ru_patch_renderdlptablerows",
+      "label": "renderDlpTableRows()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L881",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_savedlpreview",
+      "label": "saveDlpReview()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L922",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_savedlpincident",
+      "label": "saveDlpIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L956",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_savedlprule",
+      "label": "saveDlpRule()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L980",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_binddlprowactions",
+      "label": "bindDlpRowActions()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1001",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_setdlpruleenabled",
+      "label": "setDlpRuleEnabled()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1036",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_setdlpreviewarchived",
+      "label": "setDlpReviewArchived()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1055",
+      "community": 9
+    },
+    {
+      "id": "aw_ru_patch_renderdlprulemanager",
+      "label": "renderDlpRuleManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1078",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_renderdlpreviewmanager",
+      "label": "renderDlpReviewManager()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1123",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpcenter",
+      "label": "refreshDlpCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1169",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_injectdlpreviewcenter",
+      "label": "injectDlpReviewCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1198",
+      "community": 5
+    },
+    {
+      "id": "aw_ru_patch_refreshdlpalertscenter",
+      "label": "refreshDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1267",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_refreshpveauditcenter",
+      "label": "refreshPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1297",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectpveauditcenter",
+      "label": "injectPveAuditCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1343",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_injectdlpalertscenter",
+      "label": "injectDlpAlertsCenter()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1381",
+      "community": 13
+    },
+    {
+      "id": "aw_ru_patch_gettrendshostfromsettings",
+      "label": "getTrendsHostFromSettings()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1424",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_gettrendspath",
+      "label": "getTrendsPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1431",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_shouldredirecttrends",
+      "label": "shouldRedirectTrends()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1437",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_redirectbaretrendsroute",
+      "label": "redirectBareTrendsRoute()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1442",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_ensuresettingshost",
+      "label": "ensureSettingsHost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1465",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "label": "getPreferredWindowHostFromBuckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "label": "rewriteUnknownCategoryBuilderQueryBody()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1501",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "label": "installCategoryBuilderNetworkPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1527",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "label": "patchCategoryBuilderHostLabel()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1572",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_patchactivityheading",
+      "label": "patchActivityHeading()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1589",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_applypatch",
+      "label": "applyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1601",
+      "community": 2
+    },
+    {
+      "id": "aw_ru_patch_scheduleapplypatch",
+      "label": "scheduleApplyPatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1620",
+      "community": 2
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_aw_server_aw_sw_cleanup_js",
+      "label": "aw-sw-cleanup.js",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-sw-cleanup.js",
+      "source_location": "L1",
+      "community": 16
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "label": "browser-domains-native-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L1",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_write_dlpincidentlog",
+      "label": "Write-DlpIncidentLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainmatch",
+      "label": "Test-DomainMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_hostfromurl",
+      "label": "Get-HostFromUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_rootdomain",
+      "label": "Get-RootDomain()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_convertto_normalizedurl",
+      "label": "ConvertTo-NormalizedUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_load_customcategoryrules",
+      "label": "Load-CustomCategoryRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_webcategory",
+      "label": "Get-WebCategory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainlistmatch",
+      "label": "Test-DomainListMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlpruletimewindow",
+      "label": "Test-DlpRuleTimeWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlprulematch",
+      "label": "Test-DlpRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_dlpdecision",
+      "label": "Get-DlpDecision()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_should_emitincident",
+      "label": "Should-EmitIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "label": "Get-ForegroundWindowContext()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_browserurlfromwindow",
+      "label": "Get-BrowserUrlFromWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_heartbeat",
+      "label": "Send-Heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_categoryheartbeat",
+      "label": "Send-CategoryHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "community": 3
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_domain_users_ps1",
+      "label": "deploy-domain-users.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1",
+      "source_location": "L1",
+      "community": 17
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_ensemble_ps1",
+      "label": "deploy-ensemble.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1",
+      "source_location": "L1",
+      "community": 18
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_deploy_single_user_ps1",
+      "label": "deploy-single-user.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1",
+      "source_location": "L1",
+      "community": 19
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "label": "dlp-endpoint-signals-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L1",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_endpointlog",
+      "label": "Write-EndpointLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "label": "Send-EndpointSignalHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "label": "Invoke-ClipboardEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "label": "Invoke-UsbWriteBlockEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "label": "Invoke-PrintJobEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "label": "Evaluate-ClipboardRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "label": "Evaluate-UsbRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "label": "Evaluate-PrintRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "label": "Test-LooksLikeMojibakeQuestionMarks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "label": "Normalize-OwnerForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "label": "Test-OwnerLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "label": "Normalize-PrinterForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "label": "Test-PrinterLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "label": "Get-PrintServiceEventSummary()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "label": "Get-PrintServiceDocumentFallback()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "label": "Write-PrintServiceEventTrace()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "label": "Get-BetterDocumentNameFromPrintServiceEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "community": 1
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "label": "email-outbound-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L1",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_send_emailheartbeat",
+      "label": "Send-EmailHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_send_emailincidentheartbeat",
+      "label": "Send-EmailIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_load_emailpolicy",
+      "label": "Load-EmailPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_evaluate_emailrules",
+      "label": "Evaluate-EmailRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_invoke_emailenforcement",
+      "label": "Invoke-EmailEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_initialize_outlookcom",
+      "label": "Initialize-OutlookCom()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_outlooksentitems",
+      "label": "Get-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_poll_outlooksentitems",
+      "label": "Poll-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_poll_smtpconnections",
+      "label": "Poll-SmtpConnections()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "community": 4
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_hardening_recovery_ps1",
+      "label": "hardening-recovery.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1",
+      "source_location": "L1",
+      "community": 20
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "label": "migrate-awatch-rus-paths.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L1",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_directorycontents",
+      "label": "Copy-DirectoryContents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_ifexists",
+      "label": "Copy-IfExists()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_convert_pathvalue",
+      "label": "Convert-PathValue()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "label": "Stop-AWatchTaskSet()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "label": "Get-ExistingAWatchConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "label": "Update-AWatchConfigPaths()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "community": 10
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_validate_deployment_ps1",
+      "label": "validate-deployment.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1",
+      "source_location": "L1",
+      "community": 21
+    },
+    {
+      "id": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "label": "worktime-session-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L1",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_get_config",
+      "label": "Get-Config()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_get_sessionrecords",
+      "label": "Get-SessionRecords()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "community": 11
+    },
+    {
+      "id": "pfsense_pfsense_aw_poller_py",
+      "label": "pfsense-aw-poller.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L1",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_utc_now_iso",
+      "label": "utc_now_iso()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L14",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_load_json",
+      "label": "load_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L18",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_build_ssl_context",
+      "label": "build_ssl_context()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L22",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_http_json",
+      "label": "http_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L31",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_ensure_bucket",
+      "label": "ensure_bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L44",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_send_heartbeat",
+      "label": "send_heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L58",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_normalize_headers",
+      "label": "normalize_headers()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L68",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_summarize_payload",
+      "label": "summarize_payload()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L82",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_poll_endpoint",
+      "label": "poll_endpoint()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L100",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_run_once",
+      "label": "run_once()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L173",
+      "community": 7
+    },
+    {
+      "id": "pfsense_aw_poller_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L187",
+      "community": 7
+    },
+    {
+      "id": "scripts_aggregate_dlp_events_py",
+      "label": "aggregate_dlp_events.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L1",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_bucket",
+      "label": "Bucket",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L49",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_awevent",
+      "label": "AwEvent",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L57",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection",
+      "label": "PsycopgConnection",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67",
+      "community": 0
+    },
+    {
+      "id": "protocol",
+      "label": "Protocol",
+      "file_type": "code",
+      "source_file": "",
+      "source_location": "",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection_cursor",
+      "label": ".cursor()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L68",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_psycopgconnection_commit",
+      "label": ".commit()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L71",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_utc_now",
+      "label": "utc_now()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L75",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_parse_timestamp",
+      "label": "parse_timestamp()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L79",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_format_aw_timestamp",
+      "label": "format_aw_timestamp()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L87",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_load_state",
+      "label": "load_state()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L91",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_save_state",
+      "label": "save_state()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L97",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_normalize_base_url",
+      "label": "normalize_base_url()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L102",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_aw_get_json",
+      "label": "aw_get_json()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L106",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_list_buckets",
+      "label": "list_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L113",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_bucket_stream_type",
+      "label": "bucket_stream_type()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L132",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_select_buckets",
+      "label": "select_buckets()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L140",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_build_events_path",
+      "label": "build_events_path()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L149",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_event_key",
+      "label": "event_key()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L160",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_fetch_bucket_events",
+      "label": "fetch_bucket_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L165",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_connect_sqlite",
+      "label": "connect_sqlite()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L201",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_ensure_schema",
+      "label": "ensure_schema()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L210",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_ensure_postgres_schema",
+      "label": "ensure_postgres_schema()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L258",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_first_string",
+      "label": "first_string()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L307",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_bool_as_int",
+      "label": "bool_as_int()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L315",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_event_row",
+      "label": "event_row()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L323",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_insert_events",
+      "label": "insert_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L351",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_insert_postgres_events",
+      "label": "insert_postgres_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L389",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_get_start_time",
+      "label": "get_start_time()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L416",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_parse_prefixes",
+      "label": "parse_prefixes()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L424",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_build_parser",
+      "label": "build_parser()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L431",
+      "community": 0
+    },
+    {
+      "id": "aggregate_dlp_events_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L447",
+      "community": 0
+    },
+    {
+      "id": "scripts_merge_aw_server_dbs_py",
+      "label": "merge_aw_server_dbs.py",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L1",
+      "community": 0
+    },
+    {
+      "id": "merge_aw_server_dbs_connect",
+      "label": "connect()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L10",
+      "community": 0
+    },
+    {
+      "id": "merge_aw_server_dbs_bucket_key",
+      "label": "bucket_key()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L17",
+      "community": 0
+    },
+    {
+      "id": "merge_aw_server_dbs_ensure_parent",
+      "label": "ensure_parent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L26",
+      "community": 0
+    },
+    {
+      "id": "merge_aw_server_dbs_load_existing_events",
+      "label": "load_existing_events()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L30",
+      "community": 0
+    },
+    {
+      "id": "merge_aw_server_dbs_main",
+      "label": "main()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L38",
+      "community": 0
+    },
+    {
+      "id": "windows_browser_domains_native_collector_ps1",
+      "label": "browser-domains-native-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L1",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_write_dlpincidentlog",
+      "label": "Write-DlpIncidentLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainmatch",
+      "label": "Test-DomainMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_hostfromurl",
+      "label": "Get-HostFromUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_rootdomain",
+      "label": "Get-RootDomain()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_convertto_normalizedurl",
+      "label": "ConvertTo-NormalizedUrl()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_load_customcategoryrules",
+      "label": "Load-CustomCategoryRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_webcategory",
+      "label": "Get-WebCategory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_domainlistmatch",
+      "label": "Test-DomainListMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlpruletimewindow",
+      "label": "Test-DlpRuleTimeWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_test_dlprulematch",
+      "label": "Test-DlpRuleMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_dlpdecision",
+      "label": "Get-DlpDecision()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_should_emitincident",
+      "label": "Should-EmitIncident()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "label": "Get-ForegroundWindowContext()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_get_browserurlfromwindow",
+      "label": "Get-BrowserUrlFromWindow()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_heartbeat",
+      "label": "Send-Heartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "community": 3
+    },
+    {
+      "id": "browser_domains_native_collector_send_categoryheartbeat",
+      "label": "Send-CategoryHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "community": 3
+    },
+    {
+      "id": "windows_deploy_domain_users_ps1",
+      "label": "deploy-domain-users.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-domain-users.ps1",
+      "source_location": "L1",
+      "community": 22
+    },
+    {
+      "id": "windows_deploy_ensemble_ps1",
+      "label": "deploy-ensemble.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-ensemble.ps1",
+      "source_location": "L1",
+      "community": 23
+    },
+    {
+      "id": "windows_deploy_single_user_ps1",
+      "label": "deploy-single-user.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/deploy-single-user.ps1",
+      "source_location": "L1",
+      "community": 24
+    },
+    {
+      "id": "windows_dlp_endpoint_signals_collector_ps1",
+      "label": "dlp-endpoint-signals-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L1",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_endpointlog",
+      "label": "Write-EndpointLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "label": "Send-EndpointSignalHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "label": "Send-DlpIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "label": "Get-FileSha256Hex()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_directory",
+      "label": "Ensure-Directory()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "label": "Get-IncidentScreenshotPath()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "label": "Ensure-ScreenshotTypesLoaded()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "label": "Capture-IncidentScreenshot()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "label": "Invoke-ClipboardEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "label": "Invoke-UsbWriteBlockEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "label": "Invoke-PrintJobEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "label": "Load-DlpPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "label": "Evaluate-ClipboardRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "label": "Evaluate-UsbRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "label": "Evaluate-PrintRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "label": "Test-LooksLikeMojibakeQuestionMarks()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "label": "Normalize-OwnerForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "label": "Test-OwnerLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "label": "Normalize-PrinterForMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "label": "Test-PrinterLooseMatch()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "label": "Get-PrintServiceEventSummary()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "label": "Get-PrintServiceDocumentFallback()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "label": "Write-PrintServiceEventTrace()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "community": 1
+    },
+    {
+      "id": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "label": "Get-BetterDocumentNameFromPrintServiceEvents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "community": 1
+    },
+    {
+      "id": "windows_email_outbound_collector_ps1",
+      "label": "email-outbound-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L1",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_write_collectorlog",
+      "label": "Write-CollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_stringhash",
+      "label": "Get-StringHash()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_send_emailheartbeat",
+      "label": "Send-EmailHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_send_emailincidentheartbeat",
+      "label": "Send-EmailIncidentHeartbeat()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_show_enforcementnotification",
+      "label": "Show-EnforcementNotification()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_load_emailpolicy",
+      "label": "Load-EmailPolicy()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_should_emitbycooldown",
+      "label": "Should-EmitByCooldown()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_evaluate_emailrules",
+      "label": "Evaluate-EmailRules()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_invoke_emailenforcement",
+      "label": "Invoke-EmailEnforcement()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_initialize_outlookcom",
+      "label": "Initialize-OutlookCom()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_get_outlooksentitems",
+      "label": "Get-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_poll_outlooksentitems",
+      "label": "Poll-OutlookSentItems()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "community": 4
+    },
+    {
+      "id": "email_outbound_collector_poll_smtpconnections",
+      "label": "Poll-SmtpConnections()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "community": 4
+    },
+    {
+      "id": "windows_file_operations_collector_ps1",
+      "label": "file-operations-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L1",
+      "community": 12
+    },
+    {
+      "id": "file_operations_collector_get_deploymentconfig",
+      "label": "Get-DeploymentConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L30",
+      "community": 12
+    },
+    {
+      "id": "file_operations_collector_write_filecollectorlog",
+      "label": "Write-FileCollectorLog()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L38",
+      "community": 12
+    },
+    {
+      "id": "file_operations_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L46",
+      "community": 12
+    },
+    {
+      "id": "file_operations_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L61",
+      "community": 12
+    },
+    {
+      "id": "file_operations_collector_send_fileoperationevent",
+      "label": "Send-FileOperationEvent()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L77",
+      "community": 12
+    },
+    {
+      "id": "windows_hardening_recovery_ps1",
+      "label": "hardening-recovery.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/hardening-recovery.ps1",
+      "source_location": "L1",
+      "community": 25
+    },
+    {
+      "id": "windows_migrate_awatch_rus_paths_ps1",
+      "label": "migrate-awatch-rus-paths.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L1",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_directorycontents",
+      "label": "Copy-DirectoryContents()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_copy_ifexists",
+      "label": "Copy-IfExists()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_convert_pathvalue",
+      "label": "Convert-PathValue()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "label": "Stop-AWatchTaskSet()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "label": "Get-ExistingAWatchConfig()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "community": 10
+    },
+    {
+      "id": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "label": "Update-AWatchConfigPaths()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "community": 10
+    },
+    {
+      "id": "windows_validate_deployment_ps1",
+      "label": "validate-deployment.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/validate-deployment.ps1",
+      "source_location": "L1",
+      "community": 26
+    },
+    {
+      "id": "windows_worktime_session_collector_ps1",
+      "label": "worktime-session-collector.ps1",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L1",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_get_config",
+      "label": "Get-Config()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_invoke_awjsonpost",
+      "label": "Invoke-AwJsonPost()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_ensure_bucket",
+      "label": "Ensure-Bucket()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "community": 11
+    },
+    {
+      "id": "worktime_session_collector_get_sessionrecords",
+      "label": "Get-SessionRecords()",
+      "file_type": "code",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "community": 11
+    }
+  ],
+  "edges": [
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_walk",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L383",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L405",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L410",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L418",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L424",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L429",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L438",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L442",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L476",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L487",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L495",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L527",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L536",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L560",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L573",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L582",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L595",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L612",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L630",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L643",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L675",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L680",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L722",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L733",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L755",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L761",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hosthasbucketprefix",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L810",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L839",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L855",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L911",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L932",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L973",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1007",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1031",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1052",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1087",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1106",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1129",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1174",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1220",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1249",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1318",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1348",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1394",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1432",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1475",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1489",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1494",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1517",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1535",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1552",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1578",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1625",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1642",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1654",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_scheduleapplypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1673",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_walk",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L286",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_translateattributes",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L399",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L402",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensureawbucket",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L477",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_saveawheartbeat",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L489",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_loadbucketevents",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getrulematchfields",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L506",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L529",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L530",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L539",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L541",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapseruleevents",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L553",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapsereviewevents",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L566",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L574",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_findprimarynavlist",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L634",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L644",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L645",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L646",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L651",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L653",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L656",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L659",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L734",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L741",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L743",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ispveactivityroute",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L758",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_buildhostbucketmap",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L796",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_matchhostgroup",
+      "target": "aw_ru_patch_hosthasbucketprefix",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L812",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L856",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L858",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L867",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L876",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L877",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L912",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L928",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L929",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L933",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L939",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L942",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L944",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L968",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L969",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L970",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L975",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L979",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L984",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L990",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L999",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1009",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1010",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1015",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1021",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1033",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1037",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1042",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1047",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1053",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1059",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1064",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1066",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1075",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1076",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1091",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1096",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1108",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1111",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1116",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1119",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1130",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1140",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1140",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1145",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1162",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1163",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1163",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1165",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1187",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1187",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1209",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1210",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1210",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1211",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1221",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1226",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1226",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1229",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1236",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1240",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1250",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1251",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1252",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1266",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1302",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1305",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1308",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1321",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1328",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1354",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1380",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1395",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1396",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1428",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1433",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1434",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1448",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1460",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_gettrendshostfromsettings",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1480",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_shouldredirecttrends",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1490",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1495",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1503",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1504",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1526",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1531",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1536",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1538",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_islikelyclienthost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1547",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1560",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1590",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1627",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1655",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1656",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1657",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1658",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1659",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_walk",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1660",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1661",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1662",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1663",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1664",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1665",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1666",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1667",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1668",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1669",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1670",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_scheduleapplypatch",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/aw-server/aw-ru-patch.js",
+      "source_location": "L1678",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "time",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "logging",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "requests",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "prometheus_client",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "aw_activitywatch_activitywatchexporter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L31",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_init",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L32",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L62",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L72",
+      "weight": 1.0
+    },
+    {
+      "source": "grafana_1c_sql_exporter_collectors_aw_activitywatch_py",
+      "target": "aw_activitywatch_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L125",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L95",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_main",
+      "target": "aw_activitywatch_activitywatchexporter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L126",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_main",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_39",
+      "target": "aw_activitywatch_activitywatchexporter_get_buckets",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_49",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_events",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L49",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_63",
+      "target": "aw_activitywatch_activitywatchexporter_get_bucket_info",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_activitywatch_rationale_73",
+      "target": "aw_activitywatch_activitywatchexporter_collect_metrics",
+      "relation": "rationale_for",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/grafana-1c/sql-exporter/collectors/aw_activitywatch.py",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L269",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_walk",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L281",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L293",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L305",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L348",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L360",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L369",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L373",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L400",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L404",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L408",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L414",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L444",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L448",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L477",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L485",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L493",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L505",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L517",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L526",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L537",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L550",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L563",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L585",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L593",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L602",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L620",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L665",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L670",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L699",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L710",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L732",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L738",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L757",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L773",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L788",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L804",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L860",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L881",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L922",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L956",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L980",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1001",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1036",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1055",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1078",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1123",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1169",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1198",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1267",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1297",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1343",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1381",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1424",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1431",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1437",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1442",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1465",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1483",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1501",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1527",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1589",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1601",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_aw_server_aw_ru_patch_js",
+      "target": "aw_ru_patch_scheduleapplypatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1620",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_walk",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L286",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_translateattributes",
+      "target": "aw_ru_patch_replacetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L299",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L380",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L390",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getdlphostfromsettings",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L392",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensureawbucket",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_saveawheartbeat",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L479",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_loadbucketevents",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L486",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getrulematchfields",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getruleid",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L520",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L529",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getreviewid",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L531",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapseruleevents",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_collapsereviewevents",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L556",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rulematchesevent",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L567",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_findprimarynavlist",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L634",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L635",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_removebaddlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L636",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_getdlphref",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L641",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_updatedlplinks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L643",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_findprimarynavlist",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L646",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpnavigation",
+      "target": "aw_ru_patch_builddlpnavitem",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L649",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L711",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_awapijson",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L718",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensurehostgroupsdata",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ispveactivityroute",
+      "target": "aw_ru_patch_ispvelikehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L735",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_buildhostbucketmap",
+      "target": "aw_ru_patch_extracthostfrombucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L765",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_getdefaulthostgroupsconfig",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L805",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostbucketmap",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L807",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_matchhostgroup",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L816",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_buildhostlink",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L825",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderhostgroupcards",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L826",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ishomeroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L861",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L877",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injecthostgroupscenter",
+      "target": "aw_ru_patch_renderhostgroupcards",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L878",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L882",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_rulematchesevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L888",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L891",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L893",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_binddlprowactions",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L917",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L918",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlptablerows",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L919",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L924",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L928",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L933",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L939",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpreview",
+      "target": "aw_ru_patch_savedlpincident",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L948",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L958",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L959",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L964",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlpincident",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L970",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L982",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L986",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_generatedlpid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L991",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_savedlprule",
+      "target": "aw_ru_patch_getrulematchfields",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L996",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1002",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_builddlpkey",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1008",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlpreview",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1013",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1014",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1014",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1015",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_savedlprule",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1024",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_binddlprowactions",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1025",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1038",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1040",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpruleenabled",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1045",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_ensureawbucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1057",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_saveawheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1060",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1065",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_setdlpreviewarchived",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1068",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1079",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_getruleid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1089",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_serializerulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1094",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_setdlpruleenabled",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1111",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1112",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1112",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlprulemanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1114",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1124",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1136",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_getreviewid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1136",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_setdlpreviewarchived",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1158",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1159",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1159",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_renderdlpreviewmanager",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1160",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getsuppressionstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1170",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1175",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapseruleevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1178",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_collapsereviewevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1185",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1189",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_isdlpsignalbucketroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1199",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlpbucketidfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1200",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_getdlphostfrombucketid",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1201",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1215",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_refreshdlpcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1248",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlptablerows",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1251",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlprulemanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1254",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpreviewcenter",
+      "target": "aw_ru_patch_renderdlpreviewmanager",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1257",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1270",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1277",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_loadbucketevents",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1303",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_refreshpveauditcenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1329",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_ispveactivityroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1344",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1345",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectpveauditcenter",
+      "target": "aw_ru_patch_refreshpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1377",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_isalertsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1382",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_getcurrenthostfromhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1383",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_escapehtml",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1397",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_injectdlpalertscenter",
+      "target": "aw_ru_patch_refreshdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1409",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_shouldredirecttrends",
+      "target": "aw_ru_patch_gettrendspath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1438",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_shouldredirecttrends",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1443",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1451",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_redirectbaretrendsroute",
+      "target": "aw_ru_patch_gettrendshostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1452",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_getdlphostfromsettings",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1474",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_ensuresettingshost",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1479",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_gethostgroupsstate",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1484",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "target": "aw_ru_patch_normalizetext",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1486",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1509",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "target": "aw_ru_patch_rewriteunknowncategorybuilderquerybody",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1538",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "target": "aw_ru_patch_getpreferredwindowhostfrombuckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1574",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_enforcesafeactivityviewforpvehost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1602",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensuresettingshost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1603",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_ensurehostgroupsdata",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1604",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_installcategorybuildernetworkpatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1605",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectstyles",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1606",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_walk",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1607",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_translateattributes",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1608",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_hidenoisenavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1609",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchactivityheading",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1610",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_patchcategorybuilderhostlabel",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1611",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectpveauditcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1612",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpnavigation",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1613",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpreviewcenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1614",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injectdlpalertscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1615",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_injecthostgroupscenter",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1616",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_applypatch",
+      "target": "aw_ru_patch_redirectbaretrendsroute",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1617",
+      "weight": 1.0
+    },
+    {
+      "source": "aw_ru_patch_scheduleapplypatch",
+      "target": "aw_ru_patch_applypatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js",
+      "source_location": "L1625",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_dlpincidentlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_hostfromurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_rootdomain",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_customcategoryrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_webcategory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_dlpdecision",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_should_emitincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_browserurlfromwindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_categoryheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_customcategoryrules",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L266",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_webcategory",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L279",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_domainlistmatch",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_dlppolicy",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L341",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_dlpdecision",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L470",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L510",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L604",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L611",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L628",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_browserurlfromwindow",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L678",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_categoryheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1",
+      "source_location": "L753",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_ensure_bucket",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L189",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L196",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L209",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L213",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L240",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L249",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L267",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L300",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L342",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L420",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L423",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L446",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L455",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L463",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L499",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L500",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L509",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L569",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L605",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L662",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L692",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L695",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L696",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L700",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_load_emailpolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_initialize_outlookcom",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_smtpconnections",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_ensure_bucket",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L98",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L110",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L138",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_load_emailpolicy",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L283",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L289",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L290",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L298",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_initialize_outlookcom",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L329",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_get_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L409",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/email-outbound-collector.ps1",
+      "source_location": "L468",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_directorycontents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_ifexists",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L111",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_config",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "install_kit_awindows_20260427_211240_windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_sessionrecords",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "weight": 1.0
+    },
+    {
+      "source": "worktime_session_collector_ensure_bucket",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1",
+      "source_location": "L50",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "ssl",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "sys",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "time",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_error",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_parse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "urllib_request",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L14",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_load_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L18",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_build_ssl_context",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L22",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L31",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L44",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L58",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_normalize_headers",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L68",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_summarize_payload",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L82",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_poll_endpoint",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L100",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_run_once",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_pfsense_aw_poller_py",
+      "target": "pfsense_aw_poller_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L187",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_ensure_bucket",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L45",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_send_heartbeat",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L59",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_normalize_headers",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L106",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_http_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L118",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L128",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_summarize_payload",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_poll_endpoint",
+      "target": "pfsense_aw_poller_send_heartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L145",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_run_once",
+      "target": "pfsense_aw_poller_build_ssl_context",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L179",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_run_once",
+      "target": "pfsense_aw_poller_poll_endpoint",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L183",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_load_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L193",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_run_once",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L197",
+      "weight": 1.0
+    },
+    {
+      "source": "pfsense_aw_poller_main",
+      "target": "pfsense_aw_poller_utc_now_iso",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/pfsense/pfsense-aw-poller.py",
+      "source_location": "L198",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "os",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "sqlite3",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "sys",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_error",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_parse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L8",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "urllib_request",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L9",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "collections_abc",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "dataclasses",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L11",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "datetime",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L12",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L13",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "typing",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L14",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L49",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_awevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L57",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_psycopgconnection",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "protocol",
+      "relation": "inherits",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L68",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_psycopgconnection",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "method",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L71",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L75",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_parse_timestamp",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L79",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L87",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_load_state",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_save_state",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L97",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_normalize_base_url",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L106",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_list_buckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bucket_stream_type",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_select_buckets",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L140",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_build_events_path",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L149",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L160",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_fetch_bucket_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_connect_sqlite",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L201",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_ensure_schema",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L210",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_ensure_postgres_schema",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_first_string",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_bool_as_int",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L323",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_insert_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L351",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_insert_postgres_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L389",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_get_start_time",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_parse_prefixes",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L424",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_build_parser",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L431",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_aggregate_dlp_events_py",
+      "target": "aggregate_dlp_events_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L447",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_aw_get_json",
+      "target": "aggregate_dlp_events_normalize_base_url",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_list_buckets",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L114",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_list_buckets",
+      "target": "aggregate_dlp_events_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_select_buckets",
+      "target": "aggregate_dlp_events_bucket_stream_type",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L143",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_build_events_path",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_aw_get_json",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L174",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_build_events_path",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L174",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L186",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_fetch_bucket_events",
+      "target": "aggregate_dlp_events_awevent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L255",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_postgres_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L259",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_ensure_postgres_schema",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L304",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_event_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L325",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_first_string",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L331",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_event_row",
+      "target": "aggregate_dlp_events_bool_as_int",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L353",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L353",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_events",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L385",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L396",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L396",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_ensure_postgres_schema",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L405",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_psycopgconnection_cursor",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L406",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_event_row",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L408",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L412",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_get_start_time",
+      "target": "aggregate_dlp_events_parse_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L418",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_get_start_time",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_build_parser",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L448",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_load_state",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L450",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_get_start_time",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L451",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_utc_now",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L452",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_select_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_list_buckets",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_fetch_bucket_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L457",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_format_aw_timestamp",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L464",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_insert_postgres_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_connect_sqlite",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L483",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_ensure_schema",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L485",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_insert_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L486",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_main",
+      "target": "aggregate_dlp_events_save_state",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "argparse",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L2",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "json",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L3",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "os",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L4",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "shutil",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L5",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "sqlite3",
+      "relation": "imports",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L6",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "pathlib",
+      "relation": "imports_from",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L7",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_bucket_key",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L17",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_ensure_parent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L26",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_load_existing_events",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "scripts_merge_aw_server_dbs_py",
+      "target": "merge_aw_server_dbs_main",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_ensure_parent",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L52",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L58",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_bucket_key",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "merge_aw_server_dbs_load_existing_events",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L42",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_write_dlpincidentlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L123",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L137",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_hostfromurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L152",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_rootdomain",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L173",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L194",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_customcategoryrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L225",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_webcategory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L296",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L315",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L337",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L398",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_dlpdecision",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_should_emitincident",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L478",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L496",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L547",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L565",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L572",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L587",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L596",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_foregroundwindowcontext",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L633",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_get_browserurlfromwindow",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L661",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_heartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L714",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_browser_domains_native_collector_ps1",
+      "target": "browser_domains_native_collector_send_categoryheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L739",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_customcategoryrules",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L266",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_webcategory",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L279",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_domainlistmatch",
+      "target": "browser_domains_native_collector_test_domainmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L307",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_load_dlppolicy",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L341",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_dlpruletimewindow",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L416",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_test_dlprulematch",
+      "target": "browser_domains_native_collector_test_domainlistmatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L421",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_dlpdecision",
+      "target": "browser_domains_native_collector_test_dlprulematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L470",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L510",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_dlpincidentheartbeat",
+      "target": "browser_domains_native_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L515",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L603",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L604",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L611",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L624",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_capture_incidentscreenshot",
+      "target": "browser_domains_native_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L628",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_get_browserurlfromwindow",
+      "target": "browser_domains_native_collector_convertto_normalizedurl",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L678",
+      "weight": 1.0
+    },
+    {
+      "source": "browser_domains_native_collector_send_categoryheartbeat",
+      "target": "browser_domains_native_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/browser-domains-native-collector.ps1",
+      "source_location": "L753",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L16",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L24",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L36",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L91",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L132",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L150",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L157",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L172",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L244",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L258",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L366",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L384",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L432",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L467",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L513",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L519",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L538",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L551",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L564",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L577",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L597",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L647",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_dlp_endpoint_signals_collector_ps1",
+      "target": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L676",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_ensure_bucket",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L63",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L74",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_endpointsignalheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L102",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L107",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "target": "dlp_endpoint_signals_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L129",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_directory",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L188",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_ensure_screenshottypesloaded",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L189",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_incidentscreenshotpath",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L196",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_get_filesha256hex",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L209",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_capture_incidentscreenshot",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L213",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L240",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L249",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L267",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L300",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_load_dlppolicy",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L342",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_invoke_clipboardenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L419",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L420",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L423",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_clipboardrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L428",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L446",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_invoke_usbwriteblockenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L454",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L455",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_usbrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L463",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L491",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_invoke_printjobenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L499",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L500",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_send_dlpincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L503",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_evaluate_printrules",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L509",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_ownerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L543",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "target": "dlp_endpoint_signals_collector_normalize_printerformatch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L569",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L605",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "target": "dlp_endpoint_signals_collector_write_endpointlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L662",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printserviceeventsummary",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L692",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_get_printservicedocumentfallback",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L693",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_ownerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L695",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_printerloosematch",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L696",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_write_printserviceeventtrace",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L700",
+      "weight": 1.0
+    },
+    {
+      "source": "dlp_endpoint_signals_collector_get_betterdocumentnamefromprintserviceevents",
+      "target": "dlp_endpoint_signals_collector_test_lookslikemojibakequestionmarks",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/dlp-endpoint-signals-collector.ps1",
+      "source_location": "L720",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L39",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L47",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L56",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L65",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L81",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L92",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L113",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L141",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_load_emailpolicy",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L165",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L202",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L222",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L302",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_initialize_outlookcom",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L324",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L338",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_outlooksentitems",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L387",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_email_outbound_collector_ps1",
+      "target": "email_outbound_collector_poll_smtpconnections",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L437",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_ensure_bucket",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L98",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L110",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L122",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_send_emailincidentheartbeat",
+      "target": "email_outbound_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L138",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_load_emailpolicy",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L181",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_should_emitbycooldown",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L274",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_invoke_emailenforcement",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L282",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_show_enforcementnotification",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L283",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_send_emailincidentheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L289",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L290",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_evaluate_emailrules",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L298",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_invoke_emailenforcement",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L311",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_initialize_outlookcom",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L329",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_get_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L382",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_outlooksentitems",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L388",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_get_stringhash",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L395",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L397",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L409",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_outlooksentitems",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L411",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_send_emailheartbeat",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L458",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_write_collectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L466",
+      "weight": 1.0
+    },
+    {
+      "source": "email_outbound_collector_poll_smtpconnections",
+      "target": "email_outbound_collector_evaluate_emailrules",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/email-outbound-collector.ps1",
+      "source_location": "L468",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_get_deploymentconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_write_filecollectorlog",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L38",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L46",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_file_operations_collector_ps1",
+      "target": "file_operations_collector_send_fileoperationevent",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L77",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_invoke_awjsonpost",
+      "target": "file_operations_collector_write_filecollectorlog",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L57",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_ensure_bucket",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L73",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_send_fileoperationevent",
+      "target": "file_operations_collector_ensure_bucket",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L86",
+      "weight": 1.0
+    },
+    {
+      "source": "file_operations_collector_send_fileoperationevent",
+      "target": "file_operations_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/file-operations-collector.ps1",
+      "source_location": "L109",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_directorycontents",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L19",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_copy_ifexists",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L35",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L48",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_stop_awatchtaskset",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L61",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_get_existingawatchconfig",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L67",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_migrate_awatch_rus_paths_ps1",
+      "target": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L88",
+      "weight": 1.0
+    },
+    {
+      "source": "migrate_awatch_rus_paths_update_awatchconfigpaths",
+      "target": "migrate_awatch_rus_paths_convert_pathvalue",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/migrate-awatch-rus-paths.ps1",
+      "source_location": "L111",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_config",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L10",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L20",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_ensure_bucket",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L30",
+      "weight": 1.0
+    },
+    {
+      "source": "windows_worktime_session_collector_ps1",
+      "target": "worktime_session_collector_get_sessionrecords",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L53",
+      "weight": 1.0
+    },
+    {
+      "source": "worktime_session_collector_ensure_bucket",
+      "target": "worktime_session_collector_invoke_awjsonpost",
+      "relation": "calls",
+      "confidence": "EXTRACTED",
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/windows/worktime-session-collector.ps1",
+      "source_location": "L50",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_connect_sqlite",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L203",
+      "weight": 1.0
+    },
+    {
+      "source": "aggregate_dlp_events_insert_postgres_events",
+      "target": "merge_aw_server_dbs_connect",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/aggregate_dlp_events.py",
+      "source_location": "L404",
+      "weight": 1.0
+    },
+    {
+      "source": "merge_aw_server_dbs_main",
+      "target": "aggregate_dlp_events_psycopgconnection_commit",
+      "relation": "calls",
+      "confidence": "INFERRED",
+      "confidence_score": 0.8,
+      "source_file": "/mnt/usb_hdd2/Projects/ActivityWatch-Russian/scripts/merge_aw_server_dbs.py",
+      "source_location": "L117",
+      "weight": 1.0
+    }
+  ],
+  "metadata": {
+    "source": "AST only",
+    "total_files": 29,
+    "ast_nodes": 404,
+    "ast_edges": 933,
+    "communities": 27
+  }
+}
\ No newline at end of file
diff --git a/install-kit-awindows-20260427-211240/ansible/README.md b/install-kit-awindows-20260427-211240/ansible/README.md
index 3c9d42a..b22fc6c 100644
--- a/install-kit-awindows-20260427-211240/ansible/README.md
+++ b/install-kit-awindows-20260427-211240/ansible/README.md
@@ -31,15 +31,6 @@ cd ansible
 ansible-playbook -i inventory.ini deploy_aw_server.yml
 ```
 
-## Секреты (пароли) безопасно
-
-Рекомендуемый способ не хранить пароли в репозитории — перед запуском экспортировать их в переменные окружения:
-
-- Linux `aw_server` (SSH пароль root): `AW_SSH_PASSWORD`
-- Windows `aw_windows` (WinRM пароль): `AW_WINRM_PASSWORD`
-
-В `group_vars/aw_server.yml` и `group_vars/windows.yml` они читаются через `lookup('env', ...)`.
-
 ## Полный установочный playbook (всё за один запуск)
 
 Если нужно прогнать полный цикл одной командой:
@@ -158,13 +149,3 @@ Playbook:
 - Для полного сценария CT создаётся автоматически через `pct create`.
 - На Windows/RDP host развёрнуты AFK/window watchers, browser domain collector, DLP endpoint collector и worktime session collector.
 - Проверочный JSON-отчёт Windows playbook должен иметь `overallOk=true`.
-
-## Prod rollout одной командой
-
-Для ручного запуска с dry-run и логированием используйте:
-
-```bash
-bash scripts/prod_rollout.sh
-```
-
-Скрипт попросит `AW_SSH_PASSWORD` и `AW_WINRM_PASSWORD` интерактивно (ввод скрыт) и сложит логи в `.rollout-logs/`.
diff --git a/install-kit-awindows-20260427-211240/ansible/deploy_aw_server.yml b/install-kit-awindows-20260427-211240/ansible/deploy_aw_server.yml
index 996eb4b..b136df7 100644
--- a/install-kit-awindows-20260427-211240/ansible/deploy_aw_server.yml
+++ b/install-kit-awindows-20260427-211240/ansible/deploy_aw_server.yml
@@ -54,11 +54,6 @@
         - "{{ aw_server_webui_dir }}"
         - "{{ aw_server_webui_dir }}/js"
         - "{{ aw_server_data_dir }}"
-        - "{{ aw_server_db_path | dirname }}"
-        - "{{ aw_server_data_dir }}/.config"
-        - "{{ aw_server_data_dir }}/.config/activitywatch"
-        - "{{ aw_server_data_dir }}/.config/activitywatch/aw-server-rust"
-        - "{{ aw_server_data_dir }}/backups"
         - "{{ aw_server_log_dir }}"
         - /etc/activitywatch
         - "{{ aw_bootstrap_dir }}"
@@ -79,147 +74,100 @@
         - "{{ aw_server_webui_dir }}"
         - "{{ aw_server_webui_dir }}/js"
         - "{{ aw_server_data_dir }}"
-        - "{{ aw_server_db_path | dirname }}"
-        - "{{ aw_server_data_dir }}/.config"
-        - "{{ aw_server_data_dir }}/.config/activitywatch"
-        - "{{ aw_server_data_dir }}/.config/activitywatch/aw-server-rust"
-        - "{{ aw_server_data_dir }}/backups"
         - "{{ aw_server_log_dir }}"
 
-    - name: (Check mode) Пропустить установку релиза ActivityWatch
-      ansible.builtin.debug:
-        msg: "ansible_check_mode=true: download/unarchive/install of ActivityWatch release is skipped."
-      when: ansible_check_mode
+    - name: Скачать архив релиза ActivityWatch
+      ansible.builtin.get_url:
+        url: "{{ aw_server_download_url }}"
+        dest: "{{ aw_archive_path }}"
+        mode: "0644"
 
-    - name: Установить релиз ActivityWatch (download/unarchive/install)
-      when: not ansible_check_mode
-      block:
-        - name: Скачать архив релиза ActivityWatch
-          ansible.builtin.get_url:
-            url: "{{ aw_server_download_url }}"
-            dest: "{{ aw_archive_path }}"
-            mode: "0644"
+    - name: Распаковать релиз ActivityWatch
+      ansible.builtin.unarchive:
+        src: "{{ aw_archive_path }}"
+        dest: "{{ aw_release_dir }}"
+        remote_src: true
+        extra_opts: ["-o"]
 
-        - name: Распаковать релиз ActivityWatch
-          ansible.builtin.unarchive:
-            src: "{{ aw_archive_path }}"
-            dest: "{{ aw_release_dir }}"
-            remote_src: true
-            extra_opts: ["-o"]
+    - name: Найти распакованный каталог ActivityWatch
+      ansible.builtin.find:
+        paths: "{{ aw_release_dir }}"
+        file_type: directory
+        patterns: "activitywatch*"
+      register: aw_release_find
 
-        - name: Найти распакованный каталог ActivityWatch
-          ansible.builtin.find:
-            paths: "{{ aw_release_dir }}"
-            recurse: true
-            file_type: directory
-            patterns: "activitywatch*"
-          register: aw_release_find
+    - name: Найти бинарный файл AW server
+      ansible.builtin.find:
+        paths: "{{ aw_release_dir }}"
+        file_type: file
+        patterns:
+          - aw-server-rust
+          - aw-server
+      register: aw_server_binary_find
 
-        - name: Найти бинарный файл AW server
-          ansible.builtin.find:
-            paths: "{{ aw_release_dir }}"
-            recurse: true
-            file_type: file
-            patterns:
-              - aw-server-rust
-              - aw-server
-          register: aw_server_binary_find
+    - name: Найти каталог WebUI
+      ansible.builtin.find:
+        paths: "{{ aw_release_dir }}"
+        file_type: directory
+        patterns:
+          - aw-webui
+          - webui
+      register: aw_webui_dir_find
 
-        - name: Найти index.html WebUI
-          ansible.builtin.find:
-            paths: "{{ aw_release_dir }}"
-            recurse: true
-            file_type: file
-            patterns:
-              - index.html
-          register: aw_webui_index_find
+    - name: Сохранить пути распакованного релиза
+      ansible.builtin.set_fact:
+        aw_release_extracted: "{{ (aw_release_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first) | default('') }}"
+        aw_server_binary_path: "{{ (aw_server_binary_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first) | default('') }}"
+        aw_webui_source_path: "{{ (aw_webui_dir_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first) | default('') }}"
 
-        - name: Сохранить пути распакованного релиза (binary + webui index)
-          ansible.builtin.set_fact:
-            aw_release_extracted: "{{ (aw_release_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first) | default('') }}"
-            aw_server_binary_path: >-
-              {{
-                (
-                  (
-                    (aw_server_binary_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list)
-                    | select('match', '.*/aw-server-rust$') | list | first
-                  )
-                  | default(
-                      (
-                        (aw_server_binary_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first)
-                      ),
-                      true
-                    )
-                ) | default('')
-              }}
-            aw_webui_index_path: >-
-              {{
-                (
-                  (
-                    (aw_webui_index_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list)
-                    | select('search', '/static/index\\.html$') | list | first
-                  )
-                  | default(
-                      (
-                        (aw_webui_index_find.files | default([]) | sort(attribute='path') | map(attribute='path') | list | first)
-                      ),
-                      true
-                    )
-                ) | default('')
-              }}
+    - name: Проверить, что компоненты релиза найдены
+      ansible.builtin.assert:
+        that:
+          - aw_release_extracted is defined
+          - aw_release_extracted | length > 0
+          - aw_server_binary_path is defined
+          - aw_server_binary_path | length > 0
+          - aw_webui_source_path is defined
+          - aw_webui_source_path | length > 0
+        fail_msg: "Не удалось найти бинарный файл или WebUI в распакованном релизе ActivityWatch."
 
-        - name: Сохранить каталог WebUI (dirname index.html)
-          ansible.builtin.set_fact:
-            aw_webui_source_path: "{{ aw_webui_index_path | dirname }}"
+    - name: Создать каталог установленного релиза
+      ansible.builtin.file:
+        path: "{{ aw_release_install_dir }}"
+        state: directory
+        owner: "{{ aw_server_user }}"
+        group: "{{ aw_server_group }}"
+        mode: "0755"
 
-        - name: Проверить, что компоненты релиза найдены
-          ansible.builtin.assert:
-            that:
-              - aw_release_extracted is defined
-              - aw_release_extracted | length > 0
-              - aw_server_binary_path is defined
-              - aw_server_binary_path | length > 0
-              - aw_webui_source_path is defined
-              - aw_webui_source_path | length > 0
-            fail_msg: "Не удалось найти бинарный файл или WebUI в распакованном релизе ActivityWatch."
+    - name: Установить бинарный файл AW server
+      ansible.builtin.copy:
+        remote_src: true
+        src: "{{ aw_server_binary_path }}"
+        dest: "{{ aw_release_install_dir }}/aw-server-rust"
+        owner: "{{ aw_server_user }}"
+        group: "{{ aw_server_group }}"
+        mode: "0755"
 
-        - name: Создать каталог установленного релиза
-          ansible.builtin.file:
-            path: "{{ aw_release_install_dir }}"
-            state: directory
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0755"
+    - name: Создать ссылку на активный бинарный файл AW server
+      ansible.builtin.file:
+        src: "{{ aw_release_install_dir }}/aw-server-rust"
+        dest: /opt/activitywatch/bin/aw-server-rust
+        owner: "{{ aw_server_user }}"
+        group: "{{ aw_server_group }}"
+        state: link
+        force: true
 
-        - name: Установить бинарный файл AW server
-          ansible.builtin.copy:
-            remote_src: true
-            src: "{{ aw_server_binary_path }}"
-            dest: "{{ aw_release_install_dir }}/aw-server-rust"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0755"
+    - name: Синхронизировать WebUI в RU каталог
+      ansible.builtin.command:
+        cmd: "rsync -a {{ aw_webui_source_path }}/ {{ aw_server_webui_dir }}/"
 
-        - name: Создать ссылку на активный бинарный файл AW server
-          ansible.builtin.file:
-            src: "{{ aw_release_install_dir }}/aw-server-rust"
-            dest: /opt/activitywatch/bin/aw-server-rust
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            state: link
-            force: true
-
-        - name: Синхронизировать WebUI в RU каталог
-          ansible.builtin.command:
-            cmd: "rsync -a {{ aw_webui_source_path }}/ {{ aw_server_webui_dir }}/"
-
-        - name: Настроить владельца файлов /opt/activitywatch
-          ansible.builtin.file:
-            path: /opt/activitywatch
-            state: directory
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            recurse: true
+    - name: Настроить владельца файлов /opt/activitywatch
+      ansible.builtin.file:
+        path: /opt/activitywatch
+        state: directory
+        owner: "{{ aw_server_user }}"
+        group: "{{ aw_server_group }}"
+        recurse: true
 
     - name: Установить systemd service из шаблона репозитория
       ansible.builtin.copy:
@@ -236,401 +184,143 @@
         - Перезагрузить systemd
         - Перезапустить activitywatch
 
-    - name: (Check mode) Пропустить WebUI patch и запуск сервиса
-      ansible.builtin.debug:
-        msg: "ansible_check_mode=true: WebUI patch + service start + API checks are skipped."
-      when: ansible_check_mode
-
-    - name: Применить WebUI RU patch и запустить сервис
-      when: not ansible_check_mode
-      block:
-        - name: Скопировать RU patch файлы WebUI из репозитория
-          ansible.builtin.copy:
-            src: "{{ item.src }}"
-            dest: "{{ item.dest }}"
-            mode: "{{ item.mode }}"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-          loop:
-            - { src: "{{ aw_repo_root }}/aw-server/aw-ru-patch.js", dest: "{{ aw_server_webui_dir }}/js/ru-patch-v5.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-sw-cleanup.js", dest: "{{ aw_server_webui_dir }}/js/sw-cleanup.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-worktime-panel.js", dest: "{{ aw_server_webui_dir }}/js/aw-worktime-panel.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-host-groups.json", dest: "{{ aw_server_webui_dir }}/js/aw-host-groups.json", mode: "0644" }
-
-        - name: Создать каталог /root/bootstrap для apply_webui_ru_patch.sh
-          ansible.builtin.file:
-            path: /root/bootstrap
-            state: directory
-            mode: "0755"
-
-        - name: Скопировать RU patch файлы для apply_webui_ru_patch.sh (хотфиксы compiled JS чанков)
-          ansible.builtin.copy:
-            src: "{{ item.src }}"
-            dest: "{{ item.dest }}"
-            mode: "{{ item.mode }}"
-          loop:
-            - { src: "{{ aw_repo_root }}/aw-server/aw-ru-patch.js", dest: "/root/bootstrap/aw-ru-patch.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-sw-cleanup.js", dest: "/root/bootstrap/aw-sw-cleanup.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-worktime-panel.js", dest: "/root/bootstrap/aw-worktime-panel.js", mode: "0644" }
-            - { src: "{{ aw_repo_root }}/aw-server/aw-host-groups.json", dest: "/root/bootstrap/aw-host-groups.json", mode: "0644" }
-
-        - name: Скопировать apply_webui_ru_patch.sh скрипт
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/apply_webui_ru_patch.sh"
-            dest: /opt/activitywatch/aw-server/apply_webui_ru_patch.sh
-            mode: "0755"
-
-        - name: Записать /etc/activitywatch/aw-server.env перед хотфиксами
-          ansible.builtin.copy:
-            dest: /etc/activitywatch/aw-server.env
-            mode: "0640"
-            owner: root
-            group: root
-            content: |
-              AW_SERVER_BIND_HOST={{ aw_server_bind_host }}
-              AW_SERVER_PORT={{ aw_server_port }}
-              AW_SERVER_DATA_DIR={{ aw_server_data_dir }}
-              AW_SERVER_DB_PATH={{ aw_server_db_path }}
-              AW_SERVER_LOG_DIR={{ aw_server_log_dir }}
-              AW_SERVER_WEBUI_DIR={{ aw_server_webui_dir }}
-              AW_SERVER_USER={{ aw_server_user }}
-              AW_SERVER_GROUP={{ aw_server_group }}
-              AW_WORKTIME_REPORT_BASE={{ aw_worktime_report_base }}
-              AW_WORKTIME_TZ={{ aw_worktime_timezone }}
-              XDG_DATA_HOME={{ aw_server_data_dir }}/.local/share
-              XDG_CONFIG_HOME={{ aw_server_data_dir }}/.config
-
-        - name: Установить скрипт AW worktime API
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/aw-worktime-api.py"
-            dest: /usr/local/bin/aw-worktime-api.py
-            owner: root
-            group: root
-            mode: "0755"
-
-        - name: Установить systemd unit AW worktime API
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/aw-worktime-api.service"
-            dest: /etc/systemd/system/aw-worktime-api.service
-            owner: root
-            group: root
-            mode: "0644"
-
-        - name: Установить скрипт AW worktime UI bridge
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/aw-worktime-ui-bridge.py"
-            dest: /usr/local/bin/aw-worktime-ui-bridge.py
-            owner: root
-            group: root
-            mode: "0755"
-
-        - name: Установить systemd unit AW worktime UI bridge
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/aw-worktime-ui-bridge.service"
-            dest: /etc/systemd/system/aw-worktime-ui-bridge.service
-            owner: root
-            group: root
-            mode: "0644"
-
-        - name: Установить systemd timer AW worktime UI bridge
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/aw-server/aw-worktime-ui-bridge.timer"
-            dest: /etc/systemd/system/aw-worktime-ui-bridge.timer
-            owner: root
-            group: root
-            mode: "0644"
-
-        - name: Перезагрузить systemd после установки AW worktime API
-          ansible.builtin.systemd:
-            daemon_reload: true
-
-        - name: Включить и перезапустить AW worktime API
-          ansible.builtin.systemd:
-            name: aw-worktime-api.service
-            enabled: true
-            state: restarted
-
-        - name: Отключить legacy timer aw-worktime-afk-bridge (если есть)
-          ansible.builtin.systemd:
-            name: aw-worktime-afk-bridge.timer
-            enabled: false
-            state: stopped
-          failed_when: false
-
-        - name: Включить и перезапустить AW worktime UI bridge timer
-          ansible.builtin.systemd:
-            name: aw-worktime-ui-bridge.timer
-            enabled: true
-            state: restarted
-
-        - name: Выполнить разовый прогон AW worktime UI bridge
-          ansible.builtin.systemd:
-            name: aw-worktime-ui-bridge.service
-            state: started
-          failed_when: false
-
-        - name: Применить хотфиксы compiled JS чанков (Trends, Timespiral, Category helper)
-          ansible.builtin.command:
-            cmd: "/opt/activitywatch/aw-server/apply_webui_ru_patch.sh"
-          register: apply_ru_patch_result
-          failed_when: false
-
-        - name: Вывести результат применения хотфиксов
-          ansible.builtin.debug:
-            msg: "apply_webui_ru_patch.sh: {{ apply_ru_patch_result.stdout }}"
-
-        - name: Проверить наличие index.html после копирования
-          ansible.builtin.stat:
-            path: "{{ aw_server_webui_dir }}/index.html"
-          register: aw_webui_ru_index
-
-        - name: Проверить, что index.html доступен для RU patch
-          ansible.builtin.assert:
-            that:
-              - aw_webui_ru_index.stat.exists
-            fail_msg: "Не найден index.html WebUI для применения RU patch."
-
-        - name: Удалить старые теги RU patch из index.html
-          ansible.builtin.replace:
-            path: "{{ aw_server_webui_dir }}/index.html"
-            regexp: '<script[^>]+(?:ru-patch-v5\.js|sw-cleanup\.js|aw-ru-patch\.js|aw-sw-cleanup\.js)[^>]*></script>'
-            replace: ''
-
-        - name: Добавить cleanup script RU patch в index.html
-          ansible.builtin.replace:
-            path: "{{ aw_server_webui_dir }}/index.html"
-            regexp: '</head>'
-            replace: '<script src="/js/sw-cleanup.js?v={{ aw_sw_cleanup_cache_bust }}"></script></head>'
-
-        - name: Добавить загрузчик RU patch перед закрытием body
-          ansible.builtin.replace:
-            path: "{{ aw_server_webui_dir }}/index.html"
-            regexp: '</body>'
-            replace: '<script defer="defer" src="/js/ru-patch-v5.js?v={{ aw_ru_patch_cache_bust }}"></script></body>'
-
-        - name: Скопировать merge script AW DB на сервер
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/scripts/merge_aw_server_dbs.py"
-            dest: /usr/local/bin/merge_aw_server_dbs.py
-            owner: root
-            group: root
-            mode: "0755"
-
-        - name: Проверить наличие legacy root DB
-          ansible.builtin.stat:
-            path: /root/.local/share/activitywatch/aw-server-rust/sqlite.db
-          register: aw_legacy_root_db
-
-        - name: Проверить наличие target DB
-          ansible.builtin.stat:
-            path: "{{ aw_server_db_path }}"
-          register: aw_target_db
-
-        - name: Остановить сервис перед merge server DB
-          ansible.builtin.systemd:
-            name: activitywatch-server.service
-            state: stopped
-          when: aw_legacy_root_db.stat.exists | default(false)
-
-        - name: Создать backup каталоги server DB
-          ansible.builtin.file:
-            path: "{{ aw_server_data_dir }}/backups/db"
-            state: directory
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0755"
-          when: aw_legacy_root_db.stat.exists | default(false)
-
-        - name: Backup target DB перед merge
-          ansible.builtin.copy:
-            remote_src: true
-            src: "{{ aw_server_db_path }}"
-            dest: "{{ aw_server_data_dir }}/backups/db/target-before-merge-{{ ansible_date_time.iso8601_basic_short }}.sqlite.db"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0644"
-          when:
-            - aw_legacy_root_db.stat.exists | default(false)
-            - aw_target_db.stat.exists | default(false)
-
-        - name: Backup legacy root DB перед merge
-          ansible.builtin.copy:
-            remote_src: true
-            src: /root/.local/share/activitywatch/aw-server-rust/sqlite.db
-            dest: "{{ aw_server_data_dir }}/backups/db/legacy-root-{{ ansible_date_time.iso8601_basic_short }}.sqlite.db"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0644"
-          when: aw_legacy_root_db.stat.exists | default(false)
-
-        - name: Merge legacy root DB в target DB
-          ansible.builtin.command:
-            argv:
-              - python3
-              - /usr/local/bin/merge_aw_server_dbs.py
-              - --base
-              - /root/.local/share/activitywatch/aw-server-rust/sqlite.db
-              - --overlay
-              - "{{ aw_server_db_path }}"
-              - --output
-              - "{{ aw_server_db_path }}.merged"
-          when:
-            - aw_legacy_root_db.stat.exists | default(false)
-            - aw_target_db.stat.exists | default(false)
-
-        - name: Install merged DB as active target DB
-          ansible.builtin.copy:
-            remote_src: true
-            src: "{{ aw_server_db_path }}.merged"
-            dest: "{{ aw_server_db_path }}"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0644"
-          when:
-            - aw_legacy_root_db.stat.exists | default(false)
-            - aw_target_db.stat.exists | default(false)
-
-        - name: Скопировать legacy root DB в target DB если target ещё не существует
-          ansible.builtin.copy:
-            remote_src: true
-            src: /root/.local/share/activitywatch/aw-server-rust/sqlite.db
-            dest: "{{ aw_server_db_path }}"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0644"
-          when:
-            - aw_legacy_root_db.stat.exists | default(false)
-            - not (aw_target_db.stat.exists | default(false))
-
-        - name: Записать aw-server-rust config.toml с разрешёнными CORS origin
-          ansible.builtin.copy:
-            dest: "{{ aw_server_data_dir }}/.config/activitywatch/aw-server-rust/config.toml"
-            owner: "{{ aw_server_user }}"
-            group: "{{ aw_server_group }}"
-            mode: "0644"
-            content: |
-              cors = [
-              {% for origin in aw_server_cors_origins | default([]) %}
-                "{{ origin }}"{% if not loop.last %},{% endif %}
-              {% endfor %}
-              ]
-
-        - name: Включить и запустить сервис
-          ansible.builtin.systemd:
-            name: activitywatch-server.service
-            enabled: true
-            state: restarted
-            daemon_reload: true
-
-        - name: Дождаться ответа API
-          ansible.builtin.uri:
-            url: "http://127.0.0.1:{{ aw_server_port }}/api/0/info"
-            method: GET
-            status_code: 200
-          register: aw_api
-          retries: 10
-          delay: 3
-          until: aw_api.status == 200
-
-    - name: Считать текущие server-side settings
-      ansible.builtin.uri:
-        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/"
-        method: GET
-        status_code: 200
-      register: aw_settings_current
-      when: aw_apply_worktime_settings | default(false) | bool
-
-    - name: Считать текущие server-side views
-      ansible.builtin.uri:
-        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/views"
-        method: GET
-        status_code: 200
-      register: aw_views_current
-      when: aw_apply_worktime_settings | default(false) | bool
-
-    - name: Считать текущие server-side classes
-      ansible.builtin.uri:
-        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/classes"
-        method: GET
-        status_code: 200
-      register: aw_classes_current
-      when: aw_apply_worktime_settings | default(false) | bool
-
-    - name: Создать backup текущих server-side settings/views/classes
+    - name: Скопировать RU patch файлы WebUI из репозитория
       ansible.builtin.copy:
-        dest: "{{ aw_server_data_dir }}/backups/{{ item.name }}-{{ ansible_date_time.iso8601_basic_short }}.json"
+        src: "{{ item.src }}"
+        dest: "{{ item.dest }}"
+        mode: "{{ item.mode }}"
         owner: "{{ aw_server_user }}"
         group: "{{ aw_server_group }}"
-        mode: "0644"
-        content: "{{ item.payload | to_nice_json }}"
       loop:
-        - name: settings
-          payload: "{{ aw_settings_current.json | default({}) }}"
-        - name: views
-          payload: "{{ aw_views_current.json | default(none) }}"
-        - name: classes
-          payload: "{{ aw_classes_current.json | default(none) }}"
-      when: aw_apply_worktime_settings | default(false) | bool
+        - { src: "{{ aw_repo_root }}/aw-server/aw-ru-patch.js", dest: "{{ aw_server_webui_dir }}/js/ru-patch-v5.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-sw-cleanup.js", dest: "{{ aw_server_webui_dir }}/js/sw-cleanup.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-worktime-panel.js", dest: "{{ aw_server_webui_dir }}/js/aw-worktime-panel.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-host-groups.json", dest: "{{ aw_server_webui_dir }}/js/aw-host-groups.json", mode: "0644" }
 
-    - name: Настроить DLP Aggregator (Phase 2)
-      block:
-        - name: Создать каталог для скриптов
-          ansible.builtin.file:
-            path: "/opt/activitywatch/scripts"
-            state: directory
-            owner: root
-            group: root
-            mode: "0755"
+    - name: Создать каталог /root/bootstrap для apply_webui_ru_patch.sh
+      ansible.builtin.file:
+        path: /root/bootstrap
+        state: directory
+        mode: "0755"
 
-        - name: Скопировать агрегатор событий DLP
-          ansible.builtin.copy:
-            src: "{{ aw_repo_root }}/scripts/aggregate_dlp_events.py"
-            dest: "/opt/activitywatch/scripts/aggregate_dlp_events.py"
-            owner: root
-            group: root
-            mode: "0755"
+    - name: Скопировать RU patch файлы для apply_webui_ru_patch.sh (хотфиксы compiled JS чанков)
+      ansible.builtin.copy:
+        src: "{{ item.src }}"
+        dest: "{{ item.dest }}"
+        mode: "{{ item.mode }}"
+      loop:
+        - { src: "{{ aw_repo_root }}/aw-server/aw-ru-patch.js", dest: "/root/bootstrap/aw-ru-patch.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-sw-cleanup.js", dest: "/root/bootstrap/aw-sw-cleanup.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-worktime-panel.js", dest: "/root/bootstrap/aw-worktime-panel.js", mode: "0644" }
+        - { src: "{{ aw_repo_root }}/aw-server/aw-host-groups.json", dest: "/root/bootstrap/aw-host-groups.json", mode: "0644" }
 
-        - name: Установить systemd unit для агрегатора
-          ansible.builtin.copy:
-            dest: /etc/systemd/system/activitywatch-dlp-aggregator.service
-            content: |
-              [Unit]
-              Description=ActivityWatch DLP Event Aggregator
-              After=activitywatch-server.service
+    - name: Скопировать apply_webui_ru_patch.sh скрипт
+      ansible.builtin.copy:
+        src: "{{ aw_repo_root }}/aw-server/apply_webui_ru_patch.sh"
+        dest: /opt/activitywatch/aw-server/apply_webui_ru_patch.sh
+        mode: "0755"
 
-              [Service]
-              Type=oneshot
-              User={{ aw_server_user }}
-              WorkingDirectory={{ aw_server_data_dir }}
-              ExecStart=/usr/bin/python3 /opt/activitywatch/scripts/aggregate_dlp_events.py \
-                --aw-url http://127.0.0.1:{{ aw_server_port }}/api/0 \
-                --sqlite-path {{ aw_server_data_dir }}/dlp_warehouse.sqlite \
-                --state-path {{ aw_server_data_dir }}/dlp-aggregator-state.json
+    - name: Записать /etc/activitywatch/aw-server.env перед хотфиксами
+      ansible.builtin.copy:
+        dest: /etc/activitywatch/aw-server.env
+        mode: "0640"
+        owner: root
+        group: root
+        content: |
+          AW_SERVER_BIND_HOST={{ aw_server_bind_host }}
+          AW_SERVER_PORT={{ aw_server_port }}
+          AW_SERVER_DATA_DIR={{ aw_server_data_dir }}
+          AW_SERVER_DB_PATH={{ aw_server_db_path }}
+          AW_SERVER_LOG_DIR={{ aw_server_log_dir }}
+          AW_SERVER_WEBUI_DIR={{ aw_server_webui_dir }}
+          AW_SERVER_USER={{ aw_server_user }}
+          AW_SERVER_GROUP={{ aw_server_group }}
+          AW_WORKTIME_REPORT_BASE={{ aw_worktime_report_base }}
+          AW_WORKTIME_TZ={{ aw_worktime_timezone }}
+          XDG_DATA_HOME={{ aw_server_data_dir }}/.local/share
+          XDG_CONFIG_HOME={{ aw_server_data_dir }}/.config
 
-              [Install]
-              WantedBy=multi-user.target
+    - name: Установить скрипт AW worktime API
+      ansible.builtin.copy:
+        src: "{{ aw_repo_root }}/aw-server/aw-worktime-api.py"
+        dest: /usr/local/bin/aw-worktime-api.py
+        owner: root
+        group: root
+        mode: "0755"
 
-        - name: Установить systemd timer для агрегатора
-          ansible.builtin.copy:
-            dest: /etc/systemd/system/activitywatch-dlp-aggregator.timer
-            content: |
-              [Unit]
-              Description=Run ActivityWatch DLP Aggregator every 5 minutes
+    - name: Установить systemd unit AW worktime API
+      ansible.builtin.copy:
+        src: "{{ aw_repo_root }}/aw-server/aw-worktime-api.service"
+        dest: /etc/systemd/system/aw-worktime-api.service
+        owner: root
+        group: root
+        mode: "0644"
 
-              [Timer]
-              OnBootSec=1min
-              OnUnitActiveSec=5min
-              AccuracySec=1s
+    - name: Перезагрузить systemd после установки AW worktime API
+      ansible.builtin.systemd:
+        daemon_reload: true
 
-              [Install]
-              WantedBy=timers.target
+    - name: Включить и перезапустить AW worktime API
+      ansible.builtin.systemd:
+        name: aw-worktime-api.service
+        enabled: true
+        state: restarted
 
-        - name: Включить и запустить таймер агрегатора
-          ansible.builtin.systemd:
-            name: activitywatch-dlp-aggregator.timer
-            enabled: true
-            state: started
-            daemon_reload: true
+    - name: Применить хотфиксы compiled JS чанков (Trends, Timespiral, Category helper)
+      ansible.builtin.command:
+        cmd: "/opt/activitywatch/aw-server/apply_webui_ru_patch.sh"
+      register: apply_ru_patch_result
+      failed_when: false
+
+    - name: Вывести результат применения хотфиксов
+      ansible.builtin.debug:
+        msg: "apply_webui_ru_patch.sh: {{ apply_ru_patch_result.stdout }}"
+
+    - name: Проверить наличие index.html после копирования
+      ansible.builtin.stat:
+        path: "{{ aw_server_webui_dir }}/index.html"
+      register: aw_webui_ru_index
+
+    - name: Проверить, что index.html доступен для RU patch
+      ansible.builtin.assert:
+        that:
+          - aw_webui_ru_index.stat.exists
+        fail_msg: "Не найден index.html WebUI для применения RU patch."
+
+    - name: Удалить старые теги RU patch из index.html
+      ansible.builtin.replace:
+        path: "{{ aw_server_webui_dir }}/index.html"
+        regexp: '<script[^>]+(?:ru-patch-v5\.js|sw-cleanup\.js|aw-ru-patch\.js|aw-sw-cleanup\.js)[^>]*></script>'
+        replace: ''
+
+    - name: Добавить cleanup script RU patch в index.html
+      ansible.builtin.replace:
+        path: "{{ aw_server_webui_dir }}/index.html"
+        regexp: '</head>'
+        replace: '<script src="/js/sw-cleanup.js?v={{ aw_sw_cleanup_cache_bust }}"></script></head>'
+
+    - name: Добавить загрузчик RU patch перед закрытием body
+      ansible.builtin.replace:
+        path: "{{ aw_server_webui_dir }}/index.html"
+        regexp: '</body>'
+        replace: '<script defer="defer" src="/js/ru-patch-v5.js?v={{ aw_ru_patch_cache_bust }}"></script></body>'
+
+    - name: Включить и запустить сервис
+      ansible.builtin.systemd:
+        name: activitywatch-server.service
+        enabled: true
+        state: restarted
+        daemon_reload: true
+
+    - name: Дождаться ответа API
+      ansible.builtin.uri:
+        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/info"
+        method: GET
+        status_code: 200
+      register: aw_api
+      retries: 10
+      delay: 3
+      until: aw_api.status == 200
 
     - name: Применить базовые worktime settings (classes)
       ansible.builtin.uri:
@@ -652,12 +342,16 @@
 
     - name: Вычислить worktime durationDefault из aw_worktime_from/to
       ansible.builtin.set_fact:
+        aw_worktime_from_h: "{{ (aw_worktime_from | default('08:00')).split(':')[0] | int }}"
+        aw_worktime_from_m: "{{ (aw_worktime_from | default('08:00')).split(':')[1] | int }}"
+        aw_worktime_to_h: "{{ (aw_worktime_to | default('17:00')).split(':')[0] | int }}"
+        aw_worktime_to_m: "{{ (aw_worktime_to | default('17:00')).split(':')[1] | int }}"
         aw_worktime_duration_default_derived: >-
           {{
             (
               (
-                (((aw_worktime_to | default('17:00')).split(':')[0] | int) * 60 + ((aw_worktime_to | default('17:00')).split(':')[1] | int)) -
-                (((aw_worktime_from | default('08:00')).split(':')[0] | int) * 60 + ((aw_worktime_from | default('08:00')).split(':')[1] | int))
+                ((aw_worktime_to_h | int) * 60 + (aw_worktime_to_m | int)) -
+                ((aw_worktime_from_h | int) * 60 + (aw_worktime_from_m | int))
               ) * 60
             )
           }}
@@ -685,46 +379,20 @@
       ansible.builtin.uri:
         url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/startOfDay"
         method: POST
-        body: "\"{{ aw_worktime_start_of_day }}\""
-        headers:
-          Content-Type: application/json
-        status_code: [200, 201]
+        body: "{{ aw_worktime_start_of_day }}"
+        body_format: json
+        status_code: 200
       when: aw_apply_worktime_settings | default(false) | bool
 
     - name: Применить базовый период worktime (durationDefault seconds)
       ansible.builtin.uri:
         url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/durationDefault"
         method: POST
-        body: "{{ aw_worktime_duration_default_effective | string }}"
-        headers:
-          Content-Type: application/json
-        status_code: [200, 201]
+        body: "{{ aw_worktime_duration_default_effective }}"
+        body_format: json
+        status_code: 200
       when: aw_apply_worktime_settings | default(false) | bool
 
-    - name: Применить always_active_pattern для fallback без AFK
-      ansible.builtin.uri:
-        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/always_active_pattern"
-        method: POST
-        body: "\"{{ aw_server_always_active_pattern }}\""
-        headers:
-          Content-Type: application/json
-        status_code: [200, 201]
-      when:
-        - aw_apply_worktime_settings | default(false) | bool
-        - (aw_server_always_active_pattern | default('') | string | length) > 0
-
-    - name: Применить landingpage профиля
-      ansible.builtin.uri:
-        url: "http://127.0.0.1:{{ aw_server_port }}/api/0/settings/landingpage"
-        method: POST
-        body: "\"{{ aw_server_landingpage }}\""
-        headers:
-          Content-Type: application/json
-        status_code: [200, 201]
-      when:
-        - aw_apply_worktime_settings | default(false) | bool
-        - (aw_server_landingpage | default('') | string | length) > 0
-
   handlers:
     - name: Перезагрузить systemd
       ansible.builtin.systemd:
diff --git a/install-kit-awindows-20260427-211240/ansible/deploy_aw_windows.yml b/install-kit-awindows-20260427-211240/ansible/deploy_aw_windows.yml
index d7384ff..c78830c 100644
--- a/install-kit-awindows-20260427-211240/ansible/deploy_aw_windows.yml
+++ b/install-kit-awindows-20260427-211240/ansible/deploy_aw_windows.yml
@@ -25,7 +25,6 @@
     aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
     aw_windows_afk_enabled: true
     aw_windows_window_enabled: true
-    aw_windows_file_ops_enabled: true
     aw_windows_local_agent_logs_enabled: false
     aw_windows_incident_capture_enabled: true
     aw_windows_incident_screenshot_enabled: true
@@ -79,7 +78,6 @@
         - browser-domains-native-collector.ps1
         - dlp-endpoint-signals-collector.ps1
         - email-outbound-collector.ps1
-        - file-operations-collector.ps1
         - worktime-session-collector.ps1
         - migrate-awatch-rus-paths.ps1
         - deploy-domain-users.ps1
@@ -89,18 +87,6 @@
         - web-category-rules.example.json
         - dlp-policy.example.json
 
-    - name: Нормализовать кодировку PowerShell файлов (UTF-8 BOM для Windows PowerShell)
-      ansible.windows.win_powershell:
-        script: |
-          $ErrorActionPreference = 'Stop'
-          $toolkitDir = "{{ aw_windows_deploy_root }}\windows"
-          $encIn = New-Object System.Text.UTF8Encoding($false)
-          $encOut = New-Object System.Text.UTF8Encoding($true)
-          Get-ChildItem -LiteralPath $toolkitDir -File -Include *.ps1,*.psm1,*.psd1 | ForEach-Object {
-            $text = [System.IO.File]::ReadAllText($_.FullName, $encIn)
-            [System.IO.File]::WriteAllText($_.FullName, $text, $encOut)
-          }
-
     - name: Загрузить список пользователей для доменного развёртывания
       ansible.windows.win_copy:
         dest: "{{ aw_windows_deploy_root }}\\windows\\users.txt"
@@ -145,7 +131,6 @@
             StateRoot = "{{ aw_windows_state_root }}"
             AfkEnabled = {{ '$true' if (aw_windows_afk_enabled | bool) else '$false' }}
             WindowEnabled = {{ '$true' if (aw_windows_window_enabled | bool) else '$false' }}
-            FileOpsEnabled = {{ '$true' if (aw_windows_file_ops_enabled | bool) else '$false' }}
             LocalAgentLogsEnabled = {{ '$true' if (aw_windows_local_agent_logs_enabled | bool) else '$false' }}
             IncidentCaptureEnabled = {{ '$true' if (aw_windows_incident_capture_enabled | bool) else '$false' }}
             IncidentScreenshotEnabled = {{ '$true' if (aw_windows_incident_screenshot_enabled | bool) else '$false' }}
@@ -165,19 +150,6 @@
           {% endif %}
           & "{{ aw_windows_deploy_root }}\windows\deploy-ensemble.ps1" @params
 
-    - name: Удалить лишние ActivityWatch Launch tasks вне текущего deployment-config
-      ansible.windows.win_powershell:
-        script: |
-          $ErrorActionPreference = 'Stop'
-          $config = Get-Content -Raw -LiteralPath "{{ aw_windows_state_root }}\deployment-config.json" | ConvertFrom-Json
-          $desired = @($config.userTasks | ForEach-Object { [string]$_.LaunchTaskName })
-          foreach ($task in @(Get-ScheduledTask | Where-Object { $_.TaskName -like 'ActivityWatch Launch *' })) {
-            if ($desired -notcontains [string]$task.TaskName) {
-              Unregister-ScheduledTask -TaskName $task.TaskName -Confirm:$false -ErrorAction SilentlyContinue
-              & cmd.exe /c "schtasks /Delete /TN `"$($task.TaskName)`" /F >nul 2>&1" | Out-Null
-            }
-          }
-
     - name: Принудительно запустить ActivityWatch recovery и launch tasks
       when: aw_windows_force_task_restart | bool
       ansible.windows.win_powershell:
@@ -200,7 +172,6 @@
       when:
         - aw_windows_api_smoke_check_enabled | bool
         - aw_windows_afk_enabled | bool
-        - aw_windows_hostname_result.stdout is defined
       ansible.builtin.set_fact:
         aw_windows_api_smoke_check_bucket_effective: >-
           {{
@@ -209,51 +180,54 @@
             else 'aw-watcher-afk_' ~ (aw_windows_hostname_result.stdout | trim)
           }}
 
-    - name: Выполнить AW API smoke-check (проверка наличия свежих событий в AFK бакете)
+    - name: Дождаться свежих AFK событий на AW server
       when:
         - aw_windows_api_smoke_check_enabled | bool
         - aw_windows_afk_enabled | bool
+      delegate_to: localhost
       ansible.builtin.uri:
         url: "{{ aw_windows_server_scheme }}://{{ aw_windows_server_host }}:{{ aw_windows_server_port }}/api/0/buckets/{{ aw_windows_api_smoke_check_bucket_effective }}/events?limit={{ aw_windows_api_smoke_check_limit }}"
         method: GET
-        status_code: 200
-      register: aw_windows_api_smoke_result
-      until: aw_windows_api_smoke_result.json | length > 0
-      retries: 5
-      delay: 5
-      ignore_errors: true
+        return_content: true
+      register: aw_windows_api_smoke
+      until: >
+        aw_windows_api_smoke.status == 200 and
+        (aw_windows_api_smoke.json | length) > 0 and
+        (
+          aw_windows_api_smoke.json
+          | selectattr('data.status', 'equalto', 'not-afk')
+          | list
+          | length
+        ) > 0
+      retries: 10
+      delay: 6
 
-    - name: Валидировать развёртывание на эндпоинте
+    - name: Выполнить валидацию и сохранить отчёт на целевом Windows host
       ansible.windows.win_powershell:
         script: |
           $ErrorActionPreference = 'Stop'
-          $result = & "{{ aw_windows_deploy_root }}\windows\validate-deployment.ps1" `
+          $report = & "{{ aw_windows_deploy_root }}\windows\validate-deployment.ps1" `
             -ConfigPath "{{ aw_windows_state_root }}\deployment-config.json"
-          $result | ConvertTo-Json -Depth 8 | Out-File -FilePath "{{ aw_windows_validation_remote_path }}" -Encoding utf8
-          return $result
+          $report | ConvertTo-Json -Depth 12 | Out-File -FilePath "{{ aw_windows_validation_remote_path }}" -Encoding utf8
+          if ({{ '$true' if (aw_windows_fail_on_validation_error | bool) else '$false' }} -and -not [bool]$report.overallOk) {
+            throw "Проверка развёртывания ActivityWatch завершилась ошибкой. Отчёт: {{ aw_windows_validation_remote_path }}"
+          }
 
-    - name: Создать локальную директорию для отчётов валидации
+    - name: Создать локальный каталог для validation reports
       ansible.builtin.file:
         path: "{{ aw_windows_validation_local_dir }}"
         state: directory
         mode: "0755"
       delegate_to: localhost
 
-    - name: Стянуть отчёт валидации с эндпоинта
+    - name: Забрать validation report
       ansible.builtin.fetch:
         src: "{{ aw_windows_validation_remote_path }}"
         dest: "{{ aw_windows_validation_local_dir }}/{{ inventory_hostname }}-aw_validate_ansible.json"
         flat: true
 
-    - name: Проверить статус валидации
-      ansible.builtin.shell: |
-        python3 - <<'PY'
-        import json, sys
-        with open('{{ aw_windows_validation_local_dir }}/{{ inventory_hostname }}-aw_validate_ansible.json', 'r') as f:
-            data = json.load(f)
-        if not data.get('overallOk', False):
-            print(f"Validation failed for {{ inventory_hostname }}: {data.get('summary', 'Unknown error')}")
-            sys.exit(1)
-        PY
-      delegate_to: localhost
-      when: aw_windows_fail_on_validation_error | bool
+    - name: Показать путь к отчёту
+      ansible.builtin.debug:
+        msg:
+          - "Windows/RDP развёртывание завершено на {{ inventory_hostname }}."
+          - "Отчёт проверки: {{ aw_windows_validation_local_dir }}/{{ inventory_hostname }}-aw_validate_ansible.json"
diff --git a/install-kit-awindows-20260427-211240/ansible/group_vars/all.example.yml b/install-kit-awindows-20260427-211240/ansible/group_vars/all.example.yml
index 171b218..be28ad3 100644
--- a/install-kit-awindows-20260427-211240/ansible/group_vars/all.example.yml
+++ b/install-kit-awindows-20260427-211240/ansible/group_vars/all.example.yml
@@ -4,7 +4,6 @@ aw_server_bind_host: "0.0.0.0"
 aw_server_port: 5600
 aw_server_webui_dir: "/opt/activitywatch/webui-ru"
 aw_server_data_dir: "/var/lib/activitywatch"
-aw_server_db_path: "/var/lib/activitywatch/.local/share/activitywatch/aw-server-rust/sqlite.db"
 aw_server_log_dir: "/var/log/activitywatch"
 aw_server_user: "activitywatch"
 aw_server_group: "activitywatch"
@@ -13,17 +12,9 @@ aw_worktime_timezone: "Europe/Moscow"
 
 aw_repo_root: "{{ playbook_dir | dirname }}"
 
-# Применить базовые категории и views для рабочего времени через AW settings API.
-# При прод-обновлениях это нужно оставлять включённым, иначе UI остаётся без views/classes.
-aw_apply_worktime_settings: true
-
-# Дополнительные origin для aw-server-rust CORS.
-# Обязательно включите тот origin, с которого реально открывается Web UI.
-aw_server_cors_origins:
-  - "http://127.0.0.1:5600"
-  - "http://localhost:5600"
-  - "http://10.10.10.13:5600"
-  - "http://aw-server:5600"
+# Опционально: применить базовые категории и views для рабочего времени через AW settings API.
+# Внимание: это перезаписывает существующие server-side settings/classes/views.
+aw_apply_worktime_settings: false
 
 # Опциональные значения периода рабочего времени в Web UI.
 # startOfDay задаёт границу дня и стартовое время окна отчёта.
@@ -33,5 +24,3 @@ aw_server_cors_origins:
 aw_worktime_from: "08:00"
 aw_worktime_to: "17:00"
 aw_worktime_start_of_day: "{{ aw_worktime_from }}"
-aw_server_always_active_pattern: "aw-watcher-window"
-aw_server_landingpage: "/activity/SHARKON2025/view/"
diff --git a/install-kit-awindows-20260427-211240/ansible/group_vars/windows.example.yml b/install-kit-awindows-20260427-211240/ansible/group_vars/windows.example.yml
index 707b658..30c20c3 100644
--- a/install-kit-awindows-20260427-211240/ansible/group_vars/windows.example.yml
+++ b/install-kit-awindows-20260427-211240/ansible/group_vars/windows.example.yml
@@ -23,7 +23,6 @@ aw_windows_install_root: "C:\\Program Files\\AWatch-rus\\bin"
 aw_windows_state_root: "C:\\ProgramData\\AWatch-rus"
 aw_windows_afk_enabled: true
 aw_windows_window_enabled: true
-aw_windows_file_ops_enabled: true
 aw_windows_local_agent_logs_enabled: false
 aw_windows_incident_capture_enabled: true
 aw_windows_incident_screenshot_enabled: true
diff --git a/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_and_deploy_aw.yml b/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_and_deploy_aw.yml
index 1ac786e..40c6382 100644
--- a/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_and_deploy_aw.yml
+++ b/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_and_deploy_aw.yml
@@ -11,9 +11,6 @@
       - activitywatch-server.service
       - aw-worktime-api.py
       - aw-worktime-api.service
-      - aw-worktime-ui-bridge.py
-      - aw-worktime-ui-bridge.service
-      - aw-worktime-ui-bridge.timer
       - aw-worktime-panel.js
       - aw-server.env.example
       - aw-ru-patch.js
diff --git a/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_matrix_and_deploy_aw.yml b/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_matrix_and_deploy_aw.yml
index e0ff9bc..5452935 100644
--- a/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_matrix_and_deploy_aw.yml
+++ b/install-kit-awindows-20260427-211240/ansible/provision_proxmox_ct_matrix_and_deploy_aw.yml
@@ -11,9 +11,6 @@
       - activitywatch-server.service
       - aw-worktime-api.py
       - aw-worktime-api.service
-      - aw-worktime-ui-bridge.py
-      - aw-worktime-ui-bridge.service
-      - aw-worktime-ui-bridge.timer
       - aw-worktime-panel.js
       - aw-server.env.example
       - aw-ru-patch.js
diff --git a/install-kit-awindows-20260427-211240/aw-server/activitywatch-server.service b/install-kit-awindows-20260427-211240/aw-server/activitywatch-server.service
index 89d31e3..e8f26e3 100755
--- a/install-kit-awindows-20260427-211240/aw-server/activitywatch-server.service
+++ b/install-kit-awindows-20260427-211240/aw-server/activitywatch-server.service
@@ -9,7 +9,7 @@ EnvironmentFile=/etc/activitywatch/aw-server.env
 User=__AW_SERVER_USER__
 Group=__AW_SERVER_GROUP__
 WorkingDirectory=__AW_SERVER_DATA_DIR__
-ExecStart=/bin/sh -lc 'exec /opt/activitywatch/bin/aw-server-rust --host "$AW_SERVER_BIND_HOST" --port "$AW_SERVER_PORT" --dbpath "$AW_SERVER_DB_PATH" --webpath "$AW_SERVER_WEBUI_DIR"'
+ExecStart=/bin/sh -lc 'exec /opt/activitywatch/bin/aw-server-rust --host "$AW_SERVER_BIND_HOST" --port "$AW_SERVER_PORT"'
 Restart=on-failure
 RestartSec=5s
 StateDirectory=activitywatch
@@ -17,7 +17,7 @@ LogsDirectory=activitywatch
 NoNewPrivileges=true
 PrivateTmp=true
 ProtectSystem=full
-ProtectHome=read-only
+ProtectHome=true
 LimitNOFILE=65535
 
 [Install]
diff --git a/install-kit-awindows-20260427-211240/aw-server/aw-host-groups.json b/install-kit-awindows-20260427-211240/aw-server/aw-host-groups.json
index 7432f60..f3d0118 100644
--- a/install-kit-awindows-20260427-211240/aw-server/aw-host-groups.json
+++ b/install-kit-awindows-20260427-211240/aw-server/aw-host-groups.json
@@ -29,21 +29,6 @@
         { "label": "DLP", "type": "bucket", "bucket_prefix": "aw-dlp-endpoint-signals_" }
       ]
     },
-    {
-      "id": "linux-remote",
-      "name": "Linux remote workers",
-      "description": "Linux-хосты удалённых сотрудников: GUI активность, SSH/console и browser admin UI.",
-      "patterns": [
-        "^(LINUX-WS|LINUX-DESKTOP|LX-|DESKTOP-|ADMIN-|WORKSTATION-|DEVBOX-)"
-      ],
-      "links": [
-        { "label": "Активность", "type": "activity" },
-        { "label": "SSH сессии", "type": "bucket", "bucket_prefix": "aw-ssh-sessions_" },
-        { "label": "Команды shell", "type": "bucket", "bucket_prefix": "aw-console-commands_" },
-        { "label": "Web категории", "type": "bucket", "bucket_prefix": "aw-detmir-web-category_" },
-        { "label": "Все бакеты", "type": "buckets" }
-      ]
-    },
     {
       "id": "virtual-infra",
       "name": "Virtual servers + Proxmox",
diff --git a/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js b/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js
index 3f06563..28145bd 100755
--- a/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js
+++ b/install-kit-awindows-20260427-211240/aw-server/aw-ru-patch.js
@@ -370,16 +370,6 @@
     return /^pve[-_]/i.test(String(host || ""));
   }
 
-  function isLikelyClientHost(host) {
-    const value = String(host || "").trim();
-    if (!value) return false;
-    if (/^(?:unknown|undefined|null)$/i.test(value)) return false;
-    if (/^(?:localhost|127\.0\.0\.1|0\.0\.0\.0|::1)$/i.test(value)) return false;
-    if (/^(?:\d{1,3}\.){3}\d{1,3}$/.test(value)) return false;
-    if (value.indexOf(":") !== -1 && /^[0-9a-f:\[\]]+$/i.test(value)) return false;
-    return true;
-  }
-
   function enforceSafeActivityViewForPveHost() {
     const hash = window.location.hash || "";
     const match = hash.match(/^#\/activity\/([^/]+)\/day\/([^/]+)\/view\/([^/?#]+)/i);
@@ -396,9 +386,9 @@
 
   function getDlpHostFromSettings(settings) {
     const routeHost = getCurrentHostFromHash();
-    if (isLikelyClientHost(routeHost)) return routeHost;
+    if (routeHost) return routeHost;
     const bucketHost = getDlpHostFromBucketId(getDlpBucketIdFromHash());
-    if (isLikelyClientHost(bucketHost)) return bucketHost;
+    if (bucketHost) return bucketHost;
     return getTrendsHostFromSettings(settings);
   }
 
@@ -690,19 +680,6 @@
             { label: "DLP", type: "bucket", bucket_prefix: "aw-dlp-endpoint-signals_" }
           ]
         },
-        {
-          id: "linux-remote",
-          name: "Linux remote workers",
-          description: "Linux-хосты удалённых сотрудников: GUI активность, SSH/console и browser admin UI.",
-          patterns: ["^(LINUX-WS|LINUX-DESKTOP|LX-|DESKTOP-|ADMIN-|WORKSTATION-|DEVBOX-)"],
-          links: [
-            { label: "Активность", type: "activity" },
-            { label: "SSH сессии", type: "bucket", bucket_prefix: "aw-ssh-sessions_" },
-            { label: "Команды shell", type: "bucket", bucket_prefix: "aw-console-commands_" },
-            { label: "Web категории", type: "bucket", bucket_prefix: "aw-detmir-web-category_" },
-            { label: "Все бакеты", type: "buckets" }
-          ]
-        },
         {
           id: "virtual-infra",
           name: "Virtual servers + Proxmox",
@@ -763,15 +740,7 @@
     const prefixes = [
       "aw-watcher-window_",
       "aw-watcher-afk_",
-      "aw-console-commands_",
-      "aw-ssh-sessions_",
-      "aw-linux-web-context_",
-      "aw-detmir-web-category_",
       "aw-dlp-endpoint-signals_",
-      "aw-session-events_",
-      "aw-worktime-sessions_",
-      "aw-pve-webadmin-events_",
-      "aw-pve-task-events_",
       "aw-dlp-incidents_",
       "aw-pfsense-health_",
       "aw-pfsense-gateways_",
@@ -801,27 +770,7 @@
     return result;
   }
 
-  function hostHasBucketPrefix(hostBuckets, prefix) {
-    return (hostBuckets || []).some(function (bucketId) {
-      return String(bucketId || "").indexOf(prefix) === 0;
-    });
-  }
-
-  function matchHostGroup(host, groups, hostBuckets) {
-    const bucketList = hostBuckets || [];
-    if (hostHasBucketPrefix(bucketList, "aw-dlp-endpoint-signals_") || hostHasBucketPrefix(bucketList, "aw-session-events_")) {
-      return "windows-rdp";
-    }
-    if (
-      hostHasBucketPrefix(bucketList, "aw-console-commands_") ||
-      hostHasBucketPrefix(bucketList, "aw-ssh-sessions_") ||
-      hostHasBucketPrefix(bucketList, "aw-linux-web-context_") ||
-      hostHasBucketPrefix(bucketList, "aw-detmir-web-category_")
-    ) {
-      if (!hostHasBucketPrefix(bucketList, "aw-pve-webadmin-events_") && !hostHasBucketPrefix(bucketList, "aw-pve-task-events_")) {
-        return "linux-remote";
-      }
-    }
+  function matchHostGroup(host, groups) {
     for (const group of groups) {
       const patterns = Array.isArray(group.patterns) ? group.patterns : [];
       for (const pattern of patterns) {
@@ -864,7 +813,7 @@
     grouped.set("__ungrouped__", []);
 
     Array.from(hostBuckets.keys()).sort().forEach(function (host) {
-      const groupId = matchHostGroup(host, groups, hostBuckets.get(host) || []) || "__ungrouped__";
+      const groupId = matchHostGroup(host, groups) || "__ungrouped__";
       grouped.get(groupId).push(host);
     });
 
@@ -920,7 +869,7 @@
       center.setAttribute("data-aw-ru-host-groups", "1");
       center.innerHTML =
         '<h4>Разделы хостов</h4>' +
-        '<p>Здесь хосты разделены на Windows RDP, Linux remote workers и инфраструктурные узлы.</p>' +
+        '<p>Здесь хосты разделены на пользовательские Windows RDP и инфраструктурные виртуальные серверы/Proxmox.</p>' +
         '<div class="aw-ru-host-groups-grid" data-aw-ru-host-groups-grid><section class="aw-ru-host-group-card"><p>Загрузка...</p></section></div>';
       heading.parentElement.insertBefore(center, heading.nextSibling);
     }
@@ -1476,8 +1425,7 @@
     if (!settings || typeof settings !== "object") return "";
     const landingpage = typeof settings.landingpage === "string" ? settings.landingpage : "";
     const match = landingpage.match(/\/activity\/([^/]+)/);
-    const host = match && match[1] ? decodeURIComponent(match[1]) : "";
-    return isLikelyClientHost(host) ? host : "";
+    return match && match[1] ? match[1] : "";
   }
 
   function getTrendsPath(hash) {
@@ -1544,7 +1492,8 @@
       .map(function (bucketId) { return bucketId.replace(/^aw-watcher-window_/i, ""); })
       .filter(Boolean)
       .filter(function (host) { return !/^unknown$/i.test(host); });
-    if (isLikelyClientHost(settingsHost) && hosts.indexOf(settingsHost) >= 0) return settingsHost;
+    if (settingsHost && hosts.indexOf(settingsHost) >= 0) return settingsHost;
+    if (settingsHost) return settingsHost;
     hosts.sort();
     return hosts[0] || "";
   }
@@ -1584,8 +1533,7 @@
       window.fetch = function (input, init) {
         try {
           const url = typeof input === "string" ? input : String(input && input.url || "");
-          const isCategoryBuilderRoute = /^#\/settings\/category-builder(?:[/?#]|$)/i.test(window.location.hash || "");
-          if (isCategoryBuilderRoute && /\/api\/0\/query\/?$/i.test(url) && init && typeof init.body === "string") {
+          if (/\/api\/0\/query\/?$/i.test(url) && init && typeof init.body === "string") {
             init = Object.assign({}, init, {
               body: rewriteUnknownCategoryBuilderQueryBody(init.body)
             });
@@ -1609,8 +1557,7 @@
         proto.send = function (body) {
           try {
             const url = String(this.__awRuUrl || "");
-            const isCategoryBuilderRoute = /^#\/settings\/category-builder(?:[/?#]|$)/i.test(window.location.hash || "");
-            if (isCategoryBuilderRoute && /\/api\/0\/query\/?$/i.test(url) && typeof body === "string") {
+            if (/\/api\/0\/query\/?$/i.test(url) && typeof body === "string") {
               body = rewriteUnknownCategoryBuilderQueryBody(body);
             }
           } catch (error) {
diff --git a/install-kit-awindows-20260427-211240/aw-server/install_aw_server.sh b/install-kit-awindows-20260427-211240/aw-server/install_aw_server.sh
index 4ac7a30..50ba3e7 100755
--- a/install-kit-awindows-20260427-211240/aw-server/install_aw_server.sh
+++ b/install-kit-awindows-20260427-211240/aw-server/install_aw_server.sh
@@ -26,9 +26,6 @@ VIEWS_JSON="$BOOTSTRAP_DIR/settings/views-default.json"
 CLASSES_JSON="$BOOTSTRAP_DIR/settings/classes-worktime.json"
 WORKTIME_API_SRC="$BOOTSTRAP_DIR/aw-worktime-api.py"
 WORKTIME_API_SERVICE_SRC="$BOOTSTRAP_DIR/aw-worktime-api.service"
-WORKTIME_UI_BRIDGE_SRC="$BOOTSTRAP_DIR/aw-worktime-ui-bridge.py"
-WORKTIME_UI_BRIDGE_SERVICE_SRC="$BOOTSTRAP_DIR/aw-worktime-ui-bridge.service"
-WORKTIME_UI_BRIDGE_TIMER_SRC="$BOOTSTRAP_DIR/aw-worktime-ui-bridge.timer"
 
 for var_name in "${required_vars[@]}"; do
   if [[ -z "${!var_name:-}" ]]; then
@@ -106,24 +103,6 @@ if [[ -f "$WORKTIME_API_SERVICE_SRC" ]]; then
   systemctl --no-pager --full status aw-worktime-api.service || true
 fi
 
-if [[ -f "$WORKTIME_UI_BRIDGE_SRC" ]]; then
-  install -m 0755 "$WORKTIME_UI_BRIDGE_SRC" /usr/local/bin/aw-worktime-ui-bridge.py
-fi
-
-if [[ -f "$WORKTIME_UI_BRIDGE_SERVICE_SRC" ]]; then
-  install -m 0644 "$WORKTIME_UI_BRIDGE_SERVICE_SRC" /etc/systemd/system/aw-worktime-ui-bridge.service
-fi
-
-if [[ -f "$WORKTIME_UI_BRIDGE_TIMER_SRC" ]]; then
-  install -m 0644 "$WORKTIME_UI_BRIDGE_TIMER_SRC" /etc/systemd/system/aw-worktime-ui-bridge.timer
-  systemctl daemon-reload
-  systemctl disable --now aw-worktime-afk-bridge.timer >/dev/null 2>&1 || true
-  systemctl enable aw-worktime-ui-bridge.timer
-  systemctl restart aw-worktime-ui-bridge.timer
-  systemctl start aw-worktime-ui-bridge.service || true
-  systemctl --no-pager --full status aw-worktime-ui-bridge.timer || true
-fi
-
 for _ in $(seq 1 20); do
   if curl -fsS "http://127.0.0.1:${AW_SERVER_PORT}/api/0/info" >/dev/null 2>&1; then
     break
diff --git a/install-kit-awindows-20260427-211240/aw-server/settings/classes-worktime.json b/install-kit-awindows-20260427-211240/aw-server/settings/classes-worktime.json
index 11ee810..b6361f4 100644
--- a/install-kit-awindows-20260427-211240/aw-server/settings/classes-worktime.json
+++ b/install-kit-awindows-20260427-211240/aw-server/settings/classes-worktime.json
@@ -20,7 +20,7 @@
     "name": ["Работа", "Документы"],
     "rule": {
       "type": "regex",
-      "regex": "\\b(winword|excel|powerpnt|outlook|acrord32|acrord64|libreoffice|writer|calc)\\.exe\\b|LibreOffice|OnlyOffice|Adobe Reader|Acrobat",
+      "regex": "\\b(winword|excel|powerpnt|outlook|acrord32|acrord64)\\.exe\\b|Adobe Reader|Acrobat",
       "ignore_case": true
     },
     "data": { "color": "#2E7D32" }
@@ -40,7 +40,7 @@
     "name": ["Работа", "Администрирование"],
     "rule": {
       "type": "regex",
-      "regex": "\\b(mstsc|putty|kitty|winscp|anydesk|teamviewer|vncviewer|mmc|regedit|services|control|powershell|cmd|gnome-terminal|gnome-terminal-server|xfce4-terminal|konsole|tilix|alacritty|xterm|remmina|virt-manager)\\.exe\\b|\\b(gnome-terminal|gnome-terminal-server|xfce4-terminal|konsole|tilix|alacritty|xterm|remmina|virt-manager)\\b|Proxmox Virtual Environment|\\bpfSense\\b|\\bGrafana\\b|\\bKibana\\b|\\bPortainer\\b",
+      "regex": "\\b(mstsc|putty|kitty|winscp|anydesk|teamviewer|vncviewer|mmc|regedit|services|control|powershell|cmd)\\.exe\\b",
       "ignore_case": true
     },
     "data": { "color": "#6D4C41" }
@@ -56,7 +56,7 @@
     "name": ["Интернет", "Браузер"],
     "rule": {
       "type": "regex",
-      "regex": "\\b(chrome|msedge|firefox|opera|brave|vivaldi|browser|chromium)\\.exe\\b|\\b(chrome|chromium|firefox|opera|brave|vivaldi)\\b",
+      "regex": "\\b(chrome|msedge|firefox|opera|brave|vivaldi|browser)\\.exe\\b",
       "ignore_case": true
     },
     "data": { "color": "#00897B" }
@@ -82,7 +82,7 @@
     "name": ["ActivityWatch"],
     "rule": {
       "type": "regex",
-      "regex": "ActivityWatch|\\baw-(watcher|qt)\\.exe\\b|\\baw-(watcher|qt)\\b",
+      "regex": "ActivityWatch|\\baw-(watcher|qt)\\.exe\\b",
       "ignore_case": true
     },
     "data": {}
diff --git a/install-kit-awindows-20260427-211240/windows/ActivityWatch.Windows.Common.psm1 b/install-kit-awindows-20260427-211240/windows/ActivityWatch.Windows.Common.psm1
index 5f1e7fb..e3a30b5 100755
--- a/install-kit-awindows-20260427-211240/windows/ActivityWatch.Windows.Common.psm1
+++ b/install-kit-awindows-20260427-211240/windows/ActivityWatch.Windows.Common.psm1
@@ -306,9 +306,6 @@ function Copy-ActivityWatchCollectorAssets {
         $resolvedRules = Resolve-Path -LiteralPath $CustomRulesSource -ErrorAction Stop
         Copy-Item -LiteralPath $resolvedRules.Path -Destination $rulesTarget -Force
     }
-    else {
-        Copy-Item -LiteralPath $exampleRulesTarget -Destination $rulesTarget -Force
-    }
 
     if ($CustomPolicySource) {
         $resolvedPolicy = Resolve-Path -LiteralPath $CustomPolicySource -ErrorAction Stop
@@ -537,7 +534,11 @@ function Get-CollectorPowerShellProcessCount {
 function New-LaunchLock {
     param([string]`$StateRoot, [int]`$SessionId)
 
-    `$lockPath = Join-Path `$env:TEMP ("launch-watchers-session-{0}.lock" -f `$SessionId)
+    if (-not (Test-Path -LiteralPath `$StateRoot)) {
+        New-Item -Path `$StateRoot -ItemType Directory -Force | Out-Null
+    }
+
+    `$lockPath = Join-Path `$StateRoot ("launch-watchers-session-{0}.lock" -f `$SessionId)
     if (Test-Path -LiteralPath `$lockPath) {
         try {
             `$lockData = Get-Content -LiteralPath `$lockPath -Raw | ConvertFrom-Json
@@ -730,11 +731,13 @@ function Start-CollectorScriptIfNeeded {
         return
     }
 
-    `$staParam = if (`$ScriptPath -like "*endpoint-signals*") { "-STA" } else { `$null }
-    `$argumentList = @('-NoProfile', '-WindowStyle', 'Hidden', '-ExecutionPolicy', 'Bypass')
-    if (`$staParam) { `$argumentList += `$staParam }
-    `$argumentList += @('-File', `$ScriptPath, '-ConfigPath', `$ConfigPath)
-    Start-Process -FilePath `$PowerShellExe -ArgumentList `$argumentList -WindowStyle Hidden
+    Start-Process -FilePath `$PowerShellExe -ArgumentList @(
+        '-NoProfile',
+        '-WindowStyle', 'Hidden',
+        '-ExecutionPolicy', 'Bypass',
+        '-File', `$ScriptPath,
+        '-ConfigPath', `$ConfigPath
+    ) -WindowStyle Hidden
 }
 
 `$config = Get-DeploymentConfig -Path `$ConfigPath
diff --git a/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1 b/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1
index e7418d0..d0c809f 100755
--- a/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1
+++ b/install-kit-awindows-20260427-211240/windows/browser-domains-native-collector.ps1
@@ -1,122 +1,4 @@
-[CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$RulesPath,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [string]$IncidentLogPath,
-    [int]$PollSeconds,
-    [int]$PulseSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-Add-Type -AssemblyName UIAutomationClient
-Add-Type -AssemblyName UIAutomationTypes
-
-Add-Type @"
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-
-public static class NativeAwMethods {
-    [DllImport("user32.dll")]
-    public static extern IntPtr GetForegroundWindow();
-
-    [DllImport("user32.dll")]
-    public static extern uint GetWindowThreadProcessId(IntPtr hWnd, out uint lpdwProcessId);
-
-    [DllImport("user32.dll", CharSet = CharSet.Unicode)]
-    public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
-
-    [DllImport("user32.dll")]
-    public static extern int GetWindowTextLength(IntPtr hWnd);
-}
-"@
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'Укажите ServerHost или подготовьте deployment-config.json.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedRulesPath = if ($RulesPath) { $RulesPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.rulesPath } else { 'C:\ProgramData\AWatch-rus\web-category-rules.json' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedPulseSeconds = if ($PSBoundParameters.ContainsKey('PulseSeconds')) { $PulseSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pulseSeconds } else { 30 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("browser-domains-{0}.log" -f $env:USERNAME) }
-$resolvedIncidentLogPath = if ($IncidentLogPath) { $IncidentLogPath } else { Join-Path $resolvedLogsRoot ("dlp-incidents-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentLogPath = $resolvedIncidentLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-$script:IncidentState = @{}
-$script:DlpRules = @()
-$script:DlpDefaults = [ordered]@{
-    enabled = $false
-    cooldownSeconds = 300
-    action = 'log'
-    severity = 'low'
-}
-$script:BrowserMap = @{
-    msedge  = 'edge'
-    chrome  = 'chrome'
-    brave   = 'brave'
-    vivaldi = 'vivaldi'
-    opera   = 'opera'
-    firefox = 'firefox'
-}
-$script:CategoryRules = @(
-    @{ Name = 'work_business_systems'; Group = 'work'; Domains = @('bitrix24.ru', '1c.ru', 'sbis.ru', 'kontur.ru', 'diadoc.ru', 'nalog.gov.ru', 'gosuslugi.ru') }
-    @{ Name = 'work_docs_collab'; Group = 'work'; Domains = @('office.com', 'sharepoint.com', 'docs.google.com', 'drive.google.com', 'notion.so', 'miro.com') }
-    @{ Name = 'work_dev'; Group = 'work'; Domains = @('github.com', 'gitlab.com', 'bitbucket.org', 'youtrack.cloud', 'atlassian.net') }
-    @{ Name = 'work_communication'; Group = 'work'; Domains = @('teams.microsoft.com', 'outlook.office.com', 'web.telegram.org', 'slack.com', 'zoom.us') }
-    @{ Name = 'neutral_search_reference'; Group = 'neutral'; Domains = @('google.com', 'google.ru', 'yandex.ru', 'bing.com', 'duckduckgo.com', 'wikipedia.org') }
-    @{ Name = 'neutral_news'; Group = 'neutral'; Domains = @('rbc.ru', 'tass.ru', 'ria.ru', 'kommersant.ru', 'vedomosti.ru') }
-    @{ Name = 'personal_social'; Group = 'personal'; Domains = @('vk.com', 'ok.ru', 'facebook.com', 'instagram.com', 'tiktok.com', 'x.com', 'twitter.com') }
-    @{ Name = 'personal_video'; Group = 'personal'; Domains = @('youtube.com', 'youtu.be', 'rutube.ru', 'twitch.tv', 'kinopoisk.ru') }
-    @{ Name = 'personal_marketplace'; Group = 'personal'; Domains = @('ozon.ru', 'wildberries.ru', 'avito.ru', 'aliexpress.com', 'market.yandex.ru') }
-    @{ Name = 'personal_entertainment'; Group = 'personal'; Domains = @('dzen.ru', 'pikabu.ru', 'dtf.ru', 'playground.ru') }
-)
-
-function Write-CollectorLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch { Write-Error [CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -659,7 +541,7 @@ function Send-DlpIncidentHeartbeat {
         } + $captureData
     } | ConvertTo-Json -Depth 5 -Compress
 
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
+    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event | Out-Null
 }
 
 function Get-FileSha256Hex {
@@ -819,26 +701,13 @@ function Ensure-Bucket {
         return
     }
 
-    try {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-        $script:KnownBuckets[$BucketId] = $true
-        return
-    }
-    catch {
-    }
-
     $body = @{
         client   = $ClientName
         type     = $BucketType
         hostname = $script:Hostname
     } | ConvertTo-Json -Compress
 
-    try {
-        Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json; charset=utf-8' -Body ([Text.Encoding]::UTF8.GetBytes($body)) | Out-Null
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-    }
+    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json' -Body $body | Out-Null
     $script:KnownBuckets[$BucketId] = $true
 }
 
@@ -864,7 +733,7 @@ function Send-Heartbeat {
         }
     } | ConvertTo-Json -Depth 4 -Compress
 
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
+    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event | Out-Null
 }
 
 function Send-CategoryHeartbeat {
@@ -901,3225 +770,7 @@ function Send-CategoryHeartbeat {
         }
     } | ConvertTo-Json -Depth 4 -Compress
 
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-Load-CustomCategoryRules -Path $resolvedRulesPath
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-CollectorLog ("коллектор запущен для {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $context = Get-ForegroundWindowContext
-        if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
-            $url = Get-BrowserUrlFromWindow -Handle $context.Handle
-            if ($url) {
-                $browserKey = $script:BrowserMap[$context.ProcessName]
-                $domain = Get-HostFromUrl -Url $url
-                if (-not $domain) {
-                    $domain = 'unknown'
-                }
-
-                $rootDomain = Get-RootDomain -DomainHost $domain
-                if (-not $rootDomain) {
-                    $rootDomain = $domain
-                }
-
-                $category = Get-WebCategory -DomainHost $domain
-                $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
-                Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
-                Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
-                Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
-
-                $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
-                if ($decision) {
-                    $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
-                    $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
-                    if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
-                        Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
-                        if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
-                            Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-}
-
-function Write-DlpIncidentLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:IncidentLogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$RulesPath,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [string]$IncidentLogPath,
-    [int]$PollSeconds,
-    [int]$PulseSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-Add-Type -AssemblyName UIAutomationClient
-Add-Type -AssemblyName UIAutomationTypes
-
-Add-Type @"
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-
-public static class NativeAwMethods {
-    [DllImport("user32.dll")]
-    public static extern IntPtr GetForegroundWindow();
-
-    [DllImport("user32.dll")]
-    public static extern uint GetWindowThreadProcessId(IntPtr hWnd, out uint lpdwProcessId);
-
-    [DllImport("user32.dll", CharSet = CharSet.Unicode)]
-    public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
-
-    [DllImport("user32.dll")]
-    public static extern int GetWindowTextLength(IntPtr hWnd);
-}
-"@
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'Укажите ServerHost или подготовьте deployment-config.json.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedRulesPath = if ($RulesPath) { $RulesPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.rulesPath } else { 'C:\ProgramData\AWatch-rus\web-category-rules.json' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedPulseSeconds = if ($PSBoundParameters.ContainsKey('PulseSeconds')) { $PulseSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pulseSeconds } else { 30 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("browser-domains-{0}.log" -f $env:USERNAME) }
-$resolvedIncidentLogPath = if ($IncidentLogPath) { $IncidentLogPath } else { Join-Path $resolvedLogsRoot ("dlp-incidents-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentLogPath = $resolvedIncidentLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-$script:IncidentState = @{}
-$script:DlpRules = @()
-$script:DlpDefaults = [ordered]@{
-    enabled = $false
-    cooldownSeconds = 300
-    action = 'log'
-    severity = 'low'
-}
-$script:BrowserMap = @{
-    msedge  = 'edge'
-    chrome  = 'chrome'
-    brave   = 'brave'
-    vivaldi = 'vivaldi'
-    opera   = 'opera'
-    firefox = 'firefox'
-}
-$script:CategoryRules = @(
-    @{ Name = 'work_business_systems'; Group = 'work'; Domains = @('bitrix24.ru', '1c.ru', 'sbis.ru', 'kontur.ru', 'diadoc.ru', 'nalog.gov.ru', 'gosuslugi.ru') }
-    @{ Name = 'work_docs_collab'; Group = 'work'; Domains = @('office.com', 'sharepoint.com', 'docs.google.com', 'drive.google.com', 'notion.so', 'miro.com') }
-    @{ Name = 'work_dev'; Group = 'work'; Domains = @('github.com', 'gitlab.com', 'bitbucket.org', 'youtrack.cloud', 'atlassian.net') }
-    @{ Name = 'work_communication'; Group = 'work'; Domains = @('teams.microsoft.com', 'outlook.office.com', 'web.telegram.org', 'slack.com', 'zoom.us') }
-    @{ Name = 'neutral_search_reference'; Group = 'neutral'; Domains = @('google.com', 'google.ru', 'yandex.ru', 'bing.com', 'duckduckgo.com', 'wikipedia.org') }
-    @{ Name = 'neutral_news'; Group = 'neutral'; Domains = @('rbc.ru', 'tass.ru', 'ria.ru', 'kommersant.ru', 'vedomosti.ru') }
-    @{ Name = 'personal_social'; Group = 'personal'; Domains = @('vk.com', 'ok.ru', 'facebook.com', 'instagram.com', 'tiktok.com', 'x.com', 'twitter.com') }
-    @{ Name = 'personal_video'; Group = 'personal'; Domains = @('youtube.com', 'youtu.be', 'rutube.ru', 'twitch.tv', 'kinopoisk.ru') }
-    @{ Name = 'personal_marketplace'; Group = 'personal'; Domains = @('ozon.ru', 'wildberries.ru', 'avito.ru', 'aliexpress.com', 'market.yandex.ru') }
-    @{ Name = 'personal_entertainment'; Group = 'personal'; Domains = @('dzen.ru', 'pikabu.ru', 'dtf.ru', 'playground.ru') }
-)
-
-function Write-CollectorLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Write-DlpIncidentLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:IncidentLogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Test-DomainMatch {
-    param(
-        [string]$DomainHost,
-        [string]$RuleDomain
-    )
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost) -or [string]::IsNullOrWhiteSpace($RuleDomain)) {
-        return $false
-    }
-
-    $left = $DomainHost.ToLowerInvariant()
-    $right = $RuleDomain.ToLowerInvariant()
-    return $left -eq $right -or $left.EndsWith('.' + $right)
-}
-
-function Get-HostFromUrl {
-    param([string]$Url)
-
-    if ([string]::IsNullOrWhiteSpace($Url)) {
-        return $null
-    }
-
-    try {
-        $uri = [Uri]$Url
-        $uriHost = $uri.Host.ToLowerInvariant()
-        if ($uriHost.StartsWith('www.')) {
-            return $uriHost.Substring(4)
-        }
-
-        return $uriHost
-    }
-    catch {
-        return $null
-    }
-}
-
-function Get-RootDomain {
-    param([string]$DomainHost)
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost)) {
-        return $null
-    }
-
-    $parts = $DomainHost.Split('.')
-    if ($parts.Count -le 2) {
-        return $DomainHost
-    }
-
-    $suffix = ('{0}.{1}' -f $parts[$parts.Count - 2], $parts[$parts.Count - 1]).ToLowerInvariant()
-    $compoundTlds = @('co.uk', 'com.au', 'co.jp', 'com.br', 'co.in', 'com.tr', 'com.cn')
-    if (($compoundTlds -contains $suffix) -and $parts.Count -ge 3) {
-        return ('{0}.{1}' -f $parts[$parts.Count - 3], $suffix).ToLowerInvariant()
-    }
-
-    return $suffix
-}
-
-function ConvertTo-NormalizedUrl {
-    param([AllowNull()][string]$Value)
-
-    if ([string]::IsNullOrWhiteSpace($Value)) {
-        return $null
-    }
-
-    $candidate = $Value.Trim()
-    if ($candidate.Length -lt 4) {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(search|find|address and search|search with|новая вкладка|new tab)') {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(https?|file|ftp|chrome|edge|about|view-source)://') {
-        return $candidate
-    }
-
-    if ($candidate -match '^(?i)localhost([/:]|$)') {
-        return "http://$candidate"
-    }
-
-    if ($candidate -match '^[a-z0-9.-]+\.[a-z]{2,}([/:?#].*)?$') {
-        return "https://$candidate"
-    }
-
-    return $null
-}
-
-function Load-CustomCategoryRules {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $rules = @()
-
-        if ($parsed.rules) {
-            $sourceRules = @($parsed.rules)
-        }
-        elseif ($parsed -is [System.Collections.IEnumerable]) {
-            $sourceRules = @($parsed)
-        }
-        else {
-            $sourceRules = @()
-        }
-
-        foreach ($rule in $sourceRules) {
-            if (-not $rule) {
-                continue
-            }
-
-            $name = [string]$rule.name
-            $group = [string]$rule.group
-            $domains = @($rule.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ })
-
-            if ($name -and $group -and $domains.Count -gt 0) {
-                $rules += @{
-                    Name    = $name
-                    Group   = $group
-                    Domains = $domains
-                }
-            }
-        }
-
-        if ($rules.Count -gt 0) {
-            $script:CategoryRules = @($rules) + @($script:CategoryRules)
-            Write-CollectorLog ("пользовательские правила загружены: {0}" -f $rules.Count)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось загрузить пользовательские правила: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Get-WebCategory {
-    param([string]$DomainHost)
-
-    foreach ($rule in $script:CategoryRules) {
-        foreach ($domain in $rule.Domains) {
-            if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-                return [pscustomobject]@{
-                    Name  = [string]$rule.Name
-                    Group = [string]$rule.Group
-                    Rule  = [string]$domain
-                }
-            }
-        }
-    }
-
-    return [pscustomobject]@{
-        Name  = 'uncategorized'
-        Group = 'neutral'
-        Rule  = 'none'
-    }
-}
-
-function Test-DomainListMatch {
-    param(
-        [string]$DomainHost,
-        [string[]]$Domains
-    )
-
-    if (-not $Domains -or $Domains.Count -eq 0) {
-        return $false
-    }
-
-    foreach ($domain in $Domains) {
-        if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-            return $true
-        }
-    }
-
-    return $false
-}
-
-function Test-DlpRuleTimeWindow {
-    param(
-        [int]$CurrentHour,
-        [AllowNull()][int]$HourFrom,
-        [AllowNull()][int]$HourTo
-    )
-
-    if ($null -eq $HourFrom -or $null -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -lt $HourTo) {
-        return ($CurrentHour -ge $HourFrom -and $CurrentHour -lt $HourTo)
-    }
-
-    return ($CurrentHour -ge $HourFrom -or $CurrentHour -lt $HourTo)
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-CollectorLog ("DLP-политика не найдена, DLP отключен: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $defaults = $parsed.defaults
-        if ($defaults) {
-            if ($defaults.PSObject.Properties.Name -contains 'enabled') {
-                $script:DlpDefaults.enabled = [bool]$defaults.enabled
-            }
-            if ($defaults.cooldownSeconds) {
-                $script:DlpDefaults.cooldownSeconds = [int]$defaults.cooldownSeconds
-            }
-            if ($defaults.action) {
-                $script:DlpDefaults.action = [string]$defaults.action
-            }
-            if ($defaults.severity) {
-                $script:DlpDefaults.severity = [string]$defaults.severity
-            }
-        }
-
-        $loaded = @()
-        foreach ($rule in @($parsed.rules)) {
-            if (-not $rule) { continue }
-            $when = $rule.when
-            if (-not $when) {
-                $when = [pscustomobject]@{}
-            }
-            $loaded += [pscustomobject]@{
-                id = [string]$rule.id
-                enabled = if ($rule.PSObject.Properties.Name -contains 'enabled') { [bool]$rule.enabled } else { $true }
-                action = if ($rule.action) { [string]$rule.action } else { [string]$script:DlpDefaults.action }
-                severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:DlpDefaults.severity }
-                message = if ($rule.message) { [string]$rule.message } else { "Сработало DLP-правило: $($rule.id)" }
-                cooldownSeconds = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:DlpDefaults.cooldownSeconds }
-                when = [pscustomobject]@{
-                    domains = if ($when.PSObject.Properties.Name -contains 'domains') { @($when.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categoryGroups = if ($when.PSObject.Properties.Name -contains 'categoryGroups') { @($when.categoryGroups | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categories = if ($when.PSObject.Properties.Name -contains 'categories') { @($when.categories | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    browsers = if ($when.PSObject.Properties.Name -contains 'browsers') { @($when.browsers | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    urlRegex = if ($when.PSObject.Properties.Name -contains 'urlRegex' -and $when.urlRegex) { [string]$when.urlRegex } else { $null }
-                    titleRegex = if ($when.PSObject.Properties.Name -contains 'titleRegex' -and $when.titleRegex) { [string]$when.titleRegex } else { $null }
-                    hourFrom = if ($when.PSObject.Properties.Name -contains 'hourFrom') { [int]$when.hourFrom } else { $null }
-                    hourTo = if ($when.PSObject.Properties.Name -contains 'hourTo') { [int]$when.hourTo } else { $null }
-                }
-            }
-        }
-
-        $script:DlpRules = @($loaded)
-        Write-CollectorLog ("DLP-политика загружена: включена={0}, правил={1}" -f $script:DlpDefaults.enabled, $script:DlpRules.Count)
-    }
-    catch {
-        Write-CollectorLog ("не удалось разобрать DLP-политику: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Test-DlpRuleMatch {
-    param(
-        [pscustomobject]$Rule,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $Rule.enabled) {
-        return $false
-    }
-
-    $when = $Rule.when
-    $currentHour = (Get-Date).Hour
-    if (-not (Test-DlpRuleTimeWindow -CurrentHour $currentHour -HourFrom $when.hourFrom -HourTo $when.hourTo)) {
-        return $false
-    }
-
-    if ($when.domains.Count -gt 0) {
-        $domainMatched = (Test-DomainListMatch -DomainHost $Domain -Domains $when.domains) -or (Test-DomainListMatch -DomainHost $RootDomain -Domains $when.domains)
-        if (-not $domainMatched) {
-            return $false
-        }
-    }
-
-    if ($when.categoryGroups.Count -gt 0 -and ($when.categoryGroups -notcontains $CategoryGroup.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.categories.Count -gt 0 -and ($when.categories -notcontains $Category.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.browsers.Count -gt 0 -and ($when.browsers -notcontains $BrowserKey.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.urlRegex) {
-        if (-not ($Url -match $when.urlRegex)) {
-            return $false
-        }
-    }
-
-    if ($when.titleRegex) {
-        if (-not ($Title -match $when.titleRegex)) {
-            return $false
-        }
-    }
-
-    return $true
-}
-
-function Get-DlpDecision {
-    param(
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $script:DlpDefaults.enabled) {
-        return $null
-    }
-
-    foreach ($rule in $script:DlpRules) {
-        if (Test-DlpRuleMatch -Rule $rule -Domain $Domain -RootDomain $RootDomain -Url $Url -Title $Title -BrowserKey $BrowserKey -Category $Category -CategoryGroup $CategoryGroup) {
-            return $rule
-        }
-    }
-
-    return $null
-}
-
-function Should-EmitIncident {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:IncidentState.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:IncidentState[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:IncidentState[$Fingerprint] = $now
-    return $true
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [pscustomobject]$Decision,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId ([string]$Decision.id) -SignalType 'web'
-        }
-        catch {
-        }
-    }
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId         = [string]$Decision.id
-            action         = [string]$Decision.action
-            severity       = [string]$Decision.severity
-            message        = [string]$Decision.message
-            url            = $Url
-            title          = $Title
-            browser        = $BrowserKey
-            app            = "$ProcessName.exe"
-            domain         = $Domain
-            rootDomain     = $RootDomain
-            category       = $Category
-            categoryGroup  = $CategoryGroup
-            username       = $env:USERNAME
-            hostname       = $script:Hostname
-            sessionId      = $script:SessionId
-            source         = 'uia-native-dlp'
-        } + $captureData
-    } | ConvertTo-Json -Depth 5 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось сделать снимок инцидента: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-function Get-ForegroundWindowContext {
-    $handle = [NativeAwMethods]::GetForegroundWindow()
-    if ($handle -eq [IntPtr]::Zero) {
-        return $null
-    }
-
-    $processId = [uint32]0
-    [void][NativeAwMethods]::GetWindowThreadProcessId($handle, [ref]$processId)
-    if (-not $processId) {
-        return $null
-    }
-
-    $process = Get-Process -Id ([int]$processId) -ErrorAction SilentlyContinue
-    if (-not $process) {
-        return $null
-    }
-
-    $textLength = [NativeAwMethods]::GetWindowTextLength($handle)
-    $builder = [Text.StringBuilder]::new([Math]::Max($textLength + 1, 260))
-    [void][NativeAwMethods]::GetWindowText($handle, $builder, $builder.Capacity)
-
-    return [pscustomobject]@{
-        Handle      = $handle
-        ProcessName = $process.ProcessName.ToLowerInvariant()
-        Title       = $builder.ToString()
-    }
-}
-
-function Get-BrowserUrlFromWindow {
-    param([IntPtr]$Handle)
-
-    $root = [System.Windows.Automation.AutomationElement]::FromHandle($Handle)
-    if (-not $root) {
-        return $null
-    }
-
-    $editCondition = [System.Windows.Automation.PropertyCondition]::new(
-        [System.Windows.Automation.AutomationElement]::ControlTypeProperty,
-        [System.Windows.Automation.ControlType]::Edit
-    )
-
-    $edits = $root.FindAll([System.Windows.Automation.TreeScope]::Descendants, $editCondition)
-    foreach ($edit in $edits) {
-        $valuePattern = $null
-        if ($edit.TryGetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern, [ref]$valuePattern)) {
-            $candidate = ConvertTo-NormalizedUrl -Value $valuePattern.Current.Value
-            if ($candidate) {
-                return $candidate
-            }
-        }
-
-        $candidateFromName = ConvertTo-NormalizedUrl -Value $edit.Current.Name
-        if ($candidateFromName) {
-            return $candidateFromName
-        }
-    }
-
-    return $null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType = 'web.tab.current'
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-        $script:KnownBuckets[$BucketId] = $true
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json; charset=utf-8' -Body ([Text.Encoding]::UTF8.GetBytes($body)) | Out-Null
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-    }
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-Heartbeat {
-    param(
-        [string]$BucketId,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName
-    )
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url       = $Url
-            title     = $Title
-            browser   = $BrowserKey
-            app       = "$ProcessName.exe"
-            source    = 'uia-native'
-            sessionId = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Send-CategoryHeartbeat {
-    param(
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup,
-        [string]$CategoryRule
-    )
-
-    $bucketId = 'aw-detmir-web-category_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-detmir-web-category' -BucketType 'aw.web.category'
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url           = $Url
-            title         = $Title
-            browser       = $BrowserKey
-            app           = "$ProcessName.exe"
-            domain        = $Domain
-            rootDomain    = $RootDomain
-            category      = $Category
-            categoryGroup = $CategoryGroup
-            categoryRule  = $CategoryRule
-            source        = 'uia-native'
-            sessionId     = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-Load-CustomCategoryRules -Path $resolvedRulesPath
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-CollectorLog ("коллектор запущен для {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $context = Get-ForegroundWindowContext
-        if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
-            $url = Get-BrowserUrlFromWindow -Handle $context.Handle
-            if ($url) {
-                $browserKey = $script:BrowserMap[$context.ProcessName]
-                $domain = Get-HostFromUrl -Url $url
-                if (-not $domain) {
-                    $domain = 'unknown'
-                }
-
-                $rootDomain = Get-RootDomain -DomainHost $domain
-                if (-not $rootDomain) {
-                    $rootDomain = $domain
-                }
-
-                $category = Get-WebCategory -DomainHost $domain
-                $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
-                Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
-                Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
-                Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
-
-                $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
-                if ($decision) {
-                    $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
-                    $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
-                    if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
-                        Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
-                        if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
-                            Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-}
-
-function Test-DomainMatch {
-    param(
-        [string]$DomainHost,
-        [string]$RuleDomain
-    )
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost) -or [string]::IsNullOrWhiteSpace($RuleDomain)) {
-        return $false
-    }
-
-    $left = $DomainHost.ToLowerInvariant()
-    $right = $RuleDomain.ToLowerInvariant()
-    return $left -eq $right -or $left.EndsWith('.' + $right)
-}
-
-function Get-HostFromUrl {
-    param([string]$Url)
-
-    if ([string]::IsNullOrWhiteSpace($Url)) {
-        return $null
-    }
-
-    try {
-        $uri = [Uri]$Url
-        $uriHost = $uri.Host.ToLowerInvariant()
-        if ($uriHost.StartsWith('www.')) {
-            return $uriHost.Substring(4)
-        }
-
-        return $uriHost
-    }
-    catch {
-        return $null
-    }
-}
-
-function Get-RootDomain {
-    param([string]$DomainHost)
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost)) {
-        return $null
-    }
-
-    $parts = $DomainHost.Split('.')
-    if ($parts.Count -le 2) {
-        return $DomainHost
-    }
-
-    $suffix = ('{0}.{1}' -f $parts[$parts.Count - 2], $parts[$parts.Count - 1]).ToLowerInvariant()
-    $compoundTlds = @('co.uk', 'com.au', 'co.jp', 'com.br', 'co.in', 'com.tr', 'com.cn')
-    if (($compoundTlds -contains $suffix) -and $parts.Count -ge 3) {
-        return ('{0}.{1}' -f $parts[$parts.Count - 3], $suffix).ToLowerInvariant()
-    }
-
-    return $suffix
-}
-
-function ConvertTo-NormalizedUrl {
-    param([AllowNull()][string]$Value)
-
-    if ([string]::IsNullOrWhiteSpace($Value)) {
-        return $null
-    }
-
-    $candidate = $Value.Trim()
-    if ($candidate.Length -lt 4) {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(search|find|address and search|search with|новая вкладка|new tab)') {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(https?|file|ftp|chrome|edge|about|view-source)://') {
-        return $candidate
-    }
-
-    if ($candidate -match '^(?i)localhost([/:]|$)') {
-        return "http://$candidate"
-    }
-
-    if ($candidate -match '^[a-z0-9.-]+\.[a-z]{2,}([/:?#].*)?$') {
-        return "https://$candidate"
-    }
-
-    return $null
-}
-
-function Load-CustomCategoryRules {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $rules = @()
-
-        if ($parsed.rules) {
-            $sourceRules = @($parsed.rules)
-        }
-        elseif ($parsed -is [System.Collections.IEnumerable]) {
-            $sourceRules = @($parsed)
-        }
-        else {
-            $sourceRules = @()
-        }
-
-        foreach ($rule in $sourceRules) {
-            if (-not $rule) {
-                continue
-            }
-
-            $name = [string]$rule.name
-            $group = [string]$rule.group
-            $domains = @($rule.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ })
-
-            if ($name -and $group -and $domains.Count -gt 0) {
-                $rules += @{
-                    Name    = $name
-                    Group   = $group
-                    Domains = $domains
-                }
-            }
-        }
-
-        if ($rules.Count -gt 0) {
-            $script:CategoryRules = @($rules) + @($script:CategoryRules)
-            Write-CollectorLog ("пользовательские правила загружены: {0}" -f $rules.Count)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось загрузить пользовательские правила: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Get-WebCategory {
-    param([string]$DomainHost)
-
-    foreach ($rule in $script:CategoryRules) {
-        foreach ($domain in $rule.Domains) {
-            if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-                return [pscustomobject]@{
-                    Name  = [string]$rule.Name
-                    Group = [string]$rule.Group
-                    Rule  = [string]$domain
-                }
-            }
-        }
-    }
-
-    return [pscustomobject]@{
-        Name  = 'uncategorized'
-        Group = 'neutral'
-        Rule  = 'none'
-    }
-}
-
-function Test-DomainListMatch {
-    param(
-        [string]$DomainHost,
-        [string[]]$Domains
-    )
-
-    if (-not $Domains -or $Domains.Count -eq 0) {
-        return $false
-    }
-
-    foreach ($domain in $Domains) {
-        if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-            return $true
-        }
-    }
-
-    return $false
-}
-
-function Test-DlpRuleTimeWindow {
-    param(
-        [int]$CurrentHour,
-        [AllowNull()][int]$HourFrom,
-        [AllowNull()][int]$HourTo
-    )
-
-    if ($null -eq $HourFrom -or $null -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -lt $HourTo) {
-        return ($CurrentHour -ge $HourFrom -and $CurrentHour -lt $HourTo)
-    }
-
-    return ($CurrentHour -ge $HourFrom -or $CurrentHour -lt $HourTo)
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-CollectorLog ("DLP-политика не найдена, DLP отключен: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $defaults = $parsed.defaults
-        if ($defaults) {
-            if ($defaults.PSObject.Properties.Name -contains 'enabled') {
-                $script:DlpDefaults.enabled = [bool]$defaults.enabled
-            }
-            if ($defaults.cooldownSeconds) {
-                $script:DlpDefaults.cooldownSeconds = [int]$defaults.cooldownSeconds
-            }
-            if ($defaults.action) {
-                $script:DlpDefaults.action = [string]$defaults.action
-            }
-            if ($defaults.severity) {
-                $script:DlpDefaults.severity = [string]$defaults.severity
-            }
-        }
-
-        $loaded = @()
-        foreach ($rule in @($parsed.rules)) {
-            if (-not $rule) { continue }
-            $when = $rule.when
-            if (-not $when) {
-                $when = [pscustomobject]@{}
-            }
-            $loaded += [pscustomobject]@{
-                id = [string]$rule.id
-                enabled = if ($rule.PSObject.Properties.Name -contains 'enabled') { [bool]$rule.enabled } else { $true }
-                action = if ($rule.action) { [string]$rule.action } else { [string]$script:DlpDefaults.action }
-                severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:DlpDefaults.severity }
-                message = if ($rule.message) { [string]$rule.message } else { "Сработало DLP-правило: $($rule.id)" }
-                cooldownSeconds = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:DlpDefaults.cooldownSeconds }
-                when = [pscustomobject]@{
-                    domains = if ($when.PSObject.Properties.Name -contains 'domains') { @($when.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categoryGroups = if ($when.PSObject.Properties.Name -contains 'categoryGroups') { @($when.categoryGroups | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categories = if ($when.PSObject.Properties.Name -contains 'categories') { @($when.categories | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    browsers = if ($when.PSObject.Properties.Name -contains 'browsers') { @($when.browsers | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    urlRegex = if ($when.PSObject.Properties.Name -contains 'urlRegex' -and $when.urlRegex) { [string]$when.urlRegex } else { $null }
-                    titleRegex = if ($when.PSObject.Properties.Name -contains 'titleRegex' -and $when.titleRegex) { [string]$when.titleRegex } else { $null }
-                    hourFrom = if ($when.PSObject.Properties.Name -contains 'hourFrom') { [int]$when.hourFrom } else { $null }
-                    hourTo = if ($when.PSObject.Properties.Name -contains 'hourTo') { [int]$when.hourTo } else { $null }
-                }
-            }
-        }
-
-        $script:DlpRules = @($loaded)
-        Write-CollectorLog ("DLP-политика загружена: включена={0}, правил={1}" -f $script:DlpDefaults.enabled, $script:DlpRules.Count)
-    }
-    catch {
-        Write-CollectorLog ("не удалось разобрать DLP-политику: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Test-DlpRuleMatch {
-    param(
-        [pscustomobject]$Rule,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $Rule.enabled) {
-        return $false
-    }
-
-    $when = $Rule.when
-    $currentHour = (Get-Date).Hour
-    if (-not (Test-DlpRuleTimeWindow -CurrentHour $currentHour -HourFrom $when.hourFrom -HourTo $when.hourTo)) {
-        return $false
-    }
-
-    if ($when.domains.Count -gt 0) {
-        $domainMatched = (Test-DomainListMatch -DomainHost $Domain -Domains $when.domains) -or (Test-DomainListMatch -DomainHost $RootDomain -Domains $when.domains)
-        if (-not $domainMatched) {
-            return $false
-        }
-    }
-
-    if ($when.categoryGroups.Count -gt 0 -and ($when.categoryGroups -notcontains $CategoryGroup.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.categories.Count -gt 0 -and ($when.categories -notcontains $Category.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.browsers.Count -gt 0 -and ($when.browsers -notcontains $BrowserKey.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.urlRegex) {
-        if (-not ($Url -match $when.urlRegex)) {
-            return $false
-        }
-    }
-
-    if ($when.titleRegex) {
-        if (-not ($Title -match $when.titleRegex)) {
-            return $false
-        }
-    }
-
-    return $true
-}
-
-function Get-DlpDecision {
-    param(
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $script:DlpDefaults.enabled) {
-        return $null
-    }
-
-    foreach ($rule in $script:DlpRules) {
-        if (Test-DlpRuleMatch -Rule $rule -Domain $Domain -RootDomain $RootDomain -Url $Url -Title $Title -BrowserKey $BrowserKey -Category $Category -CategoryGroup $CategoryGroup) {
-            return $rule
-        }
-    }
-
-    return $null
-}
-
-function Should-EmitIncident {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:IncidentState.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:IncidentState[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:IncidentState[$Fingerprint] = $now
-    return $true
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [pscustomobject]$Decision,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId ([string]$Decision.id) -SignalType 'web'
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$RulesPath,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [string]$IncidentLogPath,
-    [int]$PollSeconds,
-    [int]$PulseSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-Add-Type -AssemblyName UIAutomationClient
-Add-Type -AssemblyName UIAutomationTypes
-
-Add-Type @"
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-
-public static class NativeAwMethods {
-    [DllImport("user32.dll")]
-    public static extern IntPtr GetForegroundWindow();
-
-    [DllImport("user32.dll")]
-    public static extern uint GetWindowThreadProcessId(IntPtr hWnd, out uint lpdwProcessId);
-
-    [DllImport("user32.dll", CharSet = CharSet.Unicode)]
-    public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
-
-    [DllImport("user32.dll")]
-    public static extern int GetWindowTextLength(IntPtr hWnd);
-}
-"@
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'Укажите ServerHost или подготовьте deployment-config.json.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedRulesPath = if ($RulesPath) { $RulesPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.rulesPath } else { 'C:\ProgramData\AWatch-rus\web-category-rules.json' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedPulseSeconds = if ($PSBoundParameters.ContainsKey('PulseSeconds')) { $PulseSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pulseSeconds } else { 30 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("browser-domains-{0}.log" -f $env:USERNAME) }
-$resolvedIncidentLogPath = if ($IncidentLogPath) { $IncidentLogPath } else { Join-Path $resolvedLogsRoot ("dlp-incidents-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentLogPath = $resolvedIncidentLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-$script:IncidentState = @{}
-$script:DlpRules = @()
-$script:DlpDefaults = [ordered]@{
-    enabled = $false
-    cooldownSeconds = 300
-    action = 'log'
-    severity = 'low'
-}
-$script:BrowserMap = @{
-    msedge  = 'edge'
-    chrome  = 'chrome'
-    brave   = 'brave'
-    vivaldi = 'vivaldi'
-    opera   = 'opera'
-    firefox = 'firefox'
-}
-$script:CategoryRules = @(
-    @{ Name = 'work_business_systems'; Group = 'work'; Domains = @('bitrix24.ru', '1c.ru', 'sbis.ru', 'kontur.ru', 'diadoc.ru', 'nalog.gov.ru', 'gosuslugi.ru') }
-    @{ Name = 'work_docs_collab'; Group = 'work'; Domains = @('office.com', 'sharepoint.com', 'docs.google.com', 'drive.google.com', 'notion.so', 'miro.com') }
-    @{ Name = 'work_dev'; Group = 'work'; Domains = @('github.com', 'gitlab.com', 'bitbucket.org', 'youtrack.cloud', 'atlassian.net') }
-    @{ Name = 'work_communication'; Group = 'work'; Domains = @('teams.microsoft.com', 'outlook.office.com', 'web.telegram.org', 'slack.com', 'zoom.us') }
-    @{ Name = 'neutral_search_reference'; Group = 'neutral'; Domains = @('google.com', 'google.ru', 'yandex.ru', 'bing.com', 'duckduckgo.com', 'wikipedia.org') }
-    @{ Name = 'neutral_news'; Group = 'neutral'; Domains = @('rbc.ru', 'tass.ru', 'ria.ru', 'kommersant.ru', 'vedomosti.ru') }
-    @{ Name = 'personal_social'; Group = 'personal'; Domains = @('vk.com', 'ok.ru', 'facebook.com', 'instagram.com', 'tiktok.com', 'x.com', 'twitter.com') }
-    @{ Name = 'personal_video'; Group = 'personal'; Domains = @('youtube.com', 'youtu.be', 'rutube.ru', 'twitch.tv', 'kinopoisk.ru') }
-    @{ Name = 'personal_marketplace'; Group = 'personal'; Domains = @('ozon.ru', 'wildberries.ru', 'avito.ru', 'aliexpress.com', 'market.yandex.ru') }
-    @{ Name = 'personal_entertainment'; Group = 'personal'; Domains = @('dzen.ru', 'pikabu.ru', 'dtf.ru', 'playground.ru') }
-)
-
-function Write-CollectorLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Write-DlpIncidentLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:IncidentLogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Test-DomainMatch {
-    param(
-        [string]$DomainHost,
-        [string]$RuleDomain
-    )
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost) -or [string]::IsNullOrWhiteSpace($RuleDomain)) {
-        return $false
-    }
-
-    $left = $DomainHost.ToLowerInvariant()
-    $right = $RuleDomain.ToLowerInvariant()
-    return $left -eq $right -or $left.EndsWith('.' + $right)
-}
-
-function Get-HostFromUrl {
-    param([string]$Url)
-
-    if ([string]::IsNullOrWhiteSpace($Url)) {
-        return $null
-    }
-
-    try {
-        $uri = [Uri]$Url
-        $uriHost = $uri.Host.ToLowerInvariant()
-        if ($uriHost.StartsWith('www.')) {
-            return $uriHost.Substring(4)
-        }
-
-        return $uriHost
-    }
-    catch {
-        return $null
-    }
-}
-
-function Get-RootDomain {
-    param([string]$DomainHost)
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost)) {
-        return $null
-    }
-
-    $parts = $DomainHost.Split('.')
-    if ($parts.Count -le 2) {
-        return $DomainHost
-    }
-
-    $suffix = ('{0}.{1}' -f $parts[$parts.Count - 2], $parts[$parts.Count - 1]).ToLowerInvariant()
-    $compoundTlds = @('co.uk', 'com.au', 'co.jp', 'com.br', 'co.in', 'com.tr', 'com.cn')
-    if (($compoundTlds -contains $suffix) -and $parts.Count -ge 3) {
-        return ('{0}.{1}' -f $parts[$parts.Count - 3], $suffix).ToLowerInvariant()
-    }
-
-    return $suffix
-}
-
-function ConvertTo-NormalizedUrl {
-    param([AllowNull()][string]$Value)
-
-    if ([string]::IsNullOrWhiteSpace($Value)) {
-        return $null
-    }
-
-    $candidate = $Value.Trim()
-    if ($candidate.Length -lt 4) {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(search|find|address and search|search with|новая вкладка|new tab)') {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(https?|file|ftp|chrome|edge|about|view-source)://') {
-        return $candidate
-    }
-
-    if ($candidate -match '^(?i)localhost([/:]|$)') {
-        return "http://$candidate"
-    }
-
-    if ($candidate -match '^[a-z0-9.-]+\.[a-z]{2,}([/:?#].*)?$') {
-        return "https://$candidate"
-    }
-
-    return $null
-}
-
-function Load-CustomCategoryRules {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $rules = @()
-
-        if ($parsed.rules) {
-            $sourceRules = @($parsed.rules)
-        }
-        elseif ($parsed -is [System.Collections.IEnumerable]) {
-            $sourceRules = @($parsed)
-        }
-        else {
-            $sourceRules = @()
-        }
-
-        foreach ($rule in $sourceRules) {
-            if (-not $rule) {
-                continue
-            }
-
-            $name = [string]$rule.name
-            $group = [string]$rule.group
-            $domains = @($rule.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ })
-
-            if ($name -and $group -and $domains.Count -gt 0) {
-                $rules += @{
-                    Name    = $name
-                    Group   = $group
-                    Domains = $domains
-                }
-            }
-        }
-
-        if ($rules.Count -gt 0) {
-            $script:CategoryRules = @($rules) + @($script:CategoryRules)
-            Write-CollectorLog ("пользовательские правила загружены: {0}" -f $rules.Count)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось загрузить пользовательские правила: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Get-WebCategory {
-    param([string]$DomainHost)
-
-    foreach ($rule in $script:CategoryRules) {
-        foreach ($domain in $rule.Domains) {
-            if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-                return [pscustomobject]@{
-                    Name  = [string]$rule.Name
-                    Group = [string]$rule.Group
-                    Rule  = [string]$domain
-                }
-            }
-        }
-    }
-
-    return [pscustomobject]@{
-        Name  = 'uncategorized'
-        Group = 'neutral'
-        Rule  = 'none'
-    }
-}
-
-function Test-DomainListMatch {
-    param(
-        [string]$DomainHost,
-        [string[]]$Domains
-    )
-
-    if (-not $Domains -or $Domains.Count -eq 0) {
-        return $false
-    }
-
-    foreach ($domain in $Domains) {
-        if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-            return $true
-        }
-    }
-
-    return $false
-}
-
-function Test-DlpRuleTimeWindow {
-    param(
-        [int]$CurrentHour,
-        [AllowNull()][int]$HourFrom,
-        [AllowNull()][int]$HourTo
-    )
-
-    if ($null -eq $HourFrom -or $null -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -lt $HourTo) {
-        return ($CurrentHour -ge $HourFrom -and $CurrentHour -lt $HourTo)
-    }
-
-    return ($CurrentHour -ge $HourFrom -or $CurrentHour -lt $HourTo)
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-CollectorLog ("DLP-политика не найдена, DLP отключен: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $defaults = $parsed.defaults
-        if ($defaults) {
-            if ($defaults.PSObject.Properties.Name -contains 'enabled') {
-                $script:DlpDefaults.enabled = [bool]$defaults.enabled
-            }
-            if ($defaults.cooldownSeconds) {
-                $script:DlpDefaults.cooldownSeconds = [int]$defaults.cooldownSeconds
-            }
-            if ($defaults.action) {
-                $script:DlpDefaults.action = [string]$defaults.action
-            }
-            if ($defaults.severity) {
-                $script:DlpDefaults.severity = [string]$defaults.severity
-            }
-        }
-
-        $loaded = @()
-        foreach ($rule in @($parsed.rules)) {
-            if (-not $rule) { continue }
-            $when = $rule.when
-            if (-not $when) {
-                $when = [pscustomobject]@{}
-            }
-            $loaded += [pscustomobject]@{
-                id = [string]$rule.id
-                enabled = if ($rule.PSObject.Properties.Name -contains 'enabled') { [bool]$rule.enabled } else { $true }
-                action = if ($rule.action) { [string]$rule.action } else { [string]$script:DlpDefaults.action }
-                severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:DlpDefaults.severity }
-                message = if ($rule.message) { [string]$rule.message } else { "Сработало DLP-правило: $($rule.id)" }
-                cooldownSeconds = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:DlpDefaults.cooldownSeconds }
-                when = [pscustomobject]@{
-                    domains = if ($when.PSObject.Properties.Name -contains 'domains') { @($when.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categoryGroups = if ($when.PSObject.Properties.Name -contains 'categoryGroups') { @($when.categoryGroups | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categories = if ($when.PSObject.Properties.Name -contains 'categories') { @($when.categories | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    browsers = if ($when.PSObject.Properties.Name -contains 'browsers') { @($when.browsers | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    urlRegex = if ($when.PSObject.Properties.Name -contains 'urlRegex' -and $when.urlRegex) { [string]$when.urlRegex } else { $null }
-                    titleRegex = if ($when.PSObject.Properties.Name -contains 'titleRegex' -and $when.titleRegex) { [string]$when.titleRegex } else { $null }
-                    hourFrom = if ($when.PSObject.Properties.Name -contains 'hourFrom') { [int]$when.hourFrom } else { $null }
-                    hourTo = if ($when.PSObject.Properties.Name -contains 'hourTo') { [int]$when.hourTo } else { $null }
-                }
-            }
-        }
-
-        $script:DlpRules = @($loaded)
-        Write-CollectorLog ("DLP-политика загружена: включена={0}, правил={1}" -f $script:DlpDefaults.enabled, $script:DlpRules.Count)
-    }
-    catch {
-        Write-CollectorLog ("не удалось разобрать DLP-политику: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Test-DlpRuleMatch {
-    param(
-        [pscustomobject]$Rule,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $Rule.enabled) {
-        return $false
-    }
-
-    $when = $Rule.when
-    $currentHour = (Get-Date).Hour
-    if (-not (Test-DlpRuleTimeWindow -CurrentHour $currentHour -HourFrom $when.hourFrom -HourTo $when.hourTo)) {
-        return $false
-    }
-
-    if ($when.domains.Count -gt 0) {
-        $domainMatched = (Test-DomainListMatch -DomainHost $Domain -Domains $when.domains) -or (Test-DomainListMatch -DomainHost $RootDomain -Domains $when.domains)
-        if (-not $domainMatched) {
-            return $false
-        }
-    }
-
-    if ($when.categoryGroups.Count -gt 0 -and ($when.categoryGroups -notcontains $CategoryGroup.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.categories.Count -gt 0 -and ($when.categories -notcontains $Category.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.browsers.Count -gt 0 -and ($when.browsers -notcontains $BrowserKey.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.urlRegex) {
-        if (-not ($Url -match $when.urlRegex)) {
-            return $false
-        }
-    }
-
-    if ($when.titleRegex) {
-        if (-not ($Title -match $when.titleRegex)) {
-            return $false
-        }
-    }
-
-    return $true
-}
-
-function Get-DlpDecision {
-    param(
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $script:DlpDefaults.enabled) {
-        return $null
-    }
-
-    foreach ($rule in $script:DlpRules) {
-        if (Test-DlpRuleMatch -Rule $rule -Domain $Domain -RootDomain $RootDomain -Url $Url -Title $Title -BrowserKey $BrowserKey -Category $Category -CategoryGroup $CategoryGroup) {
-            return $rule
-        }
-    }
-
-    return $null
-}
-
-function Should-EmitIncident {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:IncidentState.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:IncidentState[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:IncidentState[$Fingerprint] = $now
-    return $true
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [pscustomobject]$Decision,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId ([string]$Decision.id) -SignalType 'web'
-        }
-        catch {
-        }
-    }
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId         = [string]$Decision.id
-            action         = [string]$Decision.action
-            severity       = [string]$Decision.severity
-            message        = [string]$Decision.message
-            url            = $Url
-            title          = $Title
-            browser        = $BrowserKey
-            app            = "$ProcessName.exe"
-            domain         = $Domain
-            rootDomain     = $RootDomain
-            category       = $Category
-            categoryGroup  = $CategoryGroup
-            username       = $env:USERNAME
-            hostname       = $script:Hostname
-            sessionId      = $script:SessionId
-            source         = 'uia-native-dlp'
-        } + $captureData
-    } | ConvertTo-Json -Depth 5 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось сделать снимок инцидента: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-function Get-ForegroundWindowContext {
-    $handle = [NativeAwMethods]::GetForegroundWindow()
-    if ($handle -eq [IntPtr]::Zero) {
-        return $null
-    }
-
-    $processId = [uint32]0
-    [void][NativeAwMethods]::GetWindowThreadProcessId($handle, [ref]$processId)
-    if (-not $processId) {
-        return $null
-    }
-
-    $process = Get-Process -Id ([int]$processId) -ErrorAction SilentlyContinue
-    if (-not $process) {
-        return $null
-    }
-
-    $textLength = [NativeAwMethods]::GetWindowTextLength($handle)
-    $builder = [Text.StringBuilder]::new([Math]::Max($textLength + 1, 260))
-    [void][NativeAwMethods]::GetWindowText($handle, $builder, $builder.Capacity)
-
-    return [pscustomobject]@{
-        Handle      = $handle
-        ProcessName = $process.ProcessName.ToLowerInvariant()
-        Title       = $builder.ToString()
-    }
-}
-
-function Get-BrowserUrlFromWindow {
-    param([IntPtr]$Handle)
-
-    $root = [System.Windows.Automation.AutomationElement]::FromHandle($Handle)
-    if (-not $root) {
-        return $null
-    }
-
-    $editCondition = [System.Windows.Automation.PropertyCondition]::new(
-        [System.Windows.Automation.AutomationElement]::ControlTypeProperty,
-        [System.Windows.Automation.ControlType]::Edit
-    )
-
-    $edits = $root.FindAll([System.Windows.Automation.TreeScope]::Descendants, $editCondition)
-    foreach ($edit in $edits) {
-        $valuePattern = $null
-        if ($edit.TryGetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern, [ref]$valuePattern)) {
-            $candidate = ConvertTo-NormalizedUrl -Value $valuePattern.Current.Value
-            if ($candidate) {
-                return $candidate
-            }
-        }
-
-        $candidateFromName = ConvertTo-NormalizedUrl -Value $edit.Current.Name
-        if ($candidateFromName) {
-            return $candidateFromName
-        }
-    }
-
-    return $null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType = 'web.tab.current'
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-        $script:KnownBuckets[$BucketId] = $true
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json; charset=utf-8' -Body ([Text.Encoding]::UTF8.GetBytes($body)) | Out-Null
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-    }
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-Heartbeat {
-    param(
-        [string]$BucketId,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName
-    )
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url       = $Url
-            title     = $Title
-            browser   = $BrowserKey
-            app       = "$ProcessName.exe"
-            source    = 'uia-native'
-            sessionId = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Send-CategoryHeartbeat {
-    param(
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup,
-        [string]$CategoryRule
-    )
-
-    $bucketId = 'aw-detmir-web-category_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-detmir-web-category' -BucketType 'aw.web.category'
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url           = $Url
-            title         = $Title
-            browser       = $BrowserKey
-            app           = "$ProcessName.exe"
-            domain        = $Domain
-            rootDomain    = $RootDomain
-            category      = $Category
-            categoryGroup = $CategoryGroup
-            categoryRule  = $CategoryRule
-            source        = 'uia-native'
-            sessionId     = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-Load-CustomCategoryRules -Path $resolvedRulesPath
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-CollectorLog ("коллектор запущен для {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $context = Get-ForegroundWindowContext
-        if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
-            $url = Get-BrowserUrlFromWindow -Handle $context.Handle
-            if ($url) {
-                $browserKey = $script:BrowserMap[$context.ProcessName]
-                $domain = Get-HostFromUrl -Url $url
-                if (-not $domain) {
-                    $domain = 'unknown'
-                }
-
-                $rootDomain = Get-RootDomain -DomainHost $domain
-                if (-not $rootDomain) {
-                    $rootDomain = $domain
-                }
-
-                $category = Get-WebCategory -DomainHost $domain
-                $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
-                Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
-                Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
-                Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
-
-                $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
-                if ($decision) {
-                    $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
-                    $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
-                    if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
-                        Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
-                        if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
-                            Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-    }
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId         = [string]$Decision.id
-            action         = [string]$Decision.action
-            severity       = [string]$Decision.severity
-            message        = [string]$Decision.message
-            url            = $Url
-            title          = $Title
-            browser        = $BrowserKey
-            app            = "$ProcessName.exe"
-            domain         = $Domain
-            rootDomain     = $RootDomain
-            category       = $Category
-            categoryGroup  = $CategoryGroup
-            username       = $env:USERNAME
-            hostname       = $script:Hostname
-            sessionId      = $script:SessionId
-            source         = 'uia-native-dlp'
-        } + $captureData
-    } | ConvertTo-Json -Depth 5 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось сделать снимок инцидента: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-function Get-ForegroundWindowContext {
-    $handle = [NativeAwMethods]::GetForegroundWindow()
-    if ($handle -eq [IntPtr]::Zero) {
-        return $null
-    }
-
-    $processId = [uint32]0
-    [void][NativeAwMethods]::GetWindowThreadProcessId($handle, [ref]$processId)
-    if (-not $processId) {
-        return $null
-    }
-
-    $process = Get-Process -Id ([int]$processId) -ErrorAction SilentlyContinue
-    if (-not $process) {
-        return $null
-    }
-
-    $textLength = [NativeAwMethods]::GetWindowTextLength($handle)
-    $builder = [Text.StringBuilder]::new([Math]::Max($textLength + 1, 260))
-    [void][NativeAwMethods]::GetWindowText($handle, $builder, $builder.Capacity)
-
-    return [pscustomobject]@{
-        Handle      = $handle
-        ProcessName = $process.ProcessName.ToLowerInvariant()
-        Title       = $builder.ToString()
-    }
-}
-
-function Get-BrowserUrlFromWindow {
-    param([IntPtr]$Handle)
-
-    $root = [System.Windows.Automation.AutomationElement]::FromHandle($Handle)
-    if (-not $root) {
-        return $null
-    }
-
-    $editCondition = [System.Windows.Automation.PropertyCondition]::new(
-        [System.Windows.Automation.AutomationElement]::ControlTypeProperty,
-        [System.Windows.Automation.ControlType]::Edit
-    )
-
-    $edits = $root.FindAll([System.Windows.Automation.TreeScope]::Descendants, $editCondition)
-    foreach ($edit in $edits) {
-        $valuePattern = $null
-        if ($edit.TryGetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern, [ref]$valuePattern)) {
-            $candidate = ConvertTo-NormalizedUrl -Value $valuePattern.Current.Value
-            if ($candidate) {
-                return $candidate
-            }
-        }
-
-        $candidateFromName = ConvertTo-NormalizedUrl -Value $edit.Current.Name
-        if ($candidateFromName) {
-            return $candidateFromName
-        }
-    }
-
-    return $null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType = 'web.tab.current'
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-        $script:KnownBuckets[$BucketId] = $true
-        return
-    }
-    catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$RulesPath,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [string]$IncidentLogPath,
-    [int]$PollSeconds,
-    [int]$PulseSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-Add-Type -AssemblyName UIAutomationClient
-Add-Type -AssemblyName UIAutomationTypes
-
-Add-Type @"
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-
-public static class NativeAwMethods {
-    [DllImport("user32.dll")]
-    public static extern IntPtr GetForegroundWindow();
-
-    [DllImport("user32.dll")]
-    public static extern uint GetWindowThreadProcessId(IntPtr hWnd, out uint lpdwProcessId);
-
-    [DllImport("user32.dll", CharSet = CharSet.Unicode)]
-    public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
-
-    [DllImport("user32.dll")]
-    public static extern int GetWindowTextLength(IntPtr hWnd);
-}
-"@
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'Укажите ServerHost или подготовьте deployment-config.json.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedRulesPath = if ($RulesPath) { $RulesPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.rulesPath } else { 'C:\ProgramData\AWatch-rus\web-category-rules.json' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig) { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedPulseSeconds = if ($PSBoundParameters.ContainsKey('PulseSeconds')) { $PulseSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pulseSeconds } else { 30 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("browser-domains-{0}.log" -f $env:USERNAME) }
-$resolvedIncidentLogPath = if ($IncidentLogPath) { $IncidentLogPath } else { Join-Path $resolvedLogsRoot ("dlp-incidents-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentLogPath = $resolvedIncidentLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-$script:IncidentState = @{}
-$script:DlpRules = @()
-$script:DlpDefaults = [ordered]@{
-    enabled = $false
-    cooldownSeconds = 300
-    action = 'log'
-    severity = 'low'
-}
-$script:BrowserMap = @{
-    msedge  = 'edge'
-    chrome  = 'chrome'
-    brave   = 'brave'
-    vivaldi = 'vivaldi'
-    opera   = 'opera'
-    firefox = 'firefox'
-}
-$script:CategoryRules = @(
-    @{ Name = 'work_business_systems'; Group = 'work'; Domains = @('bitrix24.ru', '1c.ru', 'sbis.ru', 'kontur.ru', 'diadoc.ru', 'nalog.gov.ru', 'gosuslugi.ru') }
-    @{ Name = 'work_docs_collab'; Group = 'work'; Domains = @('office.com', 'sharepoint.com', 'docs.google.com', 'drive.google.com', 'notion.so', 'miro.com') }
-    @{ Name = 'work_dev'; Group = 'work'; Domains = @('github.com', 'gitlab.com', 'bitbucket.org', 'youtrack.cloud', 'atlassian.net') }
-    @{ Name = 'work_communication'; Group = 'work'; Domains = @('teams.microsoft.com', 'outlook.office.com', 'web.telegram.org', 'slack.com', 'zoom.us') }
-    @{ Name = 'neutral_search_reference'; Group = 'neutral'; Domains = @('google.com', 'google.ru', 'yandex.ru', 'bing.com', 'duckduckgo.com', 'wikipedia.org') }
-    @{ Name = 'neutral_news'; Group = 'neutral'; Domains = @('rbc.ru', 'tass.ru', 'ria.ru', 'kommersant.ru', 'vedomosti.ru') }
-    @{ Name = 'personal_social'; Group = 'personal'; Domains = @('vk.com', 'ok.ru', 'facebook.com', 'instagram.com', 'tiktok.com', 'x.com', 'twitter.com') }
-    @{ Name = 'personal_video'; Group = 'personal'; Domains = @('youtube.com', 'youtu.be', 'rutube.ru', 'twitch.tv', 'kinopoisk.ru') }
-    @{ Name = 'personal_marketplace'; Group = 'personal'; Domains = @('ozon.ru', 'wildberries.ru', 'avito.ru', 'aliexpress.com', 'market.yandex.ru') }
-    @{ Name = 'personal_entertainment'; Group = 'personal'; Domains = @('dzen.ru', 'pikabu.ru', 'dtf.ru', 'playground.ru') }
-)
-
-function Write-CollectorLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Write-DlpIncidentLog {
-    param([string]$Message)
-
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-
-    try {
-        Add-Content -LiteralPath $script:IncidentLogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Test-DomainMatch {
-    param(
-        [string]$DomainHost,
-        [string]$RuleDomain
-    )
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost) -or [string]::IsNullOrWhiteSpace($RuleDomain)) {
-        return $false
-    }
-
-    $left = $DomainHost.ToLowerInvariant()
-    $right = $RuleDomain.ToLowerInvariant()
-    return $left -eq $right -or $left.EndsWith('.' + $right)
-}
-
-function Get-HostFromUrl {
-    param([string]$Url)
-
-    if ([string]::IsNullOrWhiteSpace($Url)) {
-        return $null
-    }
-
-    try {
-        $uri = [Uri]$Url
-        $uriHost = $uri.Host.ToLowerInvariant()
-        if ($uriHost.StartsWith('www.')) {
-            return $uriHost.Substring(4)
-        }
-
-        return $uriHost
-    }
-    catch {
-        return $null
-    }
-}
-
-function Get-RootDomain {
-    param([string]$DomainHost)
-
-    if ([string]::IsNullOrWhiteSpace($DomainHost)) {
-        return $null
-    }
-
-    $parts = $DomainHost.Split('.')
-    if ($parts.Count -le 2) {
-        return $DomainHost
-    }
-
-    $suffix = ('{0}.{1}' -f $parts[$parts.Count - 2], $parts[$parts.Count - 1]).ToLowerInvariant()
-    $compoundTlds = @('co.uk', 'com.au', 'co.jp', 'com.br', 'co.in', 'com.tr', 'com.cn')
-    if (($compoundTlds -contains $suffix) -and $parts.Count -ge 3) {
-        return ('{0}.{1}' -f $parts[$parts.Count - 3], $suffix).ToLowerInvariant()
-    }
-
-    return $suffix
-}
-
-function ConvertTo-NormalizedUrl {
-    param([AllowNull()][string]$Value)
-
-    if ([string]::IsNullOrWhiteSpace($Value)) {
-        return $null
-    }
-
-    $candidate = $Value.Trim()
-    if ($candidate.Length -lt 4) {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(search|find|address and search|search with|новая вкладка|new tab)') {
-        return $null
-    }
-
-    if ($candidate -match '^(?i)(https?|file|ftp|chrome|edge|about|view-source)://') {
-        return $candidate
-    }
-
-    if ($candidate -match '^(?i)localhost([/:]|$)') {
-        return "http://$candidate"
-    }
-
-    if ($candidate -match '^[a-z0-9.-]+\.[a-z]{2,}([/:?#].*)?$') {
-        return "https://$candidate"
-    }
-
-    return $null
-}
-
-function Load-CustomCategoryRules {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $rules = @()
-
-        if ($parsed.rules) {
-            $sourceRules = @($parsed.rules)
-        }
-        elseif ($parsed -is [System.Collections.IEnumerable]) {
-            $sourceRules = @($parsed)
-        }
-        else {
-            $sourceRules = @()
-        }
-
-        foreach ($rule in $sourceRules) {
-            if (-not $rule) {
-                continue
-            }
-
-            $name = [string]$rule.name
-            $group = [string]$rule.group
-            $domains = @($rule.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ })
-
-            if ($name -and $group -and $domains.Count -gt 0) {
-                $rules += @{
-                    Name    = $name
-                    Group   = $group
-                    Domains = $domains
-                }
-            }
-        }
-
-        if ($rules.Count -gt 0) {
-            $script:CategoryRules = @($rules) + @($script:CategoryRules)
-            Write-CollectorLog ("пользовательские правила загружены: {0}" -f $rules.Count)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось загрузить пользовательские правила: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Get-WebCategory {
-    param([string]$DomainHost)
-
-    foreach ($rule in $script:CategoryRules) {
-        foreach ($domain in $rule.Domains) {
-            if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-                return [pscustomobject]@{
-                    Name  = [string]$rule.Name
-                    Group = [string]$rule.Group
-                    Rule  = [string]$domain
-                }
-            }
-        }
-    }
-
-    return [pscustomobject]@{
-        Name  = 'uncategorized'
-        Group = 'neutral'
-        Rule  = 'none'
-    }
-}
-
-function Test-DomainListMatch {
-    param(
-        [string]$DomainHost,
-        [string[]]$Domains
-    )
-
-    if (-not $Domains -or $Domains.Count -eq 0) {
-        return $false
-    }
-
-    foreach ($domain in $Domains) {
-        if (Test-DomainMatch -DomainHost $DomainHost -RuleDomain $domain) {
-            return $true
-        }
-    }
-
-    return $false
-}
-
-function Test-DlpRuleTimeWindow {
-    param(
-        [int]$CurrentHour,
-        [AllowNull()][int]$HourFrom,
-        [AllowNull()][int]$HourTo
-    )
-
-    if ($null -eq $HourFrom -or $null -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -eq $HourTo) {
-        return $true
-    }
-
-    if ($HourFrom -lt $HourTo) {
-        return ($CurrentHour -ge $HourFrom -and $CurrentHour -lt $HourTo)
-    }
-
-    return ($CurrentHour -ge $HourFrom -or $CurrentHour -lt $HourTo)
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-CollectorLog ("DLP-политика не найдена, DLP отключен: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $parsed = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        $defaults = $parsed.defaults
-        if ($defaults) {
-            if ($defaults.PSObject.Properties.Name -contains 'enabled') {
-                $script:DlpDefaults.enabled = [bool]$defaults.enabled
-            }
-            if ($defaults.cooldownSeconds) {
-                $script:DlpDefaults.cooldownSeconds = [int]$defaults.cooldownSeconds
-            }
-            if ($defaults.action) {
-                $script:DlpDefaults.action = [string]$defaults.action
-            }
-            if ($defaults.severity) {
-                $script:DlpDefaults.severity = [string]$defaults.severity
-            }
-        }
-
-        $loaded = @()
-        foreach ($rule in @($parsed.rules)) {
-            if (-not $rule) { continue }
-            $when = $rule.when
-            if (-not $when) {
-                $when = [pscustomobject]@{}
-            }
-            $loaded += [pscustomobject]@{
-                id = [string]$rule.id
-                enabled = if ($rule.PSObject.Properties.Name -contains 'enabled') { [bool]$rule.enabled } else { $true }
-                action = if ($rule.action) { [string]$rule.action } else { [string]$script:DlpDefaults.action }
-                severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:DlpDefaults.severity }
-                message = if ($rule.message) { [string]$rule.message } else { "Сработало DLP-правило: $($rule.id)" }
-                cooldownSeconds = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:DlpDefaults.cooldownSeconds }
-                when = [pscustomobject]@{
-                    domains = if ($when.PSObject.Properties.Name -contains 'domains') { @($when.domains | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categoryGroups = if ($when.PSObject.Properties.Name -contains 'categoryGroups') { @($when.categoryGroups | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    categories = if ($when.PSObject.Properties.Name -contains 'categories') { @($when.categories | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    browsers = if ($when.PSObject.Properties.Name -contains 'browsers') { @($when.browsers | ForEach-Object { ([string]$_).Trim().ToLowerInvariant() } | Where-Object { $_ }) } else { @() }
-                    urlRegex = if ($when.PSObject.Properties.Name -contains 'urlRegex' -and $when.urlRegex) { [string]$when.urlRegex } else { $null }
-                    titleRegex = if ($when.PSObject.Properties.Name -contains 'titleRegex' -and $when.titleRegex) { [string]$when.titleRegex } else { $null }
-                    hourFrom = if ($when.PSObject.Properties.Name -contains 'hourFrom') { [int]$when.hourFrom } else { $null }
-                    hourTo = if ($when.PSObject.Properties.Name -contains 'hourTo') { [int]$when.hourTo } else { $null }
-                }
-            }
-        }
-
-        $script:DlpRules = @($loaded)
-        Write-CollectorLog ("DLP-политика загружена: включена={0}, правил={1}" -f $script:DlpDefaults.enabled, $script:DlpRules.Count)
-    }
-    catch {
-        Write-CollectorLog ("не удалось разобрать DLP-политику: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Test-DlpRuleMatch {
-    param(
-        [pscustomobject]$Rule,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $Rule.enabled) {
-        return $false
-    }
-
-    $when = $Rule.when
-    $currentHour = (Get-Date).Hour
-    if (-not (Test-DlpRuleTimeWindow -CurrentHour $currentHour -HourFrom $when.hourFrom -HourTo $when.hourTo)) {
-        return $false
-    }
-
-    if ($when.domains.Count -gt 0) {
-        $domainMatched = (Test-DomainListMatch -DomainHost $Domain -Domains $when.domains) -or (Test-DomainListMatch -DomainHost $RootDomain -Domains $when.domains)
-        if (-not $domainMatched) {
-            return $false
-        }
-    }
-
-    if ($when.categoryGroups.Count -gt 0 -and ($when.categoryGroups -notcontains $CategoryGroup.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.categories.Count -gt 0 -and ($when.categories -notcontains $Category.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.browsers.Count -gt 0 -and ($when.browsers -notcontains $BrowserKey.ToLowerInvariant())) {
-        return $false
-    }
-
-    if ($when.urlRegex) {
-        if (-not ($Url -match $when.urlRegex)) {
-            return $false
-        }
-    }
-
-    if ($when.titleRegex) {
-        if (-not ($Title -match $when.titleRegex)) {
-            return $false
-        }
-    }
-
-    return $true
-}
-
-function Get-DlpDecision {
-    param(
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    if (-not $script:DlpDefaults.enabled) {
-        return $null
-    }
-
-    foreach ($rule in $script:DlpRules) {
-        if (Test-DlpRuleMatch -Rule $rule -Domain $Domain -RootDomain $RootDomain -Url $Url -Title $Title -BrowserKey $BrowserKey -Category $Category -CategoryGroup $CategoryGroup) {
-            return $rule
-        }
-    }
-
-    return $null
-}
-
-function Should-EmitIncident {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:IncidentState.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:IncidentState[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:IncidentState[$Fingerprint] = $now
-    return $true
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [pscustomobject]$Decision,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId ([string]$Decision.id) -SignalType 'web'
-        }
-        catch {
-        }
-    }
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId         = [string]$Decision.id
-            action         = [string]$Decision.action
-            severity       = [string]$Decision.severity
-            message        = [string]$Decision.message
-            url            = $Url
-            title          = $Title
-            browser        = $BrowserKey
-            app            = "$ProcessName.exe"
-            domain         = $Domain
-            rootDomain     = $RootDomain
-            category       = $Category
-            categoryGroup  = $CategoryGroup
-            username       = $env:USERNAME
-            hostname       = $script:Hostname
-            sessionId      = $script:SessionId
-            source         = 'uia-native-dlp'
-        } + $captureData
-    } | ConvertTo-Json -Depth 5 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-CollectorLog ("не удалось сделать снимок инцидента: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-function Get-ForegroundWindowContext {
-    $handle = [NativeAwMethods]::GetForegroundWindow()
-    if ($handle -eq [IntPtr]::Zero) {
-        return $null
-    }
-
-    $processId = [uint32]0
-    [void][NativeAwMethods]::GetWindowThreadProcessId($handle, [ref]$processId)
-    if (-not $processId) {
-        return $null
-    }
-
-    $process = Get-Process -Id ([int]$processId) -ErrorAction SilentlyContinue
-    if (-not $process) {
-        return $null
-    }
-
-    $textLength = [NativeAwMethods]::GetWindowTextLength($handle)
-    $builder = [Text.StringBuilder]::new([Math]::Max($textLength + 1, 260))
-    [void][NativeAwMethods]::GetWindowText($handle, $builder, $builder.Capacity)
-
-    return [pscustomobject]@{
-        Handle      = $handle
-        ProcessName = $process.ProcessName.ToLowerInvariant()
-        Title       = $builder.ToString()
-    }
-}
-
-function Get-BrowserUrlFromWindow {
-    param([IntPtr]$Handle)
-
-    $root = [System.Windows.Automation.AutomationElement]::FromHandle($Handle)
-    if (-not $root) {
-        return $null
-    }
-
-    $editCondition = [System.Windows.Automation.PropertyCondition]::new(
-        [System.Windows.Automation.AutomationElement]::ControlTypeProperty,
-        [System.Windows.Automation.ControlType]::Edit
-    )
-
-    $edits = $root.FindAll([System.Windows.Automation.TreeScope]::Descendants, $editCondition)
-    foreach ($edit in $edits) {
-        $valuePattern = $null
-        if ($edit.TryGetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern, [ref]$valuePattern)) {
-            $candidate = ConvertTo-NormalizedUrl -Value $valuePattern.Current.Value
-            if ($candidate) {
-                return $candidate
-            }
-        }
-
-        $candidateFromName = ConvertTo-NormalizedUrl -Value $edit.Current.Name
-        if ($candidateFromName) {
-            return $candidateFromName
-        }
-    }
-
-    return $null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType = 'web.tab.current'
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-        $script:KnownBuckets[$BucketId] = $true
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json; charset=utf-8' -Body ([Text.Encoding]::UTF8.GetBytes($body)) | Out-Null
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-    }
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-Heartbeat {
-    param(
-        [string]$BucketId,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName
-    )
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url       = $Url
-            title     = $Title
-            browser   = $BrowserKey
-            app       = "$ProcessName.exe"
-            source    = 'uia-native'
-            sessionId = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Send-CategoryHeartbeat {
-    param(
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup,
-        [string]$CategoryRule
-    )
-
-    $bucketId = 'aw-detmir-web-category_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-detmir-web-category' -BucketType 'aw.web.category'
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url           = $Url
-            title         = $Title
-            browser       = $BrowserKey
-            app           = "$ProcessName.exe"
-            domain        = $Domain
-            rootDomain    = $RootDomain
-            category      = $Category
-            categoryGroup = $CategoryGroup
-            categoryRule  = $CategoryRule
-            source        = 'uia-native'
-            sessionId     = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-Load-CustomCategoryRules -Path $resolvedRulesPath
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-CollectorLog ("коллектор запущен для {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $context = Get-ForegroundWindowContext
-        if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
-            $url = Get-BrowserUrlFromWindow -Handle $context.Handle
-            if ($url) {
-                $browserKey = $script:BrowserMap[$context.ProcessName]
-                $domain = Get-HostFromUrl -Url $url
-                if (-not $domain) {
-                    $domain = 'unknown'
-                }
-
-                $rootDomain = Get-RootDomain -DomainHost $domain
-                if (-not $rootDomain) {
-                    $rootDomain = $domain
-                }
-
-                $category = Get-WebCategory -DomainHost $domain
-                $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
-                Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
-                Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
-                Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
-
-                $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
-                if ($decision) {
-                    $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
-                    $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
-                    if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
-                        Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
-                        if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
-                            Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId" -ContentType 'application/json; charset=utf-8' -Body ([Text.Encoding]::UTF8.GetBytes($body)) | Out-Null
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$($script:ApiBase)/buckets/$BucketId" | Out-Null
-    }
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-Heartbeat {
-    param(
-        [string]$BucketId,
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName
-    )
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url       = $Url
-            title     = $Title
-            browser   = $BrowserKey
-            app       = "$ProcessName.exe"
-            source    = 'uia-native'
-            sessionId = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$BucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Send-CategoryHeartbeat {
-    param(
-        [string]$Url,
-        [string]$Title,
-        [string]$BrowserKey,
-        [string]$ProcessName,
-        [string]$Domain,
-        [string]$RootDomain,
-        [string]$Category,
-        [string]$CategoryGroup,
-        [string]$CategoryRule
-    )
-
-    $bucketId = 'aw-detmir-web-category_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-detmir-web-category' -BucketType 'aw.web.category'
-
-    $event = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            url           = $Url
-            title         = $Title
-            browser       = $BrowserKey
-            app           = "$ProcessName.exe"
-            domain        = $Domain
-            rootDomain    = $RootDomain
-            category      = $Category
-            categoryGroup = $CategoryGroup
-            categoryRule  = $CategoryRule
-            source        = 'uia-native'
-            sessionId     = $script:SessionId
-        }
-    } | ConvertTo-Json -Depth 4 -Compress
-
-    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event -TimeoutSec 15 -DisableKeepAlive | Out-Null
+    Invoke-RestMethod -Method Post -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$resolvedPulseSeconds" -ContentType 'application/json' -Body $event | Out-Null
 }
 
 Load-CustomCategoryRules -Path $resolvedRulesPath
diff --git a/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1 b/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1
index 8a83b16..92e5494 100755
--- a/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1
+++ b/install-kit-awindows-20260427-211240/windows/deploy-domain-users.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -112,8 +112,8 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $recoveryScriptPath -ConfigPath $configPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output 'ActivityWatch развёрнут для пользователей:'
-$targetUsers | ForEach-Object { Write-Output " - $_" }
-Write-Output "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
-Write-Output "Каталог данных: $StateRoot"
-Write-Output "Файл DLP-политики: $($assetResult.ActivePolicy)"
+Write-Host 'ActivityWatch развёрнут для пользователей:'
+$targetUsers | ForEach-Object { Write-Host " - $_" }
+Write-Host "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
+Write-Host "Каталог данных: $StateRoot"
+Write-Host "Файл DLP-политики: $($assetResult.ActivePolicy)"
diff --git a/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1 b/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1
index 1efc953..fa6fd75 100644
--- a/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1
+++ b/install-kit-awindows-20260427-211240/windows/deploy-ensemble.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -136,6 +136,6 @@ if ($reportDirectory) {
 
 $report | ConvertTo-Json -Depth 12 | Set-Content -LiteralPath $effectiveReportPath -Encoding UTF8
 
-Write-Output 'Комплексное развёртывание ActivityWatch завершено.'
-Write-Output "Пользователи: $($resolvedUsers -join ', ')"
-Write-Output "Отчёт: $effectiveReportPath"
+Write-Host 'Комплексное развёртывание ActivityWatch завершено.'
+Write-Host "Пользователи: $($resolvedUsers -join ', ')"
+Write-Host "Отчёт: $effectiveReportPath"
diff --git a/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1 b/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1
index 7f4952a..160265d 100755
--- a/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1
+++ b/install-kit-awindows-20260427-211240/windows/deploy-single-user.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -104,9 +104,9 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $recoveryScriptPath -ConfigPath $configPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output "ActivityWatch развёрнут для пользователя: $TargetUser"
-Write-Output "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
-Write-Output "Каталог установки: $InstallRoot"
-Write-Output "Каталог данных: $StateRoot"
-Write-Output "Файл правил: $($assetResult.ActiveRules)"
-Write-Output "Файл DLP-политики: $($assetResult.ActivePolicy)"
+Write-Host "ActivityWatch развёрнут для пользователя: $TargetUser"
+Write-Host "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
+Write-Host "Каталог установки: $InstallRoot"
+Write-Host "Каталог данных: $StateRoot"
+Write-Host "Файл правил: $($assetResult.ActiveRules)"
+Write-Host "Файл DLP-политики: $($assetResult.ActivePolicy)"
diff --git a/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1 b/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1
index 5a09101..b286e48 100644
--- a/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1
+++ b/install-kit-awindows-20260427-211240/windows/dlp-endpoint-signals-collector.ps1
@@ -1,35 +1,4 @@
-[CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch { Write-Error [CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -71,7 +40,7 @@ function Invoke-AwJsonPost {
     )
 
     $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
+    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
 }
 
 function Ensure-Bucket {
@@ -352,44 +321,6 @@ function Get-StringHash {
     }
 }
 
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
 function Load-DlpPolicy {
     param([string]$Path)
 
@@ -852,7 +783,7 @@ while ($true) {
         }
 
         try {
-            $clipboardText = Get-ClipboardTextSafe
+            $clipboardText = Get-Clipboard -Raw -ErrorAction SilentlyContinue
             if ($clipboardText) {
                 $clipboardHash = Get-StringHash -Value $clipboardText
                 if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
@@ -988,6678 +919,3 @@ while ($true) {
 
     Start-Sleep -Seconds $resolvedPollSeconds
 }
-; }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
diff --git a/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1 b/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1
index 1c13665..d382f41 100755
--- a/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1
+++ b/install-kit-awindows-20260427-211240/windows/hardening-recovery.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -151,6 +151,6 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $effectiveRecoveryScript -ConfigPath $effectiveConfigPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output 'Укрепление и восстановление ActivityWatch завершены.'
-Write-Output "Конфигурация: $effectiveConfigPath"
-Write-Output "Пользователи восстановлены: $($effectiveUsers -join ', ')"
+Write-Host 'Укрепление и восстановление ActivityWatch завершены.'
+Write-Host "Конфигурация: $effectiveConfigPath"
+Write-Host "Пользователи восстановлены: $($effectiveUsers -join ', ')"
diff --git a/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1 b/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1
index f91e6eb..eb7cbe4 100644
--- a/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1
+++ b/install-kit-awindows-20260427-211240/windows/migrate-awatch-rus-paths.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding(SupportsShouldProcess = $true)]
+[CmdletBinding(SupportsShouldProcess = $true)]
 param(
     [string]$OldInstallRoot = 'C:\Program Files\ActivityWatch-Phase2',
     [string]$OldStateRoot = 'C:\ProgramData\ActivityWatch-Phase2',
@@ -154,36 +154,7 @@ if ($PSCmdlet.ShouldProcess($env:COMPUTERNAME, 'Миграция ActivityWatch W
             @{ Source = $NewStateRoot; Name = 'new-state' }
         )) {
         if (Test-Path -LiteralPath $item.Source) {
-            $backupDest = Join-Path $backupRoot $item.Name
-            New-ActivityWatchDirectory -Path $backupDest
-
-            $excludeDirs = @()
-            if ($item.Source -eq $NewStateRoot) {
-                # Avoid infinite recursion: backupRoot is inside NewStateRoot by default.
-                $excludeDirs += $backupRoot
-            }
-
-            $robocopyArgs = @(
-                $item.Source,
-                $backupDest,
-                '/E',
-                '/R:1',
-                '/W:1',
-                '/NFL',
-                '/NDL',
-                '/NJH',
-                '/NJS',
-                '/NP'
-            )
-            if ($excludeDirs.Count -gt 0) {
-                $robocopyArgs += '/XD'
-                $robocopyArgs += $excludeDirs
-            }
-
-            & robocopy @robocopyArgs | Out-Null
-            if ($LASTEXITCODE -ge 8) {
-                throw "Backup robocopy failed (exit=$LASTEXITCODE) for source '$($item.Source)' to '$backupDest'"
-            }
+            Copy-Item -LiteralPath $item.Source -Destination (Join-Path $backupRoot $item.Name) -Recurse -Force
         }
     }
 
diff --git a/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1 b/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1
index 15a4822..52b35d2 100644
--- a/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1
+++ b/install-kit-awindows-20260427-211240/windows/validate-deployment.ps1
@@ -1,6 +1,6 @@
 [CmdletBinding()]
 param(
-    [string]$ConfigPath = 'C:\ProgramData\ActivityWatch\deployment-config.json'
+    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json'
 )
 
 Set-StrictMode -Version Latest
@@ -13,26 +13,49 @@ $config = Read-ActivityWatchDeploymentConfig -Path $ConfigPath
 $installRoot = [string]$config.paths.installRoot
 $stateRoot = [string]$config.paths.stateRoot
 $collectorScript = [string]$config.paths.collectorScript
+$endpointCollectorScript = if ($config.paths.PSObject.Properties.Name -contains 'endpointCollectorScript') { [string]$config.paths.endpointCollectorScript } else { Join-Path $stateRoot 'dlp-endpoint-signals-collector.ps1' }
+$sessionCollectorScript = if ($config.paths.PSObject.Properties.Name -contains 'sessionCollectorScript') { [string]$config.paths.sessionCollectorScript } else { Join-Path $stateRoot 'worktime-session-collector.ps1' }
 $rulesPath = [string]$config.paths.rulesPath
+$policyPath = if ($config.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$config.paths.policyPath } else { Join-Path $stateRoot 'dlp-policy.json' }
 $launchScript = [string]$config.paths.launchScript
 $recoveryScript = [string]$config.paths.recoveryScript
 
+$afkExpected = if ($config.PSObject.Properties.Name -contains 'collectors' -and $config.collectors.PSObject.Properties.Name -contains 'afkEnabled') { [bool]$config.collectors.afkEnabled } else { $true }
+$windowExpected = if ($config.PSObject.Properties.Name -contains 'collectors' -and $config.collectors.PSObject.Properties.Name -contains 'windowEnabled') { [bool]$config.collectors.windowEnabled } else { $true }
 $requiredFiles = @(
-    (Join-Path $installRoot 'aw-watcher-afk\aw-watcher-afk.exe'),
-    (Join-Path $installRoot 'aw-watcher-window\aw-watcher-window.exe'),
     $collectorScript,
+    $endpointCollectorScript,
+    $sessionCollectorScript,
     $rulesPath,
+    $policyPath,
     $launchScript,
     $recoveryScript,
     $ConfigPath
 )
+if ($afkExpected) {
+    $requiredFiles += (Join-Path $installRoot 'aw-watcher-afk\aw-watcher-afk.exe')
+}
+if ($windowExpected) {
+    $requiredFiles += (Join-Path $installRoot 'aw-watcher-window\aw-watcher-window.exe')
+}
 
 $missingFiles = @(
     $requiredFiles | Where-Object { -not (Test-Path -LiteralPath $_) }
 )
 
-$processNames = @('aw-watcher-afk', 'aw-watcher-window')
-$runningProcesses = Get-Process -Name $processNames -ErrorAction SilentlyContinue | Select-Object Name, Id, SessionId
+$processNames = @()
+if ($afkExpected) { $processNames += 'aw-watcher-afk' }
+if ($windowExpected) { $processNames += 'aw-watcher-window' }
+$runningProcesses = @()
+if ($processNames.Count -gt 0) {
+    $runningProcesses = Get-Process -Name $processNames -ErrorAction SilentlyContinue | Select-Object Name, Id, SessionId
+}
+$sessionCollectorProcesses = Get-CimInstance Win32_Process -ErrorAction SilentlyContinue |
+    Where-Object {
+        ($_.Name -ieq 'powershell.exe' -or $_.Name -ieq 'pwsh.exe') -and
+        $_.CommandLine -match [Regex]::Escape($sessionCollectorScript)
+    } |
+    Select-Object Name, ProcessId, SessionId, CommandLine
 
 $taskNames = @()
 if ($config.userTasks) {
@@ -42,7 +65,7 @@ $taskNames += [string]$config.recovery.taskName
 $taskNames = $taskNames | Sort-Object -Unique
 
 $tasks = foreach ($taskName in $taskNames) {
-    $task = Get-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
+    $task = Get-ScheduledTask -ErrorAction SilentlyContinue | Where-Object { $_.TaskName -eq $taskName } | Select-Object -First 1
     if ($task) {
         [pscustomobject]@{
             taskName = $task.TaskName
@@ -53,7 +76,7 @@ $tasks = foreach ($taskName in $taskNames) {
     else {
         [pscustomobject]@{
             taskName = $taskName
-            state = 'Missing'
+            state = 'Отсутствует'
             present = $false
         }
     }
@@ -76,8 +99,16 @@ $result = [ordered]@{
         ok = [bool]($tasks.Count -gt 0 -and -not ($tasks | Where-Object { -not $_.present }))
     }
     processes = [ordered]@{
+        expected = $processNames
         list = @($runningProcesses)
-        ok = [bool](($runningProcesses | Select-Object -ExpandProperty Name -Unique).Count -ge 2)
+        sessionCollectors = @($sessionCollectorProcesses)
+        ok = [bool](
+            (
+                ($processNames.Count -eq 0) -or
+                (($runningProcesses | Select-Object -ExpandProperty Name -Unique).Count -ge $processNames.Count)
+            ) -and
+            ($sessionCollectorProcesses.Count -ge 1)
+        )
     }
 }
 
diff --git a/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1 b/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1
index e3021c5..226a500 100644
--- a/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1
+++ b/install-kit-awindows-20260427-211240/windows/worktime-session-collector.ps1
@@ -1,44 +1,4 @@
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch { Write-Error param(
+param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$Hostname,
     [int]$PollSeconds = 30
@@ -87,12 +47,7 @@ function Ensure-Bucket {
         hostname = $HostnameValue
     } | ConvertTo-Json -Compress
 
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
+    Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
 }
 
 function Get-SessionRecords {
@@ -204,458 +159,3 @@ while ($true) {
 
     Start-Sleep -Seconds $sleepSec
 }
-; }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch { Write-Error param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch {
-    }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch {
-        }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}
-; }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch { Write-Error param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch {
-    }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch {
-        }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}
-; }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}
diff --git a/proxmox/create-ct.sh b/proxmox/create-ct.sh
index 1d2fe59..c92ef25 100755
--- a/proxmox/create-ct.sh
+++ b/proxmox/create-ct.sh
@@ -1,5 +1,4 @@
 #!/bin/sh
-# shellcheck disable=SC1007
 set -eu
 
 SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
diff --git a/proxmox/push-aw-artifacts.sh b/proxmox/push-aw-artifacts.sh
index 0db6733..d3b2d91 100755
--- a/proxmox/push-aw-artifacts.sh
+++ b/proxmox/push-aw-artifacts.sh
@@ -1,5 +1,4 @@
 #!/bin/sh
-# shellcheck disable=SC1007
 set -eu
 
 SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
diff --git a/scripts/aggregate_dlp_events.py b/scripts/aggregate_dlp_events.py
index dcc58cd..7be7760 100755
--- a/scripts/aggregate_dlp_events.py
+++ b/scripts/aggregate_dlp_events.py
@@ -18,12 +18,7 @@ JsonScalar: TypeAlias = str | int | float | bool | None
 JsonValue: TypeAlias = JsonScalar | list["JsonValue"] | dict[str, "JsonValue"]
 
 
-DEFAULT_BUCKET_PREFIXES = (
-    "aw-file-operations_",
-    "aw-dlp-incidents_",
-    "aw-dlp-endpoint-signals_",
-    "aw-email-monitor_",
-)
+DEFAULT_BUCKET_PREFIXES = ("aw-file-operations_", "aw-dlp-incidents_")
 DEFAULT_SQLITE_PATH = "data/dlp-events.sqlite3"
 EVENT_COLUMNS = (
     "bucket_id",
@@ -139,10 +134,6 @@ def bucket_stream_type(bucket: Bucket) -> str | None:
         return "file_operation"
     if bucket.id.startswith("aw-dlp-incidents_") or bucket.type == "aw.dlp.incident":
         return "dlp_incident"
-    if bucket.id.startswith("aw-dlp-endpoint-signals_") or bucket.type == "aw.dlp.endpoint.signal":
-        return "dlp_endpoint_signal"
-    if bucket.id.startswith("aw-email-monitor_") or bucket.type == "aw.email.signal":
-        return "email_monitor"
     return None
 
 
diff --git a/scripts/check_install_kit_vs_repo.sh b/scripts/check_install_kit_vs_repo.sh
index bda69ec..97d165d 100755
--- a/scripts/check_install_kit_vs_repo.sh
+++ b/scripts/check_install_kit_vs_repo.sh
@@ -4,26 +4,11 @@ set -euo pipefail
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 
-# shellcheck disable=SC2034
 KIT_DIR="install-kit-awindows-20260427-211240"
 
-PY_BIN="${PY_BIN:-}"
-if [[ -z "$PY_BIN" ]]; then
-  if command -v python3 >/dev/null 2>&1; then
-    PY_BIN="python3"
-  elif command -v python >/dev/null 2>&1; then
-    PY_BIN="python"
-  else
-    echo "ERROR: python3/python not found"
-    exit 127
-  fi
-fi
-
-"$PY_BIN" - <<'PY'
+python - <<'PY'
 from pathlib import Path
 import hashlib
-import os
-import sys
 
 root=Path('.')
 kit=Path('install-kit-awindows-20260427-211240')
@@ -39,13 +24,6 @@ missing_in_repo=[]
 
 for kp in sorted(p for p in kit.rglob('*') if p.is_file() and p.name!='MANIFEST.txt'):
     rel=kp.relative_to(kit)
-    rel_s=str(rel)
-    if rel_s.startswith("server-configs-192.168.100.21/"):
-        continue
-    if rel_s == "README-INSTALL-KIT.txt":
-        continue
-    if "__pycache__" in kp.parts or kp.suffix == ".pyc":
-        continue
     rp=root/rel
     if not rp.exists():
         missing_in_repo.append(str(rel))
@@ -72,9 +50,4 @@ if ps_mismatches:
     print('--- PowerShell mismatches ---')
     for p in ps_mismatches:
         print(p)
-
-strict = os.getenv("ALLOW_KIT_DRIFT", "").lower() not in {"1", "true", "yes"}
-if strict and (missing_in_repo or mismatches):
-    print("ERROR: install-kit drift detected. Set ALLOW_KIT_DRIFT=1 to bypass.")
-    sys.exit(1)
 PY
diff --git a/scripts/install_aw_linux_remote_worker.sh b/scripts/install_aw_linux_remote_worker.sh
index 5ee46d9..3cebd20 100644
--- a/scripts/install_aw_linux_remote_worker.sh
+++ b/scripts/install_aw_linux_remote_worker.sh
@@ -49,7 +49,6 @@ while [ "$#" -gt 0 ]; do
     esac
 done
 
-# shellcheck disable=SC1007
 SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 
 sh "${SCRIPT_DIR}/install_aw_linux_client.sh" \
diff --git a/scripts/prod_rollout.sh b/scripts/prod_rollout.sh
index 1907e29..1f9ebfd 100644
--- a/scripts/prod_rollout.sh
+++ b/scripts/prod_rollout.sh
@@ -21,11 +21,9 @@ prompt_secret() {
   if [[ -n "${!var_name:-}" ]]; then
     return 0
   fi
-  local _val
-  read -r -s -p "${prompt}: " _val
+  read -r -s -p "${prompt}: " "$var_name"
   echo
-  printf -v "$var_name" '%s' "$_val"
-  declare -gx "$var_name"
+  export "$var_name"
 }
 
 require_cmd git
@@ -35,12 +33,6 @@ require_cmd ansible
 log "Repo: ${ROOT_DIR}"
 log "Branch: $(git branch --show-current)"
 
-if [[ "${AW_MAINTENANCE_ACK:-}" != "YES" ]]; then
-  log "ERROR: maintenance window is required."
-  log "Set AW_MAINTENANCE_ACK=YES to proceed."
-  exit 4
-fi
-
 log "Running local quality gate..."
 ./scripts/quality-gate.sh | tee -a "${LOG_DIR}/quality-gate.log"
 
@@ -73,10 +65,6 @@ log "Preflight connectivity..."
 ansible -i ansible/inventory.ini aw_server -m ping | tee -a "${LOG_DIR}/ping_aw_server.log"
 ansible -i ansible/inventory.ini aw_windows -m win_ping | tee -a "${LOG_DIR}/ping_aw_windows.log"
 
-log "Preflight ActivityWatch API/data checks..."
-./check-aw-data.sh | tee -a "${LOG_DIR}/check_aw_data.log"
-./check-aw-full.sh | tee -a "${LOG_DIR}/check_aw_full.log"
-
 log "Dry-run aw_server..."
 ansible-playbook -i ansible/inventory.ini ansible/deploy_aw_server.yml --check --diff | tee -a "${LOG_DIR}/check_aw_server.log"
 
diff --git a/scripts/quality-gate.sh b/scripts/quality-gate.sh
index abcfc23..3b88862 100755
--- a/scripts/quality-gate.sh
+++ b/scripts/quality-gate.sh
@@ -4,42 +4,33 @@ set -euo pipefail
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 
-echo "[1/6] Bash syntax check"
+echo "[1/4] Bash syntax check"
 find aw-server proxmox -type f -name "*.sh" -print0 | xargs -0 -r -n1 bash -n
 
-echo "[2/6] Shellcheck (if available)"
+echo "[2/4] Shellcheck (if available)"
 if command -v shellcheck >/dev/null 2>&1; then
   find aw-server proxmox -type f -name "*.sh" -print0 | xargs -0 -r shellcheck -e SC1007,SC1090,SC2016
 else
   echo "shellcheck not found, skipping."
 fi
 
-echo "[3/6] PowerShell parse check (if pwsh available)"
+echo "[3/4] PowerShell parse check (if pwsh available)"
 if command -v pwsh >/dev/null 2>&1; then
-  if ! pwsh -NoLogo -NoProfile -Command '
+  pwsh -NoLogo -NoProfile -Command '
     $ErrorActionPreference = "Stop"
     Get-ChildItem windows -Filter *.ps1 | ForEach-Object {
       [void][System.Management.Automation.Language.Parser]::ParseFile($_.FullName,[ref]$null,[ref]$null)
     }
     [void][System.Management.Automation.Language.Parser]::ParseFile((Resolve-Path "windows/ActivityWatch.Windows.Common.psm1"),[ref]$null,[ref]$null)
     [void][System.Management.Automation.Language.Parser]::ParseFile((Resolve-Path "windows/ActivityWatch.Windows.Common.psd1"),[ref]$null,[ref]$null)
-  '; then
-    echo "pwsh parse check failed due runtime environment; skipping."
-  fi
+  '
 else
   echo "pwsh not found, skipping."
 fi
 
-echo "[4/6] Install-kit consistency check"
-./scripts/check_install_kit_vs_repo.sh
 
-echo "[5/6] Generated-artifacts guard"
-if git status --short | grep -E '^(\\?\\?| M|M ) (\\.graphify_|graphify-out/|reports/|tmp/|data/)'; then
-  echo "ERROR: generated artifacts detected in working tree. Clean or ignore them before rollout."
-  exit 1
-fi
 
-echo "[6/6] Ansible syntax check (if ansible-playbook available)"
+echo "[4/4] Ansible syntax check (if ansible-playbook available)"
 if command -v ansible-playbook >/dev/null 2>&1; then
   for playbook in ansible/*.yml; do
     ansible-playbook --syntax-check "$playbook" -i ansible/inventory.example.ini >/dev/null
diff --git a/scripts/validate_install_kit.sh b/scripts/validate_install_kit.sh
index 3761820..f0ddc43 100755
--- a/scripts/validate_install_kit.sh
+++ b/scripts/validate_install_kit.sh
@@ -6,10 +6,7 @@ cd "$ROOT_DIR"
 
 KIT_DIR="install-kit-awindows-20260427-211240"
 MANIFEST="$KIT_DIR/MANIFEST.txt"
-# ZIP/TAR variables are declared for archive checks in this script; keep them for clarity
-# shellcheck disable=SC2034
 ZIP_ARCHIVE="install-kit-awindows-20260427-211240.zip"
-# shellcheck disable=SC2034
 TAR_ARCHIVE="install-kit-awindows-20260427-211240.tar.gz"
 
 required_files=(
diff --git a/windows/ActivityWatch.Windows.Common.psm1 b/windows/ActivityWatch.Windows.Common.psm1
index af4e0c6..5f1e7fb 100755
--- a/windows/ActivityWatch.Windows.Common.psm1
+++ b/windows/ActivityWatch.Windows.Common.psm1
@@ -376,7 +376,6 @@ function New-ActivityWatchDeploymentConfig {
         [string]$LaunchScriptPath,
         [Parameter(Mandatory = $true)]
         [string]$RecoveryScriptPath,
-        [string]$AwHostname,
         [Parameter(Mandatory = $true)]
         [pscustomobject[]]$UserTasks,
         [string]$PackageVersion = 'v0.13.2'
@@ -387,7 +386,6 @@ function New-ActivityWatchDeploymentConfig {
     return [pscustomobject]@{
         version  = 1
         generatedAtUtc = (Get-Date).ToUniversalTime().ToString('o')
-        awHostname = if ([string]::IsNullOrWhiteSpace($AwHostname)) { [string]$env:COMPUTERNAME } else { [string]$AwHostname }
         server   = [pscustomobject]@{
             host   = $ServerHost
             port   = $ServerPort
@@ -744,7 +742,7 @@ function Start-CollectorScriptIfNeeded {
 `$installRoot = [string]`$config.paths.installRoot
 `$stateRoot = [string]`$config.paths.stateRoot
 `$script:ApiBase = '{0}://{1}:{2}/api/0' -f [string]`$config.server.scheme, [string]`$config.server.host, [string]`$config.server.port
-`$script:Hostname = if (`$config.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]`$config.awHostname)) { [string]`$config.awHostname } else { `$env:COMPUTERNAME }
+`$script:Hostname = `$env:COMPUTERNAME
 `$script:KnownBuckets = @{}
 `$collectorScript = [string]`$config.paths.collectorScript
 `$endpointCollectorScript = if (`$config.paths.PSObject.Properties.Name -contains 'endpointCollectorScript') { [string]`$config.paths.endpointCollectorScript } else { Join-Path `$stateRoot 'dlp-endpoint-signals-collector.ps1' }
diff --git a/windows/aw-standalone-service.ps1 b/windows/aw-standalone-service.ps1
deleted file mode 100644
index a2cc659..0000000
--- a/windows/aw-standalone-service.ps1
+++ /dev/null
@@ -1,88 +0,0 @@
-[CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [int]$LoopSeconds = 20
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Config not found: $Path"
-    }
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Write-ServiceLog {
-    param([string]$Message)
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {}
-}
-
-function Start-CollectorIfNeeded {
-    param(
-        [string]$ScriptPath,
-        [string]$ConfigPath
-    )
-
-    if ([string]::IsNullOrWhiteSpace($ScriptPath) -or -not (Test-Path -LiteralPath $ScriptPath)) {
-        return
-    }
-
-    $escaped = [Regex]::Escape($ScriptPath)
-    $running = Get-CimInstance Win32_Process -ErrorAction SilentlyContinue |
-        Where-Object {
-            $_.Name -eq 'powershell.exe' -and
-            $_.CommandLine -match $escaped -and
-            $_.CommandLine -match [Regex]::Escape($ConfigPath)
-        } |
-        Select-Object -First 1
-
-    if ($running) {
-        return
-    }
-
-    $args = @('-NoProfile', '-ExecutionPolicy', 'Bypass')
-    if ($ScriptPath -like '*dlp-endpoint-signals*') {
-        $args += '-STA'
-    }
-    $args += @('-File', $ScriptPath, '-ConfigPath', $ConfigPath)
-    Start-Process -FilePath 'powershell.exe' -ArgumentList $args -WindowStyle Hidden | Out-Null
-    Write-ServiceLog ("started collector: {0}" -f $ScriptPath)
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$stateRoot = if ($cfg.paths -and $cfg.paths.stateRoot) { [string]$cfg.paths.stateRoot } else { 'C:\ProgramData\AWatch-rus' }
-$logsRoot = Join-Path $stateRoot 'logs'
-if (-not (Test-Path -LiteralPath $logsRoot)) {
-    New-Item -Path $logsRoot -ItemType Directory -Force | Out-Null
-}
-$script:LogPath = Join-Path $logsRoot 'standalone-agent-service.log'
-
-Write-ServiceLog ('service loop started, config={0}' -f $ConfigPath)
-
-while ($true) {
-    try {
-        $cfg = Get-Config -Path $ConfigPath
-        $paths = $cfg.paths
-
-        Start-CollectorIfNeeded -ScriptPath ([string]$paths.collectorScript) -ConfigPath $ConfigPath
-        Start-CollectorIfNeeded -ScriptPath ([string]$paths.endpointCollectorScript) -ConfigPath $ConfigPath
-        Start-CollectorIfNeeded -ScriptPath ([string]$paths.fileCollectorScript) -ConfigPath $ConfigPath
-        if ($paths.PSObject.Properties.Name -contains 'emailCollectorScript') {
-            Start-CollectorIfNeeded -ScriptPath ([string]$paths.emailCollectorScript) -ConfigPath $ConfigPath
-        }
-        if ($paths.PSObject.Properties.Name -contains 'sessionCollectorScript') {
-            Start-CollectorIfNeeded -ScriptPath ([string]$paths.sessionCollectorScript) -ConfigPath $ConfigPath
-        }
-    }
-    catch {
-        Write-ServiceLog ("loop error: {0}" -f $_.Exception.Message)
-    }
-    Start-Sleep -Seconds ([Math]::Max($LoopSeconds, 5))
-}
-
diff --git a/windows/browser-domains-native-collector.ps1 b/windows/browser-domains-native-collector.ps1
index 8b7ad88..f4eff79 100755
--- a/windows/browser-domains-native-collector.ps1
+++ b/windows/browser-domains-native-collector.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -59,18 +59,16 @@ $resolvedPulseSeconds = if ($PSBoundParameters.ContainsKey('PulseSeconds')) { $P
 $resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
 $resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("browser-domains-{0}.log" -f $env:USERNAME) }
 $resolvedIncidentLogPath = if ($IncidentLogPath) { $IncidentLogPath } else { Join-Path $resolvedLogsRoot ("dlp-incidents-{0}.log" -f $env:USERNAME) }
-$resolvedHealthPath = Join-Path $resolvedLogsRoot ("health-browser-domains-{0}.json" -f $env:USERNAME)
 $resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
 $resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
 $resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-$resolvedHostname = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]$deploymentConfig.awHostname)) { [string]$deploymentConfig.awHostname } else { [string]$env:COMPUTERNAME }
 
 if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
     New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
 }
 
 $script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $resolvedHostname
+$script:Hostname = $env:COMPUTERNAME
 $script:SessionId = (Get-Process -Id $PID).SessionId
 $script:KnownBuckets = @{}
 $script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
@@ -87,7 +85,6 @@ $script:DlpDefaults = [ordered]@{
     action = 'log'
     severity = 'low'
 }
-$script:HealthPath = $resolvedHealthPath
 $script:BrowserMap = @{
     msedge  = 'edge'
     chrome  = 'chrome'
@@ -137,23 +134,6 @@ function Write-DlpIncidentLog {
     }
 }
 
-function Write-CollectorHealth {
-    param([string]$Status = 'running')
-    try {
-        $health = @{
-            collector = 'browser-domains-native'
-            hostname = $script:Hostname
-            sessionId = $script:SessionId
-            status = $Status
-            apiBase = $script:ApiBase
-            ts = (Get-Date).ToUniversalTime().ToString('o')
-        } | ConvertTo-Json -Depth 4
-        Set-Content -LiteralPath $script:HealthPath -Value $health -Encoding UTF8
-    }
-    catch {
-    }
-}
-
 function Test-DomainMatch {
     param(
         [string]$DomainHost,
@@ -810,52 +790,46 @@ Load-CustomCategoryRules -Path $resolvedRulesPath
 Load-DlpPolicy -Path $resolvedPolicyPath
 Write-CollectorLog ("коллектор запущен для {0}" -f $script:ApiBase)
 
-try {
-    while ($true) {
-        try {
-            Write-CollectorHealth -Status 'running'
-            $context = Get-ForegroundWindowContext
-            if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
-                $url = Get-BrowserUrlFromWindow -Handle $context.Handle
-                if ($url) {
-                    $browserKey = $script:BrowserMap[$context.ProcessName]
-                    $domain = Get-HostFromUrl -Url $url
-                    if (-not $domain) {
-                        $domain = 'unknown'
-                    }
+while ($true) {
+    try {
+        $context = Get-ForegroundWindowContext
+        if ($context -and $script:BrowserMap.ContainsKey($context.ProcessName)) {
+            $url = Get-BrowserUrlFromWindow -Handle $context.Handle
+            if ($url) {
+                $browserKey = $script:BrowserMap[$context.ProcessName]
+                $domain = Get-HostFromUrl -Url $url
+                if (-not $domain) {
+                    $domain = 'unknown'
+                }
 
-                    $rootDomain = Get-RootDomain -DomainHost $domain
-                    if (-not $rootDomain) {
-                        $rootDomain = $domain
-                    }
+                $rootDomain = Get-RootDomain -DomainHost $domain
+                if (-not $rootDomain) {
+                    $rootDomain = $domain
+                }
 
-                    $category = Get-WebCategory -DomainHost $domain
-                    $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
-                    Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
-                    Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
-                    Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
+                $category = Get-WebCategory -DomainHost $domain
+                $bucketId = 'aw-watcher-web-{0}_{1}' -f $browserKey, $script:Hostname
+                Ensure-Bucket -BucketId $bucketId -ClientName ('aw-watcher-web-' + $browserKey)
+                Send-Heartbeat -BucketId $bucketId -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName
+                Send-CategoryHeartbeat -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group -CategoryRule $category.Rule
 
-                    $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
-                    if ($decision) {
-                        $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
-                        $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
-                        if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
-                            Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
-                            if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
-                                Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
-                            }
+                $decision = Get-DlpDecision -Domain $domain -RootDomain $rootDomain -Url $url -Title $context.Title -BrowserKey $browserKey -Category $category.Name -CategoryGroup $category.Group
+                if ($decision) {
+                    $fingerprint = '{0}|{1}|{2}|{3}' -f $decision.id, $browserKey, $rootDomain, $env:USERNAME
+                    $cooldown = [Math]::Max([int]$decision.cooldownSeconds, 30)
+                    if (Should-EmitIncident -Fingerprint $fingerprint -CooldownSeconds $cooldown) {
+                        Write-DlpIncidentLog ("{0} {1} {2} {3}" -f $decision.severity, $decision.action, $decision.id, $url)
+                        if (@('alert', 'block', 'quarantine') -contains ([string]$decision.action).ToLowerInvariant()) {
+                            Send-DlpIncidentHeartbeat -Decision $decision -Url $url -Title $context.Title -BrowserKey $browserKey -ProcessName $context.ProcessName -Domain $domain -RootDomain $rootDomain -Category $category.Name -CategoryGroup $category.Group
                         }
                     }
                 }
             }
         }
-        catch {
-            Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
-        }
-
-        Start-Sleep -Seconds $resolvedPollSeconds
     }
-}
-finally {
-    Write-CollectorHealth -Status 'stopped'
+    catch {
+        Write-CollectorLog ("ошибка коллектора: {0}" -f $_.Exception.Message)
+    }
+
+    Start-Sleep -Seconds $resolvedPollSeconds
 }
diff --git a/windows/deploy-domain-users.ps1 b/windows/deploy-domain-users.ps1
index 7b88f80..92e5494 100755
--- a/windows/deploy-domain-users.ps1
+++ b/windows/deploy-domain-users.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -24,7 +24,6 @@ param(
     [bool]$IncidentScreenshotEnabled = $true,
     [string]$IncidentArtifactsRoot,
     [bool]$LogonMarkerEnabled = $true,
-    [string]$AwHostname,
     [string]$CustomRulesPath,
     [string]$CustomPolicyPath
 )
@@ -101,7 +100,6 @@ $config = New-ActivityWatchDeploymentConfig `
     -IncidentScreenshotEnabled $IncidentScreenshotEnabled `
     -IncidentArtifactsRoot $IncidentArtifactsRoot `
     -LogonMarkerEnabled $LogonMarkerEnabled `
-    -AwHostname $AwHostname `
     -LaunchScriptPath $launchScriptPath `
     -RecoveryScriptPath $recoveryScriptPath `
     -UserTasks $taskDefinitions `
@@ -114,8 +112,8 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $recoveryScriptPath -ConfigPath $configPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output 'ActivityWatch развёрнут для пользователей:'
-$targetUsers | ForEach-Object { Write-Output " - $_" }
-Write-Output "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
-Write-Output "Каталог данных: $StateRoot"
-Write-Output "Файл DLP-политики: $($assetResult.ActivePolicy)"
+Write-Host 'ActivityWatch развёрнут для пользователей:'
+$targetUsers | ForEach-Object { Write-Host " - $_" }
+Write-Host "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
+Write-Host "Каталог данных: $StateRoot"
+Write-Host "Файл DLP-политики: $($assetResult.ActivePolicy)"
diff --git a/windows/deploy-ensemble.ps1 b/windows/deploy-ensemble.ps1
index ee8d255..fa6fd75 100644
--- a/windows/deploy-ensemble.ps1
+++ b/windows/deploy-ensemble.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -24,7 +24,6 @@ param(
     [bool]$IncidentScreenshotEnabled = $true,
     [string]$IncidentArtifactsRoot,
     [bool]$LogonMarkerEnabled = $true,
-    [string]$AwHostname,
     [string]$CustomRulesPath,
     [string]$CustomPolicyPath,
     [string]$ReportPath,
@@ -72,7 +71,6 @@ if (-not (Test-Path -LiteralPath $deployScript)) {
     -IncidentScreenshotEnabled $IncidentScreenshotEnabled `
     -IncidentArtifactsRoot $IncidentArtifactsRoot `
     -LogonMarkerEnabled $LogonMarkerEnabled `
-    -AwHostname $AwHostname `
     -CustomRulesPath $CustomRulesPath `
     -CustomPolicyPath $CustomPolicyPath
 
@@ -96,7 +94,6 @@ if (-not $SkipHardening) {
         -IncidentScreenshotEnabled $IncidentScreenshotEnabled `
         -IncidentArtifactsRoot $IncidentArtifactsRoot `
         -LogonMarkerEnabled $LogonMarkerEnabled `
-        -AwHostname $AwHostname `
         -CustomRulesPath $CustomRulesPath `
         -CustomPolicyPath $CustomPolicyPath
 }
@@ -139,6 +136,6 @@ if ($reportDirectory) {
 
 $report | ConvertTo-Json -Depth 12 | Set-Content -LiteralPath $effectiveReportPath -Encoding UTF8
 
-Write-Output 'Комплексное развёртывание ActivityWatch завершено.'
-Write-Output "Пользователи: $($resolvedUsers -join ', ')"
-Write-Output "Отчёт: $effectiveReportPath"
+Write-Host 'Комплексное развёртывание ActivityWatch завершено.'
+Write-Host "Пользователи: $($resolvedUsers -join ', ')"
+Write-Host "Отчёт: $effectiveReportPath"
diff --git a/windows/deploy-single-user.ps1 b/windows/deploy-single-user.ps1
index 1f5400c..160265d 100755
--- a/windows/deploy-single-user.ps1
+++ b/windows/deploy-single-user.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory = $true)]
     [string]$ServerHost,
@@ -22,7 +22,6 @@ param(
     [bool]$IncidentScreenshotEnabled = $true,
     [string]$IncidentArtifactsRoot,
     [bool]$LogonMarkerEnabled = $true,
-    [string]$AwHostname,
     [string]$CustomRulesPath,
     [string]$CustomPolicyPath
 )
@@ -93,7 +92,6 @@ $config = New-ActivityWatchDeploymentConfig `
     -IncidentScreenshotEnabled $IncidentScreenshotEnabled `
     -IncidentArtifactsRoot $IncidentArtifactsRoot `
     -LogonMarkerEnabled $LogonMarkerEnabled `
-    -AwHostname $AwHostname `
     -LaunchScriptPath $launchScriptPath `
     -RecoveryScriptPath $recoveryScriptPath `
     -UserTasks $taskDefinitions `
@@ -106,9 +104,9 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $recoveryScriptPath -ConfigPath $configPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output "ActivityWatch развёрнут для пользователя: $TargetUser"
-Write-Output "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
-Write-Output "Каталог установки: $InstallRoot"
-Write-Output "Каталог данных: $StateRoot"
-Write-Output "Файл правил: $($assetResult.ActiveRules)"
-Write-Output "Файл DLP-политики: $($assetResult.ActivePolicy)"
+Write-Host "ActivityWatch развёрнут для пользователя: $TargetUser"
+Write-Host "Сервер: ${ServerScheme}://$ServerHost`:$ServerPort"
+Write-Host "Каталог установки: $InstallRoot"
+Write-Host "Каталог данных: $StateRoot"
+Write-Host "Файл правил: $($assetResult.ActiveRules)"
+Write-Host "Файл DLP-политики: $($assetResult.ActivePolicy)"
diff --git a/windows/dlp-endpoint-signals-collector.ps1 b/windows/dlp-endpoint-signals-collector.ps1
index e864191..0b2f810 100644
--- a/windows/dlp-endpoint-signals-collector.ps1
+++ b/windows/dlp-endpoint-signals-collector.ps1
@@ -21,1073 +21,6 @@ function Get-DeploymentConfig {
     return $null
 }
 
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-$resolvedHostname = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]$deploymentConfig.awHostname)) { [string]$deploymentConfig.awHostname } else { [string]$env:COMPUTERNAME }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $resolvedHostname
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
 function Write-EndpointLog {
     param([string]$Message)
     if (-not $script:LocalAgentLogsEnabled) {
@@ -2024,5643 +957,3 @@ while ($true) {
 
     Start-Sleep -Seconds $resolvedPollSeconds
 }
-; }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch { Write-Error [CmdletBinding()]
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$ServerHost,
-    [int]$ServerPort,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme,
-    [string]$PolicyPath,
-    [string]$LogPath,
-    [int]$PollSeconds
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-DeploymentConfig {
-    param([string]$Path)
-    if ($Path -and (Test-Path -LiteralPath $Path)) {
-        return Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-    }
-    return $null
-}
-
-function Write-EndpointLog {
-    param([string]$Message)
-    if (-not $script:LocalAgentLogsEnabled) {
-        return
-    }
-    try {
-        Add-Content -LiteralPath $script:LogPath -Value ('{0} {1}' -f (Get-Date -Format s), $Message)
-    }
-    catch {
-    }
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes -TimeoutSec 15 -DisableKeepAlive | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [string]$BucketId,
-        [string]$ClientName,
-        [string]$BucketType
-    )
-
-    if ($script:KnownBuckets.ContainsKey($BucketId)) {
-        return
-    }
-
-    $body = @{
-        client   = $ClientName
-        type     = $BucketType
-        hostname = $script:Hostname
-    } | ConvertTo-Json -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$BucketId" -Json $body
-    $script:KnownBuckets[$BucketId] = $true
-}
-
-function Send-EndpointSignalHeartbeat {
-    param(
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-endpoint-signals_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-endpoint-signals' -BucketType 'aw.dlp.endpoint.signal'
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            signalType = $SignalType
-            username   = $env:USERNAME
-            sessionId  = $script:SessionId
-            hostname   = $script:Hostname
-            source     = 'endpoint-signals-phase2'
-        } + $Data
-    } | ConvertTo-Json -Depth 6 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Send-DlpIncidentHeartbeat {
-    param(
-        [string]$RuleId,
-        [string]$Action,
-        [string]$Severity,
-        [string]$Message,
-        [string]$SignalType,
-        [hashtable]$Data
-    )
-
-    $bucketId = 'aw-dlp-incidents_' + $script:Hostname
-    Ensure-Bucket -BucketId $bucketId -ClientName 'aw-dlp-incidents' -BucketType 'aw.dlp.incident'
-
-    $captureData = @{}
-    if ($script:IncidentScreenshotEnabled) {
-        try {
-            $captureData = Capture-IncidentScreenshot -RuleId $RuleId -SignalType $SignalType
-        }
-        catch {
-        }
-    }
-
-    $payload = @{
-        timestamp = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-        duration  = 0
-        data      = @{
-            ruleId    = $RuleId
-            action    = $Action
-            severity  = $Severity
-            message   = $Message
-            signalType = $SignalType
-            username  = $env:USERNAME
-            sessionId = $script:SessionId
-            hostname  = $script:Hostname
-            source    = 'endpoint-signals-phase2'
-        } + $Data + $captureData
-    } | ConvertTo-Json -Depth 7 -Compress
-
-    Invoke-AwJsonPost -Uri "$($script:ApiBase)/buckets/$bucketId/heartbeat?pulsetime=$script:PulseSeconds" -Json $payload
-}
-
-function Get-FileSha256Hex {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    try {
-        $sha = [Security.Cryptography.SHA256]::Create()
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            ($sha.ComputeHash($stream) | ForEach-Object { $_.ToString('x2') }) -join ''
-        }
-        finally {
-            $stream.Dispose()
-            $sha.Dispose()
-        }
-    }
-    catch {
-        return $null
-    }
-}
-
-function Ensure-Directory {
-    param([Parameter(Mandatory = $true)][string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-function Get-IncidentScreenshotPath {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    $safeUser = ($env:USERNAME -replace '[^A-Za-z0-9_.-]', '_')
-    $safeRule = ($RuleId -replace '[^A-Za-z0-9_.-]', '_')
-    $safeType = ($SignalType -replace '[^A-Za-z0-9_.-]', '_')
-    $stamp = (Get-Date).ToUniversalTime().ToString('yyyyMMdd_HHmmss_fff')
-    $file = '{0}_{1}_sid{2}_{3}_{4}.png' -f $script:Hostname, $safeUser, $script:SessionId, $safeType, $safeRule
-    $file = '{0}_{1}' -f $stamp, $file
-    return (Join-Path $script:IncidentArtifactsRoot $file)
-}
-
-function Ensure-ScreenshotTypesLoaded {
-    if ($script:ScreenshotTypesLoaded) {
-        return
-    }
-    Add-Type -AssemblyName System.Windows.Forms | Out-Null
-    Add-Type -AssemblyName System.Drawing | Out-Null
-    $script:ScreenshotTypesLoaded = $true
-}
-
-function Capture-IncidentScreenshot {
-    param(
-        [Parameter(Mandatory = $true)][string]$RuleId,
-        [Parameter(Mandatory = $true)][string]$SignalType
-    )
-
-    try {
-        Ensure-Directory -Path $script:IncidentArtifactsRoot
-        Ensure-ScreenshotTypesLoaded
-
-        $vs = [System.Windows.Forms.SystemInformation]::VirtualScreen
-        $bmp = New-Object System.Drawing.Bitmap ([int]$vs.Width), ([int]$vs.Height)
-        $gfx = [System.Drawing.Graphics]::FromImage($bmp)
-        try {
-            $gfx.CopyFromScreen([int]$vs.Left, [int]$vs.Top, 0, 0, $bmp.Size)
-            $path = Get-IncidentScreenshotPath -RuleId $RuleId -SignalType $SignalType
-            $bmp.Save($path, [System.Drawing.Imaging.ImageFormat]::Png)
-        }
-        finally {
-            $gfx.Dispose()
-            $bmp.Dispose()
-        }
-
-        return @{
-            screenshotPath   = $path
-            screenshotFormat = 'png'
-            screenshotWidth  = [int]$vs.Width
-            screenshotHeight = [int]$vs.Height
-            screenshotSha256 = (Get-FileSha256Hex -Path $path)
-        }
-    }
-    catch {
-        Write-EndpointLog ("screenshot capture failed: {0}" -f $_.Exception.Message)
-        return @{}
-    }
-}
-
-# ---------------------------------------------------------------------------
-# Enforcement functions (action = "block")
-# ---------------------------------------------------------------------------
-
-function Show-EnforcementNotification {
-    param(
-        [Parameter(Mandatory = $true)][string]$Title,
-        [Parameter(Mandatory = $true)][string]$Body
-    )
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue
-        $icon = New-Object System.Windows.Forms.NotifyIcon
-        $icon.Icon = [System.Drawing.SystemIcons]::Warning
-        $icon.BalloonTipTitle = $Title
-        $icon.BalloonTipText = $Body
-        $icon.BalloonTipIcon = [System.Windows.Forms.ToolTipIcon]::Warning
-        $icon.Visible = $true
-        $icon.ShowBalloonTip(5000)
-        Start-Sleep -Milliseconds 200
-        $icon.Dispose()
-    }
-    catch {
-        Write-EndpointLog ("notification failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Invoke-ClipboardEnforcement {
-    [OutputType([bool])]
-    param()
-    try {
-        Set-Clipboard -Value $null -ErrorAction Stop
-        Write-EndpointLog "enforcement: clipboard cleared"
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: clipboard clear failed: {0}" -f $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-UsbWriteBlockEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$DriveLetter
-    )
-    try {
-        $partition = Get-Partition -DriveLetter ($DriveLetter.TrimEnd(':')) -ErrorAction Stop
-        $disk = Get-Disk -Number $partition.DiskNumber -ErrorAction Stop
-        if ($disk.BusType -ne 'USB') {
-            Write-EndpointLog ("enforcement: skip non-USB disk {0} bus={1}" -f $disk.Number, $disk.BusType)
-            return $false
-        }
-        if (-not $disk.IsReadOnly) {
-            Set-Disk -Number $disk.Number -IsReadOnly $true -ErrorAction Stop
-            Write-EndpointLog ("enforcement: USB disk {0} ({1}) set read-only" -f $disk.Number, $DriveLetter)
-        }
-        return $true
-    }
-    catch {
-        Write-EndpointLog ("enforcement: USB write-block failed drive={0}: {1}" -f $DriveLetter, $_.Exception.Message)
-        return $false
-    }
-}
-
-function Invoke-PrintJobEnforcement {
-    [OutputType([bool])]
-    param(
-        [Parameter(Mandatory = $true)][string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-    $cancelled = $false
-    try {
-        $jobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-        foreach ($job in @($jobs)) {
-            $jobPrinter = [string]$job.Name
-            $jobOwner = [string]$job.Owner
-            $jobDoc = [string]$job.Document
-            $matchPrinter = ($jobPrinter -like "*$PrinterName*")
-            $matchOwner = (-not $Owner) -or ($jobOwner -like "*$Owner*") -or ($jobOwner -like "*$env:USERNAME*")
-            if ($matchPrinter -and $matchOwner) {
-                Remove-CimInstance -InputObject $job -ErrorAction Stop
-                Write-EndpointLog ("enforcement: print job cancelled id={0} printer={1} doc={2}" -f $job.JobId, $jobPrinter, $jobDoc)
-                $cancelled = $true
-            }
-        }
-    }
-    catch {
-        Write-EndpointLog ("enforcement: print cancel failed printer={0}: {1}" -f $PrinterName, $_.Exception.Message)
-    }
-    return $cancelled
-}
-
-function Get-StringHash {
-    param([AllowNull()][string]$Value)
-    if ($null -eq $Value) { return $null }
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
-    $sha = [Security.Cryptography.SHA256]::Create()
-    try {
-        ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join ''
-    }
-    finally {
-        $sha.Dispose()
-    }
-}
-
-function Get-ClipboardTextSafe {
-    [OutputType([string])]
-    param()
-
-    try {
-        $v = Get-Clipboard -Raw -ErrorAction Stop
-        if ($null -ne $v) { return [string]$v }
-    }
-    catch {
-        Write-EndpointLog ("clipboard direct read failed: {0}" -f $_.Exception.Message)
-    }
-
-    # Fallback: read clipboard in a dedicated STA thread for RDP/user-session edge cases.
-    try {
-        Add-Type -AssemblyName System.Windows.Forms -ErrorAction SilentlyContinue | Out-Null
-        $result = [string]::Empty
-        $thread = [System.Threading.Thread]{
-            try {
-                $script:__aw_clip = [System.Windows.Forms.Clipboard]::GetText()
-            }
-            catch {
-                $script:__aw_clip = $null
-            }
-        }
-        $thread.SetApartmentState([System.Threading.ApartmentState]::STA)
-        $thread.Start()
-        $thread.Join(3000) | Out-Null
-        if ($thread.IsAlive) { $thread.Abort() }
-        $result = [string]$script:__aw_clip
-        Remove-Variable -Name __aw_clip -Scope Script -ErrorAction SilentlyContinue
-        return $result
-    }
-    catch {
-        Write-EndpointLog ("clipboard STA read failed: {0}" -f $_.Exception.Message)
-        return $null
-    }
-}
-
-function Load-DlpPolicy {
-    param([string]$Path)
-
-    $script:Policy = [ordered]@{
-        defaults = [ordered]@{
-            enabled = $true
-            cooldownSeconds = 300
-            action = 'alert'
-            severity = 'medium'
-        }
-        endpoint = [ordered]@{
-            clipboard = @()
-            usb = @()
-            print = @()
-        }
-    }
-
-    if (-not $Path -or -not (Test-Path -LiteralPath $Path)) {
-        Write-EndpointLog ("policy not found, using defaults: {0}" -f $Path)
-        return
-    }
-
-    try {
-        $raw = Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-        if ($raw.defaults) {
-            if ($raw.defaults.PSObject.Properties.Name -contains 'enabled') { $script:Policy.defaults.enabled = [bool]$raw.defaults.enabled }
-            if ($raw.defaults.cooldownSeconds) { $script:Policy.defaults.cooldownSeconds = [int]$raw.defaults.cooldownSeconds }
-            if ($raw.defaults.action) { $script:Policy.defaults.action = [string]$raw.defaults.action }
-            if ($raw.defaults.severity) { $script:Policy.defaults.severity = [string]$raw.defaults.severity }
-        }
-
-        if ($raw.endpoint) {
-            if ($raw.endpoint.clipboard) { $script:Policy.endpoint.clipboard = @($raw.endpoint.clipboard) }
-            if ($raw.endpoint.usb) { $script:Policy.endpoint.usb = @($raw.endpoint.usb) }
-            if ($raw.endpoint.print) { $script:Policy.endpoint.print = @($raw.endpoint.print) }
-        }
-    }
-    catch {
-        Write-EndpointLog ("policy parse failed: {0}" -f $_.Exception.Message)
-    }
-}
-
-function Should-EmitByCooldown {
-    param(
-        [string]$Fingerprint,
-        [int]$CooldownSeconds
-    )
-
-    $now = (Get-Date).ToUniversalTime()
-    if ($script:Cooldown.ContainsKey($Fingerprint)) {
-        $last = [datetime]$script:Cooldown[$Fingerprint]
-        if ((New-TimeSpan -Start $last -End $now).TotalSeconds -lt $CooldownSeconds) {
-            return $false
-        }
-    }
-
-    $script:Cooldown[$Fingerprint] = $now
-    return $true
-}
-
-function Evaluate-ClipboardRules {
-    param(
-        [string]$ClipboardText,
-        [string]$ClipboardHash
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.clipboard)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-        $minLength = if ($rule.minLength) { [int]$rule.minLength } else { 0 }
-        $regexPatterns = if ($rule.regexPatterns) { @($rule.regexPatterns) } else { @() }
-        if ($ClipboardText.Length -lt $minLength) { continue }
-
-        $matched = $false
-        foreach ($pattern in $regexPatterns) {
-            if ($ClipboardText -match [string]$pattern) {
-                $matched = $true
-                break
-            }
-        }
-
-        if (-not $matched) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "clipboard|$ruleId|$ClipboardHash|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Clipboard rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-ClipboardEnforcement
-            Show-EnforcementNotification -Title 'DLP: буфер обмена очищен' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'clipboard' -Data @{
-            clipboardHash = $ClipboardHash
-            clipboardLength = $ClipboardText.Length
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident clipboard rule={0} action={1} severity={2} enforced={3}" -f $ruleId, $action, $severity, $enforced)
-    }
-}
-
-function Evaluate-UsbRules {
-    param(
-        [string]$DriveLetter,
-        [string]$VolumeName
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.usb)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "usb|$ruleId|$DriveLetter|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "USB rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-UsbWriteBlockEnforcement -DriveLetter $DriveLetter
-            Show-EnforcementNotification -Title 'DLP: USB заблокирован для записи' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'usb_insert' -Data @{
-            driveLetter = $DriveLetter
-            volumeName  = $VolumeName
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident usb rule={0} action={1} severity={2} drive={3} enforced={4}" -f $ruleId, $action, $severity, $DriveLetter, $enforced)
-    }
-}
-
-function Evaluate-PrintRules {
-    param(
-        [string]$PrinterName,
-        [string]$DocumentName,
-        [string]$Owner
-    )
-
-    foreach ($rule in @($script:Policy.endpoint.print)) {
-        if (-not $rule) { continue }
-        if ($rule.PSObject.Properties.Name -contains 'enabled' -and -not [bool]$rule.enabled) { continue }
-        $ruleId = [string]$rule.id
-        if (-not $ruleId) { continue }
-
-        $match = $true
-        if ($rule.printerRegex) {
-            $match = $match -and ($PrinterName -match [string]$rule.printerRegex)
-        }
-        if ($rule.documentRegex) {
-            $match = $match -and ($DocumentName -match [string]$rule.documentRegex)
-        }
-        if (-not $match) { continue }
-
-        $cooldown = if ($rule.cooldownSeconds) { [int]$rule.cooldownSeconds } else { [int]$script:Policy.defaults.cooldownSeconds }
-        $fingerprint = "print|$ruleId|$PrinterName|$Owner|$env:USERNAME"
-        if (-not (Should-EmitByCooldown -Fingerprint $fingerprint -CooldownSeconds ([Math]::Max($cooldown, 30)))) { continue }
-
-        $action = if ($rule.action) { [string]$rule.action } else { [string]$script:Policy.defaults.action }
-        $severity = if ($rule.severity) { [string]$rule.severity } else { [string]$script:Policy.defaults.severity }
-        $message = if ($rule.message) { [string]$rule.message } else { "Print rule matched: $ruleId" }
-
-        $enforced = $false
-        if ($action -eq 'block') {
-            $enforced = Invoke-PrintJobEnforcement -PrinterName $PrinterName -DocumentName $DocumentName -Owner $Owner
-            Show-EnforcementNotification -Title 'DLP: печать заблокирована' -Body $message
-        }
-
-        Send-DlpIncidentHeartbeat -RuleId $ruleId -Action $action -Severity $severity -Message $message -SignalType 'print_job' -Data @{
-            printerName  = $PrinterName
-            documentName = $DocumentName
-            owner        = $Owner
-            enforced = $enforced
-        }
-        Write-EndpointLog ("incident print rule={0} action={1} severity={2} printer={3} enforced={4}" -f $ruleId, $action, $severity, $PrinterName, $enforced)
-    }
-}
-
-function Test-LooksLikeMojibakeQuestionMarks {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return $true }
-    return $Value -match '\?{2,}'
-}
-
-function Normalize-OwnerForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized -match '[\\/]') {
-        $parts = $normalized -split '[\\/]'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[$parts.Count - 1]
-        }
-    }
-    if ($normalized -match '@') {
-        $parts = $normalized -split '@'
-        if ($parts.Count -gt 0) {
-            $normalized = [string]$parts[0]
-        }
-    }
-    return $normalized
-}
-
-function Test-OwnerLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-OwnerForMatch -Value $Expected
-    $actualNorm = Normalize-OwnerForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Normalize-PrinterForMatch {
-    param([AllowNull()][string]$Value)
-    if ([string]::IsNullOrWhiteSpace($Value)) { return '' }
-    $normalized = $Value.Trim().ToLowerInvariant()
-    if ($normalized.Contains(',')) {
-        $normalized = ($normalized -split ',', 2)[0].Trim()
-    }
-    if ($normalized -match '\son\s') {
-        $normalized = ($normalized -split '\son\s', 2)[0].Trim()
-    }
-    return $normalized
-}
-
-function Test-PrinterLooseMatch {
-    param(
-        [string]$Expected,
-        [string]$Actual
-    )
-    $expectedNorm = Normalize-PrinterForMatch -Value $Expected
-    $actualNorm = Normalize-PrinterForMatch -Value $Actual
-    if ([string]::IsNullOrWhiteSpace($expectedNorm) -or [string]::IsNullOrWhiteSpace($actualNorm)) {
-        return $false
-    }
-    return ($actualNorm -eq $expectedNorm) -or $actualNorm.Contains($expectedNorm) -or $expectedNorm.Contains($actualNorm)
-}
-
-function Get-PrintServiceEventSummary {
-    param([Parameter(Mandatory = $true)]$Event)
-
-    $props = @($Event.Properties)
-    $propertyValues = @()
-    foreach ($prop in $props) {
-        $propertyValues += [string]$prop.Value
-    }
-
-    [pscustomobject]@{
-        RecordId      = [string]$Event.RecordId
-        TimeCreated   = if ($Event.TimeCreated) { $Event.TimeCreated.ToString('o') } else { '' }
-        PropertyCount  = $props.Count
-        DocumentName   = if ($props.Count -ge 1) { [string]$props[0].Value } else { '' }
-        Owner         = if ($props.Count -ge 2) { [string]$props[1].Value } else { '' }
-        PrinterName   = if ($props.Count -ge 4) { [string]$props[3].Value } else { '' }
-        PropertyValues = $propertyValues
-    }
-}
-
-function Get-PrintServiceDocumentFallback {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    $preferred = [string]$EventSummary.DocumentName
-    if (-not (Test-LooksLikeMojibakeQuestionMarks -Value $preferred) -and $preferred -notmatch '^[0-9]+$') {
-        return $preferred
-    }
-
-    $pathCandidates = New-Object System.Collections.Generic.List[string]
-    $textCandidates = New-Object System.Collections.Generic.List[string]
-
-    foreach ($value in @($EventSummary.PropertyValues)) {
-        $candidate = [string]$value
-        if ([string]::IsNullOrWhiteSpace($candidate)) { continue }
-        if ($candidate -eq $preferred) { continue }
-        if ($Owner -and $candidate -like "*$Owner*") { continue }
-        if ($PrinterName -and $candidate -like "*$PrinterName*") { continue }
-        if (Test-LooksLikeMojibakeQuestionMarks -Value $candidate) { continue }
-
-        if ($candidate -match '[\\/:]' -and $candidate -match '\.[A-Za-z0-9]{1,8}$') {
-            $pathCandidates.Add($candidate)
-            continue
-        }
-
-        if ($candidate -match '^[0-9]+$') {
-            continue
-        }
-
-        $textCandidates.Add($candidate)
-    }
-
-    foreach ($candidate in @($pathCandidates)) {
-        $leaf = Split-Path -Path $candidate -Leaf
-        if (-not [string]::IsNullOrWhiteSpace($leaf)) {
-            return $leaf
-        }
-        return $candidate
-    }
-
-    foreach ($candidate in @($textCandidates)) {
-        return $candidate
-    }
-
-    return $null
-}
-
-function Write-PrintServiceEventTrace {
-    param(
-        [Parameter(Mandatory = $true)]$EventSummary,
-        [string]$Phase,
-        [string]$MatchReason,
-        [string]$ResolvedDocument
-    )
-
-    $properties = if ($EventSummary.PropertyValues) {
-        ($EventSummary.PropertyValues -join ' | ')
-    }
-    else {
-        ''
-    }
-
-    Write-EndpointLog (
-        'printservice-307 phase={0} recordId={1} time={2} owner={3} printer={4} document={5} resolved={6} properties=[{7}] reason={8}' -f
-        $Phase,
-        $EventSummary.RecordId,
-        $EventSummary.TimeCreated,
-        $EventSummary.Owner,
-        $EventSummary.PrinterName,
-        $EventSummary.DocumentName,
-        $ResolvedDocument,
-        $properties,
-        $MatchReason
-    )
-}
-
-function Get-BetterDocumentNameFromPrintServiceEvents {
-    param(
-        [string]$Owner,
-        [string]$PrinterName
-    )
-
-    try {
-        $startTime = (Get-Date).AddMinutes(-15)
-        $events = Get-WinEvent -FilterHashtable @{
-            LogName   = 'Microsoft-Windows-PrintService/Operational'
-            Id        = 307
-            StartTime = $startTime
-        } -MaxEvents 200 -ErrorAction Stop
-
-        foreach ($pass in @('strict', 'relaxed')) {
-            foreach ($event in @($events)) {
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $Owner -PrinterName $PrinterName
-
-                $ownerMatches = if ($Owner) { Test-OwnerLooseMatch -Expected $Owner -Actual $summary.Owner } else { $true }
-                $printerMatches = if ($PrinterName) { Test-PrinterLooseMatch -Expected $PrinterName -Actual $summary.PrinterName } else { $true }
-
-                if ($pass -eq 'strict') {
-                    if ($Owner -and -not $ownerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                    if ($PrinterName -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'printer-mismatch-strict' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-                else {
-                    if ($Owner -and $PrinterName -and -not $ownerMatches -and -not $printerMatches) {
-                        Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason 'owner-and-printer-mismatch-relaxed' -ResolvedDocument $resolvedDocument
-                        continue
-                    }
-                }
-
-                if ([string]::IsNullOrWhiteSpace($resolvedDocument)) {
-                    Write-PrintServiceEventTrace -EventSummary $summary -Phase 'scan' -MatchReason ('no-document-candidate-' + $pass) -ResolvedDocument ''
-                    continue
-                }
-
-                $matchReasonBase = if (Test-LooksLikeMojibakeQuestionMarks -Value $summary.DocumentName) { 'fallback-used' } else { 'direct' }
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'selected' -MatchReason ($matchReasonBase + '-' + $pass) -ResolvedDocument $resolvedDocument
-                return $resolvedDocument
-            }
-        }
-    }
-    catch {
-    }
-
-    return $null
-}
-
-$deploymentConfig = Get-DeploymentConfig -Path $ConfigPath
-$resolvedServerHost = if ($ServerHost) { $ServerHost } elseif ($deploymentConfig) { [string]$deploymentConfig.server.host } else { throw 'ServerHost is required.' }
-$resolvedServerPort = if ($PSBoundParameters.ContainsKey('ServerPort')) { $ServerPort } elseif ($deploymentConfig) { [int]$deploymentConfig.server.port } else { 5600 }
-$resolvedServerScheme = if ($ServerScheme) { $ServerScheme } elseif ($deploymentConfig) { [string]$deploymentConfig.server.scheme } else { 'http' }
-$resolvedPolicyPath = if ($PolicyPath) { $PolicyPath } elseif ($deploymentConfig -and $deploymentConfig.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$deploymentConfig.paths.policyPath } else { 'C:\ProgramData\AWatch-rus\dlp-policy.json' }
-$resolvedPollSeconds = if ($PSBoundParameters.ContainsKey('PollSeconds')) { $PollSeconds } elseif ($deploymentConfig) { [int]$deploymentConfig.collector.pollSeconds } else { 5 }
-$resolvedLogsRoot = if ($deploymentConfig) { [string]$deploymentConfig.paths.logsRoot } else { 'C:\ProgramData\AWatch-rus\logs' }
-$resolvedLogPath = if ($LogPath) { $LogPath } else { Join-Path $resolvedLogsRoot ("endpoint-signals-{0}.log" -f $env:USERNAME) }
-$resolvedLocalAgentLogsEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'logging' -and $deploymentConfig.logging.PSObject.Properties.Name -contains 'localAgentLogsEnabled') { [bool]$deploymentConfig.logging.localAgentLogsEnabled } else { $true }
-$resolvedIncidentArtifactsRoot = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$deploymentConfig.incidentCapture.artifactsRoot } else { Join-Path $env:LOCALAPPDATA 'AWatch-rus\\incident-artifacts' }
-$resolvedIncidentScreenshotEnabled = if ($deploymentConfig -and $deploymentConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $deploymentConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$deploymentConfig.incidentCapture.screenshotEnabled } else { $true }
-
-if ($resolvedLocalAgentLogsEnabled -and -not (Test-Path -LiteralPath $resolvedLogsRoot)) {
-    New-Item -Path $resolvedLogsRoot -ItemType Directory -Force | Out-Null
-}
-
-$script:ApiBase = '{0}://{1}:{2}/api/0' -f $resolvedServerScheme, $resolvedServerHost, $resolvedServerPort
-$script:Hostname = $env:COMPUTERNAME
-$script:SessionId = (Get-Process -Id $PID).SessionId
-$script:KnownBuckets = @{}
-$script:Cooldown = @{}
-$script:SeenUsb = @{}
-$script:SeenPrintJob = @{}
-$script:SeenPrintEvent = @{}
-$script:LastClipboardHash = $null
-$script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
-$script:SelfTestIntervalSeconds = [Math]::Max($resolvedPollSeconds * 10, 60)
-$script:LastSelfTestAt = [datetime]::MinValue
-$script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
-$script:LogPath = $resolvedLogPath
-$script:IncidentArtifactsRoot = $resolvedIncidentArtifactsRoot
-$script:IncidentScreenshotEnabled = $resolvedIncidentScreenshotEnabled
-$script:ScreenshotTypesLoaded = $false
-
-Load-DlpPolicy -Path $resolvedPolicyPath
-Write-EndpointLog ("endpoint collector started against {0}" -f $script:ApiBase)
-
-while ($true) {
-    try {
-        $nowUtc = (Get-Date).ToUniversalTime()
-        if (($nowUtc - $script:LastSelfTestAt).TotalSeconds -ge $script:SelfTestIntervalSeconds) {
-            Send-EndpointSignalHeartbeat -SignalType 'self_test' -Data @{
-                collector = 'dlp-endpoint-signals'
-                policyEnabled = [bool]$script:Policy.defaults.enabled
-            }
-            $script:LastSelfTestAt = $nowUtc
-        }
-
-        if (-not $script:Policy.defaults.enabled) {
-            Start-Sleep -Seconds $resolvedPollSeconds
-            continue
-        }
-
-        try {
-            $clipboardText = Get-ClipboardTextSafe
-            if ($clipboardText) {
-                $clipboardHash = Get-StringHash -Value $clipboardText
-                if ($clipboardHash -and $clipboardHash -ne $script:LastClipboardHash) {
-                    $script:LastClipboardHash = $clipboardHash
-                    Send-EndpointSignalHeartbeat -SignalType 'clipboard_change' -Data @{
-                        clipboardHash = $clipboardHash
-                        clipboardLength = $clipboardText.Length
-                    }
-                    Evaluate-ClipboardRules -ClipboardText $clipboardText -ClipboardHash $clipboardHash
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $usbDrives = Get-CimInstance Win32_LogicalDisk -Filter "DriveType=2" -ErrorAction SilentlyContinue
-            $currentUsb = @{}
-            foreach ($drive in @($usbDrives)) {
-                $deviceId = [string]$drive.DeviceID
-                if (-not $deviceId) { continue }
-                $currentUsb[$deviceId] = $true
-                if (-not $script:SeenUsb.ContainsKey($deviceId)) {
-                    $script:SeenUsb[$deviceId] = (Get-Date).ToUniversalTime()
-                    $volumeName = [string]$drive.VolumeName
-                    Send-EndpointSignalHeartbeat -SignalType 'usb_insert' -Data @{
-                        driveLetter = $deviceId
-                        volumeName  = $volumeName
-                    }
-                    Evaluate-UsbRules -DriveLetter $deviceId -VolumeName $volumeName
-                }
-            }
-
-            foreach ($known in @($script:SeenUsb.Keys)) {
-                if (-not $currentUsb.ContainsKey($known)) {
-                    $script:SeenUsb.Remove($known)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printJobs = Get-CimInstance Win32_PrintJob -ErrorAction SilentlyContinue
-            foreach ($job in @($printJobs)) {
-                $jobId = [string]$job.JobId
-                if (-not $jobId) { continue }
-                if ($script:SeenPrintJob.ContainsKey($jobId)) { continue }
-                $script:SeenPrintJob[$jobId] = (Get-Date).ToUniversalTime()
-
-                $printerName = [string]$job.Name
-                $documentName = [string]$job.Document
-                $owner = [string]$job.Owner
-                $documentNameOriginal = $documentName
-
-                if (Test-LooksLikeMojibakeQuestionMarks -Value $documentName) {
-                    $eventDocumentName = Get-BetterDocumentNameFromPrintServiceEvents -Owner $owner -PrinterName $printerName
-                    if ($eventDocumentName) {
-                        $documentName = $eventDocumentName
-                    }
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = $documentName
-                    documentNameOriginal = $documentNameOriginal
-                    owner        = $owner
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName $documentName -Owner $owner
-            }
-
-            $cleanupBefore = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintJob.Keys)) {
-                $ts = [datetime]$script:SeenPrintJob[$k]
-                if ($ts -lt $cleanupBefore) {
-                    $script:SeenPrintJob.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-
-        try {
-            $printEvents = Get-WinEvent -FilterHashtable @{
-                LogName = 'Microsoft-Windows-PrintService/Operational'
-                Id = 307
-                StartTime = (Get-Date).AddMinutes(-20)
-            } -MaxEvents 200 -ErrorAction SilentlyContinue
-
-            foreach ($event in @($printEvents)) {
-                $recordId = [string]$event.RecordId
-                if (-not $recordId) { continue }
-                if ($script:SeenPrintEvent.ContainsKey($recordId)) { continue }
-                $script:SeenPrintEvent[$recordId] = (Get-Date).ToUniversalTime()
-
-                $summary = Get-PrintServiceEventSummary -Event $event
-                $documentName = [string]$summary.DocumentName
-                $owner = [string]$summary.Owner
-                $printerName = [string]$summary.PrinterName
-                $resolvedDocument = Get-PrintServiceDocumentFallback -EventSummary $summary -Owner $owner -PrinterName $printerName
-
-                Write-PrintServiceEventTrace -EventSummary $summary -Phase 'emit' -MatchReason 'raw-scan' -ResolvedDocument $resolvedDocument
-
-                if (-not [string]::IsNullOrWhiteSpace($owner) -and $owner -notlike "*$env:USERNAME*") {
-                    continue
-                }
-
-                Send-EndpointSignalHeartbeat -SignalType 'print_job' -Data @{
-                    printerName  = $printerName
-                    documentName = if ($resolvedDocument) { $resolvedDocument } else { $documentName }
-                    documentNameOriginal = $documentName
-                    owner        = $owner
-                    eventRecordId = $recordId
-                    eventSource = 'printservice-307'
-                }
-                Evaluate-PrintRules -PrinterName $printerName -DocumentName (if ($resolvedDocument) { $resolvedDocument } else { $documentName }) -Owner $owner
-            }
-
-            $cleanupBeforeEvent = (Get-Date).ToUniversalTime().AddHours(-8)
-            foreach ($k in @($script:SeenPrintEvent.Keys)) {
-                $ts = [datetime]$script:SeenPrintEvent[$k]
-                if ($ts -lt $cleanupBeforeEvent) {
-                    $script:SeenPrintEvent.Remove($k)
-                }
-            }
-        }
-        catch {
-        }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
-; }
-    }
-    catch {
-        Write-EndpointLog ("collector error: {0}" -f $_.Exception.Message)
-    }
-
-    Start-Sleep -Seconds $resolvedPollSeconds
-}
diff --git a/windows/email-outbound-collector.ps1 b/windows/email-outbound-collector.ps1
index d7f4d94..7a1600f 100644
--- a/windows/email-outbound-collector.ps1
+++ b/windows/email-outbound-collector.ps1
@@ -53,79 +53,13 @@ function Write-CollectorLog {
     catch { }
 }
 
-function Add-WalEntry {
+function Invoke-AwJsonPost {
     param(
         [Parameter(Mandatory = $true)][string]$Uri,
         [Parameter(Mandatory = $true)][string]$Json
     )
-    if ([string]::IsNullOrWhiteSpace($script:WalPath)) { return }
-    try {
-        $entry = @{ ts = (Get-Date).ToUniversalTime().ToString('o'); uri = $Uri; json = $Json } | ConvertTo-Json -Compress
-        Add-Content -LiteralPath $script:WalPath -Value $entry -Encoding UTF8
-    } catch {}
-}
-
-function Flush-Wal {
-    if ([string]::IsNullOrWhiteSpace($script:WalPath) -or -not (Test-Path -LiteralPath $script:WalPath)) { return }
-    $remaining = New-Object System.Collections.Generic.List[string]
-    try {
-        $script:WalFlushing = $true
-        foreach ($line in (Get-Content -LiteralPath $script:WalPath -ErrorAction SilentlyContinue)) {
-            if ([string]::IsNullOrWhiteSpace($line)) { continue }
-            try {
-                $entry = $line | ConvertFrom-Json
-                if ($null -eq $entry -or -not $entry.uri -or -not $entry.json) { continue }
-                if (-not (Invoke-AwJsonPost -Uri ([string]$entry.uri) -Json ([string]$entry.json))) { $remaining.Add($line) }
-            } catch { $remaining.Add($line) }
-        }
-        if ($remaining.Count -eq 0) {
-            Remove-Item -LiteralPath $script:WalPath -Force -ErrorAction SilentlyContinue
-        } else {
-            Set-Content -LiteralPath $script:WalPath -Value ($remaining -join [Environment]::NewLine) -Encoding UTF8
-        }
-    } finally {
-        $script:WalFlushing = $false
-    }
-}
-
-function Write-CollectorHealth {
-    param([string]$Status = 'running')
-    if ([string]::IsNullOrWhiteSpace($script:HealthPath)) { return }
-    try {
-        $walDepth = 0
-        if ($script:WalPath -and (Test-Path -LiteralPath $script:WalPath)) { $walDepth = @((Get-Content -LiteralPath $script:WalPath)).Count }
-        $health = @{
-            collector = 'email-outbound'; hostname = $script:Hostname; sessionId = $script:SessionId;
-            status = $Status; apiBase = $script:ApiBase; walDepth = $walDepth; ts = (Get-Date).ToUniversalTime().ToString('o')
-        } | ConvertTo-Json -Depth 5
-        Set-Content -LiteralPath $script:HealthPath -Value $health -Encoding UTF8
-    } catch {}
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json,
-        [int]$MaxAttempts = 5,
-        [int]$InitialBackoffMs = 500
-    )
-    $attempt = 1
-    $backoff = [Math]::Max(100, $InitialBackoffMs)
     $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    while ($attempt -le $MaxAttempts) {
-        try {
-            Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-            return $true
-        } catch {
-            if ($attempt -ge $MaxAttempts) {
-                if (-not $script:WalFlushing) { Add-WalEntry -Uri $Uri -Json $Json }
-                return $false
-            }
-            Start-Sleep -Milliseconds $backoff
-            $backoff = [Math]::Min($backoff * 2, 10000)
-            $attempt++
-        }
-    }
+    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
 }
 
 function Ensure-Bucket {
@@ -583,10 +517,6 @@ $script:SeenSmtpConnections = @{}
 $script:PulseSeconds = [Math]::Max($resolvedPollSeconds * 3, 30)
 $script:LocalAgentLogsEnabled = $resolvedLocalAgentLogsEnabled
 $script:LogPath = $resolvedLogPath
-$stateRoot = if ($deploymentConfig -and $deploymentConfig.paths -and $deploymentConfig.paths.stateRoot) { [string]$deploymentConfig.paths.stateRoot } else { 'C:\ProgramData\AWatch-rus' }
-$script:WalPath = Join-Path $stateRoot 'wal-email-outbound.ndjson'
-$script:HealthPath = Join-Path $stateRoot 'health-email-outbound.json'
-$script:WalFlushing = $false
 $script:OutlookApp = $null
 $script:OutlookNamespace = $null
 $script:SentFolder = $null
@@ -610,65 +540,43 @@ if ($useOutlook) {
 # Main loop
 # ---------------------------------------------------------------------------
 
-try {
-    while ($true) {
-        try {
-            Flush-Wal
-            Write-CollectorHealth -Status 'running'
-            if (-not $script:Policy.defaults.enabled) {
-                Start-Sleep -Seconds $resolvedPollSeconds
-                continue
-            }
+while ($true) {
+    try {
+        if (-not $script:Policy.defaults.enabled) {
+            Start-Sleep -Seconds $resolvedPollSeconds
+            continue
+        }
 
-            if ($useOutlook) {
-                if (-not $outlookReady) {
-                    $outlookReady = Initialize-OutlookCom
-                }
-                if ($outlookReady) {
-                    try {
-                        Poll-OutlookSentItems
-                    }
-                    catch {
-                        Write-CollectorLog ("outlook poll error: {0}" -f $_.Exception.Message)
-                        $outlookReady = $false
-                        $script:OutlookApp = $null
-                        $script:OutlookNamespace = $null
-                        $script:SentFolder = $null
-                    }
-                }
+        if ($useOutlook) {
+            if (-not $outlookReady) {
+                $outlookReady = Initialize-OutlookCom
             }
-
-            if ($useSmtp) {
+            if ($outlookReady) {
                 try {
-                    Poll-SmtpConnections
+                    Poll-OutlookSentItems
                 }
                 catch {
-                    Write-CollectorLog ("smtp poll error: {0}" -f $_.Exception.Message)
+                    Write-CollectorLog ("outlook poll error: {0}" -f $_.Exception.Message)
+                    $outlookReady = $false
+                    $script:OutlookApp = $null
+                    $script:OutlookNamespace = $null
+                    $script:SentFolder = $null
                 }
             }
         }
-        catch {
-            Write-CollectorLog ("collector error: {0}" -f $_.Exception.Message)
-        }
 
-        Start-Sleep -Seconds $resolvedPollSeconds
-    }
-}
-finally {
-    Write-CollectorHealth -Status 'stopped'
-    try {
-        if ($null -ne $script:SentFolder) {
-            [void][System.Runtime.InteropServices.Marshal]::ReleaseComObject($script:SentFolder)
-            $script:SentFolder = $null
-        }
-        if ($null -ne $script:OutlookNamespace) {
-            [void][System.Runtime.InteropServices.Marshal]::ReleaseComObject($script:OutlookNamespace)
-            $script:OutlookNamespace = $null
-        }
-        if ($null -ne $script:OutlookApp) {
-            [void][System.Runtime.InteropServices.Marshal]::ReleaseComObject($script:OutlookApp)
-            $script:OutlookApp = $null
+        if ($useSmtp) {
+            try {
+                Poll-SmtpConnections
+            }
+            catch {
+                Write-CollectorLog ("smtp poll error: {0}" -f $_.Exception.Message)
+            }
         }
     }
-    catch {}
+    catch {
+        Write-CollectorLog ("collector error: {0}" -f $_.Exception.Message)
+    }
+
+    Start-Sleep -Seconds $resolvedPollSeconds
 }
diff --git a/windows/file-operations-collector.ps1 b/windows/file-operations-collector.ps1
index e0890e9..bc63d55 100644
--- a/windows/file-operations-collector.ps1
+++ b/windows/file-operations-collector.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -22,9 +22,6 @@ Add-Type -AssemblyName System.Net.Http
 $script:KnownBuckets = @{}
 $script:Hostname = $env:COMPUTERNAME
 $script:SessionId = [System.Diagnostics.Process]::GetCurrentProcess().SessionId
-$script:WalPath = $null
-$script:HealthPath = $null
-$script:WalFlushing = $false
 
 # Настройка логирования
 $script:LogPath = $LogPath
@@ -46,88 +43,28 @@ function Write-FileCollectorLog {
     } catch {}
 }
 
-function Add-WalEntry {
+function Invoke-AwJsonPost {
     param(
         [Parameter(Mandatory = $true)][string]$Uri,
         [Parameter(Mandatory = $true)][string]$Json
     )
-    if ([string]::IsNullOrWhiteSpace($script:WalPath)) { return }
+    $httpClient = $null
     try {
-        $entry = @{ ts = (Get-Date).ToUniversalTime().ToString('o'); uri = $Uri; json = $Json } | ConvertTo-Json -Compress
-        Add-Content -LiteralPath $script:WalPath -Value $entry -Encoding UTF8
-    } catch {}
-}
-
-function Flush-Wal {
-    if ([string]::IsNullOrWhiteSpace($script:WalPath) -or -not (Test-Path -LiteralPath $script:WalPath)) { return }
-    $remaining = New-Object System.Collections.Generic.List[string]
-    try {
-        $script:WalFlushing = $true
-        foreach ($line in (Get-Content -LiteralPath $script:WalPath -ErrorAction SilentlyContinue)) {
-            if ([string]::IsNullOrWhiteSpace($line)) { continue }
-            try {
-                $entry = $line | ConvertFrom-Json
-                if ($null -eq $entry -or -not $entry.uri -or -not $entry.json) { continue }
-                if (-not (Invoke-AwJsonPost -Uri ([string]$entry.uri) -Json ([string]$entry.json))) { $remaining.Add($line) }
-            } catch { $remaining.Add($line) }
-        }
-        if ($remaining.Count -eq 0) {
-            Remove-Item -LiteralPath $script:WalPath -Force -ErrorAction SilentlyContinue
-        } else {
-            Set-Content -LiteralPath $script:WalPath -Value ($remaining -join [Environment]::NewLine) -Encoding UTF8
+        $httpClient = New-Object System.Net.Http.HttpClient
+        $content = New-Object System.Net.Http.StringContent($Json, [System.Text.Encoding]::UTF8, "application/json")
+        $response = $httpClient.PostAsync($Uri, $content).Result
+        if (-not $response.IsSuccessStatusCode) {
+            $status = [int]$response.StatusCode
+            $reason = [string]$response.ReasonPhrase
+            $body = $response.Content.ReadAsStringAsync().Result
+            Write-FileCollectorLog ("POST failed: uri={0} status={1} reason={2} body={3}" -f $Uri, $status, $reason, $body)
         }
+    } catch {
+        Write-FileCollectorLog "POST Error: $($_.Exception.Message)"
     } finally {
-        $script:WalFlushing = $false
-    }
-}
-
-function Write-CollectorHealth {
-    param([string]$Status = 'running')
-    if ([string]::IsNullOrWhiteSpace($script:HealthPath)) { return }
-    try {
-        $walDepth = 0
-        if ($script:WalPath -and (Test-Path -LiteralPath $script:WalPath)) { $walDepth = @((Get-Content -LiteralPath $script:WalPath)).Count }
-        $health = @{
-            collector = 'file-operations'; hostname = $script:Hostname; sessionId = $script:SessionId;
-            status = $Status; apiBase = $script:ApiBase; walDepth = $walDepth; ts = (Get-Date).ToUniversalTime().ToString('o')
-        } | ConvertTo-Json -Depth 5
-        Set-Content -LiteralPath $script:HealthPath -Value $health -Encoding UTF8
-    } catch {}
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json,
-        [int]$MaxAttempts = 5,
-        [int]$InitialBackoffMs = 500
-    )
-    $attempt = 1
-    $backoff = [Math]::Max(100, $InitialBackoffMs)
-    while ($attempt -le $MaxAttempts) {
-        $httpClient = $null
-        try {
-            $httpClient = New-Object System.Net.Http.HttpClient
-            $content = New-Object System.Net.Http.StringContent($Json, [System.Text.Encoding]::UTF8, "application/json")
-            $response = $httpClient.PostAsync($Uri, $content).Result
-            if ($response.IsSuccessStatusCode) { return $true }
-            if ($attempt -ge $MaxAttempts) {
-                if (-not $script:WalFlushing) { Add-WalEntry -Uri $Uri -Json $Json }
-                return $false
-            }
-        } catch {
-            if ($attempt -ge $MaxAttempts) {
-                if (-not $script:WalFlushing) { Add-WalEntry -Uri $Uri -Json $Json }
-                return $false
-            }
-        } finally {
-            if ($null -ne $httpClient) {
-                $httpClient.Dispose()
-            }
+        if ($null -ne $httpClient) {
+            $httpClient.Dispose()
         }
-        Start-Sleep -Milliseconds $backoff
-        $backoff = [Math]::Min($backoff * 2, 10000)
-        $attempt++
     }
 }
 
@@ -208,15 +145,11 @@ function Send-FileOperationEvent {
 
 $config = Get-DeploymentConfig -Path $ConfigPath
 if (-not $config) { throw "Configuration file not found: $ConfigPath" }
-$script:Hostname = if ($config.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]$config.awHostname)) { [string]$config.awHostname } else { [string]$env:COMPUTERNAME }
 
 $scheme = if ($ServerScheme) { $ServerScheme } elseif ($config.server.scheme) { $config.server.scheme } else { 'http' }
 $hostName = if ($ServerHost) { $ServerHost } elseif ($config.server.host) { $config.server.host } else { 'localhost' }
 $port = if ($ServerPort) { $ServerPort } elseif ($config.server.port) { $config.server.port } else { 5600 }
 $script:ApiBase = "{0}://{1}:{2}/api/0" -f $scheme, $hostName, $port
-$stateRoot = if ($config.paths -and $config.paths.stateRoot) { [string]$config.paths.stateRoot } else { 'C:\ProgramData\AWatch-rus' }
-$script:WalPath = Join-Path $stateRoot 'wal-file-operations.ndjson'
-$script:HealthPath = Join-Path $stateRoot 'health-file-operations.json'
 
 $bucketId = 'aw-file-operations_' + $script:Hostname
 Ensure-Bucket -BucketId $bucketId -ClientName 'aw-file-operations' -BucketType 'aw.file.operation'
@@ -273,14 +206,11 @@ Write-FileCollectorLog "Collector started. Waiting for events..."
 
 try {
     while ($true) {
-        Flush-Wal
-        Write-CollectorHealth -Status 'running'
         Start-Sleep -Seconds $PollSeconds
     }
 }
 finally {
     Write-FileCollectorLog "Stopping collector..."
-    Write-CollectorHealth -Status 'stopped'
     foreach ($sub in @($subscriptions)) {
         try {
             if ($sub -and $sub.Id) {
diff --git a/windows/hardening-recovery.ps1 b/windows/hardening-recovery.ps1
index ed4bbac..d382f41 100755
--- a/windows/hardening-recovery.ps1
+++ b/windows/hardening-recovery.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding()]
+[CmdletBinding()]
 param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$ServerHost,
@@ -21,7 +21,6 @@ param(
     [bool]$IncidentScreenshotEnabled,
     [string]$IncidentArtifactsRoot,
     [bool]$LogonMarkerEnabled,
-    [string]$AwHostname,
     [string]$CustomRulesPath,
     [string]$CustomPolicyPath,
     [switch]$RepairPackage,
@@ -74,7 +73,6 @@ $effectiveIncidentCaptureEnabled = if ($PSBoundParameters.ContainsKey('IncidentC
 $effectiveIncidentScreenshotEnabled = if ($PSBoundParameters.ContainsKey('IncidentScreenshotEnabled')) { [bool]$IncidentScreenshotEnabled } elseif ($existingConfig -and $existingConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $existingConfig.incidentCapture.PSObject.Properties.Name -contains 'screenshotEnabled') { [bool]$existingConfig.incidentCapture.screenshotEnabled } else { $true }
 $effectiveIncidentArtifactsRoot = if ($PSBoundParameters.ContainsKey('IncidentArtifactsRoot') -and $IncidentArtifactsRoot) { $IncidentArtifactsRoot } elseif ($existingConfig -and $existingConfig.PSObject.Properties.Name -contains 'incidentCapture' -and $existingConfig.incidentCapture.PSObject.Properties.Name -contains 'artifactsRoot') { [string]$existingConfig.incidentCapture.artifactsRoot } else { Join-Path $effectiveStateRoot 'incident-artifacts' }
 $effectiveLogonMarkerEnabled = if ($PSBoundParameters.ContainsKey('LogonMarkerEnabled')) { [bool]$LogonMarkerEnabled } elseif ($existingConfig -and $existingConfig.PSObject.Properties.Name -contains 'sessionEvents' -and $existingConfig.sessionEvents.PSObject.Properties.Name -contains 'logonEnabled') { [bool]$existingConfig.sessionEvents.logonEnabled } else { $true }
-$effectiveAwHostname = if ($PSBoundParameters.ContainsKey('AwHostname') -and -not [string]::IsNullOrWhiteSpace($AwHostname)) { [string]$AwHostname } elseif ($existingConfig -and $existingConfig.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]$existingConfig.awHostname)) { [string]$existingConfig.awHostname } else { [string]$env:COMPUTERNAME }
 $effectiveVersion = if ($Version) { $Version } elseif ($existingConfig) { [string]$existingConfig.package.version } else { 'v0.13.2' }
 
 $effectiveUsers = if ($Users -or $UserListPath) {
@@ -141,7 +139,6 @@ $config = New-ActivityWatchDeploymentConfig `
     -IncidentScreenshotEnabled $effectiveIncidentScreenshotEnabled `
     -IncidentArtifactsRoot $effectiveIncidentArtifactsRoot `
     -LogonMarkerEnabled $effectiveLogonMarkerEnabled `
-    -AwHostname $effectiveAwHostname `
     -LaunchScriptPath $effectiveLaunchScript `
     -RecoveryScriptPath $effectiveRecoveryScript `
     -UserTasks $taskDefinitions `
@@ -154,6 +151,6 @@ Register-ActivityWatchUserTasks -TaskDefinitions $taskDefinitions -LaunchScriptP
 Register-ActivityWatchRecoveryTask -TaskName $config.recovery.taskName -RecoveryScriptPath $effectiveRecoveryScript -ConfigPath $effectiveConfigPath
 Start-ActivityWatchTasks -TaskDefinitions $taskDefinitions -RecoveryTaskName $config.recovery.taskName
 
-Write-Output 'Укрепление и восстановление ActivityWatch завершены.'
-Write-Output "Конфигурация: $effectiveConfigPath"
-Write-Output "Пользователи восстановлены: $($effectiveUsers -join ', ')"
+Write-Host 'Укрепление и восстановление ActivityWatch завершены.'
+Write-Host "Конфигурация: $effectiveConfigPath"
+Write-Host "Пользователи восстановлены: $($effectiveUsers -join ', ')"
diff --git a/windows/install-standalone-service.ps1 b/windows/install-standalone-service.ps1
deleted file mode 100644
index e7ef129..0000000
--- a/windows/install-standalone-service.ps1
+++ /dev/null
@@ -1,121 +0,0 @@
-[CmdletBinding()]
-param(
-    [Parameter(Mandatory = $true)]
-    [string]$ServerHost,
-    [int]$ServerPort = 5600,
-    [ValidateSet('http', 'https')]
-    [string]$ServerScheme = 'http',
-    [string]$StateRoot = 'C:\ProgramData\AWatch-rus',
-    [string]$InstallRoot = 'C:\Program Files\AWatch-rus\bin',
-    [string]$ServiceName = 'AWatchRusStandaloneAgent',
-    [string]$AwHostname
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Assert-Admin {
-    $id = [Security.Principal.WindowsIdentity]::GetCurrent()
-    $p = [Security.Principal.WindowsPrincipal]::new($id)
-    if (-not $p.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {
-        throw 'Run as Administrator.'
-    }
-}
-
-function Ensure-Dir {
-    param([string]$Path)
-    if (-not (Test-Path -LiteralPath $Path)) {
-        New-Item -Path $Path -ItemType Directory -Force | Out-Null
-    }
-}
-
-Assert-Admin
-
-$logsRoot = Join-Path $StateRoot 'logs'
-Ensure-Dir -Path $StateRoot
-Ensure-Dir -Path $logsRoot
-
-$collectorScript = Join-Path $StateRoot 'browser-domains-native-collector.ps1'
-$endpointCollectorScript = Join-Path $StateRoot 'dlp-endpoint-signals-collector.ps1'
-$fileCollectorScript = Join-Path $StateRoot 'file-operations-collector.ps1'
-$emailCollectorScript = Join-Path $StateRoot 'email-outbound-collector.ps1'
-$sessionCollectorScript = Join-Path $StateRoot 'worktime-session-collector.ps1'
-$rulesPath = Join-Path $StateRoot 'web-category-rules.json'
-$policyPath = Join-Path $StateRoot 'dlp-policy.json'
-$configPath = Join-Path $StateRoot 'deployment-config.json'
-$serviceScriptPath = Join-Path $PSScriptRoot 'aw-standalone-service.ps1'
-
-Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'browser-domains-native-collector.ps1') -Destination $collectorScript -Force
-Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'dlp-endpoint-signals-collector.ps1') -Destination $endpointCollectorScript -Force
-Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'file-operations-collector.ps1') -Destination $fileCollectorScript -Force
-if (Test-Path -LiteralPath (Join-Path $PSScriptRoot 'email-outbound-collector.ps1')) {
-    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'email-outbound-collector.ps1') -Destination $emailCollectorScript -Force
-}
-if (Test-Path -LiteralPath (Join-Path $PSScriptRoot 'worktime-session-collector.ps1')) {
-    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'worktime-session-collector.ps1') -Destination $sessionCollectorScript -Force
-}
-
-if (-not (Test-Path -LiteralPath $rulesPath)) {
-    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'web-category-rules.example.json') -Destination $rulesPath -Force
-}
-if (-not (Test-Path -LiteralPath $policyPath)) {
-    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'dlp-policy.example.json') -Destination $policyPath -Force
-}
-
-$effectiveHostname = if ([string]::IsNullOrWhiteSpace($AwHostname)) { [string]$env:COMPUTERNAME } else { [string]$AwHostname }
-
-$config = [pscustomobject]@{
-    version = 1
-    generatedAtUtc = (Get-Date).ToUniversalTime().ToString('o')
-    awHostname = $effectiveHostname
-    server = [pscustomobject]@{
-        host = $ServerHost
-        port = $ServerPort
-        scheme = $ServerScheme
-    }
-    paths = [pscustomobject]@{
-        installRoot = $InstallRoot
-        stateRoot = $StateRoot
-        logsRoot = $logsRoot
-        collectorScript = $collectorScript
-        endpointCollectorScript = $endpointCollectorScript
-        fileCollectorScript = $fileCollectorScript
-        emailCollectorScript = $emailCollectorScript
-        sessionCollectorScript = $sessionCollectorScript
-        rulesPath = $rulesPath
-        policyPath = $policyPath
-    }
-    collector = [pscustomobject]@{
-        pollSeconds = 5
-        pulseSeconds = 30
-    }
-    collectors = [pscustomobject]@{
-        afkEnabled = $false
-        windowEnabled = $false
-        fileOpsEnabled = $true
-        emailEnabled = $true
-    }
-    logging = [pscustomobject]@{
-        localAgentLogsEnabled = $true
-    }
-}
-
-$config | ConvertTo-Json -Depth 10 | Set-Content -LiteralPath $configPath -Encoding UTF8
-
-$existing = Get-Service -Name $ServiceName -ErrorAction SilentlyContinue
-if ($existing) {
-    sc.exe stop $ServiceName | Out-Null
-    Start-Sleep -Seconds 1
-    sc.exe delete $ServiceName | Out-Null
-    Start-Sleep -Seconds 1
-}
-
-$binPath = "`"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe`" -NoProfile -ExecutionPolicy Bypass -File `"$serviceScriptPath`" -ConfigPath `"$configPath`""
-sc.exe create $ServiceName binPath= "$binPath" start= auto DisplayName= "AWatch-rus Standalone Agent" | Out-Null
-sc.exe description $ServiceName "Standalone AWatch-rus DLP agent service wrapper" | Out-Null
-sc.exe failure $ServiceName reset= 60 actions= restart/5000/restart/5000/restart/5000 | Out-Null
-sc.exe start $ServiceName | Out-Null
-
-Write-Output "Standalone service installed: $ServiceName"
-Write-Output "Config: $configPath"
-Write-Output ("Host: {0} -> {1}://{2}:{3}" -f $effectiveHostname, $ServerScheme, $ServerHost, $ServerPort)
diff --git a/windows/installkit/innosetup/AWatch-rus-InnoSetup.iss b/windows/installkit/innosetup/AWatch-rus-InnoSetup.iss
index d79a51c..cab5adc 100644
--- a/windows/installkit/innosetup/AWatch-rus-InnoSetup.iss
+++ b/windows/installkit/innosetup/AWatch-rus-InnoSetup.iss
@@ -34,8 +34,6 @@ Name: "validate"; Description: "Запустить validate-deployment (чере
 [Files]
 Source: "..\..\ActivityWatch.Windows.Common.psd1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\ActivityWatch.Windows.Common.psm1"; DestDir: "{app}\windows"; Flags: ignoreversion
-Source: "..\..\install-standalone-service.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
-Source: "..\..\aw-standalone-service.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\deploy-single-user.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\deploy-domain-users.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\deploy-ensemble.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
@@ -45,7 +43,6 @@ Source: "..\..\migrate-awatch-rus-paths.ps1"; DestDir: "{app}\windows"; Flags: i
 Source: "..\..\worktime-session-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\browser-domains-native-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\dlp-endpoint-signals-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
-Source: "..\..\file-operations-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\email-outbound-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\web-category-rules.example.json"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\dlp-policy.example.json"; DestDir: "{app}\windows"; Flags: ignoreversion
@@ -54,11 +51,95 @@ Source: "payload\{#AwDefaultZipName}"; DestDir: "{app}\payload"; Flags: ignoreve
 Source: "innosetup-rdp-package-filelist.md"; DestDir: "{app}\windows\installkit\innosetup"; Flags: ignoreversion
 
 [Run]
-Filename: "powershell.exe"; Parameters: "{code:GetStandaloneInstallParams}"; Flags: runhidden; Tasks: deploy
+Filename: "powershell.exe"; Parameters: "{code:GetDeployEnsembleParams}"; Flags: runhidden; Tasks: deploy
 
 [Code]
 var
   ServerHostPage: TInputQueryWizardPage;
+  UsersPage: TInputQueryWizardPage;
+  OptionsPage: TInputOptionWizardPage;
+
+function NormalizeUserCsv(const UserCsv: string): string;
+var
+  i: Integer;
+  s: string;
+  token: string;
+begin
+  Result := '';
+  s := UserCsv;
+  while True do
+  begin
+    i := Pos(',', s);
+    if i = 0 then
+    begin
+      token := Trim(s);
+      s := '';
+    end
+    else
+    begin
+      token := Trim(Copy(s, 1, i - 1));
+      Delete(s, 1, i);
+    end;
+
+    if token <> '' then
+    begin
+      if Result <> '' then
+        Result := Result + ',';
+      Result := Result + token;
+    end;
+
+    if s = '' then
+      Break;
+  end;
+end;
+
+function BuildUsersPowerShellArg(const UserCsv: string): string;
+var
+  i: Integer;
+  s: string;
+  token: string;
+  quoted: string;
+begin
+  Result := '';
+  s := UserCsv;
+  while True do
+  begin
+    i := Pos(',', s);
+    if i = 0 then
+    begin
+      token := Trim(s);
+      s := '';
+    end
+    else
+    begin
+      token := Trim(Copy(s, 1, i - 1));
+      Delete(s, 1, i);
+    end;
+
+    if token <> '' then
+    begin
+      quoted := '"' + token + '"';
+      if Result <> '' then
+        Result := Result + ',';
+      Result := Result + quoted;
+    end;
+
+    if s = '' then
+      Break;
+  end;
+  if Result <> '' then
+    Result := '-Users ' + Result;
+end;
+
+function PayloadZipPath: string;
+begin
+  Result := ExpandConstant('{app}\payload\{#AwDefaultZipName}');
+end;
+
+function HasPayloadZip: Boolean;
+begin
+  Result := FileExists(ExpandConstant('{src}\payload\{#AwDefaultZipName}'));
+end;
 
 procedure InitializeWizard;
 begin
@@ -74,24 +155,62 @@ begin
   ServerHostPage.Add('ServerPort', False);
   ServerHostPage.Values[0] := '{#AwDefaultServerHost}';
   ServerHostPage.Values[1] := '{#AwDefaultServerPort}';
+
+  UsersPage := CreateInputQueryPage(
+    ServerHostPage.ID,
+    'Пользователи (RDP)',
+    'Перечень пользователей, для которых разворачиваем агенты.',
+    'Введите список через запятую. Пример: user1,user2,user3'
+  );
+  UsersPage.Add('Users (CSV)', False);
+  UsersPage.Values[0] := '{#AwDefaultUsers}';
+
+  OptionsPage := CreateInputOptionPage(
+    UsersPage.ID,
+    'Опции деплоя',
+    'Выберите опции для установки/валидации.',
+    '',
+    False,
+    False
+  );
+  OptionsPage.Add('Использовать offline payload (встроенный ZIP)');
+  OptionsPage.Add('Запустить validate-deployment после деплоя');
+  OptionsPage.Values[0] := HasPayloadZip;
+  OptionsPage.Values[1] := True;
 end;
 
-function GetStandaloneInstallParams(Param: string): string;
+function GetDeployEnsembleParams(Param: string): string;
 var
   serverHost: string;
   serverPort: string;
+  usersCsv: string;
+  usersArg: string;
+  zipArg: string;
+  validateArg: string;
 begin
   serverHost := Trim(ServerHostPage.Values[0]);
   serverPort := Trim(ServerHostPage.Values[1]);
-  if serverHost = '' then
-    RaiseException('ServerHost is empty.');
-  if serverPort = '' then
-    RaiseException('ServerPort is empty.');
+  usersCsv := NormalizeUserCsv(UsersPage.Values[0]);
+
+  usersArg := BuildUsersPowerShellArg(usersCsv);
+  if usersArg = '' then
+    RaiseException('Users list is empty.');
+
+  zipArg := '';
+  if OptionsPage.Values[0] then
+    zipArg := ' -PackageZipPath "' + PayloadZipPath + '"';
+
+  validateArg := '';
+  if OptionsPage.Values[1] and WizardIsTaskSelected('validate') then
+    validateArg := ' -ValidateAfterDeploy';
 
   Result :=
-    '-NoProfile -ExecutionPolicy Bypass -File "' + ExpandConstant('{app}\windows\install-standalone-service.ps1') + '"' +
+    '-NoProfile -ExecutionPolicy Bypass -File "' + ExpandConstant('{app}\windows\deploy-ensemble.ps1') + '"' +
     ' -ServerHost "' + serverHost + '"' +
     ' -ServerPort ' + serverPort +
+    ' ' + usersArg +
+    zipArg +
     ' -InstallRoot "{#AwDefaultInstallRoot}"' +
-    ' -StateRoot "{#AwDefaultStateRoot}"';
+    ' -StateRoot "{#AwDefaultStateRoot}"' +
+    validateArg;
 end;
diff --git a/windows/migrate-awatch-rus-paths.ps1 b/windows/migrate-awatch-rus-paths.ps1
index f91e6eb..c588050 100644
--- a/windows/migrate-awatch-rus-paths.ps1
+++ b/windows/migrate-awatch-rus-paths.ps1
@@ -1,4 +1,4 @@
-[CmdletBinding(SupportsShouldProcess = $true)]
+[CmdletBinding(SupportsShouldProcess = $true)]
 param(
     [string]$OldInstallRoot = 'C:\Program Files\ActivityWatch-Phase2',
     [string]$OldStateRoot = 'C:\ProgramData\ActivityWatch-Phase2',
diff --git a/windows/validate-deployment.ps1 b/windows/validate-deployment.ps1
index 15a4822..41b6bd9 100644
--- a/windows/validate-deployment.ps1
+++ b/windows/validate-deployment.ps1
@@ -1,6 +1,6 @@
 [CmdletBinding()]
 param(
-    [string]$ConfigPath = 'C:\ProgramData\ActivityWatch\deployment-config.json'
+    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json'
 )
 
 Set-StrictMode -Version Latest
@@ -13,26 +13,70 @@ $config = Read-ActivityWatchDeploymentConfig -Path $ConfigPath
 $installRoot = [string]$config.paths.installRoot
 $stateRoot = [string]$config.paths.stateRoot
 $collectorScript = [string]$config.paths.collectorScript
+$endpointCollectorScript = if ($config.paths.PSObject.Properties.Name -contains 'endpointCollectorScript') { [string]$config.paths.endpointCollectorScript } else { Join-Path $stateRoot 'dlp-endpoint-signals-collector.ps1' }
+$fileCollectorScript = if ($config.paths.PSObject.Properties.Name -contains 'fileCollectorScript') { [string]$config.paths.fileCollectorScript } else { Join-Path $stateRoot 'file-operations-collector.ps1' }
+$sessionCollectorScript = if ($config.paths.PSObject.Properties.Name -contains 'sessionCollectorScript') { [string]$config.paths.sessionCollectorScript } else { Join-Path $stateRoot 'worktime-session-collector.ps1' }
 $rulesPath = [string]$config.paths.rulesPath
+$policyPath = if ($config.paths.PSObject.Properties.Name -contains 'policyPath') { [string]$config.paths.policyPath } else { Join-Path $stateRoot 'dlp-policy.json' }
 $launchScript = [string]$config.paths.launchScript
 $recoveryScript = [string]$config.paths.recoveryScript
 
+$afkExpected = if ($config.PSObject.Properties.Name -contains 'collectors' -and $config.collectors.PSObject.Properties.Name -contains 'afkEnabled') { [bool]$config.collectors.afkEnabled } else { $true }
+$windowExpected = if ($config.PSObject.Properties.Name -contains 'collectors' -and $config.collectors.PSObject.Properties.Name -contains 'windowEnabled') { [bool]$config.collectors.windowEnabled } else { $true }
+$fileOpsExpected = if ($config.PSObject.Properties.Name -contains 'collectors' -and $config.collectors.PSObject.Properties.Name -contains 'fileOpsEnabled') { [bool]$config.collectors.fileOpsEnabled } else { $true }
+$printServiceOperationalEnabled = $false
+try {
+    $printServiceLog = Get-WinEvent -ListLog 'Microsoft-Windows-PrintService/Operational' -ErrorAction Stop
+    $printServiceOperationalEnabled = [bool]$printServiceLog.IsEnabled
+}
+catch {
+}
+$printJobTitlePolicyEnabled = $false
+try {
+    $printPolicy = Get-ItemProperty -LiteralPath 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers' -Name 'ShowJobTitleInEventLogs' -ErrorAction Stop
+    $printJobTitlePolicyEnabled = ([int]$printPolicy.ShowJobTitleInEventLogs -eq 1)
+}
+catch {
+}
 $requiredFiles = @(
-    (Join-Path $installRoot 'aw-watcher-afk\aw-watcher-afk.exe'),
-    (Join-Path $installRoot 'aw-watcher-window\aw-watcher-window.exe'),
     $collectorScript,
+    $endpointCollectorScript,
+    $sessionCollectorScript,
     $rulesPath,
+    $policyPath,
     $launchScript,
     $recoveryScript,
     $ConfigPath
 )
+if ($fileOpsExpected) {
+    $requiredFiles += $fileCollectorScript
+}
+if ($afkExpected) {
+    $requiredFiles += (Join-Path $installRoot 'aw-watcher-afk\aw-watcher-afk.exe')
+}
+if ($windowExpected) {
+    $requiredFiles += (Join-Path $installRoot 'aw-watcher-window\aw-watcher-window.exe')
+}
 
 $missingFiles = @(
     $requiredFiles | Where-Object { -not (Test-Path -LiteralPath $_) }
 )
 
-$processNames = @('aw-watcher-afk', 'aw-watcher-window')
-$runningProcesses = Get-Process -Name $processNames -ErrorAction SilentlyContinue | Select-Object Name, Id, SessionId
+$processNames = @()
+if ($afkExpected) { $processNames += 'aw-watcher-afk' }
+if ($windowExpected) { $processNames += 'aw-watcher-window' }
+$runningProcesses = @()
+if ($processNames.Count -gt 0) {
+    $runningProcesses = Get-Process -Name $processNames -ErrorAction SilentlyContinue | Select-Object Name, Id, SessionId
+}
+$sessionCollectorProcesses = @(
+    Get-CimInstance Win32_Process -ErrorAction SilentlyContinue |
+        Where-Object {
+            ($_.Name -ieq 'powershell.exe' -or $_.Name -ieq 'pwsh.exe') -and
+            $_.CommandLine -match [Regex]::Escape($sessionCollectorScript)
+        } |
+        Select-Object Name, ProcessId, SessionId, CommandLine
+)
 
 $taskNames = @()
 if ($config.userTasks) {
@@ -41,25 +85,28 @@ if ($config.userTasks) {
 $taskNames += [string]$config.recovery.taskName
 $taskNames = $taskNames | Sort-Object -Unique
 
-$tasks = foreach ($taskName in $taskNames) {
-    $task = Get-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
-    if ($task) {
-        [pscustomobject]@{
-            taskName = $task.TaskName
-            state = [string]$task.State
-            present = $true
+$tasks = @(
+    foreach ($taskName in $taskNames) {
+        $task = Get-ScheduledTask -ErrorAction SilentlyContinue | Where-Object { $_.TaskName -eq $taskName } | Select-Object -First 1
+        if ($task) {
+            [pscustomobject]@{
+                taskName = $task.TaskName
+                state = [string]$task.State
+                present = $true
+            }
+        }
+        else {
+            [pscustomobject]@{
+                taskName = $taskName
+                state = 'Отсутствует'
+                present = $false
+            }
         }
     }
-    else {
-        [pscustomobject]@{
-            taskName = $taskName
-            state = 'Missing'
-            present = $false
-        }
-    }
-}
+)
 
 $serverUrl = '{0}://{1}:{2}' -f [string]$config.server.scheme, [string]$config.server.host, [int]$config.server.port
+$uniqueRunningProcessNames = @($runningProcesses | Select-Object -ExpandProperty Name -Unique)
 $result = [ordered]@{
     generatedAtUtc = (Get-Date).ToUniversalTime().ToString('o')
     configPath = $ConfigPath
@@ -76,11 +123,24 @@ $result = [ordered]@{
         ok = [bool]($tasks.Count -gt 0 -and -not ($tasks | Where-Object { -not $_.present }))
     }
     processes = [ordered]@{
+        expected = $processNames
         list = @($runningProcesses)
-        ok = [bool](($runningProcesses | Select-Object -ExpandProperty Name -Unique).Count -ge 2)
+        sessionCollectors = @($sessionCollectorProcesses)
+        ok = [bool](
+            (
+                ($processNames.Count -eq 0) -or
+                ($uniqueRunningProcessNames.Count -ge $processNames.Count)
+            ) -and
+            ($sessionCollectorProcesses.Count -ge 1)
+        )
+    }
+    printTelemetry = [ordered]@{
+        operationalLogEnabled = $printServiceOperationalEnabled
+        jobTitlePolicyEnabled = $printJobTitlePolicyEnabled
+        ok = [bool]($printServiceOperationalEnabled -and $printJobTitlePolicyEnabled)
     }
 }
 
-$result.overallOk = [bool]($result.files.ok -and $result.tasks.ok -and $result.processes.ok)
+$result.overallOk = [bool]($result.files.ok -and $result.tasks.ok -and $result.processes.ok -and $result.printTelemetry.ok)
 
 $result
diff --git a/windows/worktime-session-collector.ps1 b/windows/worktime-session-collector.ps1
index df0b51d..7ebf555 100644
--- a/windows/worktime-session-collector.ps1
+++ b/windows/worktime-session-collector.ps1
@@ -1,268 +1,4 @@
-param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch { Write-Error param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch {
-    }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } elseif ($cfg.PSObject.Properties.Name -contains 'awHostname' -and -not [string]::IsNullOrWhiteSpace([string]$cfg.awHostname)) { [string]$cfg.awHostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch {
-        }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}
-; }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch { Write-Error param(
+param(
     [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
     [string]$Hostname,
     [int]$PollSeconds = 30
@@ -428,234 +164,3 @@ while ($true) {
 
     Start-Sleep -Seconds $sleepSec
 }
-; }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch { Write-Error param(
-    [string]$ConfigPath = 'C:\ProgramData\AWatch-rus\deployment-config.json',
-    [string]$Hostname,
-    [int]$PollSeconds = 30
-)
-
-Set-StrictMode -Version Latest
-$ErrorActionPreference = 'Stop'
-
-function Get-Config {
-    param([string]$Path)
-
-    if (-not (Test-Path -LiteralPath $Path)) {
-        throw "Конфигурация не найдена: $Path"
-    }
-
-    Get-Content -LiteralPath $Path -Raw | ConvertFrom-Json
-}
-
-function Invoke-AwJsonPost {
-    param(
-        [Parameter(Mandatory = $true)][string]$Uri,
-        [Parameter(Mandatory = $true)][string]$Json
-    )
-
-    $bytes = [Text.Encoding]::UTF8.GetBytes($Json)
-    Invoke-RestMethod -Method Post -Uri $Uri -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null
-}
-
-function Ensure-Bucket {
-    param(
-        [Parameter(Mandatory = $true)][string]$ApiBase,
-        [Parameter(Mandatory = $true)][string]$BucketId,
-        [Parameter(Mandatory = $true)][string]$HostnameValue
-    )
-
-    try {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-        return
-    }
-    catch {
-    }
-
-    $body = @{
-        client   = 'aw-worktime-session-collector'
-        type     = 'aw.worktime.session'
-        hostname = $HostnameValue
-    } | ConvertTo-Json -Compress
-
-    try {
-        Invoke-AwJsonPost -Uri "$ApiBase/buckets/$BucketId" -Json $body
-    }
-    catch {
-        Invoke-RestMethod -Method Get -Uri "$ApiBase/buckets/$BucketId" | Out-Null
-    }
-}
-
-function Get-SessionRecords {
-    $records = @()
-
-    try {
-        $lines = quser 2>$null
-        if (-not $lines) {
-            return @()
-        }
-
-        foreach ($line in ($lines | Select-Object -Skip 1)) {
-            $clean = ($line -replace '^\s*>?', '').Trim()
-            if (-not $clean) {
-                continue
-            }
-
-            $parts = $clean -split '\s+'
-            if ($parts.Count -lt 4) {
-                continue
-            }
-
-            $sessionName = ''
-            $sessionIdIndex = 2
-            if ($parts[1] -match '^\d+$') {
-                $sessionIdIndex = 1
-            }
-            else {
-                $sessionName = $parts[1]
-            }
-
-            $sessionId = 0
-            if ($parts[$sessionIdIndex] -match '^\d+$') {
-                $sessionId = [int]$parts[$sessionIdIndex]
-            }
-
-            $records += [pscustomobject]@{
-                username    = $parts[0]
-                sessionName = $sessionName
-                sessionId   = $sessionId
-                state       = $parts[$sessionIdIndex + 1]
-            }
-        }
-    }
-    catch {
-    }
-
-    return $records
-}
-
-function Test-SessionIsActive {
-    param([AllowNull()][string]$State)
-    if ([string]::IsNullOrWhiteSpace($State)) { return $false }
-    $s = $State.Trim().ToLowerInvariant()
-    return ($s -eq 'active') -or ($s -like 'актив*')
-}
-
-$cfg = Get-Config -Path $ConfigPath
-$hostValue = if ($Hostname) { $Hostname } else { [string]$env:COMPUTERNAME }
-$apiBase = '{0}://{1}:{2}/api/0' -f [string]$cfg.server.scheme, [string]$cfg.server.host, [string]$cfg.server.port
-$bucketId = 'aw-worktime-sessions_' + $hostValue
-$pulse = 120
-$sleepSec = if ($PollSeconds -gt 0) {
-    $PollSeconds
-}
-elseif ($cfg.collector -and $cfg.collector.pollSeconds) {
-    [int]$cfg.collector.pollSeconds
-}
-else {
-    30
-}
-
-Ensure-Bucket -ApiBase $apiBase -BucketId $bucketId -HostnameValue $hostValue
-
-while ($true) {
-    $now = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffZ')
-    $records = Get-SessionRecords
-    if (-not $records -or $records.Count -eq 0) {
-        $records = @([pscustomobject]@{
-            username    = $env:USERNAME
-            sessionName = ''
-            sessionId   = (Get-Process -Id $PID).SessionId
-            state       = 'Unknown'
-        })
-    }
-
-    foreach ($rec in $records) {
-        $payload = @{
-            timestamp = $now
-            duration  = 0
-            data      = @{
-                username    = [string]$rec.username
-                userId      = "$($env:USERDOMAIN)\$($rec.username)"
-                sessionId   = [int]$rec.sessionId
-                sessionName = [string]$rec.sessionName
-                state       = [string]$rec.state
-                active      = (Test-SessionIsActive -State ([string]$rec.state))
-                hostname    = $hostValue
-                source      = 'worktime-session-collector'
-            }
-        } | ConvertTo-Json -Depth 6 -Compress
-
-        try {
-            Invoke-AwJsonPost -Uri "$apiBase/buckets/$bucketId/heartbeat?pulsetime=$pulse" -Json $payload
-        }
-        catch {
-        }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}
-; }
-    }
-
-    Start-Sleep -Seconds $sleepSec
-}