@glubean/mcp 0.8.1 → 0.9.0

package/dist/cloud.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Glubean Cloud client for the MCP open* tools — `/v1/*` ingest contract
+ * (GLU-77).
+ *
+ * The legacy Open Platform (`POST /open/v1/runs` — server-side bundle
+ * execution) was retired with the old stack. The new platform API exposes an
+ * INGEST model instead: tests execute locally, and the results are POSTed to
+ * `POST {apiUrl}/v1/projects/{projectId}/targets/{targetId}/runs` with a
+ * Bearer token — the same contract `glubean run --upload` uses.
+ *
+ * Credential resolution mirrors the CLI (packages/cli/src/lib/auth.ts) —
+ * keep the precedence in sync:
+ *   1. explicit tool argument
+ *   2. process env (GLUBEAN_TOKEN / GLUBEAN_PROJECT_ID / GLUBEAN_TARGET_ID /
+ *      GLUBEAN_API_URL)
+ *   3. project `.env` + `.env.secrets` vars
+ *   4. `~/.glubean/credentials.json` (written by `glubean login`)
+ *
+ * NOT a direct import of `@glubean/cli`: that package exposes only its bin
+ * entry (`exports: { ".": dist/main.js }` — importing it executes the CLI
+ * program), so the small resolution/upload surface is mirrored here.
+ */
+import type { GlobalRules } from "@glubean/redaction";
+/** Mirror of packages/cli/src/lib/constants.ts `DEFAULT_API_URL` (the
+ *  platform/ingest API, `/v1/*`). */
+export declare const DEFAULT_API_URL = "https://api.glubean.com";
+export interface CloudAuthArgs {
+    apiUrl?: string;
+    token?: string;
+    projectId?: string;
+    targetId?: string;
+}
+export interface CloudAuthSources {
+    /** Merged vars from `.env` + `.env.secrets` (secrets win on collision). */
+    envFileVars?: Record<string, string>;
+}
+export interface ResolvedCloudAuth {
+    apiUrl: string;
+    token?: string;
+    projectId?: string;
+    targetId?: string;
+}
+/**
+ * Resolve Cloud credentials with the CLI's precedence: explicit argument >
+ * process env > .env/.env.secrets vars > ~/.glubean/credentials.json.
+ * (`||` not `??` — an empty-string env var is treated as absent, matching
+ * the CLI's resolveToken.)
+ *
+ * Two CLI sources are intentionally NOT mirrored (codex GLU-77 R1):
+ * - package.json `glubean.cloud` config — dead in the CLI too: the config
+ *   consolidation (docs/06 P2) stopped reading the legacy package.json
+ *   `glubean` shape, so `glubeanConfig.cloud` is always the built-in default
+ *   (undefined) on the upload path.
+ * - per-profile `upload.tokenEnv` — profiles are a `glubean run` concept; the
+ *   MCP server has no profile context to resolve one from.
+ */
+export declare function resolveCloudAuth(args: CloudAuthArgs, sources?: CloudAuthSources): Promise<ResolvedCloudAuth>;
+/** Human-actionable message for a missing credential piece. */
+export declare const MISSING_AUTH_MESSAGES: {
+    readonly token: string;
+    readonly projectId: string;
+    readonly targetId: string;
+};
+/**
+ * Resolve the project's DEFAULT target id when none is configured. Fast path
+ * (no network): a default project's default target id is deterministic.
+ * Fallback: list the project's targets and pick the `"default"` slug, or the
+ * single target when there is exactly one. Null → the caller asks the user
+ * for an explicit target.
+ */
+export declare function resolveDefaultTargetId(apiUrl: string, projectId: string, token: string): Promise<string | null>;
+export declare function runIngestUrl(apiUrl: string, projectId: string, targetId: string): string;
+export declare function runUrl(apiUrl: string, projectId: string, targetId: string, runId: string): string;
+export declare function runTestResultsUrl(apiUrl: string, projectId: string, targetId: string, runId: string): string;
+export declare function runTestEventsUrl(apiUrl: string, projectId: string, targetId: string, runId: string, testId: string): string;
+export declare function cloudFetchJson(url: string, init: RequestInit & {
+    token: string;
+    timeoutMs?: number;
+}): Promise<unknown>;
+/**
+ * Derive the run's environment label from the env file name the way the CLI
+ * does: `.env` → "default", `.env.staging` → "staging", `custom.env` →
+ * "custom". Keep in sync with the CLI's `envLabelFromEnvFile`.
+ */
+export declare function envLabelFromEnvFile(envFile?: string): string;
+export interface UploadRedaction {
+    globalRules: GlobalRules;
+    replacementFormat: "simple" | "labeled" | "partial";
+}
+/**
+ * Load the project's upload redaction rules — the built-in baseline
+ * (DEFAULT_GLOBAL_RULES + built-in sensitive keys, applied inside
+ * `redactValue`) plus any custom `sensitiveKeys` / `customPatterns` /
+ * `replacementFormat` from glubean.yaml `defaults.redaction`. Mirror of the
+ * CLI's `resolveRedactionConfig` merge semantics (additive on the baseline);
+ * without this, projects relying on custom rules would leak matching values
+ * through MCP uploads that the CLI would have scrubbed (codex GLU-77 R1).
+ * A missing or malformed glubean.yaml falls back to the baseline.
+ */
+export declare function loadUploadRedaction(projectRoot: string): Promise<UploadRedaction>;
+/** Structural view of the fields `buildRunIngestBody` needs from the MCP's
+ *  `LocalRunSnapshot` (index.ts) — kept structural to avoid an import cycle. */
+export interface SnapshotForUpload {
+    /** When the run FINISHED (the snapshot is taken after the run completes). */
+    createdAt: string;
+    /** When the run STARTED (recorded before execution). Optional for older
+     *  snapshot shapes; without it, durations fall back to summed test times. */
+    startedAt?: string;
+    /** Stable per-snapshot idempotency id — re-uploading the SAME snapshot
+     *  REPLACES the Cloud run (`(targetId, clientRunId)` dedupe) instead of
+     *  duplicating it. Generated once when the snapshot is taken. */
+    clientRunId?: string;
+    fileUrl: string;
+    projectRoot: string;
+    summary: {
+        total: number;
+        passed: number;
+        failed: number;
+        skipped: number;
+    };
+    results: Array<{
+        exportName: string;
+        id: string;
+        name?: string;
+        success: boolean;
+        skipped?: boolean;
+        durationMs: number;
+        assertions: Array<{
+            passed: boolean;
+            message: string;
+            actual?: unknown;
+            expected?: unknown;
+        }>;
+        logs: Array<{
+            message: string;
+            data?: unknown;
+        }>;
+        error?: {
+            message: string;
+            stack?: string;
+        };
+    }>;
+    filter?: string;
+}
+/**
+ * Build the `RunIngest` wire body (kind=test, schemaVersion=glubean.test.v1)
+ * from a local run snapshot.
+ *
+ * - The `result` blob is shaped like the CLI's payload (`tests[].events`) so
+ *   Cloud's per-test events drill-down (`extractTestEvents`) can read it.
+ * - Traces are intentionally NOT uploaded: the MCP's local trace view keeps
+ *   the `authorization` header for AI debugging (DEFAULT_MCP_TRACE_CONFIG) —
+ *   that must never leave the machine.
+ * - The blob is deep-redacted client-side before upload (assertion
+ *   actual/expected and log data can carry live secrets). The server does a
+ *   baseline pass too, but the client scrubs first — same policy as the CLI.
+ */
+export declare function buildRunIngestBody(snapshot: SnapshotForUpload, opts?: {
+    environment?: string;
+    redaction?: UploadRedaction;
+}): Record<string, unknown>;
+//# sourceMappingURL=cloud.d.ts.map

package/dist/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD;qCACqC;AACrC,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAIzD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CA6B5B;AAED,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB;;;;CAaxB,CAAC;AAOX;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;AAWD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,MAAM,CACpB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAgDD,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,OAAO,CAAC,CAiClB;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAS5D;AAID,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CACrD;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA4CvF;AAQD;gFACgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB;iFAC6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;qEAEiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,KAAK,CAAC;YAChB,MAAM,EAAE,OAAO,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,CAAC,EAAE,OAAO,CAAC;YACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;SACpB,CAAC,CAAC;QACH,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0FzB"}

package/dist/cloud.js

@@ -0,0 +1,375 @@
+/**
+ * Glubean Cloud client for the MCP open* tools — `/v1/*` ingest contract
+ * (GLU-77).
+ *
+ * The legacy Open Platform (`POST /open/v1/runs` — server-side bundle
+ * execution) was retired with the old stack. The new platform API exposes an
+ * INGEST model instead: tests execute locally, and the results are POSTed to
+ * `POST {apiUrl}/v1/projects/{projectId}/targets/{targetId}/runs` with a
+ * Bearer token — the same contract `glubean run --upload` uses.
+ *
+ * Credential resolution mirrors the CLI (packages/cli/src/lib/auth.ts) —
+ * keep the precedence in sync:
+ *   1. explicit tool argument
+ *   2. process env (GLUBEAN_TOKEN / GLUBEAN_PROJECT_ID / GLUBEAN_TARGET_ID /
+ *      GLUBEAN_API_URL)
+ *   3. project `.env` + `.env.secrets` vars
+ *   4. `~/.glubean/credentials.json` (written by `glubean login`)
+ *
+ * NOT a direct import of `@glubean/cli`: that package exposes only its bin
+ * entry (`exports: { ".": dist/main.js }` — importing it executes the CLI
+ * program), so the small resolution/upload surface is mirrored here.
+ */
+import { readFile } from "node:fs/promises";
+import { basename, extname, join, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { parse as parseYaml } from "yaml";
+import { DEFAULT_GLOBAL_RULES, redactValue } from "@glubean/redaction";
+import { MCP_PACKAGE_VERSION } from "./version.js";
+/** Mirror of packages/cli/src/lib/constants.ts `DEFAULT_API_URL` (the
+ *  platform/ingest API, `/v1/*`). */
+export const DEFAULT_API_URL = "https://api.glubean.com";
+async function readCredentialsFile() {
+    const home = process.env.HOME || process.env.USERPROFILE;
+    if (!home)
+        return null;
+    try {
+        const text = await readFile(join(home, ".glubean", "credentials.json"), "utf-8");
+        return JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve Cloud credentials with the CLI's precedence: explicit argument >
+ * process env > .env/.env.secrets vars > ~/.glubean/credentials.json.
+ * (`||` not `??` — an empty-string env var is treated as absent, matching
+ * the CLI's resolveToken.)
+ *
+ * Two CLI sources are intentionally NOT mirrored (codex GLU-77 R1):
+ * - package.json `glubean.cloud` config — dead in the CLI too: the config
+ *   consolidation (docs/06 P2) stopped reading the legacy package.json
+ *   `glubean` shape, so `glubeanConfig.cloud` is always the built-in default
+ *   (undefined) on the upload path.
+ * - per-profile `upload.tokenEnv` — profiles are a `glubean run` concept; the
+ *   MCP server has no profile context to resolve one from.
+ */
+export async function resolveCloudAuth(args, sources) {
+    const envFileVars = sources?.envFileVars ?? {};
+    const fromEnv = (name) => process.env[name] || envFileVars[name] || undefined;
+    // Only hit the credentials file when something is still unresolved.
+    let credsCache;
+    const creds = async () => {
+        if (credsCache === undefined)
+            credsCache = await readCredentialsFile();
+        return credsCache;
+    };
+    const token = args.token || fromEnv("GLUBEAN_TOKEN") || (await creds())?.token || undefined;
+    const projectId = args.projectId ||
+        fromEnv("GLUBEAN_PROJECT_ID") ||
+        (await creds())?.projectId ||
+        undefined;
+    // The credentials file has no target — the target is per-project config.
+    const targetId = args.targetId || fromEnv("GLUBEAN_TARGET_ID") || undefined;
+    const apiUrl = (args.apiUrl ||
+        fromEnv("GLUBEAN_API_URL") ||
+        (await creds())?.apiUrl ||
+        DEFAULT_API_URL).replace(/\/+$/, "");
+    return { apiUrl, token, projectId, targetId };
+}
+/** Human-actionable message for a missing credential piece. */
+export const MISSING_AUTH_MESSAGES = {
+    token: "No Glubean Cloud token configured. Pass `token`, set GLUBEAN_TOKEN " +
+        "(process env or .env.secrets in the project root), or run `glubean login` " +
+        "(writes ~/.glubean/credentials.json).",
+    projectId: "No Glubean Cloud project configured. Pass `projectId`, set " +
+        "GLUBEAN_PROJECT_ID (process env or .env in the project root), or run " +
+        "`glubean login`.",
+    targetId: "Could not resolve the target for this project. Pass `targetId` or set " +
+        "GLUBEAN_TARGET_ID — the project has no unambiguous default target, or " +
+        "the token lacks the targets:read scope needed to list targets.",
+};
+/** A DEFAULT project's id is `proj_default_<orgId>`; its auto-provisioned
+ *  default target is `tgt_default_<orgId>` (mirror of the CLI's
+ *  resolveDefaultTargetId — migration-stable id scheme). */
+const DEFAULT_PROJECT_PREFIX = "proj_default_";
+/**
+ * Resolve the project's DEFAULT target id when none is configured. Fast path
+ * (no network): a default project's default target id is deterministic.
+ * Fallback: list the project's targets and pick the `"default"` slug, or the
+ * single target when there is exactly one. Null → the caller asks the user
+ * for an explicit target.
+ */
+export async function resolveDefaultTargetId(apiUrl, projectId, token) {
+    if (projectId.startsWith(DEFAULT_PROJECT_PREFIX)) {
+        return `tgt_default_${projectId.slice(DEFAULT_PROJECT_PREFIX.length)}`;
+    }
+    try {
+        const resp = await fetch(`${apiUrl}/v1/projects/${encodeURIComponent(projectId)}/targets`, { headers: { Authorization: `Bearer ${token}` } });
+        if (!resp.ok)
+            return null;
+        const targets = (await resp.json());
+        if (!Array.isArray(targets))
+            return null;
+        const ids = targets.filter((t) => typeof t?.id === "string");
+        const def = ids.find((t) => t.slug === "default");
+        if (def)
+            return def.id;
+        return ids.length === 1 ? ids[0].id : null;
+    }
+    catch {
+        return null;
+    }
+}
+// ── /v1 endpoint URLs ────────────────────────────────────────────────────────
+function runsBase(apiUrl, projectId, targetId) {
+    return (`${apiUrl.replace(/\/+$/, "")}/v1/projects/${encodeURIComponent(projectId)}` +
+        `/targets/${encodeURIComponent(targetId)}/runs`);
+}
+export function runIngestUrl(apiUrl, projectId, targetId) {
+    return runsBase(apiUrl, projectId, targetId);
+}
+export function runUrl(apiUrl, projectId, targetId, runId) {
+    return `${runsBase(apiUrl, projectId, targetId)}/${encodeURIComponent(runId)}`;
+}
+export function runTestResultsUrl(apiUrl, projectId, targetId, runId) {
+    return `${runUrl(apiUrl, projectId, targetId, runId)}/test-results`;
+}
+export function runTestEventsUrl(apiUrl, projectId, targetId, runId, testId) {
+    return `${runUrl(apiUrl, projectId, targetId, runId)}/tests/${encodeURIComponent(testId)}/events`;
+}
+// ── Fetch with human-actionable error mapping ────────────────────────────────
+/**
+ * Scrub bearer-token-shaped strings from server error text before it reaches
+ * the MCP client — a misconfigured apiUrl / proxy can echo request headers
+ * (including `Authorization: Bearer glb_…`) back in the error body.
+ */
+function scrubTokens(text) {
+    return text
+        .replace(/glb_[A-Za-z0-9_-]{6,}/g, "glb_[redacted]")
+        .replace(/Bearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, "Bearer [redacted]");
+}
+function friendlyHttpError(status, body) {
+    const detail = scrubTokens(body.slice(0, 2000));
+    switch (status) {
+        case 401:
+            return (`Unauthorized (401): the Cloud rejected the token. Check GLUBEAN_TOKEN ` +
+                `(is it expired or for a different environment?) or run \`glubean login\`. ${detail}`);
+        case 403:
+            return (`Forbidden (403): the token lacks the required scope (runs:read / ` +
+                `runs:write) or its user lost project membership. ${detail}`);
+        case 404:
+            return (`Not found (404): check projectId / targetId / runId — or the apiUrl ` +
+                `points at the wrong service (the ingest API is the platform API, ` +
+                `default ${DEFAULT_API_URL}). ${detail}`);
+        case 413:
+            return `Payload too large (413): the run body exceeds the ingest cap. ${detail}`;
+        case 429:
+            return `Ingest quota exceeded (429): too many runs in the current window. ${detail}`;
+        default:
+            return `HTTP ${status}: ${detail}`;
+    }
+}
+/** Default request timeout — an MCP tool must not hang on a stalled network
+ *  call (mirrors the spirit of the CLI's RESULTS_TIMEOUT_MS, slightly wider
+ *  since ingest bodies can be larger than a status GET). */
+const CLOUD_FETCH_TIMEOUT_MS = 15_000;
+export async function cloudFetchJson(url, init) {
+    const { token, timeoutMs, ...fetchInit } = init;
+    const budget = timeoutMs ?? CLOUD_FETCH_TIMEOUT_MS;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), budget);
+    let res;
+    try {
+        res = await fetch(url, {
+            ...fetchInit,
+            signal: controller.signal,
+            headers: {
+                ...(fetchInit.headers ?? {}),
+                Authorization: `Bearer ${token}`,
+            },
+        });
+    }
+    catch (err) {
+        if (err instanceof DOMException && err.name === "AbortError") {
+            throw new Error(`Request to Glubean Cloud timed out after ${budget}ms — check the apiUrl and your network.`);
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const text = await res.text();
+    if (!res.ok)
+        throw new Error(friendlyHttpError(res.status, text));
+    if (!text)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+// ── Upload environment label (mirror of packages/cli/src/lib/upload.ts) ─────
+/**
+ * Derive the run's environment label from the env file name the way the CLI
+ * does: `.env` → "default", `.env.staging` → "staging", `custom.env` →
+ * "custom". Keep in sync with the CLI's `envLabelFromEnvFile`.
+ */
+export function envLabelFromEnvFile(envFile) {
+    const fileName = basename(envFile || ".env");
+    if (fileName === ".env")
+        return "default";
+    if (fileName.startsWith(".env.")) {
+        return fileName.slice(".env.".length) || "default";
+    }
+    const ext = extname(fileName);
+    const stem = ext ? basename(fileName, ext) : fileName;
+    return stem || "default";
+}
+/**
+ * Load the project's upload redaction rules — the built-in baseline
+ * (DEFAULT_GLOBAL_RULES + built-in sensitive keys, applied inside
+ * `redactValue`) plus any custom `sensitiveKeys` / `customPatterns` /
+ * `replacementFormat` from glubean.yaml `defaults.redaction`. Mirror of the
+ * CLI's `resolveRedactionConfig` merge semantics (additive on the baseline);
+ * without this, projects relying on custom rules would leak matching values
+ * through MCP uploads that the CLI would have scrubbed (codex GLU-77 R1).
+ * A missing or malformed glubean.yaml falls back to the baseline.
+ */
+export async function loadUploadRedaction(projectRoot) {
+    const rules = structuredClone(DEFAULT_GLOBAL_RULES);
+    let replacementFormat = "partial";
+    try {
+        const parsed = parseYaml(await readFile(resolve(projectRoot, "glubean.yaml"), "utf-8"));
+        const input = parsed?.defaults?.redaction;
+        if (input) {
+            if (Array.isArray(input.sensitiveKeys)) {
+                for (const key of input.sensitiveKeys) {
+                    if (typeof key === "string" && !rules.sensitiveKeys.includes(key)) {
+                        rules.sensitiveKeys.push(key);
+                    }
+                }
+            }
+            if (Array.isArray(input.customPatterns)) {
+                for (const pattern of input.customPatterns) {
+                    const p = pattern;
+                    if (p && typeof p.name === "string" && typeof p.regex === "string") {
+                        rules.customPatterns.push({ name: p.name, regex: p.regex });
+                    }
+                }
+            }
+            if (input.replacementFormat === "simple" ||
+                input.replacementFormat === "labeled" ||
+                input.replacementFormat === "partial") {
+                replacementFormat = input.replacementFormat;
+            }
+        }
+    }
+    catch {
+        // Missing/unreadable glubean.yaml → baseline rules.
+    }
+    return { globalRules: rules, replacementFormat };
+}
+/**
+ * Build the `RunIngest` wire body (kind=test, schemaVersion=glubean.test.v1)
+ * from a local run snapshot.
+ *
+ * - The `result` blob is shaped like the CLI's payload (`tests[].events`) so
+ *   Cloud's per-test events drill-down (`extractTestEvents`) can read it.
+ * - Traces are intentionally NOT uploaded: the MCP's local trace view keeps
+ *   the `authorization` header for AI debugging (DEFAULT_MCP_TRACE_CONFIG) —
+ *   that must never leave the machine.
+ * - The blob is deep-redacted client-side before upload (assertion
+ *   actual/expected and log data can carry live secrets). The server does a
+ *   baseline pass too, but the client scrubs first — same policy as the CLI.
+ */
+export function buildRunIngestBody(snapshot, opts) {
+    const summedMs = snapshot.results.reduce((acc, r) => acc + r.durationMs, 0);
+    const { total, passed, failed, skipped } = snapshot.summary;
+    // `createdAt` is the run's END (the snapshot is taken after the run). When
+    // the snapshot carries a real start time, duration is wall-clock; otherwise
+    // (older shape) fall back to summed per-test durations from the start.
+    const startedAt = snapshot.startedAt ?? snapshot.createdAt;
+    const durationMs = snapshot.startedAt
+        ? Math.max(0, Date.parse(snapshot.createdAt) - Date.parse(snapshot.startedAt))
+        : summedMs;
+    const completedAt = snapshot.startedAt
+        ? snapshot.createdAt
+        : new Date(Date.parse(startedAt) + summedMs).toISOString();
+    const tests = snapshot.results.map((r) => ({
+        testId: r.id,
+        testName: r.name ?? r.id,
+        success: r.success,
+        durationMs: r.durationMs,
+        events: [
+            ...r.assertions.map((a) => ({
+                type: "assertion",
+                passed: a.passed,
+                message: a.message,
+                ...(a.actual !== undefined ? { actual: a.actual } : {}),
+                ...(a.expected !== undefined ? { expected: a.expected } : {}),
+            })),
+            ...r.logs.map((l) => ({
+                type: "log",
+                message: l.message,
+                ...(l.data !== undefined ? { data: l.data } : {}),
+            })),
+            ...(r.error ? [{ type: "error", message: r.error.message }] : []),
+            {
+                type: "status",
+                status: r.skipped ? "skipped" : r.success ? "completed" : "failed",
+            },
+        ],
+    }));
+    const resultBlob = {
+        runAt: startedAt,
+        summary: { total, passed, failed, skipped, durationMs },
+        context: {
+            source: "@glubean/mcp",
+            mcpVersion: MCP_PACKAGE_VERSION,
+            fileUrl: snapshot.fileUrl,
+            ...(snapshot.filter ? { filter: snapshot.filter } : {}),
+        },
+        tests,
+    };
+    const redaction = opts?.redaction ?? {
+        globalRules: DEFAULT_GLOBAL_RULES,
+        replacementFormat: "partial",
+    };
+    const redactedResult = redactValue(resultBlob, {
+        globalRules: redaction.globalRules,
+        replacementFormat: redaction.replacementFormat,
+        maxDepth: 64,
+    });
+    // Per-test rows → server `test_result` (single-test history / flaky
+    // substrate). Clean skip → "skipped" (excluded from flaky denominators).
+    const testResults = snapshot.results.map((r) => ({
+        testId: r.id,
+        name: r.name ?? r.id,
+        status: r.skipped ? "skipped" : r.success ? "passed" : "failed",
+        durationMs: r.durationMs,
+    }));
+    return {
+        kind: "test",
+        schemaVersion: "glubean.test.v1",
+        // Stable idempotency id (P1) — re-uploading the same snapshot replaces
+        // the run server-side instead of duplicating it. The snapshot carries the
+        // id (generated once at snapshot time); randomUUID is only the fallback
+        // for older snapshot shapes.
+        clientRunId: snapshot.clientRunId ?? randomUUID(),
+        status: failed > 0 ? "failed" : "passed",
+        startedAt,
+        completedAt,
+        durationMs,
+        summary: { total, passed, failed, skipped, durationMs },
+        result: redactedResult,
+        ...(testResults.length > 0 ? { testResults } : {}),
+        trigger: "mcp",
+        runnerVersion: MCP_PACKAGE_VERSION,
+        ...(opts?.environment ? { environment: opts.environment } : {}),
+    };
+}
+//# sourceMappingURL=cloud.js.map

package/dist/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;qCACqC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AA6BzD,KAAK,UAAU,mBAAmB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAmB,EACnB,OAA0B;IAE1B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE,CACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAEtD,oEAAoE;IACpE,IAAI,UAA8C,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,IAAqC,EAAE;QACxD,IAAI,UAAU,KAAK,SAAS;YAAE,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC;IAChF,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,OAAO,CAAC,oBAAoB,CAAC;QAC7B,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,SAAS;QAC1B,SAAS,CAAC;IACZ,yEAAyE;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;IAC5E,MAAM,MAAM,GAAG,CACb,IAAI,CAAC,MAAM;QACX,OAAO,CAAC,iBAAiB,CAAC;QAC1B,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,MAAM;QACvB,eAAe,CAChB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EACH,qEAAqE;QACrE,4EAA4E;QAC5E,uCAAuC;IACzC,SAAS,EACP,6DAA6D;QAC7D,uEAAuE;QACvE,kBAAkB;IACpB,QAAQ,EACN,wEAAwE;QACxE,wEAAwE;QACxE,gEAAgE;CAC1D,CAAC;AAEX;;4DAE4D;AAC5D,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,SAAiB,EACjB,KAAa;IAEb,IAAI,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjD,OAAO,eAAe,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB,GAAG,MAAM,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAChE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CACxB,CAAC,CAAC,EAAuC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,CACtE,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAClD,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,QAAgB;IACnE,OAAO,CACL,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC5E,YAAY,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAAiB,EAAE,QAAgB;IAC9E,OAAO,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,MAAc,EACd,SAAiB,EACjB,QAAgB,EAChB,KAAa;IAEb,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,SAAiB,EACjB,QAAgB,EAChB,KAAa;IAEb,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,SAAiB,EACjB,QAAgB,EAChB,KAAa,EACb,MAAc;IAEd,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI;SACR,OAAO,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;SACnD,OAAO,CAAC,mCAAmC,EAAE,mBAAmB,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,CACL,wEAAwE;gBACxE,6EAA6E,MAAM,EAAE,CACtF,CAAC;QACJ,KAAK,GAAG;YACN,OAAO,CACL,mEAAmE;gBACnE,oDAAoD,MAAM,EAAE,CAC7D,CAAC;QACJ,KAAK,GAAG;YACN,OAAO,CACL,sEAAsE;gBACtE,mEAAmE;gBACnE,WAAW,eAAe,MAAM,MAAM,EAAE,CACzC,CAAC;QACJ,KAAK,GAAG;YACN,OAAO,iEAAiE,MAAM,EAAE,CAAC;QACnF,KAAK,GAAG;YACN,OAAO,qEAAqE,MAAM,EAAE,CAAC;QACvF;YACE,OAAO,QAAQ,MAAM,KAAK,MAAM,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;4DAE4D;AAC5D,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAAyD;IAEzD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,IAAI,sBAAsB,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,GAAG,SAAS;YACZ,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC5B,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,yCAAyC,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtD,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,KAAK,GAAgB,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,iBAAiB,GAAyC,SAAS,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CACtB,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CASvD,CAAC;QACT,MAAM,KAAK,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;oBAC3C,MAAM,CAAC,GAAG,OAAqD,CAAC;oBAChE,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACnE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IACE,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBACpC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACrC,KAAK,CAAC,iBAAiB,KAAK,SAAS,EACrC,CAAC;gBACD,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AACnD,CAAC;AA0CD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,IAA4D;IAE5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC5D,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS;QACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9E,CAAC,CAAC,QAAQ,CAAC;IACb,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS;QACpC,CAAC,CAAC,QAAQ,CAAC,SAAS;QACpB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;QACxB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE;YACN,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAC;YACH,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE;gBACE,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;aACnE;SACF;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG;QACjB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;QACvD,OAAO,EAAE;YACP,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,mBAAmB;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACD,KAAK;KACN,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI;QACnC,WAAW,EAAE,oBAAoB;QACjC,iBAAiB,EAAE,SAAkB;KACtC,CAAC;IACF,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,EAAE;QAC7C,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,QAAQ,EAAE,EAAE;KACb,CAA4B,CAAC;IAE9B,oEAAoE;IACpE,yEAAyE;IACzE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QAC/D,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,iBAAiB;QAChC,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,6BAA6B;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,UAAU,EAAE;QACjD,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACxC,SAAS;QACT,WAAW;QACX,UAAU;QACV,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;QACvD,MAAM,EAAE,cAAc;QACtB,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,mBAAmB;QAClC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -7,6 +7,23 @@ export declare function findProjectRoot(startDir: string): Promise<string>;
  * Convention: `.env` → `.env.secrets`, `.env.staging` → `.env.staging.secrets`.
  */
 export declare function deriveSecretsPath(envPath: string): string;
+/**
+ * Thrown by `resolveEnvPath` when the active env resolves to a sensitive
+ * (prod-like) name and no explicit `envFile` was given. Callers should let
+ * this propagate — the MCP SDK surfaces thrown errors as a tool error
+ * response, which is exactly the "loud failure instead of silent prod
+ * upload" behavior GLU-88 requires.
+ */
+export declare class SensitiveActiveEnvError extends Error {
+    readonly envName: string;
+    constructor(envName: string);
+}
+/**
+ * Resolve the env file path, checking `.glubean/active-env` when no explicit envFile is given.
+ * Throws `SensitiveActiveEnvError` instead of silently resolving a prod-like
+ * active-env (GLU-88) — explicit `envFile` always bypasses this check.
+ */
+export declare function resolveEnvPath(projectRoot: string, envFile?: string): Promise<string>;
 /**
  * Unified test metadata for MCP discovery.
  * Follows CLI's DiscoveredTestMeta pattern — contract cases carry
@@ -76,7 +93,14 @@ export interface LocalDebugEvent {
     };
 }
 export interface LocalRunSnapshot {
+    /** When the run finished (the snapshot is taken after completion). */
     createdAt: string;
+    /** When the run started (recorded before execution) — the honest
+     *  `startedAt` for the Cloud upload envelope. */
+    startedAt: string;
+    /** Stable idempotency id for Cloud upload — re-uploading the SAME snapshot
+     *  replaces the Cloud run instead of duplicating it. */
+    clientRunId: string;
     fileUrl: string;
     projectRoot: string;
     summary: {
@@ -89,6 +113,8 @@ export interface LocalRunSnapshot {
     includeLogs: boolean;
     includeTraces: boolean;
     filter?: string;
+    /** The envFile argument the run was executed with (env label provenance). */
+    envFile?: string;
 }
 export interface ConfigDiagnostics {
     projectRoot: string;
@@ -166,6 +192,14 @@ export declare function runLocalTestsFromFile(args: {
         failed: number;
         skipped: number;
     };
+    /**
+     * The RESOLVED env file path this run used (explicit envFile, else
+     * `.glubean/active-env`, else `.env`). Recorded on the snapshot so a later
+     * Cloud upload sources credentials + the environment label from the env
+     * the run ACTUALLY used — even if active-env changes in between (codex
+     * GLU-77 R3). Absent only on the version-skew early return (no run).
+     */
+    envPath?: string;
     error?: string;
     /** Runner-fallback or protocol warnings emitted by the executor. (Plan 1 AC6) */
     warnings?: string[];
@@ -188,7 +222,7 @@ export declare const MCP_TOOL_NAMES: {
     readonly openapi: "glubean_openapi";
     readonly diagnoseConfig: "glubean_diagnose_config";
     readonly getMetadata: "glubean_get_metadata";
-    readonly openTriggerRun: "glubean_open_trigger_run";
+    readonly openUploadRun: "glubean_open_upload_run";
     readonly openGetRun: "glubean_open_get_run";
     readonly openGetRunEvents: "glubean_open_get_run_events";
 };

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EAGL,KAAK,sBAAsB,IAAI,uBAAuB,EACvD,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExE,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAuPnC,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAavE;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAuHD;;;;GAIG;AACH,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAwBD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD,CAAC,CA4GD;AAiBD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,OAAO,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IAClF,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9C,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAaD,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,gBAAgB,GACzB,eAAe,EAAE,CAgDnB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EAAE,EACzB,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,eAAe,EAAE,CAUnB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,gBAAgB,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2D7B;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B,CAAC,CA0XD;AA4BD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;CAcjB,CAAC;AAuoBX;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,uBAAuB,EAAE,EACvC,KAAK,SAAsB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAoDD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAI1C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmCA,OAAO,EAGL,KAAK,sBAAsB,IAAI,uBAAuB,EACvD,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAexE,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAuPnC,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAavE;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AA6BD;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAU5C;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU3F;AA+FD;;;;GAIG;AACH,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAwBD,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD,CAAC,CA4GD;AAiBD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,OAAO,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB;qDACiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB;4DACwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IAClF,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9C,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAaD,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,gBAAgB,GACzB,eAAe,EAAE,CAgDnB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EAAE,EACzB,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,eAAe,EAAE,CAUnB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,gBAAgB,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2D7B;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B,CAAC,CA8XD;AAOD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;CAcjB,CAAC;AAi1BX;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,uBAAuB,EAAE,EACvC,KAAK,SAAsB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAoDD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAI1C"}