@happier-dev/stack 0.2.1-preview.1775586714.26562 → 0.2.12-preview.1

package/node_modules/@happier-dev/protocol/dist/backendSurface/declarationV1.d.ts

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+export declare const AttachSurfaceStaticMetadataV1Schema: z.ZodObject<{
+    attachStrategy: z.ZodEnum<{
+        provider_attach: "provider_attach";
+        remote_display: "remote_display";
+        terminal_host: "terminal_host";
+    }>;
+    topology: z.ZodEnum<{
+        exclusive: "exclusive";
+        shared: "shared";
+    }>;
+    locality: z.ZodOptional<z.ZodEnum<{
+        network_reachable: "network_reachable";
+        same_machine: "same_machine";
+        session_machine: "session_machine";
+    }>>;
+    maxClients: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    requiresLocalAttachmentInfo: z.ZodOptional<z.ZodBoolean>;
+    liveProbe: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        optional: "optional";
+        required: "required";
+    }>>;
+}, z.core.$strict>;
+export type AttachSurfaceStaticMetadataV1 = z.infer<typeof AttachSurfaceStaticMetadataV1Schema>;
+export declare const BackendSurfaceDeclarationV1Schema: z.ZodObject<{
+    attach: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        attachStrategy: z.ZodEnum<{
+            provider_attach: "provider_attach";
+            remote_display: "remote_display";
+            terminal_host: "terminal_host";
+        }>;
+        topology: z.ZodEnum<{
+            exclusive: "exclusive";
+            shared: "shared";
+        }>;
+        locality: z.ZodOptional<z.ZodEnum<{
+            network_reachable: "network_reachable";
+            same_machine: "same_machine";
+            session_machine: "session_machine";
+        }>>;
+        maxClients: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        requiresLocalAttachmentInfo: z.ZodOptional<z.ZodBoolean>;
+        liveProbe: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            optional: "optional";
+            required: "required";
+        }>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type BackendSurfaceDeclarationV1 = z.infer<typeof BackendSurfaceDeclarationV1Schema>;
+//# sourceMappingURL=declarationV1.d.ts.map

package/node_modules/@happier-dev/protocol/dist/backendSurface/declarationV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declarationV1.d.ts","sourceRoot":"","sources":["../../src/backendSurface/declarationV1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;kBAOrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;kBAEnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/node_modules/@happier-dev/protocol/dist/backendSurface/declarationV1.js

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+export const AttachSurfaceStaticMetadataV1Schema = z.object({
+    attachStrategy: z.enum(['terminal_host', 'provider_attach', 'remote_display']),
+    topology: z.enum(['exclusive', 'shared']),
+    locality: z.enum(['same_machine', 'session_machine', 'network_reachable']).optional(),
+    maxClients: z.number().int().positive().nullable().optional(),
+    requiresLocalAttachmentInfo: z.boolean().optional(),
+    liveProbe: z.enum(['none', 'optional', 'required']).optional(),
+}).strict();
+export const BackendSurfaceDeclarationV1Schema = z.object({
+    attach: AttachSurfaceStaticMetadataV1Schema.nullable().optional(),
+}).strict();
+//# sourceMappingURL=declarationV1.js.map

package/node_modules/@happier-dev/protocol/dist/backendSurface/declarationV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declarationV1.js","sourceRoot":"","sources":["../../src/backendSurface/declarationV1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,mCAAmC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/node_modules/@happier-dev/protocol/dist/bugReports/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/bugReports/redaction.ts"],"names":[],"mappings":"AAEA,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWlE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnF"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/bugReports/redaction.ts"],"names":[],"mappings":"AA+ZA,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmElE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnF"}

package/node_modules/@happier-dev/protocol/dist/bugReports/redaction.js

@@ -1,15 +1,411 @@
 import { trimUtf8TextToMaxBytes } from './utf8.js';
+/**
+ * # The invariant
+ *
+ * **This scrubber never emits `[REDACTED]` while any part of the credential it matched survives on
+ * the same line.**
+ *
+ * A marker beside a live credential is worse than no marker at all: it defeats grep, it defeats
+ * audit, and it makes every marker-presence gate pass on a leak. Over-redaction is always preferred
+ * to a false marker.
+ *
+ * Three separate leaks in this file were one defect: a rule decided "a credential starts here" and
+ * then delegated the *terminator* decision to a character class that knew nothing about quoting —
+ * `[^"'\r\n]+` stopped at a quote that was not a terminator, `\S+` stopped at a space inside a
+ * quoted passphrase. Patching the classes one shape at a time produced the next instance each time.
+ *
+ * So the terminator decision is no longer spelled per rule. It lives in the three scanners below —
+ * {@link scanHeaderValueEnd}, {@link scanShellWordEnd}, {@link scanQuotedFieldValueEnd} — which
+ * every value-consuming rule calls, and which are built so that the only ways to stop are ones that
+ * cannot leave credential material behind: a closing quote that is a real argument boundary, an
+ * unquoted separator, or end of line. `redaction.invariant.test.ts` generates the
+ * (introducer, secret, trailing context) compositions and asserts the invariant over all of them; it
+ * is the regression gate for the class, not for the shapes listed here.
+ */
+const REDACTED = '[REDACTED]';
+const QUOTE_CHARACTERS = '"\'`';
+/**
+ * Characters that genuinely end a shell word. `)`/`]`/`}`/`,` are deliberately absent: a value may
+ * contain them, and stopping there would leave the remainder of a credential in the text.
+ */
+const UNQUOTED_VALUE_TERMINATOR = /[\s;|&<>]/;
+/** What may follow a closing quote for that quote to read as a real argument boundary. */
+const ARGUMENT_BOUNDARY_AFTER_QUOTE = /[\s)\]},;|&<>]/;
+const IDENTIFIER_CHARACTER = /[A-Za-z0-9_.-]/;
+/**
+ * A credential key name is short — `AWS_SECRET_ACCESS_KEY` is 21 characters. Bounding the expansion
+ * keeps it linear (an unbroken identifier-ish run carrying many credential words would otherwise be
+ * rescanned end to end per occurrence) and is also the right answer: a 300-character run that
+ * happens to contain `token` is a payload, not a key name, so the occurrence is skipped rather than
+ * truncated to a fake key.
+ */
+const MAX_CREDENTIAL_KEY_LENGTH = 64;
+function isQuote(character) {
+    return character !== '' && QUOTE_CHARACTERS.includes(character);
+}
+function findLineEnd(text, from) {
+    for (let index = from; index < text.length; index += 1) {
+        const character = text.charAt(index);
+        if (character === '\n' || character === '\r')
+            return index;
+    }
+    return text.length;
+}
+function findLineStart(text, from) {
+    for (let index = from - 1; index >= 0; index -= 1) {
+        const character = text.charAt(index);
+        if (character === '\n' || character === '\r')
+            return index + 1;
+    }
+    return 0;
+}
+/**
+ * The quote a value sits inside, inferred by replaying the quoting state of its own line.
+ *
+ * This is what keeps `curl -H "authorization: bearer …" https://host` from swallowing the URL: the
+ * header value is inside a shell argument, so its closing `"` is a real terminator. The state is
+ * *inferred*, so it is trusted only within the line — an apostrophe in ordinary prose ("can't")
+ * would otherwise open a quote that never closes and blank the rest of a bug report.
+ */
+function enclosingQuoteAt(text, index) {
+    let open = null;
+    for (let cursor = findLineStart(text, index); cursor < index; cursor += 1) {
+        const character = text.charAt(cursor);
+        if (open !== null) {
+            if (character === open)
+                open = null;
+            continue;
+        }
+        if (isQuote(character))
+            open = character;
+    }
+    return open;
+}
+function skipBlanks(text, from) {
+    let index = from;
+    while (index < text.length && (text.charAt(index) === ' ' || text.charAt(index) === '\t'))
+        index += 1;
+    return index;
+}
+function isArgumentBoundary(text, index) {
+    if (index >= text.length)
+        return true;
+    return ARGUMENT_BOUNDARY_AFTER_QUOTE.test(text.charAt(index));
+}
+/**
+ * End of the quoted run that begins at `start` (exclusive of nothing — the closing quote is part of
+ * it), or `-1` when no closing quote on the way ever lands on an argument boundary.
+ *
+ * A closing quote glued to more material does not terminate anything: `"abc"def` is one shell token
+ * and `"Bearer abc"def"` is one credential, so stopping at the first quote is what printed the
+ * marker beside the surviving half. Escapes are honoured so a JSON `"a\"b"` closes where JSON says
+ * it does, and the scan crosses newlines because an observed opening quote means the value really
+ * does continue.
+ */
+function findQuotedRunEnd(text, start) {
+    const quote = text.charAt(start);
+    let cursor = start + 1;
+    while (cursor < text.length) {
+        const character = text.charAt(cursor);
+        if (character === '\\') {
+            cursor += 2;
+            continue;
+        }
+        if (character === quote && isArgumentBoundary(text, cursor + 1))
+            return cursor + 1;
+        cursor += 1;
+    }
+    return -1;
+}
+/** Index of the first closing quote of the run beginning at `start`, or `-1`. */
+function findFirstQuoteClose(text, start) {
+    const quote = text.charAt(start);
+    for (let cursor = start + 1; cursor < text.length; cursor += 1) {
+        const character = text.charAt(cursor);
+        if (character === '\\') {
+            cursor += 1;
+            continue;
+        }
+        if (character === quote)
+            return cursor;
+    }
+    return -1;
+}
+/**
+ * How far a HEADER value extends: to end of line, unless a quote gives a terminator that provably
+ * cannot leave part of the value behind.
+ *
+ * End of line is the default because a header value in a log line runs to the newline — that is
+ * what makes `Authorization: Bearer abc"tail"` fully redactable, where a `[^"'\r\n]+` class printed
+ * the marker and kept `"tail"`.
+ */
+function scanHeaderValueEnd(text, valueStart) {
+    const lineEnd = findLineEnd(text, valueStart);
+    if (valueStart >= lineEnd)
+        return valueStart;
+    if (isQuote(text.charAt(valueStart))) {
+        // Both quotes belong to the value and go with it — leaving the closing one behind produces an
+        // orphan quote that the next pass then reads as the opening of a new value.
+        const quotedEnd = findQuotedRunEnd(text, valueStart);
+        if (quotedEnd !== -1)
+            return quotedEnd;
+        // No closing quote ever lands on a boundary (a truncated log, or stray quotes after a properly
+        // closed value). The value still reaches at least the end of the line its first closing quote
+        // is on, which is what keeps a credential written across a newline from surviving the marker.
+        const firstClose = findFirstQuoteClose(text, valueStart);
+        return findLineEnd(text, firstClose === -1 ? valueStart : firstClose);
+    }
+    // An enclosing quote belongs to the argument around the value, not to the value, so it stays.
+    const enclosing = enclosingQuoteAt(text, valueStart);
+    if (enclosing !== null) {
+        const close = text.indexOf(enclosing, valueStart);
+        if (close !== -1 && close < lineEnd && isArgumentBoundary(text, close + 1))
+            return close;
+    }
+    return lineEnd;
+}
+/**
+ * How far a SHELL WORD value extends: to the first unquoted separator, with quoted sections carried
+ * through whitespace — and through newlines — to their closing quote.
+ *
+ * `--password "correct horse battery staple"` is one value, `--password "a"b` is one value, and
+ * `--password "first\nsecond"` is one value. An opening quote with no closing quote anywhere is a
+ * truncated log rather than a multi-line argument, so it stops at end of line instead of eating the
+ * remainder of the text.
+ */
+function scanShellWordEnd(text, valueStart) {
+    let cursor = valueStart;
+    while (cursor < text.length) {
+        const character = text.charAt(cursor);
+        if (isQuote(character)) {
+            const close = text.indexOf(character, cursor + 1);
+            if (close === -1)
+                return findLineEnd(text, cursor);
+            cursor = close + 1;
+            continue;
+        }
+        if (UNQUOTED_VALUE_TERMINATOR.test(character))
+            return cursor;
+        cursor += 1;
+    }
+    return text.length;
+}
+/**
+ * Does the scanned span carry anything a marker could be lying about? An empty header, a
+ * whitespace-only one and `""` all reach the rules; printing `[REDACTED]` for them is the same lie
+ * in the other direction and trains readers to distrust the marker.
+ */
+function carriesCredentialMaterial(value) {
+    if (!/[^\s"'`]/.test(value))
+        return false;
+    // Already redacted: the marker replaced the credential and whatever follows it was never part of
+    // the value. Re-running a rule here would keep eating the rest of the line on every pass, so the
+    // scrubber would not be a fixed point — and a scrubber applied twice must not destroy more.
+    return !/^\[REDACTED\](?:[\s"'`)\]},;|&<>]|$)/.test(value);
+}
+function unquote(value) {
+    const first = value.charAt(0);
+    if (!isQuote(first))
+        return value;
+    const end = value.endsWith(first) && value.length > 1 ? value.length - 1 : value.length;
+    return value.slice(1, end);
+}
+const NAMED_TOKEN_PREFIX_PATTERN = /^(?:gh[pousr]_|github_pat_|glpat-|xox[baprse]-|sk-|AKIA|ASIA|A3T)/;
+/**
+ * Is this run a credential rather than an English word? Used only where the *key* is ambiguous
+ * about whether a value follows — a URL username, and a compound key separated from its value by a
+ * space — so a false negative costs a missed redaction on those two shapes and a false positive
+ * costs a blanked word. Requiring a non-letter is what keeps ordinary prose ("expired",
+ * "authentication") out while admitting real tokens, which always carry digits or separators.
+ */
+function looksLikeOpaqueCredential(value) {
+    if (NAMED_TOKEN_PREFIX_PATTERN.test(value))
+        return true;
+    return value.length >= 12 && /[^A-Za-z]/.test(value);
+}
+/**
+ * Replace the value that follows each match of `keyPattern`, where the match ends exactly where the
+ * value begins. Returning `null` from `buildReplacement` leaves the occurrence untouched — a rule
+ * that declines never emits a marker.
+ */
+function redactValuesAfterKey(input, keyPattern, scanValueEnd, buildReplacement) {
+    const pattern = new RegExp(keyPattern.source, keyPattern.flags.includes('g') ? keyPattern.flags : `${keyPattern.flags}g`);
+    let output = '';
+    let cursor = 0;
+    let match = pattern.exec(input);
+    while (match !== null) {
+        const valueStart = match.index + match[0].length;
+        const valueEnd = scanValueEnd(input, valueStart);
+        const value = input.slice(valueStart, valueEnd);
+        const replacement = carriesCredentialMaterial(value) ? buildReplacement(match, value) : null;
+        if (replacement === null) {
+            pattern.lastIndex = Math.max(match.index + 1, valueStart);
+        }
+        else if (match.index >= cursor) {
+            output += input.slice(cursor, match.index) + replacement;
+            cursor = valueEnd;
+            pattern.lastIndex = valueEnd;
+        }
+        else {
+            pattern.lastIndex = Math.max(match.index + 1, valueStart);
+        }
+        match = pattern.exec(input);
+    }
+    return output + input.slice(cursor);
+}
+// `authorization` belongs here as well as in the header rule below: serialized request headers are
+// a real artifact shape (`serializeAxiosErrorForLog`), and `"Authorization": "Bearer …"` can never
+// reach the header rule because the quote between the key and the colon breaks `authorization\s*:`.
+// The key alternation is the compound form so that `"AWS_SECRET_ACCESS_KEY": "…"` is covered too.
+/**
+ * A folded header or wrapped config value: one line break followed by indentation, which is the
+ * only shape RFC 7230 obs-fold and every log serializer that wraps a long header produce. Written
+ * here rather than as a bare `\s*` because `\s*` also swallows an UNindented next line, so
+ * `Authorization:` at the end of a paragraph would redact the sentence after it.
+ */
+const OPTIONAL_VALUE_FOLD = String.raw `(?:\r?\n[ \t]+)?`;
+const QUOTED_SECRET_FIELD_PATTERN = new RegExp(String.raw `(["'])([A-Za-z0-9_.-]*(?:client[_-]?secret|secret|password|passwd|access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|credentials?)[A-Za-z0-9_.-]*|authorization|jwt|session(?:id)?)\1[ \t]*:[ \t]*${OPTIONAL_VALUE_FOLD}[ \t]*`, 'gi');
+/**
+ * A quoted field value, ending at the closing quote that is a real boundary. `-1` from the run
+ * scanner means the quoting never resolves (a truncated artifact), and the rule then declines
+ * rather than guessing: declining leaks nothing new, while guessing prints a marker.
+ */
+function scanQuotedFieldValueEnd(text, valueStart) {
+    if (!isQuote(text.charAt(valueStart)))
+        return valueStart;
+    const quotedEnd = findQuotedRunEnd(text, valueStart);
+    return quotedEnd === -1 ? valueStart : quotedEnd;
+}
+// `[:=]` rather than `:` alone: PowerShell writes headers as `@{Authorization="Bearer …"}`, and
+// Windows is a first-class platform here. The scheme is consumed by the key rather than left to the
+// value so that `Bearer "<credential>"` starts the value AT the quote, which is what lets the
+// scanner follow the quote instead of stopping at the first newline inside it.
+const AUTHORIZATION_HEADER_PATTERN = new RegExp(String.raw `\bauthorization[ \t]*[:=][ \t]*${OPTIONAL_VALUE_FOLD}[ \t]*(bearer[ \t]+)?`, 'gi');
+const COOKIE_HEADER_PATTERN = new RegExp(String.raw `\b(cookie|set-cookie)[ \t]*[:=][ \t]*${OPTIONAL_VALUE_FOLD}[ \t]*`, 'gi');
+const API_KEY_HEADER_PATTERN = new RegExp(String.raw `\bx-api-key[ \t]*[:=][ \t]*${OPTIONAL_VALUE_FOLD}[ \t]*`, 'gi');
+const BEARER_SCHEME_PATTERN = /^["'`]?[ \t]*bearer\b/i;
+// `--token x` is the same secret as `--token=x` in the shape a shell actually uses. The flag names
+// are the unambiguous ones only — a bare `--key` is as often a sort key as a credential — and
+// `(?!-)` keeps the rule from swallowing the next flag when a value was omitted.
+const CREDENTIAL_FLAG_PATTERN = /(^|[\s"'`])(-{1,2}[A-Za-z0-9-]*(?:token|password|passwd|secret|api[-_]?key|credentials?)[A-Za-z0-9-]*)[ \t]+(?!-)/gi;
+/**
+ * The credential words that make a key name a credential key. Matched on its own and then expanded
+ * over the surrounding identifier characters, rather than written as
+ * `[A-Za-z0-9_.-]*(?:secret|…)[A-Za-z0-9_.-]*`, because that shape backtracks quadratically across
+ * the long opaque runs a bug report is full of.
+ */
+const CREDENTIAL_KEYWORD_PATTERN = /secrets?|passwords?|passwd|tokens?|api[_-]?keys?|apikeys?|credentials?|jwt|session(?:id)?/gi;
+/**
+ * Keywords too generic to carry a compound key name. `session` as a word is a credential-ish key;
+ * `session_started_at` is not, and widening it would blank ordinary diagnostics.
+ */
+const EXACT_ONLY_CREDENTIAL_KEYWORDS = new Set(['jwt', 'session', 'sessionid']);
+function resolveCredentialAssignment(input, keywordStart, keyword) {
+    const leftLimit = Math.max(0, keywordStart - MAX_CREDENTIAL_KEY_LENGTH);
+    const rightLimit = Math.min(input.length, keywordStart + keyword.length + MAX_CREDENTIAL_KEY_LENGTH);
+    let start = keywordStart;
+    while (start > leftLimit && IDENTIFIER_CHARACTER.test(input.charAt(start - 1)))
+        start -= 1;
+    let end = keywordStart + keyword.length;
+    while (end < rightLimit && IDENTIFIER_CHARACTER.test(input.charAt(end)))
+        end += 1;
+    // The identifier ran into the length bound: this is a payload that happens to contain the word,
+    // not a key name.
+    if (start > 0 && IDENTIFIER_CHARACTER.test(input.charAt(start - 1)))
+        return null;
+    if (end < input.length && IDENTIFIER_CHARACTER.test(input.charAt(end)))
+        return null;
+    const identifier = input.slice(start, end);
+    const isBareKeyword = identifier.toLowerCase() === keyword.toLowerCase();
+    if (EXACT_ONLY_CREDENTIAL_KEYWORDS.has(keyword.toLowerCase()) && !isBareKeyword)
+        return null;
+    let scan = skipBlanks(input, end);
+    const separator = input.charAt(scan);
+    let requireCredentialShape = false;
+    if (separator === ':' || separator === '=') {
+        scan = skipBlanks(input, scan + 1);
+        // A wrapped value (`password:` then an indented next line) was reachable through the `\s*` these
+        // rules used to spell, and dropping it would leak a credential the previous build removed.
+        const fold = /^\r?\n[ \t]+/.exec(input.slice(scan));
+        if (fold !== null)
+            scan = skipBlanks(input, scan + fold[0].length);
+    }
+    else if (scan > end && /[_.-]/.test(identifier) && !identifier.startsWith('-')) {
+        // A compound key separated from its value by a space (`aws configure set
+        // aws_secret_access_key …`). Flags are left to the flag rule, and the value must look like a
+        // credential rather than the next English word, or "access_token expired" would lose its verb.
+        requireCredentialShape = true;
+    }
+    else {
+        return null;
+    }
+    const valueEnd = scanShellWordEnd(input, scan);
+    const value = input.slice(scan, valueEnd);
+    // A compound key with an all-digit value is a count, not a credential: `max_tokens=1000`,
+    // `input_tokens: 512`. Every shipped credential shape carries letters, and this is the one place
+    // the compound widening would otherwise blank numbers that a bug report is read for. The bare
+    // keys (`password`, `token`, `secret`) are unambiguous and keep redacting whatever follows.
+    if (!isBareKeyword && /^["'`]?\d+["'`]?$/.test(value))
+        return null;
+    if (!carriesCredentialMaterial(value))
+        return null;
+    if (requireCredentialShape && !looksLikeOpaqueCredential(unquote(value)))
+        return null;
+    return { identifier, start, valueEnd };
+}
+function redactCredentialAssignments(input) {
+    const pattern = new RegExp(CREDENTIAL_KEYWORD_PATTERN.source, 'gi');
+    let output = '';
+    let cursor = 0;
+    for (let match = pattern.exec(input); match !== null; match = pattern.exec(input)) {
+        const resolved = resolveCredentialAssignment(input, match.index, match[0]);
+        if (resolved === null || resolved.start < cursor) {
+            pattern.lastIndex = match.index + Math.max(1, match[0].length);
+            continue;
+        }
+        output += input.slice(cursor, resolved.start) + `${resolved.identifier}: ${REDACTED}`;
+        cursor = resolved.valueEnd;
+        pattern.lastIndex = resolved.valueEnd;
+    }
+    return output + input.slice(cursor);
+}
+/**
+ * `git clone https://<user>:<token>@host` and `postgres://svc:<pw>@host`, plus the shape GitHub
+ * documents for fine-grained PATs — the token as the URL *username* with no password at all.
+ * Excluding `/` from the userinfo run keeps `https://host:8443/path` intact, and requiring a
+ * credential shape when there is no `:` keeps `ssh://git@host` and `https://alice@host` readable.
+ */
+// The scheme length is bounded because the alternative is quadratic: case-insensitively, `[a-z…]*`
+// starts a scan at EVERY character of a long opaque run and backtracks the whole way looking for
+// `://`, which cost ~1.8s on a single 60 kB run. Registered URI schemes are a few characters.
+const URL_USERINFO_PATTERN = /([a-z][a-z0-9+.-]{0,30}:\/\/)([^\s/@]*)@/gi;
 export function redactBugReportSensitiveText(input) {
-    return String(input ?? '')
-        .replace(/\bauthorization\s*:\s*bearer\s+[^\r\n]+/gi, 'authorization: bearer [REDACTED]')
-        .replace(/\b(cookie|set-cookie)\s*:\s*[^\r\n]+/gi, (_match, key) => `${key.toLowerCase()}: [REDACTED]`)
-        .replace(/\bx-api-key\s*:\s*[^\r\n]+/gi, 'x-api-key: [REDACTED]')
-        .replace(/\b(api[_-]?key|client[_-]?secret|access[_-]?token|refresh[_-]?token|id[_-]?token|jwt|session(?:id)?)\s*[:=]\s*['"]?\S+/gi, (_match, key) => `${key}: [REDACTED]`)
-        .replace(/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,}\.[A-Za-z0-9._-]{10,}\b/g, '[REDACTED]')
-        .replace(/\b(A3T[A-Z0-9]{16}|AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16})\b/g, '[REDACTED]')
-        .replace(/\bgh[pousr]_[A-Za-z0-9]{20,}\b/g, '[REDACTED]')
-        .replace(/\bsk-[A-Za-z0-9]{20,}\b/g, '[REDACTED]')
-        .replace(/\b(password|token|secret)\s*[:=]\s*\S+/gi, (_match, key) => `${key}: [REDACTED]`);
+    const text = String(input ?? '');
+    const withQuotedFields = redactValuesAfterKey(text, QUOTED_SECRET_FIELD_PATTERN, scanQuotedFieldValueEnd, (match, value) => {
+        const valueQuote = value.charAt(0);
+        return `${match[1]}${match[2]}${match[1]}: ${valueQuote}${REDACTED}${valueQuote}`;
+    });
+    const withAuthorization = redactValuesAfterKey(withQuotedFields, AUTHORIZATION_HEADER_PATTERN, scanHeaderValueEnd, (match, value) => `authorization: ${match[1] !== undefined || BEARER_SCHEME_PATTERN.test(value) ? 'bearer ' : ''}${REDACTED}`);
+    const withCookies = redactValuesAfterKey(withAuthorization, COOKIE_HEADER_PATTERN, scanHeaderValueEnd, (match) => `${match[1].toLowerCase()}: ${REDACTED}`);
+    const withApiKeyHeader = redactValuesAfterKey(withCookies, API_KEY_HEADER_PATTERN, scanHeaderValueEnd, () => `x-api-key: ${REDACTED}`);
+    const withUrlUserinfo = withApiKeyHeader.replace(URL_USERINFO_PATTERN, (match, scheme, userinfo) => userinfo.includes(':') || looksLikeOpaqueCredential(userinfo) ? `${scheme}${REDACTED}@` : match);
+    const withAssignments = redactCredentialAssignments(withUrlUserinfo);
+    const withFlagArguments = redactValuesAfterKey(withAssignments, CREDENTIAL_FLAG_PATTERN, scanShellWordEnd, (match) => `${match[1]}${match[2]} ${REDACTED}`);
+    return (withFlagArguments
+        .replace(/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,}\.[A-Za-z0-9._-]{10,}\b/g, REDACTED)
+        // AWS access key ids are 20 characters for every prefix; `A3T[A-Z0-9]{16}` is 19, so the
+        // trailing boundary landed inside a real key and the alternative could only ever match a
+        // string no real key has.
+        .replace(/\b(A3T[A-Z0-9]{17}|AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16})\b/g, REDACTED)
+        .replace(/\bgh[pousr]_[A-Za-z0-9]{20,}\b/g, REDACTED)
+        // `gh[pousr]_` cannot match `github_pat_` — `gh` is followed by `i`, and the body carries `_`.
+        // Fine-grained PATs are what GitHub issues by default.
+        .replace(/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, REDACTED)
+        .replace(/\bglpat-[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g, REDACTED)
+        .replace(/\bxox[baprse]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g, REDACTED)
+        // Separators are part of the shipped key bodies (`sk-ant-api03-…`, `sk-proj_…`); a body class
+        // of `[A-Za-z0-9]` alone stops at the first one and leaves the key in the text.
+        .replace(/\bsk-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g, REDACTED));
 }
 export function trimBugReportTextToMaxBytes(input, maxBytes) {
     return trimUtf8TextToMaxBytes(input, maxBytes);

package/node_modules/@happier-dev/protocol/dist/bugReports/redaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/bugReports/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEnD,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,2CAA2C,EAAE,kCAAkC,CAAC;SACxF,OAAO,CAAC,wCAAwC,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC;SAC9G,OAAO,CAAC,8BAA8B,EAAE,uBAAuB,CAAC;SAChE,OAAO,CAAC,0HAA0H,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,cAAc,CAAC;SAClL,OAAO,CAAC,sEAAsE,EAAE,YAAY,CAAC;SAC7F,OAAO,CAAC,0DAA0D,EAAE,YAAY,CAAC;SACjF,OAAO,CAAC,iCAAiC,EAAE,YAAY,CAAC;SACxD,OAAO,CAAC,0BAA0B,EAAE,YAAY,CAAC;SACjD,OAAO,CAAC,0CAA0C,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa,EAAE,QAAgB;IACzE,OAAO,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/bugReports/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;;;GAGG;AACH,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAE9C,0FAA0F;AAC1F,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;AAEvD,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,SAAS,OAAO,CAAC,SAAiB;IAChC,OAAO,SAAS,KAAK,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,KAAK,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,IAAI,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,SAAS,KAAK,IAAI;gBAAE,IAAI,GAAG,IAAI,CAAC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,CAAC;YAAE,IAAI,GAAG,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IACvB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,KAAK,IAAI,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,KAAK,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,UAAkB;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,IAAI,OAAO;QAAE,OAAO,UAAU,CAAC;IAE7C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACrC,8FAA8F;QAC9F,4EAA4E;QAC5E,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,+FAA+F;QAC/F,8FAA8F;QAC9F,8FAA8F;QAC9F,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO,WAAW,CAAC,IAAI,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,8FAA8F;IAC9F,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,UAAkB;IACxD,IAAI,MAAM,GAAG,UAAU,CAAC;IACxB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC;QAC7D,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,KAAa;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,OAAO,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IACxF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,0BAA0B,GAAG,mEAAmE,CAAC;AAEvG;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,KAAa;IAC9C,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAID;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,KAAa,EACb,UAAkB,EAClB,YAA0B,EAC1B,gBAA0E;IAE1E,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1H,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YACzD,MAAM,GAAG,QAAQ,CAAC;YAClB,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,kGAAkG;AAClG;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA,kBAAkB,CAAC;AAEzD,MAAM,2BAA2B,GAAG,IAAI,MAAM,CAC5C,MAAM,CAAC,GAAG,CAAA,2NAA2N,mBAAmB,QAAQ,EAChQ,IAAI,CACL,CAAC;AAEF;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAY,EAAE,UAAkB;IAC/D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,gGAAgG;AAChG,oGAAoG;AACpG,8FAA8F;AAC9F,+EAA+E;AAC/E,MAAM,4BAA4B,GAAG,IAAI,MAAM,CAC7C,MAAM,CAAC,GAAG,CAAA,kCAAkC,mBAAmB,uBAAuB,EACtF,IAAI,CACL,CAAC;AACF,MAAM,qBAAqB,GAAG,IAAI,MAAM,CACtC,MAAM,CAAC,GAAG,CAAA,wCAAwC,mBAAmB,QAAQ,EAC7E,IAAI,CACL,CAAC;AACF,MAAM,sBAAsB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,8BAA8B,mBAAmB,QAAQ,EAAE,IAAI,CAAC,CAAC;AACrH,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAEvD,mGAAmG;AACnG,8FAA8F;AAC9F,iFAAiF;AACjF,MAAM,uBAAuB,GAC3B,qHAAqH,CAAC;AAExH;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,6FAA6F,CAAC;AAEjI;;;GAGG;AACH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAYhF,SAAS,2BAA2B,CAAC,KAAa,EAAE,YAAoB,EAAE,OAAe;IACvF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,yBAAyB,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,yBAAyB,CAAC,CAAC;IACrG,IAAI,KAAK,GAAG,YAAY,CAAC;IACzB,OAAO,KAAK,GAAG,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC3F,IAAI,GAAG,GAAG,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IACxC,OAAO,GAAG,GAAG,UAAU,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IAClF,gGAAgG;IAChG,kBAAkB;IAClB,IAAI,KAAK,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpF,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;IACzE,IAAI,8BAA8B,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAE7F,IAAI,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QAC3C,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACnC,iGAAiG;QACjG,2FAA2F;QAC3F,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;SAAM,IAAI,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,yEAAyE;QACzE,6FAA6F;QAC7F,+FAA+F;QAC/F,sBAAsB,GAAG,IAAI,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,0FAA0F;IAC1F,iGAAiG;IACjG,8FAA8F;IAC9F,4FAA4F;IAC5F,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,sBAAsB,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACtF,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC3B,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,mGAAmG;AACnG,iGAAiG;AACjG,8FAA8F;AAC9F,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEjC,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,IAAI,EACJ,2BAA2B,EAC3B,uBAAuB,EACvB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACf,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,QAAQ,GAAG,UAAU,EAAE,CAAC;IACpF,CAAC,CACF,CAAC;IAEF,MAAM,iBAAiB,GAAG,oBAAoB,CAC5C,gBAAgB,EAChB,4BAA4B,EAC5B,kBAAkB,EAClB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,kBAAkB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAC9G,CAAC;IAEF,MAAM,WAAW,GAAG,oBAAoB,CACtC,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CACpD,CAAC;IAEF,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,WAAW,EACX,sBAAsB,EACtB,kBAAkB,EAClB,GAAG,EAAE,CAAC,cAAc,QAAQ,EAAE,CAC/B,CAAC;IAEF,MAAM,eAAe,GAAG,gBAAgB,CAAC,OAAO,CAC9C,oBAAoB,EACpB,CAAC,KAAa,EAAE,MAAc,EAAE,QAAgB,EAAE,EAAE,CAClD,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,CAClG,CAAC;IAEF,MAAM,eAAe,GAAG,2BAA2B,CAAC,eAAe,CAAC,CAAC;IAErE,MAAM,iBAAiB,GAAG,oBAAoB,CAC5C,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAChD,CAAC;IAEF,OAAO,CACL,iBAAiB;SACd,OAAO,CAAC,sEAAsE,EAAE,QAAQ,CAAC;QAC1F,yFAAyF;QACzF,yFAAyF;QACzF,0BAA0B;SACzB,OAAO,CAAC,0DAA0D,EAAE,QAAQ,CAAC;SAC7E,OAAO,CAAC,iCAAiC,EAAE,QAAQ,CAAC;QACrD,+FAA+F;QAC/F,uDAAuD;SACtD,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC;SACtD,OAAO,CAAC,8CAA8C,EAAE,QAAQ,CAAC;SACjE,OAAO,CAAC,kDAAkD,EAAE,QAAQ,CAAC;QACtE,8FAA8F;QAC9F,gFAAgF;SAC/E,OAAO,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa,EAAE,QAAgB;IACzE,OAAO,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC"}

package/node_modules/@happier-dev/protocol/dist/changes.d.ts

@@ -1,33 +1,22 @@
 import { z } from 'zod';
 export declare const ChangeKindSchema: z.ZodEnum<{
     account: "account";
-    automation: "automation";
     artifact: "artifact";
+    automation: "automation";
     feed: "feed";
-    friends: "friends";
-    friend_request: "friend_request";
     friend_accepted: "friend_accepted";
+    friend_request: "friend_request";
+    friends: "friends";
     kv: "kv";
     machine: "machine";
+    pet: "pet";
     session: "session";
     share: "share";
 }>;
 export type ChangeKind = z.infer<typeof ChangeKindSchema>;
 export declare const ChangeEntrySchema: z.ZodObject<{
     cursor: z.ZodNumber;
-    kind: z.ZodEnum<{
-        account: "account";
-        automation: "automation";
-        artifact: "artifact";
-        feed: "feed";
-        friends: "friends";
-        friend_request: "friend_request";
-        friend_accepted: "friend_accepted";
-        kv: "kv";
-        machine: "machine";
-        session: "session";
-        share: "share";
-    }>;
+    kind: z.ZodString;
     entityId: z.ZodString;
     changedAt: z.ZodNumber;
     hint: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
@@ -36,19 +25,7 @@ export type ChangeEntry = z.infer<typeof ChangeEntrySchema>;
 export declare const ChangesResponseSchema: z.ZodObject<{
     changes: z.ZodArray<z.ZodObject<{
         cursor: z.ZodNumber;
-        kind: z.ZodEnum<{
-            account: "account";
-            automation: "automation";
-            artifact: "artifact";
-            feed: "feed";
-            friends: "friends";
-            friend_request: "friend_request";
-            friend_accepted: "friend_accepted";
-            kv: "kv";
-            machine: "machine";
-            session: "session";
-            share: "share";
-        }>;
+        kind: z.ZodString;
         entityId: z.ZodString;
         changedAt: z.ZodNumber;
         hint: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
@@ -56,6 +33,11 @@ export declare const ChangesResponseSchema: z.ZodObject<{
     nextCursor: z.ZodNumber;
 }, z.core.$strict>;
 export type ChangesResponse = z.infer<typeof ChangesResponseSchema>;
+export declare const CurrentCursorResponseSchema: z.ZodObject<{
+    cursor: z.ZodNumber;
+    changesFloor: z.ZodNumber;
+}, z.core.$strict>;
+export type CurrentCursorResponse = z.infer<typeof CurrentCursorResponseSchema>;
 export declare const CursorGoneErrorSchema: z.ZodObject<{
     error: z.ZodLiteral<"cursor-gone">;
     currentCursor: z.ZodNumber;

package/node_modules/@happier-dev/protocol/dist/changes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../src/changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAY3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;kBAMnB,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;kBAGvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB;;;kBAGvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../src/changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;EAa3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;kBAMnB,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;;;;;;kBAGvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,2BAA2B;;;kBAG7B,CAAC;AAEZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,qBAAqB;;;kBAGvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/node_modules/@happier-dev/protocol/dist/changes.js

@@ -9,12 +9,13 @@ export const ChangeKindSchema = z.enum([
     'friend_accepted',
     'kv',
     'machine',
+    'pet',
     'session',
     'share',
 ]);
 export const ChangeEntrySchema = z.object({
     cursor: z.number().int().min(0),
-    kind: ChangeKindSchema,
+    kind: z.string().trim().min(1),
     entityId: z.string(),
     changedAt: z.number().int().min(0),
     hint: z.unknown().nullable().optional(),
@@ -23,6 +24,10 @@ export const ChangesResponseSchema = z.object({
     changes: z.array(ChangeEntrySchema),
     nextCursor: z.number().int().min(0),
 }).strict();
+export const CurrentCursorResponseSchema = z.object({
+    cursor: z.number().int().min(0),
+    changesFloor: z.number().int().min(0),
+}).strict();
 export const CursorGoneErrorSchema = z.object({
     error: z.literal('cursor-gone'),
     currentCursor: z.number().int().min(0),

package/node_modules/@happier-dev/protocol/dist/changes.js.map

@@ -1 +1 @@
-{"version":3,"file":"changes.js","sourceRoot":"","sources":["../src/changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,SAAS;IACT,YAAY;IACZ,UAAU;IACV,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,iBAAiB;IACjB,IAAI;IACJ,SAAS;IACT,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC"}
+{"version":3,"file":"changes.js","sourceRoot":"","sources":["../src/changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,SAAS;IACT,YAAY;IACZ,UAAU;IACV,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,iBAAiB;IACjB,IAAI;IACJ,SAAS;IACT,KAAK;IACL,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC"}