@infinitedusky/indusk-mcp 1.64.0 → 1.66.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (106) hide show
  1. package/admin/.next/BUILD_ID +1 -1
  2. package/admin/.next/build/chunks/[turbopack-node]_transforms_postcss_ts_0laknpb._.js +1 -1
  3. package/admin/.next/build/chunks/{node_modules__pnpm_0e-dfa2._.js → node_modules__pnpm_0w6x5el._.js} +99 -54
  4. package/admin/.next/build-manifest.json +3 -3
  5. package/admin/.next/fallback-build-manifest.json +3 -3
  6. package/admin/.next/next-server.js.nft.json +1 -1
  7. package/admin/.next/server/app/_global-error.html +1 -1
  8. package/admin/.next/server/app/_global-error.rsc +1 -1
  9. package/admin/.next/server/app/_global-error.segments/__PAGE__.segment.rsc +1 -1
  10. package/admin/.next/server/app/_global-error.segments/_full.segment.rsc +1 -1
  11. package/admin/.next/server/app/_global-error.segments/_head.segment.rsc +1 -1
  12. package/admin/.next/server/app/_global-error.segments/_index.segment.rsc +1 -1
  13. package/admin/.next/server/app/_global-error.segments/_tree.segment.rsc +1 -1
  14. package/admin/.next/server/app/p/[project]/page.js +2 -2
  15. package/admin/.next/server/app/p/[project]/page.js.nft.json +1 -1
  16. package/admin/.next/server/app/p/[project]/plan/[name]/page.js +2 -2
  17. package/admin/.next/server/app/p/[project]/plan/[name]/page.js.nft.json +1 -1
  18. package/admin/.next/server/app/p/[project]/promises/page.js +2 -2
  19. package/admin/.next/server/app/p/[project]/promises/page.js.nft.json +1 -1
  20. package/admin/.next/server/app/p/[project]/research/[slug]/page.js +2 -2
  21. package/admin/.next/server/app/p/[project]/research/[slug]/page.js.nft.json +1 -1
  22. package/admin/.next/server/app/p/[project]/scorecards/page.js +2 -2
  23. package/admin/.next/server/app/p/[project]/scorecards/page.js.nft.json +1 -1
  24. package/admin/.next/server/app/page.js +2 -2
  25. package/admin/.next/server/app/page.js.nft.json +1 -1
  26. package/admin/.next/server/chunks/_079asol._.js +1 -1
  27. package/admin/.next/server/chunks/_0m581dh._.js +1 -1
  28. package/admin/.next/server/chunks/apps_indusk-mcp_dist_lib_plans_index_03eohu3.js +1 -1
  29. package/admin/.next/server/chunks/ssr/[root-of-the-server]__00w5doc._.js +1 -1
  30. package/admin/.next/server/chunks/ssr/{[root-of-the-server]__07p2unm._.js → [root-of-the-server]__0trztae._.js} +2 -2
  31. package/admin/.next/server/chunks/ssr/{[root-of-the-server]__11km2i.._.js → [root-of-the-server]__0xdjthd._.js} +2 -2
  32. package/admin/.next/server/chunks/ssr/_0wce~lz._.js +3 -0
  33. package/admin/.next/server/chunks/ssr/apps_0dzo~r8._.js +3 -3
  34. package/admin/.next/server/middleware-build-manifest.js +3 -3
  35. package/admin/.next/server/pages/500.html +1 -1
  36. package/dist/bin/cli.js +15 -0
  37. package/dist/bin/commands/agent.js +15 -10
  38. package/dist/bin/commands/demo.d.ts +17 -0
  39. package/dist/bin/commands/demo.js +87 -0
  40. package/dist/bin/commands/eval.d.ts +8 -0
  41. package/dist/bin/commands/eval.js +13 -2
  42. package/dist/bin/commands/init.js +11 -0
  43. package/dist/bin/commands/telemetry.js +5 -0
  44. package/dist/bin/commands/update.js +7 -0
  45. package/dist/lib/agents/sweep.js +8 -2
  46. package/dist/lib/bookkeeping/fixture.test-support.d.ts +9 -0
  47. package/dist/lib/bookkeeping/fixture.test-support.js +42 -0
  48. package/dist/lib/bookkeeping/git.d.ts +11 -0
  49. package/dist/lib/bookkeeping/git.js +10 -0
  50. package/dist/lib/bookkeeping/jsonl.d.ts +7 -0
  51. package/dist/lib/bookkeeping/jsonl.js +25 -0
  52. package/dist/lib/bookkeeping/migrate.d.ts +29 -0
  53. package/dist/lib/bookkeeping/migrate.js +183 -0
  54. package/dist/lib/bookkeeping/notes.d.ts +56 -0
  55. package/dist/lib/bookkeeping/notes.js +127 -0
  56. package/dist/lib/bookkeeping/roots.d.ts +32 -0
  57. package/dist/lib/bookkeeping/roots.js +40 -0
  58. package/dist/lib/eval/evaluator-runner.js +5 -11
  59. package/dist/lib/eval/findings.js +2 -1
  60. package/dist/lib/eval/otel.js +2 -1
  61. package/dist/lib/eval/permissions.d.ts +13 -0
  62. package/dist/lib/eval/permissions.js +63 -0
  63. package/dist/lib/eval/persistent-evaluator.d.ts +3 -1
  64. package/dist/lib/eval/persistent-evaluator.js +28 -23
  65. package/dist/lib/highlights/highlights.d.ts +16 -3
  66. package/dist/lib/highlights/highlights.js +95 -58
  67. package/dist/lib/plans/land.js +2 -0
  68. package/dist/lib/promises/citations.d.ts +6 -1
  69. package/dist/lib/promises/citations.js +12 -3
  70. package/dist/lib/run/pending-evals.js +3 -2
  71. package/dist/lib/telemetry/daemon.d.ts +6 -3
  72. package/dist/lib/telemetry/daemon.js +23 -55
  73. package/dist/lib/telemetry/stop.d.ts +33 -0
  74. package/dist/lib/telemetry/stop.js +45 -0
  75. package/dist/lib/version-state.d.ts +1 -1
  76. package/dist/lib/version-state.js +1 -0
  77. package/dist/tools/agent-tools.js +13 -29
  78. package/dist/tools/highlight-tools.d.ts +0 -16
  79. package/dist/tools/highlight-tools.js +5 -1
  80. package/dist/tools/lesson-tools.js +17 -16
  81. package/examples/seat-holds/.dockerignore +3 -0
  82. package/examples/seat-holds/.indusk/config.json +5 -0
  83. package/examples/seat-holds/.indusk/planning/archive/seat-holds/brief.md +36 -0
  84. package/examples/seat-holds/.indusk/promises/a-held-seat-is-released-in-time.md +18 -0
  85. package/examples/seat-holds/.indusk/promises/the-deployed-demo-page-answers.md +19 -0
  86. package/examples/seat-holds/Dockerfile +14 -0
  87. package/examples/seat-holds/README.md +87 -0
  88. package/examples/seat-holds/fly.toml +32 -0
  89. package/examples/seat-holds/package.json +25 -0
  90. package/examples/seat-holds/public/index.html +85 -0
  91. package/examples/seat-holds/scripts/smoke-deployed.mjs +29 -0
  92. package/examples/seat-holds/src/seats.test.ts +45 -0
  93. package/examples/seat-holds/src/seats.ts +90 -0
  94. package/examples/seat-holds/src/server.ts +98 -0
  95. package/examples/seat-holds/src/telemetry.ts +56 -0
  96. package/examples/seat-holds/vitest.config.ts +7 -0
  97. package/hooks/_hook-paths.js +51 -0
  98. package/hooks/_pending-drain.js +4 -2
  99. package/hooks/eval-trigger.js +12 -12
  100. package/package.json +6 -1
  101. package/skills/eval-review.md +1 -1
  102. package/skills/rail-check.md +19 -13
  103. package/admin/.next/server/chunks/ssr/_0iq11o1._.js +0 -3
  104. /package/admin/.next/static/{Fup9Ab45THH4baThbLtlT → q6lhU1Jp2V4gyTd2ln4_A}/_buildManifest.js +0 -0
  105. /package/admin/.next/static/{Fup9Ab45THH4baThbLtlT → q6lhU1Jp2V4gyTd2ln4_A}/_clientMiddlewareManifest.js +0 -0
  106. /package/admin/.next/static/{Fup9Ab45THH4baThbLtlT → q6lhU1Jp2V4gyTd2ln4_A}/_ssgManifest.js +0 -0
@@ -1 +1 @@
1
- Fup9Ab45THH4baThbLtlT
1
+ q6lhU1Jp2V4gyTd2ln4_A
@@ -3,7 +3,7 @@ module.exports = [
3
3
 
4
4
  __turbopack_context__.v((parentImport) => {
5
5
  return Promise.all([
6
- "chunks/node_modules__pnpm_0e-dfa2._.js",
6
+ "chunks/node_modules__pnpm_0w6x5el._.js",
7
7
  "chunks/[root-of-the-server]__0-ab0hw._.js"
8
8
  ].map((chunk) => __turbopack_context__.l(chunk))).then(() => {
9
9
  return parentImport("[turbopack-node]/transforms/postcss.ts { CONFIG => \"[project]/apps/indusk-admin/postcss.config.mjs [postcss] (ecmascript)\" } [postcss] (ecmascript)");
@@ -1152,7 +1152,7 @@ class Declaration extends Node {
1152
1152
  module.exports = Declaration;
1153
1153
  Declaration.default = Declaration;
1154
1154
  }),
1155
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/base64.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1155
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/base64.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1156
1156
 
1157
1157
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1158
1158
  * Copyright 2011 Mozilla Foundation and contributors
@@ -1205,7 +1205,7 @@ Declaration.default = Declaration;
1205
1205
  return -1;
1206
1206
  };
1207
1207
  }),
1208
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1208
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1209
1209
 
1210
1210
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1211
1211
  * Copyright 2011 Mozilla Foundation and contributors
@@ -1241,7 +1241,7 @@ Declaration.default = Declaration;
1241
1241
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
1242
1242
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
1243
1243
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
1244
- */ var base64 = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/base64.js [postcss] (ecmascript)");
1244
+ */ var base64 = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/base64.js [postcss] (ecmascript)");
1245
1245
  // A single base 64 digit can contain 6 bits of data. For the base 64 variable
1246
1246
  // length quantities we use in the source map spec, the first bit is the sign,
1247
1247
  // the next four bits are the actual value, and the 6th bit is the
@@ -1321,7 +1321,7 @@ var VLQ_CONTINUATION_BIT = VLQ_BASE;
1321
1321
  aOutParam.rest = aIndex;
1322
1322
  };
1323
1323
  }),
1324
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1324
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1325
1325
 
1326
1326
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1327
1327
  * Copyright 2011 Mozilla Foundation and contributors
@@ -1816,13 +1816,13 @@ exports.parseSourceMapInput = parseSourceMapInput;
1816
1816
  }
1817
1817
  exports.computeSourceURL = computeSourceURL;
1818
1818
  }),
1819
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1819
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1820
1820
 
1821
1821
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1822
1822
  * Copyright 2011 Mozilla Foundation and contributors
1823
1823
  * Licensed under the New BSD license. See LICENSE or:
1824
1824
  * http://opensource.org/licenses/BSD-3-Clause
1825
- */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1825
+ */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1826
1826
  var has = Object.prototype.hasOwnProperty;
1827
1827
  var hasNativeMap = typeof Map !== "undefined";
1828
1828
  /**
@@ -1919,13 +1919,13 @@ var hasNativeMap = typeof Map !== "undefined";
1919
1919
  };
1920
1920
  exports.ArraySet = ArraySet;
1921
1921
  }),
1922
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/mapping-list.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1922
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/mapping-list.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1923
1923
 
1924
1924
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1925
1925
  * Copyright 2014 Mozilla Foundation and contributors
1926
1926
  * Licensed under the New BSD license. See LICENSE or:
1927
1927
  * http://opensource.org/licenses/BSD-3-Clause
1928
- */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1928
+ */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1929
1929
  /**
1930
1930
  * Determine whether mappingB is after mappingA with respect to generated
1931
1931
  * position.
@@ -1988,16 +1988,16 @@ exports.ArraySet = ArraySet;
1988
1988
  };
1989
1989
  exports.MappingList = MappingList;
1990
1990
  }),
1991
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1991
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
1992
1992
 
1993
1993
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
1994
1994
  * Copyright 2011 Mozilla Foundation and contributors
1995
1995
  * Licensed under the New BSD license. See LICENSE or:
1996
1996
  * http://opensource.org/licenses/BSD-3-Clause
1997
- */ var base64VLQ = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)");
1998
- var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1999
- var ArraySet = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)").ArraySet;
2000
- var MappingList = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/mapping-list.js [postcss] (ecmascript)").MappingList;
1997
+ */ var base64VLQ = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)");
1998
+ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
1999
+ var ArraySet = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)").ArraySet;
2000
+ var MappingList = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/mapping-list.js [postcss] (ecmascript)").MappingList;
2001
2001
  /**
2002
2002
  * An instance of the SourceMapGenerator represents a source map which is
2003
2003
  * being built incrementally. You may pass an object with the following
@@ -2281,10 +2281,12 @@ SourceMapGenerator.prototype._version = 3;
2281
2281
  next = '';
2282
2282
  if (mapping.generatedLine !== previousGeneratedLine) {
2283
2283
  previousGeneratedColumn = 0;
2284
- while(mapping.generatedLine !== previousGeneratedLine){
2285
- next += ';';
2286
- previousGeneratedLine++;
2287
- }
2284
+ // One ';' per skipped line. Build large gaps with a single flat
2285
+ // string: appending ';' one by one creates a rope node per line, which
2286
+ // can exhaust the heap for a big gap (CVE-2026-93749).
2287
+ var lineDelta = mapping.generatedLine - previousGeneratedLine;
2288
+ next += lineDelta === 1 ? ';' : ';'.repeat(lineDelta);
2289
+ previousGeneratedLine = mapping.generatedLine;
2288
2290
  } else {
2289
2291
  if (i > 0) {
2290
2292
  if (!util.compareByGeneratedPositionsInflated(mapping, mappings[i - 1])) {
@@ -2353,7 +2355,7 @@ SourceMapGenerator.prototype._generateSourcesContent = function SourceMapGenerat
2353
2355
  };
2354
2356
  exports.SourceMapGenerator = SourceMapGenerator;
2355
2357
  }),
2356
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/binary-search.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2358
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/binary-search.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2357
2359
 
2358
2360
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
2359
2361
  * Copyright 2011 Mozilla Foundation and contributors
@@ -2452,7 +2454,7 @@ exports.LEAST_UPPER_BOUND = 2;
2452
2454
  return index;
2453
2455
  };
2454
2456
  }),
2455
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/quick-sort.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2457
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/quick-sort.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2456
2458
 
2457
2459
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
2458
2460
  * Copyright 2011 Mozilla Foundation and contributors
@@ -2548,6 +2550,14 @@ function cloneSort(comparator) {
2548
2550
  let templateFn = new Function(`return ${template}`)();
2549
2551
  return templateFn(comparator);
2550
2552
  }
2553
+ let isEvalAllowed = function() {
2554
+ try {
2555
+ new Function('return 0')();
2556
+ return true;
2557
+ } catch {
2558
+ return false;
2559
+ }
2560
+ }();
2551
2561
  /**
2552
2562
  * Sort the given array in-place with the given comparator function.
2553
2563
  *
@@ -2557,7 +2567,7 @@ function cloneSort(comparator) {
2557
2567
  * Function to use to compare two items.
2558
2568
  */ let sortCache = new WeakMap();
2559
2569
  exports.quickSort = function(ary, comparator, start = 0) {
2560
- let doQuickSort = sortCache.get(comparator);
2570
+ let doQuickSort = isEvalAllowed ? sortCache.get(comparator) : SortTemplate(comparator);
2561
2571
  if (doQuickSort === void 0) {
2562
2572
  doQuickSort = cloneSort(comparator);
2563
2573
  sortCache.set(comparator, doQuickSort);
@@ -2565,17 +2575,24 @@ exports.quickSort = function(ary, comparator, start = 0) {
2565
2575
  doQuickSort(ary, comparator, start, ary.length - 1);
2566
2576
  };
2567
2577
  }),
2568
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-map-consumer.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2578
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-map-consumer.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
2569
2579
 
2570
2580
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
2571
2581
  * Copyright 2011 Mozilla Foundation and contributors
2572
2582
  * Licensed under the New BSD license. See LICENSE or:
2573
2583
  * http://opensource.org/licenses/BSD-3-Clause
2574
- */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
2575
- var binarySearch = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/binary-search.js [postcss] (ecmascript)");
2576
- var ArraySet = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)").ArraySet;
2577
- var base64VLQ = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)");
2578
- var quickSort = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/quick-sort.js [postcss] (ecmascript)").quickSort;
2584
+ */ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
2585
+ var binarySearch = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/binary-search.js [postcss] (ecmascript)");
2586
+ var ArraySet = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/array-set.js [postcss] (ecmascript)").ArraySet;
2587
+ var base64VLQ = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/base64-vlq.js [postcss] (ecmascript)");
2588
+ var quickSort = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/quick-sort.js [postcss] (ecmascript)").quickSort;
2589
+ // Upper bound for a section's `offset.line` in an indexed source map. A flat
2590
+ // map spends one ';' per generated line, so a tiny indexed map with a huge
2591
+ // offset.line turns into a huge amount of work and memory once its mappings
2592
+ // are copied into a SourceMapGenerator (CVE-2026-93749). Ten million lines is
2593
+ // far beyond any real generated file. Columns are VLQ-encoded as deltas and
2594
+ // don't amplify, so they only need to be valid integers.
2595
+ var MAX_SECTION_OFFSET_LINE = 1e7;
2579
2596
  function SourceMapConsumer(aSourceMap, aSourceMapURL) {
2580
2597
  var sourceMap = aSourceMap;
2581
2598
  if (typeof aSourceMap === 'string') {
@@ -3331,6 +3348,7 @@ exports.BasicSourceMapConsumer = BasicSourceMapConsumer;
3331
3348
  line: -1,
3332
3349
  column: 0
3333
3350
  };
3351
+ var maxOffsetLine = 0;
3334
3352
  this._sections = sections.map(function(s) {
3335
3353
  if (s.url) {
3336
3354
  // The url field will require support for asynchronicity.
@@ -3340,10 +3358,26 @@ exports.BasicSourceMapConsumer = BasicSourceMapConsumer;
3340
3358
  var offset = util.getArg(s, 'offset');
3341
3359
  var offsetLine = util.getArg(offset, 'line');
3342
3360
  var offsetColumn = util.getArg(offset, 'column');
3361
+ if (!isValidOffset(offsetLine) || !isValidOffset(offsetColumn)) {
3362
+ throw new Error('Section offset line and column must be non-negative integers.');
3363
+ }
3364
+ if (offsetLine > MAX_SECTION_OFFSET_LINE) {
3365
+ throw new Error('Section offset line must not exceed ' + MAX_SECTION_OFFSET_LINE + '.');
3366
+ }
3343
3367
  if (offsetLine < lastOffset.line || offsetLine === lastOffset.line && offsetColumn < lastOffset.column) {
3344
3368
  throw new Error('Section offsets must be ordered and non-overlapping.');
3345
3369
  }
3346
3370
  lastOffset = offset;
3371
+ var consumer = new SourceMapConsumer(util.getArg(s, 'map'), aSourceMapURL);
3372
+ // Offsets of a nested indexed map add up with this one, so apply the
3373
+ // bound to the total.
3374
+ var totalOffsetLine = offsetLine + (consumer._maxOffsetLine || 0);
3375
+ if (totalOffsetLine > MAX_SECTION_OFFSET_LINE) {
3376
+ throw new Error('Section offset line must not exceed ' + MAX_SECTION_OFFSET_LINE + ', including offsets of nested sections.');
3377
+ }
3378
+ if (totalOffsetLine > maxOffsetLine) {
3379
+ maxOffsetLine = totalOffsetLine;
3380
+ }
3347
3381
  return {
3348
3382
  generatedOffset: {
3349
3383
  // The offset fields are 0-based, but we use 1-based indices when
@@ -3351,9 +3385,19 @@ exports.BasicSourceMapConsumer = BasicSourceMapConsumer;
3351
3385
  generatedLine: offsetLine + 1,
3352
3386
  generatedColumn: offsetColumn + 1
3353
3387
  },
3354
- consumer: new SourceMapConsumer(util.getArg(s, 'map'), aSourceMapURL)
3388
+ consumer: consumer
3355
3389
  };
3356
3390
  });
3391
+ // The largest offset.line of any section, including nested sections.
3392
+ this._maxOffsetLine = maxOffsetLine;
3393
+ }
3394
+ /**
3395
+ * Section offsets come from untrusted input and are used as line/column
3396
+ * numbers, so only accept non-negative safe integers (rejects NaN, Infinity,
3397
+ * strings, fractions, etc).
3398
+ */ function isValidOffset(aValue) {
3399
+ return typeof aValue === 'number' && aValue >= 0 && aValue <= 9007199254740991 && // Number.MAX_SAFE_INTEGER
3400
+ Math.floor(aValue) === aValue;
3357
3401
  }
3358
3402
  IndexedSourceMapConsumer.prototype = Object.create(SourceMapConsumer.prototype);
3359
3403
  IndexedSourceMapConsumer.prototype.constructor = SourceMapConsumer;
@@ -3366,8 +3410,12 @@ IndexedSourceMapConsumer.prototype.constructor = SourceMapConsumer;
3366
3410
  get: function() {
3367
3411
  var sources = [];
3368
3412
  for(var i = 0; i < this._sections.length; i++){
3369
- for(var j = 0; j < this._sections[i].consumer.sources.length; j++){
3370
- sources.push(this._sections[i].consumer.sources[j]);
3413
+ // Read the getter once per section: for a nested indexed map it is
3414
+ // itself this getter, and re-reading it per item is exponential in the
3415
+ // nesting depth (CVE-2026-93749).
3416
+ var sectionSources = this._sections[i].consumer.sources;
3417
+ for(var j = 0; j < sectionSources.length; j++){
3418
+ sources.push(sectionSources[j]);
3371
3419
  }
3372
3420
  }
3373
3421
  return sources;
@@ -3532,14 +3580,14 @@ IndexedSourceMapConsumer.prototype.constructor = SourceMapConsumer;
3532
3580
  };
3533
3581
  exports.IndexedSourceMapConsumer = IndexedSourceMapConsumer;
3534
3582
  }),
3535
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-node.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3583
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-node.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3536
3584
 
3537
3585
  /* -*- Mode: js; js-indent-level: 2; -*- */ /*
3538
3586
  * Copyright 2011 Mozilla Foundation and contributors
3539
3587
  * Licensed under the New BSD license. See LICENSE or:
3540
3588
  * http://opensource.org/licenses/BSD-3-Clause
3541
- */ var SourceMapGenerator = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)").SourceMapGenerator;
3542
- var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
3589
+ */ var SourceMapGenerator = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)").SourceMapGenerator;
3590
+ var util = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/util.js [postcss] (ecmascript)");
3543
3591
  // Matches a Windows-style `\r\n` newline or a `\n` newline used by all other
3544
3592
  // operating systems these days (capturing the result).
3545
3593
  var REGEX_NEWLINE = /(\r?\n)/;
@@ -3632,6 +3680,13 @@ var isSourceNode = "$$$isSourceNode$$$";
3632
3680
  // to the SourceNode without any mapping.
3633
3681
  // Each line is added as separate string.
3634
3682
  while(lastGeneratedLine < mapping.generatedLine){
3683
+ if (remainingLinesIndex >= remainingLines.length) {
3684
+ // The generated code is exhausted. Skip the rest instead of adding
3685
+ // empty lines one by one: a mapping may point far past the end of
3686
+ // the code (e.g. an indexed map section with a huge offset.line).
3687
+ lastGeneratedLine = mapping.generatedLine;
3688
+ break;
3689
+ }
3635
3690
  node.add(shiftNextLine());
3636
3691
  lastGeneratedLine++;
3637
3692
  }
@@ -3890,32 +3945,24 @@ var isSourceNode = "$$$isSourceNode$$$";
3890
3945
  };
3891
3946
  exports.SourceNode = SourceNode;
3892
3947
  }),
3893
- "[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/source-map.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3948
+ "[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/source-map.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3894
3949
 
3895
3950
  /*
3896
3951
  * Copyright 2009-2011 Mozilla Foundation and contributors
3897
3952
  * Licensed under the New BSD license. See LICENSE.txt or:
3898
3953
  * http://opensource.org/licenses/BSD-3-Clause
3899
- */ exports.SourceMapGenerator = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)").SourceMapGenerator;
3900
- exports.SourceMapConsumer = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-map-consumer.js [postcss] (ecmascript)").SourceMapConsumer;
3901
- exports.SourceNode = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/lib/source-node.js [postcss] (ecmascript)").SourceNode;
3954
+ */ exports.SourceMapGenerator = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-map-generator.js [postcss] (ecmascript)").SourceMapGenerator;
3955
+ exports.SourceMapConsumer = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-map-consumer.js [postcss] (ecmascript)").SourceMapConsumer;
3956
+ exports.SourceNode = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/lib/source-node.js [postcss] (ecmascript)").SourceNode;
3902
3957
  }),
3903
- "[project]/node_modules/.pnpm/nanoid@3.3.11/node_modules/nanoid/non-secure/index.cjs [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3958
+ "[project]/node_modules/.pnpm/nanoid@3.3.20/node_modules/nanoid/non-secure/index.cjs [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3904
3959
 
3905
- // This alphabet uses `A-Za-z0-9_-` symbols.
3906
- // The order of characters is optimized for better gzip and brotli compression.
3907
- // References to the same file (works both for gzip and brotli):
3908
- // `'use`, `andom`, and `rict'`
3909
- // References to the brotli default dictionary:
3910
- // `-26T`, `1983`, `40px`, `75px`, `bush`, `jack`, `mind`, `very`, and `wolf`
3911
3960
  let urlAlphabet = 'useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict';
3912
3961
  let customAlphabet = (alphabet, defaultSize = 21)=>{
3913
3962
  return (size = defaultSize)=>{
3914
3963
  let id = '';
3915
- // A compact alternative for `for (var i = 0; i < step; i++)`.
3916
3964
  let i = size | 0;
3917
- while(i--){
3918
- // `| 0` is more compact and faster than `Math.floor()`.
3965
+ while(i-- > 0){
3919
3966
  id += alphabet[Math.random() * alphabet.length | 0];
3920
3967
  }
3921
3968
  return id;
@@ -3923,10 +3970,8 @@ let customAlphabet = (alphabet, defaultSize = 21)=>{
3923
3970
  };
3924
3971
  let nanoid = (size = 21)=>{
3925
3972
  let id = '';
3926
- // A compact alternative for `for (var i = 0; i < step; i++)`.
3927
3973
  let i = size | 0;
3928
- while(i--){
3929
- // `| 0` is more compact and faster than `Math.floor()`.
3974
+ while(i-- > 0){
3930
3975
  id += urlAlphabet[Math.random() * 64 | 0];
3931
3976
  }
3932
3977
  return id;
@@ -3939,7 +3984,7 @@ module.exports = {
3939
3984
  "[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/previous-map.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
3940
3985
  "use strict";
3941
3986
 
3942
- let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
3987
+ let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
3943
3988
  let { existsSync, readFileSync } = __turbopack_context__.r("[externals]/fs [external] (fs, cjs)");
3944
3989
  let { dirname, join } = __turbopack_context__.r("[externals]/path [external] (path, cjs)");
3945
3990
  function fromBase64(str) {
@@ -4051,10 +4096,10 @@ PreviousMap.default = PreviousMap;
4051
4096
  "[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/input.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
4052
4097
  "use strict";
4053
4098
 
4054
- let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
4099
+ let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
4055
4100
  let { fileURLToPath, pathToFileURL } = __turbopack_context__.r("[externals]/url [external] (url, cjs)");
4056
4101
  let { isAbsolute, resolve } = __turbopack_context__.r("[externals]/path [external] (path, cjs)");
4057
- let { nanoid } = __turbopack_context__.r("[project]/node_modules/.pnpm/nanoid@3.3.11/node_modules/nanoid/non-secure/index.cjs [postcss] (ecmascript)");
4102
+ let { nanoid } = __turbopack_context__.r("[project]/node_modules/.pnpm/nanoid@3.3.20/node_modules/nanoid/non-secure/index.cjs [postcss] (ecmascript)");
4058
4103
  let terminalHighlight = __turbopack_context__.r("[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/terminal-highlight.js [postcss] (ecmascript)");
4059
4104
  let CssSyntaxError = __turbopack_context__.r("[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/css-syntax-error.js [postcss] (ecmascript)");
4060
4105
  let PreviousMap = __turbopack_context__.r("[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/previous-map.js [postcss] (ecmascript)");
@@ -4270,7 +4315,7 @@ if (terminalHighlight && terminalHighlight.registerInput) {
4270
4315
  "[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/map-generator.js [postcss] (ecmascript)", ((__turbopack_context__, module, exports) => {
4271
4316
  "use strict";
4272
4317
 
4273
- let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.1/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
4318
+ let { SourceMapConsumer, SourceMapGenerator } = __turbopack_context__.r("[project]/node_modules/.pnpm/source-map-js@1.2.2/node_modules/source-map-js/source-map.js [postcss] (ecmascript)");
4274
4319
  let { dirname, relative, resolve, sep } = __turbopack_context__.r("[externals]/path [external] (path, cjs)");
4275
4320
  let { pathToFileURL } = __turbopack_context__.r("[externals]/url [external] (url, cjs)");
4276
4321
  let Input = __turbopack_context__.r("[project]/node_modules/.pnpm/postcss@8.4.31/node_modules/postcss/lib/input.js [postcss] (ecmascript)");
@@ -6678,4 +6723,4 @@ const Node = __TURBOPACK__imported__module__$5b$project$5d2f$node_modules$2f2e$p
6678
6723
  }),
6679
6724
  ];
6680
6725
 
6681
- //# sourceMappingURL=node_modules__pnpm_0e-dfa2._.js.map
6726
+ //# sourceMappingURL=node_modules__pnpm_0w6x5el._.js.map
@@ -7,9 +7,9 @@
7
7
  "static/chunks/03~yq9q893hmn.js"
8
8
  ],
9
9
  "lowPriorityFiles": [
10
- "static/Fup9Ab45THH4baThbLtlT/_buildManifest.js",
11
- "static/Fup9Ab45THH4baThbLtlT/_ssgManifest.js",
12
- "static/Fup9Ab45THH4baThbLtlT/_clientMiddlewareManifest.js"
10
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_buildManifest.js",
11
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_ssgManifest.js",
12
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_clientMiddlewareManifest.js"
13
13
  ],
14
14
  "rootMainFiles": [
15
15
  "static/chunks/0kl5npeoemmqj.js",
@@ -5,9 +5,9 @@
5
5
  "devFiles": [],
6
6
  "polyfillFiles": [],
7
7
  "lowPriorityFiles": [
8
- "static/Fup9Ab45THH4baThbLtlT/_buildManifest.js",
9
- "static/Fup9Ab45THH4baThbLtlT/_ssgManifest.js",
10
- "static/Fup9Ab45THH4baThbLtlT/_clientMiddlewareManifest.js"
8
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_buildManifest.js",
9
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_ssgManifest.js",
10
+ "static/q6lhU1Jp2V4gyTd2ln4_A/_clientMiddlewareManifest.js"
11
11
  ],
12
12
  "rootMainFiles": []
13
13
  }