@ladderkitlab/hub-kb 0.2.0 → 0.3.0

package/dist/main.js

@@ -224,6 +224,10 @@ var RULE_LABELS = {
 };
 var ATOMS = [...new Set([...Object.values(RULE_LABELS), CREDENTIAL_MASK].map((s) => s.trim()))].sort((a, b) => b.length - a.length);
 var FIRST = new Set(ATOMS.map((a) => a[0]));
+function placeholderEndingAt(text, end) {
+  for (const a of ATOMS) if (end >= a.length && text.startsWith(a, end - a.length)) return a.length;
+  return 0;
+}
 function placeholderAt(text, i) {
   if (i >= text.length || !FIRST.has(text[i])) return 0;
   for (const a of ATOMS) if (text.startsWith(a, i)) return a.length;
@@ -231,8 +235,8 @@ function placeholderAt(text, i) {
 }
 
 // ../redact/value.ts
-function newScan(text, limit) {
-  return { text, n: text.length, budget: new Budget(text.length, limit), values: /* @__PURE__ */ new Map(), unfinished: text.length };
+function newScan(text, limit, raw = text) {
+  return { text, raw, n: text.length, budget: new Budget(text.length, limit), values: /* @__PURE__ */ new Map(), unfinished: text.length };
 }
 var IP_LITERAL_MAX = 64;
 var isHexCode = (c) => c >= 48 && c <= 57 || c >= 97 && c <= 102 || c >= 65 && c <= 70;
@@ -432,14 +436,7 @@ function interpretUrlValue(s, start) {
   } else if (segments === 0) {
     record = { state: "none", judgeEnd: start, displayEnd: start, next: start };
   } else if (content) {
-    if (!wide && lastEnd < n && isInlineWs(t[lastEnd])) {
-      let k = lastEnd;
-      while (k < n && isInlineWs(t[k])) k++;
-      s.budget.tick(k - lastEnd);
-      const d = t[k];
-      if (k < n && (placeholderAt(t, k) > 0 || isPrintableAscii(t.charCodeAt(k)) && d !== "&" && d !== "#" && d !== ";" && d !== ")")) wide = true;
-    } else if (!wide && continuationStarts(t, n, lastEnd)) wide = true;
-    const displayEnd = wide ? restEnd(s, lastEnd) : lastEnd;
+    const displayEnd = contentDisplayEnd(s, lastEnd, wide);
     record = { state: "content", judgeEnd: lastEnd, displayEnd, next: displayEnd };
   } else {
     record = { state: placeholder ? "placeholder" : "blank", judgeEnd: lastEnd, displayEnd: lastEnd, next: lastEnd };
@@ -447,6 +444,18 @@ function interpretUrlValue(s, start) {
   s.values.set(start, record);
   return record;
 }
+function contentDisplayEnd(s, judgeEnd, wide = false) {
+  const t = s.text;
+  const n = s.n;
+  if (!wide && judgeEnd < n && isInlineWs(t[judgeEnd])) {
+    let k = judgeEnd;
+    while (k < n && isInlineWs(t[k])) k++;
+    s.budget.tick(k - judgeEnd);
+    const d = t[k];
+    if (k < n && (placeholderAt(t, k) > 0 || isPrintableAscii(t.charCodeAt(k)) && d !== "&" && d !== "#" && d !== ";" && d !== ")")) wide = true;
+  } else if (!wide && continuationStarts(t, n, judgeEnd)) wide = true;
+  return wide ? restEnd(s, judgeEnd) : judgeEnd;
+}
 var hasCredentialValue = (v) => v.state === "content" || v.state === "uncertain";
 
 // ../redact/named-credential.ts
@@ -512,6 +521,9 @@ function urlNameClass(rawName) {
   if (m) return m[1] === PROSE_KEY_NAME ? "key" : "prose";
   return URL_NAME_SET.has(name) ? "url" : null;
 }
+function isUrlCredentialName(rawName) {
+  return urlNameClass(rawName) !== null;
+}
 function keyThresholdEnd(s, from) {
   const t = s.text;
   let k = from;
@@ -762,119 +774,312 @@ function proxySchemeStart(t, colon) {
   return -1;
 }
 
-// ../redact/index.ts
-var isAlnumCode2 = (x) => x >= 48 && x <= 57 || x >= 65 && x <= 90 || x >= 97 && x <= 122;
-var isWordCode = (x) => isAlnumCode2(x) || x === 95;
-var isTokenCode = (x) => isWordCode(x) || x === 45;
-var isHexCode2 = (x) => x >= 48 && x <= 57 || x >= 65 && x <= 70 || x >= 97 && x <= 102;
-function stopPositions(s) {
-  return /* @__PURE__ */ new Set([...proseNamedHits(s).map((h) => h.index), ...inviteSpans(s).map((h) => h.index)]);
-}
-var LINK_END = (c) => isWs(c) || c === ")" || c === "]" || c === ">" || c === '"' || c === "'";
+// ../redact/link.ts
+var AMP = 1;
+var HASH = 2;
+var SEMI = 4;
 function httpHeadAt(t, i) {
   if (t[i] !== "h" && t[i] !== "H") return 0;
   const head = t.slice(i, i + 8).toLowerCase();
   return head.startsWith("https://") ? 8 : head.startsWith("http://") ? 7 : 0;
 }
+var ENCODED_HEAD = /https?(?::|%(?:25)?3a)(?:\/|%(?:25)?2f)(?:\/|%(?:25)?2f)/iy;
+function encodedHeadAt(t, i) {
+  if (t[i] !== "h" && t[i] !== "H") return 0;
+  ENCODED_HEAD.lastIndex = i;
+  if (!ENCODED_HEAD.test(t)) return 0;
+  const len = ENCODED_HEAD.lastIndex - i;
+  return t.slice(i, i + len).includes("%") ? len : 0;
+}
 var SOCKS_HEADS = [...SOCKS_URI_SCHEMES].sort((x, y) => y.length - x.length).map((x) => `${x}://`);
-function userinfoHeadAt(t, i) {
-  const h = httpHeadAt(t, i);
-  if (h) return h;
+function socksHeadAt(t, i) {
   if (t[i] !== "s" && t[i] !== "S") return 0;
   const head = t.slice(i, i + 10).toLowerCase();
   for (const p of SOCKS_HEADS) if (head.startsWith(p)) return p.length;
   return 0;
 }
-function valueLimits(s, creds = urlCredentialSpans(s)) {
-  const t = s.text;
-  const ends = creds.filter((sp) => sp.end < s.n && (t[sp.end] === "&" || t[sp.end] === "#" || t[sp.end] === ";" || CJK_STOPS.includes(t[sp.end])));
-  let k = 0;
-  return (pos) => {
-    while (k < ends.length && ends[k].end <= pos) k++;
-    return k < ends.length && ends[k].index <= pos ? ends[k].end : -1;
-  };
+function hasSchemeSeparator(text) {
+  return text.includes("://");
+}
+var ENCODED_UNIT = { "3A": ":", "2F": "/", "3F": "?", "23": "#", "40": "@", "5B": "[", "5D": "]", "28": "(", "29": ")" };
+var ONCE = 1;
+var TWICE = 2;
+function headDepth(head) {
+  return (/%(?:3a|2f)/i.test(head) ? ONCE : 0) | (/%25(?:3a|2f)/i.test(head) ? TWICE : 0);
 }
-function bracketSpan(t, i, end) {
-  const stop = Math.min(end, i + IP_LITERAL_MAX + 2);
-  for (let j = i + 1; j < stop; j++) {
-    if (t[j] === "]") return { len: j - i + 1, scanned: j - i };
-    if (t[j] === "[" || /\s/.test(t[j])) return { len: 0, scanned: j - i };
+function unitAt(t, j, depth) {
+  if (depth && t[j] === "%") {
+    const hex = t.slice(j + 1, j + 3).toUpperCase();
+    if (depth & ONCE && ENCODED_UNIT[hex]) return { ch: ENCODED_UNIT[hex], len: 3, encodedChar: true };
+    if (depth & TWICE && hex === "25") {
+      const h2 = t.slice(j + 3, j + 5).toUpperCase();
+      if (ENCODED_UNIT[h2]) return { ch: ENCODED_UNIT[h2], len: 5, encodedChar: true };
+    }
   }
-  return { len: 0, scanned: stop - i };
+  return { ch: t[j], len: 1, encodedChar: false };
 }
-var AUTHORITY_END = /* @__PURE__ */ new Set(["/", "?", "#"]);
-function spanHasStop(stops, from, to) {
-  for (let k = from; k < to; k++) if (stops.has(k)) return true;
-  return false;
+function valueContextAt(s, start) {
+  const t = s.text;
+  if (start === 0 || t[start - 1] !== "=") return false;
+  let p = start - 1;
+  while (p > 0 && /[A-Za-z0-9_.%-]/.test(t[p - 1])) p--;
+  s.budget.tick(start - p + 1);
+  if (p === 0 || !"?&#;".includes(t[p - 1])) return false;
+  return paramNameEnd(t, p) === start - 1 && isUrlCredentialName(t.slice(p, start - 1));
+}
+function headAt(s, i, inherited) {
+  const t = s.text;
+  let kind = null;
+  let start = i;
+  let contentStart = 0;
+  const hl = httpHeadAt(t, i);
+  if (hl) {
+    kind = "http";
+    contentStart = i + hl;
+  } else {
+    const el = encodedHeadAt(t, i);
+    if (el) {
+      kind = "encoded";
+      contentStart = i + el;
+    } else if (t[i] === ":" && t[i + 1] === "/" && t[i + 2] === "/") {
+      const ps = proxySchemeStart(t, i);
+      s.budget.tick(9);
+      if (ps >= 0) {
+        kind = "proxy";
+        start = ps;
+        contentStart = i + 3;
+      }
+    }
+  }
+  if (!kind) return null;
+  const extra = inherited | (valueContextAt(s, start) ? AMP | HASH | SEMI : 0) | (kind === "encoded" ? AMP | HASH : 0);
+  const displayable = kind === "proxy" || placeholderAt(t, contentStart) === 0;
+  const depth = kind === "encoded" ? headDepth(t.slice(i, contentStart)) : 0;
+  return { start, kind, contentStart, extra, userinfo: null, scanEnd: contentStart, displayEnd: contentStart, displayable, depth };
+}
+var isNonAscii = (s, j) => s.raw.charCodeAt(j) > 127;
+var isExtraEnd = (c, extra) => (extra & AMP) !== 0 && c === "&" || (extra & HASH) !== 0 && c === "#" || (extra & SEMI) !== 0 && c === ";";
+var KI_WRAP = (c) => c === ")" || c === "]" || c === ">" || c === '"' || c === "'";
+function locateUserinfo(s, from, encoded) {
+  const t = s.text;
+  const n = s.n;
+  let j = from;
+  let at = null;
+  let afterAtom = false;
+  while (j < n && !isWs(t[j])) {
+    const a = placeholderAt(t, j);
+    if (a) {
+      afterAtom = true;
+      j += a;
+      continue;
+    }
+    if (afterAtom && isNonAscii(s, j)) break;
+    if (encoded && (t[j] === "&" || t[j] === "#")) break;
+    const u = unitAt(t, j, encoded);
+    if (u.ch === "/" || u.ch === "?" || u.ch === "#") break;
+    if (u.ch === "@") at = [j, j + u.len];
+    j += u.len;
+  }
+  s.budget.tick(j - from + 1);
+  return at;
 }
-function urlSpans(s) {
+function linkTable(s) {
+  if (s.links) return s.links;
   const t = s.text;
   const n = s.n;
   const out = [];
-  const stops = stopPositions(s);
-  const creds = urlCredentialSpans(s);
-  let ci = 0;
-  const inCredValue = (pos) => {
-    while (ci < creds.length && creds[ci].end <= pos) ci++;
-    return ci < creds.length && creds[ci].index <= pos;
+  const backoff = /* @__PURE__ */ new Map();
+  const open = (rec) => {
+    out.push(rec);
+    const encoded = rec.depth;
+    const at = locateUserinfo(s, rec.contentStart, encoded);
+    if (at) rec.userinfo = { index: rec.contentStart, end: at[0] };
+    return { rec, encoded, kiT62: !at && rec.kind === "proxy", j: at ? at[1] : rec.contentStart, paren: 0, bracket: 0 };
+  };
+  const close = (f) => {
+    const rec = f.rec;
+    rec.scanEnd = f.j;
+    if (f.kiT62) {
+      let b = backoff.get(f.j);
+      if (b === void 0) {
+        b = f.j;
+        while (b > 0 && KI_WRAP(t[b - 1]) && placeholderEndingAt(t, b) === 0) b--;
+        s.budget.tick(f.j - b + 1);
+        backoff.set(f.j, b);
+      }
+      rec.displayEnd = Math.max(b, rec.contentStart);
+    } else rec.displayEnd = f.j;
   };
-  const limitAt = valueLimits(s, creds);
   let i = 0;
   while (i < n) {
     if (!s.budget.tick()) {
       s.unfinished = Math.min(s.unfinished, i);
       break;
     }
-    const len = httpHeadAt(t, i);
-    if (!len) {
+    const top = headAt(s, i, 0);
+    if (!top) {
       i++;
       continue;
     }
-    if (placeholderAt(t, i + len) > 0) {
-      i++;
-      continue;
-    }
-    const limit = limitAt(i);
-    const end = limit >= 0 ? limit : n;
-    let j = i + len;
-    let lastAt = -1;
-    let k = i + len;
-    for (; k < end && !stops.has(k) && !AUTHORITY_END.has(t[k]); k++) {
-      if (t[k] === "[") {
-        const b = bracketSpan(t, k, end);
-        if (!b.len) {
-          s.budget.tick(b.scanned);
-          break;
-        }
-        k += b.len - 1;
-        continue;
+    const stack = [open(top)];
+    while (stack.length) {
+      const f = stack[stack.length - 1];
+      const j = f.j;
+      if (!s.budget.tick()) {
+        s.unfinished = Math.min(s.unfinished, j);
+        f.j = n;
       }
-      if (LINK_END(t[k])) break;
-      if (t[k] === "@") lastAt = k;
-    }
-    s.budget.tick(k - (i + len));
-    const ipl = lastAt >= 0 ? 0 : ipLiteralAt(s, j);
-    if (ipl && j + ipl <= end && !spanHasStop(stops, j, j + ipl)) j += ipl;
-    let inAuthority = true;
-    while (j < end && !LINK_END(t[j]) && !stops.has(j)) {
-      if (AUTHORITY_END.has(t[j])) inAuthority = false;
-      if (t[j] === "[") {
-        const host = inAuthority && j - 1 === lastAt ? ipLiteralAt(s, j) : 0;
-        if (!host || j + host > end || spanHasStop(stops, j, j + host)) break;
-        j += host;
+      const atom = j < n ? placeholderAt(t, j) : 0;
+      if (atom && f.rec.kind === "proxy") {
+        f.j = j + atom;
         continue;
       }
-      j++;
+      let ended = j >= n || isWs(t[j]) || isNonAscii(s, j) || isExtraEnd(t[j], f.rec.extra);
+      if (!ended && !f.kiT62) {
+        const c = t[j];
+        if (c === '"' || c === ">" || !f.encoded && c === "'") ended = true;
+        else if (atom) ended = true;
+      }
+      if (!ended) {
+        const child = headAt(s, j, f.rec.extra);
+        if (child && child.start >= f.rec.contentStart) {
+          stack.push(open(child));
+          continue;
+        }
+        const u = unitAt(t, j, f.encoded);
+        if (u.ch === "(") f.paren++;
+        else if (u.ch === "[") f.bracket++;
+        else if (u.ch === ")" || u.ch === "]") {
+          const isParen = u.ch === ")";
+          const count = isParen ? f.paren : f.bracket;
+          if (count > 0) {
+            if (isParen) f.paren--;
+            else f.bracket--;
+          } else if (!u.encodedChar && !f.kiT62) ended = true;
+        }
+        if (!ended) {
+          f.j = j + u.len;
+          continue;
+        }
+      }
+      f.j = Math.min(f.j, n);
+      close(f);
+      stack.pop();
+      const parent = stack[stack.length - 1];
+      if (parent) {
+        parent.j = Math.max(parent.j, f.rec.scanEnd);
+        parent.paren += f.paren;
+        parent.bracket += f.bracket;
+      }
     }
-    s.budget.tick(j - i);
-    if (j > i + len) {
-      out.push({ index: i, end: j });
-      i = j;
-    } else i++;
+    i = Math.max(top.scanEnd, i + 1);
+  }
+  out.sort((a, b) => a.start - b.start);
+  s.links = out;
+  return out;
+}
+function linkStartingAt(s, pos) {
+  const links = s.links;
+  if (!links || links.length === 0) return null;
+  let lo = 0, hi = links.length - 1;
+  while (lo <= hi) {
+    const mid = lo + hi >> 1;
+    if (links[mid].start < pos) lo = mid + 1;
+    else hi = mid - 1;
+  }
+  s.budget.tick(Math.ceil(Math.log2(links.length + 1)) + 1);
+  const r = links[lo];
+  return r && r.start === pos && r.displayEnd > r.contentStart ? r : null;
+}
+function userinfoHasContent(s, from, end, encoded) {
+  const t = s.text;
+  s.budget.tick(end - from);
+  for (let k = from; k < end; ) {
+    const a = placeholderAt(t, k);
+    if (a > 0 && k + a <= end) {
+      k += a;
+      continue;
+    }
+    const u = unitAt(t, k, encoded);
+    if (u.ch !== ":") return true;
+    k += u.len;
+  }
+  return false;
+}
+
+// ../redact/index.ts
+var isAlnumCode2 = (x) => x >= 48 && x <= 57 || x >= 65 && x <= 90 || x >= 97 && x <= 122;
+var isWordCode = (x) => isAlnumCode2(x) || x === 95;
+var isTokenCode = (x) => isWordCode(x) || x === 45;
+var isHexCode2 = (x) => x >= 48 && x <= 57 || x >= 65 && x <= 70 || x >= 97 && x <= 102;
+function stopPositions(s) {
+  return /* @__PURE__ */ new Set([...proseNamedHits(s).map((h) => h.index), ...inviteSpans(s).map((h) => h.index)]);
+}
+var linkedCreds = /* @__PURE__ */ new WeakMap();
+var isSeparatorEnd = (s, pos) => pos < s.n && (s.text[pos] === "&" || s.text[pos] === "#" || s.text[pos] === ";" || CJK_STOPS.includes(s.text[pos]));
+function credSpans(s) {
+  const hit = linkedCreds.get(s);
+  if (hit) return hit;
+  const creds = urlCredentialSpans(s).map((sp) => ({ index: sp.index, end: sp.end }));
+  const recs = [];
+  for (const r of s.links) recs.push({ start: r.start, end: r.displayEnd, userinfo: r.userinfo, socks: false });
+  for (const k of socksScan(s)) recs.push({ start: k.start, end: k.authEnd, userinfo: k.userinfo, socks: true });
+  recs.sort((a, b) => a.start - b.start);
+  let ci = 0;
+  for (const r of recs) {
+    s.budget.tick();
+    while (ci < creds.length && creds[ci].end <= r.start) ci++;
+    const c = creds[ci];
+    if (!c || c.index > r.start || r.end <= c.end) continue;
+    const u = r.userinfo;
+    const crossesUserinfo = u !== null && u.index <= c.end && c.end < u.end;
+    if (crossesUserinfo || !r.socks && !isSeparatorEnd(s, c.end)) c.end = contentDisplayEnd(s, r.end);
   }
+  const out = mergeSpans(creds, false);
+  linkedCreds.set(s, out);
   return out;
 }
+function valueLimits(s) {
+  const creds = credSpans(s);
+  let k = 0;
+  return (pos) => {
+    while (k < creds.length && creds[k].end <= pos) k++;
+    return k < creds.length && creds[k].index <= pos ? creds[k].end : -1;
+  };
+}
+function mergeSpans(spans, touching) {
+  const out = [];
+  for (const sp of [...spans].sort((a, b) => a.index - b.index || b.end - a.end)) {
+    const last = out[out.length - 1];
+    if (last && (sp.index < last.end || touching && sp.index === last.end)) last.end = Math.max(last.end, sp.end);
+    else if (sp.end > sp.index) out.push({ index: sp.index, end: sp.end });
+  }
+  return out;
+}
+function urlSpans(s) {
+  const limitAt = valueLimits(s);
+  const out = [];
+  for (const r of s.links) {
+    if (r.kind === "proxy" || !r.displayable || r.displayEnd <= r.contentStart) continue;
+    s.budget.tick();
+    const lim = limitAt(r.start);
+    out.push({ index: r.start, end: lim >= 0 ? Math.min(r.displayEnd, lim) : r.displayEnd });
+  }
+  return mergeSpans(out, true);
+}
 function userinfoSpans(s) {
+  const out = [];
+  for (const r of s.links) {
+    const u = r.userinfo;
+    if (u && u.end > u.index && userinfoHasContent(s, u.index, u.end, r.depth)) out.push({ index: u.index, end: u.end });
+  }
+  for (const k of socksScan(s)) if (k.userinfo && userinfoHasContent(s, k.userinfo.index, k.userinfo.end, 0)) out.push({ ...k.userinfo });
+  return mergeSpans(out, false);
+}
+var socksScans = /* @__PURE__ */ new WeakMap();
+function socksScan(s) {
+  const hit = socksScans.get(s);
+  if (hit) return hit;
   const t = s.text;
   const n = s.n;
   const out = [];
@@ -884,51 +1089,28 @@ function userinfoSpans(s) {
       s.unfinished = Math.min(s.unfinished, i);
       break;
     }
-    const len = userinfoHeadAt(t, i);
+    const len = socksHeadAt(t, i);
     if (!len) {
       i++;
       continue;
     }
     const from = i + len;
-    if (!httpHeadAt(t, i)) {
-      let j2 = from;
-      let at2 = -1;
-      while (j2 < n && !isWs(t[j2]) && t[j2] !== "?" && t[j2] !== "#") {
-        if (t[j2] === "@") at2 = j2;
-        j2++;
-      }
-      s.budget.tick(j2 - i);
-      if (at2 > from && userinfoHasContent(s, from, at2)) out.push({ index: from, end: at2 });
-      i = j2 > from ? j2 : from;
-      continue;
-    }
     let j = from;
     let at = -1;
-    while (j < n && !isWs(t[j]) && t[j] !== "/" && t[j] !== "?" && t[j] !== "#") {
+    const lead = placeholderAt(t, j);
+    if (lead) j += lead;
+    while (j < n && !isWs(t[j]) && t[j] !== "?" && t[j] !== "#" && placeholderAt(t, j) === 0 && !(lead && s.raw.charCodeAt(j) > 127)) {
       if (t[j] === "@") at = j;
       j++;
     }
     s.budget.tick(j - i);
-    if (at > from && userinfoHasContent(s, from, at)) out.push({ index: from, end: at });
-    i = from;
+    out.push({ start: i, userinfo: at > from ? { index: from, end: at } : null, authEnd: j });
+    i = j > from ? j : from;
   }
+  socksScans.set(s, out);
   return out;
 }
-function userinfoHasContent(s, from, end) {
-  const t = s.text;
-  s.budget.tick(end - from);
-  for (let k = from; k < end; ) {
-    const a = placeholderAt(t, k);
-    if (a > 0 && k + a <= end) {
-      k += a;
-      continue;
-    }
-    if (t[k] !== ":") return true;
-    k++;
-  }
-  return false;
-}
-var SUB_END = (c) => isWs(c) || c === ")" || c === "]" || c === ">" || c === '"' || c === "'";
+var KEYWORD_VALUE_END = (c) => isWs(c) || c === ")" || c === "]" || c === ">" || c === '"' || c === "'";
 function subscriptionKeywordEnd(t, i) {
   if (i > 0 && isWordCode(t.charCodeAt(i - 1))) return -1;
   const c = t[i];
@@ -950,84 +1132,58 @@ function subscriptionSpans(s) {
   const t = s.text;
   const n = s.n;
   const cands = [];
+  const proxies = [];
+  const proxyLimit = valueLimits(s);
+  for (const r of s.links) {
+    if (r.kind !== "proxy" || r.displayEnd <= r.contentStart) continue;
+    s.budget.tick();
+    const lim = proxyLimit(r.start);
+    proxies.push({ index: r.start, end: lim >= 0 ? Math.min(r.displayEnd, lim) : r.displayEnd });
+  }
+  for (const sp of proxies) cands.push(sp);
   const stops = stopPositions(s);
   const limitAt = valueLimits(s);
   const endAt = (pos) => {
     const l = limitAt(pos);
     return l >= 0 ? l : n;
   };
-  const extend = (from, end) => {
-    let j = from;
-    while (j < end && !SUB_END(t[j]) && !stops.has(j)) j++;
-    s.budget.tick(j - from + 1);
-    return j;
-  };
-  const extendNoStops = (from, end) => {
-    let j = from;
-    while (j < end && !SUB_END(t[j]) && !CJK_STOPS.includes(t[j])) j++;
-    s.budget.tick(j - from + 1);
-    return j;
-  };
-  const authorityAt = (from, end) => {
-    let j = from, at = -1;
-    while (j < end && !isWs(t[j]) && t[j] !== "/" && t[j] !== "?" && t[j] !== "#") {
-      if (t[j] === "@") at = j;
-      j++;
-    }
-    s.budget.tick(j - from + 1);
-    return at;
-  };
-  const extendNoAt = (from, end) => {
-    let j = from;
-    while (j < end && !isWs(t[j]) && !CJK_STOPS.includes(t[j])) j++;
-    const scanned = j - from;
-    while (j > from && SUB_END(t[j - 1])) j--;
-    s.budget.tick(scanned * 2 + 1);
-    return j;
-  };
-  const proxyExtend = (from, end) => {
-    const at = authorityAt(from, end);
-    return at < 0 ? extendNoAt(from, end) : extendNoStops(at + 1, end);
-  };
+  let p = 0;
   let i = 0;
   while (i < n) {
     if (!s.budget.tick()) {
       s.unfinished = Math.min(s.unfinished, i);
       break;
     }
-    if (t[i] === ":" && t[i + 1] === "/" && t[i + 2] === "/") {
-      const start = proxySchemeStart(t, i);
-      s.budget.tick(9);
-      if (start >= 0) {
-        const j = proxyExtend(i + 3, endAt(i));
-        if (j > i + 3) {
-          cands.push({ index: start, end: j });
-          i = j;
-          continue;
-        }
-      }
-      i++;
+    while (p < proxies.length && proxies[p].end <= i) p++;
+    if (p < proxies.length && proxies[p].index <= i) {
+      i = proxies[p].end;
       continue;
     }
     const kw = subscriptionKeywordEnd(t, i);
-    if (kw >= 0) {
-      const j = extend(kw, endAt(i));
-      cands.push({ index: i, end: j });
-      i = j;
+    if (kw < 0) {
+      i++;
       continue;
     }
-    i++;
+    const end = endAt(i);
+    let q = kw;
+    while (q < end && isInlineWs(t[q])) q++;
+    if (q < end && (t[q] === "=" || t[q] === ":" || t[q] === "\uFF1A")) {
+      q++;
+      while (q < end && isInlineWs(t[q])) q++;
+    }
+    s.budget.tick(q - kw + 1);
+    const link = linkStartingAt(s, q);
+    let j;
+    if (link) j = Math.min(link.displayEnd, end);
+    else {
+      j = kw;
+      while (j < end && !KEYWORD_VALUE_END(t[j]) && !stops.has(j)) j++;
+      s.budget.tick(j - kw + 1);
+    }
+    cands.push({ index: i, end: j });
+    i = Math.max(j, i + 1);
   }
-  return disjoint(cands);
-}
-function disjoint(spans) {
-  const out = [];
-  let last = -1;
-  for (const sp of [...spans].sort((a, b) => a.index - b.index)) if (sp.index >= last && sp.end > sp.index) {
-    out.push(sp);
-    last = sp.end;
-  }
-  return out;
+  return mergeSpans(cands, false);
 }
 var REGISTERED_ERROR_CODE = /^(?:INSTALL_FAILED|INSTALL_PARSE_FAILED|ERR)(?:_[A-Z]{2,})+$/;
 function tokenSpans(s) {
@@ -1159,15 +1315,22 @@ function inviteSpans(s) {
   s.invites = out;
   return out;
 }
+function emailSpans(s) {
+  const seps = /* @__PURE__ */ new Set();
+  for (const r of s.links) if (r.userinfo) seps.add(r.userinfo.end);
+  for (const k of socksScan(s)) if (k.userinfo) seps.add(k.userinfo.end);
+  if (seps.size === 0) return EMAIL(s);
+  return EMAIL(s).filter((sp) => !seps.has(s.text.indexOf("@", sp.index)));
+}
 var RULES = [
   ["subscription", subscriptionSpans],
   ["url", urlSpans],
-  ["email", EMAIL],
+  ["email", emailSpans],
   ["uuid", UUID],
   ["ipv6", IPV6],
   ["ipv4", IPV4],
   ["token", tokenSpans],
-  ["urlcred", urlCredentialSpans],
+  ["urlcred", credSpans],
   ["userinfo", userinfoSpans],
   ["invite", inviteSpans],
   ["config", configRegions]
@@ -1179,7 +1342,8 @@ function foldFullwidth(text) {
   return text.replace(/[\uFF10-\uFF19\uFF21-\uFF3A\uFF41-\uFF5A\uFF1D]/g, (ch) => String.fromCharCode(ch.charCodeAt(0) - 65248));
 }
 function sensitiveMatches(text, opts = {}) {
-  const s = newScan(foldFullwidth(text), opts.budget);
+  const s = newScan(foldFullwidth(text), opts.budget, text);
+  linkTable(s);
   const out = [];
   let exhaustedAt = -1;
   for (let order = 0; order < RULES.length; order++) {
@@ -1235,7 +1399,7 @@ function redactSensitive(text, mask, opts = {}) {
 var SECRET_RULES = /* @__PURE__ */ new Set(["token", "urlcred", "userinfo", "subscription", "ipv4", "ipv6", "invite", "config", "uuid", "email"]);
 var SHORT_WORD_KEBAB = /^[a-z0-9]+(?:-[a-z0-9]+)+$/;
 function isKnownFalsePositive(m) {
-  if (m.rule === "subscription") return /^subscri/i.test(m.text) && !m.text.includes("://");
+  if (m.rule === "subscription") return /^subscri/i.test(m.text) && !hasSchemeSeparator(m.text);
   if (m.rule === "token") return SHORT_WORD_KEBAB.test(m.text) && m.text.split("-").every((p) => p.length <= 16);
   return false;
 }
@@ -1266,7 +1430,7 @@ var USAGE_RULES = [
   `   - \u4E0E\u77E5\u8BC6\u5E93\u76F8\u90BB\u4F46\u523B\u610F\u4E0D\u505A\u2014\u2014${ADJACENT_SCOPE.join("\uFF1B")}\u2014\u2014\u4E0D\u4F5C\u7B54\uFF0C\u4E5F\u4E0D\u7528\u81EA\u5DF1\u7684\u77E5\u8BC6\u8865\uFF0C\u53EA\u56DE\u7B54\u300C${OUT_OF_SCOPE_REPLY}\u300D\u3002\u8FD9\u6761\u4F18\u5148\u4E8E\u524D\u9762\u4E09\u79CD\u56DE\u7B54\uFF1A\u5373\u4F7F\u76EE\u5F55\u91CC\u6709\u770B\u8D77\u6765\u76F8\u5173\u7684\u6761\u76EE\uFF0C\u4E5F\u4E0D\u6309\u6761\u76EE\u4F5C\u7B54\u3001\u4E0D\u90E8\u5206\u4F5C\u7B54\u3001\u4E0D\u81EA\u7B54\uFF1B\u76F8\u90BB\u95EE\u9898\u4E0D\u8D70\u300C\u6CA1\u6709\u6761\u76EE\u80FD\u56DE\u7B54\u300D\u90A3\u6761\u8DEF\uFF0C\u5E26\u4E0A\u300C${NOT_KB_LABEL}\u300D\u6807\u6CE8\u81EA\u7B54\u540C\u6837\u4E0D\u884C\u3002`,
   "5. \u4E0D\u56DE\u663E\u8BA2\u9605\u94FE\u63A5\u3001\u5BC6\u94A5\u3001\u8282\u70B9 IP\uFF0C\u622A\u56FE\u91CC\u7684\u4E5F\u4E00\u6837\uFF1B\u53EA\u94FE\u63A5\u6761\u76EE\u91CC\u5217\u51FA\u7684\u5B98\u65B9\u6765\u6E90\u548C\u672C\u77E5\u8BC6\u5E93\u4E3B\u7AD9\u4E0A\u7684\u6761\u76EE\u9875\u9762\uFF1B\u6807\u4E3A\u300C\u4FE1\u606F\u8BF4\u660E\u300D\u7684\u6761\u76EE\u4E0D\u7ED9\u64CD\u4F5C\u6B65\u9AA4\u3002"
 ].join("\n");
-var SKILL_DESCRIPTION = `\u4E2D\u7ACB\u7684\u4EE3\u7406\u5BA2\u6237\u7AEF\u77E5\u8BC6\u5E93\u3002\u7528\u6237\u95EE Clash Verge Rev\u3001Clash Party\u3001FlClash\u3001v2rayN\u3001v2rayNG\u3001Clash Meta for Android\u3001sing-box\u3001Karing\u3001Shadowrocket \u7B49\u4EE3\u7406\u5BA2\u6237\u7AEF\u6216 mihomo\u3001Xray \u5185\u6838\u7684\u95EE\u9898\u65F6\u4F7F\u7528\uFF1A\u8BA2\u9605\u3001\u8282\u70B9\u3001\u534F\u8BAE\u3001\u5206\u6D41\u89C4\u5219\u3001TUN\uFF08\u865A\u62DF\u7F51\u5361\uFF09\u3001\u7CFB\u7EDF\u4EE3\u7406\u662F\u4EC0\u4E48\uFF0C\u5BA2\u6237\u7AEF\u4E0E\u5185\u6838\u7684\u7248\u672C\u3001\u66F4\u65B0\u3001\u4E0B\u8F7D\uFF08\u542B\u9884\u53D1\u5E03\u4E0E autobuild\uFF09\u600E\u4E48\u9009\uFF0C\u60F3\u5B8C\u6210\u5BFC\u5165\u8BA2\u9605\u3001\u5207\u6362\u8282\u70B9\u7B49\u64CD\u4F5C\uFF0C\u6216\u9047\u5230\u8282\u70B9\u4E3A\u7A7A\u3001\u8BA2\u9605\u66F4\u65B0\u5931\u8D25\u3001\u8FDE\u4E0A\u4F46\u6253\u4E0D\u5F00\u7F51\u9875\u7B49\u95EE\u9898\uFF08\u9644\u622A\u56FE\u6C42\u52A9\u4E5F\u7B97\uFF09\uFF1B\u7528\u6237\u95EE${ADJACENT_SCOPE.join("\u3001")}\u65F6\u540C\u6837\u4F7F\u7528\uFF08\u6309\u89C4\u5219\u53EA\u56DE\u4E00\u53E5\u56FA\u5B9A\u8BDD\uFF09\u3002\u53EA\u8BFB\uFF0C\u4E0D\u8BFB\u53D6\u7528\u6237\u673A\u5668\u72B6\u6001\uFF0C\u4E0D\u5199\u5165\u3002`;
+var SKILL_DESCRIPTION = `\u4EE3\u7406\u5BA2\u6237\u7AEF\u77E5\u8BC6\u5E93\u3002\u7528\u6237\u95EE Clash Verge Rev\u3001Clash Party\u3001FlClash\u3001v2rayN\u3001v2rayNG\u3001Clash Meta for Android\u3001sing-box\u3001Karing\u3001Shadowrocket \u7B49\u4EE3\u7406\u5BA2\u6237\u7AEF\u6216 mihomo\u3001Xray \u5185\u6838\u7684\u95EE\u9898\u65F6\u4F7F\u7528\uFF1A\u8BA2\u9605\u3001\u8282\u70B9\u3001\u534F\u8BAE\u3001\u5206\u6D41\u89C4\u5219\u3001TUN\uFF08\u865A\u62DF\u7F51\u5361\uFF09\u3001\u7CFB\u7EDF\u4EE3\u7406\u662F\u4EC0\u4E48\uFF0C\u5BA2\u6237\u7AEF\u4E0E\u5185\u6838\u7684\u7248\u672C\u3001\u66F4\u65B0\u3001\u4E0B\u8F7D\uFF08\u542B\u9884\u53D1\u5E03\u4E0E autobuild\uFF09\u600E\u4E48\u9009\uFF0C\u60F3\u5B8C\u6210\u5BFC\u5165\u8BA2\u9605\u3001\u5207\u6362\u8282\u70B9\u7B49\u64CD\u4F5C\uFF0C\u6216\u9047\u5230\u8282\u70B9\u4E3A\u7A7A\u3001\u8BA2\u9605\u66F4\u65B0\u5931\u8D25\u3001\u8FDE\u4E0A\u4F46\u6253\u4E0D\u5F00\u7F51\u9875\u7B49\u95EE\u9898\uFF08\u9644\u622A\u56FE\u6C42\u52A9\u4E5F\u7B97\uFF09\uFF1B\u7528\u6237\u95EE${ADJACENT_SCOPE.join("\u3001")}\u65F6\u540C\u6837\u4F7F\u7528\uFF08\u6309\u89C4\u5219\u53EA\u56DE\u4E00\u53E5\u56FA\u5B9A\u8BDD\uFF09\u3002\u53EA\u8BFB\uFF0C\u4E0D\u8BFB\u53D6\u7528\u6237\u673A\u5668\u72B6\u6001\uFF0C\u4E0D\u5199\u5165\u3002`;
 
 // ../runtime-core/src/mcp.ts
 function siteOriginOf(manifest) {
@@ -1712,6 +1876,20 @@ async function createStdioServer(deps, io) {
 // src/exit.ts
 var FALLBACK = "\u52A0\u8F7D\u6216\u8FD0\u884C\u5931\u8D25\uFF08\u8BE6\u60C5\u4E0D\u56DE\u663E\uFF09";
 var FLUSH_TIMEOUT_MS = 2e3;
+async function flushStreams(streams, timer, clear) {
+  for (const st of streams) {
+    if (st.writableEnded || st.destroyed) continue;
+    await new Promise((resolve) => {
+      const done = timer(resolve, FLUSH_TIMEOUT_MS);
+      const finish = () => {
+        clear(done);
+        resolve();
+      };
+      st.write("", finish);
+      st.once("error", finish);
+    });
+  }
+}
 function makeFail(raw) {
   const deps = {
     ...raw,
@@ -1726,18 +1904,7 @@ function makeFail(raw) {
     } catch {
     }
     deps.error(msg);
-    for (const st of deps.streams) {
-      if (st.writableEnded || st.destroyed) continue;
-      await new Promise((resolve) => {
-        const done = deps.timer(resolve, FLUSH_TIMEOUT_MS);
-        const finish = () => {
-          deps.clear(done);
-          resolve();
-        };
-        st.write("", finish);
-        st.once("error", finish);
-      });
-    }
+    await flushStreams(deps.streams, deps.timer, deps.clear);
   };
   return (e) => {
     if (exiting) return exiting;