@miller-tech/uap 1.128.2 → 1.129.0

package/dist/delivery/snapshot.d.ts

@@ -3,11 +3,15 @@
  *
  * Captures the project state before the convergence loop runs so deliver can
  * roll back if it ends up worse (by the real gates' measure) than it started.
- * Excludes heavy/derived DIRECTORIES (.git, node_modules, target, .venv, …):
- * they aren't part of the task's source and would make snapshots slow. The
- * contract is symmetric — an excluded directory is neither snapshotted nor
- * touched by restore, at any depth. Files sharing an excluded name (e.g. a
- * script called `build`) are snapshotted normally.
+ * Two classes of entry are excluded, with a SYMMETRIC contract (neither
+ * snapshotted nor touched by restore, at any depth):
+ *  - heavy/derived DIRECTORIES (.git, node_modules, target, .venv, …) — not
+ *    part of the task's source, and copying them is what melted a machine;
+ *  - secret-bearing FILES (.env*, keys, certs) — they must not persist in
+ *    snapshot storage under ~/.cache, so they are never copied and rollback
+ *    leaves them exactly as they are.
+ * Files merely sharing an excluded directory name (a script called `build`)
+ * are snapshotted normally.
  *
  * Hardening (2026-07-08, after the project-i incident where a 424 GB Rust
  * `target/` tree was copied into a 61 GB RAM tmpfs):
@@ -15,17 +19,27 @@
  *    overrides — absolute paths only), never os.tmpdir(), which is RAM-backed
  *    on many Linux setups;
  *  - the source tree is size-guarded before copying (UAP_SNAPSHOT_MAX_MB,
- *    default 4096) — over the cap, snapshotTree returns null and the caller
+ *    default 4096) — over the cap the snapshot is skipped and the caller
  *    degrades to "no rollback this run" instead of exhausting the machine;
- *  - snapshotTree never throws: any failure cleans up its partial copy and
- *    returns null;
+ *  - snapshotTree never throws: it returns a discriminated SnapshotResult and
+ *    any failure cleans up its partial copy (presentation belongs to callers);
  *  - restoreTree validates the snapshot before touching the project, restores
  *    copy-first (prune extras, then merge back) so an interrupted restore
  *    never leaves a gutted tree, and marks the snapshot preserve-on-failure
  *    so the reaper won't collect the only good copy;
- *  - each snapshot carries a pid marker; stale snapshots from dead processes
- *    (crashes, SIGKILL, ENOSPC mid-copy) are reaped before a new one is taken.
+ *  - each snapshot carries a pid+host marker; stale snapshots from dead
+ *    processes are reaped before a new one is taken, and markers from other
+ *    hosts / pid namespaces (shared $HOME, containers) are never judged by
+ *    local pid liveness — only by the 7-day age backstop.
  */
+export type SnapshotResult = {
+    ok: true;
+    path: string;
+} | {
+    ok: false;
+    reason: 'size-cap' | 'error';
+    detail: string;
+};
 /** Disk-backed base directory for snapshots (never os.tmpdir — often RAM tmpfs). */
 export declare function snapshotBaseDir(): string;
 /**
@@ -36,18 +50,18 @@ export declare function snapshotBaseDir(): string;
  */
 export declare function reapStaleSnapshots(): void;
 /**
- * Copy the project tree (minus excluded dirs) to a disk-backed snapshot dir.
- * Returns the snapshot path, or null when the snapshot is skipped (tree over
- * the size cap) or fails for any reason — callers must treat null as "no
- * rollback available for this run", not as an error. Never throws.
+ * Copy the project tree (minus excluded entries) to a disk-backed snapshot
+ * dir. Never throws and never logs — callers decide presentation from the
+ * discriminated result. `ok: false` means "no rollback available for this
+ * run", not a fatal error.
  */
-export declare function snapshotTree(root: string): string | null;
+export declare function snapshotTree(root: string): SnapshotResult;
 /**
  * Restore the project tree from a snapshot. Validates the snapshot BEFORE
  * touching the project, then prunes extras and merge-copies the snapshot
  * back — copy-first ordering so an interruption leaves a recoverable union
  * of both trees, never a gutted project. On failure the snapshot is marked
- * preserve (reaper-immune) and the error is rethrown.
+ * preserve (reaper-immune) and the error is rethrown; callers own logging.
  */
 export declare function restoreTree(root: string, snap: string): void;
 /** Remove a snapshot directory. */

package/dist/delivery/snapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/delivery/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA8EH,oFAAoF;AACpF,wBAAgB,eAAe,IAAI,MAAM,CAOxC;AA8ED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAoBzC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiCxD;AAmCD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAuB5D;AAED,mCAAmC;AACnC,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD"}
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/delivery/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AA0EH,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAuBhE,oFAAoF;AACpF,wBAAgB,eAAe,IAAI,MAAM,CAOxC;AAwFD;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAoBzC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAkCzD;AAoED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CA2B5D;AAED,mCAAmC;AACnC,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD"}

package/dist/delivery/snapshot.js

@@ -3,11 +3,15 @@
  *
  * Captures the project state before the convergence loop runs so deliver can
  * roll back if it ends up worse (by the real gates' measure) than it started.
- * Excludes heavy/derived DIRECTORIES (.git, node_modules, target, .venv, …):
- * they aren't part of the task's source and would make snapshots slow. The
- * contract is symmetric — an excluded directory is neither snapshotted nor
- * touched by restore, at any depth. Files sharing an excluded name (e.g. a
- * script called `build`) are snapshotted normally.
+ * Two classes of entry are excluded, with a SYMMETRIC contract (neither
+ * snapshotted nor touched by restore, at any depth):
+ *  - heavy/derived DIRECTORIES (.git, node_modules, target, .venv, …) — not
+ *    part of the task's source, and copying them is what melted a machine;
+ *  - secret-bearing FILES (.env*, keys, certs) — they must not persist in
+ *    snapshot storage under ~/.cache, so they are never copied and rollback
+ *    leaves them exactly as they are.
+ * Files merely sharing an excluded directory name (a script called `build`)
+ * are snapshotted normally.
  *
  * Hardening (2026-07-08, after the project-i incident where a 424 GB Rust
  * `target/` tree was copied into a 61 GB RAM tmpfs):
@@ -15,21 +19,25 @@
  *    overrides — absolute paths only), never os.tmpdir(), which is RAM-backed
  *    on many Linux setups;
  *  - the source tree is size-guarded before copying (UAP_SNAPSHOT_MAX_MB,
- *    default 4096) — over the cap, snapshotTree returns null and the caller
+ *    default 4096) — over the cap the snapshot is skipped and the caller
  *    degrades to "no rollback this run" instead of exhausting the machine;
- *  - snapshotTree never throws: any failure cleans up its partial copy and
- *    returns null;
+ *  - snapshotTree never throws: it returns a discriminated SnapshotResult and
+ *    any failure cleans up its partial copy (presentation belongs to callers);
  *  - restoreTree validates the snapshot before touching the project, restores
  *    copy-first (prune extras, then merge back) so an interrupted restore
  *    never leaves a gutted tree, and marks the snapshot preserve-on-failure
  *    so the reaper won't collect the only good copy;
- *  - each snapshot carries a pid marker; stale snapshots from dead processes
- *    (crashes, SIGKILL, ENOSPC mid-copy) are reaped before a new one is taken.
+ *  - each snapshot carries a pid+host marker; stale snapshots from dead
+ *    processes are reaped before a new one is taken, and markers from other
+ *    hosts / pid namespaces (shared $HOME, containers) are never judged by
+ *    local pid liveness — only by the 7-day age backstop.
  */
 import { cpSync, rmSync, mkdtempSync, mkdirSync, readdirSync, readFileSync, writeFileSync, lstatSync, statSync, } from 'fs';
 import { join, basename, isAbsolute, resolve } from 'path';
-import { tmpdir, homedir } from 'os';
+import { tmpdir, homedir, hostname } from 'os';
 const EXCLUDE = new Set([
+    // A DIRECTORY named .env is almost always a python venv, never source.
+    '.env',
     // VCS / UAP-internal
     '.git',
     '.worktrees',
@@ -60,20 +68,34 @@ const EXCLUDE = new Set([
     '.ruff_cache',
     '.tox',
 ]);
+/**
+ * Secret-bearing file names that must never be copied into snapshot storage.
+ * Kept symmetric with restore: these files are also never pruned or
+ * overwritten by a rollback. Committed env TEMPLATES (.env.example etc.) are
+ * carved out — they contain no secrets and should roll back like source.
+ */
+function isSecretName(name) {
+    if (/^\.env(\..+)?$/i.test(name))
+        return !/^\.env\.(example|sample|template|dist)$/i.test(name);
+    return /^\.npmrc$|^\.netrc$|\.(pem|key|p12|pfx)$|^id_(rsa|dsa|ecdsa(_sk)?|ed25519(_sk)?)$/i.test(name);
+}
 /** Marker written inside each snapshot so the reaper can tell live from stale. */
 const META_FILE = '.uap-snap.json';
 const SNAP_PREFIX = 'uap-snap-';
 /** Age past which a marker-less (legacy/partial) snapshot is considered stale. */
 const LEGACY_STALE_MS = 24 * 60 * 60 * 1000;
-/** Backstop against pid reuse pinning a dead snapshot forever. */
+/** Backstop against pid reuse (and the only signal for foreign-host markers). */
 const MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 const DEFAULT_MAX_MB = 4096;
-/** True for a directory whose name marks it as derived/heavy (dir-only contract). */
-function isExcludedDir(path, name) {
-    if (!EXCLUDE.has(name))
+/** True when the entry must be skipped by snapshot, prune, and size walk alike. */
+function isExcludedEntry(path, name) {
+    const secretName = isSecretName(name);
+    const dirName = EXCLUDE.has(name);
+    if (!secretName && !dirName)
         return false;
     try {
-        return lstatSync(path).isDirectory();
+        const isDir = lstatSync(path).isDirectory();
+        return isDir ? dirName : secretName;
     }
     catch {
         return false;
@@ -93,9 +115,9 @@ function maxSnapshotBytes() {
     return (Number.isFinite(mb) && mb > 0 ? mb : DEFAULT_MAX_MB) * 1024 * 1024;
 }
 /**
- * Sum file sizes under root (skipping excluded dirs and symlinks), bailing out
- * as soon as the running total exceeds `limit` so huge trees cost one early
- * partial walk, not a full traversal.
+ * Sum file sizes under root (skipping excluded entries and symlinks), bailing
+ * out as soon as the running total exceeds `limit` so huge trees cost one
+ * early partial walk, not a full traversal.
  */
 function treeSizeExceeds(root, limit) {
     let total = 0;
@@ -125,6 +147,8 @@ function treeSizeExceeds(root, limit) {
                     stack.push(path);
             }
             else {
+                if (isSecretName(name))
+                    continue;
                 total += st.size;
                 if (total > limit)
                     return true;
@@ -154,10 +178,20 @@ function isStaleSnapshot(path) {
         const meta = JSON.parse(readFileSync(metaPath, 'utf-8'));
         if (meta.preserve === true)
             return false;
+        const created = Date.parse(meta.created ?? '');
+        const expired = Number.isFinite(created) && Date.now() - created > MAX_AGE_MS;
+        // A marker from another host or pid namespace (shared $HOME, container):
+        // local pid liveness says nothing about it — age is the only safe signal.
+        // Without a parseable created field, fall back to dir mtime so a garbled
+        // foreign marker can't pin its snapshot forever.
+        if (typeof meta.host === 'string' && meta.host !== hostname()) {
+            if (Number.isFinite(created))
+                return expired;
+            return Date.now() - statSync(path).mtimeMs > MAX_AGE_MS;
+        }
         if (!Number.isInteger(meta.pid) || meta.pid <= 1)
             return true;
-        const created = Date.parse(meta.created ?? '');
-        if (Number.isFinite(created) && Date.now() - created > MAX_AGE_MS)
+        if (expired)
             return true;
         return !pidAlive(meta.pid);
     }
@@ -206,10 +240,10 @@ export function reapStaleSnapshots() {
     }
 }
 /**
- * Copy the project tree (minus excluded dirs) to a disk-backed snapshot dir.
- * Returns the snapshot path, or null when the snapshot is skipped (tree over
- * the size cap) or fails for any reason — callers must treat null as "no
- * rollback available for this run", not as an error. Never throws.
+ * Copy the project tree (minus excluded entries) to a disk-backed snapshot
+ * dir. Never throws and never logs — callers decide presentation from the
+ * discriminated result. `ok: false` means "no rollback available for this
+ * run", not a fatal error.
  */
 export function snapshotTree(root) {
     let snap;
@@ -217,39 +251,73 @@ export function snapshotTree(root) {
         reapStaleSnapshots();
         const limit = maxSnapshotBytes();
         if (treeSizeExceeds(root, limit)) {
-            console.warn(`  no-regress: snapshot skipped — project tree exceeds ${Math.round(limit / (1024 * 1024))} MB ` +
-                '(raise UAP_SNAPSHOT_MAX_MB to override)');
-            return null;
+            return {
+                ok: false,
+                reason: 'size-cap',
+                detail: `project tree exceeds ${Math.round(limit / (1024 * 1024))} MB (raise UAP_SNAPSHOT_MAX_MB to override)`,
+            };
         }
         snap = mkdtempSync(join(snapshotBaseDir(), SNAP_PREFIX));
     }
     catch (err) {
-        console.warn(`  no-regress: snapshot unavailable (${err.message}) — rollback disabled for this run`);
-        return null;
+        return { ok: false, reason: 'error', detail: err.message };
     }
     try {
         cpSync(root, snap, {
             recursive: true,
             // Never filter the root itself — a project dir named `build`/`dist`/…
             // must still snapshot its contents, not produce an empty snapshot.
-            filter: (src) => src === root || !isExcludedDir(src, basename(src)),
+            filter: (src) => src === root || !isExcludedEntry(src, basename(src)),
         });
-        writeFileSync(join(snap, META_FILE), JSON.stringify({ pid: process.pid, created: new Date().toISOString() }));
-        return snap;
+        writeFileSync(join(snap, META_FILE), JSON.stringify({ pid: process.pid, host: hostname(), created: new Date().toISOString() }));
+        return { ok: true, path: snap };
     }
     catch (err) {
         // Never leak a partial snapshot (the original failure mode: ENOSPC
         // mid-copy left tens of GB behind).
         rmSync(snap, { recursive: true, force: true });
-        console.warn(`  no-regress: snapshot failed (${err.message}) — rollback disabled for this run`);
-        return null;
+        return { ok: false, reason: 'error', detail: err.message };
+    }
+}
+/**
+ * rm -rf that leaves secret files in place (and keeps any directory that
+ * still holds one). Excluded dirs (node_modules, target, …) encountered
+ * inside the doomed tree are derived/reinstallable — removed wholesale
+ * rather than walked. Returns true when the path was fully removed.
+ */
+function rmPreservingSecrets(path) {
+    let st;
+    try {
+        st = lstatSync(path);
+    }
+    catch {
+        return true;
+    }
+    if (!st.isDirectory()) {
+        if (isSecretName(basename(path)))
+            return false;
+        rmSync(path, { force: true });
+        return true;
+    }
+    if (EXCLUDE.has(basename(path))) {
+        rmSync(path, { recursive: true, force: true });
+        return true;
+    }
+    let removedAll = true;
+    for (const entry of readdirSync(path)) {
+        if (!rmPreservingSecrets(join(path, entry)))
+            removedAll = false;
     }
+    if (removedAll)
+        rmSync(path, { recursive: true, force: true });
+    return removedAll;
 }
 /**
  * Delete entries under rootDir that the snapshot doesn't contain (or whose
- * file/dir type flipped), recursing with the same excluded-dir contract as
- * the snapshot filter so nested excluded trees (a workspace's node_modules,
- * a nested target/) survive rollback untouched.
+ * file/dir type flipped), recursing with the same excluded-entry contract as
+ * the snapshot filter so nested excluded trees (a workspace's node_modules)
+ * and secret files survive rollback untouched — even secrets created after
+ * the snapshot inside directories the snapshot never held.
  */
 function pruneToSnapshot(rootDir, snapDir) {
     for (const entry of readdirSync(rootDir)) {
@@ -261,7 +329,7 @@ function pruneToSnapshot(rootDir, snapDir) {
         catch {
             continue;
         }
-        if (rootStat.isDirectory() && EXCLUDE.has(entry))
+        if (rootStat.isDirectory() ? EXCLUDE.has(entry) : isSecretName(entry))
             continue;
         let snapStat = null;
         try {
@@ -271,14 +339,16 @@ function pruneToSnapshot(rootDir, snapDir) {
             /* not in snapshot */
         }
         if (!snapStat) {
-            rmSync(rootPath, { recursive: true, force: true });
+            rmPreservingSecrets(rootPath);
         }
         else if (rootStat.isDirectory() && snapStat.isDirectory()) {
             pruneToSnapshot(rootPath, join(snapDir, entry));
         }
         else if (rootStat.isDirectory() !== snapStat.isDirectory()) {
-            // Type flip (file↔dir): remove so the merge copy can recreate it.
-            rmSync(rootPath, { recursive: true, force: true });
+            // Type flip (file↔dir): remove so the merge copy can recreate it. If a
+            // secret survives inside (dir→file flip), leave the dir — the copy will
+            // fail and the preserve path keeps the snapshot for manual recovery.
+            rmPreservingSecrets(rootPath);
         }
     }
 }
@@ -287,7 +357,7 @@ function pruneToSnapshot(rootDir, snapDir) {
  * touching the project, then prunes extras and merge-copies the snapshot
  * back — copy-first ordering so an interruption leaves a recoverable union
  * of both trees, never a gutted project. On failure the snapshot is marked
- * preserve (reaper-immune) and the error is rethrown.
+ * preserve (reaper-immune) and the error is rethrown; callers own logging.
  */
 export function restoreTree(root, snap) {
     const entries = readdirSync(snap); // throws if the snapshot is gone — root untouched
@@ -297,19 +367,23 @@ export function restoreTree(root, snap) {
     try {
         pruneToSnapshot(root, snap);
         for (const entry of entries) {
-            if (entry === META_FILE)
+            // Skip the marker and (defense-in-depth) any secrets present in a
+            // pre-hardening snapshot — never overwrite a live rotated secret.
+            if (entry === META_FILE || isSecretName(entry))
                 continue;
-            cpSync(join(snap, entry), join(root, entry), { recursive: true });
+            cpSync(join(snap, entry), join(root, entry), {
+                recursive: true,
+                filter: (src) => !isExcludedEntry(src, basename(src)) || src === join(snap, entry),
+            });
         }
     }
     catch (err) {
         try {
-            writeFileSync(join(snap, META_FILE), JSON.stringify({ pid: process.pid, created: new Date().toISOString(), preserve: true }));
+            writeFileSync(join(snap, META_FILE), JSON.stringify({ pid: process.pid, host: hostname(), created: new Date().toISOString(), preserve: true }));
         }
         catch {
             /* marker rewrite is best-effort */
         }
-        console.warn(`  no-regress: restore FAILED — snapshot preserved at ${snap}`);
         throw err;
     }
 }

package/dist/delivery/snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/delivery/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,MAAM,EACN,MAAM,EACN,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,QAAQ,GACT,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAErC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;IACtB,qBAAqB;IACrB,MAAM;IACN,YAAY;IACZ,cAAc;IACd,cAAc;IACd,KAAK;IACL,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,UAAU;IACV,OAAO;IACP,OAAO;IACP,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,kBAAkB;IAClB,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,aAAa;IACb,eAAe;IACf,aAAa;IACb,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,kFAAkF;AAClF,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,kEAAkE;AAClE,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,cAAc,GAAG,IAAI,CAAC;AAS5B,qFAAqF;AACrF,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACjD,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACnG,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uDAAuD;QACnE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,SAAS;YAClC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;gBACjB,IAAI,KAAK,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iDAAiD;QACjD,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,qEAAqE;QACrE,iEAAiE;QACjE,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,IAAI,CAAC,GAAc,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,UAAU;YAAE,OAAO,IAAI,CAAC;QAC/E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,iEAAiE;QACjE,oBAAoB;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,eAAe,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,eAAe,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CACV,yDAAyD,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;gBAC9F,yCAAyC,CAC5C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uCAAwC,GAAa,CAAC,OAAO,oCAAoC,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;YACjB,SAAS,EAAE,IAAI;YACf,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;SACpE,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9G,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,oCAAoC;QACpC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,kCAAmC,GAAa,CAAC,OAAO,oCAAoC,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,OAAe;IACvD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC3D,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5D,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7D,kEAAkE;YAClE,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,kDAAkD;IACrF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,aAAa,SAAS,SAAS,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EACrB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CACxF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/delivery/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EACL,MAAM,EACN,MAAM,EACN,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,QAAQ,GACT,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;IACtB,uEAAuE;IACvE,MAAM;IACN,qBAAqB;IACrB,MAAM;IACN,YAAY;IACZ,cAAc;IACd,cAAc;IACd,KAAK;IACL,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,UAAU;IACV,OAAO;IACP,OAAO;IACP,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,kBAAkB;IAClB,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,aAAa;IACb,eAAe;IACf,aAAa;IACb,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,OAAO,oFAAoF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,kFAAkF;AAClF,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,kFAAkF;AAClF,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,iFAAiF;AACjF,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,cAAc,GAAG,IAAI,CAAC;AAc5B,mFAAmF;AACnF,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACjD,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACnG,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uDAAuD;QACnE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,SAAS;YAClC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,IAAI,YAAY,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACjC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;gBACjB,IAAI,KAAK,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iDAAiD;QACjD,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,qEAAqE;QACrE,iEAAiE;QACjE,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,UAAU,CAAC;QAC9E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;YAC9D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;YAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,IAAI,CAAC,GAAc,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,iEAAiE;QACjE,oBAAoB;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,eAAe,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,eAAe,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,wBAAwB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,6CAA6C;aAC/G,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;YACjB,SAAS,EAAE,IAAI;YACf,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;SACtE,CAAC,CAAC;QACH,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EACrB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAC1F,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,oCAAoC;QACpC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,UAAU,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,IAAI,UAAU;QAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,OAAe;IACvD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,SAAS;QAChF,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5D,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7D,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,kDAAkD;IACrF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,aAAa,SAAS,SAAS,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,SAAS;YACzD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;gBAC3C,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EACrB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC1G,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/docs/guides/DELIVER.md

@@ -145,11 +145,19 @@ The pre-run snapshot lands on real disk under `~/.cache/uap/snapshots`
 (`UAP_SNAPSHOT_DIR` overrides; absolute paths only) — never `/tmp`, which is
 RAM-backed on many Linux systems. Derived directories (`.git`,
 `node_modules`, `target`, `.venv`, `dist`, `build`, …) are neither
-snapshotted nor touched by a rollback, at any depth. Trees larger than
-`UAP_SNAPSHOT_MAX_MB` (default 4096) skip the snapshot and the run proceeds
-with rollback disabled. Snapshots orphaned by killed runs are reaped
-automatically on the next `--keep-best` run; a snapshot whose restore failed
-is preserved and its path printed.
+snapshotted nor touched by a rollback, at any depth. Secret-bearing files
+(`.env*`, `.npmrc`, `.netrc`, `*.pem`/`*.key`/`*.p12`/`*.pfx`, `id_rsa` &
+friends) follow the same symmetric contract: they are never copied into
+snapshot storage, and a rollback never reverts or deletes them — even inside
+directories created after the snapshot. Committed env templates
+(`.env.example`/`.sample`/`.template`/`.dist`) are treated as source and roll
+back normally. Trees larger
+than `UAP_SNAPSHOT_MAX_MB` (default 4096) skip the snapshot and the run
+proceeds with rollback disabled. Snapshots orphaned by killed runs are reaped
+automatically on the next `--keep-best` run (snapshots created on another
+host or in a container are judged only by a 7-day age backstop, never by
+local pid liveness); a snapshot whose restore failed is preserved and its
+path printed.
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "1.128.2",
+  "version": "1.129.0",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",
@@ -21,7 +21,7 @@
     "start": "node dist/bin/cli.js",
     "test": "vitest",
     "test:ci": "vitest run",
-    "test:enforcers": "python3 -m unittest tools.agents.tests.test_enforcement_self_protect tools.agents.tests.test_schema_diff_gate tools.agents.tests.test_workdir_scope_enforcer tools.agents.tests.test_path_containment tools.agents.tests.test_path_normalizer_hardened tools.agents.tests.test_sandbox_tool_strip tools.agents.tests.test_proxy_env_loader tools.agents.tests.test_stream_required_tool tools.agents.tests.test_tool_call_wrapper_profiles tools.agents.tests.test_tool_convert_cache",
+    "test:enforcers": "python3 -m unittest tools.agents.tests.test_enforcement_self_protect tools.agents.tests.test_workdir_scope_enforcer tools.agents.tests.test_path_containment tools.agents.tests.test_path_normalizer_hardened tools.agents.tests.test_sandbox_tool_strip tools.agents.tests.test_proxy_env_loader tools.agents.tests.test_stream_required_tool tools.agents.tests.test_tool_call_wrapper_profiles tools.agents.tests.test_tool_convert_cache",
     "test:coverage": "vitest --coverage",
     "bench": "vitest --config vitest.bench.config.ts",
     "lint": "eslint src --ext .ts",