@veryfront/ext-content-mdx 0.1.1279-rc.24617 → 0.1.1280

package/esm/deno.d.ts

@@ -29,6 +29,7 @@ declare namespace _default {
         "./mdx": string;
         "./agent": string;
         "./agent/pause-checkpoint": string;
+        "./runtime/managed-recovery-snapshot": string;
         "./agent/executor-runtime": string;
         "./agent/managed-broker": string;
         "./agent/trusted-broker": string;

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1279-rc.24617",
+    "version": "0.1.1280",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {
@@ -100,6 +100,7 @@ export default {
         "./mdx": "./src/mdx/index.ts",
         "./agent": "./src/agent/index.ts",
         "./agent/pause-checkpoint": "./src/agent/pause-checkpoint.ts",
+        "./runtime/managed-recovery-snapshot": "./src/runtime/managed-recovery-snapshot.ts",
         "./agent/executor-runtime": "./src/agent/hosted/executor-runtime-entrypoint.ts",
         "./agent/managed-broker": "./src/agent/service/managed-broker.ts",
         "./agent/trusted-broker": "./src/agent/service/trusted-managed-broker.ts",

package/esm/src/platform/compat/http/pinned-fetch.d.ts

@@ -49,7 +49,7 @@ export declare function assertNodeRequestMembersUnchanged(intrinsics: NodeTransp
  * Client identity for guarded egress, standing in for the runtime-supplied
  * `user-agent` (`node`, `Deno/x.y.z`) that this transport cannot inherit.
  */
-export declare const DEFAULT_OUTBOUND_USER_AGENT = "veryfront/0.1.1279-rc.24617";
+export declare const DEFAULT_OUTBOUND_USER_AGENT = "veryfront/0.1.1280";
 export interface PinnedFetchTlsOptions {
     /**
      * Complete trusted CA set for this connection. Passing this replaces the

package/esm/src/platform/compat/http/pinned-fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pinned-fetch.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/http/pinned-fetch.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,KAAK,EAEL,aAAa,EACb,eAAe,EAEhB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAkB,MAAM,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAa,MAAM,UAAU,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuC5C,KAAK,cAAc,GAAG,cAAc,WAAW,CAAC,CAAC;AACjD,KAAK,eAAe,GAAG,cAAc,YAAY,CAAC,CAAC;AACnD,KAAK,aAAa,GAAG,cAAc,UAAU,CAAC,CAAC;AAC/C,KAAK,aAAa,GAAG,cAAc,UAAU,CAAC,CAAC;AAC/C,KAAK,cAAc,GAAG,cAAc,WAAW,CAAC,CAAC;AACjD,KAAK,mBAAmB,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;AAErD,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,OAAO,QAAQ,CAAC;IACvC,QAAQ,CAAC,4BAA4B,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAChE,QAAQ,CAAC,wBAAwB,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IACxD,QAAQ,CAAC,8BAA8B,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACxE,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACtD,QAAQ,CAAC,6BAA6B,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,yCAAyC,EAAE,CAClD,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,CAAC,EAAE,MAAM,IAAI,KAClB,MAAM,CAAC;IACZ,QAAQ,CAAC,qBAAqB,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACtD,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9D,QAAQ,CAAC,qBAAqB,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAChE,QAAQ,CAAC,8BAA8B,EAAE,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAClF,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,EAAE,CAAC;CAC/C;AA4MD,UAAU,cAAc;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,kBAAkB,GAAG,SAAS,CAAC,EAAE,CAAC;CACnE;AA+ED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAG3F;AAqQD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,gCAAyB,CAAC;AAElE,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAkBT;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,QAAQ,GAAG,IAAI,EACrB,aAAa,SAAQ,GACpB,QAAQ,CAOV;AAeD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAUhC;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAejE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAOtE;AA6TD,8EAA8E;AAC9E,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,IAAI,EAAE,WAAW,EACjB,GAAG,GAAE,qBAA0B,EAC/B,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAkRnB"}
+{"version":3,"file":"pinned-fetch.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/http/pinned-fetch.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,KAAK,EAEL,aAAa,EACb,eAAe,EAEhB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAkB,MAAM,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAa,MAAM,UAAU,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuC5C,KAAK,cAAc,GAAG,cAAc,WAAW,CAAC,CAAC;AACjD,KAAK,eAAe,GAAG,cAAc,YAAY,CAAC,CAAC;AACnD,KAAK,aAAa,GAAG,cAAc,UAAU,CAAC,CAAC;AAC/C,KAAK,aAAa,GAAG,cAAc,UAAU,CAAC,CAAC;AAC/C,KAAK,cAAc,GAAG,cAAc,WAAW,CAAC,CAAC;AACjD,KAAK,mBAAmB,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;AAErD,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,OAAO,QAAQ,CAAC;IACvC,QAAQ,CAAC,4BAA4B,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAChE,QAAQ,CAAC,wBAAwB,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IACxD,QAAQ,CAAC,8BAA8B,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACxE,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACtD,QAAQ,CAAC,6BAA6B,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,yCAAyC,EAAE,CAClD,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,CAAC,EAAE,MAAM,IAAI,KAClB,MAAM,CAAC;IACZ,QAAQ,CAAC,qBAAqB,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACtD,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9D,QAAQ,CAAC,qBAAqB,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAChE,QAAQ,CAAC,8BAA8B,EAAE,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAClF,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,EAAE,CAAC;CAC/C;AA4MD,UAAU,cAAc;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,kBAAkB,GAAG,SAAS,CAAC,EAAE,CAAC;CACnE;AA+ED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAG3F;AAqQD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,uBAAyB,CAAC;AAElE,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAkBT;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,QAAQ,GAAG,IAAI,EACrB,aAAa,SAAQ,GACpB,QAAQ,CAOV;AAeD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAUhC;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAejE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAOtE;AA6TD,8EAA8E;AAC9E,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,IAAI,EAAE,WAAW,EACjB,GAAG,GAAE,qBAA0B,EAC/B,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAkRnB"}

package/esm/src/platform/compat/process/env.d.ts

@@ -68,7 +68,7 @@ export declare function getHostApiOriginExcludingEnvFile(key: string): string |
 export declare function captureHostApiOrigin(key: string): void;
 /** @internal Forget captured API origins. Only effective in captured test processes. */
 export declare function resetHostApiOriginSnapshot(): void;
-declare const HOST_BOOT_ENV_KEYS: readonly ["OAUTH_PUBLIC_KEY", "SERVICE_ACCOUNT_VERYFRONT_SERVER_ID", "CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY", "VERYFRONT_PUBLIC_API_BASE_URL", "VERYFRONT_API_URL", "VERYFRONT_API_BASE_URL"];
+declare const HOST_BOOT_ENV_KEYS: readonly ["VERYFRONT_MANAGED_RECOVERY_ENABLED", "VERYFRONT_MANAGED_RECOVERY_DIRECTORY", "VERYFRONT_MANAGED_RECOVERY_SOURCE_PROJECT_ID", "VERYFRONT_MANAGED_RECOVERY_SOURCE_ENVIRONMENT_ID", "VERYFRONT_MANAGED_RECOVERY_SOURCE_RELEASE_ID", "OAUTH_PUBLIC_KEY", "SERVICE_ACCOUNT_VERYFRONT_SERVER_ID", "CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY", "VERYFRONT_PUBLIC_API_BASE_URL", "VERYFRONT_API_URL", "VERYFRONT_API_BASE_URL"];
 type HostBootEnvKey = typeof HOST_BOOT_ENV_KEYS[number];
 /**
  * Read host identity or API routing as the host process started with it.

package/esm/src/platform/compat/process/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA0EpE,wFAAwF;AACxF,wBAAgB,yBAAyB,IAAI,IAAI,CAMhD;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,qFAAqF;AACrF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CASzD;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAqB1D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4B5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK9D;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAKlD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO1D;AAED,kFAAkF;AAClF,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ1E;AAaD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhF;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAwCD,QAAA,MAAM,kBAAkB,6LAOd,CAAC;AACX,KAAK,cAAc,GAAG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAMxD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAMtE;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,kBAAkB,GAAG,SAAS,GAC3C,IAAI,CAWN;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,IAAI,kBAAkB,GAAG,SAAS,CAE7E;AAED,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAetD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAapE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CA0BvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAwB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA0EpE,wFAAwF;AACxF,wBAAgB,yBAAyB,IAAI,IAAI,CAMhD;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,qFAAqF;AACrF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CASzD;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAqB1D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4B5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK9D;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAKlD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO1D;AAED,kFAAkF;AAClF,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ1E;AAaD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhF;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAwCD,QAAA,MAAM,kBAAkB,+ZAYd,CAAC;AACX,KAAK,cAAc,GAAG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAMxD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAMtE;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,kBAAkB,GAAG,SAAS,GAC3C,IAAI,CAWN;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,IAAI,kBAAkB,GAAG,SAAS,CAE7E;AAED,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAetD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAapE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CA0BvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAwB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}

package/esm/src/platform/compat/process/env.js

@@ -310,6 +310,11 @@ function readHostProcessEnv(key) {
 // Captured while this module loads, before a project env file is loaded or
 // project code runs, so neither can replace operator identity or credential routing.
 const HOST_BOOT_ENV_KEYS = [
+    "VERYFRONT_MANAGED_RECOVERY_ENABLED",
+    "VERYFRONT_MANAGED_RECOVERY_DIRECTORY",
+    "VERYFRONT_MANAGED_RECOVERY_SOURCE_PROJECT_ID",
+    "VERYFRONT_MANAGED_RECOVERY_SOURCE_ENVIRONMENT_ID",
+    "VERYFRONT_MANAGED_RECOVERY_SOURCE_RELEASE_ID",
     "OAUTH_PUBLIC_KEY",
     "SERVICE_ACCOUNT_VERYFRONT_SERVER_ID",
     "CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY",

package/esm/src/utils/logger/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,QAAQ,eAAe,CAAC;AAyMrC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,CAiDR;AAwDD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAwBnD;AAED,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,aAAa,EAAE,GACf;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAAA;CAAE,CAAC;AA8MrC;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAKhD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAKtE;AAwVD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAyG5D;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA+BxD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EAC5E,KAAK,EAAE,CAAC,GAAG,CAAC,CAOb"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,QAAQ,eAAe,CAAC;AA6NrC;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,CAsCR;AAwDD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAwBnD;AAED,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,aAAa,EAAE,GACf;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAAA;CAAE,CAAC;AAoPrC;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAKhD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAKtE;AAuXD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAyG5D;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA+BxD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EAC5E,KAAK,EAAE,CAAC,GAAG,CAAC,CAOb"}

package/esm/src/utils/logger/redact.js

@@ -149,6 +149,20 @@ function splitIdentifierTokens(value) {
     }
     return tokens;
 }
+function hasFilePathScheme(path) {
+    return path.length >= 5 &&
+        (stringCodeUnitAt(path, 0) | ASCII_LOWERCASE_OFFSET) === 102 &&
+        (stringCodeUnitAt(path, 1) | ASCII_LOWERCASE_OFFSET) === 105 &&
+        (stringCodeUnitAt(path, 2) | ASCII_LOWERCASE_OFFSET) === 108 &&
+        (stringCodeUnitAt(path, 3) | ASCII_LOWERCASE_OFFSET) === 101 &&
+        stringCodeUnitAt(path, 4) === COLON_CODE_UNIT;
+}
+function hasWindowsDriveAt(path, cursor) {
+    return cursor + 2 < path.length &&
+        isAsciiLetterCodeUnit(stringCodeUnitAt(path, cursor)) &&
+        stringCodeUnitAt(path, cursor + 1) === COLON_CODE_UNIT &&
+        isPathSeparatorCodeUnit(stringCodeUnitAt(path, cursor + 2));
+}
 function isWindowsPath(path) {
     if (path.length >= 2) {
         const first = stringCodeUnitAt(path, 0);
@@ -156,18 +170,9 @@ function isWindowsPath(path) {
         if (isPathSeparatorCodeUnit(first) && isPathSeparatorCodeUnit(second))
             return true;
     }
-    if (path.length >= 3 &&
-        isAsciiLetterCodeUnit(stringCodeUnitAt(path, 0)) &&
-        stringCodeUnitAt(path, 1) === COLON_CODE_UNIT &&
-        isPathSeparatorCodeUnit(stringCodeUnitAt(path, 2))) {
+    if (hasWindowsDriveAt(path, 0))
         return true;
-    }
-    const hasFileScheme = path.length >= 5 &&
-        (stringCodeUnitAt(path, 0) | ASCII_LOWERCASE_OFFSET) === 102 &&
-        (stringCodeUnitAt(path, 1) | ASCII_LOWERCASE_OFFSET) === 105 &&
-        (stringCodeUnitAt(path, 2) | ASCII_LOWERCASE_OFFSET) === 108 &&
-        (stringCodeUnitAt(path, 3) | ASCII_LOWERCASE_OFFSET) === 101 &&
-        stringCodeUnitAt(path, 4) === COLON_CODE_UNIT;
+    const hasFileScheme = hasFilePathScheme(path);
     if (!hasFileScheme)
         return false;
     let cursor = 5;
@@ -183,10 +188,7 @@ function isWindowsPath(path) {
     }
     while (cursor < path.length && isPathSeparatorCodeUnit(stringCodeUnitAt(path, cursor)))
         cursor++;
-    return cursor + 2 < path.length &&
-        isAsciiLetterCodeUnit(stringCodeUnitAt(path, cursor)) &&
-        stringCodeUnitAt(path, cursor + 1) === COLON_CODE_UNIT &&
-        isPathSeparatorCodeUnit(stringCodeUnitAt(path, cursor + 2));
+    return hasWindowsDriveAt(path, cursor);
 }
 function normalizePathCodeUnit(codeUnit, foldAsciiCase) {
     if (isPathSeparatorCodeUnit(codeUnit))
@@ -197,6 +199,22 @@ function normalizePathCodeUnit(codeUnit, foldAsciiCase) {
         ? codeUnit + ASCII_LOWERCASE_OFFSET
         : codeUnit;
 }
+function fillPathPrefixTable(pattern, prefixTable, patternLength) {
+    prefixTable[0] = 0;
+    for (let index = 1, prefixLength = 0; index < patternLength;) {
+        if (pattern[index] === pattern[prefixLength]) {
+            prefixTable[index] = ++prefixLength;
+            index++;
+        }
+        else if (prefixLength > 0) {
+            prefixLength = prefixTable[prefixLength - 1];
+        }
+        else {
+            prefixTable[index] = 0;
+            index++;
+        }
+    }
+}
 /**
  * Replace every non-overlapping occurrence of a trusted path in untrusted text.
  *
@@ -216,20 +234,7 @@ export function redactPathFromText(input, path, replacement) {
     for (let index = 0; index < patternLength; index++) {
         pattern[index] = normalizePathCodeUnit(stringCodeUnitAt(path, index), foldAsciiCase);
     }
-    prefixTable[0] = 0;
-    for (let index = 1, prefixLength = 0; index < patternLength;) {
-        if (pattern[index] === pattern[prefixLength]) {
-            prefixTable[index] = ++prefixLength;
-            index++;
-        }
-        else if (prefixLength > 0) {
-            prefixLength = prefixTable[prefixLength - 1];
-        }
-        else {
-            prefixTable[index] = 0;
-            index++;
-        }
-    }
+    fillPathPrefixTable(pattern, prefixTable, patternLength);
     let result = "";
     let copyStart = 0;
     let matchLength = 0;
@@ -382,110 +387,70 @@ function readSerializationHook(value) {
     }
     return undefined;
 }
-function redactValue(value, depth, seen, mode, budget) {
-    if (budget.remainingNodes <= 0) {
-        budget.exhausted = true;
-        return REDACTED;
-    }
-    budget.remainingNodes--;
-    if (typeof value === "string")
-        return sanitizeUrlCredentials(value);
-    if (typeof value === "bigint") {
-        return mode === "serialization" ? apply(bigIntToString, value, []) : value;
-    }
-    if (typeof value === "number") {
-        return mode === "serialization" && !numberIsFinite(value) ? null : value;
-    }
-    if (typeof value === "boolean" || value === null)
-        return value;
-    if (typeof value === "undefined" || typeof value === "function" || typeof value === "symbol") {
-        return mode === "serialization" ? REDACTED : value;
-    }
-    const arrayClassification = classifyArray(value);
-    if (arrayClassification === null)
+function redactArrayValue(value, depth, seen, mode, budget) {
+    if (depth >= MAX_DEPTH || apply(setHas, seen, [value]))
         return REDACTED;
-    if (arrayClassification) {
-        if (depth >= MAX_DEPTH || apply(setHas, seen, [value]))
+    apply(setAdd, seen, [value]);
+    try {
+        const arrayValue = value;
+        const length = arrayValue.length;
+        if (!numberIsInteger(length) || length < 0 || length > MAX_CONTAINER_ENTRIES) {
             return REDACTED;
-        apply(setAdd, seen, [value]);
-        try {
-            const arrayValue = value;
-            const length = arrayValue.length;
-            if (!numberIsInteger(length) || length < 0 || length > MAX_CONTAINER_ENTRIES) {
+        }
+        const redacted = mode === "compatible" ? new Array(length) : [];
+        for (let index = 0; index < length; index++) {
+            if (mode === "compatible" && !(index in arrayValue))
+                continue;
+            const item = redactValue(arrayValue[index], depth + 1, seen, mode, budget);
+            if (budget.exhausted)
                 return REDACTED;
+            if (mode === "compatible") {
+                redacted[index] = item;
             }
-            const redacted = mode === "compatible" ? new Array(length) : [];
-            for (let index = 0; index < length; index++) {
-                if (mode === "compatible" && !(index in arrayValue))
-                    continue;
-                const item = redactValue(arrayValue[index], depth + 1, seen, mode, budget);
-                if (budget.exhausted)
-                    return REDACTED;
-                if (mode === "compatible") {
-                    redacted[index] = item;
-                }
-                else {
-                    apply(arrayPush, redacted, [item]);
-                }
+            else {
+                apply(arrayPush, redacted, [item]);
             }
-            return redacted;
-        }
-        catch {
-            // Array indices can be accessors or proxy traps. A failed read makes the
-            // serialized contents unknowable, so the complete array fails closed.
-            return REDACTED;
-        }
-        finally {
-            apply(setDelete, seen, [value]);
         }
-    }
-    // Objects defining `toJSON` (Date, URL, custom serializers) are serialized
-    // by `JSON.stringify` via the *return value* of `toJSON`, not their own
-    // enumerable keys. A key-based pass over the object's own properties would
-    // therefore miss credentials smuggled through `toJSON`, e.g.
-    // `{ toJSON: () => ({ apiKey: "sk-..." }) }` (CODEX P2). When `toJSON`
-    // returns an object, array, or scalar, the serialization API redacts *that*
-    // snapshot. The compatibility API keeps scalar serializers such as Date and
-    // URL intact, preserving the established generic return contract.
-    if (depth >= MAX_DEPTH || apply(setHas, seen, [value]))
-        return REDACTED;
-    let toJSON;
-    try {
-        toJSON = readSerializationHook(value);
+        return redacted;
     }
     catch {
-        // Accessors can throw before a serializer is callable. Never inspect the
-        // raw object after that because its eventual serialization is unknown.
+        // Array indices can be accessors or proxy traps. A failed read makes the
+        // serialized contents unknowable, so the complete array fails closed.
         return REDACTED;
     }
-    if (typeof toJSON === "function") {
-        apply(setAdd, seen, [value]);
-        try {
-            const serialized = apply(toJSON, value, []);
-            if (mode === "serialization") {
-                return redactValue(serialized, depth + 1, seen, mode, budget);
-            }
-            if (typeof serialized === "string") {
-                const sanitized = sanitizeUrlCredentials(serialized);
-                return sanitized === serialized ? value : sanitized;
-            }
-            if (serialized !== null && typeof serialized === "object") {
-                if (classifyArray(serialized) === null)
-                    return REDACTED;
-                return redactValue(serialized, depth + 1, seen, mode, budget);
-            }
-            // Other scalar results serialize safely as-is in compatibility mode.
-            return value;
+    finally {
+        apply(setDelete, seen, [value]);
+    }
+}
+function redactSerializationHookValue(value, toJSON, depth, seen, mode, budget) {
+    apply(setAdd, seen, [value]);
+    try {
+        const serialized = apply(toJSON, value, []);
+        if (mode === "serialization") {
+            return redactValue(serialized, depth + 1, seen, mode, budget);
         }
-        catch {
-            // A throwing toJSON must never let the raw object (whose own keys we
-            // skipped) through: fail closed.
-            return REDACTED;
+        if (typeof serialized === "string") {
+            const sanitized = sanitizeUrlCredentials(serialized);
+            return sanitized === serialized ? value : sanitized;
         }
-        finally {
-            apply(setDelete, seen, [value]);
+        if (serialized !== null && typeof serialized === "object") {
+            if (classifyArray(serialized) === null)
+                return REDACTED;
+            return redactValue(serialized, depth + 1, seen, mode, budget);
         }
+        // Other scalar results serialize safely as-is in compatibility mode.
+        return value;
     }
+    catch {
+        // A throwing toJSON must never let the raw object (whose own keys we
+        // skipped) through: fail closed.
+        return REDACTED;
+    }
+    finally {
+        apply(setDelete, seen, [value]);
+    }
+}
+function redactObjectProperties(value, depth, seen, mode, budget) {
     apply(setAdd, seen, [value]);
     try {
         const out = {};
@@ -532,6 +497,60 @@ function redactValue(value, depth, seen, mode, budget) {
         apply(setDelete, seen, [value]);
     }
 }
+function redactScalarValue(value, mode) {
+    switch (typeof value) {
+        case "string":
+            return sanitizeUrlCredentials(value);
+        case "bigint":
+            return mode === "serialization" ? apply(bigIntToString, value, []) : value;
+        case "number":
+            return mode === "serialization" && !numberIsFinite(value) ? null : value;
+        case "undefined":
+        case "function":
+        case "symbol":
+            return mode === "serialization" ? REDACTED : value;
+        default:
+            return value;
+    }
+}
+function redactValue(value, depth, seen, mode, budget) {
+    if (budget.remainingNodes <= 0) {
+        budget.exhausted = true;
+        return REDACTED;
+    }
+    budget.remainingNodes--;
+    if (value === null || typeof value !== "object")
+        return redactScalarValue(value, mode);
+    const arrayClassification = classifyArray(value);
+    if (arrayClassification === null)
+        return REDACTED;
+    if (arrayClassification) {
+        return redactArrayValue(value, depth, seen, mode, budget);
+    }
+    // Objects defining `toJSON` (Date, URL, custom serializers) are serialized
+    // by `JSON.stringify` via the *return value* of `toJSON`, not their own
+    // enumerable keys. A key-based pass over the object's own properties would
+    // therefore miss credentials smuggled through `toJSON`, e.g.
+    // `{ toJSON: () => ({ apiKey: "sk-..." }) }` (CODEX P2). When `toJSON`
+    // returns an object, array, or scalar, the serialization API redacts *that*
+    // snapshot. The compatibility API keeps scalar serializers such as Date and
+    // URL intact, preserving the established generic return contract.
+    if (depth >= MAX_DEPTH || apply(setHas, seen, [value]))
+        return REDACTED;
+    let toJSON;
+    try {
+        toJSON = readSerializationHook(value);
+    }
+    catch {
+        // Accessors can throw before a serializer is callable. Never inspect the
+        // raw object after that because its eventual serialization is unknown.
+        return REDACTED;
+    }
+    if (typeof toJSON === "function") {
+        return redactSerializationHookValue(value, toJSON, depth, seen, mode, budget);
+    }
+    return redactObjectProperties(value, depth, seen, mode, budget);
+}
 /**
  * Returns a redacted copy of `context` while preserving the established source
  * and runtime value shapes. Any property whose key is {@link isSensitiveKey}
@@ -665,9 +684,8 @@ function assignmentValueEndsAt(input, start) {
     const boundaryEnd = skipAssignmentBoundaryCharacters(input, start);
     return boundaryEnd >= input.length || assignmentStartsAt(input, boundaryEnd);
 }
-function redactAssignmentValue(input, start) {
+function assignmentScanStart(input, start) {
     let scanStart = start;
-    let preserveValueQuote = true;
     if (apply(stringStartsWith, input, [REDACTED, start])) {
         const markerEnd = start + REDACTED.length;
         if (assignmentValueEndsAt(input, markerEnd)) {
@@ -677,69 +695,98 @@ function redactAssignmentValue(input, start) {
             };
         }
         scanStart = markerEnd;
-        preserveValueQuote = false;
     }
+    return scanStart;
+}
+function redactAssignmentValue(input, start) {
+    const initial = assignmentScanStart(input, start);
+    if (typeof initial !== "number")
+        return initial;
+    const scanStart = initial;
+    const preserveValueQuote = scanStart === start;
     const wrapperQuote = preserveValueQuote &&
         (input[scanStart] === `"` || input[scanStart] === "'" || input[scanStart] === "`")
         ? input[scanStart]
         : "";
     let wrapperQuoteClosed = false;
-    const replacement = () => wrapperQuote ? `${wrapperQuote}${REDACTED}${wrapperQuoteClosed ? wrapperQuote : ""}` : REDACTED;
+    const replacement = () => {
+        if (!wrapperQuote)
+            return REDACTED;
+        return `${wrapperQuote}${REDACTED}${wrapperQuoteClosed ? wrapperQuote : ""}`;
+    };
     const expectedClosings = [];
     let quote = "";
     let quoteStart = -1;
-    for (let index = scanStart; index < input.length;) {
-        const character = input[index];
-        if (quote) {
-            if (character === "\\") {
-                index += 2;
-                continue;
-            }
-            if (character === quote) {
-                if (quoteStart === scanStart && expectedClosings.length === 0) {
-                    wrapperQuoteClosed = true;
-                    return { end: index + 1, replacement: replacement() };
-                }
-                quote = "";
-                quoteStart = -1;
+    const consumeQuotedCharacter = (index, character) => {
+        if (character === "\\") {
+            return index + 2;
+        }
+        if (character === quote) {
+            if (quoteStart === scanStart && expectedClosings.length === 0) {
+                wrapperQuoteClosed = true;
+                return { end: index + 1, replacement: replacement() };
             }
-            index++;
-            continue;
+            quote = "";
+            quoteStart = -1;
+        }
+        return index + 1;
+    };
+    const consumeContainerClosing = (index, character) => {
+        if (expectedClosings[expectedClosings.length - 1] !== character) {
+            return { end: input.length, replacement: replacement() };
+        }
+        apply(arrayPop, expectedClosings, []);
+        index++;
+        if (expectedClosings.length === 0 &&
+            assignmentValueEndsAt(input, index)) {
+            return { end: index, replacement: replacement() };
         }
+        return index;
+    };
+    const consumeOpeningCharacter = (index, character) => {
         if (character === `"` || character === "'" || character === "`") {
             quote = character;
             quoteStart = index;
-            index++;
-            continue;
+            return index + 1;
         }
         if (character === "{" || character === "[") {
             apply(arrayPush, expectedClosings, [character === "{" ? "}" : "]"]);
-            index++;
-            continue;
-        }
-        if (expectedClosings.length > 0 &&
-            (character === "}" || character === "]")) {
-            if (expectedClosings[expectedClosings.length - 1] !== character) {
-                return { end: input.length, replacement: replacement() };
-            }
-            apply(arrayPop, expectedClosings, []);
-            index++;
-            if (expectedClosings.length === 0 &&
-                assignmentValueEndsAt(input, index)) {
-                return { end: index, replacement: replacement() };
-            }
-            continue;
-        }
-        if (expectedClosings.length > 0 ||
-            !isAssignmentBoundaryCharacter(character)) {
-            index++;
-            continue;
+            return index + 1;
         }
+        return undefined;
+    };
+    const consumeBoundary = (index) => {
         const boundaryStart = index;
         index = skipAssignmentBoundaryCharacters(input, index);
         if (index >= input.length || assignmentStartsAt(input, index)) {
             return { end: boundaryStart, replacement: replacement() };
         }
+        return index;
+    };
+    const consumeUnquotedCharacter = (index, character) => {
+        const openingEnd = consumeOpeningCharacter(index, character);
+        if (openingEnd !== undefined)
+            return openingEnd;
+        if (expectedClosings.length > 0 && (character === "}" || character === "]")) {
+            return consumeContainerClosing(index, character);
+        }
+        if (expectedClosings.length > 0 || !isAssignmentBoundaryCharacter(character))
+            return index + 1;
+        return consumeBoundary(index);
+    };
+    for (let index = scanStart; index < input.length;) {
+        const character = input[index];
+        if (quote) {
+            const next = consumeQuotedCharacter(index, character);
+            if (typeof next !== "number")
+                return next;
+            index = next;
+            continue;
+        }
+        const next = consumeUnquotedCharacter(index, character);
+        if (typeof next !== "number")
+            return next;
+        index = next;
     }
     return { end: input.length, replacement: replacement() };
 }
@@ -772,6 +819,13 @@ function redactCredentialAssignments(input, prefixPattern, keyGroup, urlParamete
     }
     return cursor === 0 ? input : result + sliceString(input, cursor);
 }
+function matchesSensitiveKeyPattern(candidate) {
+    for (let index = 0; index < SENSITIVE_KEY_PATTERNS.length; index++) {
+        if (candidate === SENSITIVE_KEY_PATTERNS[index])
+            return true;
+    }
+    return false;
+}
 /**
  * Classify free-text assignment keys without applying the structured-key
  * substring policy to ordinary words. Identifier and camel-case boundaries
@@ -796,10 +850,8 @@ function isSensitiveAssignmentKey(key) {
             if (token.length === 0)
                 continue;
             candidate += token;
-            for (let index = 0; index < SENSITIVE_KEY_PATTERNS.length; index++) {
-                if (candidate === SENSITIVE_KEY_PATTERNS[index])
-                    return true;
-            }
+            if (matchesSensitiveKeyPattern(candidate))
+                return true;
         }
     }
     return tokens.length === 1 && tokens[0] === "auth";

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1279-rc.24617";
+export declare const VERSION = "0.1.1280";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version-constant.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version-constant.ts"],"names":[],"mappings":"AAEA,4BAA4B;AAC5B,eAAO,MAAM,OAAO,sBAAsB,CAAC"}
+{"version":3,"file":"version-constant.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version-constant.ts"],"names":[],"mappings":"AAEA,4BAA4B;AAC5B,eAAO,MAAM,OAAO,aAAa,CAAC"}

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1279-rc.24617";
+export const VERSION = "0.1.1280";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veryfront/ext-content-mdx",
-  "version": "0.1.1279-rc.24617",
+  "version": "0.1.1280",
   "description": "Veryfront first-party extension package for ext-content-mdx",
   "keywords": [
     "veryfront",
@@ -53,7 +53,7 @@
     "@types/hast": "3.0.3",
     "@types/mdast": "4.0.3",
     "@types/unist": "3.0.2",
-    "@veryfront/ext-parser-babel": "0.1.1279-rc.24617",
+    "@veryfront/ext-parser-babel": "0.1.1280",
     "acorn": "8.17.0",
     "acorn-jsx": "5.3.2",
     "github-slugger": "2.0.0",
@@ -82,7 +82,7 @@
     "vfile": "6.0.3"
   },
   "peerDependencies": {
-    "veryfront": "^0.1.1279-rc.24617"
+    "veryfront": "^0.1.1280"
   },
   "type": "module",
   "types": "./esm/extensions/ext-content-mdx/src/index.d.ts",
@@ -92,5 +92,5 @@
     "NOTICE",
     "README.md"
   ],
-  "gitHead": "b4bf1941c44ae6a7bed951f71ba8b1aed658a86b"
+  "gitHead": "dcbac8c3d1bb827e3db208b8bd9682e3d4121ae4"
 }