getborg 0.0.124 → 0.0.126

package/dist/client/assets/{xlsxDocument-SRKfhPKH.js → xlsxDocument-C12kQUhH.js}

@@ -1,2 +1,2 @@
-import{o as e}from"./rolldown-runtime-DAXXjFlN.js";import{_ as t}from"./main-Bi6AoLeM.js";var n=e(t(),1),r=5e3,i=200;function a(e){let t=/^([A-Z]+)/i.exec(e)?.[1];if(!t)return 0;let n=0;for(let e of t.toUpperCase())n=n*26+(e.charCodeAt(0)-64);return n-1}var o=e=>Number.isInteger(e)&&e>=0&&e<=1114111&&!(e>=55296&&e<=57343)?String.fromCodePoint(e):null,s=e=>e.replace(/&(?:#(\d+)|#x([0-9a-f]+)|(amp|lt|gt|quot|apos));/gi,(e,t,n,r)=>t?o(Number(t))??e:n?o(Number.parseInt(n,16))??e:{amp:`&`,lt:`<`,gt:`>`,quot:`"`,apos:`'`}[String(r).toLowerCase()]??e);function c(e){return`(?:[A-Za-z_][\\w.-]*:)?${e}`}function l(e){return RegExp(`<(${c(e)})(?=[\\s/>])[^>]*?(?:/>|>([\\s\\S]*?)</\\1\\s*>)`,`g`)}function u(e,t){let n=l(t),r=[];for(let t of e.matchAll(n))r.push(t[2]??``);return r}function d(e,t){let n=l(t);return Array.from(e.matchAll(n),e=>e[0])}var f=(e,t)=>{let n=RegExp(`\\s${c(t)}=(["'])(.*?)\\1`).exec(e)?.[2];return n===void 0?null:s(n)},p=(e,t)=>s(u(e,t).join(``));function m(e,t){let n=[],o=!1;for(let s of d(e,`row`)){if(n.length>=r){o=!0;break}let e=[];for(let n of d(s,`c`)){let r=a(f(n,`r`)??``);if(r>=i){o=!0;continue}let s=f(n,`t`),c=s===`s`?t[Number(p(n,`v`))]??``:s===`inlineStr`?p(n,`t`):p(n,`v`);for(;e.length<r;)e.push(``);e[r]=c}n.push(e)}return{rows:n,truncated:o}}function h(e){return d(e,`si`).map(e=>p(e,`t`))}function g(e){return d(e,`sheet`).map((e,t)=>(f(e,`name`)??``).trim()||`Sheet${t+1}`)}async function _(e){let t=await n.default.loadAsync(e),r=await t.file(`xl/_rels/workbook.xml.rels`)?.async(`string`),i=new Map;for(let e of d(r??``,`Relationship`)){let t=f(e,`Id`),n=f(e,`Target`);if(!t||!n||f(e,`TargetMode`)===`External`||/^[a-z]+:/i.test(n))continue;let r=[];for(let e of(n.startsWith(`/`)?n:`xl/${n}`).split(`/`))e===`..`?r.pop():e&&e!==`.`&&r.push(e);i.set(t,{path:r.join(`/`),type:f(e,`Type`)??``})}let a=[...i.values()].find(e=>e.type.endsWith(`/sharedStrings`))?.path??`xl/sharedStrings.xml`,o=await t.file(a)?.async(`string`),s=o?h(o):[],c=await t.file(`xl/workbook.xml`)?.async(`string`),l=c?g(c):[],u=d(c??``,`sheet`),p=[];for(let[e,n]of l.entries()){let a=i.get(f(u[e]??``,`id`)??``);if(r&&(!a||!a.type.endsWith(`/worksheet`)))continue;let o=a?.path??`xl/worksheets/sheet${e+1}.xml`,c=await t.file(o)?.async(`string`);if(!c)continue;let{rows:l,truncated:d}=m(c,s);p.push({name:n,rows:l,truncated:d})}return p}export{_ as readWorkbook};
-//# sourceMappingURL=xlsxDocument-SRKfhPKH.js.map
+import{o as e}from"./rolldown-runtime-DAXXjFlN.js";import{_ as t}from"./main-U2I6YwT-.js";var n=e(t(),1),r=5e3,i=200;function a(e){let t=/^([A-Z]+)/i.exec(e)?.[1];if(!t)return 0;let n=0;for(let e of t.toUpperCase())n=n*26+(e.charCodeAt(0)-64);return n-1}var o=e=>Number.isInteger(e)&&e>=0&&e<=1114111&&!(e>=55296&&e<=57343)?String.fromCodePoint(e):null,s=e=>e.replace(/&(?:#(\d+)|#x([0-9a-f]+)|(amp|lt|gt|quot|apos));/gi,(e,t,n,r)=>t?o(Number(t))??e:n?o(Number.parseInt(n,16))??e:{amp:`&`,lt:`<`,gt:`>`,quot:`"`,apos:`'`}[String(r).toLowerCase()]??e);function c(e){return`(?:[A-Za-z_][\\w.-]*:)?${e}`}function l(e){return RegExp(`<(${c(e)})(?=[\\s/>])[^>]*?(?:/>|>([\\s\\S]*?)</\\1\\s*>)`,`g`)}function u(e,t){let n=l(t),r=[];for(let t of e.matchAll(n))r.push(t[2]??``);return r}function d(e,t){let n=l(t);return Array.from(e.matchAll(n),e=>e[0])}var f=(e,t)=>{let n=RegExp(`\\s${c(t)}=(["'])(.*?)\\1`).exec(e)?.[2];return n===void 0?null:s(n)},p=(e,t)=>s(u(e,t).join(``));function m(e,t){let n=[],o=!1;for(let s of d(e,`row`)){if(n.length>=r){o=!0;break}let e=[];for(let n of d(s,`c`)){let r=a(f(n,`r`)??``);if(r>=i){o=!0;continue}let s=f(n,`t`),c=s===`s`?t[Number(p(n,`v`))]??``:s===`inlineStr`?p(n,`t`):p(n,`v`);for(;e.length<r;)e.push(``);e[r]=c}n.push(e)}return{rows:n,truncated:o}}function h(e){return d(e,`si`).map(e=>p(e,`t`))}function g(e){return d(e,`sheet`).map((e,t)=>(f(e,`name`)??``).trim()||`Sheet${t+1}`)}async function _(e){let t=await n.default.loadAsync(e),r=await t.file(`xl/_rels/workbook.xml.rels`)?.async(`string`),i=new Map;for(let e of d(r??``,`Relationship`)){let t=f(e,`Id`),n=f(e,`Target`);if(!t||!n||f(e,`TargetMode`)===`External`||/^[a-z]+:/i.test(n))continue;let r=[];for(let e of(n.startsWith(`/`)?n:`xl/${n}`).split(`/`))e===`..`?r.pop():e&&e!==`.`&&r.push(e);i.set(t,{path:r.join(`/`),type:f(e,`Type`)??``})}let a=[...i.values()].find(e=>e.type.endsWith(`/sharedStrings`))?.path??`xl/sharedStrings.xml`,o=await t.file(a)?.async(`string`),s=o?h(o):[],c=await t.file(`xl/workbook.xml`)?.async(`string`),l=c?g(c):[],u=d(c??``,`sheet`),p=[];for(let[e,n]of l.entries()){let a=i.get(f(u[e]??``,`id`)??``);if(r&&(!a||!a.type.endsWith(`/worksheet`)))continue;let o=a?.path??`xl/worksheets/sheet${e+1}.xml`,c=await t.file(o)?.async(`string`);if(!c)continue;let{rows:l,truncated:d}=m(c,s);p.push({name:n,rows:l,truncated:d})}return p}export{_ as readWorkbook};
+//# sourceMappingURL=xlsxDocument-C12kQUhH.js.map

package/dist/client/index.html

@@ -450,7 +450,7 @@
       }
     </style>
     <title>Borg (Alpha)</title>
-    <script type="module" crossorigin src="/assets/index-DrITfTBh.js"></script>
+    <script type="module" crossorigin src="/assets/index-e-hiL6eh.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-DZprGaeP.css">
   </head>
   <body>

package/dist/service-launcher.mjs

@@ -184,7 +184,7 @@ function stripHeaderDsn(header) {
 }
 //#endregion
 //#region package.json
-var version = "0.0.124";
+var version = "0.0.126";
 //#endregion
 //#region ../../packages/shared/src/borgClientIdentity.ts
 /** Tags that let an error report be matched to the requests and support info of the same install. */
@@ -217,6 +217,23 @@ const currentBorgClientIdentity = () => ({
 	installId: state.installId
 });
 //#endregion
+//#region src/secrets/knownSecrets.ts
+/** Redaction of the secret values this process has loaded; no imports, so Sentry can use it early. */
+const redactWith = (known, text) => {
+	if (known.size === 0 || text.length === 0) return text;
+	let out = text;
+	for (const [value, name] of [...known].sort((a, b) => b[0].length - a[0].length)) if (out.includes(value)) out = out.replaceAll(value, `[secret ${name}]`);
+	return out;
+};
+const withEscapedSpellings = (known) => {
+	const spellings = new Map(known);
+	for (const [secret, name] of known) spellings.set(JSON.stringify(secret).slice(1, -1), name);
+	return spellings;
+};
+const knownSecrets = /* @__PURE__ */ new Map();
+/** Every loaded value in `text`, raw or JSON-escaped, replaced with `[secret NAME]`. */
+const redactKnownSecrets = (text) => knownSecrets.size === 0 ? text : redactWith(withEscapedSpellings(knownSecrets), text);
+//#endregion
 //#region src/observability/borgSentry.ts
 /**
 * Sentry behind the Borg telemetry proxy, for the `borg` CLI and the
@@ -234,6 +251,7 @@ const currentBorgClientIdentity = () => ({
 * drags in the OpenTelemetry SDK, so it is imported lazily and an unset
 * variable keeps it off the CLI's startup path entirely.
 */
+const redactEnvelopeSecrets = (body) => redactKnownSecrets(typeof body === "string" ? body : new TextDecoder().decode(body));
 /** The DSN is never sent anywhere — the transport below never uses its URL. */
 const PLACEHOLDER_DSN = "https://00000000000000000000000000000000@borg-staging.telemetry.infra.searchatlas.com/0";
 /**
@@ -273,7 +291,7 @@ async function initBorgServerSentry() {
 			});
 			if (target === void 0) throw new Error("Borg telemetry has no route for this client.");
 			const { postBorgTelemetryEnvelope } = await import("./borgTelemetryNode-BCqjkcVi.mjs");
-			const response = await postBorgTelemetryEnvelope(target, stripEnvelopeDsn(request.body));
+			const response = await postBorgTelemetryEnvelope(target, stripEnvelopeDsn(redactEnvelopeSecrets(request.body)));
 			return {
 				statusCode: response.statusCode,
 				headers: {