pi-harness-runtime 0.10.12 → 0.10.13

package/packages/cookie-sanitizer/dist/parse-netscape.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Netscape-format cookie file parser.
+ *
+ * Format reference: https://curl.haxx.se/rfc/cookie_spec.html
+ *
+ * Each row is tab-separated, 7 columns:
+ *   domain  flag  path  secure  expires  name  value
+ *
+ * - Lines starting with `# ` are comments (skipped).
+ * - Lines starting with `#HttpOnly_` are HTTP-only cookies
+ *   (the leading `#HttpOnly_` is stripped, the rest is parsed normally).
+ * - Empty lines are skipped.
+ * - `expires` is Unix seconds; `0` or unparseable → session cookie.
+ * - Lines with fewer than 7 columns are skipped (malformed).
+ *
+ * SEC-001: Cookie values are returned as strings in-memory. They MUST
+ * never be logged. The scrubber in cookie-sanitizer applies value
+ * redaction before any path-touching log line.
+ */
+import type { CanonicalCookie } from "./types.js";
+/**
+ * Parse a Netscape-format cookie string into canonical records.
+ *
+ * Skips:
+ * - blank lines
+ * - comments (lines starting with `#` but not `#HttpOnly_`)
+ * - malformed rows (< 7 columns)
+ *
+ * Never throws; returns empty array if input is invalid.
+ */
+export declare function parseNetscape(text: string): CanonicalCookie[];
+/**
+ * Serialize a list of canonical cookies back to Netscape format.
+ * Used by atomic-write.ts to produce the canonical cache.
+ *
+ * Output uses the canonical column order:
+ *   domain  flag  path  secure  expires  name  value
+ *
+ * `flag` is FALSE per curl spec (HttpOnly is encoded as `#HttpOnly_`).
+ * Cookie values are NEVER logged during the round-trip.
+ */
+export declare function serializeNetscape(cookies: CanonicalCookie[]): string;
+//# sourceMappingURL=parse-netscape.d.ts.map

package/packages/cookie-sanitizer/dist/parse-netscape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-netscape.d.ts","sourceRoot":"","sources":["../src/parse-netscape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAalD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CA8C7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAgBpE"}

package/packages/cookie-sanitizer/dist/parse-netscape.js

@@ -0,0 +1,99 @@
+/**
+ * Netscape-format cookie file parser.
+ *
+ * Format reference: https://curl.haxx.se/rfc/cookie_spec.html
+ *
+ * Each row is tab-separated, 7 columns:
+ *   domain  flag  path  secure  expires  name  value
+ *
+ * - Lines starting with `# ` are comments (skipped).
+ * - Lines starting with `#HttpOnly_` are HTTP-only cookies
+ *   (the leading `#HttpOnly_` is stripped, the rest is parsed normally).
+ * - Empty lines are skipped.
+ * - `expires` is Unix seconds; `0` or unparseable → session cookie.
+ * - Lines with fewer than 7 columns are skipped (malformed).
+ *
+ * SEC-001: Cookie values are returned as strings in-memory. They MUST
+ * never be logged. The scrubber in cookie-sanitizer applies value
+ * redaction before any path-touching log line.
+ */
+/**
+ * Parse a Netscape-format cookie string into canonical records.
+ *
+ * Skips:
+ * - blank lines
+ * - comments (lines starting with `#` but not `#HttpOnly_`)
+ * - malformed rows (< 7 columns)
+ *
+ * Never throws; returns empty array if input is invalid.
+ */
+export function parseNetscape(text) {
+    if (typeof text !== "string" || text.length === 0)
+        return [];
+    const rows = [];
+    const lines = text.split(/\r?\n/);
+    for (const raw of lines) {
+        if (!raw)
+            continue;
+        let line = raw;
+        let httpOnly = false;
+        if (line.startsWith("#HttpOnly_")) {
+            httpOnly = true;
+            line = line.slice("#HttpOnly_".length);
+        }
+        else if (line.startsWith("#")) {
+            // Plain comment line (Netscape / curl spec).
+            continue;
+        }
+        const cols = line.split("\t");
+        if (cols.length < 7)
+            continue;
+        const [domain, _flag, cookiePath, secure, expires, name, value] = cols;
+        if (!name || !value)
+            continue;
+        rows.push({
+            domain: (domain ?? "").trim(),
+            path: (cookiePath ?? "/").trim() || "/",
+            secure: (secure ?? "FALSE").toUpperCase() === "TRUE",
+            httpOnly,
+            expires: parseInt(expires ?? "0", 10) || 0,
+            name: name.trim(),
+            value, // intentional: keep as-is for in-memory pipeline; never log
+        });
+    }
+    // Map to CanonicalCookie shape.
+    return rows.map((r) => ({
+        name: r.name,
+        value: r.value,
+        domain: r.domain,
+        path: r.path,
+        expires: r.expires === 0 ? undefined : r.expires,
+        secure: r.secure,
+        httpOnly: r.httpOnly,
+    }));
+}
+/**
+ * Serialize a list of canonical cookies back to Netscape format.
+ * Used by atomic-write.ts to produce the canonical cache.
+ *
+ * Output uses the canonical column order:
+ *   domain  flag  path  secure  expires  name  value
+ *
+ * `flag` is FALSE per curl spec (HttpOnly is encoded as `#HttpOnly_`).
+ * Cookie values are NEVER logged during the round-trip.
+ */
+export function serializeNetscape(cookies) {
+    const out = ["# Netscape HTTP Cookie File", ""];
+    for (const c of cookies) {
+        if (!c.name || !c.value)
+            continue;
+        const domain = c.domain ?? "";
+        const path = c.path ?? "/";
+        const secure = c.secure ? "TRUE" : "FALSE";
+        const expires = c.expires != null ? String(c.expires) : "0";
+        const line = [domain, "FALSE", path, secure, expires, c.name, c.value].join("\t");
+        out.push(c.httpOnly ? `#HttpOnly_${line}` : line);
+    }
+    return out.join("\n") + "\n";
+}
+//# sourceMappingURL=parse-netscape.js.map

package/packages/cookie-sanitizer/dist/parse-netscape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-netscape.js","sourceRoot":"","sources":["../src/parse-netscape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,IAAI,GAAG,GAAG,CAAC;QACf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,6CAA6C;YAC7C,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE9B,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,SAAS;QAE9B,IAAI,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC7B,IAAI,EAAE,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG;YACvC,MAAM,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YACpD,QAAQ;YACR,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,4DAA4D;SACnE,CAAC,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC3D,MAAM,GAAG,GAAa,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAE1D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAC1E,IAAI,CACJ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAC9B,CAAC"}

package/packages/cookie-sanitizer/dist/sync.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Sync orchestrator — the heart of the sanitizer.
+ *
+ * Pipeline (per run):
+ *   1. Enumerate files in the drop folder (one level + one sublevel).
+ *   2. Read each file. Detect format. Parse.
+ *   3. Concatenate cookies from all parsed files.
+ *   4. Infer provider from filename + cookies.
+ *   5. Normalize (dedupe, expire, domain-match).
+ *   6. Serialize to Netscape and write to the canonical cache (atomic).
+ *
+ * Returns a SyncResult. Never throws — returns structured errors in `result.errors`.
+ *
+ * Sec-001: Cookie VALUES never appear in any log line. Diagnostics
+ * use file basenames and 64-char previews with values redacted.
+ */
+import type { SyncOptions, SyncResult } from "./types.js";
+/** Default drop-folder location. */
+export declare const DEFAULT_DROP_DIR: string;
+/**
+ * Enumerate readable files inside `dir`, up to MAX_DEPTH.
+ * Returns absolute paths. Skips dotfiles, editor temp files.
+ *
+ * `excludePath` (optional) — absolute path of a file to skip, e.g.
+ * the canonical cache file (so we never recursively read it).
+ */
+export declare function enumerateDropFiles(dir: string, excludePath?: string): string[];
+/**
+ * Read a single input file as text, capped at MAX_INPUT_BYTES.
+ * Returns null + a `reason` if the file can't be read.
+ */
+export declare function readInputFile(filePath: string): {
+    text: string;
+    reason?: string;
+};
+/**
+ * Run the full sync pipeline.
+ *
+ * Options:
+ *   - dropDir      default: ~/.pi-harness-runtime/cookies/
+ *   - cachePath    default: ~/.config/<provider>-cookies.txt
+ *   - providerHint override inference (skips filename/domain checks)
+ *   - dryRun       skip the actual file write (still returns would-be result)
+ *
+ * Returns a SyncResult. Never throws.
+ */
+export declare function sync(opts?: SyncOptions): SyncResult;
+/**
+ * Has-any-input check: true if the drop folder has anything readable.
+ * Cheap — does a single `readdirSync`; no parsing.
+ */
+export declare function hasAnyCookieSource(dropDir?: string): boolean;
+/**
+ * Convenience: cache path for the dominant provider in the drop folder,
+ * or null if nothing's there. Used by `footer-status.ts` to ask "should
+ * the footer hint point at this provider?"
+ */
+export declare function inferCachePath(dropDir?: string): string | null;
+export { inferProvider, inferProviderFromFilename, inferProviderFromCookies, } from "./infer-provider.js";
+export { defaultCachePathFor } from "./atomic-write.js";
+export type { SyncOptions, SyncResult, CanonicalCookie, ProviderId, DetectedFile, CookieFileFormat, WatcherEvent, } from "./types.js";
+//# sourceMappingURL=sync.d.ts.map

package/packages/cookie-sanitizer/dist/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,OAAO,KAAK,EAAmB,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY3E,oCAAoC;AACpC,eAAO,MAAM,gBAAgB,QAI5B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,MAAM,GAClB,MAAM,EAAE,CA6CV;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAmBA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,UAAU,CAmHvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,GAAE,MAAyB,GAChC,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC7B,OAAO,GAAE,MAAyB,GAChC,MAAM,GAAG,IAAI,CAqBf;AAED,OAAO,EACN,aAAa,EACb,yBAAyB,EACzB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EACX,WAAW,EACX,UAAU,EACV,eAAe,EACf,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,GACZ,MAAM,YAAY,CAAC"}

package/packages/cookie-sanitizer/dist/sync.js

@@ -0,0 +1,269 @@
+/**
+ * Sync orchestrator — the heart of the sanitizer.
+ *
+ * Pipeline (per run):
+ *   1. Enumerate files in the drop folder (one level + one sublevel).
+ *   2. Read each file. Detect format. Parse.
+ *   3. Concatenate cookies from all parsed files.
+ *   4. Infer provider from filename + cookies.
+ *   5. Normalize (dedupe, expire, domain-match).
+ *   6. Serialize to Netscape and write to the canonical cache (atomic).
+ *
+ * Returns a SyncResult. Never throws — returns structured errors in `result.errors`.
+ *
+ * Sec-001: Cookie VALUES never appear in any log line. Diagnostics
+ * use file basenames and 64-char previews with values redacted.
+ */
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, } from "node:fs";
+import { join } from "node:path";
+import { buildDetectedFile, safePreview } from "./detect-format.js";
+import { parseNetscape, serializeNetscape } from "./parse-netscape.js";
+import { parseEditThisCookieJson } from "./parse-json.js";
+import { normalize } from "./normalize.js";
+import { inferProvider } from "./infer-provider.js";
+import { atomicWriteFileSync, defaultCachePathFor } from "./atomic-write.js";
+/** Max depth for the drop-folder walk (one-level + one subfolder). */
+const MAX_DEPTH = 2;
+/** Max size of a single input file we'll parse (5 MB). */
+const MAX_INPUT_BYTES = 5 * 1024 * 1024;
+/** Default drop-folder location. */
+export const DEFAULT_DROP_DIR = join(process.env.HOME ?? "/tmp", ".pi-harness-runtime", "cookies");
+/**
+ * Enumerate readable files inside `dir`, up to MAX_DEPTH.
+ * Returns absolute paths. Skips dotfiles, editor temp files.
+ *
+ * `excludePath` (optional) — absolute path of a file to skip, e.g.
+ * the canonical cache file (so we never recursively read it).
+ */
+export function enumerateDropFiles(dir, excludePath) {
+    if (!existsSync(dir))
+        return [];
+    let stat;
+    try {
+        stat = statSync(dir);
+    }
+    catch {
+        return [];
+    }
+    if (!stat.isDirectory())
+        return [];
+    const result = [];
+    function walk(current, depth) {
+        if (depth > MAX_DEPTH)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(current);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            // Skip dotfiles, editor temp/swap.
+            if (name.startsWith("."))
+                continue;
+            if (name.endsWith("~") || name.endsWith(".swp"))
+                continue;
+            const full = join(current, name);
+            if (excludePath && full === excludePath)
+                continue;
+            let st;
+            try {
+                st = statSync(full);
+            }
+            catch {
+                continue;
+            }
+            if (st.isFile()) {
+                result.push(full);
+            }
+            else if (st.isDirectory() && depth < MAX_DEPTH) {
+                walk(full, depth + 1);
+            }
+        }
+    }
+    walk(dir, 0);
+    return result;
+}
+/**
+ * Read a single input file as text, capped at MAX_INPUT_BYTES.
+ * Returns null + a `reason` if the file can't be read.
+ */
+export function readInputFile(filePath) {
+    let stat;
+    try {
+        stat = statSync(filePath);
+    }
+    catch {
+        return { text: "", reason: "file not accessible" };
+    }
+    if (!stat.isFile())
+        return { text: "", reason: "not a regular file" };
+    if (stat.size > MAX_INPUT_BYTES) {
+        return { text: "", reason: `file too large (${stat.size} bytes)` };
+    }
+    try {
+        return { text: readFileSync(filePath, "utf8") };
+    }
+    catch (e) {
+        return {
+            text: "",
+            reason: `read failed: ${e instanceof Error ? e.message : String(e)}`,
+        };
+    }
+}
+/**
+ * Run the full sync pipeline.
+ *
+ * Options:
+ *   - dropDir      default: ~/.pi-harness-runtime/cookies/
+ *   - cachePath    default: ~/.config/<provider>-cookies.txt
+ *   - providerHint override inference (skips filename/domain checks)
+ *   - dryRun       skip the actual file write (still returns would-be result)
+ *
+ * Returns a SyncResult. Never throws.
+ */
+export function sync(opts = {}) {
+    const dropDir = opts.dropDir ?? DEFAULT_DROP_DIR;
+    // Ensure the drop directory exists so users don't need to mkdir manually
+    if (!existsSync(dropDir))
+        mkdirSync(dropDir, { recursive: true });
+    const tmpResult = {
+        provider: null,
+        processedFiles: [],
+        skippedFiles: [],
+        totalCookies: 0,
+        cachePath: "",
+        sourceDir: dropDir,
+        wrote: false,
+        errors: [],
+    };
+    const files = enumerateDropFiles(dropDir, opts.cachePath);
+    if (files.length === 0) {
+        // Nothing to do — no error, just nothing. Caller decides whether
+        // to surface this to the user.
+        return tmpResult;
+    }
+    const allCookies = [];
+    let firstBasename;
+    for (const filePath of files) {
+        const { text, reason } = readInputFile(filePath);
+        if (reason) {
+            const det = buildDetectedFile(filePath, "");
+            tmpResult.skippedFiles.push({ basename: det.basename, reason });
+            tmpResult.errors.push({ basename: det.basename, message: reason });
+            continue;
+        }
+        const det = buildDetectedFile(filePath, text);
+        if (det.format == null) {
+            const preview = safePreview(text);
+            tmpResult.skippedFiles.push({
+                basename: det.basename,
+                reason: `unrecognised format (preview: ${preview})`,
+            });
+            tmpResult.errors.push({
+                basename: det.basename,
+                message: "unrecognised format",
+            });
+            continue;
+        }
+        let cookies = [];
+        if (det.format === "netscape") {
+            cookies = parseNetscape(text);
+        }
+        else if (det.format === "edit-this-cookie-json") {
+            cookies = parseEditThisCookieJson(text);
+        }
+        if (cookies.length === 0) {
+            tmpResult.skippedFiles.push({
+                basename: det.basename,
+                reason: `${det.format} parsed but yielded 0 cookies`,
+            });
+            continue;
+        }
+        allCookies.push(...cookies);
+        tmpResult.processedFiles.push(det.basename);
+        if (!firstBasename)
+            firstBasename = det.basename;
+    }
+    if (allCookies.length === 0) {
+        return tmpResult;
+    }
+    const provider = inferProvider(firstBasename, allCookies, opts.providerHint);
+    if (!provider) {
+        tmpResult.errors.push({
+            basename: firstBasename ?? "<unknown>",
+            message: "could not infer provider (no filename/domain match)",
+        });
+        return tmpResult;
+    }
+    tmpResult.provider = provider;
+    const cachePath = opts.cachePath ?? defaultCachePathFor(provider);
+    tmpResult.cachePath = cachePath;
+    const normalized = normalize(allCookies, provider);
+    tmpResult.totalCookies = normalized.length;
+    if (normalized.length === 0) {
+        // All cookies were filtered (expired / wrong domain).
+        tmpResult.errors.push({
+            basename: firstBasename ?? "<unknown>",
+            message: "all cookies filtered (expired or wrong-provider domain)",
+        });
+        return tmpResult;
+    }
+    if (opts.dryRun) {
+        tmpResult.wrote = false;
+        return tmpResult;
+    }
+    const serialized = serializeNetscape(normalized);
+    try {
+        atomicWriteFileSync(cachePath, serialized);
+        tmpResult.wrote = true;
+    }
+    catch (e) {
+        tmpResult.errors.push({
+            basename: firstBasename ?? "<unknown>",
+            message: `atomic write failed: ${e instanceof Error ? e.message : String(e)}`,
+        });
+    }
+    return tmpResult;
+}
+/**
+ * Has-any-input check: true if the drop folder has anything readable.
+ * Cheap — does a single `readdirSync`; no parsing.
+ */
+export function hasAnyCookieSource(dropDir = DEFAULT_DROP_DIR) {
+    return enumerateDropFiles(dropDir).length > 0;
+}
+/**
+ * Convenience: cache path for the dominant provider in the drop folder,
+ * or null if nothing's there. Used by `footer-status.ts` to ask "should
+ * the footer hint point at this provider?"
+ */
+export function inferCachePath(dropDir = DEFAULT_DROP_DIR) {
+    const files = enumerateDropFiles(dropDir);
+    if (files.length === 0)
+        return null;
+    let firstBasename;
+    const cookies = [];
+    for (const fp of files) {
+        const { text } = readInputFile(fp);
+        if (!text)
+            continue;
+        const det = buildDetectedFile(fp, text);
+        if (!det.format)
+            continue;
+        if (det.format === "netscape")
+            cookies.push(...parseNetscape(text));
+        else if (det.format === "edit-this-cookie-json")
+            cookies.push(...parseEditThisCookieJson(text));
+        if (!firstBasename)
+            firstBasename = det.basename;
+    }
+    const provider = inferProvider(firstBasename, cookies);
+    if (!provider)
+        return null;
+    return defaultCachePathFor(provider);
+}
+export { inferProvider, inferProviderFromFilename, inferProviderFromCookies, } from "./infer-provider.js";
+export { defaultCachePathFor } from "./atomic-write.js";
+//# sourceMappingURL=sync.js.map

package/packages/cookie-sanitizer/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,GACR,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,sEAAsE;AACtE,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,0DAA0D;AAC1D,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,oCAAoC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CACnC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAC1B,qBAAqB,EACrB,SAAS,CACT,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CACjC,GAAW,EACX,WAAoB;IAEpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACJ,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,SAAS,IAAI,CAAC,OAAe,EAAE,KAAa;QAC3C,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC5B,mCAAmC;YACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,WAAW,IAAI,IAAI,KAAK,WAAW;gBAAE,SAAS;YAElD,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACJ,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YAED,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAI7C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACJ,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACtE,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACpE,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,IAAI,CAAC,IAAI,GAAgB,EAAE;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,yEAAyE;IACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,MAAM,SAAS,GAAe;QAC7B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,EAAE;KACV,CAAC;IAEF,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,iEAAiE;QACjE,+BAA+B;QAC/B,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,IAAI,aAAiC,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5C,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,SAAS;QACV,CAAC;QAED,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC;gBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,iCAAiC,OAAO,GAAG;aACnD,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,qBAAqB;aAC9B,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YACnD,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC;gBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,+BAA+B;aACpD,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC5B,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa;YAAE,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,aAAa,IAAI,WAAW;YACtC,OAAO,EAAE,qDAAqD;SAC9D,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAClE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;IAEhC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACnD,SAAS,CAAC,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC;IAE3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,sDAAsD;QACtD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,aAAa,IAAI,WAAW;YACtC,OAAO,EAAE,yDAAyD;SAClE,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC;QACJ,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3C,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,aAAa,IAAI,WAAW;YACtC,OAAO,EAAE,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC7E,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAAO,GAAW,gBAAgB;IAElC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAO,GAAW,gBAAgB;IAElC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,aAAiC,CAAC;IACtC,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;aAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,uBAAuB;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa;YAAE,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,OAAO,EACN,aAAa,EACb,yBAAyB,EACzB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/packages/cookie-sanitizer/dist/types.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Cookie sanitizer types.
+ *
+ * The data model is intentionally simple and explicit. Cookies flow in
+ * from one of two input formats (Netscape, EditThisCookie JSON), are
+ * normalised here into a canonical record, and written out as a single
+ * standard Netscape file by the writer.
+ *
+ * Cookie values are NEVER logged anywhere. They live in memory only
+ * for the duration of one parse → normalize → write cycle.
+ */
+/** Provider identifier — inferred from filename or dominant cookie domain. */
+export type ProviderId = "minimax" | "anthropic" | "openai" | "glm" | "openrouter" | string;
+/** Input file format. */
+export type CookieFileFormat = "netscape" | "edit-this-cookie-json";
+/** A single cookie in canonical (post-normalize) form. */
+export interface CanonicalCookie {
+    /** Provider this cookie belongs to. Set during infer-provider pass. */
+    provider?: ProviderId;
+    /** Cookie name (e.g. "_token", "_ga"). Must be non-empty after normalization. */
+    name: string;
+    /** Cookie value. NEVER logged. */
+    value: string;
+    /** Cookie domain (e.g. ".minimax.io", "platform.minimax.io"). */
+    domain: string;
+    /** URL path this cookie applies to (default "/"). */
+    path: string;
+    /** Expires at — Unix seconds since epoch. NaN or undefined = session cookie. */
+    expires?: number;
+    /** Whether this is a Secure-only cookie (HTTPS-only). */
+    secure: boolean;
+    /** Whether this cookie is HTTP-only (no JS access). */
+    httpOnly: boolean;
+}
+/** Result of detecting a single file's format. */
+export interface DetectedFile {
+    /** Absolute path (or relative, in tests). */
+    path: string;
+    /** Filename only (no directory). Used for log lines — never the full path contents. */
+    basename: string;
+    /** Detected format. */
+    format: CookieFileFormat | null;
+    /** Raw text content (truncated to first 4096 chars for safety in debug logs). */
+    text: string;
+    /** Parse error if format is null. Null error means format is unknown. */
+    error?: string;
+}
+/** Sync result for the whole drop folder. */
+export interface SyncResult {
+    /** Provider that was inferred. Null if inference failed. */
+    provider: ProviderId | null;
+    /** Files considered (readable, recognized format). */
+    processedFiles: string[];
+    /** Files skipped (unreadable, unknown format). */
+    skippedFiles: Array<{
+        basename: string;
+        reason: string;
+    }>;
+    /** Total cookies after dedupe across all files. */
+    totalCookies: number;
+    /** Path the canonical cache was written to (relative or absolute). */
+    cachePath: string;
+    /** Source path the cookies came from. */
+    sourceDir: string;
+    /** True if the cache was actually written (no-op if no new data). */
+    wrote: boolean;
+    /** Errors during sync (per-file, never value-bearing). */
+    errors: Array<{
+        basename: string;
+        message: string;
+    }>;
+}
+/** Sync options. */
+export interface SyncOptions {
+    /** Override the default drop-folder location. */
+    dropDir?: string;
+    /** Override the default canonical cache location. */
+    cachePath?: string;
+    /** Provider hint (skips filename/domain inference). */
+    providerHint?: ProviderId;
+    /** Skip writing the cache file even if normalization produced cookies. */
+    dryRun?: boolean;
+}
+/** Watcher events emitted by the live watcher. */
+export type WatcherEvent = {
+    kind: "sync-ok";
+    provider: ProviderId;
+    cachePath: string;
+    cookies: number;
+} | {
+    kind: "sync-skip";
+    reason: string;
+} | {
+    kind: "sync-error";
+    message: string;
+} | {
+    kind: "watcher-error";
+    message: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/packages/cookie-sanitizer/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GACnB,SAAS,GACT,WAAW,GACX,QAAQ,GACR,KAAK,GACL,YAAY,GACZ,MAAM,CAAC;AAEV,yBAAyB;AACzB,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,uBAAuB,CAAC;AAEpE,0DAA0D;AAC1D,MAAM,WAAW,eAAe;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC;IAChB,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC5B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IAC1B,4DAA4D;IAC5D,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kDAAkD;IAClD,YAAY,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAC;IACf,0DAA0D;IAC1D,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,oBAAoB;AACpB,MAAM,WAAW,WAAW;IAC3B,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,kDAAkD;AAClD,MAAM,MAAM,YAAY,GACrB;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACf,GACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/packages/cookie-sanitizer/dist/types.js

@@ -0,0 +1,13 @@
+/**
+ * Cookie sanitizer types.
+ *
+ * The data model is intentionally simple and explicit. Cookies flow in
+ * from one of two input formats (Netscape, EditThisCookie JSON), are
+ * normalised here into a canonical record, and written out as a single
+ * standard Netscape file by the writer.
+ *
+ * Cookie values are NEVER logged anywhere. They live in memory only
+ * for the duration of one parse → normalize → write cycle.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/packages/cookie-sanitizer/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}