shieldcortex 4.9.1 → 4.10.0

package/dist/environment/index.js

@@ -0,0 +1,5 @@
+export { scanUrl } from './scanner.js';
+export { scoreProvenance } from './provenance.js';
+export { analyseHidden } from './hidden-detector.js';
+export { deriveTaint } from './taint.js';
+export { formatEnvScanReport, formatEnvScanMarkdown } from './report.js';

package/dist/environment/provenance.d.ts

@@ -0,0 +1,6 @@
+import type { ProvenanceResult } from './types.js';
+export declare function scoreProvenance(args: {
+    originalUrl: string;
+    finalUrl: string;
+    redirectChain: string[];
+}): ProvenanceResult;

package/dist/environment/provenance.js

@@ -0,0 +1,127 @@
+const SUSPICIOUS_TLDS = new Set([
+    'zip', 'mov', 'top', 'xyz', 'click', 'country', 'link', 'gq', 'ml', 'tk', 'cf', 'ga',
+    'quest', 'sbs', 'rest', 'cyou', 'bond', 'cam', 'cfd', 'trade', 'download', 'racing',
+]);
+const KNOWN_GOOD_DOMAINS = new Set([
+    'github.com', 'raw.githubusercontent.com', 'gitlab.com', 'bitbucket.org',
+    'npmjs.com', 'registry.npmjs.org', 'pypi.org', 'rubygems.org', 'crates.io',
+    'anthropic.com', 'openai.com', 'google.com', 'cloudflare.com',
+    'stripe.com', 'mozilla.org', 'w3.org', 'ietf.org', 'python.org',
+    'rust-lang.org', 'golang.org', 'nodejs.org', 'typescriptlang.org',
+    'arxiv.org', 'wikipedia.org', 'wikimedia.org',
+    'shieldcortex.ai', 'drakonsystems.com',
+]);
+const KNOWN_BAD_DOMAINS = new Set([
+// intentionally empty — populated from threat feeds in later phases
+]);
+function extractRegistrableDomain(hostname) {
+    const parts = hostname.toLowerCase().split('.');
+    if (parts.length <= 2)
+        return hostname.toLowerCase();
+    return parts.slice(-2).join('.');
+}
+function isIpAddress(hostname) {
+    return /^\d{1,3}(\.\d{1,3}){3}$/.test(hostname) || /:/.test(hostname);
+}
+function hasPunycode(hostname) {
+    return /xn--/i.test(hostname);
+}
+export function scoreProvenance(args) {
+    const reasons = [];
+    let score = 0.5;
+    let finalParsed;
+    try {
+        finalParsed = new URL(args.finalUrl);
+    }
+    catch {
+        return {
+            score: 0,
+            signals: {
+                tls: false,
+                redirectCount: args.redirectChain.length,
+                redirectChain: args.redirectChain,
+                finalDomain: '',
+                suspiciousTld: false,
+                allowlisted: false,
+                denylisted: false,
+                isIpAddress: false,
+                hasUserInfo: false,
+                hasPunycode: false,
+            },
+            reasons: ['Unparseable final URL'],
+        };
+    }
+    const tls = finalParsed.protocol === 'https:';
+    const finalDomain = extractRegistrableDomain(finalParsed.hostname);
+    const tld = finalDomain.split('.').pop() || '';
+    const suspiciousTld = SUSPICIOUS_TLDS.has(tld);
+    const allowlisted = KNOWN_GOOD_DOMAINS.has(finalDomain) || KNOWN_GOOD_DOMAINS.has(finalParsed.hostname);
+    const denylisted = KNOWN_BAD_DOMAINS.has(finalDomain) || KNOWN_BAD_DOMAINS.has(finalParsed.hostname);
+    const ipHost = isIpAddress(finalParsed.hostname);
+    const userInfo = Boolean(finalParsed.username || finalParsed.password);
+    const punycode = hasPunycode(finalParsed.hostname);
+    if (tls) {
+        score += 0.1;
+        reasons.push('TLS connection');
+    }
+    else {
+        score -= 0.25;
+        reasons.push('Plain HTTP (no TLS)');
+    }
+    if (allowlisted) {
+        score += 0.3;
+        reasons.push(`Allowlisted domain: ${finalDomain}`);
+    }
+    if (denylisted) {
+        score -= 0.8;
+        reasons.push(`Denylisted domain: ${finalDomain}`);
+    }
+    if (suspiciousTld) {
+        score -= 0.2;
+        reasons.push(`Suspicious TLD: .${tld}`);
+    }
+    if (ipHost) {
+        score -= 0.15;
+        reasons.push('Host is raw IP address');
+    }
+    if (userInfo) {
+        score -= 0.3;
+        reasons.push('URL contains embedded credentials');
+    }
+    if (punycode) {
+        score -= 0.1;
+        reasons.push('Host uses Punycode (possible homograph attack)');
+    }
+    if (args.redirectChain.length > 0) {
+        const originalDomain = (() => {
+            try {
+                return extractRegistrableDomain(new URL(args.originalUrl).hostname);
+            }
+            catch {
+                return '';
+            }
+        })();
+        if (originalDomain && originalDomain !== finalDomain) {
+            score -= 0.1;
+            reasons.push(`Cross-domain redirect: ${originalDomain} → ${finalDomain}`);
+        }
+        if (args.redirectChain.length >= 3) {
+            score -= 0.1;
+            reasons.push(`${args.redirectChain.length} redirects before final response`);
+        }
+    }
+    score = Math.max(0, Math.min(1, score));
+    const signals = {
+        tls,
+        redirectCount: args.redirectChain.length,
+        redirectChain: args.redirectChain,
+        finalDomain,
+        suspiciousTld,
+        allowlisted,
+        denylisted,
+        isIpAddress: ipHost,
+        hasUserInfo: userInfo,
+        hasPunycode: punycode,
+    };
+    return { score, signals, reasons };
+}

package/dist/environment/report.d.ts

@@ -0,0 +1,3 @@
+import type { EnvironmentScanResult } from './types.js';
+export declare function formatEnvScanReport(result: EnvironmentScanResult): string;
+export declare function formatEnvScanMarkdown(result: EnvironmentScanResult): string;

package/dist/environment/report.js

@@ -0,0 +1,89 @@
+const TAINT_COLOURS = {
+    trusted: '\x1b[32m',
+    untrusted: '\x1b[33m',
+    suspicious: '\x1b[91m',
+    hostile: '\x1b[31m',
+};
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const RESET = '\x1b[0m';
+export function formatEnvScanReport(result) {
+    const lines = [];
+    const colour = TAINT_COLOURS[result.taint.label];
+    lines.push('');
+    lines.push(`${BOLD}Environment Firewall Report${RESET}`);
+    lines.push('─'.repeat(60));
+    lines.push(`  URL:          ${result.url}`);
+    if (result.finalUrl !== result.url)
+        lines.push(`  Final URL:    ${result.finalUrl}`);
+    lines.push(`  Status:       ${result.statusCode ?? 'n/a'} (${result.bytesReceived} bytes, ${result.fetchDurationMs}ms)`);
+    lines.push(`  Taint:        ${colour}${result.taint.label.toUpperCase()}${RESET} — ${result.taint.reason}`);
+    lines.push(`  Provenance:   ${result.provenance.score.toFixed(2)} (${result.provenance.signals.finalDomain})`);
+    if (result.provenance.reasons.length > 0) {
+        lines.push(`\n${BOLD}Provenance signals:${RESET}`);
+        for (const r of result.provenance.reasons)
+            lines.push(`  - ${r}`);
+    }
+    if (result.hidden.hits.length > 0) {
+        lines.push(`\n${BOLD}Hidden content (${result.hidden.hits.length}):${RESET}`);
+        const grouped = new Map();
+        for (const h of result.hidden.hits)
+            grouped.set(h.technique, (grouped.get(h.technique) ?? 0) + 1);
+        for (const [technique, count] of grouped)
+            lines.push(`  - ${technique}: ${count}`);
+    }
+    if (result.injection.visibleHits.length > 0 || result.injection.hiddenHits.length > 0) {
+        lines.push(`\n${BOLD}Injection patterns:${RESET}`);
+        for (const hit of [...result.injection.hiddenHits, ...result.injection.visibleHits]) {
+            const surfaceTag = hit.surface === 'hidden' ? `${TAINT_COLOURS.hostile}[HIDDEN]${RESET}` : `${DIM}[visible]${RESET}`;
+            lines.push(`  ${surfaceTag} ${hit.pattern}: "${hit.snippet.slice(0, 80)}"`);
+        }
+    }
+    if (result.risks.length > 0) {
+        lines.push(`\n${BOLD}Risks:${RESET}`);
+        for (const r of result.risks)
+            lines.push(`  - ${r}`);
+    }
+    lines.push('');
+    lines.push(result.summary);
+    lines.push('');
+    return lines.join('\n');
+}
+export function formatEnvScanMarkdown(result) {
+    const lines = [];
+    lines.push(`# Environment Firewall Report`);
+    lines.push('');
+    lines.push(`- **URL**: ${result.url}`);
+    if (result.finalUrl !== result.url)
+        lines.push(`- **Final URL**: ${result.finalUrl}`);
+    lines.push(`- **Status**: ${result.statusCode ?? 'n/a'} (${result.bytesReceived} bytes, ${result.fetchDurationMs}ms)`);
+    lines.push(`- **Taint**: \`${result.taint.label.toUpperCase()}\` — ${result.taint.reason}`);
+    lines.push(`- **Provenance score**: ${result.provenance.score.toFixed(2)} (${result.provenance.signals.finalDomain})`);
+    if (result.provenance.reasons.length > 0) {
+        lines.push('');
+        lines.push('## Provenance signals');
+        for (const r of result.provenance.reasons)
+            lines.push(`- ${r}`);
+    }
+    if (result.hidden.hits.length > 0) {
+        lines.push('');
+        lines.push('## Hidden content');
+        for (const h of result.hidden.hits) {
+            lines.push(`- \`${h.technique}\` (${h.charCount} chars): ${h.sample}`);
+        }
+    }
+    if (result.injection.visibleHits.length > 0 || result.injection.hiddenHits.length > 0) {
+        lines.push('');
+        lines.push('## Injection patterns');
+        for (const hit of [...result.injection.hiddenHits, ...result.injection.visibleHits]) {
+            lines.push(`- **[${hit.surface}]** \`${hit.pattern}\`: "${hit.snippet.slice(0, 120)}"`);
+        }
+    }
+    if (result.risks.length > 0) {
+        lines.push('');
+        lines.push('## Risks');
+        for (const r of result.risks)
+            lines.push(`- ${r}`);
+    }
+    return lines.join('\n');
+}

package/dist/environment/scanner.d.ts

@@ -0,0 +1,2 @@
+import type { EnvironmentScanResult } from './types.js';
+export declare function scanUrl(url: string): Promise<EnvironmentScanResult>;

package/dist/environment/scanner.js

@@ -0,0 +1,119 @@
+import { scanForInjection } from '../defence/iron-dome/injection-scanner.js';
+import { fetchWithProvenance } from './fetcher.js';
+import { scoreProvenance } from './provenance.js';
+import { analyseHidden } from './hidden-detector.js';
+import { deriveTaint } from './taint.js';
+function toHits(detections, surface) {
+    return detections.map((d) => ({
+        surface,
+        pattern: `${d.category}/${d.pattern}`,
+        snippet: d.match,
+    }));
+}
+function buildRisks(args) {
+    const risks = [];
+    if (args.hiddenHits.length > 0) {
+        risks.push(`${args.hiddenHits.length} injection pattern${args.hiddenHits.length === 1 ? '' : 's'} found in HIDDEN content — humans will never see this.`);
+    }
+    if (args.visibleHits.length > 0) {
+        risks.push(`${args.visibleHits.length} injection pattern${args.visibleHits.length === 1 ? '' : 's'} found in visible content.`);
+    }
+    const htmlComments = args.hidden.hits.filter((h) => h.technique === 'html_comment');
+    if (htmlComments.length > 0) {
+        risks.push(`${htmlComments.length} substantial HTML comment${htmlComments.length === 1 ? '' : 's'} — review for hidden agent instructions.`);
+    }
+    const layoutHides = args.hidden.hits.filter((h) => ['display_none', 'visibility_hidden', 'zero_font_size', 'offscreen_position', 'same_colour_text'].includes(h.technique));
+    if (layoutHides.length > 0) {
+        risks.push(`${layoutHides.length} CSS-hidden text region${layoutHides.length === 1 ? '' : 's'} — content visible to an agent parser but not a human reader.`);
+    }
+    if (args.hidden.hits.some((h) => h.technique === 'bidi_override')) {
+        risks.push('Unicode bidi override characters found — possible rendering-vs-parsing deception.');
+    }
+    if (args.hidden.hits.some((h) => h.technique === 'meta_refresh')) {
+        risks.push('Meta refresh redirect in document — agent may be steered to a different page.');
+    }
+    if (args.hidden.hits.some((h) => h.technique === 'zero_width_text')) {
+        risks.push('Zero-width characters in document — possible obfuscation or watermark.');
+    }
+    if (!args.provenance.signals.tls)
+        risks.push('Fetched over plain HTTP — content integrity not verified.');
+    if (args.provenance.signals.denylisted)
+        risks.push(`Final domain is denylisted: ${args.provenance.signals.finalDomain}.`);
+    if (args.provenance.signals.suspiciousTld)
+        risks.push(`Final domain uses a suspicious TLD (.${args.provenance.signals.finalDomain.split('.').pop()}).`);
+    if (args.provenance.signals.hasPunycode)
+        risks.push('Domain uses Punycode — possible homograph attack against a known brand.');
+    if (args.provenance.signals.isIpAddress)
+        risks.push('Request went to a raw IP address rather than a domain name.');
+    if (args.statusCode && args.statusCode >= 400)
+        risks.push(`HTTP ${args.statusCode} — response may be an error page rather than the intended content.`);
+    return risks;
+}
+function buildSummary(result) {
+    const lines = [];
+    lines.push(`Taint: ${result.taint.label.toUpperCase()} — ${result.taint.reason}`);
+    lines.push(`Provenance score: ${result.provenance.score.toFixed(2)} (${result.provenance.signals.finalDomain})`);
+    lines.push(`Visible injection hits: ${result.injection.visibleHits.length}`);
+    lines.push(`Hidden injection hits: ${result.injection.hiddenHits.length}`);
+    lines.push(`Hidden content techniques: ${result.hidden.hits.length > 0 ? Array.from(new Set(result.hidden.hits.map((h) => h.technique))).join(', ') : 'none'}`);
+    return lines.join('\n');
+}
+export async function scanUrl(url) {
+    const fetched = await fetchWithProvenance(url);
+    const provenance = scoreProvenance({
+        originalUrl: url,
+        finalUrl: fetched.finalUrl,
+        redirectChain: fetched.redirectChain,
+    });
+    if (fetched.error || !fetched.body) {
+        const hidden = { hits: [], hiddenCharCount: 0, visibleText: '', hiddenText: '' };
+        const injection = { visibleHits: [], hiddenHits: [] };
+        const taint = deriveTaint({ provenance, hidden, visibleHits: [], hiddenHits: [] });
+        const risks = buildRisks({ provenance, hidden, visibleHits: [], hiddenHits: [], statusCode: fetched.statusCode });
+        if (fetched.error)
+            risks.unshift(`Fetch failed: ${fetched.error}`);
+        const partial = { taint, provenance, injection, hidden, finalUrl: fetched.finalUrl };
+        return {
+            url,
+            finalUrl: fetched.finalUrl,
+            statusCode: fetched.statusCode,
+            contentType: fetched.contentType,
+            fetchedAt: new Date().toISOString(),
+            fetchDurationMs: fetched.durationMs,
+            bytesReceived: fetched.bytesReceived,
+            error: fetched.error,
+            provenance,
+            hidden,
+            injection,
+            taint,
+            risks,
+            summary: buildSummary(partial),
+        };
+    }
+    const hidden = analyseHidden(fetched.body);
+    const visibleScan = scanForInjection(hidden.visibleText);
+    const hiddenScan = scanForInjection(hidden.hiddenText);
+    const injection = {
+        visibleHits: toHits(visibleScan.detections, 'visible'),
+        hiddenHits: toHits(hiddenScan.detections, 'hidden'),
+    };
+    const taint = deriveTaint({ provenance, hidden, visibleHits: injection.visibleHits, hiddenHits: injection.hiddenHits });
+    const risks = buildRisks({ provenance, hidden, visibleHits: injection.visibleHits, hiddenHits: injection.hiddenHits, statusCode: fetched.statusCode });
+    const partial = { taint, provenance, injection, hidden, finalUrl: fetched.finalUrl };
+    return {
+        url,
+        finalUrl: fetched.finalUrl,
+        statusCode: fetched.statusCode,
+        contentType: fetched.contentType,
+        fetchedAt: new Date().toISOString(),
+        fetchDurationMs: fetched.durationMs,
+        bytesReceived: fetched.bytesReceived,
+        error: null,
+        provenance,
+        hidden,
+        injection,
+        taint,
+        risks,
+        summary: buildSummary(partial),
+    };
+}

package/dist/environment/taint.d.ts

@@ -0,0 +1,10 @@
+import type { HiddenAnalysis, InjectionHit, ProvenanceResult, TaintLabel } from './types.js';
+export declare function deriveTaint(args: {
+    provenance: ProvenanceResult;
+    hidden: HiddenAnalysis;
+    visibleHits: InjectionHit[];
+    hiddenHits: InjectionHit[];
+}): {
+    label: TaintLabel;
+    reason: string;
+};

package/dist/environment/taint.js

@@ -0,0 +1,43 @@
+export function deriveTaint(args) {
+    const { provenance, hidden, visibleHits, hiddenHits } = args;
+    if (provenance.signals.denylisted) {
+        return { label: 'hostile', reason: `Denylisted domain (${provenance.signals.finalDomain})` };
+    }
+    if (hiddenHits.length > 0) {
+        return {
+            label: 'hostile',
+            reason: `Injection pattern found inside hidden content (${hiddenHits.length} hit${hiddenHits.length === 1 ? '' : 's'})`,
+        };
+    }
+    if (hidden.hits.some((h) => h.technique === 'bidi_override')) {
+        return { label: 'suspicious', reason: 'Unicode bidi override characters detected (render vs parse mismatch risk)' };
+    }
+    const highRiskHidden = hidden.hits.filter((h) => h.technique === 'display_none' ||
+        h.technique === 'zero_font_size' ||
+        h.technique === 'same_colour_text' ||
+        h.technique === 'offscreen_position' ||
+        h.technique === 'visibility_hidden');
+    const highRiskHiddenChars = highRiskHidden.reduce((acc, h) => acc + h.charCount, 0);
+    if (highRiskHidden.length >= 3 || highRiskHiddenChars >= 150) {
+        return {
+            label: 'suspicious',
+            reason: `Hidden content via ${highRiskHidden[0]?.technique ?? 'layout tricks'} (${highRiskHidden.length} region${highRiskHidden.length === 1 ? '' : 's'}, ${highRiskHiddenChars} chars)`,
+        };
+    }
+    if (visibleHits.length > 0) {
+        return {
+            label: 'suspicious',
+            reason: `Injection pattern in visible content (${visibleHits.length} hit${visibleHits.length === 1 ? '' : 's'})`,
+        };
+    }
+    if (provenance.signals.allowlisted && provenance.score >= 0.7) {
+        return { label: 'trusted', reason: `Allowlisted domain (${provenance.signals.finalDomain})` };
+    }
+    if (provenance.score >= 0.6) {
+        return { label: 'untrusted', reason: `No hostile signals, provenance score ${provenance.score.toFixed(2)}` };
+    }
+    return {
+        label: 'suspicious',
+        reason: `Low provenance score (${provenance.score.toFixed(2)}): ${provenance.reasons.slice(0, 2).join('; ')}`,
+    };
+}

package/dist/environment/types.d.ts

@@ -0,0 +1,56 @@
+export type TaintLabel = 'trusted' | 'untrusted' | 'suspicious' | 'hostile';
+export interface ProvenanceSignals {
+    tls: boolean;
+    redirectCount: number;
+    redirectChain: string[];
+    finalDomain: string;
+    suspiciousTld: boolean;
+    allowlisted: boolean;
+    denylisted: boolean;
+    isIpAddress: boolean;
+    hasUserInfo: boolean;
+    hasPunycode: boolean;
+}
+export interface ProvenanceResult {
+    score: number;
+    signals: ProvenanceSignals;
+    reasons: string[];
+}
+export interface HiddenInstructionHit {
+    technique: 'display_none' | 'visibility_hidden' | 'zero_font_size' | 'same_colour_text' | 'offscreen_position' | 'aria_hidden' | 'html_comment' | 'script_tag' | 'bidi_override' | 'zero_width_text' | 'data_attribute' | 'meta_refresh';
+    sample: string;
+    charCount: number;
+}
+export interface HiddenAnalysis {
+    hits: HiddenInstructionHit[];
+    hiddenCharCount: number;
+    visibleText: string;
+    hiddenText: string;
+}
+export interface InjectionHit {
+    surface: 'visible' | 'hidden';
+    pattern: string;
+    snippet: string;
+}
+export interface EnvironmentScanResult {
+    url: string;
+    finalUrl: string;
+    statusCode: number | null;
+    contentType: string | null;
+    fetchedAt: string;
+    fetchDurationMs: number;
+    bytesReceived: number;
+    error: string | null;
+    provenance: ProvenanceResult;
+    hidden: HiddenAnalysis;
+    injection: {
+        visibleHits: InjectionHit[];
+        hiddenHits: InjectionHit[];
+    };
+    taint: {
+        label: TaintLabel;
+        reason: string;
+    };
+    risks: string[];
+    summary: string;
+}

package/dist/environment/types.js

@@ -0,0 +1 @@
+export {};

package/dist/index.js

@@ -805,6 +805,37 @@ ${bold}DOCS${reset}
         console.log(`\n${result.summary}\n`);
         process.exit(result.safe ? 0 : 1);
     }
+    // Handle "env" subcommand — Environment Firewall (Phase 1: scan a URL)
+    if (process.argv[2] === 'env') {
+        const sub = process.argv[3];
+        if (sub !== 'scan') {
+            console.error('Usage: shieldcortex env scan <url> [--json | --markdown]');
+            console.error('  Fetches the URL, scores provenance, detects hidden instructions,');
+            console.error('  runs injection patterns against visible + hidden content, and returns a taint label.');
+            process.exit(1);
+        }
+        const urlArg = process.argv[4];
+        if (!urlArg) {
+            console.error('Usage: shieldcortex env scan <url> [--json | --markdown]');
+            process.exit(1);
+        }
+        const wantsJson = process.argv.includes('--json');
+        const wantsMarkdown = process.argv.includes('--markdown');
+        const { scanUrl } = await import('./environment/index.js');
+        const { formatEnvScanReport, formatEnvScanMarkdown } = await import('./environment/index.js');
+        const result = await scanUrl(urlArg);
+        if (wantsJson) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else if (wantsMarkdown) {
+            console.log(formatEnvScanMarkdown(result));
+        }
+        else {
+            console.log(formatEnvScanReport(result));
+        }
+        const blocking = result.taint.label === 'hostile' ? 2 : result.taint.label === 'suspicious' ? 1 : 0;
+        process.exit(blocking);
+    }
     // Handle "scan-skills" subcommand — scan all installed skills/hooks
     if (process.argv[2] === 'scan-skills') {
         const { scanSkill, discoverSkillFiles } = await import('./defence/skill-scanner/index.js');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.9.1",
+  "version": "4.10.0",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -30,6 +30,10 @@
       "import": "./dist/defence/index.js",
       "types": "./dist/defence/index.d.ts"
     },
+    "./environment": {
+      "import": "./dist/environment/index.js",
+      "types": "./dist/environment/index.d.ts"
+    },
     "./lib": {
       "import": "./dist/lib.js",
       "types": "./dist/lib.d.ts"

package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/9f1d4_@tanstack_68dcbde9._.js

@@ -1,3 +0,0 @@
-module.exports=[15896,2655,a=>{"use strict";var b={setTimeout:(a,b)=>setTimeout(a,b),clearTimeout:a=>clearTimeout(a),setInterval:(a,b)=>setInterval(a,b),clearInterval:a=>clearInterval(a)},c=new class{#a=b;#b=!1;setTimeoutProvider(a){this.#a=a}setTimeout(a,b){return this.#a.setTimeout(a,b)}clearTimeout(a){this.#a.clearTimeout(a)}setInterval(a,b){return this.#a.setInterval(a,b)}clearInterval(a){this.#a.clearInterval(a)}};function d(a){setTimeout(a,0)}function e(){}function f(a,b){return"function"==typeof a?a(b):a}function g(a){return"number"==typeof a&&a>=0&&a!==1/0}function h(a,b){return Math.max(a+(b||0)-Date.now(),0)}function i(a,b){return"function"==typeof a?a(b):a}function j(a,b){return"function"==typeof a?a(b):a}function k(a,b){let{type:c="all",exact:d,fetchStatus:e,predicate:f,queryKey:g,stale:h}=a;if(g){if(d){if(b.queryHash!==m(g,b.options))return!1}else if(!o(b.queryKey,g))return!1}if("all"!==c){let a=b.isActive();if("active"===c&&!a||"inactive"===c&&a)return!1}return("boolean"!=typeof h||b.isStale()===h)&&(!e||e===b.state.fetchStatus)&&(!f||!!f(b))}function l(a,b){let{exact:c,status:d,predicate:e,mutationKey:f}=a;if(f){if(!b.options.mutationKey)return!1;if(c){if(n(b.options.mutationKey)!==n(f))return!1}else if(!o(b.options.mutationKey,f))return!1}return(!d||b.state.status===d)&&(!e||!!e(b))}function m(a,b){return(b?.queryKeyHashFn||n)(a)}function n(a){return JSON.stringify(a,(a,b)=>s(b)?Object.keys(b).sort().reduce((a,c)=>(a[c]=b[c],a),{}):b)}function o(a,b){return a===b||typeof a==typeof b&&!!a&&!!b&&"object"==typeof a&&"object"==typeof b&&Object.keys(b).every(c=>o(a[c],b[c]))}a.s(["systemSetTimeoutZero",()=>d,"timeoutManager",()=>c],2655);var p=Object.prototype.hasOwnProperty;function q(a,b){if(!b||Object.keys(a).length!==Object.keys(b).length)return!1;for(let c in a)if(a[c]!==b[c])return!1;return!0}function r(a){return Array.isArray(a)&&a.length===Object.keys(a).length}function s(a){if(!t(a))return!1;let b=a.constructor;if(void 0===b)return!0;let c=b.prototype;return!!t(c)&&!!c.hasOwnProperty("isPrototypeOf")&&Object.getPrototypeOf(a)===Object.prototype}function t(a){return"[object Object]"===Object.prototype.toString.call(a)}function u(a){return new Promise(b=>{c.setTimeout(b,a)})}function v(a,b,c){return"function"==typeof c.structuralSharing?c.structuralSharing(a,b):!1!==c.structuralSharing?function a(b,c,d=0){if(b===c)return b;if(d>500)return c;let e=r(b)&&r(c);if(!e&&!(s(b)&&s(c)))return c;let f=(e?b:Object.keys(b)).length,g=e?c:Object.keys(c),h=g.length,i=e?Array(h):{},j=0;for(let k=0;k<h;k++){let h=e?k:g[k],l=b[h],m=c[h];if(l===m){i[h]=l,(e?k<f:p.call(b,h))&&j++;continue}if(null===l||null===m||"object"!=typeof l||"object"!=typeof m){i[h]=m;continue}let n=a(l,m,d+1);i[h]=n,n===l&&j++}return f===h&&j===f?b:i}(a,b):b}function w(a,b,c=0){let d=[...a,b];return c&&d.length>c?d.slice(1):d}function x(a,b,c=0){let d=[b,...a];return c&&d.length>c?d.slice(0,-1):d}var y=Symbol();function z(a,b){return!a.queryFn&&b?.initialPromise?()=>b.initialPromise:a.queryFn&&a.queryFn!==y?a.queryFn:()=>Promise.reject(Error(`Missing queryFn: '${a.queryHash}'`))}function A(a,b){return"function"==typeof a?a(...b):!!a}function B(a,b,c){let d,e=!1;return Object.defineProperty(a,"signal",{enumerable:!0,get:()=>(d??=b(),e||(e=!0,d.aborted?c():d.addEventListener("abort",c,{once:!0})),d)}),a}a.s(["addConsumeAwareSignal",()=>B,"addToEnd",()=>w,"addToStart",()=>x,"ensureQueryFn",()=>z,"functionalUpdate",()=>f,"hashKey",()=>n,"hashQueryKeyByOptions",()=>m,"isServer",()=>!0,"isValidTimeout",()=>g,"matchMutation",()=>l,"matchQuery",()=>k,"noop",()=>e,"partialMatchKey",()=>o,"replaceData",()=>v,"resolveEnabled",()=>j,"resolveStaleTime",()=>i,"shallowEqualObjects",()=>q,"shouldThrowError",()=>A,"skipToken",()=>y,"sleep",()=>u,"timeUntilStale",()=>h],15896)},98416,a=>{"use strict";let b,c,d,e,f,g;var h=a.i(2655).systemSetTimeoutZero,i=(b=[],c=0,d=a=>{a()},e=a=>{a()},f=h,{batch:a=>{let g;c++;try{g=a()}finally{let a;--c||(a=b,b=[],a.length&&f(()=>{e(()=>{a.forEach(a=>{d(a)})})}))}return g},batchCalls:a=>(...b)=>{g(()=>{a(...b)})},schedule:g=a=>{c?b.push(a):f(()=>{d(a)})},setNotifyFunction:a=>{d=a},setBatchNotifyFunction:a=>{e=a},setScheduler:a=>{f=a}});a.s(["notifyManager",()=>i])},16347,a=>{"use strict";var b=class{constructor(){this.listeners=new Set,this.subscribe=this.subscribe.bind(this)}subscribe(a){return this.listeners.add(a),this.onSubscribe(),()=>{this.listeners.delete(a),this.onUnsubscribe()}}hasListeners(){return this.listeners.size>0}onSubscribe(){}onUnsubscribe(){}};a.s(["Subscribable",()=>b])},7903,a=>{"use strict";var b=a.i(16347),c=a.i(15896),d=new class extends b.Subscribable{#c;#d;#e;constructor(){super(),this.#e=a=>{if(!c.isServer&&window.addEventListener){let b=()=>a();return window.addEventListener("visibilitychange",b,!1),()=>{window.removeEventListener("visibilitychange",b)}}}}onSubscribe(){this.#d||this.setEventListener(this.#e)}onUnsubscribe(){this.hasListeners()||(this.#d?.(),this.#d=void 0)}setEventListener(a){this.#e=a,this.#d?.(),this.#d=a(a=>{"boolean"==typeof a?this.setFocused(a):this.onFocus()})}setFocused(a){this.#c!==a&&(this.#c=a,this.onFocus())}onFocus(){let a=this.isFocused();this.listeners.forEach(b=>{b(a)})}isFocused(){return"boolean"==typeof this.#c?this.#c:globalThis.document?.visibilityState!=="hidden"}};a.s(["focusManager",()=>d])},30112,59643,60087,66336,9134,a=>{"use strict";var b=a.i(15896),c=a.i(98416),d=a.i(7903),e=a.i(16347),f=new class extends e.Subscribable{#f=!0;#d;#e;constructor(){super(),this.#e=a=>{if(!b.isServer&&window.addEventListener){let b=()=>a(!0),c=()=>a(!1);return window.addEventListener("online",b,!1),window.addEventListener("offline",c,!1),()=>{window.removeEventListener("online",b),window.removeEventListener("offline",c)}}}}onSubscribe(){this.#d||this.setEventListener(this.#e)}onUnsubscribe(){this.hasListeners()||(this.#d?.(),this.#d=void 0)}setEventListener(a){this.#e=a,this.#d?.(),this.#d=a(this.setOnline.bind(this))}setOnline(a){this.#f!==a&&(this.#f=a,this.listeners.forEach(b=>{b(a)}))}isOnline(){return this.#f}};function g(){let a,b,c=new Promise((c,d)=>{a=c,b=d});function d(a){Object.assign(c,a),delete c.resolve,delete c.reject}return c.status="pending",c.catch(()=>{}),c.resolve=b=>{d({status:"fulfilled",value:b}),a(b)},c.reject=a=>{d({status:"rejected",reason:a}),b(a)},c}function h(a){return Math.min(1e3*2**a,3e4)}function i(a){return(a??"online")!=="online"||f.isOnline()}a.s(["onlineManager",()=>f],59643),a.s(["pendingThenable",()=>g],60087);var j=class extends Error{constructor(a){super("CancelledError"),this.revert=a?.revert,this.silent=a?.silent}};function k(a){let c,e=!1,k=0,l=g(),m=()=>d.focusManager.isFocused()&&("always"===a.networkMode||f.isOnline())&&a.canRun(),n=()=>i(a.networkMode)&&a.canRun(),o=a=>{"pending"===l.status&&(c?.(),l.resolve(a))},p=a=>{"pending"===l.status&&(c?.(),l.reject(a))},q=()=>new Promise(b=>{c=a=>{("pending"!==l.status||m())&&b(a)},a.onPause?.()}).then(()=>{c=void 0,"pending"===l.status&&a.onContinue?.()}),r=()=>{let c;if("pending"!==l.status)return;let d=0===k?a.initialPromise:void 0;try{c=d??a.fn()}catch(a){c=Promise.reject(a)}Promise.resolve(c).then(o).catch(c=>{if("pending"!==l.status)return;let d=a.retry??3*!b.isServer,f=a.retryDelay??h,g="function"==typeof f?f(k,c):f,i=!0===d||"number"==typeof d&&k<d||"function"==typeof d&&d(k,c);e||!i?p(c):(k++,a.onFail?.(k,c),(0,b.sleep)(g).then(()=>m()?void 0:q()).then(()=>{e?p(c):r()}))})};return{promise:l,status:()=>l.status,cancel:b=>{if("pending"===l.status){let c=new j(b);p(c),a.onCancel?.(c)}},continue:()=>(c?.(),l),cancelRetry:()=>{e=!0},continueRetry:()=>{e=!1},canStart:n,start:()=>(n()?r():q().then(r),l)}}a.s(["CancelledError",()=>j,"canFetch",()=>i,"createRetryer",()=>k],66336);var l=a.i(2655),m=class{#g;destroy(){this.clearGcTimeout()}scheduleGc(){this.clearGcTimeout(),(0,b.isValidTimeout)(this.gcTime)&&(this.#g=l.timeoutManager.setTimeout(()=>{this.optionalRemove()},this.gcTime))}updateGcTime(a){this.gcTime=Math.max(this.gcTime||0,a??(b.isServer?1/0:3e5))}clearGcTimeout(){this.#g&&(l.timeoutManager.clearTimeout(this.#g),this.#g=void 0)}};a.s(["Removable",()=>m],9134);var n=class extends m{#h;#i;#j;#k;#l;#m;#n;constructor(a){super(),this.#n=!1,this.#m=a.defaultOptions,this.setOptions(a.options),this.observers=[],this.#k=a.client,this.#j=this.#k.getQueryCache(),this.queryKey=a.queryKey,this.queryHash=a.queryHash,this.#h=q(this.options),this.state=a.state??this.#h,this.scheduleGc()}get meta(){return this.options.meta}get promise(){return this.#l?.promise}setOptions(a){if(this.options={...this.#m,...a},this.updateGcTime(this.options.gcTime),this.state&&void 0===this.state.data){let a=q(this.options);void 0!==a.data&&(this.setState(p(a.data,a.dataUpdatedAt)),this.#h=a)}}optionalRemove(){this.observers.length||"idle"!==this.state.fetchStatus||this.#j.remove(this)}setData(a,c){let d=(0,b.replaceData)(this.state.data,a,this.options);return this.#o({data:d,type:"success",dataUpdatedAt:c?.updatedAt,manual:c?.manual}),d}setState(a,b){this.#o({type:"setState",state:a,setStateOptions:b})}cancel(a){let c=this.#l?.promise;return this.#l?.cancel(a),c?c.then(b.noop).catch(b.noop):Promise.resolve()}destroy(){super.destroy(),this.cancel({silent:!0})}reset(){this.destroy(),this.setState(this.#h)}isActive(){return this.observers.some(a=>!1!==(0,b.resolveEnabled)(a.options.enabled,this))}isDisabled(){return this.getObserversCount()>0?!this.isActive():this.options.queryFn===b.skipToken||this.state.dataUpdateCount+this.state.errorUpdateCount===0}isStatic(){return this.getObserversCount()>0&&this.observers.some(a=>"static"===(0,b.resolveStaleTime)(a.options.staleTime,this))}isStale(){return this.getObserversCount()>0?this.observers.some(a=>a.getCurrentResult().isStale):void 0===this.state.data||this.state.isInvalidated}isStaleByTime(a=0){return void 0===this.state.data||"static"!==a&&(!!this.state.isInvalidated||!(0,b.timeUntilStale)(this.state.dataUpdatedAt,a))}onFocus(){let a=this.observers.find(a=>a.shouldFetchOnWindowFocus());a?.refetch({cancelRefetch:!1}),this.#l?.continue()}onOnline(){let a=this.observers.find(a=>a.shouldFetchOnReconnect());a?.refetch({cancelRefetch:!1}),this.#l?.continue()}addObserver(a){this.observers.includes(a)||(this.observers.push(a),this.clearGcTimeout(),this.#j.notify({type:"observerAdded",query:this,observer:a}))}removeObserver(a){this.observers.includes(a)&&(this.observers=this.observers.filter(b=>b!==a),this.observers.length||(this.#l&&(this.#n?this.#l.cancel({revert:!0}):this.#l.cancelRetry()),this.scheduleGc()),this.#j.notify({type:"observerRemoved",query:this,observer:a}))}getObserversCount(){return this.observers.length}invalidate(){this.state.isInvalidated||this.#o({type:"invalidate"})}async fetch(a,c){let d;if("idle"!==this.state.fetchStatus&&this.#l?.status()!=="rejected"){if(void 0!==this.state.data&&c?.cancelRefetch)this.cancel({silent:!0});else if(this.#l)return this.#l.continueRetry(),this.#l.promise}if(a&&this.setOptions(a),!this.options.queryFn){let a=this.observers.find(a=>a.options.queryFn);a&&this.setOptions(a.options)}let e=new AbortController,f=a=>{Object.defineProperty(a,"signal",{enumerable:!0,get:()=>(this.#n=!0,e.signal)})},g=()=>{let a,d=(0,b.ensureQueryFn)(this.options,c),e=(f(a={client:this.#k,queryKey:this.queryKey,meta:this.meta}),a);return(this.#n=!1,this.options.persister)?this.options.persister(d,e,this):d(e)},h=(f(d={fetchOptions:c,options:this.options,queryKey:this.queryKey,client:this.#k,state:this.state,fetchFn:g}),d);this.options.behavior?.onFetch(h,this),this.#i=this.state,("idle"===this.state.fetchStatus||this.state.fetchMeta!==h.fetchOptions?.meta)&&this.#o({type:"fetch",meta:h.fetchOptions?.meta}),this.#l=k({initialPromise:c?.initialPromise,fn:h.fetchFn,onCancel:a=>{a instanceof j&&a.revert&&this.setState({...this.#i,fetchStatus:"idle"}),e.abort()},onFail:(a,b)=>{this.#o({type:"failed",failureCount:a,error:b})},onPause:()=>{this.#o({type:"pause"})},onContinue:()=>{this.#o({type:"continue"})},retry:h.options.retry,retryDelay:h.options.retryDelay,networkMode:h.options.networkMode,canRun:()=>!0});try{let a=await this.#l.start();if(void 0===a)throw Error(`${this.queryHash} data is undefined`);return this.setData(a),this.#j.config.onSuccess?.(a,this),this.#j.config.onSettled?.(a,this.state.error,this),a}catch(a){if(a instanceof j){if(a.silent)return this.#l.promise;else if(a.revert){if(void 0===this.state.data)throw a;return this.state.data}}throw this.#o({type:"error",error:a}),this.#j.config.onError?.(a,this),this.#j.config.onSettled?.(this.state.data,a,this),a}finally{this.scheduleGc()}}#o(a){let b=b=>{switch(a.type){case"failed":return{...b,fetchFailureCount:a.failureCount,fetchFailureReason:a.error};case"pause":return{...b,fetchStatus:"paused"};case"continue":return{...b,fetchStatus:"fetching"};case"fetch":return{...b,...o(b.data,this.options),fetchMeta:a.meta??null};case"success":let c={...b,...p(a.data,a.dataUpdatedAt),dataUpdateCount:b.dataUpdateCount+1,...!a.manual&&{fetchStatus:"idle",fetchFailureCount:0,fetchFailureReason:null}};return this.#i=a.manual?c:void 0,c;case"error":let d=a.error;return{...b,error:d,errorUpdateCount:b.errorUpdateCount+1,errorUpdatedAt:Date.now(),fetchFailureCount:b.fetchFailureCount+1,fetchFailureReason:d,fetchStatus:"idle",status:"error",isInvalidated:!0};case"invalidate":return{...b,isInvalidated:!0};case"setState":return{...b,...a.state}}};this.state=b(this.state),c.notifyManager.batch(()=>{this.observers.forEach(a=>{a.onQueryUpdate()}),this.#j.notify({query:this,type:"updated",action:a})})}};function o(a,b){return{fetchFailureCount:0,fetchFailureReason:null,fetchStatus:i(b.networkMode)?"fetching":"paused",...void 0===a&&{error:null,status:"pending"}}}function p(a,b){return{data:a,dataUpdatedAt:b??Date.now(),error:null,isInvalidated:!1,status:"success"}}function q(a){let b="function"==typeof a.initialData?a.initialData():a.initialData,c=void 0!==b,d=c?"function"==typeof a.initialDataUpdatedAt?a.initialDataUpdatedAt():a.initialDataUpdatedAt:0;return{data:b,dataUpdateCount:0,dataUpdatedAt:c?d??Date.now():0,error:null,errorUpdateCount:0,errorUpdatedAt:0,fetchFailureCount:0,fetchFailureReason:null,fetchMeta:null,isInvalidated:!1,status:c?"success":"pending",fetchStatus:"idle"}}a.s(["Query",()=>n,"fetchState",()=>o],30112)},46674,a=>{"use strict";var b=a.i(98416),c=a.i(9134),d=a.i(66336),e=class extends c.Removable{#k;#p;#q;#l;constructor(a){super(),this.#k=a.client,this.mutationId=a.mutationId,this.#q=a.mutationCache,this.#p=[],this.state=a.state||f(),this.setOptions(a.options),this.scheduleGc()}setOptions(a){this.options=a,this.updateGcTime(this.options.gcTime)}get meta(){return this.options.meta}addObserver(a){this.#p.includes(a)||(this.#p.push(a),this.clearGcTimeout(),this.#q.notify({type:"observerAdded",mutation:this,observer:a}))}removeObserver(a){this.#p=this.#p.filter(b=>b!==a),this.scheduleGc(),this.#q.notify({type:"observerRemoved",mutation:this,observer:a})}optionalRemove(){this.#p.length||("pending"===this.state.status?this.scheduleGc():this.#q.remove(this))}continue(){return this.#l?.continue()??this.execute(this.state.variables)}async execute(a){let b=()=>{this.#o({type:"continue"})},c={client:this.#k,meta:this.options.meta,mutationKey:this.options.mutationKey};this.#l=(0,d.createRetryer)({fn:()=>this.options.mutationFn?this.options.mutationFn(a,c):Promise.reject(Error("No mutationFn found")),onFail:(a,b)=>{this.#o({type:"failed",failureCount:a,error:b})},onPause:()=>{this.#o({type:"pause"})},onContinue:b,retry:this.options.retry??0,retryDelay:this.options.retryDelay,networkMode:this.options.networkMode,canRun:()=>this.#q.canRun(this)});let e="pending"===this.state.status,f=!this.#l.canStart();try{if(e)b();else{this.#o({type:"pending",variables:a,isPaused:f}),await this.#q.config.onMutate?.(a,this,c);let b=await this.options.onMutate?.(a,c);b!==this.state.context&&this.#o({type:"pending",context:b,variables:a,isPaused:f})}let d=await this.#l.start();return await this.#q.config.onSuccess?.(d,a,this.state.context,this,c),await this.options.onSuccess?.(d,a,this.state.context,c),await this.#q.config.onSettled?.(d,null,this.state.variables,this.state.context,this,c),await this.options.onSettled?.(d,null,a,this.state.context,c),this.#o({type:"success",data:d}),d}catch(b){try{await this.#q.config.onError?.(b,a,this.state.context,this,c)}catch(a){Promise.reject(a)}try{await this.options.onError?.(b,a,this.state.context,c)}catch(a){Promise.reject(a)}try{await this.#q.config.onSettled?.(void 0,b,this.state.variables,this.state.context,this,c)}catch(a){Promise.reject(a)}try{await this.options.onSettled?.(void 0,b,a,this.state.context,c)}catch(a){Promise.reject(a)}throw this.#o({type:"error",error:b}),b}finally{this.#q.runNext(this)}}#o(a){this.state=(b=>{switch(a.type){case"failed":return{...b,failureCount:a.failureCount,failureReason:a.error};case"pause":return{...b,isPaused:!0};case"continue":return{...b,isPaused:!1};case"pending":return{...b,context:a.context,data:void 0,failureCount:0,failureReason:null,error:null,isPaused:a.isPaused,status:"pending",variables:a.variables,submittedAt:Date.now()};case"success":return{...b,data:a.data,failureCount:0,failureReason:null,error:null,status:"success",isPaused:!1};case"error":return{...b,data:void 0,error:a.error,failureCount:b.failureCount+1,failureReason:a.error,isPaused:!1,status:"error"}}})(this.state),b.notifyManager.batch(()=>{this.#p.forEach(b=>{b.onMutationUpdate(a)}),this.#q.notify({mutation:this,type:"updated",action:a})})}};function f(){return{context:void 0,data:void 0,error:null,failureCount:0,failureReason:null,isPaused:!1,status:"idle",variables:void 0,submittedAt:0}}a.s(["Mutation",()=>e,"getDefaultState",()=>f])},14220,a=>{"use strict";var b=a.i(98419),c=a.i(16306),d=b.createContext(void 0),e=a=>{let c=b.useContext(d);if(a)return a;if(!c)throw Error("No QueryClient set, use QueryClientProvider to set one");return c},f=({client:a,children:e})=>(b.useEffect(()=>(a.mount(),()=>{a.unmount()}),[a]),(0,c.jsx)(d.Provider,{value:a,children:e}));a.s(["QueryClientProvider",()=>f,"useQueryClient",()=>e])}];
-
-//# sourceMappingURL=9f1d4_%40tanstack_68dcbde9._.js.map