sliccy 5.56.2 → 5.56.4

package/README.md

@@ -11,7 +11,7 @@ If this scares, confuses, or excites you, keep reading.
 
 # slicc — Self-Licking Ice Cream Cone
 
-[![54% Vibe_Coded](https://img.shields.io/badge/54%25-Vibe_Coded-ff69b4?style=for-the-badge&logo=claude&logoColor=white)](https://github.com/ai-ecoverse/vibe-coded-badge-action)
+[![53% Vibe_Coded](https://img.shields.io/badge/53%25-Vibe_Coded-ff69b4?style=for-the-badge&logo=claude&logoColor=white)](https://github.com/ai-ecoverse/vibe-coded-badge-action)
 
 [![npm](https://img.shields.io/npm/v/sliccy)](https://www.npmjs.com/package/sliccy)
 

package/dist/node-server/_cloud_core/src/operations/resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAIrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsCD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,GACrB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CA2BxE;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CA+FvB"}
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAGrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAWD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,GACrB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CA+BxE;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CA+FvB"}

package/dist/node-server/_cloud_core/src/operations/resume.js

@@ -1,3 +1,4 @@
+import { pairEnvEntriesToSecrets, parseEnvFilePreservingValues } from '../../../_shared/index.js';
 import { bundleIndex, bundleToFiles, mergeConeConfig, validateConeConfig, } from '../cone-config/index.js';
 import { CloudError } from '../errors.js';
 import { pollForRefreshedStatus } from '../polling.js';
@@ -7,32 +8,6 @@ import { pollForRefreshedStatus } from '../polling.js';
 // Therefore: no `|| true`; we parse status from stdout AND check exitCode.
 const KICK_CMD = 'curl -sS -X POST http://localhost:5710/api/leader-restart -o /dev/null -w "%{http_code}"';
 const DEFAULT_MODEL = 'adobe:claude-opus-4-6';
-function parseSecretsEnv(text) {
-    const domains = new Map();
-    for (const l of text.split('\n')) {
-        const eq = l.indexOf('=');
-        if (eq < 0)
-            continue;
-        const key = l.slice(0, eq);
-        if (key.endsWith('_DOMAINS')) {
-            domains.set(key.slice(0, -'_DOMAINS'.length), l
-                .slice(eq + 1)
-                .split(',')
-                .filter(Boolean));
-        }
-    }
-    const out = [];
-    for (const l of text.split('\n')) {
-        const eq = l.indexOf('=');
-        if (eq < 0)
-            continue;
-        const name = l.slice(0, eq);
-        if (name.endsWith('_DOMAINS'))
-            continue;
-        out.push({ name, value: l.slice(eq + 1), domains: domains.get(name) ?? [] });
-    }
-    return out;
-}
 /**
  * Merge `delta` over the existing files; returns new file contents + names index.
  * When `coneConfigJson` is null (a pre-feature cone), synthesizes a degenerate
@@ -53,11 +28,15 @@ export function applyConeConfigDelta(coneConfigJson, secretsEnv, delta) {
         base = validateConeConfig({
             model: parsed.model ?? DEFAULT_MODEL,
             accounts: parsed.accounts ?? [],
-            secrets: parseSecretsEnv(secretsEnv),
+            secrets: pairEnvEntriesToSecrets(parseEnvFilePreservingValues(secretsEnv)),
         });
     }
     else {
-        base = { model: DEFAULT_MODEL, accounts: [], secrets: parseSecretsEnv(secretsEnv) };
+        base = {
+            model: DEFAULT_MODEL,
+            accounts: [],
+            secrets: pairEnvEntriesToSecrets(parseEnvFilePreservingValues(secretsEnv)),
+        };
     }
     // Validate the MERGED result, not just the base: delta upserts arrive as
     // unknown from the worker and are otherwise unvalidated, so this is where a

package/dist/node-server/_cloud_core/tests/resume-cone-config.test.js

@@ -46,6 +46,15 @@ describe('applyConeConfigDelta (read-modify-write of both files)', () => {
         const out = applyConeConfigDelta(JSON.stringify({ model: 'adobe:claude-opus-4-6', accounts: [] }), 'JWT=aa.bb==.cc\nJWT_DOMAINS=api.example.com\n', {});
         expect(out.secretsEnv).toContain('JWT=aa.bb==.cc');
     });
+    it('preserves quoted and whitespace-padded raw secret values on resume', () => {
+        const out = applyConeConfigDelta(JSON.stringify({ model: 'adobe:claude-opus-4-6', accounts: [] }), 'QUOTED="abc"\nQUOTED_DOMAINS=api.example.com\nPADDED=  token  \nPADDED_DOMAINS=api.example.com\n', {});
+        expect(out.secretsEnv).toContain('QUOTED="abc"');
+        expect(out.secretsEnv).toContain('PADDED=  token  ');
+    });
+    it('trims domain CSV entries when restoring a pre-feature cone', () => {
+        const out = applyConeConfigDelta(null, 'TOKEN=value\nTOKEN_DOMAINS=api.example.com, *.example.com\n', {});
+        expect(out.secretsEnv).toContain('TOKEN_DOMAINS=api.example.com,*.example.com');
+    });
     it('rejects a merged result with a newline-injecting delta secret', () => {
         expect(() => applyConeConfigDelta(null, '', {
             upsert: { secrets: [{ name: 'X', value: 'a\nEVIL=1', domains: ['x.com'] }] },

package/dist/node-server/_shared/index.d.ts

@@ -5,6 +5,7 @@ export * from './cdp-frame-unmask.js';
 export * from './electron-overlay-route.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
+export * from './secret-env-schema.js';
 export * from './secret-masking.js';
 export * from './secrets-pipeline.js';
 export * from './session-secret-store.js';

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -6,6 +6,7 @@ export * from './cdp-frame-unmask.js';
 export * from './electron-overlay-route.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
+export * from './secret-env-schema.js';
 export * from './secret-masking.js';
 export * from './secrets-pipeline.js';
 export * from './session-secret-store.js';

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}

package/dist/node-server/_shared/secret-env-schema.d.ts

@@ -0,0 +1,39 @@
+/** Canonical NAME=value / NAME_DOMAINS=csv secret-storage schema. */
+export declare const DOMAINS_SUFFIX = "_DOMAINS";
+export interface EnvEntry {
+    key: string;
+    value: string;
+}
+export interface SecretEnvEntry {
+    name: string;
+    value: string;
+    domains: string[];
+}
+export declare function parseDomainsCsv(raw: string): string[];
+/** Pair values with non-empty domain companions, preserving first-name order. */
+export declare function pairEnvEntriesToSecrets(entries: EnvEntry[]): SecretEnvEntry[];
+/** Parse the shared, deliberately small .env subset used for secret storage. */
+export declare function parseEnvFile(content: string): EnvEntry[];
+/** Parse assignment lines while preserving every character after the first `=`. */
+export declare function parseEnvFilePreservingValues(content: string): EnvEntry[];
+export declare function serializeEnvFile(entries: EnvEntry[]): string;
+/** Profile name validation shared by every S3 secret-schema writer. */
+export declare const PROFILE_RE: RegExp;
+/** Derive the default authorized-host wildcard for an S3-compatible endpoint. */
+export declare function deriveS3Domains(endpoint: string | undefined): string[];
+export interface S3ProfileInput {
+    profile: string;
+    accessKey: string;
+    secretKey: string;
+    region?: string;
+    endpoint?: string;
+    pathStyle?: boolean;
+    domains?: string[];
+}
+export interface S3ProfileValidation {
+    ok: boolean;
+    error?: string;
+    resolvedDomains?: string[];
+}
+export declare function validateS3ProfileInput(input: S3ProfileInput): S3ProfileValidation;
+//# sourceMappingURL=secret-env-schema.d.ts.map

package/dist/node-server/_shared/secret-env-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-env-schema.d.ts","sourceRoot":"","sources":["../src/secret-env-schema.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrD;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAsB7E;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAmBxD;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAYxE;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAO5D;AAED,uEAAuE;AACvE,eAAO,MAAM,UAAU,QAAsB,CAAC;AAE9C,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAStE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,mBAAmB,CASjF"}

package/dist/node-server/_shared/secret-env-schema.js

@@ -0,0 +1,105 @@
+/** Canonical NAME=value / NAME_DOMAINS=csv secret-storage schema. */
+export const DOMAINS_SUFFIX = '_DOMAINS';
+export function parseDomainsCsv(raw) {
+    return raw
+        .split(',')
+        .map((domain) => domain.trim())
+        .filter((domain) => domain.length > 0);
+}
+/** Pair values with non-empty domain companions, preserving first-name order. */
+export function pairEnvEntriesToSecrets(entries) {
+    const values = new Map();
+    const domains = new Map();
+    const order = [];
+    for (const entry of entries) {
+        if (entry.key.endsWith(DOMAINS_SUFFIX)) {
+            const name = entry.key.slice(0, -DOMAINS_SUFFIX.length);
+            if (name)
+                domains.set(name, parseDomainsCsv(entry.value));
+        }
+        else {
+            if (!values.has(entry.key))
+                order.push(entry.key);
+            values.set(entry.key, entry.value);
+        }
+    }
+    return order.flatMap((name) => {
+        const value = values.get(name);
+        const allowedDomains = domains.get(name);
+        return value !== undefined && allowedDomains?.length
+            ? [{ name, value, domains: allowedDomains }]
+            : [];
+    });
+}
+/** Parse the shared, deliberately small .env subset used for secret storage. */
+export function parseEnvFile(content) {
+    const entries = [];
+    for (const raw of content.split('\n')) {
+        const line = raw.trim();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const eqIndex = line.indexOf('=');
+        if (eqIndex === -1)
+            continue;
+        const key = line.slice(0, eqIndex).trim();
+        let value = line.slice(eqIndex + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key)
+            entries.push({ key, value });
+    }
+    return entries;
+}
+/** Parse assignment lines while preserving every character after the first `=`. */
+export function parseEnvFilePreservingValues(content) {
+    const entries = [];
+    for (const raw of content.split('\n')) {
+        const line = raw.trimStart();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const eqIndex = raw.indexOf('=');
+        if (eqIndex === -1)
+            continue;
+        const key = raw.slice(0, eqIndex).trim();
+        if (key)
+            entries.push({ key, value: raw.slice(eqIndex + 1) });
+    }
+    return entries;
+}
+export function serializeEnvFile(entries) {
+    const lines = entries.map(({ key, value }) => {
+        const needsQuoting = /[\s#"']/.test(value);
+        const serialized = needsQuoting ? `"${value.replace(/"/g, '\\"')}"` : value;
+        return `${key}=${serialized}`;
+    });
+    return `${lines.join('\n')}\n`;
+}
+/** Profile name validation shared by every S3 secret-schema writer. */
+export const PROFILE_RE = /^[a-zA-Z0-9._-]+$/;
+/** Derive the default authorized-host wildcard for an S3-compatible endpoint. */
+export function deriveS3Domains(endpoint) {
+    if (!endpoint)
+        return ['*.amazonaws.com'];
+    try {
+        const url = new URL(endpoint);
+        const parts = url.host.split('.');
+        return parts.length >= 3 ? [`*.${parts.slice(1).join('.')}`] : [url.host];
+    }
+    catch {
+        return ['*.amazonaws.com'];
+    }
+}
+export function validateS3ProfileInput(input) {
+    if (!input.profile || !PROFILE_RE.test(input.profile)) {
+        return { ok: false, error: 'Profile name must be alphanumeric / dot / underscore / hyphen' };
+    }
+    if (!input.accessKey)
+        return { ok: false, error: 'Access Key ID is required' };
+    if (!input.secretKey)
+        return { ok: false, error: 'Secret Access Key is required' };
+    const resolvedDomains = input.domains && input.domains.length > 0 ? input.domains : deriveS3Domains(input.endpoint);
+    return { ok: true, resolvedDomains };
+}
+//# sourceMappingURL=secret-env-schema.js.map

package/dist/node-server/_shared/secret-env-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-env-schema.js","sourceRoot":"","sources":["../src/secret-env-schema.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAazC,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,OAAmB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,KAAK,KAAK,SAAS,IAAI,cAAc,EAAE,MAAM;YAClD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAmB;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3C,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5E,OAAO,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAE9C,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,QAA4B;IAC1D,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAkBD,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACnF,MAAM,eAAe,GACnB,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACvC,CAAC"}

package/dist/node-server/secrets/env-file.d.ts

@@ -1,23 +1,2 @@
-/**
- * Simple .env parser and writer — no external dependencies.
- *
- * Supports:
- * - KEY=VALUE lines (no quoting required)
- * - Single- and double-quoted values (quotes stripped)
- * - Comment lines starting with #
- * - Blank lines and comments are stripped on round-trip
- */
-export interface EnvEntry {
-    key: string;
-    value: string;
-}
-/**
- * Parse .env file content into key-value pairs.
- * Blank lines and comments are skipped.
- */
-export declare function parseEnvFile(content: string): EnvEntry[];
-/**
- * Serialize key-value pairs back to .env format.
- * Values containing spaces, #, or quotes are double-quoted.
- */
-export declare function serializeEnvFile(entries: EnvEntry[]): string;
+/** Compatibility re-export; the wire format is owned by @slicc/shared-ts. */
+export { type EnvEntry, parseEnvFile, serializeEnvFile } from '../_shared/index.js';

package/dist/node-server/secrets/env-file.js

@@ -1,48 +1,2 @@
-/**
- * Simple .env parser and writer — no external dependencies.
- *
- * Supports:
- * - KEY=VALUE lines (no quoting required)
- * - Single- and double-quoted values (quotes stripped)
- * - Comment lines starting with #
- * - Blank lines and comments are stripped on round-trip
- */
-/**
- * Parse .env file content into key-value pairs.
- * Blank lines and comments are skipped.
- */
-export function parseEnvFile(content) {
-    const entries = [];
-    for (const raw of content.split('\n')) {
-        const line = raw.trim();
-        if (line === '' || line.startsWith('#'))
-            continue;
-        const eqIndex = line.indexOf('=');
-        if (eqIndex === -1)
-            continue; // malformed line, skip
-        const key = line.slice(0, eqIndex).trim();
-        let value = line.slice(eqIndex + 1).trim();
-        // Strip matching quotes
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        if (key) {
-            entries.push({ key, value });
-        }
-    }
-    return entries;
-}
-/**
- * Serialize key-value pairs back to .env format.
- * Values containing spaces, #, or quotes are double-quoted.
- */
-export function serializeEnvFile(entries) {
-    const lines = [];
-    for (const { key, value } of entries) {
-        const needsQuoting = /[\s#"']/.test(value);
-        const serialized = needsQuoting ? `"${value.replace(/"/g, '\\"')}"` : value;
-        lines.push(`${key}=${serialized}`);
-    }
-    return lines.join('\n') + '\n';
-}
+/** Compatibility re-export; the wire format is owned by @slicc/shared-ts. */
+export { parseEnvFile, serializeEnvFile } from '../_shared/index.js';

package/dist/node-server/secrets/env-secret-store.d.ts

@@ -15,5 +15,6 @@ export declare class EnvSecretStore implements SecretStore {
     delete(name: string): void;
     list(): SecretEntry[];
     private readEntries;
+    private readSecrets;
     private writeEntries;
 }

package/dist/node-server/secrets/env-secret-store.js

@@ -9,8 +9,8 @@
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, resolve } from 'node:path';
+import { DOMAINS_SUFFIX, pairEnvEntriesToSecrets } from '../_shared/index.js';
 import { parseEnvFile, serializeEnvFile } from './env-file.js';
-const DOMAINS_SUFFIX = '_DOMAINS';
 const DEFAULT_PATH = resolve(homedir(), '.slicc', 'secrets.env');
 const FILE_MODE = 0o600;
 export class EnvSecretStore {
@@ -19,15 +19,7 @@ export class EnvSecretStore {
         this.filePath = filePath ?? process.env['SLICC_SECRETS_FILE'] ?? DEFAULT_PATH;
     }
     get(name) {
-        const entries = this.readEntries();
-        const valueEntry = entries.find((e) => e.key === name);
-        const domainsEntry = entries.find((e) => e.key === name + DOMAINS_SUFFIX);
-        if (!valueEntry || !domainsEntry)
-            return null;
-        const domains = parseDomains(domainsEntry.value);
-        if (domains.length === 0)
-            return null;
-        return { name, value: valueEntry.value, domains };
+        return this.readSecrets().find((secret) => secret.name === name) ?? null;
     }
     set(name, value, domains) {
         if (domains.length === 0) {
@@ -46,20 +38,7 @@ export class EnvSecretStore {
         this.writeEntries(filtered);
     }
     list() {
-        const entries = this.readEntries();
-        const result = [];
-        for (const entry of entries) {
-            if (entry.key.endsWith(DOMAINS_SUFFIX))
-                continue;
-            const domainsEntry = entries.find((e) => e.key === entry.key + DOMAINS_SUFFIX);
-            if (!domainsEntry)
-                continue; // no _DOMAINS → skip (rejected)
-            const domains = parseDomains(domainsEntry.value);
-            if (domains.length > 0) {
-                result.push({ name: entry.key, domains });
-            }
-        }
-        return result;
+        return this.readSecrets().map(({ name, domains }) => ({ name, domains }));
     }
     // -- internal helpers --
     readEntries() {
@@ -68,6 +47,9 @@ export class EnvSecretStore {
         const content = readFileSync(this.filePath, 'utf-8');
         return parseEnvFile(content);
     }
+    readSecrets() {
+        return pairEnvEntriesToSecrets(this.readEntries());
+    }
     writeEntries(entries) {
         const dir = dirname(this.filePath);
         if (!existsSync(dir)) {
@@ -84,12 +66,6 @@ export class EnvSecretStore {
         }
     }
 }
-function parseDomains(value) {
-    return value
-        .split(',')
-        .map((d) => d.trim())
-        .filter((d) => d.length > 0);
-}
 function upsertEntry(entries, key, value) {
     const idx = entries.findIndex((e) => e.key === key);
     if (idx >= 0) {

package/dist/ui/assets/{account-store-DZ3SVLqc.js → account-store-ZT-kF0Z5.js}

@@ -1,5 +1,5 @@
 const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/oauth-service-w5HZt7Xx.js","assets/preload-helper-CZgWQFsJ.js","assets/proxied-fetch-D3wsof0i.js","assets/rolldown-runtime-aKtaBQYM.js","assets/src-BvERX0WZ.js","assets/runtime-env-DH4NDw4t.js","assets/fetch-body-D2PwksUW.js","assets/panel-rpc-DmJSNs0I.js","assets/wc-permissions-registry-Blyunq37.js"])))=>i.map(i=>d[i]);
-import{n as e,t}from"./rolldown-runtime-aKtaBQYM.js";import{t as n}from"./preload-helper-CZgWQFsJ.js";import{i as r,n as i,r as a}from"./compat-FrhC6T45.js";import"./context-compaction-LYFtS2_f.js";import{t as o}from"./logger-DDBAeTLF.js";import{a as s,i as c}from"./src-BvERX0WZ.js";import{o as l,t as u}from"./proxied-fetch-D3wsof0i.js";import{t as d}from"./secret-topology-_rfIhUjY.js";import{t as f}from"./secrets-bridge-client-a5aLwwny.js";import"./tool-ui-DfXu6quJ.js";import{n as p,o as m,t as h}from"./providers-B4ygBQ0y.js";import{n as g,t as _}from"./panel-rpc-DmJSNs0I.js";import{r as v,t as y}from"./bedrock-camp-CZFsedRI.js";var b=Symbol.for(`yaml.alias`),x=Symbol.for(`yaml.document`),S=Symbol.for(`yaml.map`),C=Symbol.for(`yaml.pair`),w=Symbol.for(`yaml.scalar`),T=Symbol.for(`yaml.seq`),E=Symbol.for(`yaml.node.type`),D=e=>!!e&&typeof e==`object`&&e[E]===b,O=e=>!!e&&typeof e==`object`&&e[E]===x,ee=e=>!!e&&typeof e==`object`&&e[E]===S,k=e=>!!e&&typeof e==`object`&&e[E]===C,A=e=>!!e&&typeof e==`object`&&e[E]===w,te=e=>!!e&&typeof e==`object`&&e[E]===T;function j(e){if(e&&typeof e==`object`)switch(e[E]){case S:case T:return!0}return!1}function M(e){if(e&&typeof e==`object`)switch(e[E]){case b:case S:case w:case T:return!0}return!1}var ne=e=>(A(e)||j(e))&&!!e.anchor,N=Symbol(`break visit`),re=Symbol(`skip children`),P=Symbol(`remove node`);function F(e,t){let n=oe(t);O(e)?ie(null,e.contents,n,Object.freeze([e]))===P&&(e.contents=null):ie(null,e,n,Object.freeze([]))}F.BREAK=N,F.SKIP=re,F.REMOVE=P;function ie(e,t,n,r){let i=se(e,t,n,r);if(M(i)||k(i))return ce(e,r,i),ie(e,i,n,r);if(typeof i!=`symbol`){if(j(t)){r=Object.freeze(r.concat(t));for(let e=0;e<t.items.length;++e){let i=ie(e,t.items[e],n,r);if(typeof i==`number`)e=i-1;else if(i===N)return N;else i===P&&(t.items.splice(e,1),--e)}}else if(k(t)){r=Object.freeze(r.concat(t));let e=ie(`key`,t.key,n,r);if(e===N)return N;e===P&&(t.key=null);let i=ie(`value`,t.value,n,r);if(i===N)return N;i===P&&(t.value=null)}}return i}async function ae(e,t){let n=oe(t);O(e)?await I(null,e.contents,n,Object.freeze([e]))===P&&(e.contents=null):await I(null,e,n,Object.freeze([]))}ae.BREAK=N,ae.SKIP=re,ae.REMOVE=P;async function I(e,t,n,r){let i=await se(e,t,n,r);if(M(i)||k(i))return ce(e,r,i),I(e,i,n,r);if(typeof i!=`symbol`){if(j(t)){r=Object.freeze(r.concat(t));for(let e=0;e<t.items.length;++e){let i=await I(e,t.items[e],n,r);if(typeof i==`number`)e=i-1;else if(i===N)return N;else i===P&&(t.items.splice(e,1),--e)}}else if(k(t)){r=Object.freeze(r.concat(t));let e=await I(`key`,t.key,n,r);if(e===N)return N;e===P&&(t.key=null);let i=await I(`value`,t.value,n,r);if(i===N)return N;i===P&&(t.value=null)}}return i}function oe(e){return typeof e==`object`&&(e.Collection||e.Node||e.Value)?Object.assign({Alias:e.Node,Map:e.Node,Scalar:e.Node,Seq:e.Node},e.Value&&{Map:e.Value,Scalar:e.Value,Seq:e.Value},e.Collection&&{Map:e.Collection,Seq:e.Collection},e):e}function se(e,t,n,r){if(typeof n==`function`)return n(e,t,r);if(ee(t))return n.Map?.(e,t,r);if(te(t))return n.Seq?.(e,t,r);if(k(t))return n.Pair?.(e,t,r);if(A(t))return n.Scalar?.(e,t,r);if(D(t))return n.Alias?.(e,t,r)}function ce(e,t,n){let r=t[t.length-1];if(j(r))r.items[e]=n;else if(k(r))e===`key`?r.key=n:r.value=n;else if(O(r))r.contents=n;else{let e=D(r)?`alias`:`scalar`;throw Error(`Cannot replace node with ${e} parent`)}}var le={"!":`%21`,",":`%2C`,"[":`%5B`,"]":`%5D`,"{":`%7B`,"}":`%7D`},ue=e=>e.replace(/[!,[\]{}]/g,e=>le[e]),de=class e{constructor(t,n){this.docStart=null,this.docEnd=!1,this.yaml=Object.assign({},e.defaultYaml,t),this.tags=Object.assign({},e.defaultTags,n)}clone(){let t=new e(this.yaml,this.tags);return t.docStart=this.docStart,t}atDocument(){let t=new e(this.yaml,this.tags);switch(this.yaml.version){case`1.1`:this.atNextDocument=!0;break;case`1.2`:this.atNextDocument=!1,this.yaml={explicit:e.defaultYaml.explicit,version:`1.2`},this.tags=Object.assign({},e.defaultTags);break}return t}add(t,n){this.atNextDocument&&=(this.yaml={explicit:e.defaultYaml.explicit,version:`1.1`},this.tags=Object.assign({},e.defaultTags),!1);let r=t.trim().split(/[ \t]+/),i=r.shift();switch(i){case`%TAG`:{if(r.length!==2&&(n(0,`%TAG directive should contain exactly two parts`),r.length<2))return!1;let[e,t]=r;return this.tags[e]=t,!0}case`%YAML`:{if(this.yaml.explicit=!0,r.length!==1)return n(0,`%YAML directive should contain exactly one part`),!1;let[e]=r;if(e===`1.1`||e===`1.2`)return this.yaml.version=e,!0;{let t=/^\d+\.\d+$/.test(e);return n(6,`Unsupported YAML version ${e}`,t),!1}}default:return n(0,`Unknown directive ${i}`,!0),!1}}tagName(e,t){if(e===`!`)return`!`;if(e[0]!==`!`)return t(`Not a valid tag: ${e}`),null;if(e[1]===`<`){let n=e.slice(2,-1);return n===`!`||n===`!!`?(t(`Verbatim tags aren't resolved, so ${e} is invalid.`),null):(e[e.length-1]!==`>`&&t(`Verbatim tags must end with a >`),n)}let[,n,r]=e.match(/^(.*!)([^!]*)$/s);r||t(`The ${e} tag has no suffix`);let i=this.tags[n];if(i)try{return i+decodeURIComponent(r)}catch(e){return t(String(e)),null}return n===`!`?e:(t(`Could not resolve tag: ${e}`),null)}tagString(e){for(let[t,n]of Object.entries(this.tags))if(e.startsWith(n))return t+ue(e.substring(n.length));return e[0]===`!`?e:`!<${e}>`}toString(e){let t=this.yaml.explicit?[`%YAML ${this.yaml.version||`1.2`}`]:[],n=Object.entries(this.tags),r;if(e&&n.length>0&&M(e.contents)){let t={};F(e.contents,(e,n)=>{M(n)&&n.tag&&(t[n.tag]=!0)}),r=Object.keys(t)}else r=[];for(let[i,a]of n)i===`!!`&&a===`tag:yaml.org,2002:`||(!e||r.some(e=>e.startsWith(a)))&&t.push(`%TAG ${i} ${a}`);return t.join(`
+import{n as e,t}from"./rolldown-runtime-aKtaBQYM.js";import{t as n}from"./preload-helper-CZgWQFsJ.js";import{i as r,n as i,r as a}from"./compat-FrhC6T45.js";import"./context-compaction-LYFtS2_f.js";import{t as o}from"./logger-DDBAeTLF.js";import{a as s,i as c}from"./src-BvERX0WZ.js";import{o as l,t as u}from"./proxied-fetch-D3wsof0i.js";import{t as d}from"./secret-topology-_rfIhUjY.js";import{t as f}from"./secrets-bridge-client-a5aLwwny.js";import"./tool-ui-DfXu6quJ.js";import{n as p,o as m,t as h}from"./providers-BlAmRs-y.js";import{n as g,t as _}from"./panel-rpc-DmJSNs0I.js";import{r as v,t as y}from"./bedrock-camp-CZFsedRI.js";var b=Symbol.for(`yaml.alias`),x=Symbol.for(`yaml.document`),S=Symbol.for(`yaml.map`),C=Symbol.for(`yaml.pair`),w=Symbol.for(`yaml.scalar`),T=Symbol.for(`yaml.seq`),E=Symbol.for(`yaml.node.type`),D=e=>!!e&&typeof e==`object`&&e[E]===b,O=e=>!!e&&typeof e==`object`&&e[E]===x,ee=e=>!!e&&typeof e==`object`&&e[E]===S,k=e=>!!e&&typeof e==`object`&&e[E]===C,A=e=>!!e&&typeof e==`object`&&e[E]===w,te=e=>!!e&&typeof e==`object`&&e[E]===T;function j(e){if(e&&typeof e==`object`)switch(e[E]){case S:case T:return!0}return!1}function M(e){if(e&&typeof e==`object`)switch(e[E]){case b:case S:case w:case T:return!0}return!1}var ne=e=>(A(e)||j(e))&&!!e.anchor,N=Symbol(`break visit`),re=Symbol(`skip children`),P=Symbol(`remove node`);function F(e,t){let n=oe(t);O(e)?ie(null,e.contents,n,Object.freeze([e]))===P&&(e.contents=null):ie(null,e,n,Object.freeze([]))}F.BREAK=N,F.SKIP=re,F.REMOVE=P;function ie(e,t,n,r){let i=se(e,t,n,r);if(M(i)||k(i))return ce(e,r,i),ie(e,i,n,r);if(typeof i!=`symbol`){if(j(t)){r=Object.freeze(r.concat(t));for(let e=0;e<t.items.length;++e){let i=ie(e,t.items[e],n,r);if(typeof i==`number`)e=i-1;else if(i===N)return N;else i===P&&(t.items.splice(e,1),--e)}}else if(k(t)){r=Object.freeze(r.concat(t));let e=ie(`key`,t.key,n,r);if(e===N)return N;e===P&&(t.key=null);let i=ie(`value`,t.value,n,r);if(i===N)return N;i===P&&(t.value=null)}}return i}async function ae(e,t){let n=oe(t);O(e)?await I(null,e.contents,n,Object.freeze([e]))===P&&(e.contents=null):await I(null,e,n,Object.freeze([]))}ae.BREAK=N,ae.SKIP=re,ae.REMOVE=P;async function I(e,t,n,r){let i=await se(e,t,n,r);if(M(i)||k(i))return ce(e,r,i),I(e,i,n,r);if(typeof i!=`symbol`){if(j(t)){r=Object.freeze(r.concat(t));for(let e=0;e<t.items.length;++e){let i=await I(e,t.items[e],n,r);if(typeof i==`number`)e=i-1;else if(i===N)return N;else i===P&&(t.items.splice(e,1),--e)}}else if(k(t)){r=Object.freeze(r.concat(t));let e=await I(`key`,t.key,n,r);if(e===N)return N;e===P&&(t.key=null);let i=await I(`value`,t.value,n,r);if(i===N)return N;i===P&&(t.value=null)}}return i}function oe(e){return typeof e==`object`&&(e.Collection||e.Node||e.Value)?Object.assign({Alias:e.Node,Map:e.Node,Scalar:e.Node,Seq:e.Node},e.Value&&{Map:e.Value,Scalar:e.Value,Seq:e.Value},e.Collection&&{Map:e.Collection,Seq:e.Collection},e):e}function se(e,t,n,r){if(typeof n==`function`)return n(e,t,r);if(ee(t))return n.Map?.(e,t,r);if(te(t))return n.Seq?.(e,t,r);if(k(t))return n.Pair?.(e,t,r);if(A(t))return n.Scalar?.(e,t,r);if(D(t))return n.Alias?.(e,t,r)}function ce(e,t,n){let r=t[t.length-1];if(j(r))r.items[e]=n;else if(k(r))e===`key`?r.key=n:r.value=n;else if(O(r))r.contents=n;else{let e=D(r)?`alias`:`scalar`;throw Error(`Cannot replace node with ${e} parent`)}}var le={"!":`%21`,",":`%2C`,"[":`%5B`,"]":`%5D`,"{":`%7B`,"}":`%7D`},ue=e=>e.replace(/[!,[\]{}]/g,e=>le[e]),de=class e{constructor(t,n){this.docStart=null,this.docEnd=!1,this.yaml=Object.assign({},e.defaultYaml,t),this.tags=Object.assign({},e.defaultTags,n)}clone(){let t=new e(this.yaml,this.tags);return t.docStart=this.docStart,t}atDocument(){let t=new e(this.yaml,this.tags);switch(this.yaml.version){case`1.1`:this.atNextDocument=!0;break;case`1.2`:this.atNextDocument=!1,this.yaml={explicit:e.defaultYaml.explicit,version:`1.2`},this.tags=Object.assign({},e.defaultTags);break}return t}add(t,n){this.atNextDocument&&=(this.yaml={explicit:e.defaultYaml.explicit,version:`1.1`},this.tags=Object.assign({},e.defaultTags),!1);let r=t.trim().split(/[ \t]+/),i=r.shift();switch(i){case`%TAG`:{if(r.length!==2&&(n(0,`%TAG directive should contain exactly two parts`),r.length<2))return!1;let[e,t]=r;return this.tags[e]=t,!0}case`%YAML`:{if(this.yaml.explicit=!0,r.length!==1)return n(0,`%YAML directive should contain exactly one part`),!1;let[e]=r;if(e===`1.1`||e===`1.2`)return this.yaml.version=e,!0;{let t=/^\d+\.\d+$/.test(e);return n(6,`Unsupported YAML version ${e}`,t),!1}}default:return n(0,`Unknown directive ${i}`,!0),!1}}tagName(e,t){if(e===`!`)return`!`;if(e[0]!==`!`)return t(`Not a valid tag: ${e}`),null;if(e[1]===`<`){let n=e.slice(2,-1);return n===`!`||n===`!!`?(t(`Verbatim tags aren't resolved, so ${e} is invalid.`),null):(e[e.length-1]!==`>`&&t(`Verbatim tags must end with a >`),n)}let[,n,r]=e.match(/^(.*!)([^!]*)$/s);r||t(`The ${e} tag has no suffix`);let i=this.tags[n];if(i)try{return i+decodeURIComponent(r)}catch(e){return t(String(e)),null}return n===`!`?e:(t(`Could not resolve tag: ${e}`),null)}tagString(e){for(let[t,n]of Object.entries(this.tags))if(e.startsWith(n))return t+ue(e.substring(n.length));return e[0]===`!`?e:`!<${e}>`}toString(e){let t=this.yaml.explicit?[`%YAML ${this.yaml.version||`1.2`}`]:[],n=Object.entries(this.tags),r;if(e&&n.length>0&&M(e.contents)){let t={};F(e.contents,(e,n)=>{M(n)&&n.tag&&(t[n.tag]=!0)}),r=Object.keys(t)}else r=[];for(let[i,a]of n)i===`!!`&&a===`tag:yaml.org,2002:`||(!e||r.some(e=>e.startsWith(a)))&&t.push(`%TAG ${i} ${a}`);return t.join(`
 `)}};de.defaultYaml={explicit:!1,version:`1.2`},de.defaultTags={"!!":`tag:yaml.org,2002:`};function fe(e){if(/[\x00-\x19\s,[\]{}]/.test(e)){let t=`Anchor must not contain whitespace or control characters: ${JSON.stringify(e)}`;throw Error(t)}return!0}function pe(e,t,n,r){if(r&&typeof r==`object`)if(Array.isArray(r))for(let t=0,n=r.length;t<n;++t){let n=r[t],i=pe(e,r,String(t),n);i===void 0?delete r[t]:i!==n&&(r[t]=i)}else if(r instanceof Map)for(let t of Array.from(r.keys())){let n=r.get(t),i=pe(e,r,t,n);i===void 0?r.delete(t):i!==n&&r.set(t,i)}else if(r instanceof Set)for(let t of Array.from(r)){let n=pe(e,r,t,t);n===void 0?r.delete(t):n!==t&&(r.delete(t),r.add(n))}else for(let[t,n]of Object.entries(r)){let i=pe(e,r,t,n);i===void 0?delete r[t]:i!==n&&(r[t]=i)}return e.call(t,n,r)}function L(e,t,n){if(Array.isArray(e))return e.map((e,t)=>L(e,String(t),n));if(e&&typeof e.toJSON==`function`){if(!n||!ne(e))return e.toJSON(t,n);let r={aliasCount:0,count:1,res:void 0};n.anchors.set(e,r),n.onCreate=e=>{r.res=e,delete n.onCreate};let i=e.toJSON(t,n);return n.onCreate&&n.onCreate(i),i}return typeof e==`bigint`&&!n?.keep?Number(e):e}var me=class{constructor(e){Object.defineProperty(this,E,{value:e})}clone(){let e=Object.create(Object.getPrototypeOf(this),Object.getOwnPropertyDescriptors(this));return this.range&&(e.range=this.range.slice()),e}toJS(e,{mapAsMap:t,maxAliasCount:n,onAnchor:r,reviver:i}={}){if(!O(e))throw TypeError(`A document argument is required`);let a={anchors:new Map,doc:e,keep:!0,mapAsMap:t===!0,mapKeyWarned:!1,maxAliasCount:typeof n==`number`?n:100},o=L(this,``,a);if(typeof r==`function`)for(let{count:e,res:t}of a.anchors.values())r(t,e);return typeof i==`function`?pe(i,{"":o},``,o):o}},he=class extends me{constructor(e){super(b),this.source=e,Object.defineProperty(this,"tag",{set(){throw Error(`Alias nodes cannot have tags`)}})}resolve(e,t){if(t?.maxAliasCount===0)throw ReferenceError(`Alias resolution is disabled`);let n;t?.aliasResolveCache?n=t.aliasResolveCache:(n=[],F(e,{Node:(e,t)=>{(D(t)||ne(t))&&n.push(t)}}),t&&(t.aliasResolveCache=n));let r;for(let e of n){if(e===this)break;e.anchor===this.source&&(r=e)}return r}toJSON(e,t){if(!t)return{source:this.source};let{anchors:n,doc:r,maxAliasCount:i}=t,a=this.resolve(r,t);if(!a){let e=`Unresolved alias (the anchor must be set before the alias): ${this.source}`;throw ReferenceError(e)}let o=n.get(a);if(o||=(L(a,null,t),n.get(a)),o?.res===void 0)throw ReferenceError(`This should not happen: Alias anchor was not resolved?`);if(i>=0&&(o.count+=1,o.aliasCount===0&&(o.aliasCount=ge(r,a,n)),o.count*o.aliasCount>i))throw ReferenceError(`Excessive alias count indicates a resource exhaustion attack`);return o.res}toString(e,t,n){let r=`*${this.source}`;if(e){if(fe(this.source),e.options.verifyAliasOrder&&!e.anchors.has(this.source)){let e=`Unresolved alias (the anchor must be set before the alias): ${this.source}`;throw Error(e)}if(e.implicitKey)return`${r} `}return r}};function ge(e,t,n){if(D(t)){let r=t.resolve(e),i=n&&r&&n.get(r);return i?i.count*i.aliasCount:0}else if(j(t)){let r=0;for(let i of t.items){let t=ge(e,i,n);t>r&&(r=t)}return r}else if(k(t)){let r=ge(e,t.key,n),i=ge(e,t.value,n);return Math.max(r,i)}return 1}var _e=e=>!e||typeof e!=`function`&&typeof e!=`object`,R=class extends me{constructor(e){super(w),this.value=e}toJSON(e,t){return t?.keep?this.value:L(this.value,e,t)}toString(){return String(this.value)}};R.BLOCK_FOLDED=`BLOCK_FOLDED`,R.BLOCK_LITERAL=`BLOCK_LITERAL`,R.PLAIN=`PLAIN`,R.QUOTE_DOUBLE=`QUOTE_DOUBLE`,R.QUOTE_SINGLE=`QUOTE_SINGLE`;var ve=`tag:yaml.org,2002:`;function ye(e,t,n){if(t){let e=n.filter(e=>e.tag===t),r=e.find(e=>!e.format)??e[0];if(!r)throw Error(`Tag ${t} not found`);return r}return n.find(t=>t.identify?.(e)&&!t.format)}function be(e,t,n){if(O(e)&&(e=e.contents),M(e))return e;if(k(e)){let t=n.schema[S].createNode?.(n.schema,null,n);return t.items.push(e),t}(e instanceof String||e instanceof Number||e instanceof Boolean||typeof BigInt<`u`&&e instanceof BigInt)&&(e=e.valueOf());let{aliasDuplicateObjects:r,onAnchor:i,onTagObj:a,schema:o,sourceObjects:s}=n,c;if(r&&e&&typeof e==`object`){if(c=s.get(e),c)return c.anchor??=i(e),new he(c.anchor);c={anchor:null,node:null},s.set(e,c)}t?.startsWith(`!!`)&&(t=ve+t.slice(2));let l=ye(e,t,o.tags);if(!l){if(e&&typeof e.toJSON==`function`&&(e=e.toJSON()),!e||typeof e!=`object`){let t=new R(e);return c&&(c.node=t),t}l=e instanceof Map?o[S]:Symbol.iterator in Object(e)?o[T]:o[S]}a&&(a(l),delete n.onTagObj);let u=l?.createNode?l.createNode(n.schema,e,n):typeof l?.nodeClass?.from==`function`?l.nodeClass.from(n.schema,e,n):new R(e);return t?u.tag=t:l.default||(u.tag=l.tag),c&&(c.node=u),u}function xe(e,t,n){let r=n;for(let e=t.length-1;e>=0;--e){let n=t[e];if(typeof n==`number`&&Number.isInteger(n)&&n>=0){let e=[];e[n]=r,r=e}else r=new Map([[n,r]])}return be(r,void 0,{aliasDuplicateObjects:!1,keepUndefined:!1,onAnchor:()=>{throw Error(`This should not happen, please report a bug.`)},schema:e,sourceObjects:new Map})}var Se=e=>e==null||typeof e==`object`&&!!e[Symbol.iterator]().next().done,Ce=class extends me{constructor(e,t){super(e),Object.defineProperty(this,"schema",{value:t,configurable:!0,enumerable:!1,writable:!0})}clone(e){let t=Object.create(Object.getPrototypeOf(this),Object.getOwnPropertyDescriptors(this));return e&&(t.schema=e),t.items=t.items.map(t=>M(t)||k(t)?t.clone(e):t),this.range&&(t.range=this.range.slice()),t}addIn(e,t){if(Se(e))this.add(t);else{let[n,...r]=e,i=this.get(n,!0);if(j(i))i.addIn(r,t);else if(i===void 0&&this.schema)this.set(n,xe(this.schema,r,t));else throw Error(`Expected YAML collection at ${n}. Remaining path: ${r}`)}}deleteIn(e){let[t,...n]=e;if(n.length===0)return this.delete(t);let r=this.get(t,!0);if(j(r))return r.deleteIn(n);throw Error(`Expected YAML collection at ${t}. Remaining path: ${n}`)}getIn(e,t){let[n,...r]=e,i=this.get(n,!0);return r.length===0?!t&&A(i)?i.value:i:j(i)?i.getIn(r,t):void 0}hasAllNullValues(e){return this.items.every(t=>{if(!k(t))return!1;let n=t.value;return n==null||e&&A(n)&&n.value==null&&!n.commentBefore&&!n.comment&&!n.tag})}hasIn(e){let[t,...n]=e;if(n.length===0)return this.has(t);let r=this.get(t,!0);return j(r)?r.hasIn(n):!1}setIn(e,t){let[n,...r]=e;if(r.length===0)this.set(n,t);else{let e=this.get(n,!0);if(j(e))e.setIn(r,t);else if(e===void 0&&this.schema)this.set(n,xe(this.schema,r,t));else throw Error(`Expected YAML collection at ${n}. Remaining path: ${r}`)}}},we=e=>e.replace(/^(?!$)(?: $)?/gm,`#`);function Te(e,t){return/^\n+$/.test(e)?e.substring(1):t?e.replace(/^(?! *$)/gm,t):e}var z=(e,t,n)=>e.endsWith(`
 `)?Te(n,t):n.includes(`
 `)?`