sliccy 6.256.9 → 6.256.11

package/dist/node-server/_shared/index.d.ts

@@ -35,6 +35,7 @@ export * from './sign-and-forward.js';
 export * from './sigv4.js';
 export * from './slicc-app-url.js';
 export * from './slugify.js';
+export * from './storage-quarantine.js';
 export * from './transcript-export.js';
 export * from './transcript-redaction.js';
 export * from './tray-signaling.js';

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -36,6 +36,7 @@ export * from './sign-and-forward.js';
 export * from './sigv4.js';
 export * from './slicc-app-url.js';
 export * from './slugify.js';
+export * from './storage-quarantine.js';
 export * from './transcript-export.js';
 export * from './transcript-redaction.js';
 export * from './tray-signaling.js';

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/oauth-extra-domains-storage.d.ts

@@ -10,12 +10,11 @@
  * localStorage. Updates here are visible to the side panel on its next
  * read (no chrome.runtime round-trip needed).
  */
+import { type QuarantineStorage } from './storage-quarantine.js';
 export declare const OAUTH_EXTRA_DOMAINS_KEY = "slicc_oauth_extra_domains";
 export type OAuthExtraDomainsStore = Record<string, string[]>;
-export interface LocalStorageLike {
-    getItem(key: string): string | null;
-    setItem(key: string, value: string): void;
-}
+export type LocalStorageLike = QuarantineStorage;
+/** `{}` when absent or unparsable; {@link writeOAuthExtras} preserves an unparsable value. */
 export declare function readOAuthExtras(storage: LocalStorageLike): OAuthExtraDomainsStore;
 export declare function writeOAuthExtras(storage: LocalStorageLike, store: OAuthExtraDomainsStore): void;
 export declare function addOAuthExtraDomain(storage: LocalStorageLike, providerId: string, domain: string): {
@@ -25,5 +24,6 @@ export declare function addOAuthExtraDomain(storage: LocalStorageLike, providerI
 export declare function removeOAuthExtraDomain(storage: LocalStorageLike, providerId: string, domain: string): {
     removed: boolean;
 };
+/** Also drops the unreadable copy, which may still list the cleared provider's domains. */
 export declare function clearOAuthExtras(storage: LocalStorageLike, providerId: string): void;
 //# sourceMappingURL=oauth-extra-domains-storage.d.ts.map

package/dist/node-server/_shared/oauth-extra-domains-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-extra-domains-storage.d.ts","sourceRoot":"","sources":["../src/oauth-extra-domains-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,sBAAsB,CAgBjF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAY/F;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAerC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAUtB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAIpF"}
+{"version":3,"file":"oauth-extra-domains-storage.d.ts","sourceRoot":"","sources":["../src/oauth-extra-domains-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9D,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAoBjD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,sBAAsB,CAQjF;AAmCD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAE/F;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAerC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAUtB;AAED,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAIpF"}

package/dist/node-server/_shared/oauth-extra-domains-storage.js

@@ -10,40 +10,66 @@
  * localStorage. Updates here are visible to the side panel on its next
  * read (no chrome.runtime round-trip needed).
  */
+import { corruptValueKey, replaceStoredValue, } from './storage-quarantine.js';
 export const OAUTH_EXTRA_DOMAINS_KEY = 'slicc_oauth_extra_domains';
+/** `null` when `raw` is not a JSON object: a value nothing may overwrite unpreserved (#4146). */
+function parseOAuthExtras(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed))
+        return null;
+    const out = {};
+    for (const [k, v] of Object.entries(parsed)) {
+        if (!Array.isArray(v))
+            continue;
+        const cleaned = v.filter((d) => typeof d === 'string' && d.length > 0);
+        if (cleaned.length > 0)
+            out[k] = cleaned;
+    }
+    return out;
+}
+/** `{}` when absent or unparsable; {@link writeOAuthExtras} preserves an unparsable value. */
 export function readOAuthExtras(storage) {
     try {
         const raw = storage.getItem(OAUTH_EXTRA_DOMAINS_KEY);
         if (!raw)
             return {};
-        const parsed = JSON.parse(raw);
-        if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed))
-            return {};
-        const out = {};
-        for (const [k, v] of Object.entries(parsed)) {
-            if (typeof k !== 'string' || !Array.isArray(v))
-                continue;
-            const cleaned = v.filter((d) => typeof d === 'string' && d.length > 0);
-            if (cleaned.length > 0)
-                out[k] = cleaned;
-        }
-        return out;
+        return parseOAuthExtras(raw) ?? {};
     }
     catch {
         return {};
     }
 }
-export function writeOAuthExtras(storage, store) {
+const CORRUPT_OAUTH_EXTRAS_KEY = corruptValueKey(OAUTH_EXTRA_DOMAINS_KEY);
+/**
+ * Every writer replaces the whole store from a `readOAuthExtras` baseline,
+ * which is `{}` for an unparsable value, so such a value is first copied to
+ * `slicc_oauth_extra_domains.corrupt` (#4146). Returns whether it was.
+ */
+function persistOAuthExtras(storage, store) {
+    let copied;
     // setItem throws synchronously on QuotaExceededError. The options-page
     // click handlers call this through addOAuthExtraDomain / remove / clear
     // and rely on the throw being caught by their toast wiring; without an
     // explicit message the toast says nothing useful.
     try {
-        storage.setItem(OAUTH_EXTRA_DOMAINS_KEY, JSON.stringify(store));
+        copied = replaceStoredValue(storage, OAUTH_EXTRA_DOMAINS_KEY, JSON.stringify(store), (raw) => parseOAuthExtras(raw) !== null);
     }
     catch (err) {
         throw new Error(`Failed to persist OAuth extras (localStorage quota exceeded?): ${err instanceof Error ? err.message : String(err)}`);
     }
+    if (copied) {
+        console.error(`[slicc] ${OAUTH_EXTRA_DOMAINS_KEY} was unparsable; copied it to ${CORRUPT_OAUTH_EXTRAS_KEY} before saving`);
+    }
+    return copied;
+}
+export function writeOAuthExtras(storage, store) {
+    persistOAuthExtras(storage, store);
 }
 export function addOAuthExtraDomain(storage, providerId, domain) {
     if (!providerId || !domain)
@@ -77,9 +103,11 @@ export function removeOAuthExtraDomain(storage, providerId, domain) {
     writeOAuthExtras(storage, store);
     return { removed: true };
 }
+/** Also drops the unreadable copy, which may still list the cleared provider's domains. */
 export function clearOAuthExtras(storage, providerId) {
     const store = readOAuthExtras(storage);
     delete store[providerId];
-    writeOAuthExtras(storage, store);
+    if (!persistOAuthExtras(storage, store))
+        storage.removeItem?.(CORRUPT_OAUTH_EXTRAS_KEY);
 }
 //# sourceMappingURL=oauth-extra-domains-storage.js.map

package/dist/node-server/_shared/oauth-extra-domains-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-extra-domains-storage.js","sourceRoot":"","sources":["../src/oauth-extra-domains-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AASnE,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACrF,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,SAAS;YACzD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,KAA6B;IACvF,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,kDAAkD;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kEAAkE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACrH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAyB,EACzB,UAAkB,EAClB,MAAc;IAEd,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAyB,EACzB,UAAkB,EAClB,MAAc;IAEd,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;;QAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,UAAkB;IAC5E,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;IACzB,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"oauth-extra-domains-storage.js","sourceRoot":"","sources":["../src/oauth-extra-domains-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,eAAe,EAEf,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAMnE,iGAAiG;AACjG,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,wBAAwB,GAAG,eAAe,CAAC,uBAAuB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAAyB,EAAE,KAA6B;IAClF,IAAI,MAAe,CAAC;IACpB,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,kDAAkD;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CACzB,OAAO,EACP,uBAAuB,EACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACrB,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,CACxC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kEAAkE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CACX,WAAW,uBAAuB,iCAAiC,wBAAwB,gBAAgB,CAC5G,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,KAA6B;IACvF,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAyB,EACzB,UAAkB,EAClB,MAAc;IAEd,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAyB,EACzB,UAAkB,EAClB,MAAc;IAEd,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;;QAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,UAAkB;IAC5E,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;IACzB,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,UAAU,EAAE,CAAC,wBAAwB,CAAC,CAAC;AAC1F,CAAC"}

package/dist/node-server/_shared/storage-quarantine.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Keep a present-but-unreadable `localStorage` value when a writer replaces
+ * it (#4146). The JSON stores in `slicc_accounts` and
+ * `slicc_oauth_extra_domains` are read-modify-written as a whole and their
+ * readers report an unreadable value as empty, so the next save would
+ * otherwise overwrite every entry the unreadable value still held.
+ */
+export interface QuarantineStorage {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    /** Optional so a get/set-only fake still works; the stores use it to drop their copy. */
+    removeItem?(key: string): void;
+}
+/** Where the unreadable value of `key` is kept. Only the newest copy survives. */
+export declare function corruptValueKey(key: string): string;
+/**
+ * Write `value` to `key`. When `key` holds a value `isReadable` rejects, copy
+ * it to {@link corruptValueKey} first, replacing an older copy. `key` is only
+ * replaced after that copy is stored, and a `setItem` that throws leaves the
+ * previous value in place, so the original is never held nowhere: if the
+ * copy can't be stored this throws and saves nothing, and if the replacement
+ * throws, `key` still holds the original next to its copy.
+ *
+ * Returns whether an unreadable value was copied aside.
+ */
+export declare function replaceStoredValue(storage: QuarantineStorage, key: string, value: string, isReadable: (raw: string) => boolean): boolean;
+//# sourceMappingURL=storage-quarantine.d.ts.map

package/dist/node-server/_shared/storage-quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-quarantine.d.ts","sourceRoot":"","sources":["../src/storage-quarantine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,yFAAyF;IACzF,UAAU,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACnC,OAAO,CAiBT"}

package/dist/node-server/_shared/storage-quarantine.js

@@ -0,0 +1,39 @@
+/**
+ * Keep a present-but-unreadable `localStorage` value when a writer replaces
+ * it (#4146). The JSON stores in `slicc_accounts` and
+ * `slicc_oauth_extra_domains` are read-modify-written as a whole and their
+ * readers report an unreadable value as empty, so the next save would
+ * otherwise overwrite every entry the unreadable value still held.
+ */
+/** Where the unreadable value of `key` is kept. Only the newest copy survives. */
+export function corruptValueKey(key) {
+    return `${key}.corrupt`;
+}
+/**
+ * Write `value` to `key`. When `key` holds a value `isReadable` rejects, copy
+ * it to {@link corruptValueKey} first, replacing an older copy. `key` is only
+ * replaced after that copy is stored, and a `setItem` that throws leaves the
+ * previous value in place, so the original is never held nowhere: if the
+ * copy can't be stored this throws and saves nothing, and if the replacement
+ * throws, `key` still holds the original next to its copy.
+ *
+ * Returns whether an unreadable value was copied aside.
+ */
+export function replaceStoredValue(storage, key, value, isReadable) {
+    const raw = storage.getItem(key);
+    const unreadable = raw !== null && raw !== '' && !isReadable(raw);
+    if (unreadable) {
+        const target = corruptValueKey(key);
+        try {
+            storage.setItem(target, raw);
+        }
+        catch {
+            throw new Error(storage.getItem(key) === raw
+                ? `${key} is unreadable and could not be backed up to ${target}, so nothing was saved and ${key} was left as it was. Free some browser storage for this site and try again.`
+                : `${key} changed while it was being backed up, so nothing was saved. Try again.`);
+        }
+    }
+    storage.setItem(key, value);
+    return unreadable;
+}
+//# sourceMappingURL=storage-quarantine.js.map

package/dist/node-server/_shared/storage-quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-quarantine.js","sourceRoot":"","sources":["../src/storage-quarantine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,GAAG,UAAU,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,GAAW,EACX,KAAa,EACb,UAAoC;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;gBAC1B,CAAC,CAAC,GAAG,GAAG,gDAAgD,MAAM,8BAA8B,GAAG,6EAA6E;gBAC5K,CAAC,CAAC,GAAG,GAAG,yEAAyE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC;AACpB,CAAC"}