swipium 1.4.0 → 2.0.0

package/dist/firstRun/inputPlanner.js

@@ -1,10 +1,10 @@
-// SWIPIUM-REQ-02 — planInputForField(): decide what (if anything) to type into a field, with a
+// planInputForField(): decide what (if anything) to type into a field, with a
 // strict priority order so Swipium never invents data unless policy + environment allow it.
 //
 // Priority:
 //   1. Existing secure user input for the matching field (from a NeedsInput resume).
 //   2. Declared fixture value or generator.
-//   3. Built-in safe generator — ONLY when generated accounts are allowed for this environment.
+//   3. Built-in safe generator, ONLY when generated accounts are allowed for this environment.
 //   4. NeedsInput when the value is unsafe/unknown but required.
 //   5. Skip (blocked) when the field is optional.
 //
@@ -35,33 +35,67 @@ export function planInputForField(session, req, ctx) {
             return { decision: 'secure_input', value: existing, varName: canonical, secret, source: 'secure_input', field };
         }
     }
-    // 2. Declared fixture value or generator (existing fixture catalog — may itself mutate session
+    // 2. Declared fixture value or generator (existing fixture catalog; may itself mutate session
     //    for fixture-declared generators, which is the intended behavior).
     const fixture = resolveFixtureValue(session, req.label, req.locator?.value, { role: req.field });
     if (fixture) {
-        return { decision: 'fixture', value: fixture.value, varName: fixture.varName, secret: fixture.secret, source: 'fixture', generator: fixture.generator, field };
+        return {
+            decision: 'fixture',
+            value: fixture.value,
+            varName: fixture.varName,
+            secret: fixture.secret,
+            source: 'fixture',
+            generator: fixture.generator,
+            field,
+        };
     }
-    // OTP is never invented — only a real provider or a secure input may supply it.
+    // OTP is never invented. Only a real provider or a secure input may supply it.
     if (field === 'otp') {
-        return { decision: 'needs_input', kind: 'otp_or_manual_verification', reason: 'a one-time code is required and cannot be generated', field };
+        return {
+            decision: 'needs_input',
+            kind: 'otp_or_manual_verification',
+            reason: 'a one-time code is required and cannot be generated',
+            field,
+        };
     }
     // 3. Built-in safe generator, gated on the generated-account decision + policy field opt-ins.
     if (ctx.generationAllowed) {
         const gen = generateFieldValue(field, ctx.policy, { timestamp: ctx.timestamp, index: ctx.index });
         if (gen) {
-            return { decision: 'generator', value: gen.value, varName: generatorVarName(field), secret: gen.secret, source: 'generator', generator: gen.generator, record: true, field };
+            return {
+                decision: 'generator',
+                value: gen.value,
+                varName: generatorVarName(field),
+                secret: gen.secret,
+                source: 'generator',
+                generator: gen.generator,
+                record: true,
+                field,
+            };
         }
         // generation allowed but this field is not safely generatable (phone/dob without opt-in).
         if (req.required) {
-            return { decision: 'needs_input', kind: 'create_test_data', reason: `field "${req.label ?? field}" cannot be safely generated under the current policy`, field };
+            return {
+                decision: 'needs_input',
+                kind: 'create_test_data',
+                reason: `field "${req.label ?? field}" cannot be safely generated under the current policy`,
+                field,
+            };
         }
         return { decision: 'skip', reason: `optional field "${req.label ?? field}" left blank (not safely generatable)`, field };
     }
     // 4 / 5. No safe value available.
     if (req.required) {
-        const kind = field === 'email' || field === 'username' || field === 'password' || field === 'confirm_password' ? 'credentials' : 'create_test_data';
-        return { decision: 'needs_input', kind, reason: `required field "${req.label ?? field}" has no safe value and generation is not allowed here`, field };
+        const kind = field === 'email' || field === 'username' || field === 'password' || field === 'confirm_password'
+            ? 'credentials'
+            : 'create_test_data';
+        return {
+            decision: 'needs_input',
+            kind,
+            reason: `required field "${req.label ?? field}" has no safe value and generation is not allowed here`,
+            field,
+        };
     }
-    return { decision: 'skip', reason: `optional field "${req.label ?? field}" skipped — no value source and generation not allowed`, field };
+    return { decision: 'skip', reason: `optional field "${req.label ?? field}" skipped: no value source and generation not allowed`, field };
 }
 //# sourceMappingURL=inputPlanner.js.map

package/dist/firstRun/inputPlanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"inputPlanner.js","sourceRoot":"","sources":["../../src/firstRun/inputPlanner.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,4FAA4F;AAC5F,EAAE;AACF,YAAY;AACZ,qFAAqF;AACrF,4CAA4C;AAC5C,gGAAgG;AAChG,iEAAiE;AACjE,kDAAkD;AAClD,EAAE;AACF,iGAAiG;AACjG,0FAA0F;AAC1F,8CAA8C;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,EAAE,kBAAkB,EAAuB,MAAM,0BAA0B,CAAC;AA2BnF,MAAM,aAAa,GAAuC;IACxD,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,uBAAuB;IACjC,QAAQ,EAAE,uBAAuB;IACjC,gBAAgB,EAAE,uBAAuB;IACzC,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF,SAAS,gBAAgB,CAAC,KAAgB;IACxC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,GAAqB,EAAE,GAAqB;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAEtB,gDAAgD;IAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,KAAK,CAAC;YACvF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAClH,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,uEAAuE;IACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACjG,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;IACjK,CAAC;IAED,gFAAgF;IAChF,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,qDAAqD,EAAE,KAAK,EAAE,CAAC;IAC/I,CAAC;IAED,8FAA8F;IAC9F,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClG,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC/K,CAAC;QACD,0FAA0F;QAC1F,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,KAAK,IAAI,KAAK,uDAAuD,EAAE,KAAK,EAAE,CAAC;QACnK,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,uCAAuC,EAAE,KAAK,EAAE,CAAC;IAC3H,CAAC;IAED,kCAAkC;IAClC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,IAAI,GAAmB,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACpK,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,wDAAwD,EAAE,KAAK,EAAE,CAAC;IACzJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,wDAAwD,EAAE,KAAK,EAAE,CAAC;AAC5I,CAAC"}
+{"version":3,"file":"inputPlanner.js","sourceRoot":"","sources":["../../src/firstRun/inputPlanner.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4FAA4F;AAC5F,EAAE;AACF,YAAY;AACZ,qFAAqF;AACrF,4CAA4C;AAC5C,+FAA+F;AAC/F,iEAAiE;AACjE,kDAAkD;AAClD,EAAE;AACF,iGAAiG;AACjG,0FAA0F;AAC1F,8CAA8C;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,EAAE,kBAAkB,EAAuB,MAAM,0BAA0B,CAAC;AA2BnF,MAAM,aAAa,GAAuC;IACxD,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,uBAAuB;IACjC,QAAQ,EAAE,uBAAuB;IACjC,gBAAgB,EAAE,uBAAuB;IACzC,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF,SAAS,gBAAgB,CAAC,KAAgB;IACxC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,GAAqB,EAAE,GAAqB;IAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAEtB,gDAAgD;IAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,KAAK,CAAC;YACvF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAClH,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,uEAAuE;IACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACjG,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK;SACN,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,4BAA4B;YAClC,MAAM,EAAE,qDAAqD;YAC7D,KAAK;SACN,CAAC;IACJ,CAAC;IAED,8FAA8F;IAC9F,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClG,IAAI,GAAG,EAAE,CAAC;YACR,OAAO;gBACL,QAAQ,EAAE,WAAW;gBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,IAAI;gBACZ,KAAK;aACN,CAAC;QACJ,CAAC;QACD,0FAA0F;QAC1F,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO;gBACL,QAAQ,EAAE,aAAa;gBACvB,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,UAAU,GAAG,CAAC,KAAK,IAAI,KAAK,uDAAuD;gBAC3F,KAAK;aACN,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,uCAAuC,EAAE,KAAK,EAAE,CAAC;IAC3H,CAAC;IAED,kCAAkC;IAClC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,IAAI,GACR,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,kBAAkB;YAC/F,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kBAAkB,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,IAAI;YACJ,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,wDAAwD;YACrG,KAAK;SACN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,KAAK,IAAI,KAAK,uDAAuD,EAAE,KAAK,EAAE,CAAC;AAC3I,CAAC"}

package/dist/firstRun/onboardingStateMachine.js

@@ -1,4 +1,4 @@
-// SWIPIUM-REQ-02 — onboarding progression. Prefer non-destructive forward/skip controls
+// Onboarding progression. Prefer non-destructive forward/skip controls
 // (Next / Continue / Skip / Get started / Done) and never tap a destructive or unknown control.
 // PURE: returns the single best forward action (or none) for a classified onboarding screen.
 import { classifyRisk } from '../explore/policy.js';

package/dist/firstRun/onboardingStateMachine.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboardingStateMachine.js","sourceRoot":"","sources":["../../src/firstRun/onboardingStateMachine.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,gGAAgG;AAChG,6FAA6F;AAG7F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,+FAA+F;AAC/F,MAAM,cAAc,GAAqD;IACvE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE;IACtD,EAAE,EAAE,EAAE,wCAAwC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IACrF,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE;IACxE,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC9D,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE;IAC1E,EAAE,EAAE,EAAE,4CAA4C,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,uCAAuC,EAAE;CAC5G,CAAC;AAOF,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,wEAAwE;QACxE,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QAC5G,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,aAAa,EAAE,6DAA6D,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,EAAE,CAAC,GAAG;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;YAC9G,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,IAAI,EAAE,MAAM;SACb;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"onboardingStateMachine.js","sourceRoot":"","sources":["../../src/firstRun/onboardingStateMachine.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,gGAAgG;AAChG,6FAA6F;AAG7F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,+FAA+F;AAC/F,MAAM,cAAc,GAAqD;IACvE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE;IACtD,EAAE,EAAE,EAAE,wCAAwC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IACrF,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE;IACxE,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC9D,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE;IAC1E,EAAE,EAAE,EAAE,4CAA4C,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,uCAAuC,EAAE;CAC5G,CAAC;AAOF,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,wEAAwE;QACxE,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QAC5G,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,aAAa,EAAE,6DAA6D,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,EAAE,CAAC,GAAG;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;YAC9G,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,IAAI,EAAE,MAAM;SACb;KACF,CAAC;AACJ,CAAC"}

package/dist/firstRun/paywallPolicy.js

@@ -1,6 +1,6 @@
-// SWIPIUM-REQ-02 — paywall policy. Swipium NEVER purchases. It records paywall coverage and only
+// Paywall policy. Swipium NEVER purchases. It records paywall coverage and only
 // closes/skips when there is a clearly safe visible dismiss/restore/skip path. PURE.
-// Controls that buy / subscribe — must never be auto-tapped.
+// Controls that buy / subscribe. These must never be auto-tapped.
 const PURCHASE = /\b(subscribe|buy|purchase|start\s+(free\s+)?trial|upgrade|continue\s+to\s+payment|pay|unlock\s+premium|get\s+premium|choose\s+plan|select\s+plan)\b/i;
 // Safe ways off a paywall.
 const SAFE_DISMISS = [
@@ -32,7 +32,7 @@ export function planPaywall(elements) {
         if (!best || match.rank > best.rank)
             best = { el, rank: match.rank, why: match.why };
     }
-    const coverage = 'paywall encountered — recorded coverage; no purchase attempted';
+    const coverage = 'paywall encountered: recorded coverage, no purchase attempted';
     if (!best) {
         return { coverage, stop: true };
     }

package/dist/firstRun/paywallPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"paywallPolicy.js","sourceRoot":"","sources":["../../src/firstRun/paywallPolicy.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,qFAAqF;AAKrF,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,sJAAsJ,CAAC;AACxK,2BAA2B;AAC3B,MAAM,YAAY,GAAqD;IACrE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE;IACvD,EAAE,EAAE,EAAE,oDAAoD,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IACjG,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE;IAC/D,EAAE,EAAE,EAAE,wEAAwE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAC3H,EAAE,EAAE,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE;CAC7F,CAAC;AACF,qDAAqD;AACrD,MAAM,QAAQ,GAAG,6EAA6E,CAAC;AAW/F,SAAS,UAAU,CAAC,EAAmB;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAS;QAC5B,IAAI,UAAU,CAAC,EAAE,CAAC;YAAE,SAAS,CAAC,YAAY;QAC1C,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;YAAE,KAAK,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAAC;QACzH,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAG,gEAAgE,CAAC;IAClF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,KAAK;QACX,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YACrC,SAAS,EAAE,EAAE,CAAC,GAAG;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;YAC9G,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,IAAI,EAAE,MAAM;SACb;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"paywallPolicy.js","sourceRoot":"","sources":["../../src/firstRun/paywallPolicy.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,qFAAqF;AAKrF,kEAAkE;AAClE,MAAM,QAAQ,GACZ,sJAAsJ,CAAC;AACzJ,2BAA2B;AAC3B,MAAM,YAAY,GAAqD;IACrE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE;IACvD,EAAE,EAAE,EAAE,oDAAoD,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE;IACjG,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE;IAC/D,EAAE,EAAE,EAAE,wEAAwE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAC3H,EAAE,EAAE,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE;CAC7F,CAAC;AACF,qDAAqD;AACrD,MAAM,QAAQ,GAAG,6EAA6E,CAAC;AAW/F,SAAS,UAAU,CAAC,EAAmB;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAS;QAC5B,IAAI,UAAU,CAAC,EAAE,CAAC;YAAE,SAAS,CAAC,YAAY;QAC1C,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;YAAE,KAAK,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAAC;QACzH,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAG,+DAA+D,CAAC;IACjF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,KAAK;QACX,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YACrC,SAAS,EAAE,EAAE,CAAC,GAAG;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;YAC9G,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,IAAI,EAAE,MAAM;SACb;KACF,CAAC;AACJ,CAAC"}

package/dist/firstRun/types.js

@@ -1,4 +1,4 @@
-// SWIPIUM-REQ-02 — shared types for the first-run smoke / auth / onboarding / safe-test-data lane.
+// Shared types for the first-run smoke / auth / onboarding / safe-test-data lane.
 // These describe the data exchanged between the screen classifier, the input planner, the auth /
 // onboarding / paywall state machines, and the firstRunPlanner. They are intentionally
 // backend-neutral (no Driver references) so the planning layer stays pure + unit-testable; the

package/dist/firstRun/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/firstRun/types.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,iGAAiG;AACjG,uFAAuF;AACvF,+FAA+F;AAC/F,gFAAgF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/firstRun/types.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,iGAAiG;AACjG,uFAAuF;AACvF,+FAA+F;AAC/F,gFAAgF"}

package/dist/fixtures/catalog.js

@@ -1,3 +1,5 @@
+import { FLOW_ENV_PREFIX, flowEnvAllowed, lookupFlowVar } from '../flows/schema.js';
+import { log } from '../lib/logger.js';
 const GENERATORS = {
     email: () => `swipium.qa.${Date.now()}@example.test`,
     person_name: () => 'Swipium QA User',
@@ -46,18 +48,47 @@ const FIELD_HINTS = [
 function variableName(fixture, field) {
     return `SWIPIUM_${fixture}_${field}`.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
 }
+/** Why a fixture field's declared `var` was not read from the server environment. Fixtures come
+ *  from the repo's .swipium/fixtures.json (untrusted per THREAT_MODEL), so, like flows, only
+ *  SWIPIUM_* names are ever read from process.env; any other name is treated as missing. */
+export function fixtureVarBlockedMessage(fixture, field, varName) {
+    return (`fixture "${fixture}" field "${field}" declares var ${varName}, which was not read from the environment: ` +
+        `fixtures read process.env only for ${FLOW_ENV_PREFIX}* names. Rename it (e.g. ${variableName(fixture, field)}) ` +
+        `or provide the value via secure input`);
+}
+const warnedBlockedVars = new Set();
+/** process.env value for a fixture's declared var. SWIPIUM_* names only (else undefined + a warning). */
+function envFixtureVar(fixture, field, varName) {
+    if (!flowEnvAllowed(varName)) {
+        const key = `${fixture}\0${field}\0${varName}`;
+        if (!warnedBlockedVars.has(key)) {
+            warnedBlockedVars.add(key);
+            log('warn', fixtureVarBlockedMessage(fixture, field, varName));
+        }
+        return undefined;
+    }
+    return lookupFlowVar(varName, {});
+}
 function fixtureFields(f) {
     if (!f.fields || typeof f.fields !== 'object')
         return {};
     return f.fields;
 }
 function normalizeText(value) {
-    return (value ?? '').toLowerCase().replace(/[_-]+/g, ' ').replace(/[^a-z0-9]+/g, ' ').replace(/\s+/g, ' ').trim();
+    return (value ?? '')
+        .toLowerCase()
+        .replace(/[_-]+/g, ' ')
+        .replace(/[^a-z0-9]+/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim();
 }
 function normalizeGenerator(value) {
     if (!value)
         return undefined;
-    return GENERATOR_ALIASES[value.trim().toLowerCase().replace(/[-\s]+/g, '_')];
+    return GENERATOR_ALIASES[value
+        .trim()
+        .toLowerCase()
+        .replace(/[-\s]+/g, '_')];
 }
 function fieldScore(fieldName, spec, key, context = {}) {
     const normalizedField = normalizeText(fieldName);
@@ -105,24 +136,56 @@ export function resolveFixtureValue(session, label, locatorValue, context = {})
         const generated = session.generatedValues.find((g) => g.varName === varName && g.fixture === best.fixture.name && g.field === best.field);
         if (generated) {
             session.inputValues.set(varName, generated.value);
-            return { value: generated.value, varName, secret: generated.secret, fixture: best.fixture.name, field: best.field, source: 'generator', generator: generated.generator };
+            return {
+                value: generated.value,
+                varName,
+                secret: generated.secret,
+                fixture: best.fixture.name,
+                field: best.field,
+                source: 'generator',
+                generator: generated.generator,
+            };
+        }
+        const fromInput = session.inputValues.get(varName);
+        if (fromInput != null)
+            return { value: fromInput, varName, secret, fixture: best.fixture.name, field: best.field, source: 'variable' };
+        const fromEnv = spec.var ? envFixtureVar(best.fixture.name, best.field, spec.var) : undefined;
+        if (fromEnv != null) {
+            // Anything read from the server environment is treated as a secret: registered for
+            // redaction so it never lands in recorded actions, notes, artifacts or state.json.
+            session.secrets.add(fromEnv);
+            return { value: fromEnv, varName, secret: true, fixture: best.fixture.name, field: best.field, source: 'variable' };
         }
-        const fromVar = session.inputValues.get(varName) ?? (spec.var ? process.env[spec.var] : undefined);
-        if (fromVar != null)
-            return { value: fromVar, varName, secret, fixture: best.fixture.name, field: best.field, source: 'variable' };
         if (spec.value != null)
             return { value: spec.value, varName, secret, fixture: best.fixture.name, field: best.field, source: 'value' };
         const generator = normalizeGenerator(spec.generator);
         if (generator && GENERATORS[generator]) {
             const value = GENERATORS[generator]();
             session.inputValues.set(varName, value);
-            session.generatedValues.push({ at: Date.now(), fixture: best.fixture.name, field: best.field, varName, generator, value, secret: false });
+            session.generatedValues.push({
+                at: Date.now(),
+                fixture: best.fixture.name,
+                field: best.field,
+                varName,
+                generator,
+                value,
+                secret: false,
+            });
             return { value, varName, secret: false, fixture: best.fixture.name, field: best.field, source: 'generator', generator };
         }
     }
-    const legacy = key ? session.fixtures.find((f) => f.value && (key.includes(normalizeText(f.name)) || normalizeText(f.name).includes(key))) : undefined;
+    const legacy = key
+        ? session.fixtures.find((f) => f.value && (key.includes(normalizeText(f.name)) || normalizeText(f.name).includes(key)))
+        : undefined;
     if (legacy?.value)
-        return { value: legacy.value, varName: variableName(legacy.name, 'value'), secret: false, fixture: legacy.name, field: 'value', source: 'legacy_value' };
+        return {
+            value: legacy.value,
+            varName: variableName(legacy.name, 'value'),
+            secret: false,
+            fixture: legacy.name,
+            field: 'value',
+            source: 'legacy_value',
+        };
     return undefined;
 }
 export function hasDisposableState(session) {

package/dist/fixtures/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/fixtures/catalog.ts"],"names":[],"mappings":"AA0CA,MAAM,UAAU,GAA2C;IACzD,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,eAAe;IACpD,WAAW,EAAE,GAAG,EAAE,CAAC,iBAAiB;IACpC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;IAClB,IAAI,EAAE,GAAG,EAAE,CAAC,oBAAoB;IAChC,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW;IACvB,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU;IACzB,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM;IACnB,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc;IAC3B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY;CACzB,CAAC;AAEF,MAAM,iBAAiB,GAAqC;IAC1D,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,OAAO;IACtB,MAAM,EAAE,aAAa;IACrB,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,aAAa;IACxB,YAAY,EAAE,aAAa;IAC3B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,SAAS;IACvB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,OAAO;IACrB,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,WAAW,GAAyC;IACxD,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,wCAAwC,EAAE;IAChE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACtD,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,yBAAyB,EAAE;IAC/C,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,wCAAwC,EAAE;IACvE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,kCAAkC,EAAE;IAC/D,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,0CAA0C,EAAE;IACtE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE;IAClC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE;IACxC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,yBAAyB,EAAE;IACjD,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACjD,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,iCAAiC,EAAE;CAC3D,CAAC;AAEF,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,OAAO,WAAW,OAAO,IAAI,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO,CAAC,CAAC,MAA0C,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACpH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,IAAsB,EAAE,GAAW,EAAE,UAA+B,EAAE;IAC3G,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,eAAe,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;QACzG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,KAAc,EAAE,YAAqB,EAAE,UAA+B,EAAE;IAC5H,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,KAAK,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5K,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7E,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;gBAAE,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1I,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,SAA6B,EAAE,CAAC;QAC/L,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnG,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACnI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACtI,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1I,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAC1H,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvJ,IAAI,MAAM,EAAE,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC5K,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/fixtures/catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AA0CvC,MAAM,UAAU,GAA2C;IACzD,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,eAAe;IACpD,WAAW,EAAE,GAAG,EAAE,CAAC,iBAAiB;IACpC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;IAClB,IAAI,EAAE,GAAG,EAAE,CAAC,oBAAoB;IAChC,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW;IACvB,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU;IACzB,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM;IACnB,KAAK,EAAE,GAAG,EAAE,CAAC,cAAc;IAC3B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY;CACzB,CAAC;AAEF,MAAM,iBAAiB,GAAqC;IAC1D,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,OAAO;IACtB,MAAM,EAAE,aAAa;IACrB,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,aAAa;IACxB,YAAY,EAAE,aAAa;IAC3B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,SAAS;IACvB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,OAAO;IACrB,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,WAAW,GAAyC;IACxD,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,wCAAwC,EAAE;IAChE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACtD,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,yBAAyB,EAAE;IAC/C,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,wCAAwC,EAAE;IACvE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,kCAAkC,EAAE;IAC/D,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,0CAA0C,EAAE;IACtE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE;IAClC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE;IACxC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,yBAAyB,EAAE;IACjD,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACjD,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,iCAAiC,EAAE;CAC3D,CAAC;AAEF,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,OAAO,WAAW,OAAO,IAAI,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe;IACtF,OAAO,CACL,YAAY,OAAO,YAAY,KAAK,kBAAkB,OAAO,6CAA6C;QAC1G,sCAAsC,eAAe,4BAA4B,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QACjH,uCAAuC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5C,yGAAyG;AACzG,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe;IACpE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,OAAO,KAAK,KAAK,KAAK,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO,CAAC,CAAC,MAA0C,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,iBAAiB,CACtB,KAAK;SACF,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,IAAsB,EAAE,GAAW,EAAE,UAA+B,EAAE;IAC3G,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,eAAe,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;QACzG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAgB,EAChB,KAAc,EACd,YAAqB,EACrB,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,aAAa,CACvB,GAAG,KAAK,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CACjJ,CAAC;IACF,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7E,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;gBAAE,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAC1F,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO;gBACL,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,OAAO;gBACP,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,SAAS,CAAC,SAA6B;aACnD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvI,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,mFAAmF;YACnF,mFAAmF;YACnF,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACtH,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACtI,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO;gBACP,SAAS;gBACT,KAAK;gBACL,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAC1H,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG;QAChB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACvH,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,MAAM,EAAE,KAAK;QACf,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,cAAc;SACvB,CAAC;IACJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;AACzF,CAAC"}

package/dist/fixtures/load.js

@@ -0,0 +1,50 @@
+// Fixture loading + persistence shape. Fixture VALUES (field values, legacy `value`) and seed
+// specs (argv / URLs / headers / bodies, often tokens) are live configuration that must never be
+// written to state.json: a redacted copy reloaded as config would type «redacted» into a password
+// field or run a seed with a broken token. state.json keeps only non-secret metadata (for reports);
+// a rehydrated session re-reads the real fixtures from <root>/.swipium/fixtures.json.
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Load declared fixtures from <root>/.swipium/fixtures.json (best-effort, array or {fixtures:[]}). */
+export function loadProjectFixtures(root) {
+    const p = join(root, '.swipium', 'fixtures.json');
+    if (!existsSync(p))
+        return [];
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        const arr = Array.isArray(raw) ? raw : Array.isArray(raw?.fixtures) ? raw.fixtures : [];
+        return arr.filter((f) => f && typeof f.name === 'string');
+    }
+    catch {
+        return [];
+    }
+}
+/** state.json form of a fixture: names/labels/field specs kept, every value and the seed dropped. */
+export function fixtureMetadata(fixtures) {
+    return fixtures.map((f) => {
+        const { value: _value, seed: _seed, fields, ...rest } = f;
+        const out = { ...rest };
+        if (fields && typeof fields === 'object') {
+            out.fields = Object.fromEntries(Object.entries(fields).map(([k, spec]) => {
+                const { value: _v, ...meta } = spec ?? {};
+                return [k, meta];
+            }));
+        }
+        return out;
+    });
+}
+/** Fixtures for a session reloaded from state.json: the project's fixtures.json is the source of
+ *  truth for live values; persisted metadata only fills in fixtures no longer in the file (e.g.
+ *  ones passed to qa_start_session). They are value-less, so they never supply redacted text as input. */
+export function rehydrateFixtures(root, persisted) {
+    const fromFile = typeof root === 'string' ? loadProjectFixtures(root) : [];
+    const byName = new Map();
+    for (const f of fromFile)
+        byName.set(f.name, f);
+    const meta = Array.isArray(persisted) ? fixtureMetadata(persisted.filter((f) => f && typeof f.name === 'string')) : [];
+    for (const f of meta)
+        if (!byName.has(f.name))
+            byName.set(f.name, f);
+    return [...byName.values()];
+}
+//# sourceMappingURL=load.js.map

package/dist/fixtures/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/fixtures/load.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AACpG,sFAAsF;AAEtF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,uGAAuG;AACvG,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,IAAI,OAAQ,CAAa,CAAC,IAAI,KAAK,QAAQ,CAAc,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,QAAmB;IACjD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAY,EAAE,GAAG,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE;gBACvC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACnB,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;0GAE0G;AAC1G,MAAM,UAAU,iBAAiB,CAAC,IAAwB,EAAE,SAAkB;IAC5E,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpI,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/flows/discover.js

@@ -1,5 +1,5 @@
-// Shared flow discovery: list .swipium/flows/*.yaml|*.yml. Used by qa_plan (names → candidate
-// workflows) and qa_smoke (paths → run the pack). One source so the two never disagree.
+// Shared flow discovery: list .swipium/flows/*.yaml|*.yml. Used by the workflow plan (qa_resolve_target include:["plan"]) (names > candidate
+// workflows) and qa_smoke (paths > run the pack). One source so the two never disagree.
 import { existsSync, readdirSync } from 'node:fs';
 import { join, basename } from 'node:path';
 export function listFlowFiles(root) {

package/dist/flows/discover.js.map

@@ -1 +1 @@
-{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/flows/discover.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,wFAAwF;AAExF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAO3C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/flows/discover.ts"],"names":[],"mappings":"AAAA,6IAA6I;AAC7I,wFAAwF;AAExF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAO3C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/flows/generate.js

@@ -1,17 +1,21 @@
-// qa_flow_generate core (PHASE3-PLAN §4.1 / DESIGN §8). Two pure pieces:
+// qa_generate target:"flow" core. Two pure pieces:
 //   - recordableTap: at qa_act time, turn a resolved tap target into a replayable descriptor +
-//     exportability tag (translating an @ref into its visible text/label where possible — the
+//     exportability tag (translating an @ref into its visible text/label where possible; the
 //     key durability insight: a ref is run-time-only, but its label survives).
 //   - generateFlow: serialize the recorded action IR into a durable flow YAML + a durability
 //     grade and the brittle steps that need a testID/accessibilityLabel.
 import { createHash } from 'node:crypto';
 import { stringify } from 'yaml';
 import { waitForVisibleGuard } from './waitGuards.js';
+import { secretSafeActions, secretVarName } from '../suite/secretGuard.js';
 function currentScreenSignature(session) {
     const sigs = session.lastSnapshot?.signatures;
     if (!sigs?.size)
         return undefined;
-    return createHash('sha1').update([...sigs].sort().join('\n')).digest('hex').slice(0, 16);
+    return createHash('sha1')
+        .update([...sigs].sort().join('\n'))
+        .digest('hex')
+        .slice(0, 16);
 }
 function bucketBounds(bounds, point) {
     const b = bounds ?? (point ? [point.x, point.y, point.x, point.y] : undefined);
@@ -40,14 +44,34 @@ function provenance(session, opts) {
  *  falls back to coordinates (brittle) when the element exposes no human-readable handle. */
 export function recordableTap(session, target, point) {
     if (target?.x != null)
-        return { x: point.x, y: point.y, selectorKind: 'coords', exportability: 'coordinate', provenance: provenance(session, { selectorKind: 'coords', point }) };
+        return {
+            x: point.x,
+            y: point.y,
+            selectorKind: 'coords',
+            exportability: 'coordinate',
+            provenance: provenance(session, { selectorKind: 'coords', point }),
+        };
     if (target?.id) {
         const selectorKind = session.driver?.kind === 'wda' ? 'accessibility_id' : 'resource_id';
-        return { selector: target.id, selectorKind, exportability: 'semantic', provenance: provenance(session, { selectorKind, selectorValue: target.id, point }) };
+        return {
+            selector: target.id,
+            selectorKind,
+            exportability: 'semantic',
+            provenance: provenance(session, { selectorKind, selectorValue: target.id, point }),
+        };
     }
-    const node = point.ref ? session.lastSnapshot?.fullByRef.get(point.ref) : target?.ref ? session.lastSnapshot?.fullByRef.get(target.ref) : undefined;
+    const node = point.ref
+        ? session.lastSnapshot?.fullByRef.get(point.ref)
+        : target?.ref
+            ? session.lastSnapshot?.fullByRef.get(target.ref)
+            : undefined;
     if (session.driver?.kind === 'wda' && node?.id)
-        return { selector: node.id, selectorKind: 'accessibility_id', exportability: 'semantic', provenance: provenance(session, { selectorKind: 'accessibility_id', selectorValue: node.id, point }) };
+        return {
+            selector: node.id,
+            selectorKind: 'accessibility_id',
+            exportability: 'semantic',
+            provenance: provenance(session, { selectorKind: 'accessibility_id', selectorValue: node.id, point }),
+        };
     let label;
     if (target?.text)
         label = target.text;
@@ -57,9 +81,21 @@ export function recordableTap(session, target, point) {
         const warning = session.driver?.kind === 'wda'
             ? `iOS label/name selector "${label}" is usable, but add an accessibilityIdentifier for CI-stable replay`
             : undefined;
-        return { selector: label, selectorKind: 'text', exportability: 'semantic', warning, provenance: provenance(session, { selectorKind: 'text', selectorValue: label, point }) };
+        return {
+            selector: label,
+            selectorKind: 'text',
+            exportability: 'semantic',
+            warning,
+            provenance: provenance(session, { selectorKind: 'text', selectorValue: label, point }),
+        };
     }
-    return { x: point.x, y: point.y, selectorKind: 'coords', exportability: 'coordinate', provenance: provenance(session, { selectorKind: 'coords', point }) };
+    return {
+        x: point.x,
+        y: point.y,
+        selectorKind: 'coords',
+        exportability: 'coordinate',
+        provenance: provenance(session, { selectorKind: 'coords', point }),
+    };
 }
 export function recordableNativeSelector(session, selectorKind, selectorValue) {
     return { provenance: provenance(session, { selectorKind, selectorValue }) };
@@ -92,6 +128,10 @@ function pushSelectorAction(steps, provenanceEntries, a, actionIndex, selector,
     addProvenance(provenanceEntries, a, actionIndex, actionStepIndex, generatedKind, selector);
 }
 export function generateFlow(actions, opts) {
+    // Defense in depth: a registered secret recorded as a literal (non-secure field) becomes a ${VAR}
+    // (same naming as the POM/suite generator: secretVarName), and typed text equal to a stored
+    // session input becomes that input's ${SWIPIUM_TEST_*} placeholder.
+    actions = secretSafeActions(actions, opts.secrets, opts.inputs).actions;
     const steps = ['prepareTarget'];
     const brittleSteps = [];
     const variables = [];
@@ -116,7 +156,10 @@ export function generateFlow(actions, opts) {
                         addProvenance(provenanceEntries, a, actionIndex, steps.length + 1, 'tapAt');
                         steps.push({ tapAt: [a.x ?? 0, a.y ?? 0] });
                         coordinate++;
-                        brittleSteps.push({ index: i, reason: `tapped by coordinates (${a.x},${a.y})${a.screen ? ` on ${a.screen}` : ''} — add a testID/accessibilityLabel for a durable selector` });
+                        brittleSteps.push({
+                            index: i,
+                            reason: `tapped by coordinates (${a.x},${a.y})${a.screen ? ` on ${a.screen}` : ''}. Add a testID/accessibilityLabel for a durable selector`,
+                        });
                     }
                 }
                 break;
@@ -130,19 +173,26 @@ export function generateFlow(actions, opts) {
                     addProvenance(provenanceEntries, a, actionIndex, steps.length + 1, 'tapAt');
                     steps.push({ tapAt: [a.x ?? 0, a.y ?? 0] }, { inputText: '' });
                     coordinate++;
-                    brittleSteps.push({ index: i, reason: `cleared by coordinates (${a.x},${a.y})${a.screen ? ` on ${a.screen}` : ''} — add a testID/accessibilityLabel for a durable selector` });
+                    brittleSteps.push({
+                        index: i,
+                        reason: `cleared by coordinates (${a.x},${a.y})${a.screen ? ` on ${a.screen}` : ''}. Add a testID/accessibilityLabel for a durable selector`,
+                    });
                 }
                 break;
             }
             case 'type':
                 {
                     const selector = actionSelector(a);
-                    const text = a.secret ? `\${SECRET_${++secretCount}}` : a.text ?? '';
-                    if (a.secret) {
-                        variables.push(`SECRET_${secretCount}`);
+                    const varName = a.secret ? secretVarName(a, ++secretCount) : undefined;
+                    const text = varName ? `\${${varName}}` : (a.text ?? '');
+                    if (varName) {
+                        variables.push(varName);
                         needsHumanData++;
                     }
                     else {
+                        // A non-secret templated value (e.g. ${SWIPIUM_TEST_EMAIL}) is a variable too.
+                        for (const m of text.matchAll(/\$\{([^}]+)\}/g))
+                            variables.push(m[1]);
                         semantic++;
                     }
                     if (selector)
@@ -183,6 +233,7 @@ export function generateFlow(actions, opts) {
                 break;
         }
     });
+    const uniqueVars = [...new Set(variables)];
     const total = semantic + coordinate + needsHumanData;
     const semanticPct = total ? Math.round((semantic / total) * 100) : 100;
     const grade = semanticPct >= 90 ? 'A' : semanticPct >= 70 ? 'B' : 'C';
@@ -195,9 +246,9 @@ export function generateFlow(actions, opts) {
         flowObj.provenance = provenanceEntries;
     flowObj.steps = steps;
     const header = [
-        `# Generated by Swipium qa_flow_generate — review before committing.`,
+        `# Generated by Swipium qa_generate target:"flow". Review before committing.`,
         `# durability: ${grade} (${semanticPct}% semantic; ${coordinate} coordinate, ${needsHumanData} needs-human-data)`,
-        ...(variables.length ? [`# variables — provide via qa_flow_run { variables }: ${variables.join(', ')}`] : []),
+        ...(uniqueVars.length ? [`# variables: provide via qa_flow_run { variables }: ${uniqueVars.join(', ')}`] : []),
         ...brittleSteps.map((b) => `# WARNING step ${b.index}: ${b.reason}`),
     ].join('\n');
     return {
@@ -205,7 +256,7 @@ export function generateFlow(actions, opts) {
         stepCount: steps.length,
         durability: { grade, semanticPct, semantic, coordinate, needsHumanData },
         brittleSteps,
-        variables,
+        variables: uniqueVars,
     };
 }
 //# sourceMappingURL=generate.js.map