@bman654/clodex 1.2.1 → 1.3.0

package/docs/credential-helpers.md

@@ -18,12 +18,19 @@ OS keyring or an environment variable.
 
 Changing `CLODEX_CREDENTIAL_HELPER` to a different path does not redirect old
 references. Clodex refuses the operation before starting the new helper. Restore
-the prior path to read or delete the old credential, or reauthenticate to create
-a reference owned by the new helper.
+the prior path to read or delete the old credential. Reauthentication creates a
+reference owned by the new helper, but does not delete the credential from the
+previous store; remove that credential with the previous backend's tooling.
 
 Clodex verifies the selected store with a disposable write, read, and delete
 before starting device authorization. It also reads back real credential
-writes.
+writes. OAuth refresh returns the new access token only after the rotated
+credential has been stored and verified. An environment override rejected by
+the upstream service remains bypassed until its value changes or the process
+restarts, preventing the same stale value from causing a 401 on every request.
+For stored OAuth credentials, a rejected-access marker is cleared when refresh
+returns a different access token. If the identity provider keeps returning the
+same rejected token, run `clodex providers auth <provider>` to reauthenticate.
 
 Credential storage is fail-closed. If the selected credential store fails its
 probe, Clodex stops before device authorization and includes the backend
@@ -31,6 +38,27 @@ diagnostic in the error instead of continuing with tokens that cannot be
 durably stored. Set `CLODEX_CREDENTIAL_HELPER` to the absolute path of an
 external helper, then run the authorization command again.
 
+Provider creation, replacement, and removal use the durable cleanup journal at
+`~/.clodex/credential-cleanup.json` (under `CLODEX_HOME` when set). Keeping the
+journal separate from `providers.json` prevents registry writers that only know
+schema 1 provider fields from dropping pending cleanup. A new unreferenced
+credential is journaled before it is written, provider changes are saved before
+superseded credentials are deleted, and uncertain deletion outcomes remain
+queued. Per-credential cross-process locks serialize writes, activation,
+removal, and reconciliation for the same reference. Reconciliation is
+best-effort and sequential: a contended credential can delay later entries
+until its lock attempt times out, but the timeout does not turn an already-saved
+provider into a failed creation. The next `clodex providers` command retries
+queued deletions idempotently and never deletes a credential that is referenced
+by an active provider. If the registry cannot be read and validated, cleanup
+stays queued instead of treating the registry as empty.
+
+The cleanup journal accepts only credential accounts generated for Clodex
+provider and OAuth records, including replacement, custom-provider, and scoped
+credential instances. It rejects symbolic links, foreign ownership, broad
+permissions on POSIX, files over 1 MiB, and more than 1,024 queued entries
+before attempting any credential-store deletion.
+
 ## Protocol
 
 The helper receives one of these invocations:
@@ -55,9 +83,16 @@ contents are never passed in arguments or environment variables. Helper
 standard error is not copied into Clodex diagnostics, and output and runtime
 are bounded.
 
+The helper protocol transports credential bytes without interpreting them.
+For non-OAuth provider references, Clodex preserves valid opaque JSON secrets.
+OAuth references accept only complete OAuth records or well-known token
+records; malformed or unknown JSON is never used as a bearer token.
+
 ## Security responsibilities
 
-The helper owns storage and its security properties. A helper should:
+Clodex owns OAuth parsing, refresh decisions, replacement-token serialization,
+and in-process refresh deduplication per provider and credential reference. The
+helper owns storage and its security properties. A helper should:
 
 - encrypt credentials at rest using a system or user trust root;
 - serialize concurrent updates when its backend requires it;
@@ -71,5 +106,6 @@ executable wrapper. Clodex intentionally does not evaluate a shell command from
 this setting.
 
 Existing `keyring:` and `env:` provider references retain their original
-behavior. Enabling a helper affects newly saved credentials; reauthenticate a
-provider to move it to the helper-backed store.
+behavior. Enabling a helper affects newly saved credentials. Reauthentication
+stores future credentials in the helper-backed store while the previous store
+remains unchanged until its credential is explicitly removed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bman654/clodex",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "publishConfig": {
     "access": "public"
   },

package/dist/chunk-3XM6UZWP.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server-runtime.ts","../src/paths.ts","../src/config.ts","../src/launch.ts","../src/binary-lookup.ts"],"sourcesContent":["// src/server-runtime.ts\n//\n// Runtime-state advertisement for the standalone `clodex server` command.\n// Each registering server ADDS its own record (keyed by pid) to\n// ~/.clodex/server-runtime.json on startup and removes ONLY its own record on\n// graceful shutdown, so other processes (notably the `clodex-claude` wrapper\n// bin) can discover every running server's mode, port, and CA path without any\n// hardcoding. The file holds an ARRAY of records; the legacy single-object\n// shape (pre multi-server) is tolerated on read as a one-element list. Stale\n// detection is the READER's job: a crashed server leaves its record behind, so\n// readers must validate pid liveness before trusting it. Writers additionally\n// prune dead-pid records while they hold the write lock.\n//\n// Concurrency: read-modify-write cycles are serialized by a short-lived pid\n// lock (~/.clodex/server-runtime.lock — same pattern as the patcher's\n// patch.lock: O_EXCL create, pid + staleness, ESRCH liveness) and the file is\n// replaced via write-temp-then-rename so a reader never sees a torn write. A\n// crashed lock holder cannot deadlock registration: the lock goes stale after\n// 10 seconds or when its pid dies, and after a brief bounded wait a writer\n// proceeds lockless (best-effort — same exposure as the old single-slot write).\n//\n// NOTE: only the standalone `clodex server` command writes this file. The\n// per-session MITM proxy spawned by `clodex claude --proxy` is private to that\n// session and must NOT advertise itself here. `clodex server --no-discovery`\n// (or CLODEX_NO_DISCOVERY=1) also opts a server out of registration entirely.\n\nimport {\n  closeSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  unlinkSync,\n  writeFileSync,\n} from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { getAppHome } from './paths.js';\n\nexport interface ServerRuntimeState {\n  mode: 'endpoint' | 'proxy';\n  port: number;\n  pid: number;\n  /** Proxy mode only: absolute path to the CA bundle a client must trust. */\n  caPath?: string;\n  startedAt: string;\n}\n\ninterface HomeEnv {\n  HOME?: string;\n  CLODEX_HOME?: string;\n  USERPROFILE?: string;\n}\n\nexport function getServerRuntimePath(env: HomeEnv = process.env): string {\n  return join(getAppHome(env), 'server-runtime.json');\n}\n\nexport function getServerRuntimeLockPath(env: HomeEnv = process.env): string {\n  return join(getAppHome(env), 'server-runtime.lock');\n}\n\n/** `--no-discovery` flag, with CLODEX_NO_DISCOVERY=1 as the env fallback. */\nexport function isDiscoveryDisabled(\n  flag: boolean | undefined,\n  env: { CLODEX_NO_DISCOVERY?: string } = process.env,\n): boolean {\n  if (flag !== undefined) return flag;\n  const raw = env.CLODEX_NO_DISCOVERY?.trim().toLowerCase();\n  return raw === '1' || raw === 'true';\n}\n\nfunction isPort(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 1 && value <= 65535;\n}\n\n/** Validate one runtime record. Returns null for anything malformed. */\nexport function parseServerRuntimeRecord(value: unknown): ServerRuntimeState | null {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return null;\n  const record = value as Record<string, unknown>;\n\n  const mode = record['mode'];\n  if (mode !== 'endpoint' && mode !== 'proxy') return null;\n  if (!isPort(record['port'])) return null;\n  const pid = record['pid'];\n  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0) return null;\n  const startedAt = typeof record['startedAt'] === 'string' ? record['startedAt'] : '';\n\n  const caPath = record['caPath'];\n  if (mode === 'proxy') {\n    // A proxy-mode server without a CA path is unusable to clients — treat as invalid.\n    if (typeof caPath !== 'string' || !caPath.trim()) return null;\n    return { mode, port: record['port'], pid, caPath, startedAt };\n  }\n  return { mode, port: record['port'], pid, startedAt };\n}\n\n/**\n * Parse a raw server-runtime.json payload into a list of records. Tolerates\n * BOTH shapes: the current array of records and the legacy single object\n * (wrapped as a one-element list). Malformed input or records are skipped —\n * never throws.\n */\nexport function parseServerRuntimeStates(raw: string): ServerRuntimeState[] {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return [];\n  }\n  const items = Array.isArray(parsed) ? parsed : [parsed];\n  const states: ServerRuntimeState[] = [];\n  for (const item of items) {\n    const state = parseServerRuntimeRecord(item);\n    if (state) states.push(state);\n  }\n  return states;\n}\n\n/** kill(pid, 0) liveness probe: EPERM still means the process exists. */\nexport function isPidAlive(\n  pid: number,\n  kill: (pid: number, signal: number) => unknown = process.kill.bind(process),\n): boolean {\n  try {\n    kill(pid, 0);\n    return true;\n  } catch (err) {\n    return (err as NodeJS.ErrnoException)?.code === 'EPERM';\n  }\n}\n\n// ── Write lock (pid + staleness, patcher pattern) ───────────────────────────\n\nconst RUNTIME_LOCK_STALE_MS = 10_000;\nconst RUNTIME_LOCK_WAIT_MS = 500;\nconst RUNTIME_LOCK_RETRY_MS = 25;\n\ninterface RuntimeLockContent {\n  pid: number;\n  startedAt: number;\n}\n\nfunction tryAcquireRuntimeLock(\n  lockPath: string,\n  opts: { now?: number; isAlive?: (pid: number) => boolean } = {},\n): (() => void) | null {\n  const now = opts.now ?? Date.now();\n  const alive = opts.isAlive ?? isPidAlive;\n  mkdirSync(dirname(lockPath), { recursive: true, mode: 0o700 });\n\n  for (let attempt = 0; attempt < 2; attempt++) {\n    try {\n      const fd = openSync(lockPath, 'wx');\n      const content: RuntimeLockContent = { pid: process.pid, startedAt: now };\n      writeFileSync(fd, JSON.stringify(content));\n      closeSync(fd);\n      return () => {\n        try {\n          unlinkSync(lockPath);\n        } catch {\n          // already gone\n        }\n      };\n    } catch {\n      // Lock exists — check staleness.\n      let stale = false;\n      try {\n        const existing = JSON.parse(readFileSync(lockPath, 'utf8')) as RuntimeLockContent;\n        stale = !existing.pid\n          || !alive(existing.pid)\n          || (typeof existing.startedAt === 'number' && now - existing.startedAt > RUNTIME_LOCK_STALE_MS);\n      } catch {\n        stale = true; // unreadable lock file → stale\n      }\n      if (!stale) return null;\n      try {\n        unlinkSync(lockPath);\n      } catch {\n        // raced with the owner's cleanup — retry loop handles it\n      }\n    }\n  }\n  return null;\n}\n\nfunction sleepSync(ms: number): void {\n  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);\n}\n\n/**\n * Run a read-modify-write mutation under the runtime lock. The lock is only\n * ever held for a few milliseconds, so after a short bounded wait the mutation\n * proceeds WITHOUT the lock rather than dropping a registration — the atomic\n * rename still prevents torn files; the worst case is a lost concurrent\n * update, which is no worse than the old single-slot behavior.\n */\nfunction withRuntimeWriteLock(env: HomeEnv, mutate: () => void): void {\n  const lockPath = getServerRuntimeLockPath(env);\n  let release: (() => void) | null = null;\n  const deadline = Date.now() + RUNTIME_LOCK_WAIT_MS;\n  for (;;) {\n    release = tryAcquireRuntimeLock(lockPath);\n    if (release || Date.now() >= deadline) break;\n    sleepSync(RUNTIME_LOCK_RETRY_MS);\n  }\n  try {\n    mutate();\n  } finally {\n    release?.();\n  }\n}\n\nfunction readAllRecords(env: HomeEnv): ServerRuntimeState[] {\n  let raw: string;\n  try {\n    raw = readFileSync(getServerRuntimePath(env), 'utf8');\n  } catch {\n    return [];\n  }\n  return parseServerRuntimeStates(raw);\n}\n\n/** Atomic replace: write a temp file in the same directory, then rename over. */\nfunction atomicWriteRecords(path: string, records: ServerRuntimeState[]): void {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  const tmpPath = `${path}.${process.pid}.tmp`;\n  writeFileSync(tmpPath, `${JSON.stringify(records, null, 2)}\\n`, { encoding: 'utf8', mode: 0o600 });\n  renameSync(tmpPath, path);\n}\n\nexport interface RuntimeMutateOptions {\n  isAlive?: (pid: number) => boolean;\n}\n\n/**\n * Add or update this server's own record (keyed by pid), pruning records whose\n * pids are dead. Best-effort — a state-file failure must never take the server\n * down.\n */\nexport function registerServerRuntimeState(\n  state: ServerRuntimeState,\n  env: HomeEnv = process.env,\n  options: RuntimeMutateOptions = {},\n): void {\n  const alive = options.isAlive ?? isPidAlive;\n  try {\n    withRuntimeWriteLock(env, () => {\n      const records = readAllRecords(env).filter(\n        record => record.pid !== state.pid && alive(record.pid),\n      );\n      records.push(state);\n      atomicWriteRecords(getServerRuntimePath(env), records);\n    });\n  } catch {\n    // Discovery is optional; the server itself keeps running.\n  }\n}\n\n/**\n * Remove ONLY this server's own record (by pid) on graceful shutdown, pruning\n * dead-pid records along the way. Missing file/record is fine. When no live\n * records remain the file is removed entirely.\n */\nexport function unregisterServerRuntimeState(\n  pid: number = process.pid,\n  env: HomeEnv = process.env,\n  options: RuntimeMutateOptions = {},\n): void {\n  const alive = options.isAlive ?? isPidAlive;\n  try {\n    withRuntimeWriteLock(env, () => {\n      const records = readAllRecords(env).filter(\n        record => record.pid !== pid && alive(record.pid),\n      );\n      if (records.length === 0) {\n        rmSync(getServerRuntimePath(env), { force: true });\n      } else {\n        atomicWriteRecords(getServerRuntimePath(env), records);\n      }\n    });\n  } catch {\n    // Stale records are handled by readers via pid liveness.\n  }\n}\n\nexport interface ReadServerRuntimeOptions {\n  isAlive?: (pid: number) => boolean;\n}\n\n/**\n * Read every advertised server record whose process is still alive. Missing or\n * malformed files yield an empty list. Read-only: stale records are ignored\n * here and physically pruned on the next registration/unregistration.\n */\nexport function readLiveServerRuntimeStates(\n  env: HomeEnv = process.env,\n  options: ReadServerRuntimeOptions = {},\n): ServerRuntimeState[] {\n  const alive = options.isAlive ?? isPidAlive;\n  return readAllRecords(env).filter(state => alive(state.pid));\n}\n\n/**\n * Wrapper selection policy: order candidate servers by preference —\n *  1. proxy mode before endpoint mode (bridging through the MITM proxy keeps\n *     Claude Code's own Anthropic auth, the recommended setup);\n *  2. within a mode, newest startedAt first.\n * If only an endpoint server is live it is used; with no live server the\n * wrapper launches claude untouched (both handled by the caller).\n */\nexport function orderWrapperServerCandidates(records: ServerRuntimeState[]): ServerRuntimeState[] {\n  return [...records].sort((a, b) => {\n    if (a.mode !== b.mode) return a.mode === 'proxy' ? -1 : 1;\n    return (Date.parse(b.startedAt) || 0) - (Date.parse(a.startedAt) || 0);\n  });\n}\n\n/**\n * Read the single preferred live server (selection policy above), or null when\n * none is advertised/alive.\n */\nexport function readLiveServerRuntimeState(\n  env: HomeEnv = process.env,\n  options: ReadServerRuntimeOptions = {},\n): ServerRuntimeState | null {\n  return orderWrapperServerCandidates(readLiveServerRuntimeStates(env, options))[0] ?? null;\n}\n","import { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { cpSync, existsSync, mkdirSync, readdirSync } from 'node:fs';\n\nexport const APP_DIR_NAME = 'clodex';\n/** One-time silent migration source: the relay-ai config home. */\nexport const LEGACY_APP_DIR_NAME = 'relay-ai';\n\ninterface HomeEnv {\n  HOME?: string;\n  CLODEX_HOME?: string;\n  USERPROFILE?: string;\n}\n\nfunction userHome(env: HomeEnv = process.env): string {\n  return env.HOME ?? env.USERPROFILE ?? homedir();\n}\n\nexport function resolveAppHomeOverride(env: HomeEnv = process.env): string | undefined {\n  const override = env.CLODEX_HOME;\n  return override?.trim() || undefined;\n}\n\nexport function getAppHome(env: HomeEnv = process.env): string {\n  const override = resolveAppHomeOverride(env);\n  if (override) return override;\n  return join(userHome(env), `.${APP_DIR_NAME}`);\n}\n\nexport function getLegacyAppHome(env: HomeEnv = process.env): string {\n  return join(userHome(env), `.${LEGACY_APP_DIR_NAME}`);\n}\n\nlet legacyMigrationDone = false;\n\n/**\n * One-time silent migration: when the clodex home does not exist yet but a\n * legacy ~/.relay-ai does, copy its config + auth state over so existing\n * providers and OAuth credentials keep working. The legacy directory itself is\n * never modified or deleted.\n */\nexport function ensureLegacyAppHomeMigrated(env: HomeEnv = process.env): void {\n  if (legacyMigrationDone) return;\n  legacyMigrationDone = true;\n  try {\n    const appHome = getAppHome(env);\n    if (existsSync(appHome)) return;\n    const legacyHome = getLegacyAppHome(env);\n    if (!existsSync(legacyHome)) return;\n\n    mkdirSync(appHome, { recursive: true, mode: 0o700 });\n    for (const entry of readdirSync(legacyHome)) {\n      if (entry === 'logs') continue; // session logs are not config/auth state\n      cpSync(join(legacyHome, entry), join(appHome, entry), { recursive: true });\n    }\n  } catch {\n    // Migration is best-effort; a fresh home still works.\n  }\n}\n\n/** Test hook: allow the migration to run again against a new CLODEX_HOME. */\nexport function resetLegacyMigrationForTests(): void {\n  legacyMigrationDone = false;\n}\n\nexport function getConfigPath(env: HomeEnv = process.env): string {\n  return join(getAppHome(env), 'config.json');\n}\n\nexport function getProvidersPath(env: HomeEnv = process.env): string {\n  return join(getAppHome(env), 'providers.json');\n}\n\nexport function getLogsPath(env: HomeEnv = process.env): string {\n  return join(getAppHome(env), 'logs');\n}\n","import type { UserPreferences } from './types.js';\nimport { dirname } from 'node:path';\nimport { mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { ensureLegacyAppHomeMigrated, getConfigPath } from './paths.js';\n\nfunction readJsonFile(path: string): UserPreferences | null {\n  try {\n    const parsed = JSON.parse(readFileSync(path, 'utf8'));\n    return parsed && typeof parsed === 'object' ? parsed as UserPreferences : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction readConfig(): UserPreferences {\n  ensureLegacyAppHomeMigrated();\n  return readJsonFile(getConfigPath()) ?? {};\n}\n\nfunction writeConfig(config: UserPreferences): void {\n  const configPath = getConfigPath();\n  mkdirSync(dirname(configPath), { recursive: true, mode: 0o700 });\n  writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\\n`, { encoding: 'utf8', mode: 0o600 });\n}\n\nexport function loadPreferences(): UserPreferences {\n  const config = readConfig();\n  return {\n    lastModel: config.lastModel,\n    lastProvider: config.lastProvider,\n    recentModelsByProvider: config.recentModelsByProvider,\n    favoriteModels: config.favoriteModels,\n    modelAliases: config.modelAliases,\n    claudeBridgeMode: config.claudeBridgeMode,\n    serverBridgeMode: config.serverBridgeMode,\n    appPathOverrides: config.appPathOverrides,\n    recentLaunchFolders: config.recentLaunchFolders,\n    server: config.server,\n  };\n}\n\nexport function savePreferences(prefs: Partial<Pick<UserPreferences, 'lastModel' | 'lastProvider' | 'recentModelsByProvider' | 'favoriteModels' | 'modelAliases' | 'claudeBridgeMode' | 'serverBridgeMode' | 'appPathOverrides' | 'recentLaunchFolders'>>): void {\n  const config = readConfig();\n  if (prefs.lastModel !== undefined) config.lastModel = prefs.lastModel;\n  if (prefs.lastProvider !== undefined) config.lastProvider = prefs.lastProvider;\n  if (prefs.recentModelsByProvider !== undefined) config.recentModelsByProvider = prefs.recentModelsByProvider;\n  if (prefs.favoriteModels !== undefined) config.favoriteModels = prefs.favoriteModels;\n  if (prefs.modelAliases !== undefined) config.modelAliases = prefs.modelAliases;\n  if (prefs.claudeBridgeMode !== undefined) config.claudeBridgeMode = prefs.claudeBridgeMode;\n  if (prefs.serverBridgeMode !== undefined) config.serverBridgeMode = prefs.serverBridgeMode;\n  if (prefs.appPathOverrides !== undefined) config.appPathOverrides = prefs.appPathOverrides;\n  if (prefs.recentLaunchFolders !== undefined) config.recentLaunchFolders = prefs.recentLaunchFolders;\n  writeConfig(config);\n}\n\nexport function getAppPathOverride(appId: string): string | undefined {\n  const value = loadPreferences().appPathOverrides?.[appId];\n  return typeof value === 'string' && value.trim() ? value : undefined;\n}\n\nexport function setAppPathOverride(appId: string, path: string | null): Record<string, string> {\n  const config = readConfig();\n  const next = { ...(config.appPathOverrides ?? {}) };\n  const trimmed = path?.trim() ?? '';\n  if (trimmed) next[appId] = trimmed;\n  else delete next[appId];\n  config.appPathOverrides = next;\n  if (Object.keys(next).length === 0) delete config.appPathOverrides;\n  writeConfig(config);\n  return next;\n}\n\n/**\n * Resolve the bridge mode for a command. An explicit flag applies to that run only —\n * it is persisted as the command's default ONLY when the caller opts in (--save-mode).\n * With no flag, the saved per-command default applies; with no saved default, proxy.\n */\nexport function resolveBridgeMode(\n  command: 'claude' | 'server',\n  explicit: import('./types.js').BridgeMode | undefined,\n  opts: { persist?: boolean } = {},\n): import('./types.js').BridgeMode {\n  const key = command === 'claude' ? 'claudeBridgeMode' : 'serverBridgeMode';\n  if (explicit) {\n    if (opts.persist === true) savePreferences({ [key]: explicit });\n    return explicit;\n  }\n  return loadPreferences()[key] ?? 'proxy';\n}\n\nconst MAX_RECENT_MODELS = 3;\nconst MAX_RECENT_LAUNCH_FOLDERS = 6;\n\nexport function recordLaunchFolder(folder: string): string[] {\n  const trimmed = folder.trim();\n  if (!trimmed) return loadPreferences().recentLaunchFolders ?? [];\n  const config = readConfig();\n  const prev = config.recentLaunchFolders ?? [];\n  const next = [trimmed, ...prev.filter(path => path !== trimmed)].slice(0, MAX_RECENT_LAUNCH_FOLDERS);\n  config.recentLaunchFolders = next;\n  writeConfig(config);\n  return next;\n}\n\nexport function recordLaunchSelection(\n  _agent: 'claude',\n  providerId: string,\n  modelId: string,\n  prefs: UserPreferences,\n): void {\n  const prevRecent = prefs.recentModelsByProvider?.[providerId] ?? [];\n  const updatedRecent = [modelId, ...prevRecent.filter(id => id !== modelId)].slice(0, MAX_RECENT_MODELS);\n  savePreferences({\n    lastProvider: providerId,\n    lastModel: modelId,\n    recentModelsByProvider: { ...prefs.recentModelsByProvider, [providerId]: updatedRecent },\n  });\n}\n\nconst SERVER_PASSWORD_SERVICE = 'clodex-server-password';\nconst SERVER_PASSWORD_ACCOUNT = 'server-password';\n\nasync function getServerPasswordKeyring(): Promise<any | null> {\n  try {\n    const { Entry } = await import('@napi-rs/keyring');\n    return new Entry(SERVER_PASSWORD_SERVICE, SERVER_PASSWORD_ACCOUNT);\n  } catch {\n    return null;\n  }\n}\n\nexport async function getSavedServerPassword(): Promise<string | null> {\n  const config = readConfig();\n  if (config.server?.savedPassword) {\n    const pwd = config.server.savedPassword;\n    const keyring = await getServerPasswordKeyring();\n    if (keyring) {\n      try {\n        await keyring.setPassword(pwd);\n        delete config.server.savedPassword;\n        if (Object.keys(config.server).length === 0) delete config.server;\n        writeConfig(config);\n      } catch {\n        // Fallback: keep in config.json if keyring fails\n      }\n    }\n    return pwd;\n  }\n\n  const keyring = await getServerPasswordKeyring();\n  if (keyring) {\n    try {\n      return await keyring.getPassword();\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\nexport async function setSavedServerPassword(password: string): Promise<void> {\n  const keyring = await getServerPasswordKeyring();\n  if (keyring) {\n    try {\n      await keyring.setPassword(password);\n      return;\n    } catch {\n      // Fallback\n    }\n  }\n  const config = readConfig();\n  config.server = {\n    ...(config.server ?? {}),\n    savedPassword: password,\n  };\n  writeConfig(config);\n}\n\nexport async function clearSavedServerPassword(): Promise<void> {\n  const keyring = await getServerPasswordKeyring();\n  if (keyring) {\n    try {\n      await keyring.deletePassword();\n    } catch {\n      // Ignore\n    }\n  }\n  const config = readConfig();\n  if (!config.server) return;\n  delete config.server.savedPassword;\n  if (Object.keys(config.server).length === 0) delete config.server;\n  writeConfig(config);\n}\n\nexport function getServerExposedProviders(): string[] | null {\n  const list = readConfig().server?.exposedProviders;\n  return list && list.length > 0 ? list : null;\n}\n\nexport function setServerExposedProviders(providerIds: string[]): void {\n  const config = readConfig();\n  config.server = {\n    ...(config.server ?? {}),\n    exposedProviders: providerIds,\n  };\n  writeConfig(config);\n}\n\nexport function getServerMaskGatewayIds(): boolean {\n  return readConfig().server?.maskGatewayIds ?? true;\n}\n\nexport function setServerMaskGatewayIds(mask: boolean): void {\n  const config = readConfig();\n  config.server = {\n    ...(config.server ?? {}),\n    maskGatewayIds: mask,\n  };\n  writeConfig(config);\n}\n\nexport function getServerFavoritesOnly(): boolean {\n  return readConfig().server?.favoritesOnly ?? false;\n}\n\nexport function setServerFavoritesOnly(favoritesOnly: boolean): void {\n  const config = readConfig();\n  config.server = {\n    ...(config.server ?? {}),\n    favoritesOnly,\n  };\n  writeConfig(config);\n}\n\nexport function getServerListenMode(): 'local' | 'network' {\n  return readConfig().server?.listenMode === 'network' ? 'network' : 'local';\n}\n\nexport function setServerListenMode(listenMode: 'local' | 'network'): void {\n  const config = readConfig();\n  config.server = {\n    ...(config.server ?? {}),\n    listenMode,\n  };\n  writeConfig(config);\n}\n","// src/launch.ts\nimport { execSync, spawn } from 'node:child_process';\nimport { existsSync, appendFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { getAppPathOverride } from './config.js';\nimport { findBinaryOnPath } from './binary-lookup.js';\n\nconst isWindows = process.platform === 'win32';\n\nconst FALLBACK_PATHS = isWindows\n  ? [\n      join(process.env['APPDATA'] ?? homedir(), 'npm', 'claude.cmd'),\n      join(process.env['APPDATA'] ?? homedir(), 'npm', 'claude'),\n      join(homedir(), 'AppData', 'Roaming', 'npm', 'claude.cmd'),\n    ]\n  : [\n      join(homedir(), '.local', 'bin', 'claude'),\n      join(homedir(), '.npm', 'bin', 'claude'),\n      '/usr/local/bin/claude',\n      '/opt/homebrew/bin/claude',\n    ];\n\nexport function findClaudeBinary(): string | null {\n  const environmentOverride = process.env['CLODEX_CLAUDE_PATH'];\n  if (environmentOverride?.trim()) {\n    return existsSync(environmentOverride) ? environmentOverride : null;\n  }\n\n  const override = getAppPathOverride('claude');\n  if (override) return existsSync(override) ? override : null;\n\n  return findBinaryOnPath('claude', FALLBACK_PATHS);\n}\n\nexport function getInstalledClaudeVersion(): string {\n  try {\n    const claudePath = findClaudeBinary();\n    if (!claudePath) return '2.1.183';\n    const result = execSync(`${isWindows ? `\"${claudePath}\"` : claudePath} --version`, {\n      encoding: 'utf8',\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n    const match = result.match(/(\\d+\\.\\d+\\.\\d+)/);\n    if (match) return match[1];\n  } catch {\n    // fallback\n  }\n  return '2.1.183'; // default fallback version known to work\n}\n\nexport function buildClaudeArgs(model: string | undefined, extraArgs: string[]): string[] {\n  return model ? ['--model', model, ...extraArgs] : [...extraArgs];\n}\n\nexport function launchClaude(\n  env: NodeJS.ProcessEnv,\n  model: string | undefined,\n  extraArgs: string[],\n): Promise<number> {\n  return new Promise((resolve) => {\n    const claudePath = findClaudeBinary()!;\n    const args = buildClaudeArgs(model, extraArgs);\n\n    const debugFileIdx = extraArgs.indexOf('--debug-file');\n    const debugLogPath = debugFileIdx !== -1 && extraArgs[debugFileIdx + 1] ? extraArgs[debugFileIdx + 1] : undefined;\n\n    const originalStdoutWrite = process.stdout.write;\n    const originalStderrWrite = process.stderr.write;\n\n    const muteWrite = (chunk: string | Uint8Array, encoding?: any, callback?: any) => {\n      if (typeof encoding === 'function') {\n        callback = encoding;\n      }\n      if (debugLogPath) {\n        try {\n          const str = typeof chunk === 'string' ? chunk : new TextDecoder().decode(chunk);\n          appendFileSync(debugLogPath, `[parent] ${str}`);\n        } catch {\n          // ignore\n        }\n      }\n      if (callback) callback();\n      return true;\n    };\n\n    process.stdout.write = muteWrite as any;\n    process.stderr.write = muteWrite as any;\n\n    const restore = () => {\n      process.stdout.write = originalStdoutWrite;\n      process.stderr.write = originalStderrWrite;\n    };\n\n    const child = spawn(claudePath, args, {\n      stdio: 'inherit',\n      env,\n      shell: isWindows,\n    });\n\n    const forward = (signal: NodeJS.Signals): void => {\n      child.kill(signal);\n    };\n\n    process.once('SIGINT', () => forward('SIGINT'));\n    process.once('SIGTERM', () => forward('SIGTERM'));\n\n    child.on('exit', (code) => {\n      restore();\n      resolve(code ?? 0);\n    });\n\n    child.on('error', (err) => {\n      restore();\n      resolve(1);\n    });\n  });\n}\n","import { execFileSync } from 'node:child_process';\nimport { existsSync } from 'node:fs';\n\nexport interface FindBinaryOnPathOptions {\n  verifyWhichResult?: boolean;\n  isWindows?: boolean;\n  exists?: (path: string) => boolean;\n  runWhich?: (name: string, isWindows: boolean) => string;\n}\n\nexport function findBinaryOnPath(\n  name: string,\n  fallbackPaths: string[],\n  options: FindBinaryOnPathOptions = {},\n): string | null {\n  const isWindows = options.isWindows ?? process.platform === 'win32';\n  const exists = options.exists ?? existsSync;\n  // argv form, never a shell string — the binary name must not be shell-interpretable\n  // (defense-in-depth originally added in d887984, must survive refactors).\n  const runWhich = options.runWhich ?? ((binary, win) =>\n    execFileSync(win ? 'where.exe' : 'which', [binary], {\n      encoding: 'utf8',\n      stdio: ['pipe', 'pipe', 'pipe'],\n    }));\n\n  try {\n    const lines = runWhich(name, isWindows)\n      .trim()\n      .split('\\n')\n      .map(line => line.trim())\n      .filter(Boolean);\n    const path = (isWindows ? lines.find(line => line.toLowerCase().endsWith('.cmd')) : null)\n      ?? lines[0];\n    if (path && (!options.verifyWhichResult || exists(path))) return path;\n  } catch {\n    // Fall through to fallback paths.\n  }\n\n  for (const path of fallbackPaths) {\n    if (exists(path)) return path;\n  }\n  return null;\n}\n"],"mappings":";;;AA0BA;AAAA,EACE;AAAA,EACA,aAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS,QAAAC,aAAY;;;ACpC9B,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,QAAQ,YAAY,WAAW,mBAAmB;AAEpD,IAAM,eAAe;AAErB,IAAM,sBAAsB;AAQnC,SAAS,SAAS,MAAe,QAAQ,KAAa;AACpD,SAAO,IAAI,QAAQ,IAAI,eAAe,QAAQ;AAChD;AAEO,SAAS,uBAAuB,MAAe,QAAQ,KAAyB;AACrF,QAAM,WAAW,IAAI;AACrB,SAAO,UAAU,KAAK,KAAK;AAC7B;AAEO,SAAS,WAAW,MAAe,QAAQ,KAAa;AAC7D,QAAM,WAAW,uBAAuB,GAAG;AAC3C,MAAI,SAAU,QAAO;AACrB,SAAO,KAAK,SAAS,GAAG,GAAG,IAAI,YAAY,EAAE;AAC/C;AAEO,SAAS,iBAAiB,MAAe,QAAQ,KAAa;AACnE,SAAO,KAAK,SAAS,GAAG,GAAG,IAAI,mBAAmB,EAAE;AACtD;AAEA,IAAI,sBAAsB;AAQnB,SAAS,4BAA4B,MAAe,QAAQ,KAAW;AAC5E,MAAI,oBAAqB;AACzB,wBAAsB;AACtB,MAAI;AACF,UAAM,UAAU,WAAW,GAAG;AAC9B,QAAI,WAAW,OAAO,EAAG;AACzB,UAAM,aAAa,iBAAiB,GAAG;AACvC,QAAI,CAAC,WAAW,UAAU,EAAG;AAE7B,cAAU,SAAS,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACnD,eAAW,SAAS,YAAY,UAAU,GAAG;AAC3C,UAAI,UAAU,OAAQ;AACtB,aAAO,KAAK,YAAY,KAAK,GAAG,KAAK,SAAS,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,IAC3E;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAOO,SAAS,cAAc,MAAe,QAAQ,KAAa;AAChE,SAAO,KAAK,WAAW,GAAG,GAAG,aAAa;AAC5C;AAEO,SAAS,iBAAiB,MAAe,QAAQ,KAAa;AACnE,SAAO,KAAK,WAAW,GAAG,GAAG,gBAAgB;AAC/C;AAEO,SAAS,YAAY,MAAe,QAAQ,KAAa;AAC9D,SAAO,KAAK,WAAW,GAAG,GAAG,MAAM;AACrC;;;ADrBO,SAAS,qBAAqB,MAAe,QAAQ,KAAa;AACvE,SAAOC,MAAK,WAAW,GAAG,GAAG,qBAAqB;AACpD;AAEO,SAAS,yBAAyB,MAAe,QAAQ,KAAa;AAC3E,SAAOA,MAAK,WAAW,GAAG,GAAG,qBAAqB;AACpD;AAGO,SAAS,oBACd,MACA,MAAwC,QAAQ,KACvC;AACT,MAAI,SAAS,OAAW,QAAO;AAC/B,QAAM,MAAM,IAAI,qBAAqB,KAAK,EAAE,YAAY;AACxD,SAAO,QAAQ,OAAO,QAAQ;AAChC;AAEA,SAAS,OAAO,OAAiC;AAC/C,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS;AACxF;AAGO,SAAS,yBAAyB,OAA2C;AAClF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,SAAS;AAEf,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,SAAS,cAAc,SAAS,QAAS,QAAO;AACpD,MAAI,CAAC,OAAO,OAAO,MAAM,CAAC,EAAG,QAAO;AACpC,QAAM,MAAM,OAAO,KAAK;AACxB,MAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,UAAU,GAAG,KAAK,OAAO,EAAG,QAAO;AAC1E,QAAM,YAAY,OAAO,OAAO,WAAW,MAAM,WAAW,OAAO,WAAW,IAAI;AAElF,QAAM,SAAS,OAAO,QAAQ;AAC9B,MAAI,SAAS,SAAS;AAEpB,QAAI,OAAO,WAAW,YAAY,CAAC,OAAO,KAAK,EAAG,QAAO;AACzD,WAAO,EAAE,MAAM,MAAM,OAAO,MAAM,GAAG,KAAK,QAAQ,UAAU;AAAA,EAC9D;AACA,SAAO,EAAE,MAAM,MAAM,OAAO,MAAM,GAAG,KAAK,UAAU;AACtD;AAQO,SAAS,yBAAyB,KAAmC;AAC1E,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AACtD,QAAM,SAA+B,CAAC;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,yBAAyB,IAAI;AAC3C,QAAI,MAAO,QAAO,KAAK,KAAK;AAAA,EAC9B;AACA,SAAO;AACT;AAGO,SAAS,WACd,KACA,OAAiD,QAAQ,KAAK,KAAK,OAAO,GACjE;AACT,MAAI;AACF,SAAK,KAAK,CAAC;AACX,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,WAAQ,KAA+B,SAAS;AAAA,EAClD;AACF;AAIA,IAAM,wBAAwB;AAC9B,IAAM,uBAAuB;AAC7B,IAAM,wBAAwB;AAO9B,SAAS,sBACP,UACA,OAA6D,CAAC,GACzC;AACrB,QAAM,MAAM,KAAK,OAAO,KAAK,IAAI;AACjC,QAAM,QAAQ,KAAK,WAAW;AAC9B,EAAAC,WAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAE7D,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW;AAC5C,QAAI;AACF,YAAM,KAAK,SAAS,UAAU,IAAI;AAClC,YAAM,UAA8B,EAAE,KAAK,QAAQ,KAAK,WAAW,IAAI;AACvE,oBAAc,IAAI,KAAK,UAAU,OAAO,CAAC;AACzC,gBAAU,EAAE;AACZ,aAAO,MAAM;AACX,YAAI;AACF,qBAAW,QAAQ;AAAA,QACrB,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAEN,UAAI,QAAQ;AACZ,UAAI;AACF,cAAM,WAAW,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAC1D,gBAAQ,CAAC,SAAS,OACb,CAAC,MAAM,SAAS,GAAG,KAClB,OAAO,SAAS,cAAc,YAAY,MAAM,SAAS,YAAY;AAAA,MAC7E,QAAQ;AACN,gBAAQ;AAAA,MACV;AACA,UAAI,CAAC,MAAO,QAAO;AACnB,UAAI;AACF,mBAAW,QAAQ;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,IAAkB;AACnC,UAAQ,KAAK,IAAI,WAAW,IAAI,kBAAkB,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE;AACjE;AASA,SAAS,qBAAqB,KAAc,QAA0B;AACpE,QAAM,WAAW,yBAAyB,GAAG;AAC7C,MAAI,UAA+B;AACnC,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,aAAS;AACP,cAAU,sBAAsB,QAAQ;AACxC,QAAI,WAAW,KAAK,IAAI,KAAK,SAAU;AACvC,cAAU,qBAAqB;AAAA,EACjC;AACA,MAAI;AACF,WAAO;AAAA,EACT,UAAE;AACA,cAAU;AAAA,EACZ;AACF;AAEA,SAAS,eAAe,KAAoC;AAC1D,MAAI;AACJ,MAAI;AACF,UAAM,aAAa,qBAAqB,GAAG,GAAG,MAAM;AAAA,EACtD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,SAAO,yBAAyB,GAAG;AACrC;AAGA,SAAS,mBAAmB,MAAc,SAAqC;AAC7E,EAAAA,WAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,UAAU,GAAG,IAAI,IAAI,QAAQ,GAAG;AACtC,gBAAc,SAAS,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AACjG,aAAW,SAAS,IAAI;AAC1B;AAWO,SAAS,2BACd,OACA,MAAe,QAAQ,KACvB,UAAgC,CAAC,GAC3B;AACN,QAAM,QAAQ,QAAQ,WAAW;AACjC,MAAI;AACF,yBAAqB,KAAK,MAAM;AAC9B,YAAM,UAAU,eAAe,GAAG,EAAE;AAAA,QAClC,YAAU,OAAO,QAAQ,MAAM,OAAO,MAAM,OAAO,GAAG;AAAA,MACxD;AACA,cAAQ,KAAK,KAAK;AAClB,yBAAmB,qBAAqB,GAAG,GAAG,OAAO;AAAA,IACvD,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAOO,SAAS,6BACd,MAAc,QAAQ,KACtB,MAAe,QAAQ,KACvB,UAAgC,CAAC,GAC3B;AACN,QAAM,QAAQ,QAAQ,WAAW;AACjC,MAAI;AACF,yBAAqB,KAAK,MAAM;AAC9B,YAAM,UAAU,eAAe,GAAG,EAAE;AAAA,QAClC,YAAU,OAAO,QAAQ,OAAO,MAAM,OAAO,GAAG;AAAA,MAClD;AACA,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO,qBAAqB,GAAG,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,MACnD,OAAO;AACL,2BAAmB,qBAAqB,GAAG,GAAG,OAAO;AAAA,MACvD;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAWO,SAAS,4BACd,MAAe,QAAQ,KACvB,UAAoC,CAAC,GACf;AACtB,QAAM,QAAQ,QAAQ,WAAW;AACjC,SAAO,eAAe,GAAG,EAAE,OAAO,WAAS,MAAM,MAAM,GAAG,CAAC;AAC7D;AAUO,SAAS,6BAA6B,SAAqD;AAChG,SAAO,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM;AACjC,QAAI,EAAE,SAAS,EAAE,KAAM,QAAO,EAAE,SAAS,UAAU,KAAK;AACxD,YAAQ,KAAK,MAAM,EAAE,SAAS,KAAK,MAAM,KAAK,MAAM,EAAE,SAAS,KAAK;AAAA,EACtE,CAAC;AACH;;;AE3TA,SAAS,WAAAC,gBAAe;AACxB,SAAS,aAAAC,YAAW,gBAAAC,eAAc,iBAAAC,sBAAqB;AAGvD,SAAS,aAAa,MAAsC;AAC1D,MAAI;AACF,UAAM,SAAS,KAAK,MAAMC,cAAa,MAAM,MAAM,CAAC;AACpD,WAAO,UAAU,OAAO,WAAW,WAAW,SAA4B;AAAA,EAC5E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,aAA8B;AACrC,8BAA4B;AAC5B,SAAO,aAAa,cAAc,CAAC,KAAK,CAAC;AAC3C;AAEA,SAAS,YAAY,QAA+B;AAClD,QAAM,aAAa,cAAc;AACjC,EAAAC,WAAUC,SAAQ,UAAU,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,EAAAC,eAAc,YAAY,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AACrG;AAEO,SAAS,kBAAmC;AACjD,QAAM,SAAS,WAAW;AAC1B,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,cAAc,OAAO;AAAA,IACrB,wBAAwB,OAAO;AAAA,IAC/B,gBAAgB,OAAO;AAAA,IACvB,cAAc,OAAO;AAAA,IACrB,kBAAkB,OAAO;AAAA,IACzB,kBAAkB,OAAO;AAAA,IACzB,kBAAkB,OAAO;AAAA,IACzB,qBAAqB,OAAO;AAAA,IAC5B,QAAQ,OAAO;AAAA,EACjB;AACF;AAEO,SAAS,gBAAgB,OAAiO;AAC/P,QAAM,SAAS,WAAW;AAC1B,MAAI,MAAM,cAAc,OAAW,QAAO,YAAY,MAAM;AAC5D,MAAI,MAAM,iBAAiB,OAAW,QAAO,eAAe,MAAM;AAClE,MAAI,MAAM,2BAA2B,OAAW,QAAO,yBAAyB,MAAM;AACtF,MAAI,MAAM,mBAAmB,OAAW,QAAO,iBAAiB,MAAM;AACtE,MAAI,MAAM,iBAAiB,OAAW,QAAO,eAAe,MAAM;AAClE,MAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,MAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,MAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,MAAI,MAAM,wBAAwB,OAAW,QAAO,sBAAsB,MAAM;AAChF,cAAY,MAAM;AACpB;AAEO,SAAS,mBAAmB,OAAmC;AACpE,QAAM,QAAQ,gBAAgB,EAAE,mBAAmB,KAAK;AACxD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ;AAC7D;AAmBO,SAAS,kBACd,SACA,UACA,OAA8B,CAAC,GACE;AACjC,QAAM,MAAM,YAAY,WAAW,qBAAqB;AACxD,MAAI,UAAU;AACZ,QAAI,KAAK,YAAY,KAAM,iBAAgB,EAAE,CAAC,GAAG,GAAG,SAAS,CAAC;AAC9D,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,EAAE,GAAG,KAAK;AACnC;AAEA,IAAM,oBAAoB;AAcnB,SAAS,sBACd,QACA,YACA,SACA,OACM;AACN,QAAM,aAAa,MAAM,yBAAyB,UAAU,KAAK,CAAC;AAClE,QAAM,gBAAgB,CAAC,SAAS,GAAG,WAAW,OAAO,QAAM,OAAO,OAAO,CAAC,EAAE,MAAM,GAAG,iBAAiB;AACtG,kBAAgB;AAAA,IACd,cAAc;AAAA,IACd,WAAW;AAAA,IACX,wBAAwB,EAAE,GAAG,MAAM,wBAAwB,CAAC,UAAU,GAAG,cAAc;AAAA,EACzF,CAAC;AACH;AAEA,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAEhC,eAAe,2BAAgD;AAC7D,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,kBAAkB;AACjD,WAAO,IAAI,MAAM,yBAAyB,uBAAuB;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,yBAAiD;AACrE,QAAM,SAAS,WAAW;AAC1B,MAAI,OAAO,QAAQ,eAAe;AAChC,UAAM,MAAM,OAAO,OAAO;AAC1B,UAAMC,WAAU,MAAM,yBAAyB;AAC/C,QAAIA,UAAS;AACX,UAAI;AACF,cAAMA,SAAQ,YAAY,GAAG;AAC7B,eAAO,OAAO,OAAO;AACrB,YAAI,OAAO,KAAK,OAAO,MAAM,EAAE,WAAW,EAAG,QAAO,OAAO;AAC3D,oBAAY,MAAM;AAAA,MACpB,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,yBAAyB;AAC/C,MAAI,SAAS;AACX,QAAI;AACF,aAAO,MAAM,QAAQ,YAAY;AAAA,IACnC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,uBAAuB,UAAiC;AAC5E,QAAM,UAAU,MAAM,yBAAyB;AAC/C,MAAI,SAAS;AACX,QAAI;AACF,YAAM,QAAQ,YAAY,QAAQ;AAClC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,SAAS,WAAW;AAC1B,SAAO,SAAS;AAAA,IACd,GAAI,OAAO,UAAU,CAAC;AAAA,IACtB,eAAe;AAAA,EACjB;AACA,cAAY,MAAM;AACpB;AAkBO,SAAS,4BAA6C;AAC3D,QAAM,OAAO,WAAW,EAAE,QAAQ;AAClC,SAAO,QAAQ,KAAK,SAAS,IAAI,OAAO;AAC1C;AAEO,SAAS,0BAA0B,aAA6B;AACrE,QAAM,SAAS,WAAW;AAC1B,SAAO,SAAS;AAAA,IACd,GAAI,OAAO,UAAU,CAAC;AAAA,IACtB,kBAAkB;AAAA,EACpB;AACA,cAAY,MAAM;AACpB;AAEO,SAAS,0BAAmC;AACjD,SAAO,WAAW,EAAE,QAAQ,kBAAkB;AAChD;AAEO,SAAS,wBAAwB,MAAqB;AAC3D,QAAM,SAAS,WAAW;AAC1B,SAAO,SAAS;AAAA,IACd,GAAI,OAAO,UAAU,CAAC;AAAA,IACtB,gBAAgB;AAAA,EAClB;AACA,cAAY,MAAM;AACpB;AAEO,SAAS,yBAAkC;AAChD,SAAO,WAAW,EAAE,QAAQ,iBAAiB;AAC/C;AAEO,SAAS,uBAAuB,eAA8B;AACnE,QAAM,SAAS,WAAW;AAC1B,SAAO,SAAS;AAAA,IACd,GAAI,OAAO,UAAU,CAAC;AAAA,IACtB;AAAA,EACF;AACA,cAAY,MAAM;AACpB;AAEO,SAAS,sBAA2C;AACzD,SAAO,WAAW,EAAE,QAAQ,eAAe,YAAY,YAAY;AACrE;AAEO,SAAS,oBAAoB,YAAuC;AACzE,QAAM,SAAS,WAAW;AAC1B,SAAO,SAAS;AAAA,IACd,GAAI,OAAO,UAAU,CAAC;AAAA,IACtB;AAAA,EACF;AACA,cAAY,MAAM;AACpB;;;ACpPA,SAAS,UAAU,aAAa;AAChC,SAAS,cAAAC,aAAY,sBAAsB;AAC3C,SAAS,WAAAC,gBAAe;AACxB,SAAS,QAAAC,aAAY;;;ACJrB,SAAS,oBAAoB;AAC7B,SAAS,cAAAC,mBAAkB;AASpB,SAAS,iBACd,MACA,eACA,UAAmC,CAAC,GACrB;AACf,QAAMC,aAAY,QAAQ,aAAa,QAAQ,aAAa;AAC5D,QAAM,SAAS,QAAQ,UAAUD;AAGjC,QAAM,WAAW,QAAQ,aAAa,CAAC,QAAQ,QAC7C,aAAa,MAAM,cAAc,SAAS,CAAC,MAAM,GAAG;AAAA,IAClD,UAAU;AAAA,IACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AAEH,MAAI;AACF,UAAM,QAAQ,SAAS,MAAMC,UAAS,EACnC,KAAK,EACL,MAAM,IAAI,EACV,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,UAAM,QAAQA,aAAY,MAAM,KAAK,UAAQ,KAAK,YAAY,EAAE,SAAS,MAAM,CAAC,IAAI,SAC/E,MAAM,CAAC;AACZ,QAAI,SAAS,CAAC,QAAQ,qBAAqB,OAAO,IAAI,GAAI,QAAO;AAAA,EACnE,QAAQ;AAAA,EAER;AAEA,aAAW,QAAQ,eAAe;AAChC,QAAI,OAAO,IAAI,EAAG,QAAO;AAAA,EAC3B;AACA,SAAO;AACT;;;ADlCA,IAAM,YAAY,QAAQ,aAAa;AAEvC,IAAM,iBAAiB,YACnB;AAAA,EACEC,MAAK,QAAQ,IAAI,SAAS,KAAKC,SAAQ,GAAG,OAAO,YAAY;AAAA,EAC7DD,MAAK,QAAQ,IAAI,SAAS,KAAKC,SAAQ,GAAG,OAAO,QAAQ;AAAA,EACzDD,MAAKC,SAAQ,GAAG,WAAW,WAAW,OAAO,YAAY;AAC3D,IACA;AAAA,EACED,MAAKC,SAAQ,GAAG,UAAU,OAAO,QAAQ;AAAA,EACzCD,MAAKC,SAAQ,GAAG,QAAQ,OAAO,QAAQ;AAAA,EACvC;AAAA,EACA;AACF;AAEG,SAAS,mBAAkC;AAChD,QAAM,sBAAsB,QAAQ,IAAI,oBAAoB;AAC5D,MAAI,qBAAqB,KAAK,GAAG;AAC/B,WAAOC,YAAW,mBAAmB,IAAI,sBAAsB;AAAA,EACjE;AAEA,QAAM,WAAW,mBAAmB,QAAQ;AAC5C,MAAI,SAAU,QAAOA,YAAW,QAAQ,IAAI,WAAW;AAEvD,SAAO,iBAAiB,UAAU,cAAc;AAClD;AAEO,SAAS,4BAAoC;AAClD,MAAI;AACF,UAAM,aAAa,iBAAiB;AACpC,QAAI,CAAC,WAAY,QAAO;AACxB,UAAM,SAAS,SAAS,GAAG,YAAY,IAAI,UAAU,MAAM,UAAU,cAAc;AAAA,MACjF,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AACD,UAAM,QAAQ,OAAO,MAAM,iBAAiB;AAC5C,QAAI,MAAO,QAAO,MAAM,CAAC;AAAA,EAC3B,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA2B,WAA+B;AACxF,SAAO,QAAQ,CAAC,WAAW,OAAO,GAAG,SAAS,IAAI,CAAC,GAAG,SAAS;AACjE;AAEO,SAAS,aACd,KACA,OACA,WACiB;AACjB,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,aAAa,iBAAiB;AACpC,UAAM,OAAO,gBAAgB,OAAO,SAAS;AAE7C,UAAM,eAAe,UAAU,QAAQ,cAAc;AACrD,UAAM,eAAe,iBAAiB,MAAM,UAAU,eAAe,CAAC,IAAI,UAAU,eAAe,CAAC,IAAI;AAExG,UAAM,sBAAsB,QAAQ,OAAO;AAC3C,UAAM,sBAAsB,QAAQ,OAAO;AAE3C,UAAM,YAAY,CAAC,OAA4B,UAAgB,aAAmB;AAChF,UAAI,OAAO,aAAa,YAAY;AAClC,mBAAW;AAAA,MACb;AACA,UAAI,cAAc;AAChB,YAAI;AACF,gBAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC9E,yBAAe,cAAc,YAAY,GAAG,EAAE;AAAA,QAChD,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,SAAU,UAAS;AACvB,aAAO;AAAA,IACT;AAEA,YAAQ,OAAO,QAAQ;AACvB,YAAQ,OAAO,QAAQ;AAEvB,UAAM,UAAU,MAAM;AACpB,cAAQ,OAAO,QAAQ;AACvB,cAAQ,OAAO,QAAQ;AAAA,IACzB;AAEA,UAAM,QAAQ,MAAM,YAAY,MAAM;AAAA,MACpC,OAAO;AAAA,MACP;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAED,UAAM,UAAU,CAAC,WAAiC;AAChD,YAAM,KAAK,MAAM;AAAA,IACnB;AAEA,YAAQ,KAAK,UAAU,MAAM,QAAQ,QAAQ,CAAC;AAC9C,YAAQ,KAAK,WAAW,MAAM,QAAQ,SAAS,CAAC;AAEhD,UAAM,GAAG,QAAQ,CAAC,SAAS;AACzB,cAAQ;AACR,cAAQ,QAAQ,CAAC;AAAA,IACnB,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,cAAQ;AACR,cAAQ,CAAC;AAAA,IACX,CAAC;AAAA,EACH,CAAC;AACH;","names":["mkdirSync","join","join","mkdirSync","dirname","mkdirSync","readFileSync","writeFileSync","readFileSync","mkdirSync","dirname","writeFileSync","keyring","existsSync","homedir","join","existsSync","isWindows","join","homedir","existsSync"]}