@chrischall/mcp-utils 2.10.0 → 2.12.0

package/dist/fs/confine.js

@@ -54,10 +54,19 @@ function realPathAllowingMissing(p) {
  * `allowedRoots`.
  */
 export function assertPathWithinRoots(path, roots) {
+    return confineToRoots(path, roots).real;
+}
+/**
+ * {@link assertPathWithinRoots}, also reporting WHICH root (its real path)
+ * contained the target — for checks that judge the path relative to its root
+ * (the upload guard's hidden-segment rule). Internal to the fs module.
+ */
+export function confineToRoots(path, roots) {
     const target = realPathAllowingMissing(expandPath(path));
     for (const root of roots) {
-        if (isInside(realPathAllowingMissing(expandPath(root)), target))
-            return target;
+        const realRoot = realPathAllowingMissing(expandPath(root));
+        if (isInside(realRoot, target))
+            return { real: target, root: realRoot };
     }
     throw new Error(`Path is outside the allowed directories: ${path}`);
 }

package/dist/fs/confine.js.map

@@ -1 +1 @@
-{"version":3,"file":"confine.js","sourceRoot":"","sources":["../../src/fs/confine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,CAAS;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAAwB;IAC1E,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"confine.js","sourceRoot":"","sources":["../../src/fs/confine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,CAAS;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAAwB;IAC1E,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAwB;IACnE,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/fs/index.d.ts

@@ -30,10 +30,17 @@ export interface ReadFileHeadOptions {
 export declare function fileBlob(path: string, opts?: FileBlobOptions): Promise<Blob>;
 /**
  * Read the first `bytes` of a file (for magic-byte / header sniffing — image
- * dimensions, file-type detection) WITHOUT loading the whole file. Returns only
- * as many bytes as were actually read (a short file yields a short buffer).
+ * dimensions, file-type detection; pair with {@link sniffMimeBytes} /
+ * {@link bytesMatchMime}) WITHOUT loading the whole file. Returns only as many
+ * bytes as were actually read (a short file yields a short buffer).
+ *
+ * With `allowedRoots`, the path is confined first and its REAL path opened
+ * with `O_NOFOLLOW`, so a symlink swapped in after the check is refused.
  */
 export declare function readFileHead(path: string, bytes: number, opts?: ReadFileHeadOptions): Promise<Buffer>;
 export * from './output.js';
 export { assertPathWithinRoots } from './confine.js';
+export { bytesMatchMime, sniffMimeBytes } from './magic.js';
+export { FileWriteRefusedError, writeFileSafe, writeUniqueFile, type FileWriteRefusal, type WriteFileSafeOptions, type WriteUniqueFileOptions, } from './write.js';
+export { UploadRefusedError, vetUploadFile, type UploadRefusal, type VetUploadOptions, type VettedUpload, } from './upload-guard.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/fs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fs/index.ts"],"names":[],"mappings":"AAgBA,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CActF;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB/G;AAED,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fs/index.ts"],"names":[],"mappings":"AAgBA,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CActF;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB/G;AAED,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC"}

package/dist/fs/index.js

@@ -8,7 +8,7 @@
 // by the file on disk (`fs.openAsBlob`), so `fetch` streams the bytes straight
 // off disk as it sends the multipart body — constant memory regardless of size.
 // ────────────────────────────────────────────────────────────────────────────
-import { openAsBlob } from 'node:fs';
+import { constants as fsConstants, openAsBlob } from 'node:fs';
 import { open } from 'node:fs/promises';
 import { assertPathWithinRoots } from './confine.js';
 /**
@@ -36,8 +36,12 @@ export async function fileBlob(path, opts = {}) {
 }
 /**
  * Read the first `bytes` of a file (for magic-byte / header sniffing — image
- * dimensions, file-type detection) WITHOUT loading the whole file. Returns only
- * as many bytes as were actually read (a short file yields a short buffer).
+ * dimensions, file-type detection; pair with {@link sniffMimeBytes} /
+ * {@link bytesMatchMime}) WITHOUT loading the whole file. Returns only as many
+ * bytes as were actually read (a short file yields a short buffer).
+ *
+ * With `allowedRoots`, the path is confined first and its REAL path opened
+ * with `O_NOFOLLOW`, so a symlink swapped in after the check is refused.
  */
 export async function readFileHead(path, bytes, opts = {}) {
     const target = opts.allowedRoots ? assertPathWithinRoots(path, opts.allowedRoots) : path;
@@ -45,7 +49,9 @@ export async function readFileHead(path, bytes, opts = {}) {
     // non-leaking message instead of a raw Node ENOENT (path + stack).
     let fh;
     try {
-        fh = await open(target, 'r');
+        // Confined: `target` is already the real path, so a final-component symlink
+        // here can only be one swapped in since the check — refuse it.
+        fh = await open(target, opts.allowedRoots ? fsConstants.O_RDONLY | (fsConstants.O_NOFOLLOW ?? 0) : 'r');
     }
     catch {
         throw new Error(`Cannot read file: ${path}`);
@@ -61,4 +67,7 @@ export async function readFileHead(path, bytes, opts = {}) {
 }
 export * from './output.js';
 export { assertPathWithinRoots } from './confine.js';
+export { bytesMatchMime, sniffMimeBytes } from './magic.js';
+export { FileWriteRefusedError, writeFileSafe, writeUniqueFile, } from './write.js';
+export { UploadRefusedError, vetUploadFile, } from './upload-guard.js';
 //# sourceMappingURL=index.js.map

package/dist/fs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fs/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAwBrD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAI,GAAoB,EAAE;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,OAAO,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,QAAQ,gBAAgB,IAAI,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAwB,EAAE;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,+EAA+E;IAC/E,mEAAmE;IACnE,IAAI,EAAc,CAAC;IACnB,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fs/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAE/E,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAwBrD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAI,GAAoB,EAAE;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,OAAO,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,QAAQ,gBAAgB,IAAI,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAwB,EAAE;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,+EAA+E;IAC/E,mEAAmE;IACnE,IAAI,EAAc,CAAC;IACnB,IAAI,CAAC;QACH,4EAA4E;QAC5E,+DAA+D;QAC/D,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,eAAe,GAIhB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,aAAa,GAId,MAAM,mBAAmB,CAAC"}

package/dist/fs/magic.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Magic-byte (leading signature) detection for the file types the fleet moves
+ * around: images (PNG / JPEG / WebP / GIF), ISO-BMFF media (HEIC / HEIF / AVIF
+ * / MP4 / MOV / M4A), PDF, zip containers (mscz, mxl, docx, epub…) and
+ * Standard MIDI Files.
+ *
+ * Consolidates gemini's `sniffMimeBytes` (images), musescore's
+ * `FORMAT_MAGIC`/`readMagic` (PDF / zip / MIDI — the check that keeps a gated
+ * "Forbidden" HTML page from being saved as a `.pdf`), and skylight's
+ * upload-guard `SIGNATURES` (images + ISO-BMFF). Pair with `readFileHead` for
+ * an on-disk file; 16 bytes is enough for every signature here.
+ */
+/**
+ * Magic-byte MIME sniff. Returns the detected type — `image/png`,
+ * `image/jpeg`, `image/webp`, `image/gif`, `application/pdf`,
+ * `application/zip`, `audio/midi`, or (from an ISO-BMFF `ftyp` major brand)
+ * `image/heic`, `image/heif`, `image/avif`, `video/quicktime`, `audio/mp4`,
+ * `video/mp4` — or `undefined` for anything else (including a legacy
+ * QuickTime head with no `ftyp`, whose type it cannot name). Callers decide
+ * their own default. Needs at most the first 16 bytes.
+ */
+export declare function sniffMimeBytes(bytes: Uint8Array): string | undefined;
+/**
+ * Whether `bytes` (a file's head) start like `mime` claims — the "is this
+ * renamed secret really a .png" check. Fails closed: a MIME type with no known
+ * signature returns `false`, never a silent pass.
+ *
+ * The ISO-BMFF family (heic / heif / avif / mp4 / quicktime / m4a) is matched
+ * loosely — any leading BMFF box is accepted for any of them — because brands
+ * vary between encoders and an old `.mov` has no `ftyp` at all; a credential
+ * or text file still never passes. Aliases like `image/jpg` are normalized and
+ * the comparison is case-insensitive.
+ */
+export declare function bytesMatchMime(bytes: Uint8Array, mime: string): boolean;
+//# sourceMappingURL=magic.d.ts.map

package/dist/fs/magic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic.d.ts","sourceRoot":"","sources":["../../src/fs/magic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkEH;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvE"}

package/dist/fs/magic.js

@@ -0,0 +1,110 @@
+/**
+ * Magic-byte (leading signature) detection for the file types the fleet moves
+ * around: images (PNG / JPEG / WebP / GIF), ISO-BMFF media (HEIC / HEIF / AVIF
+ * / MP4 / MOV / M4A), PDF, zip containers (mscz, mxl, docx, epub…) and
+ * Standard MIDI Files.
+ *
+ * Consolidates gemini's `sniffMimeBytes` (images), musescore's
+ * `FORMAT_MAGIC`/`readMagic` (PDF / zip / MIDI — the check that keeps a gated
+ * "Forbidden" HTML page from being saved as a `.pdf`), and skylight's
+ * upload-guard `SIGNATURES` (images + ISO-BMFF). Pair with `readFileHead` for
+ * an on-disk file; 16 bytes is enough for every signature here.
+ */
+const PNG_SIG = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+/** Whether `buf` starts with the bytes of `sig` (a byte array or latin1 string). */
+function startsWith(buf, sig, offset = 0) {
+    const bytes = typeof sig === 'string' ? Array.from(sig, (c) => c.charCodeAt(0)) : sig;
+    if (buf.length < offset + bytes.length)
+        return false;
+    for (let i = 0; i < bytes.length; i++)
+        if (buf[offset + i] !== bytes[i])
+            return false;
+    return true;
+}
+function latin1(buf, start, end) {
+    return String.fromCharCode(...buf.subarray(start, end));
+}
+/**
+ * Top-level ISO-BMFF box types that can open a file. `ftyp` for anything
+ * modern; the rest are legacy QuickTime atoms an old `.mov` may start with.
+ */
+const BMFF_BOXES = new Set(['ftyp', 'moov', 'mdat', 'wide', 'free', 'skip', 'pnot']);
+function isBmff(buf) {
+    return buf.length >= 8 && BMFF_BOXES.has(latin1(buf, 4, 8));
+}
+const HEIC_BRANDS = new Set(['heic', 'heix', 'heim', 'heis', 'hevc', 'hevx']);
+const HEIF_BRANDS = new Set(['mif1', 'msf1']);
+/** The MIME an `ftyp` major brand names; `undefined` when there is no ftyp box. */
+function bmffMime(buf) {
+    if (buf.length < 12 || latin1(buf, 4, 8) !== 'ftyp')
+        return undefined;
+    const brand = latin1(buf, 8, 12);
+    if (HEIC_BRANDS.has(brand))
+        return 'image/heic';
+    if (HEIF_BRANDS.has(brand))
+        return 'image/heif';
+    if (brand === 'avif' || brand === 'avis')
+        return 'image/avif';
+    if (brand === 'qt  ')
+        return 'video/quicktime';
+    if (brand === 'M4A ')
+        return 'audio/mp4';
+    return 'video/mp4';
+}
+/** Exact (non-ISO-BMFF) signatures, in detection order. */
+const SIGNATURES = [
+    ['image/png', (b) => startsWith(b, PNG_SIG)],
+    ['image/jpeg', (b) => startsWith(b, [0xff, 0xd8, 0xff])],
+    ['image/webp', (b) => startsWith(b, 'RIFF') && startsWith(b, 'WEBP', 8)],
+    ['image/gif', (b) => startsWith(b, 'GIF8')],
+    ['application/pdf', (b) => startsWith(b, '%PDF-')],
+    // Local file header; empty archive (end-of-central-directory first); spanned.
+    ['application/zip', (b) => startsWith(b, [0x50, 0x4b, 0x03, 0x04]) || startsWith(b, [0x50, 0x4b, 0x05, 0x06]) || startsWith(b, [0x50, 0x4b, 0x07, 0x08])],
+    ['audio/midi', (b) => startsWith(b, 'MThd')],
+];
+/** ISO-BMFF MIME types — matched as a family by {@link bytesMatchMime}. */
+const BMFF_MIMES = new Set(['image/heic', 'image/heif', 'image/avif', 'video/mp4', 'video/quicktime', 'audio/mp4']);
+/** Common aliases normalized before matching. */
+const MIME_ALIASES = {
+    'image/jpg': 'image/jpeg',
+    'image/pjpeg': 'image/jpeg',
+    'audio/x-midi': 'audio/midi',
+    'audio/mid': 'audio/midi',
+    'application/x-zip-compressed': 'application/zip',
+    'application/x-pdf': 'application/pdf',
+};
+/**
+ * Magic-byte MIME sniff. Returns the detected type — `image/png`,
+ * `image/jpeg`, `image/webp`, `image/gif`, `application/pdf`,
+ * `application/zip`, `audio/midi`, or (from an ISO-BMFF `ftyp` major brand)
+ * `image/heic`, `image/heif`, `image/avif`, `video/quicktime`, `audio/mp4`,
+ * `video/mp4` — or `undefined` for anything else (including a legacy
+ * QuickTime head with no `ftyp`, whose type it cannot name). Callers decide
+ * their own default. Needs at most the first 16 bytes.
+ */
+export function sniffMimeBytes(bytes) {
+    for (const [mime, test] of SIGNATURES)
+        if (test(bytes))
+            return mime;
+    return bmffMime(bytes);
+}
+/**
+ * Whether `bytes` (a file's head) start like `mime` claims — the "is this
+ * renamed secret really a .png" check. Fails closed: a MIME type with no known
+ * signature returns `false`, never a silent pass.
+ *
+ * The ISO-BMFF family (heic / heif / avif / mp4 / quicktime / m4a) is matched
+ * loosely — any leading BMFF box is accepted for any of them — because brands
+ * vary between encoders and an old `.mov` has no `ftyp` at all; a credential
+ * or text file still never passes. Aliases like `image/jpg` are normalized and
+ * the comparison is case-insensitive.
+ */
+export function bytesMatchMime(bytes, mime) {
+    const lower = mime.toLowerCase();
+    const want = MIME_ALIASES[lower] ?? lower;
+    if (BMFF_MIMES.has(want))
+        return isBmff(bytes);
+    const sig = SIGNATURES.find(([m]) => m === want);
+    return sig !== undefined && sig[1](bytes);
+}
+//# sourceMappingURL=magic.js.map

package/dist/fs/magic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic.js","sourceRoot":"","sources":["../../src/fs/magic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAE1E,oFAAoF;AACpF,SAAS,UAAU,CAAC,GAAe,EAAE,GAA+B,EAAE,MAAM,GAAG,CAAC;IAC9E,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,GAAe,EAAE,KAAa,EAAE,GAAW;IACzD,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAErF,SAAS,MAAM,CAAC,GAAe;IAC7B,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9C,mFAAmF;AACnF,SAAS,QAAQ,CAAC,GAAe;IAC/B,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC9D,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,iBAAiB,CAAC;IAC/C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IACzC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,GAA6E;IAC3F,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClD,8EAA8E;IAC9E,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzJ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpH,iDAAiD;AACjD,MAAM,YAAY,GAA2B;IAC3C,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,YAAY;IAC3B,cAAc,EAAE,YAAY;IAC5B,WAAW,EAAE,YAAY;IACzB,8BAA8B,EAAE,iBAAiB;IACjD,mBAAmB,EAAE,iBAAiB;CACvC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,UAAU;QAAE,IAAI,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACpE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;IAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACjD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC"}

package/dist/fs/output.d.ts

@@ -28,8 +28,12 @@ export declare function resolveOutputDir(perCall: string | undefined, envVar: st
 /**
  * A non-overwriting path for `base.ext` in `dir`: the bare name when free,
  * else `base-2.ext`, `base-3.ext`, … (gemini's numbering). `ext` is passed
- * without the dot. `base` is sanitized to a single path component
- * ({@link sanitizeBaseName}) so a `../…` stem can't write outside `dir`.
+ * without the dot. `base` is sanitized to a single path component so a `../…`
+ * stem can't write outside `dir`.
+ *
+ * Check-then-use: the name can be taken (or a symlink planted there) between
+ * this call and the caller's write. To write, prefer {@link writeUniqueFile} /
+ * {@link writeBinaryOutput}, which claim the name with an exclusive create.
  */
 export declare function uniquePath(dir: string, base: string, ext: string): string;
 /** Options for {@link writeBinaryOutput}. */
@@ -44,20 +48,20 @@ export interface WriteBinaryOutputOptions {
     mimeType?: string;
     /** Explicit extension (no dot); overrides the MIME lookup. */
     extension?: string;
+    /** File mode for the new file (before umask), e.g. `0o600`. Default `0o666`. */
+    mode?: number;
 }
 /**
  * Decode `base64` and write it to a **non-overwriting** file in `dir`, deriving
  * the extension from `extension` → the MIME type → `'bin'`. Returns the
  * absolute path written. The caller returns that path from the tool result
  * (with an `inline` flag for base64 via `imageResult` when the user asks).
+ *
+ * Each candidate name is claimed with an exclusive, no-follow create
+ * (`O_CREAT | O_EXCL | O_NOFOLLOW`) and the next name tried on EEXIST, so the
+ * write is race-free and never goes through a symlink planted at the name —
+ * previously a dangling symlink there looked "free" to `existsSync` and the
+ * write created its target outside `dir`.
  */
 export declare function writeBinaryOutput(opts: WriteBinaryOutputOptions): string;
-/**
- * Magic-byte MIME sniff for the image formats the fleet passes around
- * (PNG / JPEG / WebP / GIF). Returns `undefined` for anything else — callers
- * decide their own default. Pairs with `readFileHead` for on-disk files;
- * consolidates gemini's `sniffMimeBytes` (and evite's dimension sniffer uses
- * the same signatures).
- */
-export declare function sniffMimeBytes(bytes: Uint8Array): string | undefined;
 //# sourceMappingURL=output.d.ts.map

package/dist/fs/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/fs/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAA0B,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG5E;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC/D,MAAM,CAaR;AAkBD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQzE;AAYD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAMxE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAepE"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/fs/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAA0B,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAI5E;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC/D,MAAM,CAaR;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQzE;AAkBD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAGxE"}

package/dist/fs/output.js

@@ -9,10 +9,11 @@
  * filenames, extension derived from the MIME type. The fleet convention (see
  * the mcp-fleet-builder skill) is that every binary-output tool uses this shape.
  */
-import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { expandPath, readEnvVar } from '../config/index.js';
 import { assertPathWithinRoots } from './confine.js';
+import { sanitizeBaseName, writeUniqueFileSync } from './write.js';
 /**
  * Resolve the directory a binary-output tool should write into:
  * the per-call argument → the named env var → the current working directory.
@@ -39,26 +40,15 @@ export function resolveOutputDir(perCall, envVar, opts = {}) {
     mkdirSync(dir, { recursive: true });
     return dir;
 }
-/**
- * Reduce a caller-supplied filename stem to a single safe path component:
- * strip directory separators and any `..`, so the stem can never escape the
- * output directory (defense-in-depth — `SafePathSegment` does the same for
- * request-path atoms). A stem that sanitizes away entirely falls back to
- * `'file'`.
- */
-function sanitizeBaseName(base) {
-    const safe = base
-        .replace(/[/\\]+/g, '_') // kill path separators
-        .replace(/\.\.+/g, '_') // neutralize .. (and longer dot runs)
-        .replace(/^\.+/, '') // no leading dots (hidden-file / current-dir)
-        .trim();
-    return safe.length > 0 ? safe : 'file';
-}
 /**
  * A non-overwriting path for `base.ext` in `dir`: the bare name when free,
  * else `base-2.ext`, `base-3.ext`, … (gemini's numbering). `ext` is passed
- * without the dot. `base` is sanitized to a single path component
- * ({@link sanitizeBaseName}) so a `../…` stem can't write outside `dir`.
+ * without the dot. `base` is sanitized to a single path component so a `../…`
+ * stem can't write outside `dir`.
+ *
+ * Check-then-use: the name can be taken (or a symlink planted there) between
+ * this call and the caller's write. To write, prefer {@link writeUniqueFile} /
+ * {@link writeBinaryOutput}, which claim the name with an exclusive create.
  */
 export function uniquePath(dir, base, ext) {
     const safe = sanitizeBaseName(base);
@@ -77,43 +67,29 @@ const MIME_EXT = {
     'image/jpeg': 'jpg',
     'image/webp': 'webp',
     'image/gif': 'gif',
+    'image/heic': 'heic',
+    'image/avif': 'avif',
     'application/pdf': 'pdf',
     'application/json': 'json',
+    'application/zip': 'zip',
+    'audio/midi': 'mid',
+    'video/mp4': 'mp4',
+    'video/quicktime': 'mov',
 };
 /**
  * Decode `base64` and write it to a **non-overwriting** file in `dir`, deriving
  * the extension from `extension` → the MIME type → `'bin'`. Returns the
  * absolute path written. The caller returns that path from the tool result
  * (with an `inline` flag for base64 via `imageResult` when the user asks).
+ *
+ * Each candidate name is claimed with an exclusive, no-follow create
+ * (`O_CREAT | O_EXCL | O_NOFOLLOW`) and the next name tried on EEXIST, so the
+ * write is race-free and never goes through a symlink planted at the name —
+ * previously a dangling symlink there looked "free" to `existsSync` and the
+ * write created its target outside `dir`.
  */
 export function writeBinaryOutput(opts) {
     const ext = opts.extension ?? (opts.mimeType ? MIME_EXT[opts.mimeType] : undefined) ?? 'bin';
-    mkdirSync(opts.dir, { recursive: true });
-    const path = uniquePath(opts.dir, opts.baseName, ext);
-    writeFileSync(path, Buffer.from(opts.base64, 'base64'));
-    return path;
-}
-/**
- * Magic-byte MIME sniff for the image formats the fleet passes around
- * (PNG / JPEG / WebP / GIF). Returns `undefined` for anything else — callers
- * decide their own default. Pairs with `readFileHead` for on-disk files;
- * consolidates gemini's `sniffMimeBytes` (and evite's dimension sniffer uses
- * the same signatures).
- */
-export function sniffMimeBytes(bytes) {
-    const buf = Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-    if (buf.length >= 8 && buf.subarray(0, 8).equals(Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]))) {
-        return 'image/png';
-    }
-    if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {
-        return 'image/jpeg';
-    }
-    if (buf.length >= 12 && buf.subarray(0, 4).toString('latin1') === 'RIFF' && buf.subarray(8, 12).toString('latin1') === 'WEBP') {
-        return 'image/webp';
-    }
-    if (buf.length >= 4 && buf.subarray(0, 4).toString('latin1') === 'GIF8') {
-        return 'image/gif';
-    }
-    return undefined;
+    return writeUniqueFileSync(opts.dir, opts.baseName, ext, Buffer.from(opts.base64, 'base64'), opts.mode);
 }
 //# sourceMappingURL=output.js.map

package/dist/fs/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/fs/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,MAAc,EACd,IAAI,GAA0D,EAAE;IAEhE,MAAM,GAAG,GAAG,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,yEAAyE;QACzE,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,IAAI;SACd,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,uBAAuB;SAC/C,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,sCAAsC;SAC7D,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,8CAA8C;SAClE,IAAI,EAAE,CAAC;IACV,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,QAAQ,GAA2B;IACvC,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;IACxB,kBAAkB,EAAE,MAAM;CAC3B,CAAC;AAgBF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IAC7F,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9H,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;QACxE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/fs/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,MAAc,EACd,IAAI,GAA0D,EAAE;IAEhE,MAAM,GAAG,GAAG,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,yEAAyE;QACzE,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,QAAQ,GAA2B;IACvC,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,KAAK;IACxB,kBAAkB,EAAE,MAAM;IAC1B,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAkBF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IAC7F,OAAO,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC"}

package/dist/fs/upload-guard.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Upload guard — vet a model-supplied local path BEFORE a byte of it leaves the
+ * machine.
+ *
+ * Upload tools take a local path from the model, so a prompt-injected call can
+ * name `~/.ssh/id_ed25519` or `~/.aws/credentials`; a confirmation preview only
+ * helps if a human reads it, and under `MCP_CONFIRM_MODE=auto` nothing forces
+ * that. Consolidates skylight's `upload-guard.ts#vetUploadFile` (extension
+ * allowlist, lstat + regular-file, size cap, `O_NOFOLLOW` open, per-type magic
+ * bytes incl. ISO-BMFF — fleet-audit#248/#1177) with vibo's
+ * `confineUploadPath` (root confinement through symlinks, relative paths
+ * against the upload dir, dotfile refusal — #1137), and adds the root
+ * confinement skylight lacked (#1124).
+ *
+ * Order matters: confinement is checked first (so a preview already refuses an
+ * out-of-root path, whatever its type), then the extension, then the file
+ * itself — opened ONCE with `O_NOFOLLOW | O_NONBLOCK`, and the size, type and
+ * magic bytes are judged from that descriptor, so a swap after the checks
+ * cannot substitute a different file for the one vetted.
+ */
+import { McpToolError } from '../errors/index.js';
+/** Why {@link vetUploadFile} refused a path. */
+export type UploadRefusal = 'outside-roots' | 'extension' | 'unreadable' | 'symlink' | 'not-file' | 'hidden' | 'too-large' | 'changed' | 'signature';
+/** {@link vetUploadFile} refused the path; nothing was read for upload. */
+export declare class UploadRefusedError extends McpToolError {
+    readonly reason: UploadRefusal;
+    constructor(reason: UploadRefusal, message: string, hint?: string);
+}
+/** Options for {@link vetUploadFile}. */
+export interface VetUploadOptions {
+    /**
+     * The allowlist: lower-case extension (no dot) → the MIME type it is sent
+     * as. A path whose extension is not a key is refused, and so is an
+     * extensionless path (what key and credential files look like). Every MIME
+     * here must be one `bytesMatchMime` can verify, or that type is refused.
+     */
+    mimeByExt: Readonly<Record<string, string>>;
+    /** Largest file accepted, in bytes. */
+    maxBytes: number;
+    /**
+     * The directories uploads may come from (each `~`-expanded, resolved through
+     * symlinks). REQUIRED, so leaving a tool unconfined is a visible decision:
+     * pass `'unconfined'` to skip confinement (every other check still runs).
+     * An empty array refuses everything.
+     */
+    allowedRoots: readonly string[] | 'unconfined';
+    /** What a relative path resolves against. Default: the process cwd. */
+    baseDir?: string;
+    /**
+     * Refuse a path with any dot-prefixed segment (`.ssh/…`, `.env.jpg`) —
+     * judged BELOW the containing root (so a root under `~/.cache` is fine), or
+     * across the whole real path when unconfined.
+     */
+    denyHiddenSegments?: boolean;
+    /**
+     * Also return the whole file, read from the same vetted descriptor
+     * (`bytes`). Use it when the upload buffers anyway: re-opening the path
+     * later (e.g. with `fileBlob`) reopens a window for a swap.
+     */
+    readAll?: boolean;
+}
+/** A path {@link vetUploadFile} accepted. */
+export interface VettedUpload {
+    /** The REAL path that was vetted — read THIS, never the caller's string. */
+    path: string;
+    /** The absolute path as the caller named it (for messages / previews). */
+    requested: string;
+    /** Lower-case extension, no dot. */
+    ext: string;
+    /** The MIME type from `mimeByExt`, verified against the magic bytes. */
+    mime: string;
+    size: number;
+    /** The roots it was confined to — pass as `allowedRoots` to a later read. */
+    allowedRoots?: readonly string[];
+    /** The whole file, when `readAll` was set. */
+    bytes?: Uint8Array;
+}
+/**
+ * Vet a tool-supplied local path for upload, or throw
+ * {@link UploadRefusedError}. In order:
+ *
+ * 1. **confinement** — the real path (through symlinks) must sit inside one of
+ *    `allowedRoots` (unless `'unconfined'`);
+ * 2. **extension** — must be a key of `mimeByExt`;
+ * 3. **not a symlink, a regular file** — `lstat` of the named path;
+ * 4. **no hidden segments** — when `denyHiddenSegments`;
+ * 5. **one no-follow open** of the real path — `O_NOFOLLOW` refuses a symlink
+ *    swapped in since the checks, `O_NONBLOCK` keeps a swapped-in FIFO from
+ *    hanging the open; the descriptor must be the same regular file `lstat`
+ *    saw, at most `maxBytes`;
+ * 6. **magic bytes** — its head must match the claimed MIME
+ *    ({@link bytesMatchMime}); a type it cannot sniff is refused.
+ *
+ * Returns the real path to read (and, with `readAll`, the bytes themselves).
+ */
+export declare function vetUploadFile(path: string, opts: VetUploadOptions): Promise<VettedUpload>;
+//# sourceMappingURL=upload-guard.d.ts.map

package/dist/fs/upload-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-guard.d.ts","sourceRoot":"","sources":["../../src/fs/upload-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUlD,gDAAgD;AAChD,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,WAAW,GACX,YAAY,GACZ,SAAS,GACT,UAAU,GACV,QAAQ,GACR,WAAW,GACX,SAAS,GACT,WAAW,CAAC;AAEhB,2EAA2E;AAC3E,qBAAa,kBAAmB,SAAQ,YAAY;IAClD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,YAAY,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAIhE;CACF;AAED,yCAAyC;AACzC,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAAC;IAC/C,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,8CAA8C;IAC9C,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AA6BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiG/F"}