@openclaw/fs-safe 0.11.0 → 0.13.0

package/dist/file-store-sync-directory.js

@@ -0,0 +1,349 @@
+import fs, {} from "node:fs";
+import path from "node:path";
+import { FsSafeError } from "./errors.js";
+import { isPathInside, isPathRelativeEscape } from "./path.js";
+import { realpathSync } from "./realpath.js";
+import { recursiveMkdirPath } from "./recursive-mkdir-path.js";
+import { inspectFileIdentitySync } from "./strict-file-identity.js";
+import { createSuppressedError } from "./suppressed-error.js";
+import { assertNoWindowsPathAlias, pathForWindowsFilesystem, resolvePathPreservingWindowsRoot, } from "./windows-path-alias.js";
+function changedStoreDirectory(messagePrefix, cause) {
+    return new FsSafeError("outside-workspace", `${messagePrefix} directory escapes root`, { cause });
+}
+function storeDirectoryRealPath(dir) {
+    const realPath = realpathSync(pathForWindowsFilesystem(dir));
+    assertNoWindowsPathAlias(realPath, "filesystem");
+    return realPath;
+}
+function inspectStoreDirectory(params) {
+    assertNoWindowsPathAlias(params.dir, "filesystem");
+    return inspectFileIdentitySync(() => {
+        const stat = fs.lstatSync(pathForWindowsFilesystem(params.dir), { bigint: true });
+        if (stat.isSymbolicLink() || !stat.isDirectory()) {
+            const subject = params.root ? "root" : "directory component";
+            throw new FsSafeError("not-file", `${params.messagePrefix} ${subject} must be a directory: ${params.dir}`);
+        }
+        return stat;
+    }, params.expected);
+}
+function observeStoreDirectory(params) {
+    return {
+        dir: params.dir,
+        stat: inspectStoreDirectory(params),
+    };
+}
+function inspectReceiptCurrent(receipt, messagePrefix, root) {
+    try {
+        const stat = inspectStoreDirectory({
+            dir: receipt.dir,
+            expected: receipt.stat,
+            messagePrefix,
+            root,
+        });
+        if (stat.dev !== receipt.stat.dev || stat.ino !== receipt.stat.ino) {
+            throw changedStoreDirectory(messagePrefix);
+        }
+        return stat;
+    }
+    catch (error) {
+        if (error instanceof FsSafeError && error.code === "outside-workspace")
+            throw error;
+        throw changedStoreDirectory(messagePrefix, error);
+    }
+}
+function assertRootCurrent(rootReceipt, rootReal, messagePrefix) {
+    const stat = inspectReceiptCurrent(rootReceipt, messagePrefix, true);
+    try {
+        if (storeDirectoryRealPath(rootReceipt.dir) !== rootReal) {
+            throw changedStoreDirectory(messagePrefix);
+        }
+    }
+    catch (error) {
+        if (error instanceof FsSafeError && error.code === "outside-workspace")
+            throw error;
+        throw changedStoreDirectory(messagePrefix, error);
+    }
+    return stat;
+}
+function assertAdmittedEdgeCurrent(receipts, rootReal, messagePrefix) {
+    const rootReceipt = receipts[0];
+    const targetIndex = receipts.length - 1;
+    const targetReceipt = receipts[targetIndex];
+    if (!rootReceipt || !targetReceipt) {
+        throw new FsSafeError("helper-failed", "store directory receipt is missing");
+    }
+    const rootStat = assertRootCurrent(rootReceipt, rootReal, messagePrefix);
+    if (targetIndex === 0)
+        return rootStat;
+    const parent = receipts[targetIndex - 1];
+    if (!parent)
+        throw new FsSafeError("helper-failed", "store directory receipt is missing");
+    if (targetIndex > 1)
+        inspectReceiptCurrent(parent, messagePrefix, false);
+    const targetStat = inspectReceiptCurrent(targetReceipt, messagePrefix, false);
+    if (path.dirname(targetReceipt.dir) !== parent.dir) {
+        throw changedStoreDirectory(messagePrefix);
+    }
+    return targetStat;
+}
+function assertModeTargetCurrent(receipts, rootReal, messagePrefix) {
+    const target = receipts.at(-1);
+    if (!target)
+        throw new FsSafeError("helper-failed", "store directory receipt is missing");
+    const stat = assertAdmittedEdgeCurrent(receipts, rootReal, messagePrefix);
+    let targetReal;
+    try {
+        targetReal = storeDirectoryRealPath(target.dir);
+    }
+    catch (error) {
+        throw changedStoreDirectory(messagePrefix, error);
+    }
+    if (!isPathInside(rootReal, targetReal))
+        throw changedStoreDirectory(messagePrefix);
+    assertAdmittedEdgeCurrent(receipts, rootReal, messagePrefix);
+    return stat;
+}
+function assertReceiptChain(receipts, rootReal, messagePrefix) {
+    const rootReceipt = receipts[0];
+    const finalReceipt = receipts.at(-1);
+    if (!rootReceipt || !finalReceipt) {
+        throw new FsSafeError("helper-failed", "store directory receipt is missing");
+    }
+    assertRootCurrent(rootReceipt, rootReal, messagePrefix);
+    let finalStat = rootReceipt.stat;
+    for (const [index, receipt] of receipts.entries()) {
+        if (index === 0)
+            continue;
+        finalStat = inspectReceiptCurrent(receipt, messagePrefix, false);
+    }
+    let finalReal;
+    try {
+        finalReal = storeDirectoryRealPath(finalReceipt.dir);
+    }
+    catch (error) {
+        throw changedStoreDirectory(messagePrefix, error);
+    }
+    if (!isPathInside(rootReal, finalReal))
+        throw changedStoreDirectory(messagePrefix);
+    assertRootCurrent(rootReceipt, rootReal, messagePrefix);
+    if (finalReceipt !== rootReceipt) {
+        finalStat = inspectReceiptCurrent(finalReceipt, messagePrefix, false);
+    }
+    return { finalReal, finalStat };
+}
+function directoryOpenFlags() {
+    const { O_DIRECTORY, O_NOFOLLOW, O_NONBLOCK, O_RDONLY } = fs.constants;
+    if ([O_DIRECTORY, O_NOFOLLOW, O_NONBLOCK, O_RDONLY]
+        .some((flag) => typeof flag !== "number")) {
+        throw new FsSafeError("helper-unavailable", "no-follow directory mode descriptors are unavailable");
+    }
+    return O_RDONLY | O_DIRECTORY | O_NOFOLLOW | O_NONBLOCK;
+}
+function directorySearchFlags() {
+    // Linux O_PATH descriptors cannot be fchmoded, and /proc/self/fd would
+    // reintroduce a pathname mutation. Darwin O_SEARCH remains descriptor-bound.
+    if (process.platform !== "darwin" ||
+        (process.arch !== "x64" && process.arch !== "arm64"))
+        return undefined;
+    const { O_DIRECTORY, O_NOFOLLOW, O_NONBLOCK } = fs.constants;
+    if ([O_DIRECTORY, O_NOFOLLOW, O_NONBLOCK].some((flag) => typeof flag !== "number")) {
+        return undefined;
+    }
+    // Darwin SDK O_SEARCH = O_EXEC (0x40000000) | O_DIRECTORY on supported Node hosts.
+    return 0x40000000 | O_DIRECTORY | O_NOFOLLOW | O_NONBLOCK;
+}
+function hasErrorCode(error, code) {
+    if (error && typeof error === "object") {
+        if (error.code === code)
+            return true;
+        const combined = error;
+        return (combined.error !== error && hasErrorCode(combined.error, code)) ||
+            (combined.suppressed !== error && hasErrorCode(combined.suppressed, code));
+    }
+    return false;
+}
+function openStoreDirectoryForMode(params) {
+    let openError;
+    try {
+        return fs.openSync(pathForWindowsFilesystem(params.receipt.dir), directoryOpenFlags());
+    }
+    catch (error) {
+        openError = error;
+    }
+    const searchFlags = hasErrorCode(openError, "EACCES") ? directorySearchFlags() : undefined;
+    if (searchFlags !== undefined) {
+        try {
+            return fs.openSync(pathForWindowsFilesystem(params.receipt.dir), searchFlags);
+        }
+        catch (searchError) {
+            openError = createSuppressedError(searchError, openError, "ordinary and search-only directory opens both failed");
+        }
+    }
+    try {
+        assertModeTargetCurrent(params.receipts, params.rootReal, params.messagePrefix);
+    }
+    catch (boundaryError) {
+        throw changedStoreDirectory(params.messagePrefix, createSuppressedError(boundaryError, openError, "directory acquisition and boundary revalidation both failed"));
+    }
+    if (hasErrorCode(openError, "EACCES")) {
+        throw new FsSafeError("permission-unverified", `${params.messagePrefix} directory cannot be safely mode-repaired through a Node descriptor`, { cause: openError });
+    }
+    throw openError;
+}
+function requestedDirectoryMode(mode) {
+    return BigInt(mode & 0o7777);
+}
+function inspectOpenedStoreDirectory(descriptor, receipt, messagePrefix) {
+    try {
+        const stat = inspectFileIdentitySync(() => fs.fstatSync(descriptor, { bigint: true }), receipt.stat);
+        if (!stat.isDirectory() || stat.isSymbolicLink()) {
+            throw changedStoreDirectory(messagePrefix);
+        }
+        return stat;
+    }
+    catch (error) {
+        if (error instanceof FsSafeError && error.code === "outside-workspace")
+            throw error;
+        throw changedStoreDirectory(messagePrefix, error);
+    }
+}
+function finalizeDirectoryMode(params) {
+    const receipt = params.receipts.at(-1);
+    if (!receipt)
+        throw new FsSafeError("helper-failed", "store directory receipt is missing");
+    const requestedMode = requestedDirectoryMode(params.mode);
+    if ((receipt.stat.mode & 4095n) === requestedMode || process.platform === "win32") {
+        const current = assertAdmittedEdgeCurrent(params.receipts, params.rootReal, params.messagePrefix);
+        // Identity can remain stable while permissions change after the first receipt.
+        if (process.platform === "win32" || (current.mode & 4095n) === requestedMode) {
+            return { ...receipt, stat: current };
+        }
+    }
+    // Repair owns the stronger pre/post mode-target fence below, including an
+    // admission check on acquisition failure; no earlier admission is needed.
+    const descriptor = openStoreDirectoryForMode({
+        receipt,
+        receipts: params.receipts,
+        rootReal: params.rootReal,
+        messagePrefix: params.messagePrefix,
+    });
+    let finalStat;
+    let operationFailed = false;
+    let operationError;
+    try {
+        const opened = inspectOpenedStoreDirectory(descriptor, receipt, params.messagePrefix);
+        assertModeTargetCurrent(params.receipts, params.rootReal, params.messagePrefix);
+        if ((opened.mode & 4095n) !== requestedMode) {
+            fs.fchmodSync(descriptor, Number(requestedMode));
+        }
+        const finalized = inspectOpenedStoreDirectory(descriptor, receipt, params.messagePrefix);
+        const pathname = assertModeTargetCurrent(params.receipts, params.rootReal, params.messagePrefix);
+        if ((finalized.mode & 4095n) !== requestedMode ||
+            (pathname.mode & 4095n) !== requestedMode) {
+            throw new FsSafeError("insecure-permissions", `${params.messagePrefix} directory mode could not be finalized`);
+        }
+        finalStat = pathname;
+    }
+    catch (error) {
+        operationFailed = true;
+        operationError = error;
+    }
+    try {
+        fs.closeSync(descriptor);
+    }
+    catch (closeError) {
+        if (operationFailed) {
+            throw createSuppressedError(closeError, operationError, "store directory finalization and close both failed");
+        }
+        throw closeError;
+    }
+    if (operationFailed)
+        throw operationError;
+    if (!finalStat)
+        throw new FsSafeError("helper-failed", "store directory mode receipt is missing");
+    return { ...receipt, stat: finalStat };
+}
+export function ensureSyncStoreDirectory(params) {
+    assertNoWindowsPathAlias(params.rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
+    assertNoWindowsPathAlias(params.targetDir, "filesystem", "store path uses a Windows filesystem namespace alias");
+    const rootDir = resolvePathPreservingWindowsRoot(params.rootDir);
+    const dir = resolvePathPreservingWindowsRoot(params.targetDir);
+    assertNoWindowsPathAlias(rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
+    assertNoWindowsPathAlias(dir, "filesystem", "store path uses a Windows filesystem namespace alias");
+    const relative = path.relative(rootDir, dir);
+    if (isPathRelativeEscape(relative)) {
+        throw new FsSafeError("outside-workspace", "file path escapes store root");
+    }
+    fs.mkdirSync(recursiveMkdirPath(pathForWindowsFilesystem(rootDir)), { recursive: true, mode: params.mode });
+    const receipts = [observeStoreDirectory({
+            dir: rootDir,
+            messagePrefix: params.messagePrefix,
+            root: true,
+        })];
+    const rootReal = storeDirectoryRealPath(rootDir);
+    receipts[0] = finalizeDirectoryMode({
+        receipts,
+        rootReal,
+        mode: params.mode,
+        messagePrefix: params.messagePrefix,
+    });
+    let current = rootDir;
+    for (const segment of relative.split(path.sep).filter(Boolean)) {
+        current = path.join(current, segment);
+        let receipt;
+        try {
+            receipt = observeStoreDirectory({
+                dir: current,
+                messagePrefix: params.messagePrefix,
+                root: false,
+            });
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            fs.mkdirSync(pathForWindowsFilesystem(current), { mode: params.mode });
+            receipt = observeStoreDirectory({
+                dir: current,
+                messagePrefix: params.messagePrefix,
+                root: false,
+            });
+        }
+        receipts.push(receipt);
+        receipts[receipts.length - 1] = finalizeDirectoryMode({
+            receipts,
+            rootReal,
+            mode: params.mode,
+            messagePrefix: params.messagePrefix,
+        });
+    }
+    const finalChain = assertReceiptChain(receipts, rootReal, params.messagePrefix);
+    return {
+        dir,
+        realPath: finalChain.finalReal,
+        exactStat: finalChain.finalStat,
+    };
+}
+export function assertSyncStoreDirectoryReceipt(receipt) {
+    try {
+        assertNoWindowsPathAlias(receipt.realPath, "filesystem");
+        const stat = inspectStoreDirectory({
+            dir: receipt.dir,
+            expected: receipt.exactStat,
+            messagePrefix: "store",
+            root: false,
+        });
+        if (stat.dev !== receipt.exactStat.dev || stat.ino !== receipt.exactStat.ino ||
+            storeDirectoryRealPath(receipt.dir) !== receipt.realPath) {
+            throw new FsSafeError("path-mismatch", "store directory changed during write");
+        }
+    }
+    catch (error) {
+        if (error instanceof FsSafeError && error.code === "path-mismatch" &&
+            error.message !== "store directory changed during write") {
+            throw new FsSafeError("path-mismatch", "store directory changed during write", {
+                cause: error,
+            });
+        }
+        throw error;
+    }
+}

package/dist/file-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../src/file-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAM5C,OAAO,EAA4B,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAQnE,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAItG,OAAO,EAAQ,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAMpG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,CACH,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtG,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/F,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxF,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAC1B,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtF,YAAY,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,IAAI,CAAC;IACvF,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC/F,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAAC;IAChG,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACpG,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,MAAM,CAAC;CACX,CAAC;AAgGF,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAiN9D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,CAwEtE"}
+{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../src/file-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAM5C,OAAO,EAA4B,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAQnE,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAItG,OAAO,EAAQ,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAUpG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,CACH,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtG,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/F,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxF,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAC1B,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtF,YAAY,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,IAAI,CAAC;IACvF,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC/F,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAAC;IAChG,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACpG,SAAS,CACP,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,qBAAqB,GAAG;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,MAAM,CAAC;CACX,CAAC;AAqEF,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAoN9D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,CA2EtE"}

package/dist/file-store.js

@@ -15,9 +15,10 @@ import { isNotFoundPathError } from "./path.js";
 import { throwFsSafeReadError } from "./root-errors.js";
 import { root } from "./root.js";
 import { DEFAULT_ROOT_MAX_BYTES } from "./root-impl.js";
-import { readRegularFile } from "./regular-file.js";
 import { matchRootFileOpenFailure, openRootFileSync } from "./root-file.js";
 import { writeSecretFileAtomic } from "./secret-file.js";
+import { assertNoWindowsPathAlias, resolvePathPreservingWindowsRoot, } from "./windows-path-alias.js";
+import { readFileStoreCopySource } from "./file-store-copy-source.js";
 function isNotFound(error) {
     return error instanceof FsSafeError ? error.code === "not-found" : isNotFoundPathError(error);
 }
@@ -49,34 +50,10 @@ function handleSyncStoreReadOpenFailure(opened) {
         },
     });
 }
-async function readFileStoreCopySource(params) {
-    const sourceStat = syncFs.lstatSync(params.sourcePath);
-    if (sourceStat.isSymbolicLink() || !sourceStat.isFile()) {
-        throw new FsSafeError("not-file", "source path is not a file");
-    }
-    assertFileStoreMaxBytes(sourceStat.size, params.maxBytes);
-    try {
-        return (await readRegularFile({ filePath: params.sourcePath, maxBytes: params.maxBytes }))
-            .buffer;
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (message.includes("regular file") || message.includes("not a regular file")) {
-            throw new FsSafeError("not-file", "source path is not a file", {
-                cause: error instanceof Error ? error : undefined,
-            });
-        }
-        if (params.maxBytes !== undefined && message.includes(`exceeds ${params.maxBytes} bytes`)) {
-            throw new FsSafeError("too-large", `file exceeds maximum size of ${params.maxBytes} bytes`, {
-                cause: error instanceof Error ? error : undefined,
-            });
-        }
-        throw error;
-    }
-}
 async function copyIntoRoot(params) {
     const relativePath = assertRelativePath(params.relativePath);
     const destination = resolveStorePath(params.rootDir, relativePath);
+    assertNoWindowsPathAlias(params.sourcePath, "filesystem", "source path uses a Windows filesystem namespace alias");
     const sourceStat = syncFs.lstatSync(params.sourcePath);
     if (sourceStat.isSymbolicLink() || !sourceStat.isFile()) {
         throw new FsSafeError("not-file", "source path is not a file");
@@ -98,7 +75,10 @@ async function copyIntoRoot(params) {
     return destination;
 }
 export function fileStore(options) {
-    const rootDir = path.resolve(options.rootDir);
+    const rootDirInput = options.rootDir;
+    assertNoWindowsPathAlias(rootDirInput, "filesystem", "store root uses a Windows filesystem namespace alias");
+    const rootDir = resolvePathPreservingWindowsRoot(rootDirInput);
+    assertNoWindowsPathAlias(rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
     const privateMode = options.private ?? false;
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;
@@ -284,7 +264,10 @@ export function fileStore(options) {
     };
 }
 export function fileStoreSync(options) {
-    const rootDir = path.resolve(options.rootDir);
+    const rootDirInput = options.rootDir;
+    assertNoWindowsPathAlias(rootDirInput, "filesystem", "store root uses a Windows filesystem namespace alias");
+    const rootDir = resolvePathPreservingWindowsRoot(rootDirInput);
+    assertNoWindowsPathAlias(rootDir, "filesystem", "store root uses a Windows filesystem namespace alias");
     const privateMode = options.private ?? false;
     const dirMode = options.dirMode ?? 0o700;
     const mode = options.mode ?? 0o600;

package/dist/filename.d.ts

@@ -1,3 +1,4 @@
+export declare function suffixWindowsReservedDeviceName(fileName: string): string;
 /** Keeps short names exact and trims only the filename tail of a composite temp name. */
 export declare function fitFileNameToPortableComponent(params: {
     prefix: string;

package/dist/filename.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filename.d.ts","sourceRoot":"","sources":["../src/filename.ts"],"names":[],"mappings":"AAmCA,yFAAyF;AACzF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CA8BT;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAoBxF"}
+{"version":3,"file":"filename.d.ts","sourceRoot":"","sources":["../src/filename.ts"],"names":[],"mappings":"AA0BA,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAexE;AA+CD,yFAAyF;AACzF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CA8BT;AAiCD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAMxF"}

package/dist/filename.js

@@ -2,8 +2,15 @@ import path from "node:path";
 import { WINDOWS_RESERVED_DEVICE_NAMES } from "./device-path.js";
 import { maxNormalizedUtf8Bytes } from "./unicode-path.js";
 const INVALID_FILE_NAME_CHARACTERS = /[\u0000-\u001f\u007f-\u009f<>:"/\\|?*]/g;
-function trimWindowsIgnoredSuffix(value) {
-    let end = value.length;
+const HAS_INVALID_FILE_NAME_CHARACTER = /[\u0000-\u001f\u007f-\u009f<>:"/\\|?*]/;
+const HAS_RETAINED_FILE_NAME_CHARACTER = /[^\u0000-\u001f\u007f-\u009f<>:"/\\|?*\s]/;
+function canStartWindowsDeviceName(character) {
+    const folded = character | 0x20;
+    return folded === 0x61 || folded === 0x63 || folded === 0x6c ||
+        folded === 0x6e || folded === 0x70;
+}
+function windowsDeviceStemEnd(value, stemEnd) {
+    let end = stemEnd;
     while (end > 0) {
         const character = value.charCodeAt(end - 1);
         if (character !== 0x20 && character !== 0x2e) {
@@ -11,22 +18,61 @@ function trimWindowsIgnoredSuffix(value) {
         }
         end -= 1;
     }
-    return end === value.length ? value : value.slice(0, end);
+    return end;
 }
-function suffixWindowsReservedDeviceName(fileName) {
+export function suffixWindowsReservedDeviceName(fileName) {
+    if (!canStartWindowsDeviceName(fileName.charCodeAt(0))) {
+        return fileName;
+    }
     const extensionIndex = fileName.indexOf(".");
     const baseNameEnd = extensionIndex < 0 ? fileName.length : extensionIndex;
-    const baseName = fileName.slice(0, baseNameEnd);
-    const deviceBaseName = trimWindowsIgnoredSuffix(baseName);
-    if (!WINDOWS_RESERVED_DEVICE_NAMES.has(deviceBaseName.toUpperCase())) {
+    const deviceBaseNameEnd = windowsDeviceStemEnd(fileName, baseNameEnd);
+    if (deviceBaseNameEnd === 0 ||
+        deviceBaseNameEnd > 7 ||
+        !WINDOWS_RESERVED_DEVICE_NAMES.has(fileName.slice(0, deviceBaseNameEnd).toUpperCase())) {
         return fileName;
     }
-    return `${baseName}_${fileName.slice(baseNameEnd)}`;
+    return `${fileName.slice(0, baseNameEnd)}_${fileName.slice(baseNameEnd)}`;
 }
 const PORTABLE_FILE_NAME_BYTES = 255;
+const SANITIZED_FILE_NAME_CODE_UNITS = 200;
+const SAFE_FALLBACK_FILE_NAME = "file";
+/**
+ * Uses native string and regexp operations to recognize the full sanitizer's
+ * bounded fixed points. The separate non-global regexp keeps this predicate
+ * stateless, and the authoritative device-name transform remains the final
+ * admission check.
+ */
+function isBoundedSanitizedFileName(fileName, trimmedFileName) {
+    return typeof fileName === "string" &&
+        fileName.length > 0 &&
+        fileName.length <= SANITIZED_FILE_NAME_CODE_UNITS &&
+        fileName !== "." &&
+        fileName !== ".." &&
+        trimmedFileName === fileName &&
+        !HAS_INVALID_FILE_NAME_CHARACTER.test(fileName) &&
+        suffixWindowsReservedDeviceName(fileName) === fileName;
+}
+function hasWindowsDrivePrefix(value) {
+    if (value.length < 2 || value.charCodeAt(1) !== 0x3a)
+        return false;
+    const firstCodeUnit = value.charCodeAt(0);
+    return (firstCodeUnit >= 0x41 && firstCodeUnit <= 0x5a) ||
+        (firstCodeUnit >= 0x61 && firstCodeUnit <= 0x7a);
+}
 function normalizedFileNameBytes(value) {
     return maxNormalizedUtf8Bytes(value, true);
 }
+function truncateCodeUnitsWithoutSplittingSurrogate(value, limit) {
+    if (value.length <= limit)
+        return value;
+    let truncated = value.slice(0, limit);
+    const trailingCodeUnit = truncated.charCodeAt(truncated.length - 1);
+    if (trailingCodeUnit >= 0xd800 && trailingCodeUnit <= 0xdbff) {
+        truncated = truncated.slice(0, -1);
+    }
+    return truncated;
+}
 /** Keeps short names exact and trims only the filename tail of a composite temp name. */
 export function fitFileNameToPortableComponent(params) {
     const complete = `${params.prefix}${params.fileName}${params.suffix}`;
@@ -59,24 +105,40 @@ export function fitFileNameToPortableComponent(params) {
     }
     return `${codePoints.slice(0, low).join("")}${tailSuffix}`;
 }
-export function sanitizeUntrustedFileName(fileName, fallbackName) {
-    const trimmed = typeof fileName === "string" ? fileName.trim() : "";
-    if (!trimmed) {
-        return fallbackName;
+function sanitizeFileNameCandidate(fileName) {
+    if (typeof fileName !== "string")
+        return undefined;
+    const trimmed = fileName.trim();
+    if (!trimmed)
+        return undefined;
+    if (isBoundedSanitizedFileName(fileName, trimmed))
+        return fileName;
+    // Basename selection cannot manufacture a character, and the complete
+    // sanitizer removes this same invalid set before its final trim.
+    if (!HAS_RETAINED_FILE_NAME_CHARACTER.test(trimmed))
+        return undefined;
+    let base = trimmed;
+    if (base.includes("/"))
+        base = path.posix.basename(base);
+    if (base.includes("\\") || hasWindowsDrivePrefix(base)) {
+        base = path.win32.basename(base);
     }
-    let base = path.posix.basename(trimmed);
-    base = path.win32.basename(base);
     base = base.replace(INVALID_FILE_NAME_CHARACTERS, "").trim();
     if (!base || base === "." || base === "..") {
-        return fallbackName;
+        return undefined;
     }
-    base = suffixWindowsReservedDeviceName(base);
-    if (base.length > 200) {
-        base = base.slice(0, 200);
-        const trailingCodeUnit = base.charCodeAt(base.length - 1);
-        if (trailingCodeUnit >= 0xd800 && trailingCodeUnit <= 0xdbff) {
-            base = base.slice(0, -1);
-        }
+    base = truncateCodeUnitsWithoutSplittingSurrogate(base, SANITIZED_FILE_NAME_CODE_UNITS);
+    let safeBase = suffixWindowsReservedDeviceName(base);
+    if (safeBase.length > SANITIZED_FILE_NAME_CODE_UNITS) {
+        // The safety suffix is the final invariant. Shorten the unsuffixed tail so
+        // truncation cannot turn a padded reserved stem back into a device name.
+        base = truncateCodeUnitsWithoutSplittingSurrogate(base, SANITIZED_FILE_NAME_CODE_UNITS - 1);
+        safeBase = suffixWindowsReservedDeviceName(base);
     }
-    return base;
+    return safeBase;
+}
+export function sanitizeUntrustedFileName(fileName, fallbackName) {
+    return (sanitizeFileNameCandidate(fileName) ??
+        sanitizeFileNameCandidate(fallbackName) ??
+        SAFE_FALLBACK_FILE_NAME);
 }

package/dist/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOxD"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOxD"}

package/dist/fs.js

@@ -1,4 +1,5 @@
 import fs from "node:fs";
+import { pathForWindowsFilesystem } from "./windows-path-alias.js";
 /**
  * Returns true when `fs.stat()` can stat the path.
  *
@@ -7,7 +8,7 @@ import fs from "node:fs";
  */
 export async function pathExists(filePath) {
     try {
-        fs.statSync(filePath);
+        fs.statSync(pathForWindowsFilesystem(filePath));
         return true;
     }
     catch {
@@ -20,7 +21,7 @@ export async function pathExists(filePath) {
  */
 export function pathExistsSync(filePath) {
     try {
-        fs.statSync(filePath);
+        fs.statSync(pathForWindowsFilesystem(filePath));
         return true;
     }
     catch {

package/dist/guarded-mkdir.d.ts

@@ -1,3 +1,6 @@
+import { type RootBoundaryIdentity } from "./root-boundary.js";
+import { type MutationDirectoryObservation } from "./pinned-mutation-observation.js";
+import type { PinnedCreatedDirectoryReceipt, PinnedMutationAdmissionReceipt, PinnedMutationAuthorizationToken } from "./pinned-write.js";
 /**
  * Creates each missing path component from `rootReal` down to `targetPath`,
  * guarding every step. Returns the real (symlink-resolved) path of the final
@@ -8,8 +11,15 @@ export declare function mkdirPathComponentsWithGuards(params: {
     rootReal: string;
     targetPath: string;
     beforeComponent?: (componentPath: string) => Promise<void> | void;
+    beforeCreateComponent?: (componentPath: string, prospectiveTargetPath: string, retainedTargetPath: string | undefined, parent: MutationDirectoryObservation) => Promise<PinnedMutationAdmissionReceipt | undefined> | PinnedMutationAdmissionReceipt | undefined;
+    beforeUseComponent?: (componentPath: string, prospectiveTargetPath: string, retainedTargetPath: string | undefined) => Promise<void> | void;
+    afterCreateComponent?: (receipt: PinnedCreatedDirectoryReceipt) => PinnedMutationAuthorizationToken | undefined;
     assertBeforeMutation?: () => void;
     mode?: number;
     rejectSymlinks?: boolean;
+    revalidateParentAfterBeforeComponent?: boolean;
+    synchronousAuthorizationIncludesFence?: boolean;
+    retainedTargetPath?: string;
+    rootIdentity?: RootBoundaryIdentity;
 }): Promise<string>;
 //# sourceMappingURL=guarded-mkdir.d.ts.map

package/dist/guarded-mkdir.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guarded-mkdir.d.ts","sourceRoot":"","sources":["../src/guarded-mkdir.ts"],"names":[],"mappings":"AA2BA;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAwDlB"}
+{"version":3,"file":"guarded-mkdir.d.ts","sourceRoot":"","sources":["../src/guarded-mkdir.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAA4B,KAAK,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAC/G,OAAO,KAAK,EACV,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EACjC,MAAM,mBAAmB,CAAC;AAuG3B;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,qBAAqB,CAAC,EAAE,CACtB,aAAa,EAAE,MAAM,EACrB,qBAAqB,EAAE,MAAM,EAC7B,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,MAAM,EAAE,4BAA4B,KACjC,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC,GAAG,8BAA8B,GAAG,SAAS,CAAC;IACtG,kBAAkB,CAAC,EAAE,CACnB,aAAa,EAAE,MAAM,EACrB,qBAAqB,EAAE,MAAM,EAC7B,kBAAkB,EAAE,MAAM,GAAG,SAAS,KACnC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,oBAAoB,CAAC,EAAE,CACrB,OAAO,EAAE,6BAA6B,KACnC,gCAAgC,GAAG,SAAS,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C,qCAAqC,CAAC,EAAE,OAAO,CAAC;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC,GAAG,OAAO,CAAC,MAAM,CAAC,CAyMlB"}