@seele00/seele 0.1.60 → 0.1.61

package/codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seele-codex/codex",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "private": true,
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seele00/seele",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "description": "Browser UI and server runtime for Seele Codex",
   "private": false,
   "type": "module",

package/server/dist/auth/users.js

@@ -1,16 +1,18 @@
-import { randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
+import { randomBytes, randomUUID, scrypt, scryptSync, timingSafeEqual, } from "node:crypto";
 import path from "node:path";
 import { mkdirSync } from "node:fs";
-import { openSqliteDatabase, } from "../storage/sqlite.js";
+import { openSqliteDatabase, runInTransaction, } from "../storage/sqlite.js";
 export class UserStore {
     sessionSecret;
     db;
+    dummyPasswordHash;
     constructor(databasePath, bootstrap) {
         mkdirSync(path.dirname(databasePath), { recursive: true });
         this.db = openSqliteDatabase(databasePath);
         this.db.exec("pragma journal_mode = WAL");
         this.initializeSchema();
         this.sessionSecret = this.ensureSessionSecret();
+        this.dummyPasswordHash = this.ensureDummyPasswordHash();
         if (this.countUsers() === 0 && bootstrap?.password) {
             this.createUser({
                 username: bootstrap.username,
@@ -40,15 +42,64 @@ export class UserStore {
             .get(username.trim());
         return row ? userFromRow(row) : null;
     }
-    authenticate(username, password) {
+    async authenticate(username, password) {
         const row = this.db
             .prepare("select * from auth_users where username = ? collate nocase")
             .get(username.trim());
-        if (!row || !row.active || !verifyPassword(password, row.password_hash)) {
+        const passwordMatches = await verifyPassword(password, row?.password_hash ?? this.dummyPasswordHash);
+        if (!row || !row.active || !passwordMatches) {
             return null;
         }
         return userFromRow(row);
     }
+    loginBlockedUntil(keys, now = Date.now()) {
+        let blockedUntil = 0;
+        const statement = this.db.prepare("select locked_until from auth_login_attempts where key = ?");
+        for (const key of keys) {
+            const row = statement.get(key);
+            blockedUntil = Math.max(blockedUntil, row?.locked_until ?? 0);
+        }
+        return blockedUntil > now ? blockedUntil : 0;
+    }
+    recordLoginFailure(buckets, windowMs, lockoutMs, now = Date.now()) {
+        runInTransaction(this.db, () => {
+            const read = this.db.prepare(`
+        select failure_count, window_started_at, locked_until
+        from auth_login_attempts where key = ?
+      `);
+            const write = this.db.prepare(`
+        insert into auth_login_attempts (
+          key, failure_count, window_started_at, locked_until, updated_at
+        ) values (?, ?, ?, ?, ?)
+        on conflict(key) do update set
+          failure_count = excluded.failure_count,
+          window_started_at = excluded.window_started_at,
+          locked_until = excluded.locked_until,
+          updated_at = excluded.updated_at
+      `);
+            for (const bucket of buckets) {
+                const current = read.get(bucket.key);
+                const expired = !current ||
+                    (current.locked_until <= now &&
+                        now - current.window_started_at >= windowMs);
+                const failureCount = expired ? 1 : current.failure_count + 1;
+                const windowStartedAt = expired ? now : current.window_started_at;
+                const lockedUntil = failureCount >= bucket.maxFailures ? now + lockoutMs : 0;
+                write.run(bucket.key, failureCount, windowStartedAt, lockedUntil, now);
+            }
+            this.db
+                .prepare("delete from auth_login_attempts where updated_at < ?")
+                .run(now - Math.max(windowMs, lockoutMs) * 4);
+        });
+    }
+    clearLoginFailures(keys) {
+        const statement = this.db.prepare("delete from auth_login_attempts where key = ?");
+        runInTransaction(this.db, () => {
+            for (const key of keys) {
+                statement.run(key);
+            }
+        });
+    }
     createUser(input) {
         const username = normalizeUsername(input.username);
         validatePassword(input.password);
@@ -132,6 +183,15 @@ export class UserStore {
         key text primary key,
         value text not null
       );
+      create table if not exists auth_login_attempts (
+        key text primary key,
+        failure_count integer not null,
+        window_started_at integer not null,
+        locked_until integer not null,
+        updated_at integer not null
+      );
+      create index if not exists auth_login_attempts_updated_at
+        on auth_login_attempts(updated_at);
     `);
     }
     ensureSessionSecret() {
@@ -147,6 +207,19 @@ export class UserStore {
             .run(value);
         return value;
     }
+    ensureDummyPasswordHash() {
+        const existing = this.db
+            .prepare("select value from auth_metadata where key = 'dummy_password_hash'")
+            .get();
+        if (existing) {
+            return existing.value;
+        }
+        const value = hashPassword(randomBytes(32).toString("base64url"));
+        this.db
+            .prepare("insert into auth_metadata (key, value) values ('dummy_password_hash', ?)")
+            .run(value);
+        return value;
+    }
 }
 function userFromRow(row) {
     return {
@@ -176,17 +249,28 @@ function hashPassword(password) {
     const digest = scryptSync(password, salt, 64);
     return `scrypt:${salt.toString("base64url")}:${digest.toString("base64url")}`;
 }
-function verifyPassword(password, stored) {
+async function verifyPassword(password, stored) {
     const [algorithm, encodedSalt, encodedDigest] = stored.split(":");
     if (algorithm !== "scrypt" || !encodedSalt || !encodedDigest) {
         return false;
     }
     try {
         const expected = Buffer.from(encodedDigest, "base64url");
-        const actual = scryptSync(password, Buffer.from(encodedSalt, "base64url"), expected.length);
+        const actual = await derivePassword(password, Buffer.from(encodedSalt, "base64url"), expected.length);
         return expected.length === actual.length && timingSafeEqual(expected, actual);
     }
     catch {
         return false;
     }
 }
+function derivePassword(password, salt, length) {
+    return new Promise((resolve, reject) => {
+        scrypt(password, salt, length, (error, derivedKey) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve(derivedKey);
+        });
+    });
+}

package/server/dist/server.js

@@ -38,6 +38,10 @@ const RUNTIME_WATCHDOG_INTERVAL_MS = 10_000;
 const TURN_LONG_RUNNING_AFTER_MS = 15 * 60 * 1000;
 const TURN_PHASE_BOUNDARY_OPERATION_COUNT = 20;
 const LOGIN_MAX_FAILURES = 5;
+const LOGIN_USER_MAX_FAILURES = 10;
+const LOGIN_SOURCE_MAX_FAILURES = 30;
+const LOGIN_MAX_CONCURRENT_VERIFICATIONS = 4;
+const LOGIN_FAILURE_WINDOW_MS = 15 * 60 * 1000;
 const LOGIN_LOCKOUT_MS = 15 * 60 * 1000;
 const RESPONSIBILITY_UPDATE_GUIDE_RELATIVE_PATH = ".seele/skills/responsibility-update.md";
 const KNOWLEDGE_SOURCE_GUIDE_RELATIVE_PATH = ".seele/skills/knowledge-source.md";
@@ -45,7 +49,7 @@ let codexUpdateJob = null;
 let codexLatestVersion = null;
 let runtimeModelCatalogRefresh = null;
 let runtimeRateLimitsRefresh = null;
-const loginFailures = new Map();
+let activeLoginVerifications = 0;
 const RESPONSIBILITY_UPDATE_GUIDE = `# Seele 职责总结与更新指南
 
 仅当你需要总结或更新 workspace 的长期职责时再阅读本文件。它不是每轮默认注入内容。
@@ -287,20 +291,32 @@ const server = createServer(async (request, response) => {
         const body = await readJsonBody(request);
         const username = typeof body.username === "string" ? body.username : "";
         const password = typeof body.password === "string" ? body.password : "";
-        const loginKey = loginAttemptKey(request, username);
-        const blockedUntil = loginBlockedUntil(loginKey);
+        const loginBuckets = loginAttemptBuckets(request, username);
+        const blockedUntil = userStore.loginBlockedUntil(loginBuckets.map((bucket) => bucket.key));
         if (blockedUntil > Date.now()) {
             response.setHeader("Retry-After", String(Math.max(1, Math.ceil((blockedUntil - Date.now()) / 1000))));
             sendJson(response, 429, { error: "login_rate_limited" });
             return;
         }
-        const user = userStore.authenticate(username, password);
+        if (activeLoginVerifications >= LOGIN_MAX_CONCURRENT_VERIFICATIONS) {
+            response.setHeader("Retry-After", "1");
+            sendJson(response, 429, { error: "login_rate_limited" });
+            return;
+        }
+        activeLoginVerifications += 1;
+        let user;
+        try {
+            user = await userStore.authenticate(username, password);
+        }
+        finally {
+            activeLoginVerifications -= 1;
+        }
         if (!user) {
-            recordLoginFailure(loginKey);
+            userStore.recordLoginFailure(loginBuckets, LOGIN_FAILURE_WINDOW_MS, LOGIN_LOCKOUT_MS);
             sendJson(response, 401, { error: "invalid_credentials" });
             return;
         }
-        loginFailures.delete(loginKey);
+        userStore.clearLoginFailures(loginBuckets.slice(0, 2).map((bucket) => bucket.key));
         setSessionCookie(response, request, {
             userId: user.id,
             sessionVersion: user.sessionVersion,
@@ -4508,27 +4524,20 @@ function userMutationError(error) {
         ? message
         : "user_update_failed";
 }
-function loginAttemptKey(request, username) {
-    return `${request.socket.remoteAddress ?? "unknown"}:${username.trim().toLowerCase()}`;
-}
-function loginBlockedUntil(key) {
-    const entry = loginFailures.get(key);
-    if (!entry) {
-        return 0;
-    }
-    if (entry.lockedUntil > 0 && entry.lockedUntil <= Date.now()) {
-        loginFailures.delete(key);
-        return 0;
-    }
-    return entry.lockedUntil;
-}
-function recordLoginFailure(key) {
-    const current = loginFailures.get(key) ?? { count: 0, lockedUntil: 0 };
-    const count = current.count + 1;
-    loginFailures.set(key, {
-        count,
-        lockedUntil: count >= LOGIN_MAX_FAILURES ? Date.now() + LOGIN_LOCKOUT_MS : 0,
-    });
+function loginAttemptBuckets(request, username) {
+    const source = request.socket.remoteAddress ?? "unknown";
+    const usernameDigest = createHash("sha256")
+        .update(username.trim().toLowerCase())
+        .digest("hex");
+    const sourceDigest = createHash("sha256").update(source).digest("hex");
+    return [
+        {
+            key: `pair:${sourceDigest}:${usernameDigest}`,
+            maxFailures: LOGIN_MAX_FAILURES,
+        },
+        { key: `user:${usernameDigest}`, maxFailures: LOGIN_USER_MAX_FAILURES },
+        { key: `source:${sourceDigest}`, maxFailures: LOGIN_SOURCE_MAX_FAILURES },
+    ];
 }
 function isServableConversationFileContentType(value) {
     return (value.startsWith("image/") ||

package/web/dist/assets/{abnfDiagram-VRR7QNED-DevTexTl.js → abnfDiagram-VRR7QNED-C-GmxOf1.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-MOJQB5TN-BHD_IRop.js";import{p as f}from"./chunk-JWPE2WC7-DMfuuvGl.js";import{_ as n,l as o}from"./mermaid.core-Bfj9YagN.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-SiDUbAfJ.js";import"./index-D9Ao6WQl.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-MOJQB5TN-BDc7Owjb.js";import{p as f}from"./chunk-JWPE2WC7-BWqM8eD-.js";import{_ as n,l as o}from"./mermaid.core-BpfGpLSK.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-B02zjHpN.js";import"./index-CQuxrDDr.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/web/dist/assets/{arc-WlXuN6B_.js → arc-DDtd5ukE.js}

@@ -1 +1 @@
-import{G as ln,H as un,I as N,J as I,K as J,L as an,M as y,N as tn,O as j,P as _,Q as rn,R as o,S as on,T as sn,V as fn}from"./mermaid.core-Bfj9YagN.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,q,O,v,R,K,u){var D=q-l,i=O-h,n=K-v,d=u-R,a=d*D-n*i;if(!(a*a<y))return a=(n*(h-R)-d*(l-v))/a,[l+a*D,h+a*i]}function W(l,h,q,O,v,R,K){var u=l-q,D=h-O,i=(K?R:-R)/j(u*u+D*D),n=i*D,d=-i*u,a=l+n,s=h+d,f=q+n,c=O+d,L=(a+f)/2,t=(s+c)/2,m=f-a,g=c-s,A=m*m+g*g,T=v-R,P=a*c-f*s,E=(g<0?-1:1)*j(on(0,T*T*A-P*P)),G=(P*g-m*E)/A,H=(-P*m-g*E)/A,w=(P*g+m*E)/A,p=(-P*m+g*E)/A,x=G-L,e=H-t,r=w-L,M=p-t;return x*x+e*e>r*r+M*M&&(G=w,H=p),{cx:G,cy:H,x01:-n,y01:-d,x11:G*(v/T-1),y11:H*(v/T-1)}}function hn(){var l=cn,h=yn,q=J(0),O=null,v=gn,R=dn,K=mn,u=null,D=ln(i);function i(){var n,d,a=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-an,c=R.apply(this,arguments)-an,L=rn(c-f),t=c>f;if(u||(u=n=D()),s<a&&(d=s,s=a,a=d),!(s>y))u.moveTo(0,0);else if(L>tn-y)u.moveTo(s*N(f),s*I(f)),u.arc(0,0,s,f,c,!t),a>y&&(u.moveTo(a*N(c),a*I(c)),u.arc(0,0,a,c,f,t));else{var m=f,g=c,A=f,T=c,P=L,E=L,G=K.apply(this,arguments)/2,H=G>y&&(O?+O.apply(this,arguments):j(a*a+s*s)),w=_(rn(s-a)/2,+q.apply(this,arguments)),p=w,x=w,e,r;if(H>y){var M=sn(H/a*I(G)),z=sn(H/s*I(G));(P-=M*2)>y?(M*=t?1:-1,A+=M,T-=M):(P=0,A=T=(f+c)/2),(E-=z*2)>y?(z*=t?1:-1,m+=z,g-=z):(E=0,m=g=(f+c)/2)}var Q=s*N(m),V=s*I(m),B=a*N(T),C=a*I(T);if(w>y){var F=s*N(g),U=s*I(g),X=a*N(A),Y=a*I(A),S;if(L<un)if(S=pn(Q,V,X,Y,F,U,B,C)){var Z=Q-S[0],$=V-S[1],k=F-S[0],b=U-S[1],nn=1/I(fn((Z*k+$*b)/(j(Z*Z+$*$)*j(k*k+b*b)))/2),en=j(S[0]*S[0]+S[1]*S[1]);p=_(w,(a-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}E>y?x>y?(e=W(X,Y,Q,V,s,x,t),r=W(F,U,B,C,s,x,t),u.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?u.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(u.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),u.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),u.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(u.moveTo(Q,V),u.arc(0,0,s,m,g,!t)):u.moveTo(Q,V),!(a>y)||!(P>y)?u.lineTo(B,C):p>y?(e=W(B,C,F,U,a,-p,t),r=W(Q,V,X,Y,a,-p,t),u.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?u.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(u.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),u.arc(0,0,a,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),u.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):u.arc(0,0,a,T,A,t)}if(u.closePath(),n)return u=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +R.apply(this,arguments))/2-un/2;return[N(d)*n,I(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:J(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:J(+n),i):h},i.cornerRadius=function(n){return arguments.length?(q=typeof n=="function"?n:J(+n),i):q},i.padRadius=function(n){return arguments.length?(O=n==null?null:typeof n=="function"?n:J(+n),i):O},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:J(+n),i):v},i.endAngle=function(n){return arguments.length?(R=typeof n=="function"?n:J(+n),i):R},i.padAngle=function(n){return arguments.length?(K=typeof n=="function"?n:J(+n),i):K},i.context=function(n){return arguments.length?(u=n??null,i):u},i}export{hn as d};
+import{G as ln,H as un,I as N,J as I,K as J,L as an,M as y,N as tn,O as j,P as _,Q as rn,R as o,S as on,T as sn,V as fn}from"./mermaid.core-BpfGpLSK.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,q,O,v,R,K,u){var D=q-l,i=O-h,n=K-v,d=u-R,a=d*D-n*i;if(!(a*a<y))return a=(n*(h-R)-d*(l-v))/a,[l+a*D,h+a*i]}function W(l,h,q,O,v,R,K){var u=l-q,D=h-O,i=(K?R:-R)/j(u*u+D*D),n=i*D,d=-i*u,a=l+n,s=h+d,f=q+n,c=O+d,L=(a+f)/2,t=(s+c)/2,m=f-a,g=c-s,A=m*m+g*g,T=v-R,P=a*c-f*s,E=(g<0?-1:1)*j(on(0,T*T*A-P*P)),G=(P*g-m*E)/A,H=(-P*m-g*E)/A,w=(P*g+m*E)/A,p=(-P*m+g*E)/A,x=G-L,e=H-t,r=w-L,M=p-t;return x*x+e*e>r*r+M*M&&(G=w,H=p),{cx:G,cy:H,x01:-n,y01:-d,x11:G*(v/T-1),y11:H*(v/T-1)}}function hn(){var l=cn,h=yn,q=J(0),O=null,v=gn,R=dn,K=mn,u=null,D=ln(i);function i(){var n,d,a=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-an,c=R.apply(this,arguments)-an,L=rn(c-f),t=c>f;if(u||(u=n=D()),s<a&&(d=s,s=a,a=d),!(s>y))u.moveTo(0,0);else if(L>tn-y)u.moveTo(s*N(f),s*I(f)),u.arc(0,0,s,f,c,!t),a>y&&(u.moveTo(a*N(c),a*I(c)),u.arc(0,0,a,c,f,t));else{var m=f,g=c,A=f,T=c,P=L,E=L,G=K.apply(this,arguments)/2,H=G>y&&(O?+O.apply(this,arguments):j(a*a+s*s)),w=_(rn(s-a)/2,+q.apply(this,arguments)),p=w,x=w,e,r;if(H>y){var M=sn(H/a*I(G)),z=sn(H/s*I(G));(P-=M*2)>y?(M*=t?1:-1,A+=M,T-=M):(P=0,A=T=(f+c)/2),(E-=z*2)>y?(z*=t?1:-1,m+=z,g-=z):(E=0,m=g=(f+c)/2)}var Q=s*N(m),V=s*I(m),B=a*N(T),C=a*I(T);if(w>y){var F=s*N(g),U=s*I(g),X=a*N(A),Y=a*I(A),S;if(L<un)if(S=pn(Q,V,X,Y,F,U,B,C)){var Z=Q-S[0],$=V-S[1],k=F-S[0],b=U-S[1],nn=1/I(fn((Z*k+$*b)/(j(Z*Z+$*$)*j(k*k+b*b)))/2),en=j(S[0]*S[0]+S[1]*S[1]);p=_(w,(a-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}E>y?x>y?(e=W(X,Y,Q,V,s,x,t),r=W(F,U,B,C,s,x,t),u.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?u.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(u.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),u.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),u.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(u.moveTo(Q,V),u.arc(0,0,s,m,g,!t)):u.moveTo(Q,V),!(a>y)||!(P>y)?u.lineTo(B,C):p>y?(e=W(B,C,F,U,a,-p,t),r=W(Q,V,X,Y,a,-p,t),u.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?u.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(u.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),u.arc(0,0,a,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),u.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):u.arc(0,0,a,T,A,t)}if(u.closePath(),n)return u=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +R.apply(this,arguments))/2-un/2;return[N(d)*n,I(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:J(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:J(+n),i):h},i.cornerRadius=function(n){return arguments.length?(q=typeof n=="function"?n:J(+n),i):q},i.padRadius=function(n){return arguments.length?(O=n==null?null:typeof n=="function"?n:J(+n),i):O},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:J(+n),i):v},i.endAngle=function(n){return arguments.length?(R=typeof n=="function"?n:J(+n),i):R},i.padAngle=function(n){return arguments.length?(K=typeof n=="function"?n:J(+n),i):K},i.context=function(n){return arguments.length?(u=n??null,i):u},i}export{hn as d};