@zenalexa/unicli 0.217.3 → 0.218.1

package/dist/commands/repair.js

@@ -2,94 +2,136 @@
  * Repair command — self-repair broken adapters using AI.
  *
  * unicli repair <site> [command] [options]
+ * unicli repair --quarantined            (enumerate quarantine list)
  */
 import { readFileSync } from "node:fs";
 import chalk from "chalk";
-import { buildDefaultConfig } from "../engine/repair/config.js";
+import { buildDefaultConfig, } from "../engine/repair/config.js";
 import { runRepairLoop } from "../engine/repair/engine.js";
 import { runEval } from "../engine/repair/eval.js";
+import { discoverQuarantinedAdapters } from "../engine/repair/quarantine-discovery.js";
 import { format, detectFormat } from "../output/formatter.js";
 import { makeCtx } from "../output/envelope.js";
 import { errorTypeToCode, mapErrorToExitCode } from "../output/error-map.js";
+function emitQuarantinedList(rctx) {
+    const { adapters, parse_errors } = discoverQuarantinedAdapters();
+    const data = {
+        mode: "quarantined-list",
+        count: adapters.length,
+        adapters: adapters.map((q) => ({
+            site: q.site,
+            command: q.name,
+            reason: q.reason,
+            adapter_path: q.adapter_path,
+            quarantined_since: q.quarantined_since ?? null,
+            next_action: `unicli repair ${q.site} ${q.name}`,
+        })),
+        parse_errors,
+    };
+    rctx.ctx.duration_ms = Date.now() - rctx.startedAt;
+    console.log(format(data, undefined, rctx.fmt, rctx.ctx));
+    console.error(chalk.dim(`\n  ${adapters.length} quarantined adapter(s)` +
+        (parse_errors.length > 0
+            ? `, ${parse_errors.length} parse error(s) — see parse_errors`
+            : "") +
+        `. Iterate with "unicli repair <site> <command>" or pipe through xargs.`));
+    return 0;
+}
+function emitDryRun(rctx, site, command, config) {
+    const data = {
+        mode: "dry-run",
+        site,
+        command: command ?? null,
+        config: { ...config, metricPattern: config.metricPattern.source },
+    };
+    rctx.ctx.duration_ms = Date.now() - rctx.startedAt;
+    console.log(format(data, undefined, rctx.fmt, rctx.ctx));
+    console.error(chalk.dim(`\n  Dry run — no repairs executed. Max ${config.maxIterations} iterations.`));
+}
+function runEvalSuite(rctx, site, command, evalPath) {
+    const raw = readFileSync(evalPath, "utf-8");
+    const tasks = JSON.parse(raw);
+    const result = runEval(tasks);
+    const data = {
+        mode: "eval",
+        site,
+        command: command ?? null,
+        score: result.score,
+        total: result.total,
+        passed: result.score === result.total,
+    };
+    rctx.ctx.duration_ms = Date.now() - rctx.startedAt;
+    console.log(format(data, undefined, rctx.fmt, rctx.ctx));
+    console.error(chalk.dim(`\n  Eval: ${result.score}/${result.total} passed`));
+    return result.score === result.total ? 0 : 1;
+}
+async function runOnceOrLoop(rctx, site, command, config, loop) {
+    // Single-repair default wraps one iteration; --loop uses the
+    // user-supplied max. Progress output from the loop streams to stderr
+    // (Scene-6 pattern); the envelope carries the final summary.
+    if (!loop)
+        config.maxIterations = 1;
+    const result = await runRepairLoop(config);
+    const data = {
+        mode: loop ? "loop" : "once",
+        site,
+        command: command ?? null,
+        iterations: result.iterations,
+        best_metric: result.bestMetric,
+        improved: result.improved,
+    };
+    rctx.ctx.duration_ms = Date.now() - rctx.startedAt;
+    console.log(format(data, undefined, rctx.fmt, rctx.ctx));
+    console.error(chalk.dim(`\n  Repair ${result.improved ? chalk.green("improved") : chalk.yellow("no-improvement")} — ` +
+        `${result.iterations} iteration(s), best ${result.bestMetric}`));
+    return result.improved ? 0 : 1;
+}
 export function registerRepairCommand(program) {
     program
-        .command("repair <site> [command]")
+        .command("repair [site] [command]")
         .description("Self-repair broken adapters using AI")
         .option("--loop", "Enable autonomous repair loop")
         .option("--max <n>", "Max iterations", "20")
         .option("--timeout <s>", "Per-iteration timeout (seconds)", "90")
         .option("--eval <file>", "Run eval suite from JSON file")
         .option("--dry-run", "Show plan without executing")
+        .option("--quarantined", "Enumerate every quarantined adapter (ignores <site>/<command>)")
         .action(async (site, command, opts) => {
         const startedAt = Date.now();
         const ctx = makeCtx("repair.run", startedAt);
         const programOpts = program.opts();
         const fmt = detectFormat(programOpts.format);
-        // Declared outside try/catch because the success-path process.exit()
-        // must NOT be re-caught and remapped by the error handler (doing so
-        // turns exit(0) into exit(1) when tests stub process.exit to throw).
+        const rctx = { ctx, fmt, startedAt };
+        // Compute exit code at the end so the success-path process.exit()
+        // doesn't pass through the error handler's catch (test harnesses
+        // stub process.exit to throw, which would remap exit 0 to 1).
         let successExitCode = null;
         try {
-            const config = buildDefaultConfig(site, command);
-            config.maxIterations = parseInt(opts.max ?? "", 10) || 20;
-            config.timeout = (parseInt(opts.timeout ?? "", 10) || 90) * 1000;
-            const isDryRun = opts["dry-run"] !== undefined ||
-                opts.dryRun !== undefined ||
-                programOpts["dry-run"] !== undefined ||
-                programOpts.dryRun !== undefined;
-            if (isDryRun) {
-                const data = {
-                    mode: "dry-run",
-                    site,
-                    command: command ?? null,
-                    config: {
-                        ...config,
-                        metricPattern: config.metricPattern.source,
-                    },
-                };
-                ctx.duration_ms = Date.now() - startedAt;
-                console.log(format(data, undefined, fmt, ctx));
-                console.error(chalk.dim(`\n  Dry run — no repairs executed. Max ${config.maxIterations} iterations.`));
-                return;
+            if (opts.quarantined === true) {
+                successExitCode = emitQuarantinedList(rctx);
             }
-            if (opts.eval) {
-                const raw = readFileSync(opts.eval, "utf-8");
-                const tasks = JSON.parse(raw);
-                const result = runEval(tasks);
-                const data = {
-                    mode: "eval",
-                    site,
-                    command: command ?? null,
-                    score: result.score,
-                    total: result.total,
-                    passed: result.score === result.total,
-                };
-                ctx.duration_ms = Date.now() - startedAt;
-                console.log(format(data, undefined, fmt, ctx));
-                console.error(chalk.dim(`\n  Eval: ${result.score}/${result.total} passed`));
-                successExitCode = result.score === result.total ? 0 : 1;
+            else if (!site) {
+                console.error(chalk.red("error: missing required argument 'site' (use --quarantined to enumerate the quarantine list)"));
+                process.exit(2);
             }
             else {
-                // Single-repair default wraps one iteration; --loop uses the
-                // user-supplied max. Progress output from the loop streams to
-                // stderr (Scene-6 pattern); the envelope carries the final summary.
-                if (opts.loop === undefined) {
-                    config.maxIterations = 1;
+                const config = buildDefaultConfig(site, command);
+                config.maxIterations = parseInt(opts.max ?? "", 10) || 20;
+                config.timeout = (parseInt(opts.timeout ?? "", 10) || 90) * 1000;
+                const isDryRun = opts["dry-run"] !== undefined ||
+                    opts.dryRun !== undefined ||
+                    programOpts["dry-run"] !== undefined ||
+                    programOpts.dryRun !== undefined;
+                if (isDryRun) {
+                    emitDryRun(rctx, site, command, config);
+                    return;
+                }
+                if (opts.eval) {
+                    successExitCode = runEvalSuite(rctx, site, command, opts.eval);
+                }
+                else {
+                    successExitCode = await runOnceOrLoop(rctx, site, command, config, opts.loop !== undefined);
                 }
-                const result = await runRepairLoop(config);
-                const data = {
-                    mode: opts.loop !== undefined ? "loop" : "once",
-                    site,
-                    command: command ?? null,
-                    iterations: result.iterations,
-                    best_metric: result.bestMetric,
-                    improved: result.improved,
-                };
-                ctx.duration_ms = Date.now() - startedAt;
-                console.log(format(data, undefined, fmt, ctx));
-                console.error(chalk.dim(`\n  Repair ${result.improved ? chalk.green("improved") : chalk.yellow("no-improvement")} — ` +
-                    `${result.iterations} iteration(s), best ${result.bestMetric}`));
-                successExitCode = result.improved ? 0 : 1;
             }
         }
         catch (err) {

package/dist/commands/repair.js.map

@@ -1 +1 @@
-{"version":3,"file":"repair.js","sourceRoot":"","sources":["../../src/commands/repair.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAiB,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAY7E,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;SACjD,MAAM,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC;SAC3C,MAAM,CAAC,eAAe,EAAE,iCAAiC,EAAE,IAAI,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;SACxD,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC;SAClD,MAAM,CACL,KAAK,EACH,IAAY,EACZ,OAA2B,EAC3B,IAAmB,EACnB,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,YAAY,CACtB,WAAW,CAAC,MAAkC,CAC/C,CAAC;QAEF,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,eAAe,GAAkB,IAAI,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YAEjE,MAAM,QAAQ,GACZ,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS;gBAC7B,IAAI,CAAC,MAAM,KAAK,SAAS;gBACzB,WAAW,CAAC,SAAS,CAAC,KAAK,SAAS;gBACpC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC;YAEnC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,SAAkB;oBACxB,IAAI;oBACJ,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,MAAM,EAAE;wBACN,GAAG,MAAM;wBACT,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM;qBAC3C;iBACF,CAAC;gBACF,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,0CAA0C,MAAM,CAAC,aAAa,cAAc,CAC7E,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;gBAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,MAAe;oBACrB,IAAI;oBACJ,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;iBACtC,CAAC;gBACF,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,CAAC,CAC9D,CAAC;gBACF,eAAe,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,8DAA8D;gBAC9D,oEAAoE;gBACpE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;gBAE3C,MAAM,IAAI,GAAG;oBACX,IAAI,EACF,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB;oBACjE,IAAI;oBACJ,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC;gBAEF,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE/C,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,cAAc,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK;oBAC3F,GAAG,MAAM,CAAC,UAAU,uBAAuB,MAAM,CAAC,UAAU,EAAE,CACjE,CACF,CAAC;gBACF,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,GAAG;gBACV,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;gBAC1B,OAAO;gBACP,UAAU,EACR,qEAAqE;gBACvE,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;AACN,CAAC"}
+{"version":3,"file":"repair.js","sourceRoot":"","sources":["../../src/commands/repair.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAiB,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAqB,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAmB7E,SAAS,mBAAmB,CAAC,IAAe;IAC1C,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,2BAA2B,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,kBAA2B;QACjC,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;YAC9C,WAAW,EAAE,iBAAiB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;SACjD,CAAC,CAAC;QACH,YAAY;KACb,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,OAAO,QAAQ,CAAC,MAAM,yBAAyB;QAC7C,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,oCAAoC;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,wEAAwE,CAC3E,CACF,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CACjB,IAAe,EACf,IAAY,EACZ,OAA2B,EAC3B,MAAoB;IAEpB,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,SAAkB;QACxB,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE;KAClE,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,0CAA0C,MAAM,CAAC,aAAa,cAAc,CAC7E,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAAe,EACf,IAAY,EACZ,OAA2B,EAC3B,QAAgB;IAEhB,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,MAAe;QACrB,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;KACtC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAe,EACf,IAAY,EACZ,OAA2B,EAC3B,MAAoB,EACpB,IAAa;IAEb,6DAA6D;IAC7D,qEAAqE;IACrE,6DAA6D;IAC7D,IAAI,CAAC,IAAI;QAAE,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB;QAClD,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,cAAc,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK;QAC3F,GAAG,MAAM,CAAC,UAAU,uBAAuB,MAAM,CAAC,UAAU,EAAE,CACjE,CACF,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;SACjD,MAAM,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC;SAC3C,MAAM,CAAC,eAAe,EAAE,iCAAiC,EAAE,IAAI,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;SACxD,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC;SAClD,MAAM,CACL,eAAe,EACf,gEAAgE,CACjE;SACA,MAAM,CACL,KAAK,EACH,IAAwB,EACxB,OAA2B,EAC3B,IAAmB,EACnB,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,YAAY,CACtB,WAAW,CAAC,MAAkC,CAC/C,CAAC;QACF,MAAM,IAAI,GAAc,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAEhD,kEAAkE;QAClE,iEAAiE;QACjE,8DAA8D;QAC9D,IAAI,eAAe,GAAkB,IAAI,CAAC;QAE1C,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC9B,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,8FAA8F,CAC/F,CACF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC1D,MAAM,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;gBAEjE,MAAM,QAAQ,GACZ,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS;oBAC7B,IAAI,CAAC,MAAM,KAAK,SAAS;oBACzB,WAAW,CAAC,SAAS,CAAC,KAAK,SAAS;oBACpC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC;gBAEnC,IAAI,QAAQ,EAAE,CAAC;oBACb,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,eAAe,GAAG,MAAM,aAAa,CACnC,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,MAAM,EACN,IAAI,CAAC,IAAI,KAAK,SAAS,CACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,GAAG;gBACV,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;gBAC1B,OAAO;gBACP,UAAU,EACR,qEAAqE;gBACvE,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;AACN,CAAC"}

package/dist/engine/chromium-cookies-platform.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Per-platform Chromium cookie key derivation, keystore lookup, and decrypt.
+ *
+ * The three platforms diverge meaningfully:
+ *
+ *   macOS  — Keychain `security` CLI → password (≤24 ASCII chars)
+ *            PBKDF2-SHA1(saltysalt, 1003, 16) → 16-byte AES key
+ *            v10/v11 prefix + AES-128-CBC + IV=16×0x20 + PKCS7
+ *            32-byte SHA256 integrity prefix on plaintext (M122+)
+ *
+ *   Linux  — libsecret/KWallet via `secret-tool` → password
+ *              fallback to literal "peanuts" if no keyring (Chromium HEAD)
+ *            PBKDF2-SHA1(saltysalt, **1**, 16) → 16-byte AES key   (CRITICAL)
+ *            v10/v11 prefix + AES-128-CBC + IV=16×0x20 + PKCS7
+ *            NO integrity prefix
+ *
+ *   Windows — `Local State` → os_crypt.encrypted_key (base64)
+ *             strip "DPAPI" 5-byte prefix
+ *             CryptUnprotectData(CurrentUser) via PowerShell → 32-byte master
+ *             v10 prefix + 12-byte nonce + AES-256-GCM(ct + 16-byte tag, master)
+ *             32-byte SHA256 integrity prefix on plaintext
+ *             v20 (Chrome 127+ App-Bound Encryption) is BLOCKED for external
+ *             processes by design; we surface encryption_unsupported and
+ *             suggest CDP fallback rather than ship a brittle bypass.
+ *
+ * All three platforms validate the prefix bytes to detect format drift early.
+ */
+import { type BrowserId } from "./chromium-cookies-types.js";
+export type Platform = "darwin" | "linux" | "win32";
+export declare function currentPlatform(): Platform;
+interface KeystoreSpec {
+    /** macOS: Keychain service labels to probe in order. */
+    macLabels?: readonly string[];
+    /** macOS: Keychain account candidates per label. */
+    macAccounts?: readonly string[];
+    /** Linux: secret-tool `application` attribute. */
+    linuxApp?: string;
+    /** Linux: secret-tool xdg:schema attribute. */
+    linuxSchema?: string;
+    /**
+     * Windows: Local State path relative to the user-data root. Each browser
+     * stores its master key here; we read it once and feed DPAPI.
+     */
+    winLocalStateRel?: string;
+}
+export declare function _resetSecretCache(): void;
+export declare function getEncryptionSecret(browser: BrowserId, platform: Platform, spec: KeystoreSpec, userDataRoot: string): Buffer | string;
+/**
+ * Derive the AES key from the platform secret. macOS uses 1003 PBKDF2
+ * iterations; Linux uses **1** iteration (Chromium's
+ * `kEncryptionIterations = 1` for `freedesktop_secret_key_provider.cc`).
+ * Windows passes through — DPAPI already returned a 32-byte master.
+ */
+export declare function deriveKey(secret: Buffer | string, platform: Platform): Buffer;
+/**
+ * Decrypt a single Chromium-encrypted cookie value.
+ *
+ *  • Empty buffer        → empty string
+ *  • No `vNN` prefix     → raw bytes (legacy unencrypted)
+ *  • `v10`/`v11` macOS   → AES-128-CBC, strip 32-byte SHA256 prefix when present
+ *  • `v10`/`v11` Linux   → AES-128-CBC, NO integrity prefix
+ *  • `v10`        Win    → AES-256-GCM with 12-byte nonce + 16-byte tag,
+ *                          strip 32-byte SHA256 prefix
+ *  • `v20`        Win    → encryption_unsupported (App-Bound Encryption)
+ */
+export declare function decryptValue(encrypted: Buffer, key: Buffer, platform: Platform): string;
+export declare const KEYSTORE_SPECS: Record<BrowserId, KeystoreSpec>;
+export {};
+//# sourceMappingURL=chromium-cookies-platform.d.ts.map

package/dist/engine/chromium-cookies-platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies-platform.d.ts","sourceRoot":"","sources":["../../src/engine/chromium-cookies-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpD,wBAAgB,eAAe,IAAI,QAAQ,CAQ1C;AAMD,UAAU,YAAY;IACpB,wDAAwD;IACxD,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,oDAAoD;IACpD,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAcD,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,YAAY,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,MAAM,CAkBjB;AAgJD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAsB7E;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,QAAQ,GACjB,MAAM,CAmCR;AAkDD,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAwC1D,CAAC"}

package/dist/engine/chromium-cookies-platform.js

@@ -0,0 +1,315 @@
+/**
+ * Per-platform Chromium cookie key derivation, keystore lookup, and decrypt.
+ *
+ * The three platforms diverge meaningfully:
+ *
+ *   macOS  — Keychain `security` CLI → password (≤24 ASCII chars)
+ *            PBKDF2-SHA1(saltysalt, 1003, 16) → 16-byte AES key
+ *            v10/v11 prefix + AES-128-CBC + IV=16×0x20 + PKCS7
+ *            32-byte SHA256 integrity prefix on plaintext (M122+)
+ *
+ *   Linux  — libsecret/KWallet via `secret-tool` → password
+ *              fallback to literal "peanuts" if no keyring (Chromium HEAD)
+ *            PBKDF2-SHA1(saltysalt, **1**, 16) → 16-byte AES key   (CRITICAL)
+ *            v10/v11 prefix + AES-128-CBC + IV=16×0x20 + PKCS7
+ *            NO integrity prefix
+ *
+ *   Windows — `Local State` → os_crypt.encrypted_key (base64)
+ *             strip "DPAPI" 5-byte prefix
+ *             CryptUnprotectData(CurrentUser) via PowerShell → 32-byte master
+ *             v10 prefix + 12-byte nonce + AES-256-GCM(ct + 16-byte tag, master)
+ *             32-byte SHA256 integrity prefix on plaintext
+ *             v20 (Chrome 127+ App-Bound Encryption) is BLOCKED for external
+ *             processes by design; we surface encryption_unsupported and
+ *             suggest CDP fallback rather than ship a brittle bypass.
+ *
+ * All three platforms validate the prefix bytes to detect format drift early.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { createDecipheriv, pbkdf2Sync } from "node:crypto";
+import { ChromiumCookieError, } from "./chromium-cookies-types.js";
+export function currentPlatform() {
+    const p = process.platform;
+    if (p === "darwin" || p === "linux" || p === "win32")
+        return p;
+    throw new ChromiumCookieError("encryption_unsupported", `unsupported platform: ${p}`, "Direct cookie reads work on macOS, Linux, and Windows. Use CDP fallback elsewhere.");
+}
+/**
+ * Look up a browser's encryption secret. Returns either a passphrase string
+ * (macOS / Linux) or a 32-byte master key Buffer (Windows). The caller's
+ * `deriveKey` knows which to expect based on the platform.
+ *
+ * Result is memoized per (browser, platform, userDataRoot) for the lifetime
+ * of the process — Keychain prompts and DPAPI calls cost ~30-100 ms each, so
+ * an audit walking 135 adapters with the same browser would otherwise spend
+ * seconds re-fetching the same secret. Tests can clear via `_resetSecretCache`.
+ */
+const secretCache = new Map();
+export function _resetSecretCache() {
+    secretCache.clear();
+}
+export function getEncryptionSecret(browser, platform, spec, userDataRoot) {
+    const cacheKey = `${platform}:${browser}:${userDataRoot}`;
+    const cached = secretCache.get(cacheKey);
+    if (cached)
+        return cached;
+    let secret;
+    switch (platform) {
+        case "darwin":
+            secret = macSecurityLookup(browser, spec);
+            break;
+        case "linux":
+            secret = linuxSecretLookup(browser, spec);
+            break;
+        case "win32":
+            secret = winDpapiLookup(browser, spec, userDataRoot);
+            break;
+    }
+    secretCache.set(cacheKey, secret);
+    return secret;
+}
+/* macOS ------------------------------------------------------------------- */
+function macSecurityLookup(browser, spec) {
+    const labels = spec.macLabels ?? [];
+    const accounts = spec.macAccounts ?? [];
+    let lastError = "";
+    for (const label of labels) {
+        for (const account of accounts) {
+            try {
+                const args = ["find-generic-password", "-w", "-s", label];
+                if (account)
+                    args.push("-a", account);
+                const out = execFileSync("/usr/bin/security", args, {
+                    encoding: "utf8",
+                    stdio: ["ignore", "pipe", "pipe"],
+                });
+                const trimmed = out.trim();
+                if (trimmed)
+                    return trimmed;
+            }
+            catch (err) {
+                lastError = err.message;
+            }
+        }
+    }
+    throw new ChromiumCookieError("keychain_denied", `no Safe Storage password for ${browser}: ${lastError || "not found"}`, `Try: security find-generic-password -wa "${accounts[0] ?? browser}" -s "${labels[0] ?? `${browser} Safe Storage`}"`);
+}
+/* Linux ------------------------------------------------------------------- */
+function linuxSecretLookup(_browser, spec) {
+    const app = spec.linuxApp;
+    const schema = spec.linuxSchema ?? "chrome_libsecret_os_crypt_password_v2";
+    if (app) {
+        try {
+            const out = execFileSync("secret-tool", ["lookup", "application", app, "xdg:schema", schema], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+            const trimmed = out.trim();
+            if (trimmed)
+                return trimmed;
+        }
+        catch {
+            // Fall through to peanuts — secret-tool missing or no entry.
+        }
+    }
+    // Chromium HEAD `posix_key_provider.cc` literal: when no keyring backend is
+    // available, the v10 password is the ASCII string "peanuts". That gives us
+    // best-effort access on headless boxes / containers without a keyring.
+    return "peanuts";
+}
+/* Windows ----------------------------------------------------------------- */
+function winDpapiLookup(browser, spec, userDataRoot) {
+    const localStateRel = spec.winLocalStateRel ?? "Local State";
+    const localStatePath = join(userDataRoot, localStateRel);
+    if (!existsSync(localStatePath)) {
+        throw new ChromiumCookieError("keychain_denied", `${browser}: Local State not found at ${localStatePath}`, "Open the browser at least once so it writes its master key, then retry.");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(localStatePath, "utf8"));
+    }
+    catch (err) {
+        throw new ChromiumCookieError("keychain_denied", `${browser}: cannot parse Local State: ${err.message}`, "Local State is corrupt; close the browser and retry, or reset the profile.");
+    }
+    const enc = parsed.os_crypt?.encrypted_key;
+    if (!enc) {
+        throw new ChromiumCookieError("keychain_denied", `${browser}: Local State has no os_crypt.encrypted_key`, "The browser hasn't written a v10 master key. Sign into a site once, then retry.");
+    }
+    const wrapped = Buffer.from(enc, "base64");
+    // Strip "DPAPI" (5-byte prefix added since M55).
+    if (wrapped.length < 5 ||
+        wrapped.subarray(0, 5).toString("ascii") !== "DPAPI") {
+        throw new ChromiumCookieError("encryption_unsupported", `${browser}: encrypted_key missing DPAPI prefix`, "Likely an app-bound (v20) install. Use CDP via `unicli browser start`.");
+    }
+    const ciphertext = wrapped.subarray(5);
+    return dpapiUnprotect(ciphertext);
+}
+/**
+ * Run DPAPI CryptUnprotectData(CurrentUser) without a native module.
+ * Shells PowerShell to call `[System.Security.Cryptography.ProtectedData]`.
+ * Slow (~80 ms) but zero-install.
+ */
+function dpapiUnprotect(ciphertext) {
+    const b64 = ciphertext.toString("base64");
+    const ps = [
+        "$ErrorActionPreference='Stop'",
+        "Add-Type -AssemblyName System.Security",
+        `$b=[Convert]::FromBase64String('${b64}')`,
+        "$p=[System.Security.Cryptography.ProtectedData]::Unprotect($b,$null,'CurrentUser')",
+        "[Convert]::ToBase64String($p)",
+    ].join(";");
+    let out;
+    try {
+        out = execFileSync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", ps], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+    }
+    catch (err) {
+        throw new ChromiumCookieError("decrypt_failed", `DPAPI unprotect failed: ${err.message}`, "Run as the same user that owns the profile. Cross-user DPAPI is intentionally blocked.");
+    }
+    return Buffer.from(out.trim(), "base64");
+}
+/* -------------------------------------------------------------------------- */
+/*  Key derivation                                                            */
+/* -------------------------------------------------------------------------- */
+const SALT = "saltysalt";
+const KEY_LEN_128 = 16;
+const KEY_LEN_256 = 32;
+/**
+ * Derive the AES key from the platform secret. macOS uses 1003 PBKDF2
+ * iterations; Linux uses **1** iteration (Chromium's
+ * `kEncryptionIterations = 1` for `freedesktop_secret_key_provider.cc`).
+ * Windows passes through — DPAPI already returned a 32-byte master.
+ */
+export function deriveKey(secret, platform) {
+    if (platform === "win32") {
+        if (typeof secret === "string") {
+            throw new ChromiumCookieError("decrypt_failed", "Windows expects a 32-byte master key, got a string", "This is an internal bug; report it.");
+        }
+        if (secret.length !== KEY_LEN_256) {
+            throw new ChromiumCookieError("decrypt_failed", `Windows master key has unexpected length ${secret.length} (want 32)`, "Likely a corrupted Local State; reset the browser profile.");
+        }
+        return secret;
+    }
+    const password = typeof secret === "string" ? secret : secret.toString("utf8");
+    const iterations = platform === "darwin" ? 1003 : 1;
+    return pbkdf2Sync(password, SALT, iterations, KEY_LEN_128, "sha1");
+}
+/* -------------------------------------------------------------------------- */
+/*  Decrypt                                                                   */
+/* -------------------------------------------------------------------------- */
+const IV_CBC = Buffer.alloc(16, 0x20);
+const INTEGRITY_PREFIX_LEN = 32;
+/**
+ * Decrypt a single Chromium-encrypted cookie value.
+ *
+ *  • Empty buffer        → empty string
+ *  • No `vNN` prefix     → raw bytes (legacy unencrypted)
+ *  • `v10`/`v11` macOS   → AES-128-CBC, strip 32-byte SHA256 prefix when present
+ *  • `v10`/`v11` Linux   → AES-128-CBC, NO integrity prefix
+ *  • `v10`        Win    → AES-256-GCM with 12-byte nonce + 16-byte tag,
+ *                          strip 32-byte SHA256 prefix
+ *  • `v20`        Win    → encryption_unsupported (App-Bound Encryption)
+ */
+export function decryptValue(encrypted, key, platform) {
+    if (encrypted.length === 0)
+        return "";
+    const prefix = encrypted.subarray(0, 3).toString("ascii");
+    if (prefix !== "v10" && prefix !== "v11") {
+        if (/^v\d/.test(prefix)) {
+            throw new ChromiumCookieError("encryption_unsupported", `unsupported cookie encryption version "${prefix}"` +
+                (prefix === "v20"
+                    ? " (Chrome 127+ App-Bound Encryption blocks external decrypt)"
+                    : ""), prefix === "v20"
+                ? "Use CDP: `unicli browser start` then `unicli auth import` once Chrome is logged in."
+                : "Open the site in your browser and try CDP fallback, or downgrade the browser.");
+        }
+        return encrypted.toString("utf8");
+    }
+    const body = encrypted.subarray(3);
+    const plain = platform === "win32" ? decryptGcm(body, key) : decryptCbc(body, key);
+    // macOS + Windows prepend a 32-byte SHA256 integrity hash before the value.
+    // Linux does not. Heuristic: if the first 32 bytes contain any non-printable
+    // byte (the SHA256 of any value almost always does), strip them. ASCII-only
+    // first 32 bytes are almost surely real cookie content.
+    if (platform !== "linux" &&
+        plain.length >= INTEGRITY_PREFIX_LEN &&
+        hasNonPrintable(plain.subarray(0, INTEGRITY_PREFIX_LEN))) {
+        return plain.subarray(INTEGRITY_PREFIX_LEN).toString("utf8");
+    }
+    return plain.toString("utf8");
+}
+function decryptCbc(ciphertext, key) {
+    const decipher = createDecipheriv("aes-128-cbc", key, IV_CBC);
+    try {
+        return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    }
+    catch (err) {
+        throw new ChromiumCookieError("decrypt_failed", `AES-128-CBC decrypt failed: ${err.message}`, "The Keychain key may be wrong; revoke and re-grant Keychain access.");
+    }
+}
+function decryptGcm(ciphertext, key) {
+    if (ciphertext.length < 12 + 16) {
+        throw new ChromiumCookieError("decrypt_failed", `GCM ciphertext too short (${ciphertext.length} bytes)`, "Cookie blob is malformed; the Cookies DB may be corrupt.");
+    }
+    const nonce = ciphertext.subarray(0, 12);
+    const tag = ciphertext.subarray(ciphertext.length - 16);
+    const ct = ciphertext.subarray(12, ciphertext.length - 16);
+    const decipher = createDecipheriv("aes-256-gcm", key, nonce);
+    decipher.setAuthTag(tag);
+    try {
+        return Buffer.concat([decipher.update(ct), decipher.final()]);
+    }
+    catch (err) {
+        throw new ChromiumCookieError("decrypt_failed", `AES-256-GCM decrypt failed: ${err.message}`, "The DPAPI master key may be wrong (cross-user DPAPI is blocked) or this is a v20 cookie.");
+    }
+}
+function hasNonPrintable(buf) {
+    for (const b of buf) {
+        if (b < 0x20 || b > 0x7e)
+            return true;
+    }
+    return false;
+}
+/* -------------------------------------------------------------------------- */
+/*  Per-browser keystore specs                                                */
+/* -------------------------------------------------------------------------- */
+export const KEYSTORE_SPECS = {
+    chrome: {
+        macLabels: ["Chrome Safe Storage"],
+        macAccounts: ["Chrome"],
+        linuxApp: "chrome",
+        winLocalStateRel: "Local State",
+    },
+    brave: {
+        macLabels: ["Brave Safe Storage"],
+        macAccounts: ["Brave"],
+        linuxApp: "brave",
+        winLocalStateRel: "Local State",
+    },
+    edge: {
+        macLabels: ["Microsoft Edge Safe Storage"],
+        macAccounts: ["Microsoft Edge"],
+        linuxApp: "microsoft-edge",
+        winLocalStateRel: "Local State",
+    },
+    arc: {
+        macLabels: ["Arc Safe Storage"],
+        macAccounts: ["Arc"],
+        // No Linux/Windows Arc build as of 2026-05.
+        winLocalStateRel: "Local State",
+    },
+    dia: {
+        macLabels: ["Dia Safe Storage"],
+        macAccounts: ["Dia"],
+        winLocalStateRel: "Local State",
+    },
+    atlas: {
+        macLabels: [
+            "Atlas Safe Storage",
+            "ChatGPT Atlas Safe Storage",
+            "OpenAI Atlas Safe Storage",
+            "ChatGPT Safe Storage",
+        ],
+        macAccounts: ["Atlas", "ChatGPT", "OpenAI"],
+        winLocalStateRel: "Local State",
+    },
+};
+//# sourceMappingURL=chromium-cookies-platform.js.map

package/dist/engine/chromium-cookies-platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromium-cookies-platform.js","sourceRoot":"","sources":["../../src/engine/chromium-cookies-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,mBAAmB,GAEpB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,EACxB,yBAAyB,CAAC,EAAE,EAC5B,oFAAoF,CACrF,CAAC;AACJ,CAAC;AAsBD;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEvD,MAAM,UAAU,iBAAiB;IAC/B,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAkB,EAClB,QAAkB,EAClB,IAAkB,EAClB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,MAAuB,CAAC;IAC5B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM;QACR,KAAK,OAAO;YACV,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM;QACR,KAAK,OAAO;YACV,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YACrD,MAAM;IACV,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,SAAS,iBAAiB,CAAC,OAAkB,EAAE,IAAkB;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1D,IAAI,OAAO;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,EAAE,IAAI,EAAE;oBAClD,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;iBAClC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC3B,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAI,GAAa,CAAC,OAAO,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,gCAAgC,OAAO,KAAK,SAAS,IAAI,WAAW,EAAE,EACtE,4CAA4C,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,eAAe,GAAG,CACrH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,SAAS,iBAAiB,CAAC,QAAmB,EAAE,IAAkB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,uCAAuC,CAAC;IAC3E,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CACtB,aAAa,EACb,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,EACpD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAE/E,SAAS,cAAc,CACrB,OAAkB,EAClB,IAAkB,EAClB,YAAoB;IAEpB,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,GAAG,OAAO,8BAA8B,cAAc,EAAE,EACxD,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,MAAiD,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,GAAG,OAAO,+BAAgC,GAAa,CAAC,OAAO,EAAE,EACjE,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,GAAG,OAAO,6CAA6C,EACvD,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,iDAAiD;IACjD,IACE,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO,EACpD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,EACxB,GAAG,OAAO,sCAAsC,EAChD,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG;QACT,+BAA+B;QAC/B,wCAAwC;QACxC,mCAAmC,GAAG,IAAI;QAC1C,oFAAoF;QACpF,+BAA+B;KAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAChB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,CAAC,EACjD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,2BAA4B,GAAa,CAAC,OAAO,EAAE,EACnD,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,IAAI,GAAG,WAAW,CAAC;AACzB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAuB,EAAE,QAAkB;IACnE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,oDAAoD,EACpD,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,4CAA4C,MAAM,CAAC,MAAM,YAAY,EACrE,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACtC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,GAAW,EACX,QAAkB;IAElB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,EACxB,0CAA0C,MAAM,GAAG;gBACjD,CAAC,MAAM,KAAK,KAAK;oBACf,CAAC,CAAC,6DAA6D;oBAC/D,CAAC,CAAC,EAAE,CAAC,EACT,MAAM,KAAK,KAAK;gBACd,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,+EAA+E,CACpF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,KAAK,GACT,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEvE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,wDAAwD;IACxD,IACE,QAAQ,KAAK,OAAO;QACpB,KAAK,CAAC,MAAM,IAAI,oBAAoB;QACpC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,GAAW;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,+BAAgC,GAAa,CAAC,OAAO,EAAE,EACvD,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,GAAW;IACjD,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,6BAA6B,UAAU,CAAC,MAAM,SAAS,EACvD,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,+BAAgC,GAAa,CAAC,OAAO,EAAE,EACvD,0FAA0F,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAoC;IAC7D,MAAM,EAAE;QACN,SAAS,EAAE,CAAC,qBAAqB,CAAC;QAClC,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,aAAa;KAChC;IACD,KAAK,EAAE;QACL,SAAS,EAAE,CAAC,oBAAoB,CAAC;QACjC,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,aAAa;KAChC;IACD,IAAI,EAAE;QACJ,SAAS,EAAE,CAAC,6BAA6B,CAAC;QAC1C,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,gBAAgB,EAAE,aAAa;KAChC;IACD,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,4CAA4C;QAC5C,gBAAgB,EAAE,aAAa;KAChC;IACD,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,kBAAkB,CAAC;QAC/B,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,gBAAgB,EAAE,aAAa;KAChC;IACD,KAAK,EAAE;QACL,SAAS,EAAE;YACT,oBAAoB;YACpB,4BAA4B;YAC5B,2BAA2B;YAC3B,sBAAsB;SACvB;QACD,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QAC3C,gBAAgB,EAAE,aAAa;KAChC;CACF,CAAC"}