@zenalexa/unicli 0.224.1 → 0.225.1

package/dist/engine/cookie-capture.js

@@ -0,0 +1,104 @@
+//! @owner       src::engine::cookie_capture
+//! @does        Parses response Set-Cookie headers and merges them into a request Cookie header, with same-host scoping
+//! @needs       none (pure string/URL logic)
+//! @feeds       ./steps/fetch-text, ./steps/fetch (capture_cookies option)
+//! @breaks      never throws; unparseable input yields conservative (empty / false) results
+//! @invariants  capture is host-scoped; a cross-site final URL never contributes cookies
+//! @side-effects none (pure)
+//! @perf        O(n) over the Set-Cookie line count
+//! @concurrency pure; safe to call concurrently
+//! @test        tests/unit/engine/cookie-capture.test.ts
+//! @stability   stable
+//! @since       2026-05-30
+/**
+ * Parse an array of raw `Set-Cookie` header lines into a `name → value` map.
+ * Only the leading `name=value` pair of each line is kept; cookie attributes
+ * (Path, Domain, HttpOnly, …) after the first `;` are intentionally dropped —
+ * we re-send the pair on same-host requests and do not honor attribute scoping
+ * beyond the host check performed by the caller.
+ */
+export function parseSetCookiePairs(lines) {
+    const out = {};
+    for (const line of lines) {
+        const head = line.split(";", 1)[0]?.trim() ?? "";
+        const eq = head.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const name = head.slice(0, eq).trim();
+        const value = head.slice(eq + 1).trim();
+        if (name)
+            out[name] = value;
+    }
+    return out;
+}
+/**
+ * Merge captured cookie pairs onto an existing `Cookie` request header.
+ * Existing cookies are preserved; a captured cookie of the same name wins and
+ * moves to the end. Returns the original header unchanged when nothing was
+ * captured.
+ */
+export function mergeCookieHeader(existing, captured) {
+    const capturedNames = Object.keys(captured);
+    if (capturedNames.length === 0)
+        return existing ?? "";
+    const pairs = new Map();
+    if (existing) {
+        for (const part of existing.split(";")) {
+            const seg = part.trim();
+            if (!seg)
+                continue;
+            const eq = seg.indexOf("=");
+            if (eq <= 0)
+                continue;
+            pairs.set(seg.slice(0, eq).trim(), seg.slice(eq + 1).trim());
+        }
+    }
+    // Drop survivors that a captured cookie overrides, so captured wins and
+    // appears at the end in capture order.
+    for (const name of capturedNames) {
+        pairs.delete(name);
+    }
+    const merged = [];
+    for (const [name, value] of pairs)
+        merged.push(`${name}=${value}`);
+    for (const name of capturedNames)
+        merged.push(`${name}=${captured[name]}`);
+    return merged.join("; ");
+}
+/**
+ * Conservative same-host check for cookie capture. Returns true only when the
+ * final response URL shares a registrable domain with the original request URL.
+ *
+ * Limitation (stated honestly): without a Public Suffix List we approximate the
+ * registrable domain as the last two dot-labels. This is correct for
+ * single-label TLDs (12306.cn, example.com) and ERRS ON THE SIDE OF REJECTION
+ * for multi-label eTLDs (foo.co.uk vs bar.co.uk both reduce to "co.uk" → would
+ * be treated as same; to avoid the FALSE-ACCEPT that introduces, we additionally
+ * require the full hostnames to be equal OR one to be a dot-suffix of the other).
+ * Rejecting is safe (cookies simply are not captured); false-accept would leak
+ * cookies, which we must not do.
+ */
+export function sameRegistrableHost(requestUrl, finalUrl) {
+    let reqHost;
+    let finHost;
+    try {
+        reqHost = new URL(requestUrl).hostname.toLowerCase();
+        finHost = new URL(finalUrl).hostname.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+    if (!reqHost || !finHost)
+        return false;
+    if (reqHost === finHost)
+        return true;
+    // Accept a subdomain relationship on the same registrable domain only when
+    // one host is a dot-suffix of the other (www.12306.cn ↔ kyfw.12306.cn share
+    // the suffix 12306.cn, and one is not a suffix of the other), so we compare
+    // the last-two-labels registrable domain AND require it to be non-trivial.
+    const reg = (h) => h.split(".").slice(-2).join(".");
+    const reqReg = reg(reqHost);
+    const finReg = reg(finHost);
+    return reqReg.length > 0 && reqReg === finReg;
+}
+//# sourceMappingURL=cookie-capture.js.map

package/dist/engine/cookie-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-capture.js","sourceRoot":"","sources":["../../src/engine/cookie-capture.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,wHAAwH;AACxH,6CAA6C;AAC7C,2EAA2E;AAC3E,4FAA4F;AAC5F,yFAAyF;AACzF,6BAA6B;AAC7B,oDAAoD;AACpD,gDAAgD;AAChD,yDAAyD;AACzD,uBAAuB;AACvB,2BAA2B;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IACjD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA4B,EAC5B,QAAgC;IAEhC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,IAAI,EAAE,CAAC;IAEtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YACtB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,wEAAwE;IACxE,uCAAuC;IACvC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,aAAa;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,QAAgB;IAEhB,IAAI,OAAe,CAAC;IACpB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACrD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC;AAChD,CAAC"}

package/dist/engine/cookie-extractor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-extractor.d.ts","sourceRoot":"","sources":["../../src/engine/cookie-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA+BjC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAaR"}
+{"version":3,"file":"cookie-extractor.d.ts","sourceRoot":"","sources":["../../src/engine/cookie-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAwBjC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAWR"}

package/dist/engine/cookie-extractor.js

@@ -8,22 +8,15 @@
  */
 import { writeFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
+import { cookieDir } from "./cookie-source.js";
 /**
  * Extract cookies for a domain from a running Chrome instance.
  * Connects to Chrome's CDP debug port, calls Network.getCookies,
  * and returns cookies as a flat key-value record.
  */
 export async function extractCookiesViaCDP(domain, port) {
-    const { CDPClient } = await import("../browser/cdp-client.js");
-    const rawPort = process.env.UNICLI_CDP_PORT;
-    let cdpPort = port ?? 9222;
-    if (!port && rawPort) {
-        const p = parseInt(rawPort, 10);
-        if (!Number.isInteger(p) || p < 1 || p > 65535) {
-            throw new Error(`Invalid UNICLI_CDP_PORT: "${rawPort}"`);
-        }
-        cdpPort = p;
-    }
+    const { CDPClient, resolveCdpPort } = await import("../browser/cdp-client.js");
+    const cdpPort = resolveCdpPort(port);
     const client = await CDPClient.connectToChrome(cdpPort);
     try {
         const { cookies } = (await client.send("Network.getCookies", {
@@ -52,8 +45,7 @@ export function saveCookies(site, cookies) {
     if (!/^[a-zA-Z0-9._-]+$/.test(site)) {
         throw new Error(`Invalid site name: "${site}" — only alphanumeric, dot, dash, underscore allowed`);
     }
-    const dir = process.env.UNICLI_COOKIE_DIR ??
-        join(process.env.HOME ?? "~", ".unicli", "cookies");
+    const dir = cookieDir();
     mkdirSync(dir, { recursive: true });
     const filePath = join(dir, `${site}.json`);
     writeFileSync(filePath, JSON.stringify(cookies, null, 2), "utf-8");

package/dist/engine/cookie-extractor.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-extractor.js","sourceRoot":"","sources":["../../src/engine/cookie-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYjC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,IAAa;IAEb,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC5C,IAAI,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC3D,IAAI,EAAE;gBACJ,WAAW,MAAM,EAAE;gBACnB,eAAe,MAAM,EAAE;gBACvB,UAAU,MAAM,EAAE;gBAClB,cAAc,MAAM,EAAE;aACvB;SACF,CAAC,CAA6B,CAAC;QAEhC,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,OAA+B;IAE/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,sDAAsD,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACtD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"cookie-extractor.js","sourceRoot":"","sources":["../../src/engine/cookie-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAY/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,IAAa;IAEb,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GACjC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC3D,IAAI,EAAE;gBACJ,WAAW,MAAM,EAAE;gBACnB,eAAe,MAAM,EAAE;gBACvB,UAAU,MAAM,EAAE;gBAClB,cAAc,MAAM,EAAE;aACvB;SACF,CAAC,CAA6B,CAAC;QAEhC,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,OAA+B;IAE/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,sDAAsD,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/cookie-refresh.d.ts

@@ -1,13 +1,64 @@
 /**
- * Smart Cookie Refresh — automatically refresh expired cookies via CDP.
- *
- * When an adapter gets a 401/403, this module attempts to navigate Chrome
- * to the site's main page (refreshing the session), extract fresh cookies
- * via CDP, and write them to the cookie file for subsequent requests.
+ * @owner       src::engine::cookie-refresh
+ * @does        Refreshes a site's login session by navigating Chrome to it over
+ *              CDP and re-reading cookies, surfacing the real cause of a miss
+ *              (no browser / no cookies / error) instead of a bare boolean.
+ * @needs       ./cookie-extractor (saveCookies), ../browser/page (lazy),
+ *              ../browser/cdp-client (resolveCdpPort, lazy)
+ * @feeds       src::engine::runtime (maybeRefreshCookies — the auto 401/403 path)
+ * @breaks      never throws — every failure becomes a typed SessionRefreshOutcome
+ * @invariants  navigation (page.goto) happens BEFORE reading cookies so the live
+ *              server session is rebuilt; this is the navigate-then-read refresh,
+ *              deliberately distinct from cookies.ts acquireCookies(skipDisk)
+ *              which is a pure DB/CDP read with no navigation
+ * @side-effects connects to Chrome via CDP, navigates a page, persists cookies to disk
+ * @concurrency stateless; the page is opened and closed within one call
+ * @test        tests/unit/engine/cookie-refresh.test.ts
+ * @stability   stable
+ * @since       2026-05-30
+ */
+/** The slice of a live browser page a session refresh needs. */
+export interface PageSession {
+    goto(url: string, opts: {
+        settleMs: number;
+    }): Promise<void>;
+    cookies(): Promise<Record<string, string>>;
+    close(): Promise<void>;
+}
+/** Injectable IO so the refresh policy is testable without Chrome or a network. */
+export interface SessionRefreshDeps {
+    connect(port: number): Promise<PageSession>;
+    persist(site: string, cookies: Record<string, string>): void;
+}
+/**
+ * Typed result of a refresh attempt. Names WHY a refresh did not happen instead
+ * of collapsing connect failure, an empty cookie jar, and unexpected errors all
+ * to `false` (the old behavior, which left runtime.ts unable to tell the agent
+ * what actually went wrong).
  */
+export type SessionRefreshOutcome = {
+    status: "refreshed";
+    site: string;
+    cookieCount: number;
+} | {
+    status: "no-browser";
+    detail: string;
+} | {
+    status: "no-cookies";
+    detail: string;
+} | {
+    status: "error";
+    detail: string;
+};
+export declare const defaultSessionRefreshDeps: SessionRefreshDeps;
 /**
- * Attempt to refresh cookies for a site by navigating Chrome to it.
- * Returns true if cookies were refreshed, false if not possible.
+ * Attempt to refresh cookies for a site by navigating Chrome to it and reading
+ * the resulting session cookies. Returns a typed outcome; never throws.
+ *
+ * Persistence goes through the canonical writer (saveCookies) so the on-disk
+ * format always matches what the loaders expect ({name: value}); hand-rolling
+ * the write here once emitted an array format the loaders silently rejected,
+ * leaving the adapter unauthenticated after a "successful" refresh.
  */
-export declare function refreshCookies(site: string, domain?: string): Promise<boolean>;
+export declare function refreshCookies(site: string, domain?: string, deps?: SessionRefreshDeps): Promise<SessionRefreshOutcome>;
 //# sourceMappingURL=cookie-refresh.d.ts.map

package/dist/engine/cookie-refresh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-refresh.d.ts","sourceRoot":"","sources":["../../src/engine/cookie-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CA4DlB"}
+{"version":3,"file":"cookie-refresh.d.ts","sourceRoot":"","sources":["../../src/engine/cookie-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAOxC,eAAO,MAAM,yBAAyB,EAAE,kBAGvC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,GAAE,kBAA8C,GACnD,OAAO,CAAC,qBAAqB,CAAC,CAuDhC"}

package/dist/engine/cookie-refresh.js

@@ -1,71 +1,93 @@
 /**
- * Smart Cookie Refresh — automatically refresh expired cookies via CDP.
- *
- * When an adapter gets a 401/403, this module attempts to navigate Chrome
- * to the site's main page (refreshing the session), extract fresh cookies
- * via CDP, and write them to the cookie file for subsequent requests.
+ * @owner       src::engine::cookie-refresh
+ * @does        Refreshes a site's login session by navigating Chrome to it over
+ *              CDP and re-reading cookies, surfacing the real cause of a miss
+ *              (no browser / no cookies / error) instead of a bare boolean.
+ * @needs       ./cookie-extractor (saveCookies), ../browser/page (lazy),
+ *              ../browser/cdp-client (resolveCdpPort, lazy)
+ * @feeds       src::engine::runtime (maybeRefreshCookies — the auto 401/403 path)
+ * @breaks      never throws — every failure becomes a typed SessionRefreshOutcome
+ * @invariants  navigation (page.goto) happens BEFORE reading cookies so the live
+ *              server session is rebuilt; this is the navigate-then-read refresh,
+ *              deliberately distinct from cookies.ts acquireCookies(skipDisk)
+ *              which is a pure DB/CDP read with no navigation
+ * @side-effects connects to Chrome via CDP, navigates a page, persists cookies to disk
+ * @concurrency stateless; the page is opened and closed within one call
+ * @test        tests/unit/engine/cookie-refresh.test.ts
+ * @stability   stable
+ * @since       2026-05-30
  */
-import { mkdirSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
+import { saveCookies } from "./cookie-extractor.js";
+async function defaultConnect(port) {
+    const { BrowserPage } = await import("../browser/page.js");
+    return BrowserPage.connect(port);
+}
+export const defaultSessionRefreshDeps = {
+    connect: defaultConnect,
+    persist: saveCookies,
+};
 /**
- * Attempt to refresh cookies for a site by navigating Chrome to it.
- * Returns true if cookies were refreshed, false if not possible.
+ * Attempt to refresh cookies for a site by navigating Chrome to it and reading
+ * the resulting session cookies. Returns a typed outcome; never throws.
+ *
+ * Persistence goes through the canonical writer (saveCookies) so the on-disk
+ * format always matches what the loaders expect ({name: value}); hand-rolling
+ * the write here once emitted an array format the loaders silently rejected,
+ * leaving the adapter unauthenticated after a "successful" refresh.
  */
-export async function refreshCookies(site, domain) {
+export async function refreshCookies(site, domain, deps = defaultSessionRefreshDeps) {
+    let port;
+    try {
+        const { resolveCdpPort } = await import("../browser/cdp-client.js");
+        port = resolveCdpPort();
+    }
+    catch (err) {
+        return {
+            status: "error",
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+    let page;
     try {
-        const { BrowserPage: BP } = await import("../browser/page.js");
-        // Try connecting to an existing Chrome instance
-        let port = 9222;
-        const rawPort = process.env.UNICLI_CDP_PORT;
-        if (rawPort) {
-            const p = parseInt(rawPort, 10);
-            if (Number.isInteger(p) && p >= 1 && p <= 65535) {
-                port = p;
-            }
+        page = await deps.connect(port);
+    }
+    catch (err) {
+        return {
+            status: "no-browser",
+            detail: `Could not connect to Chrome on CDP port ${port}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    try {
+        const targetUrl = domain ? `https://${domain}` : `https://www.${site}.com`;
+        await page.goto(targetUrl, { settleMs: 3000 });
+        const cookies = await page.cookies();
+        if (Object.keys(cookies).length === 0) {
+            return {
+                status: "no-cookies",
+                detail: `No cookies present for ${site} after navigating to ${targetUrl}`,
+            };
         }
-        let page;
+        deps.persist(site, cookies);
+        return {
+            status: "refreshed",
+            site,
+            cookieCount: Object.keys(cookies).length,
+        };
+    }
+    catch (err) {
+        return {
+            status: "error",
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+    finally {
         try {
-            page = await BP.connect(port);
+            await page.close();
         }
         catch {
-            // No Chrome CDP available — cannot refresh
-            return false;
+            // REASON: page close is best-effort cleanup; a close failure must not
+            // override the refresh outcome already determined above.
         }
-        try {
-            // Navigate to the site's main page to refresh session
-            const targetUrl = domain
-                ? `https://${domain}`
-                : `https://www.${site}.com`;
-            await page.goto(targetUrl, { settleMs: 3000 });
-            // Extract cookies
-            const cookies = await page.cookies();
-            if (Object.keys(cookies).length === 0) {
-                return false;
-            }
-            // Write cookies to file
-            const cookiesDir = join(homedir(), ".unicli", "cookies");
-            mkdirSync(cookiesDir, { recursive: true });
-            const cookieArray = Object.entries(cookies).map(([name, value]) => ({
-                name,
-                value,
-                domain: domain ?? `${site}.com`,
-            }));
-            const cookiePath = join(cookiesDir, `${site}.json`);
-            writeFileSync(cookiePath, JSON.stringify(cookieArray, null, 2), "utf-8");
-            return true;
-        }
-        finally {
-            try {
-                await page.close();
-            }
-            catch {
-                /* best effort */
-            }
-        }
-    }
-    catch {
-        return false;
     }
 }
 //# sourceMappingURL=cookie-refresh.js.map

package/dist/engine/cookie-refresh.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-refresh.js","sourceRoot":"","sources":["../../src/engine/cookie-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,MAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAE/D,gDAAgD;QAChD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBAChD,IAAI,GAAG,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,sDAAsD;YACtD,MAAM,SAAS,GAAG,MAAM;gBACtB,CAAC,CAAC,WAAW,MAAM,EAAE;gBACrB,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC;YAE9B,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/C,kBAAkB;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACzD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,IAAI;gBACJ,KAAK;gBACL,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM;aAChC,CAAC,CAAC,CAAC;YAEJ,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;YACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEzE,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"cookie-refresh.js","sourceRoot":"","sources":["../../src/engine/cookie-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AA2BpD,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,MAAe,EACf,OAA2B,yBAAyB;IAEpD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,GAAG,cAAc,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,2CAA2C,IAAI,KACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;SACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC;QAC3E,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,0BAA0B,IAAI,wBAAwB,SAAS,EAAE;aAC1E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;SACzC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,yDAAyD;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/engine/cookie-source.d.ts

@@ -0,0 +1,110 @@
+/**
+ * @owner       src::engine::cookie-source
+ * @does        Multi-source cookie acquisition that surfaces the REAL cause of a
+ *              miss (keychain denied / corrupt file / v20 encryption / CDP
+ *              unavailable) as a typed outcome, instead of collapsing every
+ *              failure to null.
+ * @needs       node:fs, node:path, ./chromium-cookies (lazy), ./cookie-extractor (lazy)
+ * @feeds       src::engine::cookies (loadCookies/loadCookiesWithCDP/acquireCookies
+ *              projections), src::engine::executor (auth error detail)
+ * @breaks      never throws from loadCookiesWithDiagnostics — failures become
+ *              CookieLoadOutcome {status:"error", reasons}; readDiskCookies is total
+ * @invariants  exactly one of loaded|absent|error; "absent" ⇒ no source errored
+ *              (genuinely not logged in); "error" ⇒ ≥1 source had a real failure
+ * @side-effects readDiskCookies reads fs; default sources read browser DB / CDP
+ * @perf        disk O(file); browser tries installed browsers in order, stops on hit
+ * @concurrency stateless; sources own their own IO
+ * @test        tests/unit/engine/cookie-source.test.ts
+ * @stability   experimental
+ * @since       2026-05-30
+ */
+export type CookieSourceName = "disk" | "browser" | "cdp";
+/** A typed failure cause from one acquisition source. */
+export interface CookieReason {
+    source: CookieSourceName;
+    /** Stable code, e.g. corrupt_file | keychain_denied | encryption_unsupported | cdp_unavailable. */
+    code: string;
+    detail: string;
+}
+/**
+ * Result of trying every cookie source for a site. Discriminated so callers
+ * cannot confuse "genuinely not logged in" (absent) with "Keychain denied /
+ * file corrupt / Chrome v20" (error) — the distinction the old null collapse
+ * destroyed.
+ */
+export type CookieLoadOutcome = {
+    status: "loaded";
+    source: CookieSourceName;
+    cookies: Record<string, string>;
+} | {
+    status: "absent";
+} | {
+    status: "error";
+    reasons: CookieReason[];
+};
+/** Disk read distinguishes absent (fine) from corrupt (a real, surfaceable fault). */
+export type DiskRead = {
+    kind: "ok";
+    cookies: Record<string, string>;
+} | {
+    kind: "absent";
+} | {
+    kind: "corrupt";
+    detail: string;
+};
+/** Browser read across installed browsers: a hit, a clean miss, or real errors. */
+export type BrowserAttempt = {
+    kind: "ok";
+    cookies: Record<string, string>;
+} | {
+    kind: "none";
+} | {
+    kind: "error";
+    reasons: CookieReason[];
+};
+/**
+ * Injectable acquisition sources. The default wires the real fs / browser DB /
+ * CDP; tests pass fakes so the whole policy is verifiable without a network,
+ * Keychain, or browser.
+ */
+export interface CookieSources {
+    readDisk(site: string): DiskRead;
+    readBrowser(domain: string): Promise<BrowserAttempt>;
+    readCdp(domain: string): Promise<Record<string, string>>;
+}
+export declare function cookieDir(): string;
+/**
+ * Read the on-disk cookie file, distinguishing absent from corrupt. The old
+ * loadCookies collapsed a truncated / wrong-shaped file to null ("no auth"),
+ * hiding the real cause; this returns a typed corrupt with a detail.
+ */
+export declare function readDiskCookies(site: string): DiskRead;
+/** Resolve the cookie domain the same way the legacy loader did. */
+export declare function resolveCookieDomain(site: string, domain?: string): string;
+export declare const defaultCookieSources: CookieSources;
+/**
+ * Acquire cookies across disk → browser → CDP, collecting the real cause of
+ * each source's failure. Never throws: a miss with no underlying fault is
+ * "absent"; a miss where a source actually errored (Keychain denial, corrupt
+ * file, v20 encryption, CDP down) is "error" with the reasons.
+ *
+ * Domain precedence and the disk-first / browser / CDP order match the legacy
+ * loadCookiesWithCDP exactly, so the projection wrappers preserve behavior.
+ */
+export declare function loadCookiesWithDiagnostics(site: string, domain?: string, sources?: CookieSources, opts?: {
+    skipDisk?: boolean;
+}): Promise<CookieLoadOutcome>;
+/**
+ * Turn a non-loaded outcome into an agent-actionable message + suggestion.
+ * This is where the no-silent-failure win is spent: Keychain denial, v20
+ * encryption, and a corrupt file each get a DISTINCT next step instead of the
+ * legacy one-size-fits-all "run unicli auth setup".
+ */
+export declare function describeCookieFailure(outcome: Exclude<CookieLoadOutcome, {
+    status: "loaded";
+}>, site: string, domain?: string): {
+    message: string;
+    suggestion: string;
+    retryable: boolean;
+};
+//# sourceMappingURL=cookie-source.d.ts.map

package/dist/engine/cookie-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-source.d.ts","sourceRoot":"","sources":["../../src/engine/cookie-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAE1D,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,GACD;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC;AAEjD,sFAAsF;AACtF,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,mFAAmF;AACnF,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1D;AAID,wBAAgB,SAAS,IAAI,MAAM,CAKlC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAyBtD;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAIzE;AA8CD,eAAO,MAAM,oBAAoB,EAAE,aAIlC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,aAAoC,EAC7C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,iBAAiB,CAAC,CA8C5B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC,EACzD,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CA0B7D"}