botmux 3.4.2 → 3.5.0

package/dist/platform/secure-host-file.js

@@ -2,11 +2,13 @@
  * Strict host-authority file primitives.
  *
  * Unlike general dotfiles, machine/device credentials must never follow a
- * leaf symlink. Reads pin one inode with O_NOFOLLOW, writes canonicalize only
- * the parent and atomically replace the leaf, and the containing directory
- * must not be writable by group/other users.
+ * leaf symlink. Linux pins the containing directory while operating on the
+ * leaf; other platforms require a non-replaceable ancestor chain. All writes
+ * atomically replace the leaf, and its directory must be owned by the current
+ * user without group/other write access.
  */
-import { closeSync, constants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, statSync, unlinkSync, } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { closeSync, constants, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { basename, dirname, join } from 'node:path';
 import { atomicWriteFileSync } from '../utils/atomic-write.js';
 export class UnsafeHostAuthorityFileError extends Error {
@@ -25,6 +27,15 @@ function assertOwnedByCurrentUser(stats, label) {
         throw new UnsafeHostAuthorityFileError(`${label} 不属于当前用户`);
     }
 }
+function assertSecureParentStats(stats) {
+    if (!stats.isDirectory()) {
+        throw new UnsafeHostAuthorityFileError('宿主凭证目录不是普通目录');
+    }
+    assertOwnedByCurrentUser(stats, '宿主凭证目录');
+    if (process.platform !== 'win32' && (stats.mode & 0o022) !== 0) {
+        throw new UnsafeHostAuthorityFileError('宿主凭证目录可被组内或其它用户写入');
+    }
+}
 /**
  * A 0700 credential directory is still replaceable when one of its ancestors
  * is writable by another user. Walk the canonical chain so later path-based
@@ -64,22 +75,69 @@ function assertAncestorChainCannotReplace(canonicalParent) {
         childStats = ancestorStats;
     }
 }
-/** Create/resolve the parent without ever resolving the final path component. */
-export function secureHostFilePath(filePath) {
+function canonicalSecureHostParent(filePath) {
     const parent = dirname(filePath);
     mkdirSync(parent, { recursive: true, mode: 0o700 });
     const canonicalParent = realpathSync(parent);
     const parentStats = statSync(canonicalParent);
-    if (!parentStats.isDirectory()) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证目录不是普通目录');
-    }
-    assertOwnedByCurrentUser(parentStats, '宿主凭证目录');
-    if (process.platform !== 'win32' && (parentStats.mode & 0o022) !== 0) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证目录可被组内或其它用户写入');
-    }
+    assertSecureParentStats(parentStats);
+    return canonicalParent;
+}
+/** Create/resolve the parent without ever resolving the final path component. */
+export function secureHostFilePath(filePath) {
+    const canonicalParent = canonicalSecureHostParent(filePath);
     assertAncestorChainCannotReplace(canonicalParent);
     return join(canonicalParent, basename(filePath));
 }
+/**
+ * Linux exposes an opened directory through /proc/self/fd. Keeping that
+ * directory descriptor open makes all leaf operations independent of later
+ * ancestor renames: an untrusted mount-point owner can still cause denial of
+ * service, but cannot redirect a credential write into a directory it reads.
+ *
+ * Other platforms retain the conservative ancestor-chain requirement until
+ * they have an equivalent descriptor-relative primitive.
+ */
+function acquireSecureHostParent(filePath) {
+    const canonicalParent = canonicalSecureHostParent(filePath);
+    if (process.platform !== 'linux') {
+        assertAncestorChainCannotReplace(canonicalParent);
+        return { path: canonicalParent };
+    }
+    const fd = openSync(canonicalParent, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        const openedStats = fstatSync(fd);
+        assertSecureParentStats(openedStats);
+        const anchoredPath = `/proc/self/fd/${fd}`;
+        let anchoredStats;
+        try {
+            anchoredStats = statSync(anchoredPath);
+        }
+        catch {
+            // Minimal/chrooted Linux environments may not mount procfs. Preserve
+            // the old fail-closed path validation there.
+            closeSync(fd);
+            assertAncestorChainCannotReplace(canonicalParent);
+            return { path: canonicalParent };
+        }
+        if (!sameInode(openedStats, anchoredStats)) {
+            throw new UnsafeHostAuthorityFileError('宿主凭证目录句柄发生变化');
+        }
+        return { path: anchoredPath, fd };
+    }
+    catch (error) {
+        try {
+            closeSync(fd);
+        }
+        catch { /* best effort */ }
+        throw error;
+    }
+}
+function releaseSecureHostParent(parent) {
+    if (parent.fd === undefined)
+        return;
+    closeSync(parent.fd);
+}
 function assertSecureFileStats(stats, maxBytes) {
     if (!stats.isFile()) {
         throw new UnsafeHostAuthorityFileError('宿主凭证必须是普通文件');
@@ -92,17 +150,8 @@ function assertSecureFileStats(stats, maxBytes) {
         throw new UnsafeHostAuthorityFileError('宿主凭证文件大小异常');
     }
 }
-/** Return null only for a genuinely absent leaf; unsafe shapes fail closed. */
-export function readSecureHostFileSync(filePath, maxBytes = 64 * 1024) {
-    try {
-        lstatSync(dirname(filePath));
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return null;
-        throw error;
-    }
-    const resolved = secureHostFilePath(filePath);
+function readSecureHostFileFromParentSync(parent, leafName, maxBytes) {
+    const resolved = join(parent.path, leafName);
     let fd;
     try {
         const flags = process.platform === 'win32'
@@ -139,44 +188,114 @@ export function readSecureHostFileSync(filePath, maxBytes = 64 * 1024) {
         closeSync(fd);
     }
 }
+/** Return null only for a genuinely absent leaf; unsafe shapes fail closed. */
+export function readSecureHostFileSync(filePath, maxBytes = 64 * 1024) {
+    try {
+        lstatSync(dirname(filePath));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    const parent = acquireSecureHostParent(filePath);
+    try {
+        return readSecureHostFileFromParentSync(parent, basename(filePath), maxBytes);
+    }
+    finally {
+        releaseSecureHostParent(parent);
+    }
+}
+function writePinnedSecureHostFileSync(parent, directoryFd, leafName, data) {
+    const resolved = join(parent.path, leafName);
+    const tmp = join(parent.path, `${leafName}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`);
+    let fd;
+    try {
+        fd = openSync(tmp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        writeFileSync(fd, data, { encoding: 'utf8' });
+        fchmodSync(fd, 0o600);
+        fsyncSync(fd);
+        closeSync(fd);
+        fd = undefined;
+        renameSync(tmp, resolved);
+        fsyncSync(directoryFd);
+    }
+    catch (error) {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* best effort */ }
+        }
+        try {
+            unlinkSync(tmp);
+        }
+        catch { /* best effort */ }
+        throw error;
+    }
+}
 /** Strict, durable atomic replace that never follows a leaf symlink. */
 export function writeSecureHostFileSync(filePath, data) {
-    const resolved = secureHostFilePath(filePath);
-    let leafExists = false;
+    const parent = acquireSecureHostParent(filePath);
+    const leafName = basename(filePath);
+    const resolved = join(parent.path, leafName);
     try {
-        lstatSync(resolved);
-        leafExists = true;
+        let leafExists = false;
+        try {
+            lstatSync(resolved);
+            leafExists = true;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        if (leafExists) {
+            // Pin and validate the existing leaf before replacement. The final
+            // rename never follows a leaf symlink.
+            readSecureHostFileFromParentSync(parent, leafName, 64 * 1024);
+        }
+        if (parent.fd !== undefined) {
+            writePinnedSecureHostFileSync(parent, parent.fd, leafName, data);
+        }
+        else {
+            atomicWriteFileSync(resolved, data, {
+                mode: 0o600,
+                durable: true,
+                followTargetSymlink: false,
+            });
+        }
+    }
+    finally {
+        releaseSecureHostParent(parent);
     }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-    }
-    if (leafExists) {
-        // Pin and validate the existing leaf before replacement. The final rename
-        // never follows a leaf symlink, so a later swap cannot redirect the write.
-        readSecureHostFileSync(resolved);
-    }
-    atomicWriteFileSync(resolved, data, {
-        mode: 0o600,
-        durable: true,
-        followTargetSymlink: false,
-    });
 }
 /** Strict durable unlink. Returns false only if the leaf is absent. */
 export function unlinkSecureHostFileSync(filePath) {
-    const resolved = secureHostFilePath(filePath);
-    if (readSecureHostFileSync(resolved) === null)
-        return false;
-    unlinkSync(resolved);
-    if (process.platform !== 'win32') {
-        const fd = openSync(dirname(resolved), constants.O_RDONLY);
-        try {
-            fsyncSync(fd);
-        }
-        finally {
-            closeSync(fd);
+    const parent = acquireSecureHostParent(filePath);
+    const leafName = basename(filePath);
+    const resolved = join(parent.path, leafName);
+    try {
+        if (readSecureHostFileFromParentSync(parent, leafName, 64 * 1024) === null)
+            return false;
+        unlinkSync(resolved);
+        if (process.platform !== 'win32') {
+            if (parent.fd !== undefined) {
+                fsyncSync(parent.fd);
+            }
+            else {
+                const fd = openSync(parent.path, constants.O_RDONLY);
+                try {
+                    fsyncSync(fd);
+                }
+                finally {
+                    closeSync(fd);
+                }
+            }
         }
+        return true;
+    }
+    finally {
+        releaseSecureHostParent(parent);
     }
-    return true;
 }
 //# sourceMappingURL=secure-host-file.js.map

package/dist/platform/secure-host-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"secure-host-file.js","sourceRoot":"","sources":["../../src/platform/secure-host-file.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,SAAS,CAChB,IAAkD,EAClD,KAAmD;IAEnD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA8B,EAAE,KAAa;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CAAC,eAAuB;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,eAAe,CAAC;IAChC,IAAI,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAErC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,sBAAsB,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;eAC1D,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,oBAAoB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,sBAAsB,IAAI,oBAAoB,EAAE,CAAC;YACnD,MAAM,mBAAmB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;mBAC1D,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;mBAC/B,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,SAAS,GAAG,YAAY,CAAC;QACzB,UAAU,GAAG,aAAa,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,wBAAwB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IAC9D,CAAC;IACD,gCAAgC,CAAC,eAAe,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAE,QAAgB;IAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,4BAA4B,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IACD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,IAAI,4BAA4B,CAAC,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACxC,CAAC,CAAC,SAAS,CAAC,QAAQ;YACpB,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAC9C,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;eACtB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACnC,CAAC;YACD,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,IAAY;IACpE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,0EAA0E;QAC1E,2EAA2E;QAC3E,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE;QAClC,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,IAAI;QACb,mBAAmB,EAAE,KAAK;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,sBAAsB,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"secure-host-file.js","sourceRoot":"","sources":["../../src/platform/secure-host-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,SAAS,CAChB,IAAkD,EAClD,KAAmD;IAEnD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA8B,EAAE,KAAa;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA8B;IAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CAAC,eAAuB;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,eAAe,CAAC;IAChC,IAAI,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAErC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,sBAAsB,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;eAC1D,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,oBAAoB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,sBAAsB,IAAI,oBAAoB,EAAE,CAAC;YACnD,MAAM,mBAAmB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;mBAC1D,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;mBAC/B,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,SAAS,GAAG,YAAY,CAAC;QACzB,UAAU,GAAG,aAAa,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,eAAe,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC5D,gCAAgC,CAAC,eAAe,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC;AAOD;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,MAAM,eAAe,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,gCAAgC,CAAC,eAAe,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CACjB,eAAe,EACf,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAClE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,iBAAiB,EAAE,EAAE,CAAC;QAC3C,IAAI,aAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,6CAA6C;YAC7C,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,gCAAgC,CAAC,eAAe,CAAC,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO;IACpC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAE,QAAgB;IAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,4BAA4B,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IACD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,IAAI,4BAA4B,CAAC,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,MAAwB,EACxB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACxC,CAAC,CAAC,SAAS,CAAC,QAAQ;YACpB,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAC9C,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;eACtB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACnC,CAAC;YACD,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,gCAAgC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAwB,EACxB,WAAmB,EACnB,QAAgB,EAChB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CACd,MAAM,CAAC,IAAI,EACX,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnE,CAAC;IACF,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CACX,GAAG,EACH,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,SAAS,CAAC;QACf,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1B,SAAS,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,IAAY;IACpE,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,mEAAmE;YACnE,uCAAuC;YACvC,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5B,6BAA6B,CAC3B,MAAM,EACN,MAAM,CAAC,EAAE,EACT,QAAQ,EACR,IAAI,CACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAClC,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,IAAI;gBACb,mBAAmB,EAAE,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzF,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC5B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/services/codex-app-threads.d.ts

@@ -16,5 +16,52 @@ export interface ListCodexAppThreadsOptions {
     searchTerm?: string;
     timeoutMs?: number;
 }
+export interface SetCodexAppThreadNameOptions {
+    threadId: string;
+    name: string;
+    codexBin?: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    detached?: boolean;
+    waitForExistingPreview?: boolean;
+    waitForUpdatedAfter?: number;
+    registerForceClose?: (forceClose: () => void) => (() => void);
+}
+export interface ReadCodexAppThreadMetadataOptions {
+    threadId: string;
+    codexBin?: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    detached?: boolean;
+    registerForceClose?: (forceClose: () => void) => (() => void);
+}
+export interface GenerateCodexAppThreadTitleOptions {
+    sourceText: string;
+    codexBin?: string;
+    env?: NodeJS.ProcessEnv;
+    model?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    detached?: boolean;
+    registerForceClose?: (forceClose: () => void) => (() => void);
+}
+export interface CodexAppThreadMetadata {
+    name?: string;
+    preview?: string;
+    updatedAt?: number;
+}
+/**
+ * 在隔离的临时 Codex 线程中生成语义标题。
+ * 任意协议、模型或清理失败都回退为 undefined，不能影响真正的用户会话。
+ */
+export declare function generateCodexAppThreadTitle(opts: GenerateCodexAppThreadTitleOptions): Promise<string | undefined>;
 export declare function listCodexAppThreads(opts?: ListCodexAppThreadsOptions): Promise<CodexAppThreadSummary[]>;
+/** 等待首条消息预览落盘后设置最终标题；预览缺失时超时兜底写入。 */
+export declare function setCodexAppThreadName(opts: SetCodexAppThreadNameOptions): Promise<void>;
+/** 读取 resume 前的线程更新时间，用于等待下一次 append 的元数据补丁完成。 */
+export declare function readCodexAppThreadMetadata(opts: ReadCodexAppThreadMetadataOptions): Promise<CodexAppThreadMetadata>;
 //# sourceMappingURL=codex-app-threads.d.ts.map

package/dist/services/codex-app-threads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-app-threads.d.ts","sourceRoot":"","sources":["../../src/services/codex-app-threads.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuID,wBAAsB,mBAAmB,CAAC,IAAI,GAAE,0BAA+B,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAqBjH"}
+{"version":3,"file":"codex-app-threads.d.ts","sourceRoot":"","sources":["../../src/services/codex-app-threads.ts"],"names":[],"mappings":"AAmFA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAocD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,kCAAkC,GACvC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoE7B;AAED,wBAAsB,mBAAmB,CAAC,IAAI,GAAE,0BAA+B,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAqBjH;AAED,qCAAqC;AACrC,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC7F;AAED,kDAAkD;AAClD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,iCAAiC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAkBjC"}