codex-multi-auth 0.1.0

package/dist/lib/codex-cli/state.js

@@ -0,0 +1,470 @@
+import { existsSync, promises as fs } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { decodeJWT } from "../auth/auth.js";
+import { extractAccountEmail, extractAccountId } from "../auth/token-utils.js";
+import { createLogger } from "../logger.js";
+import { sleep } from "../utils.js";
+import { incrementCodexCliMetric, makeAccountFingerprint, } from "./observability.js";
+const log = createLogger("codex-cli-state");
+const CACHE_TTL_MS = 5_000;
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM"]);
+let cache = null;
+let cacheLoadedAt = 0;
+let inFlightLoadPromise = null;
+const emittedWarnings = new Set();
+function isRetryableFsError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_FS_CODES.has(code);
+}
+async function retryFsOperation(task, attempts = 4) {
+    let lastError;
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        try {
+            return await task();
+        }
+        catch (error) {
+            lastError = error;
+            if (!isRetryableFsError(error) || attempt >= attempts - 1) {
+                throw error;
+            }
+            await sleep(10 * 2 ** attempt);
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error("filesystem retry exhausted");
+}
+function isRecord(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function readTrimmedString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function normalizeEmail(value) {
+    const email = readTrimmedString(value);
+    return email ? email.toLowerCase() : undefined;
+}
+function readBoolean(value) {
+    if (typeof value === "boolean")
+        return value;
+    if (typeof value === "string") {
+        const lc = value.trim().toLowerCase();
+        if (lc === "true" || lc === "1")
+            return true;
+        if (lc === "false" || lc === "0")
+            return false;
+    }
+    return undefined;
+}
+function readNumber(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    if (typeof value === "string") {
+        const parsed = Number(value);
+        if (Number.isFinite(parsed))
+            return parsed;
+    }
+    return undefined;
+}
+function extractTokenFromRecord(record, keys) {
+    for (const key of keys) {
+        const token = readTrimmedString(record[key]);
+        if (token)
+            return token;
+    }
+    return undefined;
+}
+function extractAccountSnapshot(raw) {
+    if (!isRecord(raw))
+        return null;
+    const auth = isRecord(raw.auth) ? raw.auth : undefined;
+    const tokens = auth && isRecord(auth.tokens) ? auth.tokens : undefined;
+    const accessToken = extractTokenFromRecord(raw, ["accessToken", "access_token"]) ??
+        (tokens ? extractTokenFromRecord(tokens, ["access_token", "accessToken"]) : undefined);
+    const refreshToken = extractTokenFromRecord(raw, ["refreshToken", "refresh_token"]) ??
+        (tokens ? extractTokenFromRecord(tokens, ["refresh_token", "refreshToken"]) : undefined);
+    const accountId = readTrimmedString(raw.accountId) ??
+        readTrimmedString(raw.account_id) ??
+        readTrimmedString(raw.workspace_id) ??
+        readTrimmedString(raw.organization_id) ??
+        readTrimmedString(raw.id);
+    const email = normalizeEmail(raw.email) ??
+        normalizeEmail(raw.user_email) ??
+        normalizeEmail(raw.username);
+    const expiresAtRaw = readNumber(raw.expiresAt) ??
+        readNumber(raw.expires_at) ??
+        (tokens ? readNumber(tokens.expires_at) : undefined);
+    let expiresAt = expiresAtRaw;
+    if (!expiresAt && accessToken) {
+        const decoded = decodeJWT(accessToken);
+        const exp = decoded?.exp;
+        if (typeof exp === "number" && Number.isFinite(exp)) {
+            expiresAt = exp * 1000;
+        }
+    }
+    const isActive = readBoolean(raw.active) ??
+        readBoolean(raw.isActive) ??
+        readBoolean(raw.is_active);
+    if (!accessToken && !refreshToken) {
+        return null;
+    }
+    return {
+        email,
+        accountId,
+        accessToken: accessToken ?? "",
+        refreshToken,
+        expiresAt,
+        isActive,
+    };
+}
+/**
+ * Determines whether Codex CLI sync is enabled based on environment variables.
+ *
+ * Checks CODEX_MULTI_AUTH_SYNC_CODEX_CLI first (explicit "1" enables, "0" disables),
+ * then falls back to the legacy CODEX_AUTH_SYNC_CODEX_CLI (also "1"/"0"). If the
+ * legacy variable is used, a single warning is emitted and a metric is incremented.
+ *
+ * Concurrency: the function may perform a one-time side effect (emitting a legacy-use
+ * warning and incrementing a metric); that side effect is guarded to run at most once
+ * per process and is safe to call from concurrent contexts.
+ *
+ * Filesystem and tokens: this function does not access the filesystem and does not
+ * read or log any tokens (no token redaction is required here).
+ *
+ * @returns `true` if sync is enabled, `false` otherwise.
+ */
+export function isCodexCliSyncEnabled() {
+    const override = (process.env.CODEX_MULTI_AUTH_SYNC_CODEX_CLI ?? "").trim();
+    if (override === "0")
+        return false;
+    if (override === "1")
+        return true;
+    const legacy = (process.env.CODEX_AUTH_SYNC_CODEX_CLI ?? "").trim();
+    if (legacy.length > 0 && !emittedWarnings.has("legacy-sync-env")) {
+        emittedWarnings.add("legacy-sync-env");
+        incrementCodexCliMetric("legacySyncEnvUses");
+        log.warn("Using legacy CODEX_AUTH_SYNC_CODEX_CLI. Prefer CODEX_MULTI_AUTH_SYNC_CODEX_CLI.");
+    }
+    if (legacy === "0")
+        return false;
+    if (legacy === "1")
+        return true;
+    return true;
+}
+/**
+ * Resolves the filesystem path to the Codex CLI accounts file.
+ *
+ * If the environment variable CODEX_CLI_ACCOUNTS_PATH is set to a non-empty value it will be returned; otherwise the default is "$HOME/.codex/accounts.json".
+ *
+ * Concurrency: callers should treat the returned path as a location that may be concurrently read or written by other processes.
+ * Windows: returns a path using the platform path separators (may contain backslashes on Windows).
+ * Token redaction: this function only returns the file path; it does not read or expose token contents and callers must redact sensitive fields when logging the file contents.
+ *
+ * @returns The resolved path to the accounts JSON file, either the overridden value from CODEX_CLI_ACCOUNTS_PATH or the platform-specific "$HOME/.codex/accounts.json".
+ */
+export function getCodexCliAccountsPath() {
+    const override = (process.env.CODEX_CLI_ACCOUNTS_PATH ?? "").trim();
+    if (override.length > 0)
+        return override;
+    return join(homedir(), ".codex", "accounts.json");
+}
+/**
+ * Resolve the filesystem path for the Codex CLI auth JSON file, allowing an environment override.
+ *
+ * If the environment variable `CODEX_CLI_AUTH_PATH` is set to a non-empty value (after trimming) that value is returned;
+ * otherwise the default path is homedir/.codex/auth.json. The returned path may reference a file containing authentication tokens—
+ * treat it as sensitive (avoid logging full paths or file contents without redaction). The function returns a platform-native path
+ * (path separators follow the current OS); callers should handle concurrent access to the file when reading or writing.
+ *
+ * @returns The resolved path to the Codex CLI `auth.json` file.
+ */
+export function getCodexCliAuthPath() {
+    const override = (process.env.CODEX_CLI_AUTH_PATH ?? "").trim();
+    if (override.length > 0)
+        return override;
+    return join(homedir(), ".codex", "auth.json");
+}
+/**
+ * Convert a parsed Codex CLI accounts JSON payload into a CodexCliState snapshot.
+ *
+ * Parses the provided JSON object expected to contain an `accounts` array and optional metadata, producing a state object that includes accounts, active account/email if present, `syncVersion`, and the optional `sourceUpdatedAtMs`. The supplied `path` is recorded as-is and is not normalized (may be a Unix or Windows path). This function performs no synchronization or locking and may produce stale results relative to on-disk changes. Tokens are copied verbatim from the payload and are not redacted; callers must redact sensitive values before logging or exposing the returned state.
+ *
+ * @param path - Filesystem path of the source payload; path separators are preserved and not normalized.
+ * @param parsed - The already-parsed JSON value expected to contain an `accounts` array and optional metadata.
+ * @param sourceUpdatedAtMs - Optional source modification timestamp (milliseconds) to attach to the returned state.
+ * @returns A populated `CodexCliState` when `parsed` contains a valid `accounts` array, or `null` when the payload is not in the expected shape.
+ */
+function parseCodexCliState(path, parsed, sourceUpdatedAtMs) {
+    if (!isRecord(parsed) || !Array.isArray(parsed.accounts)) {
+        return null;
+    }
+    const accounts = parsed.accounts
+        .map((entry) => extractAccountSnapshot(entry))
+        .filter((entry) => entry !== null);
+    let activeAccountId = readTrimmedString(parsed.activeAccountId) ??
+        readTrimmedString(parsed.active_account_id);
+    let activeEmail = normalizeEmail(parsed.activeEmail) ??
+        normalizeEmail(parsed.active_email);
+    if (!activeAccountId && !activeEmail) {
+        const activeFromList = accounts.find((account) => account.isActive);
+        if (activeFromList) {
+            activeAccountId = activeFromList.accountId;
+            activeEmail = activeFromList.email;
+        }
+    }
+    return {
+        path,
+        accounts,
+        activeAccountId,
+        activeEmail,
+        syncVersion: readNumber(parsed.codexMultiAuthSyncVersion),
+        sourceUpdatedAtMs,
+    };
+}
+/**
+ * Parse an auth-style Codex CLI payload into a CodexCliState snapshot.
+ *
+ * The returned state represents a point-in-time conversion of the provided payload and may include raw tokens
+ * and derived metadata (account id, email, expiration, sync version, and optional sourceUpdatedAtMs).
+ *
+ * Concurrency: the result reflects the payload at the time of parsing; callers should not assume it remains
+ * valid if the underlying file changes concurrently.
+ *
+ * Windows/filesystem note: filesystem-derived timestamps (sourceUpdatedAtMs) may be coarse or approximate on some
+ * platforms (notably Windows); treat them as best-effort indicators of source modification time.
+ *
+ * Token handling: the returned state includes raw access/refresh tokens. Callers must redact or avoid logging tokens
+ * or other sensitive fields when emitting logs, telemetry, or external diagnostics.
+ *
+ * @param path - Filesystem path that served as the source of `parsed`; stored verbatim on the returned state.
+ * @param parsed - The parsed JSON payload from an auth-style file; expected to contain a `tokens` object.
+ * @param sourceUpdatedAtMs - Optional best-effort source modification timestamp (milliseconds since epoch).
+ * @returns A CodexCliState built from the auth payload, or `null` if `parsed` is not a valid auth payload containing no tokens.
+ */
+function parseCodexCliAuthState(path, parsed, sourceUpdatedAtMs) {
+    if (!isRecord(parsed))
+        return null;
+    const tokens = isRecord(parsed.tokens) ? parsed.tokens : null;
+    if (!tokens)
+        return null;
+    const accessToken = extractTokenFromRecord(tokens, ["access_token", "accessToken"]);
+    const refreshToken = extractTokenFromRecord(tokens, ["refresh_token", "refreshToken"]);
+    if (!accessToken && !refreshToken)
+        return null;
+    const idToken = extractTokenFromRecord(tokens, ["id_token", "idToken"]);
+    const accountId = readTrimmedString(tokens.account_id) ??
+        readTrimmedString(tokens.accountId) ??
+        (accessToken ? extractAccountId(accessToken) : undefined);
+    const email = (accessToken ? extractAccountEmail(accessToken, idToken) : undefined) ??
+        normalizeEmail(parsed.email);
+    let expiresAt = undefined;
+    if (accessToken) {
+        const decoded = decodeJWT(accessToken);
+        const exp = decoded?.exp;
+        if (typeof exp === "number" && Number.isFinite(exp)) {
+            expiresAt = exp * 1000;
+        }
+    }
+    const snapshot = {
+        accountId,
+        email,
+        accessToken: accessToken ?? "",
+        refreshToken,
+        expiresAt,
+        isActive: true,
+    };
+    return {
+        path,
+        accounts: [snapshot],
+        activeAccountId: accountId,
+        activeEmail: email,
+        syncVersion: readNumber(parsed.codexMultiAuthSyncVersion),
+        sourceUpdatedAtMs,
+    };
+}
+/**
+ * Loads Codex CLI authentication state from disk, with an in-memory TTL cache and optional force refresh.
+ *
+ * Reads either the accounts JSON or the legacy auth JSON (whichever is present) and returns a normalized
+ * CodexCliState including tokens, active account, optional sync version, and source file modification time.
+ * Uses an in-memory cache valid for CACHE_TTL_MS; if `forceRefresh` is true the cache is bypassed.
+ *
+ * Concurrency: callers may race to read/update the in-memory cache; this function performs best-effort caching
+ * and does not provide external synchronization primitives.
+ *
+ * Windows filesystem notes: file modification timestamps (sourceUpdatedAtMs) are derived from fs.stat().mtimeMs
+ * and may have coarser resolution on some Windows filesystems.
+ *
+ * Token redaction: returned state may contain token values (accessToken, refreshToken); consumers should treat
+ * these values as sensitive and redact or avoid logging them.
+ *
+ * @param options - Optional settings.
+ * @param options.forceRefresh - If true, bypass the in-memory TTL cache and re-read files from disk.
+ * @returns The parsed CodexCliState when a valid accounts/auth payload is found, or `null` if sync is disabled,
+ * no valid payload exists, or a read/parse error occurred.
+ */
+export async function loadCodexCliState(options) {
+    if (!isCodexCliSyncEnabled()) {
+        return null;
+    }
+    const now = Date.now();
+    if (!options?.forceRefresh && cache && now - cacheLoadedAt < CACHE_TTL_MS) {
+        return cache;
+    }
+    if (inFlightLoadPromise) {
+        return inFlightLoadPromise;
+    }
+    const readTask = async () => {
+        const accountsPath = getCodexCliAccountsPath();
+        const authPath = getCodexCliAuthPath();
+        incrementCodexCliMetric("readAttempts");
+        const hasAccountsPath = existsSync(accountsPath);
+        const hasAuthPath = existsSync(authPath);
+        if (!hasAccountsPath && !hasAuthPath) {
+            incrementCodexCliMetric("readMisses");
+            cache = null;
+            return null;
+        }
+        try {
+            if (hasAccountsPath) {
+                try {
+                    const raw = await retryFsOperation(() => fs.readFile(accountsPath, "utf-8"));
+                    const parsed = JSON.parse(raw);
+                    let sourceUpdatedAtMs;
+                    try {
+                        sourceUpdatedAtMs = (await retryFsOperation(() => fs.stat(accountsPath))).mtimeMs;
+                    }
+                    catch {
+                        sourceUpdatedAtMs = undefined;
+                    }
+                    const state = parseCodexCliState(accountsPath, parsed, sourceUpdatedAtMs);
+                    if (state) {
+                        incrementCodexCliMetric("readSuccesses");
+                        log.debug("Loaded Codex CLI state", {
+                            operation: "read-state",
+                            outcome: "success",
+                            path: accountsPath,
+                            accountCount: state.accounts.length,
+                            activeAccountRef: makeAccountFingerprint({
+                                accountId: state.activeAccountId,
+                                email: state.activeEmail,
+                            }),
+                        });
+                        cache = state;
+                        return state;
+                    }
+                    log.warn("Codex CLI accounts payload is malformed", {
+                        operation: "read-state",
+                        outcome: "malformed",
+                        path: accountsPath,
+                    });
+                }
+                catch (accountsError) {
+                    log.warn("Failed to read Codex CLI accounts state", {
+                        operation: "read-state",
+                        outcome: "accounts-read-error",
+                        path: accountsPath,
+                        error: String(accountsError),
+                    });
+                }
+            }
+            if (hasAuthPath) {
+                try {
+                    const raw = await retryFsOperation(() => fs.readFile(authPath, "utf-8"));
+                    const parsed = JSON.parse(raw);
+                    let sourceUpdatedAtMs;
+                    try {
+                        sourceUpdatedAtMs = (await retryFsOperation(() => fs.stat(authPath))).mtimeMs;
+                    }
+                    catch {
+                        sourceUpdatedAtMs = undefined;
+                    }
+                    const state = parseCodexCliAuthState(authPath, parsed, sourceUpdatedAtMs);
+                    if (state) {
+                        incrementCodexCliMetric("readSuccesses");
+                        log.debug("Loaded Codex CLI auth state", {
+                            operation: "read-state",
+                            outcome: "success",
+                            path: authPath,
+                            accountCount: state.accounts.length,
+                            activeAccountRef: makeAccountFingerprint({
+                                accountId: state.activeAccountId,
+                                email: state.activeEmail,
+                            }),
+                        });
+                        cache = state;
+                        return state;
+                    }
+                    log.warn("Codex CLI auth payload is malformed", {
+                        operation: "read-state",
+                        outcome: "malformed",
+                        path: authPath,
+                    });
+                }
+                catch (authError) {
+                    log.warn("Failed to read Codex CLI auth state", {
+                        operation: "read-state",
+                        outcome: "auth-read-error",
+                        path: authPath,
+                        error: String(authError),
+                    });
+                }
+            }
+            incrementCodexCliMetric("readFailures");
+            cache = null;
+            return null;
+        }
+        catch (error) {
+            incrementCodexCliMetric("readFailures");
+            log.warn("Failed to read Codex CLI state", {
+                operation: "read-state",
+                outcome: "error",
+                path: hasAccountsPath ? accountsPath : authPath,
+                error: String(error),
+            });
+            cache = null;
+            return null;
+        }
+        finally {
+            cacheLoadedAt = Date.now();
+        }
+    };
+    const currentLoad = readTask();
+    inFlightLoadPromise = currentLoad;
+    try {
+        return await currentLoad;
+    }
+    finally {
+        if (inFlightLoadPromise === currentLoad) {
+            inFlightLoadPromise = null;
+        }
+    }
+}
+export async function lookupCodexCliTokensByEmail(email) {
+    const normalized = normalizeEmail(email);
+    if (!normalized)
+        return null;
+    const state = await loadCodexCliState();
+    if (!state)
+        return null;
+    const account = state.accounts.find((entry) => normalizeEmail(entry.email) === normalized);
+    if (!account?.accessToken)
+        return null;
+    return {
+        accessToken: account.accessToken,
+        expiresAt: account.expiresAt,
+        refreshToken: account.refreshToken,
+        accountId: account.accountId,
+    };
+}
+export function clearCodexCliStateCache() {
+    cache = null;
+    cacheLoadedAt = 0;
+    inFlightLoadPromise = null;
+}
+export function __resetCodexCliWarningCacheForTests() {
+    emittedWarnings.clear();
+}
+//# sourceMappingURL=state.js.map

package/dist/lib/codex-cli/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../lib/codex-cli/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACN,uBAAuB,EACvB,sBAAsB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAC5C,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAuBvD,IAAI,KAAK,GAAyB,IAAI,CAAC;AACvC,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,IAAI,mBAAmB,GAAyC,IAAI,CAAC;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C,SAAS,kBAAkB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAI,IAAsB,EAAE,QAAQ,GAAG,CAAC;IACtE,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3D,MAAM,KAAK,CAAC;YACb,CAAC;YACD,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAA+B,EAC/B,IAAc;IAEd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvE,MAAM,WAAW,GAChB,sBAAsB,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAC5D,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxF,MAAM,YAAY,GACjB,sBAAsB,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE1F,MAAM,SAAS,GACd,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC;QACnC,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC;QACtC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,KAAK,GACV,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,YAAY,GACjB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1B,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;QACxB,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GACb,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;QACvB,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE5B,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,KAAK;QACL,SAAS;QACT,WAAW,EAAE,WAAW,IAAI,EAAE;QAC9B,YAAY;QACZ,SAAS;QACT,QAAQ;KACR,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB;IACpC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClE,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;QAC7C,GAAG,CAAC,IAAI,CACP,iFAAiF,CACjF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAC1B,IAAY,EACZ,MAAe,EACf,iBAA0B;IAE1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;SAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAoC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAEtE,IAAI,eAAe,GAClB,iBAAiB,CAAC,MAAM,CAAC,eAAe,CAAC;QACzC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7C,IAAI,WAAW,GACd,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC;QAClC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAErC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,cAAc,EAAE,CAAC;YACpB,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC;YAC3C,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC;QACpC,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI;QACJ,QAAQ;QACR,eAAe;QACf,WAAW;QACX,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,yBAAyB,CAAC;QACzD,iBAAiB;KACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,sBAAsB,CAC9B,IAAY,EACZ,MAAe,EACf,iBAA0B;IAE1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,MAAM,SAAS,GACd,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC;QACpC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GACV,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE9B,IAAI,SAAS,GAAuB,SAAS,CAAC;IAC9C,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;QACxB,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAA4B;QACzC,SAAS;QACT,KAAK;QACL,WAAW,EAAE,WAAW,IAAI,EAAE;QAC9B,YAAY;QACZ,SAAS;QACT,QAAQ,EAAE,IAAI;KACd,CAAC;IAEF,OAAO;QACN,IAAI;QACJ,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,yBAAyB,CAAC;QACzD,iBAAiB;KACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAoC;IAEpC,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,YAAY,IAAI,KAAK,IAAI,GAAG,GAAG,aAAa,GAAG,YAAY,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,IAAmC,EAAE;QAC1D,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAExC,MAAM,eAAe,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACtC,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACJ,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;oBAC1C,IAAI,iBAAqC,CAAC;oBAC1C,IAAI,CAAC;wBACJ,iBAAiB,GAAG,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBACnF,CAAC;oBAAC,MAAM,CAAC;wBACR,iBAAiB,GAAG,SAAS,CAAC;oBAC/B,CAAC;oBACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;oBAC1E,IAAI,KAAK,EAAE,CAAC;wBACX,uBAAuB,CAAC,eAAe,CAAC,CAAC;wBACzC,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;4BACnC,SAAS,EAAE,YAAY;4BACvB,OAAO,EAAE,SAAS;4BAClB,IAAI,EAAE,YAAY;4BAClB,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;4BACnC,gBAAgB,EAAE,sBAAsB,CAAC;gCACxC,SAAS,EAAE,KAAK,CAAC,eAAe;gCAChC,KAAK,EAAE,KAAK,CAAC,WAAW;6BACxB,CAAC;yBACF,CAAC,CAAC;wBACH,KAAK,GAAG,KAAK,CAAC;wBACd,OAAO,KAAK,CAAC;oBACd,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;wBACnD,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,WAAW;wBACpB,IAAI,EAAE,YAAY;qBAClB,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACxB,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;wBACnD,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,qBAAqB;wBAC9B,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;qBAC5B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACJ,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;oBACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;oBAC1C,IAAI,iBAAqC,CAAC;oBAC1C,IAAI,CAAC;wBACJ,iBAAiB,GAAG,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/E,CAAC;oBAAC,MAAM,CAAC;wBACR,iBAAiB,GAAG,SAAS,CAAC;oBAC/B,CAAC;oBACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;oBAC1E,IAAI,KAAK,EAAE,CAAC;wBACX,uBAAuB,CAAC,eAAe,CAAC,CAAC;wBACzC,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE;4BACxC,SAAS,EAAE,YAAY;4BACvB,OAAO,EAAE,SAAS;4BAClB,IAAI,EAAE,QAAQ;4BACd,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;4BACnC,gBAAgB,EAAE,sBAAsB,CAAC;gCACxC,SAAS,EAAE,KAAK,CAAC,eAAe;gCAChC,KAAK,EAAE,KAAK,CAAC,WAAW;6BACxB,CAAC;yBACF,CAAC,CAAC;wBACH,KAAK,GAAG,KAAK,CAAC;wBACd,OAAO,KAAK,CAAC;oBACd,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE;wBAC/C,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,WAAW;wBACpB,IAAI,EAAE,QAAQ;qBACd,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACpB,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE;wBAC/C,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,iBAAiB;wBAC1B,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;qBACxB,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACxC,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC1C,SAAS,EAAE,YAAY;gBACvB,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC;IAC/B,mBAAmB,GAAG,WAAW,CAAC;IAClC,IAAI,CAAC;QACJ,OAAO,MAAM,WAAW,CAAC;IAC1B,CAAC;YAAS,CAAC;QACV,IAAI,mBAAmB,KAAK,WAAW,EAAE,CAAC;YACzC,mBAAmB,GAAG,IAAI,CAAC;QAC5B,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,KAAyB;IAEzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,KAAK,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO,EAAE,WAAW;QAAE,OAAO,IAAI,CAAC;IAEvC,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,KAAK,GAAG,IAAI,CAAC;IACb,aAAa,GAAG,CAAC,CAAC;IAClB,mBAAmB,GAAG,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mCAAmC;IAClD,eAAe,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/dist/lib/codex-cli/sync.d.ts

@@ -0,0 +1,27 @@
+import { type AccountStorageV3 } from "../storage.js";
+import { type ModelFamily } from "../prompts/codex.js";
+/**
+ * Reconciles the provided local account storage with the Codex CLI state and returns the resulting storage and whether it changed.
+ *
+ * This operation:
+ * - Merges accounts from the Codex CLI state into a clone of `current` (or into a new empty storage when `current` is null).
+ * - May update the active account selection and per-family active indexes when the Codex CLI selection is considered applicable.
+ * - Preserves secrets and sensitive fields; any tokens written to storage are subject to the project's token-redaction rules and are not exposed in logs or metrics.
+ *
+ * Concurrency assumptions:
+ * - Caller is responsible for serializing concurrent writes to persistent storage; this function only returns an in-memory storage object and does not perform atomic file-level coordination.
+ *
+ * Windows filesystem notes:
+ * - When the caller persists the returned storage to disk on Windows, standard Windows file-locking and path-length semantics apply; this function does not perform Windows-specific path normalization.
+ *
+ * @param current - The current local AccountStorageV3, or `null` to indicate none exists.
+ * @returns An object containing:
+ *   - `storage`: the reconciled AccountStorageV3 to persist (may be the original `current` when no changes were applied).
+ *   - `changed`: `true` if the reconciled storage differs from `current`, `false` otherwise.
+ */
+export declare function syncAccountStorageFromCodexCli(current: AccountStorageV3 | null): Promise<{
+    storage: AccountStorageV3 | null;
+    changed: boolean;
+}>;
+export declare function getActiveSelectionForFamily(storage: AccountStorageV3, family: ModelFamily): number;
+//# sourceMappingURL=sync.d.ts.map

package/dist/lib/codex-cli/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../lib/codex-cli/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,gBAAgB,EACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAuPvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,8BAA8B,CACnD,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAwFjE;AAED,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,WAAW,GACjB,MAAM,CAMR"}