dsh-cliworker-now 0.7.6 → 0.7.8

package/lib/types/host/claude-own-route.js

@@ -0,0 +1,375 @@
+import { createConnection } from 'node:net';
+import { homedir } from 'node:os';
+import { join, isAbsolute, resolve } from 'node:path';
+import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+import { accountEmail } from "./account-identity.js";
+import { readFirstPartyJson, claudeManagedSettingsPath, } from "./first-party-models.js";
+const record = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const literal = (v) => typeof v === 'string' && !!v.trim() && !/[\s\x00-\x1f{}$]/.test(v) && !v.startsWith('!');
+const authOption = /ANTHROPIC|CLAUDE_CODE_(?:OAUTH|USE_|API|SKIP_(?:BEDROCK|VERTEX|FOUNDRY|AWS)_AUTH|PROVIDER_MANAGED_BY_HOST|GATEWAY)|AWS_|GOOGLE_|CLOUD_ML|API_KEY|BEARER_TOKEN/i;
+const allowed = new Set(['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL']);
+const families = ['HAIKU', 'SONNET', 'OPUS', 'FABLE'];
+const modelOption = /^(?:ANTHROPIC_(?:MODEL|DEFAULT_MODEL|SMALL_FAST_MODEL|(?:DEFAULT_(?:HAIKU|SONNET|OPUS|FABLE)_MODEL|CUSTOM_MODEL_OPTION)(?:_NAME|_DESCRIPTION|_SUPPORTED_CAPABILITIES)?)|CLAUDE_CODE_SUBAGENT_MODEL(?:_FORCE)?)$/;
+const claudeEnvironment = /^(?:ANTHROPIC_|CLAUDE_CODE_(?:OAUTH|USE_|API|SKIP_(?:BEDROCK|VERTEX|FOUNDRY|AWS)_AUTH|SUBAGENT_MODEL|MODEL|PROVIDER_MANAGED_BY_HOST|GATEWAY))/i;
+const officialBase = 'https://api.anthropic.com';
+const homeOption = /^(?:CLAUDE_CONFIG_DIR|HOME|USERPROFILE|XDG_CONFIG_HOME)$/i;
+const modelKeys = [
+    'ANTHROPIC_MODEL',
+    'ANTHROPIC_DEFAULT_MODEL',
+    'ANTHROPIC_SMALL_FAST_MODEL',
+    'ANTHROPIC_CUSTOM_MODEL_OPTION',
+    'CLAUDE_CODE_SUBAGENT_MODEL',
+    'CLAUDE_CODE_SUBAGENT_MODEL_FORCE',
+    ...families.flatMap((family) => ['', '_NAME', '_DESCRIPTION', '_SUPPORTED_CAPABILITIES'].map((suffix) => `ANTHROPIC_DEFAULT_${family}_MODEL${suffix}`)),
+    ...['_NAME', '_DESCRIPTION', '_SUPPORTED_CAPABILITIES'].map((suffix) => `ANTHROPIC_CUSTOM_MODEL_OPTION${suffix}`),
+];
+const routeEnvironment = {
+    CLAUDE_CODE_USE_BEDROCK: '',
+    CLAUDE_CODE_USE_VERTEX: '',
+    CLAUDE_CODE_USE_FOUNDRY: '',
+    CLAUDE_CODE_USE_AWS: '',
+    CLAUDE_CODE_OAUTH_TOKEN: '',
+    CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST: '',
+    CLAUDE_CODE_SKIP_BEDROCK_AUTH: '',
+    CLAUDE_CODE_SKIP_VERTEX_AUTH: '',
+    CLAUDE_CODE_SKIP_FOUNDRY_AUTH: '',
+    CLAUDE_CODE_SKIP_AWS_AUTH: '',
+    ANTHROPIC_AUTH_TOKEN: '',
+    ANTHROPIC_API_KEY: '',
+    ANTHROPIC_CUSTOM_HEADERS: '',
+};
+/** Only this Claude child is changed; inherited credentials are never account evidence. */
+export function claudeLaunchEnvironment() {
+    return {
+        ...routeEnvironment,
+        ...Object.fromEntries(modelKeys.map((key) => [key, ''])),
+        ANTHROPIC_BASE_URL: '',
+        ...Object.fromEntries(Object.keys(process.env)
+            .filter((key) => claudeEnvironment.test(key))
+            .map((key) => [key, ''])),
+    };
+}
+export function claudeRemoteModelId(value) {
+    return value.replace(/\[1m\]$/i, '');
+}
+/** Exact settings IDs only. Labels and capability metadata never invent a model. */
+export function claudeConfiguredModels(env, settingsModel) {
+    const secrets = ['ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN']
+        .map((key) => env[key])
+        .filter((value) => typeof value === 'string' && !!value);
+    const safe = (value, maximum) => typeof value === 'string' &&
+        value.length <= maximum &&
+        !/[\x00-\x1f]/.test(value) &&
+        !secrets.some((secret) => value === secret || (secret.length >= 12 && value.includes(secret)));
+    const valid = (value) => safe(value, 1024) &&
+        typeof value === 'string' &&
+        /^[A-Za-z0-9][A-Za-z0-9._:/@-]*(?:\[1m\])?$/i.test(value) &&
+        !/^(?:sk-|Bearer|oauth[_-]|PROXY_MANAGED$)/i.test(value);
+    const models = new Map();
+    const add = (value, name) => {
+        if (!valid(value))
+            return;
+        const base = claudeRemoteModelId(value), alias = base.toLowerCase();
+        if (['default', 'best', 'opusplan'].includes(alias))
+            return;
+        if (families.some((family) => family.toLowerCase() === alias)) {
+            const mapped = env[`ANTHROPIC_DEFAULT_${alias.toUpperCase()}_MODEL`];
+            if (!valid(mapped) ||
+                families.some((family) => family.toLowerCase() === claudeRemoteModelId(mapped).toLowerCase()))
+                return;
+            const id = /\[1m\]$/i.test(value) && !/\[1m\]$/i.test(mapped) ? `${mapped}${value.slice(-4)}` : mapped;
+            add(id, env[`ANTHROPIC_DEFAULT_${alias.toUpperCase()}_MODEL_NAME`]);
+            return;
+        }
+        if (models.has(value))
+            return;
+        models.set(value, {
+            remoteId: claudeRemoteModelId(value),
+            choice: {
+                id: value,
+                label: safe(name, 4096) && typeof name === 'string' && name.trim() ? name : value,
+                efforts: ['default'],
+            },
+        });
+    };
+    for (const family of families)
+        add(env[`ANTHROPIC_DEFAULT_${family}_MODEL`], env[`ANTHROPIC_DEFAULT_${family}_MODEL_NAME`]);
+    add(env.ANTHROPIC_CUSTOM_MODEL_OPTION, env.ANTHROPIC_CUSTOM_MODEL_OPTION_NAME);
+    add(env.ANTHROPIC_MODEL);
+    add(env.ANTHROPIC_DEFAULT_MODEL);
+    add(settingsModel);
+    return [...models.values()];
+}
+/** Public errors never interpolate native configuration or credentials. */
+export class ClaudeOwnRouteError extends Error {
+    code = 'CLI_OWN_ACCOUNT_REQUIRED';
+    constructor(message = 'Claude 账号来源无法确认，请检查该 CLI 的配置') {
+        super(message);
+        this.name = 'ClaudeOwnRouteError';
+    }
+}
+/** Verified on native 2.1.296: empty settings.env unsets provider selectors for this process. */
+export function claudeNativeSettingsArguments(configDirectory, suppressedEnvironment = {}) {
+    return [
+        '--settings',
+        JSON.stringify({
+            apiKeyHelper: '',
+            model: 'default',
+            env: {
+                ...claudeLaunchEnvironment(),
+                ...suppressedEnvironment,
+                ...(configDirectory ? { CLAUDE_CONFIG_DIR: configDirectory } : {}),
+                ANTHROPIC_BASE_URL: officialBase,
+            },
+        }),
+    ];
+}
+/** TCP only: a listening proxy remains selected even if its HTTP authentication fails. */
+export async function claudeLoopbackAvailable(url, signal) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const socket = createConnection({
+            host: url.hostname.replace(/^\[|\]$/g, ''),
+            port: Number(url.port || (url.protocol === 'https:' ? 443 : 80)),
+        });
+        let settled = false;
+        const done = (value, error) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', abort);
+            socket.destroy();
+            error !== undefined ? reject(error) : resolve(value);
+        };
+        const abort = () => done(undefined, signal.reason ?? new Error('查询已取消'));
+        signal.addEventListener('abort', abort, { once: true });
+        socket.once('connect', () => done(true));
+        socket.setTimeout(1200, () => done(false));
+        socket.once('error', (error) => {
+            if (['ECONNREFUSED', 'ETIMEDOUT', 'EHOSTUNREACH', 'ENETUNREACH'].includes(error.code ?? ''))
+                done(false);
+            else
+                done(undefined, new ClaudeOwnRouteError('Claude 本地代理连接状态无法确认，请检查代理'));
+        });
+        if (signal.aborted)
+            abort();
+    });
+}
+async function readClaudeSettings(project, signal) {
+    signal.throwIfAborted();
+    const root = process.env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), '.claude');
+    if (!isAbsolute(root))
+        throw new ClaudeOwnRouteError('Claude 账号目录必须使用绝对路径');
+    const paths = [
+        join(root, 'settings.json'),
+        join(project, '.claude/settings.json'),
+        join(project, '.claude/settings.local.json'),
+    ];
+    const configured = Object.create(null), env = Object.create(null);
+    for (const path of paths) {
+        const settings = await readFirstPartyJson(path);
+        signal.throwIfAborted();
+        Object.assign(configured, settings);
+        if (record(settings.env))
+            Object.assign(env, settings.env);
+    }
+    const managed = await readFirstPartyJson(claudeManagedSettingsPath());
+    signal.throwIfAborted();
+    if (managed.apiKeyHelper ||
+        managed.forceLoginMethod ||
+        managed.forceLoginOrgUUID ||
+        managed.forceLoginGatewayUrl ||
+        (record(managed.env) &&
+            Object.entries(managed.env).some(([key, value]) => value && (authOption.test(key) || homeOption.test(key)))))
+        throw new ClaudeOwnRouteError();
+    if (Object.entries(env).some(([key, value]) => value && homeOption.test(key)))
+        throw new ClaudeOwnRouteError();
+    const suppressedEnvironment = Object.fromEntries(Object.keys(env)
+        .filter((key) => claudeEnvironment.test(key))
+        .map((key) => [key, '']));
+    return { root, paths, configured, env, suppressedEnvironment };
+}
+/** Official account operations never probe or require an API/proxy route. */
+export async function readClaudeOfficialAccountRoute(project, signal) {
+    const { root, suppressedEnvironment } = await readClaudeSettings(project, signal);
+    return {
+        kind: 'native',
+        configDirectory: root,
+        sourceIds: [root, 'native:claude-official-login'],
+        suppressedEnvironment,
+    };
+}
+export async function readClaudeOwnRoute(project, signal, options = {}) {
+    const { root, paths, configured, env, suppressedEnvironment } = await readClaudeSettings(project, signal);
+    if (configured.apiKeyHelper)
+        throw new ClaudeOwnRouteError();
+    if (Object.entries(env).some(([key, value]) => value &&
+        (homeOption.test(key) || (authOption.test(key) && !allowed.has(key) && !modelOption.test(key)))))
+        throw new ClaudeOwnRouteError();
+    const key = env.ANTHROPIC_API_KEY, bearer = env.ANTHROPIC_AUTH_TOKEN;
+    if (key && bearer)
+        throw new ClaudeOwnRouteError('Claude 同时配置两种令牌，请先明确一种登录来源');
+    if ((key && !literal(key)) || (bearer && !literal(bearer)))
+        throw new ClaudeOwnRouteError();
+    let url;
+    try {
+        url = new URL(env.ANTHROPIC_BASE_URL || officialBase);
+        if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.search || url.hash)
+            throw new Error();
+    }
+    catch {
+        throw new ClaudeOwnRouteError('Claude 服务地址无效，请检查该 CLI 的配置');
+    }
+    const loopback = ['localhost', '127.0.0.1', '[::1]', '::1'].includes(url.hostname.toLowerCase());
+    if (loopback && !(await (options.available ?? claudeLoopbackAvailable)(url, signal))) {
+        signal.throwIfAborted();
+        return {
+            kind: 'native',
+            configDirectory: root,
+            sourceIds: [root, 'native:claude-official-login'],
+            suppressedEnvironment,
+        };
+    }
+    signal.throwIfAborted();
+    if (!key && !bearer) {
+        if (loopback || url.href.replace(/\/$/, '') !== officialBase)
+            throw new ClaudeOwnRouteError('Claude 服务已配置，但无法确认该服务的自身凭据');
+        return {
+            kind: 'native',
+            configDirectory: root,
+            sourceIds: [root, 'native:claude-official-login'],
+            suppressedEnvironment,
+        };
+    }
+    const modelEnvironment = Object.fromEntries(Object.entries(env).filter(([name, value]) => modelOption.test(name) && typeof value === 'string'));
+    const model = typeof configured.model === 'string' ? configured.model : undefined;
+    const custom = loopback || url.href.replace(/\/$/, '') !== officialBase;
+    return {
+        kind: loopback ? 'proxy' : 'api',
+        configDirectory: root,
+        sourceIds: paths,
+        modelEnvironment,
+        model,
+        suppressedEnvironment,
+        source: {
+            provider: 'anthropic',
+            credential: { type: 'api', key: bearer || key },
+            baseUrl: url.href.replace(/\/$/, ''),
+            apiType: 'anthropic-messages',
+            ...(bearer ? { anthropicAuth: 'bearer' } : {}),
+            sourceIds: paths,
+            nativeModels: custom ? claudeConfiguredModels(env, model) : [],
+            nativeFullModelIds: true,
+            claudeRoute: loopback ? 'proxy' : 'api',
+            ...(custom ? { claudeConfiguredModels: true } : {}),
+            modelEnvironment,
+            model,
+        },
+    };
+}
+export function claudeRouteStatusArguments(executable, route) {
+    return [
+        executable,
+        ...(route.kind === 'native'
+            ? claudeNativeSettingsArguments(route.configDirectory, route.suppressedEnvironment)
+            : []),
+        'auth',
+        'status',
+        '--json',
+    ];
+}
+export function claudeRouteIdentity(route, raw, exitCode) {
+    let status;
+    try {
+        status = JSON.parse(raw);
+    }
+    catch {
+        throw new ClaudeOwnRouteError('Claude 登录状态响应无法确认，请刷新');
+    }
+    if (!record(status))
+        throw new ClaudeOwnRouteError('Claude 登录状态响应无法确认，请刷新');
+    if (status.apiProvider !== undefined && status.apiProvider !== 'firstParty')
+        throw new ClaudeOwnRouteError();
+    if (route.configDirectory && status.configDirectory !== undefined) {
+        const normalized = (path) => process.platform === 'win32' ? resolve(path).toLowerCase() : resolve(path);
+        if (typeof status.configDirectory !== 'string' ||
+            !isAbsolute(status.configDirectory) ||
+            normalized(status.configDirectory) !== normalized(route.configDirectory))
+            throw new ClaudeOwnRouteError('Claude 原生账号目录与选定来源不一致');
+    }
+    if (route.kind === 'native') {
+        if ([0, 1].includes(exitCode ?? -1) && status.loggedIn === false)
+            return { state: 'unconfigured', summary: 'Claude 官方账号未登录', verification: 'cli' };
+        if (exitCode !== 0 || status.loggedIn !== true || status.authMethod !== 'claude.ai')
+            throw new ClaudeOwnRouteError('Claude 官方登录来源无法确认，请使用原生登录');
+        const email = accountEmail(status.email);
+        return {
+            state: 'authenticated',
+            summary: 'Claude 官方账号登录',
+            authMethod: 'oauth',
+            accountLabel: email,
+            logins: [{ providerLabel: 'Claude 官方', authMethod: 'oauth', accountLabel: email }],
+            verification: 'cli',
+        };
+    }
+    const expected = route.source?.anthropicAuth === 'bearer' ? 'oauth_token' : 'api_key';
+    if (exitCode !== 0 || status.loggedIn !== true || status.authMethod !== expected)
+        throw new ClaudeOwnRouteError();
+    const label = route.kind === 'proxy' ? 'Claude 本地代理' : 'Claude 自身配置';
+    return {
+        state: 'authenticated',
+        summary: `${label} API 登录`,
+        authMethod: 'api',
+        logins: [{ providerLabel: label, authMethod: 'api' }],
+        verification: 'cli',
+    };
+}
+/** Pin one route before spawning; secrets are in a private temporary file, never argv. */
+export async function prepareClaudeWorkerLaunch(route, argv, stateDirectory, signal) {
+    signal.throwIfAborted();
+    if (route.kind === 'native')
+        return {
+            argv: [
+                argv[0],
+                ...claudeNativeSettingsArguments(route.configDirectory, route.suppressedEnvironment),
+                ...argv.slice(1),
+            ],
+            env: claudeLaunchEnvironment(),
+        };
+    if (!route.source)
+        throw new ClaudeOwnRouteError();
+    const parent = join(stateDirectory, 'claude-route');
+    await safePiOmpAncestors(parent);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    await safePiOmpAncestors(parent);
+    const directory = await mkdtemp(join(parent, 'run-'));
+    try {
+        const path = join(directory, 'settings.json');
+        await writeFile(path, JSON.stringify({
+            apiKeyHelper: '',
+            model: route.model ?? 'default',
+            env: {
+                ...claudeLaunchEnvironment(),
+                ...route.suppressedEnvironment,
+                ...route.modelEnvironment,
+                ...(route.configDirectory ? { CLAUDE_CONFIG_DIR: route.configDirectory } : {}),
+                ANTHROPIC_BASE_URL: route.source.baseUrl,
+                ANTHROPIC_AUTH_TOKEN: route.source.anthropicAuth === 'bearer' ? route.source.credential.key : '',
+                ANTHROPIC_API_KEY: route.source.anthropicAuth === 'bearer' ? '' : route.source.credential.key,
+                CLAUDE_CODE_OAUTH_TOKEN: '',
+            },
+        }), { mode: 0o600, flag: 'wx' });
+        signal.throwIfAborted();
+        return {
+            argv: [argv[0], '--settings', path, ...argv.slice(1)],
+            env: claudeLaunchEnvironment(),
+            cleanup: () => rm(directory, { recursive: true, force: true }),
+        };
+    }
+    catch (error) {
+        await rm(directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=claude-own-route.js.map

package/lib/types/host/claude-own-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-own-route.js","sourceRoot":"","sources":["../../../src/host/claude-own-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAwB,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,yBAAyB,CAAA;AAEhC,MAAM,MAAM,GAAG,CAAC,CAAU,EAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAC1G,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAC1C,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;AAC1F,MAAM,UAAU,GACd,gKAAgK,CAAA;AAClK,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAC5F,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAU,CAAA;AAC9D,MAAM,WAAW,GACf,iNAAiN,CAAA;AACnN,MAAM,iBAAiB,GACrB,gJAAgJ,CAAA;AAClJ,MAAM,YAAY,GAAG,2BAA2B,CAAA;AAChD,MAAM,UAAU,GAAG,2DAA2D,CAAA;AAC9E,MAAM,SAAS,GAAG;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,kCAAkC;IAClC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC,GAAG,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,MAAM,SAAS,MAAM,EAAE,CACzD,CACF;IACD,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC,GAAG,CACzD,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,MAAM,EAAE,CACrD;CACF,CAAA;AACD,MAAM,gBAAgB,GAAG;IACvB,uBAAuB,EAAE,EAAE;IAC3B,sBAAsB,EAAE,EAAE;IAC1B,uBAAuB,EAAE,EAAE;IAC3B,mBAAmB,EAAE,EAAE;IACvB,uBAAuB,EAAE,EAAE;IAC3B,oCAAoC,EAAE,EAAE;IACxC,6BAA6B,EAAE,EAAE;IACjC,4BAA4B,EAAE,EAAE;IAChC,6BAA6B,EAAE,EAAE;IACjC,yBAAyB,EAAE,EAAE;IAC7B,oBAAoB,EAAE,EAAE;IACxB,iBAAiB,EAAE,EAAE;IACrB,wBAAwB,EAAE,EAAE;CAC7B,CAAA;AAED,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,GAAG,gBAAgB;QACnB,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,kBAAkB,EAAE,EAAE;QACtB,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;aACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC5C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAC3B;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CACpC,GAA4B,EAC5B,aAAuB;IAEvB,MAAM,OAAO,GAAG,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,yBAAyB,CAAC;SACrF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACtB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,OAAe,EAAE,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,IAAI,OAAO;QACvB,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAChG,MAAM,KAAK,GAAG,CAAC,KAAc,EAAmB,EAAE,CAChD,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QACjB,OAAO,KAAK,KAAK,QAAQ;QACzB,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC;QACzD,CAAC,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyD,CAAA;IAC/E,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,IAAc,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAM;QACzB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,EACrC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAC5B,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAM;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,qBAAqB,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YACpE,IACE,CAAC,KAAK,CAAC,MAAM,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;gBAE7F,OAAM;YACR,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;YACtG,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,qBAAqB,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;YACnE,OAAM;QACR,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAM;QAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YAChB,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC;YACpC,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;gBACjF,OAAO,EAAE,CAAC,SAAS,CAAC;aACrB;SACF,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ;QAC3B,GAAG,CAAC,GAAG,CAAC,qBAAqB,MAAM,QAAQ,CAAC,EAAE,GAAG,CAAC,qBAAqB,MAAM,aAAa,CAAC,CAAC,CAAA;IAC9F,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,kCAAkC,CAAC,CAAA;IAC9E,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACxB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;IAChC,GAAG,CAAC,aAAa,CAAC,CAAA;IAClB,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,0BAA0B,CAAA;IAC1C,YAAY,OAAO,GAAG,8BAA8B;QAClD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAcD,iGAAiG;AACjG,MAAM,UAAU,6BAA6B,CAC3C,eAAwB,EACxB,wBAAgD,EAAE;IAElD,OAAO;QACL,YAAY;QACZ,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE;gBACH,GAAG,uBAAuB,EAAE;gBAC5B,GAAG,qBAAqB;gBACxB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,kBAAkB,EAAE,YAAY;aACjC;SACF,CAAC;KACH,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAQ,EAAE,MAAmB;IACzE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAC9B,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC1C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACjE,CAAC,CAAA;QACF,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,KAAe,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC1C,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAM,CAAC,CAAA;QACvD,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACpD,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAA;;gBACnG,IAAI,CAAC,SAAS,EAAE,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC,CAAA;QAC5E,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAmB;IACpE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAChF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC;KAC7C,CAAA;IACD,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EACzD,GAAG,GAAwB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,CAAC,CAAA;IACrE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IACE,OAAO,CAAC,YAAY;QACpB,OAAO,CAAC,gBAAgB;QACxB,OAAO,CAAC,iBAAiB;QACzB,OAAO,CAAC,oBAAoB;QAC5B,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC1E,CAAC;QAEJ,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACb,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAC3B,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAA;AAChE,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAe,EACf,MAAmB;IAEnB,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACjF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC;QACjD,qBAAqB;KACtB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,MAAmB,EACnB,UAA0D,EAAE;IAE5D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzG,IAAI,UAAU,CAAC,YAAY;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAC5D,IACE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CACtB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,KAAK;QACL,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAClG;QAED,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,EAC/B,MAAM,GAAG,GAAG,CAAC,oBAAoB,CAAA;IACnC,IAAI,GAAG,IAAI,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;IAC9E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAC3F,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAA;QACrD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YACvG,MAAM,IAAI,KAAK,EAAE,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAChG,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC;YACjD,qBAAqB;SACtB,CAAA;IACH,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY;YAC1D,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;QAC7D,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC;YACjD,qBAAqB;SACtB,CAAA;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CACzC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CACzE,CAAA;IAC3B,MAAM,KAAK,GAAG,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,MAAM,MAAM,GAAG,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,CAAA;IACvE,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QAChC,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,KAAK;QAChB,gBAAgB;QAChB,KAAK;QACL,qBAAqB;QACrB,MAAM,EAAE;YACN,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,EAAE;YAC/C,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,oBAAoB;YAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YAC9D,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;YACvC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,gBAAgB;YAChB,KAAK;SACN;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,KAAqB;IAClF,OAAO;QACL,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;YACzB,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,qBAAqB,CAAC;YACnF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM;QACN,QAAQ;QACR,QAAQ;KACT,CAAA;AACH,CAAC;AACD,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,GAAW,EACX,QAAuB;IAEvB,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IAC3E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAC5G,IAAI,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,IACE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YAC1C,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;YACnC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;YAExE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAC9D,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAClF,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;YACjF,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAClF,YAAY,EAAE,KAAK;SACpB,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;IACrF,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ;QAC9E,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAA;IACpE,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,GAAG,KAAK,SAAS;QAC1B,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACrD,YAAY,EAAE,KAAK;KACpB,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqB,EACrB,IAAc,EACd,cAAsB,EACtB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,CAAC,CAAC,CAAE;gBACR,GAAG,6BAA6B,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,qBAAqB,CAAC;gBACpF,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;aACjB;YACD,GAAG,EAAE,uBAAuB,EAAE;SAC/B,CAAA;IACH,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IACnD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;QAC7C,MAAM,SAAS,CACb,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YAC/B,GAAG,EAAE;gBACH,GAAG,uBAAuB,EAAE;gBAC5B,GAAG,KAAK,CAAC,qBAAqB;gBAC9B,GAAG,KAAK,CAAC,gBAAgB;gBACzB,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;gBACxC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAChG,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG;gBAC7F,uBAAuB,EAAE,EAAE;aAC5B;SACF,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAC5B,CAAA;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO;YACL,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtD,GAAG,EAAE,uBAAuB,EAAE;YAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC/D,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/cli-account-binding.d.ts

@@ -1,3 +1,4 @@
+import { type ClaudeOwnRoute } from './claude-own-route.ts';
 import { type CliId } from '../shared/types.ts';
 import { type ProcessBackend, type RuntimeConfig } from './process.ts';
 /** Safe public error; neither secrets nor native paths are interpolated. */
@@ -29,4 +30,4 @@ export declare function readCodexOwnAccountSource(project: string, signal: Abort
     nativeRouteConfirmed: true;
 }>;
 /** Host-only account epoch. Never return it from a Gateway response or write credentials to storage. */
-export declare function readCliAccountBinding(cli: CliId, backend: ProcessBackend, config: RuntimeConfig, project: string, signal: AbortSignal): Promise<string>;
+export declare function readCliAccountBinding(cli: CliId, backend: ProcessBackend, config: RuntimeConfig, project: string, signal: AbortSignal, selectedClaudeRoute?: ClaudeOwnRoute): Promise<string>;

package/lib/types/host/cli-account-binding.js

@@ -1,3 +1,4 @@
+import { readClaudeOwnRoute, claudeRouteStatusArguments, claudeRouteIdentity, ClaudeOwnRouteError, claudeLaunchEnvironment, } from "./claude-own-route.js";
 import { constants } from 'node:fs';
 import { lstat, open } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
@@ -7,7 +8,9 @@ import { CLI_LABELS } from "../shared/types.js";
 import { captureCatalogMetadata, resolveCliExecutable } from "./adapters.js";
 import { readCodexAccount } from "./codex-account.js";
 import { assertAgyNativeAccountRoute } from "./agy-models.js";
+import { readWindowsAgyAccount } from "./agy-windows-account.js";
 import { readFirstPartyModelSources } from "./first-party-models.js";
+import { KimiOAuthModelError } from "./kimi-oauth-models.js";
 import { readPiOmpAccountMaterial, safePiOmpAncestors } from "./pi-omp-native.js";
 import { readOpenCodeProfile, OPENCODE_OAUTH_UNSUPPORTED } from "./opencode-native.js";
 import { openCodeAuthDirectory } from "./opencode-adapter.js";
@@ -17,6 +20,7 @@ import { HermesNousError, selectHermesNousSource } from "./hermes-nous.js";
 import { hermesUnsuppressedEnvironment, projectHermesUnsuppressedAuth } from "./hermes-suppression.js";
 import { readZCodeBindingMaterial, zcodeAuthDirectory } from "./zcode-adapter.js";
 import { ProcessCleanupUnconfirmedError } from "./process.js";
+import { ensureHermesNousFresh, HermesRenewalError } from "./hermes-renewal.js";
 const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
 const text = (v) => typeof v === 'string' && !!v.trim();
 const literal = (v) => text(v) && !/^(?:!|\$|op:\/\/|<|your[_ -]|placeholder|changeme)/i.test(v.trim()) && !/[\x00-\x1f]/.test(v);
@@ -263,10 +267,19 @@ function ownKey(value, env) {
         return;
     return /^[A-Z][A-Z0-9_]*$/.test(value) ? (literal(env[value]) ? env[value] : undefined) : value;
 }
-async function material(cli, backend, config, project, signal) {
+async function material(cli, backend, config, project, signal, selectedClaudeRoute) {
     const home = homedir();
     if (cli === 'antigravity') {
         await assertAgyNativeAccountRoute(signal, home);
+        if (process.platform === 'win32') {
+            const account = await readWindowsAgyAccount(backend, config, signal);
+            return {
+                sourceIds: ['windows-credential:gemini:antigravity'],
+                entries: account.identity.state === 'authenticated' && account.principalHash
+                    ? [{ provider: 'antigravity', principal: { kind: 'oauth', subjectHash: account.principalHash } }]
+                    : [],
+            };
+        }
         const root = join(home, '.gemini');
         const auth = await document(join(root, 'jetski-standalone-oauth-token'), signal);
         const principal = auth.auth_method === 'consumer' && object(auth.token)
@@ -301,24 +314,43 @@ async function material(cli, backend, config, project, signal) {
     if (cli === 'claude' || cli === 'kimi' || cli === 'mimo') {
         const executable = await resolveCliExecutable(cli, backend, config, signal);
         if (cli === 'claude') {
-            const status = JSON.parse(await captureCatalogMetadata(backend, config, [executable, 'auth', 'status', '--json'], project, signal));
-            if (status.loggedIn === true && status.authMethod === 'claude.ai' && text(status.email))
-                return {
-                    sourceIds: [
-                        resolve(process.env.CLAUDE_CONFIG_DIR?.trim() || join(home, '.claude')),
-                        'native:claude-auth-status',
-                    ],
-                    entries: [
-                        {
-                            provider: 'anthropic',
-                            principal: {
-                                kind: 'oauth',
-                                email: status.email.toLowerCase(),
-                                ...(text(status.orgId) ? { organization: status.orgId } : {}),
+            const route = selectedClaudeRoute ?? (await readClaudeOwnRoute(project, signal));
+            if (route.kind === 'native') {
+                const status = JSON.parse(await captureCatalogMetadata(backend, config, claudeRouteStatusArguments(executable, route), project, signal, claudeLaunchEnvironment(), [0, 1]));
+                const identity = claudeRouteIdentity(route, JSON.stringify(status), status.loggedIn === true ? 0 : 1);
+                if (identity.state === 'authenticated' && identity.accountLabel)
+                    return {
+                        sourceIds: [
+                            resolve(route.configDirectory || process.env.CLAUDE_CONFIG_DIR?.trim() || join(home, '.claude')),
+                            'native:claude-auth-status',
+                        ],
+                        entries: [
+                            {
+                                provider: 'anthropic',
+                                route: { source: 'official-native-login' },
+                                principal: {
+                                    kind: 'oauth',
+                                    email: identity.accountLabel.toLowerCase(),
+                                    ...(text(status.orgId) ? { organization: status.orgId } : {}),
+                                },
                             },
-                        },
-                    ],
-                };
+                        ],
+                    };
+                throw new ClaudeOwnRouteError('Claude 官方账号未登录，请使用原生登录');
+            }
+            {
+                const source = route.source;
+                if (!source)
+                    throw new ClaudeOwnRouteError();
+                const entry = credentialEntry(source.provider, source.credential, {
+                    baseUrl: source.baseUrl,
+                    apiType: source.apiType,
+                    anthropicAuth: source.anthropicAuth,
+                    modelEnvironment: source.modelEnvironment,
+                    model: source.model,
+                });
+                return { sourceIds: source.sourceIds, entries: entry ? [entry] : [] };
+            }
         }
         const sources = await readFirstPartyModelSources(cli, executable, project, (argv, env) => captureCatalogMetadata(backend, config, argv, project, signal, env), signal);
         return {
@@ -327,6 +359,7 @@ async function material(cli, backend, config, project, signal) {
                 const entry = credentialEntry(source.provider, source.credential, {
                     baseUrl: source.baseUrl,
                     apiType: source.apiType,
+                    anthropicAuth: source.anthropicAuth,
                 });
                 return entry ? [entry] : [];
             }),
@@ -421,6 +454,13 @@ async function material(cli, backend, config, project, signal) {
     }
     if (cli === 'hermes') {
         const root = effectiveHermesHome(config);
+        await ensureHermesNousFresh({
+            home: root,
+            backend,
+            signal,
+            graceMs: config.graceMs,
+            resolveExecutable: (control) => resolveCliExecutable(cli, backend, config, control),
+        });
         const raw = await assertHermesOwnAccounts(root, signal);
         const provider = raw.config.model?.provider;
         const source = {
@@ -477,10 +517,10 @@ async function material(cli, backend, config, project, signal) {
     return { sourceIds: [], entries: [] };
 }
 /** Host-only account epoch. Never return it from a Gateway response or write credentials to storage. */
-export async function readCliAccountBinding(cli, backend, config, project, signal) {
+export async function readCliAccountBinding(cli, backend, config, project, signal, selectedClaudeRoute) {
     signal.throwIfAborted();
     try {
-        const value = await material(cli, backend, config, project, signal);
+        const value = await material(cli, backend, config, project, signal, selectedClaudeRoute);
         signal.throwIfAborted();
         if (!value.entries.length || !value.sourceIds.length)
             throw new CliAccountBindingError(cli);
@@ -494,7 +534,10 @@ export async function readCliAccountBinding(cli, backend, config, project, signa
         if (error instanceof ProcessCleanupUnconfirmedError)
             throw error;
         signal.throwIfAborted();
-        if (error instanceof CliAccountBindingError)
+        if (error instanceof CliAccountBindingError ||
+            error instanceof KimiOAuthModelError ||
+            error instanceof ClaudeOwnRouteError ||
+            error instanceof HermesRenewalError)
             throw error;
         throw new CliAccountBindingError(cli);
     }