oc-codex-multi-auth 6.0.0 → 6.1.1

package/dist/lib/storage/load-save.js

@@ -0,0 +1,606 @@
+/**
+ * Account storage load/save pipeline.
+ *
+ * Split out of `lib/storage.ts` in RC-2. This module owns:
+ *   - the `.gitignore` side-effect when writing into a project repo,
+ *   - the legacy project + global storage migrations triggered on ENOENT,
+ *   - the project-global fallback seed flow,
+ *   - the atomic write (temp file + rename + EEMPTY guard),
+ *   - and the `withAccountStorageTransaction` read-modify-write primitive
+ *     that every mutating caller above the storage layer uses.
+ *
+ * The error-handling contract is subtle and load-bearing: forward-compat
+ * (`UNSUPPORTED_SCHEMA_VERSION`) and unknown-V2 failures MUST reach the
+ * caller. Swallowing either would overwrite future-schema credentials or
+ * silently discard a user's V2 file, which is exactly the class of bug the
+ * audit flagged.
+ */
+import { promises as fs, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { ACCOUNTS_FILE_NAME, LEGACY_ACCOUNTS_FILE_NAME } from "../constants.js";
+import { createLogger } from "../logger.js";
+import { AnyAccountStorageSchema, getValidationErrors } from "../schemas.js";
+import { renameWithWindowsRetry } from "./atomic-write.js";
+import { formatStorageErrorHint, StorageError } from "./errors.js";
+import { normalizeAccountStorage } from "./normalize.js";
+import { getConfigDir } from "./paths.js";
+import { getCurrentLegacyProjectStoragePath, getCurrentProjectRoot, getCurrentProjectStorageKey, getCurrentStoragePath, getStoragePath, withStorageLock, } from "./state.js";
+import { buildV2RecoveryHint, UNKNOWN_V2_FORMAT_CODE, } from "./migrations.js";
+import { acquireOrDetectLock } from "./worktree-lock.js";
+import { isKeychainOptInEnabled, readFromKeychain, writeToKeychain, deleteFromKeychain, } from "./keychain.js";
+import os from "node:os";
+const log = createLogger("storage");
+/**
+ * Probes the worktree lock for the currently active storage path and surfaces
+ * any foreign live lock as a non-fatal warning. The lock check is advisory:
+ * Phase 4 F2 deliberately chose warn-over-block so a user with two legitimate
+ * OpenCode sessions on the same project (separate worktrees, IDE + CLI) is
+ * never stranded. The warning still carries enough detail (pid, host, cwd)
+ * for the user to reconcile state manually if a rotation was lost to a race.
+ *
+ * Failure modes:
+ *   - Storage path is not resolvable (no project, no global dir set): skip
+ *     silently, the actual storage call will surface the real error.
+ *   - Lock file unreadable (disk full, EACCES): log at debug so it cannot
+ *     drown the normal "collision detected" warning, then continue. A broken
+ *     sidecar must never gate auth-critical reads/writes.
+ */
+async function checkWorktreeLockForCurrentStorage(operation) {
+    let path;
+    try {
+        path = getStoragePath();
+    }
+    catch (error) {
+        log.debug("Skipping worktree lock check: storage path unavailable", {
+            error: String(error),
+        });
+        return;
+    }
+    try {
+        const result = await acquireOrDetectLock(path);
+        if (!result.acquired && result.foreign) {
+            log.warn("Multi-worktree collision detected on account storage", {
+                operation,
+                storagePath: path,
+                foreignPid: result.foreign.pid,
+                foreignHost: result.foreign.hostname,
+                foreignCwd: result.foreign.cwd,
+                foreignLastActive: result.foreign.lastActive,
+                ourPid: process.pid,
+                ourHost: os.hostname(),
+                ourCwd: process.cwd(),
+            });
+        }
+    }
+    catch (error) {
+        log.debug("Worktree lock probe failed", {
+            operation,
+            storagePath: path,
+            error: String(error),
+        });
+    }
+}
+async function ensureGitignore(storagePath) {
+    if (!getCurrentStoragePath())
+        return;
+    const configDir = dirname(storagePath);
+    const inferredProjectRoot = dirname(configDir);
+    const candidateRoots = [getCurrentProjectRoot(), inferredProjectRoot].filter((root) => typeof root === "string" && root.length > 0);
+    const projectRoot = candidateRoots.find((root) => existsSync(join(root, ".git")));
+    if (!projectRoot)
+        return;
+    const gitignorePath = join(projectRoot, ".gitignore");
+    try {
+        let content = "";
+        if (existsSync(gitignorePath)) {
+            content = await fs.readFile(gitignorePath, "utf-8");
+            const lines = content.split("\n").map((l) => l.trim());
+            if (lines.includes(".opencode") || lines.includes(".opencode/") || lines.includes("/.opencode") || lines.includes("/.opencode/")) {
+                return;
+            }
+        }
+        const newContent = content.endsWith("\n") || content === "" ? content : content + "\n";
+        await fs.writeFile(gitignorePath, newContent + ".opencode/\n", "utf-8");
+        log.debug("Added .opencode to .gitignore", { path: gitignorePath });
+    }
+    catch (error) {
+        log.warn("Failed to update .gitignore", { error: String(error) });
+    }
+}
+async function migrateStorageFileIfNeeded(legacyPath, nextPath, persist, label) {
+    if (!legacyPath || legacyPath === nextPath || !existsSync(legacyPath)) {
+        return null;
+    }
+    try {
+        const legacyContent = await fs.readFile(legacyPath, "utf-8");
+        const legacyData = JSON.parse(legacyContent);
+        const normalized = normalizeAccountStorage(legacyData, legacyPath);
+        if (!normalized)
+            return null;
+        await persist(normalized);
+        try {
+            await fs.unlink(legacyPath);
+            log.info(`Removed legacy ${label} after migration`, { path: legacyPath });
+        }
+        catch (unlinkError) {
+            const code = unlinkError.code;
+            if (code !== "ENOENT") {
+                log.warn(`Failed to remove legacy ${label} after migration`, {
+                    path: legacyPath,
+                    error: String(unlinkError),
+                });
+            }
+        }
+        log.info(`Migrated legacy ${label}`, {
+            from: legacyPath,
+            to: nextPath,
+            accounts: normalized.accounts.length,
+        });
+        return normalized;
+    }
+    catch (error) {
+        // Forward-compat failures should not be masked as migration warnings.
+        if (error instanceof StorageError && error.code === "UNSUPPORTED_SCHEMA_VERSION") {
+            throw error;
+        }
+        log.warn(`Failed to migrate legacy ${label}`, {
+            from: legacyPath,
+            to: nextPath,
+            error: String(error),
+        });
+        return null;
+    }
+}
+async function migrateLegacyProjectStorageIfNeeded(persist = saveAccounts) {
+    return migrateStorageFileIfNeeded(getCurrentLegacyProjectStoragePath(), getStoragePath(), persist, "project account storage");
+}
+/**
+ * Resolves the global (non-project) account storage path.
+ */
+function getGlobalAccountsStoragePath() {
+    return join(getConfigDir(), ACCOUNTS_FILE_NAME);
+}
+function getLegacyGlobalAccountsStoragePath() {
+    return join(getConfigDir(), LEGACY_ACCOUNTS_FILE_NAME);
+}
+async function migrateLegacyGlobalStorageIfNeeded() {
+    const nextPath = getGlobalAccountsStoragePath();
+    const persistGlobalStorage = async (storage) => {
+        await writeAccountsToPathUnlocked(nextPath, storage);
+    };
+    return migrateStorageFileIfNeeded(getLegacyGlobalAccountsStoragePath(), nextPath, persistGlobalStorage, "global account storage");
+}
+/**
+ * Returns true when project-scoped storage is active and a global fallback is meaningful.
+ */
+function shouldUseProjectGlobalFallback() {
+    return Boolean(getCurrentStoragePath() && getCurrentProjectRoot());
+}
+/**
+ * Loads account data from global storage as a fallback when project storage is missing.
+ * Returns null for missing/unusable global storage and never throws to callers.
+ */
+async function loadGlobalAccountsFallback() {
+    const currentStoragePath = getCurrentStoragePath();
+    if (!shouldUseProjectGlobalFallback() || !currentStoragePath) {
+        return null;
+    }
+    const migrated = await migrateLegacyGlobalStorageIfNeeded();
+    if (migrated) {
+        return migrated;
+    }
+    const globalStoragePath = getGlobalAccountsStoragePath();
+    if (globalStoragePath === currentStoragePath) {
+        return null;
+    }
+    try {
+        const content = await fs.readFile(globalStoragePath, "utf-8");
+        const data = JSON.parse(content);
+        const schemaErrors = getValidationErrors(AnyAccountStorageSchema, data);
+        if (schemaErrors.length > 0) {
+            log.warn("Global account storage schema validation warnings", {
+                path: globalStoragePath,
+                errors: schemaErrors.slice(0, 5),
+            });
+        }
+        const normalized = normalizeAccountStorage(data, globalStoragePath);
+        if (!normalized)
+            return null;
+        log.info("Loaded global account storage as project fallback", {
+            from: globalStoragePath,
+            to: currentStoragePath,
+            accounts: normalized.accounts.length,
+        });
+        return normalized;
+    }
+    catch (error) {
+        // Propagate forward-compat failures so the caller can surface them to the
+        // user instead of silently falling back to an empty global pool.
+        if (error instanceof StorageError && error.code === "UNSUPPORTED_SCHEMA_VERSION") {
+            throw error;
+        }
+        const code = error.code;
+        if (code !== "ENOENT") {
+            log.warn("Failed to load global fallback account storage", {
+                from: globalStoragePath,
+                to: currentStoragePath,
+                error: String(error),
+            });
+        }
+        return null;
+    }
+}
+/**
+ * Core account-loading routine shared by normal reads and transactional storage handlers.
+ * Handles schema normalization, legacy migration, and optional fallback seeding.
+ */
+async function loadAccountsInternal(persistMigration) {
+    // Advisory: surface multi-worktree collisions before the read but never
+    // block. Must come before the try/catch so a genuine storage error still
+    // takes precedence over any lock-related log output below.
+    await checkWorktreeLockForCurrentStorage("load");
+    // Opt-in keychain backend. When `CODEX_KEYCHAIN=1` is set, the keychain
+    // holds the authoritative V3 JSON blob and the on-disk file (if any) is
+    // only kept as a post-migration rollback artefact. If the keychain lookup
+    // fails for any reason (native module missing, keychain locked, no entry
+    // yet) we fall through to the existing JSON load path so the plugin never
+    // silently loses credentials. This preserves the default-off contract
+    // documented in docs/audits/13-phased-roadmap.md#phase-4-f1.
+    if (isKeychainOptInEnabled()) {
+        const projectKey = getCurrentProjectStorageKey();
+        try {
+            const blob = await readFromKeychain(projectKey);
+            if (blob !== null) {
+                try {
+                    const parsed = JSON.parse(blob);
+                    const normalized = normalizeAccountStorage(parsed, "<keychain>");
+                    if (normalized)
+                        return normalized;
+                }
+                catch (parseErr) {
+                    // Corrupt keychain entry: log but fall through to JSON so the
+                    // user can recover from their on-disk backup.
+                    log.warn("keychain: stored payload failed to parse; falling back to JSON", {
+                        error: String(parseErr),
+                    });
+                }
+            }
+            else {
+                log.info("keychain: no entry found; falling back to JSON read");
+            }
+        }
+        catch (err) {
+            log.warn("keychain: read failed; falling back to JSON", {
+                error: String(err),
+            });
+        }
+    }
+    try {
+        const path = getStoragePath();
+        const content = await fs.readFile(path, "utf-8");
+        const data = JSON.parse(content);
+        const schemaErrors = getValidationErrors(AnyAccountStorageSchema, data);
+        if (schemaErrors.length > 0) {
+            log.warn("Account storage schema validation warnings", { errors: schemaErrors.slice(0, 5) });
+        }
+        const normalized = normalizeAccountStorage(data, path);
+        const storedVersion = data && typeof data === "object" && !Array.isArray(data)
+            ? data.version
+            : undefined;
+        if (normalized && storedVersion !== normalized.version) {
+            log.info("Migrating account storage to v3", { from: storedVersion, to: normalized.version });
+            if (persistMigration) {
+                try {
+                    await persistMigration(normalized);
+                }
+                catch (saveError) {
+                    log.warn("Failed to persist migrated storage", { error: String(saveError) });
+                }
+            }
+        }
+        return normalized;
+    }
+    catch (error) {
+        // Forward-compat failures must reach the caller instead of being silently
+        // downgraded to an empty load, which would clobber the user's future-format
+        // credentials on the next save.
+        if (error instanceof StorageError && error.code === "UNSUPPORTED_SCHEMA_VERSION") {
+            throw error;
+        }
+        // Unknown-V2 detection must NOT be silently dropped: the catch below
+        // swallows generic errors by design (keeps an unreadable file from
+        // crashing the whole plugin), but V2 is a specific, recoverable case
+        // where the user needs to know their credentials were quarantined.
+        // Re-throw so the UI/CLI layer can render the recovery hint.
+        if (error instanceof StorageError && error.code === UNKNOWN_V2_FORMAT_CODE) {
+            // Annotate with the concrete storage path that triggered the reject
+            // so the recovery hint points at the real file.
+            const concretePath = (() => {
+                try {
+                    return getStoragePath();
+                }
+                catch {
+                    return "";
+                }
+            })();
+            if (concretePath) {
+                throw new StorageError(error.message, UNKNOWN_V2_FORMAT_CODE, concretePath, buildV2RecoveryHint(concretePath), error);
+            }
+            throw error;
+        }
+        const code = error.code;
+        if (code === "ENOENT") {
+            const migrated = persistMigration
+                ? await migrateLegacyProjectStorageIfNeeded(persistMigration)
+                : null;
+            if (migrated)
+                return migrated;
+            if (!shouldUseProjectGlobalFallback()) {
+                const migratedGlobal = persistMigration
+                    ? await migrateLegacyGlobalStorageIfNeeded()
+                    : null;
+                if (migratedGlobal)
+                    return migratedGlobal;
+                return null;
+            }
+            const globalFallback = await loadGlobalAccountsFallback();
+            if (!globalFallback)
+                return null;
+            if (persistMigration) {
+                const seedPath = getStoragePath();
+                try {
+                    await fs.access(seedPath);
+                    return globalFallback;
+                }
+                catch (accessError) {
+                    const accessCode = accessError.code;
+                    if (accessCode !== "ENOENT") {
+                        log.warn("Failed to inspect project seed path before fallback seeding", {
+                            path: seedPath,
+                            error: String(accessError),
+                        });
+                        return globalFallback;
+                    }
+                    // File is missing; proceed with seed write.
+                }
+                try {
+                    await persistMigration(globalFallback);
+                    log.info("Seeded project account storage from global fallback", {
+                        path: seedPath,
+                        accounts: globalFallback.accounts.length,
+                    });
+                }
+                catch (persistError) {
+                    log.warn("Failed to seed project storage from global fallback", {
+                        path: seedPath,
+                        error: String(persistError),
+                    });
+                }
+            }
+            return globalFallback;
+        }
+        log.error("Failed to load account storage", { error: String(error) });
+        return null;
+    }
+}
+/**
+ * Writes account storage without acquiring the outer storage mutex.
+ * Callers must already be inside withStorageLock when using this helper directly.
+ */
+async function writeAccountsToPathUnlocked(path, storage) {
+    const uniqueSuffix = `${Date.now()}.${Math.random().toString(36).slice(2, 8)}`;
+    const tempPath = `${path}.${uniqueSuffix}.tmp`;
+    try {
+        await fs.mkdir(dirname(path), { recursive: true });
+        await ensureGitignore(path);
+        // Normalize before persisting so every write path enforces dedup semantics
+        // (exact identity dedupe plus legacy email dedupe for identity-less records).
+        const normalizedStorage = normalizeAccountStorage(storage) ?? storage;
+        const content = JSON.stringify(normalizedStorage, null, 2);
+        await fs.writeFile(tempPath, content, { encoding: "utf-8", mode: 0o600 });
+        const stats = await fs.stat(tempPath);
+        if (stats.size === 0) {
+            const emptyError = Object.assign(new Error("File written but size is 0"), { code: "EEMPTY" });
+            throw emptyError;
+        }
+        await renameWithWindowsRetry(tempPath, path);
+    }
+    catch (error) {
+        try {
+            await fs.unlink(tempPath);
+        }
+        catch {
+            // Ignore cleanup failure.
+        }
+        const err = error;
+        const code = err?.code || "UNKNOWN";
+        const hint = formatStorageErrorHint(error, path);
+        log.error("Failed to save accounts", {
+            path,
+            code,
+            message: err?.message,
+            hint,
+        });
+        throw new StorageError(`Failed to save accounts: ${err?.message || "Unknown error"}`, code, path, hint, err instanceof Error ? err : undefined);
+    }
+}
+/**
+ * Post-keychain-write migration helper: if a legacy on-disk JSON file still
+ * exists for the current storage path, rename it with a timestamped
+ * `.migrated-to-keychain.<ts>` suffix instead of deleting it. Preserving the
+ * original file as a rollback artefact is load-bearing: it is the user's
+ * explicit escape hatch if the keychain backend turns out to be unreliable
+ * on their platform.
+ *
+ * Atomicity across a partial migration window (F1 post-merge HIGH finding):
+ * if the rename fails (EACCES, EBUSY on Windows, disk full, parent dir
+ * permission drift) the file at `path` would otherwise hold a stale-but-valid
+ * V3 blob while the keychain holds the authoritative fresh blob. This is
+ * safe while the opt-in is on (keychain wins at load time) but silently
+ * resurrects stale credentials if the user later unsets `CODEX_KEYCHAIN`.
+ * We resolve this by overwriting the file with the fresh normalized blob
+ * when the rename fails so both sides agree, at the cost of losing that
+ * one rollback artefact. This matches the "rollback invariant" documented
+ * in the F1 post-merge review (option (a)).
+ */
+async function migrateOnDiskJsonToKeychainBackup(path, freshStorage) {
+    try {
+        await fs.access(path);
+    }
+    catch {
+        return; // No legacy file to migrate.
+    }
+    const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
+    const backup = `${path}.migrated-to-keychain.${timestamp}`;
+    try {
+        await fs.rename(path, backup);
+        // Re-apply 0o600 after rename (F1 post-merge LOW finding). POSIX
+        // preserves mode across a rename in-place, but if the filesystem layer
+        // or a prior process ever changed the mode (cp from a world-readable
+        // source, umask drift on a foreign mount, manual `touch`) the backup
+        // could end up group/world-readable. Re-chmod is a cheap belt-and-
+        // braces guard. Windows ignores POSIX mode bits, so skip there.
+        if (process.platform !== "win32") {
+            try {
+                await fs.chmod(backup, 0o600);
+            }
+            catch (chmodErr) {
+                log.warn("keychain: failed to chmod backup to 0o600 after rename", {
+                    backup,
+                    error: String(chmodErr),
+                });
+            }
+        }
+        log.info("keychain: migrated on-disk JSON to keychain; original preserved for rollback", {
+            from: path,
+            backup,
+        });
+    }
+    catch (err) {
+        log.warn("keychain: failed to rename on-disk JSON after successful keychain write; overwriting on-disk copy with fresh blob to prevent stale-rollback-on-opt-out", {
+            path,
+            error: String(err),
+        });
+        try {
+            await writeAccountsToPathUnlocked(path, freshStorage);
+        }
+        catch (writeErr) {
+            // Last-resort: on-disk refresh also failed. The keychain still
+            // holds the authoritative blob so current operation succeeds, but
+            // a subsequent opt-in toggle off would now surface the stale
+            // file. Log at error so the operator can reconcile manually.
+            log.error("keychain: failed to refresh stale on-disk JSON after rename failure; opt-in toggle off may surface stale credentials", {
+                path,
+                error: String(writeErr),
+            });
+        }
+    }
+}
+async function saveAccountsUnlocked(storage) {
+    // Refresh our lock (or surface a collision) on every write. This also
+    // bumps `lastActive`, which is the stale-detection timestamp read by
+    // other worktrees on their next acquire.
+    await checkWorktreeLockForCurrentStorage("save");
+    if (isKeychainOptInEnabled()) {
+        // Normalize before serializing so the keychain receives the same shape
+        // the JSON backend would have written. Using the same JSON format keeps
+        // migration and rollback symmetric: a rolled-back JSON file is valid
+        // input for a future opt-in migration in either direction.
+        const normalizedStorage = normalizeAccountStorage(storage) ?? storage;
+        const blob = JSON.stringify(normalizedStorage, null, 2);
+        const projectKey = getCurrentProjectStorageKey();
+        const result = await writeToKeychain(projectKey, blob);
+        if (result.ok) {
+            await migrateOnDiskJsonToKeychainBackup(getStoragePath(), normalizedStorage);
+            return;
+        }
+        log.warn("keychain: write failed; falling back to JSON for this save", {
+            error: result.error,
+        });
+    }
+    await writeAccountsToPathUnlocked(getStoragePath(), storage);
+}
+/**
+ * Loads OAuth accounts from disk storage.
+ * Automatically migrates v1 storage to v3 format if needed.
+ * @returns AccountStorageV3 if file exists and is valid, null otherwise
+ * @throws StorageError (code `UNSUPPORTED_SCHEMA_VERSION`) when the on-disk
+ *   `version` field is greater than the newest format this plugin understands.
+ *   Surfacing the error stops a downgraded plugin from overwriting the user's
+ *   future-schema credentials with a stale or empty payload.
+ */
+export async function loadAccounts() {
+    return withStorageLock(async () => loadAccountsInternal(saveAccountsUnlocked));
+}
+/**
+ * Executes a read-modify-write transaction under the storage lock and exposes
+ * an unlocked persist callback so nested save operations do not deadlock.
+ */
+export async function withAccountStorageTransaction(handler) {
+    return withStorageLock(async () => {
+        const current = await loadAccountsInternal(saveAccountsUnlocked);
+        return handler(current, saveAccountsUnlocked);
+    });
+}
+/**
+ * Persists account storage to disk using atomic write (temp file + rename).
+ * Creates the .opencode directory if it doesn't exist.
+ * Verifies file was written correctly and provides detailed error messages.
+ * @param storage - Account storage data to save
+ * @throws StorageError with platform-aware hints on failure
+ */
+export async function saveAccounts(storage) {
+    return withStorageLock(async () => {
+        await saveAccountsUnlocked(storage);
+    });
+}
+/**
+ * Deletes the account storage file from disk.
+ * Silently ignores if file doesn't exist.
+ *
+ * Ordering (F1 post-merge MEDIUM finding): unlink the on-disk JSON FIRST,
+ * then delete the keychain entry. If we cleared the keychain first and the
+ * unlink failed for a non-ENOENT reason (EACCES, EBUSY, filesystem drift),
+ * a subsequent load with opt-in still on would take the "no keychain entry,
+ * fall back to JSON" branch (see `loadAccountsInternal`) and resurrect the
+ * credentials from the still-present JSON file. Callers typically run
+ * `clearAccounts` to recover from a compromised token, so a silent
+ * resurrection is a meaningful failure mode.
+ *
+ * Fail-safe invariant: if the JSON unlink fails (non-ENOENT), we skip the
+ * keychain delete and log at `error`. Both copies remain in sync so the
+ * caller can retry safely. The operation is still best-effort (never
+ * throws) to preserve the existing contract above the storage layer.
+ */
+export async function clearAccounts() {
+    return withStorageLock(async () => {
+        let jsonCleared = true;
+        try {
+            const path = getStoragePath();
+            await fs.unlink(path);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== "ENOENT") {
+                jsonCleared = false;
+                log.error("Failed to clear account storage; skipping keychain delete to keep storage sides in sync. Caller should retry.", { error: String(error) });
+            }
+        }
+        // Only delete the keychain entry after the on-disk copy is gone (or
+        // was already absent). This preserves atomicity-enough semantics: a
+        // partial failure leaves both sides present rather than clearing
+        // one side and letting a subsequent load rehydrate from the other.
+        if (jsonCleared && isKeychainOptInEnabled()) {
+            try {
+                const projectKey = getCurrentProjectStorageKey();
+                await deleteFromKeychain(projectKey);
+            }
+            catch (err) {
+                log.warn("keychain: delete during clearAccounts failed", {
+                    error: String(err),
+                });
+            }
+        }
+    });
+}
+//# sourceMappingURL=load-save.js.map

package/dist/lib/storage/load-save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-save.js","sourceRoot":"","sources":["../../../lib/storage/load-save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,kCAAkC,EAClC,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,EACd,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEpC;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,kCAAkC,CAC/C,SAA0B;IAE1B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,cAAc,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,wDAAwD,EAAE;YAClE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAC/D,SAAS;gBACT,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBAC9B,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;gBACpC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;gBAC5C,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE;gBACtB,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACtC,SAAS;YACT,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,WAAmB;IAChD,IAAI,CAAC,qBAAqB,EAAE;QAAE,OAAO;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,CAAC,qBAAqB,EAAE,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAC1E,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CACtE,CAAC;IACF,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjI,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QACvF,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,GAAG,cAAc,EAAE,OAAO,CAAC,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,UAAyB,EACzB,QAAgB,EAChB,OAAqD,EACrD,KAAa;IAEb,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAY,CAAC;QACxD,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,GAAI,WAAqC,CAAC,IAAI,CAAC;YACzD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,2BAA2B,KAAK,kBAAkB,EAAE;oBAC3D,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,EAAE,EAAE;YACnC,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,QAAQ;YACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;SACrC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,4BAA4B,KAAK,EAAE,EAAE;YAC5C,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,UAAwD,YAAY;IAEpE,OAAO,0BAA0B,CAC/B,kCAAkC,EAAE,EACpC,cAAc,EAAE,EAChB,OAAO,EACP,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B;IACnC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,yBAAyB,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,kCAAkC;IAC/C,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;IAChD,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAyB,EAAiB,EAAE;QAC9E,MAAM,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,OAAO,0BAA0B,CAC/B,kCAAkC,EAAE,EACpC,QAAQ,EACR,oBAAoB,EACpB,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B;IACrC,OAAO,OAAO,CAAC,qBAAqB,EAAE,IAAI,qBAAqB,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B;IACvC,MAAM,kBAAkB,GAAG,qBAAqB,EAAE,CAAC;IACnD,IAAI,CAAC,8BAA8B,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,kCAAkC,EAAE,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,iBAAiB,GAAG,4BAA4B,EAAE,CAAC;IACzD,IAAI,iBAAiB,KAAK,kBAAkB,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAE5C,MAAM,YAAY,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBAC5D,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAC5D,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,kBAAkB;YACtB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;SACrC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBACzD,IAAI,EAAE,iBAAiB;gBACvB,EAAE,EAAE,kBAAkB;gBACtB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CACjC,gBAAuE;IAEvE,wEAAwE;IACxE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,kCAAkC,CAAC,MAAM,CAAC,CAAC;IAEjD,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;oBAC3C,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBACjE,IAAI,UAAU;wBAAE,OAAO,UAAU,CAAC;gBACpC,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,8DAA8D;oBAC9D,8CAA8C;oBAC9C,GAAG,CAAC,IAAI,CAAC,gEAAgE,EAAE;wBACzE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBACtD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAE5C,MAAM,YAAY,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvD,MAAM,aAAa,GACjB,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACtD,CAAC,CAAE,IAA8B,CAAC,OAAO;YACzC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,UAAU,IAAI,aAAa,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACrC,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,4EAA4E;QAC5E,gCAAgC;QAChC,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,6DAA6D;QAC7D,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC3E,oEAAoE;YACpE,gDAAgD;YAChD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC;oBACH,OAAO,cAAc,EAAE,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CACpB,KAAK,CAAC,OAAO,EACb,sBAAsB,EACtB,YAAY,EACZ,mBAAmB,CAAC,YAAY,CAAC,EACjC,KAAK,CACN,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,gBAAgB;gBAC/B,CAAC,CAAC,MAAM,mCAAmC,CAAC,gBAAgB,CAAC;gBAC7D,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,IAAI,CAAC,8BAA8B,EAAE,EAAE,CAAC;gBACtC,MAAM,cAAc,GAAG,gBAAgB;oBACrC,CAAC,CAAC,MAAM,kCAAkC,EAAE;oBAC5C,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,cAAc;oBAAE,OAAO,cAAc,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,0BAA0B,EAAE,CAAC;YAC1D,IAAI,CAAC,cAAc;gBAAE,OAAO,IAAI,CAAC;YAEjC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1B,OAAO,cAAc,CAAC;gBACxB,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,MAAM,UAAU,GAAI,WAAqC,CAAC,IAAI,CAAC;oBAC/D,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;wBAC5B,GAAG,CAAC,IAAI,CAAC,6DAA6D,EAAE;4BACtE,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;yBAC3B,CAAC,CAAC;wBACH,OAAO,cAAc,CAAC;oBACxB,CAAC;oBACD,4CAA4C;gBAC9C,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC;oBACvC,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;wBAC9D,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM;qBACzC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;wBAC9D,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,2BAA2B,CAAC,IAAY,EAAE,OAAyB;IAChF,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,YAAY,MAAM,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5B,2EAA2E;QAC3E,8EAA8E;QAC9E,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9F,MAAM,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QAED,MAAM,GAAG,GAAG,KAA8B,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC;QACpC,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAEjD,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE;YACnC,IAAI;YACJ,IAAI;YACJ,OAAO,EAAE,GAAG,EAAE,OAAO;YACrB,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,YAAY,CACpB,4BAA4B,GAAG,EAAE,OAAO,IAAI,eAAe,EAAE,EAC7D,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,iCAAiC,CAC9C,IAAY,EACZ,YAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,6BAA6B;IACvC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,GAAG,IAAI,yBAAyB,SAAS,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,iEAAiE;QACjE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,gEAAgE;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,wDAAwD,EAAE;oBACjE,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,8EAA8E,EAAE;YACvF,IAAI,EAAE,IAAI;YACV,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,wJAAwJ,EACxJ;YACE,IAAI;YACJ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,2BAA2B,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,+DAA+D;YAC/D,kEAAkE;YAClE,6DAA6D;YAC7D,6DAA6D;YAC7D,GAAG,CAAC,KAAK,CACP,sHAAsH,EACtH;gBACE,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxB,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAyB;IAC3D,sEAAsE;IACtE,qEAAqE;IACrE,yCAAyC;IACzC,MAAM,kCAAkC,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC7B,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,iCAAiC,CAAC,cAAc,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,4DAA4D,EAAE;YACrE,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,2BAA2B,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAGe;IAEf,OAAO,eAAe,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,OAAO,eAAe,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,eAAe,CAAC,KAAK,IAAI,EAAE;QAChC,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,WAAW,GAAG,KAAK,CAAC;gBACpB,GAAG,CAAC,KAAK,CACP,+GAA+G,EAC/G,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,mEAAmE;QACnE,IAAI,WAAW,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;gBACjD,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;oBACvD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/storage/migrations.d.ts

@@ -5,6 +5,41 @@
 import { type ModelFamily } from "../prompts/codex.js";
 import type { AccountIdSource } from "../types.js";
 export type CooldownReason = "auth-failure" | "network-error";
+/**
+ * StorageError code emitted when a `version: 2` account file is loaded.
+ *
+ * V2 is an intermediate account schema produced by legacy 4.x plugin builds
+ * that never shipped with a documented shape nor a forward-migrator to V3.
+ * The safe behaviour is to refuse to load V2 explicitly so the user's
+ * credentials are not silently discarded; callers surface this code to the
+ * user alongside a recovery hint.
+ */
+export declare const UNKNOWN_V2_FORMAT_CODE = "UNKNOWN_V2_FORMAT";
+/**
+ * Minimal detection shape for V2 account storage.
+ *
+ * The full V2 schema was never documented and no V2 migrator shipped, so this
+ * type is intentionally coarse: it only captures the fields needed to detect
+ * that a file claims `version: 2` and contains something account-shaped. Do
+ * not extend this shape without evidence of the real V2 layout - inventing
+ * fields risks producing a silently-wrong migration.
+ */
+export interface AccountStorageV2Detected {
+    version: 2;
+    accounts?: unknown[];
+}
+/**
+ * Diagnostic message shown when the loader refuses a V2 storage file.
+ * Pulled into a helper so storage.ts, import paths, and tests produce
+ * identical copy without drifting.
+ */
+export declare function buildV2RejectionMessage(): string;
+/**
+ * Recovery hint shown alongside the V2 rejection message.
+ * @param path - Absolute path of the offending storage file, or a placeholder
+ *   when the caller cannot determine the source (e.g. in-memory normalization).
+ */
+export declare function buildV2RecoveryHint(path: string): string;
 export interface RateLimitStateV3 {
     [key: string]: number | undefined;
 }