@agent-native/core 0.46.0 → 0.48.1

package/dist/coding-tools/index.js

@@ -1,9 +1,18 @@
 import { spawn } from "node:child_process";
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
-const DEFAULT_COMMAND_TIMEOUT_MS = 30_000;
+const DEFAULT_COMMAND_TIMEOUT_MS = 120_000;
 const DEFAULT_MAX_OUTPUT_CHARS = 50_000;
 const DEFAULT_MAX_FILE_READ_CHARS = 120_000;
+/**
+ * Output retention window for bash: keep first HEAD_CHARS + last TAIL_CHARS,
+ * separated by a truncation marker.  Replaces the old flat 4 000-char cap.
+ */
+export const BASH_OUTPUT_HEAD_CHARS = 4_096;
+export const BASH_OUTPUT_TAIL_CHARS = 16_384;
+/** Maximum chars stored per side of an edit/write for diff rendering. */
+export const EDIT_CONTENT_MAX_CHARS = 49_152;
 const mutationQueues = new Map();
 export function createCodingToolRegistry(options = {}) {
     const cwd = path.resolve(options.cwd ?? process.cwd());
@@ -14,7 +23,7 @@ export function createCodingToolRegistry(options = {}) {
     return {
         bash: {
             tool: {
-                description: "Run a shell command. This is the tool for file discovery, directory listing, and search: reach first for `rg <pattern>` and `rg --files`, which are much faster than `grep` or `find`. Also use it to run tests, builds, package scripts, `git status`/`git diff`, and project CLIs. Use the read tool to view a single file's contents; use bash for everything else. Very long output is truncated.",
+                description: 'Run a shell command. This is the tool for file discovery, directory listing, and search: reach first for `rg <pattern>` and `rg --files`, which are much faster than `grep` or `find`. Also use it to run tests, builds, package scripts, `git status`/`git diff`, and project CLIs. Use the read tool to view a single file\'s contents; use bash for everything else. Very long output is truncated.\n\nSet `background` to "true" to spawn the command detached and return immediately. The tool returns the PID and a log file path; the process writes its stdout/stderr to that log file. You can read or tail the log file to check progress, and run `kill <pid>` to stop it. Background processes are not killed when the timeout expires.',
                 parameters: {
                     type: "object",
                     properties: {
@@ -28,12 +37,17 @@ export function createCodingToolRegistry(options = {}) {
                         },
                         timeoutMs: {
                             type: "string",
-                            description: "Timeout in milliseconds; the command is killed if it exceeds this. Defaults to 30000, capped at 600000.",
+                            description: "Timeout in milliseconds; the command is killed if it exceeds this. Defaults to 120000, capped at 600000. Ignored when background is true.",
                         },
                         stdin: {
                             type: "string",
                             description: "Text to pipe into the command's stdin.",
                         },
+                        background: {
+                            type: "string",
+                            description: 'Set to "true" to spawn the command detached in the background and return immediately. Returns the process PID and a log file path where stdout/stderr are written.',
+                            enum: ["true", "false"],
+                        },
                     },
                     required: ["command"],
                 },
@@ -53,6 +67,7 @@ export function createCodingToolRegistry(options = {}) {
                 const timeoutMs = Number.isFinite(requestedTimeoutMs) && requestedTimeoutMs > 0
                     ? Math.min(requestedTimeoutMs, 10 * 60_000)
                     : commandTimeoutMs;
+                const isBackground = stringArg(args.background).toLowerCase() === "true";
                 const policyResult = (await options.beforeBash?.({
                     command,
                     cwd: commandCwd,
@@ -60,8 +75,31 @@ export function createCodingToolRegistry(options = {}) {
                 })) ?? null;
                 if (policyResult)
                     return policyResult;
+                options.onToolMetadata?.("bash", "start", {
+                    toolKind: "bash",
+                    command,
+                    cwd: commandCwd,
+                });
+                if (isBackground) {
+                    const result = spawnBackgroundCommand(command, commandCwd);
+                    options.onToolMetadata?.("bash", "done", {
+                        toolKind: "bash",
+                        command,
+                        cwd: commandCwd,
+                    });
+                    return result;
+                }
                 const result = await runCodingCommand(command, commandCwd, timeoutMs, {
                     stdin: stringArg(args.stdin) || undefined,
+                    onChunk: options.onBashOutputChunk,
+                });
+                options.onToolMetadata?.("bash", "done", {
+                    toolKind: "bash",
+                    command,
+                    cwd: commandCwd,
+                    exitCode: result.code,
+                    durationMs: result.durationMs,
+                    timedOut: result.timedOut || undefined,
                 });
                 if (options.bashThrowsOnNonZero && result.code !== 0) {
                     throw new Error(formatCodingCommandResult(result, maxOutputChars));
@@ -109,7 +147,19 @@ export function createCodingToolRegistry(options = {}) {
                     return `Error: ${requestedPath} is not a file. Use bash for directories and file lists.`;
                 }
                 const content = fs.readFileSync(filePath, "utf8");
-                return truncateCodingOutput(formatFileReadOutput(cwd, filePath, content, args), maxFileReadChars);
+                const lineCount = content.split("\n").length;
+                options.onToolMetadata?.("read", "start", {
+                    toolKind: "read",
+                    filePath: path.relative(cwd, filePath) || requestedPath,
+                    lineCount,
+                });
+                const result = truncateCodingOutput(formatFileReadOutput(cwd, filePath, content, args), maxFileReadChars);
+                options.onToolMetadata?.("read", "done", {
+                    toolKind: "read",
+                    filePath: path.relative(cwd, filePath) || requestedPath,
+                    lineCount,
+                });
+                return result;
             },
         },
         edit: {
@@ -154,6 +204,11 @@ export function createCodingToolRegistry(options = {}) {
                 if (!filePath)
                     return "Error: path must stay inside the workspace.";
                 const edits = parseEditOperations(args);
+                const relPath = path.relative(cwd, filePath) || requestedPath;
+                options.onToolMetadata?.("edit", "start", {
+                    toolKind: "edit",
+                    filePath: relPath,
+                });
                 return queueFileMutation(filePath, async () => {
                     if (!fs.existsSync(filePath)) {
                         throw new Error(`file not found: ${requestedPath}`);
@@ -162,7 +217,8 @@ export function createCodingToolRegistry(options = {}) {
                     if (!stat.isFile()) {
                         throw new Error(`${requestedPath} is not a file`);
                     }
-                    let content = fs.readFileSync(filePath, "utf8");
+                    const originalContent = fs.readFileSync(filePath, "utf8");
+                    let content = originalContent;
                     let replacements = 0;
                     for (const edit of edits) {
                         const count = countOccurrences(content, edit.oldText);
@@ -178,7 +234,17 @@ export function createCodingToolRegistry(options = {}) {
                         replacements += edit.replaceAll ? count : 1;
                     }
                     fs.writeFileSync(filePath, content, "utf8");
-                    return `Edited ${path.relative(cwd, filePath) || requestedPath} (${replacements} replacement${replacements === 1 ? "" : "s"}).`;
+                    // Emit structured diff metadata so the UI can render a real diff.
+                    const truncated = originalContent.length > EDIT_CONTENT_MAX_CHARS ||
+                        content.length > EDIT_CONTENT_MAX_CHARS;
+                    options.onToolMetadata?.("edit", "done", {
+                        toolKind: "edit",
+                        filePath: relPath,
+                        oldText: originalContent.slice(0, EDIT_CONTENT_MAX_CHARS),
+                        newText: content.slice(0, EDIT_CONTENT_MAX_CHARS),
+                        truncated,
+                    });
+                    return `Edited ${relPath} (${replacements} replacement${replacements === 1 ? "" : "s"}).`;
                 });
             },
         },
@@ -211,13 +277,26 @@ export function createCodingToolRegistry(options = {}) {
                 if (!filePath)
                     return "Error: path must stay inside the workspace.";
                 const content = stringArg(args.content);
+                const relPath = path.relative(cwd, filePath) || requestedPath;
+                options.onToolMetadata?.("write", "start", {
+                    toolKind: "write",
+                    filePath: relPath,
+                });
                 return queueFileMutation(filePath, async () => {
                     fs.mkdirSync(path.dirname(filePath), { recursive: true });
                     const existed = fs.existsSync(filePath);
                     fs.writeFileSync(filePath, content, "utf8");
                     const bytes = Buffer.byteLength(content, "utf8");
                     const lines = content.split("\n").length;
-                    return `${existed ? "Updated" : "Created"} ${path.relative(cwd, filePath) || requestedPath} (${lines} lines, ${bytes} bytes).`;
+                    const truncated = content.length > EDIT_CONTENT_MAX_CHARS;
+                    options.onToolMetadata?.("write", "done", {
+                        toolKind: "write",
+                        filePath: relPath,
+                        content: content.slice(0, EDIT_CONTENT_MAX_CHARS),
+                        truncated,
+                        lineCount: lines,
+                    });
+                    return `${existed ? "Updated" : "Created"} ${relPath} (${lines} lines, ${bytes} bytes).`;
                 });
             },
         },
@@ -233,15 +312,20 @@ export async function runCodingCommand(command, cwd, timeoutMs, options = {}) {
     let stdout = "";
     let stderr = "";
     let timedOut = false;
+    const startMs = Date.now();
     const timer = setTimeout(() => {
         timedOut = true;
         child.kill("SIGTERM");
     }, timeoutMs);
     child.stdout?.on("data", (chunk) => {
-        stdout += chunk.toString();
+        const text = chunk.toString();
+        stdout += text;
+        options.onChunk?.(text);
     });
     child.stderr?.on("data", (chunk) => {
-        stderr += chunk.toString();
+        const text = chunk.toString();
+        stderr += text;
+        options.onChunk?.(text);
     });
     if (options.stdin)
         child.stdin?.end(options.stdin);
@@ -252,7 +336,37 @@ export async function runCodingCommand(command, cwd, timeoutMs, options = {}) {
         child.once("exit", resolve);
     });
     clearTimeout(timer);
-    return { code, stdout, stderr, timedOut };
+    return { code, stdout, stderr, timedOut, durationMs: Date.now() - startMs };
+}
+/**
+ * Spawn a command detached in the background.  Returns immediately with the
+ * process PID and a temporary log file path where stdout + stderr are written.
+ *
+ * The child process is intentionally detached from the parent's process group
+ * (`detached: true`, `unref()`) so it continues running after the tool call
+ * completes and is not killed if the agent run exits.  The approval classifier
+ * still applies before this function is reached (see `beforeBash` in the
+ * calling registry).
+ */
+export function spawnBackgroundCommand(command, cwd) {
+    const logFile = path.join(os.tmpdir(), `an-bg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.log`);
+    const logFd = fs.openSync(logFile, "a");
+    const child = spawn(command, {
+        cwd,
+        shell: true,
+        stdio: ["ignore", logFd, logFd],
+        detached: true,
+        env: { ...process.env, FORCE_COLOR: "0" },
+    });
+    child.unref();
+    fs.closeSync(logFd);
+    const pid = child.pid ?? 0;
+    return [
+        `Background process spawned.`,
+        `pid: ${pid}`,
+        `log: ${logFile}`,
+        `Read the log file to check progress. Run \`kill ${pid}\` to stop the process.`,
+    ].join("\n");
 }
 export function formatCodingCommandResult(result, maxChars = DEFAULT_MAX_OUTPUT_CHARS, options = {}) {
     const parts = [
@@ -270,6 +384,19 @@ export function truncateCodingOutput(value, max) {
         return value;
     return `${value.slice(0, max)}\n\n...[truncated ${value.length - max} chars]`;
 }
+/**
+ * Retain the first HEAD_CHARS and the last TAIL_CHARS of bash output, inserting
+ * a truncation marker in the middle.  This is a better window than a simple
+ * prefix slice because the end of the output usually contains the most important
+ * signal (error messages, test results, etc.).
+ */
+export function truncateBashOutput(value, headChars = BASH_OUTPUT_HEAD_CHARS, tailChars = BASH_OUTPUT_TAIL_CHARS) {
+    const max = headChars + tailChars;
+    if (value.length <= max)
+        return value;
+    const omitted = value.length - max;
+    return `${value.slice(0, headChars)}\n\n...[${omitted} chars omitted]\n\n${value.slice(value.length - tailChars)}`;
+}
 export function isReadOnlyShellCommand(command) {
     const normalized = command.trim().toLowerCase();
     if (!normalized)

package/dist/coding-tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coding-tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAgC7B,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAE5C,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D,MAAM,UAAU,wBAAwB,CACtC,UAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACrD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE;YACJ,IAAI,EAAE;gBACJ,WAAW,EACT,uYAAuY;gBACzY,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,+CAA+C;yBAC7D;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sIAAsI;yBACzI;wBACD,SAAS,EAAE;4BACT,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,yGAAyG;yBAC5G;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,wCAAwC;yBACtD;qBACF;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO;oBAAE,OAAO,6BAA6B,CAAC;gBACnD,MAAM,UAAU,GACd,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;oBACjD,aAAa;oBACb,UAAU,EAAE,IAAI;iBACjB,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,4CAA4C,CAAC;gBACtD,CAAC;gBACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAClD,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;oBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,GAAG,MAAM,CAAC;oBAC3C,CAAC,CAAC,gBAAgB,CAAC;gBAEvB,MAAM,YAAY,GAChB,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC1B,OAAO;oBACP,GAAG,EAAE,UAAU;oBACf,SAAS;iBACV,CAAC,CAAC,IAAI,IAAI,CAAC;gBACd,IAAI,YAAY;oBAAE,OAAO,YAAY,CAAC;gBAEtC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE;oBACpE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS;iBAC1C,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,yBAAyB,CAAC,MAAM,EAAE,cAAc,EAAE;oBACvD,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;iBACpE,CAAC,CAAC;YACL,CAAC;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE;gBACJ,WAAW,EACT,+VAA+V;gBACjW,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6FAA6F;yBAChG;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wEAAwE;yBAC3E;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gFAAgF;yBACnF;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,OAAO,0BAA0B,aAAa,EAAE,CAAC;gBACnD,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,OAAO,UAAU,aAAa,0DAA0D,CAAC;gBAC3F,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,OAAO,oBAAoB,CACzB,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAClD,gBAAgB,CACjB,CAAC;YACJ,CAAC;SACF;QACD,IAAI,EAAE;YACJ,IAAI,EAAE;gBACJ,WAAW,EACT,soBAAsoB;gBACxoB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6FAA6F;yBAChG;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sJAAsJ;yBACzJ;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kDAAkD;yBAChE;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;4BAClH,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;yBACxB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kNAAkN;yBACrN;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;gBAC3D,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAE5C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAExC,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;oBACtD,CAAC;oBACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC;oBACpD,CAAC;oBAED,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAChD,IAAI,YAAY,GAAG,CAAC,CAAC;oBACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBACtD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,MAAM,IAAI,KAAK,CACb,4BAA4B,aAAa,KAAK,WAAW,CACvD,IAAI,CAAC,OAAO,CACb,EAAE,CACJ,CAAC;wBACJ,CAAC;wBACD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BACpC,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,aAAa,aAAa,0CAA0C,CAC7F,CAAC;wBACJ,CAAC;wBACD,OAAO,GAAG,IAAI,CAAC,UAAU;4BACvB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;4BAChD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChD,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9C,CAAC;oBAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5C,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa,KAAK,YAAY,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBAClI,CAAC,CAAC,CAAC;YACL,CAAC;SACF;QACD,KAAK,EAAE;YACL,IAAI,EAAE;gBACJ,WAAW,EACT,qVAAqV;gBACvV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8FAA8F;yBACjG;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;gBAC5D,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAE5C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExC,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACzC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa,KAAK,KAAK,WAAW,KAAK,UAAU,CAAC;gBACjI,CAAC,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,GAAW,EACX,SAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;QAC3B,GAAG;QACH,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;KAC1C,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;QAC9C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA2B,EAC3B,QAAQ,GAAG,wBAAwB,EACnC,UAA2C,EAAE;IAE7C,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,aAAa,MAAM,CAAC,IAAI,EAAE;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAW;IAC7D,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,qBAAqB,KAAK,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAElD,qEAAqE;IACrE,sEAAsE;IACtE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,uDAAuD;QACvD,IAAI,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;IACpE,CAAC;IAED,MAAM,eAAe,GAAG;QACtB,QAAQ;QACR,OAAO;QACP,SAAS;QACT,OAAO;QACP,SAAS;QACT,QAAQ;QACR,aAAa;QACb,SAAS;QACT,SAAS;QACT,OAAO;QACP,iCAAiC;QACjC,kCAAkC;KACnC,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAW,EACX,KAAa,EACb,OAAyD;IAEzD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,QAAgB,EAChB,OAAe,EACf,IAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,IAAI,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACrB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,sBAAsB,CAAC,IAA+B,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA6B,EAC7B,KAAa;IAEb,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,SAAS,KAAK,4CAA4C,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,OAAO;QACP,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAI,QAAgB,EAAE,IAA0B;IACxE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAwB,CAAC;IAC7B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;QACzB,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;YACzC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/E,CAAC","sourcesContent":["import { spawn } from \"node:child_process\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\n\nexport interface CodingCommandResult {\n  code: number | null;\n  stdout: string;\n  stderr: string;\n  timedOut: boolean;\n}\n\nexport interface CreateCodingToolRegistryOptions {\n  cwd?: string;\n  restrictToCwd?: boolean;\n  commandTimeoutMs?: number;\n  maxOutputChars?: number;\n  maxFileReadChars?: number;\n  bashThrowsOnNonZero?: boolean;\n  canWrite?: (toolName: \"edit\" | \"write\") => string | null;\n  beforeBash?: (input: {\n    command: string;\n    cwd: string;\n    timeoutMs: number;\n  }) => string | null | Promise<string | null>;\n}\n\ninterface EditOperation {\n  oldText: string;\n  newText: string;\n  replaceAll: boolean;\n}\n\nconst DEFAULT_COMMAND_TIMEOUT_MS = 30_000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 50_000;\nconst DEFAULT_MAX_FILE_READ_CHARS = 120_000;\n\nconst mutationQueues = new Map<string, Promise<unknown>>();\n\nexport function createCodingToolRegistry(\n  options: CreateCodingToolRegistryOptions = {},\n): Record<\"bash\" | \"read\" | \"edit\" | \"write\", ActionEntry> {\n  const cwd = path.resolve(options.cwd ?? process.cwd());\n  const restrictToCwd = options.restrictToCwd ?? false;\n  const commandTimeoutMs =\n    options.commandTimeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;\n  const maxOutputChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  const maxFileReadChars =\n    options.maxFileReadChars ?? DEFAULT_MAX_FILE_READ_CHARS;\n\n  return {\n    bash: {\n      tool: {\n        description:\n          \"Run a shell command. This is the tool for file discovery, directory listing, and search: reach first for `rg <pattern>` and `rg --files`, which are much faster than `grep` or `find`. Also use it to run tests, builds, package scripts, `git status`/`git diff`, and project CLIs. Use the read tool to view a single file's contents; use bash for everything else. Very long output is truncated.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            command: {\n              type: \"string\",\n              description: \"The shell command to run (executed via bash).\",\n            },\n            cwd: {\n              type: \"string\",\n              description:\n                \"Working directory for the command. Relative to the workspace root unless absolute paths are allowed. Defaults to the workspace root.\",\n            },\n            timeoutMs: {\n              type: \"string\",\n              description:\n                \"Timeout in milliseconds; the command is killed if it exceeds this. Defaults to 30000, capped at 600000.\",\n            },\n            stdin: {\n              type: \"string\",\n              description: \"Text to pipe into the command's stdin.\",\n            },\n          },\n          required: [\"command\"],\n        },\n      },\n      run: async (args) => {\n        const command = stringArg(args.command);\n        if (!command) return \"Error: command is required.\";\n        const commandCwd =\n          resolveCodingPath(cwd, stringArg(args.cwd) || \".\", {\n            restrictToCwd,\n            allowEmpty: true,\n          }) ?? \"\";\n        if (!commandCwd) {\n          return \"Error: cwd must stay inside the workspace.\";\n        }\n        const requestedTimeoutMs = Number(args.timeoutMs);\n        const timeoutMs =\n          Number.isFinite(requestedTimeoutMs) && requestedTimeoutMs > 0\n            ? Math.min(requestedTimeoutMs, 10 * 60_000)\n            : commandTimeoutMs;\n\n        const policyResult =\n          (await options.beforeBash?.({\n            command,\n            cwd: commandCwd,\n            timeoutMs,\n          })) ?? null;\n        if (policyResult) return policyResult;\n\n        const result = await runCodingCommand(command, commandCwd, timeoutMs, {\n          stdin: stringArg(args.stdin) || undefined,\n        });\n        if (options.bashThrowsOnNonZero && result.code !== 0) {\n          throw new Error(formatCodingCommandResult(result, maxOutputChars));\n        }\n        return formatCodingCommandResult(result, maxOutputChars, {\n          omitEmptyExitCode: options.bashThrowsOnNonZero && result.code === 0,\n        });\n      },\n    },\n    read: {\n      readOnly: true,\n      tool: {\n        description:\n          \"Read a single UTF-8 text file, returned with 1-based line numbers. For a large file, use offset and limit to page through it instead of reading the whole thing. Read a file before editing it so your edit's oldText matches exactly. Use bash (`ls`, `rg --files`, `rg`) for directory listings, file discovery, and search; this tool reads one file only.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to read, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            offset: {\n              type: \"string\",\n              description:\n                \"1-based line number to start reading from. Defaults to the first line.\",\n            },\n            limit: {\n              type: \"string\",\n              description:\n                \"Maximum number of lines to read from offset. Defaults to the rest of the file.\",\n            },\n          },\n          required: [\"path\"],\n        },\n      },\n      run: async (args) => {\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        if (!fs.existsSync(filePath)) {\n          return `Error: file not found: ${requestedPath}`;\n        }\n        const stat = fs.statSync(filePath);\n        if (!stat.isFile()) {\n          return `Error: ${requestedPath} is not a file. Use bash for directories and file lists.`;\n        }\n        const content = fs.readFileSync(filePath, \"utf8\");\n        return truncateCodingOutput(\n          formatFileReadOutput(cwd, filePath, content, args),\n          maxFileReadChars,\n        );\n      },\n    },\n    edit: {\n      tool: {\n        description:\n          \"Edit an existing UTF-8 text file by replacing exact text. Prefer this over write for changes to existing files. Read the file first so oldText matches byte-for-byte, including whitespace and indentation. oldText must occur EXACTLY ONCE in the file: include enough surrounding context to make it unique. The edit fails (and the file is left unchanged) if oldText is not found or matches more than once, unless replaceAll is true, which replaces every occurrence. To apply several edits to one file in a single call, pass edits as a JSON array of {oldText, newText, replaceAll} objects; they apply in order, and any failure aborts the whole call.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to edit, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            oldText: {\n              type: \"string\",\n              description:\n                \"Exact existing text to replace, for a single edit. Must match the file exactly and uniquely (include surrounding context) unless replaceAll is true.\",\n            },\n            newText: {\n              type: \"string\",\n              description: \"Text to replace oldText with, for a single edit.\",\n            },\n            replaceAll: {\n              type: \"string\",\n              description:\n                'Set to \"true\" to replace every occurrence of oldText instead of requiring a unique match. Defaults to \"false\".',\n              enum: [\"true\", \"false\"],\n            },\n            edits: {\n              type: \"string\",\n              description:\n                'JSON array of edits to apply to this file in one call, e.g. [{\"oldText\":\"foo\",\"newText\":\"bar\"},{\"oldText\":\"baz\",\"newText\":\"qux\",\"replaceAll\":\"true\"}]. When provided, the top-level oldText/newText are ignored.',\n            },\n          },\n          required: [\"path\"],\n        },\n      },\n      run: async (args) => {\n        const permissionError = options.canWrite?.(\"edit\") ?? null;\n        if (permissionError) return permissionError;\n\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        const edits = parseEditOperations(args);\n\n        return queueFileMutation(filePath, async () => {\n          if (!fs.existsSync(filePath)) {\n            throw new Error(`file not found: ${requestedPath}`);\n          }\n          const stat = fs.statSync(filePath);\n          if (!stat.isFile()) {\n            throw new Error(`${requestedPath} is not a file`);\n          }\n\n          let content = fs.readFileSync(filePath, \"utf8\");\n          let replacements = 0;\n          for (const edit of edits) {\n            const count = countOccurrences(content, edit.oldText);\n            if (count === 0) {\n              throw new Error(\n                `oldText was not found in ${requestedPath}: ${previewText(\n                  edit.oldText,\n                )}`,\n              );\n            }\n            if (!edit.replaceAll && count !== 1) {\n              throw new Error(\n                `oldText matched ${count} times in ${requestedPath}; make it unique or set replaceAll=true.`,\n              );\n            }\n            content = edit.replaceAll\n              ? content.split(edit.oldText).join(edit.newText)\n              : content.replace(edit.oldText, edit.newText);\n            replacements += edit.replaceAll ? count : 1;\n          }\n\n          fs.writeFileSync(filePath, content, \"utf8\");\n          return `Edited ${path.relative(cwd, filePath) || requestedPath} (${replacements} replacement${replacements === 1 ? \"\" : \"s\"}).`;\n        });\n      },\n    },\n    write: {\n      tool: {\n        description:\n          \"Create a new UTF-8 text file, or fully overwrite an existing one with the given content. Missing parent directories are created. For changes to an existing file, prefer edit; only use write when you intend to replace the entire file. Default to ASCII content unless the file already uses other characters or there is a clear reason not to.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to write, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Full contents to write. This replaces the entire file; existing content is not preserved.\",\n            },\n          },\n          required: [\"path\", \"content\"],\n        },\n      },\n      run: async (args) => {\n        const permissionError = options.canWrite?.(\"write\") ?? null;\n        if (permissionError) return permissionError;\n\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        const content = stringArg(args.content);\n\n        return queueFileMutation(filePath, async () => {\n          fs.mkdirSync(path.dirname(filePath), { recursive: true });\n          const existed = fs.existsSync(filePath);\n          fs.writeFileSync(filePath, content, \"utf8\");\n          const bytes = Buffer.byteLength(content, \"utf8\");\n          const lines = content.split(\"\\n\").length;\n          return `${existed ? \"Updated\" : \"Created\"} ${path.relative(cwd, filePath) || requestedPath} (${lines} lines, ${bytes} bytes).`;\n        });\n      },\n    },\n  };\n}\n\nexport async function runCodingCommand(\n  command: string,\n  cwd: string,\n  timeoutMs: number,\n  options: { stdin?: string } = {},\n): Promise<CodingCommandResult> {\n  const child = spawn(command, {\n    cwd,\n    shell: true,\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    env: { ...process.env, FORCE_COLOR: \"0\" },\n  });\n  let stdout = \"\";\n  let stderr = \"\";\n  let timedOut = false;\n  const timer = setTimeout(() => {\n    timedOut = true;\n    child.kill(\"SIGTERM\");\n  }, timeoutMs);\n  child.stdout?.on(\"data\", (chunk) => {\n    stdout += chunk.toString();\n  });\n  child.stderr?.on(\"data\", (chunk) => {\n    stderr += chunk.toString();\n  });\n  if (options.stdin) child.stdin?.end(options.stdin);\n  else child.stdin?.end();\n  const code = await new Promise<number | null>((resolve, reject) => {\n    child.once(\"error\", reject);\n    child.once(\"exit\", resolve);\n  });\n  clearTimeout(timer);\n  return { code, stdout, stderr, timedOut };\n}\n\nexport function formatCodingCommandResult(\n  result: CodingCommandResult,\n  maxChars = DEFAULT_MAX_OUTPUT_CHARS,\n  options: { omitEmptyExitCode?: boolean } = {},\n): string {\n  const parts = [\n    options.omitEmptyExitCode && result.code === 0\n      ? \"\"\n      : `exitCode: ${result.code}`,\n    result.timedOut ? \"timedOut: true\" : \"\",\n    result.stdout ? `stdout:\\n${result.stdout}` : \"\",\n    result.stderr ? `stderr:\\n${result.stderr}` : \"\",\n  ].filter(Boolean);\n  return truncateCodingOutput(parts.join(\"\\n\\n\") || \"(no output)\", maxChars);\n}\n\nexport function truncateCodingOutput(value: string, max: number): string {\n  if (value.length <= max) return value;\n  return `${value.slice(0, max)}\\n\\n...[truncated ${value.length - max} chars]`;\n}\n\nexport function isReadOnlyShellCommand(command: string): boolean {\n  const normalized = command.trim().toLowerCase();\n  if (!normalized) return false;\n\n  // Read-only modes get a deliberately tiny shell grammar: one command only,\n  // no redirection, pipes, sequencing, backgrounding, or command substitution.\n  // Prefix allowlists are not safe until these shell forms are excluded.\n  if (/[\\n\\r;&|<>]/.test(normalized)) return false;\n  if (/\\$\\(|`|\\${|\\\\\\n/.test(command)) return false;\n\n  // `sed` can WRITE even in `-n` mode via the `w`/`W` commands or `-i`\n  // (e.g. `sed -n '1w out.txt' file`), so the `^sed -n` allowlist entry\n  // below is not safe on its own. Reject any sed that can write.\n  if (/^sed\\b/.test(normalized)) {\n    if (/(^|\\s)-i(\\b|=)|--in-place/.test(normalized)) return false;\n    // `w`/`W` used as a sed command: preceded by an address/separator\n    // (digit, $, /, }, ;, quote, space) and followed by a filename arg or\n    // end. Catches `1w f`, `$w f`, `/re/w f`, `s/x/y/w f`, `2W f`; leaves\n    // prints like `/window/p`, `1,5p`, `s/a/b/` untouched.\n    if (/[\\s'\"0-9$}/;](w|W)([\\s'\"]|$)/.test(normalized)) return false;\n  }\n\n  const allowedPrefixes = [\n    /^pwd\\b/,\n    /^ls\\b/,\n    /^find\\b/,\n    /^rg\\b/,\n    /^grep\\b/,\n    /^cat\\b/,\n    /^sed\\s+-n\\b/,\n    /^head\\b/,\n    /^tail\\b/,\n    /^wc\\b/,\n    /^git\\s+(status|diff|show|log)\\b/,\n    /^git\\s+branch\\s+--show-current\\b/,\n  ];\n  return allowedPrefixes.some((pattern) => pattern.test(normalized));\n}\n\nfunction resolveCodingPath(\n  cwd: string,\n  value: string,\n  options: { restrictToCwd: boolean; allowEmpty?: boolean },\n): string | null {\n  if (!value.trim() && !options.allowEmpty) return null;\n  const target = value.trim() || \".\";\n  const resolved = path.isAbsolute(target)\n    ? path.resolve(target)\n    : path.resolve(cwd, target);\n  if (!options.restrictToCwd) return resolved;\n\n  const relative = path.relative(cwd, resolved);\n  if (relative.startsWith(\"..\") || path.isAbsolute(relative)) return null;\n  return resolved;\n}\n\nfunction formatFileReadOutput(\n  cwd: string,\n  filePath: string,\n  content: string,\n  args: Record<string, unknown>,\n): string {\n  const lines = content.split(\"\\n\");\n  const offset = positiveInteger(args.offset, 1);\n  const limit = positiveInteger(args.limit, lines.length - offset + 1);\n  const selected = lines.slice(offset - 1, offset - 1 + limit);\n  const body = selected\n    .map((line, index) => `${String(offset + index).padStart(5)} | ${line}`)\n    .join(\"\\n\");\n  return `${path.relative(cwd, filePath) || filePath} (${lines.length} lines)\\n${body}`;\n}\n\nfunction parseEditOperations(args: Record<string, unknown>): EditOperation[] {\n  const editsJson = stringArg(args.edits);\n  if (editsJson.trim()) {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(editsJson);\n    } catch (err) {\n      throw new Error(\n        `edits must be valid JSON: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n    if (!Array.isArray(parsed) || parsed.length === 0) {\n      throw new Error(\"edits must be a non-empty JSON array.\");\n    }\n    return parsed.map((edit, index) => {\n      if (!edit || typeof edit !== \"object\") {\n        throw new Error(`edits[${index}] must be an object.`);\n      }\n      return normalizeEditOperation(edit as Record<string, unknown>, index);\n    });\n  }\n\n  return [normalizeEditOperation(args, 0)];\n}\n\nfunction normalizeEditOperation(\n  edit: Record<string, unknown>,\n  index: number,\n): EditOperation {\n  const oldText = typeof edit.oldText === \"string\" ? edit.oldText : undefined;\n  const newText = typeof edit.newText === \"string\" ? edit.newText : undefined;\n  if (!oldText) {\n    throw new Error(\n      index === 0\n        ? \"oldText is required and cannot be empty.\"\n        : `edits[${index}].oldText is required and cannot be empty.`,\n    );\n  }\n  if (newText === undefined) {\n    throw new Error(\n      index === 0\n        ? \"newText is required.\"\n        : `edits[${index}].newText is required.`,\n    );\n  }\n  return {\n    oldText,\n    newText,\n    replaceAll: stringArg(edit.replaceAll).toLowerCase() === \"true\",\n  };\n}\n\nfunction countOccurrences(value: string, needle: string): number {\n  let count = 0;\n  let index = 0;\n  while (true) {\n    index = value.indexOf(needle, index);\n    if (index === -1) return count;\n    count += 1;\n    index += needle.length;\n  }\n}\n\nfunction queueFileMutation<T>(filePath: string, task: () => Promise<T> | T) {\n  const previous = mutationQueues.get(filePath) ?? Promise.resolve();\n  const next = previous.catch(() => undefined).then(task);\n  let queued: Promise<unknown>;\n  queued = next.finally(() => {\n    if (mutationQueues.get(filePath) === queued)\n      mutationQueues.delete(filePath);\n  });\n  mutationQueues.set(filePath, queued);\n  return next;\n}\n\nfunction previewText(value: string): string {\n  const oneLine = value.replace(/\\s+/g, \" \").trim();\n  return oneLine.length > 80 ? `${oneLine.slice(0, 80)}...` : oneLine;\n}\n\nfunction stringArg(value: unknown): string {\n  return typeof value === \"string\" ? value : \"\";\n}\n\nfunction positiveInteger(value: unknown, fallback: number): number {\n  const parsed = Number(value);\n  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : fallback;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coding-tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8F7B,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAC3C,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D,MAAM,UAAU,wBAAwB,CACtC,UAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACrD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE;YACJ,IAAI,EAAE;gBACJ,WAAW,EACT,qtBAAqtB;gBACvtB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,+CAA+C;yBAC7D;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sIAAsI;yBACzI;wBACD,SAAS,EAAE;4BACT,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2IAA2I;yBAC9I;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,wCAAwC;yBACtD;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oKAAoK;4BACtK,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;yBACxB;qBACF;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO;oBAAE,OAAO,6BAA6B,CAAC;gBACnD,MAAM,UAAU,GACd,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;oBACjD,aAAa;oBACb,UAAU,EAAE,IAAI;iBACjB,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,4CAA4C,CAAC;gBACtD,CAAC;gBACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAClD,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;oBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,GAAG,MAAM,CAAC;oBAC3C,CAAC,CAAC,gBAAgB,CAAC;gBAEvB,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;gBAEtD,MAAM,YAAY,GAChB,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC1B,OAAO;oBACP,GAAG,EAAE,UAAU;oBACf,SAAS;iBACV,CAAC,CAAC,IAAI,IAAI,CAAC;gBACd,IAAI,YAAY;oBAAE,OAAO,YAAY,CAAC;gBAEtC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;oBACxC,QAAQ,EAAE,MAAM;oBAChB,OAAO;oBACP,GAAG,EAAE,UAAU;iBAChB,CAAC,CAAC;gBAEH,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBAC3D,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE;wBACvC,QAAQ,EAAE,MAAM;wBAChB,OAAO;wBACP,GAAG,EAAE,UAAU;qBAChB,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE;oBACpE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS;oBACzC,OAAO,EAAE,OAAO,CAAC,iBAAiB;iBACnC,CAAC,CAAC;gBAEH,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE;oBACvC,QAAQ,EAAE,MAAM;oBAChB,OAAO;oBACP,GAAG,EAAE,UAAU;oBACf,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;iBACvC,CAAC,CAAC;gBAEH,IAAI,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,yBAAyB,CAAC,MAAM,EAAE,cAAc,EAAE;oBACvD,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;iBACpE,CAAC,CAAC;YACL,CAAC;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE;gBACJ,WAAW,EACT,+VAA+V;gBACjW,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6FAA6F;yBAChG;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wEAAwE;yBAC3E;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gFAAgF;yBACnF;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,OAAO,0BAA0B,aAAa,EAAE,CAAC;gBACnD,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,OAAO,UAAU,aAAa,0DAA0D,CAAC;gBAC3F,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAC7C,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;oBACxC,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa;oBACvD,SAAS;iBACV,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,oBAAoB,CACjC,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAClD,gBAAgB,CACjB,CAAC;gBACF,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE;oBACvC,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa;oBACvD,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;SACF;QACD,IAAI,EAAE;YACJ,IAAI,EAAE;gBACJ,WAAW,EACT,soBAAsoB;gBACxoB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6FAA6F;yBAChG;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sJAAsJ;yBACzJ;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kDAAkD;yBAChE;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;4BAClH,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;yBACxB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kNAAkN;yBACrN;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;gBAC3D,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAE5C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa,CAAC;gBAE9D,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;oBACxC,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBAEH,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;oBACtD,CAAC;oBACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC;oBACpD,CAAC;oBAED,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC1D,IAAI,OAAO,GAAG,eAAe,CAAC;oBAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;oBACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBACtD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,MAAM,IAAI,KAAK,CACb,4BAA4B,aAAa,KAAK,WAAW,CACvD,IAAI,CAAC,OAAO,CACb,EAAE,CACJ,CAAC;wBACJ,CAAC;wBACD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BACpC,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,aAAa,aAAa,0CAA0C,CAC7F,CAAC;wBACJ,CAAC;wBACD,OAAO,GAAG,IAAI,CAAC,UAAU;4BACvB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;4BAChD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChD,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9C,CAAC;oBAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAE5C,kEAAkE;oBAClE,MAAM,SAAS,GACb,eAAe,CAAC,MAAM,GAAG,sBAAsB;wBAC/C,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;oBAC1C,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE;wBACvC,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;wBACzD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;wBACjD,SAAS;qBACV,CAAC,CAAC;oBAEH,OAAO,UAAU,OAAO,KAAK,YAAY,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBAC5F,CAAC,CAAC,CAAC;YACL,CAAC;SACF;QACD,KAAK,EAAE;YACL,IAAI,EAAE;gBACJ,WAAW,EACT,qVAAqV;gBACvV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8FAA8F;yBACjG;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;gBAC5D,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAE5C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE;oBACrD,aAAa;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,6CAA6C,CAAC;gBACpE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa,CAAC;gBAE9D,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE;oBACzC,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBAEH,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;oBAC1D,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE;wBACxC,QAAQ,EAAE,OAAO;wBACjB,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;wBACjD,SAAS;wBACT,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAC;oBAEH,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,KAAK,KAAK,WAAW,KAAK,UAAU,CAAC;gBAC3F,CAAC,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,GAAW,EACX,SAAiB,EACjB,UAAiE,EAAE;IAEnE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;QAC3B,GAAG;QACH,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;KAC1C,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,IAAI,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,IAAI,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;QAC9C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,GAAW;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,EAAE,CAAC,MAAM,EAAE,EACX,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CACpE,CAAC;IAEF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;QAC3B,GAAG;QACH,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;KAC1C,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,OAAO;QACL,6BAA6B;QAC7B,QAAQ,GAAG,EAAE;QACb,QAAQ,OAAO,EAAE;QACjB,mDAAmD,GAAG,yBAAyB;KAChF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA2B,EAC3B,QAAQ,GAAG,wBAAwB,EACnC,UAA2C,EAAE;IAE7C,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,aAAa,MAAM,CAAC,IAAI,EAAE;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAW;IAC7D,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,qBAAqB,KAAK,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,SAAS,GAAG,sBAAsB,EAClC,SAAS,GAAG,sBAAsB;IAElC,MAAM,GAAG,GAAG,SAAS,GAAG,SAAS,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;IACnC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,WAAW,OAAO,sBAAsB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAElD,qEAAqE;IACrE,sEAAsE;IACtE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,uDAAuD;QACvD,IAAI,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;IACpE,CAAC;IAED,MAAM,eAAe,GAAG;QACtB,QAAQ;QACR,OAAO;QACP,SAAS;QACT,OAAO;QACP,SAAS;QACT,QAAQ;QACR,aAAa;QACb,SAAS;QACT,SAAS;QACT,OAAO;QACP,iCAAiC;QACjC,kCAAkC;KACnC,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAW,EACX,KAAa,EACb,OAAyD;IAEzD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,QAAgB,EAChB,OAAe,EACf,IAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,IAAI,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACrB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,sBAAsB,CAAC,IAA+B,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA6B,EAC7B,KAAa;IAEb,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,SAAS,KAAK,4CAA4C,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,OAAO;QACP,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAI,QAAgB,EAAE,IAA0B;IACxE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAwB,CAAC;IAC7B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;QACzB,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;YACzC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/E,CAAC","sourcesContent":["import { spawn } from \"node:child_process\";\nimport fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\n\nexport interface CodingCommandResult {\n  code: number | null;\n  stdout: string;\n  stderr: string;\n  timedOut: boolean;\n  durationMs?: number;\n}\n\n/**\n * Structured metadata emitted on tool_start / tool_done events so the UI can\n * render bespoke cells (bash terminal, edit diff, etc.) instead of the generic\n * pill.  Fields are additive — older consumers that don't know them are unaffected.\n */\nexport interface BashToolMetadata {\n  toolKind: \"bash\";\n  command: string;\n  cwd: string;\n  exitCode?: number | null;\n  durationMs?: number;\n  timedOut?: boolean;\n}\n\nexport interface EditToolMetadata {\n  toolKind: \"edit\";\n  filePath: string;\n  /** The exact old text replaced (capped at EDIT_CONTENT_MAX_CHARS). */\n  oldText?: string;\n  /** The exact new text written (capped at EDIT_CONTENT_MAX_CHARS). */\n  newText?: string;\n  truncated?: boolean;\n}\n\nexport interface WriteToolMetadata {\n  toolKind: \"write\";\n  filePath: string;\n  /** Full file content written (capped at EDIT_CONTENT_MAX_CHARS). */\n  content?: string;\n  truncated?: boolean;\n  lineCount?: number;\n}\n\nexport interface ReadToolMetadata {\n  toolKind: \"read\";\n  filePath: string;\n  lineCount?: number;\n}\n\nexport type StructuredToolMetadata =\n  | BashToolMetadata\n  | EditToolMetadata\n  | WriteToolMetadata\n  | ReadToolMetadata;\n\n/** Callback invoked with incremental bash output while the command is running. */\nexport type BashOutputChunkCallback = (chunk: string) => void;\n\nexport interface CreateCodingToolRegistryOptions {\n  cwd?: string;\n  restrictToCwd?: boolean;\n  commandTimeoutMs?: number;\n  maxOutputChars?: number;\n  maxFileReadChars?: number;\n  bashThrowsOnNonZero?: boolean;\n  canWrite?: (toolName: \"edit\" | \"write\") => string | null;\n  beforeBash?: (input: {\n    command: string;\n    cwd: string;\n    timeoutMs: number;\n  }) => string | null | Promise<string | null>;\n  /** Called with incremental stdout+stderr chunks while a bash command runs. */\n  onBashOutputChunk?: BashOutputChunkCallback;\n  /**\n   * Called when structured metadata is available for a tool call.  The\n   * `phase` is \"start\" (right before execution) or \"done\" (after execution).\n   * This is the side-channel used to populate bespoke tool-cell fields without\n   * changing the string-result contract that the agent sees.\n   */\n  onToolMetadata?: (\n    toolName: string,\n    phase: \"start\" | \"done\",\n    meta: StructuredToolMetadata,\n  ) => void;\n}\n\ninterface EditOperation {\n  oldText: string;\n  newText: string;\n  replaceAll: boolean;\n}\n\nconst DEFAULT_COMMAND_TIMEOUT_MS = 120_000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 50_000;\nconst DEFAULT_MAX_FILE_READ_CHARS = 120_000;\n\n/**\n * Output retention window for bash: keep first HEAD_CHARS + last TAIL_CHARS,\n * separated by a truncation marker.  Replaces the old flat 4 000-char cap.\n */\nexport const BASH_OUTPUT_HEAD_CHARS = 4_096;\nexport const BASH_OUTPUT_TAIL_CHARS = 16_384;\n\n/** Maximum chars stored per side of an edit/write for diff rendering. */\nexport const EDIT_CONTENT_MAX_CHARS = 49_152;\n\nconst mutationQueues = new Map<string, Promise<unknown>>();\n\nexport function createCodingToolRegistry(\n  options: CreateCodingToolRegistryOptions = {},\n): Record<\"bash\" | \"read\" | \"edit\" | \"write\", ActionEntry> {\n  const cwd = path.resolve(options.cwd ?? process.cwd());\n  const restrictToCwd = options.restrictToCwd ?? false;\n  const commandTimeoutMs =\n    options.commandTimeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;\n  const maxOutputChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  const maxFileReadChars =\n    options.maxFileReadChars ?? DEFAULT_MAX_FILE_READ_CHARS;\n\n  return {\n    bash: {\n      tool: {\n        description:\n          'Run a shell command. This is the tool for file discovery, directory listing, and search: reach first for `rg <pattern>` and `rg --files`, which are much faster than `grep` or `find`. Also use it to run tests, builds, package scripts, `git status`/`git diff`, and project CLIs. Use the read tool to view a single file\\'s contents; use bash for everything else. Very long output is truncated.\\n\\nSet `background` to \"true\" to spawn the command detached and return immediately. The tool returns the PID and a log file path; the process writes its stdout/stderr to that log file. You can read or tail the log file to check progress, and run `kill <pid>` to stop it. Background processes are not killed when the timeout expires.',\n        parameters: {\n          type: \"object\",\n          properties: {\n            command: {\n              type: \"string\",\n              description: \"The shell command to run (executed via bash).\",\n            },\n            cwd: {\n              type: \"string\",\n              description:\n                \"Working directory for the command. Relative to the workspace root unless absolute paths are allowed. Defaults to the workspace root.\",\n            },\n            timeoutMs: {\n              type: \"string\",\n              description:\n                \"Timeout in milliseconds; the command is killed if it exceeds this. Defaults to 120000, capped at 600000. Ignored when background is true.\",\n            },\n            stdin: {\n              type: \"string\",\n              description: \"Text to pipe into the command's stdin.\",\n            },\n            background: {\n              type: \"string\",\n              description:\n                'Set to \"true\" to spawn the command detached in the background and return immediately. Returns the process PID and a log file path where stdout/stderr are written.',\n              enum: [\"true\", \"false\"],\n            },\n          },\n          required: [\"command\"],\n        },\n      },\n      run: async (args) => {\n        const command = stringArg(args.command);\n        if (!command) return \"Error: command is required.\";\n        const commandCwd =\n          resolveCodingPath(cwd, stringArg(args.cwd) || \".\", {\n            restrictToCwd,\n            allowEmpty: true,\n          }) ?? \"\";\n        if (!commandCwd) {\n          return \"Error: cwd must stay inside the workspace.\";\n        }\n        const requestedTimeoutMs = Number(args.timeoutMs);\n        const timeoutMs =\n          Number.isFinite(requestedTimeoutMs) && requestedTimeoutMs > 0\n            ? Math.min(requestedTimeoutMs, 10 * 60_000)\n            : commandTimeoutMs;\n\n        const isBackground =\n          stringArg(args.background).toLowerCase() === \"true\";\n\n        const policyResult =\n          (await options.beforeBash?.({\n            command,\n            cwd: commandCwd,\n            timeoutMs,\n          })) ?? null;\n        if (policyResult) return policyResult;\n\n        options.onToolMetadata?.(\"bash\", \"start\", {\n          toolKind: \"bash\",\n          command,\n          cwd: commandCwd,\n        });\n\n        if (isBackground) {\n          const result = spawnBackgroundCommand(command, commandCwd);\n          options.onToolMetadata?.(\"bash\", \"done\", {\n            toolKind: \"bash\",\n            command,\n            cwd: commandCwd,\n          });\n          return result;\n        }\n\n        const result = await runCodingCommand(command, commandCwd, timeoutMs, {\n          stdin: stringArg(args.stdin) || undefined,\n          onChunk: options.onBashOutputChunk,\n        });\n\n        options.onToolMetadata?.(\"bash\", \"done\", {\n          toolKind: \"bash\",\n          command,\n          cwd: commandCwd,\n          exitCode: result.code,\n          durationMs: result.durationMs,\n          timedOut: result.timedOut || undefined,\n        });\n\n        if (options.bashThrowsOnNonZero && result.code !== 0) {\n          throw new Error(formatCodingCommandResult(result, maxOutputChars));\n        }\n        return formatCodingCommandResult(result, maxOutputChars, {\n          omitEmptyExitCode: options.bashThrowsOnNonZero && result.code === 0,\n        });\n      },\n    },\n    read: {\n      readOnly: true,\n      tool: {\n        description:\n          \"Read a single UTF-8 text file, returned with 1-based line numbers. For a large file, use offset and limit to page through it instead of reading the whole thing. Read a file before editing it so your edit's oldText matches exactly. Use bash (`ls`, `rg --files`, `rg`) for directory listings, file discovery, and search; this tool reads one file only.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to read, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            offset: {\n              type: \"string\",\n              description:\n                \"1-based line number to start reading from. Defaults to the first line.\",\n            },\n            limit: {\n              type: \"string\",\n              description:\n                \"Maximum number of lines to read from offset. Defaults to the rest of the file.\",\n            },\n          },\n          required: [\"path\"],\n        },\n      },\n      run: async (args) => {\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        if (!fs.existsSync(filePath)) {\n          return `Error: file not found: ${requestedPath}`;\n        }\n        const stat = fs.statSync(filePath);\n        if (!stat.isFile()) {\n          return `Error: ${requestedPath} is not a file. Use bash for directories and file lists.`;\n        }\n        const content = fs.readFileSync(filePath, \"utf8\");\n        const lineCount = content.split(\"\\n\").length;\n        options.onToolMetadata?.(\"read\", \"start\", {\n          toolKind: \"read\",\n          filePath: path.relative(cwd, filePath) || requestedPath,\n          lineCount,\n        });\n        const result = truncateCodingOutput(\n          formatFileReadOutput(cwd, filePath, content, args),\n          maxFileReadChars,\n        );\n        options.onToolMetadata?.(\"read\", \"done\", {\n          toolKind: \"read\",\n          filePath: path.relative(cwd, filePath) || requestedPath,\n          lineCount,\n        });\n        return result;\n      },\n    },\n    edit: {\n      tool: {\n        description:\n          \"Edit an existing UTF-8 text file by replacing exact text. Prefer this over write for changes to existing files. Read the file first so oldText matches byte-for-byte, including whitespace and indentation. oldText must occur EXACTLY ONCE in the file: include enough surrounding context to make it unique. The edit fails (and the file is left unchanged) if oldText is not found or matches more than once, unless replaceAll is true, which replaces every occurrence. To apply several edits to one file in a single call, pass edits as a JSON array of {oldText, newText, replaceAll} objects; they apply in order, and any failure aborts the whole call.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to edit, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            oldText: {\n              type: \"string\",\n              description:\n                \"Exact existing text to replace, for a single edit. Must match the file exactly and uniquely (include surrounding context) unless replaceAll is true.\",\n            },\n            newText: {\n              type: \"string\",\n              description: \"Text to replace oldText with, for a single edit.\",\n            },\n            replaceAll: {\n              type: \"string\",\n              description:\n                'Set to \"true\" to replace every occurrence of oldText instead of requiring a unique match. Defaults to \"false\".',\n              enum: [\"true\", \"false\"],\n            },\n            edits: {\n              type: \"string\",\n              description:\n                'JSON array of edits to apply to this file in one call, e.g. [{\"oldText\":\"foo\",\"newText\":\"bar\"},{\"oldText\":\"baz\",\"newText\":\"qux\",\"replaceAll\":\"true\"}]. When provided, the top-level oldText/newText are ignored.',\n            },\n          },\n          required: [\"path\"],\n        },\n      },\n      run: async (args) => {\n        const permissionError = options.canWrite?.(\"edit\") ?? null;\n        if (permissionError) return permissionError;\n\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        const edits = parseEditOperations(args);\n        const relPath = path.relative(cwd, filePath) || requestedPath;\n\n        options.onToolMetadata?.(\"edit\", \"start\", {\n          toolKind: \"edit\",\n          filePath: relPath,\n        });\n\n        return queueFileMutation(filePath, async () => {\n          if (!fs.existsSync(filePath)) {\n            throw new Error(`file not found: ${requestedPath}`);\n          }\n          const stat = fs.statSync(filePath);\n          if (!stat.isFile()) {\n            throw new Error(`${requestedPath} is not a file`);\n          }\n\n          const originalContent = fs.readFileSync(filePath, \"utf8\");\n          let content = originalContent;\n          let replacements = 0;\n          for (const edit of edits) {\n            const count = countOccurrences(content, edit.oldText);\n            if (count === 0) {\n              throw new Error(\n                `oldText was not found in ${requestedPath}: ${previewText(\n                  edit.oldText,\n                )}`,\n              );\n            }\n            if (!edit.replaceAll && count !== 1) {\n              throw new Error(\n                `oldText matched ${count} times in ${requestedPath}; make it unique or set replaceAll=true.`,\n              );\n            }\n            content = edit.replaceAll\n              ? content.split(edit.oldText).join(edit.newText)\n              : content.replace(edit.oldText, edit.newText);\n            replacements += edit.replaceAll ? count : 1;\n          }\n\n          fs.writeFileSync(filePath, content, \"utf8\");\n\n          // Emit structured diff metadata so the UI can render a real diff.\n          const truncated =\n            originalContent.length > EDIT_CONTENT_MAX_CHARS ||\n            content.length > EDIT_CONTENT_MAX_CHARS;\n          options.onToolMetadata?.(\"edit\", \"done\", {\n            toolKind: \"edit\",\n            filePath: relPath,\n            oldText: originalContent.slice(0, EDIT_CONTENT_MAX_CHARS),\n            newText: content.slice(0, EDIT_CONTENT_MAX_CHARS),\n            truncated,\n          });\n\n          return `Edited ${relPath} (${replacements} replacement${replacements === 1 ? \"\" : \"s\"}).`;\n        });\n      },\n    },\n    write: {\n      tool: {\n        description:\n          \"Create a new UTF-8 text file, or fully overwrite an existing one with the given content. Missing parent directories are created. For changes to an existing file, prefer edit; only use write when you intend to replace the entire file. Default to ASCII content unless the file already uses other characters or there is a clear reason not to.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Path to the file to write, relative to the workspace root unless absolute paths are allowed.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Full contents to write. This replaces the entire file; existing content is not preserved.\",\n            },\n          },\n          required: [\"path\", \"content\"],\n        },\n      },\n      run: async (args) => {\n        const permissionError = options.canWrite?.(\"write\") ?? null;\n        if (permissionError) return permissionError;\n\n        const requestedPath = stringArg(args.path);\n        const filePath = resolveCodingPath(cwd, requestedPath, {\n          restrictToCwd,\n        });\n        if (!filePath) return \"Error: path must stay inside the workspace.\";\n        const content = stringArg(args.content);\n        const relPath = path.relative(cwd, filePath) || requestedPath;\n\n        options.onToolMetadata?.(\"write\", \"start\", {\n          toolKind: \"write\",\n          filePath: relPath,\n        });\n\n        return queueFileMutation(filePath, async () => {\n          fs.mkdirSync(path.dirname(filePath), { recursive: true });\n          const existed = fs.existsSync(filePath);\n          fs.writeFileSync(filePath, content, \"utf8\");\n          const bytes = Buffer.byteLength(content, \"utf8\");\n          const lines = content.split(\"\\n\").length;\n\n          const truncated = content.length > EDIT_CONTENT_MAX_CHARS;\n          options.onToolMetadata?.(\"write\", \"done\", {\n            toolKind: \"write\",\n            filePath: relPath,\n            content: content.slice(0, EDIT_CONTENT_MAX_CHARS),\n            truncated,\n            lineCount: lines,\n          });\n\n          return `${existed ? \"Updated\" : \"Created\"} ${relPath} (${lines} lines, ${bytes} bytes).`;\n        });\n      },\n    },\n  };\n}\n\nexport async function runCodingCommand(\n  command: string,\n  cwd: string,\n  timeoutMs: number,\n  options: { stdin?: string; onChunk?: BashOutputChunkCallback } = {},\n): Promise<CodingCommandResult> {\n  const child = spawn(command, {\n    cwd,\n    shell: true,\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    env: { ...process.env, FORCE_COLOR: \"0\" },\n  });\n  let stdout = \"\";\n  let stderr = \"\";\n  let timedOut = false;\n  const startMs = Date.now();\n  const timer = setTimeout(() => {\n    timedOut = true;\n    child.kill(\"SIGTERM\");\n  }, timeoutMs);\n  child.stdout?.on(\"data\", (chunk: Buffer) => {\n    const text = chunk.toString();\n    stdout += text;\n    options.onChunk?.(text);\n  });\n  child.stderr?.on(\"data\", (chunk: Buffer) => {\n    const text = chunk.toString();\n    stderr += text;\n    options.onChunk?.(text);\n  });\n  if (options.stdin) child.stdin?.end(options.stdin);\n  else child.stdin?.end();\n  const code = await new Promise<number | null>((resolve, reject) => {\n    child.once(\"error\", reject);\n    child.once(\"exit\", resolve);\n  });\n  clearTimeout(timer);\n  return { code, stdout, stderr, timedOut, durationMs: Date.now() - startMs };\n}\n\n/**\n * Spawn a command detached in the background.  Returns immediately with the\n * process PID and a temporary log file path where stdout + stderr are written.\n *\n * The child process is intentionally detached from the parent's process group\n * (`detached: true`, `unref()`) so it continues running after the tool call\n * completes and is not killed if the agent run exits.  The approval classifier\n * still applies before this function is reached (see `beforeBash` in the\n * calling registry).\n */\nexport function spawnBackgroundCommand(command: string, cwd: string): string {\n  const logFile = path.join(\n    os.tmpdir(),\n    `an-bg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.log`,\n  );\n\n  const logFd = fs.openSync(logFile, \"a\");\n  const child = spawn(command, {\n    cwd,\n    shell: true,\n    stdio: [\"ignore\", logFd, logFd],\n    detached: true,\n    env: { ...process.env, FORCE_COLOR: \"0\" },\n  });\n  child.unref();\n  fs.closeSync(logFd);\n\n  const pid = child.pid ?? 0;\n  return [\n    `Background process spawned.`,\n    `pid: ${pid}`,\n    `log: ${logFile}`,\n    `Read the log file to check progress. Run \\`kill ${pid}\\` to stop the process.`,\n  ].join(\"\\n\");\n}\n\nexport function formatCodingCommandResult(\n  result: CodingCommandResult,\n  maxChars = DEFAULT_MAX_OUTPUT_CHARS,\n  options: { omitEmptyExitCode?: boolean } = {},\n): string {\n  const parts = [\n    options.omitEmptyExitCode && result.code === 0\n      ? \"\"\n      : `exitCode: ${result.code}`,\n    result.timedOut ? \"timedOut: true\" : \"\",\n    result.stdout ? `stdout:\\n${result.stdout}` : \"\",\n    result.stderr ? `stderr:\\n${result.stderr}` : \"\",\n  ].filter(Boolean);\n  return truncateCodingOutput(parts.join(\"\\n\\n\") || \"(no output)\", maxChars);\n}\n\nexport function truncateCodingOutput(value: string, max: number): string {\n  if (value.length <= max) return value;\n  return `${value.slice(0, max)}\\n\\n...[truncated ${value.length - max} chars]`;\n}\n\n/**\n * Retain the first HEAD_CHARS and the last TAIL_CHARS of bash output, inserting\n * a truncation marker in the middle.  This is a better window than a simple\n * prefix slice because the end of the output usually contains the most important\n * signal (error messages, test results, etc.).\n */\nexport function truncateBashOutput(\n  value: string,\n  headChars = BASH_OUTPUT_HEAD_CHARS,\n  tailChars = BASH_OUTPUT_TAIL_CHARS,\n): string {\n  const max = headChars + tailChars;\n  if (value.length <= max) return value;\n  const omitted = value.length - max;\n  return `${value.slice(0, headChars)}\\n\\n...[${omitted} chars omitted]\\n\\n${value.slice(value.length - tailChars)}`;\n}\n\nexport function isReadOnlyShellCommand(command: string): boolean {\n  const normalized = command.trim().toLowerCase();\n  if (!normalized) return false;\n\n  // Read-only modes get a deliberately tiny shell grammar: one command only,\n  // no redirection, pipes, sequencing, backgrounding, or command substitution.\n  // Prefix allowlists are not safe until these shell forms are excluded.\n  if (/[\\n\\r;&|<>]/.test(normalized)) return false;\n  if (/\\$\\(|`|\\${|\\\\\\n/.test(command)) return false;\n\n  // `sed` can WRITE even in `-n` mode via the `w`/`W` commands or `-i`\n  // (e.g. `sed -n '1w out.txt' file`), so the `^sed -n` allowlist entry\n  // below is not safe on its own. Reject any sed that can write.\n  if (/^sed\\b/.test(normalized)) {\n    if (/(^|\\s)-i(\\b|=)|--in-place/.test(normalized)) return false;\n    // `w`/`W` used as a sed command: preceded by an address/separator\n    // (digit, $, /, }, ;, quote, space) and followed by a filename arg or\n    // end. Catches `1w f`, `$w f`, `/re/w f`, `s/x/y/w f`, `2W f`; leaves\n    // prints like `/window/p`, `1,5p`, `s/a/b/` untouched.\n    if (/[\\s'\"0-9$}/;](w|W)([\\s'\"]|$)/.test(normalized)) return false;\n  }\n\n  const allowedPrefixes = [\n    /^pwd\\b/,\n    /^ls\\b/,\n    /^find\\b/,\n    /^rg\\b/,\n    /^grep\\b/,\n    /^cat\\b/,\n    /^sed\\s+-n\\b/,\n    /^head\\b/,\n    /^tail\\b/,\n    /^wc\\b/,\n    /^git\\s+(status|diff|show|log)\\b/,\n    /^git\\s+branch\\s+--show-current\\b/,\n  ];\n  return allowedPrefixes.some((pattern) => pattern.test(normalized));\n}\n\nfunction resolveCodingPath(\n  cwd: string,\n  value: string,\n  options: { restrictToCwd: boolean; allowEmpty?: boolean },\n): string | null {\n  if (!value.trim() && !options.allowEmpty) return null;\n  const target = value.trim() || \".\";\n  const resolved = path.isAbsolute(target)\n    ? path.resolve(target)\n    : path.resolve(cwd, target);\n  if (!options.restrictToCwd) return resolved;\n\n  const relative = path.relative(cwd, resolved);\n  if (relative.startsWith(\"..\") || path.isAbsolute(relative)) return null;\n  return resolved;\n}\n\nfunction formatFileReadOutput(\n  cwd: string,\n  filePath: string,\n  content: string,\n  args: Record<string, unknown>,\n): string {\n  const lines = content.split(\"\\n\");\n  const offset = positiveInteger(args.offset, 1);\n  const limit = positiveInteger(args.limit, lines.length - offset + 1);\n  const selected = lines.slice(offset - 1, offset - 1 + limit);\n  const body = selected\n    .map((line, index) => `${String(offset + index).padStart(5)} | ${line}`)\n    .join(\"\\n\");\n  return `${path.relative(cwd, filePath) || filePath} (${lines.length} lines)\\n${body}`;\n}\n\nfunction parseEditOperations(args: Record<string, unknown>): EditOperation[] {\n  const editsJson = stringArg(args.edits);\n  if (editsJson.trim()) {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(editsJson);\n    } catch (err) {\n      throw new Error(\n        `edits must be valid JSON: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n    if (!Array.isArray(parsed) || parsed.length === 0) {\n      throw new Error(\"edits must be a non-empty JSON array.\");\n    }\n    return parsed.map((edit, index) => {\n      if (!edit || typeof edit !== \"object\") {\n        throw new Error(`edits[${index}] must be an object.`);\n      }\n      return normalizeEditOperation(edit as Record<string, unknown>, index);\n    });\n  }\n\n  return [normalizeEditOperation(args, 0)];\n}\n\nfunction normalizeEditOperation(\n  edit: Record<string, unknown>,\n  index: number,\n): EditOperation {\n  const oldText = typeof edit.oldText === \"string\" ? edit.oldText : undefined;\n  const newText = typeof edit.newText === \"string\" ? edit.newText : undefined;\n  if (!oldText) {\n    throw new Error(\n      index === 0\n        ? \"oldText is required and cannot be empty.\"\n        : `edits[${index}].oldText is required and cannot be empty.`,\n    );\n  }\n  if (newText === undefined) {\n    throw new Error(\n      index === 0\n        ? \"newText is required.\"\n        : `edits[${index}].newText is required.`,\n    );\n  }\n  return {\n    oldText,\n    newText,\n    replaceAll: stringArg(edit.replaceAll).toLowerCase() === \"true\",\n  };\n}\n\nfunction countOccurrences(value: string, needle: string): number {\n  let count = 0;\n  let index = 0;\n  while (true) {\n    index = value.indexOf(needle, index);\n    if (index === -1) return count;\n    count += 1;\n    index += needle.length;\n  }\n}\n\nfunction queueFileMutation<T>(filePath: string, task: () => Promise<T> | T) {\n  const previous = mutationQueues.get(filePath) ?? Promise.resolve();\n  const next = previous.catch(() => undefined).then(task);\n  let queued: Promise<unknown>;\n  queued = next.finally(() => {\n    if (mutationQueues.get(filePath) === queued)\n      mutationQueues.delete(filePath);\n  });\n  mutationQueues.set(filePath, queued);\n  return next;\n}\n\nfunction previewText(value: string): string {\n  const oneLine = value.replace(/\\s+/g, \" \").trim();\n  return oneLine.length > 80 ? `${oneLine.slice(0, 80)}...` : oneLine;\n}\n\nfunction stringArg(value: unknown): string {\n  return typeof value === \"string\" ? value : \"\";\n}\n\nfunction positiveInteger(value: unknown, fallback: number): number {\n  const parsed = Number(value);\n  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : fallback;\n}\n"]}

package/dist/coding-tools/run-code.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Sandboxed JavaScript execution tool for the agent.
+ *
+ * Executes user-supplied JavaScript in an isolated child process with:
+ *  - A scrubbed environment (no app secrets or env vars; only PATH/HOME/TMPDIR).
+ *  - A fresh temporary working directory.
+ *  - An ephemeral bridge HTTP server on 127.0.0.1 so the child can call
+ *    allowlisted registered tools (provider-api-request, web-request, etc.)
+ *    with the same request context as the parent — without leaking secrets.
+ *
+ * Security notes:
+ *  - The bridge token is a 32-byte random hex string generated per invocation.
+ *  - The bridge binds to 127.0.0.1 only; no external exposure.
+ *  - The allowlist of callable bridge tools is enforced server-side.
+ *  - Secret values are NEVER included in the env passed to the child.
+ *  - When the Node permission model is available (`--permission`, or
+ *    `--experimental-permission` on Node 20), the child is denied filesystem
+ *    access outside its own temp dir, child processes, workers, and native
+ *    addons. Outbound network from the child is NOT blocked by the permission
+ *    model; the env scrub means such requests carry no credentials, and all
+ *    authenticated calls must go through the bridge (which applies the
+ *    registered tools' host allowlists and SSRF guards).
+ */
+import type { ActionEntry } from "../agent/production-agent.js";
+export interface RunCodeOptions {
+    /**
+     * Extra tool names (beyond the default set) that the sandbox bridge will
+     * forward to the registered action registry.
+     */
+    bridgeTools?: string[];
+}
+/**
+ * Create a `run-code` ActionEntry.
+ *
+ * @param getActions  Supplier that returns the current action registry (called
+ *                    at invocation time so updates are reflected).
+ * @param opts        Optional configuration.
+ */
+export declare function createRunCodeEntry(getActions: () => Record<string, ActionEntry>, opts?: RunCodeOptions): ActionEntry;
+//# sourceMappingURL=run-code.d.ts.map

package/dist/coding-tools/run-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../src/coding-tools/run-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA8ChE,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC7C,IAAI,GAAE,cAAmB,GACxB,WAAW,CA4Lb"}