@autopilot-harness/core 0.1.0

package/dist/project-config.js

@@ -0,0 +1,301 @@
+import fs from "node:fs";
+import path from "node:path";
+import { isRealpathInsideProject, normalizeProjectRoot } from "./project-path.js";
+const MAX_CONFIG_BYTES = 1_000_000;
+export const DEFAULT_PROJECT_REVIEW_CONFIG = {
+    confirmRounds: 5,
+    reviewScope: "executing_only",
+    verifyEnabled: false,
+    // freeze: chặn mutate hằng số mặc định làm bẩn mọi clone sau này
+    verifyCommands: Object.freeze([]),
+    maxIdleStops: 5,
+    maxErrorsBeforePause: 0,
+    locale: "en",
+};
+/** Bản sao độc lập — tránh chia sẻ mảng verifyCommands giữa các lần gọi. */
+function parseReviewScope(raw) {
+    const s = typeof raw === "string" ? raw.trim().toLowerCase() : "";
+    if (s === "project" || s === "always" || s === "all")
+        return "project";
+    return "executing_only";
+}
+function cloneDefaultProjectReviewConfig() {
+    return {
+        confirmRounds: DEFAULT_PROJECT_REVIEW_CONFIG.confirmRounds,
+        reviewScope: DEFAULT_PROJECT_REVIEW_CONFIG.reviewScope,
+        verifyEnabled: DEFAULT_PROJECT_REVIEW_CONFIG.verifyEnabled,
+        verifyCommands: [],
+        maxIdleStops: DEFAULT_PROJECT_REVIEW_CONFIG.maxIdleStops,
+        maxErrorsBeforePause: DEFAULT_PROJECT_REVIEW_CONFIG.maxErrorsBeforePause,
+        locale: DEFAULT_PROJECT_REVIEW_CONFIG.locale,
+    };
+}
+function coerceIntInRange(raw, min, max, fallback) {
+    if (raw == null || !raw.trim())
+        return fallback;
+    const n = Number(raw.trim());
+    // Non-integer / below min → default. Above max → clamp (e.g. max_before_pause
+    // 1001 must not fail-open to 0/unlimited and disable the pause gate).
+    if (!Number.isFinite(n) || !Number.isInteger(n) || n < min)
+        return fallback;
+    if (n > max)
+        return max;
+    return n;
+}
+function unquote(value) {
+    const v = value.trim();
+    if ((v.startsWith('"') && v.endsWith('"')) ||
+        (v.startsWith("'") && v.endsWith("'"))) {
+        return v.slice(1, -1);
+    }
+    return v;
+}
+function isPlainObject(value) {
+    return (!!value &&
+        typeof value === "object" &&
+        !Array.isArray(value) &&
+        Object.prototype.toString.call(value) === "[object Object]");
+}
+/** Keys that must never be written from YAML (match config-merge policy). */
+function isUnsafeKey(key) {
+    return key === "__proto__" || key === "prototype" || key === "constructor";
+}
+function coerceScalar(value) {
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    if (value === "null" || value === "~")
+        return null;
+    return unquote(value);
+}
+function lineIndent(line) {
+    let n = 0;
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === " ")
+            n += 1;
+        else if (ch === "\t")
+            n += 2;
+        else
+            break;
+    }
+    return n;
+}
+/**
+ * Minimal indentation-aware YAML subset reader for Autopilot config.
+ * Avoids bundling the full `yaml` package into the Cursor hook vendor ESM.
+ */
+function parseSimpleYaml(raw) {
+    const root = {};
+    const stack = [{ indent: -1, obj: root }];
+    for (const line of raw.split(/\r?\n/)) {
+        if (!line.trim() || line.trim().startsWith("#"))
+            continue;
+        const indent = lineIndent(line);
+        const trimmed = line.trim();
+        while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
+            stack.pop();
+        }
+        const frame = stack[stack.length - 1];
+        if (trimmed.startsWith("- ")) {
+            const itemRaw = trimmed.slice(2).trim();
+            if (!frame.openKey)
+                continue;
+            let list = frame.obj[frame.openKey];
+            if (!Array.isArray(list)) {
+                list = [];
+                frame.obj[frame.openKey] = list;
+            }
+            if (itemRaw.includes(":") && !itemRaw.startsWith("{")) {
+                const item = {};
+                list.push(item);
+                const m = itemRaw.match(/^([^:#]+):\s*(.*)$/);
+                if (m) {
+                    const k = m[1].trim();
+                    const v = m[2].trim();
+                    if (!isUnsafeKey(k)) {
+                        item[k] = v === "" ? null : coerceScalar(v);
+                    }
+                    stack.push({ indent, obj: item });
+                }
+            }
+            else {
+                list.push(coerceScalar(itemRaw));
+            }
+            continue;
+        }
+        const kv = trimmed.match(/^([^:#]+):\s*(.*)$/);
+        if (!kv)
+            continue;
+        const key = kv[1].trim();
+        const value = kv[2].trim();
+        if (isUnsafeKey(key))
+            continue;
+        // Nested content under an openKey → materialize mapping and descend.
+        if (frame.openKey &&
+            frame.openKeyIndent != null &&
+            indent > frame.openKeyIndent) {
+            let child = frame.obj[frame.openKey];
+            if (!isPlainObject(child) || Array.isArray(child)) {
+                child = {};
+                frame.obj[frame.openKey] = child;
+            }
+            const childObj = child;
+            const childIndent = frame.openKeyIndent;
+            frame.openKey = undefined;
+            frame.openKeyIndent = undefined;
+            stack.push({ indent: childIndent, obj: childObj });
+            const childFrame = stack[stack.length - 1];
+            if (value === "" || value === "|" || value === ">") {
+                childFrame.openKey = key;
+                childFrame.openKeyIndent = indent;
+            }
+            else {
+                childObj[key] = coerceScalar(value);
+            }
+            continue;
+        }
+        if (value === "" || value === "|" || value === ">") {
+            frame.openKey = key;
+            frame.openKeyIndent = indent;
+            continue;
+        }
+        frame.openKey = undefined;
+        frame.openKeyIndent = undefined;
+        frame.obj[key] = coerceScalar(value);
+    }
+    return root;
+}
+function coerceBool(raw) {
+    if (raw === true || raw === "true")
+        return true;
+    if (raw === false || raw === "false")
+        return false;
+    return undefined;
+}
+function parseVerifyCommands(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const entry of raw) {
+        if (!isPlainObject(entry))
+            continue;
+        if (typeof entry.id !== "string" || !entry.id.trim())
+            continue;
+        const cmd = { id: entry.id.trim() };
+        if (typeof entry.run === "string")
+            cmd.run = entry.run;
+        const required = coerceBool(entry.required);
+        if (required !== undefined)
+            cmd.required = required;
+        out.push(cmd);
+    }
+    return out;
+}
+/**
+ * Load review runtime settings from `.autopilot/config.yml`.
+ * Missing / unreadable / corrupt → safe defaults (hook fail-open).
+ */
+export function loadProjectReviewConfig(projectRoot) {
+    // Fail closed on unusable roots before any open (empty/blank/NUL → cwd-relative join).
+    const root = normalizeProjectRoot(projectRoot);
+    if (!root) {
+        return cloneDefaultProjectReviewConfig();
+    }
+    const configPath = path.join(root, ".autopilot", "config.yml");
+    try {
+        const nofollow = typeof fs.constants.O_NOFOLLOW === "number" ? fs.constants.O_NOFOLLOW : 0;
+        // Without O_NOFOLLOW: lstat before open — refuse leaf symlink follow.
+        if (nofollow === 0) {
+            if (!fs.existsSync(configPath))
+                return cloneDefaultProjectReviewConfig();
+            if (fs.lstatSync(configPath).isSymbolicLink()) {
+                return cloneDefaultProjectReviewConfig();
+            }
+        }
+        let fd;
+        try {
+            // O_NOFOLLOW + fstat: block leaf-symlink TOCTOU and oversized reads after stat.
+            fd = fs.openSync(configPath, fs.constants.O_RDONLY | nofollow);
+        }
+        catch {
+            return cloneDefaultProjectReviewConfig();
+        }
+        let raw;
+        try {
+            const st = fs.fstatSync(fd);
+            if (!st.isFile() || st.size > MAX_CONFIG_BYTES) {
+                return cloneDefaultProjectReviewConfig();
+            }
+            // Bind fd to path identity always (intermediate-dir swap-back TOCTOU).
+            const lst = fs.lstatSync(configPath);
+            if (lst.isSymbolicLink() || !lst.isFile()) {
+                return cloneDefaultProjectReviewConfig();
+            }
+            if (lst.ino !== st.ino || lst.dev !== st.dev) {
+                return cloneDefaultProjectReviewConfig();
+            }
+            if (!isRealpathInsideProject(root, configPath)) {
+                return cloneDefaultProjectReviewConfig();
+            }
+            // Read exactly the fstat size — avoid OOM if the file grows after fstat.
+            const buf = Buffer.alloc(st.size);
+            const n = fs.readSync(fd, buf, 0, st.size, 0);
+            raw = buf.subarray(0, n).toString("utf8");
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        if (Buffer.byteLength(raw, "utf8") > MAX_CONFIG_BYTES) {
+            return cloneDefaultProjectReviewConfig();
+        }
+        // Strip UTF-8 BOM so the first key is not shadowed as "\uFEFFlocale".
+        const text = raw.charCodeAt(0) === 0xfeff ? raw.slice(1) : raw;
+        const parsed = parseSimpleYaml(text);
+        if (!isPlainObject(parsed))
+            return cloneDefaultProjectReviewConfig();
+        const review = isPlainObject(parsed.review) ? parsed.review : {};
+        const verify = isPlainObject(review.verify) ? review.verify : {};
+        const stuck = isPlainObject(review.stuck) ? review.stuck : {};
+        const errors = isPlainObject(review.errors) ? review.errors : {};
+        // Một đường normalize — tránh load vs normalize lệch kẹp biên / bool.
+        return normalizeProjectReviewConfig({
+            confirmRounds: review.confirm_rounds,
+            reviewScope: review.scope,
+            verifyEnabled: verify.enabled,
+            verifyCommands: verify.commands,
+            maxIdleStops: stuck.max_idle_stops,
+            maxErrorsBeforePause: errors.max_before_pause,
+            locale: parsed.locale,
+        });
+    }
+    catch {
+        return cloneDefaultProjectReviewConfig();
+    }
+}
+/**
+ * Kẹp biên + làm sạch — mọi preloaded/config đều phải qua đây
+ * (không cho bypass confirm_rounds / idle / commands).
+ */
+export function normalizeProjectReviewConfig(raw) {
+    if (raw == null || typeof raw !== "object" || Array.isArray(raw)) {
+        return cloneDefaultProjectReviewConfig();
+    }
+    const o = raw;
+    return {
+        confirmRounds: coerceIntInRange(o.confirmRounds != null ? String(o.confirmRounds) : undefined, 1, 5, DEFAULT_PROJECT_REVIEW_CONFIG.confirmRounds),
+        reviewScope: parseReviewScope(o.reviewScope),
+        verifyEnabled: coerceBool(o.verifyEnabled) === true,
+        verifyCommands: parseVerifyCommands(o.verifyCommands),
+        maxIdleStops: coerceIntInRange(o.maxIdleStops != null ? String(o.maxIdleStops) : undefined, 1, 100, DEFAULT_PROJECT_REVIEW_CONFIG.maxIdleStops),
+        // 0 = unlimited; clamp 0..1000 (invalid → default unlimited)
+        maxErrorsBeforePause: coerceIntInRange(o.maxErrorsBeforePause != null
+            ? String(o.maxErrorsBeforePause)
+            : undefined, 0, 1000, DEFAULT_PROJECT_REVIEW_CONFIG.maxErrorsBeforePause),
+        locale: typeof o.locale === "string" && o.locale.trim()
+            ? o.locale.trim()
+            : DEFAULT_PROJECT_REVIEW_CONFIG.locale,
+    };
+}
+//# sourceMappingURL=project-config.js.map

package/dist/project-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config.js","sourceRoot":"","sources":["../src/project-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGlF,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAoBnC,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,gBAAgB;IAC7B,aAAa,EAAE,KAAK;IACpB,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAqC;IACrE,YAAY,EAAE,CAAC;IACf,oBAAoB,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,+BAA+B;IACtC,OAAO;QACL,aAAa,EAAE,6BAA6B,CAAC,aAAa;QAC1D,WAAW,EAAE,6BAA6B,CAAC,WAAW;QACtD,aAAa,EAAE,6BAA6B,CAAC,aAAa;QAC1D,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,6BAA6B,CAAC,YAAY;QACxD,oBAAoB,EAAE,6BAA6B,CAAC,oBAAoB;QACxE,MAAM,EAAE,6BAA6B,CAAC,MAAM;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAuB,EACvB,GAAW,EACX,GAAW,EACX,QAAgB;IAEhB,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC5E,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IACE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACtC,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAC5D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG;YAAE,CAAC,IAAI,CAAC,CAAC;aAClB,IAAI,EAAE,KAAK,IAAI;YAAE,CAAC,IAAI,CAAC,CAAC;;YACxB,MAAM;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAA4B,EAAE,CAAC;IAQzC,MAAM,KAAK,GAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC;YACrE,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAEvC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,SAAS;YAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,IAAI,GAAG,EAAE,CAAC;gBACV,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YAClC,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACxC,IAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAC9C,IAAI,CAAC,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC9C,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACL,IAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/B,qEAAqE;QACrE,IACE,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,aAAa,IAAI,IAAI;YAC3B,MAAM,GAAG,KAAK,CAAC,aAAa,EAC5B,CAAC;YACD,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,KAAK,GAAG,EAAE,CAAC;gBACX,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YACnC,CAAC;YACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;YAClD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC;YACxC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;YAC1B,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YAC5C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBACnD,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;gBACzB,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnD,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC;YACpB,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;QAC1B,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,SAAS;QAC/D,MAAM,GAAG,GAAwB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB;IAEnB,uFAAuF;IACvF,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,+BAA+B,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GACZ,OAAO,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5E,sEAAsE;QACtE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,+BAA+B,EAAE,CAAC;YACzE,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC9C,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,gFAAgF;YAChF,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,+BAA+B,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC/C,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;YACD,uEAAuE;YACvE,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC;gBAC7C,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC/C,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;YACD,yEAAyE;YACzE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9C,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;YACtD,OAAO,+BAA+B,EAAE,CAAC;QAC3C,CAAC;QAED,sEAAsE;QACtE,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,+BAA+B,EAAE,CAAC;QAErE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjE,sEAAsE;QACtE,OAAO,4BAA4B,CAAC;YAClC,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,KAAK,CAAC,cAAc;YAClC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB;YAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,+BAA+B,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,+BAA+B,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO;QACL,aAAa,EAAE,gBAAgB,CAC7B,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,EAC7D,CAAC,EACD,CAAC,EACD,6BAA6B,CAAC,aAAa,CAC5C;QACD,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5C,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI;QACnD,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC;QACrD,YAAY,EAAE,gBAAgB,CAC5B,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3D,CAAC,EACD,GAAG,EACH,6BAA6B,CAAC,YAAY,CAC3C;QACD,6DAA6D;QAC7D,oBAAoB,EAAE,gBAAgB,CACpC,CAAC,CAAC,oBAAoB,IAAI,IAAI;YAC5B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAChC,CAAC,CAAC,SAAS,EACb,CAAC,EACD,IAAI,EACJ,6BAA6B,CAAC,oBAAoB,CACnD;QACD,MAAM,EACJ,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC7C,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YACjB,CAAC,CAAC,6BAA6B,CAAC,MAAM;KAC3C,CAAC;AACJ,CAAC"}

package/dist/project-path.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Normalize untrusted projectRoot for join/resolve/containment.
+ * Leading/trailing spaces make absolute roots look relative to path.resolve
+ * (e.g. "  /tmp/p  " → cwd-relative) — always trim before FS use.
+ * Returns null for non-string, empty/blank, or NUL-poisoned roots.
+ */
+export declare function normalizeProjectRoot(projectRoot: string): string | null;
+/**
+ * Resolve both paths and require target under project root.
+ * Catches intermediate directory symlink escapes that O_NOFOLLOW on the leaf cannot.
+ * Relative targetPath is resolved against projectRoot (not process.cwd()).
+ * projectRoot is normalized (trim); targetPath is not trimmed (filenames may differ),
+ * but blank-only targetPath is refused.
+ */
+export declare function isRealpathInsideProject(projectRoot: string, targetPath: string): boolean;
+/**
+ * Lexical containment (no symlink resolve) — for paths that may not exist yet.
+ * Relative targets resolve against normalized projectRoot (targetPath not trimmed).
+ */
+export declare function isLexicallyInsideProject(projectRoot: string, targetPath: string): boolean;
+/**
+ * Normalize untrusted plansDir under projectRoot.
+ * Defaults blank/undefined to "plans". Returns null for absolute/~ / .. / bad chars.
+ */
+export declare function normalizeInProjectPlansDir(projectRoot: string, plansDir?: string | null): string | null;
+//# sourceMappingURL=project-path.d.ts.map

package/dist/project-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-path.d.ts","sourceRoot":"","sources":["../src/project-path.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMvE;AAaD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAkBT;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAiBT;AAKD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,GAAG,IAAI,CAuBf"}

package/dist/project-path.js

@@ -0,0 +1,104 @@
+import fs from "node:fs";
+import path from "node:path";
+/**
+ * Normalize untrusted projectRoot for join/resolve/containment.
+ * Leading/trailing spaces make absolute roots look relative to path.resolve
+ * (e.g. "  /tmp/p  " → cwd-relative) — always trim before FS use.
+ * Returns null for non-string, empty/blank, or NUL-poisoned roots.
+ */
+export function normalizeProjectRoot(projectRoot) {
+    if (typeof projectRoot !== "string" || projectRoot.includes("\0")) {
+        return null;
+    }
+    const root = projectRoot.trim();
+    return root || null;
+}
+/** True when realTarget is realRoot or a descendant (not a sibling escape). */
+function isRealpathInsideRoot(realRoot, realTarget) {
+    if (realTarget === realRoot)
+        return true;
+    const rel = path.relative(realRoot, realTarget);
+    return !(rel === ".." ||
+        rel.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(rel));
+}
+/**
+ * Resolve both paths and require target under project root.
+ * Catches intermediate directory symlink escapes that O_NOFOLLOW on the leaf cannot.
+ * Relative targetPath is resolved against projectRoot (not process.cwd()).
+ * projectRoot is normalized (trim); targetPath is not trimmed (filenames may differ),
+ * but blank-only targetPath is refused.
+ */
+export function isRealpathInsideProject(projectRoot, targetPath) {
+    if (typeof targetPath !== "string" ||
+        targetPath.includes("\0") ||
+        !targetPath.trim()) {
+        return false;
+    }
+    const root = normalizeProjectRoot(projectRoot);
+    if (!root)
+        return false;
+    try {
+        const realRoot = fs.realpathSync(root);
+        // path.resolve(root, abs) → abs; path.resolve(root, rel) → root/rel (not cwd).
+        const realTarget = fs.realpathSync(path.resolve(root, targetPath));
+        return isRealpathInsideRoot(realRoot, realTarget);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Lexical containment (no symlink resolve) — for paths that may not exist yet.
+ * Relative targets resolve against normalized projectRoot (targetPath not trimmed).
+ */
+export function isLexicallyInsideProject(projectRoot, targetPath) {
+    if (typeof targetPath !== "string" ||
+        targetPath.includes("\0") ||
+        !targetPath.trim()) {
+        return false;
+    }
+    const root = normalizeProjectRoot(projectRoot);
+    if (!root)
+        return false;
+    try {
+        const absRoot = path.resolve(root);
+        const abs = path.resolve(root, targetPath);
+        return isRealpathInsideRoot(absRoot, abs);
+    }
+    catch {
+        return false;
+    }
+}
+/** Align with CLI normalizePlansDir — relative, no traversal, safe path chars. */
+const PLANS_DIR_RE = /^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*$/;
+/**
+ * Normalize untrusted plansDir under projectRoot.
+ * Defaults blank/undefined to "plans". Returns null for absolute/~ / .. / bad chars.
+ */
+export function normalizeInProjectPlansDir(projectRoot, plansDir) {
+    const root = normalizeProjectRoot(projectRoot);
+    if (!root)
+        return null;
+    let raw = typeof plansDir === "string" && plansDir.trim() ? plansDir.trim() : "plans";
+    raw = raw.replace(/\/+$/, "") || "plans";
+    if (path.isAbsolute(raw) ||
+        raw.startsWith("~") ||
+        raw.includes("\0") ||
+        raw.includes("\n") ||
+        raw.includes("\r") ||
+        raw.includes("\\")) {
+        return null;
+    }
+    const parts = raw.split("/");
+    if (parts.some((p) => p === "" || p === "." || p === ".."))
+        return null;
+    const rel = parts.join("/");
+    if (!PLANS_DIR_RE.test(rel))
+        return null;
+    const abs = path.resolve(root, rel);
+    if (!isLexicallyInsideProject(root, abs))
+        return null;
+    return rel;
+}
+//# sourceMappingURL=project-path.js.map

package/dist/project-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-path.js","sourceRoot":"","sources":["../src/project-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,SAAS,oBAAoB,CAAC,QAAgB,EAAE,UAAkB;IAChE,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,CAAC,CACN,GAAG,KAAK,IAAI;QACZ,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,UAAkB;IAElB,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,UAAU,CAAC,IAAI,EAAE,EAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,+EAA+E;QAC/E,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACnE,OAAO,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,UAAkB;IAElB,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC,UAAU,CAAC,IAAI,EAAE,EAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,QAAwB;IAExB,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,GAAG,GACL,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;IACzC,IACE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACnB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC"}