@cicctencent/agent-server 0.1.1

package/dist/cjs/prompt/prompt-builder.js

@@ -0,0 +1,113 @@
+"use strict";
+// ============================================================
+// PromptBuilder — 默认 Prompt 构建实现
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESULT_SYNTHESIS_PROMPT = exports.DefaultPromptBuilder = void 0;
+/** 内置工具名称可读化映射 */
+const BUILTIN_TOOL_LABELS = {
+    execute_command: '执行命令',
+    read_terminal: '读取终端',
+    write_file: '写入文件',
+    append_file: '追加文件',
+    read_file: '读取文件',
+    delegate_task: '分发任务',
+    web_fetch: '抓取网页',
+    save_memory: '保存记忆',
+    recall_memory: '回忆记忆',
+    delete_memory: '删除记忆',
+    read_tool_doc: '查阅工具文档',
+    run_script: '运行脚本',
+    show_widget: '渲染组件',
+    save_artifact: '保存文件',
+    read_tool_result: '读取工具结果',
+    read_offload: '读取卸载内容',
+    load_skill: '加载技能',
+    create_presentation: '创建演示文稿',
+    create_document: '创建文档',
+    create_pdf: '创建 PDF',
+    create_report: '生成报表',
+};
+/**
+ * 默认 PromptBuilderProvider 实现
+ */
+class DefaultPromptBuilder {
+    resolveToolDisplayName(toolName, _registry) {
+        return BUILTIN_TOOL_LABELS[toolName] || toolName;
+    }
+    buildDefaultPrompt(profile, tools, memory, specialists, specialistResourceMap) {
+        const parts = [];
+        parts.push(profile.basePrompt || 'You are a helpful AI assistant with access to tools. Use tools when needed to accomplish tasks. Always explain your actions clearly. Respond in the same language as the user.');
+        if (memory) {
+            parts.push(`\n${memory}`);
+        }
+        const toolList = this.buildToolDescList(tools);
+        if (toolList) {
+            parts.push(`\n## Available Tools\n${toolList}`);
+        }
+        if (specialists && specialists.length > 0) {
+            const specialistList = specialists.map(s => {
+                const resources = specialistResourceMap?.[s.name];
+                let desc = `- **${s.name}**: ${s.description || s.domain || 'specialist agent'}`;
+                if (resources) {
+                    if (resources.connectorNames.length > 0) {
+                        desc += ` (数据源: ${resources.connectorNames.join(', ')})`;
+                    }
+                    if (resources.mcpServerNames.length > 0) {
+                        desc += ` (MCP: ${resources.mcpServerNames.join(', ')})`;
+                    }
+                }
+                return desc;
+            }).join('\n');
+            parts.push(`\n## Specialist Agents (via delegate_task)\n${specialistList}`);
+        }
+        return parts.join('\n');
+    }
+    buildSpecialistPrompt(profile, tools, skills, memory) {
+        const parts = [];
+        parts.push(profile.basePrompt || 'You are a specialist AI agent. Focus on your domain expertise and use tools to accomplish tasks.');
+        if (memory) {
+            parts.push(`\n${memory}`);
+        }
+        const toolList = this.buildToolDescList(tools);
+        if (toolList) {
+            parts.push(`\n## Available Tools\n${toolList}`);
+        }
+        const skillList = skills.getAll();
+        if (skillList.length > 0) {
+            const skillDesc = skillList.map(s => `- **${s.name}**: ${s.description}`).join('\n');
+            parts.push(`\n## Skills\n${skillDesc}`);
+        }
+        return parts.join('\n');
+    }
+    buildToolDescList(registry) {
+        const defs = registry.getDefinitions();
+        if (defs.length === 0)
+            return '';
+        const lines = defs.map(d => {
+            const name = d.function.name;
+            const desc = d.function.description || '';
+            const label = this.resolveToolDisplayName(name, registry);
+            return `- \`${name}\` (${label}): ${desc}`;
+        });
+        return lines.join('\n');
+    }
+    buildMCPToolDescList(registry) {
+        const names = registry.listNames().filter(n => n.startsWith('mcp_'));
+        if (names.length === 0)
+            return '';
+        return names.map(n => {
+            const tool = registry.get(n);
+            const def = tool?.definition;
+            return `- \`${n}\`: ${def?.function.description || ''}`;
+        }).join('\n');
+    }
+}
+exports.DefaultPromptBuilder = DefaultPromptBuilder;
+exports.RESULT_SYNTHESIS_PROMPT = `Based on the specialist agents' outputs above, provide a comprehensive synthesis:
+1. Summarize key findings from each agent
+2. Identify any conflicts or contradictions
+3. Provide a unified recommendation
+4. Highlight any risks or caveats
+Respond in the same language as the user.`;
+//# sourceMappingURL=prompt-builder.js.map

package/dist/cjs/prompt/prompt-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-builder.js","sourceRoot":"","sources":["../../../src/prompt/prompt-builder.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,iCAAiC;AACjC,+DAA+D;;;AAK/D,kBAAkB;AAClB,MAAM,mBAAmB,GAA2B;IAClD,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,MAAM;IACrB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,MAAM;IACrB,gBAAgB,EAAE,QAAQ;IAC1B,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,MAAM;IAClB,mBAAmB,EAAE,QAAQ;IAC7B,eAAe,EAAE,MAAM;IACvB,UAAU,EAAE,QAAQ;IACpB,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF;;GAEG;AACH,MAAa,oBAAoB;IAC/B,sBAAsB,CAAC,QAAgB,EAAE,SAAuB;QAC9D,OAAO,mBAAmB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IACnD,CAAC;IAED,kBAAkB,CAChB,OAA2B,EAC3B,KAAmB,EACnB,MAAe,EACf,WAAkC,EAClC,qBAAiE;QAEjE,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,gLAAgL,CAAC,CAAC;QAEnN,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBACzC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBACjF,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxC,IAAI,IAAI,UAAU,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC3D,CAAC;oBACD,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxC,IAAI,IAAI,UAAU,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC3D,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,+CAA+C,cAAc,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,qBAAqB,CACnB,OAA2B,EAC3B,KAAmB,EACnB,MAAoB,EACpB,MAAe;QAEf,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,kGAAkG,CAAC,CAAC;QAErI,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,iBAAiB,CAAC,QAAsB;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,oBAAoB,CAAC,QAAsB;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC;YAC7B,OAAO,OAAO,CAAC,OAAO,GAAG,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;CACF;AA9FD,oDA8FC;AAEY,QAAA,uBAAuB,GAAG;;;;;0CAKG,CAAC"}

package/dist/cjs/sandbox/local-sandbox.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @file LocalSandbox — 进程级沙箱实现
+ * @description 为每个 Agent 会话提供隔离的文件系统和 Shell 执行环境
+ *              文件系统限制在沙箱目录内，命令执行受 SecurityGuard + 沙箱黑名单保护
+ */
+import type { ShellExecutor, FileSystemExecutor, Sandbox, SandboxConfig, ScriptLanguage } from '@cicctencent/agent-core';
+/**
+ * 沙箱文件系统执行器
+ * 所有路径操作限制在沙箱 rootDir 内，阻止路径穿越
+ */
+export declare class SandboxFileSystemExecutor implements FileSystemExecutor {
+    private readonly rootDir;
+    private readonly maxFileSize;
+    constructor(rootDir: string, maxFileSize: number);
+    readFile(filePath: string): Promise<string>;
+    readFileBuffer(filePath: string): Promise<Buffer>;
+    writeFile(filePath: string, content: string): Promise<void>;
+    appendFile(filePath: string, content: string): Promise<void>;
+    listDir(dirPath: string): Promise<string[]>;
+    /**
+     * 解析路径并验证是否在沙箱目录内
+     * 如果路径越界（绝对路径或 .. 穿越），自动修正到沙箱内而非抛错
+     */
+    private resolveAndValidate;
+    /**
+     * 解析只读路径 — 允许读取沙箱目录和项目 data/ 目录
+     * data/ 目录存放对话内容、主题配置等只读资源，read_file 可安全访问
+     */
+    private resolveReadPath;
+}
+/**
+ * 沙箱 Shell 执行器
+ * - cwd 限制在沙箱目录
+ * - 环境变量经过白名单过滤
+ * - 命令经过 SecurityGuard + 沙箱黑名单检查
+ */
+export declare class SandboxShellExecutor implements ShellExecutor {
+    private readonly rootDir;
+    private readonly commandRestriction;
+    private readonly guard;
+    private outputBuffer;
+    private readonly maxBuffer;
+    private readonly sandboxEnv;
+    constructor(rootDir: string, commandRestriction: boolean);
+    exec(command: string, timeout?: number): Promise<string>;
+    write(_data: string): void;
+    read(lines?: number): string;
+}
+/**
+ * 本地沙箱实例
+ * 封装受限的 Shell 和 FileSystem 执行器，提供 runScript 能力
+ */
+export declare class LocalSandbox implements Sandbox {
+    readonly id: string;
+    readonly rootDir: string;
+    private readonly config;
+    private readonly shellExecutor;
+    private readonly fsExecutor;
+    private readonly scriptsDir;
+    constructor(id: string, config: SandboxConfig);
+    /** 初始化沙箱目录（创建后必须调用） */
+    init(): Promise<void>;
+    /** 将 html-renderer.cjs 和主题文件注入沙箱 _scripts/ 目录 */
+    private injectHtmlRenderer;
+    getShellExecutor(): ShellExecutor;
+    getFileSystemExecutor(): FileSystemExecutor;
+    runScript(language: ScriptLanguage, code: string, timeout?: number): Promise<string>;
+    destroy(): Promise<void>;
+}
+//# sourceMappingURL=local-sandbox.d.ts.map

package/dist/cjs/sandbox/local-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-sandbox.d.ts","sourceRoot":"","sources":["../../../src/sandbox/local-sandbox.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,cAAc,EACf,MAAM,yBAAyB,CAAC;AAgCjC;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;IAK1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK3C,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB3D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5D,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAMjD;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAqB1B;;;OAGG;IACH,OAAO,CAAC,eAAe;CAmCxB;AAID;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAO;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;gBAExC,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO;IAelD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAkD5D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI1B,IAAI,CAAC,KAAK,SAAK,GAAG,MAAM;CAIzB;AAwDD;;;GAGG;AACH,qBAAa,YAAa,YAAW,OAAO;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa;IAgB7C,uBAAuB;IACjB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,iDAAiD;YACnC,kBAAkB;IAyBhC,gBAAgB,IAAI,aAAa;IAIjC,qBAAqB,IAAI,kBAAkB;IAIrC,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuEpF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAO/B"}

package/dist/cjs/sandbox/local-sandbox.js

@@ -0,0 +1,442 @@
+"use strict";
+/**
+ * @file LocalSandbox — 进程级沙箱实现
+ * @description 为每个 Agent 会话提供隔离的文件系统和 Shell 执行环境
+ *              文件系统限制在沙箱目录内，命令执行受 SecurityGuard + 沙箱黑名单保护
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSandbox = exports.SandboxShellExecutor = exports.SandboxFileSystemExecutor = void 0;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs/promises"));
+const fs_1 = require("fs");
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const agent_core_1 = require("@cicctencent/agent-core");
+const agent_core_2 = require("@cicctencent/agent-core");
+const data_dir_ts_1 = require("../utils/data-dir.js");
+// ---- 辅助函数 ----
+/**
+ * 过滤环境变量，只保留安全白名单中的变量
+ */
+function filterEnvForSandbox(env) {
+    const filtered = {};
+    for (const key of agent_core_2.SANDBOX_SAFE_ENV_KEYS) {
+        if (env[key])
+            filtered[key] = env[key];
+    }
+    // 始终强制 Python UTF-8 输出
+    filtered['PYTHONIOENCODING'] = 'utf-8';
+    filtered['PYTHONUTF8'] = '1';
+    return filtered;
+}
+/**
+ * 脚本语言 → 文件扩展名 + 执行命令映射
+ */
+const LANGUAGE_MAP = {
+    python: { ext: '.py', command: 'python3' },
+    nodejs: { ext: '.cjs', command: 'node' },
+    shell: { ext: '.sh', command: process.platform === 'win32' ? 'bash' : 'bash' },
+};
+// ---- SandboxFileSystemExecutor ----
+/**
+ * 沙箱文件系统执行器
+ * 所有路径操作限制在沙箱 rootDir 内，阻止路径穿越
+ */
+class SandboxFileSystemExecutor {
+    rootDir;
+    maxFileSize;
+    constructor(rootDir, maxFileSize) {
+        this.rootDir = rootDir;
+        this.maxFileSize = maxFileSize;
+    }
+    async readFile(filePath) {
+        const resolved = this.resolveReadPath(filePath);
+        return fs.readFile(resolved, 'utf-8');
+    }
+    async readFileBuffer(filePath) {
+        const resolved = this.resolveReadPath(filePath);
+        return fs.readFile(resolved);
+    }
+    async writeFile(filePath, content) {
+        const resolved = this.resolveAndValidate(filePath);
+        // 检查文件大小限制
+        const contentSize = Buffer.byteLength(content, 'utf-8');
+        if (contentSize > this.maxFileSize) {
+            throw new Error(`Sandbox: file size ${contentSize} bytes exceeds limit ${this.maxFileSize} bytes`);
+        }
+        // 确保父目录存在（且在沙箱内）
+        const dir = path.dirname(resolved);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(resolved, content, 'utf-8');
+    }
+    async appendFile(filePath, content) {
+        const resolved = this.resolveAndValidate(filePath);
+        const dir = path.dirname(resolved);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.appendFile(resolved, content, 'utf-8');
+    }
+    async listDir(dirPath) {
+        const resolved = this.resolveAndValidate(dirPath);
+        const entries = await fs.readdir(resolved, { withFileTypes: true });
+        return entries.map(e => (e.isDirectory() ? e.name + '/' : e.name));
+    }
+    /**
+     * 解析路径并验证是否在沙箱目录内
+     * 如果路径越界（绝对路径或 .. 穿越），自动修正到沙箱内而非抛错
+     */
+    resolveAndValidate(filePath) {
+        const normalizedRoot = path.resolve(this.rootDir);
+        // 先正常解析
+        let resolved = path.isAbsolute(filePath)
+            ? path.resolve(filePath)
+            : path.resolve(this.rootDir, filePath);
+        // 检查是否在沙箱内
+        const relative = path.relative(normalizedRoot, resolved);
+        if (relative.startsWith('..') || path.isAbsolute(relative)) {
+            // 路径越界：自动修正，提取文件名/相对路径部分，重新定位到沙箱内
+            // 例: /Users/xxx/output.pptx → sandboxRoot/output.pptx
+            // 例: ../../../tmp/file.txt → sandboxRoot/file.txt
+            const safeName = path.basename(filePath);
+            resolved = path.resolve(this.rootDir, safeName);
+        }
+        return resolved;
+    }
+    /**
+     * 解析只读路径 — 允许读取沙箱目录和项目 data/ 目录
+     * data/ 目录存放对话内容、主题配置等只读资源，read_file 可安全访问
+     */
+    resolveReadPath(filePath) {
+        const normalizedRoot = path.resolve(this.rootDir);
+        // 1. 先解析为沙箱内路径
+        let resolved = path.isAbsolute(filePath)
+            ? path.resolve(filePath)
+            : path.resolve(this.rootDir, filePath);
+        // 检查是否在沙箱内
+        const relative = path.relative(normalizedRoot, resolved);
+        if (!relative.startsWith('..') && !path.isAbsolute(relative)) {
+            // 在沙箱内，但如果文件不存在且是相对路径，尝试从项目 data/ 目录读取
+            if (!(0, fs_1.existsSync)(resolved) && !path.isAbsolute(filePath)) {
+                const dataResolved = path.resolve((0, data_dir_ts_1.getProjectDataPath)(), filePath);
+                const normalizedDataDir = path.resolve((0, data_dir_ts_1.getProjectDataPath)());
+                const relToData = path.relative(normalizedDataDir, dataResolved);
+                if (!relToData.startsWith('..') && !path.isAbsolute(relToData) && (0, fs_1.existsSync)(dataResolved)) {
+                    return dataResolved;
+                }
+            }
+            return resolved;
+        }
+        // 2. 不在沙箱内，检查是否在项目 data/ 目录内
+        const dataDir = (0, data_dir_ts_1.getProjectDataPath)();
+        const normalizedDataDir = path.resolve(dataDir);
+        const relativeToData = path.relative(normalizedDataDir, resolved);
+        if (!relativeToData.startsWith('..') && !path.isAbsolute(relativeToData)) {
+            return resolved; // 在 data/ 目录内，允许读取
+        }
+        // 3. 路径不在任何允许目录内：回退到沙箱内
+        const safeName = path.basename(filePath);
+        return path.resolve(this.rootDir, safeName);
+    }
+}
+exports.SandboxFileSystemExecutor = SandboxFileSystemExecutor;
+// ---- SandboxShellExecutor ----
+/**
+ * 沙箱 Shell 执行器
+ * - cwd 限制在沙箱目录
+ * - 环境变量经过白名单过滤
+ * - 命令经过 SecurityGuard + 沙箱黑名单检查
+ */
+class SandboxShellExecutor {
+    rootDir;
+    commandRestriction;
+    guard;
+    outputBuffer = [];
+    maxBuffer = 500;
+    sandboxEnv;
+    constructor(rootDir, commandRestriction) {
+        this.rootDir = rootDir;
+        this.commandRestriction = commandRestriction;
+        // 创建带沙箱黑名单的 SecurityGuard
+        this.guard = new agent_core_1.SecurityGuard({
+            deleteProtection: true,
+            blacklistEnabled: true,
+            rules: agent_core_2.SANDBOX_BLOCKED_COMMANDS,
+        });
+        // 预计算沙箱环境变量
+        this.sandboxEnv = filterEnvForSandbox(process.env);
+    }
+    async exec(command, timeout = 2000) {
+        // 命令安全检查
+        if (this.commandRestriction) {
+            const sanitized = this.guard.sanitize(command.trim());
+            if (!sanitized.safe) {
+                return `[Sandbox blocked] ${sanitized.reason}`;
+            }
+            // 如果命令被改写，使用改写后的命令
+            if (sanitized.rewritten) {
+                command = sanitized.rewritten;
+            }
+        }
+        const isWindows = process.platform === 'win32';
+        // Windows: chcp 65001 让 cmd.exe 使用 UTF-8 代码页
+        const shellCommand = isWindows
+            ? `chcp 65001 >nul 2>&1 & ${command}`
+            : command;
+        return new Promise((resolve) => {
+            (0, child_process_1.exec)(shellCommand, {
+                timeout,
+                maxBuffer: 1024 * 1024 * 5, // 5MB
+                windowsHide: true,
+                encoding: 'buffer',
+                cwd: this.rootDir, // 关键：cwd 限制在沙箱目录
+                env: this.sandboxEnv,
+            }, (error, stdoutBuf, stderrBuf) => {
+                let output = '';
+                const stdout = stdoutBuf ? stdoutBuf.toString('utf-8') : '';
+                const stderr = stderrBuf ? stderrBuf.toString('utf-8') : '';
+                if (stdout)
+                    output += stdout;
+                if (stderr)
+                    output += (output ? '\n' : '') + stderr;
+                if (error && !output.trim()) {
+                    output = error.message;
+                }
+                // 保存到输出缓冲区（供 read 使用）
+                const lines = output.split('\n');
+                this.outputBuffer.push(...lines);
+                if (this.outputBuffer.length > this.maxBuffer) {
+                    this.outputBuffer = this.outputBuffer.slice(-this.maxBuffer);
+                }
+                resolve(output || '(no output)');
+            });
+        });
+    }
+    write(_data) {
+        // 沙箱模式不支持交互式写入
+    }
+    read(lines = 50) {
+        const start = Math.max(0, this.outputBuffer.length - lines);
+        return this.outputBuffer.slice(start).join('\n') || '(no terminal output)';
+    }
+}
+exports.SandboxShellExecutor = SandboxShellExecutor;
+// ---- JSON Builder 辅助模块 ----
+/**
+ * 注入到沙箱 _scripts/_json_builder.cjs 的帮助模块。
+ * LLM 通过 write_file + append_file 构建 JS 脚本，运行时生成 JSON 数据文件，
+ * 避免将大量 JSON 作为工具参数传递（消除转义膨胀和截断风险）。
+ *
+ * 用法:
+ *   const B = require('./_scripts/_json_builder');
+ *   B.init('data.json');
+ *   B.add({ type: 'cover', title: 'Report' });
+ *   B.add({ type: 'content', title: 'Slide 2', body: '...' });
+ *   B.meta({ title: 'My Report', theme: 'midnight' });
+ *   B.done();  // → 写入 data.json
+ */
+const JSON_BUILDER_SOURCE = `// _json_builder.cjs — JSON data builder helper
+// Usage: require this, call init(), add() for each item, meta() for metadata, done() to write.
+const fs = require('fs');
+const path = require('path');
+let _items = [];
+let _meta = {};
+let _output = 'data.json';
+
+module.exports = {
+  init(output) {
+    _output = output || 'data.json';
+    _items = [];
+    _meta = {};
+  },
+  add(item) {
+    _items.push(item);
+  },
+  meta(obj) {
+    Object.assign(_meta, obj);
+  },
+  done() {
+    // Use 'slides' for presentations, 'blocks' for documents/PDFs (check meta.type)
+    const data = { ..._meta };
+    if (_meta.type === 'document' || _meta.type === 'pdf') {
+      data.blocks = _items;
+    } else {
+      data.slides = _items;
+    }
+    const json = JSON.stringify(data, null, 2);
+    const dir = path.dirname(_output);
+    if (dir && dir !== '.') { try { fs.mkdirSync(dir, { recursive: true }); } catch(e) {} }
+    fs.writeFileSync(_output, json, 'utf-8');
+    console.log('JSON builder: wrote ' + _items.length + ' items to ' + _output + ' (' + json.length + ' chars)');
+  }
+};
+`;
+// ---- LocalSandbox ----
+/**
+ * 本地沙箱实例
+ * 封装受限的 Shell 和 FileSystem 执行器，提供 runScript 能力
+ */
+class LocalSandbox {
+    id;
+    rootDir;
+    config;
+    shellExecutor;
+    fsExecutor;
+    scriptsDir;
+    constructor(id, config) {
+        this.id = id;
+        this.rootDir = config.rootDir;
+        this.config = { ...agent_core_2.DEFAULT_SANDBOX_CONFIG, ...config };
+        this.scriptsDir = path.join(this.rootDir, '_scripts');
+        this.shellExecutor = new SandboxShellExecutor(this.rootDir, this.config.commandRestriction ?? true);
+        this.fsExecutor = new SandboxFileSystemExecutor(this.rootDir, this.config.maxFileSize ?? agent_core_2.DEFAULT_SANDBOX_CONFIG.maxFileSize);
+    }
+    /** 初始化沙箱目录（创建后必须调用） */
+    async init() {
+        await fs.mkdir(this.rootDir, { recursive: true });
+        await fs.mkdir(this.scriptsDir, { recursive: true });
+        // 注入 JSON Builder 辅助模块（供 LLM 用脚本方式构建大型 JSON 数据文件）
+        await fs.writeFile(path.join(this.scriptsDir, '_json_builder.cjs'), JSON_BUILDER_SOURCE, 'utf-8');
+        // 注入 HTML 报告模板生成器和主题（供报表创作助手使用）
+        await this.injectHtmlRenderer();
+    }
+    /** 将 html-renderer.cjs 和主题文件注入沙箱 _scripts/ 目录 */
+    async injectHtmlRenderer() {
+        const templateDir = (0, data_dir_ts_1.getProjectDataPath)('doc-templates/html');
+        const rendererSrc = path.join(templateDir, 'html-renderer.cjs');
+        const themesSrcDir = path.join(templateDir, 'themes');
+        try {
+            if ((0, fs_1.existsSync)(rendererSrc)) {
+                await fs.copyFile(rendererSrc, path.join(this.scriptsDir, '_html_renderer.cjs'));
+            }
+            // 复制主题目录
+            const themesDstDir = path.join(this.scriptsDir, 'html-themes');
+            await fs.mkdir(themesDstDir, { recursive: true });
+            if ((0, fs_1.existsSync)(themesSrcDir)) {
+                const themeFiles = await fs.readdir(themesSrcDir);
+                for (const f of themeFiles) {
+                    if (f.endsWith('.json')) {
+                        await fs.copyFile(path.join(themesSrcDir, f), path.join(themesDstDir, f));
+                    }
+                }
+            }
+        }
+        catch (err) {
+            // 非致命错误，不影响沙箱初始化
+            console.warn('[Sandbox] Failed to inject html-renderer:', err);
+        }
+    }
+    getShellExecutor() {
+        return this.shellExecutor;
+    }
+    getFileSystemExecutor() {
+        return this.fsExecutor;
+    }
+    async runScript(language, code, timeout) {
+        const langConfig = LANGUAGE_MAP[language];
+        if (!langConfig) {
+            throw new Error(`Sandbox: unsupported language "${language}"`);
+        }
+        // 安全检查：拦截脚本内容中向用户目录的绝对路径写操作
+        const absPathPattern = /(?:writeFile|writeFileSync|createWriteStream|open\s*\(|savefig|to_csv|to_excel|to_parquet|to_html)\s*\(?\s*['"][^'"]*\/(Users|home)\//i;
+        const cpMvPattern = /\b(?:cp|mv|tee)\s+[^|;&\n]*\s+['"]?\/(Users|home)\//i;
+        if (absPathPattern.test(code) || cpMvPattern.test(code)) {
+            return '[Sandbox blocked] Script contains absolute path write to user directory. Use relative paths instead (e.g. "output.pptx", "report.html").';
+        }
+        // Node.js 脚本：自动注入 output/ 目录创建 + 全面 patch fs 方法
+        // 防止 pptxgenjs/docx 等库写入子目录时因目录不存在而静默失败
+        // 覆盖: writeFileSync, writeFile(callback), fs.promises.writeFile, createWriteStream
+        let finalCode = code;
+        if (language === 'nodejs') {
+            const preamble = [
+                "// Auto-injected: ensure output/ dir and patch ALL fs write methods to auto-create parent dirs",
+                "try { require('fs').mkdirSync('output', { recursive: true }); } catch(e) {}",
+                "const _fs = require('fs');",
+                "const _path = require('path');",
+                "function _ensureDir(p) { try { const d = _path.dirname(p); if(d && d !== '.') _fs.mkdirSync(d, { recursive: true }); } catch(e) {} }",
+                "const _origWriteFileSync = _fs.writeFileSync;",
+                "_fs.writeFileSync = function(p, ...a) { _ensureDir(p); return _origWriteFileSync.call(this, p, ...a); };",
+                "const _origWriteFile = _fs.writeFile;",
+                "_fs.writeFile = function(p, ...a) { _ensureDir(p); return _origWriteFile.call(this, p, ...a); };",
+                "const _origCreateWriteStream = _fs.createWriteStream;",
+                "_fs.createWriteStream = function(p, ...a) { _ensureDir(p); return _origCreateWriteStream.call(this, p, ...a); };",
+                "if (_fs.promises) {",
+                "  const _origPromisesWriteFile = _fs.promises.writeFile;",
+                "  _fs.promises.writeFile = async function(p, ...a) { _ensureDir(p); return _origPromisesWriteFile.call(this, p, ...a); };",
+                "}",
+                "",
+            ].join('\n');
+            finalCode = preamble + code;
+        }
+        else if (language === 'python') {
+            const preamble = [
+                "# Auto-injected: ensure output/ dir exists",
+                "import os as _os",
+                "try: _os.makedirs('output', exist_ok=True)",
+                "except: pass",
+                "",
+            ].join('\n');
+            finalCode = preamble + code;
+        }
+        // 生成唯一脚本文件名
+        const timestamp = Date.now();
+        const random = crypto.randomBytes(4).toString('hex');
+        const fileName = `script_${timestamp}_${random}${langConfig.ext}`;
+        const scriptPath = path.join(this.scriptsDir, fileName);
+        // 写入脚本文件
+        await fs.writeFile(scriptPath, finalCode, 'utf-8');
+        try {
+            // 构建执行命令
+            const execTimeout = timeout ?? this.config.execTimeout ?? agent_core_2.DEFAULT_SANDBOX_CONFIG.execTimeout;
+            const command = `${langConfig.command} "${scriptPath}"`;
+            // 通过沙箱 Shell 执行器运行
+            const result = await this.shellExecutor.exec(command, execTimeout);
+            return result;
+        }
+        finally {
+            // 清理临时脚本文件（静默失败）
+            fs.unlink(scriptPath).catch(() => { });
+        }
+    }
+    async destroy() {
+        try {
+            await fs.rm(this.rootDir, { recursive: true, force: true });
+        }
+        catch {
+            // 静默处理清理失败
+        }
+    }
+}
+exports.LocalSandbox = LocalSandbox;
+//# sourceMappingURL=local-sandbox.js.map

package/dist/cjs/sandbox/local-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-sandbox.js","sourceRoot":"","sources":["../../../src/sandbox/local-sandbox.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,iDAA+C;AAC/C,gDAAkC;AAClC,2BAAgC;AAChC,2CAA6B;AAC7B,+CAAiC;AAQjC,wDAAwD;AACxD,wDAAkH;AAClH,sDAA0D;AAE1D,iBAAiB;AAEjB;;GAEG;AACH,SAAS,mBAAmB,CAAC,GAAuC;IAClE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,kCAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;IAC1C,CAAC;IACD,uBAAuB;IACvB,QAAQ,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,YAAY,GAA6D;IAC7E,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;IACxC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;CAC/E,CAAC;AAEF,sCAAsC;AAEtC;;;GAGG;AACH,MAAa,yBAAyB;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IAErC,YAAY,OAAe,EAAE,WAAmB;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,OAAe;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAEnD,WAAW;QACX,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,wBAAwB,IAAI,CAAC,WAAW,QAAQ,CAClF,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAe;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,QAAgB;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,QAAQ;QACR,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,WAAW;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,kCAAkC;YAClC,sDAAsD;YACtD,kDAAkD;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,QAAgB;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,eAAe;QACf,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,WAAW;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,uCAAuC;YACvC,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAA,gCAAkB,GAAE,EAAE,QAAQ,CAAC,CAAC;gBAClE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAA,gCAAkB,GAAE,CAAC,CAAC;gBAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBACjE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;oBAC3F,OAAO,YAAY,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,6BAA6B;QAC7B,MAAM,OAAO,GAAG,IAAA,gCAAkB,GAAE,CAAC;QACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,OAAO,QAAQ,CAAC,CAAC,mBAAmB;QACtC,CAAC;QAED,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;CACF;AAjHD,8DAiHC;AAED,iCAAiC;AAEjC;;;;;GAKG;AACH,MAAa,oBAAoB;IACd,OAAO,CAAS;IAChB,kBAAkB,CAAU;IAC5B,KAAK,CAAgB;IAC9B,YAAY,GAAa,EAAE,CAAC;IACnB,SAAS,GAAG,GAAG,CAAC;IAChB,UAAU,CAAyB;IAEpD,YAAY,OAAe,EAAE,kBAA2B;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,0BAAa,CAAC;YAC7B,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,IAAI;YACtB,KAAK,EAAE,qCAAwB;SAChC,CAAC,CAAC;QAEH,YAAY;QACZ,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAyC,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAO,GAAG,IAAI;QACxC,SAAS;QACT,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,qBAAqB,SAAS,CAAC,MAAM,EAAE,CAAC;YACjD,CAAC;YACD,mBAAmB;YACnB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,6CAA6C;QAC7C,MAAM,YAAY,GAAG,SAAS;YAC5B,CAAC,CAAC,0BAA0B,OAAO,EAAE;YACrC,CAAC,CAAC,OAAO,CAAC;QAEZ,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACrC,IAAA,oBAAM,EAAC,YAAY,EAAE;gBACnB,OAAO;gBACP,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,MAAM;gBAClC,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB;gBACpC,GAAG,EAAE,IAAI,CAAC,UAAU;aACrB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBACjC,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,IAAI,MAAM;oBAAE,MAAM,IAAI,MAAM,CAAC;gBAC7B,IAAI,MAAM;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;gBAEpD,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5B,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;gBACzB,CAAC;gBAED,sBAAsB;gBACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/D,CAAC;gBAED,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,eAAe;IACjB,CAAC;IAED,IAAI,CAAC,KAAK,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC;IAC7E,CAAC;CACF;AAjFD,oDAiFC;AAED,8BAA8B;AAE9B;;;;;;;;;;;;GAYG;AACH,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC3B,CAAC;AAEF,yBAAyB;AAEzB;;;GAGG;AACH,MAAa,YAAY;IACd,EAAE,CAAS;IACX,OAAO,CAAS;IAER,MAAM,CAAgB;IACtB,aAAa,CAAuB;IACpC,UAAU,CAA4B;IACtC,UAAU,CAAS;IAEpC,YAAY,EAAU,EAAE,MAAqB;QAC3C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,mCAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC,aAAa,GAAG,IAAI,oBAAoB,CAC3C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CACvC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAC7C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,mCAAsB,CAAC,WAAY,CAC/D,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,kDAAkD;QAClD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAClG,gCAAgC;QAChC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAED,iDAAiD;IACzC,KAAK,CAAC,kBAAkB;QAC9B,MAAM,WAAW,GAAG,IAAA,gCAAkB,EAAC,oBAAoB,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,IAAI,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,SAAS;YACT,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAClD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;oBAC3B,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACxB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAwB,EAAE,IAAY,EAAE,OAAgB;QACtE,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,wIAAwI,CAAC;QAChK,MAAM,WAAW,GAAG,sDAAsD,CAAC;QAC3E,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,0IAA0I,CAAC;QACpJ,CAAC;QAED,gDAAgD;QAChD,wCAAwC;QACxC,mFAAmF;QACnF,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG;gBACf,gGAAgG;gBAChG,6EAA6E;gBAC7E,4BAA4B;gBAC5B,gCAAgC;gBAChC,sIAAsI;gBACtI,+CAA+C;gBAC/C,0GAA0G;gBAC1G,uCAAuC;gBACvC,kGAAkG;gBAClG,uDAAuD;gBACvD,kHAAkH;gBAClH,qBAAqB;gBACrB,0DAA0D;gBAC1D,2HAA2H;gBAC3H,GAAG;gBACH,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG;gBACf,4CAA4C;gBAC5C,kBAAkB;gBAClB,4CAA4C;gBAC5C,cAAc;gBACd,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,YAAY;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,SAAS,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAExD,SAAS;QACT,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,SAAS;YACT,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,mCAAsB,CAAC,WAAY,CAAC;YAC9F,MAAM,OAAO,GAAG,GAAG,UAAU,CAAC,OAAO,KAAK,UAAU,GAAG,CAAC;YAExD,mBAAmB;YACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,iBAAiB;YACjB,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;CACF;AAnJD,oCAmJC"}