@downcity/shell 0.1.4

package/bin/session/ShellRuntimeEnvironment.js

@@ -0,0 +1,69 @@
+/**
+ * Shell action 运行环境解析辅助。
+ *
+ * 关键点（中文）
+ * - 集中处理 shell 子进程 cwd、env 与 owner context 的解析。
+ * - 这里只做输入归一化，不持有 shell session 状态。
+ */
+import path from "node:path";
+function stripShellSecretEnv(env) {
+    delete env.DC_AUTH_TOKEN;
+    delete env.DC_AGENT_TOKEN;
+}
+/**
+ * 构造 shell 子进程环境变量。
+ */
+export function buildShellEnv(context) {
+    const env = { ...process.env };
+    // 关键点（中文）
+    // - ShellHostContext.env 现在就是宿主已经整理好的最终 env 视图。
+    // - shell 只消费这一份显式上下文，避免再次引入 platform/global env 隐式来源。
+    for (const [key, value] of Object.entries(context.env || {})) {
+        const normalizedKey = String(key || "").trim();
+        const normalizedValue = String(value || "").trim();
+        if (!normalizedKey || !normalizedValue)
+            continue;
+        env[normalizedKey] = normalizedValue;
+    }
+    const run_context = context.shellIntegration?.getRunContext?.();
+    const sessionId = String(run_context?.sessionId || "").trim();
+    const agentPath = String(context.rootPath || "").trim();
+    const configuredAgentId = String(context.config?.id || "").trim();
+    const agentId = configuredAgentId || (agentPath ? path.basename(agentPath) : "");
+    // 关键点（中文）
+    // - agent 自己在 shell 里执行 `town <service> ...` 时，也需要显式知道“当前 agent 是谁”。
+    // - 否则 service CLI 会退回到当前终端 cwd / registry 猜测，在多 agent 或外部工作目录下
+    //   很容易把请求发到错误项目，最终误报 “Agent runtime 没启动”。
+    if (agentPath)
+        env.DC_AGENT_PATH = agentPath;
+    if (agentId)
+        env.DC_AGENT_ID = agentId;
+    if (sessionId)
+        env.DC_SESSION_ID = sessionId;
+    if (process.env.DC_CITY_HOST)
+        env.DC_CITY_HOST = process.env.DC_CITY_HOST;
+    if (process.env.DC_CITY_PORT)
+        env.DC_CITY_PORT = process.env.DC_CITY_PORT;
+    stripShellSecretEnv(env);
+    return env;
+}
+/**
+ * 解析 shell 执行目录。
+ */
+export function resolveShellCwd(context, cwd) {
+    const raw = String(cwd || "").trim();
+    if (!raw)
+        return context.rootPath;
+    return path.isAbsolute(raw) ? raw : path.resolve(context.rootPath, raw);
+}
+/**
+ * 推断 shell 所属的 owner context。
+ */
+export function resolveOwnerContextId(context, explicit) {
+    const fromInput = String(explicit || "").trim();
+    if (fromInput)
+        return fromInput;
+    const fromRequest = String(context.shellIntegration?.getRunContext?.()?.sessionId || "").trim();
+    return fromRequest || undefined;
+}
+//# sourceMappingURL=ShellRuntimeEnvironment.js.map

package/bin/session/ShellRuntimeEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellRuntimeEnvironment.js","sourceRoot":"","sources":["../../src/session/ShellRuntimeEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO,GAAG,CAAC,aAAa,CAAC;IACzB,OAAO,GAAG,CAAC,cAAc,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAyB;IACrD,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElD,UAAU;IACV,gDAAgD;IAChD,uDAAuD;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe;YAAE,SAAS;QACjD,GAAG,CAAC,aAAa,CAAC,GAAG,eAAe,CAAC;IACvC,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjF,UAAU;IACV,qEAAqE;IACrE,gEAAgE;IAChE,2CAA2C;IAC3C,IAAI,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;IAC7C,IAAI,OAAO;QAAE,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IACvC,IAAI,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC1E,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,GAAY;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAyB,EACzB,QAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,OAAO,WAAW,IAAI,SAAS,CAAC;AAClC,CAAC"}

package/bin/session/ShellRuntimeTypes.d.ts

@@ -0,0 +1,160 @@
+/**
+ * ShellRuntime 类型定义。
+ *
+ * 关键点（中文）
+ * - 这些类型描述 shell runtime 的实例级运行态。
+ * - 状态所有权归属于 `Shell` 实例，而不是模块级单例。
+ * - 统一归档到 `src/shell/` 相邻层级，避免继续分散在跨域目录里。
+ */
+import type { ChildProcessWithoutNullStreams } from "node:child_process";
+import type { ShellHostContext } from "../types/ShellHostContext.js";
+import type { ShellApprovalStatus, ShellApprovalToolName, ShellSessionSnapshot } from "../types/ShellAction.js";
+import type { ResolvedShellRuntimeOptions } from "../types/ShellRuntimeOptions.js";
+/**
+ * unrestricted sandbox 审批运行态。
+ */
+export type ShellApprovalRuntimeState = {
+    /**
+     * 当前审批请求 ID。
+     */
+    approvalId: string;
+    /**
+     * 关联的 shell_id。
+     */
+    shellId: string;
+    /**
+     * 所属 session/聊天上下文。
+     */
+    ownerContextId?: string;
+    /**
+     * 关联工具名。
+     */
+    toolName: ShellApprovalToolName;
+    /**
+     * 申请执行的命令。
+     *
+     * 说明（中文）
+     * - `shell_write` 使用该字段保存 stdin 写入预览，保持审批队列结构统一。
+     */
+    cmd: string;
+    /**
+     * 审批动作类型。
+     */
+    operation: "exec" | "start" | "write";
+    /**
+     * stdin 写入内容预览；仅 `shell_write` 审批存在。
+     */
+    inputPreview?: string;
+    /**
+     * stdin 写入字符数；仅 `shell_write` 审批存在。
+     */
+    inputChars?: number;
+    /**
+     * 命令执行目录。
+     */
+    cwd: string;
+    /**
+     * 申请原因。
+     */
+    reason: string;
+    /**
+     * 当前审批创建时间。
+     */
+    createdAt: number;
+    /**
+     * 审批超时定时器。
+     */
+    timer: NodeJS.Timeout;
+    /**
+     * 兑现审批结果。
+     */
+    resolve: (status: ShellApprovalStatus) => void;
+};
+/**
+ * 单个 shell wait 调用挂起时注册的 waiter。
+ */
+export type ShellSessionWaiter = {
+    /**
+     * 当前等待完成后的唤醒回调。
+     */
+    resolve: () => void;
+    /**
+     * 当前 waiter 对应的超时定时器。
+     */
+    timer: NodeJS.Timeout;
+};
+/**
+ * 单个 shell session 的内存运行态。
+ */
+export type ShellSessionRuntimeState = {
+    /**
+     * 当前 shell session 的对外快照。
+     */
+    snapshot: ShellSessionSnapshot;
+    /**
+     * 当前 shell session 对应的子进程句柄。
+     */
+    child: ChildProcessWithoutNullStreams;
+    /**
+     * 当前已缓存的标准输出与标准错误文本。
+     */
+    outputText: string;
+    /**
+     * 当前输出持久化文件路径。
+     */
+    outputFilePath: string;
+    /**
+     * 当前快照持久化文件路径。
+     */
+    snapshotFilePath: string;
+    /**
+     * 串行化文件写入链，避免并发 append 乱序。
+     */
+    writeChain: Promise<void>;
+    /**
+     * 终态后的延迟清理定时器。
+     */
+    cleanupTimer: NodeJS.Timeout | null;
+    /**
+     * 当前挂起等待该 session 状态变化的 waiter 集合。
+     */
+    waiters: Set<ShellSessionWaiter>;
+    /**
+     * 当前 shell 进入终态后的完成 promise。
+     *
+     * 关键点（中文）
+     * - 供 `shell.exec` 这类 one-shot 路径直接等待进程结束。
+     * - 这样可以减少对版本轮询的依赖，降低瞬时命令的竞态超时。
+     */
+    completionPromise: Promise<void>;
+    /**
+     * 当前 shell 进入终态时触发的完成回调。
+     */
+    resolveCompletion: () => void;
+};
+/**
+ * `Shell` 实例级状态。
+ */
+export type ShellRuntimeState = {
+    /**
+     * 当前 shell 归一化后的运行参数。
+     */
+    options: ResolvedShellRuntimeOptions;
+    /**
+     * 当前实例持有的全部 in-memory shell session。
+     */
+    sessions: Map<string, ShellSessionRuntimeState>;
+    /**
+     * 当前实例持有的全部 pending unrestricted sandbox 审批。
+     */
+    approvals: Map<string, ShellApprovalRuntimeState>;
+    /**
+     * 当前实例最近一次启动时绑定的 agent context。
+     *
+     * 关键点（中文）
+     * - 仅用于 shell 自动通知 chat 的回调路径。
+     * - 这是实例字段，不再是模块级全局变量。
+     */
+    context: ShellHostContext | null;
+};
+//# sourceMappingURL=ShellRuntimeTypes.d.ts.map

package/bin/session/ShellRuntimeTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellRuntimeTypes.d.ts","sourceRoot":"","sources":["../../src/session/ShellRuntimeTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAElF;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;IACtB;;OAEG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAChD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;OAEG;IACH,KAAK,EAAE,8BAA8B,CAAC;IACtC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACpC;;OAEG;IACH,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC;;OAEG;IACH,iBAAiB,EAAE,MAAM,IAAI,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,OAAO,EAAE,2BAA2B,CAAC;IACrC;;OAEG;IACH,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAChD;;OAEG;IACH,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAClD;;;;;;OAMG;IACH,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAClC,CAAC"}

package/bin/session/ShellRuntimeTypes.js

@@ -0,0 +1,10 @@
+/**
+ * ShellRuntime 类型定义。
+ *
+ * 关键点（中文）
+ * - 这些类型描述 shell runtime 的实例级运行态。
+ * - 状态所有权归属于 `Shell` 实例，而不是模块级单例。
+ * - 统一归档到 `src/shell/` 相邻层级，避免继续分散在跨域目录里。
+ */
+export {};
+//# sourceMappingURL=ShellRuntimeTypes.js.map

package/bin/session/ShellRuntimeTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellRuntimeTypes.js","sourceRoot":"","sources":["../../src/session/ShellRuntimeTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/bin/session/actions/ShellActionShared.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Shell action 共享辅助函数。
+ *
+ * 关键点（中文）
+ * - 这里只放多个 action 都需要的轻量逻辑。
+ * - 不承载具体 action 编排，避免重新形成巨型模块。
+ */
+import type { ShellSessionRuntimeState } from "../../session/ShellRuntimeTypes.js";
+import type { ShellActionResponse, ShellApprovalStatus } from "../../types/ShellAction.js";
+/**
+ * 解析默认 shell 路径。
+ */
+export declare function resolveDefaultShellPath(): string;
+/**
+ * 解析 shell action 请求的 sandbox 模式。
+ */
+export declare function resolveSandboxMode(value: unknown): "safe" | "unrestricted";
+/**
+ * 构造 shell_start / shell_exec 审批未通过时的统一响应。
+ */
+export declare function buildDeniedApprovalResponse(params: {
+    /**
+     * shell session id。
+     */
+    shellId: string;
+    /**
+     * 归属的宿主 session id。
+     */
+    ownerContextId?: string;
+    /**
+     * 请求执行的命令。
+     */
+    cmd: string;
+    /**
+     * 请求执行目录。
+     */
+    cwd: string;
+    /**
+     * shell 程序路径。
+     */
+    shellPath: string;
+    /**
+     * approval id。
+     */
+    approvalId: string;
+    /**
+     * agent 给出的申请原因。
+     */
+    reason: string;
+    /**
+     * 审批结果状态。
+     */
+    approvalStatus: ShellApprovalStatus;
+}): ShellActionResponse;
+/**
+ * 构造 shell_write 审批未通过时的统一响应。
+ */
+export declare function buildDeniedWriteApprovalResponse(params: {
+    /**
+     * 当前 shell session。
+     */
+    session: ShellSessionRuntimeState;
+    /**
+     * approval id。
+     */
+    approvalId: string;
+    /**
+     * agent 给出的申请原因。
+     */
+    reason: string;
+    /**
+     * 审批结果状态。
+     */
+    approvalStatus: ShellApprovalStatus;
+}): ShellActionResponse;
+//# sourceMappingURL=ShellActionShared.d.ts.map

package/bin/session/actions/ShellActionShared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellActionShared.d.ts","sourceRoot":"","sources":["../../../src/session/actions/ShellActionShared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAMhC;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAIhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAE1E;AAQD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,cAAc,EAAE,mBAAmB,CAAC;CACrC,GAAG,mBAAmB,CA0CtB;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE;IACvD;;OAEG;IACH,OAAO,EAAE,wBAAwB,CAAC;IAClC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,cAAc,EAAE,mBAAmB,CAAC;CACrC,GAAG,mBAAmB,CAqBtB"}

package/bin/session/actions/ShellActionShared.js

@@ -0,0 +1,100 @@
+/**
+ * Shell action 共享辅助函数。
+ *
+ * 关键点（中文）
+ * - 这里只放多个 action 都需要的轻量逻辑。
+ * - 不承载具体 action 编排，避免重新形成巨型模块。
+ */
+import { buildActionResponse, nowMs, } from "../ShellActionRuntimeSupport.js";
+/**
+ * 解析默认 shell 路径。
+ */
+export function resolveDefaultShellPath() {
+    const envShell = String(process.env.SHELL || "").trim();
+    if (envShell)
+        return envShell;
+    return process.platform === "darwin" ? "/bin/zsh" : "/bin/sh";
+}
+/**
+ * 解析 shell action 请求的 sandbox 模式。
+ */
+export function resolveSandboxMode(value) {
+    return value === "unrestricted" ? "unrestricted" : "safe";
+}
+function approvalDeniedMessage(status) {
+    return status === "expired"
+        ? "Unrestricted sandbox approval expired."
+        : "User denied unrestricted sandbox execution.";
+}
+/**
+ * 构造 shell_start / shell_exec 审批未通过时的统一响应。
+ */
+export function buildDeniedApprovalResponse(params) {
+    const now = nowMs();
+    const message = approvalDeniedMessage(params.approvalStatus);
+    return buildActionResponse({
+        shell: {
+            shellId: params.shellId,
+            ...(params.ownerContextId ? { ownerContextId: params.ownerContextId } : {}),
+            cmd: params.cmd,
+            cwd: params.cwd,
+            shellPath: params.shellPath,
+            sandboxed: false,
+            sandboxMode: "unrestricted",
+            sandboxBackend: "unrestricted-host",
+            sandboxNetworkMode: "full",
+            approvalStatus: params.approvalStatus,
+            approvalId: params.approvalId,
+            approvalReason: params.reason,
+            stdinWritable: true,
+            status: params.approvalStatus === "expired" ? "expired" : "failed",
+            startedAt: now,
+            updatedAt: now,
+            endedAt: now,
+            exitCode: -1,
+            lastOutputPreview: message,
+            outputChars: message.length,
+            droppedChars: 0,
+            version: 1,
+            autoNotifyOnExit: false,
+            notificationSent: false,
+            externalRefs: [],
+        },
+        chunk: {
+            shellId: params.shellId,
+            output: message,
+            startCursor: 0,
+            endCursor: message.length,
+            originalChars: message.length,
+            originalLines: 1,
+            hasMoreOutput: false,
+        },
+        note: message,
+    });
+}
+/**
+ * 构造 shell_write 审批未通过时的统一响应。
+ */
+export function buildDeniedWriteApprovalResponse(params) {
+    const message = approvalDeniedMessage(params.approvalStatus);
+    return buildActionResponse({
+        shell: {
+            ...params.session.snapshot,
+            approvalStatus: params.approvalStatus,
+            approvalId: params.approvalId,
+            approvalReason: params.reason,
+            stdinWritable: true,
+        },
+        chunk: {
+            shellId: params.session.snapshot.shellId,
+            output: message,
+            startCursor: 0,
+            endCursor: message.length,
+            originalChars: message.length,
+            originalLines: 1,
+            hasMoreOutput: false,
+        },
+        note: message,
+    });
+}
+//# sourceMappingURL=ShellActionShared.js.map

package/bin/session/actions/ShellActionShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellActionShared.js","sourceRoot":"","sources":["../../../src/session/actions/ShellActionShared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EACL,mBAAmB,EACnB,KAAK,GACN,MAAM,iCAAiC,CAAC;AAEzC;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA2B;IACxD,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,6CAA6C,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAiC3C;IACC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CAAC;QACzB,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,cAAc;YAC3B,cAAc,EAAE,mBAAmB;YACnC,kBAAkB,EAAE,MAAM;YAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,cAAc,EAAE,MAAM,CAAC,MAAM;YAC7B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAClE,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,CAAC,CAAC;YACZ,iBAAiB,EAAE,OAAO;YAC1B,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,EAAE;SACjB;QACD,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,KAAK;SACrB;QACD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAiBhD;IACC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CAAC;QACzB,KAAK,EAAE;YACL,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,cAAc,EAAE,MAAM,CAAC,MAAM;YAC7B,aAAa,EAAE,IAAI;SACpB;QACD,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;YACxC,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,KAAK;SACrB;QACD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC"}

package/bin/session/actions/ShellApprovalActions.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Shell approval action。
+ *
+ * 关键点（中文）
+ * - 这里只暴露 pending approval 查询与用户决策入口。
+ * - 具体 approval event、timeout、audit 仍由 approval 模块负责。
+ */
+import type { ShellHostContext } from "../../types/ShellHostContext.js";
+import type { ShellRuntimeState } from "../../session/ShellRuntimeTypes.js";
+/**
+ * 列出 pending unrestricted sandbox 审批。
+ */
+export declare function listShellApprovals(state: ShellRuntimeState): {
+    approvalId: string;
+    shellId: string;
+    ownerContextId?: string;
+    toolName: import("../../index.js").ShellApprovalToolName;
+    cmd: string;
+    operation: "exec" | "start" | "write";
+    inputPreview?: string;
+    inputChars?: number;
+    cwd: string;
+    reason: string;
+    createdAt: number;
+}[];
+/**
+ * 批准 pending unrestricted sandbox 审批。
+ */
+export declare function approveShellApproval(state: ShellRuntimeState, context: ShellHostContext, approvalId: string): Promise<boolean>;
+/**
+ * 拒绝 pending unrestricted sandbox 审批。
+ */
+export declare function denyShellApproval(state: ShellRuntimeState, context: ShellHostContext, approvalId: string): Promise<boolean>;
+//# sourceMappingURL=ShellApprovalActions.d.ts.map

package/bin/session/actions/ShellApprovalActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellApprovalActions.d.ts","sourceRoot":"","sources":["../../../src/session/actions/ShellApprovalActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAMxE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB;;;;;;;;;;;;IAE1D;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/bin/session/actions/ShellApprovalActions.js

@@ -0,0 +1,37 @@
+/**
+ * Shell approval action。
+ *
+ * 关键点（中文）
+ * - 这里只暴露 pending approval 查询与用户决策入口。
+ * - 具体 approval event、timeout、audit 仍由 approval 模块负责。
+ */
+import { listPendingApprovals, resolveApproval, } from "../../approval/ShellApprovalRuntime.js";
+/**
+ * 列出 pending unrestricted sandbox 审批。
+ */
+export function listShellApprovals(state) {
+    return listPendingApprovals(state);
+}
+/**
+ * 批准 pending unrestricted sandbox 审批。
+ */
+export async function approveShellApproval(state, context, approvalId) {
+    return await resolveApproval({
+        state,
+        context,
+        approvalId,
+        decision: "approved",
+    });
+}
+/**
+ * 拒绝 pending unrestricted sandbox 审批。
+ */
+export async function denyShellApproval(state, context, approvalId) {
+    return await resolveApproval({
+        state,
+        context,
+        approvalId,
+        decision: "denied",
+    });
+}
+//# sourceMappingURL=ShellApprovalActions.js.map

package/bin/session/actions/ShellApprovalActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellApprovalActions.js","sourceRoot":"","sources":["../../../src/session/actions/ShellApprovalActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAEhD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAwB,EACxB,OAAyB,EACzB,UAAkB;IAElB,OAAO,MAAM,eAAe,CAAC;QAC3B,KAAK;QACL,OAAO;QACP,UAAU;QACV,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,OAAyB,EACzB,UAAkB;IAElB,OAAO,MAAM,eAAe,CAAC;QAC3B,KAAK;QACL,OAAO;QACP,UAAU;QACV,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;AACL,CAAC"}

package/bin/session/actions/ShellExecActions.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Shell exec action。
+ *
+ * 关键点（中文）
+ * - exec 是基于 start + wait + close 的 one-shot 编排。
+ * - 保留完整输出返回，适合短命令。
+ */
+import type { ShellHostContext } from "../../types/ShellHostContext.js";
+import type { ShellRuntimeState } from "../../session/ShellRuntimeTypes.js";
+import type { ShellActionResponse, ShellExecRequest } from "../../types/ShellAction.js";
+/**
+ * 以 one-shot 模式执行 shell command。
+ */
+export declare function execShellCommand(state: ShellRuntimeState, context: ShellHostContext, request: ShellExecRequest): Promise<ShellActionResponse>;
+//# sourceMappingURL=ShellExecActions.d.ts.map

package/bin/session/actions/ShellExecActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellExecActions.d.ts","sourceRoot":"","sources":["../../../src/session/actions/ShellExecActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAmBhC;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,mBAAmB,CAAC,CA6G9B"}

package/bin/session/actions/ShellExecActions.js

@@ -0,0 +1,117 @@
+/**
+ * Shell exec action。
+ *
+ * 关键点（中文）
+ * - exec 是基于 start + wait + close 的 one-shot 编排。
+ * - 保留完整输出返回，适合短命令。
+ */
+import { buildActionResponse, clampWaitMsWithOptions, createOutputChunk, isTerminalStatus, nowMs, resolveSession, } from "../ShellActionRuntimeSupport.js";
+import { closeShellSession } from "./ShellQueryActions.js";
+import { startShellSession } from "./ShellStartActions.js";
+async function sleep(ms) {
+    await new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        if (typeof timer.unref === "function")
+            timer.unref();
+    });
+}
+/**
+ * 以 one-shot 模式执行 shell command。
+ */
+export async function execShellCommand(state, context, request) {
+    const timeoutMs = clampWaitMsWithOptions(state.options, request.timeoutMs, state.options.defaultExecTimeoutMs);
+    const started = await startShellSession(state, context, {
+        cmd: request.cmd,
+        ...(request.cwd ? { cwd: request.cwd } : {}),
+        ...(request.shell ? { shell: request.shell } : {}),
+        login: request.login,
+        sandbox: request.sandbox,
+        reason: request.reason,
+        approvalToolName: "shell_exec",
+        inlineWaitMs: Math.min(state.options.defaultInlineWaitMs, timeoutMs),
+        maxOutputTokens: request.maxOutputTokens,
+        autoNotifyOnExit: false,
+    });
+    let current = started;
+    let fromCursor = current.chunk?.endCursor ?? 0;
+    const outputParts = [];
+    if (current.chunk?.output) {
+        outputParts.push(current.chunk.output);
+    }
+    const deadline = nowMs() + timeoutMs;
+    while (!isTerminalStatus(current.shell.status)) {
+        const remaining = deadline - nowMs();
+        if (remaining <= 0) {
+            await closeShellSession(state, context, {
+                shellId: current.shell.shellId,
+                force: true,
+            });
+            throw new Error(`shell.exec timed out after ${timeoutMs}ms. Use shell_start for long-running commands.`);
+        }
+        const inMemory = state.sessions.get(current.shell.shellId);
+        if (inMemory &&
+            (inMemory.snapshot.status === "running" ||
+                inMemory.snapshot.status === "starting")) {
+            await Promise.race([
+                inMemory.completionPromise,
+                sleep(Math.min(remaining, 250)),
+            ]);
+        }
+        else {
+            await sleep(Math.min(remaining, 250));
+        }
+        const refreshed = await resolveSession(state, context, {
+            shellId: current.shell.shellId,
+            includeCompleted: true,
+        });
+        if (!refreshed) {
+            throw new Error(`shell session disappeared unexpectedly: ${current.shell.shellId}`);
+        }
+        const chunk = createOutputChunk({
+            shellId: current.shell.shellId,
+            outputText: refreshed.outputText,
+            fromCursor,
+            context,
+            maxOutputTokens: request.maxOutputTokens,
+        });
+        current = buildActionResponse({
+            shell: refreshed.snapshot,
+            chunk,
+        });
+        if (chunk.output) {
+            outputParts.push(chunk.output);
+        }
+        if (typeof chunk.endCursor === "number") {
+            fromCursor = chunk.endCursor;
+        }
+    }
+    const finalSession = state.sessions.get(current.shell.shellId);
+    if (finalSession) {
+        await finalSession.completionPromise;
+        await finalSession.writeChain.catch(() => undefined);
+    }
+    await closeShellSession(state, context, {
+        shellId: current.shell.shellId,
+        force: false,
+    }).catch(() => undefined);
+    const completed = await resolveSession(state, context, {
+        shellId: current.shell.shellId,
+        includeCompleted: true,
+    });
+    const fullOutput = completed?.outputText ?? outputParts.join("");
+    const originalLines = fullOutput ? fullOutput.split("\n").length : 0;
+    return buildActionResponse({
+        shell: current.shell,
+        chunk: {
+            shellId: current.shell.shellId,
+            output: fullOutput,
+            startCursor: 0,
+            endCursor: fullOutput.length,
+            originalChars: fullOutput.length,
+            originalLines,
+            hasMoreOutput: false,
+        },
+        note: "shell exec completed in one-shot mode",
+    });
+}
+//# sourceMappingURL=ShellExecActions.js.map

package/bin/session/actions/ShellExecActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellExecActions.js","sourceRoot":"","sources":["../../../src/session/actions/ShellExecActions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,EACL,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,KAAK,UAAU,KAAK,CAAC,EAAU;IAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAwB,EACxB,OAAyB,EACzB,OAAyB;IAEzB,MAAM,SAAS,GAAG,sBAAsB,CACtC,KAAK,CAAC,OAAO,EACb,OAAO,CAAC,SAAS,EACjB,KAAK,CAAC,OAAO,CAAC,oBAAoB,CACnC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE;QACtD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EAAE,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,SAAS,CAAC;QACpE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IACrC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,EAAE,CAAC;QACrC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE;gBACtC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,gDAAgD,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,IACE,QAAQ;YACR,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;gBACrC,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,EAC1C,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,QAAQ,CAAC,iBAAiB;gBAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE;YACrD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU;YACV,OAAO;YACP,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,OAAO,GAAG,mBAAmB,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,QAAQ;YACzB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC,iBAAiB,CAAC;QACrC,MAAM,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE;QACtC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,KAAK,EAAE,KAAK;KACb,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE;QACrD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,SAAS,EAAE,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,mBAAmB,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE;YACL,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,UAAU,CAAC,MAAM;YAC5B,aAAa,EAAE,UAAU,CAAC,MAAM;YAChC,aAAa;YACb,aAAa,EAAE,KAAK;SACrB;QACD,IAAI,EAAE,uCAAuC;KAC9C,CAAC,CAAC;AACL,CAAC"}