@gencode/agents 0.0.9 → 0.0.10

package/dist/runner/turn-executor.js

@@ -1,294 +0,0 @@
-import { Agent } from "@mariozechner/pi-agent-core";
-import { PluginHookRegistry } from "../plugins/hooks.js";
-import { LlmRequestError } from "../llm/client.js";
-import { RunEventDispatcher } from "./event-dispatcher.js";
-import { SkillUsageTracker } from "./skill-usage.js";
-/**
- * Executes one agent prompt and converts low-level SDK events into runner
- * semantics: streamed text progress, tool progress, llm_input/llm_output
- * hooks, usage accounting, normalized errors, and transcript-ready turn
- * records. Callers should not subscribe to the Agent directly.
- */
-export async function executeAgentTurn(params) {
-    const { agent, message, sessionId, modelId, historyMessages, eventDispatcher, skillUsageTracker, hooks, hookCtx, abortSignal, } = params;
-    let pendingTextChunk = "";
-    let lastTextChunk = "";
-    let finalAssistantText = "";
-    let streamedAssistantText = "";
-    let inputTokens = 0;
-    let outputTokens = 0;
-    let runError;
-    let sdkError;
-    let llmStartAt = 0;
-    const turnRecords = [];
-    // Stream text in chunk order, but only flush at boundaries the caller can
-    // observe sensibly: tool starts and assistant completion.
-    const flushPendingTextChunk = async () => {
-        if (!pendingTextChunk) {
-            return;
-        }
-        lastTextChunk = pendingTextChunk;
-        await eventDispatcher.dispatchProgress(sessionId, { type: "text", text: pendingTextChunk });
-        pendingTextChunk = "";
-    };
-    const unsubscribe = agent.subscribe(async (event) => {
-        if (event.type === "message_update") {
-            const assistantEvent = event.assistantMessageEvent;
-            if (assistantEvent.type === "text_delta" && typeof assistantEvent.delta === "string") {
-                const assistantTextSnapshot = extractAssistantTextSnapshot("partial" in assistantEvent ? assistantEvent.partial : undefined) ?? extractAssistantTextSnapshot("message" in assistantEvent ? assistantEvent.message : undefined) ?? extractAssistantTextSnapshot("message" in event ? event.message : undefined);
-                const normalizedDelta = normalizeTextDelta(assistantEvent.delta, assistantTextSnapshot, streamedAssistantText);
-                pendingTextChunk += normalizedDelta;
-                streamedAssistantText = assistantTextSnapshot ?? (streamedAssistantText + normalizedDelta);
-            }
-            if (assistantEvent.type === "done") {
-                const msg = assistantEvent.message;
-                finalAssistantText = extractAssistantText(msg);
-                if (!pendingTextChunk) {
-                    const trailingText = normalizeTextDelta("", finalAssistantText, streamedAssistantText);
-                    if (trailingText) {
-                        pendingTextChunk += trailingText;
-                        streamedAssistantText = finalAssistantText;
-                    }
-                }
-                if (msg.usage) {
-                    inputTokens = msg.usage.input;
-                    outputTokens = msg.usage.output;
-                }
-                await flushPendingTextChunk();
-            }
-            return;
-        }
-        if (event.type === "message_end") {
-            const msg = event.message;
-            if (msg.usage) {
-                inputTokens = msg.usage.input;
-                outputTokens = msg.usage.output;
-            }
-            if (msg.role === "assistant" && Array.isArray(msg.content)) {
-                const assistantMessage = msg;
-                const assistantText = extractAssistantText(assistantMessage);
-                await hooks.dispatch("assistant_message_end", {
-                    sessionId,
-                    model: modelId,
-                    assistantText,
-                    assistantMessage,
-                    hasToolCalls: assistantMessage.content.some((block) => block.type === "toolCall"),
-                    durationMs: llmStartAt > 0 ? Math.max(0, Date.now() - llmStartAt) : undefined,
-                    usage: msg.usage
-                        ? { input: inputTokens, output: outputTokens, total: inputTokens + outputTokens }
-                        : undefined,
-                }, hookCtx);
-            }
-            return;
-        }
-        if (event.type === "turn_end") {
-            const msg = event.message;
-            if (msg.stopReason === "error" || msg.stopReason === "aborted") {
-                sdkError = msg.errorMessage ?? (msg.stopReason === "aborted" ? "aborted" : "Unknown LLM error");
-            }
-            const rawResults = (event.toolResults ?? []);
-            turnRecords.push({
-                message: msg,
-                toolResults: rawResults.map((r) => ({
-                    toolCallId: r.toolCallId,
-                    toolName: r.toolName,
-                    content: r.content
-                        .filter((c) => c.type === "text")
-                        .map((c) => c.text ?? "")
-                        .join(""),
-                    isError: r.isError,
-                })),
-            });
-            return;
-        }
-        if (event.type === "tool_execution_start") {
-            await flushPendingTextChunk();
-            skillUsageTracker.onToolExecutionStart({ toolName: event.toolName, args: event.args });
-            await eventDispatcher.dispatchProgress(sessionId, { type: "tool_start", toolCallId: event.toolCallId, name: event.toolName, input: event.args });
-            return;
-        }
-        if (event.type === "tool_execution_end") {
-            await skillUsageTracker.onToolExecutionEnd({ toolName: event.toolName, isError: event.isError });
-            const output = typeof event.result === "string" ? event.result : JSON.stringify(event.result);
-            await eventDispatcher.dispatchProgress(sessionId, { type: "tool_end", toolCallId: event.toolCallId, name: event.toolName, output, isError: event.isError });
-        }
-    });
-    try {
-        await hooks.dispatch("llm_input", {
-            sessionId,
-            model: modelId,
-            prompt: typeof message === "string" ? message : JSON.stringify(message),
-            historyMessages,
-        }, hookCtx);
-        if (abortSignal?.aborted) {
-            throw new Error("aborted");
-        }
-        llmStartAt = Date.now();
-        if (typeof message === "string") {
-            await agent.prompt(message);
-        }
-        else {
-            await agent.prompt(message);
-        }
-        if (!runError) {
-            const stateError = typeof agent.state.error === "string" ? agent.state.error : undefined;
-            const latentError = sdkError ?? stateError;
-            if (latentError) {
-                runError = formatRunError(latentError);
-                await eventDispatcher.dispatchProgress(sessionId, { type: "error", message: runError });
-            }
-        }
-    }
-    catch (err) {
-        runError = formatRunError(err);
-        await eventDispatcher.dispatchProgress(sessionId, { type: "error", message: runError });
-    }
-    finally {
-        unsubscribe();
-    }
-    const lastAssistant = turnRecords.length > 0 ? turnRecords[turnRecords.length - 1]?.message : undefined;
-    await hooks.dispatch("llm_output", {
-        sessionId,
-        model: modelId,
-        assistantTexts: finalAssistantText ? [finalAssistantText] : lastTextChunk ? [lastTextChunk] : [],
-        lastAssistant,
-        usage: { input: inputTokens, output: outputTokens, total: inputTokens + outputTokens },
-    }, hookCtx);
-    const finalTextFromTurnRecord = turnRecords.length > 0 ? extractAssistantText(turnRecords[turnRecords.length - 1].message) : "";
-    return {
-        text: finalTextFromTurnRecord || finalAssistantText || lastTextChunk,
-        inputTokens,
-        outputTokens,
-        error: runError,
-        turnRecords,
-    };
-}
-export async function persistTurnEntriesWithWriter(writeEntry, turn) {
-    // Prefer structured turn_end data when available so transcript persistence
-    // retains tool calls and tool results; fall back to plain assistant text.
-    if (turn.turnRecords.length > 0) {
-        for (const record of turn.turnRecords) {
-            const assistantEntry = assistantMessageToEntry(record.message);
-            if (assistantEntry) {
-                await writeEntry(assistantEntry);
-            }
-            for (const tr of record.toolResults) {
-                await writeEntry(capturedToolResultToEntry(tr));
-            }
-        }
-        return;
-    }
-    if (turn.text) {
-        await writeEntry({
-            role: "assistant",
-            content: turn.text,
-            timestamp: new Date().toISOString(),
-        });
-    }
-}
-function assistantMessageToEntry(msg) {
-    const text = msg.content
-        .filter((b) => b.type === "text")
-        .map((b) => b.text)
-        .join("");
-    const toolCalls = msg.content
-        .filter((b) => b.type === "toolCall")
-        .map((b) => ({ id: b.id, name: b.name, arguments: b.arguments }));
-    if (text.trim().length === 0 && toolCalls.length === 0) {
-        return null;
-    }
-    const entry = { role: "assistant", content: text, timestamp: new Date().toISOString() };
-    if (toolCalls.length > 0) {
-        entry.toolCalls = toolCalls;
-    }
-    return entry;
-}
-function capturedToolResultToEntry(tr) {
-    return {
-        role: "tool_result",
-        toolCallId: tr.toolCallId,
-        toolName: tr.toolName,
-        content: tr.content,
-        isError: tr.isError,
-        timestamp: new Date().toISOString(),
-    };
-}
-function extractAssistantText(message) {
-    return message.content
-        .filter((block) => block.type === "text")
-        .map((block) => block.text)
-        .join("");
-}
-function extractAssistantTextSnapshot(message) {
-    if (!message || typeof message !== "object") {
-        return null;
-    }
-    const candidate = message;
-    if (!Array.isArray(candidate.content)) {
-        return null;
-    }
-    return candidate.content
-        .filter((block) => typeof block === "object" && block !== null && "type" in block && block.type === "text" && "text" in block)
-        .map((block) => block.text)
-        .join("");
-}
-function normalizeTextDelta(rawDelta, snapshotText, streamedText) {
-    if (!snapshotText) {
-        return rawDelta;
-    }
-    if (!streamedText) {
-        return snapshotText;
-    }
-    if (snapshotText === streamedText) {
-        return "";
-    }
-    if (snapshotText.startsWith(streamedText)) {
-        return snapshotText.slice(streamedText.length);
-    }
-    return snapshotText;
-}
-/**
- * Normalizes heterogeneous SDK/provider errors into user-facing strings so the
- * rest of the runner can treat turn failures uniformly.
- */
-function formatRunError(error) {
-    const llmError = toLlmRequestErrorLike(error);
-    if (llmError) {
-        if (llmError.code === "http_error" && llmError.statusCode) {
-            return llmError.providerMessage
-                ? `LLM upstream returned HTTP ${llmError.statusCode}${llmError.statusText ? ` ${llmError.statusText}` : ""}: ${llmError.providerMessage}`
-                : `LLM upstream returned HTTP ${llmError.statusCode}${llmError.statusText ? ` ${llmError.statusText}` : ""}`;
-        }
-        if (llmError.code === "timeout") {
-            return "LLM request timed out";
-        }
-        if (llmError.code === "network_error") {
-            return llmError.message;
-        }
-        if (llmError.code === "aborted") {
-            return "LLM request was aborted";
-        }
-        return llmError.message;
-    }
-    return error instanceof Error ? error.message : String(error);
-}
-function toLlmRequestErrorLike(error) {
-    if (error instanceof LlmRequestError) {
-        return error;
-    }
-    if (!(error instanceof Error)) {
-        return null;
-    }
-    const candidate = error;
-    if (error.name !== "LlmRequestError" && !candidate.code) {
-        return null;
-    }
-    return {
-        message: error.message,
-        code: candidate.code,
-        statusCode: candidate.statusCode,
-        statusText: candidate.statusText,
-        providerMessage: candidate.providerMessage,
-    };
-}
-//# sourceMappingURL=turn-executor.js.map

package/dist/runner/turn-executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"turn-executor.js","sourceRoot":"","sources":["../../src/runner/turn-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAGpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAsBrD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAWtC;IACC,MAAM,EACJ,KAAK,EACL,OAAO,EACP,SAAS,EACT,OAAO,EACP,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,KAAK,EACL,OAAO,EACP,WAAW,GACZ,GAAG,MAAM,CAAC;IAEX,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,kBAAkB,GAAG,EAAE,CAAC;IAC5B,IAAI,qBAAqB,GAAG,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAA4B,CAAC;IACjC,IAAI,QAA4B,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,qBAAqB,GAAG,KAAK,IAAmB,EAAE;QACtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,aAAa,GAAG,gBAAgB,CAAC;QACjC,MAAM,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5F,gBAAgB,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,MAAM,cAAc,GAAG,KAAK,CAAC,qBAAqB,CAAC;YACnD,IAAI,cAAc,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrF,MAAM,qBAAqB,GAAG,4BAA4B,CACxD,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACjE,IAAI,4BAA4B,CAC/B,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACjE,IAAI,4BAA4B,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAClF,MAAM,eAAe,GAAG,kBAAkB,CAAC,cAAc,CAAC,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;gBAC/G,gBAAgB,IAAI,eAAe,CAAC;gBACpC,qBAAqB,GAAG,qBAAqB,IAAI,CAAC,qBAAqB,GAAG,eAAe,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,cAAc,CAAC,OAA2B,CAAC;gBACvD,kBAAkB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;oBACvF,IAAI,YAAY,EAAE,CAAC;wBACjB,gBAAgB,IAAI,YAAY,CAAC;wBACjC,qBAAqB,GAAG,kBAAkB,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBACd,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;oBAC9B,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBAClC,CAAC;gBACD,MAAM,qBAAqB,EAAE,CAAC;YAChC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAoC,CAAC;YACvD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC9B,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAClC,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,MAAM,gBAAgB,GAAG,GAAuB,CAAC;gBACjD,MAAM,aAAa,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;gBAC7D,MAAM,KAAK,CAAC,QAAQ,CAClB,uBAAuB,EACvB;oBACE,SAAS;oBACT,KAAK,EAAE,OAAO;oBACd,aAAa;oBACb,gBAAgB;oBAChB,YAAY,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;oBACjF,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC7E,KAAK,EAAE,GAAG,CAAC,KAAK;wBACd,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,YAAY,EAAE;wBACjF,CAAC,CAAC,SAAS;iBACd,EACD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAA2B,CAAC;YAC9C,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC/D,QAAQ,GAAG,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAKzC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,GAAG;gBACZ,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;yBACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;yBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;yBACxB,IAAI,CAAC,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC1C,MAAM,qBAAqB,EAAE,CAAC;YAC9B,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACvF,MAAM,eAAe,CAAC,gBAAgB,CACpC,SAAS,EACT,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAC9F,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACxC,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjG,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9F,MAAM,eAAe,CAAC,gBAAgB,CACpC,SAAS,EACT,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,CAClB,WAAW,EACX;YACE,SAAS;YACT,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvE,eAAe;SAChB,EACD,OAAO,CACR,CAAC;QACF,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,WAAW,GAAG,QAAQ,IAAI,UAAU,CAAC;YAC3C,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;gBACvC,MAAM,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACxG,MAAM,KAAK,CAAC,QAAQ,CAClB,YAAY,EACZ;QACE,SAAS;QACT,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;QAChG,aAAa;QACb,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,GAAG,YAAY,EAAE;KACvF,EACD,OAAO,CACR,CAAC;IAEF,MAAM,uBAAuB,GAC3B,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnG,OAAO;QACL,IAAI,EAAE,uBAAuB,IAAI,kBAAkB,IAAI,aAAa;QACpE,WAAW;QACX,YAAY;QACZ,KAAK,EAAE,QAAQ;QACf,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkI,EAClI,IAAyB;IAEzB,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAqB;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO;SAC1B,MAAM,CACL,CAAC,CAAC,EAA2F,EAAE,CAC7F,CAAC,CAAC,IAAI,KAAK,UAAU,CACxB;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAEpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,EAAsB;IACvD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAyB;IACrD,OAAO,OAAO,CAAC,OAAO;SACnB,MAAM,CAAC,CAAC,KAAK,EAA2C,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;SACjF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAgB;IACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAgC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC,OAAO;SACrB,MAAM,CAAC,CAAC,KAAK,EAA2C,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC;SAC5G,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,YAA2B,EAAE,YAAoB;IAC7F,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC1D,OAAO,QAAQ,CAAC,eAAe;gBAC7B,CAAC,CAAC,8BAA8B,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,EAAE;gBACzI,CAAC,CAAC,8BAA8B,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,uBAAuB,CAAC;QACjC,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACtC,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAO3C,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAKjB,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,eAAe,EAAE,SAAS,CAAC,eAAe;KAC3C,CAAC;AACJ,CAAC"}

package/dist/security/command-dangerous-rules.d.ts

@@ -1,4 +0,0 @@
-import type { CommandDangerousRulesPolicy, ParsedCommandSegment } from "./command-policy-types.js";
-export declare function matchDangerousExecutable(segment: ParsedCommandSegment, policy: CommandDangerousRulesPolicy): string | null;
-export declare function matchDangerousShellPattern(command: string, policy: CommandDangerousRulesPolicy): string | null;
-//# sourceMappingURL=command-dangerous-rules.d.ts.map

package/dist/security/command-dangerous-rules.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-dangerous-rules.d.ts","sourceRoot":"","sources":["../../src/security/command-dangerous-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAUnG,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,2BAA2B,GAClC,MAAM,GAAG,IAAI,CAMf;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,2BAA2B,GAClC,MAAM,GAAG,IAAI,CAUf"}

package/dist/security/command-dangerous-rules.js

@@ -1,26 +0,0 @@
-function normalizeExecutable(executable) {
-    if (!executable) {
-        return "";
-    }
-    const parts = executable.split(/[\\/]/);
-    return (parts[parts.length - 1] ?? executable).toLowerCase();
-}
-export function matchDangerousExecutable(segment, policy) {
-    const executable = normalizeExecutable(segment.executable);
-    if (!executable) {
-        return null;
-    }
-    return policy.denyExecutables.find((entry) => entry.toLowerCase() === executable) ?? null;
-}
-export function matchDangerousShellPattern(command, policy) {
-    const normalized = command.replace(/\s+/g, " ").toLowerCase();
-    for (const pattern of policy.denyShellPatterns) {
-        const compact = pattern.replace(/\s+/g, "").toLowerCase();
-        const folded = normalized.replace(/\s+/g, "");
-        if (folded.includes(compact)) {
-            return pattern;
-        }
-    }
-    return null;
-}
-//# sourceMappingURL=command-dangerous-rules.js.map

package/dist/security/command-dangerous-rules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-dangerous-rules.js","sourceRoot":"","sources":["../../src/security/command-dangerous-rules.ts"],"names":[],"mappings":"AAEA,SAAS,mBAAmB,CAAC,UAAyB;IACpD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA6B,EAC7B,MAAmC;IAEnC,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,MAAmC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/security/command-parser.d.ts

@@ -1,3 +0,0 @@
-import type { ParsedCommand } from "./command-policy-types.js";
-export declare function parseCommand(command: string): ParsedCommand | null;
-//# sourceMappingURL=command-parser.d.ts.map

package/dist/security/command-parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-parser.d.ts","sourceRoot":"","sources":["../../src/security/command-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAqMrF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAiBlE"}

package/dist/security/command-parser.js

@@ -1,191 +0,0 @@
-function hasUnsupportedShellSyntax(command) {
-    return (command.includes("$(") ||
-        command.includes("`") ||
-        command.includes("<<") ||
-        command.includes("<(") ||
-        command.includes(">("));
-}
-function splitTopLevel(command) {
-    const segments = [];
-    let current = "";
-    let quote = null;
-    let escaped = false;
-    for (let index = 0; index < command.length; index += 1) {
-        const char = command[index];
-        const next = command[index + 1];
-        if (escaped) {
-            current += char;
-            escaped = false;
-            continue;
-        }
-        if (char === "\\") {
-            current += char;
-            escaped = true;
-            continue;
-        }
-        if (quote) {
-            current += char;
-            if (char === quote) {
-                quote = null;
-            }
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quote = char;
-            current += char;
-            continue;
-        }
-        if (char === "|" && next === "|") {
-            segments.push(current.trim());
-            current = "";
-            index += 1;
-            continue;
-        }
-        if (char === "&" && next === "&") {
-            segments.push(current.trim());
-            current = "";
-            index += 1;
-            continue;
-        }
-        if (char === ";" || char === "|") {
-            segments.push(current.trim());
-            current = "";
-            continue;
-        }
-        current += char;
-    }
-    if (quote || escaped) {
-        return null;
-    }
-    if (current.trim().length > 0) {
-        segments.push(current.trim());
-    }
-    return segments.filter((segment) => segment.length > 0);
-}
-function tokenize(segment) {
-    const tokens = [];
-    let current = "";
-    let quote = null;
-    let escaped = false;
-    for (let index = 0; index < segment.length; index += 1) {
-        const char = segment[index];
-        if (escaped) {
-            current += char;
-            escaped = false;
-            continue;
-        }
-        if (char === "\\") {
-            escaped = true;
-            continue;
-        }
-        if (quote) {
-            if (char === quote) {
-                quote = null;
-            }
-            else {
-                current += char;
-            }
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quote = char;
-            continue;
-        }
-        if (/\s/.test(char)) {
-            if (current.length > 0) {
-                tokens.push(current);
-                current = "";
-            }
-            continue;
-        }
-        if (char === ">" || char === "<") {
-            if (current.length > 0) {
-                tokens.push(current);
-                current = "";
-            }
-            const next = segment[index + 1];
-            if ((char === ">" || char === "<") && next === char) {
-                tokens.push(char + next);
-                index += 1;
-            }
-            else {
-                tokens.push(char);
-            }
-            continue;
-        }
-        if (char === "2" && segment[index + 1] === ">") {
-            if (current.length > 0) {
-                tokens.push(current);
-                current = "";
-            }
-            tokens.push("2>");
-            index += 1;
-            continue;
-        }
-        current += char;
-    }
-    if (quote || escaped) {
-        return null;
-    }
-    if (current.length > 0) {
-        tokens.push(current);
-    }
-    return tokens;
-}
-function unwrapEnv(tokens) {
-    if (tokens[0] !== "env") {
-        return tokens;
-    }
-    let index = 1;
-    while (index < tokens.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[index])) {
-        index += 1;
-    }
-    return tokens.slice(index);
-}
-function buildSegment(raw) {
-    const tokens = tokenize(raw);
-    if (!tokens || tokens.length === 0) {
-        return null;
-    }
-    const redirections = [];
-    const argv = [];
-    for (let index = 0; index < tokens.length; index += 1) {
-        const token = tokens[index];
-        if (token === ">" || token === ">>" || token === "<" || token === "2>") {
-            const target = tokens[index + 1];
-            if (!target) {
-                return null;
-            }
-            redirections.push({ operator: token, target });
-            index += 1;
-            continue;
-        }
-        argv.push(token);
-    }
-    const unwrapped = unwrapEnv(argv);
-    return {
-        raw,
-        argv,
-        executable: unwrapped[0] ?? null,
-        redirections,
-    };
-}
-export function parseCommand(command) {
-    if (!command.trim() || hasUnsupportedShellSyntax(command)) {
-        return null;
-    }
-    const rawSegments = splitTopLevel(command);
-    if (!rawSegments || rawSegments.length === 0) {
-        return null;
-    }
-    const segments = [];
-    for (const raw of rawSegments) {
-        const segment = buildSegment(raw);
-        if (!segment) {
-            return null;
-        }
-        segments.push(segment);
-    }
-    return { segments };
-}
-//# sourceMappingURL=command-parser.js.map

package/dist/security/command-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-parser.js","sourceRoot":"","sources":["../../src/security/command-parser.ts"],"names":[],"mappings":"AAEA,SAAS,yBAAyB,CAAC,OAAe;IAChD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAEhC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,IAAI,CAAC;YAChB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAE7B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,IAAI,CAAC;YAClB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBACzB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAgB;IACjC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,EAAE,CAAC;QAChF,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAgD,EAAE,CAAC;IACrE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC;YACd,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,GAAG;QACH,IAAI;QACJ,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI;QAChC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/security/command-path-guard.d.ts

@@ -1,10 +0,0 @@
-import type { CommandPathPolicy, ParsedCommandSegment } from "./command-policy-types.js";
-import type { CommandAllowlistPolicy } from "./command-policy-types.js";
-export declare function validateCommandPaths(params: {
-    cwd: string;
-    allowedRoot: string;
-    pathPolicy: CommandPathPolicy;
-    segment: ParsedCommandSegment;
-    allowlist: CommandAllowlistPolicy;
-}): string | null;
-//# sourceMappingURL=command-path-guard.d.ts.map

package/dist/security/command-path-guard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-path-guard.d.ts","sourceRoot":"","sources":["../../src/security/command-path-guard.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEzF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAiGxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,sBAAsB,CAAC;CACnC,GAAG,MAAM,GAAG,IAAI,CA0ChB"}