@google/gemini-cli-core 0.36.0-preview.8 → 0.37.0-preview.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/CONTRIBUTING.md +10 -7
- package/dist/docs/assets/theme-tokyonight-dark.png +0 -0
- package/dist/docs/changelogs/index.md +24 -0
- package/dist/docs/changelogs/latest.md +366 -459
- package/dist/docs/changelogs/preview.md +362 -356
- package/dist/docs/cli/acp-mode.md +126 -0
- package/dist/docs/cli/cli-reference.md +1 -1
- package/dist/docs/cli/notifications.md +5 -5
- package/dist/docs/cli/plan-mode.md +12 -8
- package/dist/docs/cli/sandbox.md +1 -1
- package/dist/docs/cli/settings.md +14 -13
- package/dist/docs/cli/themes.md +5 -0
- package/dist/docs/core/index.md +2 -2
- package/dist/docs/core/subagents.md +134 -23
- package/dist/docs/get-started/gemini-3.md +1 -1
- package/dist/docs/get-started/index.md +127 -1
- package/dist/docs/ide-integration/index.md +99 -24
- package/dist/docs/index.md +0 -2
- package/dist/docs/redirects.json +1 -0
- package/dist/docs/reference/commands.md +1 -3
- package/dist/docs/reference/configuration.md +182 -91
- package/dist/docs/reference/keyboard-shortcuts.md +14 -6
- package/dist/docs/reference/policy-engine.md +16 -30
- package/dist/docs/reference/tools.md +56 -23
- package/dist/docs/resources/quota-and-pricing.md +23 -9
- package/dist/docs/sidebar.json +11 -4
- package/dist/docs/tools/planning.md +6 -4
- package/dist/src/agents/agentLoader.d.ts +12 -12
- package/dist/src/agents/agentLoader.js +1 -0
- package/dist/src/agents/agentLoader.js.map +1 -1
- package/dist/src/agents/browser/automationOverlay.js +2 -10
- package/dist/src/agents/browser/automationOverlay.js.map +1 -1
- package/dist/src/agents/browser/browserAgentDefinition.js +10 -3
- package/dist/src/agents/browser/browserAgentDefinition.js.map +1 -1
- package/dist/src/agents/browser/browserAgentFactory.d.ts +4 -4
- package/dist/src/agents/browser/browserAgentFactory.js +15 -29
- package/dist/src/agents/browser/browserAgentFactory.js.map +1 -1
- package/dist/src/agents/browser/browserAgentFactory.test.js +41 -24
- package/dist/src/agents/browser/browserAgentFactory.test.js.map +1 -1
- package/dist/src/agents/browser/browserAgentInvocation.d.ts +1 -0
- package/dist/src/agents/browser/browserAgentInvocation.js +60 -27
- package/dist/src/agents/browser/browserAgentInvocation.js.map +1 -1
- package/dist/src/agents/browser/browserAgentInvocation.test.js +59 -5
- package/dist/src/agents/browser/browserAgentInvocation.test.js.map +1 -1
- package/dist/src/agents/browser/browserManager.d.ts +51 -8
- package/dist/src/agents/browser/browserManager.js +242 -70
- package/dist/src/agents/browser/browserManager.js.map +1 -1
- package/dist/src/agents/browser/browserManager.test.js +384 -17
- package/dist/src/agents/browser/browserManager.test.js.map +1 -1
- package/dist/src/agents/browser/inputBlocker.d.ts +4 -4
- package/dist/src/agents/browser/inputBlocker.js +8 -18
- package/dist/src/agents/browser/inputBlocker.js.map +1 -1
- package/dist/src/agents/browser/inputBlocker.test.js +31 -3
- package/dist/src/agents/browser/inputBlocker.test.js.map +1 -1
- package/dist/src/agents/browser/mcpToolWrapper.d.ts +1 -1
- package/dist/src/agents/browser/mcpToolWrapper.js +9 -6
- package/dist/src/agents/browser/mcpToolWrapper.js.map +1 -1
- package/dist/src/agents/browser/mcpToolWrapper.test.js +2 -2
- package/dist/src/agents/browser/mcpToolWrapper.test.js.map +1 -1
- package/dist/src/agents/browser/snapshotSuperseder.d.ts +31 -0
- package/dist/src/agents/browser/snapshotSuperseder.js +101 -0
- package/dist/src/agents/browser/snapshotSuperseder.js.map +1 -0
- package/dist/src/agents/browser/snapshotSuperseder.test.js +158 -0
- package/dist/src/agents/browser/snapshotSuperseder.test.js.map +1 -0
- package/dist/src/agents/local-executor.d.ts +4 -0
- package/dist/src/agents/local-executor.js +46 -19
- package/dist/src/agents/local-executor.js.map +1 -1
- package/dist/src/agents/local-executor.test.js +118 -18
- package/dist/src/agents/local-executor.test.js.map +1 -1
- package/dist/src/agents/local-invocation.d.ts +1 -0
- package/dist/src/agents/local-invocation.js +19 -9
- package/dist/src/agents/local-invocation.js.map +1 -1
- package/dist/src/agents/local-invocation.test.js +24 -0
- package/dist/src/agents/local-invocation.test.js.map +1 -1
- package/dist/src/agents/registry.js +16 -1
- package/dist/src/agents/registry.js.map +1 -1
- package/dist/src/agents/registry.test.js +67 -0
- package/dist/src/agents/registry.test.js.map +1 -1
- package/dist/src/agents/types.d.ts +9 -0
- package/dist/src/agents/types.js.map +1 -1
- package/dist/src/code_assist/oauth2.js +8 -3
- package/dist/src/code_assist/oauth2.js.map +1 -1
- package/dist/src/code_assist/oauth2.test.js +57 -0
- package/dist/src/code_assist/oauth2.test.js.map +1 -1
- package/dist/src/code_assist/setup.js +5 -2
- package/dist/src/code_assist/setup.js.map +1 -1
- package/dist/src/code_assist/setup.test.js +27 -1
- package/dist/src/code_assist/setup.test.js.map +1 -1
- package/dist/src/code_assist/types.d.ts +80 -80
- package/dist/src/config/agent-loop-context.d.ts +2 -0
- package/dist/src/config/config.d.ts +81 -16
- package/dist/src/config/config.js +146 -50
- package/dist/src/config/config.js.map +1 -1
- package/dist/src/config/config.test.js +89 -2
- package/dist/src/config/config.test.js.map +1 -1
- package/dist/src/config/defaultModelConfigs.js +9 -0
- package/dist/src/config/defaultModelConfigs.js.map +1 -1
- package/dist/src/config/memory.d.ts +1 -0
- package/dist/src/config/memory.js +6 -0
- package/dist/src/config/memory.js.map +1 -1
- package/dist/src/config/storage.d.ts +1 -0
- package/dist/src/config/storage.js +4 -0
- package/dist/src/config/storage.js.map +1 -1
- package/dist/src/config/storage.test.js +5 -0
- package/dist/src/config/storage.test.js.map +1 -1
- package/dist/src/config/topicState.d.ts +21 -0
- package/dist/src/config/topicState.js +41 -0
- package/dist/src/config/topicState.js.map +1 -0
- package/dist/src/confirmation-bus/types.d.ts +9 -2
- package/dist/src/confirmation-bus/types.js +1 -0
- package/dist/src/confirmation-bus/types.js.map +1 -1
- package/dist/src/context/agentHistoryProvider.d.ts +45 -0
- package/dist/src/context/agentHistoryProvider.js +298 -0
- package/dist/src/context/agentHistoryProvider.js.map +1 -0
- package/dist/src/context/agentHistoryProvider.test.d.ts +6 -0
- package/dist/src/context/agentHistoryProvider.test.js +394 -0
- package/dist/src/context/agentHistoryProvider.test.js.map +1 -0
- package/dist/src/context/chatCompressionService.js.map +1 -0
- package/dist/src/context/chatCompressionService.test.js.map +1 -0
- package/dist/src/{services → context}/contextManager.d.ts +2 -0
- package/dist/src/{services → context}/contextManager.js +18 -9
- package/dist/src/context/contextManager.js.map +1 -0
- package/dist/src/{services → context}/contextManager.test.js +21 -6
- package/dist/src/context/contextManager.test.js.map +1 -0
- package/dist/src/context/toolDistillationService.d.ts +38 -0
- package/dist/src/context/toolDistillationService.js +170 -0
- package/dist/src/context/toolDistillationService.js.map +1 -0
- package/dist/src/context/toolDistillationService.test.d.ts +6 -0
- package/dist/src/context/toolDistillationService.test.js +83 -0
- package/dist/src/context/toolDistillationService.test.js.map +1 -0
- package/dist/src/{services → context}/toolOutputMaskingService.d.ts +2 -2
- package/dist/src/{services → context}/toolOutputMaskingService.js +7 -7
- package/dist/src/context/toolOutputMaskingService.js.map +1 -0
- package/dist/src/context/toolOutputMaskingService.test.d.ts +6 -0
- package/dist/src/{services → context}/toolOutputMaskingService.test.js +4 -5
- package/dist/src/context/toolOutputMaskingService.test.js.map +1 -0
- package/dist/src/context/truncation.d.ts +26 -0
- package/dist/src/context/truncation.js +102 -0
- package/dist/src/context/truncation.js.map +1 -0
- package/dist/src/core/client.d.ts +3 -1
- package/dist/src/core/client.js +23 -13
- package/dist/src/core/client.js.map +1 -1
- package/dist/src/core/client.test.js +29 -34
- package/dist/src/core/client.test.js.map +1 -1
- package/dist/src/core/contentGenerator.d.ts +0 -1
- package/dist/src/core/contentGenerator.js +2 -28
- package/dist/src/core/contentGenerator.js.map +1 -1
- package/dist/src/core/contentGenerator.test.js +1 -101
- package/dist/src/core/contentGenerator.test.js.map +1 -1
- package/dist/src/core/geminiChat.js +4 -5
- package/dist/src/core/geminiChat.js.map +1 -1
- package/dist/src/core/geminiChat.test.js +71 -18
- package/dist/src/core/geminiChat.test.js.map +1 -1
- package/dist/src/core/prompts-substitution.test.js +5 -0
- package/dist/src/core/prompts-substitution.test.js.map +1 -1
- package/dist/src/core/prompts.test.js +3 -0
- package/dist/src/core/prompts.test.js.map +1 -1
- package/dist/src/generated/git-commit.d.ts +2 -2
- package/dist/src/generated/git-commit.js +2 -2
- package/dist/src/index.d.ts +7 -3
- package/dist/src/index.js +9 -5
- package/dist/src/index.js.map +1 -1
- package/dist/src/policy/config.d.ts +1 -1
- package/dist/src/policy/config.js +5 -2
- package/dist/src/policy/config.js.map +1 -1
- package/dist/src/policy/policies/discovered.toml +7 -0
- package/dist/src/policy/policies/non-interactive.toml +7 -0
- package/dist/src/policy/policies/plan.toml +25 -0
- package/dist/src/policy/policies/read-only.toml +6 -0
- package/dist/src/policy/policies/sandbox-default.toml +3 -2
- package/dist/src/policy/policies/write.toml +21 -0
- package/dist/src/policy/policies/yolo.toml +1 -1
- package/dist/src/policy/policy-engine.d.ts +2 -4
- package/dist/src/policy/policy-engine.js +24 -37
- package/dist/src/policy/policy-engine.js.map +1 -1
- package/dist/src/policy/policy-engine.test.js +107 -29
- package/dist/src/policy/policy-engine.test.js.map +1 -1
- package/dist/src/policy/topic-policy.test.d.ts +6 -0
- package/dist/src/policy/topic-policy.test.js +48 -0
- package/dist/src/policy/topic-policy.test.js.map +1 -0
- package/dist/src/policy/types.d.ts +3 -6
- package/dist/src/policy/types.js.map +1 -1
- package/dist/src/prompts/promptProvider.js +20 -4
- package/dist/src/prompts/promptProvider.js.map +1 -1
- package/dist/src/prompts/promptProvider.test.js +84 -1
- package/dist/src/prompts/promptProvider.test.js.map +1 -1
- package/dist/src/prompts/snippets-memory-manager.test.js +1 -1
- package/dist/src/prompts/snippets-memory-manager.test.js.map +1 -1
- package/dist/src/prompts/snippets.d.ts +3 -4
- package/dist/src/prompts/snippets.js +33 -51
- package/dist/src/prompts/snippets.js.map +1 -1
- package/dist/src/prompts/snippets.legacy.d.ts +6 -4
- package/dist/src/prompts/snippets.legacy.js +32 -7
- package/dist/src/prompts/snippets.legacy.js.map +1 -1
- package/dist/src/sandbox/linux/LinuxSandboxManager.d.ts +11 -1
- package/dist/src/sandbox/linux/LinuxSandboxManager.js +261 -27
- package/dist/src/sandbox/linux/LinuxSandboxManager.js.map +1 -1
- package/dist/src/sandbox/linux/LinuxSandboxManager.test.js +430 -125
- package/dist/src/sandbox/linux/LinuxSandboxManager.test.js.map +1 -1
- package/dist/src/sandbox/macos/MacOsSandboxManager.d.ts +7 -22
- package/dist/src/sandbox/macos/MacOsSandboxManager.js +58 -57
- package/dist/src/sandbox/macos/MacOsSandboxManager.js.map +1 -1
- package/dist/src/sandbox/macos/MacOsSandboxManager.test.js +148 -103
- package/dist/src/sandbox/macos/MacOsSandboxManager.test.js.map +1 -1
- package/dist/src/sandbox/macos/baseProfile.d.ts +1 -1
- package/dist/src/sandbox/macos/baseProfile.js +0 -6
- package/dist/src/sandbox/macos/baseProfile.js.map +1 -1
- package/dist/src/sandbox/macos/seatbeltArgsBuilder.d.ts +10 -10
- package/dist/src/sandbox/macos/seatbeltArgsBuilder.js +80 -92
- package/dist/src/sandbox/macos/seatbeltArgsBuilder.js.map +1 -1
- package/dist/src/sandbox/macos/seatbeltArgsBuilder.test.js +135 -99
- package/dist/src/sandbox/macos/seatbeltArgsBuilder.test.js.map +1 -1
- package/dist/src/sandbox/{macos → utils}/commandSafety.d.ts +11 -0
- package/dist/src/sandbox/{macos → utils}/commandSafety.js +47 -14
- package/dist/src/sandbox/utils/commandSafety.js.map +1 -0
- package/dist/src/sandbox/utils/commandUtils.d.ts +9 -0
- package/dist/src/sandbox/utils/commandUtils.js +57 -0
- package/dist/src/sandbox/utils/commandUtils.js.map +1 -0
- package/dist/src/sandbox/utils/fsUtils.d.ts +11 -0
- package/dist/src/sandbox/utils/fsUtils.js +82 -0
- package/dist/src/sandbox/utils/fsUtils.js.map +1 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.d.ts +12 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.js +68 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.js.map +1 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.test.d.ts +6 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.test.js +37 -0
- package/dist/src/sandbox/utils/sandboxDenialUtils.test.js.map +1 -0
- package/dist/src/sandbox/utils/sandboxReadWriteUtils.d.ts +5 -0
- package/dist/src/sandbox/utils/sandboxReadWriteUtils.js +60 -0
- package/dist/src/sandbox/utils/sandboxReadWriteUtils.js.map +1 -0
- package/dist/src/sandbox/windows/GeminiSandbox.cs +257 -216
- package/dist/src/sandbox/windows/WindowsSandboxManager.d.ts +12 -2
- package/dist/src/sandbox/windows/WindowsSandboxManager.js +250 -38
- package/dist/src/sandbox/windows/WindowsSandboxManager.js.map +1 -1
- package/dist/src/sandbox/windows/WindowsSandboxManager.test.js +326 -9
- package/dist/src/sandbox/windows/WindowsSandboxManager.test.js.map +1 -1
- package/dist/src/sandbox/windows/commandSafety.d.ts +19 -0
- package/dist/src/sandbox/windows/commandSafety.js +128 -0
- package/dist/src/sandbox/windows/commandSafety.js.map +1 -0
- package/dist/src/sandbox/windows/commandSafety.test.d.ts +6 -0
- package/dist/src/sandbox/windows/commandSafety.test.js +42 -0
- package/dist/src/sandbox/windows/commandSafety.test.js.map +1 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.d.ts +12 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.js +68 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.js.map +1 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.d.ts +6 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.js +68 -0
- package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.js.map +1 -0
- package/dist/src/scheduler/scheduler.js +12 -2
- package/dist/src/scheduler/scheduler.js.map +1 -1
- package/dist/src/scheduler/scheduler.test.js +52 -0
- package/dist/src/scheduler/scheduler.test.js.map +1 -1
- package/dist/src/scheduler/scheduler_hooks.test.js +1 -0
- package/dist/src/scheduler/scheduler_hooks.test.js.map +1 -1
- package/dist/src/scheduler/state-manager.js +1 -1
- package/dist/src/scheduler/state-manager.js.map +1 -1
- package/dist/src/scheduler/state-manager.test.js +10 -0
- package/dist/src/scheduler/state-manager.test.js.map +1 -1
- package/dist/src/scheduler/tool-executor.js +7 -2
- package/dist/src/scheduler/tool-executor.js.map +1 -1
- package/dist/src/scheduler/tool-executor.test.js +38 -0
- package/dist/src/scheduler/tool-executor.test.js.map +1 -1
- package/dist/src/scheduler/types.d.ts +4 -2
- package/dist/src/services/chatRecordingService.d.ts +1 -13
- package/dist/src/services/chatRecordingService.js +45 -46
- package/dist/src/services/chatRecordingService.js.map +1 -1
- package/dist/src/services/chatRecordingService.test.js +79 -10
- package/dist/src/services/chatRecordingService.test.js.map +1 -1
- package/dist/src/services/executionLifecycleService.d.ts +43 -6
- package/dist/src/services/executionLifecycleService.js +49 -12
- package/dist/src/services/executionLifecycleService.js.map +1 -1
- package/dist/src/services/executionLifecycleService.test.js +157 -3
- package/dist/src/services/executionLifecycleService.test.js.map +1 -1
- package/dist/src/services/fileDiscoveryService.d.ts +17 -2
- package/dist/src/services/fileDiscoveryService.js +84 -20
- package/dist/src/services/fileDiscoveryService.js.map +1 -1
- package/dist/src/services/fileDiscoveryService.test.js +67 -1
- package/dist/src/services/fileDiscoveryService.test.js.map +1 -1
- package/dist/src/services/modelConfigService.d.ts +11 -0
- package/dist/src/services/modelConfigService.js +67 -0
- package/dist/src/services/modelConfigService.js.map +1 -1
- package/dist/src/services/modelConfigService.test.js +30 -0
- package/dist/src/services/modelConfigService.test.js.map +1 -1
- package/dist/src/services/sandboxManager.d.ts +90 -8
- package/dist/src/services/sandboxManager.integration.test.js +438 -0
- package/dist/src/services/sandboxManager.integration.test.js.map +1 -0
- package/dist/src/services/sandboxManager.js +156 -13
- package/dist/src/services/sandboxManager.js.map +1 -1
- package/dist/src/services/sandboxManager.test.js +373 -117
- package/dist/src/services/sandboxManager.test.js.map +1 -1
- package/dist/src/services/sandboxManagerFactory.d.ts +2 -3
- package/dist/src/services/sandboxManagerFactory.js +10 -17
- package/dist/src/services/sandboxManagerFactory.js.map +1 -1
- package/dist/src/services/sandboxedFileSystemService.d.ts +1 -0
- package/dist/src/services/sandboxedFileSystemService.js +32 -3
- package/dist/src/services/sandboxedFileSystemService.js.map +1 -1
- package/dist/src/services/sandboxedFileSystemService.test.js +83 -12
- package/dist/src/services/sandboxedFileSystemService.test.js.map +1 -1
- package/dist/src/services/shellExecutionService.d.ts +2 -0
- package/dist/src/services/shellExecutionService.js +45 -16
- package/dist/src/services/shellExecutionService.js.map +1 -1
- package/dist/src/services/shellExecutionService.test.js +5 -4
- package/dist/src/services/shellExecutionService.test.js.map +1 -1
- package/dist/src/services/test-data/resolved-aliases-retry.golden.json +4 -0
- package/dist/src/services/test-data/resolved-aliases.golden.json +4 -0
- package/dist/src/services/types.d.ts +14 -0
- package/dist/src/services/types.js +7 -0
- package/dist/src/services/types.js.map +1 -0
- package/dist/src/telemetry/clearcut-logger/clearcut-logger.js +6 -0
- package/dist/src/telemetry/clearcut-logger/clearcut-logger.js.map +1 -1
- package/dist/src/telemetry/clearcut-logger/clearcut-logger.test.js +5 -1
- package/dist/src/telemetry/clearcut-logger/clearcut-logger.test.js.map +1 -1
- package/dist/src/telemetry/clearcut-logger/event-metadata-key.d.ts +2 -1
- package/dist/src/telemetry/clearcut-logger/event-metadata-key.js +3 -1
- package/dist/src/telemetry/clearcut-logger/event-metadata-key.js.map +1 -1
- package/dist/src/telemetry/loggers.js +1 -1
- package/dist/src/telemetry/loggers.js.map +1 -1
- package/dist/src/telemetry/loggers.test.js +8 -3
- package/dist/src/telemetry/loggers.test.js.map +1 -1
- package/dist/src/telemetry/metrics.d.ts +10 -1
- package/dist/src/telemetry/metrics.js +19 -4
- package/dist/src/telemetry/metrics.js.map +1 -1
- package/dist/src/telemetry/metrics.test.js +44 -0
- package/dist/src/telemetry/metrics.test.js.map +1 -1
- package/dist/src/telemetry/types.d.ts +3 -3
- package/dist/src/telemetry/types.js +9 -4
- package/dist/src/telemetry/types.js.map +1 -1
- package/dist/src/test-utils/mock-message-bus.d.ts +1 -1
- package/dist/src/test-utils/mock-message-bus.js +1 -1
- package/dist/src/test-utils/mock-message-bus.js.map +1 -1
- package/dist/src/tools/definitions/base-declarations.d.ts +6 -0
- package/dist/src/tools/definitions/base-declarations.js +7 -0
- package/dist/src/tools/definitions/base-declarations.js.map +1 -1
- package/dist/src/tools/definitions/coreTools.d.ts +2 -1
- package/dist/src/tools/definitions/coreTools.js +9 -3
- package/dist/src/tools/definitions/coreTools.js.map +1 -1
- package/dist/src/tools/definitions/dynamic-declaration-helpers.d.ts +4 -0
- package/dist/src/tools/definitions/dynamic-declaration-helpers.js +29 -2
- package/dist/src/tools/definitions/dynamic-declaration-helpers.js.map +1 -1
- package/dist/src/tools/definitions/model-family-sets/default-legacy.js +11 -6
- package/dist/src/tools/definitions/model-family-sets/default-legacy.js.map +1 -1
- package/dist/src/tools/definitions/model-family-sets/gemini-3.js +10 -4
- package/dist/src/tools/definitions/model-family-sets/gemini-3.js.map +1 -1
- package/dist/src/tools/definitions/trackerTools.js +3 -3
- package/dist/src/tools/definitions/trackerTools.js.map +1 -1
- package/dist/src/tools/definitions/types.d.ts +1 -0
- package/dist/src/tools/enter-plan-mode.js +15 -0
- package/dist/src/tools/enter-plan-mode.js.map +1 -1
- package/dist/src/tools/enter-plan-mode.test.js +25 -0
- package/dist/src/tools/enter-plan-mode.test.js.map +1 -1
- package/dist/src/tools/grep-utils.d.ts +2 -1
- package/dist/src/tools/grep-utils.js +22 -3
- package/dist/src/tools/grep-utils.js.map +1 -1
- package/dist/src/tools/grep.js +16 -3
- package/dist/src/tools/grep.js.map +1 -1
- package/dist/src/tools/grep.test.js +34 -6
- package/dist/src/tools/grep.test.js.map +1 -1
- package/dist/src/tools/ls.js +6 -4
- package/dist/src/tools/ls.js.map +1 -1
- package/dist/src/tools/ls.test.js +22 -7
- package/dist/src/tools/ls.test.js.map +1 -1
- package/dist/src/tools/mcp-client-manager.js +6 -3
- package/dist/src/tools/mcp-client-manager.js.map +1 -1
- package/dist/src/tools/mcp-client-manager.test.js +35 -0
- package/dist/src/tools/mcp-client-manager.test.js.map +1 -1
- package/dist/src/tools/memoryTool.d.ts +9 -2
- package/dist/src/tools/memoryTool.js +39 -15
- package/dist/src/tools/memoryTool.js.map +1 -1
- package/dist/src/tools/memoryTool.test.js +61 -2
- package/dist/src/tools/memoryTool.test.js.map +1 -1
- package/dist/src/tools/read-many-files.js +12 -4
- package/dist/src/tools/read-many-files.js.map +1 -1
- package/dist/src/tools/read-many-files.test.js +17 -17
- package/dist/src/tools/read-many-files.test.js.map +1 -1
- package/dist/src/tools/ripGrep.js +14 -1
- package/dist/src/tools/ripGrep.js.map +1 -1
- package/dist/src/tools/ripGrep.test.js +9 -9
- package/dist/src/tools/ripGrep.test.js.map +1 -1
- package/dist/src/tools/shell.d.ts +10 -0
- package/dist/src/tools/shell.js +97 -124
- package/dist/src/tools/shell.js.map +1 -1
- package/dist/src/tools/shell.test.js +22 -3
- package/dist/src/tools/shell.test.js.map +1 -1
- package/dist/src/tools/tool-names.d.ts +4 -4
- package/dist/src/tools/tool-names.js +5 -3
- package/dist/src/tools/tool-names.js.map +1 -1
- package/dist/src/tools/tool-registry.js +11 -1
- package/dist/src/tools/tool-registry.js.map +1 -1
- package/dist/src/tools/tool-registry.test.js +43 -1
- package/dist/src/tools/tool-registry.test.js.map +1 -1
- package/dist/src/tools/tools.d.ts +12 -1
- package/dist/src/tools/tools.js +15 -0
- package/dist/src/tools/tools.js.map +1 -1
- package/dist/src/tools/tools.test.js +42 -1
- package/dist/src/tools/tools.test.js.map +1 -1
- package/dist/src/tools/topicTool.d.ts +29 -0
- package/dist/src/tools/topicTool.js +72 -0
- package/dist/src/tools/topicTool.js.map +1 -0
- package/dist/src/tools/topicTool.test.d.ts +6 -0
- package/dist/src/tools/topicTool.test.js +105 -0
- package/dist/src/tools/topicTool.test.js.map +1 -0
- package/dist/src/tools/web-fetch.js +38 -20
- package/dist/src/tools/web-fetch.js.map +1 -1
- package/dist/src/tools/web-fetch.test.js +28 -0
- package/dist/src/tools/web-fetch.test.js.map +1 -1
- package/dist/src/utils/checkpointUtils.d.ts +4 -4
- package/dist/src/utils/errors.d.ts +3 -0
- package/dist/src/utils/errors.js +28 -6
- package/dist/src/utils/errors.js.map +1 -1
- package/dist/src/utils/errors.test.js +23 -0
- package/dist/src/utils/errors.test.js.map +1 -1
- package/dist/src/utils/getFolderStructure.js +1 -1
- package/dist/src/utils/getFolderStructure.js.map +1 -1
- package/dist/src/utils/gitIgnoreParser.d.ts +2 -2
- package/dist/src/utils/gitIgnoreParser.js +28 -50
- package/dist/src/utils/gitIgnoreParser.js.map +1 -1
- package/dist/src/utils/gitIgnoreParser.test.js +51 -185
- package/dist/src/utils/gitIgnoreParser.test.js.map +1 -1
- package/dist/src/utils/ignoreFileParser.d.ts +2 -2
- package/dist/src/utils/ignoreFileParser.js +6 -17
- package/dist/src/utils/ignoreFileParser.js.map +1 -1
- package/dist/src/utils/ignoreFileParser.test.js +40 -132
- package/dist/src/utils/ignoreFileParser.test.js.map +1 -1
- package/dist/src/utils/ignorePathUtils.d.ts +11 -0
- package/dist/src/utils/ignorePathUtils.js +39 -0
- package/dist/src/utils/ignorePathUtils.js.map +1 -0
- package/dist/src/utils/ignorePathUtils.test.d.ts +6 -0
- package/dist/src/utils/ignorePathUtils.test.js +70 -0
- package/dist/src/utils/ignorePathUtils.test.js.map +1 -0
- package/dist/src/utils/memoryDiscovery.d.ts +6 -4
- package/dist/src/utils/memoryDiscovery.js +66 -41
- package/dist/src/utils/memoryDiscovery.js.map +1 -1
- package/dist/src/utils/memoryDiscovery.test.js +40 -0
- package/dist/src/utils/memoryDiscovery.test.js.map +1 -1
- package/dist/src/utils/memoryImportProcessor.d.ts +1 -1
- package/dist/src/utils/memoryImportProcessor.js +24 -15
- package/dist/src/utils/memoryImportProcessor.js.map +1 -1
- package/dist/src/utils/sessionOperations.d.ts +19 -0
- package/dist/src/utils/sessionOperations.js +101 -0
- package/dist/src/utils/sessionOperations.js.map +1 -0
- package/dist/src/utils/sessionOperations.test.d.ts +6 -0
- package/dist/src/utils/sessionOperations.test.js +92 -0
- package/dist/src/utils/sessionOperations.test.js.map +1 -0
- package/dist/src/utils/shell-utils.d.ts +15 -0
- package/dist/src/utils/shell-utils.js +43 -2
- package/dist/src/utils/shell-utils.js.map +1 -1
- package/dist/src/utils/textUtils.d.ts +8 -0
- package/dist/src/utils/textUtils.js +16 -0
- package/dist/src/utils/textUtils.js.map +1 -1
- package/dist/src/utils/tokenCalculation.d.ts +2 -0
- package/dist/src/utils/tokenCalculation.js +2 -2
- package/dist/src/utils/tokenCalculation.js.map +1 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/package.json +1 -1
- package/dist/docs/get-started/examples.md +0 -141
- package/dist/google-gemini-cli-core-0.36.0-preview.7.tgz +0 -0
- package/dist/src/sandbox/macos/MacOsSandboxManager.integration.test.js +0 -164
- package/dist/src/sandbox/macos/MacOsSandboxManager.integration.test.js.map +0 -1
- package/dist/src/sandbox/macos/commandSafety.js.map +0 -1
- package/dist/src/services/chatCompressionService.js.map +0 -1
- package/dist/src/services/chatCompressionService.test.js.map +0 -1
- package/dist/src/services/contextManager.js.map +0 -1
- package/dist/src/services/contextManager.test.js.map +0 -1
- package/dist/src/services/toolOutputMaskingService.js.map +0 -1
- package/dist/src/services/toolOutputMaskingService.test.js.map +0 -1
- /package/dist/src/{services/toolOutputMaskingService.test.d.ts → agents/browser/snapshotSuperseder.test.d.ts} +0 -0
- /package/dist/src/{services → context}/chatCompressionService.d.ts +0 -0
- /package/dist/src/{services → context}/chatCompressionService.js +0 -0
- /package/dist/src/{services → context}/chatCompressionService.test.d.ts +0 -0
- /package/dist/src/{services → context}/chatCompressionService.test.js +0 -0
- /package/dist/src/{services → context}/contextManager.test.d.ts +0 -0
- /package/dist/src/{sandbox/macos/MacOsSandboxManager.integration.test.d.ts → services/sandboxManager.integration.test.d.ts} +0 -0
|
@@ -3,9 +3,11 @@
|
|
|
3
3
|
* Copyright 2026 Google LLC
|
|
4
4
|
* SPDX-License-Identifier: Apache-2.0
|
|
5
5
|
*/
|
|
6
|
-
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
6
|
+
import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
|
|
7
7
|
import { LinuxSandboxManager } from './LinuxSandboxManager.js';
|
|
8
8
|
import fs from 'node:fs';
|
|
9
|
+
import path from 'node:path';
|
|
10
|
+
import * as shellUtils from '../../utils/shell-utils.js';
|
|
9
11
|
vi.mock('node:fs', async () => {
|
|
10
12
|
const actual = await vi.importActual('node:fs');
|
|
11
13
|
return {
|
|
@@ -15,17 +17,38 @@ vi.mock('node:fs', async () => {
|
|
|
15
17
|
...actual.default,
|
|
16
18
|
existsSync: vi.fn(() => true),
|
|
17
19
|
realpathSync: vi.fn((p) => p.toString()),
|
|
20
|
+
statSync: vi.fn(() => ({ isDirectory: () => true })),
|
|
18
21
|
mkdirSync: vi.fn(),
|
|
22
|
+
mkdtempSync: vi.fn((prefix) => prefix + 'mocked'),
|
|
19
23
|
openSync: vi.fn(),
|
|
20
24
|
closeSync: vi.fn(),
|
|
21
25
|
writeFileSync: vi.fn(),
|
|
26
|
+
readdirSync: vi.fn(() => []),
|
|
27
|
+
chmodSync: vi.fn(),
|
|
28
|
+
unlinkSync: vi.fn(),
|
|
29
|
+
rmSync: vi.fn(),
|
|
22
30
|
},
|
|
23
31
|
existsSync: vi.fn(() => true),
|
|
24
32
|
realpathSync: vi.fn((p) => p.toString()),
|
|
33
|
+
statSync: vi.fn(() => ({ isDirectory: () => true })),
|
|
25
34
|
mkdirSync: vi.fn(),
|
|
35
|
+
mkdtempSync: vi.fn((prefix) => prefix + 'mocked'),
|
|
26
36
|
openSync: vi.fn(),
|
|
27
37
|
closeSync: vi.fn(),
|
|
28
38
|
writeFileSync: vi.fn(),
|
|
39
|
+
readdirSync: vi.fn(() => []),
|
|
40
|
+
chmodSync: vi.fn(),
|
|
41
|
+
unlinkSync: vi.fn(),
|
|
42
|
+
rmSync: vi.fn(),
|
|
43
|
+
};
|
|
44
|
+
});
|
|
45
|
+
vi.mock('../../utils/shell-utils.js', async (importOriginal) => {
|
|
46
|
+
const actual = await importOriginal();
|
|
47
|
+
return {
|
|
48
|
+
...actual,
|
|
49
|
+
spawnAsync: vi.fn(() => Promise.resolve({ status: 0, stdout: Buffer.from('') })),
|
|
50
|
+
initializeShellParsers: vi.fn(),
|
|
51
|
+
isStrictlyApproved: vi.fn().mockResolvedValue(true),
|
|
29
52
|
};
|
|
30
53
|
});
|
|
31
54
|
describe('LinuxSandboxManager', () => {
|
|
@@ -37,8 +60,12 @@ describe('LinuxSandboxManager', () => {
|
|
|
37
60
|
vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
|
|
38
61
|
manager = new LinuxSandboxManager({ workspace });
|
|
39
62
|
});
|
|
40
|
-
|
|
41
|
-
|
|
63
|
+
afterEach(() => {
|
|
64
|
+
vi.restoreAllMocks();
|
|
65
|
+
});
|
|
66
|
+
const getBwrapArgs = async (req, customManager) => {
|
|
67
|
+
const mgr = customManager || manager;
|
|
68
|
+
const result = await mgr.prepareCommand(req);
|
|
42
69
|
expect(result.program).toBe('sh');
|
|
43
70
|
expect(result.args[0]).toBe('-c');
|
|
44
71
|
expect(result.args[1]).toBe('bpf_path="$1"; shift; exec bwrap "$@" 9< "$bpf_path"');
|
|
@@ -46,140 +73,418 @@ describe('LinuxSandboxManager', () => {
|
|
|
46
73
|
expect(result.args[3]).toMatch(/gemini-cli-seccomp-.*\.bpf$/);
|
|
47
74
|
return result.args.slice(4);
|
|
48
75
|
};
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
76
|
+
describe('prepareCommand', () => {
|
|
77
|
+
it('should correctly format the base command and args', async () => {
|
|
78
|
+
const bwrapArgs = await getBwrapArgs({
|
|
79
|
+
command: 'ls',
|
|
80
|
+
args: ['-la'],
|
|
81
|
+
cwd: workspace,
|
|
82
|
+
env: {},
|
|
83
|
+
});
|
|
84
|
+
expect(bwrapArgs).toEqual([
|
|
85
|
+
'--unshare-all',
|
|
86
|
+
'--new-session',
|
|
87
|
+
'--die-with-parent',
|
|
88
|
+
'--ro-bind',
|
|
89
|
+
'/',
|
|
90
|
+
'/',
|
|
91
|
+
'--dev',
|
|
92
|
+
'/dev',
|
|
93
|
+
'--proc',
|
|
94
|
+
'/proc',
|
|
95
|
+
'--tmpfs',
|
|
96
|
+
'/tmp',
|
|
97
|
+
'--ro-bind-try',
|
|
98
|
+
workspace,
|
|
99
|
+
workspace,
|
|
100
|
+
'--ro-bind',
|
|
101
|
+
`${workspace}/.gitignore`,
|
|
102
|
+
`${workspace}/.gitignore`,
|
|
103
|
+
'--ro-bind',
|
|
104
|
+
`${workspace}/.geminiignore`,
|
|
105
|
+
`${workspace}/.geminiignore`,
|
|
106
|
+
'--ro-bind',
|
|
107
|
+
`${workspace}/.git`,
|
|
108
|
+
`${workspace}/.git`,
|
|
109
|
+
'--seccomp',
|
|
110
|
+
'9',
|
|
111
|
+
'--',
|
|
112
|
+
'ls',
|
|
113
|
+
'-la',
|
|
114
|
+
]);
|
|
55
115
|
});
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
'--
|
|
68
|
-
|
|
69
|
-
'--bind',
|
|
70
|
-
workspace,
|
|
71
|
-
workspace,
|
|
72
|
-
'--ro-bind',
|
|
73
|
-
`${workspace}/.gitignore`,
|
|
74
|
-
`${workspace}/.gitignore`,
|
|
75
|
-
'--ro-bind',
|
|
76
|
-
`${workspace}/.geminiignore`,
|
|
77
|
-
`${workspace}/.geminiignore`,
|
|
78
|
-
'--ro-bind',
|
|
79
|
-
`${workspace}/.git`,
|
|
80
|
-
`${workspace}/.git`,
|
|
81
|
-
'--seccomp',
|
|
82
|
-
'9',
|
|
83
|
-
'--',
|
|
84
|
-
'ls',
|
|
85
|
-
'-la',
|
|
86
|
-
]);
|
|
87
|
-
});
|
|
88
|
-
it('maps allowedPaths to bwrap binds', async () => {
|
|
89
|
-
const bwrapArgs = await getBwrapArgs({
|
|
90
|
-
command: 'node',
|
|
91
|
-
args: ['script.js'],
|
|
92
|
-
cwd: workspace,
|
|
93
|
-
env: {},
|
|
94
|
-
policy: {
|
|
95
|
-
allowedPaths: ['/tmp/cache', '/opt/tools', workspace],
|
|
96
|
-
},
|
|
116
|
+
it('binds workspace read-write when readonly is false', async () => {
|
|
117
|
+
const customManager = new LinuxSandboxManager({
|
|
118
|
+
workspace,
|
|
119
|
+
modeConfig: { readonly: false },
|
|
120
|
+
});
|
|
121
|
+
const bwrapArgs = await getBwrapArgs({
|
|
122
|
+
command: 'ls',
|
|
123
|
+
args: [],
|
|
124
|
+
cwd: workspace,
|
|
125
|
+
env: {},
|
|
126
|
+
}, customManager);
|
|
127
|
+
expect(bwrapArgs).toContain('--bind-try');
|
|
128
|
+
expect(bwrapArgs).toContain(workspace);
|
|
97
129
|
});
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
`${workspace}/.gitignore`,
|
|
108
|
-
'--ro-bind',
|
|
109
|
-
`${workspace}/.geminiignore`,
|
|
110
|
-
`${workspace}/.geminiignore`,
|
|
111
|
-
'--ro-bind',
|
|
112
|
-
`${workspace}/.git`,
|
|
113
|
-
`${workspace}/.git`,
|
|
114
|
-
'--bind-try',
|
|
115
|
-
'/tmp/cache',
|
|
116
|
-
'/tmp/cache',
|
|
117
|
-
'--bind-try',
|
|
118
|
-
'/opt/tools',
|
|
119
|
-
'/opt/tools',
|
|
120
|
-
]);
|
|
121
|
-
});
|
|
122
|
-
it('protects real paths of governance files if they are symlinks', async () => {
|
|
123
|
-
vi.mocked(fs.realpathSync).mockImplementation((p) => {
|
|
124
|
-
if (p.toString() === `${workspace}/.gitignore`)
|
|
125
|
-
return '/shared/global.gitignore';
|
|
126
|
-
return p.toString();
|
|
130
|
+
it('maps network permissions to --share-net', async () => {
|
|
131
|
+
const bwrapArgs = await getBwrapArgs({
|
|
132
|
+
command: 'curl',
|
|
133
|
+
args: [],
|
|
134
|
+
cwd: workspace,
|
|
135
|
+
env: {},
|
|
136
|
+
policy: { additionalPermissions: { network: true } },
|
|
137
|
+
});
|
|
138
|
+
expect(bwrapArgs).toContain('--share-net');
|
|
127
139
|
});
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
140
|
+
it('maps explicit write permissions to --bind-try', async () => {
|
|
141
|
+
const bwrapArgs = await getBwrapArgs({
|
|
142
|
+
command: 'touch',
|
|
143
|
+
args: [],
|
|
144
|
+
cwd: workspace,
|
|
145
|
+
env: {},
|
|
146
|
+
policy: {
|
|
147
|
+
additionalPermissions: {
|
|
148
|
+
fileSystem: { write: ['/home/user/workspace/out/dir'] },
|
|
149
|
+
},
|
|
150
|
+
},
|
|
151
|
+
});
|
|
152
|
+
const index = bwrapArgs.indexOf('--bind-try');
|
|
153
|
+
expect(index).not.toBe(-1);
|
|
154
|
+
expect(bwrapArgs[index + 1]).toBe('/home/user/workspace/out/dir');
|
|
133
155
|
});
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
156
|
+
it('rejects overrides in plan mode', async () => {
|
|
157
|
+
const customManager = new LinuxSandboxManager({
|
|
158
|
+
workspace,
|
|
159
|
+
modeConfig: { allowOverrides: false },
|
|
160
|
+
});
|
|
161
|
+
await expect(customManager.prepareCommand({
|
|
162
|
+
command: 'ls',
|
|
163
|
+
args: [],
|
|
164
|
+
cwd: workspace,
|
|
165
|
+
env: {},
|
|
166
|
+
policy: { additionalPermissions: { network: true } },
|
|
167
|
+
})).rejects.toThrow(/Cannot override readonly\/network\/filesystem restrictions in Plan mode/);
|
|
168
|
+
});
|
|
169
|
+
it('should correctly pass through the cwd to the resulting command', async () => {
|
|
170
|
+
const req = {
|
|
171
|
+
command: 'ls',
|
|
172
|
+
args: [],
|
|
173
|
+
cwd: '/different/cwd',
|
|
174
|
+
env: {},
|
|
175
|
+
};
|
|
176
|
+
const result = await manager.prepareCommand(req);
|
|
177
|
+
expect(result.cwd).toBe('/different/cwd');
|
|
178
|
+
});
|
|
179
|
+
it('should apply environment sanitization via the default mechanisms', async () => {
|
|
180
|
+
const req = {
|
|
181
|
+
command: 'test',
|
|
182
|
+
args: [],
|
|
183
|
+
cwd: workspace,
|
|
184
|
+
env: {
|
|
185
|
+
API_KEY: 'secret',
|
|
186
|
+
PATH: '/usr/bin',
|
|
187
|
+
},
|
|
188
|
+
policy: {
|
|
189
|
+
sanitizationConfig: {
|
|
190
|
+
allowedEnvironmentVariables: ['PATH'],
|
|
191
|
+
blockedEnvironmentVariables: ['API_KEY'],
|
|
192
|
+
enableEnvironmentVariableRedaction: true,
|
|
193
|
+
},
|
|
194
|
+
},
|
|
195
|
+
};
|
|
196
|
+
const result = await manager.prepareCommand(req);
|
|
197
|
+
expect(result.env['PATH']).toBe('/usr/bin');
|
|
198
|
+
expect(result.env['API_KEY']).toBeUndefined();
|
|
199
|
+
});
|
|
200
|
+
it('should allow network when networkAccess is true', async () => {
|
|
201
|
+
const bwrapArgs = await getBwrapArgs({
|
|
202
|
+
command: 'ls',
|
|
203
|
+
args: ['-la'],
|
|
204
|
+
cwd: workspace,
|
|
205
|
+
env: {},
|
|
206
|
+
policy: {
|
|
207
|
+
networkAccess: true,
|
|
208
|
+
},
|
|
209
|
+
});
|
|
210
|
+
expect(bwrapArgs).toContain('--share-net');
|
|
211
|
+
});
|
|
212
|
+
describe('governance files', () => {
|
|
213
|
+
it('should ensure governance files exist', async () => {
|
|
214
|
+
vi.mocked(fs.existsSync).mockReturnValue(false);
|
|
215
|
+
await getBwrapArgs({
|
|
216
|
+
command: 'ls',
|
|
217
|
+
args: [],
|
|
218
|
+
cwd: workspace,
|
|
219
|
+
env: {},
|
|
220
|
+
});
|
|
221
|
+
expect(fs.mkdirSync).toHaveBeenCalled();
|
|
222
|
+
expect(fs.openSync).toHaveBeenCalled();
|
|
223
|
+
});
|
|
224
|
+
it('should protect both the symlink and the real path if they differ', async () => {
|
|
225
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => {
|
|
226
|
+
if (p.toString() === `${workspace}/.gitignore`)
|
|
227
|
+
return '/shared/global.gitignore';
|
|
228
|
+
return p.toString();
|
|
229
|
+
});
|
|
230
|
+
const bwrapArgs = await getBwrapArgs({
|
|
231
|
+
command: 'ls',
|
|
232
|
+
args: [],
|
|
233
|
+
cwd: workspace,
|
|
234
|
+
env: {},
|
|
235
|
+
});
|
|
236
|
+
expect(bwrapArgs).toContain('--ro-bind');
|
|
237
|
+
expect(bwrapArgs).toContain(`${workspace}/.gitignore`);
|
|
238
|
+
expect(bwrapArgs).toContain('/shared/global.gitignore');
|
|
239
|
+
// Check that both are bound
|
|
240
|
+
const gitignoreIndex = bwrapArgs.indexOf(`${workspace}/.gitignore`);
|
|
241
|
+
expect(bwrapArgs[gitignoreIndex - 1]).toBe('--ro-bind');
|
|
242
|
+
expect(bwrapArgs[gitignoreIndex + 1]).toBe(`${workspace}/.gitignore`);
|
|
243
|
+
const realGitignoreIndex = bwrapArgs.indexOf('/shared/global.gitignore');
|
|
244
|
+
expect(bwrapArgs[realGitignoreIndex - 1]).toBe('--ro-bind');
|
|
245
|
+
expect(bwrapArgs[realGitignoreIndex + 1]).toBe('/shared/global.gitignore');
|
|
246
|
+
});
|
|
247
|
+
});
|
|
248
|
+
describe('allowedPaths', () => {
|
|
249
|
+
it('should parameterize allowed paths and normalize them', async () => {
|
|
250
|
+
const bwrapArgs = await getBwrapArgs({
|
|
251
|
+
command: 'node',
|
|
252
|
+
args: ['script.js'],
|
|
253
|
+
cwd: workspace,
|
|
254
|
+
env: {},
|
|
255
|
+
policy: {
|
|
256
|
+
allowedPaths: ['/tmp/cache', '/opt/tools', workspace],
|
|
257
|
+
},
|
|
258
|
+
});
|
|
259
|
+
expect(bwrapArgs).toContain('--bind-try');
|
|
260
|
+
expect(bwrapArgs[bwrapArgs.indexOf('/tmp/cache') - 1]).toBe('--bind-try');
|
|
261
|
+
expect(bwrapArgs[bwrapArgs.indexOf('/opt/tools') - 1]).toBe('--bind-try');
|
|
262
|
+
});
|
|
263
|
+
it('should grant read-write access to allowedPaths inside the workspace even when readonly mode is active', async () => {
|
|
264
|
+
const manager = new LinuxSandboxManager({
|
|
265
|
+
workspace,
|
|
266
|
+
modeConfig: { readonly: true },
|
|
267
|
+
});
|
|
268
|
+
const result = await manager.prepareCommand({
|
|
269
|
+
command: 'ls',
|
|
270
|
+
args: [],
|
|
271
|
+
cwd: workspace,
|
|
272
|
+
env: {},
|
|
273
|
+
policy: {
|
|
274
|
+
allowedPaths: [workspace + '/subdirectory'],
|
|
275
|
+
},
|
|
276
|
+
});
|
|
277
|
+
const bwrapArgs = result.args;
|
|
278
|
+
const bindIndex = bwrapArgs.indexOf(workspace + '/subdirectory');
|
|
279
|
+
expect(bwrapArgs[bindIndex - 1]).toBe('--bind-try');
|
|
280
|
+
});
|
|
281
|
+
it('should not bind the workspace twice even if it has a trailing slash in allowedPaths', async () => {
|
|
282
|
+
const bwrapArgs = await getBwrapArgs({
|
|
283
|
+
command: 'ls',
|
|
284
|
+
args: ['-la'],
|
|
285
|
+
cwd: workspace,
|
|
286
|
+
env: {},
|
|
287
|
+
policy: {
|
|
288
|
+
allowedPaths: [workspace + '/'],
|
|
289
|
+
},
|
|
290
|
+
});
|
|
291
|
+
const binds = bwrapArgs.filter((a) => a === workspace);
|
|
292
|
+
expect(binds.length).toBe(2);
|
|
293
|
+
});
|
|
294
|
+
it('should bind the parent directory of a non-existent path', async () => {
|
|
295
|
+
vi.mocked(fs.existsSync).mockImplementation((p) => {
|
|
296
|
+
if (p === '/home/user/workspace/new-file.txt')
|
|
297
|
+
return false;
|
|
298
|
+
return true;
|
|
299
|
+
});
|
|
300
|
+
const bwrapArgs = await getBwrapArgs({
|
|
301
|
+
command: '__write',
|
|
302
|
+
args: ['/home/user/workspace/new-file.txt'],
|
|
303
|
+
cwd: workspace,
|
|
304
|
+
env: {},
|
|
305
|
+
policy: {
|
|
306
|
+
allowedPaths: ['/home/user/workspace/new-file.txt'],
|
|
307
|
+
},
|
|
308
|
+
});
|
|
309
|
+
const parentDir = '/home/user/workspace';
|
|
310
|
+
const bindIndex = bwrapArgs.lastIndexOf(parentDir);
|
|
311
|
+
expect(bindIndex).not.toBe(-1);
|
|
312
|
+
expect(bwrapArgs[bindIndex - 2]).toBe('--bind-try');
|
|
313
|
+
});
|
|
314
|
+
});
|
|
315
|
+
describe('virtual commands', () => {
|
|
316
|
+
it('should translate __read to cat', async () => {
|
|
317
|
+
const testFile = path.join(workspace, 'file.txt');
|
|
318
|
+
const bwrapArgs = await getBwrapArgs({
|
|
319
|
+
command: '__read',
|
|
320
|
+
args: [testFile],
|
|
321
|
+
cwd: workspace,
|
|
322
|
+
env: {},
|
|
323
|
+
});
|
|
324
|
+
// args are: [...bwrapBaseArgs, '--', '/bin/cat', '.../file.txt']
|
|
325
|
+
expect(bwrapArgs[bwrapArgs.length - 2]).toBe('/bin/cat');
|
|
326
|
+
expect(bwrapArgs[bwrapArgs.length - 1]).toBe(testFile);
|
|
327
|
+
});
|
|
328
|
+
it('should translate __write to sh -c cat', async () => {
|
|
329
|
+
const testFile = path.join(workspace, 'file.txt');
|
|
330
|
+
const bwrapArgs = await getBwrapArgs({
|
|
331
|
+
command: '__write',
|
|
332
|
+
args: [testFile],
|
|
333
|
+
cwd: workspace,
|
|
334
|
+
env: {},
|
|
335
|
+
});
|
|
336
|
+
// args are: [...bwrapBaseArgs, '--', '/bin/sh', '-c', 'tee -- "$@" > /dev/null', '_', '.../file.txt']
|
|
337
|
+
expect(bwrapArgs[bwrapArgs.length - 5]).toBe('/bin/sh');
|
|
338
|
+
expect(bwrapArgs[bwrapArgs.length - 4]).toBe('-c');
|
|
339
|
+
expect(bwrapArgs[bwrapArgs.length - 3]).toBe('tee -- "$@" > /dev/null');
|
|
340
|
+
expect(bwrapArgs[bwrapArgs.length - 2]).toBe('_');
|
|
341
|
+
expect(bwrapArgs[bwrapArgs.length - 1]).toBe(testFile);
|
|
342
|
+
});
|
|
343
|
+
});
|
|
344
|
+
describe('forbiddenPaths', () => {
|
|
345
|
+
it('should parameterize forbidden paths and explicitly deny them', async () => {
|
|
346
|
+
vi.mocked(fs.statSync).mockImplementation((p) => {
|
|
347
|
+
if (p.toString().includes('cache')) {
|
|
348
|
+
return { isDirectory: () => true };
|
|
349
|
+
}
|
|
350
|
+
return { isDirectory: () => false };
|
|
351
|
+
});
|
|
352
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
|
|
353
|
+
const customManager = new LinuxSandboxManager({
|
|
354
|
+
workspace,
|
|
355
|
+
forbiddenPaths: async () => ['/tmp/cache', '/opt/secret.txt'],
|
|
356
|
+
});
|
|
357
|
+
const bwrapArgs = await getBwrapArgs({
|
|
358
|
+
command: 'ls',
|
|
359
|
+
args: ['-la'],
|
|
360
|
+
cwd: workspace,
|
|
361
|
+
env: {},
|
|
362
|
+
}, customManager);
|
|
363
|
+
const cacheIndex = bwrapArgs.indexOf('/tmp/cache');
|
|
364
|
+
expect(bwrapArgs[cacheIndex - 1]).toBe('--tmpfs');
|
|
365
|
+
const secretIndex = bwrapArgs.indexOf('/opt/secret.txt');
|
|
366
|
+
expect(bwrapArgs[secretIndex - 2]).toBe('--ro-bind');
|
|
367
|
+
expect(bwrapArgs[secretIndex - 1]).toBe('/dev/null');
|
|
368
|
+
});
|
|
369
|
+
it('resolves forbidden symlink paths to their real paths', async () => {
|
|
370
|
+
vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => false }));
|
|
371
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => {
|
|
372
|
+
if (p === '/tmp/forbidden-symlink')
|
|
373
|
+
return '/opt/real-target.txt';
|
|
374
|
+
return p.toString();
|
|
375
|
+
});
|
|
376
|
+
const customManager = new LinuxSandboxManager({
|
|
377
|
+
workspace,
|
|
378
|
+
forbiddenPaths: async () => ['/tmp/forbidden-symlink'],
|
|
379
|
+
});
|
|
380
|
+
const bwrapArgs = await getBwrapArgs({
|
|
381
|
+
command: 'ls',
|
|
382
|
+
args: ['-la'],
|
|
383
|
+
cwd: workspace,
|
|
384
|
+
env: {},
|
|
385
|
+
}, customManager);
|
|
386
|
+
const secretIndex = bwrapArgs.indexOf('/opt/real-target.txt');
|
|
387
|
+
expect(bwrapArgs[secretIndex - 2]).toBe('--ro-bind');
|
|
388
|
+
expect(bwrapArgs[secretIndex - 1]).toBe('/dev/null');
|
|
389
|
+
});
|
|
390
|
+
it('explicitly denies non-existent forbidden paths to prevent creation', async () => {
|
|
391
|
+
const error = new Error('File not found');
|
|
392
|
+
error.code = 'ENOENT';
|
|
393
|
+
vi.mocked(fs.statSync).mockImplementation(() => {
|
|
394
|
+
throw error;
|
|
395
|
+
});
|
|
396
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
|
|
397
|
+
const customManager = new LinuxSandboxManager({
|
|
398
|
+
workspace,
|
|
399
|
+
forbiddenPaths: async () => ['/tmp/not-here.txt'],
|
|
400
|
+
});
|
|
401
|
+
const bwrapArgs = await getBwrapArgs({
|
|
402
|
+
command: 'ls',
|
|
403
|
+
args: [],
|
|
404
|
+
cwd: workspace,
|
|
405
|
+
env: {},
|
|
406
|
+
}, customManager);
|
|
407
|
+
const idx = bwrapArgs.indexOf('/tmp/not-here.txt');
|
|
408
|
+
expect(bwrapArgs[idx - 2]).toBe('--symlink');
|
|
409
|
+
expect(bwrapArgs[idx - 1]).toBe('/dev/null');
|
|
410
|
+
});
|
|
411
|
+
it('masks directory symlinks with tmpfs for both paths', async () => {
|
|
412
|
+
vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => true }));
|
|
413
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => {
|
|
414
|
+
if (p === '/tmp/dir-link')
|
|
415
|
+
return '/opt/real-dir';
|
|
416
|
+
return p.toString();
|
|
417
|
+
});
|
|
418
|
+
const customManager = new LinuxSandboxManager({
|
|
419
|
+
workspace,
|
|
420
|
+
forbiddenPaths: async () => ['/tmp/dir-link'],
|
|
421
|
+
});
|
|
422
|
+
const bwrapArgs = await getBwrapArgs({
|
|
423
|
+
command: 'ls',
|
|
424
|
+
args: [],
|
|
425
|
+
cwd: workspace,
|
|
426
|
+
env: {},
|
|
427
|
+
}, customManager);
|
|
428
|
+
const idx = bwrapArgs.indexOf('/opt/real-dir');
|
|
429
|
+
expect(bwrapArgs[idx - 1]).toBe('--tmpfs');
|
|
430
|
+
});
|
|
431
|
+
it('should override allowed paths if a path is also in forbidden paths', async () => {
|
|
432
|
+
vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => true }));
|
|
433
|
+
vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
|
|
434
|
+
const customManager = new LinuxSandboxManager({
|
|
435
|
+
workspace,
|
|
436
|
+
forbiddenPaths: async () => ['/tmp/conflict'],
|
|
437
|
+
});
|
|
438
|
+
const bwrapArgs = await getBwrapArgs({
|
|
439
|
+
command: 'ls',
|
|
440
|
+
args: ['-la'],
|
|
441
|
+
cwd: workspace,
|
|
442
|
+
env: {},
|
|
443
|
+
policy: {
|
|
444
|
+
allowedPaths: ['/tmp/conflict'],
|
|
445
|
+
},
|
|
446
|
+
}, customManager);
|
|
447
|
+
// Conflict should have been filtered out of allow list (--bind-try)
|
|
448
|
+
expect(bwrapArgs).not.toContain('--bind-try');
|
|
449
|
+
expect(bwrapArgs).not.toContain('--bind-try-ro');
|
|
450
|
+
// It should only appear as a forbidden path (via --tmpfs)
|
|
451
|
+
const conflictIdx = bwrapArgs.indexOf('/tmp/conflict');
|
|
452
|
+
expect(conflictIdx).toBeGreaterThan(0);
|
|
453
|
+
expect(bwrapArgs[conflictIdx - 1]).toBe('--tmpfs');
|
|
454
|
+
});
|
|
152
455
|
});
|
|
153
|
-
expect(fs.mkdirSync).toHaveBeenCalled();
|
|
154
|
-
expect(fs.openSync).toHaveBeenCalled();
|
|
155
456
|
});
|
|
156
|
-
it('
|
|
457
|
+
it('blocks .env and .env.* files in the workspace root', async () => {
|
|
458
|
+
vi.mocked(shellUtils.spawnAsync).mockImplementation((cmd, args) => {
|
|
459
|
+
if (cmd === 'find' && args?.[0] === workspace) {
|
|
460
|
+
// Assert that find is NOT excluding dotfiles
|
|
461
|
+
expect(args).not.toContain('-not');
|
|
462
|
+
expect(args).toContain('-prune');
|
|
463
|
+
return Promise.resolve({
|
|
464
|
+
status: 0,
|
|
465
|
+
stdout: Buffer.from(`${workspace}/.env\0${workspace}/.env.local\0${workspace}/.env.test\0`),
|
|
466
|
+
});
|
|
467
|
+
}
|
|
468
|
+
return Promise.resolve({
|
|
469
|
+
status: 0,
|
|
470
|
+
stdout: Buffer.from(''),
|
|
471
|
+
});
|
|
472
|
+
});
|
|
157
473
|
const bwrapArgs = await getBwrapArgs({
|
|
158
474
|
command: 'ls',
|
|
159
|
-
args: [
|
|
475
|
+
args: [],
|
|
160
476
|
cwd: workspace,
|
|
161
477
|
env: {},
|
|
162
|
-
policy: {
|
|
163
|
-
allowedPaths: [workspace + '/'],
|
|
164
|
-
},
|
|
165
478
|
});
|
|
166
479
|
const bindsIndex = bwrapArgs.indexOf('--seccomp');
|
|
167
|
-
const binds = bwrapArgs.slice(
|
|
168
|
-
|
|
169
|
-
expect(binds).
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
`${workspace}/.gitignore`,
|
|
176
|
-
'--ro-bind',
|
|
177
|
-
`${workspace}/.geminiignore`,
|
|
178
|
-
`${workspace}/.geminiignore`,
|
|
179
|
-
'--ro-bind',
|
|
180
|
-
`${workspace}/.git`,
|
|
181
|
-
`${workspace}/.git`,
|
|
182
|
-
]);
|
|
480
|
+
const binds = bwrapArgs.slice(0, bindsIndex);
|
|
481
|
+
expect(binds).toContain(`${workspace}/.env`);
|
|
482
|
+
expect(binds).toContain(`${workspace}/.env.local`);
|
|
483
|
+
expect(binds).toContain(`${workspace}/.env.test`);
|
|
484
|
+
// Verify they are bound to a mask file
|
|
485
|
+
const envIndex = binds.indexOf(`${workspace}/.env`);
|
|
486
|
+
expect(binds[envIndex - 2]).toBe('--bind');
|
|
487
|
+
expect(binds[envIndex - 1]).toMatch(/gemini-cli-mask-file-.*mocked\/mask/);
|
|
183
488
|
});
|
|
184
489
|
});
|
|
185
490
|
//# sourceMappingURL=LinuxSandboxManager.test.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"LinuxSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/linux/LinuxSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,0FAA0F;YAC1F,GAAG,MAAM,CAAC,OAAO;YACjB,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzD,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;SACvB;QACD,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzD,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACxB,eAAe;YACf,eAAe;YACf,mBAAmB;YACnB,WAAW;YACX,GAAG;YACH,GAAG;YACH,OAAO;YACP,MAAM;YACN,QAAQ;YACR,OAAO;YACP,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;YACnB,WAAW;YACX,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;YACP,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;aACtD;SACF,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;YACnB,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,aAAa;gBAC5C,OAAO,0BAA0B,CAAC;YACpC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAExD,4BAA4B;QAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QAEtE,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,YAAY,CAAC;YACjB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;YACP,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC;aAChC;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;QAEvE,2HAA2H;QAC3H,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
1
|
+
{"version":3,"file":"LinuxSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/linux/LinuxSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AAEzD,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,0FAA0F;YAC1F,GAAG,MAAM,CAAC,OAAO;YACjB,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAAC;YAChE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;YACzD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC5B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;SAChB;QACD,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAAC;QAChE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;QACtB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC7D,MAAM,MAAM,GACV,MAAM,cAAc,EAA+C,CAAC;IACtE,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CACrB,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CACxD;QACD,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC/B,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,EACxB,GAAmB,EACnB,aAAmC,EACnC,EAAE;QACF,MAAM,GAAG,GAAG,aAAa,IAAI,OAAO,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;aACR,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;gBACxB,eAAe;gBACf,eAAe;gBACf,mBAAmB;gBACnB,WAAW;gBACX,GAAG;gBACH,GAAG;gBACH,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,OAAO;gBACP,SAAS;gBACT,MAAM;gBACN,eAAe;gBACf,SAAS;gBACT,SAAS;gBACT,WAAW;gBACX,GAAG,SAAS,aAAa;gBACzB,GAAG,SAAS,aAAa;gBACzB,WAAW;gBACX,GAAG,SAAS,gBAAgB;gBAC5B,GAAG,SAAS,gBAAgB;gBAC5B,WAAW;gBACX,GAAG,SAAS,OAAO;gBACnB,GAAG,SAAS,OAAO;gBACnB,WAAW;gBACX,GAAG;gBACH,IAAI;gBACJ,IAAI;gBACJ,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;gBAC5C,SAAS;gBACT,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAChC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;aACR,EACD,aAAa,CACd,CAAC;YAEF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,qBAAqB,EAAE;wBACrB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,8BAA8B,CAAC,EAAE;qBACxD;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;gBAC5C,SAAS;gBACT,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,MAAM,CACV,aAAa,CAAC,cAAc,CAAC;gBAC3B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aACrD,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CACf,yEAAyE,CAC1E,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,GAAG,GAAmB;gBAC1B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,gBAAgB;gBACrB,GAAG,EAAE,EAAE;aACR,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,GAAG,GAAmB;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE;oBACH,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,UAAU;iBACjB;gBACD,MAAM,EAAE;oBACN,kBAAkB,EAAE;wBAClB,2BAA2B,EAAE,CAAC,MAAM,CAAC;wBACrC,2BAA2B,EAAE,CAAC,SAAS,CAAC;wBACxC,kCAAkC,EAAE,IAAI;qBACzC;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,aAAa,EAAE,IAAI;iBACpB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAEhD,MAAM,YAAY,CAAC;oBACjB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACxC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;gBAChF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,aAAa;wBAC5C,OAAO,0BAA0B,CAAC;oBACpC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBACzC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBACvD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;gBAExD,4BAA4B;gBAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBACpE,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBAEtE,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAC1C,0BAA0B,CAC3B,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5D,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5C,0BAA0B,CAC3B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;qBACtD;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC1C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,YAAY,CACb,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uGAAuG,EAAE,KAAK,IAAI,EAAE;gBACrH,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;oBACtC,SAAS;oBACT,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC/B,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,SAAS,GAAG,eAAe,CAAC;qBAC5C;iBACF,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;gBACjE,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;gBACnG,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC;qBAChC;iBACF,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;gBACvE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAChD,IAAI,CAAC,KAAK,mCAAmC;wBAAE,OAAO,KAAK,CAAC;oBAC5D,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,mCAAmC,CAAC;oBAC3C,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,mCAAmC,CAAC;qBACpD;iBACF,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,sBAAsB,CAAC;gBACzC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;gBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,iEAAiE;gBACjE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACzD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;gBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,sGAAsG;gBACtG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACnC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAc,CAAC;oBACjD,CAAC;oBACD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAc,CAAC;gBAClD,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC;iBAC9D,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAElD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBACzD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAa,CACjD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,KAAK,wBAAwB;wBAAE,OAAO,sBAAsB,CAAC;oBAClE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,wBAAwB,CAAC;iBACvD,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9D,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,gBAAgB,CAA0B,CAAC;gBACnE,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBAC7C,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC;iBAClD,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAChD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,KAAK,eAAe;wBAAE,OAAO,eAAe,CAAC;oBAClD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC/C,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAChD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC;iBACF,EACD,aAAa,CACd,CAAC;gBAEF,oEAAoE;gBACpE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;gBAEjD,0DAA0D;gBAC1D,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACvD,MAAM,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YAChE,IAAI,GAAG,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9C,6CAA6C;gBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAEjC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,MAAM,CAAC,IAAI,CACjB,GAAG,SAAS,UAAU,SAAS,gBAAgB,SAAS,cAAc,CACvE;iBACqD,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;aAC+B,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,YAAY,CAAC,CAAC;QAElD,uCAAuC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|