@google/gemini-cli-core 0.36.0 → 0.37.0-preview.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (480) hide show
  1. package/dist/docs/CONTRIBUTING.md +10 -7
  2. package/dist/docs/assets/theme-tokyonight-dark.png +0 -0
  3. package/dist/docs/changelogs/index.md +24 -0
  4. package/dist/docs/changelogs/latest.md +366 -459
  5. package/dist/docs/changelogs/preview.md +362 -356
  6. package/dist/docs/cli/acp-mode.md +126 -0
  7. package/dist/docs/cli/cli-reference.md +1 -1
  8. package/dist/docs/cli/notifications.md +5 -5
  9. package/dist/docs/cli/plan-mode.md +22 -11
  10. package/dist/docs/cli/sandbox.md +1 -1
  11. package/dist/docs/cli/settings.md +14 -13
  12. package/dist/docs/cli/themes.md +5 -0
  13. package/dist/docs/core/index.md +2 -2
  14. package/dist/docs/core/subagents.md +134 -23
  15. package/dist/docs/get-started/gemini-3.md +1 -1
  16. package/dist/docs/get-started/index.md +127 -1
  17. package/dist/docs/ide-integration/index.md +99 -24
  18. package/dist/docs/index.md +0 -2
  19. package/dist/docs/redirects.json +1 -0
  20. package/dist/docs/reference/commands.md +1 -3
  21. package/dist/docs/reference/configuration.md +182 -91
  22. package/dist/docs/reference/keyboard-shortcuts.md +14 -6
  23. package/dist/docs/reference/policy-engine.md +36 -31
  24. package/dist/docs/reference/tools.md +56 -23
  25. package/dist/docs/resources/quota-and-pricing.md +23 -9
  26. package/dist/docs/sidebar.json +11 -4
  27. package/dist/docs/tools/planning.md +6 -4
  28. package/dist/google-gemini-cli-core-0.37.0-preview.0.tgz +0 -0
  29. package/dist/src/agents/agentLoader.d.ts +12 -12
  30. package/dist/src/agents/agentLoader.js +1 -0
  31. package/dist/src/agents/agentLoader.js.map +1 -1
  32. package/dist/src/agents/browser/automationOverlay.js +2 -10
  33. package/dist/src/agents/browser/automationOverlay.js.map +1 -1
  34. package/dist/src/agents/browser/browserAgentDefinition.js +10 -3
  35. package/dist/src/agents/browser/browserAgentDefinition.js.map +1 -1
  36. package/dist/src/agents/browser/browserAgentFactory.d.ts +4 -4
  37. package/dist/src/agents/browser/browserAgentFactory.js +15 -29
  38. package/dist/src/agents/browser/browserAgentFactory.js.map +1 -1
  39. package/dist/src/agents/browser/browserAgentFactory.test.js +41 -24
  40. package/dist/src/agents/browser/browserAgentFactory.test.js.map +1 -1
  41. package/dist/src/agents/browser/browserAgentInvocation.d.ts +1 -0
  42. package/dist/src/agents/browser/browserAgentInvocation.js +60 -27
  43. package/dist/src/agents/browser/browserAgentInvocation.js.map +1 -1
  44. package/dist/src/agents/browser/browserAgentInvocation.test.js +59 -5
  45. package/dist/src/agents/browser/browserAgentInvocation.test.js.map +1 -1
  46. package/dist/src/agents/browser/browserManager.d.ts +51 -8
  47. package/dist/src/agents/browser/browserManager.js +242 -70
  48. package/dist/src/agents/browser/browserManager.js.map +1 -1
  49. package/dist/src/agents/browser/browserManager.test.js +384 -17
  50. package/dist/src/agents/browser/browserManager.test.js.map +1 -1
  51. package/dist/src/agents/browser/inputBlocker.d.ts +4 -4
  52. package/dist/src/agents/browser/inputBlocker.js +8 -18
  53. package/dist/src/agents/browser/inputBlocker.js.map +1 -1
  54. package/dist/src/agents/browser/inputBlocker.test.js +31 -3
  55. package/dist/src/agents/browser/inputBlocker.test.js.map +1 -1
  56. package/dist/src/agents/browser/mcpToolWrapper.d.ts +1 -1
  57. package/dist/src/agents/browser/mcpToolWrapper.js +9 -6
  58. package/dist/src/agents/browser/mcpToolWrapper.js.map +1 -1
  59. package/dist/src/agents/browser/mcpToolWrapper.test.js +2 -2
  60. package/dist/src/agents/browser/mcpToolWrapper.test.js.map +1 -1
  61. package/dist/src/agents/browser/snapshotSuperseder.d.ts +31 -0
  62. package/dist/src/agents/browser/snapshotSuperseder.js +101 -0
  63. package/dist/src/agents/browser/snapshotSuperseder.js.map +1 -0
  64. package/dist/src/agents/browser/snapshotSuperseder.test.js +158 -0
  65. package/dist/src/agents/browser/snapshotSuperseder.test.js.map +1 -0
  66. package/dist/src/agents/local-executor.d.ts +4 -0
  67. package/dist/src/agents/local-executor.js +46 -19
  68. package/dist/src/agents/local-executor.js.map +1 -1
  69. package/dist/src/agents/local-executor.test.js +118 -18
  70. package/dist/src/agents/local-executor.test.js.map +1 -1
  71. package/dist/src/agents/local-invocation.d.ts +1 -0
  72. package/dist/src/agents/local-invocation.js +19 -9
  73. package/dist/src/agents/local-invocation.js.map +1 -1
  74. package/dist/src/agents/local-invocation.test.js +24 -0
  75. package/dist/src/agents/local-invocation.test.js.map +1 -1
  76. package/dist/src/agents/registry.js +16 -1
  77. package/dist/src/agents/registry.js.map +1 -1
  78. package/dist/src/agents/registry.test.js +67 -0
  79. package/dist/src/agents/registry.test.js.map +1 -1
  80. package/dist/src/agents/types.d.ts +9 -0
  81. package/dist/src/agents/types.js.map +1 -1
  82. package/dist/src/code_assist/oauth2.js +8 -3
  83. package/dist/src/code_assist/oauth2.js.map +1 -1
  84. package/dist/src/code_assist/oauth2.test.js +57 -0
  85. package/dist/src/code_assist/oauth2.test.js.map +1 -1
  86. package/dist/src/code_assist/setup.js +5 -2
  87. package/dist/src/code_assist/setup.js.map +1 -1
  88. package/dist/src/code_assist/setup.test.js +27 -1
  89. package/dist/src/code_assist/setup.test.js.map +1 -1
  90. package/dist/src/code_assist/types.d.ts +80 -80
  91. package/dist/src/config/agent-loop-context.d.ts +2 -0
  92. package/dist/src/config/config.d.ts +81 -16
  93. package/dist/src/config/config.js +146 -50
  94. package/dist/src/config/config.js.map +1 -1
  95. package/dist/src/config/config.test.js +89 -2
  96. package/dist/src/config/config.test.js.map +1 -1
  97. package/dist/src/config/defaultModelConfigs.js +9 -0
  98. package/dist/src/config/defaultModelConfigs.js.map +1 -1
  99. package/dist/src/config/memory.d.ts +1 -0
  100. package/dist/src/config/memory.js +6 -0
  101. package/dist/src/config/memory.js.map +1 -1
  102. package/dist/src/config/storage.d.ts +1 -0
  103. package/dist/src/config/storage.js +4 -0
  104. package/dist/src/config/storage.js.map +1 -1
  105. package/dist/src/config/storage.test.js +5 -0
  106. package/dist/src/config/storage.test.js.map +1 -1
  107. package/dist/src/config/topicState.d.ts +21 -0
  108. package/dist/src/config/topicState.js +41 -0
  109. package/dist/src/config/topicState.js.map +1 -0
  110. package/dist/src/confirmation-bus/types.d.ts +11 -2
  111. package/dist/src/confirmation-bus/types.js +2 -0
  112. package/dist/src/confirmation-bus/types.js.map +1 -1
  113. package/dist/src/context/agentHistoryProvider.d.ts +45 -0
  114. package/dist/src/context/agentHistoryProvider.js +298 -0
  115. package/dist/src/context/agentHistoryProvider.js.map +1 -0
  116. package/dist/src/context/agentHistoryProvider.test.d.ts +6 -0
  117. package/dist/src/context/agentHistoryProvider.test.js +394 -0
  118. package/dist/src/context/agentHistoryProvider.test.js.map +1 -0
  119. package/dist/src/context/chatCompressionService.js.map +1 -0
  120. package/dist/src/context/chatCompressionService.test.js.map +1 -0
  121. package/dist/src/{services → context}/contextManager.d.ts +2 -0
  122. package/dist/src/{services → context}/contextManager.js +18 -9
  123. package/dist/src/context/contextManager.js.map +1 -0
  124. package/dist/src/{services → context}/contextManager.test.js +21 -6
  125. package/dist/src/context/contextManager.test.js.map +1 -0
  126. package/dist/src/context/toolDistillationService.d.ts +38 -0
  127. package/dist/src/context/toolDistillationService.js +170 -0
  128. package/dist/src/context/toolDistillationService.js.map +1 -0
  129. package/dist/src/context/toolDistillationService.test.d.ts +6 -0
  130. package/dist/src/context/toolDistillationService.test.js +83 -0
  131. package/dist/src/context/toolDistillationService.test.js.map +1 -0
  132. package/dist/src/{services → context}/toolOutputMaskingService.d.ts +2 -2
  133. package/dist/src/{services → context}/toolOutputMaskingService.js +7 -7
  134. package/dist/src/context/toolOutputMaskingService.js.map +1 -0
  135. package/dist/src/context/toolOutputMaskingService.test.d.ts +6 -0
  136. package/dist/src/{services → context}/toolOutputMaskingService.test.js +4 -5
  137. package/dist/src/context/toolOutputMaskingService.test.js.map +1 -0
  138. package/dist/src/context/truncation.d.ts +26 -0
  139. package/dist/src/context/truncation.js +102 -0
  140. package/dist/src/context/truncation.js.map +1 -0
  141. package/dist/src/core/client.d.ts +3 -1
  142. package/dist/src/core/client.js +23 -13
  143. package/dist/src/core/client.js.map +1 -1
  144. package/dist/src/core/client.test.js +29 -34
  145. package/dist/src/core/client.test.js.map +1 -1
  146. package/dist/src/core/contentGenerator.d.ts +0 -1
  147. package/dist/src/core/contentGenerator.js +2 -28
  148. package/dist/src/core/contentGenerator.js.map +1 -1
  149. package/dist/src/core/contentGenerator.test.js +1 -101
  150. package/dist/src/core/contentGenerator.test.js.map +1 -1
  151. package/dist/src/core/geminiChat.js +4 -5
  152. package/dist/src/core/geminiChat.js.map +1 -1
  153. package/dist/src/core/geminiChat.test.js +71 -18
  154. package/dist/src/core/geminiChat.test.js.map +1 -1
  155. package/dist/src/core/prompts-substitution.test.js +5 -0
  156. package/dist/src/core/prompts-substitution.test.js.map +1 -1
  157. package/dist/src/core/prompts.test.js +3 -0
  158. package/dist/src/core/prompts.test.js.map +1 -1
  159. package/dist/src/generated/git-commit.d.ts +2 -2
  160. package/dist/src/generated/git-commit.js +2 -2
  161. package/dist/src/generated/git-commit.js.map +1 -1
  162. package/dist/src/index.d.ts +7 -3
  163. package/dist/src/index.js +9 -5
  164. package/dist/src/index.js.map +1 -1
  165. package/dist/src/policy/config.d.ts +1 -1
  166. package/dist/src/policy/config.js +61 -24
  167. package/dist/src/policy/config.js.map +1 -1
  168. package/dist/src/policy/persistence.test.js +42 -0
  169. package/dist/src/policy/persistence.test.js.map +1 -1
  170. package/dist/src/policy/policies/discovered.toml +7 -0
  171. package/dist/src/policy/policies/non-interactive.toml +7 -0
  172. package/dist/src/policy/policies/plan.toml +25 -0
  173. package/dist/src/policy/policies/read-only.toml +6 -0
  174. package/dist/src/policy/policies/sandbox-default.toml +3 -2
  175. package/dist/src/policy/policies/write.toml +21 -0
  176. package/dist/src/policy/policies/yolo.toml +1 -1
  177. package/dist/src/policy/policy-engine.d.ts +2 -4
  178. package/dist/src/policy/policy-engine.js +24 -37
  179. package/dist/src/policy/policy-engine.js.map +1 -1
  180. package/dist/src/policy/policy-engine.test.js +107 -29
  181. package/dist/src/policy/policy-engine.test.js.map +1 -1
  182. package/dist/src/policy/topic-policy.test.d.ts +6 -0
  183. package/dist/src/policy/topic-policy.test.js +48 -0
  184. package/dist/src/policy/topic-policy.test.js.map +1 -0
  185. package/dist/src/policy/types.d.ts +9 -6
  186. package/dist/src/policy/types.js +11 -0
  187. package/dist/src/policy/types.js.map +1 -1
  188. package/dist/src/prompts/promptProvider.js +20 -4
  189. package/dist/src/prompts/promptProvider.js.map +1 -1
  190. package/dist/src/prompts/promptProvider.test.js +84 -1
  191. package/dist/src/prompts/promptProvider.test.js.map +1 -1
  192. package/dist/src/prompts/snippets-memory-manager.test.js +1 -1
  193. package/dist/src/prompts/snippets-memory-manager.test.js.map +1 -1
  194. package/dist/src/prompts/snippets.d.ts +3 -4
  195. package/dist/src/prompts/snippets.js +33 -51
  196. package/dist/src/prompts/snippets.js.map +1 -1
  197. package/dist/src/prompts/snippets.legacy.d.ts +6 -4
  198. package/dist/src/prompts/snippets.legacy.js +32 -7
  199. package/dist/src/prompts/snippets.legacy.js.map +1 -1
  200. package/dist/src/sandbox/linux/LinuxSandboxManager.d.ts +11 -1
  201. package/dist/src/sandbox/linux/LinuxSandboxManager.js +261 -27
  202. package/dist/src/sandbox/linux/LinuxSandboxManager.js.map +1 -1
  203. package/dist/src/sandbox/linux/LinuxSandboxManager.test.js +430 -125
  204. package/dist/src/sandbox/linux/LinuxSandboxManager.test.js.map +1 -1
  205. package/dist/src/sandbox/macos/MacOsSandboxManager.d.ts +7 -22
  206. package/dist/src/sandbox/macos/MacOsSandboxManager.js +58 -57
  207. package/dist/src/sandbox/macos/MacOsSandboxManager.js.map +1 -1
  208. package/dist/src/sandbox/macos/MacOsSandboxManager.test.js +148 -103
  209. package/dist/src/sandbox/macos/MacOsSandboxManager.test.js.map +1 -1
  210. package/dist/src/sandbox/macos/baseProfile.d.ts +1 -1
  211. package/dist/src/sandbox/macos/baseProfile.js +0 -6
  212. package/dist/src/sandbox/macos/baseProfile.js.map +1 -1
  213. package/dist/src/sandbox/macos/seatbeltArgsBuilder.d.ts +10 -10
  214. package/dist/src/sandbox/macos/seatbeltArgsBuilder.js +80 -92
  215. package/dist/src/sandbox/macos/seatbeltArgsBuilder.js.map +1 -1
  216. package/dist/src/sandbox/macos/seatbeltArgsBuilder.test.js +135 -99
  217. package/dist/src/sandbox/macos/seatbeltArgsBuilder.test.js.map +1 -1
  218. package/dist/src/sandbox/{macos → utils}/commandSafety.d.ts +11 -0
  219. package/dist/src/sandbox/{macos → utils}/commandSafety.js +47 -14
  220. package/dist/src/sandbox/utils/commandSafety.js.map +1 -0
  221. package/dist/src/sandbox/utils/commandUtils.d.ts +9 -0
  222. package/dist/src/sandbox/utils/commandUtils.js +57 -0
  223. package/dist/src/sandbox/utils/commandUtils.js.map +1 -0
  224. package/dist/src/sandbox/utils/fsUtils.d.ts +11 -0
  225. package/dist/src/sandbox/utils/fsUtils.js +82 -0
  226. package/dist/src/sandbox/utils/fsUtils.js.map +1 -0
  227. package/dist/src/sandbox/utils/sandboxDenialUtils.d.ts +12 -0
  228. package/dist/src/sandbox/utils/sandboxDenialUtils.js +68 -0
  229. package/dist/src/sandbox/utils/sandboxDenialUtils.js.map +1 -0
  230. package/dist/src/sandbox/utils/sandboxDenialUtils.test.d.ts +6 -0
  231. package/dist/src/sandbox/utils/sandboxDenialUtils.test.js +37 -0
  232. package/dist/src/sandbox/utils/sandboxDenialUtils.test.js.map +1 -0
  233. package/dist/src/sandbox/utils/sandboxReadWriteUtils.d.ts +5 -0
  234. package/dist/src/sandbox/utils/sandboxReadWriteUtils.js +60 -0
  235. package/dist/src/sandbox/utils/sandboxReadWriteUtils.js.map +1 -0
  236. package/dist/src/sandbox/windows/GeminiSandbox.cs +257 -216
  237. package/dist/src/sandbox/windows/WindowsSandboxManager.d.ts +12 -2
  238. package/dist/src/sandbox/windows/WindowsSandboxManager.js +250 -38
  239. package/dist/src/sandbox/windows/WindowsSandboxManager.js.map +1 -1
  240. package/dist/src/sandbox/windows/WindowsSandboxManager.test.js +326 -9
  241. package/dist/src/sandbox/windows/WindowsSandboxManager.test.js.map +1 -1
  242. package/dist/src/sandbox/windows/commandSafety.d.ts +19 -0
  243. package/dist/src/sandbox/windows/commandSafety.js +128 -0
  244. package/dist/src/sandbox/windows/commandSafety.js.map +1 -0
  245. package/dist/src/sandbox/windows/commandSafety.test.d.ts +6 -0
  246. package/dist/src/sandbox/windows/commandSafety.test.js +42 -0
  247. package/dist/src/sandbox/windows/commandSafety.test.js.map +1 -0
  248. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.d.ts +12 -0
  249. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.js +68 -0
  250. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.js.map +1 -0
  251. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.d.ts +6 -0
  252. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.js +68 -0
  253. package/dist/src/sandbox/windows/windowsSandboxDenialUtils.test.js.map +1 -0
  254. package/dist/src/scheduler/policy.js +20 -5
  255. package/dist/src/scheduler/policy.js.map +1 -1
  256. package/dist/src/scheduler/policy.test.js +80 -0
  257. package/dist/src/scheduler/policy.test.js.map +1 -1
  258. package/dist/src/scheduler/scheduler.js +12 -2
  259. package/dist/src/scheduler/scheduler.js.map +1 -1
  260. package/dist/src/scheduler/scheduler.test.js +52 -0
  261. package/dist/src/scheduler/scheduler.test.js.map +1 -1
  262. package/dist/src/scheduler/scheduler_hooks.test.js +1 -0
  263. package/dist/src/scheduler/scheduler_hooks.test.js.map +1 -1
  264. package/dist/src/scheduler/state-manager.js +1 -1
  265. package/dist/src/scheduler/state-manager.js.map +1 -1
  266. package/dist/src/scheduler/state-manager.test.js +10 -0
  267. package/dist/src/scheduler/state-manager.test.js.map +1 -1
  268. package/dist/src/scheduler/tool-executor.js +7 -2
  269. package/dist/src/scheduler/tool-executor.js.map +1 -1
  270. package/dist/src/scheduler/tool-executor.test.js +38 -0
  271. package/dist/src/scheduler/tool-executor.test.js.map +1 -1
  272. package/dist/src/scheduler/types.d.ts +4 -2
  273. package/dist/src/services/chatRecordingService.d.ts +1 -13
  274. package/dist/src/services/chatRecordingService.js +45 -46
  275. package/dist/src/services/chatRecordingService.js.map +1 -1
  276. package/dist/src/services/chatRecordingService.test.js +79 -10
  277. package/dist/src/services/chatRecordingService.test.js.map +1 -1
  278. package/dist/src/services/executionLifecycleService.d.ts +43 -6
  279. package/dist/src/services/executionLifecycleService.js +49 -12
  280. package/dist/src/services/executionLifecycleService.js.map +1 -1
  281. package/dist/src/services/executionLifecycleService.test.js +157 -3
  282. package/dist/src/services/executionLifecycleService.test.js.map +1 -1
  283. package/dist/src/services/fileDiscoveryService.d.ts +17 -2
  284. package/dist/src/services/fileDiscoveryService.js +84 -20
  285. package/dist/src/services/fileDiscoveryService.js.map +1 -1
  286. package/dist/src/services/fileDiscoveryService.test.js +67 -1
  287. package/dist/src/services/fileDiscoveryService.test.js.map +1 -1
  288. package/dist/src/services/modelConfigService.d.ts +11 -0
  289. package/dist/src/services/modelConfigService.js +67 -0
  290. package/dist/src/services/modelConfigService.js.map +1 -1
  291. package/dist/src/services/modelConfigService.test.js +30 -0
  292. package/dist/src/services/modelConfigService.test.js.map +1 -1
  293. package/dist/src/services/sandboxManager.d.ts +90 -8
  294. package/dist/src/services/sandboxManager.integration.test.js +438 -0
  295. package/dist/src/services/sandboxManager.integration.test.js.map +1 -0
  296. package/dist/src/services/sandboxManager.js +156 -13
  297. package/dist/src/services/sandboxManager.js.map +1 -1
  298. package/dist/src/services/sandboxManager.test.js +373 -117
  299. package/dist/src/services/sandboxManager.test.js.map +1 -1
  300. package/dist/src/services/sandboxManagerFactory.d.ts +2 -3
  301. package/dist/src/services/sandboxManagerFactory.js +10 -17
  302. package/dist/src/services/sandboxManagerFactory.js.map +1 -1
  303. package/dist/src/services/sandboxedFileSystemService.d.ts +1 -0
  304. package/dist/src/services/sandboxedFileSystemService.js +32 -3
  305. package/dist/src/services/sandboxedFileSystemService.js.map +1 -1
  306. package/dist/src/services/sandboxedFileSystemService.test.js +83 -12
  307. package/dist/src/services/sandboxedFileSystemService.test.js.map +1 -1
  308. package/dist/src/services/shellExecutionService.d.ts +2 -0
  309. package/dist/src/services/shellExecutionService.js +45 -16
  310. package/dist/src/services/shellExecutionService.js.map +1 -1
  311. package/dist/src/services/shellExecutionService.test.js +5 -4
  312. package/dist/src/services/shellExecutionService.test.js.map +1 -1
  313. package/dist/src/services/test-data/resolved-aliases-retry.golden.json +4 -0
  314. package/dist/src/services/test-data/resolved-aliases.golden.json +4 -0
  315. package/dist/src/services/types.d.ts +14 -0
  316. package/dist/src/services/types.js +7 -0
  317. package/dist/src/services/types.js.map +1 -0
  318. package/dist/src/telemetry/clearcut-logger/clearcut-logger.js +6 -0
  319. package/dist/src/telemetry/clearcut-logger/clearcut-logger.js.map +1 -1
  320. package/dist/src/telemetry/clearcut-logger/clearcut-logger.test.js +5 -1
  321. package/dist/src/telemetry/clearcut-logger/clearcut-logger.test.js.map +1 -1
  322. package/dist/src/telemetry/clearcut-logger/event-metadata-key.d.ts +2 -1
  323. package/dist/src/telemetry/clearcut-logger/event-metadata-key.js +3 -1
  324. package/dist/src/telemetry/clearcut-logger/event-metadata-key.js.map +1 -1
  325. package/dist/src/telemetry/loggers.js +1 -1
  326. package/dist/src/telemetry/loggers.js.map +1 -1
  327. package/dist/src/telemetry/loggers.test.js +8 -3
  328. package/dist/src/telemetry/loggers.test.js.map +1 -1
  329. package/dist/src/telemetry/metrics.d.ts +10 -1
  330. package/dist/src/telemetry/metrics.js +19 -4
  331. package/dist/src/telemetry/metrics.js.map +1 -1
  332. package/dist/src/telemetry/metrics.test.js +44 -0
  333. package/dist/src/telemetry/metrics.test.js.map +1 -1
  334. package/dist/src/telemetry/types.d.ts +3 -3
  335. package/dist/src/telemetry/types.js +9 -4
  336. package/dist/src/telemetry/types.js.map +1 -1
  337. package/dist/src/test-utils/mock-message-bus.d.ts +1 -1
  338. package/dist/src/test-utils/mock-message-bus.js +1 -1
  339. package/dist/src/test-utils/mock-message-bus.js.map +1 -1
  340. package/dist/src/tools/definitions/base-declarations.d.ts +6 -0
  341. package/dist/src/tools/definitions/base-declarations.js +7 -0
  342. package/dist/src/tools/definitions/base-declarations.js.map +1 -1
  343. package/dist/src/tools/definitions/coreTools.d.ts +2 -1
  344. package/dist/src/tools/definitions/coreTools.js +9 -3
  345. package/dist/src/tools/definitions/coreTools.js.map +1 -1
  346. package/dist/src/tools/definitions/dynamic-declaration-helpers.d.ts +4 -0
  347. package/dist/src/tools/definitions/dynamic-declaration-helpers.js +29 -2
  348. package/dist/src/tools/definitions/dynamic-declaration-helpers.js.map +1 -1
  349. package/dist/src/tools/definitions/model-family-sets/default-legacy.js +11 -6
  350. package/dist/src/tools/definitions/model-family-sets/default-legacy.js.map +1 -1
  351. package/dist/src/tools/definitions/model-family-sets/gemini-3.js +10 -4
  352. package/dist/src/tools/definitions/model-family-sets/gemini-3.js.map +1 -1
  353. package/dist/src/tools/definitions/trackerTools.js +3 -3
  354. package/dist/src/tools/definitions/trackerTools.js.map +1 -1
  355. package/dist/src/tools/definitions/types.d.ts +1 -0
  356. package/dist/src/tools/enter-plan-mode.js +15 -0
  357. package/dist/src/tools/enter-plan-mode.js.map +1 -1
  358. package/dist/src/tools/enter-plan-mode.test.js +25 -0
  359. package/dist/src/tools/enter-plan-mode.test.js.map +1 -1
  360. package/dist/src/tools/grep-utils.d.ts +2 -1
  361. package/dist/src/tools/grep-utils.js +22 -3
  362. package/dist/src/tools/grep-utils.js.map +1 -1
  363. package/dist/src/tools/grep.js +16 -3
  364. package/dist/src/tools/grep.js.map +1 -1
  365. package/dist/src/tools/grep.test.js +34 -6
  366. package/dist/src/tools/grep.test.js.map +1 -1
  367. package/dist/src/tools/ls.js +6 -4
  368. package/dist/src/tools/ls.js.map +1 -1
  369. package/dist/src/tools/ls.test.js +22 -7
  370. package/dist/src/tools/ls.test.js.map +1 -1
  371. package/dist/src/tools/mcp-client-manager.js +6 -3
  372. package/dist/src/tools/mcp-client-manager.js.map +1 -1
  373. package/dist/src/tools/mcp-client-manager.test.js +35 -0
  374. package/dist/src/tools/mcp-client-manager.test.js.map +1 -1
  375. package/dist/src/tools/memoryTool.d.ts +9 -2
  376. package/dist/src/tools/memoryTool.js +39 -15
  377. package/dist/src/tools/memoryTool.js.map +1 -1
  378. package/dist/src/tools/memoryTool.test.js +61 -2
  379. package/dist/src/tools/memoryTool.test.js.map +1 -1
  380. package/dist/src/tools/read-many-files.js +12 -4
  381. package/dist/src/tools/read-many-files.js.map +1 -1
  382. package/dist/src/tools/read-many-files.test.js +17 -17
  383. package/dist/src/tools/read-many-files.test.js.map +1 -1
  384. package/dist/src/tools/ripGrep.js +14 -1
  385. package/dist/src/tools/ripGrep.js.map +1 -1
  386. package/dist/src/tools/ripGrep.test.js +9 -9
  387. package/dist/src/tools/ripGrep.test.js.map +1 -1
  388. package/dist/src/tools/shell.d.ts +10 -0
  389. package/dist/src/tools/shell.js +97 -124
  390. package/dist/src/tools/shell.js.map +1 -1
  391. package/dist/src/tools/shell.test.js +22 -3
  392. package/dist/src/tools/shell.test.js.map +1 -1
  393. package/dist/src/tools/tool-names.d.ts +4 -4
  394. package/dist/src/tools/tool-names.js +5 -3
  395. package/dist/src/tools/tool-names.js.map +1 -1
  396. package/dist/src/tools/tool-registry.js +11 -1
  397. package/dist/src/tools/tool-registry.js.map +1 -1
  398. package/dist/src/tools/tool-registry.test.js +43 -1
  399. package/dist/src/tools/tool-registry.test.js.map +1 -1
  400. package/dist/src/tools/tools.d.ts +12 -1
  401. package/dist/src/tools/tools.js +15 -0
  402. package/dist/src/tools/tools.js.map +1 -1
  403. package/dist/src/tools/tools.test.js +42 -1
  404. package/dist/src/tools/tools.test.js.map +1 -1
  405. package/dist/src/tools/topicTool.d.ts +29 -0
  406. package/dist/src/tools/topicTool.js +72 -0
  407. package/dist/src/tools/topicTool.js.map +1 -0
  408. package/dist/src/tools/topicTool.test.d.ts +6 -0
  409. package/dist/src/tools/topicTool.test.js +105 -0
  410. package/dist/src/tools/topicTool.test.js.map +1 -0
  411. package/dist/src/tools/web-fetch.js +38 -20
  412. package/dist/src/tools/web-fetch.js.map +1 -1
  413. package/dist/src/tools/web-fetch.test.js +28 -0
  414. package/dist/src/tools/web-fetch.test.js.map +1 -1
  415. package/dist/src/utils/checkpointUtils.d.ts +4 -4
  416. package/dist/src/utils/errors.d.ts +3 -0
  417. package/dist/src/utils/errors.js +28 -6
  418. package/dist/src/utils/errors.js.map +1 -1
  419. package/dist/src/utils/errors.test.js +23 -0
  420. package/dist/src/utils/errors.test.js.map +1 -1
  421. package/dist/src/utils/getFolderStructure.js +1 -1
  422. package/dist/src/utils/getFolderStructure.js.map +1 -1
  423. package/dist/src/utils/gitIgnoreParser.d.ts +2 -2
  424. package/dist/src/utils/gitIgnoreParser.js +28 -50
  425. package/dist/src/utils/gitIgnoreParser.js.map +1 -1
  426. package/dist/src/utils/gitIgnoreParser.test.js +51 -185
  427. package/dist/src/utils/gitIgnoreParser.test.js.map +1 -1
  428. package/dist/src/utils/ignoreFileParser.d.ts +2 -2
  429. package/dist/src/utils/ignoreFileParser.js +6 -17
  430. package/dist/src/utils/ignoreFileParser.js.map +1 -1
  431. package/dist/src/utils/ignoreFileParser.test.js +40 -132
  432. package/dist/src/utils/ignoreFileParser.test.js.map +1 -1
  433. package/dist/src/utils/ignorePathUtils.d.ts +11 -0
  434. package/dist/src/utils/ignorePathUtils.js +39 -0
  435. package/dist/src/utils/ignorePathUtils.js.map +1 -0
  436. package/dist/src/utils/ignorePathUtils.test.d.ts +6 -0
  437. package/dist/src/utils/ignorePathUtils.test.js +70 -0
  438. package/dist/src/utils/ignorePathUtils.test.js.map +1 -0
  439. package/dist/src/utils/memoryDiscovery.d.ts +6 -4
  440. package/dist/src/utils/memoryDiscovery.js +66 -41
  441. package/dist/src/utils/memoryDiscovery.js.map +1 -1
  442. package/dist/src/utils/memoryDiscovery.test.js +40 -0
  443. package/dist/src/utils/memoryDiscovery.test.js.map +1 -1
  444. package/dist/src/utils/memoryImportProcessor.d.ts +1 -1
  445. package/dist/src/utils/memoryImportProcessor.js +24 -15
  446. package/dist/src/utils/memoryImportProcessor.js.map +1 -1
  447. package/dist/src/utils/sessionOperations.d.ts +19 -0
  448. package/dist/src/utils/sessionOperations.js +101 -0
  449. package/dist/src/utils/sessionOperations.js.map +1 -0
  450. package/dist/src/utils/sessionOperations.test.d.ts +6 -0
  451. package/dist/src/utils/sessionOperations.test.js +92 -0
  452. package/dist/src/utils/sessionOperations.test.js.map +1 -0
  453. package/dist/src/utils/shell-utils.d.ts +15 -0
  454. package/dist/src/utils/shell-utils.js +43 -2
  455. package/dist/src/utils/shell-utils.js.map +1 -1
  456. package/dist/src/utils/textUtils.d.ts +8 -0
  457. package/dist/src/utils/textUtils.js +16 -0
  458. package/dist/src/utils/textUtils.js.map +1 -1
  459. package/dist/src/utils/tokenCalculation.d.ts +2 -0
  460. package/dist/src/utils/tokenCalculation.js +2 -2
  461. package/dist/src/utils/tokenCalculation.js.map +1 -1
  462. package/dist/tsconfig.tsbuildinfo +1 -1
  463. package/package.json +1 -1
  464. package/dist/docs/get-started/examples.md +0 -141
  465. package/dist/src/sandbox/macos/MacOsSandboxManager.integration.test.js +0 -164
  466. package/dist/src/sandbox/macos/MacOsSandboxManager.integration.test.js.map +0 -1
  467. package/dist/src/sandbox/macos/commandSafety.js.map +0 -1
  468. package/dist/src/services/chatCompressionService.js.map +0 -1
  469. package/dist/src/services/chatCompressionService.test.js.map +0 -1
  470. package/dist/src/services/contextManager.js.map +0 -1
  471. package/dist/src/services/contextManager.test.js.map +0 -1
  472. package/dist/src/services/toolOutputMaskingService.js.map +0 -1
  473. package/dist/src/services/toolOutputMaskingService.test.js.map +0 -1
  474. /package/dist/src/{services/toolOutputMaskingService.test.d.ts → agents/browser/snapshotSuperseder.test.d.ts} +0 -0
  475. /package/dist/src/{services → context}/chatCompressionService.d.ts +0 -0
  476. /package/dist/src/{services → context}/chatCompressionService.js +0 -0
  477. /package/dist/src/{services → context}/chatCompressionService.test.d.ts +0 -0
  478. /package/dist/src/{services → context}/chatCompressionService.test.js +0 -0
  479. /package/dist/src/{services → context}/contextManager.test.d.ts +0 -0
  480. /package/dist/src/{sandbox/macos/MacOsSandboxManager.integration.test.d.ts → services/sandboxManager.integration.test.d.ts} +0 -0
@@ -3,9 +3,11 @@
3
3
  * Copyright 2026 Google LLC
4
4
  * SPDX-License-Identifier: Apache-2.0
5
5
  */
6
- import { describe, it, expect, vi, beforeEach } from 'vitest';
6
+ import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
7
7
  import { LinuxSandboxManager } from './LinuxSandboxManager.js';
8
8
  import fs from 'node:fs';
9
+ import path from 'node:path';
10
+ import * as shellUtils from '../../utils/shell-utils.js';
9
11
  vi.mock('node:fs', async () => {
10
12
  const actual = await vi.importActual('node:fs');
11
13
  return {
@@ -15,17 +17,38 @@ vi.mock('node:fs', async () => {
15
17
  ...actual.default,
16
18
  existsSync: vi.fn(() => true),
17
19
  realpathSync: vi.fn((p) => p.toString()),
20
+ statSync: vi.fn(() => ({ isDirectory: () => true })),
18
21
  mkdirSync: vi.fn(),
22
+ mkdtempSync: vi.fn((prefix) => prefix + 'mocked'),
19
23
  openSync: vi.fn(),
20
24
  closeSync: vi.fn(),
21
25
  writeFileSync: vi.fn(),
26
+ readdirSync: vi.fn(() => []),
27
+ chmodSync: vi.fn(),
28
+ unlinkSync: vi.fn(),
29
+ rmSync: vi.fn(),
22
30
  },
23
31
  existsSync: vi.fn(() => true),
24
32
  realpathSync: vi.fn((p) => p.toString()),
33
+ statSync: vi.fn(() => ({ isDirectory: () => true })),
25
34
  mkdirSync: vi.fn(),
35
+ mkdtempSync: vi.fn((prefix) => prefix + 'mocked'),
26
36
  openSync: vi.fn(),
27
37
  closeSync: vi.fn(),
28
38
  writeFileSync: vi.fn(),
39
+ readdirSync: vi.fn(() => []),
40
+ chmodSync: vi.fn(),
41
+ unlinkSync: vi.fn(),
42
+ rmSync: vi.fn(),
43
+ };
44
+ });
45
+ vi.mock('../../utils/shell-utils.js', async (importOriginal) => {
46
+ const actual = await importOriginal();
47
+ return {
48
+ ...actual,
49
+ spawnAsync: vi.fn(() => Promise.resolve({ status: 0, stdout: Buffer.from('') })),
50
+ initializeShellParsers: vi.fn(),
51
+ isStrictlyApproved: vi.fn().mockResolvedValue(true),
29
52
  };
30
53
  });
31
54
  describe('LinuxSandboxManager', () => {
@@ -37,8 +60,12 @@ describe('LinuxSandboxManager', () => {
37
60
  vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
38
61
  manager = new LinuxSandboxManager({ workspace });
39
62
  });
40
- const getBwrapArgs = async (req) => {
41
- const result = await manager.prepareCommand(req);
63
+ afterEach(() => {
64
+ vi.restoreAllMocks();
65
+ });
66
+ const getBwrapArgs = async (req, customManager) => {
67
+ const mgr = customManager || manager;
68
+ const result = await mgr.prepareCommand(req);
42
69
  expect(result.program).toBe('sh');
43
70
  expect(result.args[0]).toBe('-c');
44
71
  expect(result.args[1]).toBe('bpf_path="$1"; shift; exec bwrap "$@" 9< "$bpf_path"');
@@ -46,140 +73,418 @@ describe('LinuxSandboxManager', () => {
46
73
  expect(result.args[3]).toMatch(/gemini-cli-seccomp-.*\.bpf$/);
47
74
  return result.args.slice(4);
48
75
  };
49
- it('correctly outputs bwrap as the program with appropriate isolation flags', async () => {
50
- const bwrapArgs = await getBwrapArgs({
51
- command: 'ls',
52
- args: ['-la'],
53
- cwd: workspace,
54
- env: {},
76
+ describe('prepareCommand', () => {
77
+ it('should correctly format the base command and args', async () => {
78
+ const bwrapArgs = await getBwrapArgs({
79
+ command: 'ls',
80
+ args: ['-la'],
81
+ cwd: workspace,
82
+ env: {},
83
+ });
84
+ expect(bwrapArgs).toEqual([
85
+ '--unshare-all',
86
+ '--new-session',
87
+ '--die-with-parent',
88
+ '--ro-bind',
89
+ '/',
90
+ '/',
91
+ '--dev',
92
+ '/dev',
93
+ '--proc',
94
+ '/proc',
95
+ '--tmpfs',
96
+ '/tmp',
97
+ '--ro-bind-try',
98
+ workspace,
99
+ workspace,
100
+ '--ro-bind',
101
+ `${workspace}/.gitignore`,
102
+ `${workspace}/.gitignore`,
103
+ '--ro-bind',
104
+ `${workspace}/.geminiignore`,
105
+ `${workspace}/.geminiignore`,
106
+ '--ro-bind',
107
+ `${workspace}/.git`,
108
+ `${workspace}/.git`,
109
+ '--seccomp',
110
+ '9',
111
+ '--',
112
+ 'ls',
113
+ '-la',
114
+ ]);
55
115
  });
56
- expect(bwrapArgs).toEqual([
57
- '--unshare-all',
58
- '--new-session',
59
- '--die-with-parent',
60
- '--ro-bind',
61
- '/',
62
- '/',
63
- '--dev',
64
- '/dev',
65
- '--proc',
66
- '/proc',
67
- '--tmpfs',
68
- '/tmp',
69
- '--bind',
70
- workspace,
71
- workspace,
72
- '--ro-bind',
73
- `${workspace}/.gitignore`,
74
- `${workspace}/.gitignore`,
75
- '--ro-bind',
76
- `${workspace}/.geminiignore`,
77
- `${workspace}/.geminiignore`,
78
- '--ro-bind',
79
- `${workspace}/.git`,
80
- `${workspace}/.git`,
81
- '--seccomp',
82
- '9',
83
- '--',
84
- 'ls',
85
- '-la',
86
- ]);
87
- });
88
- it('maps allowedPaths to bwrap binds', async () => {
89
- const bwrapArgs = await getBwrapArgs({
90
- command: 'node',
91
- args: ['script.js'],
92
- cwd: workspace,
93
- env: {},
94
- policy: {
95
- allowedPaths: ['/tmp/cache', '/opt/tools', workspace],
96
- },
116
+ it('binds workspace read-write when readonly is false', async () => {
117
+ const customManager = new LinuxSandboxManager({
118
+ workspace,
119
+ modeConfig: { readonly: false },
120
+ });
121
+ const bwrapArgs = await getBwrapArgs({
122
+ command: 'ls',
123
+ args: [],
124
+ cwd: workspace,
125
+ env: {},
126
+ }, customManager);
127
+ expect(bwrapArgs).toContain('--bind-try');
128
+ expect(bwrapArgs).toContain(workspace);
97
129
  });
98
- // Verify the specific bindings were added correctly
99
- const bindsIndex = bwrapArgs.indexOf('--seccomp');
100
- const binds = bwrapArgs.slice(bwrapArgs.indexOf('--bind'), bindsIndex);
101
- expect(binds).toEqual([
102
- '--bind',
103
- workspace,
104
- workspace,
105
- '--ro-bind',
106
- `${workspace}/.gitignore`,
107
- `${workspace}/.gitignore`,
108
- '--ro-bind',
109
- `${workspace}/.geminiignore`,
110
- `${workspace}/.geminiignore`,
111
- '--ro-bind',
112
- `${workspace}/.git`,
113
- `${workspace}/.git`,
114
- '--bind-try',
115
- '/tmp/cache',
116
- '/tmp/cache',
117
- '--bind-try',
118
- '/opt/tools',
119
- '/opt/tools',
120
- ]);
121
- });
122
- it('protects real paths of governance files if they are symlinks', async () => {
123
- vi.mocked(fs.realpathSync).mockImplementation((p) => {
124
- if (p.toString() === `${workspace}/.gitignore`)
125
- return '/shared/global.gitignore';
126
- return p.toString();
130
+ it('maps network permissions to --share-net', async () => {
131
+ const bwrapArgs = await getBwrapArgs({
132
+ command: 'curl',
133
+ args: [],
134
+ cwd: workspace,
135
+ env: {},
136
+ policy: { additionalPermissions: { network: true } },
137
+ });
138
+ expect(bwrapArgs).toContain('--share-net');
127
139
  });
128
- const bwrapArgs = await getBwrapArgs({
129
- command: 'ls',
130
- args: [],
131
- cwd: workspace,
132
- env: {},
140
+ it('maps explicit write permissions to --bind-try', async () => {
141
+ const bwrapArgs = await getBwrapArgs({
142
+ command: 'touch',
143
+ args: [],
144
+ cwd: workspace,
145
+ env: {},
146
+ policy: {
147
+ additionalPermissions: {
148
+ fileSystem: { write: ['/home/user/workspace/out/dir'] },
149
+ },
150
+ },
151
+ });
152
+ const index = bwrapArgs.indexOf('--bind-try');
153
+ expect(index).not.toBe(-1);
154
+ expect(bwrapArgs[index + 1]).toBe('/home/user/workspace/out/dir');
133
155
  });
134
- expect(bwrapArgs).toContain('--ro-bind');
135
- expect(bwrapArgs).toContain(`${workspace}/.gitignore`);
136
- expect(bwrapArgs).toContain('/shared/global.gitignore');
137
- // Check that both are bound
138
- const gitignoreIndex = bwrapArgs.indexOf(`${workspace}/.gitignore`);
139
- expect(bwrapArgs[gitignoreIndex - 1]).toBe('--ro-bind');
140
- expect(bwrapArgs[gitignoreIndex + 1]).toBe(`${workspace}/.gitignore`);
141
- const realGitignoreIndex = bwrapArgs.indexOf('/shared/global.gitignore');
142
- expect(bwrapArgs[realGitignoreIndex - 1]).toBe('--ro-bind');
143
- expect(bwrapArgs[realGitignoreIndex + 1]).toBe('/shared/global.gitignore');
144
- });
145
- it('touches governance files if they do not exist', async () => {
146
- vi.mocked(fs.existsSync).mockReturnValue(false);
147
- await getBwrapArgs({
148
- command: 'ls',
149
- args: [],
150
- cwd: workspace,
151
- env: {},
156
+ it('rejects overrides in plan mode', async () => {
157
+ const customManager = new LinuxSandboxManager({
158
+ workspace,
159
+ modeConfig: { allowOverrides: false },
160
+ });
161
+ await expect(customManager.prepareCommand({
162
+ command: 'ls',
163
+ args: [],
164
+ cwd: workspace,
165
+ env: {},
166
+ policy: { additionalPermissions: { network: true } },
167
+ })).rejects.toThrow(/Cannot override readonly\/network\/filesystem restrictions in Plan mode/);
168
+ });
169
+ it('should correctly pass through the cwd to the resulting command', async () => {
170
+ const req = {
171
+ command: 'ls',
172
+ args: [],
173
+ cwd: '/different/cwd',
174
+ env: {},
175
+ };
176
+ const result = await manager.prepareCommand(req);
177
+ expect(result.cwd).toBe('/different/cwd');
178
+ });
179
+ it('should apply environment sanitization via the default mechanisms', async () => {
180
+ const req = {
181
+ command: 'test',
182
+ args: [],
183
+ cwd: workspace,
184
+ env: {
185
+ API_KEY: 'secret',
186
+ PATH: '/usr/bin',
187
+ },
188
+ policy: {
189
+ sanitizationConfig: {
190
+ allowedEnvironmentVariables: ['PATH'],
191
+ blockedEnvironmentVariables: ['API_KEY'],
192
+ enableEnvironmentVariableRedaction: true,
193
+ },
194
+ },
195
+ };
196
+ const result = await manager.prepareCommand(req);
197
+ expect(result.env['PATH']).toBe('/usr/bin');
198
+ expect(result.env['API_KEY']).toBeUndefined();
199
+ });
200
+ it('should allow network when networkAccess is true', async () => {
201
+ const bwrapArgs = await getBwrapArgs({
202
+ command: 'ls',
203
+ args: ['-la'],
204
+ cwd: workspace,
205
+ env: {},
206
+ policy: {
207
+ networkAccess: true,
208
+ },
209
+ });
210
+ expect(bwrapArgs).toContain('--share-net');
211
+ });
212
+ describe('governance files', () => {
213
+ it('should ensure governance files exist', async () => {
214
+ vi.mocked(fs.existsSync).mockReturnValue(false);
215
+ await getBwrapArgs({
216
+ command: 'ls',
217
+ args: [],
218
+ cwd: workspace,
219
+ env: {},
220
+ });
221
+ expect(fs.mkdirSync).toHaveBeenCalled();
222
+ expect(fs.openSync).toHaveBeenCalled();
223
+ });
224
+ it('should protect both the symlink and the real path if they differ', async () => {
225
+ vi.mocked(fs.realpathSync).mockImplementation((p) => {
226
+ if (p.toString() === `${workspace}/.gitignore`)
227
+ return '/shared/global.gitignore';
228
+ return p.toString();
229
+ });
230
+ const bwrapArgs = await getBwrapArgs({
231
+ command: 'ls',
232
+ args: [],
233
+ cwd: workspace,
234
+ env: {},
235
+ });
236
+ expect(bwrapArgs).toContain('--ro-bind');
237
+ expect(bwrapArgs).toContain(`${workspace}/.gitignore`);
238
+ expect(bwrapArgs).toContain('/shared/global.gitignore');
239
+ // Check that both are bound
240
+ const gitignoreIndex = bwrapArgs.indexOf(`${workspace}/.gitignore`);
241
+ expect(bwrapArgs[gitignoreIndex - 1]).toBe('--ro-bind');
242
+ expect(bwrapArgs[gitignoreIndex + 1]).toBe(`${workspace}/.gitignore`);
243
+ const realGitignoreIndex = bwrapArgs.indexOf('/shared/global.gitignore');
244
+ expect(bwrapArgs[realGitignoreIndex - 1]).toBe('--ro-bind');
245
+ expect(bwrapArgs[realGitignoreIndex + 1]).toBe('/shared/global.gitignore');
246
+ });
247
+ });
248
+ describe('allowedPaths', () => {
249
+ it('should parameterize allowed paths and normalize them', async () => {
250
+ const bwrapArgs = await getBwrapArgs({
251
+ command: 'node',
252
+ args: ['script.js'],
253
+ cwd: workspace,
254
+ env: {},
255
+ policy: {
256
+ allowedPaths: ['/tmp/cache', '/opt/tools', workspace],
257
+ },
258
+ });
259
+ expect(bwrapArgs).toContain('--bind-try');
260
+ expect(bwrapArgs[bwrapArgs.indexOf('/tmp/cache') - 1]).toBe('--bind-try');
261
+ expect(bwrapArgs[bwrapArgs.indexOf('/opt/tools') - 1]).toBe('--bind-try');
262
+ });
263
+ it('should grant read-write access to allowedPaths inside the workspace even when readonly mode is active', async () => {
264
+ const manager = new LinuxSandboxManager({
265
+ workspace,
266
+ modeConfig: { readonly: true },
267
+ });
268
+ const result = await manager.prepareCommand({
269
+ command: 'ls',
270
+ args: [],
271
+ cwd: workspace,
272
+ env: {},
273
+ policy: {
274
+ allowedPaths: [workspace + '/subdirectory'],
275
+ },
276
+ });
277
+ const bwrapArgs = result.args;
278
+ const bindIndex = bwrapArgs.indexOf(workspace + '/subdirectory');
279
+ expect(bwrapArgs[bindIndex - 1]).toBe('--bind-try');
280
+ });
281
+ it('should not bind the workspace twice even if it has a trailing slash in allowedPaths', async () => {
282
+ const bwrapArgs = await getBwrapArgs({
283
+ command: 'ls',
284
+ args: ['-la'],
285
+ cwd: workspace,
286
+ env: {},
287
+ policy: {
288
+ allowedPaths: [workspace + '/'],
289
+ },
290
+ });
291
+ const binds = bwrapArgs.filter((a) => a === workspace);
292
+ expect(binds.length).toBe(2);
293
+ });
294
+ it('should bind the parent directory of a non-existent path', async () => {
295
+ vi.mocked(fs.existsSync).mockImplementation((p) => {
296
+ if (p === '/home/user/workspace/new-file.txt')
297
+ return false;
298
+ return true;
299
+ });
300
+ const bwrapArgs = await getBwrapArgs({
301
+ command: '__write',
302
+ args: ['/home/user/workspace/new-file.txt'],
303
+ cwd: workspace,
304
+ env: {},
305
+ policy: {
306
+ allowedPaths: ['/home/user/workspace/new-file.txt'],
307
+ },
308
+ });
309
+ const parentDir = '/home/user/workspace';
310
+ const bindIndex = bwrapArgs.lastIndexOf(parentDir);
311
+ expect(bindIndex).not.toBe(-1);
312
+ expect(bwrapArgs[bindIndex - 2]).toBe('--bind-try');
313
+ });
314
+ });
315
+ describe('virtual commands', () => {
316
+ it('should translate __read to cat', async () => {
317
+ const testFile = path.join(workspace, 'file.txt');
318
+ const bwrapArgs = await getBwrapArgs({
319
+ command: '__read',
320
+ args: [testFile],
321
+ cwd: workspace,
322
+ env: {},
323
+ });
324
+ // args are: [...bwrapBaseArgs, '--', '/bin/cat', '.../file.txt']
325
+ expect(bwrapArgs[bwrapArgs.length - 2]).toBe('/bin/cat');
326
+ expect(bwrapArgs[bwrapArgs.length - 1]).toBe(testFile);
327
+ });
328
+ it('should translate __write to sh -c cat', async () => {
329
+ const testFile = path.join(workspace, 'file.txt');
330
+ const bwrapArgs = await getBwrapArgs({
331
+ command: '__write',
332
+ args: [testFile],
333
+ cwd: workspace,
334
+ env: {},
335
+ });
336
+ // args are: [...bwrapBaseArgs, '--', '/bin/sh', '-c', 'tee -- "$@" > /dev/null', '_', '.../file.txt']
337
+ expect(bwrapArgs[bwrapArgs.length - 5]).toBe('/bin/sh');
338
+ expect(bwrapArgs[bwrapArgs.length - 4]).toBe('-c');
339
+ expect(bwrapArgs[bwrapArgs.length - 3]).toBe('tee -- "$@" > /dev/null');
340
+ expect(bwrapArgs[bwrapArgs.length - 2]).toBe('_');
341
+ expect(bwrapArgs[bwrapArgs.length - 1]).toBe(testFile);
342
+ });
343
+ });
344
+ describe('forbiddenPaths', () => {
345
+ it('should parameterize forbidden paths and explicitly deny them', async () => {
346
+ vi.mocked(fs.statSync).mockImplementation((p) => {
347
+ if (p.toString().includes('cache')) {
348
+ return { isDirectory: () => true };
349
+ }
350
+ return { isDirectory: () => false };
351
+ });
352
+ vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
353
+ const customManager = new LinuxSandboxManager({
354
+ workspace,
355
+ forbiddenPaths: async () => ['/tmp/cache', '/opt/secret.txt'],
356
+ });
357
+ const bwrapArgs = await getBwrapArgs({
358
+ command: 'ls',
359
+ args: ['-la'],
360
+ cwd: workspace,
361
+ env: {},
362
+ }, customManager);
363
+ const cacheIndex = bwrapArgs.indexOf('/tmp/cache');
364
+ expect(bwrapArgs[cacheIndex - 1]).toBe('--tmpfs');
365
+ const secretIndex = bwrapArgs.indexOf('/opt/secret.txt');
366
+ expect(bwrapArgs[secretIndex - 2]).toBe('--ro-bind');
367
+ expect(bwrapArgs[secretIndex - 1]).toBe('/dev/null');
368
+ });
369
+ it('resolves forbidden symlink paths to their real paths', async () => {
370
+ vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => false }));
371
+ vi.mocked(fs.realpathSync).mockImplementation((p) => {
372
+ if (p === '/tmp/forbidden-symlink')
373
+ return '/opt/real-target.txt';
374
+ return p.toString();
375
+ });
376
+ const customManager = new LinuxSandboxManager({
377
+ workspace,
378
+ forbiddenPaths: async () => ['/tmp/forbidden-symlink'],
379
+ });
380
+ const bwrapArgs = await getBwrapArgs({
381
+ command: 'ls',
382
+ args: ['-la'],
383
+ cwd: workspace,
384
+ env: {},
385
+ }, customManager);
386
+ const secretIndex = bwrapArgs.indexOf('/opt/real-target.txt');
387
+ expect(bwrapArgs[secretIndex - 2]).toBe('--ro-bind');
388
+ expect(bwrapArgs[secretIndex - 1]).toBe('/dev/null');
389
+ });
390
+ it('explicitly denies non-existent forbidden paths to prevent creation', async () => {
391
+ const error = new Error('File not found');
392
+ error.code = 'ENOENT';
393
+ vi.mocked(fs.statSync).mockImplementation(() => {
394
+ throw error;
395
+ });
396
+ vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
397
+ const customManager = new LinuxSandboxManager({
398
+ workspace,
399
+ forbiddenPaths: async () => ['/tmp/not-here.txt'],
400
+ });
401
+ const bwrapArgs = await getBwrapArgs({
402
+ command: 'ls',
403
+ args: [],
404
+ cwd: workspace,
405
+ env: {},
406
+ }, customManager);
407
+ const idx = bwrapArgs.indexOf('/tmp/not-here.txt');
408
+ expect(bwrapArgs[idx - 2]).toBe('--symlink');
409
+ expect(bwrapArgs[idx - 1]).toBe('/dev/null');
410
+ });
411
+ it('masks directory symlinks with tmpfs for both paths', async () => {
412
+ vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => true }));
413
+ vi.mocked(fs.realpathSync).mockImplementation((p) => {
414
+ if (p === '/tmp/dir-link')
415
+ return '/opt/real-dir';
416
+ return p.toString();
417
+ });
418
+ const customManager = new LinuxSandboxManager({
419
+ workspace,
420
+ forbiddenPaths: async () => ['/tmp/dir-link'],
421
+ });
422
+ const bwrapArgs = await getBwrapArgs({
423
+ command: 'ls',
424
+ args: [],
425
+ cwd: workspace,
426
+ env: {},
427
+ }, customManager);
428
+ const idx = bwrapArgs.indexOf('/opt/real-dir');
429
+ expect(bwrapArgs[idx - 1]).toBe('--tmpfs');
430
+ });
431
+ it('should override allowed paths if a path is also in forbidden paths', async () => {
432
+ vi.mocked(fs.statSync).mockImplementation(() => ({ isDirectory: () => true }));
433
+ vi.mocked(fs.realpathSync).mockImplementation((p) => p.toString());
434
+ const customManager = new LinuxSandboxManager({
435
+ workspace,
436
+ forbiddenPaths: async () => ['/tmp/conflict'],
437
+ });
438
+ const bwrapArgs = await getBwrapArgs({
439
+ command: 'ls',
440
+ args: ['-la'],
441
+ cwd: workspace,
442
+ env: {},
443
+ policy: {
444
+ allowedPaths: ['/tmp/conflict'],
445
+ },
446
+ }, customManager);
447
+ // Conflict should have been filtered out of allow list (--bind-try)
448
+ expect(bwrapArgs).not.toContain('--bind-try');
449
+ expect(bwrapArgs).not.toContain('--bind-try-ro');
450
+ // It should only appear as a forbidden path (via --tmpfs)
451
+ const conflictIdx = bwrapArgs.indexOf('/tmp/conflict');
452
+ expect(conflictIdx).toBeGreaterThan(0);
453
+ expect(bwrapArgs[conflictIdx - 1]).toBe('--tmpfs');
454
+ });
152
455
  });
153
- expect(fs.mkdirSync).toHaveBeenCalled();
154
- expect(fs.openSync).toHaveBeenCalled();
155
456
  });
156
- it('should not bind the workspace twice even if it has a trailing slash in allowedPaths', async () => {
457
+ it('blocks .env and .env.* files in the workspace root', async () => {
458
+ vi.mocked(shellUtils.spawnAsync).mockImplementation((cmd, args) => {
459
+ if (cmd === 'find' && args?.[0] === workspace) {
460
+ // Assert that find is NOT excluding dotfiles
461
+ expect(args).not.toContain('-not');
462
+ expect(args).toContain('-prune');
463
+ return Promise.resolve({
464
+ status: 0,
465
+ stdout: Buffer.from(`${workspace}/.env\0${workspace}/.env.local\0${workspace}/.env.test\0`),
466
+ });
467
+ }
468
+ return Promise.resolve({
469
+ status: 0,
470
+ stdout: Buffer.from(''),
471
+ });
472
+ });
157
473
  const bwrapArgs = await getBwrapArgs({
158
474
  command: 'ls',
159
- args: ['-la'],
475
+ args: [],
160
476
  cwd: workspace,
161
477
  env: {},
162
- policy: {
163
- allowedPaths: [workspace + '/'],
164
- },
165
478
  });
166
479
  const bindsIndex = bwrapArgs.indexOf('--seccomp');
167
- const binds = bwrapArgs.slice(bwrapArgs.indexOf('--bind'), bindsIndex);
168
- // Should only contain the primary workspace bind and governance files, not the second workspace bind with a trailing slash
169
- expect(binds).toEqual([
170
- '--bind',
171
- workspace,
172
- workspace,
173
- '--ro-bind',
174
- `${workspace}/.gitignore`,
175
- `${workspace}/.gitignore`,
176
- '--ro-bind',
177
- `${workspace}/.geminiignore`,
178
- `${workspace}/.geminiignore`,
179
- '--ro-bind',
180
- `${workspace}/.git`,
181
- `${workspace}/.git`,
182
- ]);
480
+ const binds = bwrapArgs.slice(0, bindsIndex);
481
+ expect(binds).toContain(`${workspace}/.env`);
482
+ expect(binds).toContain(`${workspace}/.env.local`);
483
+ expect(binds).toContain(`${workspace}/.env.test`);
484
+ // Verify they are bound to a mask file
485
+ const envIndex = binds.indexOf(`${workspace}/.env`);
486
+ expect(binds[envIndex - 2]).toBe('--bind');
487
+ expect(binds[envIndex - 1]).toMatch(/gemini-cli-mask-file-.*mocked\/mask/);
183
488
  });
184
489
  });
185
490
  //# sourceMappingURL=LinuxSandboxManager.test.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"LinuxSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/linux/LinuxSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,0FAA0F;YAC1F,GAAG,MAAM,CAAC,OAAO;YACjB,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzD,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;SACvB;QACD,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzD,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACxB,eAAe;YACf,eAAe;YACf,mBAAmB;YACnB,WAAW;YACX,GAAG;YACH,GAAG;YACH,OAAO;YACP,MAAM;YACN,QAAQ;YACR,OAAO;YACP,SAAS;YACT,MAAM;YACN,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;YACnB,WAAW;YACX,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;YACP,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;aACtD;SACF,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;YACnB,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,aAAa;gBAC5C,OAAO,0BAA0B,CAAC;YACpC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAExD,4BAA4B;QAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QAEtE,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,YAAY,CAAC;YACjB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;YACP,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC;aAChC;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;QAEvE,2HAA2H;QAC3H,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,GAAG,SAAS,aAAa;YACzB,GAAG,SAAS,aAAa;YACzB,WAAW;YACX,GAAG,SAAS,gBAAgB;YAC5B,GAAG,SAAS,gBAAgB;YAC5B,WAAW;YACX,GAAG,SAAS,OAAO;YACnB,GAAG,SAAS,OAAO;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"LinuxSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/linux/LinuxSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AAEzD,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA2B,SAAS,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,0FAA0F;YAC1F,GAAG,MAAM,CAAC,OAAO;YACjB,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAAC;YAChE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;YACzD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC5B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;SAChB;QACD,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAAC;QAChE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;QACtB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC7D,MAAM,MAAM,GACV,MAAM,cAAc,EAA+C,CAAC;IACtE,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CACrB,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CACxD;QACD,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC/B,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,EACxB,GAAmB,EACnB,aAAmC,EACnC,EAAE;QACF,MAAM,GAAG,GAAG,aAAa,IAAI,OAAO,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;aACR,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;gBACxB,eAAe;gBACf,eAAe;gBACf,mBAAmB;gBACnB,WAAW;gBACX,GAAG;gBACH,GAAG;gBACH,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,OAAO;gBACP,SAAS;gBACT,MAAM;gBACN,eAAe;gBACf,SAAS;gBACT,SAAS;gBACT,WAAW;gBACX,GAAG,SAAS,aAAa;gBACzB,GAAG,SAAS,aAAa;gBACzB,WAAW;gBACX,GAAG,SAAS,gBAAgB;gBAC5B,GAAG,SAAS,gBAAgB;gBAC5B,WAAW;gBACX,GAAG,SAAS,OAAO;gBACnB,GAAG,SAAS,OAAO;gBACnB,WAAW;gBACX,GAAG;gBACH,IAAI;gBACJ,IAAI;gBACJ,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;gBAC5C,SAAS;gBACT,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAChC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;aACR,EACD,aAAa,CACd,CAAC;YAEF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,qBAAqB,EAAE;wBACrB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,8BAA8B,CAAC,EAAE;qBACxD;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;gBAC5C,SAAS;gBACT,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,MAAM,CACV,aAAa,CAAC,cAAc,CAAC;gBAC3B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aACrD,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CACf,yEAAyE,CAC1E,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,GAAG,GAAmB;gBAC1B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,gBAAgB;gBACrB,GAAG,EAAE,EAAE;aACR,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,GAAG,GAAmB;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE;oBACH,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,UAAU;iBACjB;gBACD,MAAM,EAAE;oBACN,kBAAkB,EAAE;wBAClB,2BAA2B,EAAE,CAAC,MAAM,CAAC;wBACrC,2BAA2B,EAAE,CAAC,SAAS,CAAC;wBACxC,kCAAkC,EAAE,IAAI;qBACzC;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;gBACnC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,aAAa,EAAE,IAAI;iBACpB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAEhD,MAAM,YAAY,CAAC;oBACjB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;gBACxC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;gBAChF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,aAAa;wBAC5C,OAAO,0BAA0B,CAAC;oBACpC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBACzC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBACvD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;gBAExD,4BAA4B;gBAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBACpE,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;gBAEtE,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAC1C,0BAA0B,CAC3B,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5D,MAAM,CAAC,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5C,0BAA0B,CAC3B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,CAAC,WAAW,CAAC;oBACnB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;qBACtD;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC1C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,YAAY,CACb,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uGAAuG,EAAE,KAAK,IAAI,EAAE;gBACrH,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;oBACtC,SAAS;oBACT,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC/B,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,SAAS,GAAG,eAAe,CAAC;qBAC5C;iBACF,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;gBACjE,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;gBACnG,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC;qBAChC;iBACF,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;gBACvE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAChD,IAAI,CAAC,KAAK,mCAAmC;wBAAE,OAAO,KAAK,CAAC;oBAC5D,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,mCAAmC,CAAC;oBAC3C,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,mCAAmC,CAAC;qBACpD;iBACF,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,sBAAsB,CAAC;gBACzC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;gBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,iEAAiE;gBACjE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACzD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;gBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;oBACnC,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,sGAAsG;gBACtG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9C,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACnC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAc,CAAC;oBACjD,CAAC;oBACD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAc,CAAC;gBAClD,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC;iBAC9D,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAElD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBACzD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAa,CACjD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,KAAK,wBAAwB;wBAAE,OAAO,sBAAsB,CAAC;oBAClE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,wBAAwB,CAAC;iBACvD,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC9D,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,gBAAgB,CAA0B,CAAC;gBACnE,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBAC7C,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC;iBAClD,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBACnD,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAChD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClD,IAAI,CAAC,KAAK,eAAe;wBAAE,OAAO,eAAe,CAAC;oBAClD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBAEH,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;iBACR,EACD,aAAa,CACd,CAAC;gBAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC/C,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,kBAAkB,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAa,CAChD,CAAC;gBACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEnE,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS;oBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC;iBACF,EACD,aAAa,CACd,CAAC;gBAEF,oEAAoE;gBACpE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;gBAEjD,0DAA0D;gBAC1D,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACvD,MAAM,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YAChE,IAAI,GAAG,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9C,6CAA6C;gBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAEjC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,MAAM,CAAC,IAAI,CACjB,GAAG,SAAS,UAAU,SAAS,gBAAgB,SAAS,cAAc,CACvE;iBACqD,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;aAC+B,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;YACnC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,YAAY,CAAC,CAAC;QAElD,uCAAuC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}