@librechat/agents 3.4.7 → 3.5.0

package/dist/cjs/tools/local/LocalCodingTools.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"LocalCodingTools.cjs","names":["withIntent","truncateLocalOutput","runPostEditSyntaxCheck","path","encodeFile","isWorkspaceClientTimeoutError","getWorkspaceFS","resolveWorkspacePathSafe","classifyAttachment","imageAttachmentContent","decodeFile","diff","locateEdit","applyEdit","getSpawn","spawnLocalProcess","input","createLocalFileCheckpointer","createCompileCheckTool","createLocalBashExecutionTool","createLocalCodeExecutionTool","createLocalProgrammaticToolCallingTool","createLocalBashProgrammaticToolCallingTool","createCompileCheckToolDefinition"],"sources":["../../../../src/tools/local/LocalCodingTools.ts"],"sourcesContent":["import { basename, dirname } from 'path';\nimport { createTwoFilesPatch } from 'diff';\nimport { tool } from '@langchain/core/tools';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\nimport {\n  createLocalBashProgrammaticToolCallingTool,\n  createLocalProgrammaticToolCallingTool,\n} from './LocalProgrammaticToolCalling';\nimport {\n  getSpawn,\n  getWorkspaceFS,\n  resolveWorkspacePathSafe,\n  spawnLocalProcess,\n  truncateLocalOutput,\n} from './LocalExecutionEngine';\nimport {\n  createLocalBashExecutionTool,\n  createLocalCodeExecutionTool,\n} from './LocalExecutionTools';\nimport {\n  createCompileCheckTool,\n  createCompileCheckToolDefinition,\n} from './CompileCheckTool';\nimport { classifyAttachment, imageAttachmentContent } from './attachments';\nimport { createLocalFileCheckpointer } from './FileCheckpointer';\nimport { isWorkspaceClientTimeoutError } from './workspaceFS';\nimport { applyEdit, locateEdit } from './editStrategies';\nimport { decodeFile, encodeFile } from './textEncoding';\nimport { runPostEditSyntaxCheck } from './syntaxCheck';\nimport { withIntent } from '@/tools/intentArg';\nimport { Constants } from '@/common';\n\nconst MAX_READ_CHARS = 256000;\nconst DEFAULT_MAX_RESULTS = 200;\nconst DEFAULT_MAX_READ_BYTES = 10 * 1024 * 1024;\nconst BINARY_DETECTION_BYTES = 8000;\n\n/**\n * Tool name aliases retained for back-compat with consumers that imported\n * the per-file `Local*ToolName` constants. The canonical names live on\n * `Constants.*` (see `src/common/enum.ts`); these aliases just point at\n * them so a typo upstream gets caught at the type level.\n */\nexport const LocalWriteFileToolName = Constants.WRITE_FILE;\nexport const LocalEditFileToolName = Constants.EDIT_FILE;\nexport const LocalGrepSearchToolName = Constants.GREP_SEARCH;\nexport const LocalGlobSearchToolName = Constants.GLOB_SEARCH;\nexport const LocalListDirectoryToolName = Constants.LIST_DIRECTORY;\n\nexport const LocalReadFileToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    path: {\n      type: 'string',\n      description:\n        'Path to a local file, relative to the configured cwd unless absolute paths are allowed.',\n    },\n    offset: {\n      type: 'integer',\n      description: 'Optional 1-indexed line offset for large files.',\n    },\n    limit: {\n      type: 'integer',\n      description: 'Optional maximum number of lines to return.',\n    },\n  },\n  required: ['path'],\n});\n\nexport const LocalWriteFileToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    path: {\n      type: 'string',\n      description:\n        'Path to write, relative to the configured cwd unless absolute paths are allowed.',\n    },\n    content: {\n      type: 'string',\n      description: 'Complete file contents to write.',\n    },\n  },\n  required: ['path', 'content'],\n});\n\nexport const LocalEditFileToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    path: {\n      type: 'string',\n      description:\n        'Path to edit, relative to the configured cwd unless absolute paths are allowed.',\n    },\n    old_text: {\n      type: 'string',\n      description: 'Exact text to replace. Must appear exactly once.',\n    },\n    new_text: {\n      type: 'string',\n      description: 'Replacement text.',\n    },\n    edits: {\n      type: 'array',\n      description:\n        'Optional batch of exact replacements. Each old_text must appear exactly once in the original file.',\n      items: {\n        type: 'object',\n        properties: {\n          old_text: { type: 'string' },\n          new_text: { type: 'string' },\n        },\n        required: ['old_text', 'new_text'],\n      },\n    },\n  },\n  required: ['path'],\n});\n\nexport const LocalGrepSearchToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    pattern: {\n      type: 'string',\n      description: 'Regex pattern to search for.',\n    },\n    path: {\n      type: 'string',\n      description: 'Directory or file to search. Defaults to cwd.',\n    },\n    glob: {\n      type: 'string',\n      description: 'Optional file glob passed to rg -g.',\n    },\n    max_results: {\n      type: 'integer',\n      description: 'Maximum matching lines to return.',\n    },\n  },\n  required: ['pattern'],\n});\n\nexport const LocalGlobSearchToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    pattern: {\n      type: 'string',\n      description: 'File glob pattern, for example \"src/**/*.ts\".',\n    },\n    path: {\n      type: 'string',\n      description: 'Directory to search. Defaults to cwd.',\n    },\n    max_results: {\n      type: 'integer',\n      description: 'Maximum file paths to return.',\n    },\n  },\n  required: ['pattern'],\n});\n\nexport const LocalListDirectoryToolSchema: t.JsonSchemaType = withIntent({\n  type: 'object',\n  properties: {\n    path: {\n      type: 'string',\n      description: 'Directory to list. Defaults to cwd.',\n    },\n  },\n});\n\nfunction lineWindow(\n  content: string,\n  offset?: number,\n  limit?: number\n): { text: string; truncated: boolean } {\n  const start = Math.max((offset ?? 1) - 1, 0);\n  // Avoid splitting the whole file when the caller asked for a small\n  // window. For a 10 MB file with `offset: 1, limit: 10`, the prior\n  // `content.split('\\n')` allocated millions of strings to throw all\n  // but 10 away. We walk newline indices directly: O(start + limit)\n  // instead of O(file). When `limit` is omitted, fall back to the\n  // simple split — it's the same amount of work either way.\n  if (limit == null || limit <= 0) {\n    const lines = content.split('\\n');\n    const selected = lines.slice(start);\n    const numbered = selected\n      .map(\n        (line, index) =>\n          `${String(start + index + 1).padStart(6, ' ')}\\t${line}`\n      )\n      .join('\\n');\n    return {\n      text: truncateLocalOutput(numbered, MAX_READ_CHARS),\n      truncated: numbered.length > MAX_READ_CHARS,\n    };\n  }\n  // Walk to the start line by counting newlines.\n  let cursor = 0;\n  for (let i = 0; i < start; i++) {\n    const next = content.indexOf('\\n', cursor);\n    if (next === -1) {\n      // File has fewer lines than `offset` — return empty window.\n      return { text: '', truncated: false };\n    }\n    cursor = next + 1;\n  }\n  // Collect up to `limit` lines from `cursor`.\n  const out: string[] = [];\n  let pos = cursor;\n  let exhausted = true;\n  for (let k = 0; k < limit; k++) {\n    const next = content.indexOf('\\n', pos);\n    if (next === -1) {\n      out.push(content.slice(pos));\n      break;\n    }\n    out.push(content.slice(pos, next));\n    pos = next + 1;\n    if (k === limit - 1 && pos < content.length) {\n      exhausted = false;\n    }\n  }\n  const numbered = out\n    .map(\n      (text, index) => `${String(start + index + 1).padStart(6, ' ')}\\t${text}`\n    )\n    .join('\\n');\n  return {\n    text: truncateLocalOutput(numbered, MAX_READ_CHARS),\n    truncated: !exhausted || numbered.length > MAX_READ_CHARS,\n  };\n}\n\nconst MAX_DIFF_CHARS = 4000;\n\ntype SyntaxRun =\n  | {\n      mode: 'auto' | 'strict';\n      outcome: import('./syntaxCheck').SyntaxCheckOutcome;\n    }\n  | undefined;\n\nasync function maybeRunSyntaxCheck(\n  path: string,\n  config: t.LocalExecutionConfig\n): Promise<SyntaxRun> {\n  const mode = config.postEditSyntaxCheck ?? 'off';\n  if (mode === 'off') return undefined;\n  const outcome = await runPostEditSyntaxCheck(path, config);\n  if (outcome == null) return undefined;\n  return { mode, outcome };\n}\n\nfunction appendSyntaxCheckSummary(base: string, run: SyntaxRun): string {\n  if (run == null) return base;\n  if (run.outcome.ok) return base;\n  const banner =\n    run.mode === 'strict'\n      ? `\\n\\n[syntax-check FAILED via ${run.outcome.checker}]\\n`\n      : `\\n\\n[syntax-check warning via ${run.outcome.checker}]\\n`;\n  return `${base}${banner}${run.outcome.output}`;\n}\n\n/**\n * Revert a write_file/edit_file mutation in `postEditSyntaxCheck:\n * 'strict'` mode after the post-write syntax check failed. Strict\n * mode advertises a safety gate, so leaving the corrupted file on\n * disk + throwing is a half-broken contract — the model \"reacts\" to\n * the error but the next call sees broken on-disk state. Codex P2\n * [49]. Best-effort: a swallowed error here means the workspace is\n * still in the bad post-write state, but we still throw the\n * original syntax-check error so the caller knows.\n *\n * - If the file existed pre-write: restore the previous bytes with\n *   the original encoding.\n * - If the file is brand-new: unlink it.\n */\nasync function revertStrictWrite(\n  fs: import('./workspaceFS').WorkspaceFS,\n  path: string,\n  existed: boolean,\n  before: string,\n  encoding: { text: string; hasBom: boolean; newline: '\\n' | '\\r\\n' }\n): Promise<void> {\n  try {\n    if (existed) {\n      // encodeFile uses encoding.{hasBom,newline} to restore the\n      // on-disk shape; the `text` field is overridden by the\n      // explicit `before` arg we pass in.\n      await fs.writeFile(\n        path,\n        encodeFile(before, { ...encoding, text: before }),\n        'utf8'\n      );\n    } else {\n      await fs.unlink(path);\n    }\n  } catch (error) {\n    // A timed-out revert leaves the rejected write on disk — the caller would\n    // otherwise claim \"reverted to pre-write state\" while the bad bytes remain.\n    // Surface it; for other failures stay best-effort (caller sees the original\n    // syntax error).\n    if (isWorkspaceClientTimeoutError(error)) {\n      throw error;\n    }\n  }\n}\n\nfunction summariseDiff(\n  filePath: string,\n  before: string,\n  after: string\n): string {\n  if (before === after) {\n    return '(no textual changes)';\n  }\n  const name = basename(filePath);\n  const patch = createTwoFilesPatch(name, name, before, after, '', '', {\n    context: 3,\n  });\n  if (patch.length <= MAX_DIFF_CHARS) {\n    return patch;\n  }\n  return (\n    patch.slice(0, MAX_DIFF_CHARS) +\n    `\\n[... diff truncated, ${patch.length - MAX_DIFF_CHARS} more chars ...]`\n  );\n}\n\nfunction normalizeEdits(input: {\n  old_text?: string;\n  new_text?: string;\n  edits?: Array<{ old_text?: string; new_text?: string }>;\n}): Array<{ oldText: string; newText: string }> {\n  const edits = Array.isArray(input.edits)\n    ? input.edits.map((edit) => ({\n      oldText: edit.old_text ?? '',\n      newText: edit.new_text ?? '',\n    }))\n    : [];\n\n  if (input.old_text != null || input.new_text != null) {\n    edits.push({\n      oldText: input.old_text ?? '',\n      newText: input.new_text ?? '',\n    });\n  }\n\n  return edits;\n}\n\nfunction toolDefinition(\n  name: string,\n  description: string,\n  parameters: t.JsonSchemaType\n): t.LCTool {\n  return {\n    name,\n    description,\n    parameters,\n    allowed_callers: ['direct', 'code_execution'],\n    responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    toolType: 'builtin',\n  };\n}\n\nasync function looksBinary(\n  path: string,\n  fs: import('./workspaceFS').WorkspaceFS\n): Promise<boolean> {\n  let handle;\n  try {\n    handle = await fs.open(path, 'r');\n    const sample = Buffer.alloc(BINARY_DETECTION_BYTES);\n    const { bytesRead } = await handle.read(\n      sample,\n      0,\n      BINARY_DETECTION_BYTES,\n      0\n    );\n    for (let i = 0; i < bytesRead; i++) {\n      if (sample[i] === 0) {\n        return true;\n      }\n    }\n    return false;\n  } finally {\n    await handle?.close();\n  }\n}\n\nconst DEFAULT_MAX_ATTACHMENT_BYTES = 5 * 1024 * 1024;\n\nexport function createLocalReadFileTool(\n  config: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        path: string;\n        offset?: number;\n        limit?: number;\n      };\n      const path = await resolveWorkspacePathSafe(\n        input.path,\n        config,\n        'read'\n      );\n      const fileStat = await fs.stat(path);\n      if (!fileStat.isFile()) {\n        throw new Error(`Path is not a file: ${input.path}`);\n      }\n      const maxBytes = Math.max(\n        config.maxReadBytes ?? DEFAULT_MAX_READ_BYTES,\n        1\n      );\n      if (fileStat.size > maxBytes) {\n        const stub = `File is ${fileStat.size} bytes, exceeds the ${maxBytes}-byte read cap. Read a slice via bash (e.g. head/sed) or raise local.maxReadBytes.`;\n        return [stub, { path, bytes: fileStat.size, truncated: true }];\n      }\n\n      if (await looksBinary(path, fs)) {\n        const attachmentMode = config.attachReadAttachments ?? 'off';\n        if (attachmentMode !== 'off') {\n          const attachment = await classifyAttachment({\n            path,\n            bytes: fileStat.size,\n            mode: attachmentMode,\n            maxBytes: config.maxAttachmentBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES,\n            // Route through the configured WorkspaceFS so a custom\n            // engine sees the same path semantics as `read_file`\n            // itself (manual review finding F).\n            fs,\n          });\n          if (attachment.kind === 'image') {\n            return [\n              imageAttachmentContent(path, attachment),\n              {\n                path,\n                bytes: fileStat.size,\n                mime: attachment.mime,\n                attachment: 'image',\n              },\n            ];\n          }\n          if (attachment.kind === 'pdf') {\n            return [\n              [\n                {\n                  type: 'text',\n                  text: `Read ${path} (application/pdf, ${fileStat.size} bytes). PDF attached as base64 data URL; vision-capable models that accept PDF will render it.`,\n                },\n                {\n                  type: 'image_url',\n                  image_url: { url: attachment.dataUrl },\n                },\n              ],\n              {\n                path,\n                bytes: fileStat.size,\n                mime: attachment.mime,\n                attachment: 'pdf',\n              },\n            ];\n          }\n          if (attachment.kind === 'oversize') {\n            return [\n              `Refusing to embed ${attachment.mime} attachment (${attachment.bytes} bytes exceeds ${attachment.maxBytes}-byte cap).`,\n              {\n                path,\n                bytes: fileStat.size,\n                mime: attachment.mime,\n                attachment: 'oversize',\n              },\n            ];\n          }\n          if (attachment.kind === 'binary') {\n            return [\n              `Refusing to read binary file (${fileStat.size} bytes, ${attachment.mime}): ${path}`,\n              {\n                path,\n                bytes: fileStat.size,\n                mime: attachment.mime,\n                binary: true,\n              },\n            ];\n          }\n          // text-or-unknown falls through to the text-read path below.\n        } else {\n          return [\n            `Refusing to read binary file (${fileStat.size} bytes): ${path}`,\n            { path, bytes: fileStat.size, binary: true },\n          ];\n        }\n      }\n\n      const content = await fs.readFile(path, 'utf8');\n      const result = lineWindow(content, input.offset, input.limit);\n      return [\n        result.truncated ? `${result.text}\\n[truncated]` : result.text,\n        { path, bytes: fileStat.size },\n      ];\n    },\n    {\n      name: Constants.READ_FILE,\n      description:\n        'Read a local text file from the configured working directory with line numbers. ' +\n        'When `attachReadAttachments` is enabled (e.g. images-only), reading an image returns an ' +\n        '`image_url` content block so vision-capable models can see the file directly.',\n      schema: LocalReadFileToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalWriteFileTool(\n  config: t.LocalExecutionConfig = {},\n  checkpointer?: t.LocalFileCheckpointer\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as { path: string; content: string };\n      if (config.readOnly === true) {\n        throw new Error('write_file is blocked in read-only local mode.');\n      }\n      const path = await resolveWorkspacePathSafe(\n        input.path,\n        config,\n        'write'\n      );\n      if (checkpointer != null) {\n        await checkpointer.captureBeforeWrite(path);\n      }\n\n      let before = '';\n      let encoding = { text: '', hasBom: false, newline: '\\n' as const } as\n        | ReturnType<typeof decodeFile>\n        | { text: string; hasBom: false; newline: '\\n' };\n      let existed = false;\n      try {\n        const raw = await fs.readFile(path, 'utf8');\n        const decoded = decodeFile(raw);\n        before = decoded.text;\n        encoding = decoded;\n        existed = true;\n      } catch (error) {\n        // A stalled-RPC timeout is NOT \"file absent\" — treating it as such would\n        // overwrite an existing file with fresh content. Surface it instead.\n        if (isWorkspaceClientTimeoutError(error)) {\n          throw error;\n        }\n        existed = false;\n      }\n\n      await fs.mkdir(dirname(path), { recursive: true });\n      const finalText = encodeFile(input.content, encoding);\n      await fs.writeFile(path, finalText, 'utf8');\n\n      let syntax;\n      try {\n        syntax = await maybeRunSyntaxCheck(path, config);\n      } catch (error) {\n        // A validation-read timeout must still honor strict mode's revert\n        // contract: restore the pre-write state before surfacing (best-effort —\n        // the revert may itself time out on the same stalled container).\n        if (\n          isWorkspaceClientTimeoutError(error) &&\n          config.postEditSyntaxCheck === 'strict'\n        ) {\n          await revertStrictWrite(fs, path, existed, before, encoding);\n        }\n        throw error;\n      }\n\n      const diff = existed\n        ? summariseDiff(path, before, input.content)\n        : `(new file, ${input.content.length} chars)`;\n      const baseSummary = existed\n        ? `Overwrote ${path} (${input.content.length} chars). Diff:\\n${diff}`\n        : `Created ${path} (${input.content.length} chars).`;\n      const summary = appendSyntaxCheckSummary(baseSummary, syntax);\n      if (syntax?.outcome.ok === false && syntax.mode === 'strict') {\n        // Roll back the write so strict mode is an actual gate, not\n        // \"fail the call AND leave the corrupted file on disk\".\n        // Codex P2 [49].\n        await revertStrictWrite(fs, path, existed, before, encoding);\n        throw new Error(\n          `write_file syntax check failed (${syntax.outcome.checker}); reverted to pre-write state.\\n${syntax.outcome.output}`\n        );\n      }\n      return [\n        summary,\n        {\n          path,\n          bytes: finalText.length,\n          new_file: !existed,\n          newline: encoding.newline === '\\r\\n' ? 'CRLF' : 'LF',\n          had_bom: encoding.hasBom,\n          ...(syntax != null && syntax.outcome.ok === false\n            ? { syntax_error: syntax.outcome.checker }\n            : {}),\n        },\n      ];\n    },\n    {\n      name: LocalWriteFileToolName,\n      description:\n        'Create or overwrite a local text file in the configured working directory. ' +\n        'Preserves the existing BOM and line endings when overwriting; defaults to LF without BOM for new files. ' +\n        'Returns a unified diff of the changes when overwriting.',\n      schema: LocalWriteFileToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalEditFileTool(\n  config: t.LocalExecutionConfig = {},\n  checkpointer?: t.LocalFileCheckpointer\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        path: string;\n        old_text?: string;\n        new_text?: string;\n        edits?: Array<{ old_text?: string; new_text?: string }>;\n      };\n      if (config.readOnly === true) {\n        throw new Error('edit_file is blocked in read-only local mode.');\n      }\n      const edits = normalizeEdits(input);\n      if (edits.length === 0) {\n        throw new Error('edit_file requires old_text/new_text or edits[].');\n      }\n\n      const path = await resolveWorkspacePathSafe(\n        input.path,\n        config,\n        'write'\n      );\n      const raw = await fs.readFile(path, 'utf8');\n      const encoding = decodeFile(raw);\n      const original = encoding.text;\n\n      let next = original;\n      const strategiesUsed: string[] = [];\n      for (let i = 0; i < edits.length; i++) {\n        const edit = edits[i];\n        const match = locateEdit(next, edit.oldText);\n        if (match == null) {\n          throw new Error(\n            `Edit ${i + 1}/${edits.length}: could not locate old_text in ${input.path}. ` +\n              'Tried exact, line-trimmed, whitespace-normalized, and indentation-flexible matching. ' +\n              'Re-read the file and copy the literal lines.'\n          );\n        }\n        strategiesUsed.push(match.strategy);\n        next = applyEdit(next, match, edit.newText);\n      }\n\n      if (checkpointer != null) {\n        await checkpointer.captureBeforeWrite(path);\n      }\n      const finalText = encodeFile(next, encoding);\n      await fs.writeFile(path, finalText, 'utf8');\n\n      let syntax;\n      try {\n        syntax = await maybeRunSyntaxCheck(path, config);\n      } catch (error) {\n        // As in write_file: a validation-read timeout still triggers strict\n        // mode's revert (edit_file always operates on an existing file).\n        if (\n          isWorkspaceClientTimeoutError(error) &&\n          config.postEditSyntaxCheck === 'strict'\n        ) {\n          await revertStrictWrite(fs, path, true, original, encoding);\n        }\n        throw error;\n      }\n\n      const diff = summariseDiff(path, original, next);\n      const fuzzy = strategiesUsed.some((s) => s !== 'exact');\n      const baseSummary =\n        `Applied ${edits.length} edit(s) to ${path}` +\n        (fuzzy ? ` (strategies: ${strategiesUsed.join(', ')})` : '') +\n        `. Diff:\\n${diff}`;\n      const summary = appendSyntaxCheckSummary(baseSummary, syntax);\n      if (syntax?.outcome.ok === false && syntax.mode === 'strict') {\n        // Restore the pre-edit bytes so strict mode is an actual\n        // gate (Codex P2 [49]). edit_file always operates on an\n        // existing file, so `existed = true` here.\n        await revertStrictWrite(fs, path, true, original, encoding);\n        throw new Error(\n          `edit_file syntax check failed (${syntax.outcome.checker}); reverted to pre-edit state.\\n${syntax.outcome.output}`\n        );\n      }\n      return [\n        summary,\n        {\n          path,\n          edits: edits.length,\n          strategies: strategiesUsed,\n          newline: encoding.newline === '\\r\\n' ? 'CRLF' : 'LF',\n          had_bom: encoding.hasBom,\n          ...(syntax != null && syntax.outcome.ok === false\n            ? { syntax_error: syntax.outcome.checker }\n            : {}),\n        },\n      ];\n    },\n    {\n      name: LocalEditFileToolName,\n      description:\n        'Apply exact text replacements to a local file. The matcher tries exact, line-trimmed, whitespace-normalized, and indentation-flexible strategies in order so common LLM whitespace mistakes are recoverable. Each old_text must still match exactly one location. Returns a unified diff of the changes.',\n      schema: LocalEditFileToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\n/**\n * Ripgrep availability cache, keyed on the *effective execution\n * backend* — whatever function `getSpawn(config)` returns. Without\n * the backend key, a Run that probes `rg` over Node's\n * `child_process.spawn` would poison subsequent Runs whose\n * `local.exec.spawn` routes to a remote sandbox or container that\n * doesn't have rg installed: the cached `true` would skip the probe,\n * the rg invocation would throw, and the Node fallback wouldn't be\n * reached. Per-backend caching avoids that without paying for a\n * spawn-per-search.\n */\n// Per-backend × per-env cache. Codex P1 #34 — keying by spawn\n// backend alone misses the case where two Runs share a backend but\n// vary `local.env` (especially PATH). Stale cache then claims `rg`\n// is available, the rg path runs, and the spawn fails with ENOENT\n// instead of falling back to the Node walker. The inner Map is\n// keyed by a stable JSON hash of the effective env so each unique\n// env gets its own probe.\nlet ripgrepAvailabilityByBackend = new WeakMap<\n  t.LocalSpawn,\n  Map<string, Promise<boolean>>\n>();\n\nfunction envCacheKey(env: NodeJS.ProcessEnv | undefined): string {\n  // PATH is the only env entry that affects command lookup, but\n  // hashing the whole env keeps the key correct for hosts that\n  // vary anything else relevant. Stable JSON via sorted keys so\n  // {A:1,B:2} and {B:2,A:1} produce the same hash.\n  if (env == null) return '';\n  const sorted: Record<string, string | undefined> = {};\n  for (const k of Object.keys(env).sort()) {\n    sorted[k] = env[k];\n  }\n  return JSON.stringify(sorted);\n}\n\nasync function isRipgrepAvailable(\n  config: t.LocalExecutionConfig\n): Promise<boolean> {\n  const backend = getSpawn(config);\n  let envMap = ripgrepAvailabilityByBackend.get(backend);\n  if (envMap == null) {\n    envMap = new Map();\n    ripgrepAvailabilityByBackend.set(backend, envMap);\n  }\n  const envKey = envCacheKey(config.env);\n  let probePromise = envMap.get(envKey);\n  if (probePromise == null) {\n    probePromise = spawnLocalProcess(\n      'rg',\n      ['--version'],\n      { ...config, timeoutMs: 5000, sandbox: { enabled: false } },\n      { internal: true }\n    )\n      .then((probe) => probe.exitCode === 0)\n      .catch(() => false);\n    envMap.set(envKey, probePromise);\n  }\n  return probePromise;\n}\n\n/**\n * Test-only reset hook. Clears the ripgrep-availability cache so\n * tests can swap in mocked spawn backends and reprobe deterministically.\n *\n * @internal Not part of the public SDK surface; the leading underscore\n *   and `@internal` tag together signal that consumers should not call\n *   this. Tests import it via the module path directly.\n */\nexport function _resetRipgrepCacheForTests(): void {\n  ripgrepAvailabilityByBackend = new WeakMap();\n}\n\n// Skipped by the Node-fallback walker (used when ripgrep is\n// unavailable). Covers common build outputs, virtualenvs, and\n// caches so a `grep_search`/`glob_search` on a large monorepo or a\n// Python project with `.venv/` doesn't read every file under those\n// trees. ripgrep itself respects .gitignore so it doesn't need this\n// list. Audit follow-up from the comprehensive review (finding #3).\nconst SKIP_DIRS = new Set([\n  '.git',\n  '.svn',\n  '.hg',\n  'node_modules',\n  '.next',\n  '.nuxt',\n  '.cache',\n  '.parcel-cache',\n  '.turbo',\n  'dist',\n  'build',\n  'out',\n  'target',\n  'vendor',\n  'coverage',\n  '.nyc_output',\n  '__pycache__',\n  '.venv',\n  'venv',\n  'env',\n  '.tox',\n  '.mypy_cache',\n  '.pytest_cache',\n  '.ruff_cache',\n]);\n\nfunction globToRegExp(pattern: string): RegExp {\n  let result = '^';\n  for (let i = 0; i < pattern.length; i++) {\n    const c = pattern[i];\n    if (c === '*') {\n      if (pattern[i + 1] === '*') {\n        result += '.*';\n        i += 1;\n        if (pattern[i + 1] === '/') {\n          i += 1;\n        }\n      } else {\n        result += '[^/]*';\n      }\n    } else if (c === '?') {\n      result += '[^/]';\n    } else if ('.+^$|(){}[]\\\\'.includes(c)) {\n      result += '\\\\' + c;\n    } else {\n      result += c;\n    }\n  }\n  result += '$';\n  return new RegExp(result);\n}\n\nasync function* walkFiles(\n  root: string,\n  fs: import('./workspaceFS').WorkspaceFS\n): AsyncGenerator<string> {\n  const stack: string[] = [root];\n  while (stack.length > 0) {\n    const dir = stack.pop() as string;\n    let entries;\n    try {\n      entries = await fs.readdir(dir, { withFileTypes: true });\n    } catch (error) {\n      // A stalled-RPC timeout must surface, not be silently skipped as an\n      // unreadable directory — that would corrupt search results (\"no matches\").\n      if (isWorkspaceClientTimeoutError(error)) {\n        throw error;\n      }\n      continue;\n    }\n    for (const entry of entries) {\n      if (entry.name.startsWith('.git') || SKIP_DIRS.has(entry.name)) {\n        continue;\n      }\n      const full = `${dir}/${entry.name}`;\n      if (entry.isDirectory()) {\n        stack.push(full);\n      } else if (entry.isFile()) {\n        yield full;\n      }\n    }\n  }\n}\n\n/**\n * Catastrophic-backtracking guardrails for the fallback grep path.\n *\n * Without ripgrep we run the model-supplied pattern through Node's\n * `RegExp` engine, which uses a backtracking implementation. Patterns\n * with nested unbounded quantifiers (`(a+)+`, `(.*)*`, etc.) can\n * monopolise the event loop for arbitrary wall-clock time on\n * pathological input, and `setTimeout` cannot interrupt a synchronous\n * `RegExp.exec`. Manual review (finding D) flagged this as a real DoS.\n *\n * Mitigations applied here, in order of severity:\n *   1. Cap pattern length so an obviously oversize regex is rejected\n *      before compile.\n *   2. Reject patterns that contain a nested unbounded quantifier of\n *      the form `(...+|*)([+*]|{n,})` — the standard pathological\n *      shape. Still a heuristic (not a full safety proof), but blocks\n *      every common DoS construction we've seen in coding-agent logs.\n *   3. Wall-clock budget for the overall search: each file's regex\n *      pass is checked against a deadline; once exceeded the search\n *      bails with a partial result. Doesn't interrupt a stuck\n *      `exec()` call, but stops a slow pattern from making the whole\n *      Run hang once the first hung file finishes.\n *\n * Hosts that need bulletproof regex safety should install `rg` —\n * ripgrep uses RE2 internally and has no backtracking.\n */\nconst MAX_FALLBACK_PATTERN_LENGTH = 1024;\nconst FALLBACK_GREP_BUDGET_MS = 5000;\n// Per-file byte cap. Codex P2 #41 — without it, the whole-file\n// `readFile` + `split('\\n')` for a multi-GB log is an unbounded\n// allocation that the wall-clock budget (checked between files)\n// can't interrupt. Hosts that need to grep large files should\n// install ripgrep.\nconst FALLBACK_GREP_MAX_FILE_BYTES = 5 * 1024 * 1024;\n\n/**\n * Heuristic: walks `pattern` to find any `(<contents>)<quant>` where\n * `<contents>` itself has an unbounded quantifier. Catches the\n * classic `(a+)+` form AND the double-nested `((a+)+)` form (which a\n * single-pass regex misses because `[^)]*` stops at the first inner\n * close-paren). Misses sufficiently obfuscated cases — bulletproof\n * ReDoS detection requires a real parser. The 5 s wall-clock budget\n * is the hard backstop for anything this slip past.\n */\nfunction hasNestedUnboundedQuantifier(pattern: string): boolean {\n  for (let i = 1; i < pattern.length - 1; i++) {\n    if (pattern[i] !== ')') continue;\n    if (pattern[i - 1] === '\\\\') continue;\n    const next = pattern[i + 1];\n    if (next !== '+' && next !== '*' && next !== '{') continue;\n    // Walk back to find the matching opening paren (respecting depth\n    // and `\\(` escapes).\n    let depth = 1;\n    let j = i - 1;\n    while (j >= 0) {\n      const c = pattern[j];\n      const escaped = j > 0 && pattern[j - 1] === '\\\\';\n      if (!escaped) {\n        if (c === ')') depth++;\n        else if (c === '(') {\n          depth--;\n          if (depth === 0) break;\n        }\n      }\n      j--;\n    }\n    if (j < 0) continue;\n    const inner = pattern.slice(j + 1, i);\n    if (/(?<!\\\\)[+*]/.test(inner)) return true;\n  }\n  return false;\n}\n\nclass FallbackGrepError extends Error {\n  readonly kind: 'pattern-too-long' | 'unsafe-pattern' | 'invalid-pattern';\n  constructor(\n    kind: 'pattern-too-long' | 'unsafe-pattern' | 'invalid-pattern',\n    message: string\n  ) {\n    super(message);\n    this.kind = kind;\n  }\n}\n\nfunction compileFallbackRegex(pattern: string): RegExp {\n  if (pattern.length > MAX_FALLBACK_PATTERN_LENGTH) {\n    throw new FallbackGrepError(\n      'pattern-too-long',\n      `Pattern exceeds ${MAX_FALLBACK_PATTERN_LENGTH}-char fallback cap (install ripgrep for unbounded patterns).`\n    );\n  }\n  if (hasNestedUnboundedQuantifier(pattern)) {\n    throw new FallbackGrepError(\n      'unsafe-pattern',\n      'Pattern contains a nested unbounded quantifier (e.g. `(a+)+` or `((a+)+)`) which can cause catastrophic backtracking in the Node fallback. Install ripgrep for RE2-safe matching.'\n    );\n  }\n  try {\n    return new RegExp(pattern);\n  } catch (e) {\n    throw new FallbackGrepError(\n      'invalid-pattern',\n      `Invalid regex: ${(e as Error).message}`\n    );\n  }\n}\n\n/** Structured return so callers can count matches separately from\n * diagnostic skip-sentinels (Codex P2 [43]). */\ntype FallbackGrepResult = { matches: string[]; skipped: string[] };\n\n/** Renders fallback-grep output: real matches first, skip diagnostics appended. */\nfunction formatFallbackGrepDisplay(result: FallbackGrepResult): string {\n  if (result.matches.length > 0) {\n    return [...result.matches, ...result.skipped].join('\\n');\n  }\n  if (result.skipped.length > 0) {\n    return result.skipped.join('\\n');\n  }\n  return 'No matches found.';\n}\n\nasync function fallbackGrep(\n  root: string,\n  pattern: string,\n  globFilter: string | undefined,\n  maxResults: number,\n  fs: import('./workspaceFS').WorkspaceFS\n): Promise<FallbackGrepResult> {\n  const rx = compileFallbackRegex(pattern);\n  const deadline = Date.now() + FALLBACK_GREP_BUDGET_MS;\n  const globRx =\n    globFilter != null && globFilter !== ''\n      ? globToRegExp(globFilter)\n      : undefined;\n  const matches: string[] = [];\n  // Track skipped (oversize) files separately so they don't consume\n  // the maxResults budget. Codex P2 [43]: round 14's fix pushed skip\n  // sentinels into `matches`, so a directory of one oversize non-\n  // matching file falsely reported `matches: 1`, and enough\n  // oversize files could fill the budget before any real match was\n  // scanned. Now diagnostics are appended after real matches and\n  // independent of the budget.\n  const skippedDiagnostics: string[] = [];\n  for await (const file of walkFiles(root, fs)) {\n    if (Date.now() > deadline) {\n      // Wall-clock budget exceeded — return partial results rather\n      // than letting a slow pattern hang the Run.\n      return { matches, skipped: skippedDiagnostics };\n    }\n    if (globRx != null) {\n      const rel = file.startsWith(root + '/')\n        ? file.slice(root.length + 1)\n        : file;\n      if (!globRx.test(rel)) {\n        continue;\n      }\n    }\n    // Skip files larger than the per-file cap and remember them as\n    // diagnostics (NOT as matches). Codex P2 [41]: pre-fix\n    // `fs.readFile` then `.split('\\n')` allocated the whole file +\n    // an array of every line, which a single multi-GB log could\n    // turn into an OOM even after the regex DoS guards.\n    let stat;\n    try {\n      stat = await fs.stat(file);\n    } catch (error) {\n      // A stalled-RPC timeout must surface, not be skipped — skipping a file can\n      // report \"no matches\" even when the (unreadable-due-to-stall) file matched.\n      if (isWorkspaceClientTimeoutError(error)) {\n        throw error;\n      }\n      continue;\n    }\n    if (stat.size > FALLBACK_GREP_MAX_FILE_BYTES) {\n      skippedDiagnostics.push(\n        `${file}:0:[skipped: file > ${FALLBACK_GREP_MAX_FILE_BYTES} bytes; install ripgrep for unbounded grep]`\n      );\n      continue;\n    }\n    let content;\n    try {\n      content = await fs.readFile(file, 'utf8');\n    } catch (error) {\n      // As above: a client-timeout means a stalled read, not an unreadable file.\n      if (isWorkspaceClientTimeoutError(error)) {\n        throw error;\n      }\n      continue;\n    }\n    if (content.includes('\\0')) {\n      continue;\n    }\n    // Re-check the deadline AFTER the read — a slow disk on one\n    // file can blow the budget without us noticing.\n    if (Date.now() > deadline) {\n      return { matches, skipped: skippedDiagnostics };\n    }\n    const lines = content.split('\\n');\n    for (let i = 0; i < lines.length; i++) {\n      if (rx.test(lines[i])) {\n        matches.push(`${file}:${i + 1}:${lines[i]}`);\n        if (matches.length >= maxResults) {\n          return { matches, skipped: skippedDiagnostics };\n        }\n      }\n    }\n  }\n  return { matches, skipped: skippedDiagnostics };\n}\n\nasync function fallbackGlob(\n  root: string,\n  pattern: string,\n  maxResults: number,\n  fs: import('./workspaceFS').WorkspaceFS\n): Promise<string[]> {\n  const rx = globToRegExp(pattern);\n  const out: string[] = [];\n  for await (const file of walkFiles(root, fs)) {\n    const rel = file.startsWith(root + '/')\n      ? file.slice(root.length + 1)\n      : file;\n    if (rx.test(rel)) {\n      out.push(file);\n      if (out.length >= maxResults) {\n        break;\n      }\n    }\n  }\n  return out;\n}\n\nexport function createLocalGrepSearchTool(\n  config: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        pattern: string;\n        path?: string;\n        glob?: string;\n        max_results?: number;\n      };\n      const target = await resolveWorkspacePathSafe(\n        input.path ?? '.',\n        config,\n        'read'\n      );\n      const maxResults = Math.max(input.max_results ?? DEFAULT_MAX_RESULTS, 1);\n\n      if (await isRipgrepAvailable(config)) {\n        // Pass the pattern through `-e` so dash-prefixed patterns\n        // like `-foo` are treated as the search regex, not as a\n        // (probably-unknown) flag. `rg --help` explicitly requires\n        // `-e/--regexp` (or `--`) for that case. Same trick avoids\n        // any future flag-conflict if a user query happens to look\n        // like an rg long option.\n        const args = [\n          '--line-number',\n          '--column',\n          '--hidden',\n          '--glob',\n          '!.git/**',\n          ...(input.glob != null && input.glob !== ''\n            ? ['--glob', input.glob]\n            : []),\n          '-e',\n          input.pattern,\n          target,\n        ];\n        const result = await spawnLocalProcess('rg', args, {\n          ...config,\n          timeoutMs: config.timeoutMs ?? 30000,\n        });\n        // ripgrep exit codes:\n        //   0  → at least one match\n        //   1  → no matches (clean — \"No matches found.\")\n        //   2  → real error (bad regex, unreadable target, etc.)\n        // Without this branch (Codex P2 #23 — same fix shape glob_search\n        // got from P2 #13), exit-2 errors silently mapped to\n        // `matches: 0`, so the agent treated tooling failures as a\n        // genuine absence of matches.\n        if (\n          result.timedOut ||\n          (result.exitCode != null && result.exitCode > 1)\n        ) {\n          const detail = result.stderr.trim() || `rg exited ${result.exitCode}`;\n          return [\n            `grep_search failed: ${detail}`,\n            {\n              matches: 0,\n              engine: 'ripgrep',\n              error: detail,\n              exitCode: result.exitCode,\n            },\n          ];\n        }\n        const lines = result.stdout\n          .split('\\n')\n          .filter(Boolean)\n          .slice(0, maxResults);\n        const output =\n          lines.length > 0\n            ? lines.join('\\n')\n            : result.stderr.trim() || 'No matches found.';\n        return [output, { matches: lines.length, engine: 'ripgrep' }];\n      }\n\n      try {\n        const { matches, skipped } = await fallbackGrep(\n          target,\n          input.pattern,\n          input.glob,\n          maxResults,\n          fs\n        );\n        // Artifact count: ONLY real matches (Codex P2 [43] —\n        // skip sentinels used to inflate the count and the budget).\n        const display = formatFallbackGrepDisplay({ matches, skipped });\n        return [\n          display,\n          {\n            matches: matches.length,\n            skipped: skipped.length,\n            engine: 'node-fallback',\n          },\n        ];\n      } catch (e) {\n        if (e instanceof FallbackGrepError) {\n          return [\n            `grep_search refused the pattern: ${e.message}`,\n            {\n              matches: 0,\n              engine: 'node-fallback',\n              error: e.message,\n              kind: e.kind,\n            },\n          ];\n        }\n        throw e;\n      }\n    },\n    {\n      name: LocalGrepSearchToolName,\n      description:\n        'Search local files for a regex pattern (ripgrep when available, Node fallback otherwise).',\n      schema: LocalGrepSearchToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalGlobSearchTool(\n  config: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        pattern: string;\n        path?: string;\n        max_results?: number;\n      };\n      const target = await resolveWorkspacePathSafe(\n        input.path ?? '.',\n        config,\n        'read'\n      );\n      const maxResults = Math.max(input.max_results ?? DEFAULT_MAX_RESULTS, 1);\n\n      if (await isRipgrepAvailable(config)) {\n        const result = await spawnLocalProcess(\n          'rg',\n          [\n            '--files',\n            '--hidden',\n            '--glob',\n            '!.git/**',\n            '--glob',\n            input.pattern,\n            target,\n          ],\n          { ...config, timeoutMs: config.timeoutMs ?? 30000 }\n        );\n        // rg --files exit codes:\n        //   0  → at least one file matched\n        //   1  → no files matched (clean — \"No files found.\")\n        //   2  → real error (bad glob, unreadable target, etc.)\n        // Without this branch, exit-2 errors used to silently map to\n        // \"No files found.\" — the agent then treats a tooling failure\n        // as a real absence of matches.\n        if (\n          result.timedOut ||\n          (result.exitCode != null && result.exitCode > 1)\n        ) {\n          const detail = result.stderr.trim() || `rg exited ${result.exitCode}`;\n          return [\n            `glob_search failed: ${detail}`,\n            {\n              files: [],\n              engine: 'ripgrep',\n              error: detail,\n              exitCode: result.exitCode,\n            },\n          ];\n        }\n        const lines = result.stdout\n          .split('\\n')\n          .filter(Boolean)\n          .slice(0, maxResults);\n        return [\n          lines.length > 0 ? lines.join('\\n') : 'No files found.',\n          { files: lines, engine: 'ripgrep' },\n        ];\n      }\n\n      const files = await fallbackGlob(target, input.pattern, maxResults, fs);\n      return [\n        files.length > 0 ? files.join('\\n') : 'No files found.',\n        { files, engine: 'node-fallback' },\n      ];\n    },\n    {\n      name: LocalGlobSearchToolName,\n      description:\n        'Find local files matching a glob pattern (ripgrep when available, Node fallback otherwise).',\n      schema: LocalGlobSearchToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalListDirectoryTool(\n  config: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  const fs = getWorkspaceFS(config);\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as { path?: string };\n      const path = await resolveWorkspacePathSafe(\n        input.path ?? '.',\n        config,\n        'read'\n      );\n      const entries = await fs.readdir(path, { withFileTypes: true });\n      const output = entries\n        .map(\n          (entry) => `${entry.isDirectory() ? 'dir ' : 'file'}\\t${entry.name}`\n        )\n        .join('\\n');\n      return [output || 'Directory is empty.', { path, count: entries.length }];\n    },\n    {\n      name: LocalListDirectoryToolName,\n      description: 'List files and directories in a local directory.',\n      schema: LocalListDirectoryToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport type LocalCodingToolBundle = {\n  tools: DynamicStructuredTool[];\n  /**\n   * Present when `config.fileCheckpointing === true` or a `checkpointer`\n   * was passed in. Callers can call `rewind()` to restore captured\n   * pre-write contents.\n   */\n  checkpointer?: t.LocalFileCheckpointer;\n};\n\nexport function createLocalCodingTools(\n  config: t.LocalExecutionConfig = {},\n  options: { checkpointer?: t.LocalFileCheckpointer } = {}\n): DynamicStructuredTool[] {\n  const checkpointer =\n    options.checkpointer ??\n    (config.fileCheckpointing === true\n      ? createLocalFileCheckpointer({ fs: config.exec?.fs })\n      : undefined);\n  return [\n    createLocalReadFileTool(config),\n    createLocalWriteFileTool(config, checkpointer),\n    createLocalEditFileTool(config, checkpointer),\n    createLocalGrepSearchTool(config),\n    createLocalGlobSearchTool(config),\n    createLocalListDirectoryTool(config),\n    createCompileCheckTool(config),\n    createLocalBashExecutionTool({ config }),\n    createLocalCodeExecutionTool(config),\n    createLocalProgrammaticToolCallingTool(config),\n    createLocalBashProgrammaticToolCallingTool(config),\n  ];\n}\n\n/**\n * Variant of `createLocalCodingTools` that returns the bundle alongside\n * the file checkpointer so callers can later call\n * `bundle.checkpointer?.rewind()`.\n */\nexport function createLocalCodingToolBundle(\n  config: t.LocalExecutionConfig = {},\n  options: { checkpointer?: t.LocalFileCheckpointer } = {}\n): LocalCodingToolBundle {\n  const checkpointer =\n    options.checkpointer ??\n    (config.fileCheckpointing === true\n      ? createLocalFileCheckpointer({ fs: config.exec?.fs })\n      : undefined);\n  return {\n    tools: createLocalCodingTools(config, { checkpointer }),\n    checkpointer,\n  };\n}\n\nexport function createLocalCodingToolDefinitions(): t.LCTool[] {\n  return [\n    toolDefinition(\n      Constants.READ_FILE,\n      'Read a local text file from the configured working directory with line numbers.',\n      LocalReadFileToolSchema as t.JsonSchemaType\n    ),\n    toolDefinition(\n      LocalWriteFileToolName,\n      'Create or overwrite a local text file in the configured working directory.',\n      LocalWriteFileToolSchema as t.JsonSchemaType\n    ),\n    toolDefinition(\n      LocalEditFileToolName,\n      'Apply exact text replacements to a local file.',\n      LocalEditFileToolSchema as t.JsonSchemaType\n    ),\n    toolDefinition(\n      LocalGrepSearchToolName,\n      'Search local files with ripgrep and return matching lines.',\n      LocalGrepSearchToolSchema as t.JsonSchemaType\n    ),\n    toolDefinition(\n      LocalGlobSearchToolName,\n      'Find local files matching a glob pattern.',\n      LocalGlobSearchToolSchema as t.JsonSchemaType\n    ),\n    toolDefinition(\n      LocalListDirectoryToolName,\n      'List files and directories in a local directory.',\n      LocalListDirectoryToolSchema as t.JsonSchemaType\n    ),\n    createCompileCheckToolDefinition(),\n  ];\n}\n\nexport function createLocalCodingToolRegistry(): t.LCToolRegistry {\n  return new Map(\n    createLocalCodingToolDefinitions().map((definition) => [\n      definition.name,\n      definition,\n    ])\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAiCA,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB,KAAK,OAAO;AAC3C,MAAM,yBAAyB;;;;;;;AAQ/B,MAAa,yBAAA;AACb,MAAa,wBAAA;AACb,MAAa,0BAAA;AACb,MAAa,0BAAA;AACb,MAAa,6BAAA;AAEb,MAAa,0BAA4CA,kBAAAA,WAAW;CAClE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,QAAQ;GACN,MAAM;GACN,aAAa;EACf;EACA,OAAO;GACL,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,MAAM;AACnB,CAAC;AAED,MAAa,2BAA6CA,kBAAAA,WAAW;CACnE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,SAAS;GACP,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,QAAQ,SAAS;AAC9B,CAAC;AAED,MAAa,0BAA4CA,kBAAAA,WAAW;CAClE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,UAAU;GACR,MAAM;GACN,aAAa;EACf;EACA,UAAU;GACR,MAAM;GACN,aAAa;EACf;EACA,OAAO;GACL,MAAM;GACN,aACE;GACF,OAAO;IACL,MAAM;IACN,YAAY;KACV,UAAU,EAAE,MAAM,SAAS;KAC3B,UAAU,EAAE,MAAM,SAAS;IAC7B;IACA,UAAU,CAAC,YAAY,UAAU;GACnC;EACF;CACF;CACA,UAAU,CAAC,MAAM;AACnB,CAAC;AAED,MAAa,4BAA8CA,kBAAAA,WAAW;CACpE,MAAM;CACN,YAAY;EACV,SAAS;GACP,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,SAAS;AACtB,CAAC;AAED,MAAa,4BAA8CA,kBAAAA,WAAW;CACpE,MAAM;CACN,YAAY;EACV,SAAS;GACP,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,SAAS;AACtB,CAAC;AAED,MAAa,+BAAiDA,kBAAAA,WAAW;CACvE,MAAM;CACN,YAAY,EACV,MAAM;EACJ,MAAM;EACN,aAAa;CACf,EACF;AACF,CAAC;AAED,SAAS,WACP,SACA,QACA,OACsC;CACtC,MAAM,QAAQ,KAAK,KAAK,UAAU,KAAK,GAAG,CAAC;CAO3C,IAAI,SAAS,QAAQ,SAAS,GAAG;EAG/B,MAAM,WAFQ,QAAQ,MAAM,IACP,CAAC,CAAC,MAAM,KACL,CAAC,CACtB,KACE,MAAM,UACL,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,IAAI,MACtD,CAAC,CACA,KAAK,IAAI;EACZ,OAAO;GACL,MAAMC,6BAAAA,oBAAoB,UAAU,cAAc;GAClD,WAAW,SAAS,SAAS;EAC/B;CACF;CAEA,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK;EAC9B,MAAM,OAAO,QAAQ,QAAQ,MAAM,MAAM;EACzC,IAAI,SAAS,IAEX,OAAO;GAAE,MAAM;GAAI,WAAW;EAAM;EAEtC,SAAS,OAAO;CAClB;CAEA,MAAM,MAAgB,CAAC;CACvB,IAAI,MAAM;CACV,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK;EAC9B,MAAM,OAAO,QAAQ,QAAQ,MAAM,GAAG;EACtC,IAAI,SAAS,IAAI;GACf,IAAI,KAAK,QAAQ,MAAM,GAAG,CAAC;GAC3B;EACF;EACA,IAAI,KAAK,QAAQ,MAAM,KAAK,IAAI,CAAC;EACjC,MAAM,OAAO;EACb,IAAI,MAAM,QAAQ,KAAK,MAAM,QAAQ,QACnC,YAAY;CAEhB;CACA,MAAM,WAAW,IACd,KACE,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,IAAI,MACrE,CAAC,CACA,KAAK,IAAI;CACZ,OAAO;EACL,MAAMA,6BAAAA,oBAAoB,UAAU,cAAc;EAClD,WAAW,CAAC,aAAa,SAAS,SAAS;CAC7C;AACF;AAEA,MAAM,iBAAiB;AASvB,eAAe,oBACb,QACA,QACoB;CACpB,MAAM,OAAO,OAAO,uBAAuB;CAC3C,IAAI,SAAS,OAAO,OAAO,KAAA;CAC3B,MAAM,UAAU,MAAMC,oBAAAA,uBAAuBC,QAAM,MAAM;CACzD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,OAAO;EAAE;EAAM;CAAQ;AACzB;AAEA,SAAS,yBAAyB,MAAc,KAAwB;CACtE,IAAI,OAAO,MAAM,OAAO;CACxB,IAAI,IAAI,QAAQ,IAAI,OAAO;CAK3B,OAAO,GAAG,OAHR,IAAI,SAAS,WACT,gCAAgC,IAAI,QAAQ,QAAQ,OACpD,iCAAiC,IAAI,QAAQ,QAAQ,OACjC,IAAI,QAAQ;AACxC;;;;;;;;;;;;;;;AAgBA,eAAe,kBACb,IACA,QACA,SACA,QACA,UACe;CACf,IAAI;EACF,IAAI,SAIF,MAAM,GAAG,UACPA,QACAC,qBAAAA,WAAW,QAAQ;GAAE,GAAG;GAAU,MAAM;EAAO,CAAC,GAChD,MACF;OAEA,MAAM,GAAG,OAAOD,MAAI;CAExB,SAAS,OAAO;EAKd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;CAEV;AACF;AAEA,SAAS,cACP,UACA,QACA,OACQ;CACR,IAAI,WAAW,OACb,OAAO;CAET,MAAM,QAAA,GAAA,KAAA,SAAA,CAAgB,QAAQ;CAC9B,MAAM,SAAA,GAAA,KAAA,oBAAA,CAA4B,MAAM,MAAM,QAAQ,OAAO,IAAI,IAAI,EACnE,SAAS,EACX,CAAC;CACD,IAAI,MAAM,UAAU,gBAClB,OAAO;CAET,OACE,MAAM,MAAM,GAAG,cAAc,IAC7B,0BAA0B,MAAM,SAAS,eAAe;AAE5D;AAEA,SAAS,eAAe,OAIwB;CAC9C,MAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,IACnC,MAAM,MAAM,KAAK,UAAU;EAC3B,SAAS,KAAK,YAAY;EAC1B,SAAS,KAAK,YAAY;CAC5B,EAAE,IACA,CAAC;CAEL,IAAI,MAAM,YAAY,QAAQ,MAAM,YAAY,MAC9C,MAAM,KAAK;EACT,SAAS,MAAM,YAAY;EAC3B,SAAS,MAAM,YAAY;CAC7B,CAAC;CAGH,OAAO;AACT;AAEA,SAAS,eACP,MACA,aACA,YACU;CACV,OAAO;EACL;EACA;EACA;EACA,iBAAiB,CAAC,UAAU,gBAAgB;EAC5C,gBAAA;EACA,UAAU;CACZ;AACF;AAEA,eAAe,YACb,QACA,IACkB;CAClB,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,GAAG,KAAKF,QAAM,GAAG;EAChC,MAAM,SAAS,OAAO,MAAM,sBAAsB;EAClD,MAAM,EAAE,cAAc,MAAM,OAAO,KACjC,QACA,GACA,wBACA,CACF;EACA,KAAK,IAAI,IAAI,GAAG,IAAI,WAAW,KAC7B,IAAI,OAAO,OAAO,GAChB,OAAO;EAGX,OAAO;CACT,UAAU;EACR,MAAM,QAAQ,MAAM;CACtB;AACF;AAEA,MAAM,+BAA+B,IAAI,OAAO;AAEhD,SAAgB,wBACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,MACF;EACA,MAAM,WAAW,MAAM,GAAG,KAAKJ,MAAI;EACnC,IAAI,CAAC,SAAS,OAAO,GACnB,MAAM,IAAI,MAAM,uBAAuB,MAAM,MAAM;EAErD,MAAM,WAAW,KAAK,IACpB,OAAO,gBAAgB,wBACvB,CACF;EACA,IAAI,SAAS,OAAO,UAElB,OAAO,CAAC,WADgB,SAAS,KAAK,sBAAsB,SAAS,qFACvD;GAAE,MAAA;GAAM,OAAO,SAAS;GAAM,WAAW;EAAK,CAAC;EAG/D,IAAI,MAAM,YAAYA,QAAM,EAAE,GAAG;GAC/B,MAAM,iBAAiB,OAAO,yBAAyB;GACvD,IAAI,mBAAmB,OAAO;IAC5B,MAAM,aAAa,MAAMK,oBAAAA,mBAAmB;KAC1C,MAAA;KACA,OAAO,SAAS;KAChB,MAAM;KACN,UAAU,OAAO,sBAAsB;KAIvC;IACF,CAAC;IACD,IAAI,WAAW,SAAS,SACtB,OAAO,CACLC,oBAAAA,uBAAuBN,QAAM,UAAU,GACvC;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,OACtB,OAAO,CACL,CACE;KACE,MAAM;KACN,MAAM,QAAQA,OAAK,qBAAqB,SAAS,KAAK;IACxD,GACA;KACE,MAAM;KACN,WAAW,EAAE,KAAK,WAAW,QAAQ;IACvC,CACF,GACA;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,YACtB,OAAO,CACL,qBAAqB,WAAW,KAAK,eAAe,WAAW,MAAM,iBAAiB,WAAW,SAAS,cAC1G;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,UACtB,OAAO,CACL,iCAAiC,SAAS,KAAK,UAAU,WAAW,KAAK,KAAKA,UAC9E;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,QAAQ;IACV,CACF;GAGJ,OACE,OAAO,CACL,iCAAiC,SAAS,KAAK,WAAWA,UAC1D;IAAE,MAAA;IAAM,OAAO,SAAS;IAAM,QAAQ;GAAK,CAC7C;EAEJ;EAGA,MAAM,SAAS,WAAW,MADJ,GAAG,SAASA,QAAM,MAAM,GACX,MAAM,QAAQ,MAAM,KAAK;EAC5D,OAAO,CACL,OAAO,YAAY,GAAG,OAAO,KAAK,iBAAiB,OAAO,MAC1D;GAAE,MAAA;GAAM,OAAO,SAAS;EAAK,CAC/B;CACF,GACA;EACE,MAAA;EACA,aACE;EAGF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,yBACd,SAAiC,CAAC,GAClC,cACuB;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,IAAI,OAAO,aAAa,MACtB,MAAM,IAAI,MAAM,gDAAgD;EAElE,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,OACF;EACA,IAAI,gBAAgB,MAClB,MAAM,aAAa,mBAAmBJ,MAAI;EAG5C,IAAI,SAAS;EACb,IAAI,WAAW;GAAE,MAAM;GAAI,QAAQ;GAAO,SAAS;EAAc;EAGjE,IAAI,UAAU;EACd,IAAI;GAEF,MAAM,UAAUO,qBAAAA,WAAW,MADT,GAAG,SAASP,QAAM,MAAM,CACZ;GAC9B,SAAS,QAAQ;GACjB,WAAW;GACX,UAAU;EACZ,SAAS,OAAO;GAGd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER,UAAU;EACZ;EAEA,MAAM,GAAG,OAAA,GAAA,KAAA,QAAA,CAAcF,MAAI,GAAG,EAAE,WAAW,KAAK,CAAC;EACjD,MAAM,YAAYC,qBAAAA,WAAW,MAAM,SAAS,QAAQ;EACpD,MAAM,GAAG,UAAUD,QAAM,WAAW,MAAM;EAE1C,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,oBAAoBA,QAAM,MAAM;EACjD,SAAS,OAAO;GAId,IACEE,oBAAAA,8BAA8B,KAAK,KACnC,OAAO,wBAAwB,UAE/B,MAAM,kBAAkB,IAAIF,QAAM,SAAS,QAAQ,QAAQ;GAE7D,MAAM;EACR;EAEA,MAAMQ,SAAO,UACT,cAAcR,QAAM,QAAQ,MAAM,OAAO,IACzC,cAAc,MAAM,QAAQ,OAAO;EAIvC,MAAM,UAAU,yBAHI,UAChB,aAAaA,OAAK,IAAI,MAAM,QAAQ,OAAO,kBAAkBQ,WAC7D,WAAWR,OAAK,IAAI,MAAM,QAAQ,OAAO,WACS,MAAM;EAC5D,IAAI,QAAQ,QAAQ,OAAO,SAAS,OAAO,SAAS,UAAU;GAI5D,MAAM,kBAAkB,IAAIA,QAAM,SAAS,QAAQ,QAAQ;GAC3D,MAAM,IAAI,MACR,mCAAmC,OAAO,QAAQ,QAAQ,mCAAmC,OAAO,QAAQ,QAC9G;EACF;EACA,OAAO,CACL,SACA;GACE,MAAA;GACA,OAAO,UAAU;GACjB,UAAU,CAAC;GACX,SAAS,SAAS,YAAY,SAAS,SAAS;GAChD,SAAS,SAAS;GAClB,GAAI,UAAU,QAAQ,OAAO,QAAQ,OAAO,QACxC,EAAE,cAAc,OAAO,QAAQ,QAAQ,IACvC,CAAC;EACP,CACF;CACF,GACA;EACE,MAAM;EACN,aACE;EAGF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,wBACd,SAAiC,CAAC,GAClC,cACuB;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAMd,IAAI,OAAO,aAAa,MACtB,MAAM,IAAI,MAAM,+CAA+C;EAEjE,MAAM,QAAQ,eAAe,KAAK;EAClC,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,MAAM,kDAAkD;EAGpE,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,OACF;EAEA,MAAM,WAAWG,qBAAAA,WAAW,MADV,GAAG,SAASP,QAAM,MAAM,CACX;EAC/B,MAAM,WAAW,SAAS;EAE1B,IAAI,OAAO;EACX,MAAM,iBAA2B,CAAC;EAClC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,OAAO,MAAM;GACnB,MAAM,QAAQS,uBAAAA,WAAW,MAAM,KAAK,OAAO;GAC3C,IAAI,SAAS,MACX,MAAM,IAAI,MACR,QAAQ,IAAI,EAAE,GAAG,MAAM,OAAO,iCAAiC,MAAM,KAAK,oIAG5E;GAEF,eAAe,KAAK,MAAM,QAAQ;GAClC,OAAOC,uBAAAA,UAAU,MAAM,OAAO,KAAK,OAAO;EAC5C;EAEA,IAAI,gBAAgB,MAClB,MAAM,aAAa,mBAAmBV,MAAI;EAE5C,MAAM,YAAYC,qBAAAA,WAAW,MAAM,QAAQ;EAC3C,MAAM,GAAG,UAAUD,QAAM,WAAW,MAAM;EAE1C,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,oBAAoBA,QAAM,MAAM;EACjD,SAAS,OAAO;GAGd,IACEE,oBAAAA,8BAA8B,KAAK,KACnC,OAAO,wBAAwB,UAE/B,MAAM,kBAAkB,IAAIF,QAAM,MAAM,UAAU,QAAQ;GAE5D,MAAM;EACR;EAEA,MAAMQ,SAAO,cAAcR,QAAM,UAAU,IAAI;EAC/C,MAAM,QAAQ,eAAe,MAAM,MAAM,MAAM,OAAO;EAKtD,MAAM,UAAU,yBAHd,WAAW,MAAM,OAAO,cAAcA,YACrC,QAAQ,iBAAiB,eAAe,KAAK,IAAI,EAAE,KAAK,MACzD,YAAYQ,UACwC,MAAM;EAC5D,IAAI,QAAQ,QAAQ,OAAO,SAAS,OAAO,SAAS,UAAU;GAI5D,MAAM,kBAAkB,IAAIR,QAAM,MAAM,UAAU,QAAQ;GAC1D,MAAM,IAAI,MACR,kCAAkC,OAAO,QAAQ,QAAQ,kCAAkC,OAAO,QAAQ,QAC5G;EACF;EACA,OAAO,CACL,SACA;GACE,MAAA;GACA,OAAO,MAAM;GACb,YAAY;GACZ,SAAS,SAAS,YAAY,SAAS,SAAS;GAChD,SAAS,SAAS;GAClB,GAAI,UAAU,QAAQ,OAAO,QAAQ,OAAO,QACxC,EAAE,cAAc,OAAO,QAAQ,QAAQ,IACvC,CAAC;EACP,CACF;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;;;;;;;;;;;;AAoBA,IAAI,+CAA+B,IAAI,QAGrC;AAEF,SAAS,YAAY,KAA4C;CAK/D,IAAI,OAAO,MAAM,OAAO;CACxB,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK,GACpC,OAAO,KAAK,IAAI;CAElB,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,eAAe,mBACb,QACkB;CAClB,MAAM,UAAUW,6BAAAA,SAAS,MAAM;CAC/B,IAAI,SAAS,6BAA6B,IAAI,OAAO;CACrD,IAAI,UAAU,MAAM;EAClB,yBAAS,IAAI,IAAI;EACjB,6BAA6B,IAAI,SAAS,MAAM;CAClD;CACA,MAAM,SAAS,YAAY,OAAO,GAAG;CACrC,IAAI,eAAe,OAAO,IAAI,MAAM;CACpC,IAAI,gBAAgB,MAAM;EACxB,eAAeC,6BAAAA,kBACb,MACA,CAAC,WAAW,GACZ;GAAE,GAAG;GAAQ,WAAW;GAAM,SAAS,EAAE,SAAS,MAAM;EAAE,GAC1D,EAAE,UAAU,KAAK,CACnB,CAAC,CACE,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,CACrC,YAAY,KAAK;EACpB,OAAO,IAAI,QAAQ,YAAY;CACjC;CACA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,6BAAmC;CACjD,+CAA+B,IAAI,QAAQ;AAC7C;AAQA,MAAM,YAAY,IAAI,IAAI;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,aAAa,SAAyB;CAC7C,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,IAAI,QAAQ;EAClB,IAAI,MAAM,KACR,IAAI,QAAQ,IAAI,OAAO,KAAK;GAC1B,UAAU;GACV,KAAK;GACL,IAAI,QAAQ,IAAI,OAAO,KACrB,KAAK;EAET,OACE,UAAU;OAEP,IAAI,MAAM,KACf,UAAU;OACL,IAAI,gBAAgB,SAAS,CAAC,GACnC,UAAU,OAAO;OAEjB,UAAU;CAEd;CACA,UAAU;CACV,OAAO,IAAI,OAAO,MAAM;AAC1B;AAEA,gBAAgB,UACd,MACA,IACwB;CACxB,MAAM,QAAkB,CAAC,IAAI;CAC7B,OAAO,MAAM,SAAS,GAAG;EACvB,MAAM,MAAM,MAAM,IAAI;EACtB,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EACzD,SAAS,OAAO;GAGd,IAAIV,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,KAAK,MAAM,SAAS,SAAS;GAC3B,IAAI,MAAM,KAAK,WAAW,MAAM,KAAK,UAAU,IAAI,MAAM,IAAI,GAC3D;GAEF,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM;GAC7B,IAAI,MAAM,YAAY,GACpB,MAAM,KAAK,IAAI;QACV,IAAI,MAAM,OAAO,GACtB,MAAM;EAEV;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAMhC,MAAM,+BAA+B,IAAI,OAAO;;;;;;;;;;AAWhD,SAAS,6BAA6B,SAA0B;CAC9D,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,SAAS,GAAG,KAAK;EAC3C,IAAI,QAAQ,OAAO,KAAK;EACxB,IAAI,QAAQ,IAAI,OAAO,MAAM;EAC7B,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;EAGlD,IAAI,QAAQ;EACZ,IAAI,IAAI,IAAI;EACZ,OAAO,KAAK,GAAG;GACb,MAAM,IAAI,QAAQ;GAElB,IAAI,EADY,IAAI,KAAK,QAAQ,IAAI,OAAO;QAEtC,MAAM,KAAK;SACV,IAAI,MAAM,KAAK;KAClB;KACA,IAAI,UAAU,GAAG;IACnB;;GAEF;EACF;EACA,IAAI,IAAI,GAAG;EACX,MAAM,QAAQ,QAAQ,MAAM,IAAI,GAAG,CAAC;EACpC,IAAI,cAAc,KAAK,KAAK,GAAG,OAAO;CACxC;CACA,OAAO;AACT;AAEA,IAAM,oBAAN,cAAgC,MAAM;CACpC;CACA,YACE,MACA,SACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,qBAAqB,SAAyB;CACrD,IAAI,QAAQ,SAAS,6BACnB,MAAM,IAAI,kBACR,oBACA,mBAAmB,4BAA4B,6DACjD;CAEF,IAAI,6BAA6B,OAAO,GACtC,MAAM,IAAI,kBACR,kBACA,mLACF;CAEF,IAAI;EACF,OAAO,IAAI,OAAO,OAAO;CAC3B,SAAS,GAAG;EACV,MAAM,IAAI,kBACR,mBACA,kBAAmB,EAAY,SACjC;CACF;AACF;;AAOA,SAAS,0BAA0B,QAAoC;CACrE,IAAI,OAAO,QAAQ,SAAS,GAC1B,OAAO,CAAC,GAAG,OAAO,SAAS,GAAG,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI;CAEzD,IAAI,OAAO,QAAQ,SAAS,GAC1B,OAAO,OAAO,QAAQ,KAAK,IAAI;CAEjC,OAAO;AACT;AAEA,eAAe,aACb,MACA,SACA,YACA,YACA,IAC6B;CAC7B,MAAM,KAAK,qBAAqB,OAAO;CACvC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,SACJ,cAAc,QAAQ,eAAe,KACjC,aAAa,UAAU,IACvB,KAAA;CACN,MAAM,UAAoB,CAAC;CAQ3B,MAAM,qBAA+B,CAAC;CACtC,WAAW,MAAM,QAAQ,UAAU,MAAM,EAAE,GAAG;EAC5C,IAAI,KAAK,IAAI,IAAI,UAGf,OAAO;GAAE;GAAS,SAAS;EAAmB;EAEhD,IAAI,UAAU,MAAM;GAClB,MAAM,MAAM,KAAK,WAAW,OAAO,GAAG,IAClC,KAAK,MAAM,KAAK,SAAS,CAAC,IAC1B;GACJ,IAAI,CAAC,OAAO,KAAK,GAAG,GAClB;EAEJ;EAMA,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,GAAG,KAAK,IAAI;EAC3B,SAAS,OAAO;GAGd,IAAIA,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,IAAI,KAAK,OAAO,8BAA8B;GAC5C,mBAAmB,KACjB,GAAG,KAAK,sBAAsB,6BAA6B,4CAC7D;GACA;EACF;EACA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,GAAG,SAAS,MAAM,MAAM;EAC1C,SAAS,OAAO;GAEd,IAAIA,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,IAAI,QAAQ,SAAS,IAAI,GACvB;EAIF,IAAI,KAAK,IAAI,IAAI,UACf,OAAO;GAAE;GAAS,SAAS;EAAmB;EAEhD,MAAM,QAAQ,QAAQ,MAAM,IAAI;EAChC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,IAAI,GAAG,KAAK,MAAM,EAAE,GAAG;GACrB,QAAQ,KAAK,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,MAAM,IAAI;GAC3C,IAAI,QAAQ,UAAU,YACpB,OAAO;IAAE;IAAS,SAAS;GAAmB;EAElD;CAEJ;CACA,OAAO;EAAE;EAAS,SAAS;CAAmB;AAChD;AAEA,eAAe,aACb,MACA,SACA,YACA,IACmB;CACnB,MAAM,KAAK,aAAa,OAAO;CAC/B,MAAM,MAAgB,CAAC;CACvB,WAAW,MAAM,QAAQ,UAAU,MAAM,EAAE,GAAG;EAC5C,MAAM,MAAM,KAAK,WAAW,OAAO,GAAG,IAClC,KAAK,MAAM,KAAK,SAAS,CAAC,IAC1B;EACJ,IAAI,GAAG,KAAK,GAAG,GAAG;GAChB,IAAI,KAAK,IAAI;GACb,IAAI,IAAI,UAAU,YAChB;EAEJ;CACF;CACA,OAAO;AACT;AAEA,SAAgB,0BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKC,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAMd,MAAM,SAAS,MAAMC,6BAAAA,yBACnB,MAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,aAAa,KAAK,IAAI,MAAM,eAAe,qBAAqB,CAAC;EAEvE,IAAI,MAAM,mBAAmB,MAAM,GAAG;GAoBpC,MAAM,SAAS,MAAMQ,6BAAAA,kBAAkB,MAAM;IAZ3C;IACA;IACA;IACA;IACA;IACA,GAAI,MAAM,QAAQ,QAAQ,MAAM,SAAS,KACrC,CAAC,UAAU,MAAM,IAAI,IACrB,CAAC;IACL;IACA,MAAM;IACN;GAE8C,GAAG;IACjD,GAAG;IACH,WAAW,OAAO,aAAa;GACjC,CAAC;GASD,IACE,OAAO,YACN,OAAO,YAAY,QAAQ,OAAO,WAAW,GAC9C;IACA,MAAM,SAAS,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO;IAC3D,OAAO,CACL,uBAAuB,UACvB;KACE,SAAS;KACT,QAAQ;KACR,OAAO;KACP,UAAU,OAAO;IACnB,CACF;GACF;GACA,MAAM,QAAQ,OAAO,OAClB,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,MAAM,GAAG,UAAU;GAKtB,OAAO,CAHL,MAAM,SAAS,IACX,MAAM,KAAK,IAAI,IACf,OAAO,OAAO,KAAK,KAAK,qBACd;IAAE,SAAS,MAAM;IAAQ,QAAQ;GAAU,CAAC;EAC9D;EAEA,IAAI;GACF,MAAM,EAAE,SAAS,YAAY,MAAM,aACjC,QACA,MAAM,SACN,MAAM,MACN,YACA,EACF;GAIA,OAAO,CADS,0BAA0B;IAAE;IAAS;GAAQ,CAErD,GACN;IACE,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB,QAAQ;GACV,CACF;EACF,SAAS,GAAG;GACV,IAAI,aAAa,mBACf,OAAO,CACL,oCAAoC,EAAE,WACtC;IACE,SAAS;IACT,QAAQ;IACR,OAAO,EAAE;IACT,MAAM,EAAE;GACV,CACF;GAEF,MAAM;EACR;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,0BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKT,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,SAAS,MAAMC,6BAAAA,yBACnB,MAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,aAAa,KAAK,IAAI,MAAM,eAAe,qBAAqB,CAAC;EAEvE,IAAI,MAAM,mBAAmB,MAAM,GAAG;GACpC,MAAM,SAAS,MAAMQ,6BAAAA,kBACnB,MACA;IACE;IACA;IACA;IACA;IACA;IACA,MAAM;IACN;GACF,GACA;IAAE,GAAG;IAAQ,WAAW,OAAO,aAAa;GAAM,CACpD;GAQA,IACE,OAAO,YACN,OAAO,YAAY,QAAQ,OAAO,WAAW,GAC9C;IACA,MAAM,SAAS,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO;IAC3D,OAAO,CACL,uBAAuB,UACvB;KACE,OAAO,CAAC;KACR,QAAQ;KACR,OAAO;KACP,UAAU,OAAO;IACnB,CACF;GACF;GACA,MAAM,QAAQ,OAAO,OAClB,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,MAAM,GAAG,UAAU;GACtB,OAAO,CACL,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,mBACtC;IAAE,OAAO;IAAO,QAAQ;GAAU,CACpC;EACF;EAEA,MAAM,QAAQ,MAAM,aAAa,QAAQ,MAAM,SAAS,YAAY,EAAE;EACtE,OAAO,CACL,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,mBACtC;GAAE;GAAO,QAAQ;EAAgB,CACnC;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,6BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKT,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAElB,MAAMH,SAAO,MAAMI,6BAAAA,yBACjBS,SAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,UAAU,MAAM,GAAG,QAAQb,QAAM,EAAE,eAAe,KAAK,CAAC;EAM9D,OAAO,CALQ,QACZ,KACE,UAAU,GAAG,MAAM,YAAY,IAAI,SAAS,OAAO,IAAI,MAAM,MAChE,CAAC,CACA,KAAK,IACK,KAAK,uBAAuB;GAAE,MAAA;GAAM,OAAO,QAAQ;EAAO,CAAC;CAC1E,GACA;EACE,MAAM;EACN,aAAa;EACb,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAYA,SAAgB,uBACd,SAAiC,CAAC,GAClC,UAAsD,CAAC,GAC9B;CACzB,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1Bc,yBAAAA,4BAA4B,EAAE,IAAI,OAAO,MAAM,GAAG,CAAC,IACnD,KAAA;CACN,OAAO;EACL,wBAAwB,MAAM;EAC9B,yBAAyB,QAAQ,YAAY;EAC7C,wBAAwB,QAAQ,YAAY;EAC5C,0BAA0B,MAAM;EAChC,0BAA0B,MAAM;EAChC,6BAA6B,MAAM;EACnCC,yBAAAA,uBAAuB,MAAM;EAC7BC,4BAAAA,6BAA6B,EAAE,OAAO,CAAC;EACvCC,4BAAAA,6BAA6B,MAAM;EACnCC,qCAAAA,uCAAuC,MAAM;EAC7CC,qCAAAA,2CAA2C,MAAM;CACnD;AACF;;;;;;AAOA,SAAgB,4BACd,SAAiC,CAAC,GAClC,UAAsD,CAAC,GAChC;CACvB,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BL,yBAAAA,4BAA4B,EAAE,IAAI,OAAO,MAAM,GAAG,CAAC,IACnD,KAAA;CACN,OAAO;EACL,OAAO,uBAAuB,QAAQ,EAAE,aAAa,CAAC;EACtD;CACF;AACF;AAEA,SAAgB,mCAA+C;CAC7D,OAAO;EACL,eAAA,aAEE,mFACA,uBACF;EACA,eACE,wBACA,8EACA,wBACF;EACA,eACE,uBACA,kDACA,uBACF;EACA,eACE,yBACA,8DACA,yBACF;EACA,eACE,yBACA,6CACA,yBACF;EACA,eACE,4BACA,oDACA,4BACF;EACAM,yBAAAA,iCAAiC;CACnC;AACF;AAEA,SAAgB,gCAAkD;CAChE,OAAO,IAAI,IACT,iCAAiC,CAAC,CAAC,KAAK,eAAe,CACrD,WAAW,MACX,UACF,CAAC,CACH;AACF"}
+{"version":3,"file":"LocalCodingTools.cjs","names":["withIntent","truncateLocalOutput","runPostEditSyntaxCheck","path","encodeFile","isWorkspaceClientTimeoutError","getWorkspaceFS","resolveWorkspacePathSafe","classifyAttachment","imageAttachmentContent","decodeFile","diff","locateEdit","applyEdit","getSpawn","spawnLocalProcess","input","createLocalFileCheckpointer","createCompileCheckTool","createLocalBashExecutionTool","createLocalCodeExecutionTool","createLocalProgrammaticToolCallingTool","createLocalBashProgrammaticToolCallingTool","createCompileCheckToolDefinition"],"sources":["../../../../src/tools/local/LocalCodingTools.ts"],"mappings":";;;;;;;;;;;;;;;;;AAiCA,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB,KAAK,OAAO;AAC3C,MAAM,yBAAyB;AAQ/B,MAAa,yBAAA;AACb,MAAa,wBAAA;AACb,MAAa,0BAAA;AACb,MAAa,0BAAA;AACb,MAAa,6BAAA;AAEb,MAAa,0BAA4CA,kBAAAA,WAAW;CAClE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,QAAQ;GACN,MAAM;GACN,aAAa;EACf;EACA,OAAO;GACL,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,MAAM;AACnB,CAAC;AAED,MAAa,2BAA6CA,kBAAAA,WAAW;CACnE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,SAAS;GACP,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,QAAQ,SAAS;AAC9B,CAAC;AAED,MAAa,0BAA4CA,kBAAAA,WAAW;CAClE,MAAM;CACN,YAAY;EACV,MAAM;GACJ,MAAM;GACN,aACE;EACJ;EACA,UAAU;GACR,MAAM;GACN,aAAa;EACf;EACA,UAAU;GACR,MAAM;GACN,aAAa;EACf;EACA,OAAO;GACL,MAAM;GACN,aACE;GACF,OAAO;IACL,MAAM;IACN,YAAY;KACV,UAAU,EAAE,MAAM,SAAS;KAC3B,UAAU,EAAE,MAAM,SAAS;IAC7B;IACA,UAAU,CAAC,YAAY,UAAU;GACnC;EACF;CACF;CACA,UAAU,CAAC,MAAM;AACnB,CAAC;AAED,MAAa,4BAA8CA,kBAAAA,WAAW;CACpE,MAAM;CACN,YAAY;EACV,SAAS;GACP,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,SAAS;AACtB,CAAC;AAED,MAAa,4BAA8CA,kBAAAA,WAAW;CACpE,MAAM;CACN,YAAY;EACV,SAAS;GACP,MAAM;GACN,aAAa;EACf;EACA,MAAM;GACJ,MAAM;GACN,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,aAAa;EACf;CACF;CACA,UAAU,CAAC,SAAS;AACtB,CAAC;AAED,MAAa,+BAAiDA,kBAAAA,WAAW;CACvE,MAAM;CACN,YAAY,EACV,MAAM;EACJ,MAAM;EACN,aAAa;CACf,EACF;AACF,CAAC;AAED,SAAS,WACP,SACA,QACA,OACsC;CACtC,MAAM,QAAQ,KAAK,KAAK,UAAU,KAAK,GAAG,CAAC;CAO3C,IAAI,SAAS,QAAQ,SAAS,GAAG;EAG/B,MAAM,WAFQ,QAAQ,MAAM,IACP,CAAC,CAAC,MAAM,KACL,CAAC,CACtB,KACE,MAAM,UACL,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,IAAI,MACtD,CAAC,CACA,KAAK,IAAI;EACZ,OAAO;GACL,MAAMC,6BAAAA,oBAAoB,UAAU,cAAc;GAClD,WAAW,SAAS,SAAS;EAC/B;CACF;CAEA,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK;EAC9B,MAAM,OAAO,QAAQ,QAAQ,MAAM,MAAM;EACzC,IAAI,SAAS,IAEX,OAAO;GAAE,MAAM;GAAI,WAAW;EAAM;EAEtC,SAAS,OAAO;CAClB;CAEA,MAAM,MAAgB,CAAC;CACvB,IAAI,MAAM;CACV,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,KAAK;EAC9B,MAAM,OAAO,QAAQ,QAAQ,MAAM,GAAG;EACtC,IAAI,SAAS,IAAI;GACf,IAAI,KAAK,QAAQ,MAAM,GAAG,CAAC;GAC3B;EACF;EACA,IAAI,KAAK,QAAQ,MAAM,KAAK,IAAI,CAAC;EACjC,MAAM,OAAO;EACb,IAAI,MAAM,QAAQ,KAAK,MAAM,QAAQ,QACnC,YAAY;CAEhB;CACA,MAAM,WAAW,IACd,KACE,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,IAAI,MACrE,CAAC,CACA,KAAK,IAAI;CACZ,OAAO;EACL,MAAMA,6BAAAA,oBAAoB,UAAU,cAAc;EAClD,WAAW,CAAC,aAAa,SAAS,SAAS;CAC7C;AACF;AAEA,MAAM,iBAAiB;AASvB,eAAe,oBACb,QACA,QACoB;CACpB,MAAM,OAAO,OAAO,uBAAuB;CAC3C,IAAI,SAAS,OAAO,OAAO,KAAA;CAC3B,MAAM,UAAU,MAAMC,oBAAAA,uBAAuBC,QAAM,MAAM;CACzD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,OAAO;EAAE;EAAM;CAAQ;AACzB;AAEA,SAAS,yBAAyB,MAAc,KAAwB;CACtE,IAAI,OAAO,MAAM,OAAO;CACxB,IAAI,IAAI,QAAQ,IAAI,OAAO;CAK3B,OAAO,GAAG,OAHR,IAAI,SAAS,WACT,gCAAgC,IAAI,QAAQ,QAAQ,OACpD,iCAAiC,IAAI,QAAQ,QAAQ,OACjC,IAAI,QAAQ;AACxC;AAgBA,eAAe,kBACb,IACA,QACA,SACA,QACA,UACe;CACf,IAAI;EACF,IAAI,SAIF,MAAM,GAAG,UACPA,QACAC,qBAAAA,WAAW,QAAQ;GAAE,GAAG;GAAU,MAAM;EAAO,CAAC,GAChD,MACF;OAEA,MAAM,GAAG,OAAOD,MAAI;CAExB,SAAS,OAAO;EAKd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;CAEV;AACF;AAEA,SAAS,cACP,UACA,QACA,OACQ;CACR,IAAI,WAAW,OACb,OAAO;CAET,MAAM,QAAA,GAAA,KAAA,SAAA,CAAgB,QAAQ;CAC9B,MAAM,SAAA,GAAA,KAAA,oBAAA,CAA4B,MAAM,MAAM,QAAQ,OAAO,IAAI,IAAI,EACnE,SAAS,EACX,CAAC;CACD,IAAI,MAAM,UAAU,gBAClB,OAAO;CAET,OACE,MAAM,MAAM,GAAG,cAAc,IAC7B,0BAA0B,MAAM,SAAS,eAAe;AAE5D;AAEA,SAAS,eAAe,OAIwB;CAC9C,MAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,IACnC,MAAM,MAAM,KAAK,UAAU;EAC3B,SAAS,KAAK,YAAY;EAC1B,SAAS,KAAK,YAAY;CAC5B,EAAE,IACA,CAAC;CAEL,IAAI,MAAM,YAAY,QAAQ,MAAM,YAAY,MAC9C,MAAM,KAAK;EACT,SAAS,MAAM,YAAY;EAC3B,SAAS,MAAM,YAAY;CAC7B,CAAC;CAGH,OAAO;AACT;AAEA,SAAS,eACP,MACA,aACA,YACU;CACV,OAAO;EACL;EACA;EACA;EACA,iBAAiB,CAAC,UAAU,gBAAgB;EAC5C,gBAAA;EACA,UAAU;CACZ;AACF;AAEA,eAAe,YACb,QACA,IACkB;CAClB,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,GAAG,KAAKF,QAAM,GAAG;EAChC,MAAM,SAAS,OAAO,MAAM,sBAAsB;EAClD,MAAM,EAAE,cAAc,MAAM,OAAO,KACjC,QACA,GACA,wBACA,CACF;EACA,KAAK,IAAI,IAAI,GAAG,IAAI,WAAW,KAC7B,IAAI,OAAO,OAAO,GAChB,OAAO;EAGX,OAAO;CACT,UAAU;EACR,MAAM,QAAQ,MAAM;CACtB;AACF;AAEA,MAAM,+BAA+B,IAAI,OAAO;AAEhD,SAAgB,wBACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,MACF;EACA,MAAM,WAAW,MAAM,GAAG,KAAKJ,MAAI;EACnC,IAAI,CAAC,SAAS,OAAO,GACnB,MAAM,IAAI,MAAM,uBAAuB,MAAM,MAAM;EAErD,MAAM,WAAW,KAAK,IACpB,OAAO,gBAAgB,wBACvB,CACF;EACA,IAAI,SAAS,OAAO,UAElB,OAAO,CAAC,WADgB,SAAS,KAAK,sBAAsB,SAAS,qFACvD;GAAE,MAAA;GAAM,OAAO,SAAS;GAAM,WAAW;EAAK,CAAC;EAG/D,IAAI,MAAM,YAAYA,QAAM,EAAE,GAAG;GAC/B,MAAM,iBAAiB,OAAO,yBAAyB;GACvD,IAAI,mBAAmB,OAAO;IAC5B,MAAM,aAAa,MAAMK,oBAAAA,mBAAmB;KAC1C,MAAA;KACA,OAAO,SAAS;KAChB,MAAM;KACN,UAAU,OAAO,sBAAsB;KAIvC;IACF,CAAC;IACD,IAAI,WAAW,SAAS,SACtB,OAAO,CACLC,oBAAAA,uBAAuBN,QAAM,UAAU,GACvC;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,OACtB,OAAO,CACL,CACE;KACE,MAAM;KACN,MAAM,QAAQA,OAAK,qBAAqB,SAAS,KAAK;IACxD,GACA;KACE,MAAM;KACN,WAAW,EAAE,KAAK,WAAW,QAAQ;IACvC,CACF,GACA;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,YACtB,OAAO,CACL,qBAAqB,WAAW,KAAK,eAAe,WAAW,MAAM,iBAAiB,WAAW,SAAS,cAC1G;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,YAAY;IACd,CACF;IAEF,IAAI,WAAW,SAAS,UACtB,OAAO,CACL,iCAAiC,SAAS,KAAK,UAAU,WAAW,KAAK,KAAKA,UAC9E;KACE,MAAA;KACA,OAAO,SAAS;KAChB,MAAM,WAAW;KACjB,QAAQ;IACV,CACF;GAGJ,OACE,OAAO,CACL,iCAAiC,SAAS,KAAK,WAAWA,UAC1D;IAAE,MAAA;IAAM,OAAO,SAAS;IAAM,QAAQ;GAAK,CAC7C;EAEJ;EAGA,MAAM,SAAS,WAAW,MADJ,GAAG,SAASA,QAAM,MAAM,GACX,MAAM,QAAQ,MAAM,KAAK;EAC5D,OAAO,CACL,OAAO,YAAY,GAAG,OAAO,KAAK,iBAAiB,OAAO,MAC1D;GAAE,MAAA;GAAM,OAAO,SAAS;EAAK,CAC/B;CACF,GACA;EACE,MAAA;EACA,aACE;EAGF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,yBACd,SAAiC,CAAC,GAClC,cACuB;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,IAAI,OAAO,aAAa,MACtB,MAAM,IAAI,MAAM,gDAAgD;EAElE,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,OACF;EACA,IAAI,gBAAgB,MAClB,MAAM,aAAa,mBAAmBJ,MAAI;EAG5C,IAAI,SAAS;EACb,IAAI,WAAW;GAAE,MAAM;GAAI,QAAQ;GAAO,SAAS;EAAc;EAGjE,IAAI,UAAU;EACd,IAAI;GAEF,MAAM,UAAUO,qBAAAA,WAAW,MADT,GAAG,SAASP,QAAM,MAAM,CACZ;GAC9B,SAAS,QAAQ;GACjB,WAAW;GACX,UAAU;EACZ,SAAS,OAAO;GAGd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER,UAAU;EACZ;EAEA,MAAM,GAAG,OAAA,GAAA,KAAA,QAAA,CAAcF,MAAI,GAAG,EAAE,WAAW,KAAK,CAAC;EACjD,MAAM,YAAYC,qBAAAA,WAAW,MAAM,SAAS,QAAQ;EACpD,MAAM,GAAG,UAAUD,QAAM,WAAW,MAAM;EAE1C,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,oBAAoBA,QAAM,MAAM;EACjD,SAAS,OAAO;GAId,IACEE,oBAAAA,8BAA8B,KAAK,KACnC,OAAO,wBAAwB,UAE/B,MAAM,kBAAkB,IAAIF,QAAM,SAAS,QAAQ,QAAQ;GAE7D,MAAM;EACR;EAEA,MAAMQ,SAAO,UACT,cAAcR,QAAM,QAAQ,MAAM,OAAO,IACzC,cAAc,MAAM,QAAQ,OAAO;EAIvC,MAAM,UAAU,yBAHI,UAChB,aAAaA,OAAK,IAAI,MAAM,QAAQ,OAAO,kBAAkBQ,WAC7D,WAAWR,OAAK,IAAI,MAAM,QAAQ,OAAO,WACS,MAAM;EAC5D,IAAI,QAAQ,QAAQ,OAAO,SAAS,OAAO,SAAS,UAAU;GAI5D,MAAM,kBAAkB,IAAIA,QAAM,SAAS,QAAQ,QAAQ;GAC3D,MAAM,IAAI,MACR,mCAAmC,OAAO,QAAQ,QAAQ,mCAAmC,OAAO,QAAQ,QAC9G;EACF;EACA,OAAO,CACL,SACA;GACE,MAAA;GACA,OAAO,UAAU;GACjB,UAAU,CAAC;GACX,SAAS,SAAS,YAAY,SAAS,SAAS;GAChD,SAAS,SAAS;GAClB,GAAI,UAAU,QAAQ,OAAO,QAAQ,OAAO,QACxC,EAAE,cAAc,OAAO,QAAQ,QAAQ,IACvC,CAAC;EACP,CACF;CACF,GACA;EACE,MAAM;EACN,aACE;EAGF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,wBACd,SAAiC,CAAC,GAClC,cACuB;CACvB,MAAM,KAAKG,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAMd,IAAI,OAAO,aAAa,MACtB,MAAM,IAAI,MAAM,+CAA+C;EAEjE,MAAM,QAAQ,eAAe,KAAK;EAClC,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,MAAM,kDAAkD;EAGpE,MAAMH,SAAO,MAAMI,6BAAAA,yBACjB,MAAM,MACN,QACA,OACF;EAEA,MAAM,WAAWG,qBAAAA,WAAW,MADV,GAAG,SAASP,QAAM,MAAM,CACX;EAC/B,MAAM,WAAW,SAAS;EAE1B,IAAI,OAAO;EACX,MAAM,iBAA2B,CAAC;EAClC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,OAAO,MAAM;GACnB,MAAM,QAAQS,uBAAAA,WAAW,MAAM,KAAK,OAAO;GAC3C,IAAI,SAAS,MACX,MAAM,IAAI,MACR,QAAQ,IAAI,EAAE,GAAG,MAAM,OAAO,iCAAiC,MAAM,KAAK,oIAG5E;GAEF,eAAe,KAAK,MAAM,QAAQ;GAClC,OAAOC,uBAAAA,UAAU,MAAM,OAAO,KAAK,OAAO;EAC5C;EAEA,IAAI,gBAAgB,MAClB,MAAM,aAAa,mBAAmBV,MAAI;EAE5C,MAAM,YAAYC,qBAAAA,WAAW,MAAM,QAAQ;EAC3C,MAAM,GAAG,UAAUD,QAAM,WAAW,MAAM;EAE1C,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,oBAAoBA,QAAM,MAAM;EACjD,SAAS,OAAO;GAGd,IACEE,oBAAAA,8BAA8B,KAAK,KACnC,OAAO,wBAAwB,UAE/B,MAAM,kBAAkB,IAAIF,QAAM,MAAM,UAAU,QAAQ;GAE5D,MAAM;EACR;EAEA,MAAMQ,SAAO,cAAcR,QAAM,UAAU,IAAI;EAC/C,MAAM,QAAQ,eAAe,MAAM,MAAM,MAAM,OAAO;EAKtD,MAAM,UAAU,yBAHd,WAAW,MAAM,OAAO,cAAcA,YACrC,QAAQ,iBAAiB,eAAe,KAAK,IAAI,EAAE,KAAK,MACzD,YAAYQ,UACwC,MAAM;EAC5D,IAAI,QAAQ,QAAQ,OAAO,SAAS,OAAO,SAAS,UAAU;GAI5D,MAAM,kBAAkB,IAAIR,QAAM,MAAM,UAAU,QAAQ;GAC1D,MAAM,IAAI,MACR,kCAAkC,OAAO,QAAQ,QAAQ,kCAAkC,OAAO,QAAQ,QAC5G;EACF;EACA,OAAO,CACL,SACA;GACE,MAAA;GACA,OAAO,MAAM;GACb,YAAY;GACZ,SAAS,SAAS,YAAY,SAAS,SAAS;GAChD,SAAS,SAAS;GAClB,GAAI,UAAU,QAAQ,OAAO,QAAQ,OAAO,QACxC,EAAE,cAAc,OAAO,QAAQ,QAAQ,IACvC,CAAC;EACP,CACF;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAoBA,IAAI,+CAA+B,IAAI,QAGrC;AAEF,SAAS,YAAY,KAA4C;CAK/D,IAAI,OAAO,MAAM,OAAO;CACxB,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK,GACpC,OAAO,KAAK,IAAI;CAElB,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,eAAe,mBACb,QACkB;CAClB,MAAM,UAAUW,6BAAAA,SAAS,MAAM;CAC/B,IAAI,SAAS,6BAA6B,IAAI,OAAO;CACrD,IAAI,UAAU,MAAM;EAClB,yBAAS,IAAI,IAAI;EACjB,6BAA6B,IAAI,SAAS,MAAM;CAClD;CACA,MAAM,SAAS,YAAY,OAAO,GAAG;CACrC,IAAI,eAAe,OAAO,IAAI,MAAM;CACpC,IAAI,gBAAgB,MAAM;EACxB,eAAeC,6BAAAA,kBACb,MACA,CAAC,WAAW,GACZ;GAAE,GAAG;GAAQ,WAAW;GAAM,SAAS,EAAE,SAAS,MAAM;EAAE,GAC1D,EAAE,UAAU,KAAK,CACnB,CAAC,CACE,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,CACrC,YAAY,KAAK;EACpB,OAAO,IAAI,QAAQ,YAAY;CACjC;CACA,OAAO;AACT;AAUA,SAAgB,6BAAmC;CACjD,+CAA+B,IAAI,QAAQ;AAC7C;AAQA,MAAM,YAAY,IAAI,IAAI;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,aAAa,SAAyB;CAC7C,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,IAAI,QAAQ;EAClB,IAAI,MAAM,KACR,IAAI,QAAQ,IAAI,OAAO,KAAK;GAC1B,UAAU;GACV,KAAK;GACL,IAAI,QAAQ,IAAI,OAAO,KACrB,KAAK;EAET,OACE,UAAU;OAEP,IAAI,MAAM,KACf,UAAU;OACL,IAAI,gBAAgB,SAAS,CAAC,GACnC,UAAU,OAAO;OAEjB,UAAU;CAEd;CACA,UAAU;CACV,OAAO,IAAI,OAAO,MAAM;AAC1B;AAEA,gBAAgB,UACd,MACA,IACwB;CACxB,MAAM,QAAkB,CAAC,IAAI;CAC7B,OAAO,MAAM,SAAS,GAAG;EACvB,MAAM,MAAM,MAAM,IAAI;EACtB,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EACzD,SAAS,OAAO;GAGd,IAAIV,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,KAAK,MAAM,SAAS,SAAS;GAC3B,IAAI,MAAM,KAAK,WAAW,MAAM,KAAK,UAAU,IAAI,MAAM,IAAI,GAC3D;GAEF,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM;GAC7B,IAAI,MAAM,YAAY,GACpB,MAAM,KAAK,IAAI;QACV,IAAI,MAAM,OAAO,GACtB,MAAM;EAEV;CACF;AACF;AA4BA,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAMhC,MAAM,+BAA+B,IAAI,OAAO;AAWhD,SAAS,6BAA6B,SAA0B;CAC9D,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,SAAS,GAAG,KAAK;EAC3C,IAAI,QAAQ,OAAO,KAAK;EACxB,IAAI,QAAQ,IAAI,OAAO,MAAM;EAC7B,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;EAGlD,IAAI,QAAQ;EACZ,IAAI,IAAI,IAAI;EACZ,OAAO,KAAK,GAAG;GACb,MAAM,IAAI,QAAQ;GAElB,IAAI,EADY,IAAI,KAAK,QAAQ,IAAI,OAAO;QAEtC,MAAM,KAAK;SACV,IAAI,MAAM,KAAK;KAClB;KACA,IAAI,UAAU,GAAG;IACnB;;GAEF;EACF;EACA,IAAI,IAAI,GAAG;EACX,MAAM,QAAQ,QAAQ,MAAM,IAAI,GAAG,CAAC;EACpC,IAAI,cAAc,KAAK,KAAK,GAAG,OAAO;CACxC;CACA,OAAO;AACT;AAEA,IAAM,oBAAN,cAAgC,MAAM;CACpC;CACA,YACE,MACA,SACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,qBAAqB,SAAyB;CACrD,IAAI,QAAQ,SAAS,6BACnB,MAAM,IAAI,kBACR,oBACA,mBAAmB,4BAA4B,6DACjD;CAEF,IAAI,6BAA6B,OAAO,GACtC,MAAM,IAAI,kBACR,kBACA,mLACF;CAEF,IAAI;EACF,OAAO,IAAI,OAAO,OAAO;CAC3B,SAAS,GAAG;EACV,MAAM,IAAI,kBACR,mBACA,kBAAmB,EAAY,SACjC;CACF;AACF;AAOA,SAAS,0BAA0B,QAAoC;CACrE,IAAI,OAAO,QAAQ,SAAS,GAC1B,OAAO,CAAC,GAAG,OAAO,SAAS,GAAG,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI;CAEzD,IAAI,OAAO,QAAQ,SAAS,GAC1B,OAAO,OAAO,QAAQ,KAAK,IAAI;CAEjC,OAAO;AACT;AAEA,eAAe,aACb,MACA,SACA,YACA,YACA,IAC6B;CAC7B,MAAM,KAAK,qBAAqB,OAAO;CACvC,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,MAAM,SACJ,cAAc,QAAQ,eAAe,KACjC,aAAa,UAAU,IACvB,KAAA;CACN,MAAM,UAAoB,CAAC;CAQ3B,MAAM,qBAA+B,CAAC;CACtC,WAAW,MAAM,QAAQ,UAAU,MAAM,EAAE,GAAG;EAC5C,IAAI,KAAK,IAAI,IAAI,UAGf,OAAO;GAAE;GAAS,SAAS;EAAmB;EAEhD,IAAI,UAAU,MAAM;GAClB,MAAM,MAAM,KAAK,WAAW,OAAO,GAAG,IAClC,KAAK,MAAM,KAAK,SAAS,CAAC,IAC1B;GACJ,IAAI,CAAC,OAAO,KAAK,GAAG,GAClB;EAEJ;EAMA,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,GAAG,KAAK,IAAI;EAC3B,SAAS,OAAO;GAGd,IAAIA,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,IAAI,KAAK,OAAO,8BAA8B;GAC5C,mBAAmB,KACjB,GAAG,KAAK,sBAAsB,6BAA6B,4CAC7D;GACA;EACF;EACA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,GAAG,SAAS,MAAM,MAAM;EAC1C,SAAS,OAAO;GAEd,IAAIA,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;GAER;EACF;EACA,IAAI,QAAQ,SAAS,IAAI,GACvB;EAIF,IAAI,KAAK,IAAI,IAAI,UACf,OAAO;GAAE;GAAS,SAAS;EAAmB;EAEhD,MAAM,QAAQ,QAAQ,MAAM,IAAI;EAChC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,IAAI,GAAG,KAAK,MAAM,EAAE,GAAG;GACrB,QAAQ,KAAK,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,MAAM,IAAI;GAC3C,IAAI,QAAQ,UAAU,YACpB,OAAO;IAAE;IAAS,SAAS;GAAmB;EAElD;CAEJ;CACA,OAAO;EAAE;EAAS,SAAS;CAAmB;AAChD;AAEA,eAAe,aACb,MACA,SACA,YACA,IACmB;CACnB,MAAM,KAAK,aAAa,OAAO;CAC/B,MAAM,MAAgB,CAAC;CACvB,WAAW,MAAM,QAAQ,UAAU,MAAM,EAAE,GAAG;EAC5C,MAAM,MAAM,KAAK,WAAW,OAAO,GAAG,IAClC,KAAK,MAAM,KAAK,SAAS,CAAC,IAC1B;EACJ,IAAI,GAAG,KAAK,GAAG,GAAG;GAChB,IAAI,KAAK,IAAI;GACb,IAAI,IAAI,UAAU,YAChB;EAEJ;CACF;CACA,OAAO;AACT;AAEA,SAAgB,0BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKC,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAMd,MAAM,SAAS,MAAMC,6BAAAA,yBACnB,MAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,aAAa,KAAK,IAAI,MAAM,eAAe,qBAAqB,CAAC;EAEvE,IAAI,MAAM,mBAAmB,MAAM,GAAG;GAoBpC,MAAM,SAAS,MAAMQ,6BAAAA,kBAAkB,MAAM;IAZ3C;IACA;IACA;IACA;IACA;IACA,GAAI,MAAM,QAAQ,QAAQ,MAAM,SAAS,KACrC,CAAC,UAAU,MAAM,IAAI,IACrB,CAAC;IACL;IACA,MAAM;IACN;GAE8C,GAAG;IACjD,GAAG;IACH,WAAW,OAAO,aAAa;GACjC,CAAC;GASD,IACE,OAAO,YACN,OAAO,YAAY,QAAQ,OAAO,WAAW,GAC9C;IACA,MAAM,SAAS,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO;IAC3D,OAAO,CACL,uBAAuB,UACvB;KACE,SAAS;KACT,QAAQ;KACR,OAAO;KACP,UAAU,OAAO;IACnB,CACF;GACF;GACA,MAAM,QAAQ,OAAO,OAClB,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,MAAM,GAAG,UAAU;GAKtB,OAAO,CAHL,MAAM,SAAS,IACX,MAAM,KAAK,IAAI,IACf,OAAO,OAAO,KAAK,KAAK,qBACd;IAAE,SAAS,MAAM;IAAQ,QAAQ;GAAU,CAAC;EAC9D;EAEA,IAAI;GACF,MAAM,EAAE,SAAS,YAAY,MAAM,aACjC,QACA,MAAM,SACN,MAAM,MACN,YACA,EACF;GAIA,OAAO,CADS,0BAA0B;IAAE;IAAS;GAAQ,CAErD,GACN;IACE,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB,QAAQ;GACV,CACF;EACF,SAAS,GAAG;GACV,IAAI,aAAa,mBACf,OAAO,CACL,oCAAoC,EAAE,WACtC;IACE,SAAS;IACT,QAAQ;IACR,OAAO,EAAE;IACT,MAAM,EAAE;GACV,CACF;GAEF,MAAM;EACR;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,0BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKT,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,SAAS,MAAMC,6BAAAA,yBACnB,MAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,aAAa,KAAK,IAAI,MAAM,eAAe,qBAAqB,CAAC;EAEvE,IAAI,MAAM,mBAAmB,MAAM,GAAG;GACpC,MAAM,SAAS,MAAMQ,6BAAAA,kBACnB,MACA;IACE;IACA;IACA;IACA;IACA;IACA,MAAM;IACN;GACF,GACA;IAAE,GAAG;IAAQ,WAAW,OAAO,aAAa;GAAM,CACpD;GAQA,IACE,OAAO,YACN,OAAO,YAAY,QAAQ,OAAO,WAAW,GAC9C;IACA,MAAM,SAAS,OAAO,OAAO,KAAK,KAAK,aAAa,OAAO;IAC3D,OAAO,CACL,uBAAuB,UACvB;KACE,OAAO,CAAC;KACR,QAAQ;KACR,OAAO;KACP,UAAU,OAAO;IACnB,CACF;GACF;GACA,MAAM,QAAQ,OAAO,OAClB,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,MAAM,GAAG,UAAU;GACtB,OAAO,CACL,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,mBACtC;IAAE,OAAO;IAAO,QAAQ;GAAU,CACpC;EACF;EAEA,MAAM,QAAQ,MAAM,aAAa,QAAQ,MAAM,SAAS,YAAY,EAAE;EACtE,OAAO,CACL,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,mBACtC;GAAE;GAAO,QAAQ;EAAgB,CACnC;CACF,GACA;EACE,MAAM;EACN,aACE;EACF,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,6BACd,SAAiC,CAAC,GACX;CACvB,MAAM,KAAKT,6BAAAA,eAAe,MAAM;CAChC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAElB,MAAMH,SAAO,MAAMI,6BAAAA,yBACjBS,SAAM,QAAQ,KACd,QACA,MACF;EACA,MAAM,UAAU,MAAM,GAAG,QAAQb,QAAM,EAAE,eAAe,KAAK,CAAC;EAM9D,OAAO,CALQ,QACZ,KACE,UAAU,GAAG,MAAM,YAAY,IAAI,SAAS,OAAO,IAAI,MAAM,MAChE,CAAC,CACA,KAAK,IACK,KAAK,uBAAuB;GAAE,MAAA;GAAM,OAAO,QAAQ;EAAO,CAAC;CAC1E,GACA;EACE,MAAM;EACN,aAAa;EACb,QAAQ;EACR,gBAAA;CACF,CACF;AACF;AAYA,SAAgB,uBACd,SAAiC,CAAC,GAClC,UAAsD,CAAC,GAC9B;CACzB,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1Bc,yBAAAA,4BAA4B,EAAE,IAAI,OAAO,MAAM,GAAG,CAAC,IACnD,KAAA;CACN,OAAO;EACL,wBAAwB,MAAM;EAC9B,yBAAyB,QAAQ,YAAY;EAC7C,wBAAwB,QAAQ,YAAY;EAC5C,0BAA0B,MAAM;EAChC,0BAA0B,MAAM;EAChC,6BAA6B,MAAM;EACnCC,yBAAAA,uBAAuB,MAAM;EAC7BC,4BAAAA,6BAA6B,EAAE,OAAO,CAAC;EACvCC,4BAAAA,6BAA6B,MAAM;EACnCC,qCAAAA,uCAAuC,MAAM;EAC7CC,qCAAAA,2CAA2C,MAAM;CACnD;AACF;AAOA,SAAgB,4BACd,SAAiC,CAAC,GAClC,UAAsD,CAAC,GAChC;CACvB,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BL,yBAAAA,4BAA4B,EAAE,IAAI,OAAO,MAAM,GAAG,CAAC,IACnD,KAAA;CACN,OAAO;EACL,OAAO,uBAAuB,QAAQ,EAAE,aAAa,CAAC;EACtD;CACF;AACF;AAEA,SAAgB,mCAA+C;CAC7D,OAAO;EACL,eAAA,aAEE,mFACA,uBACF;EACA,eACE,wBACA,8EACA,wBACF;EACA,eACE,uBACA,kDACA,uBACF;EACA,eACE,yBACA,8DACA,yBACF;EACA,eACE,yBACA,6CACA,yBACF;EACA,eACE,4BACA,oDACA,4BACF;EACAM,yBAAAA,iCAAiC;CACnC;AACF;AAEA,SAAgB,gCAAkD;CAChE,OAAO,IAAI,IACT,iCAAiC,CAAC,CAAC,KAAK,eAAe,CACrD,WAAW,MACX,UACF,CAAC,CACH;AACF"}

package/dist/cjs/tools/local/LocalExecutionEngine.cjs

@@ -9,12 +9,6 @@ let fs = require("fs");
 //#region src/tools/local/LocalExecutionEngine.ts
 const DEFAULT_TIMEOUT_MS = 6e4;
 const DEFAULT_MAX_OUTPUT_CHARS = 2e5;
-/**
-* Hard cap on total stdout+stderr bytes a child process can stream
-* before we kill its process tree. Independent from `maxOutputChars`
-* (which only affects what the *model* sees) — this is the OOM
-* backstop. Configurable via `local.maxSpawnedBytes`.
-*/
 const DEFAULT_MAX_SPAWNED_BYTES = 50 * 1024 * 1024;
 const DEFAULT_LOCAL_SESSION_ID = "local";
 const DEFAULT_SHELL = process.platform === "win32" ? "bash.exe" : "bash";
@@ -27,21 +21,6 @@ const dangerousCommandPatterns = [
 	new RegExp(`\\bchown\\s+-R\\s+[^;&|]+\\s+(?:--\\s+)?${DESTRUCTIVE_TARGET}(?:$|\\s|[;&|])`),
 	/:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/
 ];
-/**
-* Companion patterns that look for destructive targets *inside*
-* matching quote pairs. These are checked against the ORIGINAL
-* command (not the post-quote-strip `normalized` form), because
-* `stripQuotedContent` blanks the contents of quoted spans —
-* which would otherwise let `rm -rf "/"` and friends slip past
-* `dangerousCommandPatterns`.
-*
-* Kept as a separate list so we don't pay false-positive cost on
-* benign uses like `echo "rm -rf /"` (the print case): each pattern
-* here REQUIRES a quote *around the destructive path argument*, not
-* just a quote *somewhere* in the command. `echo "rm -rf /"` has
-* `/` outside of any quote-pair-around-the-path (the quotes wrap
-* the whole `rm -rf /` text), so it doesn't match here either.
-*/
 const quotedDestructivePatterns = [
 	new RegExp(`\\brm\\s+(?:-[^\\s]*[rf][^\\s]*\\s+){1,3}(?:--\\s+)?["']${DESTRUCTIVE_TARGET}["']`),
 	new RegExp(`\\bchmod\\s+-R\\s+(?:777|a\\+w)\\s+(?:--\\s+)?["']${DESTRUCTIVE_TARGET}["']`),
@@ -53,12 +32,6 @@ const nestedShellDestructivePatterns = [
 	/* @__PURE__ */ new RegExp("(?:(?:ba|z|da|k)?sh|eval)\\s+(?:-l?c\\s+)?[\"'][^\"']*\\bchown\\s+-R\\s+[^;&|]+\\s+(?:--\\s+)?(?:\\/|~|\\$\\{?HOME\\}?|\\.)")
 ];
 const mutatingCommandPattern = /\b(?:rm|mv|cp|touch|mkdir|rmdir|ln|truncate|tee|sed\s+-i|perl\s+-pi|python(?:3)?\s+-c|node\s+-e|npm\s+(?:install|ci|update|publish)|pnpm\s+(?:install|update|publish)|yarn\s+(?:install|add|publish)|git\s+(?:add|commit|checkout|switch|reset|clean|rebase|merge|push|pull|stash|tag|branch)|chmod|chown)\b|(?:^|[^<])>\s*[^&]|\bcat\s+[^|;&]*>\s*/;
-/**
-* POSIX convention: `128 + signum` when a process is killed by a
-* signal. Maps the common signals; unknown ones default to 1 so the
-* caller still sees a non-zero (failed) exit. Only used when Node's
-* `close` event reports `exitCode === null` (true signal kill).
-*/
 const SIGNAL_TO_EXIT_CODE = {
 	SIGHUP: 129,
 	SIGINT: 130,
@@ -93,15 +66,6 @@ function resolveLocalExecutionConfig(config) {
 function getLocalCwd(config) {
 	return (0, path.resolve)(config?.workspace?.root ?? config?.cwd ?? process.cwd());
 }
-/**
-* Resolves the effective workspace boundary: a list of absolute roots
-* that file operations are allowed to touch. The first entry is always
-* the canonical root (`getLocalCwd`); subsequent entries come from
-* `workspace.additionalRoots` when provided.
-*
-* Returns plain absolute paths — callers symlink-resolve when they
-* need realpath equality (see `resolveWorkspacePathSafe`).
-*/
 function getWorkspaceRoots(config) {
 	const root = getLocalCwd(config);
 	const extras = config?.workspace?.additionalRoots ?? [];
@@ -117,28 +81,12 @@ function getWorkspaceRoots(config) {
 	}
 	return out;
 }
-/**
-* Pluggable spawn resolver. Honours `local.exec.spawn` first, falls
-* back to the legacy top-level `local.spawn`, then to Node's
-* `child_process.spawn`. Centralised so engine swapping is one knob.
-*/
 function getSpawn(config) {
 	return config?.exec?.spawn ?? config?.spawn ?? child_process.spawn;
 }
-/**
-* Pluggable filesystem resolver. Honours `local.exec.fs`, falls back
-* to the Node-host implementation. A future remote engine supplies
-* its own implementation here and inherits every file-touching tool.
-*/
 function getWorkspaceFS(config) {
 	return config?.exec?.fs ?? require_workspaceFS.nodeWorkspaceFS;
 }
-/**
-* Resolves the workspace boundary for *write* operations. Honours
-* `workspace.allowWriteOutside` (and the deprecated
-* `allowOutsideWorkspace`) by returning `null`, which the path-safety
-* helpers interpret as "skip the write clamp".
-*/
 function getWriteRoots(config = {}) {
 	const granular = config.workspace?.allowWriteOutside;
 	if (granular === true) return null;
@@ -146,11 +94,6 @@ function getWriteRoots(config = {}) {
 	if (config.allowOutsideWorkspace === true) return null;
 	return getWorkspaceRoots(config);
 }
-/**
-* Resolves the workspace boundary for *read* operations. Honours
-* `workspace.allowReadOutside` (and the deprecated
-* `allowOutsideWorkspace`) by returning `null`.
-*/
 function getReadRoots(config = {}) {
 	const granular = config.workspace?.allowReadOutside;
 	if (granular === true) return null;
@@ -164,7 +107,6 @@ function getLocalSessionId(config) {
 }
 const missingSandboxRuntimeMessage = ["Local sandbox is enabled, but @anthropic-ai/sandbox-runtime is not installed.", "Install it with `npm install @anthropic-ai/sandbox-runtime`, or disable local sandboxing with `local.sandbox.enabled: false`."].join(" ");
 const sandboxRuntimePackage = "@anthropic-ai/sandbox-runtime";
-/** Lazy-loads the ESM-only sandbox runtime only when sandboxing is enabled. */
 function loadSandboxRuntime() {
 	sandboxRuntimePromise ??= import(sandboxRuntimePackage);
 	return sandboxRuntimePromise;
@@ -178,11 +120,6 @@ function maybeWarnSandboxOff(config) {
 	sandboxOffWarned = true;
 	console.warn("[@librechat/agents] Local execution engine is running without @anthropic-ai/sandbox-runtime wrapping. The agent has full access to the host filesystem and network. Set toolExecution.local.sandbox.enabled = true to opt into process sandboxing.");
 }
-/**
-* Test-only reset hook for the sandbox-off warning latch.
-*
-* @internal Not part of the public SDK surface.
-*/
 function _resetLocalEngineWarningsForTests() {
 	sandboxOffWarned = false;
 }
@@ -306,13 +243,6 @@ async function ensureSandbox(config, cwd) {
 	sandboxConfigKey = nextKey;
 	return runtime.SandboxManager;
 }
-/**
-* Loopback addresses the in-process programmatic-tool bridge listens
-* on (`LocalProgrammaticToolCalling.ts` binds 127.0.0.1). Sandboxed
-* code launched by `run_tools_with_code` / `run_tools_with_bash` HTTPs
-* back to that address — without the entries below, the bridge is
-* silently blocked under sandbox.
-*/
 const BRIDGE_LOOPBACK_HOSTS = [
 	"127.0.0.1",
 	"localhost",
@@ -480,35 +410,7 @@ async function executeLocalBash(command, config = {}) {
 	if (!validation.valid) throw new Error(validation.errors.join("\n"));
 	return spawnLocalProcess(config.shell ?? DEFAULT_SHELL, ["-lc", command], config);
 }
-/**
-* Variant of `executeLocalBash` that exposes `args` as positional
-* shell parameters (`$1`, `$2`, …). Mirrors what the other runtimes
-* do in `getRuntimeCommand`. Uses the standard `bash -c <code> --
-* arg0 arg1 …` form: the `--` becomes `$0`, then `args[0]` is `$1`
-* and so on. Same AST validation as the no-args path.
-*
-* Used by both the `execute_code`/`lang:'bash'` path AND the
-* `bash_tool` factory so the schema's `args` contract works
-* identically in both surfaces.
-*/
-/**
-* Matches a single arg that, on its own, references a protected
-* location (`/`, `~`, `$HOME`, `${HOME}`, `.`, with optional trailing
-* slash, wildcard, or dot-glob suffix). Used to spot the
-* `command: 'rm -rf "$1"', args: ['/']` shape where the destructive
-* target is moved into a positional arg to evade the command regex.
-* Codex P1 [45], extended for dot-glob in Codex P1 [47] (mirrors the
-* `DESTRUCTIVE_TARGET` suffix matrix exactly).
-*/
 const PROTECTED_TARGET_ARG_RE = /^(?:\/|~|\$\{?HOME\}?|\.)(?:\/?\.?\*|\/)?$/;
-/**
-* Mutating-op recognizer for the args check. Conservative: only the
-* three operations the destructive-command guard already covers
-* directly (`rm -rf …`, `chmod -R …`, `chown -R …`). Other shell
-* builtins might mutate state (`mv`, `cp` over an existing file,
-* etc.) but the destructive guard doesn't try to catch those today,
-* so we don't widen here either.
-*/
 const DESTRUCTIVE_OP_IN_COMMAND_RE = /\b(?:rm\s+-[^\s]*[rf]|chmod\s+-R|chown\s+-R)\b/;
 async function executeLocalBashWithArgs(command, args, config = {}) {
 	const validation = await validateBashCommand(command, config);
@@ -633,15 +535,6 @@ function getRuntimeCommand(lang, tempDir, code, args = [], shellOverride) {
 function configShell() {
 	return process.platform === "win32" ? "bash.exe" : "bash";
 }
-/**
-* How long after SIGTERM we wait before escalating to SIGKILL. A
-* cooperative process gets a graceful chance to flush + clean up;
-* a process that ignores or traps SIGTERM (`trap '' TERM`) gets
-* killed unconditionally so timeoutMs / maxSpawnedBytes can't be
-* defeated by a hostile script. Codex P1 #28 — pre-fix the spawn
-* promise would never resolve in that case and the entire tool run
-* would hang past the advertised timeout.
-*/
 const SIGKILL_ESCALATION_MS = 2e3;
 function sigterm(child) {
 	if (child.pid == null) {
@@ -710,18 +603,6 @@ async function realpathOrSelf(absolutePath, realpathImpl = fs_promises.realpath)
 		return absolutePath;
 	}
 }
-/**
-* Resolves the realpath of `absolutePath`, falling back to the nearest
-* existing ancestor when the target itself does not yet exist (so the
-* containment check still works for `write_file` to a brand-new path).
-*
-* Codex P2 #38: takes the realpath impl as a parameter so callers
-* can route through `WorkspaceFS.realpath` when a custom engine is
-* configured. Pre-fix, host `fs/promises.realpath` would fail on a
-* remote/in-memory FS path and silently fall back to lexical
-* containment, leaving the symlink-escape clamp ineffective on
-* non-default engines.
-*/
 async function realpathOfPathOrAncestor(absolutePath, realpathImpl = fs_promises.realpath) {
 	let current = absolutePath;
 	let suffix = "";
@@ -736,13 +617,6 @@ async function realpathOfPathOrAncestor(absolutePath, realpathImpl = fs_promises
 		current = parent;
 	}
 }
-/**
-* Resolves a workspace path AND follows any symlinks before checking
-* containment, so a symlink inside the workspace pointing outside is
-* rejected even though the lexical path looks safe. Handles paths that
-* don't yet exist (e.g. write_file targets) by realpath-resolving the
-* nearest existing ancestor and re-attaching the unresolved suffix.
-*/
 async function resolveWorkspacePathSafe(filePath, config = {}, intent = "write") {
 	const lexical = resolveWorkspacePath(filePath, config, intent);
 	const roots = intent === "write" ? getWriteRoots(config) : getReadRoots(config);

package/dist/cjs/tools/local/LocalExecutionEngine.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"LocalExecutionEngine.cjs","names":["spawn","nodeWorkspaceFS","bashAstFindingsToErrors","runBashAstChecks","realpath"],"sources":["../../../../src/tools/local/LocalExecutionEngine.ts"],"sourcesContent":["import { tmpdir } from 'os';\nimport { spawn } from 'child_process';\nimport { createWriteStream } from 'fs';\nimport { createHash, randomUUID } from 'crypto';\nimport { isAbsolute, relative, resolve } from 'path';\nimport { mkdir, realpath, rm, writeFile } from 'fs/promises';\nimport type { ChildProcess } from 'child_process';\nimport type { WorkspaceFS } from './workspaceFS';\nimport type * as t from '@/types';\nimport { runBashAstChecks, bashAstFindingsToErrors } from './bashAst';\nimport { nodeWorkspaceFS } from './workspaceFS';\n\nconst DEFAULT_TIMEOUT_MS = 60000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 200000;\n/**\n * Hard cap on total stdout+stderr bytes a child process can stream\n * before we kill its process tree. Independent from `maxOutputChars`\n * (which only affects what the *model* sees) — this is the OOM\n * backstop. Configurable via `local.maxSpawnedBytes`.\n */\nconst DEFAULT_MAX_SPAWNED_BYTES = 50 * 1024 * 1024;\nconst DEFAULT_LOCAL_SESSION_ID = 'local';\nconst DEFAULT_SHELL = process.platform === 'win32' ? 'bash.exe' : 'bash';\n\n// `(?:--\\s+)?` before each destructive-target alternation: GNU/BSD\n// utilities accept `--` as an end-of-options marker, so `rm -rf -- /`\n// is identical in effect to `rm -rf /` but pre-fix it slipped past\n// the guard because the regex required the path to follow option\n// flags directly. Codex P1 #20.\n// `DESTRUCTIVE_TARGET` is the canonical \"protected location\" pattern:\n// matches `/`, `~`, `$HOME`, `${HOME}`, `.`, each optionally followed\n// by a trailing-slash and/or wildcard glob suffix. The suffix matrix:\n//   ''     — `$HOME`              (round 14)\n//   '/'    — `$HOME/`             (round 14, Codex P1 [37])\n//   '*'    — `$HOME*`             (round 15, Codex P1 [42])\n//   '/*'   — `$HOME/*`            (round 15, Codex P1 [42])\n//   '.*'   — `$HOME.*`            (round 17, Codex P1 [47])\n//   '/.*'  — `$HOME/.*`           (round 17, Codex P1 [47]) — the\n//            dot-glob form deletes all dotfiles under the protected\n//            root, just as destructive as `/*` but the prior matrix\n//            missed it.\n// Suffix expression: `(?:\\/?\\.?\\*|\\/)?` — one of:\n//   `\\/?\\.?\\*` → `*`, `.*`, `/*`, `/.*`\n//   `\\/`       → `/`\n//   (empty)    → bare base\nconst DESTRUCTIVE_TARGET = '(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)(?:\\\\/?\\\\.?\\\\*|\\\\/)?';\n\nconst dangerousCommandPatterns: ReadonlyArray<RegExp> = [\n  new RegExp(\n    `\\\\brm\\\\s+(?:-[^\\\\s]*[rf][^\\\\s]*\\\\s+|-[^\\\\s]*[r][^\\\\s]*\\\\s+-[^\\\\s]*[f][^\\\\s]*\\\\s+)(?:--\\\\s+)?${DESTRUCTIVE_TARGET}\\\\s*(?:$|[;&|])`\n  ),\n  /\\b(?:mkfs|mkswap|fdisk|parted|diskutil)\\b/,\n  /\\bdd\\s+[^;&|]*\\bof=\\/dev\\//,\n  new RegExp(\n    `\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?${DESTRUCTIVE_TARGET}(?:$|\\\\s|[;&|])`\n  ),\n  new RegExp(\n    `\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?${DESTRUCTIVE_TARGET}(?:$|\\\\s|[;&|])`\n  ),\n  /:\\s*\\(\\s*\\)\\s*\\{\\s*:\\s*\\|\\s*:\\s*&\\s*\\}\\s*;\\s*:/,\n];\n\n/**\n * Companion patterns that look for destructive targets *inside*\n * matching quote pairs. These are checked against the ORIGINAL\n * command (not the post-quote-strip `normalized` form), because\n * `stripQuotedContent` blanks the contents of quoted spans —\n * which would otherwise let `rm -rf \"/\"` and friends slip past\n * `dangerousCommandPatterns`.\n *\n * Kept as a separate list so we don't pay false-positive cost on\n * benign uses like `echo \"rm -rf /\"` (the print case): each pattern\n * here REQUIRES a quote *around the destructive path argument*, not\n * just a quote *somewhere* in the command. `echo \"rm -rf /\"` has\n * `/` outside of any quote-pair-around-the-path (the quotes wrap\n * the whole `rm -rf /` text), so it doesn't match here either.\n */\n// Quoted variant uses the same DESTRUCTIVE_TARGET (which accepts an\n// optional trailing slash) so `rm -rf \"$HOME/\"` and `rm -rf \"~/\"`\n// don't slip past. Codex P1 #37.\nconst quotedDestructivePatterns: ReadonlyArray<RegExp> = [\n  new RegExp(\n    `\\\\brm\\\\s+(?:-[^\\\\s]*[rf][^\\\\s]*\\\\s+){1,3}(?:--\\\\s+)?[\"']${DESTRUCTIVE_TARGET}[\"']`\n  ),\n  new RegExp(\n    `\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?[\"']${DESTRUCTIVE_TARGET}[\"']`\n  ),\n  new RegExp(\n    `\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?[\"']${DESTRUCTIVE_TARGET}[\"']`\n  ),\n];\n\n/**\n * Catches destructive operations smuggled inside a nested shell or\n * `eval` call, e.g. `bash -lc \"rm -rf $HOME\"` — the outer command\n * looks benign (`bash -lc \"...\"`) and the destructive `rm` lives\n * inside the quoted payload that `stripQuotedContent` blanks out.\n * Comprehensive review (manual finding C) flagged this as a real\n * bypass of the otherwise-correct quote-strip-then-match approach.\n *\n * Run against the ORIGINAL command (quotes intact) so the inside of\n * the nested-shell payload is visible. Conservative: matches only\n * the same operation set as `dangerousCommandPatterns` (rm -rf,\n * chmod -R 777, chown -R) when they appear inside a `<shell> -[l]?c\n * \"...\"` or `eval \"...\"` payload.\n */\nconst NESTED_SHELL_PREFIX = '(?:(?:ba|z|da|k)?sh|eval)\\\\s+(?:-l?c\\\\s+)?';\nconst nestedShellDestructivePatterns: ReadonlyArray<RegExp> = [\n  new RegExp(\n    NESTED_SHELL_PREFIX +\n      '[\"\\'][^\"\\']*\\\\brm\\\\s+-[^\\\\s\"\\']*[rf][^\\\\s\"\\']*\\\\s+(?:--\\\\s+)?(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)'\n  ),\n  new RegExp(\n    NESTED_SHELL_PREFIX +\n      '[\"\\'][^\"\\']*\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)'\n  ),\n  new RegExp(\n    NESTED_SHELL_PREFIX +\n      '[\"\\'][^\"\\']*\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)'\n  ),\n];\n\nconst mutatingCommandPattern =\n  /\\b(?:rm|mv|cp|touch|mkdir|rmdir|ln|truncate|tee|sed\\s+-i|perl\\s+-pi|python(?:3)?\\s+-c|node\\s+-e|npm\\s+(?:install|ci|update|publish)|pnpm\\s+(?:install|update|publish)|yarn\\s+(?:install|add|publish)|git\\s+(?:add|commit|checkout|switch|reset|clean|rebase|merge|push|pull|stash|tag|branch)|chmod|chown)\\b|(?:^|[^<])>\\s*[^&]|\\bcat\\s+[^|;&]*>\\s*/;\n\ntype SpawnResult = {\n  stdout: string;\n  stderr: string;\n  exitCode: number | null;\n  timedOut: boolean;\n  /**\n   * True when the process was force-killed because total streamed bytes\n   * exceeded `maxSpawnedBytes`. Distinct from `timedOut`. Without this\n   * flag, callers (`bash_tool`, `execute_code`, etc.) would see a\n   * SIGKILL'd process with `exitCode: null` and treat it as success\n   * (Codex P1 — runaway commands like `yes` or noisy builds silently\n   * looked successful even though their output was truncated).\n   */\n  overflowKilled?: boolean;\n  /**\n   * Signal name (e.g. `'SIGKILL'`, `'SIGSEGV'`) when the process was\n   * terminated by a signal. Distinct from the overflow-kill path:\n   * this captures `kill -9 $$` from inside the script, native crashes,\n   * OS OOM killer, etc. Without this, signal-killed processes\n   * reported `exitCode: null` and looked like clean runs (Codex P2 —\n   * generalization of the overflow-kill fix). When present, the\n   * exitCode field is also synthesized to `128 + signum` per the\n   * POSIX convention so non-null-exit-code consumers see a failure.\n   */\n  signal?: string;\n  /** Path to the full untruncated stdout/stderr when output exceeded `maxOutputChars`. */\n  fullOutputPath?: string;\n};\n\n/**\n * POSIX convention: `128 + signum` when a process is killed by a\n * signal. Maps the common signals; unknown ones default to 1 so the\n * caller still sees a non-zero (failed) exit. Only used when Node's\n * `close` event reports `exitCode === null` (true signal kill).\n */\nconst SIGNAL_TO_EXIT_CODE: Record<string, number> = {\n  SIGHUP: 129,\n  SIGINT: 130,\n  SIGQUIT: 131,\n  SIGILL: 132,\n  SIGTRAP: 133,\n  SIGABRT: 134,\n  SIGBUS: 135,\n  SIGFPE: 136,\n  SIGKILL: 137,\n  SIGUSR1: 138,\n  SIGSEGV: 139,\n  SIGUSR2: 140,\n  SIGPIPE: 141,\n  SIGALRM: 142,\n  SIGTERM: 143,\n};\nfunction exitCodeForSignal(signal: string | null): number {\n  if (signal == null) return 1;\n  return SIGNAL_TO_EXIT_CODE[signal] ?? 1;\n}\n\ntype RuntimeCommand = {\n  command: string;\n  args: string[];\n  fileName: string;\n  source?: string;\n};\n\ntype SandboxManagerType = {\n  checkDependencies(): { errors: string[] };\n  initialize(config: BuiltSandboxRuntimeConfig): Promise<void>;\n  reset(): Promise<void>;\n  wrapWithSandbox(command: string): Promise<string>;\n};\n\ntype SandboxRuntimeModule = {\n  getDefaultWritePaths(): string[];\n  SandboxManager: SandboxManagerType;\n};\n\nlet sandboxConfigKey: string | undefined;\nlet sandboxInitialized = false;\nlet sandboxRuntimePromise: Promise<SandboxRuntimeModule> | undefined;\n\nexport type BashValidationResult = {\n  valid: boolean;\n  errors: string[];\n  warnings: string[];\n};\n\nfunction isToolExecutionConfig(\n  config: t.ToolExecutionConfig | t.LocalExecutionConfig\n): config is t.ToolExecutionConfig {\n  return 'engine' in config || 'local' in config;\n}\n\nexport function resolveLocalExecutionConfig(\n  config?: t.ToolExecutionConfig | t.LocalExecutionConfig\n): t.LocalExecutionConfig {\n  if (config != null && isToolExecutionConfig(config)) {\n    return config.local ?? {};\n  }\n  return config ?? {};\n}\n\nexport function getLocalCwd(config?: t.LocalExecutionConfig): string {\n  return resolve(config?.workspace?.root ?? config?.cwd ?? process.cwd());\n}\n\n/**\n * Resolves the effective workspace boundary: a list of absolute roots\n * that file operations are allowed to touch. The first entry is always\n * the canonical root (`getLocalCwd`); subsequent entries come from\n * `workspace.additionalRoots` when provided.\n *\n * Returns plain absolute paths — callers symlink-resolve when they\n * need realpath equality (see `resolveWorkspacePathSafe`).\n */\nexport function getWorkspaceRoots(config?: t.LocalExecutionConfig): string[] {\n  const root = getLocalCwd(config);\n  const extras = config?.workspace?.additionalRoots ?? [];\n  if (extras.length === 0) return [root];\n  const seen = new Set<string>([root]);\n  const out: string[] = [root];\n  for (const extra of extras) {\n    // Relative `additionalRoots` entries are anchored to the\n    // workspace root (so monorepo configs like\n    // `additionalRoots: ['../shared']` resolve to a sibling of\n    // `root` rather than to `process.cwd()/../shared`, which would\n    // mean something completely different on a server with a\n    // different cwd).\n    const abs = isAbsolute(extra) ? resolve(extra) : resolve(root, extra);\n    if (!seen.has(abs)) {\n      seen.add(abs);\n      out.push(abs);\n    }\n  }\n  return out;\n}\n\n/**\n * Pluggable spawn resolver. Honours `local.exec.spawn` first, falls\n * back to the legacy top-level `local.spawn`, then to Node's\n * `child_process.spawn`. Centralised so engine swapping is one knob.\n */\nexport function getSpawn(config?: t.LocalExecutionConfig): t.LocalSpawn {\n  return (config?.exec?.spawn ?? config?.spawn ?? spawn) as t.LocalSpawn;\n}\n\n/**\n * Pluggable filesystem resolver. Honours `local.exec.fs`, falls back\n * to the Node-host implementation. A future remote engine supplies\n * its own implementation here and inherits every file-touching tool.\n */\nexport function getWorkspaceFS(config?: t.LocalExecutionConfig): WorkspaceFS {\n  return config?.exec?.fs ?? nodeWorkspaceFS;\n}\n\n/**\n * Resolves the workspace boundary for *write* operations. Honours\n * `workspace.allowWriteOutside` (and the deprecated\n * `allowOutsideWorkspace`) by returning `null`, which the path-safety\n * helpers interpret as \"skip the write clamp\".\n */\nexport function getWriteRoots(\n  config: t.LocalExecutionConfig = {}\n): string[] | null {\n  // Granular flag wins over the legacy one when explicitly set\n  // (true OR false) — otherwise a host tightening access during\n  // migration (`allowOutsideWorkspace: true, workspace.\n  // allowWriteOutside: false`) would still get the loose behavior\n  // because the legacy flag short-circuited the OR. Codex P1 #36.\n  const granular = config.workspace?.allowWriteOutside;\n  if (granular === true) return null;\n  if (granular === false) return getWorkspaceRoots(config);\n  if (config.allowOutsideWorkspace === true) return null;\n  return getWorkspaceRoots(config);\n}\n\n/**\n * Resolves the workspace boundary for *read* operations. Honours\n * `workspace.allowReadOutside` (and the deprecated\n * `allowOutsideWorkspace`) by returning `null`.\n */\nexport function getReadRoots(\n  config: t.LocalExecutionConfig = {}\n): string[] | null {\n  // Same precedence as getWriteRoots: granular flag is authoritative\n  // when set, legacy flag is the fallback. Codex P1 #36.\n  const granular = config.workspace?.allowReadOutside;\n  if (granular === true) return null;\n  if (granular === false) return getWorkspaceRoots(config);\n  if (config.allowOutsideWorkspace === true) return null;\n  return getWorkspaceRoots(config);\n}\n\nexport function getLocalSessionId(config?: t.LocalExecutionConfig): string {\n  const cwd = getLocalCwd(config);\n  const digest = createHash('sha1').update(cwd).digest('hex').slice(0, 12);\n  return `${DEFAULT_LOCAL_SESSION_ID}:${digest}`;\n}\n\nconst missingSandboxRuntimeMessage = [\n  'Local sandbox is enabled, but @anthropic-ai/sandbox-runtime is not installed.',\n  'Install it with `npm install @anthropic-ai/sandbox-runtime`, or disable local sandboxing with `local.sandbox.enabled: false`.',\n].join(' ');\nconst sandboxRuntimePackage = '@anthropic-ai/sandbox-runtime';\n\n/** Lazy-loads the ESM-only sandbox runtime only when sandboxing is enabled. */\nfunction loadSandboxRuntime(): Promise<SandboxRuntimeModule> {\n  sandboxRuntimePromise ??= import(\n    sandboxRuntimePackage\n  ) as Promise<SandboxRuntimeModule>;\n  return sandboxRuntimePromise;\n}\n\nfunction shouldUseLocalSandbox(config: t.LocalExecutionConfig): boolean {\n  return config.sandbox?.enabled === true;\n}\n\nlet sandboxOffWarned = false;\n\nfunction maybeWarnSandboxOff(config: t.LocalExecutionConfig): void {\n  if (\n    sandboxOffWarned ||\n    shouldUseLocalSandbox(config) ||\n    config.exec?.sandboxed === true\n  ) {\n    return;\n  }\n  sandboxOffWarned = true;\n  // eslint-disable-next-line no-console\n  console.warn(\n    '[@librechat/agents] Local execution engine is running without ' +\n      '@anthropic-ai/sandbox-runtime wrapping. The agent has full access to ' +\n      'the host filesystem and network. Set toolExecution.local.sandbox.enabled ' +\n      '= true to opt into process sandboxing.'\n  );\n}\n\n/**\n * Test-only reset hook for the sandbox-off warning latch.\n *\n * @internal Not part of the public SDK surface.\n */\nexport function _resetLocalEngineWarningsForTests(): void {\n  sandboxOffWarned = false;\n}\n\nexport function truncateLocalOutput(\n  value: string,\n  maxChars = DEFAULT_MAX_OUTPUT_CHARS\n): string {\n  if (value.length <= maxChars) {\n    return value;\n  }\n  const head = Math.floor(maxChars * 0.6);\n  const tail = maxChars - head;\n  const omitted = value.length - maxChars;\n  return `${value.slice(0, head)}\\n\\n[... ${omitted} characters truncated ...]\\n\\n${value.slice(\n    value.length - tail\n  )}`;\n}\n\nfunction stripQuotedContent(command: string): string {\n  let output = '';\n  let quote: '\"' | '\\'' | '`' | undefined;\n  let escaped = false;\n\n  for (let i = 0; i < command.length; i++) {\n    const char = command[i];\n\n    if (escaped) {\n      escaped = false;\n      output += ' ';\n      continue;\n    }\n\n    if (char === '\\\\') {\n      escaped = true;\n      output += ' ';\n      continue;\n    }\n\n    if (quote != null) {\n      if (char === quote) {\n        quote = undefined;\n      }\n      output += ' ';\n      continue;\n    }\n\n    if (char === '\"' || char === '\\'' || char === '`') {\n      quote = char;\n      output += ' ';\n      continue;\n    }\n\n    if (char === '#') {\n      while (i < command.length && command[i] !== '\\n') {\n        output += ' ';\n        i++;\n      }\n      output += '\\n';\n      continue;\n    }\n\n    output += char;\n  }\n\n  return output;\n}\n\nexport async function validateBashCommand(\n  command: string,\n  config: t.LocalExecutionConfig = {}\n): Promise<BashValidationResult> {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  const normalized = stripQuotedContent(command);\n\n  if (command.trim() === '') {\n    errors.push('Command is empty.');\n  }\n\n  if (command.includes('\\0')) {\n    errors.push('Command contains a NUL byte.');\n  }\n\n  if (config.allowDangerousCommands !== true) {\n    let blocked = false;\n    // Strip-then-match for the bare-form patterns (avoids false\n    // positives where the destructive text is buried inside a\n    // string the user is just printing).\n    for (const pattern of dangerousCommandPatterns) {\n      if (pattern.test(normalized)) {\n        errors.push('Command matches a destructive command pattern.');\n        blocked = true;\n        break;\n      }\n    }\n    // Original-form pass for patterns that REQUIRE matching quote\n    // pairs around a destructive path. Without this, `rm -rf \"/\"`\n    // and `chmod -R 777 \"/\"` slip past the strip-then-match pass\n    // because their destructive target is inside quotes.\n    if (!blocked) {\n      for (const pattern of quotedDestructivePatterns) {\n        if (pattern.test(command)) {\n          errors.push(\n            'Command matches a destructive command pattern (quoted target).'\n          );\n          blocked = true;\n          break;\n        }\n      }\n    }\n    if (!blocked) {\n      for (const pattern of nestedShellDestructivePatterns) {\n        if (pattern.test(command)) {\n          errors.push(\n            'Command matches a destructive command pattern (nested shell payload).'\n          );\n          break;\n        }\n      }\n    }\n  }\n\n  const bashAstMode = config.bashAst ?? 'off';\n  if (bashAstMode !== 'off' && config.allowDangerousCommands !== true) {\n    const findings = runBashAstChecks(normalized, bashAstMode);\n    const split = bashAstFindingsToErrors(findings);\n    errors.push(...split.errors);\n    warnings.push(...split.warnings);\n  }\n\n  if (config.readOnly === true && mutatingCommandPattern.test(normalized)) {\n    errors.push(\n      'Command appears to mutate files or repository state in read-only local mode.'\n    );\n  }\n\n  // Use the same shell the actual execution path will use. Hard-coding\n  // DEFAULT_SHELL here would reject perfectly valid commands when the\n  // host configures `local.shell` to a non-bash binary (or when the\n  // runtime doesn't have bash installed at all but does have e.g. zsh).\n  const syntaxShell = config.shell ?? DEFAULT_SHELL;\n  const syntax = await spawnLocalProcess(\n    syntaxShell,\n    ['-n', '-c', command],\n    {\n      ...config,\n      timeoutMs: Math.min(config.timeoutMs ?? DEFAULT_TIMEOUT_MS, 5000),\n      sandbox: { enabled: false },\n    },\n    { internal: true }\n  ).catch(\n    (error: Error): SpawnResult => ({\n      stdout: '',\n      stderr: error.message,\n      exitCode: 1,\n      timedOut: false,\n    })\n  );\n\n  if (syntax.exitCode !== 0) {\n    errors.push(\n      syntax.stderr.trim() === ''\n        ? 'Command failed shell syntax validation.'\n        : `Command failed shell syntax validation: ${syntax.stderr.trim()}`\n    );\n  }\n\n  if (/\\bsudo\\b/.test(normalized)) {\n    warnings.push('Command requests elevated privileges with sudo.');\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors,\n    warnings,\n  };\n}\n\nasync function ensureSandbox(\n  config: t.LocalExecutionConfig,\n  cwd: string\n): Promise<SandboxManagerType | undefined> {\n  if (!shouldUseLocalSandbox(config)) {\n    return undefined;\n  }\n\n  const runtime = await loadSandboxRuntime().catch((error: Error) => {\n    throw new Error(`${missingSandboxRuntimeMessage} Cause: ${error.message}`);\n  });\n\n  const runtimeConfig = buildSandboxRuntimeConfig(\n    config,\n    cwd,\n    runtime.getDefaultWritePaths\n  );\n  const nextKey = JSON.stringify(runtimeConfig);\n\n  if (sandboxInitialized && sandboxConfigKey === nextKey) {\n    return runtime.SandboxManager;\n  }\n\n  const dependencyCheck = runtime.SandboxManager.checkDependencies();\n  if (dependencyCheck.errors.length > 0) {\n    if (config.sandbox?.failIfUnavailable === true) {\n      throw new Error(\n        `Local sandbox requested but unavailable: ${dependencyCheck.errors.join('; ')}`\n      );\n    }\n    return undefined;\n  }\n\n  if (sandboxInitialized) {\n    await runtime.SandboxManager.reset();\n  }\n\n  await runtime.SandboxManager.initialize(runtimeConfig);\n  sandboxInitialized = true;\n  sandboxConfigKey = nextKey;\n  return runtime.SandboxManager;\n}\n\n/**\n * Loopback addresses the in-process programmatic-tool bridge listens\n * on (`LocalProgrammaticToolCalling.ts` binds 127.0.0.1). Sandboxed\n * code launched by `run_tools_with_code` / `run_tools_with_bash` HTTPs\n * back to that address — without the entries below, the bridge is\n * silently blocked under sandbox.\n */\nconst BRIDGE_LOOPBACK_HOSTS = ['127.0.0.1', 'localhost', '::1'] as const;\n\n/**\n * Structural shape of the sandbox-runtime config we hand to\n * `SandboxManager.initialize()`. Intentionally NOT typed as the peer\n * `SandboxRuntimeConfig` from `@anthropic-ai/sandbox-runtime`: that\n * package is an OPTIONAL peer dep, and exporting a function whose\n * return type references it would make our generated `.d.ts` import\n * a module the consumer may not have installed (Codex P1 #22 — type-\n * checking would fail with `Cannot find module\n * '@anthropic-ai/sandbox-runtime'` for any host that doesn't enable\n * local sandboxing). The shape here is a structural subset; assignable\n * to the real `SandboxRuntimeConfig` at the one runtime call site.\n *\n * @internal\n */\nexport interface BuiltSandboxRuntimeConfig {\n  network: {\n    allowedDomains: string[];\n    deniedDomains: string[];\n    allowUnixSockets?: string[];\n    allowAllUnixSockets?: boolean;\n    allowLocalBinding?: boolean;\n    allowMachLookup?: string[];\n  };\n  filesystem: {\n    denyRead: string[];\n    allowRead?: string[];\n    allowWrite: string[];\n    denyWrite: string[];\n    allowGitConfig?: boolean;\n  };\n}\n\nexport function buildSandboxRuntimeConfig(\n  config: t.LocalExecutionConfig,\n  cwd: string,\n  getDefaultWritePaths: () => string[]\n): BuiltSandboxRuntimeConfig {\n  const sandbox = config.sandbox;\n  // Seed allowedDomains with loopback so the programmatic-tool bridge\n  // works under sandbox. If the host explicitly denied a loopback\n  // entry via `deniedDomains`, respect that and skip seeding it.\n  const userAllowed = sandbox?.network?.allowedDomains ?? [];\n  const denied = new Set(sandbox?.network?.deniedDomains ?? []);\n  const seededLoopback = BRIDGE_LOOPBACK_HOSTS.filter(\n    (host) => !denied.has(host) && !userAllowed.includes(host)\n  );\n  const allowedDomains = [...seededLoopback, ...userAllowed];\n  // Mirror the file-tools workspace boundary: anything in\n  // `additionalRoots` counts as in-workspace, so sandboxed shell/code\n  // can write there too. Without this, file_tools can resolve a\n  // sibling-root path but `bash`/`execute_code` is denied write\n  // access — confusing divergence flagged in Codex P2 #15.\n  const workspaceWriteRoots =\n    config.workspace?.additionalRoots != null\n      ? getWorkspaceRoots(config)\n      : [cwd];\n  return {\n    network: {\n      allowedDomains,\n      deniedDomains: sandbox?.network?.deniedDomains ?? [],\n      ...(sandbox?.network?.allowUnixSockets != null && {\n        allowUnixSockets: sandbox.network.allowUnixSockets,\n      }),\n      ...(sandbox?.network?.allowAllUnixSockets != null && {\n        allowAllUnixSockets: sandbox.network.allowAllUnixSockets,\n      }),\n      ...(sandbox?.network?.allowLocalBinding != null && {\n        allowLocalBinding: sandbox.network.allowLocalBinding,\n      }),\n      ...(sandbox?.network?.allowMachLookup != null && {\n        allowMachLookup: sandbox.network.allowMachLookup,\n      }),\n    },\n    filesystem: {\n      denyRead: sandbox?.filesystem?.denyRead ?? [],\n      allowRead: sandbox?.filesystem?.allowRead,\n      allowWrite: sandbox?.filesystem?.allowWrite ?? [\n        ...workspaceWriteRoots,\n        ...getDefaultWritePaths(),\n      ],\n      denyWrite: sandbox?.filesystem?.denyWrite ?? [\n        '.env',\n        '.env.*',\n        '.git/config',\n        '.git/hooks/**',\n      ],\n      allowGitConfig: sandbox?.filesystem?.allowGitConfig,\n    },\n  };\n}\n\n/**\n * Internal options for {@link spawnLocalProcess} that we don't want\n * exposed on the public `LocalExecutionConfig` type.\n *\n * @internal\n */\nexport interface SpawnLocalProcessOptions {\n  /**\n   * When true, suppress the \"sandbox is off\" warning AND its latch\n   * for this spawn. Use for SDK-internal probes (`bash -n` syntax\n   * preflight, `rg --version`, etc.) that intentionally run with\n   * the sandbox forced off — the warning is noise for those, and\n   * letting the latch flip would hide the warning when a *real*\n   * unsandboxed execution happens later in the same process.\n   */\n  internal?: boolean;\n}\n\nexport const LOCAL_SPAWN_TIMEOUT_MS = Symbol('librechat.localSpawn.timeoutMs');\n\nexport async function spawnLocalProcess(\n  command: string,\n  args: string[],\n  config: t.LocalExecutionConfig = {},\n  options?: SpawnLocalProcessOptions\n): Promise<SpawnResult> {\n  const cwd = getLocalCwd(config);\n  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const maxOutputChars = config.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  // Streaming caps. Local tools execute arbitrary shell/code, so a noisy\n  // command (`yes`, `cat /dev/urandom | base64`, a verbose build) could\n  // accumulate gigabytes in memory before hitting the post-close cap.\n  // We bound in-memory per-stream and spill the rest to disk; we also\n  // hard-kill the child once total streamed bytes pass `maxSpawnedBytes`\n  // so a process producing unbounded output gets stopped instead of\n  // letting the host OOM.\n  const inMemoryCapBytes = maxOutputChars * 2;\n  const hardKillBytes = config.maxSpawnedBytes ?? DEFAULT_MAX_SPAWNED_BYTES;\n  const sandboxManager = await ensureSandbox(config, cwd);\n  // Internal probes (validateBashCommand syntax preflight,\n  // isRipgrepAvailable, syntax-check probe cache priming) pass\n  // `internal: true` so they don't emit a misleading \"sandbox is\n  // off\" warning AND don't flip `sandboxOffWarned = true`. Without\n  // this Codex P2 path: a run with `sandbox.enabled: true` would\n  // see a false warning from the syntax preflight, and the latch\n  // flip would suppress the warning in a *later* truly-unsandboxed\n  // run — exactly the scenario operators need to see.\n  if (sandboxManager == null && options?.internal !== true) {\n    maybeWarnSandboxOff(config);\n  }\n  let spawnCommand = command;\n  let spawnArgs = args;\n\n  if (sandboxManager != null) {\n    const rendered = [command, ...args.map(shellQuote)].join(' ');\n    const sandboxed = await sandboxManager.wrapWithSandbox(rendered);\n    spawnCommand = config.shell ?? DEFAULT_SHELL;\n    spawnArgs = ['-lc', sandboxed];\n  }\n\n  const launcher = getSpawn(config);\n  return new Promise<SpawnResult>((resolveResult, reject) => {\n    const spawnOptions: import('child_process').SpawnOptions = {\n      cwd,\n      detached: process.platform !== 'win32',\n      env: { ...process.env, ...(config.env ?? {}) },\n      stdio: ['ignore', 'pipe', 'pipe'],\n    };\n    Object.defineProperty(spawnOptions, LOCAL_SPAWN_TIMEOUT_MS, {\n      value: timeoutMs,\n    });\n    const child = launcher(spawnCommand, spawnArgs, spawnOptions);\n\n    let stdout = '';\n    let stderr = '';\n    let totalSpawnedBytes = 0;\n    let overflowKilled = false;\n    let spillStream: import('fs').WriteStream | undefined;\n    let spillPath: string | undefined;\n    let settled = false;\n    let timedOut = false;\n    let timeout: NodeJS.Timeout | undefined;\n\n    const ensureSpill = (): void => {\n      if (spillStream != null) return;\n      // Lazy-open the temp file the first time a stream's in-memory\n      // buffer overflows. Seed it with everything we've buffered so\n      // the file holds the FULL output (not just the post-cap tail).\n      // Uses the static `createWriteStream` import — `require('fs')`\n      // would throw `ReferenceError: require is not defined` in ESM\n      // consumers (this package ships both `dist/cjs` and `dist/esm`).\n      spillPath = resolve(tmpdir(), `lc-local-output-${randomUUID()}.txt`);\n      spillStream = createWriteStream(spillPath);\n      spillStream.write('===== stdout =====\\n');\n      spillStream.write(stdout);\n      spillStream.write('\\n===== stderr =====\\n');\n      spillStream.write(stderr);\n      spillStream.write('\\n===== overflow stream begins here =====\\n');\n    };\n\n    const handleChunk = (buf: Buffer, kind: 'stdout' | 'stderr'): void => {\n      totalSpawnedBytes += buf.length;\n      // hardKillBytes <= 0 means \"no cap\" per the public config contract\n      // (see LocalExecutionConfig.maxSpawnedBytes). Skip the kill check\n      // entirely in that case so a single byte doesn't terminate the run.\n      if (\n        hardKillBytes > 0 &&\n        totalSpawnedBytes > hardKillBytes &&\n        !overflowKilled\n      ) {\n        overflowKilled = true;\n        killProcessTree(child);\n        return;\n      }\n      const current = kind === 'stdout' ? stdout : stderr;\n      if (current.length < inMemoryCapBytes) {\n        const text = buf.toString('utf8');\n        if (kind === 'stdout') stdout += text;\n        else stderr += text;\n        if (current.length + text.length >= inMemoryCapBytes) {\n          ensureSpill();\n        }\n      } else {\n        ensureSpill();\n        spillStream!.write(`[${kind}] `);\n        spillStream!.write(buf);\n      }\n    };\n\n    const finish = (result: SpawnResult): void => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      if (timeout != null) {\n        clearTimeout(timeout);\n      }\n      const finalize = (): void => {\n        const truncated = {\n          stdout: truncateLocalOutput(result.stdout, maxOutputChars),\n          stderr: truncateLocalOutput(result.stderr, maxOutputChars),\n        };\n        resolveResult({\n          ...result,\n          ...truncated,\n          ...(spillPath != null ? { fullOutputPath: spillPath } : {}),\n        });\n      };\n      if (spillStream == null) {\n        finalize();\n        return;\n      }\n      // Wait for the temp file to flush before reporting the path.\n      // Otherwise the model sees `full_output_path: …` for a file\n      // that's still being written.\n      spillStream.end(() => finalize());\n    };\n\n    const fail = (error: Error): void => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      if (timeout != null) {\n        clearTimeout(timeout);\n      }\n      if (spillStream != null) {\n        spillStream.end();\n      }\n      reject(error);\n    };\n\n    if (timeoutMs > 0) {\n      timeout = setTimeout(() => {\n        timedOut = true;\n        killProcessTree(child);\n      }, timeoutMs);\n    }\n\n    child.stdout.on('data', (chunk: Buffer) => {\n      handleChunk(chunk, 'stdout');\n    });\n\n    child.stderr.on('data', (chunk: Buffer) => {\n      handleChunk(chunk, 'stderr');\n    });\n\n    child.on('error', fail);\n\n    child.on('close', (exitCode, signal) => {\n      // Synthesize a non-zero exit code whenever the process exited\n      // by signal — Node reports `exitCode: null` in that case and\n      // the formatter only prints non-null exit codes, so signal\n      // kills (overflow guard, `kill -9 $$` from inside the script,\n      // native crashes, OS OOM killer, …) would otherwise look like\n      // successful runs (Codex P1 + Codex P2). Overflow path keeps\n      // its 137 (SIGKILL) for compatibility; other signals map per\n      // POSIX `128 + signum`.\n      let finalExit: number | null = exitCode;\n      if (finalExit == null) {\n        if (overflowKilled) {\n          finalExit = 137;\n        } else if (signal != null) {\n          finalExit = exitCodeForSignal(signal);\n        }\n      }\n      finish({\n        stdout,\n        stderr,\n        exitCode: finalExit,\n        timedOut,\n        ...(overflowKilled ? { overflowKilled: true } : {}),\n        ...(signal != null ? { signal } : {}),\n      });\n    });\n  });\n}\n\nexport async function executeLocalBash(\n  command: string,\n  config: t.LocalExecutionConfig = {}\n): Promise<SpawnResult> {\n  const validation = await validateBashCommand(command, config);\n  if (!validation.valid) {\n    throw new Error(validation.errors.join('\\n'));\n  }\n  const shell = config.shell ?? DEFAULT_SHELL;\n  return spawnLocalProcess(shell, ['-lc', command], config);\n}\n\n/**\n * Variant of `executeLocalBash` that exposes `args` as positional\n * shell parameters (`$1`, `$2`, …). Mirrors what the other runtimes\n * do in `getRuntimeCommand`. Uses the standard `bash -c <code> --\n * arg0 arg1 …` form: the `--` becomes `$0`, then `args[0]` is `$1`\n * and so on. Same AST validation as the no-args path.\n *\n * Used by both the `execute_code`/`lang:'bash'` path AND the\n * `bash_tool` factory so the schema's `args` contract works\n * identically in both surfaces.\n */\n/**\n * Matches a single arg that, on its own, references a protected\n * location (`/`, `~`, `$HOME`, `${HOME}`, `.`, with optional trailing\n * slash, wildcard, or dot-glob suffix). Used to spot the\n * `command: 'rm -rf \"$1\"', args: ['/']` shape where the destructive\n * target is moved into a positional arg to evade the command regex.\n * Codex P1 [45], extended for dot-glob in Codex P1 [47] (mirrors the\n * `DESTRUCTIVE_TARGET` suffix matrix exactly).\n */\nconst PROTECTED_TARGET_ARG_RE = /^(?:\\/|~|\\$\\{?HOME\\}?|\\.)(?:\\/?\\.?\\*|\\/)?$/;\n\n/**\n * Mutating-op recognizer for the args check. Conservative: only the\n * three operations the destructive-command guard already covers\n * directly (`rm -rf …`, `chmod -R …`, `chown -R …`). Other shell\n * builtins might mutate state (`mv`, `cp` over an existing file,\n * etc.) but the destructive guard doesn't try to catch those today,\n * so we don't widen here either.\n */\nconst DESTRUCTIVE_OP_IN_COMMAND_RE =\n  /\\b(?:rm\\s+-[^\\s]*[rf]|chmod\\s+-R|chown\\s+-R)\\b/;\n\nexport async function executeLocalBashWithArgs(\n  command: string,\n  args: readonly string[],\n  config: t.LocalExecutionConfig = {}\n): Promise<SpawnResult> {\n  const validation = await validateBashCommand(command, config);\n  if (!validation.valid) {\n    throw new Error(validation.errors.join('\\n'));\n  }\n  // Per-arg protected-target check (Codex P1 [45]). The command\n  // regex can't see `$1`/`$@` substitutions at runtime — `command:\n  // 'rm -rf \"$1\"', args: ['/']` would expand to `rm -rf '/'` inside\n  // bash but the validator only saw `rm -rf \"$1\"` (no destructive\n  // target). Block when (a) the command contains a destructive op\n  // AND (b) at least one arg matches the protected-target shape.\n  // Skipped when allowDangerousCommands is true (host-opted-in).\n  if (\n    args.length > 0 &&\n    config.allowDangerousCommands !== true &&\n    DESTRUCTIVE_OP_IN_COMMAND_RE.test(command)\n  ) {\n    const offending = args.find((a) => PROTECTED_TARGET_ARG_RE.test(a));\n    if (offending !== undefined) {\n      throw new Error(\n        `Command matches a destructive command pattern (protected target \"${offending}\" passed via positional arg).`\n      );\n    }\n  }\n  const shell = config.shell ?? DEFAULT_SHELL;\n  return spawnLocalProcess(shell, ['-lc', command, '--', ...args], config);\n}\n\nexport async function executeLocalCode(\n  input: {\n    lang: string;\n    code: string;\n    args?: string[];\n  },\n  config: t.LocalExecutionConfig = {}\n): Promise<SpawnResult> {\n  if (input.lang === 'bash') {\n    // Append `args` as positional parameters via the standard\n    // `bash -c <code> -- <args...>` form so `$1`, `$2`, … inside\n    // `code` resolve correctly. Honours the same args contract the\n    // other runtimes (py, js, …) already support.\n    if (input.args != null && input.args.length > 0) {\n      return executeLocalBashWithArgs(input.code, input.args, config);\n    }\n    return executeLocalBash(input.code, config);\n  }\n\n  const tempDir = resolve(tmpdir(), `lc-local-${randomUUID()}`);\n  await mkdir(tempDir, { recursive: true });\n\n  try {\n    const runtime = getRuntimeCommand(\n      input.lang,\n      tempDir,\n      input.code,\n      input.args,\n      config.shell\n    );\n    if (runtime.source != null) {\n      await writeFile(\n        resolve(tempDir, runtime.fileName),\n        runtime.source,\n        'utf8'\n      );\n    }\n    return await spawnLocalProcess(runtime.command, runtime.args, config);\n  } finally {\n    await rm(tempDir, { recursive: true, force: true });\n  }\n}\n\nfunction getRuntimeCommand(\n  lang: string,\n  tempDir: string,\n  code: string,\n  args: string[] = [],\n  // Override for the shell used by compile-style runtimes (`rs`,\n  // `c`, `cpp`, `java`, `d`, `f90`). Threads `local.shell` so a host\n  // that doesn't have bash (or wants `/bin/sh` / zsh) can still\n  // execute these languages — Codex P2 #29: the bare-bash hardcode\n  // mirrored the same gap that Codex P1 #6 fixed for the syntax\n  // preflight, but had been missed for these runtime invocations.\n  shellOverride?: string\n): RuntimeCommand {\n  const fileFor = (name: string): string => resolve(tempDir, name);\n  const shell = shellOverride ?? configShell();\n\n  switch (lang) {\n  case 'py':\n    return {\n      command: 'python3',\n      args: [fileFor('main.py'), ...args],\n      fileName: 'main.py',\n      source: code,\n    };\n  case 'js':\n    return {\n      command: 'node',\n      args: [fileFor('main.js'), ...args],\n      fileName: 'main.js',\n      source: code,\n    };\n  case 'ts':\n    return {\n      command: 'npx',\n      args: ['--no-install', 'tsx', fileFor('main.ts'), ...args],\n      fileName: 'main.ts',\n      source: code,\n    };\n  case 'php':\n    return {\n      command: 'php',\n      args: [fileFor('main.php'), ...args],\n      fileName: 'main.php',\n      source: code,\n    };\n  case 'go':\n    return {\n      command: 'go',\n      args: ['run', fileFor('main.go'), ...args],\n      fileName: 'main.go',\n      source: code,\n    };\n  case 'rs':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `rustc ${shellQuote(fileFor('main.rs'))} -o ${shellQuote(\n          fileFor('main-rs')\n        )} && ${shellQuote(fileFor('main-rs'))} ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'main.rs',\n      source: code,\n    };\n  case 'c':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `cc ${shellQuote(fileFor('main.c'))} -o ${shellQuote(\n          fileFor('main-c')\n        )} && ${shellQuote(fileFor('main-c'))} ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'main.c',\n      source: code,\n    };\n  case 'cpp':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `c++ ${shellQuote(fileFor('main.cpp'))} -o ${shellQuote(\n          fileFor('main-cpp')\n        )} && ${shellQuote(fileFor('main-cpp'))} ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'main.cpp',\n      source: code,\n    };\n  case 'java':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `javac ${shellQuote(fileFor('Main.java'))} && java -cp ${shellQuote(\n          tempDir\n        )} Main ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'Main.java',\n      source: code,\n    };\n  case 'r':\n    return {\n      command: 'Rscript',\n      args: [fileFor('main.R'), ...args],\n      fileName: 'main.R',\n      source: code,\n    };\n  case 'd':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `dmd ${shellQuote(fileFor('main.d'))} -of=${shellQuote(\n          fileFor('main-d')\n        )} && ${shellQuote(fileFor('main-d'))} ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'main.d',\n      source: code,\n    };\n  case 'f90':\n    return {\n      command: shell,\n      args: [\n        '-lc',\n        `gfortran ${shellQuote(fileFor('main.f90'))} -o ${shellQuote(\n          fileFor('main-f90')\n        )} && ${shellQuote(fileFor('main-f90'))} ${args.map(shellQuote).join(' ')}`,\n      ],\n      fileName: 'main.f90',\n      source: code,\n    };\n  default:\n    throw new Error(`Unsupported local runtime: ${lang}`);\n  }\n}\n\nfunction configShell(): string {\n  return process.platform === 'win32' ? 'bash.exe' : 'bash';\n}\n\n/**\n * How long after SIGTERM we wait before escalating to SIGKILL. A\n * cooperative process gets a graceful chance to flush + clean up;\n * a process that ignores or traps SIGTERM (`trap '' TERM`) gets\n * killed unconditionally so timeoutMs / maxSpawnedBytes can't be\n * defeated by a hostile script. Codex P1 #28 — pre-fix the spawn\n * promise would never resolve in that case and the entire tool run\n * would hang past the advertised timeout.\n */\nconst SIGKILL_ESCALATION_MS = 2000;\n\nfunction sigterm(child: ChildProcess): void {\n  if (child.pid == null) {\n    child.kill('SIGTERM');\n    return;\n  }\n  try {\n    if (process.platform === 'win32') {\n      child.kill('SIGTERM');\n      return;\n    }\n    process.kill(-child.pid, 'SIGTERM');\n  } catch {\n    child.kill('SIGTERM');\n  }\n}\n\nfunction sigkill(child: ChildProcess): void {\n  if (child.exitCode != null || child.signalCode != null) return;\n  if (child.pid == null) {\n    child.kill('SIGKILL');\n    return;\n  }\n  try {\n    if (process.platform === 'win32') {\n      child.kill('SIGKILL');\n      return;\n    }\n    process.kill(-child.pid, 'SIGKILL');\n  } catch {\n    try {\n      child.kill('SIGKILL');\n    } catch {\n      /* already dead */\n    }\n  }\n}\n\nfunction killProcessTree(child: ChildProcess): void {\n  sigterm(child);\n  // Escalate to SIGKILL if the child is still alive after the grace\n  // window. Use unref() so the timer doesn't keep the Node process\n  // alive past the parent's natural exit.\n  const escalation = setTimeout(() => sigkill(child), SIGKILL_ESCALATION_MS);\n  escalation.unref();\n  child.once('close', () => clearTimeout(escalation));\n}\n\nexport function shellQuote(value: string): string {\n  if (value === '') {\n    return '\\'\\'';\n  }\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {\n    return value;\n  }\n  return `'${value.replace(/'/g, '\\'\\\\\\'\\'')}'`;\n}\n\nexport function resolveWorkspacePath(\n  filePath: string,\n  config: t.LocalExecutionConfig = {},\n  intent: 'read' | 'write' = 'write'\n): string {\n  const cwd = getLocalCwd(config);\n  const absolutePath = isAbsolute(filePath)\n    ? resolve(filePath)\n    : resolve(cwd, filePath);\n\n  const roots =\n    intent === 'write' ? getWriteRoots(config) : getReadRoots(config);\n  if (roots == null) return absolutePath; // explicit allow-outside\n\n  if (absolutePath === cwd || isInsideAnyRoot(absolutePath, roots)) {\n    return absolutePath;\n  }\n  throw new Error(`Path is outside the local workspace: ${filePath}`);\n}\n\nfunction isInsideAnyRoot(absolutePath: string, roots: string[]): boolean {\n  for (const root of roots) {\n    if (absolutePath === root) return true;\n    const rel = relative(root, absolutePath);\n    if (!rel.startsWith('..') && !isAbsolute(rel)) return true;\n  }\n  return false;\n}\n\ntype RealpathFn = (p: string) => Promise<string>;\n\nasync function realpathOrSelf(\n  absolutePath: string,\n  realpathImpl: RealpathFn = realpath\n): Promise<string> {\n  try {\n    return await realpathImpl(absolutePath);\n  } catch {\n    return absolutePath;\n  }\n}\n\n/**\n * Resolves the realpath of `absolutePath`, falling back to the nearest\n * existing ancestor when the target itself does not yet exist (so the\n * containment check still works for `write_file` to a brand-new path).\n *\n * Codex P2 #38: takes the realpath impl as a parameter so callers\n * can route through `WorkspaceFS.realpath` when a custom engine is\n * configured. Pre-fix, host `fs/promises.realpath` would fail on a\n * remote/in-memory FS path and silently fall back to lexical\n * containment, leaving the symlink-escape clamp ineffective on\n * non-default engines.\n */\nasync function realpathOfPathOrAncestor(\n  absolutePath: string,\n  realpathImpl: RealpathFn = realpath\n): Promise<string> {\n  let current = absolutePath;\n  let suffix = '';\n  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n  while (true) {\n    try {\n      const real = await realpathImpl(current);\n      return suffix === '' ? real : resolve(real, suffix);\n    } catch {\n      const parent = resolve(current, '..');\n      if (parent === current) {\n        return absolutePath;\n      }\n      const base = current.slice(parent.length + 1);\n      suffix = suffix === '' ? base : `${base}/${suffix}`;\n      current = parent;\n    }\n  }\n}\n\n/**\n * Resolves a workspace path AND follows any symlinks before checking\n * containment, so a symlink inside the workspace pointing outside is\n * rejected even though the lexical path looks safe. Handles paths that\n * don't yet exist (e.g. write_file targets) by realpath-resolving the\n * nearest existing ancestor and re-attaching the unresolved suffix.\n */\nexport async function resolveWorkspacePathSafe(\n  filePath: string,\n  config: t.LocalExecutionConfig = {},\n  intent: 'read' | 'write' = 'write'\n): Promise<string> {\n  const lexical = resolveWorkspacePath(filePath, config, intent);\n  const roots =\n    intent === 'write' ? getWriteRoots(config) : getReadRoots(config);\n  if (roots == null) {\n    return lexical;\n  }\n  // Route realpath through the configured WorkspaceFS so a custom\n  // engine (in-memory, remote) gets the same symlink-escape clamp\n  // the host-fs path gets. Codex P2 #38: pre-fix the host realpath\n  // would fail on a non-default FS path and silently fall back to\n  // lexical containment, leaving the clamp ineffective.\n  const fsRealpath: RealpathFn = (p) => getWorkspaceFS(config).realpath(p);\n  const realRoots = await Promise.all(\n    roots.map((r) => realpathOrSelf(r, fsRealpath))\n  );\n  const realPath = await realpathOfPathOrAncestor(lexical, fsRealpath);\n  if (isInsideAnyRoot(realPath, realRoots)) {\n    return lexical;\n  }\n  throw new Error(\n    `Path is outside the local workspace (symlink escape): ${filePath}`\n  );\n}\n"],"mappings":";;;;;;;;;AAYA,MAAM,qBAAqB;AAC3B,MAAM,2BAA2B;;;;;;;AAOjC,MAAM,4BAA4B,KAAK,OAAO;AAC9C,MAAM,2BAA2B;AACjC,MAAM,gBAAgB,QAAQ,aAAa,UAAU,aAAa;AAuBlE,MAAM,qBAAqB;AAE3B,MAAM,2BAAkD;CACtD,IAAI,OACF,+FAA+F,mBAAmB,gBACpH;CACA;CACA;CACA,IAAI,OACF,iDAAiD,mBAAmB,gBACtE;CACA,IAAI,OACF,2CAA2C,mBAAmB,gBAChE;CACA;AACF;;;;;;;;;;;;;;;;AAoBA,MAAM,4BAAmD;CACvD,IAAI,OACF,2DAA2D,mBAAmB,KAChF;CACA,IAAI,OACF,qDAAqD,mBAAmB,KAC1E;CACA,IAAI,OACF,+CAA+C,mBAAmB,KACpE;AACF;AAiBA,MAAM,iCAAwD;iBAC5D,IAAI,OACF,sIAEF;iBACA,IAAI,OACF,mIAEF;iBACA,IAAI,OACF,6HAEF;AACF;AAEA,MAAM,yBACJ;;;;;;;AAqCF,MAAM,sBAA8C;CAClD,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;AACX;AACA,SAAS,kBAAkB,QAA+B;CACxD,IAAI,UAAU,MAAM,OAAO;CAC3B,OAAO,oBAAoB,WAAW;AACxC;AAqBA,IAAI;AACJ,IAAI,qBAAqB;AACzB,IAAI;AAQJ,SAAS,sBACP,QACiC;CACjC,OAAO,YAAY,UAAU,WAAW;AAC1C;AAEA,SAAgB,4BACd,QACwB;CACxB,IAAI,UAAU,QAAQ,sBAAsB,MAAM,GAChD,OAAO,OAAO,SAAS,CAAC;CAE1B,OAAO,UAAU,CAAC;AACpB;AAEA,SAAgB,YAAY,QAAyC;CACnE,QAAA,GAAA,KAAA,QAAA,CAAe,QAAQ,WAAW,QAAQ,QAAQ,OAAO,QAAQ,IAAI,CAAC;AACxE;;;;;;;;;;AAWA,SAAgB,kBAAkB,QAA2C;CAC3E,MAAM,OAAO,YAAY,MAAM;CAC/B,MAAM,SAAS,QAAQ,WAAW,mBAAmB,CAAC;CACtD,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC,IAAI;CACrC,MAAM,OAAO,IAAI,IAAY,CAAC,IAAI,CAAC;CACnC,MAAM,MAAgB,CAAC,IAAI;CAC3B,KAAK,MAAM,SAAS,QAAQ;EAO1B,MAAM,OAAA,GAAA,KAAA,WAAA,CAAiB,KAAK,KAAA,GAAA,KAAA,QAAA,CAAY,KAAK,KAAA,GAAA,KAAA,QAAA,CAAY,MAAM,KAAK;EACpE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG;GAClB,KAAK,IAAI,GAAG;GACZ,IAAI,KAAK,GAAG;EACd;CACF;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,SAAS,QAA+C;CACtE,OAAQ,QAAQ,MAAM,SAAS,QAAQ,SAASA,cAAAA;AAClD;;;;;;AAOA,SAAgB,eAAe,QAA8C;CAC3E,OAAO,QAAQ,MAAM,MAAMC,oBAAAA;AAC7B;;;;;;;AAQA,SAAgB,cACd,SAAiC,CAAC,GACjB;CAMjB,MAAM,WAAW,OAAO,WAAW;CACnC,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,aAAa,OAAO,OAAO,kBAAkB,MAAM;CACvD,IAAI,OAAO,0BAA0B,MAAM,OAAO;CAClD,OAAO,kBAAkB,MAAM;AACjC;;;;;;AAOA,SAAgB,aACd,SAAiC,CAAC,GACjB;CAGjB,MAAM,WAAW,OAAO,WAAW;CACnC,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,aAAa,OAAO,OAAO,kBAAkB,MAAM;CACvD,IAAI,OAAO,0BAA0B,MAAM,OAAO;CAClD,OAAO,kBAAkB,MAAM;AACjC;AAEA,SAAgB,kBAAkB,QAAyC;CACzE,MAAM,MAAM,YAAY,MAAM;CAE9B,OAAO,GAAG,yBAAyB,IAAA,GAAA,OAAA,WAAA,CADT,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAC1B;AAC7C;AAEA,MAAM,+BAA+B,CACnC,iFACA,+HACF,CAAC,CAAC,KAAK,GAAG;AACV,MAAM,wBAAwB;;AAG9B,SAAS,qBAAoD;CAC3D,0BAA0B,OACxB;CAEF,OAAO;AACT;AAEA,SAAS,sBAAsB,QAAyC;CACtE,OAAO,OAAO,SAAS,YAAY;AACrC;AAEA,IAAI,mBAAmB;AAEvB,SAAS,oBAAoB,QAAsC;CACjE,IACE,oBACA,sBAAsB,MAAM,KAC5B,OAAO,MAAM,cAAc,MAE3B;CAEF,mBAAmB;CAEnB,QAAQ,KACN,oPAIF;AACF;;;;;;AAOA,SAAgB,oCAA0C;CACxD,mBAAmB;AACrB;AAEA,SAAgB,oBACd,OACA,WAAW,0BACH;CACR,IAAI,MAAM,UAAU,UAClB,OAAO;CAET,MAAM,OAAO,KAAK,MAAM,WAAW,EAAG;CACtC,MAAM,OAAO,WAAW;CACxB,MAAM,UAAU,MAAM,SAAS;CAC/B,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,QAAQ,gCAAgC,MAAM,MACtF,MAAM,SAAS,IACjB;AACF;AAEA,SAAS,mBAAmB,SAAyB;CACnD,IAAI,SAAS;CACb,IAAI;CACJ,IAAI,UAAU;CAEd,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,OAAO,QAAQ;EAErB,IAAI,SAAS;GACX,UAAU;GACV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,MAAM;GACjB,UAAU;GACV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,MAAM;GACjB,IAAI,SAAS,OACX,QAAQ,KAAA;GAEV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,QAAO,SAAS,OAAQ,SAAS,KAAK;GACjD,QAAQ;GACR,UAAU;GACV;EACF;EAEA,IAAI,SAAS,KAAK;GAChB,OAAO,IAAI,QAAQ,UAAU,QAAQ,OAAO,MAAM;IAChD,UAAU;IACV;GACF;GACA,UAAU;GACV;EACF;EAEA,UAAU;CACZ;CAEA,OAAO;AACT;AAEA,eAAsB,oBACpB,SACA,SAAiC,CAAC,GACH;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,MAAM,aAAa,mBAAmB,OAAO;CAE7C,IAAI,QAAQ,KAAK,MAAM,IACrB,OAAO,KAAK,mBAAmB;CAGjC,IAAI,QAAQ,SAAS,IAAI,GACvB,OAAO,KAAK,8BAA8B;CAG5C,IAAI,OAAO,2BAA2B,MAAM;EAC1C,IAAI,UAAU;EAId,KAAK,MAAM,WAAW,0BACpB,IAAI,QAAQ,KAAK,UAAU,GAAG;GAC5B,OAAO,KAAK,gDAAgD;GAC5D,UAAU;GACV;EACF;EAMF,IAAI,CAAC;QACE,MAAM,WAAW,2BACpB,IAAI,QAAQ,KAAK,OAAO,GAAG;IACzB,OAAO,KACL,gEACF;IACA,UAAU;IACV;GACF;;EAGJ,IAAI,CAAC;QACE,MAAM,WAAW,gCACpB,IAAI,QAAQ,KAAK,OAAO,GAAG;IACzB,OAAO,KACL,uEACF;IACA;GACF;;CAGN;CAEA,MAAM,cAAc,OAAO,WAAW;CACtC,IAAI,gBAAgB,SAAS,OAAO,2BAA2B,MAAM;EAEnE,MAAM,QAAQC,gBAAAA,wBADGC,gBAAAA,iBAAiB,YAAY,WACD,CAAC;EAC9C,OAAO,KAAK,GAAG,MAAM,MAAM;EAC3B,SAAS,KAAK,GAAG,MAAM,QAAQ;CACjC;CAEA,IAAI,OAAO,aAAa,QAAQ,uBAAuB,KAAK,UAAU,GACpE,OAAO,KACL,8EACF;CAQF,MAAM,SAAS,MAAM,kBADD,OAAO,SAAS,eAGlC;EAAC;EAAM;EAAM;CAAO,GACpB;EACE,GAAG;EACH,WAAW,KAAK,IAAI,OAAO,aAAa,oBAAoB,GAAI;EAChE,SAAS,EAAE,SAAS,MAAM;CAC5B,GACA,EAAE,UAAU,KAAK,CACnB,CAAC,CAAC,OACC,WAA+B;EAC9B,QAAQ;EACR,QAAQ,MAAM;EACd,UAAU;EACV,UAAU;CACZ,EACF;CAEA,IAAI,OAAO,aAAa,GACtB,OAAO,KACL,OAAO,OAAO,KAAK,MAAM,KACrB,4CACA,2CAA2C,OAAO,OAAO,KAAK,GACpE;CAGF,IAAI,WAAW,KAAK,UAAU,GAC5B,SAAS,KAAK,iDAAiD;CAGjE,OAAO;EACL,OAAO,OAAO,WAAW;EACzB;EACA;CACF;AACF;AAEA,eAAe,cACb,QACA,KACyC;CACzC,IAAI,CAAC,sBAAsB,MAAM,GAC/B;CAGF,MAAM,UAAU,MAAM,mBAAmB,CAAC,CAAC,OAAO,UAAiB;EACjE,MAAM,IAAI,MAAM,GAAG,6BAA6B,UAAU,MAAM,SAAS;CAC3E,CAAC;CAED,MAAM,gBAAgB,0BACpB,QACA,KACA,QAAQ,oBACV;CACA,MAAM,UAAU,KAAK,UAAU,aAAa;CAE5C,IAAI,sBAAsB,qBAAqB,SAC7C,OAAO,QAAQ;CAGjB,MAAM,kBAAkB,QAAQ,eAAe,kBAAkB;CACjE,IAAI,gBAAgB,OAAO,SAAS,GAAG;EACrC,IAAI,OAAO,SAAS,sBAAsB,MACxC,MAAM,IAAI,MACR,4CAA4C,gBAAgB,OAAO,KAAK,IAAI,GAC9E;EAEF;CACF;CAEA,IAAI,oBACF,MAAM,QAAQ,eAAe,MAAM;CAGrC,MAAM,QAAQ,eAAe,WAAW,aAAa;CACrD,qBAAqB;CACrB,mBAAmB;CACnB,OAAO,QAAQ;AACjB;;;;;;;;AASA,MAAM,wBAAwB;CAAC;CAAa;CAAa;AAAK;AAkC9D,SAAgB,0BACd,QACA,KACA,sBAC2B;CAC3B,MAAM,UAAU,OAAO;CAIvB,MAAM,cAAc,SAAS,SAAS,kBAAkB,CAAC;CACzD,MAAM,SAAS,IAAI,IAAI,SAAS,SAAS,iBAAiB,CAAC,CAAC;CAI5D,MAAM,iBAAiB,CAAC,GAHD,sBAAsB,QAC1C,SAAS,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,YAAY,SAAS,IAAI,CAEnB,GAAG,GAAG,WAAW;CAMzD,MAAM,sBACJ,OAAO,WAAW,mBAAmB,OACjC,kBAAkB,MAAM,IACxB,CAAC,GAAG;CACV,OAAO;EACL,SAAS;GACP;GACA,eAAe,SAAS,SAAS,iBAAiB,CAAC;GACnD,GAAI,SAAS,SAAS,oBAAoB,QAAQ,EAChD,kBAAkB,QAAQ,QAAQ,iBACpC;GACA,GAAI,SAAS,SAAS,uBAAuB,QAAQ,EACnD,qBAAqB,QAAQ,QAAQ,oBACvC;GACA,GAAI,SAAS,SAAS,qBAAqB,QAAQ,EACjD,mBAAmB,QAAQ,QAAQ,kBACrC;GACA,GAAI,SAAS,SAAS,mBAAmB,QAAQ,EAC/C,iBAAiB,QAAQ,QAAQ,gBACnC;EACF;EACA,YAAY;GACV,UAAU,SAAS,YAAY,YAAY,CAAC;GAC5C,WAAW,SAAS,YAAY;GAChC,YAAY,SAAS,YAAY,cAAc,CAC7C,GAAG,qBACH,GAAG,qBAAqB,CAC1B;GACA,WAAW,SAAS,YAAY,aAAa;IAC3C;IACA;IACA;IACA;GACF;GACA,gBAAgB,SAAS,YAAY;EACvC;CACF;AACF;AAoBA,MAAa,yBAAyB,OAAO,gCAAgC;AAE7E,eAAsB,kBACpB,SACA,MACA,SAAiC,CAAC,GAClC,SACsB;CACtB,MAAM,MAAM,YAAY,MAAM;CAC9B,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,iBAAiB,OAAO,kBAAkB;CAQhD,MAAM,mBAAmB,iBAAiB;CAC1C,MAAM,gBAAgB,OAAO,mBAAmB;CAChD,MAAM,iBAAiB,MAAM,cAAc,QAAQ,GAAG;CAStD,IAAI,kBAAkB,QAAQ,SAAS,aAAa,MAClD,oBAAoB,MAAM;CAE5B,IAAI,eAAe;CACnB,IAAI,YAAY;CAEhB,IAAI,kBAAkB,MAAM;EAC1B,MAAM,WAAW,CAAC,SAAS,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;EAC5D,MAAM,YAAY,MAAM,eAAe,gBAAgB,QAAQ;EAC/D,eAAe,OAAO,SAAS;EAC/B,YAAY,CAAC,OAAO,SAAS;CAC/B;CAEA,MAAM,WAAW,SAAS,MAAM;CAChC,OAAO,IAAI,SAAsB,eAAe,WAAW;EACzD,MAAM,eAAqD;GACzD;GACA,UAAU,QAAQ,aAAa;GAC/B,KAAK;IAAE,GAAG,QAAQ;IAAK,GAAI,OAAO,OAAO,CAAC;GAAG;GAC7C,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC;EACA,OAAO,eAAe,cAAc,wBAAwB,EAC1D,OAAO,UACT,CAAC;EACD,MAAM,QAAQ,SAAS,cAAc,WAAW,YAAY;EAE5D,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI,oBAAoB;EACxB,IAAI,iBAAiB;EACrB,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,IAAI,WAAW;EACf,IAAI;EAEJ,MAAM,oBAA0B;GAC9B,IAAI,eAAe,MAAM;GAOzB,aAAA,GAAA,KAAA,QAAA,EAAA,GAAA,GAAA,OAAA,CAA2B,GAAG,oBAAA,GAAA,OAAA,WAAA,CAA8B,EAAE,KAAK;GACnE,eAAA,GAAA,GAAA,kBAAA,CAAgC,SAAS;GACzC,YAAY,MAAM,sBAAsB;GACxC,YAAY,MAAM,MAAM;GACxB,YAAY,MAAM,wBAAwB;GAC1C,YAAY,MAAM,MAAM;GACxB,YAAY,MAAM,6CAA6C;EACjE;EAEA,MAAM,eAAe,KAAa,SAAoC;GACpE,qBAAqB,IAAI;GAIzB,IACE,gBAAgB,KAChB,oBAAoB,iBACpB,CAAC,gBACD;IACA,iBAAiB;IACjB,gBAAgB,KAAK;IACrB;GACF;GACA,MAAM,UAAU,SAAS,WAAW,SAAS;GAC7C,IAAI,QAAQ,SAAS,kBAAkB;IACrC,MAAM,OAAO,IAAI,SAAS,MAAM;IAChC,IAAI,SAAS,UAAU,UAAU;SAC5B,UAAU;IACf,IAAI,QAAQ,SAAS,KAAK,UAAU,kBAClC,YAAY;GAEhB,OAAO;IACL,YAAY;IACZ,YAAa,MAAM,IAAI,KAAK,GAAG;IAC/B,YAAa,MAAM,GAAG;GACxB;EACF;EAEA,MAAM,UAAU,WAA8B;GAC5C,IAAI,SACF;GAEF,UAAU;GACV,IAAI,WAAW,MACb,aAAa,OAAO;GAEtB,MAAM,iBAAuB;IAC3B,MAAM,YAAY;KAChB,QAAQ,oBAAoB,OAAO,QAAQ,cAAc;KACzD,QAAQ,oBAAoB,OAAO,QAAQ,cAAc;IAC3D;IACA,cAAc;KACZ,GAAG;KACH,GAAG;KACH,GAAI,aAAa,OAAO,EAAE,gBAAgB,UAAU,IAAI,CAAC;IAC3D,CAAC;GACH;GACA,IAAI,eAAe,MAAM;IACvB,SAAS;IACT;GACF;GAIA,YAAY,UAAU,SAAS,CAAC;EAClC;EAEA,MAAM,QAAQ,UAAuB;GACnC,IAAI,SACF;GAEF,UAAU;GACV,IAAI,WAAW,MACb,aAAa,OAAO;GAEtB,IAAI,eAAe,MACjB,YAAY,IAAI;GAElB,OAAO,KAAK;EACd;EAEA,IAAI,YAAY,GACd,UAAU,iBAAiB;GACzB,WAAW;GACX,gBAAgB,KAAK;EACvB,GAAG,SAAS;EAGd,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,YAAY,OAAO,QAAQ;EAC7B,CAAC;EAED,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,YAAY,OAAO,QAAQ;EAC7B,CAAC;EAED,MAAM,GAAG,SAAS,IAAI;EAEtB,MAAM,GAAG,UAAU,UAAU,WAAW;GAStC,IAAI,YAA2B;GAC/B,IAAI,aAAa;QACX,gBACF,YAAY;SACP,IAAI,UAAU,MACnB,YAAY,kBAAkB,MAAM;GAAA;GAGxC,OAAO;IACL;IACA;IACA,UAAU;IACV;IACA,GAAI,iBAAiB,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACjD,GAAI,UAAU,OAAO,EAAE,OAAO,IAAI,CAAC;GACrC,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,eAAsB,iBACpB,SACA,SAAiC,CAAC,GACZ;CACtB,MAAM,aAAa,MAAM,oBAAoB,SAAS,MAAM;CAC5D,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAG9C,OAAO,kBADO,OAAO,SAAS,eACE,CAAC,OAAO,OAAO,GAAG,MAAM;AAC1D;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAM,0BAA0B;;;;;;;;;AAUhC,MAAM,+BACJ;AAEF,eAAsB,yBACpB,SACA,MACA,SAAiC,CAAC,GACZ;CACtB,MAAM,aAAa,MAAM,oBAAoB,SAAS,MAAM;CAC5D,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAS9C,IACE,KAAK,SAAS,KACd,OAAO,2BAA2B,QAClC,6BAA6B,KAAK,OAAO,GACzC;EACA,MAAM,YAAY,KAAK,MAAM,MAAM,wBAAwB,KAAK,CAAC,CAAC;EAClE,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MACR,oEAAoE,UAAU,8BAChF;CAEJ;CAEA,OAAO,kBADO,OAAO,SAAS,eACE;EAAC;EAAO;EAAS;EAAM,GAAG;CAAI,GAAG,MAAM;AACzE;AAEA,eAAsB,iBACpB,OAKA,SAAiC,CAAC,GACZ;CACtB,IAAI,MAAM,SAAS,QAAQ;EAKzB,IAAI,MAAM,QAAQ,QAAQ,MAAM,KAAK,SAAS,GAC5C,OAAO,yBAAyB,MAAM,MAAM,MAAM,MAAM,MAAM;EAEhE,OAAO,iBAAiB,MAAM,MAAM,MAAM;CAC5C;CAEA,MAAM,WAAA,GAAA,KAAA,QAAA,EAAA,GAAA,GAAA,OAAA,CAAyB,GAAG,aAAA,GAAA,OAAA,WAAA,CAAuB,GAAG;CAC5D,OAAA,GAAA,YAAA,MAAA,CAAY,SAAS,EAAE,WAAW,KAAK,CAAC;CAExC,IAAI;EACF,MAAM,UAAU,kBACd,MAAM,MACN,SACA,MAAM,MACN,MAAM,MACN,OAAO,KACT;EACA,IAAI,QAAQ,UAAU,MACpB,OAAA,GAAA,YAAA,UAAA,EAAA,GAAA,KAAA,QAAA,CACU,SAAS,QAAQ,QAAQ,GACjC,QAAQ,QACR,MACF;EAEF,OAAO,MAAM,kBAAkB,QAAQ,SAAS,QAAQ,MAAM,MAAM;CACtE,UAAU;EACR,OAAA,GAAA,YAAA,GAAA,CAAS,SAAS;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACpD;AACF;AAEA,SAAS,kBACP,MACA,SACA,MACA,OAAiB,CAAC,GAOlB,eACgB;CAChB,MAAM,WAAW,UAAA,GAAA,KAAA,QAAA,CAAiC,SAAS,IAAI;CAC/D,MAAM,QAAQ,iBAAiB,YAAY;CAE3C,QAAQ,MAAR;EACA,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,SAAS,GAAG,GAAG,IAAI;GAClC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,SAAS,GAAG,GAAG,IAAI;GAClC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAgB;IAAO,QAAQ,SAAS;IAAG,GAAG;GAAI;GACzD,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,UAAU,GAAG,GAAG,IAAI;GACnC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAO,QAAQ,SAAS;IAAG,GAAG;GAAI;GACzC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,MAAM,WAC5C,QAAQ,SAAS,CACnB,EAAE,MAAM,WAAW,QAAQ,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACzE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,MAAM,WACxC,QAAQ,QAAQ,CAClB,EAAE,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACxE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,OAAO,WAAW,QAAQ,UAAU,CAAC,EAAE,MAAM,WAC3C,QAAQ,UAAU,CACpB,EAAE,MAAM,WAAW,QAAQ,UAAU,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GAC1E;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,QACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,SAAS,WAAW,QAAQ,WAAW,CAAC,EAAE,eAAe,WACvD,OACF,EAAE,QAAQ,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACzC;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,QAAQ,GAAG,GAAG,IAAI;GACjC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,OAAO,WAAW,QAAQ,QAAQ,CAAC,EAAE,OAAO,WAC1C,QAAQ,QAAQ,CAClB,EAAE,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACxE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,YAAY,WAAW,QAAQ,UAAU,CAAC,EAAE,MAAM,WAChD,QAAQ,UAAU,CACpB,EAAE,MAAM,WAAW,QAAQ,UAAU,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GAC1E;GACA,UAAU;GACV,QAAQ;EACV;EACF,SACE,MAAM,IAAI,MAAM,8BAA8B,MAAM;CACtD;AACF;AAEA,SAAS,cAAsB;CAC7B,OAAO,QAAQ,aAAa,UAAU,aAAa;AACrD;;;;;;;;;;AAWA,MAAM,wBAAwB;AAE9B,SAAS,QAAQ,OAA2B;CAC1C,IAAI,MAAM,OAAO,MAAM;EACrB,MAAM,KAAK,SAAS;EACpB;CACF;CACA,IAAI;EACF,IAAI,QAAQ,aAAa,SAAS;GAChC,MAAM,KAAK,SAAS;GACpB;EACF;EACA,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;CACpC,QAAQ;EACN,MAAM,KAAK,SAAS;CACtB;AACF;AAEA,SAAS,QAAQ,OAA2B;CAC1C,IAAI,MAAM,YAAY,QAAQ,MAAM,cAAc,MAAM;CACxD,IAAI,MAAM,OAAO,MAAM;EACrB,MAAM,KAAK,SAAS;EACpB;CACF;CACA,IAAI;EACF,IAAI,QAAQ,aAAa,SAAS;GAChC,MAAM,KAAK,SAAS;GACpB;EACF;EACA,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;CACpC,QAAQ;EACN,IAAI;GACF,MAAM,KAAK,SAAS;EACtB,QAAQ,CAER;CACF;AACF;AAEA,SAAS,gBAAgB,OAA2B;CAClD,QAAQ,KAAK;CAIb,MAAM,aAAa,iBAAiB,QAAQ,KAAK,GAAG,qBAAqB;CACzE,WAAW,MAAM;CACjB,MAAM,KAAK,eAAe,aAAa,UAAU,CAAC;AACpD;AAEA,SAAgB,WAAW,OAAuB;CAChD,IAAI,UAAU,IACZ,OAAO;CAET,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAU,EAAE;AAC7C;AAEA,SAAgB,qBACd,UACA,SAAiC,CAAC,GAClC,SAA2B,SACnB;CACR,MAAM,MAAM,YAAY,MAAM;CAC9B,MAAM,gBAAA,GAAA,KAAA,WAAA,CAA0B,QAAQ,KAAA,GAAA,KAAA,QAAA,CAC5B,QAAQ,KAAA,GAAA,KAAA,QAAA,CACR,KAAK,QAAQ;CAEzB,MAAM,QACJ,WAAW,UAAU,cAAc,MAAM,IAAI,aAAa,MAAM;CAClE,IAAI,SAAS,MAAM,OAAO;CAE1B,IAAI,iBAAiB,OAAO,gBAAgB,cAAc,KAAK,GAC7D,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,UAAU;AACpE;AAEA,SAAS,gBAAgB,cAAsB,OAA0B;CACvE,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,iBAAiB,MAAM,OAAO;EAClC,MAAM,OAAA,GAAA,KAAA,SAAA,CAAe,MAAM,YAAY;EACvC,IAAI,CAAC,IAAI,WAAW,IAAI,KAAK,EAAA,GAAA,KAAA,WAAA,CAAY,GAAG,GAAG,OAAO;CACxD;CACA,OAAO;AACT;AAIA,eAAe,eACb,cACA,eAA2BC,YAAAA,UACV;CACjB,IAAI;EACF,OAAO,MAAM,aAAa,YAAY;CACxC,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;;AAcA,eAAe,yBACb,cACA,eAA2BA,YAAAA,UACV;CACjB,IAAI,UAAU;CACd,IAAI,SAAS;CAEb,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,aAAa,OAAO;EACvC,OAAO,WAAW,KAAK,QAAA,GAAA,KAAA,QAAA,CAAe,MAAM,MAAM;CACpD,QAAQ;EACN,MAAM,UAAA,GAAA,KAAA,QAAA,CAAiB,SAAS,IAAI;EACpC,IAAI,WAAW,SACb,OAAO;EAET,MAAM,OAAO,QAAQ,MAAM,OAAO,SAAS,CAAC;EAC5C,SAAS,WAAW,KAAK,OAAO,GAAG,KAAK,GAAG;EAC3C,UAAU;CACZ;AAEJ;;;;;;;;AASA,eAAsB,yBACpB,UACA,SAAiC,CAAC,GAClC,SAA2B,SACV;CACjB,MAAM,UAAU,qBAAqB,UAAU,QAAQ,MAAM;CAC7D,MAAM,QACJ,WAAW,UAAU,cAAc,MAAM,IAAI,aAAa,MAAM;CAClE,IAAI,SAAS,MACX,OAAO;CAOT,MAAM,cAA0B,MAAM,eAAe,MAAM,CAAC,CAAC,SAAS,CAAC;CACvE,MAAM,YAAY,MAAM,QAAQ,IAC9B,MAAM,KAAK,MAAM,eAAe,GAAG,UAAU,CAAC,CAChD;CAEA,IAAI,gBAAgB,MADG,yBAAyB,SAAS,UAAU,GACrC,SAAS,GACrC,OAAO;CAET,MAAM,IAAI,MACR,yDAAyD,UAC3D;AACF"}
+{"version":3,"file":"LocalExecutionEngine.cjs","names":["spawn","nodeWorkspaceFS","bashAstFindingsToErrors","runBashAstChecks","realpath"],"sources":["../../../../src/tools/local/LocalExecutionEngine.ts"],"mappings":";;;;;;;;;AAYA,MAAM,qBAAqB;AAC3B,MAAM,2BAA2B;AAOjC,MAAM,4BAA4B,KAAK,OAAO;AAC9C,MAAM,2BAA2B;AACjC,MAAM,gBAAgB,QAAQ,aAAa,UAAU,aAAa;AAuBlE,MAAM,qBAAqB;AAE3B,MAAM,2BAAkD;CACtD,IAAI,OACF,+FAA+F,mBAAmB,gBACpH;CACA;CACA;CACA,IAAI,OACF,iDAAiD,mBAAmB,gBACtE;CACA,IAAI,OACF,2CAA2C,mBAAmB,gBAChE;CACA;AACF;AAoBA,MAAM,4BAAmD;CACvD,IAAI,OACF,2DAA2D,mBAAmB,KAChF;CACA,IAAI,OACF,qDAAqD,mBAAmB,KAC1E;CACA,IAAI,OACF,+CAA+C,mBAAmB,KACpE;AACF;AAiBA,MAAM,iCAAwD;iBAC5D,IAAI,OACF,sIAEF;iBACA,IAAI,OACF,mIAEF;iBACA,IAAI,OACF,6HAEF;AACF;AAEA,MAAM,yBACJ;AAqCF,MAAM,sBAA8C;CAClD,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;AACX;AACA,SAAS,kBAAkB,QAA+B;CACxD,IAAI,UAAU,MAAM,OAAO;CAC3B,OAAO,oBAAoB,WAAW;AACxC;AAqBA,IAAI;AACJ,IAAI,qBAAqB;AACzB,IAAI;AAQJ,SAAS,sBACP,QACiC;CACjC,OAAO,YAAY,UAAU,WAAW;AAC1C;AAEA,SAAgB,4BACd,QACwB;CACxB,IAAI,UAAU,QAAQ,sBAAsB,MAAM,GAChD,OAAO,OAAO,SAAS,CAAC;CAE1B,OAAO,UAAU,CAAC;AACpB;AAEA,SAAgB,YAAY,QAAyC;CACnE,QAAA,GAAA,KAAA,QAAA,CAAe,QAAQ,WAAW,QAAQ,QAAQ,OAAO,QAAQ,IAAI,CAAC;AACxE;AAWA,SAAgB,kBAAkB,QAA2C;CAC3E,MAAM,OAAO,YAAY,MAAM;CAC/B,MAAM,SAAS,QAAQ,WAAW,mBAAmB,CAAC;CACtD,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC,IAAI;CACrC,MAAM,OAAO,IAAI,IAAY,CAAC,IAAI,CAAC;CACnC,MAAM,MAAgB,CAAC,IAAI;CAC3B,KAAK,MAAM,SAAS,QAAQ;EAO1B,MAAM,OAAA,GAAA,KAAA,WAAA,CAAiB,KAAK,KAAA,GAAA,KAAA,QAAA,CAAY,KAAK,KAAA,GAAA,KAAA,QAAA,CAAY,MAAM,KAAK;EACpE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG;GAClB,KAAK,IAAI,GAAG;GACZ,IAAI,KAAK,GAAG;EACd;CACF;CACA,OAAO;AACT;AAOA,SAAgB,SAAS,QAA+C;CACtE,OAAQ,QAAQ,MAAM,SAAS,QAAQ,SAASA,cAAAA;AAClD;AAOA,SAAgB,eAAe,QAA8C;CAC3E,OAAO,QAAQ,MAAM,MAAMC,oBAAAA;AAC7B;AAQA,SAAgB,cACd,SAAiC,CAAC,GACjB;CAMjB,MAAM,WAAW,OAAO,WAAW;CACnC,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,aAAa,OAAO,OAAO,kBAAkB,MAAM;CACvD,IAAI,OAAO,0BAA0B,MAAM,OAAO;CAClD,OAAO,kBAAkB,MAAM;AACjC;AAOA,SAAgB,aACd,SAAiC,CAAC,GACjB;CAGjB,MAAM,WAAW,OAAO,WAAW;CACnC,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,aAAa,OAAO,OAAO,kBAAkB,MAAM;CACvD,IAAI,OAAO,0BAA0B,MAAM,OAAO;CAClD,OAAO,kBAAkB,MAAM;AACjC;AAEA,SAAgB,kBAAkB,QAAyC;CACzE,MAAM,MAAM,YAAY,MAAM;CAE9B,OAAO,GAAG,yBAAyB,IAAA,GAAA,OAAA,WAAA,CADT,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAC1B;AAC7C;AAEA,MAAM,+BAA+B,CACnC,iFACA,+HACF,CAAC,CAAC,KAAK,GAAG;AACV,MAAM,wBAAwB;AAG9B,SAAS,qBAAoD;CAC3D,0BAA0B,OACxB;CAEF,OAAO;AACT;AAEA,SAAS,sBAAsB,QAAyC;CACtE,OAAO,OAAO,SAAS,YAAY;AACrC;AAEA,IAAI,mBAAmB;AAEvB,SAAS,oBAAoB,QAAsC;CACjE,IACE,oBACA,sBAAsB,MAAM,KAC5B,OAAO,MAAM,cAAc,MAE3B;CAEF,mBAAmB;CAEnB,QAAQ,KACN,oPAIF;AACF;AAOA,SAAgB,oCAA0C;CACxD,mBAAmB;AACrB;AAEA,SAAgB,oBACd,OACA,WAAW,0BACH;CACR,IAAI,MAAM,UAAU,UAClB,OAAO;CAET,MAAM,OAAO,KAAK,MAAM,WAAW,EAAG;CACtC,MAAM,OAAO,WAAW;CACxB,MAAM,UAAU,MAAM,SAAS;CAC/B,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,QAAQ,gCAAgC,MAAM,MACtF,MAAM,SAAS,IACjB;AACF;AAEA,SAAS,mBAAmB,SAAyB;CACnD,IAAI,SAAS;CACb,IAAI;CACJ,IAAI,UAAU;CAEd,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,OAAO,QAAQ;EAErB,IAAI,SAAS;GACX,UAAU;GACV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,MAAM;GACjB,UAAU;GACV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,MAAM;GACjB,IAAI,SAAS,OACX,QAAQ,KAAA;GAEV,UAAU;GACV;EACF;EAEA,IAAI,SAAS,QAAO,SAAS,OAAQ,SAAS,KAAK;GACjD,QAAQ;GACR,UAAU;GACV;EACF;EAEA,IAAI,SAAS,KAAK;GAChB,OAAO,IAAI,QAAQ,UAAU,QAAQ,OAAO,MAAM;IAChD,UAAU;IACV;GACF;GACA,UAAU;GACV;EACF;EAEA,UAAU;CACZ;CAEA,OAAO;AACT;AAEA,eAAsB,oBACpB,SACA,SAAiC,CAAC,GACH;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,MAAM,aAAa,mBAAmB,OAAO;CAE7C,IAAI,QAAQ,KAAK,MAAM,IACrB,OAAO,KAAK,mBAAmB;CAGjC,IAAI,QAAQ,SAAS,IAAI,GACvB,OAAO,KAAK,8BAA8B;CAG5C,IAAI,OAAO,2BAA2B,MAAM;EAC1C,IAAI,UAAU;EAId,KAAK,MAAM,WAAW,0BACpB,IAAI,QAAQ,KAAK,UAAU,GAAG;GAC5B,OAAO,KAAK,gDAAgD;GAC5D,UAAU;GACV;EACF;EAMF,IAAI,CAAC;QACE,MAAM,WAAW,2BACpB,IAAI,QAAQ,KAAK,OAAO,GAAG;IACzB,OAAO,KACL,gEACF;IACA,UAAU;IACV;GACF;;EAGJ,IAAI,CAAC;QACE,MAAM,WAAW,gCACpB,IAAI,QAAQ,KAAK,OAAO,GAAG;IACzB,OAAO,KACL,uEACF;IACA;GACF;;CAGN;CAEA,MAAM,cAAc,OAAO,WAAW;CACtC,IAAI,gBAAgB,SAAS,OAAO,2BAA2B,MAAM;EAEnE,MAAM,QAAQC,gBAAAA,wBADGC,gBAAAA,iBAAiB,YAAY,WACD,CAAC;EAC9C,OAAO,KAAK,GAAG,MAAM,MAAM;EAC3B,SAAS,KAAK,GAAG,MAAM,QAAQ;CACjC;CAEA,IAAI,OAAO,aAAa,QAAQ,uBAAuB,KAAK,UAAU,GACpE,OAAO,KACL,8EACF;CAQF,MAAM,SAAS,MAAM,kBADD,OAAO,SAAS,eAGlC;EAAC;EAAM;EAAM;CAAO,GACpB;EACE,GAAG;EACH,WAAW,KAAK,IAAI,OAAO,aAAa,oBAAoB,GAAI;EAChE,SAAS,EAAE,SAAS,MAAM;CAC5B,GACA,EAAE,UAAU,KAAK,CACnB,CAAC,CAAC,OACC,WAA+B;EAC9B,QAAQ;EACR,QAAQ,MAAM;EACd,UAAU;EACV,UAAU;CACZ,EACF;CAEA,IAAI,OAAO,aAAa,GACtB,OAAO,KACL,OAAO,OAAO,KAAK,MAAM,KACrB,4CACA,2CAA2C,OAAO,OAAO,KAAK,GACpE;CAGF,IAAI,WAAW,KAAK,UAAU,GAC5B,SAAS,KAAK,iDAAiD;CAGjE,OAAO;EACL,OAAO,OAAO,WAAW;EACzB;EACA;CACF;AACF;AAEA,eAAe,cACb,QACA,KACyC;CACzC,IAAI,CAAC,sBAAsB,MAAM,GAC/B;CAGF,MAAM,UAAU,MAAM,mBAAmB,CAAC,CAAC,OAAO,UAAiB;EACjE,MAAM,IAAI,MAAM,GAAG,6BAA6B,UAAU,MAAM,SAAS;CAC3E,CAAC;CAED,MAAM,gBAAgB,0BACpB,QACA,KACA,QAAQ,oBACV;CACA,MAAM,UAAU,KAAK,UAAU,aAAa;CAE5C,IAAI,sBAAsB,qBAAqB,SAC7C,OAAO,QAAQ;CAGjB,MAAM,kBAAkB,QAAQ,eAAe,kBAAkB;CACjE,IAAI,gBAAgB,OAAO,SAAS,GAAG;EACrC,IAAI,OAAO,SAAS,sBAAsB,MACxC,MAAM,IAAI,MACR,4CAA4C,gBAAgB,OAAO,KAAK,IAAI,GAC9E;EAEF;CACF;CAEA,IAAI,oBACF,MAAM,QAAQ,eAAe,MAAM;CAGrC,MAAM,QAAQ,eAAe,WAAW,aAAa;CACrD,qBAAqB;CACrB,mBAAmB;CACnB,OAAO,QAAQ;AACjB;AASA,MAAM,wBAAwB;CAAC;CAAa;CAAa;AAAK;AAkC9D,SAAgB,0BACd,QACA,KACA,sBAC2B;CAC3B,MAAM,UAAU,OAAO;CAIvB,MAAM,cAAc,SAAS,SAAS,kBAAkB,CAAC;CACzD,MAAM,SAAS,IAAI,IAAI,SAAS,SAAS,iBAAiB,CAAC,CAAC;CAI5D,MAAM,iBAAiB,CAAC,GAHD,sBAAsB,QAC1C,SAAS,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,YAAY,SAAS,IAAI,CAEnB,GAAG,GAAG,WAAW;CAMzD,MAAM,sBACJ,OAAO,WAAW,mBAAmB,OACjC,kBAAkB,MAAM,IACxB,CAAC,GAAG;CACV,OAAO;EACL,SAAS;GACP;GACA,eAAe,SAAS,SAAS,iBAAiB,CAAC;GACnD,GAAI,SAAS,SAAS,oBAAoB,QAAQ,EAChD,kBAAkB,QAAQ,QAAQ,iBACpC;GACA,GAAI,SAAS,SAAS,uBAAuB,QAAQ,EACnD,qBAAqB,QAAQ,QAAQ,oBACvC;GACA,GAAI,SAAS,SAAS,qBAAqB,QAAQ,EACjD,mBAAmB,QAAQ,QAAQ,kBACrC;GACA,GAAI,SAAS,SAAS,mBAAmB,QAAQ,EAC/C,iBAAiB,QAAQ,QAAQ,gBACnC;EACF;EACA,YAAY;GACV,UAAU,SAAS,YAAY,YAAY,CAAC;GAC5C,WAAW,SAAS,YAAY;GAChC,YAAY,SAAS,YAAY,cAAc,CAC7C,GAAG,qBACH,GAAG,qBAAqB,CAC1B;GACA,WAAW,SAAS,YAAY,aAAa;IAC3C;IACA;IACA;IACA;GACF;GACA,gBAAgB,SAAS,YAAY;EACvC;CACF;AACF;AAoBA,MAAa,yBAAyB,OAAO,gCAAgC;AAE7E,eAAsB,kBACpB,SACA,MACA,SAAiC,CAAC,GAClC,SACsB;CACtB,MAAM,MAAM,YAAY,MAAM;CAC9B,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,iBAAiB,OAAO,kBAAkB;CAQhD,MAAM,mBAAmB,iBAAiB;CAC1C,MAAM,gBAAgB,OAAO,mBAAmB;CAChD,MAAM,iBAAiB,MAAM,cAAc,QAAQ,GAAG;CAStD,IAAI,kBAAkB,QAAQ,SAAS,aAAa,MAClD,oBAAoB,MAAM;CAE5B,IAAI,eAAe;CACnB,IAAI,YAAY;CAEhB,IAAI,kBAAkB,MAAM;EAC1B,MAAM,WAAW,CAAC,SAAS,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;EAC5D,MAAM,YAAY,MAAM,eAAe,gBAAgB,QAAQ;EAC/D,eAAe,OAAO,SAAS;EAC/B,YAAY,CAAC,OAAO,SAAS;CAC/B;CAEA,MAAM,WAAW,SAAS,MAAM;CAChC,OAAO,IAAI,SAAsB,eAAe,WAAW;EACzD,MAAM,eAAqD;GACzD;GACA,UAAU,QAAQ,aAAa;GAC/B,KAAK;IAAE,GAAG,QAAQ;IAAK,GAAI,OAAO,OAAO,CAAC;GAAG;GAC7C,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC;EACA,OAAO,eAAe,cAAc,wBAAwB,EAC1D,OAAO,UACT,CAAC;EACD,MAAM,QAAQ,SAAS,cAAc,WAAW,YAAY;EAE5D,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI,oBAAoB;EACxB,IAAI,iBAAiB;EACrB,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,IAAI,WAAW;EACf,IAAI;EAEJ,MAAM,oBAA0B;GAC9B,IAAI,eAAe,MAAM;GAOzB,aAAA,GAAA,KAAA,QAAA,EAAA,GAAA,GAAA,OAAA,CAA2B,GAAG,oBAAA,GAAA,OAAA,WAAA,CAA8B,EAAE,KAAK;GACnE,eAAA,GAAA,GAAA,kBAAA,CAAgC,SAAS;GACzC,YAAY,MAAM,sBAAsB;GACxC,YAAY,MAAM,MAAM;GACxB,YAAY,MAAM,wBAAwB;GAC1C,YAAY,MAAM,MAAM;GACxB,YAAY,MAAM,6CAA6C;EACjE;EAEA,MAAM,eAAe,KAAa,SAAoC;GACpE,qBAAqB,IAAI;GAIzB,IACE,gBAAgB,KAChB,oBAAoB,iBACpB,CAAC,gBACD;IACA,iBAAiB;IACjB,gBAAgB,KAAK;IACrB;GACF;GACA,MAAM,UAAU,SAAS,WAAW,SAAS;GAC7C,IAAI,QAAQ,SAAS,kBAAkB;IACrC,MAAM,OAAO,IAAI,SAAS,MAAM;IAChC,IAAI,SAAS,UAAU,UAAU;SAC5B,UAAU;IACf,IAAI,QAAQ,SAAS,KAAK,UAAU,kBAClC,YAAY;GAEhB,OAAO;IACL,YAAY;IACZ,YAAa,MAAM,IAAI,KAAK,GAAG;IAC/B,YAAa,MAAM,GAAG;GACxB;EACF;EAEA,MAAM,UAAU,WAA8B;GAC5C,IAAI,SACF;GAEF,UAAU;GACV,IAAI,WAAW,MACb,aAAa,OAAO;GAEtB,MAAM,iBAAuB;IAC3B,MAAM,YAAY;KAChB,QAAQ,oBAAoB,OAAO,QAAQ,cAAc;KACzD,QAAQ,oBAAoB,OAAO,QAAQ,cAAc;IAC3D;IACA,cAAc;KACZ,GAAG;KACH,GAAG;KACH,GAAI,aAAa,OAAO,EAAE,gBAAgB,UAAU,IAAI,CAAC;IAC3D,CAAC;GACH;GACA,IAAI,eAAe,MAAM;IACvB,SAAS;IACT;GACF;GAIA,YAAY,UAAU,SAAS,CAAC;EAClC;EAEA,MAAM,QAAQ,UAAuB;GACnC,IAAI,SACF;GAEF,UAAU;GACV,IAAI,WAAW,MACb,aAAa,OAAO;GAEtB,IAAI,eAAe,MACjB,YAAY,IAAI;GAElB,OAAO,KAAK;EACd;EAEA,IAAI,YAAY,GACd,UAAU,iBAAiB;GACzB,WAAW;GACX,gBAAgB,KAAK;EACvB,GAAG,SAAS;EAGd,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,YAAY,OAAO,QAAQ;EAC7B,CAAC;EAED,MAAM,OAAO,GAAG,SAAS,UAAkB;GACzC,YAAY,OAAO,QAAQ;EAC7B,CAAC;EAED,MAAM,GAAG,SAAS,IAAI;EAEtB,MAAM,GAAG,UAAU,UAAU,WAAW;GAStC,IAAI,YAA2B;GAC/B,IAAI,aAAa;QACX,gBACF,YAAY;SACP,IAAI,UAAU,MACnB,YAAY,kBAAkB,MAAM;GAAA;GAGxC,OAAO;IACL;IACA;IACA,UAAU;IACV;IACA,GAAI,iBAAiB,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACjD,GAAI,UAAU,OAAO,EAAE,OAAO,IAAI,CAAC;GACrC,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,eAAsB,iBACpB,SACA,SAAiC,CAAC,GACZ;CACtB,MAAM,aAAa,MAAM,oBAAoB,SAAS,MAAM;CAC5D,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAG9C,OAAO,kBADO,OAAO,SAAS,eACE,CAAC,OAAO,OAAO,GAAG,MAAM;AAC1D;AAsBA,MAAM,0BAA0B;AAUhC,MAAM,+BACJ;AAEF,eAAsB,yBACpB,SACA,MACA,SAAiC,CAAC,GACZ;CACtB,MAAM,aAAa,MAAM,oBAAoB,SAAS,MAAM;CAC5D,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAS9C,IACE,KAAK,SAAS,KACd,OAAO,2BAA2B,QAClC,6BAA6B,KAAK,OAAO,GACzC;EACA,MAAM,YAAY,KAAK,MAAM,MAAM,wBAAwB,KAAK,CAAC,CAAC;EAClE,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MACR,oEAAoE,UAAU,8BAChF;CAEJ;CAEA,OAAO,kBADO,OAAO,SAAS,eACE;EAAC;EAAO;EAAS;EAAM,GAAG;CAAI,GAAG,MAAM;AACzE;AAEA,eAAsB,iBACpB,OAKA,SAAiC,CAAC,GACZ;CACtB,IAAI,MAAM,SAAS,QAAQ;EAKzB,IAAI,MAAM,QAAQ,QAAQ,MAAM,KAAK,SAAS,GAC5C,OAAO,yBAAyB,MAAM,MAAM,MAAM,MAAM,MAAM;EAEhE,OAAO,iBAAiB,MAAM,MAAM,MAAM;CAC5C;CAEA,MAAM,WAAA,GAAA,KAAA,QAAA,EAAA,GAAA,GAAA,OAAA,CAAyB,GAAG,aAAA,GAAA,OAAA,WAAA,CAAuB,GAAG;CAC5D,OAAA,GAAA,YAAA,MAAA,CAAY,SAAS,EAAE,WAAW,KAAK,CAAC;CAExC,IAAI;EACF,MAAM,UAAU,kBACd,MAAM,MACN,SACA,MAAM,MACN,MAAM,MACN,OAAO,KACT;EACA,IAAI,QAAQ,UAAU,MACpB,OAAA,GAAA,YAAA,UAAA,EAAA,GAAA,KAAA,QAAA,CACU,SAAS,QAAQ,QAAQ,GACjC,QAAQ,QACR,MACF;EAEF,OAAO,MAAM,kBAAkB,QAAQ,SAAS,QAAQ,MAAM,MAAM;CACtE,UAAU;EACR,OAAA,GAAA,YAAA,GAAA,CAAS,SAAS;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACpD;AACF;AAEA,SAAS,kBACP,MACA,SACA,MACA,OAAiB,CAAC,GAOlB,eACgB;CAChB,MAAM,WAAW,UAAA,GAAA,KAAA,QAAA,CAAiC,SAAS,IAAI;CAC/D,MAAM,QAAQ,iBAAiB,YAAY;CAE3C,QAAQ,MAAR;EACA,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,SAAS,GAAG,GAAG,IAAI;GAClC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,SAAS,GAAG,GAAG,IAAI;GAClC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAgB;IAAO,QAAQ,SAAS;IAAG,GAAG;GAAI;GACzD,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,UAAU,GAAG,GAAG,IAAI;GACnC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAO,QAAQ,SAAS;IAAG,GAAG;GAAI;GACzC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,MACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,MAAM,WAC5C,QAAQ,SAAS,CACnB,EAAE,MAAM,WAAW,QAAQ,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACzE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,MAAM,WACxC,QAAQ,QAAQ,CAClB,EAAE,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACxE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,OAAO,WAAW,QAAQ,UAAU,CAAC,EAAE,MAAM,WAC3C,QAAQ,UAAU,CACpB,EAAE,MAAM,WAAW,QAAQ,UAAU,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GAC1E;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,QACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,SAAS,WAAW,QAAQ,WAAW,CAAC,EAAE,eAAe,WACvD,OACF,EAAE,QAAQ,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACzC;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CAAC,QAAQ,QAAQ,GAAG,GAAG,IAAI;GACjC,UAAU;GACV,QAAQ;EACV;EACF,KAAK,KACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,OAAO,WAAW,QAAQ,QAAQ,CAAC,EAAE,OAAO,WAC1C,QAAQ,QAAQ,CAClB,EAAE,MAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GACxE;GACA,UAAU;GACV,QAAQ;EACV;EACF,KAAK,OACH,OAAO;GACL,SAAS;GACT,MAAM,CACJ,OACA,YAAY,WAAW,QAAQ,UAAU,CAAC,EAAE,MAAM,WAChD,QAAQ,UAAU,CACpB,EAAE,MAAM,WAAW,QAAQ,UAAU,CAAC,EAAE,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,GAC1E;GACA,UAAU;GACV,QAAQ;EACV;EACF,SACE,MAAM,IAAI,MAAM,8BAA8B,MAAM;CACtD;AACF;AAEA,SAAS,cAAsB;CAC7B,OAAO,QAAQ,aAAa,UAAU,aAAa;AACrD;AAWA,MAAM,wBAAwB;AAE9B,SAAS,QAAQ,OAA2B;CAC1C,IAAI,MAAM,OAAO,MAAM;EACrB,MAAM,KAAK,SAAS;EACpB;CACF;CACA,IAAI;EACF,IAAI,QAAQ,aAAa,SAAS;GAChC,MAAM,KAAK,SAAS;GACpB;EACF;EACA,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;CACpC,QAAQ;EACN,MAAM,KAAK,SAAS;CACtB;AACF;AAEA,SAAS,QAAQ,OAA2B;CAC1C,IAAI,MAAM,YAAY,QAAQ,MAAM,cAAc,MAAM;CACxD,IAAI,MAAM,OAAO,MAAM;EACrB,MAAM,KAAK,SAAS;EACpB;CACF;CACA,IAAI;EACF,IAAI,QAAQ,aAAa,SAAS;GAChC,MAAM,KAAK,SAAS;GACpB;EACF;EACA,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;CACpC,QAAQ;EACN,IAAI;GACF,MAAM,KAAK,SAAS;EACtB,QAAQ,CAER;CACF;AACF;AAEA,SAAS,gBAAgB,OAA2B;CAClD,QAAQ,KAAK;CAIb,MAAM,aAAa,iBAAiB,QAAQ,KAAK,GAAG,qBAAqB;CACzE,WAAW,MAAM;CACjB,MAAM,KAAK,eAAe,aAAa,UAAU,CAAC;AACpD;AAEA,SAAgB,WAAW,OAAuB;CAChD,IAAI,UAAU,IACZ,OAAO;CAET,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAU,EAAE;AAC7C;AAEA,SAAgB,qBACd,UACA,SAAiC,CAAC,GAClC,SAA2B,SACnB;CACR,MAAM,MAAM,YAAY,MAAM;CAC9B,MAAM,gBAAA,GAAA,KAAA,WAAA,CAA0B,QAAQ,KAAA,GAAA,KAAA,QAAA,CAC5B,QAAQ,KAAA,GAAA,KAAA,QAAA,CACR,KAAK,QAAQ;CAEzB,MAAM,QACJ,WAAW,UAAU,cAAc,MAAM,IAAI,aAAa,MAAM;CAClE,IAAI,SAAS,MAAM,OAAO;CAE1B,IAAI,iBAAiB,OAAO,gBAAgB,cAAc,KAAK,GAC7D,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,UAAU;AACpE;AAEA,SAAS,gBAAgB,cAAsB,OAA0B;CACvE,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,iBAAiB,MAAM,OAAO;EAClC,MAAM,OAAA,GAAA,KAAA,SAAA,CAAe,MAAM,YAAY;EACvC,IAAI,CAAC,IAAI,WAAW,IAAI,KAAK,EAAA,GAAA,KAAA,WAAA,CAAY,GAAG,GAAG,OAAO;CACxD;CACA,OAAO;AACT;AAIA,eAAe,eACb,cACA,eAA2BC,YAAAA,UACV;CACjB,IAAI;EACF,OAAO,MAAM,aAAa,YAAY;CACxC,QAAQ;EACN,OAAO;CACT;AACF;AAcA,eAAe,yBACb,cACA,eAA2BA,YAAAA,UACV;CACjB,IAAI,UAAU;CACd,IAAI,SAAS;CAEb,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,aAAa,OAAO;EACvC,OAAO,WAAW,KAAK,QAAA,GAAA,KAAA,QAAA,CAAe,MAAM,MAAM;CACpD,QAAQ;EACN,MAAM,UAAA,GAAA,KAAA,QAAA,CAAiB,SAAS,IAAI;EACpC,IAAI,WAAW,SACb,OAAO;EAET,MAAM,OAAO,QAAQ,MAAM,OAAO,SAAS,CAAC;EAC5C,SAAS,WAAW,KAAK,OAAO,GAAG,KAAK,GAAG;EAC3C,UAAU;CACZ;AAEJ;AASA,eAAsB,yBACpB,UACA,SAAiC,CAAC,GAClC,SAA2B,SACV;CACjB,MAAM,UAAU,qBAAqB,UAAU,QAAQ,MAAM;CAC7D,MAAM,QACJ,WAAW,UAAU,cAAc,MAAM,IAAI,aAAa,MAAM;CAClE,IAAI,SAAS,MACX,OAAO;CAOT,MAAM,cAA0B,MAAM,eAAe,MAAM,CAAC,CAAC,SAAS,CAAC;CACvE,MAAM,YAAY,MAAM,QAAQ,IAC9B,MAAM,KAAK,MAAM,eAAe,GAAG,UAAU,CAAC,CAChD;CAEA,IAAI,gBAAgB,MADG,yBAAyB,SAAS,UAAU,GACrC,SAAS,GACrC,OAAO;CAET,MAAM,IAAI,MACR,yDAAyD,UAC3D;AACF"}