@mastra/code-sdk 1.0.3-alpha.1 → 1.1.0-alpha.2

package/dist/agents/workspace.js

@@ -1,244 +1,251 @@
-import fs, { existsSync } from "node:fs";
-import os from "node:os";
-import path, { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { Workspace, LocalFilesystem, LocalSandbox, createWorkspaceTools } from "@mastra/core/workspace";
-import { DEFAULT_CONFIG_DIR } from "../constants.js";
+import "../constants.js";
 import { loadSettings } from "../onboarding/settings.js";
-import { isPathWithinRoot } from "../utils/path-security.js";
 import { getPlansDir } from "../utils/plans.js";
+import { isPathWithinRoot } from "../utils/path-security.js";
 import { SandboxFilesystem } from "./sandbox-filesystem.js";
 import { reattachProjectSandbox } from "./sandbox-reattach.js";
 import { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from "./tool-availability.js";
+import fs, { existsSync } from "fs";
+import os from "os";
+import path, { dirname, join } from "path";
+import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
+import { fileURLToPath } from "url";
+//#region src/agents/workspace.ts
 function buildSandboxEnv() {
-  return {
-    ...process.env,
-    // Explicit overrides for non-interactive subprocess execution
-    FORCE_COLOR: "1",
-    CLICOLOR_FORCE: "1",
-    TERM: process.env.TERM || "xterm-256color",
-    CI: "true",
-    NONINTERACTIVE: "1",
-    DEBIAN_FRONTEND: "noninteractive"
-  };
+	return {
+		...process.env,
+		FORCE_COLOR: "1",
+		CLICOLOR_FORCE: "1",
+		TERM: process.env.TERM || "xterm-256color",
+		CI: "true",
+		NONINTERACTIVE: "1",
+		DEBIAN_FRONTEND: "noninteractive"
+	};
 }
 function collectSkillPaths(skillsDirs, allowedRoot) {
-  const paths = [];
-  const seen = /* @__PURE__ */ new Set();
-  let realAllowedRoot;
-  if (allowedRoot) {
-    try {
-      realAllowedRoot = fs.realpathSync(allowedRoot);
-    } catch {
-      return [];
-    }
-  }
-  for (const skillsDir of skillsDirs) {
-    const skillsDirExists = fs.existsSync(skillsDir);
-    if (skillsDirExists && realAllowedRoot) {
-      try {
-        const realSkillsDir = fs.realpathSync(skillsDir);
-        if (!isPathWithinRoot(realSkillsDir, realAllowedRoot)) continue;
-      } catch {
-        continue;
-      }
-    }
-    const resolved = path.resolve(skillsDir);
-    if (!seen.has(resolved)) {
-      seen.add(resolved);
-      paths.push(skillsDir);
-    }
-    if (!skillsDirExists) continue;
-    try {
-      const entries = fs.readdirSync(skillsDir, { withFileTypes: true });
-      for (const entry of entries) {
-        if (entry.isSymbolicLink()) {
-          try {
-            const linkPath = path.join(skillsDir, entry.name);
-            const realPath = fs.realpathSync(linkPath);
-            if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;
-            const stat = fs.statSync(realPath);
-            if (stat.isDirectory()) {
-              const realParent = path.dirname(realPath);
-              if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;
-              if (!seen.has(realParent)) {
-                seen.add(realParent);
-                paths.push(realParent);
-              }
-            }
-          } catch {
-            continue;
-          }
-        }
-      }
-    } catch {
-    }
-  }
-  return paths;
+	const paths = [];
+	const seen = /* @__PURE__ */ new Set();
+	let realAllowedRoot;
+	if (allowedRoot) try {
+		realAllowedRoot = fs.realpathSync(allowedRoot);
+	} catch {
+		return [];
+	}
+	for (const skillsDir of skillsDirs) {
+		const skillsDirExists = fs.existsSync(skillsDir);
+		if (skillsDirExists && realAllowedRoot) try {
+			if (!isPathWithinRoot(fs.realpathSync(skillsDir), realAllowedRoot)) continue;
+		} catch {
+			continue;
+		}
+		const resolved = path.resolve(skillsDir);
+		if (!seen.has(resolved)) {
+			seen.add(resolved);
+			paths.push(skillsDir);
+		}
+		if (!skillsDirExists) continue;
+		try {
+			const entries = fs.readdirSync(skillsDir, { withFileTypes: true });
+			for (const entry of entries) if (entry.isSymbolicLink()) try {
+				const linkPath = path.join(skillsDir, entry.name);
+				const realPath = fs.realpathSync(linkPath);
+				if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;
+				if (fs.statSync(realPath).isDirectory()) {
+					const realParent = path.dirname(realPath);
+					if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;
+					if (!seen.has(realParent)) {
+						seen.add(realParent);
+						paths.push(realParent);
+					}
+				}
+			} catch {
+				continue;
+			}
+		} catch {}
+	}
+	return paths;
 }
 function buildSkillPaths(projectPath, configDir, homeDir = os.homedir(), pluginSkillPaths = []) {
-  const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, "skills");
-  const claudeLocalSkillsPath = path.join(projectPath, ".claude", "skills");
-  const agentSkillsLocalPath = path.join(projectPath, ".agents", "skills");
-  const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, "skills");
-  const claudeGlobalSkillsPath = path.join(homeDir, ".claude", "skills");
-  const agentSkillsGlobalPath = path.join(homeDir, ".agents", "skills");
-  const paths = [
-    ...collectSkillPaths([mastraCodeLocalSkillsPath, claudeLocalSkillsPath, agentSkillsLocalPath], projectPath),
-    ...collectSkillPaths([mastraCodeGlobalSkillsPath, claudeGlobalSkillsPath, agentSkillsGlobalPath]),
-    ...pluginSkillPaths.flatMap((pluginSkillPath) => collectSkillPaths([pluginSkillPath], pluginSkillPath))
-  ];
-  const seenPaths = /* @__PURE__ */ new Set();
-  return paths.filter((skillPath) => {
-    let resolved;
-    try {
-      resolved = fs.realpathSync(skillPath);
-    } catch {
-      resolved = path.resolve(skillPath);
-    }
-    if (seenPaths.has(resolved)) return false;
-    seenPaths.add(resolved);
-    return true;
-  });
+	const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, "skills");
+	const claudeLocalSkillsPath = path.join(projectPath, ".claude", "skills");
+	const agentSkillsLocalPath = path.join(projectPath, ".agents", "skills");
+	const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, "skills");
+	const claudeGlobalSkillsPath = path.join(homeDir, ".claude", "skills");
+	const agentSkillsGlobalPath = path.join(homeDir, ".agents", "skills");
+	const paths = [
+		...collectSkillPaths([
+			mastraCodeLocalSkillsPath,
+			claudeLocalSkillsPath,
+			agentSkillsLocalPath
+		], projectPath),
+		...collectSkillPaths([
+			mastraCodeGlobalSkillsPath,
+			claudeGlobalSkillsPath,
+			agentSkillsGlobalPath
+		]),
+		...pluginSkillPaths.flatMap((pluginSkillPath) => collectSkillPaths([pluginSkillPath], pluginSkillPath))
+	];
+	const seenPaths = /* @__PURE__ */ new Set();
+	return paths.filter((skillPath) => {
+		let resolved;
+		try {
+			resolved = fs.realpathSync(skillPath);
+		} catch {
+			resolved = path.resolve(skillPath);
+		}
+		if (seenPaths.has(resolved)) return false;
+		seenPaths.add(resolved);
+		return true;
+	});
 }
-const DEFAULT_ALLOWED_PATHS = [os.tmpdir(), "/tmp", getPlansDir()].reduce((acc, p) => {
-  const resolved = path.resolve(p);
-  if (!acc.includes(resolved)) acc.push(resolved);
-  return acc;
+/**
+* Paths the agent is always allowed to access (in addition to the project root
+* and any per-thread sandboxAllowedPaths). The OS temp directory is included
+* so the agent can use it as a scratchpad without requesting access every time.
+*/
+const DEFAULT_ALLOWED_PATHS = [
+	os.tmpdir(),
+	"/tmp",
+	getPlansDir()
+].reduce((acc, p) => {
+	const resolved = path.resolve(p);
+	if (!acc.includes(resolved)) acc.push(resolved);
+	return acc;
 }, []);
 const WORKSPACE_ID_PREFIX = "mastra-code-workspace";
+/**
+* Detect the project's package runner from lock files.
+* Used as a fallback packageRunner for LSP when no binary is found locally or on PATH.
+*/
 function detectPackageRunner(projectPath) {
-  if (existsSync(join(projectPath, "pnpm-lock.yaml"))) return "pnpm dlx";
-  if (existsSync(join(projectPath, "bun.lockb")) || existsSync(join(projectPath, "bun.lock"))) return "bunx";
-  if (existsSync(join(projectPath, "yarn.lock"))) return "yarn dlx";
-  if (existsSync(join(projectPath, "package-lock.json"))) return "npx --yes";
-  return "npx --yes";
+	if (existsSync(join(projectPath, "pnpm-lock.yaml"))) return "pnpm dlx";
+	if (existsSync(join(projectPath, "bun.lockb")) || existsSync(join(projectPath, "bun.lock"))) return "bunx";
+	if (existsSync(join(projectPath, "yarn.lock"))) return "yarn dlx";
+	if (existsSync(join(projectPath, "package-lock.json"))) return "npx --yes";
+	return "npx --yes";
 }
-async function getSandboxWorkspace({
-  projectRepositoryId,
-  sandboxId,
-  workdir,
-  worktreePath,
-  configDir,
-  mastra,
-  skillExtension
-}) {
-  const boundWorkdir = worktreePath || workdir;
-  const extensionId = skillExtension ? `-${skillExtension.id}` : "";
-  const workspaceId = `${WORKSPACE_ID_PREFIX}-repository-${projectRepositoryId}-${sandboxId}-${boundWorkdir}${extensionId}`;
-  try {
-    const existing = mastra?.getWorkspaceById(workspaceId);
-    if (existing) {
-      existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);
-      return existing;
-    }
-  } catch {
-  }
-  const sandbox = await reattachProjectSandbox(sandboxId);
-  const filesystem = new SandboxFilesystem({ sandbox, workdir: boundWorkdir });
-  const projectSkillPaths = [path.join(configDir, "skills"), ".claude/skills", ".agents/skills"];
-  const skillPaths = [...skillExtension?.paths ?? [], ...projectSkillPaths];
-  return new Workspace({
-    id: workspaceId,
-    name: "Mastra Code Sandbox Workspace",
-    filesystem,
-    sandbox,
-    tools: MASTRACODE_WORKSPACE_TOOLS,
-    skills: skillPaths,
-    skillSource: skillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem
-  });
+/**
+* Build (or reuse) a sandbox-backed Workspace for a linked project repository. The sandbox
+* is reattached by its persisted provider id and a `SandboxFilesystem` is layered
+* over the in-sandbox checkout so file tools and command tools share one VM.
+*/
+async function getSandboxWorkspace({ projectRepositoryId, sandboxId, workdir, worktreePath, configDir, mastra, skillExtension }) {
+	const boundWorkdir = worktreePath || workdir;
+	const extensionId = skillExtension ? `-${skillExtension.id}` : "";
+	const workspaceId = `${WORKSPACE_ID_PREFIX}-repository-${projectRepositoryId}-${sandboxId}-${boundWorkdir}${extensionId}`;
+	try {
+		const existing = mastra?.getWorkspaceById(workspaceId);
+		if (existing) {
+			existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);
+			return existing;
+		}
+	} catch {}
+	const sandbox = await reattachProjectSandbox(sandboxId);
+	const filesystem = new SandboxFilesystem({
+		sandbox,
+		workdir: boundWorkdir
+	});
+	const projectSkillPaths = [
+		path.join(configDir, "skills"),
+		".claude/skills",
+		".agents/skills"
+	];
+	return new Workspace({
+		id: workspaceId,
+		name: "Mastra Code Sandbox Workspace",
+		filesystem,
+		sandbox,
+		tools: MASTRACODE_WORKSPACE_TOOLS,
+		skills: [...skillExtension?.paths ?? [], ...projectSkillPaths],
+		skillSource: skillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem
+	});
 }
-async function getDynamicWorkspace({
-  requestContext,
-  mastra,
-  skillExtension
-}) {
-  const ctx = requestContext.get("controller");
-  const state = ctx?.getState();
-  if (state?.projectRepositoryId && state.sandboxId && state.sandboxWorkdir) {
-    return getSandboxWorkspace({
-      projectRepositoryId: state.projectRepositoryId,
-      sandboxId: state.sandboxId,
-      workdir: state.sandboxWorkdir,
-      worktreePath: state.worktreePath,
-      configDir: state.configDir ?? DEFAULT_CONFIG_DIR,
-      mastra,
-      skillExtension
-    });
-  }
-  const rawProjectPath = state?.projectPath;
-  if (!rawProjectPath) {
-    throw new Error("Project path is required");
-  }
-  const projectPath = path.resolve(rawProjectPath);
-  const configDir = state?.configDir ?? DEFAULT_CONFIG_DIR;
-  const projectSkillPaths = buildSkillPaths(projectPath, configDir, state?.homeDir, state?.pluginSkillPaths ?? []);
-  const skillPaths = [...skillExtension?.paths ?? [], ...projectSkillPaths];
-  const extensionId = skillExtension ? `-${skillExtension.id}` : "";
-  const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;
-  const sandboxPaths = state?.sandboxAllowedPaths ?? [];
-  const allowedPaths = [
-    ...projectSkillPaths,
-    ...DEFAULT_ALLOWED_PATHS,
-    ...sandboxPaths.map((p) => path.resolve(p))
-  ];
-  const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;
-  let existing;
-  try {
-    existing = mastra?.getWorkspaceById(workspaceId);
-  } catch {
-  }
-  if (existing) {
-    existing.filesystem.setAllowedPaths(allowedPaths);
-    existing.setToolsConfig(workspaceTools);
-    return existing;
-  }
-  const userLsp = loadSettings().lsp ?? {};
-  const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), "..");
-  const lspConfig = {
-    ...userLsp,
-    packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath),
-    // Detected runner is the fallback — user's packageRunner always wins
-    searchPaths: [mcModulePath, ...userLsp.searchPaths ?? []]
-  };
-  const filesystem = new LocalFilesystem({
-    basePath: projectPath,
-    allowedPaths
-  });
-  return new Workspace({
-    id: workspaceId,
-    name: "Mastra Code Workspace",
-    filesystem,
-    sandbox: new LocalSandbox({
-      workingDirectory: projectPath,
-      env: buildSandboxEnv()
-    }),
-    tools: workspaceTools,
-    skills: skillPaths,
-    ...skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {},
-    lsp: lspConfig
-  });
+async function getDynamicWorkspace({ requestContext, mastra, skillExtension }) {
+	const state = requestContext.get("controller")?.getState();
+	if (state?.projectRepositoryId && state.sandboxId && state.sandboxWorkdir) return getSandboxWorkspace({
+		projectRepositoryId: state.projectRepositoryId,
+		sandboxId: state.sandboxId,
+		workdir: state.sandboxWorkdir,
+		worktreePath: state.worktreePath,
+		configDir: state.configDir ?? ".mastracode",
+		mastra,
+		skillExtension
+	});
+	const rawProjectPath = state?.projectPath;
+	if (!rawProjectPath) throw new Error("Project path is required");
+	const projectPath = path.resolve(rawProjectPath);
+	const projectSkillPaths = buildSkillPaths(projectPath, state?.configDir ?? ".mastracode", state?.homeDir, state?.pluginSkillPaths ?? []);
+	const skillPaths = [...skillExtension?.paths ?? [], ...projectSkillPaths];
+	const extensionId = skillExtension ? `-${skillExtension.id}` : "";
+	const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;
+	const sandboxPaths = state?.sandboxAllowedPaths ?? [];
+	const allowedPaths = [
+		...projectSkillPaths,
+		...DEFAULT_ALLOWED_PATHS,
+		...sandboxPaths.map((p) => path.resolve(p))
+	];
+	const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;
+	let existing;
+	try {
+		existing = mastra?.getWorkspaceById(workspaceId);
+	} catch {}
+	if (existing) {
+		existing.filesystem.setAllowedPaths(allowedPaths);
+		existing.setToolsConfig(workspaceTools);
+		return existing;
+	}
+	const userLsp = loadSettings().lsp ?? {};
+	const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), "..");
+	const lspConfig = {
+		...userLsp,
+		packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath),
+		searchPaths: [mcModulePath, ...userLsp.searchPaths ?? []]
+	};
+	const filesystem = new LocalFilesystem({
+		basePath: projectPath,
+		allowedPaths
+	});
+	return new Workspace({
+		id: workspaceId,
+		name: "Mastra Code Workspace",
+		filesystem,
+		sandbox: new LocalSandbox({
+			workingDirectory: projectPath,
+			env: buildSandboxEnv()
+		}),
+		tools: workspaceTools,
+		skills: skillPaths,
+		...skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {},
+		lsp: lspConfig
+	});
 }
-async function getGoalJudgeTools({
-  requestContext,
-  mastra
-}) {
-  let workspace;
-  try {
-    workspace = await getDynamicWorkspace({ requestContext, mastra });
-  } catch {
-    return void 0;
-  }
-  const allTools = await createWorkspaceTools(workspace, { requestContext, workspace });
-  const readonly = {};
-  for (const name of GOAL_JUDGE_READONLY_TOOLS) {
-    if (allTools[name]) readonly[name] = allTools[name];
-  }
-  return Object.keys(readonly).length > 0 ? readonly : void 0;
+/**
+* Resolver for the agent's `goal.tools` config. Builds the request's workspace
+* (same per-request resolution as the agent's own tools) and returns only the
+* read-only verification subset, remapped to mastracode's tool names (`view`,
+* `search_content`, etc.). Returns `undefined` when no workspace can be resolved
+* (e.g. no project path), keeping the default judge text-only rather than
+* throwing inside the goal step.
+*/
+async function getGoalJudgeTools({ requestContext, mastra }) {
+	let workspace;
+	try {
+		workspace = await getDynamicWorkspace({
+			requestContext,
+			mastra
+		});
+	} catch {
+		return;
+	}
+	const allTools = await createWorkspaceTools(workspace, {
+		requestContext,
+		workspace
+	});
+	const readonly = {};
+	for (const name of GOAL_JUDGE_READONLY_TOOLS) if (allTools[name]) readonly[name] = allTools[name];
+	return Object.keys(readonly).length > 0 ? readonly : void 0;
 }
-export {
-  buildSkillPaths,
-  getDynamicWorkspace,
-  getGoalJudgeTools
-};
+//#endregion
+export { buildSkillPaths, getDynamicWorkspace, getGoalJudgeTools };
+
 //# sourceMappingURL=workspace.js.map

package/dist/agents/workspace.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agents/workspace.ts"],"sourcesContent":["import fs, { existsSync } from 'node:fs';\nimport os from 'node:os';\nimport path, { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { ToolsInput } from '@mastra/core/agent';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { Mastra } from '@mastra/core/mastra';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { Workspace, LocalFilesystem, LocalSandbox, createWorkspaceTools } from '@mastra/core/workspace';\nimport type { LSPConfig, SkillSource } from '@mastra/core/workspace';\nimport { DEFAULT_CONFIG_DIR } from '../constants.js';\nimport { loadSettings } from '../onboarding/settings.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { isPathWithinRoot } from '../utils/path-security.js';\nimport { getPlansDir } from '../utils/plans.js';\nimport { SandboxFilesystem } from './sandbox-filesystem.js';\nimport { reattachProjectSandbox } from './sandbox-reattach.js';\nimport { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from './tool-availability.js';\n\n// =============================================================================\n// Sandbox Environment\n// =============================================================================\n\nfunction buildSandboxEnv(): NodeJS.ProcessEnv {\n  return {\n    ...process.env,\n    // Explicit overrides for non-interactive subprocess execution\n    FORCE_COLOR: '1',\n    CLICOLOR_FORCE: '1',\n    TERM: process.env.TERM || 'xterm-256color',\n    CI: 'true',\n    NONINTERACTIVE: '1',\n    DEBIAN_FRONTEND: 'noninteractive',\n  };\n}\n\n// =============================================================================\n// Create Workspace with Skills\n// =============================================================================\n\n// We support multiple skill locations for compatibility:\n// 1. Project-local: <configDir>/skills (project-specific mastracode skills)\n// 2. Project-local: .claude/skills (Claude Code compatible skills)\n// 3. Project-local: .agents/skills (Agent Skills spec compatible)\n// 4. Global: ~/<configDir>/skills (user-wide mastracode skills)\n// 5. Global: ~/.claude/skills (user-wide Claude Code skills)\n// 6. Global: ~/.agents/skills (user-wide Agent Skills spec compatible)\n\n// Mastra's LocalSkillSource.readdir uses Node's Dirent.isDirectory() which\n// returns false for symlinks. Tools like `npx skills add` install skills as\n// symlinks, so we need to resolve them. For each symlinked skill directory,\n// we add the real (resolved) parent path as an additional skill scan path.\nfunction collectSkillPaths(skillsDirs: string[], allowedRoot?: string): string[] {\n  const paths: string[] = [];\n  const seen = new Set<string>();\n  let realAllowedRoot: string | undefined;\n\n  if (allowedRoot) {\n    try {\n      realAllowedRoot = fs.realpathSync(allowedRoot);\n    } catch {\n      return [];\n    }\n  }\n\n  for (const skillsDir of skillsDirs) {\n    const skillsDirExists = fs.existsSync(skillsDir);\n    if (skillsDirExists && realAllowedRoot) {\n      try {\n        const realSkillsDir = fs.realpathSync(skillsDir);\n        if (!isPathWithinRoot(realSkillsDir, realAllowedRoot)) continue;\n      } catch {\n        continue;\n      }\n    }\n\n    const resolved = path.resolve(skillsDir);\n    if (!seen.has(resolved)) {\n      seen.add(resolved);\n      paths.push(skillsDir);\n    }\n\n    if (!skillsDirExists) continue;\n\n    try {\n      const entries = fs.readdirSync(skillsDir, { withFileTypes: true });\n      for (const entry of entries) {\n        if (entry.isSymbolicLink()) {\n          try {\n            const linkPath = path.join(skillsDir, entry.name);\n            const realPath = fs.realpathSync(linkPath);\n            if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;\n            const stat = fs.statSync(realPath);\n            if (stat.isDirectory()) {\n              const realParent = path.dirname(realPath);\n              if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;\n              if (!seen.has(realParent)) {\n                seen.add(realParent);\n                paths.push(realParent);\n              }\n            }\n          } catch {\n            continue;\n          }\n        }\n      }\n    } catch {\n      // Ignore errors during symlink resolution\n    }\n  }\n\n  return paths;\n}\n\n// Build skill paths dynamically based on configDir and projectPath\nexport function buildSkillPaths(\n  projectPath: string,\n  configDir: string,\n  homeDir = os.homedir(),\n  pluginSkillPaths: string[] = [],\n): string[] {\n  const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, 'skills');\n  const claudeLocalSkillsPath = path.join(projectPath, '.claude', 'skills');\n  const agentSkillsLocalPath = path.join(projectPath, '.agents', 'skills');\n  const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, 'skills');\n  const claudeGlobalSkillsPath = path.join(homeDir, '.claude', 'skills');\n  const agentSkillsGlobalPath = path.join(homeDir, '.agents', 'skills');\n\n  const paths = [\n    ...collectSkillPaths([mastraCodeLocalSkillsPath, claudeLocalSkillsPath, agentSkillsLocalPath], projectPath),\n    ...collectSkillPaths([mastraCodeGlobalSkillsPath, claudeGlobalSkillsPath, agentSkillsGlobalPath]),\n    ...pluginSkillPaths.flatMap(pluginSkillPath => collectSkillPaths([pluginSkillPath], pluginSkillPath)),\n  ];\n\n  const seenPaths = new Set<string>();\n  return paths.filter(skillPath => {\n    let resolved: string;\n    try {\n      resolved = fs.realpathSync(skillPath);\n    } catch {\n      resolved = path.resolve(skillPath);\n    }\n    if (seenPaths.has(resolved)) return false;\n    seenPaths.add(resolved);\n    return true;\n  });\n}\n\nexport interface WorkspaceSkillExtension {\n  /** Distinguishes extended workspaces from the default resolver cache. */\n  id: string;\n  /** Additional read-only skill roots prepended to normal project/global skill roots. */\n  paths: string[];\n  /** Compose the additional roots with the workspace's normal skill source. */\n  createSource: (fallback: SkillSource, fallbackSkillRoots: string[]) => SkillSource;\n}\n\n/**\n * Paths the agent is always allowed to access (in addition to the project root\n * and any per-thread sandboxAllowedPaths). The OS temp directory is included\n * so the agent can use it as a scratchpad without requesting access every time.\n */\nconst DEFAULT_ALLOWED_PATHS: string[] = [os.tmpdir(), '/tmp', getPlansDir()].reduce<string[]>((acc, p) => {\n  const resolved = path.resolve(p);\n  if (!acc.includes(resolved)) acc.push(resolved);\n  return acc;\n}, []);\n\nconst WORKSPACE_ID_PREFIX = 'mastra-code-workspace';\n\n/**\n * Detect the project's package runner from lock files.\n * Used as a fallback packageRunner for LSP when no binary is found locally or on PATH.\n */\nfunction detectPackageRunner(projectPath: string): string | undefined {\n  if (existsSync(join(projectPath, 'pnpm-lock.yaml'))) return 'pnpm dlx';\n  if (existsSync(join(projectPath, 'bun.lockb')) || existsSync(join(projectPath, 'bun.lock'))) return 'bunx';\n  if (existsSync(join(projectPath, 'yarn.lock'))) return 'yarn dlx';\n  if (existsSync(join(projectPath, 'package-lock.json'))) return 'npx --yes';\n  return 'npx --yes';\n}\n\n/**\n * Build (or reuse) a sandbox-backed Workspace for a linked project repository. The sandbox\n * is reattached by its persisted provider id and a `SandboxFilesystem` is layered\n * over the in-sandbox checkout so file tools and command tools share one VM.\n */\nasync function getSandboxWorkspace({\n  projectRepositoryId,\n  sandboxId,\n  workdir,\n  worktreePath,\n  configDir,\n  mastra,\n  skillExtension,\n}: {\n  projectRepositoryId: string;\n  sandboxId: string;\n  workdir: string;\n  worktreePath?: string;\n  configDir: string;\n  mastra?: Mastra;\n  skillExtension?: WorkspaceSkillExtension;\n}): Promise<Workspace> {\n  // Bind the workspace to the active worktree when one is set, so file tools and\n  // command tools operate inside the feature branch's working tree rather than\n  // the base checkout. Falls back to the repo root when no worktree is active.\n  const boundWorkdir = worktreePath || workdir;\n\n  // Include the sandbox id *and* worktree path in the reuse key: a new sandbox\n  // (e.g. the previous one expired) or a different worktree must each get a\n  // fresh Workspace/ProcessManager instead of reusing one bound to a stale\n  // sandbox or the wrong working tree.\n  const extensionId = skillExtension ? `-${skillExtension.id}` : '';\n  const workspaceId = `${WORKSPACE_ID_PREFIX}-repository-${projectRepositoryId}-${sandboxId}-${boundWorkdir}${extensionId}`;\n\n  // Reuse the existing remote workspace if already registered (preserves the\n  // reattached sandbox + ProcessManager state across re-opens).\n  try {\n    const existing = mastra?.getWorkspaceById(workspaceId) as Workspace | undefined;\n    if (existing) {\n      existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);\n      return existing;\n    }\n  } catch {\n    // Not registered yet.\n  }\n\n  const sandbox = await reattachProjectSandbox(sandboxId);\n  const filesystem = new SandboxFilesystem({ sandbox, workdir: boundWorkdir });\n  const projectSkillPaths = [path.join(configDir, 'skills'), '.claude/skills', '.agents/skills'];\n  const skillPaths = [...(skillExtension?.paths ?? []), ...projectSkillPaths];\n\n  return new Workspace({\n    id: workspaceId,\n    name: 'Mastra Code Sandbox Workspace',\n    filesystem,\n    sandbox: sandbox as unknown as ConstructorParameters<typeof Workspace>[0]['sandbox'],\n    tools: MASTRACODE_WORKSPACE_TOOLS,\n    skills: skillPaths,\n    skillSource: skillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem,\n  });\n}\n\nexport async function getDynamicWorkspace({\n  requestContext,\n  mastra,\n  skillExtension,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n  skillExtension?: WorkspaceSkillExtension;\n}) {\n  const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const state = ctx?.getState();\n\n  // Repository-backed project: the repo lives inside a remote sandbox, not on\n  // the server host. Reattach to the already-provisioned + materialized sandbox\n  // and build a sandbox-backed Workspace. Optional embedders may add read-only\n  // skill roots while project skills remain sandbox-backed.\n  if (state?.projectRepositoryId && state.sandboxId && state.sandboxWorkdir) {\n    return getSandboxWorkspace({\n      projectRepositoryId: state.projectRepositoryId,\n      sandboxId: state.sandboxId,\n      workdir: state.sandboxWorkdir,\n      worktreePath: state.worktreePath,\n      configDir: state.configDir ?? DEFAULT_CONFIG_DIR,\n      mastra,\n      skillExtension,\n    });\n  }\n\n  const rawProjectPath = state?.projectPath;\n\n  if (!rawProjectPath) {\n    throw new Error('Project path is required');\n  }\n\n  const projectPath = path.resolve(rawProjectPath);\n  const configDir = state?.configDir ?? DEFAULT_CONFIG_DIR;\n  const projectSkillPaths = buildSkillPaths(projectPath, configDir, state?.homeDir, state?.pluginSkillPaths ?? []);\n  const skillPaths = [...(skillExtension?.paths ?? []), ...projectSkillPaths];\n  const extensionId = skillExtension ? `-${skillExtension.id}` : '';\n  const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;\n  const sandboxPaths = state?.sandboxAllowedPaths ?? [];\n  const allowedPaths = [\n    ...projectSkillPaths,\n    ...DEFAULT_ALLOWED_PATHS,\n    ...sandboxPaths.map((p: string) => path.resolve(p)),\n  ];\n\n  // All modes share the same workspace tool configuration.  Per-mode tool\n  // visibility is enforced at LLM-call time via `availableTools` /\n  // `activeTools` on the AgentController, not by mutating workspace capabilities.\n  const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;\n\n  // Reuse existing workspace if already registered (preserves ProcessManager state)\n  let existing: Workspace<LocalFilesystem, LocalSandbox> | undefined;\n  try {\n    existing = mastra?.getWorkspaceById(workspaceId) as Workspace<LocalFilesystem, LocalSandbox>;\n  } catch {\n    // Not registered yet\n  }\n\n  if (existing) {\n    existing.filesystem.setAllowedPaths(allowedPaths);\n    existing.setToolsConfig(workspaceTools);\n    return existing;\n  }\n\n  const userLsp = loadSettings().lsp ?? {};\n  const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), '..');\n  const lspConfig: LSPConfig = {\n    ...userLsp,\n    packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath), // Detected runner is the fallback — user's packageRunner always wins\n    searchPaths: [mcModulePath, ...(userLsp.searchPaths ?? [])],\n  };\n\n  // First call for this project — create the workspace\n  const filesystem = new LocalFilesystem({\n    basePath: projectPath,\n    allowedPaths,\n  });\n  return new Workspace({\n    id: workspaceId,\n    name: 'Mastra Code Workspace',\n    filesystem,\n    sandbox: new LocalSandbox({\n      workingDirectory: projectPath,\n      env: buildSandboxEnv(),\n    }),\n    tools: workspaceTools,\n    skills: skillPaths,\n    ...(skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {}),\n    lsp: lspConfig,\n  });\n}\n\n/**\n * Resolver for the agent's `goal.tools` config. Builds the request's workspace\n * (same per-request resolution as the agent's own tools) and returns only the\n * read-only verification subset, remapped to mastracode's tool names (`view`,\n * `search_content`, etc.). Returns `undefined` when no workspace can be resolved\n * (e.g. no project path), keeping the default judge text-only rather than\n * throwing inside the goal step.\n */\nexport async function getGoalJudgeTools({\n  requestContext,\n  mastra,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n}): Promise<ToolsInput | undefined> {\n  let workspace: Workspace;\n  try {\n    workspace = await getDynamicWorkspace({ requestContext, mastra });\n  } catch {\n    return undefined;\n  }\n\n  const allTools = await createWorkspaceTools(workspace, { requestContext, workspace });\n  const readonly: ToolsInput = {};\n  for (const name of GOAL_JUDGE_READONLY_TOOLS) {\n    if (allTools[name]) readonly[name] = allTools[name];\n  }\n  return Object.keys(readonly).length > 0 ? readonly : undefined;\n}\n"],"mappings":"AAAA,OAAO,MAAM,kBAAkB;AAC/B,OAAO,QAAQ;AACf,OAAO,QAAQ,SAAS,YAAY;AACpC,SAAS,qBAAqB;AAK9B,SAAS,WAAW,iBAAiB,cAAc,4BAA4B;AAE/E,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,SAAS,wBAAwB;AACjC,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B,kCAAkC;AAMtE,SAAS,kBAAqC;AAC5C,SAAO;AAAA,IACL,GAAG,QAAQ;AAAA;AAAA,IAEX,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,MAAM,QAAQ,IAAI,QAAQ;AAAA,IAC1B,IAAI;AAAA,IACJ,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,EACnB;AACF;AAkBA,SAAS,kBAAkB,YAAsB,aAAgC;AAC/E,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI;AAEJ,MAAI,aAAa;AACf,QAAI;AACF,wBAAkB,GAAG,aAAa,WAAW;AAAA,IAC/C,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAEA,aAAW,aAAa,YAAY;AAClC,UAAM,kBAAkB,GAAG,WAAW,SAAS;AAC/C,QAAI,mBAAmB,iBAAiB;AACtC,UAAI;AACF,cAAM,gBAAgB,GAAG,aAAa,SAAS;AAC/C,YAAI,CAAC,iBAAiB,eAAe,eAAe,EAAG;AAAA,MACzD,QAAQ;AACN;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,QAAQ,SAAS;AACvC,QAAI,CAAC,KAAK,IAAI,QAAQ,GAAG;AACvB,WAAK,IAAI,QAAQ;AACjB,YAAM,KAAK,SAAS;AAAA,IACtB;AAEA,QAAI,CAAC,gBAAiB;AAEtB,QAAI;AACF,YAAM,UAAU,GAAG,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC;AACjE,iBAAW,SAAS,SAAS;AAC3B,YAAI,MAAM,eAAe,GAAG;AAC1B,cAAI;AACF,kBAAM,WAAW,KAAK,KAAK,WAAW,MAAM,IAAI;AAChD,kBAAM,WAAW,GAAG,aAAa,QAAQ;AACzC,gBAAI,mBAAmB,CAAC,iBAAiB,UAAU,eAAe,EAAG;AACrE,kBAAM,OAAO,GAAG,SAAS,QAAQ;AACjC,gBAAI,KAAK,YAAY,GAAG;AACtB,oBAAM,aAAa,KAAK,QAAQ,QAAQ;AACxC,kBAAI,mBAAmB,CAAC,iBAAiB,YAAY,eAAe,EAAG;AACvE,kBAAI,CAAC,KAAK,IAAI,UAAU,GAAG;AACzB,qBAAK,IAAI,UAAU;AACnB,sBAAM,KAAK,UAAU;AAAA,cACvB;AAAA,YACF;AAAA,UACF,QAAQ;AACN;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAGO,SAAS,gBACd,aACA,WACA,UAAU,GAAG,QAAQ,GACrB,mBAA6B,CAAC,GACpB;AACV,QAAM,4BAA4B,KAAK,KAAK,aAAa,WAAW,QAAQ;AAC5E,QAAM,wBAAwB,KAAK,KAAK,aAAa,WAAW,QAAQ;AACxE,QAAM,uBAAuB,KAAK,KAAK,aAAa,WAAW,QAAQ;AACvE,QAAM,6BAA6B,KAAK,KAAK,SAAS,WAAW,QAAQ;AACzE,QAAM,yBAAyB,KAAK,KAAK,SAAS,WAAW,QAAQ;AACrE,QAAM,wBAAwB,KAAK,KAAK,SAAS,WAAW,QAAQ;AAEpE,QAAM,QAAQ;AAAA,IACZ,GAAG,kBAAkB,CAAC,2BAA2B,uBAAuB,oBAAoB,GAAG,WAAW;AAAA,IAC1G,GAAG,kBAAkB,CAAC,4BAA4B,wBAAwB,qBAAqB,CAAC;AAAA,IAChG,GAAG,iBAAiB,QAAQ,qBAAmB,kBAAkB,CAAC,eAAe,GAAG,eAAe,CAAC;AAAA,EACtG;AAEA,QAAM,YAAY,oBAAI,IAAY;AAClC,SAAO,MAAM,OAAO,eAAa;AAC/B,QAAI;AACJ,QAAI;AACF,iBAAW,GAAG,aAAa,SAAS;AAAA,IACtC,QAAQ;AACN,iBAAW,KAAK,QAAQ,SAAS;AAAA,IACnC;AACA,QAAI,UAAU,IAAI,QAAQ,EAAG,QAAO;AACpC,cAAU,IAAI,QAAQ;AACtB,WAAO;AAAA,EACT,CAAC;AACH;AAgBA,MAAM,wBAAkC,CAAC,GAAG,OAAO,GAAG,QAAQ,YAAY,CAAC,EAAE,OAAiB,CAAC,KAAK,MAAM;AACxG,QAAM,WAAW,KAAK,QAAQ,CAAC;AAC/B,MAAI,CAAC,IAAI,SAAS,QAAQ,EAAG,KAAI,KAAK,QAAQ;AAC9C,SAAO;AACT,GAAG,CAAC,CAAC;AAEL,MAAM,sBAAsB;AAM5B,SAAS,oBAAoB,aAAyC;AACpE,MAAI,WAAW,KAAK,aAAa,gBAAgB,CAAC,EAAG,QAAO;AAC5D,MAAI,WAAW,KAAK,aAAa,WAAW,CAAC,KAAK,WAAW,KAAK,aAAa,UAAU,CAAC,EAAG,QAAO;AACpG,MAAI,WAAW,KAAK,aAAa,WAAW,CAAC,EAAG,QAAO;AACvD,MAAI,WAAW,KAAK,aAAa,mBAAmB,CAAC,EAAG,QAAO;AAC/D,SAAO;AACT;AAOA,eAAe,oBAAoB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQuB;AAIrB,QAAM,eAAe,gBAAgB;AAMrC,QAAM,cAAc,iBAAiB,IAAI,eAAe,EAAE,KAAK;AAC/D,QAAM,cAAc,GAAG,mBAAmB,eAAe,mBAAmB,IAAI,SAAS,IAAI,YAAY,GAAG,WAAW;AAIvH,MAAI;AACF,UAAM,WAAW,QAAQ,iBAAiB,WAAW;AACrD,QAAI,UAAU;AACZ,eAAS,eAAe,0BAA0B;AAClD,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,QAAM,UAAU,MAAM,uBAAuB,SAAS;AACtD,QAAM,aAAa,IAAI,kBAAkB,EAAE,SAAS,SAAS,aAAa,CAAC;AAC3E,QAAM,oBAAoB,CAAC,KAAK,KAAK,WAAW,QAAQ,GAAG,kBAAkB,gBAAgB;AAC7F,QAAM,aAAa,CAAC,GAAI,gBAAgB,SAAS,CAAC,GAAI,GAAG,iBAAiB;AAE1E,SAAO,IAAI,UAAU;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,aAAa,gBAAgB,aAAa,YAAY,iBAAiB,KAAK;AAAA,EAC9E,CAAC;AACH;AAEA,eAAsB,oBAAoB;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,MAAM,eAAe,IAAI,YAAY;AAC3C,QAAM,QAAQ,KAAK,SAAS;AAM5B,MAAI,OAAO,uBAAuB,MAAM,aAAa,MAAM,gBAAgB;AACzE,WAAO,oBAAoB;AAAA,MACzB,qBAAqB,MAAM;AAAA,MAC3B,WAAW,MAAM;AAAA,MACjB,SAAS,MAAM;AAAA,MACf,cAAc,MAAM;AAAA,MACpB,WAAW,MAAM,aAAa;AAAA,MAC9B;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,iBAAiB,OAAO;AAE9B,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AAEA,QAAM,cAAc,KAAK,QAAQ,cAAc;AAC/C,QAAM,YAAY,OAAO,aAAa;AACtC,QAAM,oBAAoB,gBAAgB,aAAa,WAAW,OAAO,SAAS,OAAO,oBAAoB,CAAC,CAAC;AAC/G,QAAM,aAAa,CAAC,GAAI,gBAAgB,SAAS,CAAC,GAAI,GAAG,iBAAiB;AAC1E,QAAM,cAAc,iBAAiB,IAAI,eAAe,EAAE,KAAK;AAC/D,QAAM,cAAc,GAAG,mBAAmB,IAAI,WAAW,GAAG,WAAW;AACvE,QAAM,eAAe,OAAO,uBAAuB,CAAC;AACpD,QAAM,eAAe;AAAA,IACnB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG,aAAa,IAAI,CAAC,MAAc,KAAK,QAAQ,CAAC,CAAC;AAAA,EACpD;AAKA,QAAM,iBAAiB;AAGvB,MAAI;AACJ,MAAI;AACF,eAAW,QAAQ,iBAAiB,WAAW;AAAA,EACjD,QAAQ;AAAA,EAER;AAEA,MAAI,UAAU;AACZ,aAAS,WAAW,gBAAgB,YAAY;AAChD,aAAS,eAAe,cAAc;AACtC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,aAAa,EAAE,OAAO,CAAC;AACvC,QAAM,eAAe,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI;AACvE,QAAM,YAAuB;AAAA,IAC3B,GAAG;AAAA,IACH,eAAe,QAAQ,iBAAiB,oBAAoB,WAAW;AAAA;AAAA,IACvE,aAAa,CAAC,cAAc,GAAI,QAAQ,eAAe,CAAC,CAAE;AAAA,EAC5D;AAGA,QAAM,aAAa,IAAI,gBAAgB;AAAA,IACrC,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AACD,SAAO,IAAI,UAAU;AAAA,IACnB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN;AAAA,IACA,SAAS,IAAI,aAAa;AAAA,MACxB,kBAAkB;AAAA,MAClB,KAAK,gBAAgB;AAAA,IACvB,CAAC;AAAA,IACD,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,GAAI,iBAAiB,EAAE,aAAa,eAAe,aAAa,YAAY,iBAAiB,EAAE,IAAI,CAAC;AAAA,IACpG,KAAK;AAAA,EACP,CAAC;AACH;AAUA,eAAsB,kBAAkB;AAAA,EACtC;AAAA,EACA;AACF,GAGoC;AAClC,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,oBAAoB,EAAE,gBAAgB,OAAO,CAAC;AAAA,EAClE,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,MAAM,qBAAqB,WAAW,EAAE,gBAAgB,UAAU,CAAC;AACpF,QAAM,WAAuB,CAAC;AAC9B,aAAW,QAAQ,2BAA2B;AAC5C,QAAI,SAAS,IAAI,EAAG,UAAS,IAAI,IAAI,SAAS,IAAI;AAAA,EACpD;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;","names":[]}
+{"version":3,"file":"workspace.js","names":[],"sources":["../../src/agents/workspace.ts"],"sourcesContent":["import fs, { existsSync } from 'node:fs';\nimport os from 'node:os';\nimport path, { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { ToolsInput } from '@mastra/core/agent';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { Mastra } from '@mastra/core/mastra';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { Workspace, LocalFilesystem, LocalSandbox, createWorkspaceTools } from '@mastra/core/workspace';\nimport type { LSPConfig, SkillSource } from '@mastra/core/workspace';\nimport { DEFAULT_CONFIG_DIR } from '../constants.js';\nimport { loadSettings } from '../onboarding/settings.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { isPathWithinRoot } from '../utils/path-security.js';\nimport { getPlansDir } from '../utils/plans.js';\nimport { SandboxFilesystem } from './sandbox-filesystem.js';\nimport { reattachProjectSandbox } from './sandbox-reattach.js';\nimport { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from './tool-availability.js';\n\n// =============================================================================\n// Sandbox Environment\n// =============================================================================\n\nfunction buildSandboxEnv(): NodeJS.ProcessEnv {\n  return {\n    ...process.env,\n    // Explicit overrides for non-interactive subprocess execution\n    FORCE_COLOR: '1',\n    CLICOLOR_FORCE: '1',\n    TERM: process.env.TERM || 'xterm-256color',\n    CI: 'true',\n    NONINTERACTIVE: '1',\n    DEBIAN_FRONTEND: 'noninteractive',\n  };\n}\n\n// =============================================================================\n// Create Workspace with Skills\n// =============================================================================\n\n// We support multiple skill locations for compatibility:\n// 1. Project-local: <configDir>/skills (project-specific mastracode skills)\n// 2. Project-local: .claude/skills (Claude Code compatible skills)\n// 3. Project-local: .agents/skills (Agent Skills spec compatible)\n// 4. Global: ~/<configDir>/skills (user-wide mastracode skills)\n// 5. Global: ~/.claude/skills (user-wide Claude Code skills)\n// 6. Global: ~/.agents/skills (user-wide Agent Skills spec compatible)\n\n// Mastra's LocalSkillSource.readdir uses Node's Dirent.isDirectory() which\n// returns false for symlinks. Tools like `npx skills add` install skills as\n// symlinks, so we need to resolve them. For each symlinked skill directory,\n// we add the real (resolved) parent path as an additional skill scan path.\nfunction collectSkillPaths(skillsDirs: string[], allowedRoot?: string): string[] {\n  const paths: string[] = [];\n  const seen = new Set<string>();\n  let realAllowedRoot: string | undefined;\n\n  if (allowedRoot) {\n    try {\n      realAllowedRoot = fs.realpathSync(allowedRoot);\n    } catch {\n      return [];\n    }\n  }\n\n  for (const skillsDir of skillsDirs) {\n    const skillsDirExists = fs.existsSync(skillsDir);\n    if (skillsDirExists && realAllowedRoot) {\n      try {\n        const realSkillsDir = fs.realpathSync(skillsDir);\n        if (!isPathWithinRoot(realSkillsDir, realAllowedRoot)) continue;\n      } catch {\n        continue;\n      }\n    }\n\n    const resolved = path.resolve(skillsDir);\n    if (!seen.has(resolved)) {\n      seen.add(resolved);\n      paths.push(skillsDir);\n    }\n\n    if (!skillsDirExists) continue;\n\n    try {\n      const entries = fs.readdirSync(skillsDir, { withFileTypes: true });\n      for (const entry of entries) {\n        if (entry.isSymbolicLink()) {\n          try {\n            const linkPath = path.join(skillsDir, entry.name);\n            const realPath = fs.realpathSync(linkPath);\n            if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;\n            const stat = fs.statSync(realPath);\n            if (stat.isDirectory()) {\n              const realParent = path.dirname(realPath);\n              if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;\n              if (!seen.has(realParent)) {\n                seen.add(realParent);\n                paths.push(realParent);\n              }\n            }\n          } catch {\n            continue;\n          }\n        }\n      }\n    } catch {\n      // Ignore errors during symlink resolution\n    }\n  }\n\n  return paths;\n}\n\n// Build skill paths dynamically based on configDir and projectPath\nexport function buildSkillPaths(\n  projectPath: string,\n  configDir: string,\n  homeDir = os.homedir(),\n  pluginSkillPaths: string[] = [],\n): string[] {\n  const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, 'skills');\n  const claudeLocalSkillsPath = path.join(projectPath, '.claude', 'skills');\n  const agentSkillsLocalPath = path.join(projectPath, '.agents', 'skills');\n  const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, 'skills');\n  const claudeGlobalSkillsPath = path.join(homeDir, '.claude', 'skills');\n  const agentSkillsGlobalPath = path.join(homeDir, '.agents', 'skills');\n\n  const paths = [\n    ...collectSkillPaths([mastraCodeLocalSkillsPath, claudeLocalSkillsPath, agentSkillsLocalPath], projectPath),\n    ...collectSkillPaths([mastraCodeGlobalSkillsPath, claudeGlobalSkillsPath, agentSkillsGlobalPath]),\n    ...pluginSkillPaths.flatMap(pluginSkillPath => collectSkillPaths([pluginSkillPath], pluginSkillPath)),\n  ];\n\n  const seenPaths = new Set<string>();\n  return paths.filter(skillPath => {\n    let resolved: string;\n    try {\n      resolved = fs.realpathSync(skillPath);\n    } catch {\n      resolved = path.resolve(skillPath);\n    }\n    if (seenPaths.has(resolved)) return false;\n    seenPaths.add(resolved);\n    return true;\n  });\n}\n\nexport interface WorkspaceSkillExtension {\n  /** Distinguishes extended workspaces from the default resolver cache. */\n  id: string;\n  /** Additional read-only skill roots prepended to normal project/global skill roots. */\n  paths: string[];\n  /** Compose the additional roots with the workspace's normal skill source. */\n  createSource: (fallback: SkillSource, fallbackSkillRoots: string[]) => SkillSource;\n}\n\n/**\n * Paths the agent is always allowed to access (in addition to the project root\n * and any per-thread sandboxAllowedPaths). The OS temp directory is included\n * so the agent can use it as a scratchpad without requesting access every time.\n */\nconst DEFAULT_ALLOWED_PATHS: string[] = [os.tmpdir(), '/tmp', getPlansDir()].reduce<string[]>((acc, p) => {\n  const resolved = path.resolve(p);\n  if (!acc.includes(resolved)) acc.push(resolved);\n  return acc;\n}, []);\n\nconst WORKSPACE_ID_PREFIX = 'mastra-code-workspace';\n\n/**\n * Detect the project's package runner from lock files.\n * Used as a fallback packageRunner for LSP when no binary is found locally or on PATH.\n */\nfunction detectPackageRunner(projectPath: string): string | undefined {\n  if (existsSync(join(projectPath, 'pnpm-lock.yaml'))) return 'pnpm dlx';\n  if (existsSync(join(projectPath, 'bun.lockb')) || existsSync(join(projectPath, 'bun.lock'))) return 'bunx';\n  if (existsSync(join(projectPath, 'yarn.lock'))) return 'yarn dlx';\n  if (existsSync(join(projectPath, 'package-lock.json'))) return 'npx --yes';\n  return 'npx --yes';\n}\n\n/**\n * Build (or reuse) a sandbox-backed Workspace for a linked project repository. The sandbox\n * is reattached by its persisted provider id and a `SandboxFilesystem` is layered\n * over the in-sandbox checkout so file tools and command tools share one VM.\n */\nasync function getSandboxWorkspace({\n  projectRepositoryId,\n  sandboxId,\n  workdir,\n  worktreePath,\n  configDir,\n  mastra,\n  skillExtension,\n}: {\n  projectRepositoryId: string;\n  sandboxId: string;\n  workdir: string;\n  worktreePath?: string;\n  configDir: string;\n  mastra?: Mastra;\n  skillExtension?: WorkspaceSkillExtension;\n}): Promise<Workspace> {\n  // Bind the workspace to the active worktree when one is set, so file tools and\n  // command tools operate inside the feature branch's working tree rather than\n  // the base checkout. Falls back to the repo root when no worktree is active.\n  const boundWorkdir = worktreePath || workdir;\n\n  // Include the sandbox id *and* worktree path in the reuse key: a new sandbox\n  // (e.g. the previous one expired) or a different worktree must each get a\n  // fresh Workspace/ProcessManager instead of reusing one bound to a stale\n  // sandbox or the wrong working tree.\n  const extensionId = skillExtension ? `-${skillExtension.id}` : '';\n  const workspaceId = `${WORKSPACE_ID_PREFIX}-repository-${projectRepositoryId}-${sandboxId}-${boundWorkdir}${extensionId}`;\n\n  // Reuse the existing remote workspace if already registered (preserves the\n  // reattached sandbox + ProcessManager state across re-opens).\n  try {\n    const existing = mastra?.getWorkspaceById(workspaceId) as Workspace | undefined;\n    if (existing) {\n      existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);\n      return existing;\n    }\n  } catch {\n    // Not registered yet.\n  }\n\n  const sandbox = await reattachProjectSandbox(sandboxId);\n  const filesystem = new SandboxFilesystem({ sandbox, workdir: boundWorkdir });\n  const projectSkillPaths = [path.join(configDir, 'skills'), '.claude/skills', '.agents/skills'];\n  const skillPaths = [...(skillExtension?.paths ?? []), ...projectSkillPaths];\n\n  return new Workspace({\n    id: workspaceId,\n    name: 'Mastra Code Sandbox Workspace',\n    filesystem,\n    sandbox: sandbox as unknown as ConstructorParameters<typeof Workspace>[0]['sandbox'],\n    tools: MASTRACODE_WORKSPACE_TOOLS,\n    skills: skillPaths,\n    skillSource: skillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem,\n  });\n}\n\nexport async function getDynamicWorkspace({\n  requestContext,\n  mastra,\n  skillExtension,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n  skillExtension?: WorkspaceSkillExtension;\n}) {\n  const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const state = ctx?.getState();\n\n  // Repository-backed project: the repo lives inside a remote sandbox, not on\n  // the server host. Reattach to the already-provisioned + materialized sandbox\n  // and build a sandbox-backed Workspace. Optional embedders may add read-only\n  // skill roots while project skills remain sandbox-backed.\n  if (state?.projectRepositoryId && state.sandboxId && state.sandboxWorkdir) {\n    return getSandboxWorkspace({\n      projectRepositoryId: state.projectRepositoryId,\n      sandboxId: state.sandboxId,\n      workdir: state.sandboxWorkdir,\n      worktreePath: state.worktreePath,\n      configDir: state.configDir ?? DEFAULT_CONFIG_DIR,\n      mastra,\n      skillExtension,\n    });\n  }\n\n  const rawProjectPath = state?.projectPath;\n\n  if (!rawProjectPath) {\n    throw new Error('Project path is required');\n  }\n\n  const projectPath = path.resolve(rawProjectPath);\n  const configDir = state?.configDir ?? DEFAULT_CONFIG_DIR;\n  const projectSkillPaths = buildSkillPaths(projectPath, configDir, state?.homeDir, state?.pluginSkillPaths ?? []);\n  const skillPaths = [...(skillExtension?.paths ?? []), ...projectSkillPaths];\n  const extensionId = skillExtension ? `-${skillExtension.id}` : '';\n  const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;\n  const sandboxPaths = state?.sandboxAllowedPaths ?? [];\n  const allowedPaths = [\n    ...projectSkillPaths,\n    ...DEFAULT_ALLOWED_PATHS,\n    ...sandboxPaths.map((p: string) => path.resolve(p)),\n  ];\n\n  // All modes share the same workspace tool configuration.  Per-mode tool\n  // visibility is enforced at LLM-call time via `availableTools` /\n  // `activeTools` on the AgentController, not by mutating workspace capabilities.\n  const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;\n\n  // Reuse existing workspace if already registered (preserves ProcessManager state)\n  let existing: Workspace<LocalFilesystem, LocalSandbox> | undefined;\n  try {\n    existing = mastra?.getWorkspaceById(workspaceId) as Workspace<LocalFilesystem, LocalSandbox>;\n  } catch {\n    // Not registered yet\n  }\n\n  if (existing) {\n    existing.filesystem.setAllowedPaths(allowedPaths);\n    existing.setToolsConfig(workspaceTools);\n    return existing;\n  }\n\n  const userLsp = loadSettings().lsp ?? {};\n  const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), '..');\n  const lspConfig: LSPConfig = {\n    ...userLsp,\n    packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath), // Detected runner is the fallback — user's packageRunner always wins\n    searchPaths: [mcModulePath, ...(userLsp.searchPaths ?? [])],\n  };\n\n  // First call for this project — create the workspace\n  const filesystem = new LocalFilesystem({\n    basePath: projectPath,\n    allowedPaths,\n  });\n  return new Workspace({\n    id: workspaceId,\n    name: 'Mastra Code Workspace',\n    filesystem,\n    sandbox: new LocalSandbox({\n      workingDirectory: projectPath,\n      env: buildSandboxEnv(),\n    }),\n    tools: workspaceTools,\n    skills: skillPaths,\n    ...(skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {}),\n    lsp: lspConfig,\n  });\n}\n\n/**\n * Resolver for the agent's `goal.tools` config. Builds the request's workspace\n * (same per-request resolution as the agent's own tools) and returns only the\n * read-only verification subset, remapped to mastracode's tool names (`view`,\n * `search_content`, etc.). Returns `undefined` when no workspace can be resolved\n * (e.g. no project path), keeping the default judge text-only rather than\n * throwing inside the goal step.\n */\nexport async function getGoalJudgeTools({\n  requestContext,\n  mastra,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n}): Promise<ToolsInput | undefined> {\n  let workspace: Workspace;\n  try {\n    workspace = await getDynamicWorkspace({ requestContext, mastra });\n  } catch {\n    return undefined;\n  }\n\n  const allTools = await createWorkspaceTools(workspace, { requestContext, workspace });\n  const readonly: ToolsInput = {};\n  for (const name of GOAL_JUDGE_READONLY_TOOLS) {\n    if (allTools[name]) readonly[name] = allTools[name];\n  }\n  return Object.keys(readonly).length > 0 ? readonly : undefined;\n}\n"],"mappings":";;;;;;;;;;;;;AAuBA,SAAS,kBAAqC;CAC5C,OAAO;EACL,GAAG,QAAQ;EAEX,aAAa;EACb,gBAAgB;EAChB,MAAM,QAAQ,IAAI,QAAQ;EAC1B,IAAI;EACJ,gBAAgB;EAChB,iBAAiB;CACnB;AACF;AAkBA,SAAS,kBAAkB,YAAsB,aAAgC;CAC/E,MAAM,QAAkB,CAAC;CACzB,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI;CAEJ,IAAI,aACF,IAAI;EACF,kBAAkB,GAAG,aAAa,WAAW;CAC/C,QAAQ;EACN,OAAO,CAAC;CACV;CAGF,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,kBAAkB,GAAG,WAAW,SAAS;EAC/C,IAAI,mBAAmB,iBACrB,IAAI;GAEF,IAAI,CAAC,iBADiB,GAAG,aAAa,SACJ,GAAG,eAAe,GAAG;EACzD,QAAQ;GACN;EACF;EAGF,MAAM,WAAW,KAAK,QAAQ,SAAS;EACvC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG;GACvB,KAAK,IAAI,QAAQ;GACjB,MAAM,KAAK,SAAS;EACtB;EAEA,IAAI,CAAC,iBAAiB;EAEtB,IAAI;GACF,MAAM,UAAU,GAAG,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC;GACjE,KAAK,MAAM,SAAS,SAClB,IAAI,MAAM,eAAe,GACvB,IAAI;IACF,MAAM,WAAW,KAAK,KAAK,WAAW,MAAM,IAAI;IAChD,MAAM,WAAW,GAAG,aAAa,QAAQ;IACzC,IAAI,mBAAmB,CAAC,iBAAiB,UAAU,eAAe,GAAG;IAErE,IADa,GAAG,SAAS,QAClB,CAAC,CAAC,YAAY,GAAG;KACtB,MAAM,aAAa,KAAK,QAAQ,QAAQ;KACxC,IAAI,mBAAmB,CAAC,iBAAiB,YAAY,eAAe,GAAG;KACvE,IAAI,CAAC,KAAK,IAAI,UAAU,GAAG;MACzB,KAAK,IAAI,UAAU;MACnB,MAAM,KAAK,UAAU;KACvB;IACF;GACF,QAAQ;IACN;GACF;EAGN,QAAQ,CAER;CACF;CAEA,OAAO;AACT;AAGA,SAAgB,gBACd,aACA,WACA,UAAU,GAAG,QAAQ,GACrB,mBAA6B,CAAC,GACpB;CACV,MAAM,4BAA4B,KAAK,KAAK,aAAa,WAAW,QAAQ;CAC5E,MAAM,wBAAwB,KAAK,KAAK,aAAa,WAAW,QAAQ;CACxE,MAAM,uBAAuB,KAAK,KAAK,aAAa,WAAW,QAAQ;CACvE,MAAM,6BAA6B,KAAK,KAAK,SAAS,WAAW,QAAQ;CACzE,MAAM,yBAAyB,KAAK,KAAK,SAAS,WAAW,QAAQ;CACrE,MAAM,wBAAwB,KAAK,KAAK,SAAS,WAAW,QAAQ;CAEpE,MAAM,QAAQ;EACZ,GAAG,kBAAkB;GAAC;GAA2B;GAAuB;EAAoB,GAAG,WAAW;EAC1G,GAAG,kBAAkB;GAAC;GAA4B;GAAwB;EAAqB,CAAC;EAChG,GAAG,iBAAiB,SAAQ,oBAAmB,kBAAkB,CAAC,eAAe,GAAG,eAAe,CAAC;CACtG;CAEA,MAAM,4BAAY,IAAI,IAAY;CAClC,OAAO,MAAM,QAAO,cAAa;EAC/B,IAAI;EACJ,IAAI;GACF,WAAW,GAAG,aAAa,SAAS;EACtC,QAAQ;GACN,WAAW,KAAK,QAAQ,SAAS;EACnC;EACA,IAAI,UAAU,IAAI,QAAQ,GAAG,OAAO;EACpC,UAAU,IAAI,QAAQ;EACtB,OAAO;CACT,CAAC;AACH;;;;;;AAgBA,MAAM,wBAAkC;CAAC,GAAG,OAAO;CAAG;CAAQ,YAAY;AAAC,CAAC,CAAC,QAAkB,KAAK,MAAM;CACxG,MAAM,WAAW,KAAK,QAAQ,CAAC;CAC/B,IAAI,CAAC,IAAI,SAAS,QAAQ,GAAG,IAAI,KAAK,QAAQ;CAC9C,OAAO;AACT,GAAG,CAAC,CAAC;AAEL,MAAM,sBAAsB;;;;;AAM5B,SAAS,oBAAoB,aAAyC;CACpE,IAAI,WAAW,KAAK,aAAa,gBAAgB,CAAC,GAAG,OAAO;CAC5D,IAAI,WAAW,KAAK,aAAa,WAAW,CAAC,KAAK,WAAW,KAAK,aAAa,UAAU,CAAC,GAAG,OAAO;CACpG,IAAI,WAAW,KAAK,aAAa,WAAW,CAAC,GAAG,OAAO;CACvD,IAAI,WAAW,KAAK,aAAa,mBAAmB,CAAC,GAAG,OAAO;CAC/D,OAAO;AACT;;;;;;AAOA,eAAe,oBAAoB,EACjC,qBACA,WACA,SACA,cACA,WACA,QACA,kBASqB;CAIrB,MAAM,eAAe,gBAAgB;CAMrC,MAAM,cAAc,iBAAiB,IAAI,eAAe,OAAO;CAC/D,MAAM,cAAc,GAAG,oBAAoB,cAAc,oBAAoB,GAAG,UAAU,GAAG,eAAe;CAI5G,IAAI;EACF,MAAM,WAAW,QAAQ,iBAAiB,WAAW;EACrD,IAAI,UAAU;GACZ,SAAS,eAAe,0BAA0B;GAClD,OAAO;EACT;CACF,QAAQ,CAER;CAEA,MAAM,UAAU,MAAM,uBAAuB,SAAS;CACtD,MAAM,aAAa,IAAI,kBAAkB;EAAE;EAAS,SAAS;CAAa,CAAC;CAC3E,MAAM,oBAAoB;EAAC,KAAK,KAAK,WAAW,QAAQ;EAAG;EAAkB;CAAgB;CAG7F,OAAO,IAAI,UAAU;EACnB,IAAI;EACJ,MAAM;EACN;EACS;EACT,OAAO;EACP,QAAQ,CARU,GAAI,gBAAgB,SAAS,CAAC,GAAI,GAAG,iBAQtC;EACjB,aAAa,gBAAgB,aAAa,YAAY,iBAAiB,KAAK;CAC9E,CAAC;AACH;AAEA,eAAsB,oBAAoB,EACxC,gBACA,QACA,kBAKC;CAED,MAAM,QADM,eAAe,IAAI,YACf,CAAC,EAAE,SAAS;CAM5B,IAAI,OAAO,uBAAuB,MAAM,aAAa,MAAM,gBACzD,OAAO,oBAAoB;EACzB,qBAAqB,MAAM;EAC3B,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,cAAc,MAAM;EACpB,WAAW,MAAM,aAAA;EACjB;EACA;CACF,CAAC;CAGH,MAAM,iBAAiB,OAAO;CAE9B,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,0BAA0B;CAG5C,MAAM,cAAc,KAAK,QAAQ,cAAc;CAE/C,MAAM,oBAAoB,gBAAgB,aADxB,OAAO,aAAA,eACyC,OAAO,SAAS,OAAO,oBAAoB,CAAC,CAAC;CAC/G,MAAM,aAAa,CAAC,GAAI,gBAAgB,SAAS,CAAC,GAAI,GAAG,iBAAiB;CAC1E,MAAM,cAAc,iBAAiB,IAAI,eAAe,OAAO;CAC/D,MAAM,cAAc,GAAG,oBAAoB,GAAG,cAAc;CAC5D,MAAM,eAAe,OAAO,uBAAuB,CAAC;CACpD,MAAM,eAAe;EACnB,GAAG;EACH,GAAG;EACH,GAAG,aAAa,KAAK,MAAc,KAAK,QAAQ,CAAC,CAAC;CACpD;CAKA,MAAM,iBAAiB;CAGvB,IAAI;CACJ,IAAI;EACF,WAAW,QAAQ,iBAAiB,WAAW;CACjD,QAAQ,CAER;CAEA,IAAI,UAAU;EACZ,SAAS,WAAW,gBAAgB,YAAY;EAChD,SAAS,eAAe,cAAc;EACtC,OAAO;CACT;CAEA,MAAM,UAAU,aAAa,CAAC,CAAC,OAAO,CAAC;CACvC,MAAM,eAAe,KAAK,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC,GAAG,IAAI;CACvE,MAAM,YAAuB;EAC3B,GAAG;EACH,eAAe,QAAQ,iBAAiB,oBAAoB,WAAW;EACvE,aAAa,CAAC,cAAc,GAAI,QAAQ,eAAe,CAAC,CAAE;CAC5D;CAGA,MAAM,aAAa,IAAI,gBAAgB;EACrC,UAAU;EACV;CACF,CAAC;CACD,OAAO,IAAI,UAAU;EACnB,IAAI;EACJ,MAAM;EACN;EACA,SAAS,IAAI,aAAa;GACxB,kBAAkB;GAClB,KAAK,gBAAgB;EACvB,CAAC;EACD,OAAO;EACP,QAAQ;EACR,GAAI,iBAAiB,EAAE,aAAa,eAAe,aAAa,YAAY,iBAAiB,EAAE,IAAI,CAAC;EACpG,KAAK;CACP,CAAC;AACH;;;;;;;;;AAUA,eAAsB,kBAAkB,EACtC,gBACA,UAIkC;CAClC,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,oBAAoB;GAAE;GAAgB;EAAO,CAAC;CAClE,QAAQ;EACN;CACF;CAEA,MAAM,WAAW,MAAM,qBAAqB,WAAW;EAAE;EAAgB;CAAU,CAAC;CACpF,MAAM,WAAuB,CAAC;CAC9B,KAAK,MAAM,QAAQ,2BACjB,IAAI,SAAS,OAAO,SAAS,QAAQ,SAAS;CAEhD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAAI,WAAW,KAAA;AACvD"}