@nifrajs/coding-agent 3.2.0

package/dist/index.js

@@ -0,0 +1,26 @@
+export { PiBackend } from "@nifrajs/pi";
+export { ApprovalManager, approvalRequestFromEvent, approvalResolvedEvent, } from "./approvals.js";
+export { AGENT_CAPABILITY_MANIFEST_VERSION, createCapabilityManifest, deniedCapabilities, parseCapabilityManifest, } from "./capabilities.js";
+export { runNifraContext, } from "./context.js";
+export { CiDeploymentAdapter, createCiDeploymentAdapter, createLocalProcessDeploymentAdapter, createReplayDeploymentAdapter, DEPLOYMENT_REFERENCE_PROFILES, LocalProcessDeploymentAdapter, ReplayDeploymentAdapter, } from "./deployment-adapters.js";
+export { readProjectDiff } from "./diff.js";
+export { discoverExtensions, ExtensionHost, validateExtensionModule, } from "./extensions.js";
+export { HandoffCoordinator, HandoffError, } from "./handoffs.js";
+export { SelfHealingController, } from "./healing.js";
+export { CodingAgentHost } from "./host.js";
+export { IsolatedExtensionWorker, } from "./isolated.js";
+export { createNativeGatewayModelPort, NifraBackend, } from "./native.js";
+export { PlanRunner, } from "./plans.js";
+export { AGENT_PRESETS, createPresetSpec, getAgentPreset, } from "./presets.js";
+export { readBoundedText } from "./process.js";
+export { extensionDescriptor, extensionDescriptors, } from "./registry.js";
+export { ReplayBackend, readReplayEvents } from "./replay.js";
+export { CodingAgentRpcServer, } from "./rpc.js";
+export { migrateLegacySession, parseSessionEvidenceRecord, SESSION_EVIDENCE_VERSION, SessionMigrationError, stableSessionEventCode, } from "./session-migration.js";
+export { ContextWindow, FileSessionStore, } from "./sessions.js";
+export { BoundedSubagentRunner, } from "./subagents.js";
+export { createNifraTools, NIFRA_AGENT_INSTRUCTIONS } from "./tools.js";
+export { UiExtensionHost, } from "./ui.js";
+export { createVerificationRepairTask, runNifraVerification, } from "./verification.js";
+export { WorkflowRunner, } from "./workflows.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,aAAa,CAAA;AAC9D,OAAO,EAEL,eAAe,EAKf,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,iCAAiC,EAGjC,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAGL,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,mCAAmC,EACnC,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAmD,eAAe,EAAE,MAAM,WAAW,CAAA;AAC5F,OAAO,EAEL,kBAAkB,EAIlB,aAAa,EAMb,uBAAuB,GACxB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,kBAAkB,EAGlB,YAAY,GAIb,MAAM,eAAe,CAAA;AACtB,OAAO,EAKL,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,eAAe,EAA+B,MAAM,WAAW,CAAA;AACxE,OAAO,EAGL,uBAAuB,GAExB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,4BAA4B,EAS5B,YAAY,GAEb,MAAM,aAAa,CAAA;AACpB,OAAO,EAKL,UAAU,GAEX,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,aAAa,EAGb,gBAAgB,EAChB,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EAAoB,eAAe,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAIL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,aAAa,EAA6B,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACxF,OAAO,EACL,oBAAoB,GAGrB,MAAM,UAAU,CAAA;AACjB,OAAO,EAEL,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EAExB,qBAAqB,EAErB,sBAAsB,GACvB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAGL,aAAa,EAEb,gBAAgB,GAIjB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,qBAAqB,GAKtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAuB,MAAM,YAAY,CAAA;AAC5F,OAAO,EACL,eAAe,GAOhB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GAIrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAIL,cAAc,GAGf,MAAM,gBAAgB,CAAA"}

package/dist/isolated-worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=isolated-worker.d.ts.map

package/dist/isolated-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-worker.d.ts","sourceRoot":"","sources":["../src/isolated-worker.ts"],"names":[],"mappings":""}

package/dist/isolated-worker.js

@@ -0,0 +1,155 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { realpathSync } from "node:fs";
+import { publicErrorDetails } from "./errors.js";
+import { readBoundedText } from "./process.js";
+const modulePath = process.argv[2];
+const cwd = process.argv[3];
+if (modulePath === undefined || cwd === undefined)
+    throw new Error("isolated extension worker: modulePath and cwd are required");
+const token = process.env.NIFRA_EXTENSION_TOKEN;
+const maxMessageBytes = Number(process.env.NIFRA_EXTENSION_MAX_MESSAGE_BYTES);
+const exposeErrorStacks = process.env.NIFRA_EXTENSION_EXPOSE_ERROR_STACKS === "1";
+if (token === undefined ||
+    token.length < 32 ||
+    !Number.isSafeInteger(maxMessageBytes) ||
+    maxMessageBytes < 1024) {
+    post({ type: "fatal", error: "isolated extension worker: invalid control configuration" });
+    process.exit(1);
+}
+const tools = new Map();
+let ready = false;
+const context = {
+    cwd,
+    registerCommand(name) {
+        post({ type: "command", name });
+    },
+    registerTool(tool) {
+        tools.set(tool.name, tool);
+        post({
+            type: "registration",
+            name: tool.name,
+            description: tool.description,
+            capabilities: tool.capabilities ?? [],
+        });
+    },
+    registerWorkflow(name) {
+        post({ type: "workflow", name });
+    },
+    registerSubagent(role) {
+        post({ type: "subagent", name: role.name });
+    },
+    registerProvider(provider) {
+        post({ type: "provider", name: provider.name });
+    },
+    on(event) {
+        post({ type: "event", name: event });
+    },
+};
+let server;
+try {
+    // Bind only to loopback and require the per-worker token. The endpoint is a transport seam, not
+    // a security boundary: the extension already executes inside this process by design.
+    server = Bun.serve({
+        hostname: "127.0.0.1",
+        port: 0,
+        async fetch(request) {
+            if (request.method !== "POST" || new URL(request.url).pathname !== "/invoke")
+                return new Response("", { status: 404 });
+            if (request.headers.get("authorization") !== `Bearer ${token}`)
+                return new Response("", { status: 401 });
+            const body = await readBoundedText(request.body, maxMessageBytes);
+            if (body.truncated)
+                return new Response("", { status: 413 });
+            let message;
+            try {
+                message = JSON.parse(body.text);
+            }
+            catch {
+                return new Response("", { status: 400 });
+            }
+            if (!isWorkerRequest(message) || message.type !== "invoke")
+                return new Response("", { status: 400 });
+            if (!ready)
+                return new Response("", { status: 503 });
+            const result = await handle(message);
+            return result === undefined ? new Response("", { status: 400 }) : jsonResponse(result);
+        },
+    });
+    const module = (await import(__rewriteRelativeImportExtension(`${realpathSync(modulePath)}?isolated=${Date.now()}`)));
+    if (typeof module.default !== "function")
+        throw new Error("extension has no default factory");
+    await module.default(context);
+    post({ type: "ready", port: server.port });
+    ready = true;
+}
+catch (error) {
+    server?.stop();
+    const details = publicErrorDetails(error, "isolated extension worker failed to start", exposeErrorStacks);
+    post({
+        type: "fatal",
+        error: details.message,
+        ...(details.stack === undefined ? {} : { stack: details.stack }),
+    });
+    process.exit(1);
+}
+async function handle(request) {
+    if (request.type === "shutdown") {
+        server?.stop();
+        process.exit(0);
+        return undefined;
+    }
+    if (request.type !== "invoke" ||
+        typeof request.id !== "string" ||
+        typeof request.name !== "string")
+        return undefined;
+    const tool = tools.get(request.name);
+    if (tool === undefined) {
+        return { type: "result", id: request.id, error: `unknown tool: ${request.name}` };
+    }
+    try {
+        const output = await tool.execute(request.input, context);
+        return { type: "result", id: request.id, output };
+    }
+    catch (error) {
+        const details = publicErrorDetails(error, "tool execution failed", exposeErrorStacks);
+        return {
+            type: "result",
+            id: request.id,
+            error: details.message,
+            ...(details.stack === undefined ? {} : { stack: details.stack }),
+        };
+    }
+}
+function isWorkerRequest(message) {
+    return message !== null && typeof message === "object" && !Array.isArray(message);
+}
+function jsonResponse(message) {
+    let text;
+    try {
+        text = JSON.stringify(message, exposeErrorStacks
+            ? undefined
+            : (key, nested) => (key === "stack" ? undefined : nested));
+    }
+    catch {
+        text = JSON.stringify({ type: "result", id: message.id, error: "tool output is not JSON-safe" });
+    }
+    if (Buffer.byteLength(text, "utf8") > maxMessageBytes)
+        text = JSON.stringify({ type: "result", id: message.id, error: "tool output is too large" });
+    // lgtm [js/stack-trace-exposure] stacks are emitted only when the parent explicitly enables local
+    // diagnostics; the default protocol response contains only the bounded public message.
+    return new Response(text, {
+        status: 200,
+        headers: { "content-type": "application/json" },
+    });
+}
+function post(message) {
+    process.stdout.write(`${JSON.stringify(message)}\n`);
+}
+//# sourceMappingURL=isolated-worker.js.map

package/dist/isolated-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-worker.js","sourceRoot":"","sources":["../src/isolated-worker.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAClC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC3B,IAAI,UAAU,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;IAC/C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;AAE/E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;AAC/C,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;AAC7E,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,GAAG,CAAA;AACjF,IACE,KAAK,KAAK,SAAS;IACnB,KAAK,CAAC,MAAM,GAAG,EAAE;IACjB,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;IACtC,eAAe,GAAG,IAAI,EACtB,CAAC;IACD,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,0DAA0D,EAAE,CAAC,CAAA;IAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;AAC9C,IAAI,KAAK,GAAG,KAAK,CAAA;AAgBjB,MAAM,OAAO,GAAqB;IAChC,GAAG;IACH,eAAe,CAAC,IAAI;QAClB,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,CAAC;IACD,YAAY,CAAC,IAAI;QACf,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1B,IAAI,CAAC;YACH,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;SACtC,CAAC,CAAA;IACJ,CAAC;IACD,gBAAgB,CAAC,IAAI;QACnB,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC;IACD,gBAAgB,CAAC,IAAI;QACnB,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7C,CAAC;IACD,gBAAgB,CAAC,QAAQ;QACvB,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,EAAE,CAAC,KAAK;QACN,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtC,CAAC;CACF,CAAA;AAED,IAAI,MAAgD,CAAA;AAEpD,IAAI,CAAC;IACH,gGAAgG;IAChG,qFAAqF;IACrF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;QACjB,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,CAAC;QACP,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1E,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1C,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,UAAU,KAAK,EAAE;gBAC5D,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1C,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;YACjE,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC5D,IAAI,OAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1C,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBACxD,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACxF,CAAC;KACF,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,kCAAC,GAAG,YAAY,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,EAAC,CAEjF,CAAA;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAC7F,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1C,KAAK,GAAG,IAAI,CAAA;AACd,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,EAAE,IAAI,EAAE,CAAA;IACd,MAAM,OAAO,GAAG,kBAAkB,CAChC,KAAK,EACL,2CAA2C,EAC3C,iBAAiB,CAClB,CAAA;IACD,IAAI,CAAC;QACH,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO,CAAC,OAAO;QACtB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC,CAAA;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAsB;IAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,EAAE,IAAI,EAAE,CAAA;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACf,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ;QACzB,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;QAC9B,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAEhC,OAAO,SAAS,CAAA;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,iBAAiB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;IACnF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,CAAC,CAAA;QACrF,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,OAAqB;IACzC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CACnB,OAAO,EACP,iBAAiB;YACf,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,GAAW,EAAE,MAAe,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAC7E,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,eAAe;QACnD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAA;IAC9F,kGAAkG;IAClG,uFAAuF;IACvF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,OAAgC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AACtD,CAAC"}

package/dist/isolated.d.ts

@@ -0,0 +1,52 @@
+export interface IsolatedExtensionWorkerOptions {
+    readonly modulePath: string;
+    readonly cwd: string;
+    readonly timeoutMs?: number;
+    readonly maxMessageBytes?: number;
+    /** Include bounded worker exception stacks for trusted local debugging. */
+    readonly exposeErrorStacks?: boolean;
+    readonly trustedCapabilities?: readonly string[];
+}
+export interface IsolatedExtensionTool {
+    readonly name: string;
+    readonly description: string;
+    readonly capabilities: readonly string[];
+}
+export interface IsolatedExtensionSnapshot {
+    readonly tools: readonly IsolatedExtensionTool[];
+    readonly commands: readonly string[];
+    readonly events: readonly string[];
+}
+/**
+ * Optional process-backed extension runner. A worker crash rejects callers instead of taking down
+ * the host. It is intentionally not advertised as a hostile-code sandbox: use an OS sandbox and a
+ * capability decision before loading code you do not trust.
+ */
+export declare class IsolatedExtensionWorker {
+    private readonly options;
+    private process;
+    private readonly pending;
+    private readonly tools;
+    private readonly commands;
+    private readonly events;
+    private buffer;
+    private readonly token;
+    private port;
+    private started;
+    private closed;
+    private readyResolve;
+    private readyReject;
+    private readonly ready;
+    constructor(options: IsolatedExtensionWorkerOptions);
+    start(): Promise<IsolatedExtensionSnapshot>;
+    get snapshot(): IsolatedExtensionSnapshot;
+    invokeTool(name: string, input: unknown): Promise<unknown>;
+    close(): Promise<void>;
+    private sendInvoke;
+    private readOutput;
+    private readErrors;
+    private consume;
+    private handle;
+    private fail;
+}
+//# sourceMappingURL=isolated.d.ts.map

package/dist/isolated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated.d.ts","sourceRoot":"","sources":["../src/isolated.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACjD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAwBD;;;;GAIG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGQ;IAChC,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2C;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,YAAY,CAA6D;IACjF,OAAO,CAAC,WAAW,CAA0C;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGpB;gBAEU,OAAO,EAAE,8BAA8B;IAuB7C,KAAK,IAAI,OAAO,CAAC,yBAAyB,CAAC;IA8BjD,IAAI,QAAQ,IAAI,yBAAyB,CAMxC;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAQd,UAAU;YAyCV,UAAU;YAmBV,UAAU;IAMxB,OAAO,CAAC,OAAO;IAuBf,OAAO,CAAC,MAAM;IAkDd,OAAO,CAAC,IAAI;CAWb"}

package/dist/isolated.js

@@ -0,0 +1,293 @@
+import { realpathSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { readBoundedText } from "./process.js";
+/**
+ * Optional process-backed extension runner. A worker crash rejects callers instead of taking down
+ * the host. It is intentionally not advertised as a hostile-code sandbox: use an OS sandbox and a
+ * capability decision before loading code you do not trust.
+ */
+export class IsolatedExtensionWorker {
+    options;
+    process;
+    pending = new Map();
+    tools = new Map();
+    commands = new Set();
+    events = new Set();
+    buffer = "";
+    token;
+    port;
+    started = false;
+    closed = false;
+    readyResolve;
+    readyReject;
+    ready = new Promise((resolveReady, rejectReady) => {
+        this.readyResolve = resolveReady;
+        this.readyReject = rejectReady;
+    });
+    constructor(options) {
+        this.options = {
+            ...options,
+            timeoutMs: options.timeoutMs ?? 30_000,
+            maxMessageBytes: options.maxMessageBytes ?? 256 * 1024,
+        };
+        this.token = crypto.randomUUID().replaceAll("-", "");
+        if (!isAbsolute(options.modulePath))
+            throw new TypeError("isolated extension: modulePath must be absolute");
+        if (!isAbsolute(options.cwd))
+            throw new TypeError("isolated extension: cwd must be absolute");
+        if (!Number.isSafeInteger(this.options.timeoutMs) ||
+            this.options.timeoutMs < 1 ||
+            this.options.timeoutMs > 24 * 60 * 60_000)
+            throw new RangeError("isolated extension: timeoutMs is invalid");
+        if (!Number.isSafeInteger(this.options.maxMessageBytes) || this.options.maxMessageBytes < 1024)
+            throw new RangeError("isolated extension: maxMessageBytes must be at least 1024");
+        const modulePath = realpathSync(options.modulePath);
+        if (!isWithin(options.cwd, modulePath))
+            throw new Error("isolated extension: module escapes cwd");
+    }
+    async start() {
+        if (this.started)
+            return this.ready;
+        this.started = true;
+        const workerPath = fileURLToPath(new URL("./isolated-worker.ts", import.meta.url));
+        // Bun 1.4's Windows child IPC can start the worker but drop parent→child messages. The
+        // loopback endpoint keeps the command channel cross-platform without exposing it remotely.
+        this.process = Bun.spawn([process.execPath, workerPath, realpathSync(this.options.modulePath), this.options.cwd], {
+            cwd: this.options.cwd,
+            env: {
+                ...filteredEnv(),
+                NIFRA_EXTENSION_TOKEN: this.token,
+                NIFRA_EXTENSION_MAX_MESSAGE_BYTES: String(this.options.maxMessageBytes),
+                NIFRA_EXTENSION_EXPOSE_ERROR_STACKS: this.options.exposeErrorStacks === true ? "1" : "0",
+            },
+            stdin: "ignore",
+            stdout: "pipe",
+            stderr: "pipe",
+        });
+        void this.readOutput();
+        void this.readErrors();
+        void this.process.exited.then((status) => {
+            if (!this.closed && status !== 0)
+                this.fail(new Error(`isolated extension worker exited with code ${status}`));
+        });
+        return this.ready;
+    }
+    get snapshot() {
+        return Object.freeze({
+            tools: Object.freeze([...this.tools.values()]),
+            commands: Object.freeze([...this.commands].sort()),
+            events: Object.freeze([...this.events].sort()),
+        });
+    }
+    async invokeTool(name, input) {
+        await this.start();
+        if (!this.tools.has(name))
+            throw new Error(`isolated extension: unknown tool ${name}`);
+        const id = crypto.randomUUID().replaceAll("-", "");
+        const abort = new AbortController();
+        const result = new Promise((resolveResult, rejectResult) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                abort.abort();
+                rejectResult(new Error(`isolated extension: tool ${name} timed out`));
+            }, this.options.timeoutMs);
+            timer.unref?.();
+            this.pending.set(id, { resolve: resolveResult, reject: rejectResult, timer, abort });
+        });
+        void this.sendInvoke(id, name, input, abort.signal).catch((error) => {
+            const pending = this.pending.get(id);
+            if (pending === undefined)
+                return;
+            clearTimeout(pending.timer);
+            this.pending.delete(id);
+            pending.reject(error);
+        });
+        return result;
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.fail(new Error("isolated extension worker closed"));
+        this.process?.kill();
+        await this.process?.exited;
+    }
+    async sendInvoke(id, name, input, signal) {
+        const port = this.port;
+        if (!isValidPort(port))
+            throw new Error("isolated extension: worker control endpoint unavailable");
+        const text = JSON.stringify({ type: "invoke", id, name, input });
+        if (Buffer.byteLength(text, "utf8") > this.options.maxMessageBytes)
+            throw new RangeError("isolated extension: message is too large");
+        const response = await fetch(`http://127.0.0.1:${port}/invoke`, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${this.token}`,
+                "content-type": "application/json",
+            },
+            body: text,
+            signal,
+        });
+        const body = await readBoundedText(response.body, this.options.maxMessageBytes);
+        if (body.truncated)
+            throw new Error("isolated extension: worker response exceeded limit");
+        if (!response.ok)
+            throw new Error(`isolated extension: worker request failed (${response.status})`);
+        let message;
+        try {
+            message = JSON.parse(body.text);
+        }
+        catch {
+            throw new Error("isolated extension: worker returned invalid JSON");
+        }
+        if (message.type !== "result" || message.id !== id)
+            throw new Error("isolated extension: worker returned an invalid result");
+        const pending = this.pending.get(id);
+        if (pending === undefined)
+            return;
+        clearTimeout(pending.timer);
+        this.pending.delete(id);
+        if (message.error !== undefined)
+            pending.reject(workerError(message));
+        else
+            pending.resolve(message.output);
+    }
+    async readOutput() {
+        const stdout = this.process?.stdout;
+        if (stdout === undefined || stdout === null || typeof stdout === "number")
+            return;
+        const reader = stdout.getReader();
+        const decoder = new TextDecoder();
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                if (value !== undefined)
+                    this.consume(decoder.decode(value, { stream: true }));
+            }
+            this.consume(decoder.decode());
+        }
+        catch (error) {
+            this.fail(error);
+        }
+        finally {
+            reader.releaseLock();
+        }
+    }
+    async readErrors() {
+        const stderr = this.process?.stderr;
+        if (stderr === undefined || stderr === null || typeof stderr === "number")
+            return;
+        await readBoundedText(stderr, this.options.maxMessageBytes).catch(() => { });
+    }
+    consume(text) {
+        this.buffer += text;
+        if (Buffer.byteLength(this.buffer, "utf8") > this.options.maxMessageBytes * 2) {
+            this.fail(new Error("isolated extension: worker output exceeded limit"));
+            return;
+        }
+        for (;;) {
+            const newline = this.buffer.indexOf("\n");
+            if (newline < 0)
+                return;
+            const line = this.buffer.slice(0, newline);
+            this.buffer = this.buffer.slice(newline + 1);
+            if (line.length === 0)
+                continue;
+            let message;
+            try {
+                message = JSON.parse(line);
+            }
+            catch {
+                this.fail(new Error("isolated extension: worker emitted invalid JSON"));
+                return;
+            }
+            this.handle(message);
+        }
+    }
+    handle(message) {
+        if (message.type === "ready") {
+            const port = message.port;
+            if (!isValidPort(port)) {
+                this.fail(new Error("isolated extension: worker control endpoint is invalid"));
+                this.process?.kill();
+                return;
+            }
+            this.port = port;
+            this.readyResolve?.(this.snapshot);
+            this.readyResolve = undefined;
+            this.readyReject = undefined;
+            return;
+        }
+        if (message.type === "registration") {
+            const denied = (message.capabilities ?? []).find((capability) => !(this.options.trustedCapabilities ?? []).includes(capability));
+            if (denied !== undefined) {
+                this.fail(new Error(`isolated extension: untrusted capability ${denied}`));
+                this.process?.kill();
+                return;
+            }
+            if (typeof message.name === "string")
+                this.tools.set(message.name, Object.freeze({
+                    name: message.name,
+                    description: message.description ?? "",
+                    capabilities: Object.freeze([...(message.capabilities ?? [])]),
+                }));
+            return;
+        }
+        if (message.type === "fatal") {
+            this.fail(workerError(message));
+            return;
+        }
+        if (message.type === "command" && typeof message.name === "string")
+            this.commands.add(message.name);
+        if (message.type === "event" && typeof message.name === "string")
+            this.events.add(message.name);
+        if (message.type !== "result" || typeof message.id !== "string")
+            return;
+        const pending = this.pending.get(message.id);
+        if (pending === undefined)
+            return;
+        clearTimeout(pending.timer);
+        this.pending.delete(message.id);
+        if (message.error !== undefined)
+            pending.reject(workerError(message));
+        else
+            pending.resolve(message.output);
+    }
+    fail(error) {
+        this.readyReject?.(error);
+        this.readyReject = undefined;
+        this.readyResolve = undefined;
+        for (const pending of this.pending.values()) {
+            clearTimeout(pending.timer);
+            pending.abort.abort();
+            pending.reject(error);
+        }
+        this.pending.clear();
+    }
+}
+function isWithin(root, candidate) {
+    const path = relative(resolve(root), resolve(candidate));
+    return path === "" || (!path.startsWith("..") && !path.includes("/.."));
+}
+function isValidPort(value) {
+    return Number.isSafeInteger(value) && value >= 1 && value <= 65_535;
+}
+function workerError(message) {
+    const error = new Error(message.error ?? "isolated extension worker failed");
+    if (message.stack !== undefined)
+        error.stack = message.stack;
+    return error;
+}
+function filteredEnv() {
+    const result = {};
+    for (const name of ["PATH", "HOME", "LANG", "LC_ALL", "TERM"]) {
+        const value = process.env[name];
+        if (value !== undefined)
+            result[name] = value;
+    }
+    return result;
+}
+//# sourceMappingURL=isolated.js.map

package/dist/isolated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated.js","sourceRoot":"","sources":["../src/isolated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AA8C9C;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACjB,OAAO,CAGQ;IACxB,OAAO,CAA4B;IAC1B,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IACxC,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAA;IAChD,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAC5B,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,GAAG,EAAE,CAAA;IACF,KAAK,CAAQ;IACtB,IAAI,CAAoB;IACxB,OAAO,GAAG,KAAK,CAAA;IACf,MAAM,GAAG,KAAK,CAAA;IACd,YAAY,CAA6D;IACzE,WAAW,CAA0C;IAC5C,KAAK,GAAG,IAAI,OAAO,CAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QAC5F,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,YAAY,OAAuC;QACjD,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,OAAO;YACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACtC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,GAAG,GAAG,IAAI;SACvD,CAAA;QACD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;QACxE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;QAC7F,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM;YAEzC,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,IAAI;YAC5F,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAA;QACnF,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAClF,uFAAuF;QACvF,2FAA2F;QAC3F,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CACtB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EACvF;YACE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,GAAG,EAAE;gBACH,GAAG,WAAW,EAAE;gBAChB,qBAAqB,EAAE,IAAI,CAAC,KAAK;gBACjC,iCAAiC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;gBACvE,mCAAmC,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACzF;YACD,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;SACf,CACF,CAAA;QACD,KAAK,IAAI,CAAC,UAAU,EAAE,CAAA;QACtB,KAAK,IAAI,CAAC,UAAU,EAAE,CAAA;QACtB,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC,CAAA;QAChF,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;SAC/C,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAc;QAC3C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAA;QACtF,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAClD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAU,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;YAClE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACvB,KAAK,CAAC,KAAK,EAAE,CAAA;gBACb,YAAY,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,YAAY,CAAC,CAAC,CAAA;YACvE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CACzB;YAAC,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAA;YACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QACF,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAM;YACjC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA;QACxD,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;QACpB,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAA;IAC5B,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,EAAU,EACV,IAAY,EACZ,KAAc,EACd,MAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAChE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe;YAChE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,SAAS,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI;YACV,MAAM;SACP,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC/E,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACzF,IAAI,CAAC,QAAQ,CAAC,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QACnF,IAAI,OAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAkB,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE;YAChD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAM;QACjC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;;YAChE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAA;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAM;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;QACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;QACjC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAChF,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAA;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAM;QACjF,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC7E,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAA;QACnB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAA;YACxE,OAAM;QACR,CAAC;QACD,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAM;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YAC/B,IAAI,OAAsB,CAAA;YAC1B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAA;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAA;gBACvE,OAAM;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,OAAsB;QACnC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;YACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC,CAAA;gBAC9E,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;gBACpB,OAAM;YACR,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAClC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;YAC7B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAC9C,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC/E,CAAA;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAC,CAAA;gBAC1E,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;gBACpB,OAAM;YACR,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,OAAO,CAAC,IAAI,EACZ,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;oBACtC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC/D,CAAC,CACH,CAAA;YACH,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;YAC/B,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/F,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAM;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC5C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAM;QACjC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;;YAChE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAC5B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;IACxD,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,IAAK,KAAgB,IAAI,MAAM,CAAA;AAC7F,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,kCAAkC,CAAC,CAAA;IAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC5D,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}