@oharness/engine 0.1.0

package/dist/agent/subagent.js

@@ -0,0 +1,138 @@
+import { userPath } from "../paths.js";
+import { readFile, readdir } from "node:fs/promises";
+import path from "node:path";
+import { splitFrontmatter } from "./skills.js";
+export const EXPLORE_AGENT = {
+    name: "explore",
+    description: "Read-only search across the codebase. Use when answering means sweeping many files and you only want the conclusion, not the file dumps.",
+    systemPrompt: `You are a read-only exploration agent. Search the codebase to answer the question you were given.
+
+You cannot modify anything, and the person who spawned you cannot ask follow-up questions — so answer completely in one message.
+
+Report concrete findings: file paths with line numbers, the actual code or configuration that matters, and a direct answer to what was asked. If you could not find something, say so plainly rather than guessing. Do not describe your search process.`,
+    tools: { allow: ["read", "list", "glob", "grep", "bash"], deny: ["write", "edit", "task"] },
+    maxTurns: 30,
+};
+export const GENERAL_AGENT = {
+    name: "general",
+    description: "General-purpose agent with the full tool set, for multi-step work that can be delegated wholesale.",
+    systemPrompt: `You are a subagent handling a delegated task. Complete it fully using the tools available.
+
+The person who spawned you cannot answer questions, so make reasonable decisions and state the assumptions you made. Your final message is the only thing they will see — put the outcome first, then whatever detail they need to act on it.`,
+    tools: { deny: ["task"] }, // one level of delegation only
+    maxTurns: 50,
+};
+export const BUILTIN_SUBAGENTS = [EXPLORE_AGENT, GENERAL_AGENT];
+export class SubagentRegistry {
+    agents = new Map();
+    constructor(definitions = BUILTIN_SUBAGENTS) {
+        for (const def of definitions)
+            this.register(def);
+    }
+    register(def) {
+        this.agents.set(def.name, def);
+        return this;
+    }
+    get(name) {
+        return this.agents.get(name);
+    }
+    list() {
+        return [...this.agents.values()];
+    }
+    summaries() {
+        return this.list().map(({ name, description }) => ({ name, description }));
+    }
+}
+// ---------------------------------------------------------------------------
+// Markdown-defined subagents
+// ---------------------------------------------------------------------------
+/**
+ * Load subagents from `agents/**‍/*.md`, the convention opencode uses:
+ * YAML frontmatter is the configuration, the body is the system prompt.
+ *
+ * A markdown file is a better home for a subagent than a JSON config field —
+ * the prompt is the bulk of the definition, and prompts do not survive being
+ * escaped into JSON strings with any readability.
+ */
+export async function loadMarkdownSubagents(cwd, extraDirs = []) {
+    const roots = [
+        userPath("agents"),
+        path.join(cwd, ".oharness", "agents"),
+        ...extraDirs.map((dir) => path.resolve(cwd, dir)),
+    ];
+    // Keyed by name so a project definition shadows a user one.
+    const byName = new Map();
+    for (const root of roots) {
+        for (const definition of await scanAgentDir(root)) {
+            byName.set(definition.name, definition);
+        }
+    }
+    return [...byName.values()];
+}
+async function scanAgentDir(root, prefix = "") {
+    let entries;
+    try {
+        entries = await readdir(root, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const entry of entries) {
+        const full = path.join(root, entry.name);
+        if (entry.isDirectory()) {
+            out.push(...(await scanAgentDir(full, prefix ? `${prefix}/${entry.name}` : entry.name)));
+            continue;
+        }
+        if (!entry.name.endsWith(".md"))
+            continue;
+        let raw;
+        try {
+            raw = await readFile(full, "utf8");
+        }
+        catch {
+            continue;
+        }
+        const parsed = parseAgentMarkdown(raw, entry.name.replace(/\.md$/, ""), prefix);
+        if (parsed)
+            out.push(parsed);
+    }
+    return out;
+}
+/** Parse one agent markdown file. Returns undefined if it cannot be selected. */
+export function parseAgentMarkdown(raw, fallbackName, prefix = "") {
+    const { frontmatter, body } = splitFrontmatter(raw);
+    const name = frontmatter["name"]?.trim() || (prefix ? `${prefix}/${fallbackName}` : fallbackName);
+    const description = frontmatter["description"]?.trim();
+    const systemPrompt = body.trim();
+    // Both are load-bearing: the description is how the model picks this agent,
+    // and without a prompt it is just the default agent under another name.
+    if (!description || !systemPrompt)
+        return undefined;
+    const definition = { name, description, systemPrompt };
+    if (frontmatter["model"])
+        definition.model = frontmatter["model"].trim();
+    const maxTurns = Number(frontmatter["maxTurns"] ?? frontmatter["max_turns"]);
+    if (Number.isInteger(maxTurns) && maxTurns > 0)
+        definition.maxTurns = maxTurns;
+    const allow = splitList(frontmatter["tools"] ?? frontmatter["allowedTools"]);
+    const deny = splitList(frontmatter["denyTools"] ?? frontmatter["disallowedTools"]);
+    if (allow.length || deny.length) {
+        definition.tools = {
+            ...(allow.length ? { allow } : {}),
+            ...(deny.length ? { deny } : {}),
+        };
+    }
+    return definition;
+}
+/** Accept both `tools: read, grep` and `tools: [read, grep]`. */
+function splitList(value) {
+    if (!value)
+        return [];
+    return value
+        .replace(/^\[|\]$/g, "")
+        .split(",")
+        .map((item) => item.trim().replace(/^["']|["']$/g, ""))
+        .filter((item) => item !== "");
+}
+//# sourceMappingURL=subagent.js.map

package/dist/agent/subagent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent.js","sourceRoot":"","sources":["../../src/agent/subagent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsB/C,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,IAAI,EAAE,SAAS;IACf,WAAW,EACT,0IAA0I;IAC5I,YAAY,EAAE;;;;yPAIyO;IACvP,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;IAC3F,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,IAAI,EAAE,SAAS;IACf,WAAW,EACT,oGAAoG;IACtG,YAAY,EAAE;;8OAE8N;IAC5O,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,+BAA+B;IAC1D,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAEtF,MAAM,OAAO,gBAAgB;IACV,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEhE,YAAY,cAAoC,iBAAiB;QAC/D,KAAK,MAAM,GAAG,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,GAAuB;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAW,EACX,YAAsB,EAAE;IAExB,MAAM,KAAK,GAAG;QACZ,QAAQ,CAAC,QAAQ,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC;QACrC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;KAClD,CAAC;IAEF,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACnD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAE1C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,YAAoB,EACpB,MAAM,GAAG,EAAE;IAEX,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAEjC,4EAA4E;IAC5E,wEAAwE;IACxE,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpD,MAAM,UAAU,GAAuB,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IAE3E,IAAI,WAAW,CAAC,OAAO,CAAC;QAAE,UAAU,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAEzE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAE/E,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,UAAU,CAAC,KAAK,GAAG;YACjB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK;SACT,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;SACtD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/agent/titles.d.ts

@@ -0,0 +1,8 @@
+import type { Message } from "../core/types.ts";
+/**
+ * A short name taken from the first prompt.
+ *
+ * The first line only, and cut on a word boundary: a wrapped sentence fragment
+ * in a narrow sidebar is harder to scan than a clean truncation.
+ */
+export declare function titleFromMessage(message: Message): string | undefined;

package/dist/agent/titles.js

@@ -0,0 +1,23 @@
+import { messageText } from "../core/types.js";
+/**
+ * A short name taken from the first prompt.
+ *
+ * The first line only, and cut on a word boundary: a wrapped sentence fragment
+ * in a narrow sidebar is harder to scan than a clean truncation.
+ */
+export function titleFromMessage(message) {
+    const text = messageText(message).trim();
+    if (!text)
+        return undefined;
+    const line = text.split("\n").find((candidate) => candidate.trim() !== "")?.trim();
+    if (!line)
+        return undefined;
+    if (line.length <= 60)
+        return line;
+    const cut = line.slice(0, 60);
+    const lastSpace = cut.lastIndexOf(" ");
+    // CJK has no spaces, so a space-based cut would return the whole 60 chars —
+    // which is the right answer there, not a bug.
+    return (lastSpace > 30 ? cut.slice(0, lastSpace) : cut) + "…";
+}
+//# sourceMappingURL=titles.js.map

package/dist/agent/titles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"titles.js","sourceRoot":"","sources":["../../src/agent/titles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3F,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAChE,CAAC"}

package/dist/agent/workspace.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Where the agent is allowed to write.
+ *
+ * **This is a policy gate, not a sandbox.** It inspects the arguments a tool
+ * was called with and refuses paths outside the allowed roots. It does not
+ * confine the process: a shell command can reach any path the user can, and
+ * `bash -c 'python -c "..."'` defeats any amount of argument inspection.
+ *
+ * Real confinement needs the OS — seatbelt on macOS, Landlock or a container
+ * on Linux — which this harness does not set up. Calling this a sandbox would
+ * promise a guarantee it cannot keep, so it is deliberately named a policy.
+ * Treat it as a guard against mistakes, not against a determined command.
+ */
+export type WorkspaceMode = "read-only" | "workspace-write" | "full-access";
+export interface WorkspacePolicy {
+    mode: WorkspaceMode;
+    /** Absolute roots that may be written to, beyond the working directory. */
+    writableRoots: string[];
+    /**
+     * Absolute roots that may be read. Always a superset of `writableRoots` —
+     * a file the agent is allowed to rewrite it is plainly allowed to open — so
+     * the two are separate only to let a directory be readable without also
+     * being writable.
+     */
+    readableRoots: string[];
+}
+export interface WriteCheck {
+    allowed: boolean;
+    reason?: string;
+    /** The path that failed, for the message shown to the model. */
+    offending?: string;
+}
+export declare function createPolicy(cwd: string, opts?: {
+    mode?: WorkspaceMode;
+    writableRoots?: string[];
+    readableRoots?: string[];
+}): WorkspacePolicy;
+/** Whether a resolved path falls inside one of the writable roots. */
+export declare function isWritable(policy: WorkspacePolicy, target: string): boolean;
+/** Whether a resolved path falls inside one of the readable roots. */
+export declare function isReadable(policy: WorkspacePolicy, target: string): boolean;
+/**
+ * Resolve a model-supplied path and confine it to the roots for that access.
+ *
+ * Throws instead of returning a flag because every caller turns a refusal into
+ * the same tool error, and a path that fell outside is never usable anyway.
+ *
+ * A missing policy means the embedder never asked for one, so this keeps the
+ * old behaviour of confining everything to the working directory rather than
+ * silently widening to whatever the default policy would have allowed.
+ */
+export declare function resolveWithin(policy: WorkspacePolicy | undefined, cwd: string, input: string, access: "read" | "write"): string;
+/**
+ * Check a tool call against the policy.
+ *
+ * Only the tools whose arguments name a path are checked. A `bash` command is
+ * scanned for obvious out-of-root writes, which catches a typo'd path but is
+ * explicitly not a security boundary — see the note at the top of this file.
+ */
+export declare function checkWrite(policy: WorkspacePolicy, toolName: string, input: unknown, cwd: string): WriteCheck;

package/dist/agent/workspace.js

@@ -0,0 +1,156 @@
+import path from "node:path";
+import { expandHome, userPath, within } from "../paths.js";
+export function createPolicy(cwd, opts = {}) {
+    const resolve = (roots) => dedupeRoots(roots.map((root) => path.resolve(cwd, expandHome(root))));
+    const writableRoots = resolve([cwd, ...userExtensionRoots(), ...(opts.writableRoots ?? [])]);
+    return {
+        mode: opts.mode ?? "workspace-write",
+        writableRoots,
+        readableRoots: resolve([...writableRoots, ...(opts.readableRoots ?? [])]),
+    };
+}
+/**
+ * The user-level directories the agent is expected to write to.
+ *
+ * The skill, subagent and plugin registries all *read* from these, so leaving
+ * them out made installing a user-level skill impossible while the harness
+ * happily loaded one that had arrived there by some other means. A directory
+ * that is read but never writable is a split with no rationale behind it.
+ *
+ * Deliberately these three rather than `userDir()` wholesale: the same
+ * directory holds `auth.json`, and handing the agent the credential file by
+ * default is a different decision than letting it drop a `SKILL.md`. Anyone
+ * who does want the whole tree can name it in `writableRoots`.
+ */
+function userExtensionRoots() {
+    return [userPath("skills"), userPath("agents"), userPath("plugins")];
+}
+/** Whether a resolved path falls inside one of the writable roots. */
+export function isWritable(policy, target) {
+    if (policy.mode === "full-access")
+        return true;
+    if (policy.mode === "read-only")
+        return false;
+    return within(policy.writableRoots, path.resolve(target));
+}
+/** Whether a resolved path falls inside one of the readable roots. */
+export function isReadable(policy, target) {
+    if (policy.mode === "full-access")
+        return true;
+    return within(policy.readableRoots, path.resolve(target));
+}
+/**
+ * Resolve a model-supplied path and confine it to the roots for that access.
+ *
+ * Throws instead of returning a flag because every caller turns a refusal into
+ * the same tool error, and a path that fell outside is never usable anyway.
+ *
+ * A missing policy means the embedder never asked for one, so this keeps the
+ * old behaviour of confining everything to the working directory rather than
+ * silently widening to whatever the default policy would have allowed.
+ */
+export function resolveWithin(policy, cwd, input, access) {
+    const resolved = path.resolve(cwd, expandHome(input));
+    if (!policy) {
+        if (within([path.resolve(cwd)], resolved))
+            return resolved;
+        throw new Error(`path escapes the working directory: ${input} (resolved to ${resolved})`);
+    }
+    if (access === "read") {
+        if (isReadable(policy, resolved))
+            return resolved;
+        throw new Error(`path is outside the readable roots: ${input} (resolved to ${resolved}; readable: ${policy.readableRoots.join(", ")})`);
+    }
+    if (policy.mode === "read-only") {
+        throw new Error(`the workspace is read-only; ${input} may not be modified`);
+    }
+    if (isWritable(policy, resolved))
+        return resolved;
+    throw new Error(`path is outside the writable roots: ${input} (resolved to ${resolved}; writable: ${policy.writableRoots.join(", ")})`);
+}
+/**
+ * Check a tool call against the policy.
+ *
+ * Only the tools whose arguments name a path are checked. A `bash` command is
+ * scanned for obvious out-of-root writes, which catches a typo'd path but is
+ * explicitly not a security boundary — see the note at the top of this file.
+ */
+export function checkWrite(policy, toolName, input, cwd) {
+    if (policy.mode === "full-access")
+        return { allowed: true };
+    const record = (input ?? {});
+    if (toolName === "write" || toolName === "edit") {
+        const target = record["path"];
+        if (typeof target !== "string")
+            return { allowed: true };
+        const resolved = path.resolve(cwd, expandHome(target));
+        if (policy.mode === "read-only") {
+            return {
+                allowed: false,
+                offending: target,
+                reason: "the workspace is read-only; no file may be modified",
+            };
+        }
+        return isWritable(policy, resolved)
+            ? { allowed: true }
+            : {
+                allowed: false,
+                offending: target,
+                reason: `${resolved} is outside the writable roots (${policy.writableRoots.join(", ")})`,
+            };
+    }
+    if (toolName === "bash") {
+        const command = record["command"];
+        if (typeof command !== "string")
+            return { allowed: true };
+        if (policy.mode === "read-only" && looksMutating(command)) {
+            return {
+                allowed: false,
+                offending: command,
+                reason: "the workspace is read-only; this command appears to modify state",
+            };
+        }
+        const escaping = absolutePathsIn(command).find((candidate) => !isWritable(policy, candidate));
+        if (escaping && looksMutating(command)) {
+            return {
+                allowed: false,
+                offending: escaping,
+                reason: `${escaping} is outside the writable roots (${policy.writableRoots.join(", ")})`,
+            };
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * A rough test for whether a shell command changes anything.
+ *
+ * Kept deliberately coarse: false positives cost an approval prompt, false
+ * negatives cost nothing extra because this was never a security boundary.
+ */
+function looksMutating(command) {
+    return /\b(rm|mv|cp|touch|mkdir|rmdir|dd|chmod|chown|ln|truncate|tee|install)\b|>>?[^&|]/.test(command);
+}
+/**
+ * Absolute paths appearing as bare words or after a redirect.
+ *
+ * `~` is expanded the way the shell expands it before the command ever runs.
+ * Without that the leading `~` simply went unmatched and `~/.oharness/skills`
+ * was reported back as `/.oharness/skills` — a path that exists nowhere, in a
+ * message whose entire job is to tell the reader what was refused.
+ */
+function absolutePathsIn(command) {
+    const matches = command.match(/(?<![\w-])~?\/[^\s'";|&)]+/g) ?? [];
+    return matches.filter((candidate) => candidate.length > 1).map(expandHome);
+}
+/** Drop roots already covered by an ancestor, so messages stay readable. */
+function dedupeRoots(roots) {
+    const sorted = [...new Set(roots)].sort((a, b) => a.length - b.length);
+    const kept = [];
+    for (const root of sorted) {
+        if (kept.some((parent) => root === parent || root.startsWith(parent + path.sep)))
+            continue;
+        kept.push(root);
+    }
+    return kept;
+}
+//# sourceMappingURL=workspace.js.map

package/dist/agent/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/agent/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsC3D,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,OAAqF,EAAE;IAEvF,MAAM,OAAO,GAAG,CAAC,KAAe,EAAY,EAAE,CAC5C,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,iBAAiB;QACpC,aAAa;QACb,aAAa,EAAE,OAAO,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,MAAuB,EAAE,MAAc;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,MAAuB,EAAE,MAAc;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAmC,EACnC,GAAW,EACX,KAAa,EACb,MAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,iBAAiB,QAAQ,GAAG,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,iBAAiB,QAAQ,eAAe,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,sBAAsB,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,iBAAiB,QAAQ,eAAe,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,MAAuB,EACvB,QAAgB,EAChB,KAAc,EACd,GAAW;IAEX,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IAExD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAEvD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,qDAAqD;aAC9D,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;YACjC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;YACnB,CAAC,CAAC;gBACE,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,QAAQ,mCAAmC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACzF,CAAC;IACR,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAE1D,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,kEAAkE;aAC3E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAC9C,CAAC;QACF,IAAI,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,QAAQ,mCAAmC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,kFAAkF,CAAC,IAAI,CAC5F,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC3F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/artifacts/publish.d.ts

@@ -0,0 +1,94 @@
+import type { ArtifactKind } from "./store.ts";
+/**
+ * Publishing an artifact to the website, so it has a URL someone else can open.
+ *
+ * The harness runs on loopback with a token that changes every start, and its
+ * artifact store is memory. None of that can be shared, so publishing is a
+ * copy — the content leaves this machine and lands in the site's database,
+ * where an account and a row-level security policy decide who may read it.
+ *
+ * It goes through the site's own API rather than straight at Supabase, for the
+ * same reason signing in does (see auth/providers/account.ts, which posts to
+ * `/api/desktop/exchange` rather than talking to the auth server directly):
+ * the schema stays private, validation and limits live in one place, and a
+ * three-versions-old CLI cannot be writing rows in a shape the site has since
+ * changed.
+ *
+ * Identity follows the artifact, not the act of publishing. Publishing
+ * `sales-chart` twice updates one row and keeps one URL, because that is what
+ * the store already means by an id — see store.ts.
+ *
+ * What that does NOT mean is that the link tracks the artifact. The site holds
+ * a copy, and only another publish overwrites it: revise an artifact ten times
+ * without republishing and the link still shows the revision that was sent.
+ * That is the safer default — a link should not change under the person you
+ * gave it to — but it has to be visible, which is why the revision number
+ * travels back into the store and the panel says which one the link is on.
+ */
+export type ArtifactVisibility = "unlisted" | "team";
+export interface PublishRequest {
+    /** The session-scoped id. Stable across revisions, so the URL is too. */
+    sourceId: string;
+    title: string;
+    mime: string;
+    kind: ArtifactKind;
+    language?: string;
+    content: string;
+    version: number;
+    /**
+     * `unlisted` means the link is the credential; `team` additionally requires
+     * the reader to be signed in and in the team. There is deliberately no
+     * `public` — a listable, indexable surface is a different product decision
+     * from handing someone a link.
+     */
+    visibility: ArtifactVisibility;
+    /** Required when `visibility` is `team`; ignored otherwise. */
+    teamId?: string;
+}
+export interface PublishResult {
+    url: string;
+    /** The site's own id for the row. Unguessable; not the artifact's id. */
+    publicId: string;
+    visibility: ArtifactVisibility;
+    updated: boolean;
+}
+/**
+ * Kinds that may leave this machine.
+ *
+ * Everything the store can hold, and the reason this list exists anyway: it is
+ * the seam where a future decision to refuse a kind for publishing lands. The
+ * executable kind is the one that would go first, and it is allowed here only
+ * because the site serves it under a `sandbox` CSP directive — a header, which
+ * applies to the document however it is loaded, rather than an iframe
+ * attribute, which does not apply when someone opens the URL directly. See
+ * website/app/a/[id]/raw/route.ts.
+ */
+export declare const PUBLISHABLE_KINDS: ArtifactKind[];
+/** Refused before the request, so an oversized artifact costs no round trip. */
+export declare const MAX_PUBLISHED_BYTES: number;
+export declare function publishArtifact(request: PublishRequest, opts: {
+    accountToken: string | undefined;
+    fetchImpl?: typeof fetch;
+}): Promise<PublishResult>;
+export interface AccountTeam {
+    id: string;
+    name: string;
+    role: string;
+}
+/**
+ * The teams this account belongs to, for a frontend offering "publish to…".
+ *
+ * Answers with an empty list rather than throwing when the account is signed
+ * out or the site is unreachable: the caller's next move either way is to
+ * offer only an unlisted link, and a thrown error would make a Publish menu
+ * fail to open because a feature nobody asked for could not be enumerated.
+ */
+export declare function accountTeams(opts: {
+    accountToken: string | undefined;
+    fetchImpl?: typeof fetch;
+}): Promise<AccountTeam[]>;
+/** Withdraw a published artifact. The URL stops resolving for everyone. */
+export declare function unpublishArtifact(sourceId: string, opts: {
+    accountToken: string | undefined;
+    fetchImpl?: typeof fetch;
+}): Promise<void>;

package/dist/artifacts/publish.js

@@ -0,0 +1,104 @@
+import { errorMessage } from "../core/errors.js";
+import { parseJson } from "../util/json.js";
+import { siteUrl } from "../auth/providers/account.js";
+/**
+ * Kinds that may leave this machine.
+ *
+ * Everything the store can hold, and the reason this list exists anyway: it is
+ * the seam where a future decision to refuse a kind for publishing lands. The
+ * executable kind is the one that would go first, and it is allowed here only
+ * because the site serves it under a `sandbox` CSP directive — a header, which
+ * applies to the document however it is loaded, rather than an iframe
+ * attribute, which does not apply when someone opens the URL directly. See
+ * website/app/a/[id]/raw/route.ts.
+ */
+export const PUBLISHABLE_KINDS = [
+    "text",
+    "markdown",
+    "code",
+    "image",
+    "vector",
+    "page",
+];
+/** Refused before the request, so an oversized artifact costs no round trip. */
+export const MAX_PUBLISHED_BYTES = 1024 * 1024;
+export async function publishArtifact(request, opts) {
+    if (!opts.accountToken) {
+        throw new Error("Publishing needs an OHarness account. Sign in first, then publish again.");
+    }
+    if (!PUBLISHABLE_KINDS.includes(request.kind)) {
+        throw new Error(`Artifacts of kind ${request.kind} cannot be published.`);
+    }
+    const bytes = Buffer.byteLength(request.content, "utf8");
+    if (bytes > MAX_PUBLISHED_BYTES) {
+        throw new Error(`Artifact is ${bytes} bytes, over the ${MAX_PUBLISHED_BYTES} byte publishing limit.`);
+    }
+    const send = opts.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await send(`${siteUrl()}/api/artifacts`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                accept: "application/json",
+                // The account's Supabase access token, the same one sync uses. The
+                // site validates it with the auth server rather than trusting it.
+                authorization: `Bearer ${opts.accountToken}`,
+            },
+            body: JSON.stringify(request),
+        });
+    }
+    catch (err) {
+        throw new Error(`could not reach ${siteUrl()}: ${errorMessage(err)}`);
+    }
+    const body = parseJson(await response.text());
+    if (!response.ok) {
+        throw new Error((body.ok && body.value.error) || `publishing failed with HTTP ${response.status}`);
+    }
+    if (!body.ok || !body.value.url || !body.value.id) {
+        throw new Error("the site returned no link for the artifact");
+    }
+    return {
+        url: body.value.url,
+        publicId: body.value.id,
+        visibility: request.visibility,
+        updated: body.value.updated === true,
+    };
+}
+/**
+ * The teams this account belongs to, for a frontend offering "publish to…".
+ *
+ * Answers with an empty list rather than throwing when the account is signed
+ * out or the site is unreachable: the caller's next move either way is to
+ * offer only an unlisted link, and a thrown error would make a Publish menu
+ * fail to open because a feature nobody asked for could not be enumerated.
+ */
+export async function accountTeams(opts) {
+    if (!opts.accountToken)
+        return [];
+    const send = opts.fetchImpl ?? fetch;
+    try {
+        const response = await send(`${siteUrl()}/api/teams`, {
+            headers: { authorization: `Bearer ${opts.accountToken}`, accept: "application/json" },
+        });
+        if (!response.ok)
+            return [];
+        const body = parseJson(await response.text());
+        return body.ok && Array.isArray(body.value.teams) ? body.value.teams : [];
+    }
+    catch {
+        return [];
+    }
+}
+/** Withdraw a published artifact. The URL stops resolving for everyone. */
+export async function unpublishArtifact(sourceId, opts) {
+    if (!opts.accountToken)
+        throw new Error("Not signed in.");
+    const send = opts.fetchImpl ?? fetch;
+    const response = await send(`${siteUrl()}/api/artifacts?sourceId=${encodeURIComponent(sourceId)}`, { method: "DELETE", headers: { authorization: `Bearer ${opts.accountToken}` } });
+    if (!response.ok) {
+        const body = parseJson(await response.text());
+        throw new Error((body.ok && body.value.error) || `withdrawing failed with HTTP ${response.status}`);
+    }
+}
+//# sourceMappingURL=publish.js.map

package/dist/artifacts/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/artifacts/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AA4DvD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmB;IAC/C,MAAM;IACN,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;CACP,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,IAAoE;IAEpE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,IAAI,uBAAuB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,oBAAoB,mBAAmB,yBAAyB,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACrC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,OAAO,EAAE,gBAAgB,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;gBAC1B,mEAAmE;gBACnE,kEAAkE;gBAClE,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE;aAC7C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,EAAE,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CACpB,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;QACnB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;QACvB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI;KACrC,CAAC;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAGlC;IACC,IAAI,CAAC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,OAAO,EAAE,YAAY,EAAE;YACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACtF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,SAAS,CAA4B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,IAAoE;IAEpE,IAAI,CAAC,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,GAAG,OAAO,EAAE,2BAA2B,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACrE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,CAChF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,SAAS,CAAqB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CACnF,CAAC;IACJ,CAAC;AACH,CAAC"}