@orion-agents/orion-code 0.1.0 → 0.1.2

package/dist/runtime/subagents/child-executor-guard.js

@@ -24,14 +24,21 @@ exports.evaluateToolCall = evaluateToolCall;
 exports.createChildToolExecutorGuard = createChildToolExecutorGuard;
 const path_1 = require("path");
 const fs_1 = require("fs");
+const async_hooks_1 = require("async_hooks");
 /** Tools whose arguments carry a single primary path under key `path`. */
 const PATH_TOOLS = new Set(['read_file', 'list_files']);
 /** Tools whose arguments carry a base/glob root under `path`. */
 const BASE_PATH_TOOLS = new Set(['glob']);
 /** Tools whose arguments carry a search base under `path`. */
 const SEARCH_PATH_TOOLS = new Set(['grep']);
+/** Known tools constrained by ToolContext.cwd but not by a narrower packet scope. */
+const ROOT_BOUND_TOOLS = new Set(['git_status']);
 /** batch_read nests step args; each step has { tool, args }. */
 const BATCH_TOOL = 'batch_read';
+const BATCH_READ_MAX_STEPS = 8;
+const BATCH_READ_ALLOWED_TOOLS = new Set(['git_status', 'list_files', 'glob', 'grep', 'read_file']);
+/** Built-ins whose contract is explicitly independent of repository paths. */
+const DEFAULT_SCOPE_AGNOSTIC_TOOLS = new Set(['time', 'web_search', 'web_fetch']);
 /**
  * Return the realpath of the nearest existing ancestor of `p`.
  *
@@ -73,6 +80,32 @@ function nearestExistingAncestorRealpath(p) {
     }
     return undefined; // loop exhausted, no existing ancestor found
 }
+/**
+ * Resolve an existing or not-yet-created target without dropping its missing
+ * suffix. For example, `<root>/src/not-created` canonicalizes to that exact
+ * target rather than widening to the existing `<root>/src` ancestor.
+ */
+function canonicalTargetRealpath(p) {
+    let current = p;
+    for (let i = 0; i < 64; i++) {
+        if ((0, fs_1.existsSync)(current)) {
+            try {
+                const ancestorReal = (0, fs_1.realpathSync)(current);
+                return (0, path_1.resolve)(ancestorReal, (0, path_1.relative)(current, p));
+            }
+            catch (err) {
+                const code = err?.code;
+                if (code !== 'ENOENT')
+                    return undefined;
+            }
+        }
+        const parent = (0, path_1.resolve)(current, '..');
+        if (parent === current)
+            return undefined;
+        current = parent;
+    }
+    return undefined;
+}
 /** True if `candidate` is `ancestor` or inside it (both realpaths). */
 function isInsideOrEqual(candidate, ancestor) {
     if (candidate === ancestor)
@@ -83,77 +116,320 @@ function isInsideOrEqual(candidate, ancestor) {
 /**
  * Check that a path stays inside root (and inside a scope if scopes given).
  *
- * Strategy: resolve the path against root, then take the realpath of its
- * nearest existing ancestor. If that ancestor is outside root, the path
- * escapes (via `..`, absolute outside root, or symlinked parent). If scopes
- * are specified, the ancestor must also be inside a scope OR the path must
- * descend into a scope from the root (ancestor is root itself, remaining
- * suffix enters a scope).
+ * Strategy: resolve the path against root, canonicalize its nearest existing
+ * ancestor, then append the unresolved suffix. Keeping that suffix is
+ * important for missing scope paths: `src/not-created` must not widen to
+ * `src`. Existing symlink ancestors are resolved before containment checks.
  */
 function checkContainment(rawPath, rootReal, scopeReals) {
     if (typeof rawPath !== 'string' || rawPath.trim() === '') {
         return { contained: false, reason: 'empty path' };
     }
     const resolved = (0, path_1.resolve)(rootReal, rawPath);
-    const ancestorReal = nearestExistingAncestorRealpath(resolved);
+    const targetReal = canonicalTargetRealpath(resolved);
     // If no existing ancestor could be resolved (e.g. EACCES on realpathSync),
     // containment cannot be verified — reject the path.
-    if (ancestorReal === undefined) {
+    if (targetReal === undefined) {
         return { contained: false, reason: `cannot verify path containment: ${rawPath}` };
     }
     // Boundary 1: must be inside root.
-    if (!isInsideOrEqual(ancestorReal, rootReal)) {
+    if (!isInsideOrEqual(targetReal, rootReal)) {
         return { contained: false, reason: `path escapes project root: ${rawPath}` };
     }
     // Boundary 2: if scopes specified, the target must be inside a scope.
     if (scopeReals.length > 0) {
-        // If the ancestor is already inside a scope, ok.
-        const ancestorInScope = scopeReals.some(s => isInsideOrEqual(ancestorReal, s));
-        if (!ancestorInScope) {
-            // Ancestor is root (or above scope) but target may descend into a
-            // scope. Re-resolve the full target's nearest-existing-ancestor
-            // against each scope: the resolved path relative to root must, when
-            // joined, fall inside a scope realpath.
-            const targetInScope = scopeReals.some(s => {
-                // Compute where the target would resolve to relative to root, then
-                // check containment against the scope realpath.
-                const targetResolved = (0, path_1.resolve)(rootReal, rawPath);
-                const targetAncestor = nearestExistingAncestorRealpath(targetResolved);
-                return targetAncestor !== undefined && isInsideOrEqual(targetAncestor, s);
-            });
-            if (!targetInScope) {
-                return { contained: false, reason: `path outside packet scope: ${rawPath}` };
-            }
+        const targetInScope = scopeReals.some(scope => isInsideOrEqual(targetReal, scope));
+        if (!targetInScope) {
+            return { contained: false, reason: `path outside packet scope: ${rawPath}` };
         }
     }
     return { contained: true };
 }
-/** Extract path-bearing arguments from a tool call. */
-function extractPathArgs(tool, args) {
-    const paths = [];
-    if (PATH_TOOLS.has(tool) ||
-        BASE_PATH_TOOLS.has(tool) ||
-        SEARCH_PATH_TOOLS.has(tool)) {
-        const p = args.path;
-        if (typeof p === 'string') {
-            paths.push(p);
-        }
-        // glob/grep with no path default to cwd (inside root) - no check needed.
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Keep known-tool containment identical to the path accepted by the executor. */
+function normalizeKnownToolPath(input) {
+    let value = input.trim();
+    const markdownLink = value.match(/^!?\[[^\]]*\]\(([\s\S]+)\)$/u);
+    if (markdownLink) {
+        value = markdownLink[1].trim();
+        if (value.startsWith('<')) {
+            const end = value.indexOf('>');
+            if (end >= 0)
+                value = value.slice(1, end);
+        }
+        else {
+            value = value.replace(/\s+["'][\s\S]*["']$/u, '');
+        }
+    }
+    if ((value.startsWith('`') && value.endsWith('`')) ||
+        (value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+    }
+    if (value.startsWith('file://')) {
+        try {
+            return decodeURIComponent(new URL(value).pathname);
+        }
+        catch {
+            return value.replace(/^file:\/\//u, '');
+        }
+    }
+    return value;
+}
+/** Parse batch_read input exactly like the real executor before guarding it. */
+function parseBatchReadSteps(rawSteps) {
+    let value = rawSteps;
+    if (typeof value === 'string') {
+        try {
+            value = JSON.parse(value);
+        }
+        catch {
+            return { error: 'steps must be an array or a valid JSON array string' };
+        }
+    }
+    if (!Array.isArray(value))
+        return { error: 'steps must be an array' };
+    if (value.length === 0)
+        return { error: 'steps must not be empty' };
+    if (value.length > BATCH_READ_MAX_STEPS) {
+        return { error: `steps exceed the ${BATCH_READ_MAX_STEPS}-step limit` };
+    }
+    const steps = [];
+    for (let index = 0; index < value.length; index += 1) {
+        const step = value[index];
+        if (!isRecord(step) || typeof step.tool !== 'string' || !step.tool) {
+            return { error: `step ${index + 1} requires an object with a tool string` };
+        }
+        let stepArgs = step.args;
+        if (typeof stepArgs === 'string') {
+            try {
+                stepArgs = JSON.parse(stepArgs);
+            }
+            catch {
+                return { error: `step ${index + 1} args must be a valid JSON object string` };
+            }
+        }
+        if (!isRecord(stepArgs))
+            return { error: `step ${index + 1} args must be an object` };
+        steps.push({ tool: step.tool, args: stepArgs });
+    }
+    return { steps };
+}
+const PATH_LIKE_ARG_KEY = /(?:^|_)(?:path|paths|file|files|filepath|filename|directory|directories|dir|cwd|root|base|location|locations|source|sources|destination|destinations|target|targets|uri|uris)(?:$|_)/iu;
+/** Detect nested path/file/location/resourceUri shapes without trusting MCP schemas. */
+function hasUnknownPathArgs(value, key = '', inheritedPathContext = false) {
+    const normalizedKey = key.replace(/([a-z0-9])([A-Z])/g, '$1_$2').replace(/[-.]/g, '_');
+    const pathContext = inheritedPathContext || PATH_LIKE_ARG_KEY.test(normalizedKey);
+    if (typeof value === 'string') {
+        if (value.trim().startsWith('file://'))
+            return true;
+        if (!pathContext)
+            return false;
+        const uriKey = /(?:^|_)(?:uri|uris)(?:$|_)/iu.test(normalizedKey);
+        return !uriKey;
+    }
+    if (Array.isArray(value)) {
+        return value.some(item => hasUnknownPathArgs(item, key, pathContext));
+    }
+    if (!isRecord(value))
+        return pathContext;
+    if (pathContext)
+        return true;
+    return Object.entries(value).some(([nestedKey, nestedValue]) => hasUnknownPathArgs(nestedValue, nestedKey, false));
+}
+/** Match grep's basename-only `glob` filter exactly as the real executor does. */
+function matchesGrepGlob(name, pattern) {
+    const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    const regex = escaped.replace(/\*/g, '.*').replace(/\?/g, '.');
+    return new RegExp(`^${regex}$`).test(name);
+}
+function checkGrepDescendantSymlinks(rawBasePath, rootReal, scopeReals, globPattern) {
+    const base = (0, path_1.resolve)(rootReal, rawBasePath);
+    try {
+        if (!(0, fs_1.existsSync)(base) || !(0, fs_1.statSync)(base).isDirectory())
+            return { contained: true };
+    }
+    catch {
+        return { contained: false, reason: `cannot inspect search path: ${rawBasePath}` };
+    }
+    const pending = [base];
+    while (pending.length > 0) {
+        const directory = pending.pop();
+        let entries;
+        try {
+            entries = (0, fs_1.readdirSync)(directory, { withFileTypes: true });
+        }
+        catch {
+            // Real grep skips unreadable directories rather than searching them.
+            continue;
+        }
+        for (const entry of entries) {
+            if (entry.name.startsWith('.'))
+                continue;
+            const entryPath = (0, path_1.join)(directory, entry.name);
+            if (entry.isDirectory()) {
+                pending.push(entryPath);
+                continue;
+            }
+            if (globPattern && !matchesGrepGlob(entry.name, globPattern))
+                continue;
+            if (!entry.isSymbolicLink())
+                continue;
+            try {
+                // Real grep checks isFile() immediately before streaming. Directory,
+                // dangling and other non-file symlink targets are therefore skipped.
+                if (!(0, fs_1.statSync)(entryPath).isFile())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            let targetReal;
+            try {
+                targetReal = (0, fs_1.realpathSync)(entryPath);
+            }
+            catch {
+                return {
+                    contained: false,
+                    reason: `cannot verify search descendant symlink: ${entryPath}`,
+                    path: entryPath,
+                };
+            }
+            if (!isInsideOrEqual(targetReal, rootReal)) {
+                return {
+                    contained: false,
+                    reason: `search descendant symlink escapes project root: ${entryPath}`,
+                    path: entryPath,
+                };
+            }
+            if (scopeReals.length > 0 && !scopeReals.some(scope => isInsideOrEqual(targetReal, scope))) {
+                return {
+                    contained: false,
+                    reason: `search descendant symlink escapes packet scope: ${entryPath}`,
+                    path: entryPath,
+                };
+            }
+        }
     }
+    return { contained: true };
+}
+function evaluateResolvedToolCall(tool, args, rootReal, scopeReals, scopeAgnosticTools) {
     if (tool === BATCH_TOOL) {
-        const steps = args.steps;
-        if (Array.isArray(steps)) {
-            for (const step of steps) {
-                if (step && typeof step === 'object' && typeof step.tool === 'string') {
-                    const stepArgs = step.args && typeof step.args === 'object'
-                        ? step.args
-                        : {};
-                    paths.push(...extractPathArgs(step.tool, stepArgs));
+        const parsed = parseBatchReadSteps(args.steps);
+        if (parsed.error || !parsed.steps) {
+            return {
+                ok: false,
+                tool,
+                reason: `invalid batch_read: ${parsed.error ?? 'steps are required'}`,
+            };
+        }
+        for (const step of parsed.steps) {
+            if (!BATCH_READ_ALLOWED_TOOLS.has(step.tool)) {
+                return {
+                    ok: false,
+                    tool,
+                    reason: `tool ${step.tool} is not allowed in batch_read`,
+                };
+            }
+            const verdict = evaluateResolvedToolCall(step.tool, step.args, rootReal, scopeReals, scopeAgnosticTools);
+            if (!verdict.ok)
+                return verdict;
+        }
+        return { ok: true };
+    }
+    if (ROOT_BOUND_TOOLS.has(tool)) {
+        if (scopeReals.length > 0) {
+            return {
+                ok: false,
+                tool,
+                reason: `${tool} is root-bound and unavailable under packet scope`,
+            };
+        }
+        // git_status's published schema has one optional filesystem argument:
+        // `cwd`. Other path/workdir-like aliases are ignored by the real tool.
+        const rawCwd = args.cwd;
+        if (rawCwd === undefined || rawCwd === '')
+            return { ok: true };
+        if (typeof rawCwd !== 'string') {
+            return { ok: false, tool, reason: `${tool} cwd must be a string` };
+        }
+        const normalizedCwd = normalizeKnownToolPath(rawCwd);
+        const containment = checkContainment(normalizedCwd, rootReal, []);
+        if (!containment.contained) {
+            return {
+                ok: false,
+                tool,
+                reason: containment.reason ?? 'cwd rejected',
+                path: normalizedCwd,
+            };
+        }
+        return { ok: true };
+    }
+    const knownPathTool = PATH_TOOLS.has(tool) || BASE_PATH_TOOLS.has(tool) || SEARCH_PATH_TOOLS.has(tool);
+    if (knownPathTool) {
+        const rawPath = args.path;
+        if (scopeReals.length > 0 &&
+            (BASE_PATH_TOOLS.has(tool) || SEARCH_PATH_TOOLS.has(tool)) &&
+            (typeof rawPath !== 'string' || rawPath.trim() === '')) {
+            return {
+                ok: false,
+                tool,
+                reason: `${tool} requires explicit path under packet scope`,
+            };
+        }
+        if (typeof rawPath === 'string') {
+            const normalizedPath = normalizeKnownToolPath(rawPath);
+            const containment = checkContainment(normalizedPath, rootReal, scopeReals);
+            if (!containment.contained) {
+                return {
+                    ok: false,
+                    tool,
+                    reason: containment.reason ?? 'path rejected',
+                    path: normalizedPath,
+                };
+            }
+            if (SEARCH_PATH_TOOLS.has(tool)) {
+                const descendants = checkGrepDescendantSymlinks(normalizedPath, rootReal, scopeReals, typeof args.glob === 'string' ? args.glob : undefined);
+                if (!descendants.contained) {
+                    return {
+                        ok: false,
+                        tool,
+                        reason: descendants.reason ?? 'search descendant symlink rejected',
+                        path: descendants.path ?? normalizedPath,
+                    };
                 }
             }
         }
+        else if (SEARCH_PATH_TOOLS.has(tool) && scopeReals.length === 0) {
+            const descendants = checkGrepDescendantSymlinks('.', rootReal, scopeReals, typeof args.glob === 'string' ? args.glob : undefined);
+            if (!descendants.contained) {
+                return {
+                    ok: false,
+                    tool,
+                    reason: descendants.reason ?? 'search descendant symlink rejected',
+                    path: descendants.path ?? rootReal,
+                };
+            }
+        }
+        return { ok: true };
     }
-    return paths;
+    if (!scopeAgnosticTools.has(tool)) {
+        return {
+            ok: false,
+            tool,
+            reason: `${tool} is not certified scope-agnostic`,
+        };
+    }
+    if (hasUnknownPathArgs(args)) {
+        return {
+            ok: false,
+            tool,
+            reason: `${tool} scope-agnostic certification requires pathless arguments`,
+        };
+    }
+    return { ok: true };
 }
 /**
  * Evaluate whether a tool call is allowed under the guard's boundaries.
@@ -164,36 +440,84 @@ function evaluateToolCall(tool, args, options) {
     if (rootReal === undefined) {
         return { ok: false, tool, reason: 'cannot resolve project root realpath' };
     }
-    const scopeReals = (options.scopePaths ?? []).map(p => nearestExistingAncestorRealpath((0, path_1.resolve)(rootReal, p))).filter((s) => s !== undefined);
-    const pathArgs = extractPathArgs(tool, args);
-    for (const path of pathArgs) {
-        const verdict = checkContainment(path, rootReal, scopeReals);
-        if (!verdict.contained) {
-            return { ok: false, tool, reason: verdict.reason ?? 'path rejected', path };
+    const requestedScopes = options.scopePaths ?? [];
+    const scopeReals = [];
+    for (const scopePath of requestedScopes) {
+        if (typeof scopePath !== 'string' || scopePath.trim() === '') {
+            return { ok: false, tool, reason: 'cannot verify packet scope: empty path' };
         }
+        const scopeReal = canonicalTargetRealpath((0, path_1.resolve)(rootReal, scopePath));
+        if (scopeReal === undefined || !isInsideOrEqual(scopeReal, rootReal)) {
+            return {
+                ok: false,
+                tool,
+                reason: `cannot verify packet scope: ${scopePath}`,
+                path: scopePath,
+            };
+        }
+        scopeReals.push(scopeReal);
     }
-    return { ok: true };
+    const scopeAgnosticTools = new Set([
+        ...DEFAULT_SCOPE_AGNOSTIC_TOOLS,
+        ...(options.scopeAgnosticTools ?? []),
+    ]);
+    return evaluateResolvedToolCall(tool, args, rootReal, scopeReals, scopeAgnosticTools);
 }
 /**
- * A mutable scope holder: the supervisor sets the current packet's scope
- * before running it, so the turn-level guard can enforce per-packet scope
- * containment without rebuilding the executor per packet.
+ * An async-context scope holder. Every parallel child gets its own packet
+ * scope, while callers outside a child context retain the legacy root-only
+ * behavior (or a scope explicitly entered for that async context).
+ *
+ * A process-wide mutable `current` value is unsafe here: parallel children
+ * overwrite each other's scope, and one child's cleanup can remove another
+ * still-running child's boundary. AsyncLocalStorage is available in Node 20
+ * and follows the promise/callback chain used by each child run.
  */
 class ScopeHolder {
     constructor() {
-        this.current = [];
+        this.storage = new async_hooks_1.AsyncLocalStorage();
+    }
+    runWithScope(paths, operation) {
+        return this.storage.run([...paths], operation);
     }
     setScope(paths) {
-        this.current = paths;
+        this.storage.enterWith([...paths]);
     }
     clear() {
-        this.current = [];
+        this.storage.enterWith([]);
     }
     getScope() {
-        return this.current;
+        return this.storage.getStore() ?? [];
     }
 }
 exports.ScopeHolder = ScopeHolder;
+/**
+ * Rewrite approved root-bound cwd arguments to canonical absolute paths before
+ * delegation. The git tool passes cwd directly to child_process, where a
+ * relative value would otherwise resolve against process.cwd() instead of the
+ * guarded project root. batch_read is normalized to its parsed array form so
+ * nested git_status calls receive the same protection.
+ */
+function canonicalizeApprovedArgs(tool, args, rootReal) {
+    if (ROOT_BOUND_TOOLS.has(tool)) {
+        const rawCwd = args.cwd;
+        const normalizedCwd = typeof rawCwd === 'string' && rawCwd !== '' ? normalizeKnownToolPath(rawCwd) : '.';
+        return { ...args, cwd: (0, path_1.resolve)(rootReal, normalizedCwd) };
+    }
+    if (tool === BATCH_TOOL) {
+        const parsed = parseBatchReadSteps(args.steps);
+        if (parsed.steps) {
+            return {
+                ...args,
+                steps: parsed.steps.map(step => ({
+                    tool: step.tool,
+                    args: canonicalizeApprovedArgs(step.tool, step.args, rootReal),
+                })),
+            };
+        }
+    }
+    return args;
+}
 /**
  * Wrap a child tool executor with containment enforcement. The returned
  * executor delegates to `inner` only when all path-bearing args are inside
@@ -205,6 +529,7 @@ function createChildToolExecutorGuard(inner, options) {
         const verdict = evaluateToolCall(name, args, {
             rootCwd: options.rootCwd,
             scopePaths,
+            scopeAgnosticTools: options.scopeAgnosticTools,
         });
         if (!verdict.ok) {
             return JSON.stringify({
@@ -213,7 +538,18 @@ function createChildToolExecutorGuard(inner, options) {
                 error: `Subagent scope guard rejected ${verdict.tool}: ${verdict.reason}`,
             });
         }
-        return inner(name, args, abortSignal);
+        if (!ROOT_BOUND_TOOLS.has(name) && name !== BATCH_TOOL) {
+            return inner(name, args, abortSignal);
+        }
+        const rootReal = nearestExistingAncestorRealpath(options.rootCwd);
+        if (rootReal === undefined) {
+            return JSON.stringify({
+                success: false,
+                output: '',
+                error: `Subagent scope guard rejected ${name}: cannot resolve project root realpath`,
+            });
+        }
+        return inner(name, canonicalizeApprovedArgs(name, args, rootReal), abortSignal);
     };
 }
 //# sourceMappingURL=child-executor-guard.js.map

package/dist/runtime/subagents/child-executor-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-executor-guard.js","sourceRoot":"","sources":["../../../src/runtime/subagents/child-executor-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAsLH,4CAsBC;AA4BD,oEA2BC;AAjQD,+BAAqD;AACrD,2BAA8C;AAE9C,0EAA0E;AAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAExD,iEAAiE;AACjE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1C,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5C,gEAAgE;AAChE,MAAM,UAAU,GAAG,YAAY,CAAC;AAsBhC;;;;;;;GAOG;AACH,SAAS,+BAA+B,CAAC,CAAS;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,IAAA,iBAAY,EAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4EAA4E;gBAC5E,yEAAyE;gBACzE,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;gBAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,8DAA8D;oBAC9D,oDAAoD;oBACpD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACtC,IAAI,MAAM,KAAK,OAAO;wBAAE,OAAO,SAAS,CAAC;oBACzC,OAAO,GAAG,MAAM,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,uEAAuE;gBACvE,6CAA6C;gBAC7C,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC,CAAC,wCAAwC;QAClF,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,6CAA6C;AACjE,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,SAAiB,EAAE,QAAgB;IAC1D,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,QAAgB,EAChB,UAA6B;IAE7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAE/D,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,mCAAmC;IACnC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,sEAAsE;IACtE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,iDAAiD;QACjD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,kEAAkE;YAClE,gEAAgE;YAChE,oEAAoE;YACpE,wCAAwC;YACxC,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACxC,mEAAmE;gBACnE,gDAAgD;gBAChD,MAAM,cAAc,GAAG,IAAA,cAAO,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,cAAc,GAAG,+BAA+B,CAAC,cAAc,CAAC,CAAC;gBACvE,OAAO,cAAc,KAAK,SAAS,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,uDAAuD;AACvD,SAAS,eAAe,CACtB,IAAY,EACZ,IAA6B;IAE7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IACE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QACpB,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAC3B,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,yEAAyE;IAC3E,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtE,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;wBACxC,CAAC,CAAE,IAAI,CAAC,IAAgC;wBACxC,CAAC,CAAC,EAAE,CAAC;oBACT,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,IAAY,EACZ,IAA6B,EAC7B,OAAqB;IAErB,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACpD,+BAA+B,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CACtD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,IAAI,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAa,WAAW;IAAxB;QACU,YAAO,GAAsB,EAAE,CAAC;IAa1C,CAAC;IAXC,QAAQ,CAAC,KAAwB;QAC/B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAdD,kCAcC;AAED;;;;GAIG;AACH,SAAgB,4BAA4B,CAC1C,KAIoB,EACpB,OAAqD;IAMrD,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iCAAiC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"child-executor-guard.js","sourceRoot":"","sources":["../../../src/runtime/subagents/child-executor-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AA0eH,4CAiCC;AAwED,oEAoCC;AArnBD,+BAA2D;AAC3D,2BAAqE;AACrE,6CAAgD;AAEhD,0EAA0E;AAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAExD,iEAAiE;AACjE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1C,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5C,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAEjD,gEAAgE;AAChE,MAAM,UAAU,GAAG,YAAY,CAAC;AAChC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpG,8EAA8E;AAC9E,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAwBlF;;;;;;;GAOG;AACH,SAAS,+BAA+B,CAAC,CAAS;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,IAAA,iBAAY,EAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4EAA4E;gBAC5E,yEAAyE;gBACzE,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;gBAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,8DAA8D;oBAC9D,oDAAoD;oBACpD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACtC,IAAI,MAAM,KAAK,OAAO;wBAAE,OAAO,SAAS,CAAC;oBACzC,OAAO,GAAG,MAAM,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,uEAAuE;gBACvE,6CAA6C;gBAC7C,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC,CAAC,wCAAwC;QAClF,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,6CAA6C;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,CAAS;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,IAAA,iBAAY,EAAC,OAAO,CAAC,CAAC;gBAC3C,OAAO,IAAA,cAAO,EAAC,YAAY,EAAE,IAAA,eAAQ,EAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;gBAClD,IAAI,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,SAAiB,EAAE,QAAgB;IAC1D,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,QAAgB,EAChB,UAA6B;IAE7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAErD,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,mCAAmC;IACnC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,sEAAsE;IACtE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,kFAAkF;AAClF,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEzB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjE,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,gFAAgF;AAChF,SAAS,mBAAmB,CAAC,QAAiB;IAC5C,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,oBAAoB,oBAAoB,aAAa,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,GAAG,CAAC,wCAAwC,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QACzB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,GAAG,CAAC,0CAA0C,EAAE,CAAC;YAChF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,GAAG,CAAC,yBAAyB,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,iBAAiB,GACrB,wLAAwL,CAAC;AAE3L,wFAAwF;AACxF,SAAS,kBAAkB,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE,EAAE,oBAAoB,GAAG,KAAK;IAChF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,oBAAoB,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACzC,IAAI,WAAW;QAAE,OAAO,IAAI,CAAC;IAE7B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAC7D,kBAAkB,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,QAAgB,EAChB,UAA6B,EAC7B,WAAoB;IAEpB,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,CAAC,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,WAAW,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QACjC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,gBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACzC,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,WAAW,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;gBAAE,SAAS;YACvE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YAEtC,IAAI,CAAC;gBACH,qEAAqE;gBACrE,qEAAqE;gBACrE,IAAI,CAAC,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,SAAS;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAA,iBAAY,EAAC,SAAS,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,4CAA4C,SAAS,EAAE;oBAC/D,IAAI,EAAE,SAAS;iBAChB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,mDAAmD,SAAS,EAAE;oBACtE,IAAI,EAAE,SAAS;iBAChB,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3F,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,mDAAmD,SAAS,EAAE;oBACtE,IAAI,EAAE,SAAS;iBAChB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,IAA6B,EAC7B,QAAgB,EAChB,UAA6B,EAC7B,kBAAuC;IAEvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,MAAM,EAAE,uBAAuB,MAAM,CAAC,KAAK,IAAI,oBAAoB,EAAE;aACtE,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI;oBACJ,MAAM,EAAE,QAAQ,IAAI,CAAC,IAAI,+BAA+B;iBACzD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,wBAAwB,CACtC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,UAAU,EACV,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,mDAAmD;aACnE,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,cAAc;gBAC5C,IAAI,EAAE,aAAa;aACpB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GACjB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,IACE,UAAU,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EACtD,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,4CAA4C;aAC5D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC3B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,eAAe;oBAC7C,IAAI,EAAE,cAAc;iBACrB,CAAC;YACJ,CAAC;YAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAG,2BAA2B,CAC7C,cAAc,EACd,QAAQ,EACR,UAAU,EACV,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;oBAC3B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,IAAI;wBACJ,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,oCAAoC;wBAClE,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,cAAc;qBACzC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,WAAW,GAAG,2BAA2B,CAC7C,GAAG,EACH,QAAQ,EACR,UAAU,EACV,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC3B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,oCAAoC;oBAClE,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,QAAQ;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE,GAAG,IAAI,kCAAkC;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE,GAAG,IAAI,2DAA2D;SAC3E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,IAAY,EACZ,IAA6B,EAC7B,OAAqB;IAErB,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAA,cAAO,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,MAAM,EAAE,+BAA+B,SAAS,EAAE;gBAClD,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;QACjC,GAAG,4BAA4B;QAC/B,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;KACtC,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAa,WAAW;IAAxB;QACmB,YAAO,GAAG,IAAI,+BAAiB,EAAqB,CAAC;IAiBxE,CAAC;IAfC,YAAY,CAAI,KAAwB,EAAE,SAAkB;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,KAAwB;QAC/B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;CACF;AAlBD,kCAkBC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,IAAY,EACZ,IAA6B,EAC7B,QAAgB;IAEhB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;QACxB,MAAM,aAAa,GACjB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrF,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAA,cAAO,EAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,GAAG,IAAI;gBACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;iBAC/D,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,4BAA4B,CAC1C,KAIoB,EACpB,OAAqD;IAErD,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iCAAiC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,QAAQ,GAAG,+BAA+B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iCAAiC,IAAI,wCAAwC;aACrF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC,CAAC;AACJ,CAAC"}

package/dist/runtime/subagents/presets.d.ts

@@ -30,15 +30,14 @@ export declare function toolsForRole(role: SubagentRole): readonly string[];
 export declare function systemPromptForRole(role: SubagentRole): string;
 /**
  * Filter an upstream tool list to a role's allowlist, removing any forbidden
- * tool and the recursive `subtask` capability. Also includes first-class MCP
- * tools (mcp__<server>__<tool>) that declare `readOnlyHint === true` via
- * their `isReadOnly()` method — these are safe for children because they
- * cannot invoke arbitrary MCP actions.
+ * tool, every dynamic first-class MCP tool, and the recursive `subtask`
+ * capability. `readOnlyHint` is not a path-containment capability, so it must
+ * not make an MCP tool child-visible.
  *
  * Returns the names the child may receive; the caller is responsible for
  * resolving them to tool definitions.
  */
-export declare function filterToolsForRole(availableToolNames: readonly string[], role: SubagentRole, runtimeTools?: readonly OpenHorseTool[]): string[];
+export declare function filterToolsForRole(availableToolNames: readonly string[], role: SubagentRole, _runtimeTools?: readonly OpenHorseTool[]): string[];
 /** Assert a filtered tool list contains no forbidden tool. Used by the runner. */
 export declare function assertNoForbiddenTools(toolNames: readonly string[]): void;
 //# sourceMappingURL=presets.d.ts.map

package/dist/runtime/subagents/presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/presets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,sEAAsE;AACtE,eAAO,MAAM,6BAA6B,oEAYhC,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0KAgB3B,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,oCAAoC;IACpC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAqBD,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAwBzD,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,MAAM,EAAE,CAElE;AAED,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,kBAAkB,EAAE,SAAS,MAAM,EAAE,EACrC,IAAI,EAAE,YAAY,EAClB,YAAY,CAAC,EAAE,SAAS,aAAa,EAAE,GACtC,MAAM,EAAE,CA4BV;AAED,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAMzE"}
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/runtime/subagents/presets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,sEAAsE;AACtE,eAAO,MAAM,6BAA6B,oEAUhC,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0KAgB3B,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,oCAAoC;IACpC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAqBD,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAwBzD,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,MAAM,EAAE,CAElE;AAED,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,kBAAkB,EAAE,SAAS,MAAM,EAAE,EACrC,IAAI,EAAE,YAAY,EAClB,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,GACvC,MAAM,EAAE,CAeV;AAED,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAMzE"}