@orion-agents/orion-code 0.1.2 → 0.1.4-2

package/dist/tools/sandbox.js

@@ -0,0 +1,500 @@
+"use strict";
+/**
+ * Orion Code - OS-level sandbox planning for shell command execution.
+ *
+ * Contract (v0.1.3-2 §1.2 / P1-B / P1-E)
+ * ======================================
+ *
+ * Why this module exists
+ * ----------------------
+ * `bash_security.wrapForSandbox()` built a *shell string* (`docker exec ... sh -c
+ * '<cmd>'`). That is unsafe to claim as isolation: every layer re-parses the
+ * command, so quoting bugs become escapes. This module instead produces an
+ * **argv array** that is handed straight to `spawn()`, so the user command is a
+ * single opaque argument that no intermediate shell re-parses.
+ *
+ * Profiles (what the user asks for) vs backends (how we deliver it)
+ * ----------------------------------------------------------------
+ *   profile  none            -> run exactly as before (no wrapper at all)
+ *   profile  read-only       -> no filesystem writes anywhere, no network
+ *   profile  workspace-write -> writes confined to the workspace roots + temp,
+ *                               no network unless explicitly allowed
+ *
+ *   backend  seatbelt   -> macOS `sandbox-exec` with a generated SBPL policy
+ *   backend  bubblewrap -> Linux `bwrap` with read-only binds
+ *   backend  docker     -> `docker run --rm` into a configured image
+ *
+ * Availability must be PROBED, never inferred
+ * -------------------------------------------
+ * `which sandbox-exec` succeeding proves nothing: when Orion itself runs inside
+ * an application sandbox, every nested `sandbox_apply` fails with
+ * `Operation not permitted` (exit 71) even for a trivial `(allow default)`
+ * policy. Likewise `docker` on PATH says nothing about the daemon. So each
+ * backend is validated with a real, cheap execution probe whose result is
+ * cached for the process lifetime.
+ *
+ * Fail closed
+ * -----------
+ * If a profile other than `none` is requested and no backend passes its probe,
+ * {@link planSandboxedCommand} returns a failure. Callers must refuse to run the
+ * command. Falling back to an unsandboxed execution would turn a security
+ * setting into a silent no-op, which is the exact failure mode this module
+ * exists to prevent. An unrecognised profile value (e.g. written by a newer
+ * Orion) is also a failure rather than a downgrade to `none`.
+ *
+ * Configuration ownership (P1-E)
+ * ------------------------------
+ *   GlobalConfig.sandbox            user-wide default
+ *   ProjectConfig.sandbox           per-project override, shallow-merged on top
+ *
+ * Default is `{ profile: 'none' }`, so configs written before this module
+ * existed keep their exact previous behaviour. Nothing here is secret, so no
+ * redaction is required; rolling back is "delete the `sandbox` key", and an
+ * older Orion simply ignores the unknown field.
+ *
+ * Known limitations (recorded, not hidden)
+ * ----------------------------------------
+ * - seatbelt cannot be applied from inside another sandbox (see above);
+ * - macOS seatbelt is filesystem-only here. Its deprecated network filters are
+ *   not treated as enforcement, so a network-blocked plan must use another backend;
+ * - `docker` runs the command in a *different* process tree, so Orion's
+ *   process-group SIGTERM/SIGKILL only reaches the client. `--rm` bounds the
+ *   leak, but abort semantics are weaker than the in-process backends;
+ * - none of the backends attempt to constrain CPU/memory.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SANDBOX_BACKENDS = exports.SANDBOX_PROFILES = void 0;
+exports.mergeSandboxConfig = mergeSandboxConfig;
+exports.resolveSandboxSettings = resolveSandboxSettings;
+exports.resetSandboxCapabilityCache = resetSandboxCapabilityCache;
+exports.detectSandboxCapabilities = detectSandboxCapabilities;
+exports.formatSandboxCapabilities = formatSandboxCapabilities;
+exports.buildSeatbeltPolicy = buildSeatbeltPolicy;
+exports.planSandboxedCommand = planSandboxedCommand;
+exports.describeSandboxPlan = describeSandboxPlan;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const global_config_1 = require("../services/global-config");
+exports.SANDBOX_PROFILES = ['none', 'read-only', 'workspace-write'];
+exports.SANDBOX_BACKENDS = ['seatbelt', 'bubblewrap', 'docker'];
+// ============================================================================
+// Settings resolution
+// ============================================================================
+/** Shell used inside every backend. Kept explicit so policies can reference it. */
+const INNER_SHELL = '/bin/sh';
+function isSandboxProfile(value) {
+    return typeof value === 'string' && exports.SANDBOX_PROFILES.includes(value);
+}
+function sanitizeRoots(roots) {
+    if (!Array.isArray(roots))
+        return undefined;
+    const out = roots.filter((r) => typeof r === 'string' && r.trim().length > 0);
+    return out.length > 0 ? out : undefined;
+}
+/**
+ * Merge global and project sandbox settings.
+ * Project keys win individually; absent keys inherit the global value.
+ */
+function mergeSandboxConfig(global, project) {
+    return {
+        profile: project?.profile ?? global?.profile,
+        backend: project?.backend ?? global?.backend,
+        allowNetwork: project?.allowNetwork ?? global?.allowNetwork,
+        writableRoots: sanitizeRoots(project?.writableRoots) ?? sanitizeRoots(global?.writableRoots),
+        image: project?.image ?? global?.image,
+    };
+}
+/** Read the effective settings for a project path. Never throws. */
+function resolveSandboxSettings(projectPath) {
+    let global;
+    let project;
+    try {
+        global = (0, global_config_1.loadGlobalConfig)().sandbox;
+    }
+    catch {
+        global = undefined;
+    }
+    try {
+        project = (0, global_config_1.getProjectConfig)(projectPath).sandbox;
+    }
+    catch {
+        project = undefined;
+    }
+    return mergeSandboxConfig(global, project);
+}
+// ============================================================================
+// Capability probing
+// ============================================================================
+let capabilityCache;
+/** Drop the cached probe result. Test-only; capabilities do not change at runtime. */
+function resetSandboxCapabilityCache() {
+    capabilityCache = undefined;
+}
+function probe(file, args, timeoutMs = 5000) {
+    try {
+        const res = (0, child_process_1.spawnSync)(file, args, { timeout: timeoutMs, encoding: 'utf8' });
+        if (res.error)
+            return { ok: false, detail: res.error.message };
+        if (res.status !== 0) {
+            const stderr = (res.stderr || '').trim().split('\n')[0];
+            return { ok: false, detail: stderr || `exit ${res.status}` };
+        }
+        return { ok: true, detail: (res.stdout || '').trim().split('\n')[0] || undefined };
+    }
+    catch (err) {
+        return { ok: false, detail: err instanceof Error ? err.message : String(err) };
+    }
+}
+function probeSeatbelt(platform) {
+    if (platform !== 'darwin') {
+        return { backend: 'seatbelt', available: false, reason: 'seatbelt requires macOS' };
+    }
+    // A trivial policy is enough: if `sandbox_apply` is refused (e.g. Orion is
+    // itself running inside an app sandbox) it fails here too.
+    const res = probe('/usr/bin/sandbox-exec', ['-p', '(version 1)(allow default)', '/usr/bin/true']);
+    if (!res.ok) {
+        return {
+            backend: 'seatbelt',
+            available: false,
+            reason: `sandbox-exec probe failed: ${res.detail ?? 'unknown error'}`,
+        };
+    }
+    return {
+        backend: 'seatbelt',
+        available: true,
+        detail: '/usr/bin/sandbox-exec (filesystem-only; network isolation unsupported)',
+    };
+}
+function probeBubblewrap(platform) {
+    if (platform !== 'linux') {
+        return { backend: 'bubblewrap', available: false, reason: 'bubblewrap requires Linux' };
+    }
+    const res = probe('bwrap', ['--version']);
+    if (!res.ok) {
+        return {
+            backend: 'bubblewrap',
+            available: false,
+            reason: `bwrap unavailable: ${res.detail ?? 'not found'}`,
+        };
+    }
+    return { backend: 'bubblewrap', available: true, detail: res.detail };
+}
+function probeDocker() {
+    // `docker` on PATH says nothing about the daemon, so query the daemon.
+    const res = probe('docker', ['info', '--format', '{{.ServerVersion}}'], 8000);
+    if (!res.ok) {
+        return {
+            backend: 'docker',
+            available: false,
+            reason: `docker daemon unreachable: ${res.detail ?? 'not found'}`,
+        };
+    }
+    return { backend: 'docker', available: true, detail: `server ${res.detail ?? 'unknown'}` };
+}
+/** Probe every backend once and cache the matrix for this process. */
+function detectSandboxCapabilities(force = false) {
+    if (capabilityCache && !force)
+        return capabilityCache;
+    const platform = process.platform;
+    const backends = [probeSeatbelt(platform), probeBubblewrap(platform), probeDocker()];
+    capabilityCache = {
+        platform,
+        backends,
+        preferred: backends.find(b => b.available)?.backend,
+    };
+    return capabilityCache;
+}
+/** Render the capability matrix for `/config` and diagnostics. */
+function formatSandboxCapabilities(caps) {
+    return caps.backends.map(b => b.available
+        ? `${b.backend}: available${b.detail ? ` (${b.detail})` : ''}`
+        : `${b.backend}: unavailable${b.reason ? ` (${b.reason})` : ''}`);
+}
+// ============================================================================
+// Policy generation
+// ============================================================================
+/** Resolve symlinks so a policy cannot be sidestepped via an aliased path. */
+function realpathOrSelf(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return path.resolve(p);
+    }
+}
+function uniquePaths(paths) {
+    const seen = new Set();
+    const out = [];
+    for (const p of paths) {
+        if (!p)
+            continue;
+        const resolved = realpathOrSelf(p);
+        if (seen.has(resolved))
+            continue;
+        seen.add(resolved);
+        out.push(resolved);
+    }
+    return out;
+}
+/** Escape a path for an SBPL string literal. */
+function sbplString(value) {
+    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+/**
+ * Build the seatbelt policy.
+ *
+ * Uses `(allow default)` plus targeted denies rather than `(deny default)` plus
+ * an allow-list: a deny-by-default policy has to enumerate every syscall a
+ * developer toolchain needs, and each omission looks like a mysterious crash
+ * rather than a security decision.
+ */
+function buildSeatbeltPolicy(writableRoots, allowNetwork, projectRoot = process.cwd()) {
+    const lines = ['(version 1)', '(allow default)', '(deny file-write*)'];
+    for (const root of writableRoots) {
+        lines.push(`(allow file-write* (subpath ${sbplString(root)}))`);
+    }
+    // Writing to the standard character devices is not a filesystem escape and is
+    // required for ordinary shell redirection to keep working.
+    lines.push('(allow file-write-data (literal "/dev/null") (literal "/dev/stdout") (literal "/dev/stderr") (literal "/dev/tty") (literal "/dev/dtracehelper"))');
+    const home = os.homedir();
+    for (const sensitive of [
+        path.join(home, '.ssh'),
+        path.join(home, '.aws'),
+        path.join(home, '.gnupg'),
+        path.join(home, '.azure'),
+        path.join(home, '.config', 'gcloud'),
+        path.join(home, 'Library', 'Keychains'),
+    ]) {
+        lines.push(`(deny file-read* (subpath ${sbplString(sensitive)}))`);
+    }
+    for (const sensitive of ['.env', '.env.local', '.env.production', '.npmrc', '.netrc']) {
+        lines.push(`(deny file-read* (literal ${sbplString(path.join(projectRoot, sensitive))}))`);
+    }
+    lines.push(allowNetwork ? '(allow network*)' : '(deny network*)');
+    return lines.join('\n');
+}
+// ============================================================================
+// Planning
+// ============================================================================
+/**
+ * Extra requirements a backend has beyond "the probe passed".
+ * Returns the blocking reason, or undefined when the backend is usable as-is.
+ */
+function missingRequirement(backend, settings) {
+    if (backend === 'docker' && !settings.image?.trim()) {
+        return 'the docker sandbox backend requires `sandbox.image` to be configured';
+    }
+    if (backend === 'seatbelt' && settings.allowNetwork !== true) {
+        return 'macOS seatbelt cannot verify network isolation; choose docker or explicitly set sandbox.allowNetwork=true';
+    }
+    return undefined;
+}
+function selectBackend(settings, caps) {
+    const requested = settings.backend;
+    if (requested && requested !== 'auto') {
+        const status = caps.backends.find(b => b.backend === requested);
+        if (!status) {
+            return { reason: `unknown sandbox backend "${requested}"` };
+        }
+        if (!status.available) {
+            return { reason: status.reason ?? `sandbox backend "${requested}" is unavailable` };
+        }
+        // An explicit choice reports its own configuration gap verbatim.
+        const missing = missingRequirement(requested, settings);
+        return missing ? { reason: missing } : { backend: requested };
+    }
+    // Auto-selection must skip backends that are installed but not yet usable,
+    // otherwise a host with an idle Docker daemon would report "image missing"
+    // and hide the real reason the preferred backend was unavailable.
+    for (const status of caps.backends) {
+        if (!status.available)
+            continue;
+        if (!missingRequirement(status.backend, settings))
+            return { backend: status.backend };
+    }
+    const detail = caps.backends
+        .map(b => {
+        if (!b.available)
+            return `${b.backend} (${b.reason ?? 'unavailable'})`;
+        return `${b.backend} (${missingRequirement(b.backend, settings)})`;
+    })
+        .join('; ');
+    return { reason: `no sandbox backend is available on ${caps.platform}: ${detail}` };
+}
+function plainPlan(command) {
+    return {
+        ok: true,
+        profile: 'none',
+        backend: 'none',
+        file: 'sh',
+        args: ['-c', command],
+        network: 'allowed',
+        writableRoots: [],
+    };
+}
+/**
+ * Turn a shell command into a spawnable argv under the configured profile.
+ *
+ * The returned `args` always end with the untouched user command as one
+ * element, so no intermediate shell re-parses it.
+ */
+function planSandboxedCommand(command, options) {
+    const settings = options.settings ?? {};
+    const rawProfile = settings.profile ?? 'none';
+    if (!isSandboxProfile(rawProfile)) {
+        // Do not silently downgrade: an unknown value most likely comes from a
+        // newer Orion that meant something stricter than `none`.
+        return {
+            ok: false,
+            profile: String(rawProfile),
+            reason: `unknown sandbox profile "${String(rawProfile)}"; expected one of ${exports.SANDBOX_PROFILES.join(', ')}`,
+            capabilities: options.capabilities ?? detectSandboxCapabilities(),
+        };
+    }
+    if (rawProfile === 'none')
+        return plainPlan(command);
+    const caps = options.capabilities ?? detectSandboxCapabilities();
+    const selected = selectBackend(settings, caps);
+    if (!selected.backend) {
+        return {
+            ok: false,
+            profile: rawProfile,
+            reason: selected.reason ?? 'no sandbox backend available',
+            capabilities: caps,
+        };
+    }
+    const allowNetwork = settings.allowNetwork === true;
+    const writableRoots = rawProfile === 'workspace-write'
+        ? uniquePaths([options.cwd, os.tmpdir(), ...(settings.writableRoots ?? [])])
+        : [];
+    if (selected.backend === 'seatbelt') {
+        const policy = buildSeatbeltPolicy(writableRoots, allowNetwork, options.cwd);
+        return {
+            ok: true,
+            profile: rawProfile,
+            backend: 'seatbelt',
+            file: '/usr/bin/sandbox-exec',
+            args: ['-p', policy, INNER_SHELL, '-c', command],
+            network: allowNetwork ? 'allowed' : 'blocked',
+            writableRoots,
+            policy,
+        };
+    }
+    if (selected.backend === 'bubblewrap') {
+        const args = ['--die-with-parent', '--proc', '/proc', '--dev', '/dev'];
+        if (!allowNetwork)
+            args.push('--unshare-net');
+        for (const ro of ['/usr', '/bin', '/sbin', '/lib', '/lib64', '/etc', '/opt']) {
+            if (fs.existsSync(ro))
+                args.push('--ro-bind', ro, ro);
+        }
+        // Read-only view of the workspace, upgraded to read-write only when the
+        // profile asks for it.
+        const workspace = realpathOrSelf(options.cwd);
+        args.push(writableRoots.length > 0 ? '--bind' : '--ro-bind', workspace, workspace);
+        for (const root of writableRoots) {
+            if (root === workspace)
+                continue;
+            args.push('--bind', root, root);
+        }
+        args.push('--chdir', workspace, INNER_SHELL, '-c', command);
+        return {
+            ok: true,
+            profile: rawProfile,
+            backend: 'bubblewrap',
+            file: 'bwrap',
+            args,
+            network: allowNetwork ? 'allowed' : 'blocked',
+            writableRoots,
+        };
+    }
+    // docker
+    const image = settings.image?.trim();
+    if (!image) {
+        return {
+            ok: false,
+            profile: rawProfile,
+            reason: 'the docker sandbox backend requires `sandbox.image` to be configured',
+            capabilities: caps,
+        };
+    }
+    // Docker runs in a separate VM (Docker Desktop on macOS). The host path we
+    // pass to `-v` must be in the form Docker Desktop actually shares; resolving
+    // symlinks (e.g. macOS `/var` -> `/private/var`) points at a path Docker
+    // Desktop does not map, so the bind mount silently creates an empty
+    // directory and writes land somewhere the caller cannot see. We therefore
+    // mount `options.cwd` exactly as supplied. Per-directory write confinement
+    // for docker comes from `--read-only` (immutable image rootfs) plus the
+    // explicit rw bind mounts below — not from path-text matching.
+    const workspace = options.cwd;
+    const args = ['run', '--rm', '-i', '--read-only'];
+    if (!allowNetwork)
+        args.push('--network', 'none');
+    if (writableRoots.length > 0) {
+        args.push('-v', `${workspace}:${workspace}:rw`);
+        const seen = new Set([workspace]);
+        // Raw (non-realpathed) extra roots so Docker Desktop can resolve them.
+        for (const raw of [os.tmpdir(), ...(settings.writableRoots ?? [])]) {
+            if (!raw || seen.has(raw))
+                continue;
+            seen.add(raw);
+            args.push('-v', `${raw}:${raw}:rw`);
+        }
+    }
+    else {
+        args.push('-v', `${workspace}:${workspace}:ro`);
+    }
+    args.push('-w', workspace, image, INNER_SHELL, '-c', command);
+    return {
+        ok: true,
+        profile: rawProfile,
+        backend: 'docker',
+        file: 'docker',
+        args,
+        network: allowNetwork ? 'allowed' : 'blocked',
+        writableRoots,
+    };
+}
+/** One-line audit description of an active plan. */
+function describeSandboxPlan(plan) {
+    if (plan.backend === 'none')
+        return 'sandbox: none';
+    const roots = plan.writableRoots.length > 0 ? plan.writableRoots.join(', ') : '(none)';
+    return `sandbox: ${plan.profile} via ${plan.backend}, network ${plan.network}, writable ${roots}`;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/tools/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/tools/sandbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2FH,gDAWC;AAGD,wDAcC;AASD,kEAEC;AAkED,8DAUC;AAGD,8DAMC;AAyCD,kDA8BC;AA0ED,oDAwHC;AAGD,kDAIC;AAreD,iDAA0C;AAC1C,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAE7B,6DAA+E;AAWlE,QAAA,gBAAgB,GAA8B,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;AAEvF,QAAA,gBAAgB,GAA8B,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAkDhG,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,mFAAmF;AACnF,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,wBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3F,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,MAAiC,EACjC,OAAkC;IAElC,OAAO;QACL,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,OAAO;QAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,OAAO;QAC5C,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,MAAM,EAAE,YAAY;QAC3D,aAAa,EAAE,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC;QAC5F,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK;KACvC,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,IAAI,MAAiC,CAAC;IACtC,IAAI,OAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,gCAAgB,GAAE,CAAC,OAAO,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,gCAAgB,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,IAAI,eAAgD,CAAC;AAErD,sFAAsF;AACtF,SAAgB,2BAA2B;IACzC,eAAe,GAAG,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,IAAc,EAAE,SAAS,GAAG,IAAI;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,GAAG,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAyB;IAC9C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACtF,CAAC;IACD,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,4BAA4B,EAAE,eAAe,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,8BAA8B,GAAG,CAAC,MAAM,IAAI,eAAe,EAAE;SACtE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,wEAAwE;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,sBAAsB,GAAG,CAAC,MAAM,IAAI,WAAW,EAAE;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW;IAClB,uEAAuE;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,8BAA8B,GAAG,CAAC,MAAM,IAAI,WAAW,EAAE;SAClE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED,sEAAsE;AACtE,SAAgB,yBAAyB,CAAC,KAAK,GAAG,KAAK;IACrD,IAAI,eAAe,IAAI,CAAC,KAAK;QAAE,OAAO,eAAe,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACrF,eAAe,GAAG;QAChB,QAAQ;QACR,QAAQ;QACR,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO;KACpD,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,SAAgB,yBAAyB,CAAC,IAAyB;IACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC,CAAC,SAAS;QACT,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9D,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnE,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,8EAA8E;AAC9E,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gDAAgD;AAChD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CACjC,aAAuB,EACvB,YAAqB,EACrB,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,8EAA8E;IAC9E,2DAA2D;IAC3D,KAAK,CAAC,IAAI,CACR,kJAAkJ,CACnJ,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,KAAK,MAAM,SAAS,IAAI;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC;KACxC,EAAE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAuB,EAAE,QAAuB;IAC1E,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,2GAA2G,CAAC;IACrH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CACpB,QAAuB,EACvB,IAAyB;IAEzB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEnC,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,4BAA4B,SAAS,GAAG,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB,SAAS,kBAAkB,EAAE,CAAC;QACtF,CAAC;QACD,iEAAiE;QACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,kEAAkE;IAClE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,SAAS;QAChC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE;QACP,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,IAAI,aAAa,GAAG,CAAC;QACvE,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;IACrE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,sCAAsC,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;QACrB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,OAAe,EACf,OAA2B;IAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC;IAE9C,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,uEAAuE;QACvE,yDAAyD;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;YAC3B,MAAM,EAAE,4BAA4B,MAAM,CAAC,UAAU,CAAC,sBAAsB,wBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzG,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,yBAAyB,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,yBAAyB,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,8BAA8B;YACzD,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC;IACpD,MAAM,aAAa,GACjB,UAAU,KAAK,iBAAiB;QAC9B,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7E,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC;YAChD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC7C,aAAa;YACb,MAAM;SACP,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,GAAa,CAAC,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9C,KAAK,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7E,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,wEAAwE;QACxE,uBAAuB;QACvB,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACnF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC7C,aAAa;SACd,CAAC;IACJ,CAAC;IAED,SAAS;IACT,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,sEAAsE;YAC9E,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,oEAAoE;IACpE,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,SAAS,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,SAAS,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC7C,aAAa;KACd,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAgB,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvF,OAAO,YAAY,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,OAAO,cAAc,KAAK,EAAE,CAAC;AACpG,CAAC"}

package/dist/tools/todo.d.ts

@@ -6,13 +6,13 @@
  * State is held in the shared tool-state module so the CLI can mirror it
  * into the main Store and render it in the UI.
  */
-import { type OpenHorseTool } from '../framework/tool';
+import { type OrionCodeTool } from '../framework/tool';
 import { type TodoItem } from '../framework/tool-state';
-export declare const todoWriteTool: OpenHorseTool;
+export declare const todoWriteTool: OrionCodeTool;
 /** Get current todos (for UI display) */
 export declare function getCurrentTodos(): TodoItem[];
 /** Format todos for display */
 export declare function formatTodosForDisplay(todos: TodoItem[]): string;
 export type { TodoItem };
-export declare const TODO_TOOLS: OpenHorseTool[];
+export declare const TODO_TOOLS: OrionCodeTool[];
 //# sourceMappingURL=todo.d.ts.map

package/dist/tools/web.d.ts

@@ -6,7 +6,15 @@
  *
  * Issue #32 #3.7: SSRF 拦截 - 拒绝访问内网地址 + Content-Length 上限
  */
-import { type OpenHorseTool } from '../framework/tool';
+import { type OrionCodeTool } from '../framework/tool';
+import { type Dispatcher } from 'undici';
+interface ResolvedAddress {
+    address: string;
+    family: number;
+}
+type DnsResolver = (hostname: string) => Promise<ResolvedAddress[]>;
+/** Test seam for deterministic DNS-rebinding and private-address cases. */
+export declare function setWebFetchDnsResolverForTests(resolver?: DnsResolver): void;
 /**
  * 检查 URL 是否为内网地址
  * @param url - 要检查的 URL
@@ -16,11 +24,14 @@ declare function isUrlSafeForSSRF(url: string): {
     safe: boolean;
     reason?: string;
 };
+type PinnedDispatcherBuilder = (hostname: string, addresses: ResolvedAddress[]) => Dispatcher | null;
+/** Test seam: replace the pinned-dispatcher builder (e.g. to capture pinned addresses). */
+export declare function setBuildPinnedDispatcherForTests(builder?: PinnedDispatcherBuilder): void;
 export { isUrlSafeForSSRF };
 /** Clear the fetch cache (test helper / debugging) */
 export declare function clearWebFetchCache(): void;
-export declare const webFetchTool: OpenHorseTool;
+export declare const webFetchTool: OrionCodeTool;
 export declare function resetWebSearchMcpClientForTests(): void;
-export declare const webSearchTool: OpenHorseTool;
-export declare const WEB_TOOLS: OpenHorseTool[];
+export declare const webSearchTool: OrionCodeTool;
+export declare const WEB_TOOLS: OrionCodeTool[];
 //# sourceMappingURL=web.d.ts.map

package/dist/tools/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/tools/web.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAqDlE;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkDzE;AAoED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAgN5B,sDAAsD;AACtD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AA0BD,eAAO,MAAM,YAAY,EAAE,aA4GzB,CAAC;AAkCH,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED,eAAO,MAAM,aAAa,EAAE,aAkI1B,CAAC;AAMH,eAAO,MAAM,SAAS,EAAE,aAAa,EAAkC,CAAC"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/tools/web.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AA2DhD,UAAU,eAAe;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;AAOpE,2EAA2E;AAC3E,wBAAgB,8BAA8B,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAE3E;AAmDD;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA+CzE;AAkHD,KAAK,uBAAuB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,UAAU,GAAG,IAAI,CAAC;AAKrG,2FAA2F;AAC3F,wBAAgB,gCAAgC,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAGxF;AAqED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAiV5B,sDAAsD;AACtD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AA0BD,eAAO,MAAM,YAAY,EAAE,aAmHzB,CAAC;AAkCH,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED,eAAO,MAAM,aAAa,EAAE,aAkI1B,CAAC;AAMH,eAAO,MAAM,SAAS,EAAE,aAAa,EAAkC,CAAC"}