@probelabs/visor 0.1.183-ee → 0.1.184-ee

package/dist/sdk/chunk-P2K4VOMU.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/providers/check-provider.interface.ts","../../src/utils/env-resolver.ts","../../src/utils/issue-normalizer.ts","../../src/utils/env-exposure.ts","../../src/providers/utcp-check-provider.ts"],"sourcesContent":["import { PRInfo } from '../pr-analyzer';\nimport { ReviewSummary } from '../reviewer';\nimport { EnvConfig, HumanInputRequest } from '../types/config';\n\n/**\n * Configuration for a check provider\n */\nexport interface CheckProviderConfig {\n  type: string;\n  prompt?: string;\n  eventContext?: Record<string, unknown>;\n  focus?: string;\n  command?: string; // For PR comment triggers\n  exec?: string; // For command execution (supports Liquid templates)\n  stdin?: string; // Optional stdin input (supports Liquid templates)\n  args?: string[] | Record<string, unknown>; // string[] deprecated for command args; Record for workflow inputs\n  command_args?: string[]; // MCP stdio command arguments\n  interpreter?: string;\n  url?: string;\n  method?: string;\n  headers?: Record<string, string>;\n  timeout?: number;\n  metadata?: Record<string, unknown>;\n  workingDirectory?: string;\n  env?: EnvConfig;\n  ai?: import('../types/config').AIProviderConfig;\n  /** AI model to use for this check - overrides global setting */\n  ai_model?: string;\n  /** AI provider to use for this check - overrides global setting */\n  ai_provider?: 'google' | 'anthropic' | 'openai' | string;\n  /** Check name for sessionID and logging purposes */\n  checkName?: string;\n  /** Session ID for AI session management */\n  sessionId?: string;\n  /** Script content for 'script' provider */\n  content?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Execution context passed to check providers\n */\nexport interface ExecutionContext {\n  /** Session information for AI session reuse */\n  parentSessionId?: string;\n  reuseSession?: boolean;\n  /** CLI message value (from --message argument) */\n  cliMessage?: string;\n  /** Conversation context - unified access to user message across transports (CLI, Slack, etc.) */\n  conversation?: import('../types/bot').ConversationContext;\n  /**\n   * Stage-local baseline of output history lengths per check name.\n   * When present, providers should expose an `outputs_history_stage` object in\n   * Liquid/JS contexts that slices the global history from this baseline.\n   * This enables stage-scoped assertions in the YAML test runner without\n   * relying on global execution history.\n   */\n  stageHistoryBase?: Record<string, number>;\n  /** Workflow inputs - available when executing within a workflow */\n  workflowInputs?: Record<string, unknown>;\n  /** Custom arguments passed from on_init 'with' directive */\n  args?: Record<string, unknown>;\n  /** SDK hooks for human input and check completion */\n  hooks?: {\n    onHumanInput?: (request: HumanInputRequest) => Promise<string>;\n    onPromptCaptured?: (info: { step: string; provider: string; prompt: string }) => void;\n    mockForStep?: (step: string) => unknown | undefined;\n    /** Returns true if the mock for a step has been consumed (for loop termination) */\n    isMockExhausted?: (step: string) => boolean;\n    /** Called when a check completes - useful for streaming TUI updates */\n    onCheckComplete?: (info: {\n      checkId: string;\n      result: { output?: unknown; content?: string };\n      checkConfig?: { type?: string; group?: string; criticality?: string; schema?: unknown };\n    }) => void;\n  };\n  /**\n   * Optional execution mode hints. The core engine does not read environment\n   * variables directly; callers (CLI, test runner) can set these flags to\n   * request certain behaviors without polluting core logic with test-specific\n   * branches.\n   */\n  mode?: {\n    /** true when running under the YAML test runner */\n    test?: boolean;\n    /** post review comments from grouped execution paths (used by tests) */\n    postGroupedComments?: boolean;\n    /** reset per-run guard state before grouped execution */\n    resetPerRunState?: boolean;\n  };\n  /**\n   * Absolute timestamp (ms since epoch) by which this execution must complete.\n   * Set by the engine from `Date.now() + timeout` and inherited by sub-workflows\n   * so nested steps know how much time the parent has left.\n   */\n  deadline?: number;\n  /** Optional event bus for emitting integration events (e.g., HumanInputRequested) */\n  eventBus?: import('../event-bus/event-bus').EventBus;\n  /** Optional webhook context (e.g., Slack Events API payload) */\n  webhookContext?: { webhookData?: Map<string, unknown>; eventType?: string };\n  /**\n   * Callback for capturing AI responses - used by scheduler to store previousResponse\n   * for recurring reminders. The text passed is the AI response before mrkdwn formatting.\n   */\n  responseCapture?: (text: string) => void;\n}\n\n/**\n * Abstract base class for all check providers\n * Implementing classes provide specific check functionality (AI, tool, script, etc.)\n */\nexport abstract class CheckProvider {\n  /**\n   * Get the unique name/type of this provider\n   */\n  abstract getName(): string;\n\n  /**\n   * Get a human-readable description of this provider\n   */\n  abstract getDescription(): string;\n\n  /**\n   * Validate provider-specific configuration\n   * @param config The configuration to validate\n   * @returns true if configuration is valid, false otherwise\n   */\n  abstract validateConfig(config: unknown): Promise<boolean>;\n\n  /**\n   * Execute the check on the given PR information\n   * @param prInfo Information about the pull request\n   * @param config Provider-specific configuration\n   * @param dependencyResults Optional results from dependency checks that this check depends on\n   * @param context Optional execution context with session info, hooks, and CLI state\n   * @returns Review summary with scores, issues, and comments\n   */\n  abstract execute(\n    prInfo: PRInfo,\n    config: CheckProviderConfig,\n    dependencyResults?: Map<string, ReviewSummary>,\n    context?: ExecutionContext\n  ): Promise<ReviewSummary>;\n\n  /**\n   * Get the list of configuration keys this provider supports\n   * Used for documentation and validation\n   */\n  abstract getSupportedConfigKeys(): string[];\n\n  /**\n   * Check if this provider is available (e.g., has required API keys)\n   * @returns true if provider can be used, false otherwise\n   */\n  abstract isAvailable(): Promise<boolean>;\n\n  /**\n   * Get provider requirements (e.g., environment variables needed)\n   */\n  abstract getRequirements(): string[];\n\n  /**\n   * Set webhook context for providers that need access to webhook data\n   * This is optional and only used by http_input providers\n   * @param webhookContext Map of endpoint paths to webhook data\n   */\n  setWebhookContext?(webhookContext: Map<string, unknown>): void;\n}\n","/**\n * Environment variable resolution utilities\n * Supports GitHub Actions-like syntax for referencing environment variables\n */\n\nimport { EnvConfig } from '../types/config';\n\n/**\n * Resolves environment variables in configuration values\n * Supports the following syntaxes:\n * - ${{ env.VARIABLE_NAME }} (GitHub Actions style)\n * - ${VARIABLE_NAME} (shell style)\n * - $VARIABLE_NAME (simple shell style)\n * - Direct environment variable names\n */\nexport class EnvironmentResolver {\n  /**\n   * Resolves a single configuration value that may contain environment variable references\n   */\n  static resolveValue(value: string | number | boolean): string | number | boolean {\n    if (typeof value !== 'string') {\n      return value;\n    }\n\n    // GitHub Actions style: ${{ env.VARIABLE_NAME }}\n    let resolved = value.replace(/\\$\\{\\{\\s*env\\.([A-Z_][A-Z0-9_]*)\\s*\\}\\}/g, (match, envVar) => {\n      return process.env[envVar] || match;\n    });\n\n    // Shell style: ${VARIABLE_NAME}\n    resolved = resolved.replace(/\\$\\{([A-Z_][A-Z0-9_]*)\\}/g, (match, envVar) => {\n      return process.env[envVar] || match;\n    });\n\n    // Simple shell style: $VARIABLE_NAME\n    resolved = resolved.replace(/\\$([A-Z_][A-Z0-9_]*)/g, (match, envVar) => {\n      return process.env[envVar] || match;\n    });\n\n    return resolved;\n  }\n\n  /**\n   * Resolves all environment variables in an EnvConfig object\n   */\n  static resolveEnvConfig(envConfig: EnvConfig): EnvConfig {\n    const resolved: EnvConfig = {};\n\n    for (const [key, value] of Object.entries(envConfig)) {\n      resolved[key] = this.resolveValue(value);\n    }\n\n    return resolved;\n  }\n\n  /**\n   * Applies environment configuration to the process environment\n   * This allows checks to access their specific environment variables\n   */\n  static applyEnvConfig(envConfig: EnvConfig): void {\n    const resolved = this.resolveEnvConfig(envConfig);\n\n    for (const [key, value] of Object.entries(resolved)) {\n      if (value !== undefined) {\n        process.env[key] = String(value);\n      }\n    }\n  }\n\n  /**\n   * Creates a temporary environment for a specific check execution\n   * Returns a cleanup function to restore the original environment\n   */\n  static withTemporaryEnv<T>(envConfig: EnvConfig, callback: () => T | Promise<T>): T | Promise<T> {\n    const resolved = this.resolveEnvConfig(envConfig);\n    const originalValues: Record<string, string | undefined> = {};\n\n    // Store original values and apply new ones\n    for (const [key, value] of Object.entries(resolved)) {\n      originalValues[key] = process.env[key];\n      if (value !== undefined) {\n        process.env[key] = String(value);\n      }\n    }\n\n    try {\n      const result = callback();\n\n      // If callback returns a promise, handle cleanup after it resolves\n      if (result instanceof Promise) {\n        return result.finally(() => {\n          // Restore original values\n          for (const [key, originalValue] of Object.entries(originalValues)) {\n            if (originalValue === undefined) {\n              delete process.env[key];\n            } else {\n              process.env[key] = originalValue;\n            }\n          }\n        });\n      }\n\n      // Restore original values immediately for sync callbacks\n      for (const [key, originalValue] of Object.entries(originalValues)) {\n        if (originalValue === undefined) {\n          delete process.env[key];\n        } else {\n          process.env[key] = originalValue;\n        }\n      }\n\n      return result;\n    } catch (error) {\n      // Restore original values on error\n      for (const [key, originalValue] of Object.entries(originalValues)) {\n        if (originalValue === undefined) {\n          delete process.env[key];\n        } else {\n          process.env[key] = originalValue;\n        }\n      }\n      throw error;\n    }\n  }\n\n  /**\n   * Validates that all required environment variables are available\n   */\n  static validateRequiredEnvVars(envConfig: EnvConfig, requiredVars: string[]): string[] {\n    const resolved = this.resolveEnvConfig(envConfig);\n    const missing: string[] = [];\n\n    for (const varName of requiredVars) {\n      const value = resolved[varName] || process.env[varName];\n      if (!value) {\n        missing.push(varName);\n      }\n    }\n\n    return missing;\n  }\n\n  /**\n   * Resolves environment variables in HTTP headers\n   * Each header value is processed through resolveValue to replace env var references\n   */\n  static resolveHeaders(headers: Record<string, string>): Record<string, string> {\n    const resolved: Record<string, string> = {};\n    for (const [key, value] of Object.entries(headers)) {\n      resolved[key] = String(this.resolveValue(value));\n    }\n    return resolved;\n  }\n\n  /**\n   * Sanitizes headers for logging/telemetry by redacting sensitive values\n   * Headers like Authorization, API keys, and cookies are replaced with [REDACTED]\n   */\n  static sanitizeHeaders(headers: Record<string, string>): Record<string, string> {\n    const sensitiveHeaders = ['authorization', 'x-api-key', 'cookie', 'set-cookie'];\n    const sanitized: Record<string, string> = {};\n\n    for (const [key, value] of Object.entries(headers)) {\n      if (sensitiveHeaders.includes(key.toLowerCase())) {\n        sanitized[key] = '[REDACTED]';\n      } else {\n        sanitized[key] = value;\n      }\n    }\n\n    return sanitized;\n  }\n}\n","/**\n * Shared issue normalization utilities.\n *\n * Used by MCP, UTCP, and command providers to extract and normalize\n * ReviewIssue objects from tool/command output.\n */\nimport { ReviewIssue } from '../reviewer';\n\n/**\n * Extract issues from tool output.\n * Handles: JSON strings, arrays of issues, objects with `issues` property, single issue objects.\n */\nexport function extractIssuesFromOutput(\n  output: unknown,\n  defaultRuleId?: string\n): { issues: ReviewIssue[]; remainingOutput: unknown } | null {\n  if (output === null || output === undefined) {\n    return null;\n  }\n\n  // If output is a string, try to parse as JSON\n  if (typeof output === 'string') {\n    try {\n      const parsed = JSON.parse(output);\n      return extractIssuesFromOutput(parsed, defaultRuleId);\n    } catch {\n      return null;\n    }\n  }\n\n  // If output is an array of issues\n  if (Array.isArray(output)) {\n    const issues = normalizeIssueArray(output, defaultRuleId);\n    if (issues) {\n      return { issues, remainingOutput: undefined };\n    }\n    return null;\n  }\n\n  // If output is an object with issues property\n  if (typeof output === 'object') {\n    const record = output as Record<string, unknown>;\n\n    if (Array.isArray(record.issues)) {\n      const issues = normalizeIssueArray(record.issues, defaultRuleId);\n      if (!issues) {\n        return null;\n      }\n\n      const remaining = { ...record };\n      delete (remaining as { issues?: unknown }).issues;\n\n      return {\n        issues,\n        remainingOutput: Object.keys(remaining).length > 0 ? remaining : undefined,\n      };\n    }\n\n    // Check if output itself is a single issue\n    const singleIssue = normalizeIssue(record, defaultRuleId);\n    if (singleIssue) {\n      return { issues: [singleIssue], remainingOutput: undefined };\n    }\n  }\n\n  return null;\n}\n\n/**\n * Normalize an array of issues. Returns null if any element cannot be normalized.\n */\nexport function normalizeIssueArray(\n  values: unknown[],\n  defaultRuleId?: string\n): ReviewIssue[] | null {\n  const normalized: ReviewIssue[] = [];\n  for (const value of values) {\n    const issue = normalizeIssue(value, defaultRuleId);\n    if (!issue) {\n      return null;\n    }\n    normalized.push(issue);\n  }\n  return normalized;\n}\n\n/**\n * Normalize a single issue from raw data.\n * Accepts various field aliases (message/text/description, severity/level/priority, etc.)\n */\nexport function normalizeIssue(raw: unknown, defaultRuleId = 'tool'): ReviewIssue | null {\n  if (!raw || typeof raw !== 'object') {\n    return null;\n  }\n\n  const data = raw as Record<string, unknown>;\n\n  // Only accept string values for issue message fields.\n  // Non-string values (e.g. Slack's `message: {text: \"...\", ...}` object)\n  // must not be coerced — they are API payloads, not issue descriptions.\n  const rawMessage = data.message || data.text || data.description || data.summary;\n  if (typeof rawMessage !== 'string') {\n    return null;\n  }\n  const message = rawMessage.trim();\n  if (!message) {\n    return null;\n  }\n\n  const allowedSeverities = new Set(['info', 'warning', 'error', 'critical']);\n  const severityRaw = toTrimmedString(data.severity || data.level || data.priority);\n  let severity: ReviewIssue['severity'] = 'warning';\n  if (severityRaw) {\n    const lower = severityRaw.toLowerCase();\n    if (allowedSeverities.has(lower)) {\n      severity = lower as ReviewIssue['severity'];\n    }\n  }\n\n  const allowedCategories = new Set(['security', 'performance', 'style', 'logic', 'documentation']);\n  const categoryRaw = toTrimmedString(data.category || data.type || data.group);\n  let category: ReviewIssue['category'] = 'logic';\n  if (categoryRaw && allowedCategories.has(categoryRaw.toLowerCase())) {\n    category = categoryRaw.toLowerCase() as ReviewIssue['category'];\n  }\n\n  const file = toTrimmedString(data.file || data.path || data.filename) || 'system';\n  const line = toNumber(data.line || data.startLine || data.lineNumber) ?? 0;\n  const endLine = toNumber(data.endLine || data.end_line || data.stopLine);\n  const suggestion = toTrimmedString(data.suggestion);\n  const replacement = toTrimmedString(data.replacement);\n  const ruleId =\n    toTrimmedString(data.ruleId || data.rule || data.id || data.check) || defaultRuleId;\n\n  return {\n    file,\n    line,\n    endLine: endLine ?? undefined,\n    ruleId,\n    message,\n    severity,\n    category,\n    suggestion: suggestion || undefined,\n    replacement: replacement || undefined,\n  };\n}\n\nexport function toTrimmedString(value: unknown): string | null {\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : null;\n  }\n  if (value !== null && value !== undefined && typeof value.toString === 'function') {\n    const converted = String(value).trim();\n    return converted.length > 0 ? converted : null;\n  }\n  return null;\n}\n\nexport function toNumber(value: unknown): number | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  const num = Number(value);\n  if (Number.isFinite(num)) {\n    return Math.trunc(num);\n  }\n  return null;\n}\n","export type EnvMap = Record<string, string>;\n\n// Default: expose all env vars except a conservative denylist.\n// If VISOR_ALLOW_ENV is set and not '*', restrict to that allowlist.\n// VISOR_DENY_ENV can further mask exact keys or prefix* patterns.\nexport function buildSandboxEnv(input: NodeJS.ProcessEnv): EnvMap {\n  const denyDefaults = [\n    'GITHUB_TOKEN',\n    'INPUT_GITHUB-TOKEN',\n    'ACTIONS_RUNTIME_TOKEN',\n    'ACTIONS_ID_TOKEN_REQUEST_TOKEN',\n    'AWS_ACCESS_KEY_ID',\n    'AWS_SECRET_ACCESS_KEY',\n    'AWS_SESSION_TOKEN',\n    'AZURE_CLIENT_SECRET',\n    'GOOGLE_APPLICATION_CREDENTIALS',\n    'OPENAI_API_KEY',\n    'ANTHROPIC_API_KEY',\n    'HUGGINGFACE_API_KEY',\n    'CLAUDE_CODE_API_KEY',\n    'PROBE_API_KEY',\n  ];\n\n  const denyExtra = (input.VISOR_DENY_ENV || '')\n    .split(',')\n    .map(s => s.trim())\n    .filter(Boolean);\n  const deny = Array.from(new Set([...denyDefaults, ...denyExtra]));\n  const allowSpec = (input.VISOR_ALLOW_ENV || '*').trim();\n\n  const denyMatch = (key: string): boolean => {\n    for (const pat of deny) {\n      if (!pat) continue;\n      if (pat.endsWith('*')) {\n        const prefix = pat.slice(0, -1);\n        if (key.startsWith(prefix)) return true;\n      } else if (key === pat) {\n        return true;\n      }\n    }\n    if (/(_TOKEN|_SECRET|_PASSWORD|_PRIVATE_KEY)$/i.test(key)) return true;\n    return false;\n  };\n\n  const out: EnvMap = {};\n  if (allowSpec !== '*') {\n    const allow = allowSpec\n      .split(',')\n      .map(s => s.trim())\n      .filter(Boolean);\n    for (const key of allow) {\n      const val = input[key];\n      if (key && val !== undefined && !denyMatch(key)) out[key] = String(val);\n    }\n    return out;\n  }\n\n  for (const [k, v] of Object.entries(input)) {\n    if (v === undefined || v === null) continue;\n    if (denyMatch(k)) continue;\n    out[k] = String(v);\n  }\n  return out;\n}\n","import { CheckProvider, CheckProviderConfig } from './check-provider.interface';\nimport { PRInfo } from '../pr-analyzer';\nimport { ReviewSummary, ReviewIssue } from '../reviewer';\nimport { logger } from '../logger';\nimport { Liquid } from 'liquidjs';\nimport { createExtendedLiquid } from '../liquid-extensions';\nimport Sandbox from '@nyariv/sandboxjs';\nimport { createSecureSandbox, compileAndRun } from '../utils/sandbox';\nimport { EnvironmentResolver } from '../utils/env-resolver';\nimport { extractIssuesFromOutput } from '../utils/issue-normalizer';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * UTCP Check Provider Configuration\n */\nexport interface UtcpCheckConfig extends CheckProviderConfig {\n  /** UTCP manual source: URL string, file path string, or inline call template object */\n  manual: string | Record<string, unknown>;\n  /** Tool method name to call (format: manual_name.tool_name or just tool_name) */\n  method: string;\n  /** Arguments to pass to the UTCP tool (supports Liquid templates) */\n  methodArgs?: Record<string, unknown>;\n  /** Transform template for method arguments (Liquid) - overrides methodArgs */\n  argsTransform?: string;\n  /** UTCP variables for manual authentication/configuration */\n  variables?: Record<string, string>;\n  /** UTCP plugins to load (default: ['http']) */\n  plugins?: string[];\n  /** Transform template for output (Liquid) */\n  transform?: string;\n  /** Transform using JavaScript expressions */\n  transform_js?: string;\n  /** Timeout in seconds (default: 60) */\n  timeout?: number;\n}\n\n/**\n * Check provider that calls UTCP (Universal Tool Calling Protocol) tools directly.\n * UTCP is a client-side protocol where tools publish JSON \"manuals\" describing\n * how to call them via their native protocols (HTTP, CLI, SSE, etc.).\n *\n * Supports manual discovery from:\n * - HTTP/HTTPS URLs (GET endpoint returning UTCP manual)\n * - Local JSON files\n * - Inline call template objects\n */\nexport class UtcpCheckProvider extends CheckProvider {\n  private liquid: Liquid;\n  private sandbox?: Sandbox;\n  private sdkAvailable: boolean | null = null;\n\n  constructor() {\n    super();\n    this.liquid = createExtendedLiquid({\n      cache: false,\n      strictFilters: false,\n      strictVariables: false,\n    });\n  }\n\n  getName(): string {\n    return 'utcp';\n  }\n\n  getDescription(): string {\n    return 'Call UTCP tools directly using their native protocols (HTTP, CLI, SSE)';\n  }\n\n  async validateConfig(config: unknown): Promise<boolean> {\n    if (!config || typeof config !== 'object') {\n      return false;\n    }\n\n    const cfg = config as UtcpCheckConfig;\n\n    // Type must be utcp\n    if (cfg.type !== 'utcp') {\n      return false;\n    }\n\n    // Manual is required\n    if (!cfg.manual) {\n      logger.error('UTCP check requires a manual (URL, file path, or inline call template)');\n      return false;\n    }\n\n    // Method is required\n    if (!cfg.method || typeof cfg.method !== 'string') {\n      logger.error('UTCP check requires a method name');\n      return false;\n    }\n\n    // Validate manual format\n    if (typeof cfg.manual === 'string') {\n      // URL validation\n      if (cfg.manual.startsWith('http://') || cfg.manual.startsWith('https://')) {\n        try {\n          const parsedUrl = new URL(cfg.manual);\n          if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {\n            logger.error(`Invalid URL protocol for UTCP manual: ${parsedUrl.protocol}`);\n            return false;\n          }\n        } catch {\n          logger.error(`Invalid URL format for UTCP manual: ${cfg.manual}`);\n          return false;\n        }\n      }\n      // File paths are validated at execution time\n    } else if (typeof cfg.manual === 'object') {\n      // Inline call template must have call_template_type\n      if (!cfg.manual.call_template_type) {\n        logger.error('Inline UTCP manual must have call_template_type');\n        return false;\n      }\n    } else {\n      logger.error('UTCP manual must be a URL string, file path, or inline call template object');\n      return false;\n    }\n\n    return true;\n  }\n\n  async execute(\n    prInfo: PRInfo,\n    config: CheckProviderConfig,\n    dependencyResults?: Map<string, ReviewSummary>,\n    sessionInfo?: any\n  ): Promise<ReviewSummary> {\n    const cfg = config as UtcpCheckConfig;\n\n    // Test hook: mock output for this step\n    try {\n      const stepName = (config as any).checkName || 'unknown';\n      const mock = sessionInfo?.hooks?.mockForStep?.(String(stepName));\n      if (mock !== undefined) {\n        const ms = mock as any;\n        const issuesArr = Array.isArray(ms?.issues) ? (ms.issues as any[]) : [];\n        const out = ms && typeof ms === 'object' && 'output' in ms ? ms.output : ms;\n        return {\n          issues: issuesArr,\n          ...(out !== undefined ? { output: out } : {}),\n        } as ReviewSummary;\n      }\n    } catch {}\n\n    try {\n      // Build template context\n      const templateContext = {\n        pr: {\n          number: prInfo.number,\n          title: prInfo.title,\n          author: prInfo.author,\n          branch: prInfo.head,\n          base: prInfo.base,\n        },\n        files: prInfo.files,\n        fileCount: prInfo.files.length,\n        outputs: this.buildOutputContext(dependencyResults),\n        args: sessionInfo?.args || {},\n        env: this.getSafeEnvironmentVariables(),\n        inputs: (config as any).workflowInputs || sessionInfo?.workflowInputs || {},\n      };\n\n      // Render method arguments\n      let methodArgs = cfg.methodArgs || {};\n      if (cfg.argsTransform) {\n        const rendered = await this.liquid.parseAndRender(cfg.argsTransform, templateContext);\n        try {\n          methodArgs = JSON.parse(rendered);\n        } catch (error) {\n          logger.error(`Failed to parse argsTransform as JSON: ${error}`);\n          return {\n            issues: [\n              {\n                file: 'utcp',\n                line: 0,\n                ruleId: 'utcp/args_transform_error',\n                message: `Failed to parse argsTransform: ${error instanceof Error ? error.message : 'Unknown error'}`,\n                severity: 'error',\n                category: 'logic',\n              },\n            ],\n          };\n        }\n      } else if (methodArgs && typeof methodArgs === 'object') {\n        // Recursively render Liquid templates in methodArgs\n        const renderValue = async (val: unknown): Promise<unknown> => {\n          if (typeof val === 'string' && (val.includes('{{') || val.includes('{%'))) {\n            return await this.liquid.parseAndRender(val, templateContext);\n          } else if (val && typeof val === 'object' && !Array.isArray(val)) {\n            const rendered: Record<string, unknown> = {};\n            for (const [k, v] of Object.entries(val)) {\n              rendered[k] = await renderValue(v);\n            }\n            return rendered;\n          } else if (Array.isArray(val)) {\n            return Promise.all(val.map(item => renderValue(item)));\n          }\n          return val;\n        };\n        methodArgs = (await renderValue(methodArgs)) as Record<string, unknown>;\n      }\n\n      // Resolve variables through environment resolver\n      const resolvedVariables: Record<string, string> = {};\n      if (cfg.variables) {\n        for (const [key, value] of Object.entries(cfg.variables)) {\n          resolvedVariables[key] = String(EnvironmentResolver.resolveValue(value));\n        }\n      }\n\n      // Call tool via shared static method (handles SDK import, client lifecycle, timeout)\n      const result = await UtcpCheckProvider.callTool(cfg.manual, cfg.method, methodArgs, {\n        variables: resolvedVariables,\n        plugins: cfg.plugins || ['http'],\n        timeoutMs: (cfg.timeout || 60) * 1000,\n      });\n\n      {\n        // Apply transforms\n        let finalOutput = result;\n\n        // Apply Liquid transform\n        if (cfg.transform) {\n          try {\n            const transformContext = {\n              ...templateContext,\n              output: result,\n            };\n            const rendered = await this.liquid.parseAndRender(cfg.transform, transformContext);\n            try {\n              finalOutput = JSON.parse(rendered.trim());\n            } catch {\n              finalOutput = rendered.trim();\n            }\n          } catch (error) {\n            logger.error(`Failed to apply Liquid transform: ${error}`);\n            // Throw to let the outer finally close the client before returning\n            throw new Error(\n              `Failed to apply transform: ${error instanceof Error ? error.message : 'Unknown error'}`\n            );\n          }\n        }\n\n        // Apply JavaScript transform\n        if (cfg.transform_js) {\n          try {\n            this.sandbox = createSecureSandbox();\n            const scope = {\n              output: finalOutput,\n              pr: templateContext.pr,\n              files: templateContext.files,\n              outputs: templateContext.outputs,\n              env: templateContext.env,\n            };\n            finalOutput = compileAndRun<unknown>(\n              this.sandbox,\n              `return (${cfg.transform_js});`,\n              scope,\n              { injectLog: true, wrapFunction: false, logPrefix: '[utcp:transform_js]' }\n            );\n          } catch (error) {\n            logger.error(`Failed to apply JavaScript transform: ${error}`);\n            // Throw to let the outer finally close the client before returning\n            throw new Error(\n              `Failed to apply JavaScript transform: ${error instanceof Error ? error.message : 'Unknown error'}`\n            );\n          }\n        }\n\n        // Extract issues from output\n        const extracted = extractIssuesFromOutput(finalOutput, 'utcp');\n        if (extracted) {\n          return {\n            issues: extracted.issues,\n            ...(extracted.remainingOutput ? { output: extracted.remainingOutput } : {}),\n          } as ReviewSummary;\n        }\n\n        // Return output directly\n        return {\n          issues: [],\n          ...(finalOutput ? { output: finalOutput } : {}),\n        } as ReviewSummary;\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n      const isTimeout = this.isTimeoutError(error);\n      const severity: ReviewIssue['severity'] = isTimeout ? 'warning' : 'error';\n      const ruleId = isTimeout ? 'utcp/timeout' : 'utcp/execution_error';\n\n      if (isTimeout) {\n        logger.warn(`UTCP check timed out: ${errorMessage}`);\n      } else {\n        logger.error(`UTCP check failed: ${errorMessage}`);\n      }\n\n      return {\n        issues: [\n          {\n            file: 'utcp',\n            line: 0,\n            ruleId,\n            message: isTimeout\n              ? `UTCP check timed out: ${errorMessage}`\n              : `UTCP check failed: ${errorMessage}`,\n            severity,\n            category: 'logic',\n          },\n        ],\n      };\n    }\n  }\n\n  /**\n   * Resolve manual config to a UTCP call template object.\n   * Shared utility used by both the standalone UTCP provider and the AI check provider's UTCP-to-MCP bridge.\n   */\n  static async resolveManualCallTemplate(\n    manual: string | Record<string, unknown>\n  ): Promise<Record<string, unknown>> {\n    if (typeof manual === 'object') {\n      if (!manual.call_template_type) {\n        throw new Error('Inline manual must have call_template_type');\n      }\n      // Ensure it has a name\n      if (!manual.name) {\n        manual.name = 'inline';\n      }\n      return manual;\n    }\n\n    // URL-based discovery\n    if (manual.startsWith('http://') || manual.startsWith('https://')) {\n      return {\n        name: UtcpCheckProvider.deriveManualName(manual),\n        call_template_type: 'http',\n        url: manual,\n        http_method: 'GET',\n      };\n    }\n\n    // File-based discovery\n\n    // Security: reject null bytes that could bypass path validation\n    if (manual.includes('\\0')) {\n      throw new Error('Invalid UTCP manual path: null bytes are not allowed');\n    }\n\n    const resolvedPath = path.resolve(manual);\n\n    // Security: ensure resolved path stays within cwd (prevent path traversal)\n    const cwd = path.resolve(process.cwd());\n    const normalizedResolved = path.normalize(resolvedPath);\n    const cwdPrefix = cwd.endsWith(path.sep) ? cwd : cwd + path.sep;\n    if (normalizedResolved !== cwd && !normalizedResolved.startsWith(cwdPrefix)) {\n      throw new Error(\n        `Path traversal detected: \"${manual}\" resolves outside the project directory. ` +\n          `UTCP manual paths must be within the project directory.`\n      );\n    }\n\n    // Security: resolve symlinks and re-validate to prevent symlink attacks\n    if (fs.existsSync(resolvedPath)) {\n      const realPath = fs.realpathSync(resolvedPath);\n      if (realPath !== cwd && !realPath.startsWith(cwdPrefix)) {\n        throw new Error(\n          `Symlink traversal detected: \"${manual}\" points outside the project directory via symlink.`\n        );\n      }\n    }\n\n    // Validate file exists and is readable\n    if (!fs.existsSync(resolvedPath)) {\n      throw new Error(`UTCP manual file not found: ${resolvedPath}`);\n    }\n\n    // Read and parse the file\n    let content: string;\n    try {\n      content = fs.readFileSync(resolvedPath, 'utf-8');\n    } catch (err) {\n      throw new Error(\n        `Failed to read UTCP manual file: ${resolvedPath}: ${err instanceof Error ? err.message : 'Unknown error'}`\n      );\n    }\n\n    let parsed: Record<string, unknown>;\n    try {\n      parsed = JSON.parse(content);\n    } catch (err) {\n      throw new Error(\n        `Failed to parse UTCP manual file as JSON: ${resolvedPath}: ${err instanceof Error ? err.message : 'Unknown error'}`\n      );\n    }\n\n    if (parsed.call_template_type) {\n      // File contains a call template directly - use as-is\n      if (!parsed.name) {\n        parsed.name = path.basename(resolvedPath, path.extname(resolvedPath));\n      }\n      return parsed;\n    }\n\n    // File contains a UTCP manual - use file call template to let SDK handle it\n    // Load the file plugin for file-based manuals\n    try {\n      await import('@utcp/file');\n    } catch {\n      logger.debug('UTCP @utcp/file plugin not available, attempting direct parse');\n    }\n\n    return {\n      name: parsed.name || path.basename(resolvedPath, path.extname(resolvedPath)),\n      call_template_type: 'file',\n      file_path: resolvedPath,\n      allowed_communication_protocols: ['file', 'http', 'https'],\n    };\n  }\n\n  /**\n   * Derive a manual name from a URL.\n   * Shared utility for UTCP manual name derivation.\n   */\n  static deriveManualName(url: string): string {\n    try {\n      const parsed = new URL(url);\n      // Use hostname with dots replaced by underscores\n      return parsed.hostname.replace(/\\./g, '_').replace(/-/g, '_');\n    } catch {\n      return 'utcp_manual';\n    }\n  }\n\n  /**\n   * Call a UTCP tool directly. Shared by both the standalone provider and the MCP-bridge SSE server.\n   * Handles SDK import, plugin loading, client creation, tool calling, and cleanup.\n   */\n  static async callTool(\n    manual: string | Record<string, unknown>,\n    toolName: string,\n    args: Record<string, unknown>,\n    options?: {\n      variables?: Record<string, string>;\n      plugins?: string[];\n      timeoutMs?: number;\n    }\n  ): Promise<unknown> {\n    const variables = options?.variables || {};\n    const plugins = options?.plugins || ['http'];\n    const timeoutMs = options?.timeoutMs || 60000;\n\n    // Dynamic import UTCP SDK and plugins\n    const { UtcpClient } = await import('@utcp/sdk');\n    for (const plugin of plugins) {\n      try {\n        await import(`@utcp/${plugin}`);\n      } catch {\n        logger.debug(`UTCP plugin @utcp/${plugin} not available`);\n      }\n    }\n\n    // Resolve manual to call template\n    const callTemplate = await UtcpCheckProvider.resolveManualCallTemplate(manual);\n\n    // Create client\n    const client = await UtcpClient.create(process.cwd(), {\n      manual_call_templates: [callTemplate],\n      variables,\n    } as any);\n\n    try {\n      // Resolve tool name - try exact match first, then suffix match\n      let resolvedToolName = toolName;\n      try {\n        const tools = await client.getTools();\n        const toolNames = tools.map((t: any) => t.name as string);\n        logger.debug(`UTCP tools available: ${JSON.stringify(toolNames)}`);\n\n        if (!toolNames.includes(resolvedToolName)) {\n          const suffixMatch = toolNames.find((name: string) =>\n            name.endsWith(`.${resolvedToolName}`)\n          );\n          if (suffixMatch) {\n            logger.debug(\n              `UTCP method '${resolvedToolName}' resolved to '${suffixMatch}' via suffix match`\n            );\n            resolvedToolName = suffixMatch;\n          }\n        }\n      } catch (err) {\n        logger.debug(`Failed to list UTCP tools for name resolution: ${err}`);\n      }\n\n      // Call tool with timeout (clear timer on success to avoid resource leak)\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      const result = await Promise.race([\n        client.callTool(resolvedToolName, args as Record<string, any>),\n        new Promise<never>((_, reject) => {\n          timer = setTimeout(\n            () => reject(new Error(`UTCP tool '${toolName}' timed out after ${timeoutMs}ms`)),\n            timeoutMs\n          );\n        }),\n      ]).finally(() => clearTimeout(timer));\n\n      return result;\n    } finally {\n      try {\n        if (typeof (client as any).close === 'function') {\n          await (client as any).close();\n        }\n      } catch {}\n    }\n  }\n\n  /**\n   * Check if an error is a timeout error\n   */\n  private isTimeoutError(error: unknown): boolean {\n    const err = error as { message?: unknown; code?: unknown; cause?: unknown };\n    const message = typeof err?.message === 'string' ? err.message.toLowerCase() : '';\n    const code = typeof err?.code === 'string' ? err.code.toLowerCase() : '';\n    return message.includes('timeout') || message.includes('timed out') || code.includes('timeout');\n  }\n\n  /**\n   * Build output context from dependency results\n   */\n  private buildOutputContext(\n    dependencyResults?: Map<string, ReviewSummary>\n  ): Record<string, unknown> {\n    if (!dependencyResults) {\n      return {};\n    }\n    const outputs: Record<string, unknown> = {};\n    for (const [checkName, result] of dependencyResults) {\n      const summary = result as ReviewSummary & { output?: unknown };\n      outputs[checkName] = summary.output !== undefined ? summary.output : summary;\n    }\n    return outputs;\n  }\n\n  /**\n   * Get safe environment variables\n   */\n  private getSafeEnvironmentVariables(): Record<string, string> {\n    const safeVars: Record<string, string> = {};\n    const { buildSandboxEnv } = require('../utils/env-exposure');\n    const merged = buildSandboxEnv(process.env);\n    for (const [key, value] of Object.entries(merged)) {\n      safeVars[key] = String(value);\n    }\n    safeVars['PWD'] = process.cwd();\n    return safeVars;\n  }\n\n  getSupportedConfigKeys(): string[] {\n    return [\n      'type',\n      'manual',\n      'method',\n      'methodArgs',\n      'argsTransform',\n      'variables',\n      'plugins',\n      'transform',\n      'transform_js',\n      'timeout',\n      'depends_on',\n      'on',\n      'if',\n      'group',\n    ];\n  }\n\n  async isAvailable(): Promise<boolean> {\n    if (this.sdkAvailable !== null) {\n      return this.sdkAvailable;\n    }\n    try {\n      await import('@utcp/sdk');\n      this.sdkAvailable = true;\n    } catch {\n      this.sdkAvailable = false;\n    }\n    return this.sdkAvailable;\n  }\n\n  getRequirements(): string[] {\n    return [\n      '@utcp/sdk package installed',\n      'UTCP manual source (URL, file path, or inline)',\n      'Tool method name',\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,IA+GsB;AA/GtB;AAAA;AAAA;AA+GO,IAAe,gBAAf,MAA6B;AAAA,IAwDpC;AAAA;AAAA;;;ACvKA,IAea;AAfb;AAAA;AAAA;AAeO,IAAM,sBAAN,MAA0B;AAAA;AAAA;AAAA;AAAA,MAI/B,OAAO,aAAa,OAA6D;AAC/E,YAAI,OAAO,UAAU,UAAU;AAC7B,iBAAO;AAAA,QACT;AAGA,YAAI,WAAW,MAAM,QAAQ,4CAA4C,CAAC,OAAO,WAAW;AAC1F,iBAAO,QAAQ,IAAI,MAAM,KAAK;AAAA,QAChC,CAAC;AAGD,mBAAW,SAAS,QAAQ,6BAA6B,CAAC,OAAO,WAAW;AAC1E,iBAAO,QAAQ,IAAI,MAAM,KAAK;AAAA,QAChC,CAAC;AAGD,mBAAW,SAAS,QAAQ,yBAAyB,CAAC,OAAO,WAAW;AACtE,iBAAO,QAAQ,IAAI,MAAM,KAAK;AAAA,QAChC,CAAC;AAED,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,iBAAiB,WAAiC;AACvD,cAAM,WAAsB,CAAC;AAE7B,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACpD,mBAAS,GAAG,IAAI,KAAK,aAAa,KAAK;AAAA,QACzC;AAEA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,OAAO,eAAe,WAA4B;AAChD,cAAM,WAAW,KAAK,iBAAiB,SAAS;AAEhD,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACnD,cAAI,UAAU,QAAW;AACvB,oBAAQ,IAAI,GAAG,IAAI,OAAO,KAAK;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,OAAO,iBAAoB,WAAsB,UAAgD;AAC/F,cAAM,WAAW,KAAK,iBAAiB,SAAS;AAChD,cAAM,iBAAqD,CAAC;AAG5D,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACnD,yBAAe,GAAG,IAAI,QAAQ,IAAI,GAAG;AACrC,cAAI,UAAU,QAAW;AACvB,oBAAQ,IAAI,GAAG,IAAI,OAAO,KAAK;AAAA,UACjC;AAAA,QACF;AAEA,YAAI;AACF,gBAAM,SAAS,SAAS;AAGxB,cAAI,kBAAkB,SAAS;AAC7B,mBAAO,OAAO,QAAQ,MAAM;AAE1B,yBAAW,CAAC,KAAK,aAAa,KAAK,OAAO,QAAQ,cAAc,GAAG;AACjE,oBAAI,kBAAkB,QAAW;AAC/B,yBAAO,QAAQ,IAAI,GAAG;AAAA,gBACxB,OAAO;AACL,0BAAQ,IAAI,GAAG,IAAI;AAAA,gBACrB;AAAA,cACF;AAAA,YACF,CAAC;AAAA,UACH;AAGA,qBAAW,CAAC,KAAK,aAAa,KAAK,OAAO,QAAQ,cAAc,GAAG;AACjE,gBAAI,kBAAkB,QAAW;AAC/B,qBAAO,QAAQ,IAAI,GAAG;AAAA,YACxB,OAAO;AACL,sBAAQ,IAAI,GAAG,IAAI;AAAA,YACrB;AAAA,UACF;AAEA,iBAAO;AAAA,QACT,SAAS,OAAO;AAEd,qBAAW,CAAC,KAAK,aAAa,KAAK,OAAO,QAAQ,cAAc,GAAG;AACjE,gBAAI,kBAAkB,QAAW;AAC/B,qBAAO,QAAQ,IAAI,GAAG;AAAA,YACxB,OAAO;AACL,sBAAQ,IAAI,GAAG,IAAI;AAAA,YACrB;AAAA,UACF;AACA,gBAAM;AAAA,QACR;AAAA,MACF;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,wBAAwB,WAAsB,cAAkC;AACrF,cAAM,WAAW,KAAK,iBAAiB,SAAS;AAChD,cAAM,UAAoB,CAAC;AAE3B,mBAAW,WAAW,cAAc;AAClC,gBAAM,QAAQ,SAAS,OAAO,KAAK,QAAQ,IAAI,OAAO;AACtD,cAAI,CAAC,OAAO;AACV,oBAAQ,KAAK,OAAO;AAAA,UACtB;AAAA,QACF;AAEA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,OAAO,eAAe,SAAyD;AAC7E,cAAM,WAAmC,CAAC;AAC1C,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,mBAAS,GAAG,IAAI,OAAO,KAAK,aAAa,KAAK,CAAC;AAAA,QACjD;AACA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,OAAO,gBAAgB,SAAyD;AAC9E,cAAM,mBAAmB,CAAC,iBAAiB,aAAa,UAAU,YAAY;AAC9E,cAAM,YAAoC,CAAC;AAE3C,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,cAAI,iBAAiB,SAAS,IAAI,YAAY,CAAC,GAAG;AAChD,sBAAU,GAAG,IAAI;AAAA,UACnB,OAAO;AACL,sBAAU,GAAG,IAAI;AAAA,UACnB;AAAA,QACF;AAEA,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;;;AChKO,SAAS,wBACd,QACA,eAC4D;AAC5D,MAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,WAAO;AAAA,EACT;AAGA,MAAI,OAAO,WAAW,UAAU;AAC9B,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,MAAM;AAChC,aAAO,wBAAwB,QAAQ,aAAa;AAAA,IACtD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAM,SAAS,oBAAoB,QAAQ,aAAa;AACxD,QAAI,QAAQ;AACV,aAAO,EAAE,QAAQ,iBAAiB,OAAU;AAAA,IAC9C;AACA,WAAO;AAAA,EACT;AAGA,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,SAAS;AAEf,QAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,YAAM,SAAS,oBAAoB,OAAO,QAAQ,aAAa;AAC/D,UAAI,CAAC,QAAQ;AACX,eAAO;AAAA,MACT;AAEA,YAAM,YAAY,EAAE,GAAG,OAAO;AAC9B,aAAQ,UAAmC;AAE3C,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,OAAO,KAAK,SAAS,EAAE,SAAS,IAAI,YAAY;AAAA,MACnE;AAAA,IACF;AAGA,UAAM,cAAc,eAAe,QAAQ,aAAa;AACxD,QAAI,aAAa;AACf,aAAO,EAAE,QAAQ,CAAC,WAAW,GAAG,iBAAiB,OAAU;AAAA,IAC7D;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,oBACd,QACA,eACsB;AACtB,QAAM,aAA4B,CAAC;AACnC,aAAW,SAAS,QAAQ;AAC1B,UAAM,QAAQ,eAAe,OAAO,aAAa;AACjD,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AACA,eAAW,KAAK,KAAK;AAAA,EACvB;AACA,SAAO;AACT;AAMO,SAAS,eAAe,KAAc,gBAAgB,QAA4B;AACvF,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,WAAO;AAAA,EACT;AAEA,QAAM,OAAO;AAKb,QAAM,aAAa,KAAK,WAAW,KAAK,QAAQ,KAAK,eAAe,KAAK;AACzE,MAAI,OAAO,eAAe,UAAU;AAClC,WAAO;AAAA,EACT;AACA,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,oBAAI,IAAI,CAAC,QAAQ,WAAW,SAAS,UAAU,CAAC;AAC1E,QAAM,cAAc,gBAAgB,KAAK,YAAY,KAAK,SAAS,KAAK,QAAQ;AAChF,MAAI,WAAoC;AACxC,MAAI,aAAa;AACf,UAAM,QAAQ,YAAY,YAAY;AACtC,QAAI,kBAAkB,IAAI,KAAK,GAAG;AAChC,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,oBAAoB,oBAAI,IAAI,CAAC,YAAY,eAAe,SAAS,SAAS,eAAe,CAAC;AAChG,QAAM,cAAc,gBAAgB,KAAK,YAAY,KAAK,QAAQ,KAAK,KAAK;AAC5E,MAAI,WAAoC;AACxC,MAAI,eAAe,kBAAkB,IAAI,YAAY,YAAY,CAAC,GAAG;AACnE,eAAW,YAAY,YAAY;AAAA,EACrC;AAEA,QAAM,OAAO,gBAAgB,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,KAAK;AACzE,QAAM,OAAO,SAAS,KAAK,QAAQ,KAAK,aAAa,KAAK,UAAU,KAAK;AACzE,QAAM,UAAU,SAAS,KAAK,WAAW,KAAK,YAAY,KAAK,QAAQ;AACvE,QAAM,aAAa,gBAAgB,KAAK,UAAU;AAClD,QAAM,cAAc,gBAAgB,KAAK,WAAW;AACpD,QAAM,SACJ,gBAAgB,KAAK,UAAU,KAAK,QAAQ,KAAK,MAAM,KAAK,KAAK,KAAK;AAExE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,cAAc;AAAA,IAC1B,aAAa,eAAe;AAAA,EAC9B;AACF;AAEO,SAAS,gBAAgB,OAA+B;AAC7D,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,WAAO,QAAQ,SAAS,IAAI,UAAU;AAAA,EACxC;AACA,MAAI,UAAU,QAAQ,UAAU,UAAa,OAAO,MAAM,aAAa,YAAY;AACjF,UAAM,YAAY,OAAO,KAAK,EAAE,KAAK;AACrC,WAAO,UAAU,SAAS,IAAI,YAAY;AAAA,EAC5C;AACA,SAAO;AACT;AAEO,SAAS,SAAS,OAA+B;AACtD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,OAAO,KAAK;AACxB,MAAI,OAAO,SAAS,GAAG,GAAG;AACxB,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB;AACA,SAAO;AACT;AAxKA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAKO,SAAS,gBAAgB,OAAkC;AAChE,QAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,kBAAkB,IACxC,MAAM,GAAG,EACT,IAAI,OAAK,EAAE,KAAK,CAAC,EACjB,OAAO,OAAO;AACjB,QAAM,OAAO,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,SAAS,CAAC,CAAC;AAChE,QAAM,aAAa,MAAM,mBAAmB,KAAK,KAAK;AAEtD,QAAM,YAAY,CAAC,QAAyB;AAC1C,eAAW,OAAO,MAAM;AACtB,UAAI,CAAC,IAAK;AACV,UAAI,IAAI,SAAS,GAAG,GAAG;AACrB,cAAM,SAAS,IAAI,MAAM,GAAG,EAAE;AAC9B,YAAI,IAAI,WAAW,MAAM,EAAG,QAAO;AAAA,MACrC,WAAW,QAAQ,KAAK;AACtB,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,4CAA4C,KAAK,GAAG,EAAG,QAAO;AAClE,WAAO;AAAA,EACT;AAEA,QAAM,MAAc,CAAC;AACrB,MAAI,cAAc,KAAK;AACrB,UAAM,QAAQ,UACX,MAAM,GAAG,EACT,IAAI,OAAK,EAAE,KAAK,CAAC,EACjB,OAAO,OAAO;AACjB,eAAW,OAAO,OAAO;AACvB,YAAM,MAAM,MAAM,GAAG;AACrB,UAAI,OAAO,QAAQ,UAAa,CAAC,UAAU,GAAG,EAAG,KAAI,GAAG,IAAI,OAAO,GAAG;AAAA,IACxE;AACA,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,QAAI,MAAM,UAAa,MAAM,KAAM;AACnC,QAAI,UAAU,CAAC,EAAG;AAClB,QAAI,CAAC,IAAI,OAAO,CAAC;AAAA,EACnB;AACA,SAAO;AACT;AA/DA;AAAA;AAAA;AAAA;AAAA;;;ACUA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAXtB,IA+Ca;AA/Cb;AAAA;AAAA;AAGA;AAEA;AAEA;AACA;AACA;AAsCO,IAAM,oBAAN,MAAM,2BAA0B,cAAc;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,eAA+B;AAAA,MAEvC,cAAc;AACZ,cAAM;AACN,aAAK,SAAS,qBAAqB;AAAA,UACjC,OAAO;AAAA,UACP,eAAe;AAAA,UACf,iBAAiB;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,MAEA,UAAkB;AAChB,eAAO;AAAA,MACT;AAAA,MAEA,iBAAyB;AACvB,eAAO;AAAA,MACT;AAAA,MAEA,MAAM,eAAe,QAAmC;AACtD,YAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,iBAAO;AAAA,QACT;AAEA,cAAM,MAAM;AAGZ,YAAI,IAAI,SAAS,QAAQ;AACvB,iBAAO;AAAA,QACT;AAGA,YAAI,CAAC,IAAI,QAAQ;AACf,iBAAO,MAAM,wEAAwE;AACrF,iBAAO;AAAA,QACT;AAGA,YAAI,CAAC,IAAI,UAAU,OAAO,IAAI,WAAW,UAAU;AACjD,iBAAO,MAAM,mCAAmC;AAChD,iBAAO;AAAA,QACT;AAGA,YAAI,OAAO,IAAI,WAAW,UAAU;AAElC,cAAI,IAAI,OAAO,WAAW,SAAS,KAAK,IAAI,OAAO,WAAW,UAAU,GAAG;AACzE,gBAAI;AACF,oBAAM,YAAY,IAAI,IAAI,IAAI,MAAM;AACpC,kBAAI,UAAU,aAAa,WAAW,UAAU,aAAa,UAAU;AACrE,uBAAO,MAAM,yCAAyC,UAAU,QAAQ,EAAE;AAC1E,uBAAO;AAAA,cACT;AAAA,YACF,QAAQ;AACN,qBAAO,MAAM,uCAAuC,IAAI,MAAM,EAAE;AAChE,qBAAO;AAAA,YACT;AAAA,UACF;AAAA,QAEF,WAAW,OAAO,IAAI,WAAW,UAAU;AAEzC,cAAI,CAAC,IAAI,OAAO,oBAAoB;AAClC,mBAAO,MAAM,iDAAiD;AAC9D,mBAAO;AAAA,UACT;AAAA,QACF,OAAO;AACL,iBAAO,MAAM,6EAA6E;AAC1F,iBAAO;AAAA,QACT;AAEA,eAAO;AAAA,MACT;AAAA,MAEA,MAAM,QACJ,QACA,QACA,mBACA,aACwB;AACxB,cAAM,MAAM;AAGZ,YAAI;AACF,gBAAM,WAAY,OAAe,aAAa;AAC9C,gBAAM,OAAO,aAAa,OAAO,cAAc,OAAO,QAAQ,CAAC;AAC/D,cAAI,SAAS,QAAW;AACtB,kBAAM,KAAK;AACX,kBAAM,YAAY,MAAM,QAAQ,IAAI,MAAM,IAAK,GAAG,SAAmB,CAAC;AACtE,kBAAM,MAAM,MAAM,OAAO,OAAO,YAAY,YAAY,KAAK,GAAG,SAAS;AACzE,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,GAAI,QAAQ,SAAY,EAAE,QAAQ,IAAI,IAAI,CAAC;AAAA,YAC7C;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAAC;AAET,YAAI;AAEF,gBAAM,kBAAkB;AAAA,YACtB,IAAI;AAAA,cACF,QAAQ,OAAO;AAAA,cACf,OAAO,OAAO;AAAA,cACd,QAAQ,OAAO;AAAA,cACf,QAAQ,OAAO;AAAA,cACf,MAAM,OAAO;AAAA,YACf;AAAA,YACA,OAAO,OAAO;AAAA,YACd,WAAW,OAAO,MAAM;AAAA,YACxB,SAAS,KAAK,mBAAmB,iBAAiB;AAAA,YAClD,MAAM,aAAa,QAAQ,CAAC;AAAA,YAC5B,KAAK,KAAK,4BAA4B;AAAA,YACtC,QAAS,OAAe,kBAAkB,aAAa,kBAAkB,CAAC;AAAA,UAC5E;AAGA,cAAI,aAAa,IAAI,cAAc,CAAC;AACpC,cAAI,IAAI,eAAe;AACrB,kBAAM,WAAW,MAAM,KAAK,OAAO,eAAe,IAAI,eAAe,eAAe;AACpF,gBAAI;AACF,2BAAa,KAAK,MAAM,QAAQ;AAAA,YAClC,SAAS,OAAO;AACd,qBAAO,MAAM,0CAA0C,KAAK,EAAE;AAC9D,qBAAO;AAAA,gBACL,QAAQ;AAAA,kBACN;AAAA,oBACE,MAAM;AAAA,oBACN,MAAM;AAAA,oBACN,QAAQ;AAAA,oBACR,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,oBACnG,UAAU;AAAA,oBACV,UAAU;AAAA,kBACZ;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,WAAW,cAAc,OAAO,eAAe,UAAU;AAEvD,kBAAM,cAAc,OAAO,QAAmC;AAC5D,kBAAI,OAAO,QAAQ,aAAa,IAAI,SAAS,IAAI,KAAK,IAAI,SAAS,IAAI,IAAI;AACzE,uBAAO,MAAM,KAAK,OAAO,eAAe,KAAK,eAAe;AAAA,cAC9D,WAAW,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,GAAG;AAChE,sBAAM,WAAoC,CAAC;AAC3C,2BAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,2BAAS,CAAC,IAAI,MAAM,YAAY,CAAC;AAAA,gBACnC;AACA,uBAAO;AAAA,cACT,WAAW,MAAM,QAAQ,GAAG,GAAG;AAC7B,uBAAO,QAAQ,IAAI,IAAI,IAAI,UAAQ,YAAY,IAAI,CAAC,CAAC;AAAA,cACvD;AACA,qBAAO;AAAA,YACT;AACA,yBAAc,MAAM,YAAY,UAAU;AAAA,UAC5C;AAGA,gBAAM,oBAA4C,CAAC;AACnD,cAAI,IAAI,WAAW;AACjB,uBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,SAAS,GAAG;AACxD,gCAAkB,GAAG,IAAI,OAAO,oBAAoB,aAAa,KAAK,CAAC;AAAA,YACzE;AAAA,UACF;AAGA,gBAAM,SAAS,MAAM,mBAAkB,SAAS,IAAI,QAAQ,IAAI,QAAQ,YAAY;AAAA,YAClF,WAAW;AAAA,YACX,SAAS,IAAI,WAAW,CAAC,MAAM;AAAA,YAC/B,YAAY,IAAI,WAAW,MAAM;AAAA,UACnC,CAAC;AAED;AAEE,gBAAI,cAAc;AAGlB,gBAAI,IAAI,WAAW;AACjB,kBAAI;AACF,sBAAM,mBAAmB;AAAA,kBACvB,GAAG;AAAA,kBACH,QAAQ;AAAA,gBACV;AACA,sBAAM,WAAW,MAAM,KAAK,OAAO,eAAe,IAAI,WAAW,gBAAgB;AACjF,oBAAI;AACF,gCAAc,KAAK,MAAM,SAAS,KAAK,CAAC;AAAA,gBAC1C,QAAQ;AACN,gCAAc,SAAS,KAAK;AAAA,gBAC9B;AAAA,cACF,SAAS,OAAO;AACd,uBAAO,MAAM,qCAAqC,KAAK,EAAE;AAEzD,sBAAM,IAAI;AAAA,kBACR,8BAA8B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,gBACxF;AAAA,cACF;AAAA,YACF;AAGA,gBAAI,IAAI,cAAc;AACpB,kBAAI;AACF,qBAAK,UAAU,oBAAoB;AACnC,sBAAM,QAAQ;AAAA,kBACZ,QAAQ;AAAA,kBACR,IAAI,gBAAgB;AAAA,kBACpB,OAAO,gBAAgB;AAAA,kBACvB,SAAS,gBAAgB;AAAA,kBACzB,KAAK,gBAAgB;AAAA,gBACvB;AACA,8BAAc;AAAA,kBACZ,KAAK;AAAA,kBACL,WAAW,IAAI,YAAY;AAAA,kBAC3B;AAAA,kBACA,EAAE,WAAW,MAAM,cAAc,OAAO,WAAW,sBAAsB;AAAA,gBAC3E;AAAA,cACF,SAAS,OAAO;AACd,uBAAO,MAAM,yCAAyC,KAAK,EAAE;AAE7D,sBAAM,IAAI;AAAA,kBACR,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,gBACnG;AAAA,cACF;AAAA,YACF;AAGA,kBAAM,YAAY,wBAAwB,aAAa,MAAM;AAC7D,gBAAI,WAAW;AACb,qBAAO;AAAA,gBACL,QAAQ,UAAU;AAAA,gBAClB,GAAI,UAAU,kBAAkB,EAAE,QAAQ,UAAU,gBAAgB,IAAI,CAAC;AAAA,cAC3E;AAAA,YACF;AAGA,mBAAO;AAAA,cACL,QAAQ,CAAC;AAAA,cACT,GAAI,cAAc,EAAE,QAAQ,YAAY,IAAI,CAAC;AAAA,YAC/C;AAAA,UACF;AAAA,QACF,SAAS,OAAO;AACd,gBAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU;AAC9D,gBAAM,YAAY,KAAK,eAAe,KAAK;AAC3C,gBAAM,WAAoC,YAAY,YAAY;AAClE,gBAAM,SAAS,YAAY,iBAAiB;AAE5C,cAAI,WAAW;AACb,mBAAO,KAAK,yBAAyB,YAAY,EAAE;AAAA,UACrD,OAAO;AACL,mBAAO,MAAM,sBAAsB,YAAY,EAAE;AAAA,UACnD;AAEA,iBAAO;AAAA,YACL,QAAQ;AAAA,cACN;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM;AAAA,gBACN;AAAA,gBACA,SAAS,YACL,yBAAyB,YAAY,KACrC,sBAAsB,YAAY;AAAA,gBACtC;AAAA,gBACA,UAAU;AAAA,cACZ;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,aAAa,0BACX,QACkC;AAClC,YAAI,OAAO,WAAW,UAAU;AAC9B,cAAI,CAAC,OAAO,oBAAoB;AAC9B,kBAAM,IAAI,MAAM,4CAA4C;AAAA,UAC9D;AAEA,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,OAAO;AAAA,UAChB;AACA,iBAAO;AAAA,QACT;AAGA,YAAI,OAAO,WAAW,SAAS,KAAK,OAAO,WAAW,UAAU,GAAG;AACjE,iBAAO;AAAA,YACL,MAAM,mBAAkB,iBAAiB,MAAM;AAAA,YAC/C,oBAAoB;AAAA,YACpB,KAAK;AAAA,YACL,aAAa;AAAA,UACf;AAAA,QACF;AAKA,YAAI,OAAO,SAAS,IAAI,GAAG;AACzB,gBAAM,IAAI,MAAM,sDAAsD;AAAA,QACxE;AAEA,cAAM,eAAoB,aAAQ,MAAM;AAGxC,cAAM,MAAW,aAAQ,QAAQ,IAAI,CAAC;AACtC,cAAM,qBAA0B,eAAU,YAAY;AACtD,cAAM,YAAY,IAAI,SAAc,QAAG,IAAI,MAAM,MAAW;AAC5D,YAAI,uBAAuB,OAAO,CAAC,mBAAmB,WAAW,SAAS,GAAG;AAC3E,gBAAM,IAAI;AAAA,YACR,6BAA6B,MAAM;AAAA,UAErC;AAAA,QACF;AAGA,YAAO,cAAW,YAAY,GAAG;AAC/B,gBAAM,WAAc,gBAAa,YAAY;AAC7C,cAAI,aAAa,OAAO,CAAC,SAAS,WAAW,SAAS,GAAG;AACvD,kBAAM,IAAI;AAAA,cACR,gCAAgC,MAAM;AAAA,YACxC;AAAA,UACF;AAAA,QACF;AAGA,YAAI,CAAI,cAAW,YAAY,GAAG;AAChC,gBAAM,IAAI,MAAM,+BAA+B,YAAY,EAAE;AAAA,QAC/D;AAGA,YAAI;AACJ,YAAI;AACF,oBAAa,gBAAa,cAAc,OAAO;AAAA,QACjD,SAAS,KAAK;AACZ,gBAAM,IAAI;AAAA,YACR,oCAAoC,YAAY,KAAK,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,UAC3G;AAAA,QACF;AAEA,YAAI;AACJ,YAAI;AACF,mBAAS,KAAK,MAAM,OAAO;AAAA,QAC7B,SAAS,KAAK;AACZ,gBAAM,IAAI;AAAA,YACR,6CAA6C,YAAY,KAAK,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,UACpH;AAAA,QACF;AAEA,YAAI,OAAO,oBAAoB;AAE7B,cAAI,CAAC,OAAO,MAAM;AAChB,mBAAO,OAAY,cAAS,cAAmB,aAAQ,YAAY,CAAC;AAAA,UACtE;AACA,iBAAO;AAAA,QACT;AAIA,YAAI;AACF,gBAAM,OAAO,YAAY;AAAA,QAC3B,QAAQ;AACN,iBAAO,MAAM,+DAA+D;AAAA,QAC9E;AAEA,eAAO;AAAA,UACL,MAAM,OAAO,QAAa,cAAS,cAAmB,aAAQ,YAAY,CAAC;AAAA,UAC3E,oBAAoB;AAAA,UACpB,WAAW;AAAA,UACX,iCAAiC,CAAC,QAAQ,QAAQ,OAAO;AAAA,QAC3D;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,OAAO,iBAAiB,KAAqB;AAC3C,YAAI;AACF,gBAAM,SAAS,IAAI,IAAI,GAAG;AAE1B,iBAAO,OAAO,SAAS,QAAQ,OAAO,GAAG,EAAE,QAAQ,MAAM,GAAG;AAAA,QAC9D,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,aAAa,SACX,QACA,UACA,MACA,SAKkB;AAClB,cAAM,YAAY,SAAS,aAAa,CAAC;AACzC,cAAM,UAAU,SAAS,WAAW,CAAC,MAAM;AAC3C,cAAM,YAAY,SAAS,aAAa;AAGxC,cAAM,EAAE,WAAW,IAAI,MAAM,OAAO,WAAW;AAC/C,mBAAW,UAAU,SAAS;AAC5B,cAAI;AACF,kBAAM,OAAO,SAAS,MAAM;AAAA,UAC9B,QAAQ;AACN,mBAAO,MAAM,qBAAqB,MAAM,gBAAgB;AAAA,UAC1D;AAAA,QACF;AAGA,cAAM,eAAe,MAAM,mBAAkB,0BAA0B,MAAM;AAG7E,cAAM,SAAS,MAAM,WAAW,OAAO,QAAQ,IAAI,GAAG;AAAA,UACpD,uBAAuB,CAAC,YAAY;AAAA,UACpC;AAAA,QACF,CAAQ;AAER,YAAI;AAEF,cAAI,mBAAmB;AACvB,cAAI;AACF,kBAAM,QAAQ,MAAM,OAAO,SAAS;AACpC,kBAAM,YAAY,MAAM,IAAI,CAAC,MAAW,EAAE,IAAc;AACxD,mBAAO,MAAM,yBAAyB,KAAK,UAAU,SAAS,CAAC,EAAE;AAEjE,gBAAI,CAAC,UAAU,SAAS,gBAAgB,GAAG;AACzC,oBAAM,cAAc,UAAU;AAAA,gBAAK,CAAC,SAClC,KAAK,SAAS,IAAI,gBAAgB,EAAE;AAAA,cACtC;AACA,kBAAI,aAAa;AACf,uBAAO;AAAA,kBACL,gBAAgB,gBAAgB,kBAAkB,WAAW;AAAA,gBAC/D;AACA,mCAAmB;AAAA,cACrB;AAAA,YACF;AAAA,UACF,SAAS,KAAK;AACZ,mBAAO,MAAM,kDAAkD,GAAG,EAAE;AAAA,UACtE;AAGA,cAAI;AACJ,gBAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,YAChC,OAAO,SAAS,kBAAkB,IAA2B;AAAA,YAC7D,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,sBAAQ;AAAA,gBACN,MAAM,OAAO,IAAI,MAAM,cAAc,QAAQ,qBAAqB,SAAS,IAAI,CAAC;AAAA,gBAChF;AAAA,cACF;AAAA,YACF,CAAC;AAAA,UACH,CAAC,EAAE,QAAQ,MAAM,aAAa,KAAK,CAAC;AAEpC,iBAAO;AAAA,QACT,UAAE;AACA,cAAI;AACF,gBAAI,OAAQ,OAAe,UAAU,YAAY;AAC/C,oBAAO,OAAe,MAAM;AAAA,YAC9B;AAAA,UACF,QAAQ;AAAA,UAAC;AAAA,QACX;AAAA,MACF;AAAA;AAAA;AAAA;AAAA,MAKQ,eAAe,OAAyB;AAC9C,cAAM,MAAM;AACZ,cAAM,UAAU,OAAO,KAAK,YAAY,WAAW,IAAI,QAAQ,YAAY,IAAI;AAC/E,cAAM,OAAO,OAAO,KAAK,SAAS,WAAW,IAAI,KAAK,YAAY,IAAI;AACtE,eAAO,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,WAAW,KAAK,KAAK,SAAS,SAAS;AAAA,MAChG;AAAA;AAAA;AAAA;AAAA,MAKQ,mBACN,mBACyB;AACzB,YAAI,CAAC,mBAAmB;AACtB,iBAAO,CAAC;AAAA,QACV;AACA,cAAM,UAAmC,CAAC;AAC1C,mBAAW,CAAC,WAAW,MAAM,KAAK,mBAAmB;AACnD,gBAAM,UAAU;AAChB,kBAAQ,SAAS,IAAI,QAAQ,WAAW,SAAY,QAAQ,SAAS;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAKQ,8BAAsD;AAC5D,cAAM,WAAmC,CAAC;AAC1C,cAAM,EAAE,iBAAAA,iBAAgB,IAAI;AAC5B,cAAM,SAASA,iBAAgB,QAAQ,GAAG;AAC1C,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,mBAAS,GAAG,IAAI,OAAO,KAAK;AAAA,QAC9B;AACA,iBAAS,KAAK,IAAI,QAAQ,IAAI;AAC9B,eAAO;AAAA,MACT;AAAA,MAEA,yBAAmC;AACjC,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MAEA,MAAM,cAAgC;AACpC,YAAI,KAAK,iBAAiB,MAAM;AAC9B,iBAAO,KAAK;AAAA,QACd;AACA,YAAI;AACF,gBAAM,OAAO,WAAW;AACxB,eAAK,eAAe;AAAA,QACtB,QAAQ;AACN,eAAK,eAAe;AAAA,QACtB;AACA,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,kBAA4B;AAC1B,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;","names":["buildSandboxEnv"]}

package/dist/sdk/chunk-PQWZ6NFL.mjs

@@ -1,459 +0,0 @@
-import {
-  detectLocalMode,
-  hasMinPermission,
-  init_author_permissions,
-  isCollaborator,
-  isContributor,
-  isFirstTimer,
-  isMember,
-  isOwner
-} from "./chunk-25IC7KXZ.mjs";
-import {
-  compileAndRun,
-  createSecureSandbox,
-  init_sandbox
-} from "./chunk-LW3INISN.mjs";
-import {
-  MemoryStore,
-  init_memory_store
-} from "./chunk-UFHOIB3R.mjs";
-import {
-  __esm,
-  __require
-} from "./chunk-J7LXIPZS.mjs";
-
-// src/liquid-extensions.ts
-import { Liquid, Tag, Value } from "liquidjs";
-import { AsyncLocalStorage } from "async_hooks";
-import path from "path";
-function sanitizeLabel(value) {
-  if (value == null) return "";
-  const s = String(value);
-  return s.replace(/[^A-Za-z0-9:\/\- ]/g, "").replace(/\/{2,}/g, "/").trim();
-}
-function sanitizeLabelList(labels) {
-  if (!Array.isArray(labels)) return [];
-  return labels.map((v) => sanitizeLabel(v)).filter((s) => s.length > 0);
-}
-async function withPermissionsContext(ctx, fn) {
-  return await permissionsALS.run(ctx, fn);
-}
-function configureLiquidWithExtensions(liquid) {
-  liquid.registerTag("readfile", ReadFileTag);
-  liquid.registerFilter("parse_json", (value) => {
-    if (typeof value !== "string") {
-      return value;
-    }
-    try {
-      return JSON.parse(value);
-    } catch {
-      return value;
-    }
-  });
-  liquid.registerFilter("to_json", (value) => {
-    try {
-      return JSON.stringify(value);
-    } catch {
-      return "[Error: Unable to serialize to JSON]";
-    }
-  });
-  liquid.registerFilter("base64", (value) => {
-    if (value == null) return "";
-    const str = String(value);
-    return Buffer.from(str).toString("base64");
-  });
-  liquid.registerFilter("base64_decode", (value) => {
-    if (value == null) return "";
-    const str = String(value);
-    try {
-      return Buffer.from(str, "base64").toString("utf-8");
-    } catch {
-      return "[Error: Invalid base64 string]";
-    }
-  });
-  liquid.registerFilter("safe_label", (value) => sanitizeLabel(value));
-  liquid.registerFilter("safe_label_list", (value) => sanitizeLabelList(value));
-  liquid.registerFilter("unescape_newlines", (value) => {
-    if (value == null) return "";
-    const s = String(value);
-    return s.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	");
-  });
-  liquid.registerFilter("json_escape", (value) => {
-    if (value == null) return "";
-    const s = String(value);
-    const jsonStr = JSON.stringify(s);
-    return jsonStr.slice(1, -1);
-  });
-  liquid.registerFilter("shell_escape", (value) => {
-    if (value == null) return "''";
-    const s = String(value);
-    return "'" + s.replace(/'/g, "'\\''") + "'";
-  });
-  liquid.registerFilter("escape_shell", (value) => {
-    if (value == null) return "''";
-    const s = String(value);
-    return "'" + s.replace(/'/g, "'\\''") + "'";
-  });
-  liquid.registerFilter("shell_escape_double", (value) => {
-    if (value == null) return '""';
-    const s = String(value);
-    const escaped = s.replace(/\\/g, "\\\\").replace(/\$/g, "\\$").replace(/`/g, "\\`").replace(/"/g, '\\"').replace(/!/g, "\\!");
-    return '"' + escaped + '"';
-  });
-  const isLocal = detectLocalMode();
-  const resolveAssoc = (val) => {
-    if (typeof val === "string" && val.length > 0) return val;
-    const store = permissionsALS.getStore();
-    return store?.authorAssociation;
-  };
-  liquid.registerFilter("has_min_permission", (authorAssociation, level) => {
-    return hasMinPermission(resolveAssoc(authorAssociation), level, isLocal);
-  });
-  liquid.registerFilter("is_owner", (authorAssociation) => {
-    return isOwner(resolveAssoc(authorAssociation), isLocal);
-  });
-  liquid.registerFilter("is_member", (authorAssociation) => {
-    return isMember(resolveAssoc(authorAssociation), isLocal);
-  });
-  liquid.registerFilter("is_collaborator", (authorAssociation) => {
-    return isCollaborator(resolveAssoc(authorAssociation), isLocal);
-  });
-  liquid.registerFilter("is_contributor", (authorAssociation) => {
-    return isContributor(resolveAssoc(authorAssociation), isLocal);
-  });
-  liquid.registerFilter("is_first_timer", (authorAssociation) => {
-    return isFirstTimer(resolveAssoc(authorAssociation), isLocal);
-  });
-  const memoryStore = MemoryStore.getInstance();
-  liquid.registerFilter("memory_get", (key, namespace) => {
-    if (typeof key !== "string") {
-      return void 0;
-    }
-    return memoryStore.get(key, namespace);
-  });
-  liquid.registerFilter("memory_has", (key, namespace) => {
-    if (typeof key !== "string") {
-      return false;
-    }
-    const has = memoryStore.has(key, namespace);
-    try {
-      if (process.env.VISOR_DEBUG === "true" && key === "fact_validation_issues") {
-        console.error(
-          `[liquid] memory_has('${key}', ns='${namespace || memoryStore.getDefaultNamespace()}') => ${String(
-            has
-          )}`
-        );
-      }
-    } catch {
-    }
-    return has;
-  });
-  liquid.registerFilter("memory_list", (namespace) => {
-    return memoryStore.list(namespace);
-  });
-  liquid.registerFilter("get", (obj, pathExpr) => {
-    if (obj == null) return void 0;
-    const path2 = typeof pathExpr === "string" ? pathExpr : String(pathExpr || "");
-    if (!path2) return obj;
-    const parts = path2.split(".");
-    let cur = obj;
-    for (const p of parts) {
-      if (cur == null) return void 0;
-      cur = cur[p];
-    }
-    return cur;
-  });
-  liquid.registerFilter("not_empty", (v) => {
-    if (Array.isArray(v)) return v.length > 0;
-    if (typeof v === "string") return v.length > 0;
-    if (v && typeof v === "object") return Object.keys(v).length > 0;
-    return false;
-  });
-  liquid.registerFilter("coalesce", (first, ...rest) => {
-    const all = [first, ...rest];
-    for (const v of all) {
-      if (Array.isArray(v) && v.length > 0) return v;
-      if (typeof v === "string" && v.length > 0) return v;
-      if (v && typeof v === "object" && Object.keys(v).length > 0) return v;
-    }
-    return Array.isArray(first) ? [] : first ?? void 0;
-  });
-  liquid.registerFilter("where_exp", (items, varName, expr) => {
-    const arr = Array.isArray(items) ? items : [];
-    const name = typeof varName === "string" && varName.trim() ? varName.trim() : "i";
-    const body = String(expr || "");
-    try {
-      const sandbox = createSecureSandbox();
-      const out = [];
-      for (let idx = 0; idx < arr.length; idx++) {
-        const item = arr[idx];
-        let ok = false;
-        try {
-          const scope = { [name]: item, idx, arr };
-          ok = !!compileAndRun(sandbox, body, scope, {
-            injectLog: false,
-            wrapFunction: true
-          });
-        } catch {
-          ok = false;
-        }
-        if (ok) out.push(item);
-      }
-      return out;
-    } catch {
-      return [];
-    }
-  });
-  liquid.registerFilter(
-    "chat_history",
-    function(value, ...args) {
-      try {
-        const impl = this;
-        const ctx = impl?.context;
-        const allArgs = Array.isArray(args) ? args : [];
-        if (allArgs.length === 0) {
-          return [];
-        }
-        const positional = [];
-        const options = {};
-        for (const arg of allArgs) {
-          if (Array.isArray(arg) && arg.length === 2 && typeof arg[0] === "string" && arg[0].length > 0) {
-            options[arg[0]] = arg[1];
-          } else {
-            positional.push(arg);
-          }
-        }
-        const stepArgs = positional;
-        const steps = stepArgs.map((s) => String(s ?? "").trim()).filter((s) => s.length > 0);
-        if (steps.length === 0) return [];
-        const outputsHistoryVar = ctx?.get(["outputs_history"]) || {};
-        const outputsVar = ctx?.get(["outputs"]) || {};
-        const outputsHistory = outputsHistoryVar && Object.keys(outputsHistoryVar).length > 0 ? outputsHistoryVar : outputsVar?.history || {};
-        const checksMeta = ctx?.get(["checks_meta"]) || ctx?.get(["event"])?.payload?.__checksMeta || void 0;
-        const directionRaw = typeof options.direction === "string" ? options.direction.toLowerCase() : "";
-        const direction = directionRaw === "desc" ? "desc" : "asc";
-        const limit = typeof options.limit === "number" && options.limit > 0 ? Math.floor(options.limit) : void 0;
-        const textCfg = options.text && typeof options.text === "object" ? options.text : {};
-        const defaultField = typeof textCfg.default_field === "string" && textCfg.default_field.trim() ? textCfg.default_field.trim() : "text";
-        const byStepText = {};
-        if (textCfg.by_step && typeof textCfg.by_step === "object") {
-          for (const [k, v] of Object.entries(textCfg.by_step)) {
-            if (typeof v === "string" && v.trim()) {
-              byStepText[k] = v.trim();
-            }
-          }
-        }
-        const rolesCfg = options.roles && typeof options.roles === "object" ? options.roles : {};
-        const byTypeRole = {};
-        if (rolesCfg.by_type && typeof rolesCfg.by_type === "object") {
-          for (const [k, v] of Object.entries(rolesCfg.by_type)) {
-            if (typeof v === "string" && v.trim()) {
-              byTypeRole[k] = v.trim();
-            }
-          }
-        }
-        const byStepRole = {};
-        if (rolesCfg.by_step && typeof rolesCfg.by_step === "object") {
-          for (const [k, v] of Object.entries(rolesCfg.by_step)) {
-            if (typeof v === "string" && v.trim()) {
-              byStepRole[k] = v.trim();
-            }
-          }
-        }
-        if (typeof options.role_map === "string" && options.role_map.trim().length > 0) {
-          const parts = String(options.role_map).split(",").map((p) => p.trim()).filter(Boolean);
-          for (const part of parts) {
-            const eqIdx = part.indexOf("=");
-            if (eqIdx > 0) {
-              const k = part.slice(0, eqIdx).trim();
-              const v = part.slice(eqIdx + 1).trim();
-              if (k && v) {
-                byStepRole[k] = v;
-              }
-            }
-          }
-        }
-        const defaultRole = typeof rolesCfg.default === "string" && rolesCfg.default.trim() ? rolesCfg.default.trim() : void 0;
-        const getNested = (obj, path2) => {
-          if (!obj || !path2) return void 0;
-          const parts = path2.split(".");
-          let cur = obj;
-          for (const p of parts) {
-            if (cur == null) return void 0;
-            cur = cur[p];
-          }
-          return cur;
-        };
-        const normalizeText = (step, raw) => {
-          try {
-            const overrideField = byStepText[step];
-            if (overrideField) {
-              const val = getNested(raw, overrideField);
-              if (val !== void 0 && val !== null) {
-                const s = String(val);
-                if (s.trim().length > 0) return s;
-              }
-            }
-            if (raw && typeof raw === "object") {
-              if (typeof raw.text === "string" && raw.text.trim().length > 0) {
-                return raw.text;
-              }
-              if (typeof raw.content === "string" && raw.content.trim().length > 0) {
-                return raw.content;
-              }
-              const dfVal = raw[defaultField];
-              if (dfVal !== void 0 && dfVal !== null) {
-                const s = String(dfVal);
-                if (s.trim().length > 0) return s;
-              }
-            }
-            if (typeof raw === "string") return raw;
-            if (raw == null) return "";
-            try {
-              return JSON.stringify(raw);
-            } catch {
-              return String(raw);
-            }
-          } catch {
-            if (typeof raw === "string") return raw;
-            return "";
-          }
-        };
-        const normalizeRole = (step) => {
-          try {
-            if (byStepRole[step]) return byStepRole[step];
-            const meta = checksMeta ? checksMeta[step] : void 0;
-            const type = meta?.type;
-            if (type && byTypeRole[type]) return byTypeRole[type];
-            if (type === "human-input") return "user";
-            if (type === "ai") return "assistant";
-            if (defaultRole) return defaultRole;
-            if (type) {
-              if (type === "human-input") return "user";
-              if (type === "ai") return "assistant";
-            }
-          } catch {
-          }
-          return "assistant";
-        };
-        const messages = [];
-        const tsBase = Date.now();
-        let counter = 0;
-        for (const step of steps) {
-          const arr = outputsHistory?.[step];
-          if (!Array.isArray(arr)) continue;
-          for (const raw of arr) {
-            let ts;
-            if (raw && typeof raw === "object" && typeof raw.ts === "number") {
-              ts = raw.ts;
-            }
-            if (!Number.isFinite(ts)) {
-              ts = tsBase + counter++;
-            }
-            const text = normalizeText(step, raw);
-            const role = normalizeRole(step);
-            messages.push({ step, role, text, ts, raw });
-          }
-        }
-        messages.sort((a, b) => a.ts - b.ts);
-        if (direction === "desc") {
-          messages.reverse();
-        }
-        if (limit && limit > 0 && messages.length > limit) {
-          if (direction === "asc") {
-            return messages.slice(messages.length - limit);
-          }
-          return messages.slice(0, limit);
-        }
-        return messages;
-      } catch {
-        return [];
-      }
-    }
-  );
-}
-function createExtendedLiquid(options = {}) {
-  const liquid = new Liquid({
-    cache: false,
-    strictFilters: false,
-    strictVariables: false,
-    ...options
-  });
-  configureLiquidWithExtensions(liquid);
-  return liquid;
-}
-var ReadFileTag, permissionsALS;
-var init_liquid_extensions = __esm({
-  "src/liquid-extensions.ts"() {
-    init_author_permissions();
-    init_memory_store();
-    init_sandbox();
-    ReadFileTag = class extends Tag {
-      filepath;
-      indentValue = null;
-      constructor(token, remainTokens, liquid) {
-        super(token, remainTokens, liquid);
-        const argsStr = token.args.trim();
-        const indentMatch = argsStr.match(/^(.+?)\s+indent:\s*(\d+)\s*$/);
-        if (indentMatch) {
-          this.filepath = new Value(indentMatch[1].trim(), liquid);
-          this.indentValue = new Value(indentMatch[2], liquid);
-        } else {
-          this.filepath = new Value(argsStr, liquid);
-        }
-      }
-      *render(ctx, emitter) {
-        const filePath = yield this.filepath.value(ctx, false);
-        let indent = 0;
-        if (this.indentValue) {
-          const indentAmount = yield this.indentValue.value(ctx, false);
-          indent = typeof indentAmount === "number" ? indentAmount : parseInt(String(indentAmount), 10) || 0;
-        } else {
-          const output = emitter.buffer || "";
-          const lastNewline = output.lastIndexOf("\n");
-          if (lastNewline >= 0) {
-            const lineStart = output.substring(lastNewline + 1);
-            const match = lineStart.match(/^(\s*)/);
-            indent = match ? match[1].length : 0;
-          }
-        }
-        if (!filePath || typeof filePath !== "string") {
-          emitter.write("[Error: Invalid file path]");
-          return;
-        }
-        const basePath = ctx.globals?.basePath;
-        const projectRoot = typeof basePath === "string" ? basePath : process.cwd();
-        const normalizedRoot = path.normalize(projectRoot + path.sep);
-        const resolvedPath = path.normalize(path.resolve(projectRoot, filePath.toString()));
-        if (!resolvedPath.startsWith(normalizedRoot) && resolvedPath !== path.normalize(projectRoot)) {
-          emitter.write("[Error: File path escapes project directory]");
-          return;
-        }
-        try {
-          let content = __require("fs").readFileSync(resolvedPath, "utf-8");
-          if (indent > 0) {
-            const indentStr = " ".repeat(indent);
-            const lines = content.split("\n");
-            content = lines.map((line, i) => i === 0 ? line : indentStr + line).join("\n");
-          }
-          emitter.write(content);
-        } catch (error) {
-          const errorMessage = error instanceof Error ? error.message : error?.code || "Unknown error";
-          emitter.write(`[Error reading file: ${errorMessage}]`);
-        }
-      }
-    };
-    permissionsALS = new AsyncLocalStorage();
-  }
-});
-
-export {
-  sanitizeLabel,
-  sanitizeLabelList,
-  ReadFileTag,
-  withPermissionsContext,
-  configureLiquidWithExtensions,
-  createExtendedLiquid,
-  init_liquid_extensions
-};
-//# sourceMappingURL=chunk-PQWZ6NFL.mjs.map