@spinabot/brigade 1.9.0 → 1.10.0

package/dist/agents/tools/doc-shared.js

@@ -0,0 +1,484 @@
+/**
+ * Shared helpers for the document AUTHORING tools (`make_document` +
+ * `edit_document`) — the WRITE siblings of `analyze_media`'s read side.
+ *
+ * ─────────────────────────────────────────────────────────────────────────
+ * WHY THIS MODULE
+ * ─────────────────────────────────────────────────────────────────────────
+ * `make_document` (CREATE) and `edit_document` (EDIT) share three concerns:
+ *
+ *   1. PATH SCOPING. Both tools READ an output path (and, for edit, a source
+ *      path) and WRITE bytes to disk. They reuse the EXACT same posture as
+ *      `analyze_media`'s local-file acquisition: the media-path guard
+ *      (`validateOutboundMediaPath`, refuses secrets / system files /
+ *      credential dirs) PLUS an allowed-root scoping (workspace / cwd / OS
+ *      cache / temp / state subtree). Writing OUTSIDE those roots is refused —
+ *      a prompt-injected "save the doc to ~/.ssh/authorized_keys" can never
+ *      land. The output dir is created on demand inside an allowed root.
+ *
+ *   2. IMAGE EMBEDDING. docx/pptx/pdf can embed an image from a local path or
+ *      a URL. Images are acquired with the SAME guard (local) / SSRF guard
+ *      (URL) as `analyze_media`, then normalized + resized to a sane embed
+ *      budget via jimp (pure-JS, zero native deps — preserves Brigade's
+ *      no-native-build streak). The libraries (`docx`/`pdf-lib`/`pptxgenjs`)
+ *      only accept a known raster format, so HEIC/SVG/unknown are re-encoded
+ *      to PNG/JPEG by jimp first.
+ *
+ *   3. CLEAN ERRORS. A malformed input must surface as a
+ *      `BrigadeToolInputError` (the model sees `.message` + self-corrects),
+ *      never a raw library throw.
+ *
+ * The output-path roots intentionally MATCH `analyze_media`'s read roots so a
+ * file the agent just produced is immediately analyzable by the read tool, and
+ * vice-versa.
+ */
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { guardedFetch, SsrfBlockedError } from "../../infra/net/fetch-guard.js";
+import { validateOutboundMediaPath } from "../../security/media-path-guard.js";
+import { resolveCacheDir, resolveOsCacheDir, resolveStateDir, } from "../../config/paths.js";
+import { BrigadeToolInputError } from "./common.js";
+/** Canonical file extension for a format. */
+export function extForFormat(format) {
+    return format; // docx/xlsx/pptx/pdf all match their extension
+}
+/** Lowercase extension (no dot) of a path. */
+export function docExtensionOf(p) {
+    return path.extname(p).toLowerCase().replace(/^\./, "");
+}
+/** Map a file extension to a doc format (for edit-source detection). */
+export function formatFromExtension(p) {
+    const ext = docExtensionOf(p);
+    if (ext === "docx" || ext === "xlsx" || ext === "pptx" || ext === "pdf")
+        return ext;
+    return undefined;
+}
+/* ─────────────────────────── allowed-root scoping ─────────────────────────── */
+/**
+ * Roots a document path (input OR output) is allowed to live under. Mirrors
+ * `analyze_media`'s `allowedLocalRoots` so the two tools agree on where files
+ * may be read from and written to: workspace, process cwd, OS cache + temp,
+ * and the Brigade state media subtree (channels / cache / captures / workspace
+ * in both filesystem AND convex mode).
+ */
+export function allowedDocRoots(opts) {
+    const roots = new Set();
+    const add = (p) => {
+        if (!p)
+            return;
+        try {
+            roots.add(path.resolve(p));
+        }
+        catch {
+            /* ignore */
+        }
+    };
+    add(opts.workspaceDir);
+    add(opts.cwd);
+    add(resolveCacheDir());
+    add(process.env.TMPDIR || process.env.TEMP || process.env.TMP || "");
+    try {
+        add(os.tmpdir());
+    }
+    catch {
+        /* ignore */
+    }
+    try {
+        add(path.join(resolveStateDir(), "channels"));
+        add(path.join(resolveStateDir(), "cache"));
+        add(path.join(resolveStateDir(), "captures"));
+        add(path.join(resolveStateDir(), "workspace"));
+    }
+    catch {
+        /* ignore */
+    }
+    try {
+        const osCache = resolveOsCacheDir();
+        add(osCache);
+        add(path.join(osCache, "channels"));
+        add(path.join(osCache, "bluebubbles"));
+    }
+    catch {
+        /* ignore */
+    }
+    return [...roots].filter((r) => r.length > 0);
+}
+/** True when `resolved` is inside one of `roots` (containment, no `..` escape). */
+export function isInsideAnyRoot(resolved, roots) {
+    for (const root of roots) {
+        const rel = path.relative(root, resolved);
+        if (rel === "" || (!rel.startsWith("..") && !path.isAbsolute(rel)))
+            return true;
+    }
+    return false;
+}
+/**
+ * Resolve + validate an OUTPUT path for a document write.
+ *
+ *   1. media-path guard (refuse secrets / system files / credential dirs) —
+ *      applied to the resolved absolute path so a benign basename can't smuggle
+ *      a sensitive target.
+ *   2. allowed-root scoping — the FILE must land inside workspace / cwd / cache
+ *      / temp / state subtree. We check the realpath of the nearest existing
+ *      ANCESTOR (the file itself doesn't exist yet on a create), so symlinked
+ *      parent dirs can't redirect the write outside the roots.
+ *
+ * Returns the absolute path to write to (NOT yet created). Throws
+ * `BrigadeToolInputError` when refused.
+ */
+export function resolveOutputPath(rawPath, opts) {
+    if (!rawPath || typeof rawPath !== "string" || !rawPath.trim()) {
+        throw new BrigadeToolInputError("output path required");
+    }
+    const base = (opts.cwd && opts.cwd.trim()) || (opts.workspaceDir && opts.workspaceDir.trim()) || process.cwd();
+    const abs = path.isAbsolute(rawPath) ? path.resolve(rawPath) : path.resolve(base, rawPath);
+    // Secret / system-file denylist (resolves symlinks of an existing target).
+    const verdict = validateOutboundMediaPath(abs);
+    if (!verdict.ok) {
+        throw new BrigadeToolInputError(verdict.reason ?? "refusing to write that path");
+    }
+    // Scope the realpath of the nearest existing ancestor so a symlinked parent
+    // can't redirect the write outside the allowed roots.
+    const roots = allowedDocRoots(opts);
+    const anchor = nearestExistingAncestorReal(abs);
+    if (!isInsideAnyRoot(anchor, roots)) {
+        throw new BrigadeToolInputError("refusing to write a path outside the allowed roots (workspace / current dir / cache / temp). " +
+            "Write into the workspace (omit `outputPath` for an auto-named file there).");
+    }
+    return abs;
+}
+/** Realpath of the deepest existing ancestor of `abs` (so non-existent leaves resolve safely). */
+function nearestExistingAncestorReal(abs) {
+    let cur = abs;
+    for (let i = 0; i < 64; i++) {
+        try {
+            return fs.realpathSync(cur);
+        }
+        catch {
+            const parent = path.dirname(cur);
+            if (parent === cur)
+                return cur; // reached the root
+            cur = parent;
+        }
+    }
+    return cur;
+}
+/**
+ * Resolve + validate a SOURCE path for an edit, then read its bytes. Same
+ * posture as `analyze_media`'s `acquireLocalBytes`: media-path guard +
+ * allowed-root scoping over the realpath of the file itself (which must exist).
+ */
+export async function acquireSourceBytes(rawPath, opts) {
+    if (!rawPath || typeof rawPath !== "string" || !rawPath.trim()) {
+        throw new BrigadeToolInputError("source path required");
+    }
+    const verdict = validateOutboundMediaPath(rawPath);
+    if (!verdict.ok) {
+        throw new BrigadeToolInputError(verdict.reason ?? "refusing to read that path");
+    }
+    let resolved;
+    try {
+        resolved = fs.realpathSync(path.resolve(rawPath));
+    }
+    catch {
+        resolved = path.resolve(rawPath);
+    }
+    const roots = allowedDocRoots(opts);
+    if (!isInsideAnyRoot(resolved, roots)) {
+        throw new BrigadeToolInputError("refusing to read a source outside the allowed roots (workspace / current dir / cache / temp). " +
+            "Move the file into the workspace first.");
+    }
+    let stat;
+    try {
+        stat = await fsp.stat(resolved);
+    }
+    catch {
+        throw new BrigadeToolInputError(`source file not found: ${rawPath}`);
+    }
+    if (!stat.isFile())
+        throw new BrigadeToolInputError(`not a file: ${rawPath}`);
+    if (stat.size === 0)
+        throw new BrigadeToolInputError(`source file is empty: ${rawPath}`);
+    if (stat.size > opts.maxBytes) {
+        throw new BrigadeToolInputError(`source file is too large (${stat.size} bytes > ${opts.maxBytes} cap).`);
+    }
+    return fsp.readFile(resolved);
+}
+/** Create the parent dir for a resolved output path, then write the bytes. */
+export async function writeDocFile(absPath, bytes) {
+    await fsp.mkdir(path.dirname(absPath), { recursive: true });
+    const buf = Buffer.isBuffer(bytes) ? bytes : Buffer.from(bytes);
+    await fsp.writeFile(absPath, buf);
+    return buf.length;
+}
+/* ─────────────────────────── image acquisition + normalization ─────────────────────────── */
+/** Default embed budget — images larger than this are downscaled before embedding. */
+const DEFAULT_IMAGE_EMBED_BYTES = 4 * 1024 * 1024; // 4 MiB
+/** Max pixel dimension for an embedded image (keeps file size + render time sane). */
+const DEFAULT_IMAGE_EMBED_DIM = 2000;
+/** Hard cap on bytes fetched for an image source (URL or local). */
+const IMAGE_ACQUIRE_CEILING = 24 * 1024 * 1024; // 24 MiB
+/** Per-request HTTP timeout for a URL image source. */
+const IMAGE_FETCH_TIMEOUT_MS = 30_000;
+/**
+ * Acquire an image from a local path (guarded) or http(s) URL (SSRF-guarded),
+ * decode it with jimp, fit-inside the embed dimension, and re-encode to a
+ * library-friendly raster (PNG for sources with alpha, JPEG otherwise — but we
+ * keep it simple and decode→PNG, falling back to JPEG when PNG would be larger
+ * than the budget). Throws `BrigadeToolInputError` on any failure so the caller
+ * never leaks a raw jimp/fetch throw to the model.
+ *
+ * `loadImage` is a test seam (defaults to the lazy jimp loader) so embedding can
+ * be exercised without bundling a real codec.
+ */
+export async function acquireImageForEmbed(source, opts) {
+    const ref = (source.url ?? source.path ?? "").trim();
+    if (!ref)
+        throw new BrigadeToolInputError("image requires a `path` or `url`");
+    const isUrl = /^https?:\/\//i.test(ref) || Boolean(source.url);
+    const maxBytes = clampImageBytes(opts.maxBytes);
+    const maxDim = opts.maxDimension && opts.maxDimension > 0 ? opts.maxDimension : DEFAULT_IMAGE_EMBED_DIM;
+    let raw;
+    if (isUrl) {
+        raw = await fetchImageBytes(ref, { signal: opts.signal });
+    }
+    else {
+        raw = await acquireSourceBytes(ref, {
+            ...(opts.workspaceDir ? { workspaceDir: opts.workspaceDir } : {}),
+            ...(opts.cwd ? { cwd: opts.cwd } : {}),
+            maxBytes: IMAGE_ACQUIRE_CEILING,
+        });
+    }
+    const load = opts.loadImage ?? defaultImageLoader;
+    let img;
+    try {
+        img = await load(raw);
+    }
+    catch {
+        throw new BrigadeToolInputError("could not decode the image (unsupported or corrupt format). Use a PNG / JPEG / GIF / BMP source.");
+    }
+    try {
+        if (img.width() > maxDim || img.height() > maxDim) {
+            img.scaleToFit(maxDim, maxDim);
+        }
+        // Encode PNG first (lossless, broadly accepted). If it blows the budget,
+        // fall back to JPEG which compresses photos far better.
+        let bytes = await img.encodePng();
+        let format = "png";
+        let mimeType = "image/png";
+        if (bytes.length > maxBytes) {
+            const jpg = await img.encodeJpeg(80);
+            if (jpg.length < bytes.length) {
+                bytes = jpg;
+                format = "jpeg";
+                mimeType = "image/jpeg";
+            }
+        }
+        return { bytes, format, mimeType, width: img.width(), height: img.height() };
+    }
+    catch {
+        throw new BrigadeToolInputError("failed to process the image for embedding.");
+    }
+}
+function clampImageBytes(requested) {
+    if (typeof requested !== "number" || !Number.isFinite(requested))
+        return DEFAULT_IMAGE_EMBED_BYTES;
+    return Math.max(64 * 1024, Math.min(IMAGE_ACQUIRE_CEILING, Math.floor(requested)));
+}
+/** Fetch an image URL through the SSRF guard with a size + timeout cap. */
+async function fetchImageBytes(url, opts) {
+    let response;
+    try {
+        const r = await guardedFetch(url, {
+            method: "GET",
+            headers: {
+                accept: "image/*,*/*",
+                "user-agent": "Mozilla/5.0 (compatible; Brigade/1.0; +https://brigade.spinabot.com)",
+            },
+            timeoutMs: IMAGE_FETCH_TIMEOUT_MS,
+            ...(opts.signal ? { signal: opts.signal } : {}),
+        });
+        response = r.response;
+    }
+    catch (err) {
+        if (err instanceof SsrfBlockedError) {
+            throw new BrigadeToolInputError(`refused to fetch the image URL: ${err.reason}`);
+        }
+        throw new BrigadeToolInputError(`could not fetch the image URL: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (response.status >= 400) {
+        throw new BrigadeToolInputError(`image fetch failed: HTTP ${response.status} for ${url}`);
+    }
+    const ab = await response.arrayBuffer();
+    const buf = Buffer.from(ab);
+    if (buf.length === 0)
+        throw new BrigadeToolInputError("image URL returned an empty body");
+    if (buf.length > IMAGE_ACQUIRE_CEILING) {
+        throw new BrigadeToolInputError("image URL body exceeds the acquisition ceiling");
+    }
+    return buf;
+}
+/** Default loader — lazily imports jimp (keeps the cost off the cold-start path). */
+const defaultImageLoader = async (bytes) => {
+    const { Jimp, JimpMime } = await import("jimp");
+    const img = await Jimp.read(bytes);
+    return {
+        width: () => img.bitmap.width,
+        height: () => img.bitmap.height,
+        scaleToFit: (w, h) => {
+            img.scaleToFit({ w, h });
+        },
+        encodePng: async () => {
+            const buf = await img.getBuffer(JimpMime.png);
+            return Buffer.isBuffer(buf) ? buf : Buffer.from(buf);
+        },
+        encodeJpeg: async (quality) => {
+            const buf = await img.getBuffer(JimpMime.jpeg, { quality });
+            return Buffer.isBuffer(buf) ? buf : Buffer.from(buf);
+        },
+    };
+};
+/** True when `v` is a `{ formula }` object (and not null / an array). */
+export function isFormulaCell(v) {
+    return (typeof v === "object" &&
+        v !== null &&
+        !Array.isArray(v) &&
+        typeof v.formula === "string" &&
+        v.formula.trim().length > 0);
+}
+/**
+ * Coerce a tool cell value into the shape exceljs's `cell.value` expects:
+ *   - `{ formula }`  → `{ formula }` (the leading "=" is stripped if present)
+ *   - number         → number
+ *   - everything else → String(value)
+ */
+export function toExcelCellValue(v) {
+    if (isFormulaCell(v)) {
+        return { formula: v.formula.trim().replace(/^=+/, "") };
+    }
+    if (typeof v === "number")
+        return v;
+    return String(v ?? "");
+}
+/* ─────────────────────────── unicode PDF font ─────────────────────────── */
+/**
+ * A Unicode TrueType font (DejaVu Sans) embedded into a `@cantoo/pdf-lib`
+ * document so created PDFs + stamps render Latin / Latin-supplement / Greek /
+ * Cyrillic / accents instead of the WinAnsi-only standard fonts (which throw or
+ * tofu on anything outside their set).
+ *
+ * The font asset ships gzipped at `assets/DejaVuSans.ttf.gz` (Bitstream Vera /
+ * public-domain-equivalent license). It is decompressed once and cached as raw
+ * TTF bytes for the process lifetime; `fontkit` is registered + the font is
+ * embedded (with subsetting) PER document, since a pdf-lib `PDFFont` is bound to
+ * the document it was embedded into.
+ *
+ * CJK / emoji are NOT covered by DejaVu Sans and still fall back to "?" via
+ * {@link sanitizeForFont}; Latin/Greek/Cyrillic/accented text renders correctly.
+ */
+/** Lazily-decompressed DejaVu Sans TTF bytes (cached for the process). */
+let cachedUnicodeFontBytes;
+/** In-flight decompression promise so concurrent callers share one gunzip. */
+let unicodeFontBytesPromise;
+/** Absolute path to the gzipped font asset (resolved relative to this module). */
+function unicodeFontAssetPath() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    return path.join(here, "assets", "DejaVuSans.ttf.gz");
+}
+/**
+ * Read + gunzip the bundled DejaVu Sans TTF (cached). Throws
+ * `BrigadeToolInputError` if the asset is missing or unreadable so the caller
+ * can fall back to a standard font instead of leaking a raw throw.
+ */
+export async function loadUnicodeFontBytes() {
+    if (cachedUnicodeFontBytes)
+        return cachedUnicodeFontBytes;
+    if (!unicodeFontBytesPromise) {
+        unicodeFontBytesPromise = (async () => {
+            const { gunzipSync } = await import("fflate");
+            let gz;
+            try {
+                gz = await fsp.readFile(unicodeFontAssetPath());
+            }
+            catch {
+                throw new BrigadeToolInputError("the bundled Unicode PDF font asset is missing.");
+            }
+            let ttf;
+            try {
+                ttf = gunzipSync(new Uint8Array(gz));
+            }
+            catch {
+                throw new BrigadeToolInputError("the bundled Unicode PDF font asset is corrupt.");
+            }
+            cachedUnicodeFontBytes = Buffer.from(ttf);
+            return cachedUnicodeFontBytes;
+        })();
+    }
+    try {
+        return await unicodeFontBytesPromise;
+    }
+    catch (err) {
+        // Reset the cache so a transient failure can be retried on the next call.
+        unicodeFontBytesPromise = undefined;
+        throw err;
+    }
+}
+/**
+ * Register fontkit on `pdf` and embed the bundled DejaVu Sans (subset), returning
+ * the embedded font. Embeds PER document (a pdf-lib font is document-bound).
+ * `registerFontkit` is idempotent, so calling it once per document is safe.
+ */
+export async function embedUnicodeFont(pdf) {
+    const ttf = await loadUnicodeFontBytes();
+    const fk = await import("@pdf-lib/fontkit");
+    const fontkit = fk.default ?? fk;
+    pdf.registerFontkit(fontkit);
+    return pdf.embedFont(new Uint8Array(ttf), { subset: true });
+}
+/**
+ * Replace characters the embedded font cannot render (e.g. CJK ideographs,
+ * emoji) with "?" so a stray glyph never turns a valid draw into a fontkit
+ * encode throw. DejaVu Sans covers Latin / Latin-1 / Latin Extended / Greek /
+ * Cyrillic + common punctuation, so those pass through untouched.
+ *
+ * `font` is the embedded fontkit-backed font; we ask it per character whether a
+ * glyph exists. When the font handle can't answer (older fontkit), we keep the
+ * character (the font is a broad Unicode face, so false-strips are worse than a
+ * rare tofu).
+ */
+export function sanitizeForFont(text, font) {
+    const probe = font.widthOfTextAtSize;
+    if (typeof probe !== "function")
+        return String(text ?? "");
+    let out = "";
+    for (const ch of String(text ?? "")) {
+        // Always keep the whitespace/control chars the drawers handle themselves.
+        if (ch === "\n" || ch === "\r" || ch === "\t" || ch === " ") {
+            out += ch;
+            continue;
+        }
+        let ok = false;
+        try {
+            // A glyph the font lacks measures as 0 width (no advance) in fontkit.
+            ok = font.widthOfTextAtSize(ch, 1000) > 0;
+        }
+        catch {
+            ok = false;
+        }
+        out += ok ? ch : "?";
+    }
+    return out;
+}
+/* ─────────────────────────── misc ─────────────────────────── */
+/** A short random token for auto-naming a generated document. */
+export function shortToken() {
+    return Math.random().toString(36).slice(2, 8);
+}
+/** Default workspace-relative output name when the caller omits `outputPath`. */
+export function defaultOutputName(format) {
+    return `document-${shortToken()}.${extForFormat(format)}`;
+}
+//# sourceMappingURL=doc-shared.js.map

package/dist/agents/tools/doc-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doc-shared.js","sourceRoot":"","sources":["../../../src/agents/tools/doc-shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,eAAe,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKpD,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC7C,OAAO,MAAM,CAAC,CAAC,+CAA+C;AAC/D,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,cAAc,CAAC,CAAS;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC5C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IACpF,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,kFAAkF;AAElF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAA6C;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE;QAC1B,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC;YACJ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACR,YAAY;QACb,CAAC;IACF,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC;QACJ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;IACD,IAAI,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAe;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,IAA6C;IAE7C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/G,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE3F,2EAA2E;IAC3E,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,MAAM,IAAI,6BAA6B,CAAC,CAAC;IAClF,CAAC;IAED,4EAA4E;IAC5E,sDAAsD;IACtD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,qBAAqB,CAC9B,+FAA+F;YAC9F,4EAA4E,CAC7E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,kGAAkG;AAClG,SAAS,2BAA2B,CAAC,GAAW;IAC/C,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,GAAG,CAAC,CAAC,mBAAmB;YACnD,GAAG,GAAG,MAAM,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAe,EACf,IAA+D;IAE/D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACR,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAC9B,gGAAgG;YAC/F,yCAAyC,CAC1C,CAAC;IACH,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAC9B,6BAA6B,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,QAAQ,QAAQ,CACvE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,KAA0B;IAC7E,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,MAAM,CAAC;AACnB,CAAC;AAED,+FAA+F;AAE/F,sFAAsF;AACtF,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAC3D,sFAAsF;AACtF,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AACzD,uDAAuD;AACvD,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAYtC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,MAAuC,EACvC,IAOC;IAED,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAExG,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,EAAE,CAAC;QACX,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACP,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,QAAQ,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAClD,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,qBAAqB,CAC9B,kGAAkG,CAClG,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;YACnD,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,MAAM,GAAmB,KAAK,CAAC;QACnC,IAAI,QAAQ,GAAG,WAAW,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/B,KAAK,GAAG,GAAG,CAAC;gBACZ,MAAM,GAAG,MAAM,CAAC;gBAChB,QAAQ,GAAG,YAAY,CAAC;YACzB,CAAC;QACF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,qBAAqB,CAAC,4CAA4C,CAAC,CAAC;IAC/E,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,SAA6B;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,yBAAyB,CAAC;IACnG,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAA8B;IACzE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,MAAM,EAAE,aAAa;gBACrB,YAAY,EAAE,sEAAsE;aACpF;YACD,SAAS,EAAE,sBAAsB;YACjC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YACrC,MAAM,IAAI,qBAAqB,CAAC,mCAAmC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC9B,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,qBAAqB,CAAC,4BAA4B,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,CAAC,CAAC;IAC1F,IAAI,GAAG,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,qBAAqB,CAAC,gDAAgD,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAaD,qFAAqF;AACrF,MAAM,kBAAkB,GAAgB,KAAK,EAAE,KAAa,EAA2B,EAAE;IACxF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACN,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK;QAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM;QAC/B,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACpB,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,SAAS,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAA6B,CAAC,CAAC;QAChF,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAA6B,CAAC,CAAC;QAChF,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAaF,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,CAAU;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACjB,OAAQ,CAA2B,CAAC,OAAO,KAAK,QAAQ;QACvD,CAAyB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACpD,CAAC;AACH,CAAC;AAKD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAe;IAC/C,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AAEH,0EAA0E;AAC1E,IAAI,sBAA0C,CAAC;AAC/C,8EAA8E;AAC9E,IAAI,uBAAoD,CAAC;AAEzD,kFAAkF;AAClF,SAAS,oBAAoB;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,IAAI,sBAAsB;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC9B,uBAAuB,GAAG,CAAC,KAAK,IAAI,EAAE;YACrC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,EAAU,CAAC;YACf,IAAI,CAAC;gBACJ,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,qBAAqB,CAAC,gDAAgD,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,GAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,GAAG,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,qBAAqB,CAAC,gDAAgD,CAAC,CAAC;YACnF,CAAC;YACD,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,sBAAsB,CAAC;QAC/B,CAAC,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,MAAM,uBAAuB,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0EAA0E;QAC1E,uBAAuB,GAAG,SAAS,CAAC;QACpC,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAe;IACrD,MAAM,GAAG,GAAG,MAAM,oBAAoB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAI,EAA4B,CAAC,OAAO,IAAI,EAAE,CAAC;IAC5D,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAiB;IAC9D,MAAM,KAAK,GAAI,IAAiE,CAAC,iBAAiB,CAAC;IACnG,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACrC,0EAA0E;QAC1E,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7D,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACV,CAAC;QACD,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACJ,sEAAsE;YACtE,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,EAAE,GAAG,KAAK,CAAC;QACZ,CAAC;QACD,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,kEAAkE;AAElE,iEAAiE;AACjE,MAAM,UAAU,UAAU;IACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IAClD,OAAO,YAAY,UAAU,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3D,CAAC"}

package/dist/agents/tools/edit-document-tool.d.ts

@@ -0,0 +1,133 @@
+/**
+ * `edit_document` — EDIT an existing Word / Excel / PowerPoint / PDF file in
+ * place (or to a sibling). The high-fidelity counterpart to `make_document`:
+ * where create builds a file from scratch, edit OPENS an existing one and
+ * mutates it, preserving the parts it does not touch.
+ *
+ * ─────────────────────────────────────────────────────────────────────────
+ * HIGH-FIDELITY TECHNIQUE (read before changing)
+ * ─────────────────────────────────────────────────────────────────────────
+ * Two strategies depending on format + action:
+ *
+ *   • docx/pptx `replace_text` → the OOXML UNZIP→edit-XML→REZIP technique
+ *     (the same one `analyze_media` reads with): `fflate.unzipSync` the file,
+ *     run a string replacement over the text runs in `word/document.xml`
+ *     (docx) or every `ppt/slides/slideN.xml` (pptx), then `fflate.zipSync`
+ *     the entries back. This preserves ALL styling, themes, images, and
+ *     relationships — only the run text changes. (A full `docx patchDocument`
+ *     token-replace is available too via the `docx` lib, but the unzip-rezip
+ *     path keeps arbitrary existing formatting that patchDocument would not
+ *     round-trip, and works identically for pptx which has no patch API.)
+ *
+ *   • docx `append` → re-open is not needed: we unzip, splice new paragraph
+ *     XML before `</w:body>`, and rezip — additive, style-preserving.
+ *
+ *   • xlsx `set_cells` / `append_rows` → `exceljs` read→modify→write, which
+ *     preserves the other sheets + their formatting.
+ *
+ *   • pdf `fill_form` / `merge` / `split` / `stamp` / `add_pages` /
+ *     `remove_pages` → `@cantoo/pdf-lib` load→mutate→save.
+ *
+ * SECURITY: the SOURCE path is scoped with the SAME guard as `analyze_media`'s
+ * local reads (`acquireSourceBytes`), and the OUTPUT path with the same write
+ * guard as `make_document` (`resolveOutputPath`). Reading a source OR writing an
+ * output outside the allowed roots is refused. Default output overwrites the
+ * source. NOT owner-only — editing a workspace file is safe and the path guards
+ * are the boundary.
+ *
+ * Robust to malformed input: every failure surfaces as a `BrigadeToolInputError`
+ * (clean `.message` to the model), never a raw library throw.
+ */
+import { Type } from "typebox";
+import type { BrigadeTool } from "./types.js";
+import { type DocFormat } from "./doc-shared.js";
+declare const EditDocumentParams: Type.TObject<{
+    source: Type.TString;
+    format: Type.TOptional<Type.TUnion<[Type.TLiteral<"docx">, Type.TLiteral<"xlsx">, Type.TLiteral<"pptx">, Type.TLiteral<"pdf">]>>;
+    action: Type.TString;
+    outputPath: Type.TOptional<Type.TString>;
+    find: Type.TOptional<Type.TString>;
+    replace: Type.TOptional<Type.TString>;
+    values: Type.TOptional<Type.TRecord<"^.*$", Type.TUnion<[Type.TString, Type.TNumber]>>>;
+    paragraphs: Type.TOptional<Type.TArray<Type.TString>>;
+    heading: Type.TOptional<Type.TString>;
+    sheet: Type.TOptional<Type.TString>;
+    cells: Type.TOptional<Type.TArray<Type.TObject<{
+        ref: Type.TOptional<Type.TString>;
+        row: Type.TOptional<Type.TInteger>;
+        col: Type.TOptional<Type.TInteger>;
+        value: Type.TUnion<[Type.TString, Type.TNumber, Type.TObject<{
+            formula: Type.TString;
+            numFmt: Type.TOptional<Type.TString>;
+        }>]>;
+        numFmt: Type.TOptional<Type.TString>;
+    }>>>;
+    rows: Type.TOptional<Type.TArray<Type.TArray<Type.TUnion<[Type.TString, Type.TNumber, Type.TObject<{
+        formula: Type.TString;
+        numFmt: Type.TOptional<Type.TString>;
+    }>]>>>>;
+    fields: Type.TOptional<Type.TRecord<"^.*$", Type.TUnion<[Type.TString, Type.TNumber, Type.TBoolean]>>>;
+    pdfs: Type.TOptional<Type.TArray<Type.TString>>;
+    pages: Type.TOptional<Type.TString>;
+    text: Type.TOptional<Type.TString>;
+}>;
+export interface EditDocumentDetails {
+    ok: boolean;
+    action: string;
+    format: DocFormat;
+    path?: string;
+    paths?: string[];
+    bytes?: number;
+    pages?: number;
+    replacements?: number;
+    cellsSet?: number;
+    rowsAppended?: number;
+    fieldsSet?: number;
+    tokensFilled?: string[];
+    tokensNotFound?: string[];
+    warning?: string;
+    message?: string;
+}
+export interface MakeEditDocumentToolOptions {
+    workspaceDir?: string;
+    cwd?: string;
+    agentId?: string;
+}
+export declare function makeEditDocumentTool(opts?: MakeEditDocumentToolOptions): BrigadeTool<typeof EditDocumentParams, EditDocumentDetails>;
+/**
+ * Apply one or more find→replace pairs to the run text of every paragraph in an
+ * OOXML part, matching ACROSS run boundaries. Word/PowerPoint frequently split a
+ * single visible word into several `<w:t>`/`<a:t>` runs (spell-check, rsid,
+ * proofing marks); matching only within one run misses those. This joins the
+ * decoded text of each paragraph's runs, plans replacements over the joined
+ * string, writes each replacement into the run that owns the match start, blanks
+ * the rest of the matched span, and leaves untouched runs (and all styling,
+ * attributes and non-text tags) exactly as they were.
+ */
+export declare function replaceAcrossRuns(xml: string, pairs: Array<{
+    find: string;
+    replace: string;
+}>): {
+    xml: string;
+    count: number;
+};
+/**
+ * Replace `find` with `replace` inside the TEXT of OOXML runs, matching ACROSS
+ * run boundaries (Word/PowerPoint split words into multiple `<w:t>`/`<a:t>`
+ * runs). All tags, attributes, styling, images and relationships are preserved;
+ * only run text changes and the replacement is re-escaped. Backed by
+ * {@link replaceAcrossRuns}; kept as the single-pair entry point used by
+ * `replace_text` and (per token) `fill_template`.
+ */
+export declare function replaceInRunText(xml: string, find: string, replace: string): {
+    xml: string;
+    count: number;
+};
+/**
+ * Parse a 1-indexed page list like "1-3,5,8-" into a sorted, de-duped array of
+ * page numbers within [1, total]. Invalid fragments are skipped (never throws).
+ * Exported for tests.
+ */
+export declare function parsePageList(spec: string, total: number): number[];
+export {};
+//# sourceMappingURL=edit-document-tool.d.ts.map

package/dist/agents/tools/edit-document-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-document-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/edit-document-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAG5C,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAUN,KAAK,SAAS,EAEd,MAAM,iBAAiB,CAAC;AAuBzB,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgEtB,CAAC;AAEH,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,2BAA2B;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CACnC,IAAI,GAAE,2BAAgC,GACpC,WAAW,CAAC,OAAO,kBAAkB,EAAE,mBAAmB,CAAC,CA6D7D;AA6iBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA6BhC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACb;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGhC;AAoFD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBnE"}