@strands-agents/sdk 1.4.0 → 1.5.0

package/dist/src/sandbox/posix-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"posix-shell.js","sourceRoot":"","sources":["../../../src/sandbox/posix-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,OAAO;IACrD,KAAK,CAAC,CAAC,oBAAoB,CACzB,IAAY,EACZ,QAAgB,EAChB,OAAwB;QAExB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACxG,MAAM,GAAG,GAAG,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QAC7D,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,OAAO,QAAQ,KAAK,OAAO,KAAK,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,wBAAwB,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAmB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QAC7D,MAAM,GAAG,GAAG,uBAAuB,MAAM,uBAAuB,GAAG,OAAO,MAAM,KAAK,OAAO,KAAK,GAAG,EAAE,CAAA;QACtG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,0BAA0B,IAAI,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,MAAM,iDAAiD,MAAM,EAAE,CAAC,CAAA;QAC7G,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,6BAA6B,IAAI,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,MAAM,OAAO,GAAe,EAAE,CAAA;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC7C,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;CACF"}
+{"version":3,"file":"posix-shell.js","sourceRoot":"","sources":["../../../src/sandbox/posix-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAGtD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAA2B;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA4B;IAC9D,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,CAAA;IACpB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChF,OAAO,UAAU,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAA;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,OAAO;IACrD,KAAK,CAAC,CAAC,oBAAoB,CACzB,IAAY,EACZ,QAAgB,EAChB,OAAwB;QAExB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACxG,MAAM,GAAG,GAAG,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QAC7D,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,OAAO,QAAQ,KAAK,OAAO,KAAK,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,wBAAwB,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAmB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QAC7D,MAAM,GAAG,GAAG,uBAAuB,MAAM,uBAAuB,GAAG,OAAO,MAAM,KAAK,OAAO,KAAK,GAAG,EAAE,CAAA;QACtG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,0BAA0B,IAAI,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,yFAAyF;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,MAAM,kDAAkD,MAAM,EAAE,CAAC,CAAA;QAC9G,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,6BAA6B,IAAI,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,MAAM,OAAO,GAAe,EAAE,CAAA;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC7C,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;CACF"}

package/dist/src/sandbox/ssh.d.ts

@@ -0,0 +1,56 @@
+/**
+ * SSH sandbox — executes commands on a remote host via OpenSSH.
+ */
+import type { ExecuteOptions } from './base.js';
+import { PosixShellSandbox } from './posix-shell.js';
+import type { ExecutionResult, StreamChunk } from './types.js';
+import type { Tool } from '../tools/tool.js';
+/**
+ * Options for constructing an {@link SshSandbox}.
+ */
+export interface SshSandboxOptions {
+    /** SSH destination (e.g., `"user@host"`, `"192.168.1.10"`). */
+    host: string;
+    /** Working directory on the remote host. */
+    workingDir: string;
+    /** Path to SSH private key file. */
+    identityFile?: string;
+    /** SSH port. Defaults to 22. */
+    port?: number;
+    /** Additional SSH options passed as `-o` flags. */
+    sshOptions?: string[];
+    /**
+     * Allow connections to hosts with unknown or changed SSH keys.
+     *
+     * When `false` (default), uses `StrictHostKeyChecking=accept-new` — trusts on
+     * first connect but rejects if the key changes.
+     * When `true`, uses `StrictHostKeyChecking=no` — disables host key verification.
+     */
+    allowUnknownHosts?: boolean;
+    /**
+     * Bypass the SSH option allowlist.
+     *
+     * When `false` (default), unknown options throw at construction time.
+     * When `true`, all options are passed through without validation.
+     */
+    allowUnsafeSshOptions?: boolean;
+}
+/**
+ * Execute commands on a remote host via SSH.
+ *
+ * Stateless — each {@link executeStreaming} call spawns a fresh `ssh` process.
+ * All sessions use `BatchMode=yes` — interactive prompts are disabled and
+ * authentication must be key-based.
+ */
+export declare class SshSandbox extends PosixShellSandbox {
+    readonly host: string;
+    readonly workingDir: string;
+    private readonly _identityFile;
+    private readonly _port;
+    private readonly _allowUnknownHosts;
+    private readonly _sshOptions;
+    constructor(options: SshSandboxOptions);
+    executeStreaming(command: string, options?: ExecuteOptions): AsyncGenerator<StreamChunk | ExecutionResult, void, undefined>;
+    getTools(): Tool[];
+}
+//# sourceMappingURL=ssh.d.ts.map

package/dist/src/sandbox/ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../../../src/sandbox/ssh.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAuB,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGzE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AA4C5C;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,UAAW,SAAQ,iBAAiB;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;gBAE1B,OAAO,EAAE,iBAAiB;IAmB/B,gBAAgB,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,cAAc,GACvB,cAAc,CAAC,WAAW,GAAG,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC;IAmCxD,QAAQ,IAAI,IAAI,EAAE;CAU5B"}

package/dist/src/sandbox/ssh.js

@@ -0,0 +1,119 @@
+/**
+ * SSH sandbox — executes commands on a remote host via OpenSSH.
+ */
+import { buildShellEnvPrefix, PosixShellSandbox } from './posix-shell.js';
+import { shellQuote } from './constants.js';
+import { streamProcess } from './stream-process.js';
+import { makeFileEditor, DEFAULT_FILE_EDITOR_DESCRIPTION } from '../vended-tools/file-editor/index.js';
+import { makeBash, SANDBOX_BASH_DESCRIPTION } from '../vended-tools/bash/index.js';
+// Known-safe SSH options. Options that execute commands, tunnel traffic, or load
+// external config are excluded. Reviewed and approved by AppSec.
+// Full option reference: https://man.openbsd.org/ssh_config
+const ALLOWED_SSH_OPTIONS = new Set([
+    'addressfamily',
+    'bindaddress',
+    'bindinterface',
+    'canonicaldomains',
+    'canonicalizefallbacklocal',
+    'canonicalizehostname',
+    'canonicalizemaxdots',
+    'canonicalizepermittedcnames',
+    'checkhostip',
+    'ciphers',
+    'compression',
+    'connectionattempts',
+    'connecttimeout',
+    'hostkeyalgorithms',
+    'hostname',
+    'identitiesonly',
+    'ipqos',
+    'kbdinteractiveauthentication',
+    'kexalgorithms',
+    'loglevel',
+    'macs',
+    'numberofpasswordprompts',
+    'passwordauthentication',
+    'port',
+    'preferredauthentications',
+    'pubkeyacceptedalgorithms',
+    'pubkeyauthentication',
+    'rekeylimit',
+    'serveralivecountmax',
+    'serveraliveinterval',
+    'tcpkeepalive',
+    'updatehostkeys',
+    'user',
+    'verifyhostkeydns',
+]);
+/**
+ * Execute commands on a remote host via SSH.
+ *
+ * Stateless — each {@link executeStreaming} call spawns a fresh `ssh` process.
+ * All sessions use `BatchMode=yes` — interactive prompts are disabled and
+ * authentication must be key-based.
+ */
+export class SshSandbox extends PosixShellSandbox {
+    host;
+    workingDir;
+    _identityFile;
+    _port;
+    _allowUnknownHosts;
+    _sshOptions;
+    constructor(options) {
+        super();
+        this.host = options.host;
+        this.workingDir = options.workingDir;
+        this._identityFile = options.identityFile;
+        this._port = options.port ?? 22;
+        this._allowUnknownHosts = options.allowUnknownHosts ?? false;
+        this._sshOptions = options.sshOptions ?? [];
+        if (!options.allowUnsafeSshOptions) {
+            for (const opt of this._sshOptions) {
+                const name = opt.split(/[=\s]/, 1)[0];
+                if (!ALLOWED_SSH_OPTIONS.has(name.toLowerCase())) {
+                    throw new Error(`SSH option "${name}" is not allowed. Set allowUnsafeSshOptions: true to bypass.`);
+                }
+            }
+        }
+    }
+    async *executeStreaming(command, options) {
+        const cwd = options?.cwd ?? this.workingDir;
+        const envPrefix = buildShellEnvPrefix(options?.env);
+        const remoteCommand = `cd ${shellQuote(cwd)} && ${envPrefix}${command}`;
+        const sshArgs = [
+            '-o',
+            `StrictHostKeyChecking=${this._allowUnknownHosts ? 'no' : 'accept-new'}`,
+            '-o',
+            'BatchMode=yes',
+            '-p',
+            String(this._port),
+        ];
+        if (this._identityFile) {
+            sshArgs.push('-i', this._identityFile);
+        }
+        for (const opt of this._sshOptions) {
+            sshArgs.push('-o', opt);
+        }
+        // ssh requires the hostname and command after all flags. Furthermore, '--'
+        // terminates flag parsing so the host is always treated as a positional argument.
+        // Without this, a host like '-oProxyCommand=evil' would be parsed as a flag,
+        // enabling arbitrary command execution on the local machine.
+        sshArgs.push('--', this.host, remoteCommand);
+        yield* streamProcess('ssh', sshArgs, {
+            timeout: options?.timeout,
+            signal: options?.signal,
+            enoentMessage: 'ssh is not installed or not on PATH',
+        });
+    }
+    getTools() {
+        return [
+            makeFileEditor(this, {
+                description: `${DEFAULT_FILE_EDITOR_DESCRIPTION} Files are on host "${this.host}".`,
+            }),
+            makeBash(this, {
+                description: `${SANDBOX_BASH_DESCRIPTION} Runs on host "${this.host}". Working directory: ${this.workingDir}.`,
+            }),
+        ];
+    }
+}
+//# sourceMappingURL=ssh.js.map

package/dist/src/sandbox/ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.js","sourceRoot":"","sources":["../../../src/sandbox/ssh.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AACtG,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAElF,iFAAiF;AACjF,iEAAiE;AACjE,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,eAAe;IACf,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,qBAAqB;IACrB,6BAA6B;IAC7B,aAAa;IACb,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;IACV,gBAAgB;IAChB,OAAO;IACP,8BAA8B;IAC9B,eAAe;IACf,UAAU;IACV,MAAM;IACN,yBAAyB;IACzB,wBAAwB;IACxB,MAAM;IACN,0BAA0B;IAC1B,0BAA0B;IAC1B,sBAAsB;IACtB,YAAY;IACZ,qBAAqB;IACrB,qBAAqB;IACrB,cAAc;IACd,gBAAgB;IAChB,MAAM;IACN,kBAAkB;CACnB,CAAC,CAAA;AAiCF;;;;;;GAMG;AACH,MAAM,OAAO,UAAW,SAAQ,iBAAiB;IACtC,IAAI,CAAQ;IACZ,UAAU,CAAQ;IACV,aAAa,CAAoB;IACjC,KAAK,CAAQ;IACb,kBAAkB,CAAS;IAC3B,WAAW,CAAU;IAEtC,YAAY,OAA0B;QACpC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAA;QACzC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;QAC/B,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAA;QAC5D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;QAE3C,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAA;gBACtC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,8DAA8D,CAAC,CAAA;gBACpG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,gBAAgB,CACrB,OAAe,EACf,OAAwB;QAExB,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,CAAA;QAC3C,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,SAAS,GAAG,OAAO,EAAE,CAAA;QAEvE,MAAM,OAAO,GAAa;YACxB,IAAI;YACJ,yBAAyB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE;YACxE,IAAI;YACJ,eAAe;YACf,IAAI;YACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACnB,CAAA;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QACxC,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACzB,CAAC;QAED,2EAA2E;QAC3E,kFAAkF;QAClF,6EAA6E;QAC7E,6DAA6D;QAC7D,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QAE5C,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE;YACnC,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,aAAa,EAAE,qCAAqC;SACrD,CAAC,CAAA;IACJ,CAAC;IAEQ,QAAQ;QACf,OAAO;YACL,cAAc,CAAC,IAAI,EAAE;gBACnB,WAAW,EAAE,GAAG,+BAA+B,uBAAuB,IAAI,CAAC,IAAI,IAAI;aACpF,CAAC;YACF,QAAQ,CAAC,IAAI,EAAE;gBACb,WAAW,EAAE,GAAG,wBAAwB,kBAAkB,IAAI,CAAC,IAAI,yBAAyB,IAAI,CAAC,UAAU,GAAG;aAC/G,CAAC;SACH,CAAA;IACH,CAAC;CACF"}

package/dist/src/sandbox/stream-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stream-process.d.ts","sourceRoot":"","sources":["../../../src/sandbox/stream-process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAa9D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,wCAAwC;IACxC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAChC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAuB,aAAa,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAAC,WAAW,GAAG,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,CAmIhE"}
+{"version":3,"file":"stream-process.d.ts","sourceRoot":"","sources":["../../../src/sandbox/stream-process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAa9D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,wCAAwC;IACxC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAChC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAuB,aAAa,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAAC,WAAW,GAAG,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,CAmIhE"}

package/dist/src/sandbox/stream-process.js

@@ -2,6 +2,7 @@
  * Spawn a process and stream its stdout/stderr as an async generator.
  */
 import { spawn } from 'child_process';
+import { SandboxAbortError, SandboxTimeoutError } from './errors.js';
 const SIGNAL_CODES = {
     SIGHUP: 1,
     SIGINT: 2,
@@ -97,7 +98,7 @@ export async function* streamProcess(command, args, options) {
             wake();
         }
     });
-    const onAbort = () => terminate(new Error('Execution aborted'));
+    const onAbort = () => terminate(new SandboxAbortError());
     if (options?.signal) {
         if (options.signal.aborted) {
             onAbort();
@@ -108,7 +109,7 @@ export async function* streamProcess(command, args, options) {
     }
     if (options?.timeout !== undefined) {
         timeoutHandle = setTimeout(() => {
-            terminate(new Error(`Execution timed out after ${options.timeout} seconds`));
+            terminate(new SandboxTimeoutError(options.timeout));
         }, options.timeout * 1000);
     }
     try {

package/dist/src/sandbox/stream-process.js.map

@@ -1 +1 @@
-{"version":3,"file":"stream-process.js","sourceRoot":"","sources":["../../../src/sandbox/stream-process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAGrC,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;CACZ,CAAA;AAcD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,aAAa,CAClC,OAAe,EACf,IAAc,EACd,OAA8B;IAE9B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACjC,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,KAAwB,CAAA;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,WAAqC,CAAA;IACzC,IAAI,aAAwD,CAAA;IAC5D,IAAI,SAAoD,CAAA;IAExD,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,EAAE,CAAA;YACb,WAAW,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,MAAa,EAAQ,EAAE;QACxC,IAAI,WAAW,IAAI,IAAI;YAAE,OAAM;QAC/B,WAAW,GAAG,IAAI,CAAA;QAClB,KAAK,GAAG,MAAM,CAAA;QACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpB,IAAI,EAAE,CAAA;QACN,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC,EAAE,IAAI,CAAC,CAAA;IACV,CAAC,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,IAAI,IAAI,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,IAAI,IAAI,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,CAAC,CAAA;YACd,CAAC;YACD,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,OAAO,EAAE,aAAa,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrE,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,GAAG,CAAA;YACb,CAAC;YACD,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAA;IAErE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAA;QACX,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,SAAS,CAAC,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,UAAU,CAAC,CAAC,CAAA;QAC9E,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;YAED,IAAI,IAAI,IAAI,WAAW;gBAAE,MAAK;YAE9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,WAAW,GAAG,OAAO,CAAA;gBACrB,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM;gBACJ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,OAAQ,CAAC,aAAc;gBAC/B,WAAW,EAAE,EAAE;aACU,CAAA;YAC3B,OAAM;QACR,CAAC;QAED,IAAI,KAAK;YAAE,MAAM,KAAK,CAAA;QAEtB,MAAM;YACJ,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,MAAM;YACN,MAAM;YACN,WAAW,EAAE,EAAE;SACU,CAAA;IAC7B,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS;YAAE,YAAY,CAAC,aAAa,CAAC,CAAA;QAC5D,IAAI,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"stream-process.js","sourceRoot":"","sources":["../../../src/sandbox/stream-process.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGpE,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;CACZ,CAAA;AAcD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,aAAa,CAClC,OAAe,EACf,IAAc,EACd,OAA8B;IAE9B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACjC,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,KAAwB,CAAA;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,WAAqC,CAAA;IACzC,IAAI,aAAwD,CAAA;IAC5D,IAAI,SAAoD,CAAA;IAExD,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,EAAE,CAAA;YACb,WAAW,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,MAAa,EAAQ,EAAE;QACxC,IAAI,WAAW,IAAI,IAAI;YAAE,OAAM;QAC/B,WAAW,GAAG,IAAI,CAAA;QAClB,KAAK,GAAG,MAAM,CAAA;QACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpB,IAAI,EAAE,CAAA;QACN,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC,EAAE,IAAI,CAAC,CAAA;IACV,CAAC,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,IAAI,IAAI,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,IAAI,IAAI,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,CAAC,CAAA;YACd,CAAC;YACD,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,OAAO,EAAE,aAAa,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrE,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,GAAG,CAAA;YACb,CAAC;YACD,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAA;IAE9D,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAA;QACX,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,SAAS,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,OAAQ,CAAC,CAAC,CAAA;QACtD,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;YAED,IAAI,IAAI,IAAI,WAAW;gBAAE,MAAK;YAE9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,WAAW,GAAG,OAAO,CAAA;gBACrB,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM;gBACJ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,OAAQ,CAAC,aAAc;gBAC/B,WAAW,EAAE,EAAE;aACU,CAAA;YAC3B,OAAM;QACR,CAAC;QAED,IAAI,KAAK;YAAE,MAAM,KAAK,CAAA;QAEtB,MAAM;YACJ,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,MAAM;YACN,MAAM;YACN,WAAW,EAAE,EAAE;SACU,CAAA;IAC7B,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS;YAAE,YAAY,CAAC,aAAa,CAAC,CAAA;QAC5D,IAAI,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;AACH,CAAC"}