@theokit/sdk-tools 0.1.0

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/path-guard.ts","../src/apply-patch.ts","../src/edit-file.ts","../src/formatter.ts","../src/path-scope.ts","../src/subprocess.ts","../src/git-diff.ts","../src/glob-files.ts","../src/list-dir.ts","../src/plan-mode.ts","../src/question.ts","../src/read-file.ts","../src/run-vitest.ts","../src/search-text.ts","../src/shell-exec.ts","../src/todolist.ts","../src/truncation.ts","../src/web-fetch.ts","../src/web-search.ts","../src/write-file.ts"],"names":["ConfigurationError","resolve","sep","path","realpathSync","lstatSync","readlinkSync","dirname","defineTool","z","readFile","copyFile","mkdir","writeFile","result","existsSync","join","spawn","relative","readdir","open","DEFAULT_TIMEOUT_MS","DEFAULT_MAX_STDOUT_BYTES","BINARY_PROBE_BYTES","relativePath","mkdirSync","writeFileSync"],"mappings":";;;;;;;;;;AA+BO,IAAM,kBAAA,GAAN,cAAiCA,sBAAA,CAAmB;AAAA,EACvC,IAAA,GAAe,oBAAA;AAAA,EAEjC,WAAA,CAAY,OAAe,YAAA,EAAsB;AAC/C,IAAA,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAK,CAAA,QAAA,EAAM,YAAY,CAAA,CAAA,EAAI;AAAA,MAC1D,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACF,CAAA;AAYO,IAAM,kBAAA,GAAN,cAAiCA,sBAAA,CAAmB;AAAA,EACvC,IAAA,GAAe,oBAAA;AAAA,EAEjC,YAAY,IAAA,EAAc;AACxB,IAAA,KAAA;AAAA,MACE,SAAS,IAAI,CAAA,qFAAA,CAAA;AAAA,MACb;AAAA,QACE,IAAA,EAAM;AAAA;AACR,KACF;AAAA,EACF;AACF,CAAA;AAWO,SAAS,YAAA,CAAa,SAAiB,KAAA,EAAyB;AACrE,EAAA,IAAI,SAAS,EAAA,EAAI;AACf,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AACA,EAAA,MAAM,YAAA,GAAeC,aAAQ,IAAI,CAAA;AACjC,EAAA,MAAM,MAAA,GAASA,YAAA,CAAQ,IAAA,EAAM,GAAG,KAAK,CAAA;AACrC,EAAA,IAAI,WAAW,YAAA,IAAgB,CAAC,OAAO,UAAA,CAAW,YAAA,GAAeC,QAAG,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,kBAAA,CAAmB,KAAA,CAAM,IAAA,CAAK,GAAG,GAAG,MAAM,CAAA;AAAA,EACtD;AACA,EAAA,OAAO,MAAA;AACT;AAoBO,SAAS,qBAAA,CAAsBC,QAAc,IAAA,EAAoB;AAEtE,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI;AACF,IAAA,YAAA,GAAeC,gBAAa,IAAI,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AAEN,IAAA,YAAA,GAAeH,aAAQ,IAAI,CAAA;AAAA,EAC7B;AAQA,EAAA,MAAM,QAAA,GAAW,0BAA0BE,MAAI,CAAA;AAC/C,EAAA,IAAI,aAAa,MAAA,EAAW;AAE5B,EAAA,IAAI,aAAa,YAAA,IAAgB,CAAC,SAAS,UAAA,CAAW,YAAA,GAAeD,QAAG,CAAA,EAAG;AACzE,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,QAAA,EAAWC,MAAI,IAAI,QAAQ,CAAA;AAAA,EAC1D;AACF;AAUA,SAAS,0BAA0BA,MAAA,EAAkC;AAEnE,EAAA,IAAI;AACF,IAAA,OAAOC,gBAAaD,MAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAcE,aAAUF,MAAI,CAAA;AAClC,IAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,MAAA,MAAM,MAAA,GAASG,gBAAaH,MAAI,CAAA;AAGhC,MAAA,MAAM,UAAA,GAAa,yBAAA,CAA0BI,YAAA,CAAQJ,MAAI,CAAC,CAAA;AAC1D,MAAA,MAAM,UAAA,GAAa,UAAA,IAAcI,YAAA,CAAQJ,MAAI,CAAA;AAC7C,MAAA,OAAOF,YAAA,CAAQ,YAAY,MAAM,CAAA;AAAA,IACnC;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,IAAI,MAAA,GAASM,aAAQJ,MAAI,CAAA;AACzB,EAAA,IAAI,MAAA,GAASA,MAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACrC,EAAA,OAAO,MAAA,KAAWI,YAAA,CAAQ,MAAM,CAAA,EAAG;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAOH,gBAAa,MAAM,CAAA;AAEhC,MAAA,OAAOH,YAAA,CAAQ,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,GAASE,MAAA,CAAK,KAAA,CAAMI,YAAA,CAAQ,MAAM,EAAE,MAAM,CAAA;AAC1C,MAAA,MAAA,GAASA,aAAQ,MAAM,CAAA;AAAA,IACzB;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,UAAA,uBAAiB,GAAA,CAAI,CAAC,kBAAkB,mBAAA,EAAqB,WAAA,EAAa,WAAW,CAAC,CAAA;AAuBrF,SAAS,gBAAgB,KAAA,EAAwB;AAEtD,EAAA,MAAM,UAAA,GAAa,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,SAAS,EAAE,CAAA;AAChE,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAEpC,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AACjE,EAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAElC,EAAA,MAAM,KAAA,GAAQ,SAAS,CAAC,CAAA;AAExB,EAAA,IAAI,KAAA,KAAU,gBAAgB,OAAO,KAAA;AACrC,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,IAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,IAAA;AAEnC,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,IAAA;AAC7B,EAAA,IAAI,KAAA,KAAU,gBAAgB,OAAO,IAAA;AACrC,EAAA,IAAI,KAAA,KAAU,SAAS,OAAO,IAAA;AAE9B,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AAC7C,EAAA,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA,EAAG,OAAO,IAAA;AAErC,EAAA,OAAO,KAAA;AACT;;;AC9LO,SAAS,qBAAqB,IAAA,EAA+C;AAClF,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAOC,cAAA,CAAW;AAAA,IAChB,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EACE,gNAAA;AAAA,IAGF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,KAAA,EAAOA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,uBAAuB;AAAA,KAC1D,CAAA;AAAA;AAAA,IAED,OAAA,EAAS,OAAO,EAAE,KAAA,EAAM,KAAM;AAC5B,MAAA,MAAM,KAAA,GAAQ,WAAW,KAAK,CAAA;AAC9B,MAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,aAAA,EAAe,MAAA,EAAQ,qBAAA,EAAuB,CAAA;AAAA,MAC1F;AAGA,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,UAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,gBAAA,EAAkB,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,QAC/E;AACA,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,YAAA,CAAa,WAAA,EAAa,IAAA,CAAK,IAAI,CAAA;AAC/C,UAAA,qBAAA,CAAsB,KAAK,WAAW,CAAA;AAAA,QACxC,SAAS,GAAA,EAAK;AACZ,UAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,YAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,gBAAA,EAAkB,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,UAC/E;AACA,UAAA,MAAM,GAAA;AAAA,QACR;AAAA,MACF;AAGA,MAAA,MAAM,UAAoB,EAAC;AAC3B,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,MAAM,YAAA,GAAe,YAAA,CAAa,WAAA,EAAa,IAAA,CAAK,IAAI,CAAA;AACxD,QAAA,IAAI,OAAA;AACJ,QAAA,IAAI;AACF,UAAA,OAAA,GAAU,MAAMC,iBAAA,CAAS,YAAA,EAAc,OAAO,CAAA;AAAA,QAChD,SAAS,GAAA,EAAK;AACZ,UAAA,MAAM,CAAA,GAAI,GAAA;AACV,UAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AAEvB,YAAA,OAAA,GAAU,EAAA;AAAA,UACZ,CAAA,MAAO;AACL,YAAA,MAAM,GAAA;AAAA,UACR;AAAA,QACF;AAEA,QAAA,MAAM,MAAA,GAAS,UAAA,CAAW,OAAA,EAAS,IAAA,CAAK,OAAO,CAAA;AAC/C,QAAA,IAAI,WAAW,IAAA,EAAM;AACnB,UAAA,OAAO,KAAK,SAAA,CAAU;AAAA,YACpB,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA,EAAO,cAAA;AAAA,YACP,MAAM,IAAA,CAAK,IAAA;AAAA,YACX,MAAA,EAAQ;AAAA,WACT,CAAA;AAAA,QACH;AAEA,QAAA,IAAI,YAAY,EAAA,EAAI;AAClB,UAAA,MAAMC,iBAAA,CAAS,YAAA,EAAc,CAAA,EAAG,YAAY,CAAA,IAAA,CAAM,CAAA;AAAA,QACpD;AACA,QAAA,MAAMC,eAAML,YAAAA,CAAQ,YAAY,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACtD,QAAA,MAAMM,kBAAA,CAAU,YAAA,EAAc,MAAA,EAAQ,OAAO,CAAA;AAC7C,QAAA,OAAA,CAAQ,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,MACxB;AAEA,MAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,aAAA,EAAe,SAAS,CAAA;AAAA,IAC5D;AAAA,GACD,CAAA;AACH;AAcA,SAAS,WAAW,KAAA,EAA2B;AAC7C,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAC9B,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI,OAAA,GAA2B,IAAA;AAE/B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AAExB,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,MAAM,QAAA,GAAW,KAAK,KAAA,CAAM,CAAC,EAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,IAAA,EAAK;AACxD,MAAA,IAAI,QAAA,IAAY,aAAa,WAAA,EAAa;AACxC,QAAA,OAAA,GAAU,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,EAAC,EAAE;AACxC,QAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAAA,MACpB;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,EAAG;AAE5B,IAAA,IAAI,YAAY,IAAA,EAAM;AAEtB,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACxB,MAAA,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,SAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,EAAG,CAAA;AAAA,IAC9D,CAAA,MAAA,IAAW,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC/B,MAAA,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,EAAG,CAAA;AAAA,IACjE,CAAA,MAAA,IAAW,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC/B,MAAA,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,EAAG,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAIA,SAAS,UAAA,CAAW,SAAiB,OAAA,EAAsC;AACzE,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA;AACxC,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,OAAA,GAAU,CAAA;AAGd,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,SAAA,IAAa,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA;AACpF,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,QAAA,GAAW,aAAA,CAAc,OAAA,CAAQ,YAAA,CAAa,SAAS,OAAO,CAAA;AACpE,IAAA,IAAI,QAAA,KAAa,IAAI,OAAO,IAAA;AAE5B,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAA,CAAO,IAAA,CAAK,aAAA,CAAc,CAAC,CAAE,CAAA;AAAA,IAC/B;AACA,IAAA,OAAA,GAAU,QAAA;AAAA,EACZ;AAEA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,MAAA,IAAI,WAAW,aAAA,CAAc,MAAA,IAAU,cAAc,OAAO,CAAA,KAAM,OAAO,OAAA,EAAS;AAChF,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,OAAO,CAAA;AAC1B,MAAA,OAAA,EAAA;AAAA,IACF,CAAA,MAAA,IAAW,MAAA,CAAO,IAAA,KAAS,QAAA,EAAU;AACnC,MAAA,IAAI,WAAW,aAAA,CAAc,MAAA,IAAU,cAAc,OAAO,CAAA,KAAM,OAAO,OAAA,EAAS;AAChF,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,OAAA,EAAA;AAAA,IACF,CAAA,MAAA,IAAW,MAAA,CAAO,IAAA,KAAS,KAAA,EAAO;AAChC,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,OAAO,CAAA;AAAA,IAC5B;AAAA,EACF;AAGA,EAAA,OAAO,OAAA,GAAU,cAAc,MAAA,EAAQ;AACrC,IAAA,MAAA,CAAO,IAAA,CAAK,aAAA,CAAc,OAAO,CAAE,CAAA;AACnC,IAAA,OAAA,EAAA;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AACzB;ACpKO,SAAS,mBAAmB,IAAA,EAA6C;AAC9E,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAOL,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,6PAAA;AAAA,IAIF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6BAA6B,CAAA;AAAA,MAC9D,UAAA,EAAYA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6BAA6B,CAAA;AAAA,MACpE,UAAA,EAAYA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,qBAAqB;AAAA,KACtD,CAAA;AAAA;AAAA,IAED,SAAS,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,YAAW,KAAM;AACnD,MAAA,IAAI,eAAA,CAAgB,IAAI,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,MACpE;AAEA,MAAA,IAAI,YAAA;AACJ,MAAA,IAAI;AACF,QAAA,YAAA,GAAe,YAAA,CAAa,aAAa,IAAI,CAAA;AAC7C,QAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAAA,MACjD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,UAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,GAAA;AAAA,MACR;AAEA,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI;AACF,QAAA,OAAA,GAAU,MAAMC,iBAAAA,CAAS,YAAA,EAAc,OAAO,CAAA;AAAA,MAChD,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,CAAA,GAAI,GAAA;AACV,QAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACvB,UAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,WAAA,EAAa,MAAM,CAAA;AAAA,QAC/D;AACA,QAAA,MAAM,GAAA;AAAA,MACR;AAGA,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AAC3C,MAAA,IAAI,aAAa,EAAA,EAAI;AACnB,QAAA,MAAMC,iBAAAA,CAAS,YAAA,EAAc,CAAA,EAAG,YAAY,CAAA,IAAA,CAAM,CAAA;AAClD,QAAA,MAAMG,OAAAA,GACJ,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA,GAAI,UAAA,GAAa,OAAA,CAAQ,KAAA,CAAM,QAAA,GAAW,UAAA,CAAW,MAAM,CAAA;AACtF,QAAA,MAAMD,kBAAAA,CAAU,YAAA,EAAcC,OAAAA,EAAQ,OAAO,CAAA;AAC7C,QAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,YAAA,EAAc,GAAG,CAAA;AAAA,MACrD;AAGA,MAAA,MAAM,iBAAA,GAAoB,oBAAoB,OAAO,CAAA;AACrD,MAAA,MAAM,aAAA,GAAgB,oBAAoB,UAAU,CAAA;AACpD,MAAA,MAAM,aAAA,GAAgB,iBAAA,CAAkB,OAAA,CAAQ,aAAa,CAAA;AAE7D,MAAA,IAAI,kBAAkB,EAAA,EAAI;AACxB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,UAAA,EAAY,MAAM,CAAA;AAAA,MAC9D;AAGA,MAAA,MAAM,IAAA,GAAO,gBAAA;AAAA,QACX,OAAA;AAAA,QACA,iBAAA;AAAA,QACA,aAAA;AAAA,QACA,aAAA,CAAc;AAAA,OAChB;AACA,MAAA,MAAMH,iBAAAA,CAAS,YAAA,EAAc,CAAA,EAAG,YAAY,CAAA,IAAA,CAAM,CAAA;AAClD,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,GAAI,UAAA,GAAa,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AACjF,MAAA,MAAME,kBAAAA,CAAU,YAAA,EAAc,MAAA,EAAQ,OAAO,CAAA;AAC7C,MAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,YAAA,EAAc,GAAG,CAAA;AAAA,IACrD;AAAA,GACD,CAAA;AACH;AAGA,SAAS,oBAAoB,CAAA,EAAmB;AAC9C,EAAA,OAAO,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AACrC;AAOA,SAAS,gBAAA,CACP,QAAA,EACA,WAAA,EACA,SAAA,EACA,OAAA,EACgC;AAChC,EAAA,IAAI,OAAA,GAAU,CAAA;AACd,EAAA,IAAI,OAAA,GAAU,CAAA;AAGd,EAAA,OAAO,OAAA,GAAU,SAAS,MAAA,IAAU,IAAA,CAAK,KAAK,QAAA,CAAS,OAAO,CAAE,CAAA,EAAG;AACjE,IAAA,OAAA,EAAA;AAAA,EACF;AAGA,EAAA,OAAO,OAAA,GAAU,SAAA,IAAa,OAAA,GAAU,QAAA,CAAS,MAAA,EAAQ;AACvD,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,OAAO,CAAE,CAAA,EAAG;AAEjC,MAAA,OAAO,OAAA,GAAU,SAAS,MAAA,IAAU,IAAA,CAAK,KAAK,QAAA,CAAS,OAAO,CAAE,CAAA,EAAG;AACjE,QAAA,OAAA,EAAA;AAAA,MACF;AACA,MAAA,OAAA,EAAA;AAAA,IACF,CAAA,MAAO;AACL,MAAA,OAAA,EAAA;AACA,MAAA,OAAA,EAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA;AAGd,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,OAAO,MAAA,GAAS,OAAA,IAAW,OAAA,GAAU,QAAA,CAAS,MAAA,EAAQ;AACpD,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,OAAO,CAAE,CAAA,EAAG;AACjC,MAAA,OAAO,OAAA,GAAU,SAAS,MAAA,IAAU,IAAA,CAAK,KAAK,QAAA,CAAS,OAAO,CAAE,CAAA,EAAG;AACjE,QAAA,OAAA,EAAA;AAAA,MACF;AACA,MAAA,MAAA,EAAA;AAAA,IACF,CAAA,MAAO;AACL,MAAA,OAAA,EAAA;AACA,MAAA,MAAA,EAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,GAAA,EAAK,OAAA,EAAQ;AAC/B;;;ACzJO,SAAS,UAAA,CAAW,UAAkB,IAAA,EAAsB;AACjE,EAAA,OAAO,SAAS,QAAQ;AAAA,EAAK,IAAI;AAAA,MAAA,CAAA;AACnC;AAKO,SAAS,WAAW,IAAA,EAAsB;AAC/C,EAAA,OAAO,CAAA;AAAA,EAAe,IAAI;AAAA,MAAA,CAAA;AAC5B;AAKO,SAAS,eAAe,KAAA,EAAyB;AACtD,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,YAAA;AAC/B,EAAA,OAAO,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,KAAK,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAC7C;AAKO,SAAS,WAAA,CAAY,SAAiB,IAAA,EAAuB;AAClE,EAAA,MAAM,MAAA,GAAS,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,EAAA,CAAA,GAAO,EAAA;AACrC,EAAA,OAAO,CAAA,aAAA,EAAgB,MAAM,CAAA,EAAG,OAAO,CAAA,CAAA;AACzC;;;ACnBO,SAAS,cAAA,CAAe,MAA0B,WAAA,EAAoC;AAC3F,EAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,EAAA,EAAI,OAAO,IAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,WAAA,EAAa,IAAI,CAAA;AAC1C,IAAA,qBAAA,CAAsB,KAAK,WAAW,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACNA,SAAS,iBAAiB,KAAA,EAAmC;AAC3D,EAAA,IAAI,IAAA,GAAO,KAAA;AACX,EAAA,OAAO;AAAA,IACL,SAAS,MAAM,IAAA;AAAA,IACf,IAAA,EAAM,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAA,GAAO,IAAA;AACP,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,GACF;AACF;AAMO,SAAS,cAAA,CACd,KAAA,EACA,SAAA,EACA,SAAA,EACAZ,QAAAA,EACY;AACZ,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,IAAA,IAAA,CAAK,KAAK,MAAM;AACd,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,CAAM,GAAA,IAAO,IAAI,SAAS,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAAA,QAAAA,CAAQ,WAAW,CAAA;AAAA,IACrB,CAAC,CAAA;AAAA,EACH,GAAG,SAAS,CAAA;AACZ,EAAA,MAAM,IAAA,GAAO,iBAAiB,KAAK,CAAA;AACnC,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,mBAAA,CACd,KAAA,EACA,IAAA,EACA,OAAA,EACA,SACAA,QAAAA,EACM;AACN,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,IAAA,CAAK,KAAK,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAC,CAAA;AAAA,EACxC,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AACzB,IAAA,IAAA,CAAK,KAAK,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,GAAG,CAAC,CAAC,CAAA;AAAA,EACvC,CAAC,CAAA;AACH;;;ACjDA,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,wBAAA,GAA2B,IAAI,IAAA,GAAO,IAAA;AAQrC,SAAS,kBAAkB,IAAA,EAA4C;AAC5E,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,SAAA,GAAY,kBAAA;AAAA,IACZ,cAAA,GAAiB;AAAA,GACnB,GAAI,IAAA;AAEJ,EAAA,OAAOO,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,qPAAA;AAAA,IAIF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,MAAMA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,8CAA8C,CAAA;AAAA,MACnF,QAAQA,KAAAA,CACL,OAAA,GACA,QAAA,EAAS,CACT,SAAS,kEAAkE;AAAA,KAC/E,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,QAAEN,MAAA,EAAM,QAAO,KAAM;AACnC,MAAA,IAAI,CAACY,aAAA,CAAWC,SAAA,CAAK,WAAA,EAAa,MAAM,CAAC,CAAA,EAAG;AAC1C,QAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,cAAc,CAAA;AAAA,MAC1D;AAEA,MAAA,MAAM,UAAA,GAAa,cAAA,CAAeb,MAAA,EAAM,WAAW,CAAA;AACnD,MAAA,IAAI,UAAA,KAAe,MAAM,OAAO,UAAA;AAEhC,MAAA,MAAM,IAAA,GAAO,aAAA,CAAc,MAAA,EAAQA,MAAI,CAAA;AACvC,MAAA,MAAM,SAAS,MAAM,aAAA,CAAc,WAAA,EAAa,IAAA,EAAM,WAAW,cAAc,CAAA;AAC/E,MAAA,OAAO,eAAA,CAAgB,QAAQ,SAAS,CAAA;AAAA,IAC1C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,aAAA,CAAc,QAA6B,IAAA,EAAoC;AACtF,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,EAAQ,YAAY,CAAA;AAClC,EAAA,IAAI,MAAA,KAAW,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,UAAU,CAAA;AACzC,EAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,IAAI,IAAA,CAAK,IAAA,CAAK,MAAM,IAAI,CAAA;AAC3D,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,eAAA,CAAgB,QAA0B,SAAA,EAA2B;AAC5E,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,SAAA,EAAW,WAAW,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AAC3B,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,YAAA,EAAc,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,CAAA;AAAA,EACjF;AACA,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,CAAA;AACtF;AAOA,SAAS,aAAA,CACP,GAAA,EACA,IAAA,EACA,SAAA,EACA,cAAA,EAC2B;AAC3B,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACF,QAAAA,KAAY;AAE9B,IAAA,MAAM,KAAA,GAAQgB,mBAAA,CAAM,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AAC3F,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,IAAI,SAAA,GAAY,KAAA;AAEhB,IAAA,MAAM,IAAA,GAAO,cAAA;AAAA,MACX,KAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAU,CAAA;AAAA,MACzBhB;AAAA,KACF;AAEA,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,IAAI,eAAe,cAAA,EAAgB;AACjC,QAAA,SAAA,GAAY,IAAA;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAY,cAAA,GAAiB,WAAA;AACnC,MAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,QAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AAC9C,QAAA,WAAA,GAAc,cAAA;AACd,QAAA,SAAA,GAAY,IAAA;AAAA,MACd,CAAA,MAAO;AACL,QAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AACvB,QAAA,WAAA,IAAe,KAAA,CAAM,MAAA;AAAA,MACvB;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,IACzB,CAAC,CAAA;AAED,IAAA,mBAAA;AAAA,MACE,KAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,KAAS;AACR,QAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAC3D,QAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAC3D,QAAA,OAAO,IAAA,KAAS,CAAA,GAAI,EAAE,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAU,GAAI,EAAE,IAAA,EAAM,OAAA,EAAS,MAAA,EAAO;AAAA,MAClF,CAAA;AAAA,MACA,CAAC,GAAA,MAAS,EAAE,MAAM,OAAA,EAAS,MAAA,EAAQ,IAAI,OAAA,EAAQ,CAAA;AAAA,MAC/CA;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AC1HA,IAAM,gBAAA,uBAAuB,GAAA,CAAI,CAAC,gBAAgB,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAC,CAAA;AAOnE,SAAS,eAAe,IAAA,EAAyC;AACtE,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAOO,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,mNAAA;AAAA,IAIF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,OAAA,EAASA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,iDAAiD,CAAA;AAAA,MACrF,KAAKA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,+CAA+C;AAAA,KACpF,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,KAAI,KAAM;AACnC,MAAA,IAAI,UAAA,GAAa,WAAA;AAEjB,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,IAAI;AACF,UAAA,UAAA,GAAa,YAAA,CAAa,aAAa,GAAG,CAAA;AAC1C,UAAA,qBAAA,CAAsB,YAAY,WAAW,CAAA;AAAA,QAC/C,SAAS,GAAA,EAAK;AACZ,UAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,YAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,GAAA,EAAK,CAAA;AAAA,UACzE;AACA,UAAA,MAAM,GAAA;AAAA,QACR;AAAA,MACF;AAEA,MAAA,MAAM,KAAA,GAAQ,YAAY,OAAO,CAAA;AACjC,MAAA,MAAM,QAAkB,EAAC;AAEzB,MAAA,MAAM,OAAA,CAAQ,UAAA,EAAY,UAAA,EAAY,KAAA,EAAO,KAAK,CAAA;AAElD,MAAA,MAAM,aAAA,GAAgB,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAMS,cAAS,WAAA,EAAa,CAAC,CAAC,CAAA,CAAE,IAAA,EAAK;AACtE,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,OAAO,aAAA,EAAe,KAAA,EAAO,aAAA,CAAc,MAAA,EAAQ,CAAA;AAAA,IACvF;AAAA,GACD,CAAA;AACH;AAEA,eAAe,OAAA,CACb,IAAA,EACA,GAAA,EACA,OAAA,EACA,OAAA,EACe;AACf,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAMC,gBAAA,CAAQ,GAAA,EAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,EAAG;AAEtC,IAAA,MAAM,QAAA,GAAWH,SAAAA,CAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AACrC,IAAA,MAAM,OAAA,GAAUE,aAAA,CAAS,IAAA,EAAM,QAAQ,CAAA;AAEvC,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,MAAA,MAAM,OAAA,CAAQ,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,OAAO,CAAA;AAAA,IAChD,WAAW,KAAA,CAAM,MAAA,MAAY,OAAA,CAAQ,IAAA,CAAK,OAAO,CAAA,EAAG;AAClD,MAAA,OAAA,CAAQ,KAAK,QAAQ,CAAA;AAAA,IACvB;AAAA,EACF;AACF;AAIA,SAAS,YAAY,OAAA,EAAyB;AAC5C,EAAA,IAAI,QAAA,GAAW,EAAA;AACf,EAAA,IAAI,CAAA,GAAI,CAAA;AACR,EAAA,OAAO,CAAA,GAAI,QAAQ,MAAA,EAAQ;AACzB,IAAA,MAAM,EAAA,GAAK,QAAQ,CAAC,CAAA;AACpB,IAAA,IAAI,OAAO,GAAA,IAAO,OAAA,CAAQ,CAAA,GAAI,CAAC,MAAM,GAAA,EAAK;AAExC,MAAA,QAAA,IAAY,IAAA;AACZ,MAAA,CAAA,IAAK,CAAA;AACL,MAAA,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,GAAA,EAAK,CAAA,EAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,OAAO,GAAA,EAAK;AAErB,MAAA,QAAA,IAAY,OAAA;AACZ,MAAA,CAAA,EAAA;AAAA,IACF,CAAA,MAAA,IAAW,OAAO,GAAA,EAAK;AACrB,MAAA,QAAA,IAAY,MAAA;AACZ,MAAA,CAAA,EAAA;AAAA,IAEF,CAAA,MAAA,IAAW,eAAA,CAAgB,QAAA,CAAS,EAAE,CAAA,EAAG;AACvC,MAAA,QAAA,IAAY,KAAK,EAAE,CAAA,CAAA;AACnB,MAAA,CAAA,EAAA;AAAA,IACF,CAAA,MAAO;AACL,MAAA,QAAA,IAAY,EAAA;AACZ,MAAA,CAAA,EAAA;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,CAAG,CAAA;AACnC;AC/FA,IAAM,mBAAA,GAAsB,GAAA;AASrB,SAAS,kBAAkB,IAAA,EAA4C;AAC5E,EAAA,MAAM,EAAE,WAAA,EAAa,GAAA,GAAM,mBAAA,EAAoB,GAAI,IAAA;AAEnD,EAAA,OAAOV,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,CAAA,+LAAA,EAGM,MAAA,CAAO,GAAG,CAAC,CAAA,2DAAA,CAAA;AAAA,IACnB,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,oDAAoD;AAAA,KACtF,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,MAAMS,SAAAA,GAAW,IAAA,KAAS,EAAA,IAAM,IAAA,KAAS,MAAM,GAAA,GAAM,IAAA;AACrD,MAAA,IAAIA,SAAAA,KAAa,GAAA,IAAO,eAAA,CAAgBA,SAAQ,CAAA,EAAG;AACjD,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,QAAA,GAAW,kBAAA,CAAmBA,SAAAA,EAAU,WAAA,EAAa,IAAI,CAAA;AAC/D,MAAA,IAAI,OAAA,IAAW,QAAA,EAAU,OAAO,QAAA,CAAS,KAAA;AACzC,MAAA,MAAM,UAAA,GAAa,MAAM,WAAA,CAAY,QAAA,CAAS,cAAc,IAAI,CAAA;AAChE,MAAA,IAAI,OAAA,IAAW,UAAA,EAAY,OAAO,UAAA,CAAW,KAAA;AAC7C,MAAA,OAAO,aAAA,CAAc,UAAA,CAAW,OAAA,EAAS,GAAG,CAAA;AAAA,IAC9C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,kBAAA,CACPA,SAAAA,EACA,WAAA,EACA,YAAA,EAC8C;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,eAAeA,SAAAA,KAAa,GAAA,GAAM,WAAA,GAAc,YAAA,CAAa,aAAaA,SAAQ,CAAA;AACxF,IAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAC/C,IAAA,OAAO,EAAE,YAAA,EAAa;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,CAAA,EAAE;AAAA,IAC7F;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CACb,cACA,YAAA,EACoD;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAMC,gBAAAA,CAAQ,cAAc,EAAE,aAAA,EAAe,MAAM,CAAA;AACnE,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,IAAI,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,SAAS,SAAA,EAAW;AAC/C,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,IAAA,EAAM,YAAA,EAAc,CAAA,EAAE;AAAA,IACxF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,SAAS,aAAA,CAAc,SAAmB,GAAA,EAAqB;AAC7D,EAAA,MAAM,aAAa,OAAA,CAAQ,MAAA;AAC3B,EAAA,MAAM,YAAY,UAAA,GAAa,GAAA;AAC/B,EAAA,MAAM,OAAA,GAAU,QAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChD,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,IAAA,EAAM,CAAA,CAAE,WAAA,EAAY,GAAK,WAAA,GAAyB;AAAA,GACpD,CAAE,CAAA;AACF,EAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,OAAA,EAAS,SAAA,EAAW,YAAY,CAAA;AACpE;;;AClGA,IAAM,iBAAA,GAAoB;AAAA,EACxB,2BAAA;AAAA,EACA,oEAAA;AAAA,EACA,4DAAA;AAAA,EACA,+DAAA;AAAA,EACA;AACF,CAAA,CAAE,KAAK,IAAI,CAAA;AAEX,IAAM,mBAAA,GAAsB,uDAAA;AAWrB,SAAS,kBAAA,GAAmC;AACjD,EAAA,IAAI,IAAA,GAAa,QAAA;AAEjB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,uKAAA;AAAA,IAGF,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,QAAA;AAAA,UACN,IAAA,EAAM,CAAC,OAAA,EAAS,MAAA,EAAQ,QAAQ,CAAA;AAAA,UAChC,WAAA,EAAa;AAAA;AACf,OACF;AAAA,MACA,QAAA,EAAU,CAAC,QAAQ;AAAA,KACrB;AAAA,IACA,OAAA,EAAS,CAAC,KAAA,KAAsC;AAC9C,MAAA,QAAQ,MAAM,MAAA;AAAQ,QACpB,KAAK,OAAA;AACH,UAAA,IAAA,GAAO,MAAA;AACP,UAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,IAAA,EAAM,OAAA,EAAS,mBAAmB,CAAA;AAAA,QACtE,KAAK,MAAA;AACH,UAAA,IAAA,GAAO,QAAA;AACP,UAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,IAAA,EAAM,OAAA,EAAS,qBAAqB,CAAA;AAAA,QACxE,KAAK,QAAA;AACH,UAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,MAAM,OAAA,EAAS,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAA,EAAI,CAAA;AAAA,QAC5E;AACE,UAAA,OAAO,KAAK,SAAA,CAAU;AAAA,YACpB,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA,EAAO,gBAAA;AAAA,YACP,OAAA,EAAS,CAAA,gBAAA,EAAmB,KAAA,CAAM,MAAM,CAAA,8BAAA;AAAA,WACzC,CAAA;AAAA;AACL,IACF,CAAA;AAAA,IACA,aAAa,MAAM;AAAA,GACrB;AACF;;;ACjDO,SAAS,mBAAmB,IAAA,EAAyC;AAC1E,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,GAAA;AAEpC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,oLAAA;AAAA,IAGF,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,+BAAA;AAAgC,OAC3E;AAAA,MACA,QAAA,EAAU,CAAC,UAAU;AAAA,KACvB;AAAA,IACA,OAAA,EAAS,OAAO,KAAA,KAAiD;AAC/D,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AAChD,QAAA,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,MAAM,SAAS,CAAC,GAAG,SAAS,CAAA;AAAA,MAC1D,CAAC,CAAA;AAED,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG,OAAO,CAAC,CAAA;AACzE,QAAA,OAAO,KAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,QAAQ,CAAA;AAAA,MAC5C,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,OAAA,KAAY,SAAA,EAAW;AACrD,UAAA,OAAO,KAAK,SAAA,CAAU;AAAA,YACpB,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA,EAAO,SAAA;AAAA,YACP,OAAA,EAAS;AAAA,WACV,CAAA;AAAA,QACH;AACA,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF;AAAA,GACF;AACF;AClBA,IAAM,aAAA,GAAgB,IAAI,IAAA,GAAO,IAAA;AAGjC,IAAM,qBAAqB,CAAA,GAAI,IAAA;AAOxB,SAAS,mBAAmB,IAAA,EAA6C;AAC9E,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAOX,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,+RAAA;AAAA,IAKF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6BAA6B;AAAA,KAC/D,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,IAAI,eAAA,CAAgB,IAAI,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,IAAA,EAAM,WAAW,CAAA;AAClD,MAAA,IAAI,OAAA,IAAW,QAAA,EAAU,OAAO,QAAA,CAAS,KAAA;AACzC,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAA,CAAS,cAAc,IAAI,CAAA;AAC/D,MAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAA,CAAY,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,MAC9C,CAAA,SAAE;AACA,QAAA,MAAM,MAAA,CAAO,OAAO,KAAA,EAAM;AAAA,MAC5B;AAAA,IACF;AAAA,GACD,CAAA;AACH;AAEA,SAAS,eAAA,CACP,MACA,WAAA,EAC8C;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,WAAA,EAAa,IAAI,CAAA;AACnD,IAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAC/C,IAAA,OAAO,EAAE,YAAA,EAAa;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,CAAA,EAAE;AAAA,IAC/E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,cAAA,CACb,cACA,IAAA,EACqD;AACrD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAMW,aAAA,CAAK,YAAA,EAAc,GAAG,CAAA;AAC3C,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EAClB,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACvB,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,IAAA,EAAM,CAAA,EAAE;AAAA,IAC1E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CAAY,QAAoB,IAAA,EAA+B;AAC5E,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,IAAA,EAAK;AAC/B,EAAA,IAAI,IAAA,CAAK,OAAO,aAAA,EAAe;AAC7B,IAAA,OAAO,KAAK,SAAA,CAAU;AAAA,MACpB,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO,WAAA;AAAA,MACP,IAAA;AAAA,MACA,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,IAAI,MAAM,aAAA,CAAc,MAAA,EAAQ,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG;AAClD,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,aAAA,EAAe,IAAA,EAAM,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,EAClF;AACA,EAAA,MAAM,UAAU,MAAM,MAAA,CAAO,SAAS,EAAE,QAAA,EAAU,SAAS,CAAA;AAC3D,EAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAC9D;AAEA,eAAe,aAAA,CAAc,QAAoB,IAAA,EAAgC;AAC/E,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,IAAI,CAAA;AAClD,EAAA,IAAI,QAAA,IAAY,GAAG,OAAO,KAAA;AAC1B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AACnC,EAAA,MAAM,EAAE,WAAU,GAAI,MAAM,OAAO,IAAA,CAAK,KAAA,EAAO,CAAA,EAAG,QAAA,EAAU,CAAC,CAAA;AAC7D,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,EAAW,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,EAC7B;AACA,EAAA,OAAO,KAAA;AACT;AC1GA,IAAMC,mBAAAA,GAAqB,IAAA;AAC3B,IAAMC,yBAAAA,GAA2B,KAAK,IAAA,GAAO,IAAA;AAetC,SAAS,oBAAoB,IAAA,EAA8C;AAChF,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,SAAA,GAAYD,mBAAAA;AAAA,IACZ,cAAA,GAAiBC;AAAA,GACnB,GAAI,IAAA;AAEJ,EAAA,OAAOd,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,qOAAA;AAAA,IAIF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,MAAMA,KAAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,0DAA0D;AAAA,KACvE,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,MAAM,UAAA,GAAa,mBAAA,CAAoB,IAAA,EAAM,WAAW,CAAA;AACxD,MAAA,IAAI,UAAA,KAAe,MAAM,OAAO,UAAA;AAEhC,MAAA,MAAM,IAAA,GAAO,CAAC,cAAA,EAAgB,QAAA,EAAU,OAAO,iBAAiB,CAAA;AAChE,MAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,EAAA,EAAI,IAAA,CAAK,KAAK,IAAI,CAAA;AAErD,MAAA,MAAM,SAAS,MAAM,UAAA,CAAW,aAAa,KAAA,EAAO,IAAA,EAAM,WAAW,cAAc,CAAA;AACnF,MAAA,OAAO,kBAAA,CAAmB,QAAQ,SAAS,CAAA;AAAA,IAC7C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,mBAAA,CAAoB,MAA0B,WAAA,EAAoC;AACzF,EAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,EAAA,IAAM,eAAA,CAAgB,IAAI,CAAA,EAAG;AAC9D,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,cAAA,CAAe,MAAM,WAAW,CAAA;AACzC;AAEA,SAAS,kBAAA,CAAmB,QAAuB,SAAA,EAA2B;AAC5E,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,SAAA,EAAW,WAAW,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,aAAA,EAAe;AACjC,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,WAAA,EAAa,MAAA,EAAQ,MAAA,CAAO,OAAA,EAAS,CAAA;AAAA,EACjF;AACA,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,MAAA,CAAO,MAAM,CAAA;AACjD,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,OAAO,KAAK,SAAA,CAAU;AAAA,MACpB,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO,oBAAA;AAAA,MACP,aAAA,EAAe,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,GAAG,GAAG;AAAA,KAC1C,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,SAAS,CAAA;AAC7C;AAUO,SAAS,oBAAoB,MAAA,EAAyB;AAC3D,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA;AAClC,EAAA,KAAA,IAAS,IAAI,KAAA,CAAM,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,CAAC,CAAA,CAAG,IAAA,EAAK;AAC5B,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACvB,IAAA,IAAI,KAAK,CAAC,CAAA,KAAM,OAAO,IAAA,CAAK,CAAC,MAAM,GAAA,EAAK;AACxC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,YAAA,CAAa,MAAA,EAAkB,KAAA,EAAe,OAAA,EAAiB,GAAA,EAAqB;AAC3F,EAAA,IAAI,OAAA,IAAW,KAAK,OAAO,OAAA;AAC3B,EAAA,MAAM,YAAY,GAAA,GAAM,OAAA;AACxB,EAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,IAAA,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AACxC,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AACjB,EAAA,OAAO,UAAU,KAAA,CAAM,MAAA;AACzB;AAOA,SAAS,UAAA,CACP,GAAA,EACA,OAAA,EACA,IAAA,EACA,WACA,cAAA,EACwB;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACR,QAAAA,KAAY;AAC9B,IAAA,MAAM,KAAA,GAAQgB,mBAAAA,CAAM,OAAA,EAAS,IAAA,EAAM;AAAA,MACjC,GAAA;AAAA,MACA,QAAA,EAAU,IAAA;AAAA,MACV,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,IAAI,WAAA,GAAc,CAAA;AAElB,IAAA,MAAM,IAAA,GAAO,cAAA;AAAA,MACX,KAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAU,CAAA;AAAA,MACzBhB;AAAA,KACF;AAEA,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,WAAA,GAAc,YAAA,CAAa,YAAA,EAAc,KAAA,EAAO,WAAA,EAAa,cAAc,CAAA;AAAA,IAC7E,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,IACzB,CAAC,CAAA;AAED,IAAA,mBAAA;AAAA,MACE,KAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,MAAU;AAAA,QACT,IAAA,EAAM,IAAA;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,UAAU,IAAA,IAAQ;AAAA,OACpB,CAAA;AAAA,MACA,CAAC,GAAA,MAAS,EAAE,MAAM,aAAA,EAAe,OAAA,EAAS,IAAI,OAAA,EAAQ,CAAA;AAAA,MACtDA;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AC1JA,IAAM,mBAAA,GAAsB,GAAA;AAC5B,IAAM,wBAAwB,IAAA,GAAO,IAAA;AACrC,IAAMsB,sBAAqB,CAAA,GAAI,IAAA;AAC/B,IAAM,WAAA,GAAc,GAAA;AAgBb,SAAS,qBAAqB,IAAA,EAA+C;AAClF,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,UAAA,GAAa,mBAAA;AAAA,IACb,WAAA,GAAc;AAAA,GAChB,GAAI,IAAA;AAEJ,EAAA,OAAOf,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EACE,CAAA,wJAAA,EAEuB,MAAA,CAAO,UAAU,CAAC,CAAA,sFAAA,CAAA;AAAA,IAE3C,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,KAAA,EAAOA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6CAA6C,CAAA;AAAA,MAC/E,MAAMA,KAAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,0DAA0D;AAAA,KACvE,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,KAAA,EAAO,MAAK,KAAM;AAClC,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,WAAW,CAAA;AAClD,MAAA,IAAI,OAAA,IAAW,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AACnC,MAAA,MAAM,KAAA,GAAqB;AAAA,QACzB,SAAS,EAAC;AAAA,QACV,YAAA,EAAc,CAAA;AAAA,QACd,SAAA,EAAW,KAAA;AAAA,QACX,KAAA;AAAA,QACA,UAAA;AAAA,QACA,WAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,MAAM,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,KAAK,CAAA;AAChC,MAAA,OAAO,KAAK,SAAA,CAAU;AAAA,QACpB,EAAA,EAAI,IAAA;AAAA,QACJ,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,cAAc,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH;AAYA,SAAS,kBAAA,CACP,MACA,WAAA,EAC0C;AAC1C,EAAA,MAAM,WAAW,IAAA,KAAS,MAAA,IAAa,SAAS,EAAA,IAAM,IAAA,KAAS,MAAM,GAAA,GAAM,IAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,WAAW,QAAA,KAAa,GAAA,GAAM,WAAA,GAAc,YAAA,CAAa,aAAa,QAAQ,CAAA;AACpF,IAAA,qBAAA,CAAsB,UAAU,WAAW,CAAA;AAC3C,IAAA,OAAO,EAAE,QAAA,EAAS;AAAA,EACpB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,CAAA,EAAE;AAAA,IAC/E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CAAY,KAAA,EAAe,MAAA,EAAgB,KAAA,EAAmC;AAC3F,EAAA,MAAM,QAAA,GAAWO,SAAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACxC,EAAA,MAAM,QAAA,GAAWQ,aAAA,CAAa,KAAA,CAAM,WAAA,EAAa,QAAQ,CAAA;AACzD,EAAA,IAAI,eAAA,CAAgB,QAAQ,CAAA,EAAG;AAC/B,EAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,IAAA,MAAM,IAAA,CAAK,UAAU,KAAK,CAAA;AAC1B,IAAA;AAAA,EACF;AACA,EAAA,IAAI,MAAM,MAAA,EAAO,QAAS,QAAA,CAAS,QAAA,EAAU,UAAU,KAAK,CAAA;AAC9D;AAEA,eAAe,IAAA,CAAK,QAAgB,KAAA,EAAmC;AACrE,EAAA,IAAI,MAAM,SAAA,EAAW;AACrB,EAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,MAAM,CAAA;AAC7C,EAAA,IAAI,YAAY,IAAA,EAAM;AACtB,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,MAAM,SAAA,EAAW;AACrB,IAAA,MAAM,WAAA,CAAY,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA;AAAA,EACxC;AACF;AAEA,eAAe,iBAAiB,MAAA,EAA0C;AACxE,EAAA,IAAI;AACF,IAAA,OAAO,MAAML,gBAAAA,CAAQ,MAAA,EAAQ,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB,OAAA,EAAyC;AACtE,EAAA,IAAI;AACF,IAAA,OAAO,MAAMT,kBAAS,OAAO,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAA,EAAyB;AAC/C,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,QAAQa,mBAAkB,CAAA;AAC3D,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,KAAK,CAAA,EAAG;AACpC,IAAA,IAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,EAC9B;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CAAY,KAAA,EAAoB,IAAA,EAAc,IAAA,EAAc,QAAA,EAA2B;AAC9F,EAAA,KAAA,CAAM,YAAA,IAAgB,CAAA;AACtB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,GAAS,KAAA,CAAM,UAAA,EAAY;AAC3C,IAAA,KAAA,CAAM,QAAQ,IAAA,CAAK;AAAA,MACjB,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,QAAA,CAAS,MAAA,GAAS,WAAA,GAAc,CAAA,EAAG,SAAS,KAAA,CAAM,CAAA,EAAG,WAAW,CAAC,CAAA,MAAA,CAAA,GAAM;AAAA,KACjF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,EAAA,OAAO,KAAA;AACT;AAEA,eAAe,QAAA,CAAS,OAAA,EAAiB,OAAA,EAAiB,KAAA,EAAmC;AAC3F,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAO,CAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,GAAS,MAAM,WAAA,EAAa;AAC1D,EAAA,IAAI,cAAA,CAAe,MAAM,CAAA,EAAG;AAC5B,EAAA,MAAM,QAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,CAAE,MAAM,IAAI,CAAA;AACjD,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAA,EAAG;AACxC,IAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AACjC,IAAA,IAAI,CAAC,WAAA,CAAY,KAAA,EAAO,SAAS,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,EAAG;AAAA,EACjD;AACF;ACpLA,IAAMF,mBAAAA,GAAqB,GAAA;AAC3B,IAAM,cAAA,GAAiB,GAAA;AACvB,IAAM,gBAAA,GAAmB,IAAI,IAAA,GAAO,IAAA;AAS7B,SAAS,gBAAgB,IAAA,EAA0C;AACxE,EAAA,MAAM,EAAE,WAAA,EAAa,gBAAA,GAAmBA,mBAAAA,EAAmB,GAAI,IAAA;AAE/D,EAAA,OAAOb,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,wNAAA;AAAA,IAIF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,OAAA,EAASA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,2BAA2B,CAAA;AAAA,MAC/D,UAAA,EAAYA,KAAAA,CACT,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,QAAA,EAAS,CACT,QAAA,EAAS,CACT,QAAA,CAAS,sDAAsD;AAAA,KACnE,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,YAAW,KAAM;AAC1C,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,UAAA,IAAc,kBAAkB,cAAc,CAAA;AACzE,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,WAAA,EAAa,SAAS,SAAS,CAAA;AAC7D,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,GACD,CAAA;AACH;AAOA,SAAS,QAAA,CAAS,GAAA,EAAa,OAAA,EAAiB,SAAA,EAAoC;AAClF,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACR,QAAAA,KAAY;AAC9B,IAAA,MAAM,QAAQgB,mBAAAA,CAAM,SAAA,EAAW,CAAC,IAAA,EAAM,OAAO,CAAA,EAAG;AAAA,MAC9C,GAAA;AAAA,MACA,QAAA,EAAU,IAAA;AAAA,MACV,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,KACjC,CAAA;AAED,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,IAAI,WAAA,GAAc,CAAA;AAGlB,IAAA,MAAM,IAAA,GAAO,cAAA;AAAA,MACX,KAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAU,CAAA;AAAA,MACzB,CAAC,MAAA,KAAWhB,QAAAA,CAAQ,YAAA,CAAa,MAAA,EAAQ,SAAS,CAAC;AAAA,KACrD;AAEA,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,IAAI,eAAe,gBAAA,EAAkB;AAEnC,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAY,gBAAA,GAAmB,WAAA;AACrC,MAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,QAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AAC9C,QAAA,WAAA,GAAc,gBAAA;AACD,MACf,CAAA,MAAO;AACL,QAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AACvB,QAAA,WAAA,IAAe,KAAA,CAAM,MAAA;AAAA,MACvB;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,IAAI,eAAe,gBAAA,EAAkB;AACrC,MAAA,MAAM,YAAY,gBAAA,GAAmB,WAAA;AACrC,MAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,QAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AAC9C,QAAA,WAAA,GAAc,gBAAA;AAAA,MAChB,CAAA,MAAO;AACL,QAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AACvB,QAAA,WAAA,IAAe,KAAA,CAAM,MAAA;AAAA,MACvB;AAAA,IACF,CAAC,CAAA;AAED,IAAA,mBAAA;AAAA,MACE,KAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,MAAU;AAAA,QACT,IAAA,EAAM,IAAA;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,QAAA,EAAU;AAAA,OACZ,CAAA;AAAA,MACA,CAAC,GAAA,MAAS,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,IAAI,OAAA,EAAQ,CAAA;AAAA,MAChD,CAAC,MAAA,KAAWA,QAAAA,CAAQ,YAAA,CAAa,MAAA,EAAQ,SAAS,CAAC;AAAA,KACrD;AAAA,EACF,CAAC,CAAA;AACH;AAEA,SAAS,YAAA,CAAa,QAAqB,SAAA,EAA2B;AACpE,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,SAAA,EAAW,UAAA,EAAY,SAAA,EAAW,CAAA;AAAA,EAC9E;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AAC3B,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,aAAA,EAAe,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,KAAK,SAAA,CAAU;AAAA,IACpB,EAAA,EAAI,IAAA;AAAA,IACJ,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,WAAW,MAAA,CAAO;AAAA,GACnB,CAAA;AACH;;;ACrGA,SAAS,GAAG,IAAA,EAAuC;AACjD,EAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,GAAG,MAAM,CAAA;AAC7C;AAEA,SAAS,KAAK,IAAA,EAAuC;AACnD,EAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,KAAA,EAAO,GAAG,MAAM,CAAA;AAC9C;AAEA,SAAS,UAAU,KAAA,EAAiC;AAClD,EAAA,IAAI,EAAE,IAAA,IAAQ,KAAA,CAAA,IAAU,CAAC,KAAA,CAAM,IAAI,OAAO,IAAA;AAC1C,EAAA,OAAO,KAAA,CAAM,EAAA;AACf;AAEO,SAAS,kBAAA,GAAmC;AACjD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,SAAS,KAAA,GAAgB;AACvB,IAAA,OAAO,QAAQ,MAAA,EAAQ,CAAA,CAAA;AAAA,EACzB;AAEA,EAAA,SAAS,SAAS,EAAA,EAAkC;AAClD,IAAA,OAAO,MAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,EAAE,CAAA;AAAA,EACtC;AAEA,EAAA,SAAS,UAAA,GAAqB;AAC5B,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,2CAAA;AAC/B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AAChC,MAAA,MAAM,IAAA,GAAO,KAAK,MAAA,KAAW,MAAA,GAAS,QAAQ,IAAA,CAAK,MAAA,KAAW,gBAAgB,KAAA,GAAQ,KAAA;AACtF,MAAA,OAAO,GAAG,IAAI,CAAA,CAAA,EAAI,KAAK,EAAE,CAAA,EAAA,EAAK,KAAK,KAAK,CAAA,CAAA;AAAA,IAC1C,CAAC,CAAA;AACD,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,SAAS,CAAA,CAAE,MAAA;AAC5D,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,aAAa,CAAA,CAAE,MAAA;AAC/D,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,MAAM,CAAA,CAAE,MAAA;AACtD,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,EAAK,IAAI,IAAI,KAAA,CAAM,MAAM,WAAW,MAAM,CAAA,eAAA,EAAkB,OAAO,CAAA,QAAA,CAAU,CAAA;AACxF,IAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,EACxB;AAEA,EAAA,SAAS,UAAU,KAAA,EAA0B;AAC3C,IAAA,IAAI,EAAE,OAAA,IAAW,KAAA,CAAA,IAAU,CAAC,KAAA,CAAM,KAAA,EAAO,OAAO,IAAA,CAAK,EAAE,KAAA,EAAO,eAAA,EAAiB,CAAA;AAC/E,IAAA,MAAM,IAAA,GAAiB;AAAA,MACrB,IAAI,KAAA,EAAM;AAAA,MACV,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,KAAA,CAAM,KAAK,IAAI,CAAA;AACf,IAAA,OAAO,EAAA,CAAG,EAAE,EAAA,EAAI,IAAA,CAAK,EAAA,EAAI,OAAA,EAAS,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,aAAA,EAAe,UAAA,IAAc,CAAA;AAAA,EACzF;AAEA,EAAA,SAAS,eAAA,CAAgB,OAAkB,MAAA,EAAwC;AACjF,IAAA,MAAM,EAAA,GAAK,UAAU,KAAK,CAAA;AAC1B,IAAA,IAAI,CAAC,EAAA,EAAI,OAAO,KAAK,EAAE,KAAA,EAAO,cAAc,CAAA;AAC5C,IAAA,MAAM,IAAA,GAAO,SAAS,EAAE,CAAA;AACxB,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA,CAAK,EAAE,KAAA,EAAO,WAAA,EAAa,IAAI,CAAA;AACjD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAI,MAAA,KAAW,MAAA,EAAQ,IAAA,CAAK,WAAA,GAAc,KAAK,GAAA,EAAI;AACnD,IAAA,MAAM,IAAA,GAAO,MAAA,KAAW,MAAA,GAAS,WAAA,GAAc,SAAA;AAC/C,IAAA,OAAO,EAAA,CAAG,EAAE,OAAA,EAAS,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,aAAA,EAAe,UAAA,EAAW,EAAG,CAAA;AAAA,EAC9E;AAEA,EAAA,SAAS,aAAa,KAAA,EAA0B;AAC9C,IAAA,MAAM,EAAA,GAAK,UAAU,KAAK,CAAA;AAC1B,IAAA,IAAI,CAAC,EAAA,EAAI,OAAO,KAAK,EAAE,KAAA,EAAO,cAAc,CAAA;AAC5C,IAAA,MAAM,MAAM,KAAA,CAAM,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,EAAE,CAAA;AAC9C,IAAA,IAAI,GAAA,KAAQ,IAAI,OAAO,IAAA,CAAK,EAAE,KAAA,EAAO,WAAA,EAAa,IAAI,CAAA;AACtD,IAAA,MAAM,UAAU,KAAA,CAAM,MAAA,CAAO,GAAA,EAAK,CAAC,EAAE,CAAC,CAAA;AACtC,IAAA,OAAO,EAAA,CAAG,EAAE,OAAA,EAAS,CAAA,SAAA,EAAY,OAAA,CAAQ,KAAK,CAAA,CAAA,EAAI,aAAA,EAAe,UAAA,EAAW,EAAG,CAAA;AAAA,EACjF;AAEA,EAAA,SAAS,oBAAA,GAA+B;AACtC,IAAA,MAAM,SAAS,KAAA,CAAM,MAAA;AACrB,IAAA,MAAM,OAAO,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,MAAM,CAAA;AACpD,IAAA,KAAA,CAAM,MAAA,GAAS,CAAA;AACf,IAAA,KAAA,CAAM,IAAA,CAAK,GAAG,IAAI,CAAA;AAClB,IAAA,OAAO,EAAA,CAAG;AAAA,MACR,OAAA,EAAS,CAAA,QAAA,EAAW,MAAA,GAAS,KAAA,CAAM,MAAM,CAAA,gBAAA,CAAA;AAAA,MACzC,eAAe,UAAA;AAAW,KAC3B,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,OAAA,GAAwD;AAAA,IAC5D,GAAA,EAAK,SAAA;AAAA,IACL,WAAA,EAAa,CAAC,KAAA,KAAU,eAAA,CAAgB,OAAO,aAAa,CAAA;AAAA,IAC5D,QAAA,EAAU,CAAC,KAAA,KAAU,eAAA,CAAgB,OAAO,MAAM,CAAA;AAAA,IAClD,MAAA,EAAQ,YAAA;AAAA,IACR,MAAM,MAAM,EAAA,CAAG,EAAE,aAAA,EAAe,UAAA,IAAc,CAAA;AAAA,IAC9C,eAAA,EAAiB;AAAA,GACnB;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,8PAAA;AAAA,IAKF,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,QAAA;AAAA,UACN,MAAM,CAAC,KAAA,EAAO,YAAY,aAAA,EAAe,QAAA,EAAU,QAAQ,iBAAiB,CAAA;AAAA,UAC5E,WAAA,EAAa;AAAA,SACf;AAAA,QACA,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,QAAA;AAAA,UACN,WAAA,EAAa;AAAA,SACf;AAAA,QACA,EAAA,EAAI;AAAA,UACF,IAAA,EAAM,QAAA;AAAA,UACN,WAAA,EAAa;AAAA;AACf,OACF;AAAA,MACA,QAAA,EAAU,CAAC,QAAQ;AAAA,KACrB;AAAA,IACA,OAAA,EAAS,CAAC,KAAA,KAA6B;AACrC,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA;AACnC,MAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,KAAK,EAAE,KAAA,EAAO,kBAAkB,CAAA;AACpD,MAAA,OAAO,OAAO,KAAK,CAAA;AAAA,IACrB,CAAA;AAAA,IACA,QAAA,EAAU,MAAM,CAAC,GAAG,KAAK;AAAA,GAC3B;AACF;ACrIO,SAAS,cAAA,CAAe,QAAgB,IAAA,EAA4C;AACzF,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,IAAY,GAAA;AACnC,EAAA,MAAM,SAAA,GAAY,MAAM,SAAA,IAAa,uBAAA;AAGrC,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,CAAW,MAAA,EAAQ,OAAO,CAAA;AACpD,EAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,IAAA,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAM;AAAA,EAC7C;AAGA,EAAAwB,YAAA,CAAU,SAAA,EAAW,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACxC,EAAA,MAAM,QAAA,GAAW,CAAA,SAAA,EAAY,IAAA,CAAK,GAAA,EAAK,CAAA,IAAA,CAAA;AACvC,EAAA,MAAM,YAAA,GAAeT,SAAAA,CAAK,SAAA,EAAW,QAAQ,CAAA;AAC7C,EAAAU,gBAAA,CAAc,YAAA,EAAc,QAAQ,OAAO,CAAA;AAG3C,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,OAAO,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,QAAQ,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA;AACrF,EAAA,MAAM,OAAA,GAAU;;AAAA,gCAAA,EAAuC,YAAY,CAAA,CAAA,CAAA;AAEnE,EAAA,OAAO;AAAA,IACL,SAAS,SAAA,GAAY,OAAA;AAAA,IACrB,SAAA,EAAW,IAAA;AAAA,IACX;AAAA,GACF;AACF;ACtCA,IAAML,mBAAAA,GAAqB,GAAA;AAC3B,IAAM,cAAA,GAAiB,IAAI,IAAA,GAAO,IAAA;AAO3B,SAAS,mBAAmB,IAAA,EAA8C;AAC/E,EAAA,MAAM,gBAAA,GAAmB,MAAM,gBAAA,IAAoBA,mBAAAA;AAEnD,EAAA,OAAOb,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,gKAAA;AAAA,IAGF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,GAAA,EAAKA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,oCAAoC,CAAA;AAAA,MACpE,UAAA,EAAYA,KAAAA,CACT,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,QAAA,EAAS,CACT,QAAA,EAAS,CACT,QAAA,CAAS,0CAA0C;AAAA,KACvD,CAAA;AAAA;AAAA,IAED,OAAA,EAAS,OAAO,EAAE,GAAA,EAAK,YAAW,KAAM;AAEtC,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,MACtB,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,aAAA,EAAe,KAAK,CAAA;AAAA,MAChE;AAEA,MAAA,IAAI,MAAA,CAAO,QAAA,KAAa,OAAA,IAAW,MAAA,CAAO,aAAa,QAAA,EAAU;AAC/D,QAAA,OAAO,KAAK,SAAA,CAAU;AAAA,UACpB,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,aAAA;AAAA,UACP,GAAA;AAAA,UACA,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AAEA,MAAA,MAAM,YAAY,UAAA,IAAc,gBAAA;AAChC,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAE5D,MAAA,IAAI;AACF,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAQ,CAAA;AAC/D,QAAA,YAAA,CAAa,KAAK,CAAA;AAGlB,QAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAC3D,QAAA,IAAI,aAAA,IAAiB,MAAA,CAAO,aAAa,CAAA,GAAI,cAAA,EAAgB;AAC3D,UAAA,OAAO,KAAK,SAAA,CAAU;AAAA,YACpB,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA,EAAO,WAAA;AAAA,YACP,GAAA;AAAA,YACA,IAAA,EAAM,OAAO,aAAa,CAAA;AAAA,YAC1B,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,WAAA,EAAY;AAC1C,QAAA,IAAI,MAAA,CAAO,aAAa,cAAA,EAAgB;AACtC,UAAA,OAAO,KAAK,SAAA,CAAU;AAAA,YACpB,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA,EAAO,WAAA;AAAA,YACP,GAAA;AAAA,YACA,MAAM,MAAA,CAAO,UAAA;AAAA,YACb,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAEA,QAAA,MAAM,UAAU,IAAI,WAAA,CAAY,OAAO,CAAA,CAAE,OAAO,MAAM,CAAA;AACtD,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,KAAA,CAAA;AAE5D,QAAA,OAAO,KAAK,SAAA,CAAU;AAAA,UACpB,EAAA,EAAI,IAAA;AAAA,UACJ,OAAA;AAAA,UACA,aAAa,QAAA,CAAS,MAAA;AAAA,UACtB,YAAA,EAAc;AAAA,SACf,CAAA;AAAA,MACH,SAAS,GAAA,EAAK;AACZ,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,MAAM,CAAA,GAAI,GAAA;AACV,QAAA,IAAI,CAAA,CAAE,SAAS,YAAA,EAAc;AAC3B,UAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,SAAA,EAAW,GAAA,EAAK,UAAA,EAAY,SAAA,EAAW,CAAA;AAAA,QACnF;AACA,QAAA,OAAO,KAAK,SAAA,CAAU;AAAA,UACpB,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,cAAA;AAAA,UACP,GAAA;AAAA,UACA,OAAA,EAAS,EAAE,OAAA,IAAW;AAAA,SACvB,CAAA;AAAA,MACH;AAAA,IACF;AAAA,GACD,CAAA;AACH;ACtFO,SAAS,oBAAoB,IAAA,EAA8C;AAChF,EAAA,MAAM,EAAE,MAAA,EAAQ,iBAAA,GAAoB,CAAA,EAAE,GAAI,IAAA;AAE1C,EAAA,OAAOD,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,uLAAA;AAAA,IAGF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,KAAA,EAAOA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,eAAe,CAAA;AAAA,MACjD,WAAA,EAAaA,KAAAA,CACV,MAAA,EAAO,CACP,KAAI,CACJ,QAAA,EAAS,CACT,GAAA,CAAI,EAAE,CAAA,CACN,QAAA,EAAS,CACT,SAAS,gDAAgD;AAAA,KAC7D,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,KAAA,EAAO,aAAY,KAAM;AACzC,MAAA,MAAM,aAAa,WAAA,IAAe,iBAAA;AAElC,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,KAAA,EAAO,UAAU,CAAA;AAC9C,QAAA,OAAO,KAAK,SAAA,CAAU;AAAA,UACpB,EAAA,EAAI,IAAA;AAAA,UACJ,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA;AAAA,UACpC,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,QAAQ,UAAU;AAAA,SAC3C,CAAA;AAAA,MACH,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,CAAA,GAAI,GAAA;AACV,QAAA,OAAO,KAAK,SAAA,CAAU;AAAA,UACpB,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,eAAA;AAAA,UACP,OAAA,EAAS,EAAE,OAAA,IAAW;AAAA,SACvB,CAAA;AAAA,MACH;AAAA,IACF;AAAA,GACD,CAAA;AACH;AC1CA,IAAMc,sBAAqB,CAAA,GAAI,IAAA;AAOxB,SAAS,oBAAoB,IAAA,EAA8C;AAChF,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAOf,cAAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,wRAAA;AAAA,IAKF,WAAA,EAAaC,MAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6BAA6B,CAAA;AAAA,MAC9D,OAAA,EAASA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,yBAAyB;AAAA,KACvD,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,QAAEN,MAAA,EAAM,SAAQ,KAAM;AACpC,MAAA,IAAI,eAAA,CAAgBA,MAAI,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,QAAkBA,QAAM,CAAA;AAAA,MACpE;AAEA,MAAA,IAAI,YAAA;AACJ,MAAA,IAAI;AACF,QAAA,YAAA,GAAe,YAAA,CAAa,aAAaA,MAAI,CAAA;AAC7C,QAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAAA,MACjD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,UAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,QAAkBA,QAAM,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,GAAA;AAAA,MACR;AAGA,MAAA,IAAI,MAAM,YAAA,CAAa,YAAY,CAAA,EAAG;AACpC,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,aAAA,QAAeA,QAAM,CAAA;AAAA,MACjE;AAEA,MAAA,MAAMS,eAAML,YAAAA,CAAQ,YAAY,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACtD,MAAA,MAAMM,kBAAAA,CAAU,YAAA,EAAc,OAAA,EAAS,OAAO,CAAA;AAC9C,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,OAAA,EAAS,OAAO,CAAA;AAEhD,MAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,QAAMV,MAAA,EAAM,OAAO,CAAA;AAAA,IACjD;AAAA,GACD,CAAA;AACH;AAEA,eAAe,aAAa,YAAA,EAAwC;AAClE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,MAAMiB,aAAAA,CAAK,YAAA,EAAc,GAAG,CAAA;AAAA,EACvC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,IAAA,EAAK;AAC/B,IAAA,MAAM,WAAW,IAAA,CAAK,GAAA,CAAIG,qBAAoB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAC/D,IAAA,IAAI,QAAA,IAAY,GAAG,OAAO,KAAA;AAC1B,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AACnC,IAAA,MAAM,EAAE,WAAU,GAAI,MAAM,OAAO,IAAA,CAAK,KAAA,EAAO,CAAA,EAAG,QAAA,EAAU,CAAC,CAAA;AAC7D,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,EAAW,KAAK,CAAA,EAAG;AACrC,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,IAC7B;AACA,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,MAAM,OAAO,KAAA,EAAM;AAAA,EACrB;AACF","file":"index.cjs","sourcesContent":["/**\n * Canonical path-guard module (ADRs D79-D81).\n *\n * Three primitives + one typed error:\n *   - `safePathJoin(base, ...parts)` — resolve THEN prefix-check (ADR D80).\n *   - `assertNoSymlinkEscape(path, base)` — `realpathSync` resolves entire\n *     symlink chain (EC-1 fix; Hermes v0.2 #386, #61).\n *   - `sanitizeIdentifier(input, { maxLen })` — strict grammar\n *     `^[a-z0-9][a-z0-9-_]*$` (ADR D81; case-insensitive on input,\n *     lowercase on output).\n *   - `PathTraversalError` — extends ConfigurationError with code\n *     `path_traversal` (ADR D65: no new hierarchy).\n *\n * Wire at all sites where user input becomes a path. CI lint gate\n * `tests/lint/no-unguarded-path-input.test.ts` prevents regression\n * (ADR D85).\n *\n * @internal\n */\n\nimport { lstatSync, readlinkSync, realpathSync, type Stats } from \"node:fs\";\nimport { dirname, resolve, sep } from \"node:path\";\n\nimport { ConfigurationError } from \"@theokit/sdk\";\n\n/**\n * Thrown when a path operation would escape its allowed base directory.\n * Extends `ConfigurationError` (no new error hierarchy per ADR D65).\n *\n * @internal\n */\nexport class PathTraversalError extends ConfigurationError {\n  override readonly name: string = \"PathTraversalError\";\n\n  constructor(input: string, resolvedPath: string) {\n    super(`Path traversal attempt: ${input} → ${resolvedPath}`, {\n      code: \"path_traversal\",\n    });\n  }\n}\n\n/**\n * Thrown when an agent tool is asked to read or write a sensitive path\n * that the blocklist forbids (`.env`, `.git/`, `node_modules/`, `.theo/`,\n * lock files). Distinct from `PathTraversalError` because the path is\n * lexically inside the project — it is just sensitive.\n *\n * Extends `ConfigurationError` (no new error hierarchy per ADR D65).\n *\n * @public\n */\nexport class ForbiddenPathError extends ConfigurationError {\n  override readonly name: string = \"ForbiddenPathError\";\n\n  constructor(path: string) {\n    super(\n      `Path '${path}' is in the sensitive-file blocklist (.env, .git/, node_modules/, .theo/, lock files)`,\n      {\n        code: \"forbidden_path\",\n      },\n    );\n  }\n}\n\n/**\n * Join `base` with `...parts` and ensure the resolved absolute path stays\n * under `base`. Resolves FIRST, then prefix-checks (ADR D80) — prevents\n * normalized-escape bypasses like `subdir/.\\\\./bar`.\n *\n * Returns the safe absolute path. Throws `PathTraversalError` if escape.\n *\n * @internal\n */\nexport function safePathJoin(base: string, ...parts: string[]): string {\n  if (base === \"\") {\n    throw new Error(\"safePathJoin: base must be non-empty\");\n  }\n  const baseResolved = resolve(base);\n  const target = resolve(base, ...parts);\n  if (target !== baseResolved && !target.startsWith(baseResolved + sep)) {\n    throw new PathTraversalError(parts.join(\"/\"), target);\n  }\n  return target;\n}\n\n/**\n * Assert that `path` — including every directory component in the chain —\n * stays under `base` after symlink resolution. No-op when nothing on the\n * path exists yet.\n *\n * Two-bug history:\n *   1. **EC-1** (original fix, kept): a multi-level symlink chain A → B → C\n *      must be resolved end-to-end. `realpathSync` does this in 1 syscall.\n *   2. **Defence-in-depth** (added v1.x): the previous implementation only\n *      called `lstatSync(path)` on the terminal component. If an INTERMEDIATE\n *      directory was a symlink (`base/inner-symlink → /outside`), `lstat` on\n *      `base/inner-symlink/file.txt` followed the symlink and reported the\n *      regular file — escape went undetected. Fix: walk up to the nearest\n *      existing ancestor and `realpath` THAT, then re-attach the suffix and\n *      check the result against the canonical base.\n *\n * @internal\n */\nexport function assertNoSymlinkEscape(path: string, base: string): void {\n  // Canonical base — symlinks in the base path itself are absorbed once here.\n  let baseResolved: string;\n  try {\n    baseResolved = realpathSync(base);\n  } catch {\n    // base doesn't exist as a real directory yet — fall back to lexical resolve.\n    baseResolved = resolve(base);\n  }\n\n  // Find the deepest ancestor of `path` that exists, then realpath it.\n  // Anything from there onward is \"not yet on disk\" and contributes only\n  // its lexical suffix. This covers three cases:\n  //   - path exists (regular file or symlink at any depth) → realpath the full path\n  //   - path doesn't exist but intermediate dir is a symlink → realpath the ancestor\n  //   - nothing on the path exists → no escape risk (return)\n  const resolved = realpathOfDeepestExisting(path);\n  if (resolved === undefined) return; // path has no existing prefix — nothing to attack\n\n  if (resolved !== baseResolved && !resolved.startsWith(baseResolved + sep)) {\n    throw new PathTraversalError(`symlink ${path}`, resolved);\n  }\n}\n\n/**\n * Find the deepest ancestor of `path` that exists on disk, resolve all\n * symlinks in that ancestor via `realpathSync`, and re-attach the\n * lexical suffix. Returns `undefined` when no ancestor exists.\n *\n * Handles dangling symlinks: if the terminal IS a symlink but its target\n * is missing, we still detect escape via `readlinkSync` + parent resolve.\n */\nfunction realpathOfDeepestExisting(path: string): string | undefined {\n  // First try the full path — the common case.\n  try {\n    return realpathSync(path);\n  } catch {\n    // Not resolvable. Two sub-cases.\n  }\n\n  // Sub-case A: terminal is a dangling symlink.\n  try {\n    const stat: Stats = lstatSync(path);\n    if (stat.isSymbolicLink()) {\n      const target = readlinkSync(path);\n      // Resolve target relative to the REAL parent dir, so intermediate\n      // symlinks in the parent chain are absorbed.\n      const parentReal = realpathOfDeepestExisting(dirname(path));\n      const parentBase = parentReal ?? dirname(path);\n      return resolve(parentBase, target);\n    }\n  } catch {\n    // lstat failed too — terminal doesn't exist at all.\n  }\n\n  // Sub-case B: walk up to the nearest existing ancestor, then re-attach\n  // the suffix lexically.\n  let cursor = dirname(path);\n  let suffix = path.slice(cursor.length);\n  while (cursor !== dirname(cursor)) {\n    try {\n      const real = realpathSync(cursor);\n      // Reconstruct: ancestor's realpath + remaining (still-lexical) suffix\n      return resolve(real, `.${suffix}`);\n    } catch {\n      suffix = path.slice(dirname(cursor).length);\n      cursor = dirname(cursor);\n    }\n  }\n  // Reached filesystem root without finding any existing ancestor.\n  return undefined;\n}\n\nconst LOCK_FILES = new Set([\"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\", \"bun.lockb\"]);\n\n/**\n * Decide whether a project-relative path points to a known-sensitive file\n * that a coding agent must not read or write.\n *\n * Universal blocklist (works for any agent operating on a project tree):\n *\n *   - `.env`, `.env.<anything>` — except `.env.example` (template safe to read)\n *   - `.git/` — version control internals\n *   - `node_modules/` — dependency cache (changes don't belong to the user)\n *   - `.theo/` — TheoKit build artefacts / state\n *   - Lock files at any depth: `pnpm-lock.yaml`, `package-lock.json`,\n *     `yarn.lock`, `bun.lockb`\n *\n * Operates on path segments (forward-slash normalized). Cross-platform safe.\n *\n * Use together with `safePathJoin` + `assertNoSymlinkEscape`: the former two\n * defeat traversal, this one defeats reading a file that is lexically inside\n * the project but should not be agent-visible.\n *\n * @public\n */\nexport function isForbiddenPath(input: string): boolean {\n  // Normalize: forward slashes only, strip leading \"./\"\n  const normalized = input.replace(/\\\\/g, \"/\").replace(/^\\.\\//, \"\");\n  if (normalized.length === 0) return false;\n\n  const segments = normalized.split(\"/\").filter((s) => s.length > 0);\n  if (segments.length === 0) return false;\n\n  const first = segments[0]!;\n  // .env.example is explicitly allowlisted (template safe to read)\n  if (first === \".env.example\") return false;\n  if (first === \".env\") return true;\n  if (/^\\.env\\./.test(first)) return true;\n\n  if (first === \".git\") return true;\n  if (first === \"node_modules\") return true;\n  if (first === \".theo\") return true;\n\n  const basename = segments[segments.length - 1]!;\n  if (LOCK_FILES.has(basename)) return true;\n\n  return false;\n}\n\n// validateArtifactPath + sanitizeIdentifier + IDENTIFIER_PATTERN removed (dead code, no callers)\n","/**\n * `apply_patch` — built-in tool for coding agents.\n *\n * Parses a unified diff string and applies it to the project files.\n * Creates `.bak` backups before modifying each file.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, files_patched: string[] }`\n *   - `{ ok: false, error: 'parse_error' | 'path_traversal' |\n *        'forbidden_path' | 'patch_failed' }`\n */\n\nimport { copyFile, mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\nexport interface CreateApplyPatchToolOptions {\n  /** Absolute path to the project root. */\n  projectRoot: string;\n}\n\nexport function createApplyPatchTool(opts: CreateApplyPatchToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"apply_patch\",\n    description:\n      \"Apply a unified diff patch to project files. Each file in the diff \" +\n      \"is security-checked against the project root. Creates .bak backups \" +\n      \"before modifying. Returns { ok, files_patched } or { ok: false, error }.\",\n    inputSchema: z.object({\n      patch: z.string().min(1).describe(\"Unified diff content.\"),\n    }),\n    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: unified diff parsing is inherently complex\n    handler: async ({ patch }) => {\n      const hunks = parsePatch(patch);\n      if (hunks.length === 0) {\n        return JSON.stringify({ ok: false, error: \"parse_error\", detail: \"no file hunks found\" });\n      }\n\n      // Security check all paths upfront\n      for (const hunk of hunks) {\n        if (isForbiddenPath(hunk.file)) {\n          return JSON.stringify({ ok: false, error: \"forbidden_path\", path: hunk.file });\n        }\n        try {\n          const abs = safePathJoin(projectRoot, hunk.file);\n          assertNoSymlinkEscape(abs, projectRoot);\n        } catch (err) {\n          if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n            return JSON.stringify({ ok: false, error: \"path_traversal\", path: hunk.file });\n          }\n          throw err;\n        }\n      }\n\n      // Apply each file's hunks\n      const patched: string[] = [];\n      for (const hunk of hunks) {\n        const absolutePath = safePathJoin(projectRoot, hunk.file);\n        let content: string;\n        try {\n          content = await readFile(absolutePath, \"utf-8\");\n        } catch (err) {\n          const e = err as { code?: string };\n          if (e.code === \"ENOENT\") {\n            // New file — start empty\n            content = \"\";\n          } else {\n            throw err;\n          }\n        }\n\n        const result = applyHunks(content, hunk.changes);\n        if (result === null) {\n          return JSON.stringify({\n            ok: false,\n            error: \"patch_failed\",\n            path: hunk.file,\n            detail: \"hunk context mismatch\",\n          });\n        }\n\n        if (content !== \"\") {\n          await copyFile(absolutePath, `${absolutePath}.bak`);\n        }\n        await mkdir(dirname(absolutePath), { recursive: true });\n        await writeFile(absolutePath, result, \"utf-8\");\n        patched.push(hunk.file);\n      }\n\n      return JSON.stringify({ ok: true, files_patched: patched });\n    },\n  });\n}\n\ninterface FileHunk {\n  file: string;\n  changes: HunkChange[];\n}\n\ninterface HunkChange {\n  type: \"add\" | \"remove\" | \"context\";\n  content: string;\n}\n\n/** Simple unified diff parser — extracts file paths and line changes. */\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: parser logic\nfunction parsePatch(patch: string): FileHunk[] {\n  const lines = patch.split(\"\\n\");\n  const hunks: FileHunk[] = [];\n  let current: FileHunk | null = null;\n\n  for (const line of lines) {\n    // Detect file header: +++ b/path or +++ path\n    if (line.startsWith(\"+++ \")) {\n      const filePath = line.slice(4).replace(/^b\\//, \"\").trim();\n      if (filePath && filePath !== \"/dev/null\") {\n        current = { file: filePath, changes: [] };\n        hunks.push(current);\n      }\n      continue;\n    }\n\n    if (line.startsWith(\"--- \")) continue;\n    if (line.startsWith(\"@@ \")) continue;\n\n    if (current === null) continue;\n\n    if (line.startsWith(\"+\")) {\n      current.changes.push({ type: \"add\", content: line.slice(1) });\n    } else if (line.startsWith(\"-\")) {\n      current.changes.push({ type: \"remove\", content: line.slice(1) });\n    } else if (line.startsWith(\" \")) {\n      current.changes.push({ type: \"context\", content: line.slice(1) });\n    }\n  }\n\n  return hunks;\n}\n\n/** Apply hunk changes to file content. Returns null on context mismatch. */\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: parser logic\nfunction applyHunks(content: string, changes: HunkChange[]): string | null {\n  const originalLines = content.split(\"\\n\");\n  const result: string[] = [];\n  let origIdx = 0;\n\n  // Find context start\n  const firstContext = changes.find((c) => c.type === \"context\" || c.type === \"remove\");\n  if (firstContext) {\n    const startIdx = originalLines.indexOf(firstContext.content, origIdx);\n    if (startIdx === -1) return null;\n    // Copy lines before context\n    for (let i = 0; i < startIdx; i++) {\n      result.push(originalLines[i]!);\n    }\n    origIdx = startIdx;\n  }\n\n  for (const change of changes) {\n    if (change.type === \"context\") {\n      if (origIdx >= originalLines.length || originalLines[origIdx] !== change.content) {\n        return null; // context mismatch\n      }\n      result.push(change.content);\n      origIdx++;\n    } else if (change.type === \"remove\") {\n      if (origIdx >= originalLines.length || originalLines[origIdx] !== change.content) {\n        return null; // line to remove doesn't match\n      }\n      origIdx++;\n    } else if (change.type === \"add\") {\n      result.push(change.content);\n    }\n  }\n\n  // Append remaining original lines\n  while (origIdx < originalLines.length) {\n    result.push(originalLines[origIdx]!);\n    origIdx++;\n  }\n\n  return result.join(\"\\n\");\n}\n","/**\n * `edit_file` — built-in tool for coding agents.\n *\n * Replaces a string in a project-relative file. Tries exact match first,\n * then whitespace-normalized match. Creates a `.bak` backup before editing.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, replacements: 1 }` on success\n *   - `{ ok: false, error: 'no_match' | 'not_found' | 'path_traversal' |\n *        'forbidden_path' }` on refusal\n */\n\nimport { copyFile, readFile, writeFile } from \"node:fs/promises\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\nexport interface CreateEditFileToolOptions {\n  /** Absolute path to the project root. Every edit is gated against this boundary. */\n  projectRoot: string;\n}\n\nexport function createEditFileTool(opts: CreateEditFileToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"edit_file\",\n    description:\n      \"Replace the first occurrence of old_string with new_string in a \" +\n      \"project-relative file. Falls back to whitespace-normalized matching \" +\n      \"when the exact match fails. Creates a .bak backup before editing. \" +\n      \"Returns { ok, replacements } or { ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative file path.\"),\n      old_string: z.string().min(1).describe(\"String to find in the file.\"),\n      new_string: z.string().describe(\"Replacement string.\"),\n    }),\n    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: unified diff parsing is inherently complex\n    handler: async ({ path, old_string, new_string }) => {\n      if (isForbiddenPath(path)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n\n      let absolutePath: string;\n      try {\n        absolutePath = safePathJoin(projectRoot, path);\n        assertNoSymlinkEscape(absolutePath, projectRoot);\n      } catch (err) {\n        if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n          return JSON.stringify({ ok: false, error: \"path_traversal\", path });\n        }\n        throw err;\n      }\n\n      let content: string;\n      try {\n        content = await readFile(absolutePath, \"utf-8\");\n      } catch (err) {\n        const e = err as { code?: string };\n        if (e.code === \"ENOENT\") {\n          return JSON.stringify({ ok: false, error: \"not_found\", path });\n        }\n        throw err;\n      }\n\n      // Strategy 1: exact match\n      const exactIdx = content.indexOf(old_string);\n      if (exactIdx !== -1) {\n        await copyFile(absolutePath, `${absolutePath}.bak`);\n        const result =\n          content.slice(0, exactIdx) + new_string + content.slice(exactIdx + old_string.length);\n        await writeFile(absolutePath, result, \"utf-8\");\n        return JSON.stringify({ ok: true, replacements: 1 });\n      }\n\n      // Strategy 2: whitespace-normalized match\n      const normalizedContent = normalizeWhitespace(content);\n      const normalizedOld = normalizeWhitespace(old_string);\n      const normalizedIdx = normalizedContent.indexOf(normalizedOld);\n\n      if (normalizedIdx === -1) {\n        return JSON.stringify({ ok: false, error: \"no_match\", path });\n      }\n\n      // Find original span boundaries via character mapping\n      const span = findOriginalSpan(\n        content,\n        normalizedContent,\n        normalizedIdx,\n        normalizedOld.length,\n      );\n      await copyFile(absolutePath, `${absolutePath}.bak`);\n      const result = content.slice(0, span.start) + new_string + content.slice(span.end);\n      await writeFile(absolutePath, result, \"utf-8\");\n      return JSON.stringify({ ok: true, replacements: 1 });\n    },\n  });\n}\n\n/** Collapse runs of whitespace into a single space. */\nfunction normalizeWhitespace(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim();\n}\n\n/**\n * Map a position range in the whitespace-normalized string back to the\n * original string. Walks both strings in lockstep.\n */\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: parser logic\nfunction findOriginalSpan(\n  original: string,\n  _normalized: string,\n  normStart: number,\n  normLen: number,\n): { start: number; end: number } {\n  let origIdx = 0;\n  let normIdx = 0;\n\n  // Skip leading whitespace that was trimmed\n  while (origIdx < original.length && /\\s/.test(original[origIdx]!)) {\n    origIdx++;\n  }\n\n  // Walk to normStart\n  while (normIdx < normStart && origIdx < original.length) {\n    if (/\\s/.test(original[origIdx]!)) {\n      // skip entire whitespace run in original, counts as one in normalized\n      while (origIdx < original.length && /\\s/.test(original[origIdx]!)) {\n        origIdx++;\n      }\n      normIdx++; // the collapsed space\n    } else {\n      origIdx++;\n      normIdx++;\n    }\n  }\n\n  const start = origIdx;\n\n  // Walk normLen characters\n  let walked = 0;\n  while (walked < normLen && origIdx < original.length) {\n    if (/\\s/.test(original[origIdx]!)) {\n      while (origIdx < original.length && /\\s/.test(original[origIdx]!)) {\n        origIdx++;\n      }\n      walked++; // the collapsed space\n    } else {\n      origIdx++;\n      walked++;\n    }\n  }\n\n  return { start, end: origIdx };\n}\n","/**\n * `formatter` — output formatting utilities for tool results.\n *\n * Wraps code, diffs, file lists, errors, and truncated output references.\n */\n\n/**\n * Wrap code in a fenced code block with language tag.\n */\nexport function formatCode(language: string, code: string): string {\n  return `\\`\\`\\`${language}\\n${code}\\n\\`\\`\\``;\n}\n\n/**\n * Format a unified diff with +/- prefixes preserved.\n */\nexport function formatDiff(diff: string): string {\n  return `\\`\\`\\`diff\\n${diff}\\n\\`\\`\\``;\n}\n\n/**\n * Format a list of file paths as a bulleted markdown list.\n */\nexport function formatFileList(files: string[]): string {\n  if (files.length === 0) return \"(no files)\";\n  return files.map((f) => `- ${f}`).join(\"\\n\");\n}\n\n/**\n * Format an error message as a markdown block.\n */\nexport function formatError(message: string, code?: string): string {\n  const prefix = code ? `[${code}] ` : \"\";\n  return `> **Error:** ${prefix}${message}`;\n}\n\n/**\n * Format a truncated output reference.\n */\nexport function formatTruncated(overflowPath: string): string {\n  return `...full output at: ${overflowPath}`;\n}\n","/**\n * Shared `safePathJoin + assertNoSymlinkEscape` helper for built-in coding\n * tools (git-diff, run-vitest, list-dir, read-file, search-text). Returns a\n * pre-formatted `path_traversal` JSON string on failure or `null` on pass.\n *\n * @internal\n */\n\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\nexport function checkPathScope(path: string | undefined, projectRoot: string): string | null {\n  if (path === undefined || path === \"\") return null;\n  try {\n    const abs = safePathJoin(projectRoot, path);\n    assertNoSymlinkEscape(abs, projectRoot);\n    return null;\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return JSON.stringify({ ok: false, error: \"path_traversal\", path });\n    }\n    throw err;\n  }\n}\n","/**\n * Shared subprocess-watch helpers for built-in coding tools (git-diff,\n * run-vitest). Wires the on(close)/on(error) settle pattern in a single\n * place to eliminate the cross-file clone flagged by jscpd.\n *\n * @internal\n */\n\nimport type { ChildProcess } from \"node:child_process\";\n\n/**\n * Settle gate — guarantees the supplied callback fires exactly once across\n * the close/error/timeout race. Clears the timer on settle.\n */\ninterface SettleGate {\n  /** True after first settle; subsequent calls are no-ops. */\n  settled: () => boolean;\n  /** Settle the gate, clear the timer, and call `onSettle()`. */\n  fire: (onSettle: () => void) => void;\n}\n\nfunction createSettleGate(timer: NodeJS.Timeout): SettleGate {\n  let done = false;\n  return {\n    settled: () => done,\n    fire: (onSettle) => {\n      if (done) return;\n      done = true;\n      clearTimeout(timer);\n      onSettle();\n    },\n  };\n}\n\n/**\n * Wire SIGKILL-on-timeout for a detached process group. Returns the settle\n * gate so caller listeners can short-circuit when the timeout already fired.\n */\nexport function armTimeoutKill<T>(\n  child: ChildProcess,\n  timeoutMs: number,\n  onTimeout: () => T,\n  resolve: (value: T) => void,\n): SettleGate {\n  const timer = setTimeout(() => {\n    gate.fire(() => {\n      try {\n        process.kill(-(child.pid ?? 0), \"SIGKILL\");\n      } catch {\n        /* already dead */\n      }\n      resolve(onTimeout());\n    });\n  }, timeoutMs);\n  const gate = createSettleGate(timer);\n  return gate;\n}\n\n/**\n * Attach a close+error pair of listeners that resolve via the supplied\n * callbacks. Honors the gate so timeout-vs-close races settle exactly once.\n */\nexport function attachChildSettlers<T>(\n  child: ChildProcess,\n  gate: SettleGate,\n  onClose: (code: number | null) => T,\n  onError: (err: Error) => T,\n  resolve: (value: T) => void,\n): void {\n  child.on(\"close\", (code) => {\n    gate.fire(() => resolve(onClose(code)));\n  });\n  child.on(\"error\", (err) => {\n    gate.fire(() => resolve(onError(err)));\n  });\n}\n","/**\n * `git_diff` — built-in tool for coding agents.\n *\n * Returns the unified diff of the working tree (or staged changes when\n * `cached=true`). Implemented as a thin `git diff` subprocess wrapper\n * with a couple of hard limits:\n *\n *   - 30s wall clock timeout (kills the process group on expiry)\n *   - 5 MB stdout cap (truncate + flag `truncated=true`)\n *   - Path scope validated through `safePathJoin` + `assertNoSymlinkEscape`\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, diff: string, truncated?: boolean }`\n *   - `{ ok: false, error: 'not_a_repo' | 'path_traversal' | 'timeout' }`\n */\n\nimport { spawn } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport { checkPathScope } from \"./path-scope.js\";\nimport { armTimeoutKill, attachChildSettlers } from \"./subprocess.js\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst DEFAULT_MAX_STDOUT_BYTES = 5 * 1024 * 1024;\n\nexport interface CreateGitDiffToolOptions {\n  projectRoot: string;\n  timeoutMs?: number;\n  maxStdoutBytes?: number;\n}\n\nexport function createGitDiffTool(opts: CreateGitDiffToolOptions): CustomTool {\n  const {\n    projectRoot,\n    timeoutMs = DEFAULT_TIMEOUT_MS,\n    maxStdoutBytes = DEFAULT_MAX_STDOUT_BYTES,\n  } = opts;\n\n  return defineTool({\n    name: \"git_diff\",\n    description:\n      \"Return the unified diff of the project's working tree (or staged \" +\n      \"changes when cached=true). Scoped to a single file when 'path' is \" +\n      \"provided. Requires the project to be a git repository. Returns \" +\n      \"{ ok, diff, truncated? } or { ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().optional().describe(\"Optional project-relative file or dir scope.\"),\n      cached: z\n        .boolean()\n        .optional()\n        .describe(\"If true, show staged changes (git diff --cached). Default false.\"),\n    }),\n    handler: async ({ path, cached }) => {\n      if (!existsSync(join(projectRoot, \".git\"))) {\n        return JSON.stringify({ ok: false, error: \"not_a_repo\" });\n      }\n\n      const scopeCheck = checkPathScope(path, projectRoot);\n      if (scopeCheck !== null) return scopeCheck;\n\n      const args = buildDiffArgs(cached, path);\n      const result = await runGitProcess(projectRoot, args, timeoutMs, maxStdoutBytes);\n      return formatGitResult(result, timeoutMs);\n    },\n  });\n}\n\nfunction buildDiffArgs(cached: boolean | undefined, path: string | undefined): string[] {\n  const args = [\"diff\", \"--no-color\"];\n  if (cached === true) args.push(\"--cached\");\n  if (path !== undefined && path !== \"\") args.push(\"--\", path);\n  return args;\n}\n\nfunction formatGitResult(result: GitProcessResult, timeoutMs: number): string {\n  if (result.kind === \"timeout\") {\n    return JSON.stringify({ ok: false, error: \"timeout\", timeoutMs });\n  }\n  if (result.kind === \"error\") {\n    return JSON.stringify({ ok: false, error: \"git_failed\", stderr: result.stderr });\n  }\n  return JSON.stringify({ ok: true, diff: result.stdout, truncated: result.truncated });\n}\n\ntype GitProcessResult =\n  | { kind: \"ok\"; stdout: string; truncated: boolean }\n  | { kind: \"error\"; stderr: string }\n  | { kind: \"timeout\" };\n\nfunction runGitProcess(\n  cwd: string,\n  args: string[],\n  timeoutMs: number,\n  maxStdoutBytes: number,\n): Promise<GitProcessResult> {\n  return new Promise((resolve) => {\n    // Detached process group so we can kill the whole tree on timeout (EC-7).\n    const child = spawn(\"git\", args, { cwd, detached: true, stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n    let truncated = false;\n\n    const gate = armTimeoutKill<GitProcessResult>(\n      child,\n      timeoutMs,\n      () => ({ kind: \"timeout\" }),\n      resolve,\n    );\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      if (stdoutBytes >= maxStdoutBytes) {\n        truncated = true;\n        return;\n      }\n      const remaining = maxStdoutBytes - stdoutBytes;\n      if (chunk.length > remaining) {\n        stdoutChunks.push(chunk.subarray(0, remaining));\n        stdoutBytes = maxStdoutBytes;\n        truncated = true;\n      } else {\n        stdoutChunks.push(chunk);\n        stdoutBytes += chunk.length;\n      }\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      stderrChunks.push(chunk);\n    });\n\n    attachChildSettlers<GitProcessResult>(\n      child,\n      gate,\n      (code) => {\n        const stdout = Buffer.concat(stdoutChunks).toString(\"utf-8\");\n        const stderr = Buffer.concat(stderrChunks).toString(\"utf-8\");\n        return code === 0 ? { kind: \"ok\", stdout, truncated } : { kind: \"error\", stderr };\n      },\n      (err) => ({ kind: \"error\", stderr: err.message }),\n      resolve,\n    );\n  });\n}\n","/**\n * `glob_files` — built-in tool for coding agents.\n *\n * Lists project files matching a glob pattern. Excludes node_modules,\n * .git, and dist by default. Returns relative paths.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, files: string[] }`\n *   - `{ ok: false, error: 'path_traversal' | 'no_matches' }`\n */\n\nimport { readdir } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\n/** Directories excluded from traversal by default. */\nconst DEFAULT_EXCLUDES = new Set([\"node_modules\", \".git\", \"dist\", \".theo\"]);\n\nexport interface CreateGlobToolOptions {\n  /** Absolute path to the project root. */\n  projectRoot: string;\n}\n\nexport function createGlobTool(opts: CreateGlobToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"glob_files\",\n    description:\n      \"List project files matching a glob-like pattern. Excludes \" +\n      \"node_modules, .git, dist, .theo by default. Returns relative \" +\n      \"paths. Pattern supports * and ** wildcards. Returns { ok, files } \" +\n      \"or { ok: false, error }.\",\n    inputSchema: z.object({\n      pattern: z.string().min(1).describe(\"Glob pattern (e.g. '**/*.ts', 'src/**/*.json').\"),\n      cwd: z.string().optional().describe(\"Project-relative subdirectory to search from.\"),\n    }),\n    handler: async ({ pattern, cwd }) => {\n      let searchRoot = projectRoot;\n\n      if (cwd) {\n        try {\n          searchRoot = safePathJoin(projectRoot, cwd);\n          assertNoSymlinkEscape(searchRoot, projectRoot);\n        } catch (err) {\n          if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n            return JSON.stringify({ ok: false, error: \"path_traversal\", path: cwd });\n          }\n          throw err;\n        }\n      }\n\n      const regex = globToRegex(pattern);\n      const files: string[] = [];\n\n      await walkDir(searchRoot, searchRoot, regex, files);\n\n      const relativePaths = files.map((f) => relative(projectRoot, f)).sort();\n      return JSON.stringify({ ok: true, files: relativePaths, count: relativePaths.length });\n    },\n  });\n}\n\nasync function walkDir(\n  base: string,\n  dir: string,\n  pattern: RegExp,\n  results: string[],\n): Promise<void> {\n  let entries: import(\"node:fs\").Dirent[];\n  try {\n    entries = await readdir(dir, { withFileTypes: true });\n  } catch {\n    return; // directory doesn't exist or unreadable\n  }\n\n  for (const entry of entries) {\n    if (DEFAULT_EXCLUDES.has(entry.name)) continue;\n\n    const fullPath = join(dir, entry.name);\n    const relPath = relative(base, fullPath);\n\n    if (entry.isDirectory()) {\n      await walkDir(base, fullPath, pattern, results);\n    } else if (entry.isFile() && pattern.test(relPath)) {\n      results.push(fullPath);\n    }\n  }\n}\n\n/** Convert a simple glob pattern to a RegExp. Supports * and ** wildcards. */\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: parser logic\nfunction globToRegex(pattern: string): RegExp {\n  let regexStr = \"\";\n  let i = 0;\n  while (i < pattern.length) {\n    const ch = pattern[i]!;\n    if (ch === \"*\" && pattern[i + 1] === \"*\") {\n      // ** matches any path segment(s)\n      regexStr += \".*\";\n      i += 2;\n      if (pattern[i] === \"/\") i++; // skip trailing slash after **\n    } else if (ch === \"*\") {\n      // * matches anything except /\n      regexStr += \"[^/]*\";\n      i++;\n    } else if (ch === \"?\") {\n      regexStr += \"[^/]\";\n      i++;\n      // biome-ignore lint/suspicious/noTemplateCurlyInString: regex escape chars, not template\n    } else if (\".+^${}()|[]\\\\\".includes(ch)) {\n      regexStr += `\\\\${ch}`;\n      i++;\n    } else {\n      regexStr += ch;\n      i++;\n    }\n  }\n  return new RegExp(`^${regexStr}$`);\n}\n","/**\n * `list_dir` — built-in tool for coding agents.\n *\n * Returns the direct entries of a project-relative directory. Hardened\n * against the same four bug families as `read_file` plus the\n * **EC-6 unbounded output** failure mode: in a project with 10k files,\n * a naive listing returns a 5 MB JSON payload that freezes the browser\n * and (more importantly) blows past the LLM context window.\n *\n * Defaults:\n *   - `max = 500` entries (override via factory option `{ max }`)\n *   - Result includes `{ truncated: boolean, totalCount: number }` so the\n *     agent can decide whether to drill deeper or call `search_text` instead\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, entries: Array<{ name, type }>, truncated, totalCount }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'not_found' }`\n */\n\nimport type { Dirent } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\nconst DEFAULT_MAX_ENTRIES = 500;\n\nexport interface CreateListDirToolOptions {\n  /** Absolute path to the project root. Every listing is gated against this boundary. */\n  projectRoot: string;\n  /** Maximum number of entries returned per call. Default 500. */\n  max?: number;\n}\n\nexport function createListDirTool(opts: CreateListDirToolOptions): CustomTool {\n  const { projectRoot, max = DEFAULT_MAX_ENTRIES } = opts;\n\n  return defineTool({\n    name: \"list_dir\",\n    description:\n      `Return the direct entries of a project-relative directory. ` +\n      `Refuses paths outside the project root or in the sensitive-file ` +\n      `blocklist (.env, .git/, node_modules/, .theo/, lock files). Caps ` +\n      `at ${String(max)} entries by default; result carries truncated + totalCount.`,\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative directory path. Use '.' for root.\"),\n    }),\n    handler: async ({ path }) => {\n      const relative = path === \"\" || path === \".\" ? \".\" : path;\n      if (relative !== \".\" && isForbiddenPath(relative)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n      const boundary = resolveDirBoundary(relative, projectRoot, path);\n      if (\"error\" in boundary) return boundary.error;\n      const readResult = await readDirSafe(boundary.absolutePath, path);\n      if (\"error\" in readResult) return readResult.error;\n      return formatListing(readResult.dirents, max);\n    },\n  });\n}\n\nfunction resolveDirBoundary(\n  relative: string,\n  projectRoot: string,\n  originalPath: string,\n): { absolutePath: string } | { error: string } {\n  try {\n    const absolutePath = relative === \".\" ? projectRoot : safePathJoin(projectRoot, relative);\n    assertNoSymlinkEscape(absolutePath, projectRoot);\n    return { absolutePath };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path: originalPath }) };\n    }\n    throw err;\n  }\n}\n\nasync function readDirSafe(\n  absolutePath: string,\n  originalPath: string,\n): Promise<{ dirents: Dirent[] } | { error: string }> {\n  try {\n    const dirents = await readdir(absolutePath, { withFileTypes: true });\n    return { dirents };\n  } catch (err) {\n    const e = err as { code?: string };\n    if (e.code === \"ENOENT\" || e.code === \"ENOTDIR\") {\n      return { error: JSON.stringify({ ok: false, error: \"not_found\", path: originalPath }) };\n    }\n    throw err;\n  }\n}\n\nfunction formatListing(dirents: Dirent[], max: number): string {\n  const totalCount = dirents.length;\n  const truncated = totalCount > max;\n  const entries = dirents.slice(0, max).map((d) => ({\n    name: d.name,\n    type: d.isDirectory() ? (\"directory\" as const) : (\"file\" as const),\n  }));\n  return JSON.stringify({ ok: true, entries, truncated, totalCount });\n}\n","/**\n * `plan_mode` — tool for toggling between normal and planning mode.\n *\n * In plan mode, the agent focuses on outlining steps rather than executing them.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, mode: string, message: string }`\n *   - `{ ok: false, error: \"invalid_action\" }`\n */\n\ntype Mode = \"normal\" | \"plan\";\n\nconst PLAN_INSTRUCTIONS = [\n  \"You are now in PLAN MODE.\",\n  \"Outline the steps you will take before executing any code changes.\",\n  \"Number each step. Include file paths and what will change.\",\n  \"Do NOT make any edits or tool calls other than reading files.\",\n  \"When ready, use plan_mode with action 'exit' to return to normal mode.\",\n].join(\"\\n\");\n\nconst NORMAL_INSTRUCTIONS = \"Returned to NORMAL MODE. You may now execute changes.\";\n\nexport interface PlanModeTool {\n  name: string;\n  description: string;\n  inputSchema: unknown;\n  handler: (input: { action: string }) => string;\n  /** Expose current mode for testing. */\n  currentMode: () => Mode;\n}\n\nexport function createPlanModeTool(): PlanModeTool {\n  let mode: Mode = \"normal\";\n\n  return {\n    name: \"plan_mode\",\n    description:\n      \"Toggle between normal and plan mode. \" +\n      \"Actions: 'enter' (switch to plan mode), 'exit' (return to normal), 'status' (check current mode). \" +\n      \"Returns { ok, mode, message }.\",\n    inputSchema: {\n      type: \"object\" as const,\n      properties: {\n        action: {\n          type: \"string\",\n          enum: [\"enter\", \"exit\", \"status\"],\n          description: \"The action to perform.\",\n        },\n      },\n      required: [\"action\"],\n    },\n    handler: (input: { action: string }): string => {\n      switch (input.action) {\n        case \"enter\":\n          mode = \"plan\";\n          return JSON.stringify({ ok: true, mode, message: PLAN_INSTRUCTIONS });\n        case \"exit\":\n          mode = \"normal\";\n          return JSON.stringify({ ok: true, mode, message: NORMAL_INSTRUCTIONS });\n        case \"status\":\n          return JSON.stringify({ ok: true, mode, message: `Current mode: ${mode}` });\n        default:\n          return JSON.stringify({\n            ok: false,\n            error: \"invalid_action\",\n            message: `Unknown action '${input.action}'. Valid: enter, exit, status.`,\n          });\n      }\n    },\n    currentMode: () => mode,\n  };\n}\n","/**\n * `question` — interactive tool that asks the user a question and waits for a response.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, answer: string }`\n *   - `{ ok: false, error: \"timeout\" }`\n */\n\nexport interface QuestionToolOptions {\n  /** Callback that presents a question to the user and resolves with their answer. */\n  askUser: (question: string) => Promise<string>;\n  /** Maximum time to wait for user response in ms. Default: 300_000 (5 min). */\n  timeoutMs?: number;\n}\n\nexport interface QuestionTool {\n  name: string;\n  description: string;\n  inputSchema: unknown;\n  handler: (input: { question: string }) => Promise<string>;\n}\n\nexport function createQuestionTool(opts: QuestionToolOptions): QuestionTool {\n  const timeoutMs = opts.timeoutMs ?? 300_000;\n\n  return {\n    name: \"question\",\n    description:\n      \"Ask the user a question and wait for their response. \" +\n      \"Use when you need clarification or confirmation before proceeding. \" +\n      \"Returns { ok, answer } or { ok: false, error: 'timeout' }.\",\n    inputSchema: {\n      type: \"object\" as const,\n      properties: {\n        question: { type: \"string\", description: \"The question to ask the user.\" },\n      },\n      required: [\"question\"],\n    },\n    handler: async (input: { question: string }): Promise<string> => {\n      const timeout = new Promise<never>((_, reject) => {\n        setTimeout(() => reject(new Error(\"timeout\")), timeoutMs);\n      });\n\n      try {\n        const answer = await Promise.race([opts.askUser(input.question), timeout]);\n        return JSON.stringify({ ok: true, answer });\n      } catch (err) {\n        if (err instanceof Error && err.message === \"timeout\") {\n          return JSON.stringify({\n            ok: false,\n            error: \"timeout\",\n            message: \"User did not respond within timeout.\",\n          });\n        }\n        throw err;\n      }\n    },\n  };\n}\n","/**\n * `read_file` — built-in tool for coding agents.\n *\n * Reads a project-relative file as UTF-8 and returns its contents.\n * Hardened against the four bug families a coding agent normally hits:\n *\n *   1. **Path traversal** — `safePathJoin` rejects literal `..`,\n *      normalised escape, absolute segments, null-byte injection.\n *   2. **Symlink escape** — `assertNoSymlinkEscape` follows the full\n *      chain (and any intermediate symlinks; defence-in-depth fix v1.x).\n *   3. **Sensitive files** — `isForbiddenPath` blocks `.env*` (except\n *      `.env.example`), `.git/`, `node_modules/`, `.theo/`, lock files.\n *   4. **Binary files** — null-byte check on the first 8 KB. PNG/JPEG/\n *      compiled binaries return a structured `binary_file` error\n *      instead of garbled UTF-8 (EC-5 from the TheoKit Studio review).\n *\n * Return shape (always a JSON string the LLM consumes):\n *   - `{ ok: true, content: string }` on success\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' |\n *        'binary_file' | 'not_found' | 'too_large' }` on refusal\n *\n * The handler intentionally never throws on a \"user mistake\"\n * (traversal / forbidden / not found). Throwing reserved for SDK-side\n * mistakes that should crash the agent loop (input parse errors).\n */\n\nimport { type FileHandle, open } from \"node:fs/promises\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\n/** Max single-file read size, in bytes. 5 MB ceiling — enough for any source file. */\nconst MAX_FILE_SIZE = 5 * 1024 * 1024;\n\n/** Byte window inspected for null bytes when deciding binary vs text. */\nconst BINARY_PROBE_BYTES = 8 * 1024;\n\nexport interface CreateReadFileToolOptions {\n  /** Absolute path to the project root. Every read is gated against this boundary. */\n  projectRoot: string;\n}\n\nexport function createReadFileTool(opts: CreateReadFileToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"read_file\",\n    description:\n      \"Read a single project-relative text file as UTF-8. Refuses paths \" +\n      \"that escape the project root, are in the sensitive-file blocklist \" +\n      \"(.env, .git/, node_modules/, .theo/, lock files), or contain a null \" +\n      \"byte in the first 8 KB (binary file). Returns { ok, content } or \" +\n      \"{ ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative file path.\"),\n    }),\n    handler: async ({ path }) => {\n      if (isForbiddenPath(path)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n      const boundary = resolveBoundary(path, projectRoot);\n      if (\"error\" in boundary) return boundary.error;\n      const opened = await openHandleSafe(boundary.absolutePath, path);\n      if (\"error\" in opened) return opened.error;\n      try {\n        return await readContent(opened.handle, path);\n      } finally {\n        await opened.handle.close();\n      }\n    },\n  });\n}\n\nfunction resolveBoundary(\n  path: string,\n  projectRoot: string,\n): { absolutePath: string } | { error: string } {\n  try {\n    const absolutePath = safePathJoin(projectRoot, path);\n    assertNoSymlinkEscape(absolutePath, projectRoot);\n    return { absolutePath };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function openHandleSafe(\n  absolutePath: string,\n  path: string,\n): Promise<{ handle: FileHandle } | { error: string }> {\n  try {\n    const handle = await open(absolutePath, \"r\");\n    return { handle };\n  } catch (err) {\n    const e = err as { code?: string };\n    if (e.code === \"ENOENT\") {\n      return { error: JSON.stringify({ ok: false, error: \"not_found\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function readContent(handle: FileHandle, path: string): Promise<string> {\n  const stat = await handle.stat();\n  if (stat.size > MAX_FILE_SIZE) {\n    return JSON.stringify({\n      ok: false,\n      error: \"too_large\",\n      path,\n      size: stat.size,\n      limit: MAX_FILE_SIZE,\n    });\n  }\n  if (await isBinaryProbe(handle, Number(stat.size))) {\n    return JSON.stringify({ ok: false, error: \"binary_file\", path, size: stat.size });\n  }\n  const content = await handle.readFile({ encoding: \"utf-8\" });\n  return JSON.stringify({ ok: true, content, size: stat.size });\n}\n\nasync function isBinaryProbe(handle: FileHandle, size: number): Promise<boolean> {\n  const probeLen = Math.min(BINARY_PROBE_BYTES, size);\n  if (probeLen <= 0) return false;\n  const probe = Buffer.alloc(probeLen);\n  const { bytesRead } = await handle.read(probe, 0, probeLen, 0);\n  for (let i = 0; i < bytesRead; i += 1) {\n    if (probe[i] === 0) return true;\n  }\n  return false;\n}\n","/**\n * `run_vitest` — built-in tool for coding agents.\n *\n * Runs vitest against an optional file/pattern scope and returns the\n * parsed JSON report. Hardened against the same subprocess failure\n * modes as `git_diff`:\n *\n *   - 120s wall clock timeout (vitest can be slow on first run)\n *   - Process group kill on timeout (EC-7 — defeats vitest workers as\n *     grandchildren of the spawned shell)\n *   - **EC-12**: vitest stdout may contain deprecation warnings BEFORE\n *     the JSON payload. The parser scans line-by-line and extracts the\n *     LAST valid JSON object, not the first.\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, summary: { numTotalTests, numPassedTests, numFailedTests, success } }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'timeout' |\n *        'no_vitest' | 'unparseable_output' }`\n *\n * Implementation note: invokes vitest via `npx --no-install vitest`. The\n * `--no-install` avoids the agent triggering a multi-megabyte download\n * mid-turn if vitest is missing — the tool fails cleanly with\n * `no_vitest` instead.\n */\n\nimport { spawn } from \"node:child_process\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport { isForbiddenPath } from \"./internal/path-guard.js\";\nimport { checkPathScope } from \"./path-scope.js\";\nimport { armTimeoutKill, attachChildSettlers } from \"./subprocess.js\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_MAX_STDOUT_BYTES = 10 * 1024 * 1024;\n\nexport interface CreateRunVitestToolOptions {\n  projectRoot: string;\n  timeoutMs?: number;\n  maxStdoutBytes?: number;\n}\n\nexport interface VitestSummary {\n  numTotalTests?: number;\n  numPassedTests?: number;\n  numFailedTests?: number;\n  success?: boolean;\n}\n\nexport function createRunVitestTool(opts: CreateRunVitestToolOptions): CustomTool {\n  const {\n    projectRoot,\n    timeoutMs = DEFAULT_TIMEOUT_MS,\n    maxStdoutBytes = DEFAULT_MAX_STDOUT_BYTES,\n  } = opts;\n\n  return defineTool({\n    name: \"run_vitest\",\n    description:\n      \"Run the project's vitest suite, optionally scoped to a file or \" +\n      \"pattern via 'path'. Returns parsed { ok, summary } or { ok: false, \" +\n      \"error }. Vitest stdout warnings are stripped — the parser extracts \" +\n      \"the trailing JSON report.\",\n    inputSchema: z.object({\n      path: z\n        .string()\n        .optional()\n        .describe(\"Optional vitest pattern or file path (project-relative).\"),\n    }),\n    handler: async ({ path }) => {\n      const scopeError = validateVitestScope(path, projectRoot);\n      if (scopeError !== null) return scopeError;\n\n      const args = [\"--no-install\", \"vitest\", \"run\", \"--reporter=json\"];\n      if (path !== undefined && path !== \"\") args.push(path);\n\n      const result = await runProcess(projectRoot, \"npx\", args, timeoutMs, maxStdoutBytes);\n      return formatVitestResult(result, timeoutMs);\n    },\n  });\n}\n\nfunction validateVitestScope(path: string | undefined, projectRoot: string): string | null {\n  if (path !== undefined && path !== \"\" && isForbiddenPath(path)) {\n    return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n  }\n  return checkPathScope(path, projectRoot);\n}\n\nfunction formatVitestResult(result: ProcessResult, timeoutMs: number): string {\n  if (result.kind === \"timeout\") {\n    return JSON.stringify({ ok: false, error: \"timeout\", timeoutMs });\n  }\n  if (result.kind === \"spawn_error\") {\n    return JSON.stringify({ ok: false, error: \"no_vitest\", detail: result.message });\n  }\n  const summary = extractTrailingJson(result.stdout) as VitestSummary | null;\n  if (summary === null) {\n    return JSON.stringify({\n      ok: false,\n      error: \"unparseable_output\",\n      stderrPreview: result.stderr.slice(0, 500),\n    });\n  }\n  return JSON.stringify({ ok: true, summary });\n}\n\n/**\n * Find the LAST line in `stdout` that parses as a JSON object. Vitest\n * prepends node deprecation warnings to its JSON reporter output — if\n * we naively `JSON.parse(stdout)` we get a SyntaxError. Workaround: walk\n * lines bottom-up and return the first one that parses.\n *\n * Exported for direct unit testing without spawning vitest.\n */\nexport function extractTrailingJson(stdout: string): unknown {\n  const lines = stdout.split(/\\r?\\n/);\n  for (let i = lines.length - 1; i >= 0; i -= 1) {\n    const line = lines[i]!.trim();\n    if (line.length === 0) continue;\n    if (line[0] !== \"{\" && line[0] !== \"[\") continue;\n    try {\n      return JSON.parse(line) as unknown;\n    } catch {\n      // not valid JSON — keep looking\n    }\n  }\n  return null;\n}\n\nfunction appendCapped(chunks: Buffer[], chunk: Buffer, current: number, cap: number): number {\n  if (current >= cap) return current;\n  const remaining = cap - current;\n  if (chunk.length > remaining) {\n    chunks.push(chunk.subarray(0, remaining));\n    return cap;\n  }\n  chunks.push(chunk);\n  return current + chunk.length;\n}\n\ntype ProcessResult =\n  | { kind: \"ok\"; stdout: string; stderr: string; exitCode: number }\n  | { kind: \"timeout\" }\n  | { kind: \"spawn_error\"; message: string };\n\nfunction runProcess(\n  cwd: string,\n  command: string,\n  args: string[],\n  timeoutMs: number,\n  maxStdoutBytes: number,\n): Promise<ProcessResult> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      cwd,\n      detached: true,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n\n    const gate = armTimeoutKill<ProcessResult>(\n      child,\n      timeoutMs,\n      () => ({ kind: \"timeout\" }),\n      resolve,\n    );\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      stdoutBytes = appendCapped(stdoutChunks, chunk, stdoutBytes, maxStdoutBytes);\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      stderrChunks.push(chunk);\n    });\n\n    attachChildSettlers<ProcessResult>(\n      child,\n      gate,\n      (code) => ({\n        kind: \"ok\",\n        stdout: Buffer.concat(stdoutChunks).toString(\"utf-8\"),\n        stderr: Buffer.concat(stderrChunks).toString(\"utf-8\"),\n        exitCode: code ?? 0,\n      }),\n      (err) => ({ kind: \"spawn_error\", message: err.message }),\n      resolve,\n    );\n  });\n}\n","/**\n * `search_text` — built-in tool for coding agents.\n *\n * Literal text search across the project tree (recursive). Sensible\n * defaults:\n *\n *   - Skips forbidden directories (`.env`, `.git/`, `node_modules/`,\n *     `.theo/`) so the agent never wastes context on dependency soup\n *     or VCS internals.\n *   - Skips files larger than `maxFileSize` (default 1 MB) and binary\n *     files (null-byte detection on first 8 KB) so a megabyte of\n *     minified JS never blows up the result.\n *   - Caps total matches at `maxMatches` (default 100) — the agent\n *     should refine the query if it gets close to the cap.\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, matches: Array<{ file, line, preview }>, truncated, totalMatches }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'not_found' }`\n *\n * Implementation note: this is a plain JS recursive walk. For very\n * large repos a future iteration can shell out to `rg` (ripgrep) when\n * present, but the JS path stays as the dependency-free fallback.\n */\n\nimport type { Dirent } from \"node:fs\";\nimport { readdir, readFile } from \"node:fs/promises\";\nimport { join, relative as relativePath } from \"node:path\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\nconst DEFAULT_MAX_MATCHES = 100;\nconst DEFAULT_MAX_FILE_SIZE = 1024 * 1024; // 1 MB\nconst BINARY_PROBE_BYTES = 8 * 1024;\nconst PREVIEW_MAX = 200;\n\nexport interface CreateSearchTextToolOptions {\n  projectRoot: string;\n  /** Cap on total matches returned. Default 100. */\n  maxMatches?: number;\n  /** Skip files larger than this (bytes). Default 1 MB. */\n  maxFileSize?: number;\n}\n\ninterface Match {\n  file: string;\n  line: number;\n  preview: string;\n}\n\nexport function createSearchTextTool(opts: CreateSearchTextToolOptions): CustomTool {\n  const {\n    projectRoot,\n    maxMatches = DEFAULT_MAX_MATCHES,\n    maxFileSize = DEFAULT_MAX_FILE_SIZE,\n  } = opts;\n\n  return defineTool({\n    name: \"search_text\",\n    description:\n      `Search the project tree for a literal text query. Skips sensitive ` +\n      `dirs (.env/.git/node_modules/.theo), binary files, and files over ` +\n      `1 MB. Returns up to ${String(maxMatches)} matches as { file, line, preview }. ` +\n      `Use 'path' to scope the search to a subdirectory.`,\n    inputSchema: z.object({\n      query: z.string().min(1).describe(\"Literal text to search for. Case-sensitive.\"),\n      path: z\n        .string()\n        .optional()\n        .describe(\"Optional project-relative directory to scope the search.\"),\n    }),\n    handler: async ({ query, path }) => {\n      const scope = resolveSearchScope(path, projectRoot);\n      if (\"error\" in scope) return scope.error;\n      const state: SearchState = {\n        matches: [],\n        totalMatches: 0,\n        truncated: false,\n        query,\n        maxMatches,\n        maxFileSize,\n        projectRoot,\n      };\n      await walk(scope.scopeAbs, state);\n      return JSON.stringify({\n        ok: true,\n        matches: state.matches,\n        truncated: state.truncated,\n        totalMatches: state.totalMatches,\n      });\n    },\n  });\n}\n\ninterface SearchState {\n  matches: Match[];\n  totalMatches: number;\n  truncated: boolean;\n  query: string;\n  maxMatches: number;\n  maxFileSize: number;\n  projectRoot: string;\n}\n\nfunction resolveSearchScope(\n  path: string | undefined,\n  projectRoot: string,\n): { scopeAbs: string } | { error: string } {\n  const scopeRel = path === undefined || path === \"\" || path === \".\" ? \".\" : path;\n  try {\n    const scopeAbs = scopeRel === \".\" ? projectRoot : safePathJoin(projectRoot, scopeRel);\n    assertNoSymlinkEscape(scopeAbs, projectRoot);\n    return { scopeAbs };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function handleEntry(entry: Dirent, absDir: string, state: SearchState): Promise<void> {\n  const entryAbs = join(absDir, entry.name);\n  const entryRel = relativePath(state.projectRoot, entryAbs);\n  if (isForbiddenPath(entryRel)) return;\n  if (entry.isDirectory()) {\n    await walk(entryAbs, state);\n    return;\n  }\n  if (entry.isFile()) await scanFile(entryAbs, entryRel, state);\n}\n\nasync function walk(absDir: string, state: SearchState): Promise<void> {\n  if (state.truncated) return;\n  const entries = await readEntriesQuiet(absDir);\n  if (entries === null) return;\n  for (const entry of entries) {\n    if (state.truncated) return;\n    await handleEntry(entry, absDir, state);\n  }\n}\n\nasync function readEntriesQuiet(absDir: string): Promise<Dirent[] | null> {\n  try {\n    return await readdir(absDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n}\n\nasync function readBufferQuiet(absPath: string): Promise<Buffer | null> {\n  try {\n    return await readFile(absPath);\n  } catch {\n    return null;\n  }\n}\n\nfunction isBinaryBuffer(buffer: Buffer): boolean {\n  const probeEnd = Math.min(buffer.length, BINARY_PROBE_BYTES);\n  for (let i = 0; i < probeEnd; i += 1) {\n    if (buffer[i] === 0) return true;\n  }\n  return false;\n}\n\nfunction recordMatch(state: SearchState, file: string, line: number, lineText: string): boolean {\n  state.totalMatches += 1;\n  if (state.matches.length < state.maxMatches) {\n    state.matches.push({\n      file,\n      line,\n      preview: lineText.length > PREVIEW_MAX ? `${lineText.slice(0, PREVIEW_MAX)}…` : lineText,\n    });\n    return true;\n  }\n  state.truncated = true;\n  return false;\n}\n\nasync function scanFile(absPath: string, relPath: string, state: SearchState): Promise<void> {\n  const buffer = await readBufferQuiet(absPath);\n  if (buffer === null || buffer.length > state.maxFileSize) return;\n  if (isBinaryBuffer(buffer)) return;\n  const lines = buffer.toString(\"utf-8\").split(\"\\n\");\n  for (let i = 0; i < lines.length; i += 1) {\n    const line = lines[i]!;\n    if (!line.includes(state.query)) continue;\n    if (!recordMatch(state, relPath, i + 1, line)) return;\n  }\n}\n","/**\n * `shell_exec` — built-in tool for coding agents.\n *\n * Executes a shell command via `/bin/sh -c` with a configurable timeout\n * and output size cap.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, stdout, stderr, exit_code }`\n *   - `{ ok: false, error: 'timeout' | 'exec_failed' }`\n */\n\nimport { spawn } from \"node:child_process\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport { armTimeoutKill, attachChildSettlers } from \"./subprocess.js\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst MAX_TIMEOUT_MS = 300_000; // 5 minutes hard ceiling\nconst MAX_OUTPUT_BYTES = 5 * 1024 * 1024; // 5 MB\n\nexport interface CreateShellToolOptions {\n  /** Absolute path to the project root. Commands execute in this cwd. */\n  projectRoot: string;\n  /** Default timeout in ms. Capped at 300s. */\n  defaultTimeoutMs?: number;\n}\n\nexport function createShellTool(opts: CreateShellToolOptions): CustomTool {\n  const { projectRoot, defaultTimeoutMs = DEFAULT_TIMEOUT_MS } = opts;\n\n  return defineTool({\n    name: \"shell_exec\",\n    description:\n      \"Execute a shell command in the project directory. Returns stdout, \" +\n      \"stderr, and exit code. Default timeout 30s, max 5 minutes. Output \" +\n      \"capped at 5 MB. Returns { ok, stdout, stderr, exit_code } or \" +\n      \"{ ok: false, error }.\",\n    inputSchema: z.object({\n      command: z.string().min(1).describe(\"Shell command to execute.\"),\n      timeout_ms: z\n        .number()\n        .int()\n        .positive()\n        .optional()\n        .describe(\"Timeout in milliseconds (default 30000, max 300000).\"),\n    }),\n    handler: async ({ command, timeout_ms }) => {\n      const timeoutMs = Math.min(timeout_ms ?? defaultTimeoutMs, MAX_TIMEOUT_MS);\n      const result = await runShell(projectRoot, command, timeoutMs);\n      return result;\n    },\n  });\n}\n\ntype ShellResult =\n  | { kind: \"ok\"; stdout: string; stderr: string; exitCode: number | null }\n  | { kind: \"timeout\" }\n  | { kind: \"error\"; message: string };\n\nfunction runShell(cwd: string, command: string, timeoutMs: number): Promise<string> {\n  return new Promise((resolve) => {\n    const child = spawn(\"/bin/sh\", [\"-c\", command], {\n      cwd,\n      detached: true,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n    let stderrBytes = 0;\n    let _truncated = false;\n\n    const gate = armTimeoutKill<ShellResult>(\n      child,\n      timeoutMs,\n      () => ({ kind: \"timeout\" }),\n      (result) => resolve(formatResult(result, timeoutMs)),\n    );\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      if (stdoutBytes >= MAX_OUTPUT_BYTES) {\n        _truncated = true;\n        return;\n      }\n      const remaining = MAX_OUTPUT_BYTES - stdoutBytes;\n      if (chunk.length > remaining) {\n        stdoutChunks.push(chunk.subarray(0, remaining));\n        stdoutBytes = MAX_OUTPUT_BYTES;\n        _truncated = true;\n      } else {\n        stdoutChunks.push(chunk);\n        stdoutBytes += chunk.length;\n      }\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      if (stderrBytes >= MAX_OUTPUT_BYTES) return;\n      const remaining = MAX_OUTPUT_BYTES - stderrBytes;\n      if (chunk.length > remaining) {\n        stderrChunks.push(chunk.subarray(0, remaining));\n        stderrBytes = MAX_OUTPUT_BYTES;\n      } else {\n        stderrChunks.push(chunk);\n        stderrBytes += chunk.length;\n      }\n    });\n\n    attachChildSettlers<ShellResult>(\n      child,\n      gate,\n      (code) => ({\n        kind: \"ok\",\n        stdout: Buffer.concat(stdoutChunks).toString(\"utf-8\"),\n        stderr: Buffer.concat(stderrChunks).toString(\"utf-8\"),\n        exitCode: code,\n      }),\n      (err) => ({ kind: \"error\", message: err.message }),\n      (result) => resolve(formatResult(result, timeoutMs)),\n    );\n  });\n}\n\nfunction formatResult(result: ShellResult, timeoutMs: number): string {\n  if (result.kind === \"timeout\") {\n    return JSON.stringify({ ok: false, error: \"timeout\", timeout_ms: timeoutMs });\n  }\n  if (result.kind === \"error\") {\n    return JSON.stringify({ ok: false, error: \"exec_failed\", message: result.message });\n  }\n  return JSON.stringify({\n    ok: true,\n    stdout: result.stdout,\n    stderr: result.stderr,\n    exit_code: result.exitCode,\n  });\n}\n","/**\n * `todolist` — in-session task tracking for multi-step work.\n *\n * The agent uses this to plan complex tasks and track progress.\n * Inspired by OpenCode's todo.ts and Claude Code's TodoWrite.\n *\n * Actions:\n *   - add(title)         → add a new todo item\n *   - complete(id)       → mark an item done\n *   - remove(id)         → remove an item\n *   - list()             → show all items with status\n *   - clear_completed()  → remove all done items\n */\n\nexport interface TodoItem {\n  id: string;\n  title: string;\n  status: \"pending\" | \"in_progress\" | \"done\";\n  createdAt: number;\n  completedAt?: number;\n}\n\nexport interface TodolistTool {\n  name: string;\n  description: string;\n  inputSchema: unknown;\n  handler: (input: TodoInput) => string;\n  /** Expose items for testing. */\n  getItems: () => TodoItem[];\n}\n\ntype TodoInput =\n  | { action: \"add\"; title: string }\n  | { action: \"complete\"; id: string }\n  | { action: \"in_progress\"; id: string }\n  | { action: \"remove\"; id: string }\n  | { action: \"list\" }\n  | { action: \"clear_completed\" };\n\nfunction ok(data: Record<string, unknown>): string {\n  return JSON.stringify({ ok: true, ...data });\n}\n\nfunction fail(data: Record<string, unknown>): string {\n  return JSON.stringify({ ok: false, ...data });\n}\n\nfunction requireId(input: TodoInput): string | null {\n  if (!(\"id\" in input) || !input.id) return null;\n  return input.id;\n}\n\nexport function createTodolistTool(): TodolistTool {\n  const items: TodoItem[] = [];\n  let nextId = 1;\n\n  function genId(): string {\n    return `todo-${nextId++}`;\n  }\n\n  function findById(id: string): TodoItem | undefined {\n    return items.find((i) => i.id === id);\n  }\n\n  function formatList(): string {\n    if (items.length === 0) return \"No tasks. Use action 'add' to create one.\";\n    const lines = items.map((item) => {\n      const icon = item.status === \"done\" ? \"[x]\" : item.status === \"in_progress\" ? \"[>]\" : \"[ ]\";\n      return `${icon} ${item.id}: ${item.title}`;\n    });\n    const pending = items.filter((i) => i.status === \"pending\").length;\n    const inProg = items.filter((i) => i.status === \"in_progress\").length;\n    const done = items.filter((i) => i.status === \"done\").length;\n    lines.push(`\\n${done}/${items.length} done | ${inProg} in progress | ${pending} pending`);\n    return lines.join(\"\\n\");\n  }\n\n  function handleAdd(input: TodoInput): string {\n    if (!(\"title\" in input) || !input.title) return fail({ error: \"missing_title\" });\n    const item: TodoItem = {\n      id: genId(),\n      title: input.title,\n      status: \"pending\",\n      createdAt: Date.now(),\n    };\n    items.push(item);\n    return ok({ id: item.id, message: `Added: ${item.title}`, items_summary: formatList() });\n  }\n\n  function handleSetStatus(input: TodoInput, status: \"in_progress\" | \"done\"): string {\n    const id = requireId(input);\n    if (!id) return fail({ error: \"missing_id\" });\n    const item = findById(id);\n    if (!item) return fail({ error: \"not_found\", id });\n    item.status = status;\n    if (status === \"done\") item.completedAt = Date.now();\n    const verb = status === \"done\" ? \"Completed\" : \"Started\";\n    return ok({ message: `${verb}: ${item.title}`, items_summary: formatList() });\n  }\n\n  function handleRemove(input: TodoInput): string {\n    const id = requireId(input);\n    if (!id) return fail({ error: \"missing_id\" });\n    const idx = items.findIndex((i) => i.id === id);\n    if (idx === -1) return fail({ error: \"not_found\", id });\n    const removed = items.splice(idx, 1)[0]!;\n    return ok({ message: `Removed: ${removed.title}`, items_summary: formatList() });\n  }\n\n  function handleClearCompleted(): string {\n    const before = items.length;\n    const kept = items.filter((i) => i.status !== \"done\");\n    items.length = 0;\n    items.push(...kept);\n    return ok({\n      message: `Cleared ${before - items.length} completed items`,\n      items_summary: formatList(),\n    });\n  }\n\n  const actions: Record<string, (input: TodoInput) => string> = {\n    add: handleAdd,\n    in_progress: (input) => handleSetStatus(input, \"in_progress\"),\n    complete: (input) => handleSetStatus(input, \"done\"),\n    remove: handleRemove,\n    list: () => ok({ items_summary: formatList() }),\n    clear_completed: handleClearCompleted,\n  };\n\n  return {\n    name: \"todolist\",\n    description:\n      \"Track multi-step task progress. \" +\n      \"Actions: 'add' (create task with title), 'complete' (mark done by id), \" +\n      \"'in_progress' (mark started by id), 'remove' (delete by id), \" +\n      \"'list' (show all), 'clear_completed' (remove done items). \" +\n      \"Returns { ok, items_summary }.\",\n    inputSchema: {\n      type: \"object\" as const,\n      properties: {\n        action: {\n          type: \"string\",\n          enum: [\"add\", \"complete\", \"in_progress\", \"remove\", \"list\", \"clear_completed\"],\n          description: \"The action to perform.\",\n        },\n        title: {\n          type: \"string\",\n          description: \"Title for a new todo item (required for 'add').\",\n        },\n        id: {\n          type: \"string\",\n          description: \"ID of the todo item (required for 'complete', 'in_progress', 'remove').\",\n        },\n      },\n      required: [\"action\"],\n    },\n    handler: (input: TodoInput): string => {\n      const action = actions[input.action];\n      if (!action) return fail({ error: \"invalid_action\" });\n      return action(input);\n    },\n    getItems: () => [...items],\n  };\n}\n","/**\n * `truncateOutput` — utility for truncating large tool output.\n *\n * When output exceeds `maxBytes`, writes the full content to a temp file\n * and returns a truncated version with a reference to the full output.\n *\n * Return shape:\n *   - `{ content: string, truncated: false }`\n *   - `{ content: string, truncated: true, overflowPath: string }`\n */\n\nimport { mkdirSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nexport interface TruncationOptions {\n  /** Maximum output size in bytes before truncation. Default: 30_000. */\n  maxBytes?: number;\n  /** Directory for overflow files. Default: \".theocode/tool-output\". */\n  outputDir?: string;\n}\n\nexport interface TruncationResult {\n  /** The (possibly truncated) content. */\n  content: string;\n  /** Whether the output was truncated. */\n  truncated: boolean;\n  /** Path to the full output file, present only when truncated. */\n  overflowPath?: string;\n}\n\nexport function truncateOutput(output: string, opts?: TruncationOptions): TruncationResult {\n  const maxBytes = opts?.maxBytes ?? 30_000;\n  const outputDir = opts?.outputDir ?? \".theocode/tool-output\";\n\n  // EC-3: strict > comparison — exactly at limit is NOT truncated\n  const byteLength = Buffer.byteLength(output, \"utf-8\");\n  if (byteLength <= maxBytes) {\n    return { content: output, truncated: false };\n  }\n\n  // Write full output to overflow file\n  mkdirSync(outputDir, { recursive: true });\n  const filename = `overflow-${Date.now()}.txt`;\n  const overflowPath = join(outputDir, filename);\n  writeFileSync(overflowPath, output, \"utf-8\");\n\n  // Truncate to maxBytes (approximate — cut at byte boundary then trim to valid UTF-8)\n  const truncated = Buffer.from(output, \"utf-8\").subarray(0, maxBytes).toString(\"utf-8\");\n  const trailer = `\\n\\n[Output truncated. Full output: ${overflowPath}]`;\n\n  return {\n    content: truncated + trailer,\n    truncated: true,\n    overflowPath,\n  };\n}\n","/**\n * `web_fetch` — built-in tool for coding agents.\n *\n * Fetches a URL via native `fetch()`. Rejects non-http(s) protocols.\n * Size-capped at 1 MB response body.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, content, status_code, content_type }`\n *   - `{ ok: false, error: 'invalid_url' | 'fetch_failed' |\n *        'timeout' | 'too_large' }`\n */\n\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst MAX_BODY_BYTES = 1 * 1024 * 1024; // 1 MB\n\nexport interface CreateWebFetchToolOptions {\n  /** Default timeout in ms. */\n  defaultTimeoutMs?: number;\n}\n\nexport function createWebFetchTool(opts?: CreateWebFetchToolOptions): CustomTool {\n  const defaultTimeoutMs = opts?.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  return defineTool({\n    name: \"web_fetch\",\n    description:\n      \"Fetch content from a URL via HTTP/HTTPS. Rejects non-http(s) URLs. \" +\n      \"Response body capped at 1 MB. Returns { ok, content, status_code } \" +\n      \"or { ok: false, error }.\",\n    inputSchema: z.object({\n      url: z.string().min(1).describe(\"URL to fetch (http or https only).\"),\n      timeout_ms: z\n        .number()\n        .int()\n        .positive()\n        .optional()\n        .describe(\"Timeout in milliseconds (default 30000).\"),\n    }),\n    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: fetch with guards\n    handler: async ({ url, timeout_ms }) => {\n      // Validate protocol\n      let parsed: URL;\n      try {\n        parsed = new URL(url);\n      } catch {\n        return JSON.stringify({ ok: false, error: \"invalid_url\", url });\n      }\n\n      if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n        return JSON.stringify({\n          ok: false,\n          error: \"invalid_url\",\n          url,\n          detail: \"only http and https protocols allowed\",\n        });\n      }\n\n      const timeoutMs = timeout_ms ?? defaultTimeoutMs;\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), timeoutMs);\n\n      try {\n        const response = await fetch(url, { signal: controller.signal });\n        clearTimeout(timer);\n\n        // Check content-length header before downloading\n        const contentLength = response.headers.get(\"content-length\");\n        if (contentLength && Number(contentLength) > MAX_BODY_BYTES) {\n          return JSON.stringify({\n            ok: false,\n            error: \"too_large\",\n            url,\n            size: Number(contentLength),\n            limit: MAX_BODY_BYTES,\n          });\n        }\n\n        const buffer = await response.arrayBuffer();\n        if (buffer.byteLength > MAX_BODY_BYTES) {\n          return JSON.stringify({\n            ok: false,\n            error: \"too_large\",\n            url,\n            size: buffer.byteLength,\n            limit: MAX_BODY_BYTES,\n          });\n        }\n\n        const content = new TextDecoder(\"utf-8\").decode(buffer);\n        const contentType = response.headers.get(\"content-type\") ?? undefined;\n\n        return JSON.stringify({\n          ok: true,\n          content,\n          status_code: response.status,\n          content_type: contentType,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        const e = err as { name?: string; message?: string };\n        if (e.name === \"AbortError\") {\n          return JSON.stringify({ ok: false, error: \"timeout\", url, timeout_ms: timeoutMs });\n        }\n        return JSON.stringify({\n          ok: false,\n          error: \"fetch_failed\",\n          url,\n          message: e.message ?? \"unknown\",\n        });\n      }\n    },\n  });\n}\n","/**\n * `web_search` — built-in tool for coding agents.\n *\n * Accepts a search callback via DIP (consumer provides the search\n * provider). The tool itself is provider-agnostic.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, results: Array<{ title, url, snippet }> }`\n *   - `{ ok: false, error: 'search_failed' | 'no_provider' }`\n */\n\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\n\nexport interface WebSearchResult {\n  title: string;\n  url: string;\n  snippet: string;\n}\n\nexport type WebSearchCallback = (query: string, maxResults: number) => Promise<WebSearchResult[]>;\n\nexport interface CreateWebSearchToolOptions {\n  /** Search provider callback — consumer injects the implementation. */\n  search: WebSearchCallback;\n  /** Default max results if not specified by the LLM. */\n  defaultMaxResults?: number;\n}\n\nexport function createWebSearchTool(opts: CreateWebSearchToolOptions): CustomTool {\n  const { search, defaultMaxResults = 5 } = opts;\n\n  return defineTool({\n    name: \"web_search\",\n    description:\n      \"Search the web for a query. Returns a list of results with title, \" +\n      \"URL, and snippet. The search provider is injected by the consumer. \" +\n      \"Returns { ok, results } or { ok: false, error }.\",\n    inputSchema: z.object({\n      query: z.string().min(1).describe(\"Search query.\"),\n      max_results: z\n        .number()\n        .int()\n        .positive()\n        .max(20)\n        .optional()\n        .describe(\"Maximum results to return (default 5, max 20).\"),\n    }),\n    handler: async ({ query, max_results }) => {\n      const maxResults = max_results ?? defaultMaxResults;\n\n      try {\n        const results = await search(query, maxResults);\n        return JSON.stringify({\n          ok: true,\n          results: results.slice(0, maxResults),\n          count: Math.min(results.length, maxResults),\n        });\n      } catch (err) {\n        const e = err as { message?: string };\n        return JSON.stringify({\n          ok: false,\n          error: \"search_failed\",\n          message: e.message ?? \"unknown\",\n        });\n      }\n    },\n  });\n}\n","/**\n * `write_file` — built-in tool for coding agents.\n *\n * Writes UTF-8 content to a project-relative path. Creates parent\n * directories recursively. Refuses binary-file overwrites, path\n * traversal, and sensitive paths.\n *\n * Return shape (always a JSON string):\n *   - `{ ok: true, path, bytes }` on success\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' |\n *        'binary_file' }` on refusal\n */\n\nimport { mkdir, open, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport type { CustomTool } from \"@theokit/sdk\";\n\nimport { defineTool } from \"@theokit/sdk\";\nimport { z } from \"zod\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"./internal/path-guard.js\";\n\n/** Byte window inspected for null bytes when deciding binary vs text. */\nconst BINARY_PROBE_BYTES = 8 * 1024;\n\nexport interface CreateWriteFileToolOptions {\n  /** Absolute path to the project root. Every write is gated against this boundary. */\n  projectRoot: string;\n}\n\nexport function createWriteFileTool(opts: CreateWriteFileToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"write_file\",\n    description:\n      \"Write UTF-8 content to a project-relative file. Creates parent \" +\n      \"directories recursively. Refuses paths that escape the project root, \" +\n      \"sensitive files (.env, .git/, node_modules/, .theo/, lock files), \" +\n      \"and binary-file overwrites. Returns { ok, path, bytes } or \" +\n      \"{ ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative file path.\"),\n      content: z.string().describe(\"UTF-8 content to write.\"),\n    }),\n    handler: async ({ path, content }) => {\n      if (isForbiddenPath(path)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n\n      let absolutePath: string;\n      try {\n        absolutePath = safePathJoin(projectRoot, path);\n        assertNoSymlinkEscape(absolutePath, projectRoot);\n      } catch (err) {\n        if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n          return JSON.stringify({ ok: false, error: \"path_traversal\", path });\n        }\n        throw err;\n      }\n\n      // Binary file guard: probe existing file for null bytes before overwriting\n      if (await isBinaryFile(absolutePath)) {\n        return JSON.stringify({ ok: false, error: \"binary_file\", path });\n      }\n\n      await mkdir(dirname(absolutePath), { recursive: true });\n      await writeFile(absolutePath, content, \"utf-8\");\n      const bytes = Buffer.byteLength(content, \"utf-8\");\n\n      return JSON.stringify({ ok: true, path, bytes });\n    },\n  });\n}\n\nasync function isBinaryFile(absolutePath: string): Promise<boolean> {\n  let handle: import(\"node:fs/promises\").FileHandle | undefined;\n  try {\n    handle = await open(absolutePath, \"r\");\n  } catch {\n    return false; // file doesn't exist yet — not binary\n  }\n  try {\n    const stat = await handle.stat();\n    const probeLen = Math.min(BINARY_PROBE_BYTES, Number(stat.size));\n    if (probeLen <= 0) return false;\n    const probe = Buffer.alloc(probeLen);\n    const { bytesRead } = await handle.read(probe, 0, probeLen, 0);\n    for (let i = 0; i < bytesRead; i += 1) {\n      if (probe[i] === 0) return true;\n    }\n    return false;\n  } finally {\n    await handle.close();\n  }\n}\n"]}