@theokit/sdk 1.5.0

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/zod/to-json-schema.ts","../src/define-tool.ts","../src/errors.ts","../src/internal/security/path-guard.ts","../src/tools/_path-scope.ts","../src/tools/_subprocess.ts","../src/tools/git-diff.ts","../src/tools/list-dir.ts","../src/tools/read-file.ts","../src/tools/run-vitest.ts","../src/tools/search-text.ts"],"names":["z","resolve","DEFAULT_TIMEOUT_MS","DEFAULT_MAX_STDOUT_BYTES","spawn","BINARY_PROBE_BYTES","join","relativePath","readdir"],"mappings":";;;;;;;;AA8BA,IAAM,UAAA,GAAa,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA;AAEhD,IAAI,qBAAA;AACJ,IAAI,iBAAA;AACJ,IAAI,aAAA,GAAgB,KAAA;AAQb,SAAS,aACd,MAAA,EACA,OAAA,GAA+B,EAAE,eAAA,EAAiB,OAAM,EAC/B;AACzB,EAAA,MAAM,MAAA,GAAS,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,MAAM,QAAA,GAAW,eAAe,MAAM,CAAA;AACtC,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AACnC,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GAIF;AACF;AAEA,SAAS,aAAA,CACP,QACA,OAAA,EACqC;AACrC,EAAA,IAAI,qBAAA,KAA0B,OAAO,OAAO,MAAA;AAC5C,EAAA,IAAIA,EAAAA;AACJ,EAAA,IAAI;AACF,IAAAA,EAAAA,GAAI,WAAW,KAAK,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,qBAAA,GAAwB,KAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAOA,EAAAA,CAAE,YAAA,KAAiB,UAAA,EAAY;AACxC,IAAA,qBAAA,GAAwB,KAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AAOA,EAAA,IAAI;AACF,IAAA,OAAOA,EAAAA,CAAE,YAAA,CAAa,MAAA,EAAQ,OAAO,CAAA;AAAA,EACvC,CAAA,CAAA,MAAQ;AACN,IAAA,qBAAA,GAAwB,KAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAA,EAA2D;AACjF,EAAA,IAAI,sBAAsB,MAAA,EAAW;AACnC,IAAA,OAAO,kBAAkB,MAAM,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,eAAe,OAAO,MAAA;AAC1B,EAAA,aAAA,GAAgB,IAAA;AAChB,EAAA,IAAI;AAGF,IAAA,MAAM,GAAA,GAAM,WAAW,oBAAoB,CAAA;AAI3C,IAAA,MAAM,EAAA,GACJ,OAAO,GAAA,CAAI,eAAA,KAAoB,UAAA,GAC3B,GAAA,CAAI,eAAA,GACJ,OAAO,GAAA,CAAI,OAAA,KAAY,UAAA,GACrB,GAAA,CAAI,OAAA,GACJ,KAAA,CAAA;AACR,IAAA,IAAI,EAAA,KAAO,QAAW,OAAO,KAAA,CAAA;AAC7B,IAAA,iBAAA,GAAoB,EAAA;AACpB,IAAA,OAAO,GAAG,MAAM,CAAA;AAAA,EAClB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;ACnEO,SAAS,WAA8B,IAAA,EAAqC;AAUjF,EAAA,MAAM,WAAA,GAAc,YAAA,CAAa,IAAA,CAAK,WAAA,EAAa;AAAA,IACjD,eAAA,EAAiB;AAAA,GAClB,CAAA;AACD,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,WAAA;AAAA,IACA,OAAA,EAAS,OAAO,KAAA,KAAoD;AAClE,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,CAAY,KAAA,CAAM,KAAK,CAAA;AAC3C,MAAA,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAM,CAAA;AAAA,IAClC;AAAA,GACF;AACF;;;ACeO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EACzB,IAAA,GAAe,mBAAA;AAAA,EACxB,WAAA;AAAA,EACA,IAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EAET,WAAA,CACE,OAAA,EACA,OAAA,GAMI,EAAC,EACL;AACA,IAAA,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI,MAAS,CAAA;AACjF,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,WAAA,IAAe,KAAA;AAC1C,IAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAW,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpD,IAAA,IAAI,OAAA,CAAQ,cAAA,KAAmB,MAAA,EAAW,IAAA,CAAK,iBAAiB,OAAA,CAAQ,cAAA;AACxE,IAAA,IAAI,OAAA,CAAQ,QAAA,KAAa,MAAA,EAAW,IAAA,CAAK,WAAW,OAAA,CAAQ,QAAA;AAAA,EAC9D;AACF,CAAA;AAuCO,IAAM,kBAAA,GAAN,cAAiC,iBAAA,CAAkB;AAAA,EACtC,IAAA,GAAe,oBAAA;AAAA,EAEjC,WAAA,CACE,OAAA,EACA,OAAA,GAAwE,EAAC,EACzE;AACA,IAAA,KAAA,CAAM,SAAS,EAAE,GAAG,OAAA,EAAS,WAAA,EAAa,OAAO,CAAA;AAAA,EACnD;AACF,CAAA;;;AC3HO,IAAM,kBAAA,GAAN,cAAiC,kBAAA,CAAmB;AAAA,EACvC,IAAA,GAAe,oBAAA;AAAA,EAEjC,WAAA,CAAY,OAAe,YAAA,EAAsB;AAC/C,IAAA,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAK,CAAA,QAAA,EAAM,YAAY,CAAA,CAAA,EAAI;AAAA,MAC1D,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACF,CAAA;AAYO,IAAM,kBAAA,GAAN,cAAiC,kBAAA,CAAmB;AAAA,EACvC,IAAA,GAAe,oBAAA;AAAA,EAEjC,YAAY,IAAA,EAAc;AACxB,IAAA,KAAA;AAAA,MACE,SAAS,IAAI,CAAA,qFAAA,CAAA;AAAA,MACb;AAAA,QACE,IAAA,EAAM;AAAA;AACR,KACF;AAAA,EACF;AACF,CAAA;AAWO,SAAS,YAAA,CAAa,SAAiB,KAAA,EAAyB;AACrE,EAAA,IAAI,SAAS,EAAA,EAAI;AACf,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AACA,EAAA,MAAM,YAAA,GAAe,QAAQ,IAAI,CAAA;AACjC,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAM,GAAG,KAAK,CAAA;AACrC,EAAA,IAAI,WAAW,YAAA,IAAgB,CAAC,OAAO,UAAA,CAAW,YAAA,GAAe,GAAG,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,kBAAA,CAAmB,KAAA,CAAM,IAAA,CAAK,GAAG,GAAG,MAAM,CAAA;AAAA,EACtD;AACA,EAAA,OAAO,MAAA;AACT;AAoBO,SAAS,qBAAA,CAAsB,MAAc,IAAA,EAAoB;AAEtE,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI;AACF,IAAA,YAAA,GAAe,aAAa,IAAI,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AAEN,IAAA,YAAA,GAAe,QAAQ,IAAI,CAAA;AAAA,EAC7B;AAQA,EAAA,MAAM,QAAA,GAAW,0BAA0B,IAAI,CAAA;AAC/C,EAAA,IAAI,aAAa,MAAA,EAAW;AAE5B,EAAA,IAAI,aAAa,YAAA,IAAgB,CAAC,SAAS,UAAA,CAAW,YAAA,GAAe,GAAG,CAAA,EAAG;AACzE,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,QAAA,EAAW,IAAI,IAAI,QAAQ,CAAA;AAAA,EAC1D;AACF;AAUA,SAAS,0BAA0B,IAAA,EAAkC;AAEnE,EAAA,IAAI;AACF,IAAA,OAAO,aAAa,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAc,UAAU,IAAI,CAAA;AAClC,IAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,MAAA,MAAM,MAAA,GAAS,aAAa,IAAI,CAAA;AAGhC,MAAA,MAAM,UAAA,GAAa,yBAAA,CAA0B,OAAA,CAAQ,IAAI,CAAC,CAAA;AAC1D,MAAA,MAAM,UAAA,GAAa,UAAA,IAAc,OAAA,CAAQ,IAAI,CAAA;AAC7C,MAAA,OAAO,OAAA,CAAQ,YAAY,MAAM,CAAA;AAAA,IACnC;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,IAAI,MAAA,GAAS,QAAQ,IAAI,CAAA;AACzB,EAAA,IAAI,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACrC,EAAA,OAAO,MAAA,KAAW,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,aAAa,MAAM,CAAA;AAEhC,MAAA,OAAO,OAAA,CAAQ,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,MAAM,EAAE,MAAM,CAAA;AAC1C,MAAA,MAAA,GAAS,QAAQ,MAAM,CAAA;AAAA,IACzB;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,UAAA,uBAAiB,GAAA,CAAI,CAAC,kBAAkB,mBAAA,EAAqB,WAAA,EAAa,WAAW,CAAC,CAAA;AAuBrF,SAAS,gBAAgB,KAAA,EAAwB;AAEtD,EAAA,MAAM,UAAA,GAAa,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,SAAS,EAAE,CAAA;AAChE,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAEpC,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AACjE,EAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAElC,EAAA,MAAM,KAAA,GAAQ,SAAS,CAAC,CAAA;AAExB,EAAA,IAAI,KAAA,KAAU,gBAAgB,OAAO,KAAA;AACrC,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,IAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,IAAA;AAEnC,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,IAAA;AAC7B,EAAA,IAAI,KAAA,KAAU,gBAAgB,OAAO,IAAA;AACrC,EAAA,IAAI,KAAA,KAAU,SAAS,OAAO,IAAA;AAE9B,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AAC7C,EAAA,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA,EAAG,OAAO,IAAA;AAErC,EAAA,OAAO,KAAA;AACT;;;AC9MO,SAAS,cAAA,CAAe,MAA0B,WAAA,EAAoC;AAC3F,EAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,EAAA,EAAI,OAAO,IAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,WAAA,EAAa,IAAI,CAAA;AAC1C,IAAA,qBAAA,CAAsB,KAAK,WAAW,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACNA,SAAS,iBAAiB,KAAA,EAAmC;AAC3D,EAAA,IAAI,IAAA,GAAO,KAAA;AACX,EAAA,OAAO;AAAA,IACL,SAAS,MAAM,IAAA;AAAA,IACf,IAAA,EAAM,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAA,GAAO,IAAA;AACP,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,GACF;AACF;AAMO,SAAS,cAAA,CACd,KAAA,EACA,SAAA,EACA,SAAA,EACAC,QAAAA,EACY;AACZ,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,IAAA,IAAA,CAAK,KAAK,MAAM;AACd,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,KAAA,CAAM,GAAA,IAAO,IAAI,SAAS,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAAA,QAAAA,CAAQ,WAAW,CAAA;AAAA,IACrB,CAAC,CAAA;AAAA,EACH,GAAG,SAAS,CAAA;AACZ,EAAA,MAAM,IAAA,GAAO,iBAAiB,KAAK,CAAA;AACnC,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,mBAAA,CACd,KAAA,EACA,IAAA,EACA,OAAA,EACA,SACAA,QAAAA,EACM;AACN,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,IAAA,CAAK,KAAK,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAC,CAAA;AAAA,EACxC,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AACzB,IAAA,IAAA,CAAK,KAAK,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,GAAG,CAAC,CAAC,CAAA;AAAA,EACvC,CAAC,CAAA;AACH;;;ACjDA,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,wBAAA,GAA2B,IAAI,IAAA,GAAO,IAAA;AAQrC,SAAS,kBAAkB,IAAA,EAA4C;AAC5E,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,SAAA,GAAY,kBAAA;AAAA,IACZ,cAAA,GAAiB;AAAA,GACnB,GAAI,IAAA;AAEJ,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,qPAAA;AAAA,IAIF,WAAA,EAAa,EAAE,MAAA,CAAO;AAAA,MACpB,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,8CAA8C,CAAA;AAAA,MACnF,QAAQ,CAAA,CACL,OAAA,GACA,QAAA,EAAS,CACT,SAAS,kEAAkE;AAAA,KAC/E,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAM,QAAO,KAAM;AACnC,MAAA,IAAI,CAAC,UAAA,CAAW,IAAA,CAAK,WAAA,EAAa,MAAM,CAAC,CAAA,EAAG;AAC1C,QAAA,OAAO,KAAK,SAAA,CAAU,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,cAAc,CAAA;AAAA,MAC1D;AAEA,MAAA,MAAM,UAAA,GAAa,cAAA,CAAe,IAAA,EAAM,WAAW,CAAA;AACnD,MAAA,IAAI,UAAA,KAAe,MAAM,OAAO,UAAA;AAEhC,MAAA,MAAM,IAAA,GAAO,aAAA,CAAc,MAAA,EAAQ,IAAI,CAAA;AACvC,MAAA,MAAM,SAAS,MAAM,aAAA,CAAc,WAAA,EAAa,IAAA,EAAM,WAAW,cAAc,CAAA;AAC/E,MAAA,OAAO,eAAA,CAAgB,QAAQ,SAAS,CAAA;AAAA,IAC1C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,aAAA,CAAc,QAA6B,IAAA,EAAoC;AACtF,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,EAAQ,YAAY,CAAA;AAClC,EAAA,IAAI,MAAA,KAAW,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,UAAU,CAAA;AACzC,EAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,IAAI,IAAA,CAAK,IAAA,CAAK,MAAM,IAAI,CAAA;AAC3D,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,eAAA,CAAgB,QAA0B,SAAA,EAA2B;AAC5E,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,SAAA,EAAW,WAAW,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AAC3B,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,YAAA,EAAc,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,CAAA;AAAA,EACjF;AACA,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,CAAA;AACtF;AAOA,SAAS,aAAA,CACP,GAAA,EACA,IAAA,EACA,SAAA,EACA,cAAA,EAC2B;AAC3B,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,KAAY;AAE9B,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AAC3F,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,IAAI,WAAA,GAAc,CAAA;AAClB,IAAA,IAAI,SAAA,GAAY,KAAA;AAEhB,IAAA,MAAM,IAAA,GAAO,cAAA;AAAA,MACX,KAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAU,CAAA;AAAA,MACzBA;AAAA,KACF;AAEA,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,IAAI,eAAe,cAAA,EAAgB;AACjC,QAAA,SAAA,GAAY,IAAA;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAY,cAAA,GAAiB,WAAA;AACnC,MAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,QAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AAC9C,QAAA,WAAA,GAAc,cAAA;AACd,QAAA,SAAA,GAAY,IAAA;AAAA,MACd,CAAA,MAAO;AACL,QAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AACvB,QAAA,WAAA,IAAe,KAAA,CAAM,MAAA;AAAA,MACvB;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,IACzB,CAAC,CAAA;AAED,IAAA,mBAAA;AAAA,MACE,KAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,KAAS;AACR,QAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAC3D,QAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAC3D,QAAA,OAAO,IAAA,KAAS,CAAA,GAAI,EAAE,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAU,GAAI,EAAE,IAAA,EAAM,OAAA,EAAS,MAAA,EAAO;AAAA,MAClF,CAAA;AAAA,MACA,CAAC,GAAA,MAAS,EAAE,MAAM,OAAA,EAAS,MAAA,EAAQ,IAAI,OAAA,EAAQ,CAAA;AAAA,MAC/CA;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AClHA,IAAM,mBAAA,GAAsB,GAAA;AASrB,SAAS,kBAAkB,IAAA,EAA4C;AAC5E,EAAA,MAAM,EAAE,WAAA,EAAa,GAAA,GAAM,mBAAA,EAAoB,GAAI,IAAA;AAEnD,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EACE,CAAA,+LAAA,EAGM,MAAA,CAAO,GAAG,CAAC,CAAA,2DAAA,CAAA;AAAA,IACnB,WAAA,EAAaD,EAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,oDAAoD;AAAA,KACtF,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,MAAM,QAAA,GAAW,IAAA,KAAS,EAAA,IAAM,IAAA,KAAS,MAAM,GAAA,GAAM,IAAA;AACrD,MAAA,IAAI,QAAA,KAAa,GAAA,IAAO,eAAA,CAAgB,QAAQ,CAAA,EAAG;AACjD,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,QAAA,EAAU,WAAA,EAAa,IAAI,CAAA;AAC/D,MAAA,IAAI,OAAA,IAAW,QAAA,EAAU,OAAO,QAAA,CAAS,KAAA;AACzC,MAAA,MAAM,UAAA,GAAa,MAAM,WAAA,CAAY,QAAA,CAAS,cAAc,IAAI,CAAA;AAChE,MAAA,IAAI,OAAA,IAAW,UAAA,EAAY,OAAO,UAAA,CAAW,KAAA;AAC7C,MAAA,OAAO,aAAA,CAAc,UAAA,CAAW,OAAA,EAAS,GAAG,CAAA;AAAA,IAC9C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,kBAAA,CACP,QAAA,EACA,WAAA,EACA,YAAA,EAC8C;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,eAAe,QAAA,KAAa,GAAA,GAAM,WAAA,GAAc,YAAA,CAAa,aAAa,QAAQ,CAAA;AACxF,IAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAC/C,IAAA,OAAO,EAAE,YAAA,EAAa;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,CAAA,EAAE;AAAA,IAC7F;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CACb,cACA,YAAA,EACoD;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,cAAc,EAAE,aAAA,EAAe,MAAM,CAAA;AACnE,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,IAAI,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,SAAS,SAAA,EAAW;AAC/C,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,IAAA,EAAM,YAAA,EAAc,CAAA,EAAE;AAAA,IACxF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,SAAS,aAAA,CAAc,SAAmB,GAAA,EAAqB;AAC7D,EAAA,MAAM,aAAa,OAAA,CAAQ,MAAA;AAC3B,EAAA,MAAM,YAAY,UAAA,GAAa,GAAA;AAC/B,EAAA,MAAM,OAAA,GAAU,QAAQ,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChD,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,IAAA,EAAM,CAAA,CAAE,WAAA,EAAY,GAAK,WAAA,GAAyB;AAAA,GACpD,CAAE,CAAA;AACF,EAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,OAAA,EAAS,SAAA,EAAW,YAAY,CAAA;AACpE;ACtEA,IAAM,aAAA,GAAgB,IAAI,IAAA,GAAO,IAAA;AAGjC,IAAM,qBAAqB,CAAA,GAAI,IAAA;AAOxB,SAAS,mBAAmB,IAAA,EAA6C;AAC9E,EAAA,MAAM,EAAE,aAAY,GAAI,IAAA;AAExB,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,+RAAA;AAAA,IAKF,WAAA,EAAaA,EAAE,MAAA,CAAO;AAAA,MACpB,IAAA,EAAMA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6BAA6B;AAAA,KAC/D,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,IAAI,eAAA,CAAgB,IAAI,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,IAAA,EAAM,WAAW,CAAA;AAClD,MAAA,IAAI,OAAA,IAAW,QAAA,EAAU,OAAO,QAAA,CAAS,KAAA;AACzC,MAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,QAAA,CAAS,cAAc,IAAI,CAAA;AAC/D,MAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAA,CAAY,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,MAC9C,CAAA,SAAE;AACA,QAAA,MAAM,MAAA,CAAO,OAAO,KAAA,EAAM;AAAA,MAC5B;AAAA,IACF;AAAA,GACD,CAAA;AACH;AAEA,SAAS,eAAA,CACP,MACA,WAAA,EAC8C;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,YAAA,CAAa,WAAA,EAAa,IAAI,CAAA;AACnD,IAAA,qBAAA,CAAsB,cAAc,WAAW,CAAA;AAC/C,IAAA,OAAO,EAAE,YAAA,EAAa;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,CAAA,EAAE;AAAA,IAC/E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,cAAA,CACb,cACA,IAAA,EACqD;AACrD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,YAAA,EAAc,GAAG,CAAA;AAC3C,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EAClB,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACvB,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,IAAA,EAAM,CAAA,EAAE;AAAA,IAC1E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CAAY,QAAoB,IAAA,EAA+B;AAC5E,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,IAAA,EAAK;AAC/B,EAAA,IAAI,IAAA,CAAK,OAAO,aAAA,EAAe;AAC7B,IAAA,OAAO,KAAK,SAAA,CAAU;AAAA,MACpB,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO,WAAA;AAAA,MACP,IAAA;AAAA,MACA,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,IAAI,MAAM,aAAA,CAAc,MAAA,EAAQ,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG;AAClD,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,aAAA,EAAe,IAAA,EAAM,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,EAClF;AACA,EAAA,MAAM,UAAU,MAAM,MAAA,CAAO,SAAS,EAAE,QAAA,EAAU,SAAS,CAAA;AAC3D,EAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,MAAM,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAC9D;AAEA,eAAe,aAAA,CAAc,QAAoB,IAAA,EAAgC;AAC/E,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,IAAI,CAAA;AAClD,EAAA,IAAI,QAAA,IAAY,GAAG,OAAO,KAAA;AAC1B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AACnC,EAAA,MAAM,EAAE,WAAU,GAAI,MAAM,OAAO,IAAA,CAAK,KAAA,EAAO,CAAA,EAAG,QAAA,EAAU,CAAC,CAAA;AAC7D,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,EAAW,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,EAC7B;AACA,EAAA,OAAO,KAAA;AACT;AC1GA,IAAME,mBAAAA,GAAqB,IAAA;AAC3B,IAAMC,yBAAAA,GAA2B,KAAK,IAAA,GAAO,IAAA;AAetC,SAAS,oBAAoB,IAAA,EAA8C;AAChF,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,SAAA,GAAYD,mBAAAA;AAAA,IACZ,cAAA,GAAiBC;AAAA,GACnB,GAAI,IAAA;AAEJ,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,qOAAA;AAAA,IAIF,WAAA,EAAaH,EAAE,MAAA,CAAO;AAAA,MACpB,MAAMA,CAAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,0DAA0D;AAAA,KACvE,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,MAAA,MAAM,UAAA,GAAa,mBAAA,CAAoB,IAAA,EAAM,WAAW,CAAA;AACxD,MAAA,IAAI,UAAA,KAAe,MAAM,OAAO,UAAA;AAEhC,MAAA,MAAM,IAAA,GAAO,CAAC,cAAA,EAAgB,QAAA,EAAU,OAAO,iBAAiB,CAAA;AAChE,MAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,EAAA,EAAI,IAAA,CAAK,KAAK,IAAI,CAAA;AAErD,MAAA,MAAM,SAAS,MAAM,UAAA,CAAW,aAAa,KAAA,EAAO,IAAA,EAAM,WAAW,cAAc,CAAA;AACnF,MAAA,OAAO,kBAAA,CAAmB,QAAQ,SAAS,CAAA;AAAA,IAC7C;AAAA,GACD,CAAA;AACH;AAEA,SAAS,mBAAA,CAAoB,MAA0B,WAAA,EAAoC;AACzF,EAAA,IAAI,SAAS,MAAA,IAAa,IAAA,KAAS,EAAA,IAAM,eAAA,CAAgB,IAAI,CAAA,EAAG;AAC9D,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,gBAAA,EAAkB,MAAM,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,cAAA,CAAe,MAAM,WAAW,CAAA;AACzC;AAEA,SAAS,kBAAA,CAAmB,QAAuB,SAAA,EAA2B;AAC5E,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,OAAO,IAAA,CAAK,UAAU,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,SAAA,EAAW,WAAW,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,aAAA,EAAe;AACjC,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,WAAA,EAAa,MAAA,EAAQ,MAAA,CAAO,OAAA,EAAS,CAAA;AAAA,EACjF;AACA,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,MAAA,CAAO,MAAM,CAAA;AACjD,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,OAAO,KAAK,SAAA,CAAU;AAAA,MACpB,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO,oBAAA;AAAA,MACP,aAAA,EAAe,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,GAAG,GAAG;AAAA,KAC1C,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAK,SAAA,CAAU,EAAE,EAAA,EAAI,IAAA,EAAM,SAAS,CAAA;AAC7C;AAUO,SAAS,oBAAoB,MAAA,EAAyB;AAC3D,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA;AAClC,EAAA,KAAA,IAAS,IAAI,KAAA,CAAM,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,CAAC,CAAA,CAAG,IAAA,EAAK;AAC5B,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACvB,IAAA,IAAI,KAAK,CAAC,CAAA,KAAM,OAAO,IAAA,CAAK,CAAC,MAAM,GAAA,EAAK;AACxC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,YAAA,CAAa,MAAA,EAAkB,KAAA,EAAe,OAAA,EAAiB,GAAA,EAAqB;AAC3F,EAAA,IAAI,OAAA,IAAW,KAAK,OAAO,OAAA;AAC3B,EAAA,MAAM,YAAY,GAAA,GAAM,OAAA;AACxB,EAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,IAAA,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,SAAS,CAAC,CAAA;AACxC,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AACjB,EAAA,OAAO,UAAU,KAAA,CAAM,MAAA;AACzB;AAOA,SAAS,UAAA,CACP,GAAA,EACA,OAAA,EACA,IAAA,EACA,WACA,cAAA,EACwB;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACC,QAAAA,KAAY;AAC9B,IAAA,MAAM,KAAA,GAAQG,KAAAA,CAAM,OAAA,EAAS,IAAA,EAAM;AAAA,MACjC,GAAA;AAAA,MACA,QAAA,EAAU,IAAA;AAAA,MACV,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,IAAI,WAAA,GAAc,CAAA;AAElB,IAAA,MAAM,IAAA,GAAO,cAAA;AAAA,MACX,KAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAU,CAAA;AAAA,MACzBH;AAAA,KACF;AAEA,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,IAAI,IAAA,CAAK,SAAQ,EAAG;AACpB,MAAA,WAAA,GAAc,YAAA,CAAa,YAAA,EAAc,KAAA,EAAO,WAAA,EAAa,cAAc,CAAA;AAAA,IAC7E,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,MAAA,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,IACzB,CAAC,CAAA;AAED,IAAA,mBAAA;AAAA,MACE,KAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,MAAU;AAAA,QACT,IAAA,EAAM,IAAA;AAAA,QACN,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,QAAQ,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,QACpD,UAAU,IAAA,IAAQ;AAAA,OACpB,CAAA;AAAA,MACA,CAAC,GAAA,MAAS,EAAE,MAAM,aAAA,EAAe,OAAA,EAAS,IAAI,OAAA,EAAQ,CAAA;AAAA,MACtDA;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AC1JA,IAAM,mBAAA,GAAsB,GAAA;AAC5B,IAAM,wBAAwB,IAAA,GAAO,IAAA;AACrC,IAAMI,sBAAqB,CAAA,GAAI,IAAA;AAC/B,IAAM,WAAA,GAAc,GAAA;AAgBb,SAAS,qBAAqB,IAAA,EAA+C;AAClF,EAAA,MAAM;AAAA,IACJ,WAAA;AAAA,IACA,UAAA,GAAa,mBAAA;AAAA,IACb,WAAA,GAAc;AAAA,GAChB,GAAI,IAAA;AAEJ,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EACE,CAAA,wJAAA,EAEuB,MAAA,CAAO,UAAU,CAAC,CAAA,sFAAA,CAAA;AAAA,IAE3C,WAAA,EAAaL,EAAE,MAAA,CAAO;AAAA,MACpB,KAAA,EAAOA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,6CAA6C,CAAA;AAAA,MAC/E,MAAMA,CAAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,0DAA0D;AAAA,KACvE,CAAA;AAAA,IACD,OAAA,EAAS,OAAO,EAAE,KAAA,EAAO,MAAK,KAAM;AAClC,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,WAAW,CAAA;AAClD,MAAA,IAAI,OAAA,IAAW,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA;AACnC,MAAA,MAAM,KAAA,GAAqB;AAAA,QACzB,SAAS,EAAC;AAAA,QACV,YAAA,EAAc,CAAA;AAAA,QACd,SAAA,EAAW,KAAA;AAAA,QACX,KAAA;AAAA,QACA,UAAA;AAAA,QACA,WAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,MAAM,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,KAAK,CAAA;AAChC,MAAA,OAAO,KAAK,SAAA,CAAU;AAAA,QACpB,EAAA,EAAI,IAAA;AAAA,QACJ,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,cAAc,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH;AAYA,SAAS,kBAAA,CACP,MACA,WAAA,EAC0C;AAC1C,EAAA,MAAM,WAAW,IAAA,KAAS,MAAA,IAAa,SAAS,EAAA,IAAM,IAAA,KAAS,MAAM,GAAA,GAAM,IAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,WAAW,QAAA,KAAa,GAAA,GAAM,WAAA,GAAc,YAAA,CAAa,aAAa,QAAQ,CAAA;AACpF,IAAA,qBAAA,CAAsB,UAAU,WAAW,CAAA;AAC3C,IAAA,OAAO,EAAE,QAAA,EAAS;AAAA,EACpB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,kBAAA,IAAsB,GAAA,YAAe,kBAAA,EAAoB;AAC1E,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,gBAAA,EAAkB,IAAA,EAAM,CAAA,EAAE;AAAA,IAC/E;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAe,WAAA,CAAY,KAAA,EAAe,MAAA,EAAgB,KAAA,EAAmC;AAC3F,EAAA,MAAM,QAAA,GAAWM,IAAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACxC,EAAA,MAAM,QAAA,GAAWC,QAAA,CAAa,KAAA,CAAM,WAAA,EAAa,QAAQ,CAAA;AACzD,EAAA,IAAI,eAAA,CAAgB,QAAQ,CAAA,EAAG;AAC/B,EAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,IAAA,MAAM,IAAA,CAAK,UAAU,KAAK,CAAA;AAC1B,IAAA;AAAA,EACF;AACA,EAAA,IAAI,MAAM,MAAA,EAAO,QAAS,QAAA,CAAS,QAAA,EAAU,UAAU,KAAK,CAAA;AAC9D;AAEA,eAAe,IAAA,CAAK,QAAgB,KAAA,EAAmC;AACrE,EAAA,IAAI,MAAM,SAAA,EAAW;AACrB,EAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,MAAM,CAAA;AAC7C,EAAA,IAAI,YAAY,IAAA,EAAM;AACtB,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,MAAM,SAAA,EAAW;AACrB,IAAA,MAAM,WAAA,CAAY,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA;AAAA,EACxC;AACF;AAEA,eAAe,iBAAiB,MAAA,EAA0C;AACxE,EAAA,IAAI;AACF,IAAA,OAAO,MAAMC,OAAAA,CAAQ,MAAA,EAAQ,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB,OAAA,EAAyC;AACtE,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,SAAS,OAAO,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAA,EAAyB;AAC/C,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,QAAQH,mBAAkB,CAAA;AAC3D,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,KAAK,CAAA,EAAG;AACpC,IAAA,IAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,EAC9B;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CAAY,KAAA,EAAoB,IAAA,EAAc,IAAA,EAAc,QAAA,EAA2B;AAC9F,EAAA,KAAA,CAAM,YAAA,IAAgB,CAAA;AACtB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,GAAS,KAAA,CAAM,UAAA,EAAY;AAC3C,IAAA,KAAA,CAAM,QAAQ,IAAA,CAAK;AAAA,MACjB,IAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,QAAA,CAAS,MAAA,GAAS,WAAA,GAAc,CAAA,EAAG,SAAS,KAAA,CAAM,CAAA,EAAG,WAAW,CAAC,CAAA,MAAA,CAAA,GAAM;AAAA,KACjF,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,KAAA,CAAM,SAAA,GAAY,IAAA;AAClB,EAAA,OAAO,KAAA;AACT;AAEA,eAAe,QAAA,CAAS,OAAA,EAAiB,OAAA,EAAiB,KAAA,EAAmC;AAC3F,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAO,CAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,GAAS,MAAM,WAAA,EAAa;AAC1D,EAAA,IAAI,cAAA,CAAe,MAAM,CAAA,EAAG;AAC5B,EAAA,MAAM,QAAQ,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,CAAE,MAAM,IAAI,CAAA;AACjD,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAA,EAAG;AACxC,IAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AACjC,IAAA,IAAI,CAAC,WAAA,CAAY,KAAA,EAAO,SAAS,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,EAAG;AAAA,EACjD;AACF","file":"tools.js","sourcesContent":["/**\n * Zod → JSON Schema universal adapter (FAANG-grade, supports Zod 3 + Zod 4).\n *\n * The SDK declares `zod: \"^3.25.0 || ^4.0.0\"` as optional peer. Implementation\n * MUST work on both versions or the peer-range claim is false.\n *\n * Strategy:\n *   1. Feature-detect Zod 4's native `z.toJSONSchema` (preferred — zero extra\n *      dep, ships with Zod 4 core).\n *   2. Fall back to the universal `zod-to-json-schema` library (works for both\n *      v3 and v4; ~5KB gzipped, optional peer dep).\n *   3. If neither path resolves, throw an actionable error explaining the\n *      install command for the user's Zod major.\n *\n * Output shape is identical across paths: a `Record<string, unknown>` JSON\n * Schema document with `type: \"object\"` root that the LLM tool-use spec\n * accepts unchanged.\n *\n * @internal\n */\n\nimport { createRequire } from \"node:module\";\n\ntype AnyZodSchema = unknown;\n\ninterface ToJsonSchemaOptions {\n  /** Zod 4 option: `\"any\"` keeps transforms/refinements as `{}` (loose). */\n  unrepresentable?: \"any\" | \"throw\";\n}\n\nconst requireSdk = createRequire(import.meta.url);\n\nlet cachedZodHasNativeApi: boolean | undefined;\nlet cachedFallbackLib: ((schema: AnyZodSchema) => unknown) | undefined;\nlet triedFallback = false;\n\n/**\n * Convert any Zod schema (v3 or v4) to a JSON Schema object. Feature-detects\n * the native Zod 4 API first; falls back to `zod-to-json-schema` lib on v3.\n *\n * @internal\n */\nexport function toJsonSchema(\n  schema: AnyZodSchema,\n  options: ToJsonSchemaOptions = { unrepresentable: \"any\" },\n): Record<string, unknown> {\n  const native = tryNativeZod4(schema, options);\n  if (native !== undefined) return native;\n  const fallback = tryFallbackLib(schema);\n  if (fallback !== undefined) return fallback;\n  throw new Error(\n    \"Zod → JSON Schema conversion failed: neither Zod 4's native `z.toJSONSchema` \" +\n      \"nor the `zod-to-json-schema` peer dep are available. \" +\n      \"On Zod 4: ensure `zod >= 4.0.0` is installed. \" +\n      'On Zod 3: add `\"zod-to-json-schema\": \"^3.24.0\"` to your package.json.',\n  );\n}\n\nfunction tryNativeZod4(\n  schema: AnyZodSchema,\n  options: ToJsonSchemaOptions,\n): Record<string, unknown> | undefined {\n  if (cachedZodHasNativeApi === false) return undefined;\n  let z: { toJSONSchema?: (s: unknown, o?: unknown) => unknown };\n  try {\n    z = requireSdk(\"zod\") as typeof z;\n  } catch {\n    cachedZodHasNativeApi = false;\n    return undefined;\n  }\n  if (typeof z.toJSONSchema !== \"function\") {\n    cachedZodHasNativeApi = false;\n    return undefined;\n  }\n  // Cross-version safety net: when the SDK source runs under a dev-server\n  // (Vite SSR), `requireSdk(\"zod\")` resolves to the SDK's OWN node_modules\n  // (zod 4 in our devDeps), while the schema was built by the CONSUMER's\n  // zod (often v3 — see dogfood-app pinned to ^3.25.0). Calling zod 4's\n  // `toJSONSchema` with a zod 3 schema throws. Catch + fall through to\n  // `zod-to-json-schema` (which understands both v3 and v4 schemas).\n  try {\n    return z.toJSONSchema(schema, options) as Record<string, unknown>;\n  } catch {\n    cachedZodHasNativeApi = false;\n    return undefined;\n  }\n}\n\nfunction tryFallbackLib(schema: AnyZodSchema): Record<string, unknown> | undefined {\n  if (cachedFallbackLib !== undefined) {\n    return cachedFallbackLib(schema) as Record<string, unknown>;\n  }\n  if (triedFallback) return undefined;\n  triedFallback = true;\n  try {\n    // `zod-to-json-schema` exports the converter as default OR as named export\n    // `zodToJsonSchema` depending on module shape. Probe both.\n    const mod = requireSdk(\"zod-to-json-schema\") as {\n      default?: (s: unknown) => unknown;\n      zodToJsonSchema?: (s: unknown) => unknown;\n    };\n    const fn =\n      typeof mod.zodToJsonSchema === \"function\"\n        ? mod.zodToJsonSchema\n        : typeof mod.default === \"function\"\n          ? mod.default\n          : undefined;\n    if (fn === undefined) return undefined;\n    cachedFallbackLib = fn as (s: AnyZodSchema) => unknown;\n    return fn(schema) as Record<string, unknown>;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Test-only reset (clears the version-detection cache so tests can simulate\n * a different Zod major).\n *\n * @internal\n */\nexport function _resetZodToJsonSchemaCache(): void {\n  cachedZodHasNativeApi = undefined;\n  cachedFallbackLib = undefined;\n  triedFallback = false;\n}\n","// `zod` referenced only as a TYPE — `import type` is erased by tsc/tsup, so\n// the compiled `dist/index.js` does NOT have a top-level `import \"zod\"`.\n// Consumers who don't call `defineTool` don't need `zod` installed (the peer\n// dependency stays truly optional per ADR D24). The runtime JSON-Schema\n// conversion is delegated to `zodToJsonSchema` (internal/zod/to-json-schema)\n// which feature-detects zod 4 native `toJSONSchema` vs zod 3 +\n// `zod-to-json-schema` peer dep — supporting the SDK's declared peer range\n// `zod: \"^3.25.0 || ^4.0.0\"`.\nimport type { z as ZodNamespace, ZodType } from \"zod\";\n\nimport { toJsonSchema } from \"./internal/zod/to-json-schema.js\";\nimport type { CustomTool } from \"./types/agent.js\";\n\n/**\n * Spec accepted by {@link defineTool}. `inputSchema` is a Zod schema; the\n * `handler` argument type is inferred via `z.infer<T>` — no `as` casts.\n *\n * @public\n */\nexport interface DefineToolSpec<T extends ZodType> {\n  /** Tool name surfaced to the LLM. Same constraints as {@link CustomTool.name}. */\n  name: string;\n  /** Description surfaced to the LLM. */\n  description: string;\n  /** Zod schema describing the input. Must be `z.object(...)` at the root for the LLM tool contract. */\n  inputSchema: T;\n  /** Handler invoked with the parsed input. Type is inferred via `z.infer<T>`. */\n  handler: (input: ZodNamespace.infer<T>) => string | Promise<string>;\n}\n\n/**\n * Type-safe builder for {@link CustomTool}. Converts a Zod schema to JSON\n * Schema (for the LLM-facing `inputSchema` field), wraps the handler with a\n * runtime `schema.parse` step, and preserves type inference.\n *\n * Behaviour (ADR D24):\n * - JSON Schema conversion uses Zod 4's native `z.toJSONSchema` with\n *   `unrepresentable: \"any\"` so transforms/refinements round-trip.\n * - Runtime parse failures throw `ZodError`; the SDK's tool-dispatch converts\n *   them to `tool_result(isError)` with the Zod message.\n * - Handler signature is `(input: z.infer<T>)`, not `Record<string, unknown>`.\n * - `zod` loads lazily via `createRequire` — consumers who don't call\n *   `defineTool` don't need `zod` installed.\n *\n * @public\n */\nexport function defineTool<T extends ZodType>(spec: DefineToolSpec<T>): CustomTool {\n  // Universal Zod → JSON Schema converter (feature-detects zod 4 native\n  // `z.toJSONSchema` vs zod 3 + `zod-to-json-schema` peer). Fixes the bug\n  // where consumers pinned to `zod@^3.25.0` (no native `toJSONSchema`) hit\n  // `z.toJSONSchema is not a function` at runtime. The SDK declares\n  // peer `zod: \"^3.25.0 || ^4.0.0\"` — both must work.\n  //\n  // `unrepresentable: \"any\"` lets transforms / refinements / branded types\n  // round-trip to JSON Schema as `{}` (effectively `any`). The runtime parse\n  // still enforces the full Zod contract; the LLM just sees a looser hint.\n  const inputSchema = toJsonSchema(spec.inputSchema, {\n    unrepresentable: \"any\",\n  });\n  return {\n    name: spec.name,\n    description: spec.description,\n    inputSchema,\n    handler: async (input: Record<string, unknown>): Promise<string> => {\n      const parsed = spec.inputSchema.parse(input) as ZodNamespace.infer<T>;\n      return await spec.handler(parsed);\n    },\n  };\n}\n","import type { RunOperation } from \"./types/run.js\";\n\n/**\n * Finite, machine-readable error codes for provider-originated errors\n * (ADR D66). Consumers can `switch (err.metadata?.code)` exhaustively\n * — adding a new variant is an explicit decision + test coverage.\n *\n * @public\n */\nexport type ErrorCode =\n  | \"rate_limit\"\n  | \"auth_failed\"\n  | \"invalid_request\"\n  | \"timeout\"\n  | \"server_error\"\n  | \"context_too_long\"\n  | \"content_filtered\"\n  | \"model_unavailable\"\n  | \"network\"\n  | \"unknown\";\n\n/**\n * Codes used by {@link AgentRunError} (Production-Readiness #3, ADR D311).\n *\n * Superset of {@link ErrorCode} extended with codes that do NOT originate\n * from a provider HTTP response:\n *\n * - `quota_exceeded` — billing limit hit (provider 402 or signalled error)\n * - `tool_runtime_error` — custom tool handler threw inside dispatch\n * - `aborted` — caller's `AbortSignal` fired (Phase 4)\n * - `invalid_model` — model id rejected by provider (400 \"model not found\")\n * - `safety_blocked` — provider safety filter blocked req or resp\n * - `provider_unreachable` — DNS/TCP/timeout/5xx at transport boundary\n *\n * The `& {}` tail keeps the literal-union ergonomics (autocomplete) while\n * accepting any string for forward compatibility with constructor calls\n * that pass arbitrary code values (legacy callers).\n *\n * @public\n */\nexport type AgentRunErrorCode =\n  | ErrorCode\n  | \"quota_exceeded\"\n  | \"tool_runtime_error\"\n  | \"aborted\"\n  | \"invalid_model\"\n  | \"safety_blocked\"\n  | \"provider_unreachable\"\n  | (string & {});\n\n/**\n * Structured context for errors that originated from a provider HTTP\n * call (ADR D65). Lets callers retry with the right backoff (`retryAfter`),\n * surface actionable diagnostics (`provider`, `endpoint`), and inspect the\n * raw response body when needed (`raw`, capped at ~2KB by the mapper).\n *\n * @public\n */\nexport interface ErrorMetadata {\n  /** Provider canonical name (e.g., `\"anthropic\"`, `\"openai\"`, `\"openrouter\"`, `\"gemini\"`). */\n  provider: string;\n  /** HTTP endpoint that failed (e.g., `\"/v1/messages\"`, `\"/v1/chat/completions\"`). */\n  endpoint: string;\n  /** Machine-readable error code (finite enum). */\n  code: ErrorCode;\n  /** HTTP status code if applicable. */\n  statusCode?: number;\n  /** Seconds to wait before retry, per provider's `retry-after` header (numeric form only). */\n  retryAfter?: number;\n  /** Raw response body for debugging (truncated to ~2KB by the mapper). */\n  raw?: unknown;\n}\n\n/**\n * Base class for all errors thrown by `@theokit/sdk`.\n *\n * Use `isRetryable` to drive retry/backoff logic. `code` and `protoErrorCode`\n * are populated for server-originated errors when available. `metadata`\n * (ADR D65) carries structured `{ provider, endpoint, code, ... }` when\n * the error originated from a provider HTTP call.\n *\n * @public\n */\nexport class TheokitAgentError extends Error {\n  override readonly name: string = \"TheokitAgentError\";\n  readonly isRetryable: boolean;\n  readonly code?: string;\n  readonly protoErrorCode?: string;\n  readonly metadata?: ErrorMetadata;\n\n  constructor(\n    message: string,\n    options: {\n      isRetryable?: boolean;\n      code?: string;\n      protoErrorCode?: string;\n      cause?: unknown;\n      metadata?: ErrorMetadata;\n    } = {},\n  ) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined);\n    this.isRetryable = options.isRetryable ?? false;\n    if (options.code !== undefined) this.code = options.code;\n    if (options.protoErrorCode !== undefined) this.protoErrorCode = options.protoErrorCode;\n    if (options.metadata !== undefined) this.metadata = options.metadata;\n  }\n}\n\n/**\n * Invalid API key, not logged in, insufficient permissions.\n *\n * @public\n */\nexport class AuthenticationError extends TheokitAgentError {\n  override readonly name: string = \"AuthenticationError\";\n\n  constructor(\n    message: string,\n    options: { code?: string; cause?: unknown; metadata?: ErrorMetadata } = {},\n  ) {\n    super(message, { ...options, isRetryable: false });\n  }\n}\n\n/**\n * Too many requests or usage limits exceeded.\n *\n * @public\n */\nexport class RateLimitError extends TheokitAgentError {\n  override readonly name: string = \"RateLimitError\";\n\n  constructor(\n    message: string,\n    options: { code?: string; cause?: unknown; metadata?: ErrorMetadata } = {},\n  ) {\n    super(message, { ...options, isRetryable: true });\n  }\n}\n\n/**\n * Invalid model, bad request parameters, malformed options.\n *\n * @public\n */\nexport class ConfigurationError extends TheokitAgentError {\n  override readonly name: string = \"ConfigurationError\";\n\n  constructor(\n    message: string,\n    options: { code?: string; cause?: unknown; metadata?: ErrorMetadata } = {},\n  ) {\n    super(message, { ...options, isRetryable: false });\n  }\n}\n\n/**\n * Thrown when creating a cloud agent for a repo whose SCM provider is not\n * connected. Use `helpUrl` to point the user at the right reconnect flow.\n *\n * @public\n */\nexport class IntegrationNotConnectedError extends ConfigurationError {\n  override readonly name: string = \"IntegrationNotConnectedError\";\n  readonly provider: string;\n  readonly helpUrl: string;\n\n  constructor(\n    message: string,\n    options: {\n      provider: string;\n      helpUrl: string;\n      code?: string;\n      cause?: unknown;\n      metadata?: ErrorMetadata;\n    },\n  ) {\n    super(message, options);\n    this.provider = options.provider;\n    this.helpUrl = options.helpUrl;\n  }\n}\n\n/**\n * Service unavailable, timeout, transport-level failure.\n *\n * @public\n */\nexport class NetworkError extends TheokitAgentError {\n  override readonly name: string = \"NetworkError\";\n\n  constructor(\n    message: string,\n    options: { code?: string; cause?: unknown; metadata?: ErrorMetadata } = {},\n  ) {\n    super(message, { ...options, isRetryable: true });\n  }\n}\n\n/**\n * Catch-all for unclassified server or runtime errors.\n *\n * @public\n */\nexport class UnknownAgentError extends TheokitAgentError {\n  override readonly name: string = \"UnknownAgentError\";\n\n  constructor(\n    message: string,\n    options: { code?: string; cause?: unknown; metadata?: ErrorMetadata } = {},\n  ) {\n    super(message, { ...options, isRetryable: false });\n  }\n}\n\n/**\n * Thrown by `Agent.prompt` (and helpers that go through `run.wait()`) when\n * the option `{ throwOnError: true }` is set and the run terminates with\n * `status: 'error'`. Carries the structured `RunResult.error` fields so\n * callers can `catch` once and branch on `code` / `provider` instead of\n * unwrapping the run.\n *\n * Extends {@link TheokitAgentError} per ADR D65 — no new hierarchy.\n *\n * @example\n *   try {\n *     await Agent.prompt(msg, { apiKey, model, throwOnError: true });\n *   } catch (err) {\n *     if (err instanceof AgentRunError && err.code === 'auth_failed') {\n *       // bad key\n *     }\n *   }\n *\n * @public\n */\nexport class AgentRunError extends TheokitAgentError {\n  override readonly name: string = \"AgentRunError\";\n  readonly provider?: string;\n  readonly raw?: string;\n  /** Provider's request id (`x-request-id` / `request-id` header). Useful for support tickets. */\n  readonly requestId?: string;\n  /** SDK conversation id this error was raised inside. */\n  readonly conversationId?: string;\n\n  constructor(\n    message: string,\n    options: {\n      code: AgentRunErrorCode;\n      provider?: string;\n      raw?: string;\n      requestId?: string;\n      conversationId?: string;\n      retriable?: boolean;\n      cause?: unknown;\n      metadata?: ErrorMetadata;\n    },\n  ) {\n    super(message, {\n      code: options.code,\n      cause: options.cause,\n      metadata: options.metadata,\n      // D311: most AgentRunErrors are not retriable (auth, validation, abort).\n      // Provider mappers (D314) override per-status — explicit `retriable` wins\n      // over the implicit default when supplied.\n      isRetryable: options.retriable ?? defaultRetriableForCode(options.code),\n    });\n    if (options.provider !== undefined) this.provider = options.provider;\n    if (options.raw !== undefined) this.raw = options.raw;\n    if (options.requestId !== undefined) this.requestId = options.requestId;\n    if (options.conversationId !== undefined) this.conversationId = options.conversationId;\n  }\n\n  /**\n   * Production-Readiness #3 (ADR D311): alias for `isRetryable` exposed as\n   * `retriable` to match the handoff contract. Future v2 will deprecate\n   * `isRetryable` in favor of this.\n   */\n  get retriable(): boolean {\n    return this.isRetryable;\n  }\n\n  /**\n   * D312: provider's `Retry-After` header in **milliseconds**. Mappers store\n   * the header value (seconds) in `metadata.retryAfter`; this getter\n   * multiplies by 1000 so the result composes with `Date.now()`/`setTimeout`.\n   *\n   * Returns `undefined` when no hint was provided. `0` is a legitimate value\n   * — use `=== undefined` check rather than truthy check.\n   */\n  get retryAfterMs(): number | undefined {\n    if (this.metadata?.retryAfter === undefined) return undefined;\n    return this.metadata.retryAfter * 1000;\n  }\n\n  /**\n   * D313: alias for `metadata.raw`. Provider response body for debugging.\n   * Available but NEVER serialized into `.message` (anti-leak invariant).\n   */\n  get providerError(): unknown {\n    return this.metadata?.raw;\n  }\n}\n\n/**\n * D311 helper: choose a sensible default `isRetryable` value when the\n * caller did not supply `retriable` explicitly. Conservative defaults —\n * provider mappers override per-status when they know better.\n *\n * @internal\n */\nfunction defaultRetriableForCode(code: AgentRunErrorCode): boolean {\n  switch (code) {\n    case \"rate_limit\":\n    case \"timeout\":\n    case \"server_error\":\n    case \"network\":\n    case \"provider_unreachable\":\n      return true;\n    default:\n      return false;\n  }\n}\n\n/**\n * Thrown when a {@link Run} or agent operation is not available on the current\n * runtime. Check first with `run.supports(operation)`.\n *\n * Extends {@link TheokitAgentError} (so error-catching code that branches on\n * `instanceof TheokitAgentError` continues to work) but is never retryable —\n * an unsupported operation will not become supported on retry.\n *\n * @public\n */\nexport class UnsupportedRunOperationError extends TheokitAgentError {\n  override readonly name: string = \"UnsupportedRunOperationError\";\n  readonly operation: RunOperation;\n\n  constructor(\n    message: string,\n    operation: RunOperation,\n    options: { code?: string; cause?: unknown } = {},\n  ) {\n    super(message, {\n      ...options,\n      isRetryable: false,\n      code: options.code ?? \"unsupported_run_operation\",\n    });\n    this.operation = operation;\n  }\n}\n\n/**\n * Thrown when every credential in a per-provider pool is in cooldown\n * and no healthy key is available (ADR D133). The caller's\n * {@link import(\"./internal/llm/fallback-client.js\").FallbackLlmClient}\n * catches this and tries the next provider in the fallback chain.\n *\n * `metadata.nextRetryAt` (epoch ms) tells callers when the soonest\n * pool entry resumes — useful for manual retry scheduling.\n *\n * @public\n */\nexport class CredentialPoolExhaustedError extends TheokitAgentError {\n  override readonly name: string = \"CredentialPoolExhaustedError\";\n  readonly provider: string;\n  readonly nextRetryAt: number | undefined;\n\n  constructor(\n    message: string,\n    options: {\n      provider: string;\n      nextRetryAt?: number;\n      code?: string;\n      cause?: unknown;\n      metadata?: ErrorMetadata;\n    },\n  ) {\n    super(message, {\n      ...options,\n      isRetryable: true,\n      code: options.code ?? \"credential_pool_exhausted\",\n    });\n    this.provider = options.provider;\n    this.nextRetryAt = options.nextRetryAt;\n  }\n}\n\n/**\n * Finite error codes specific to memory adapter operations (ADR D141).\n *\n * @public\n */\nexport type MemoryAdapterErrorCode =\n  | \"auth_failed\"\n  | \"rate_limited\"\n  | \"not_found\"\n  | \"network\"\n  | \"invalid_input\"\n  | \"unknown\";\n\n/**\n * Error raised by `@theokit-memory-*` adapters. Carries `adapterId`\n * so callers can branch on which provider failed (ADR D141).\n *\n * @public\n */\nexport class MemoryAdapterError extends TheokitAgentError {\n  override readonly name: string = \"MemoryAdapterError\";\n  readonly adapterId: string;\n\n  constructor(\n    message: string,\n    options: {\n      adapterId: string;\n      code: MemoryAdapterErrorCode;\n      cause?: unknown;\n      metadata?: ErrorMetadata;\n    },\n  ) {\n    super(message, {\n      isRetryable: options.code === \"rate_limited\" || options.code === \"network\",\n      code: options.code,\n      ...(options.cause !== undefined ? { cause: options.cause } : {}),\n      ...(options.metadata !== undefined ? { metadata: options.metadata } : {}),\n    });\n    this.adapterId = options.adapterId;\n  }\n}\n\n/**\n * Thrown when a user-supplied task ID violates the grammar\n * `^[a-z0-9][a-z0-9_-]*$` (D368) OR starts with a reserved adapter\n * prefix (`wf-` / `b-` / `cron-`, EC-5).\n *\n * @public\n */\nexport class InvalidTaskIdError extends TheokitAgentError {\n  override readonly name: string = \"InvalidTaskIdError\";\n  readonly taskId: string;\n\n  constructor(message: string, taskId: string, options: { cause?: unknown } = {}) {\n    super(message, {\n      ...options,\n      isRetryable: false,\n      code: \"invalid_task_id\",\n    });\n    this.taskId = taskId;\n  }\n}\n\n/**\n * Thrown when `Task.subscribe(id)` is called for a task that has been\n * evicted, never submitted, or evicted after retention (D373).\n *\n * @public\n */\nexport class TaskNotFoundError extends TheokitAgentError {\n  override readonly name: string = \"TaskNotFoundError\";\n  readonly taskId: string;\n\n  constructor(taskId: string, options: { cause?: unknown } = {}) {\n    super(`Task not found: ${taskId}`, {\n      ...options,\n      isRetryable: false,\n      code: \"task_not_found\",\n    });\n    this.taskId = taskId;\n  }\n}\n\n/**\n * Thrown when `CloudAgent` is asked to wrap a task (D370). Cloud\n * task observability is deferred until Theo PaaS GA.\n *\n * @public\n */\nexport class UnsupportedTaskOperationError extends TheokitAgentError {\n  override readonly name: string = \"UnsupportedTaskOperationError\";\n  readonly operation: string;\n\n  constructor(operation: string, options: { cause?: unknown } = {}) {\n    super(\n      `Task operation \"${operation}\" is not supported on CloudAgent (pre-release; see ADR D370)`,\n      {\n        ...options,\n        isRetryable: false,\n        code: \"task_op_unsupported\",\n      },\n    );\n    this.operation = operation;\n  }\n}\n\n/**\n * Thrown by `Budget` enforcement (ADR D386) when a `mode: \"block\"`\n * budget would be exceeded by the upcoming LLM call. Caller pega\n * tipado para retry-after-window-reset or surface to the user.\n *\n * @public\n */\nexport class BudgetExceededError extends TheokitAgentError {\n  override readonly name: string = \"BudgetExceededError\";\n  readonly budgetName: string;\n  readonly window: import(\"./types/budget.js\").BudgetWindow;\n  readonly spentUsd: number;\n  readonly limitUsd: number;\n  readonly mode: import(\"./types/budget.js\").BudgetMode;\n\n  constructor(args: {\n    budgetName: string;\n    window: import(\"./types/budget.js\").BudgetWindow;\n    spentUsd: number;\n    limitUsd: number;\n    mode: import(\"./types/budget.js\").BudgetMode;\n    cause?: unknown;\n  }) {\n    super(\n      `Budget \"${args.budgetName}\" exceeded for window ${args.window}: spent $${args.spentUsd.toFixed(4)} > limit $${args.limitUsd.toFixed(4)}`,\n      {\n        ...(args.cause !== undefined ? { cause: args.cause } : {}),\n        isRetryable: false,\n        code: \"budget_exceeded\",\n      },\n    );\n    this.budgetName = args.budgetName;\n    this.window = args.window;\n    this.spentUsd = args.spentUsd;\n    this.limitUsd = args.limitUsd;\n    this.mode = args.mode;\n  }\n}\n\n/**\n * Thrown when `CloudAgent.send({ budget })` is invoked (D388). Cloud\n * budget surface waits for Theo PaaS GA.\n *\n * @public\n */\nexport class UnsupportedBudgetOperationError extends TheokitAgentError {\n  override readonly name: string = \"UnsupportedBudgetOperationError\";\n  readonly operation: string;\n\n  constructor(operation: string, options: { cause?: unknown } = {}) {\n    super(\n      `Budget operation \"${operation}\" is not supported on CloudAgent (pre-release; see ADR D388)`,\n      {\n        ...options,\n        isRetryable: false,\n        code: \"budget_op_unsupported\",\n      },\n    );\n    this.operation = operation;\n  }\n}\n","/**\n * Canonical path-guard module (ADRs D79-D81).\n *\n * Three primitives + one typed error:\n *   - `safePathJoin(base, ...parts)` — resolve THEN prefix-check (ADR D80).\n *   - `assertNoSymlinkEscape(path, base)` — `realpathSync` resolves entire\n *     symlink chain (EC-1 fix; Hermes v0.2 #386, #61).\n *   - `sanitizeIdentifier(input, { maxLen })` — strict grammar\n *     `^[a-z0-9][a-z0-9-_]*$` (ADR D81; case-insensitive on input,\n *     lowercase on output).\n *   - `PathTraversalError` — extends ConfigurationError with code\n *     `path_traversal` (ADR D65: no new hierarchy).\n *\n * Wire at all sites where user input becomes a path. CI lint gate\n * `tests/lint/no-unguarded-path-input.test.ts` prevents regression\n * (ADR D85).\n *\n * @internal\n */\n\nimport { lstatSync, readlinkSync, realpathSync, type Stats } from \"node:fs\";\nimport { dirname, resolve, sep } from \"node:path\";\n\nimport { ConfigurationError } from \"../../errors.js\";\n\n/**\n * Thrown when a path operation would escape its allowed base directory.\n * Extends `ConfigurationError` (no new error hierarchy per ADR D65).\n *\n * @internal\n */\nexport class PathTraversalError extends ConfigurationError {\n  override readonly name: string = \"PathTraversalError\";\n\n  constructor(input: string, resolvedPath: string) {\n    super(`Path traversal attempt: ${input} → ${resolvedPath}`, {\n      code: \"path_traversal\",\n    });\n  }\n}\n\n/**\n * Thrown when an agent tool is asked to read or write a sensitive path\n * that the blocklist forbids (`.env`, `.git/`, `node_modules/`, `.theo/`,\n * lock files). Distinct from `PathTraversalError` because the path is\n * lexically inside the project — it is just sensitive.\n *\n * Extends `ConfigurationError` (no new error hierarchy per ADR D65).\n *\n * @public\n */\nexport class ForbiddenPathError extends ConfigurationError {\n  override readonly name: string = \"ForbiddenPathError\";\n\n  constructor(path: string) {\n    super(\n      `Path '${path}' is in the sensitive-file blocklist (.env, .git/, node_modules/, .theo/, lock files)`,\n      {\n        code: \"forbidden_path\",\n      },\n    );\n  }\n}\n\n/**\n * Join `base` with `...parts` and ensure the resolved absolute path stays\n * under `base`. Resolves FIRST, then prefix-checks (ADR D80) — prevents\n * normalized-escape bypasses like `subdir/.\\\\./bar`.\n *\n * Returns the safe absolute path. Throws `PathTraversalError` if escape.\n *\n * @internal\n */\nexport function safePathJoin(base: string, ...parts: string[]): string {\n  if (base === \"\") {\n    throw new Error(\"safePathJoin: base must be non-empty\");\n  }\n  const baseResolved = resolve(base);\n  const target = resolve(base, ...parts);\n  if (target !== baseResolved && !target.startsWith(baseResolved + sep)) {\n    throw new PathTraversalError(parts.join(\"/\"), target);\n  }\n  return target;\n}\n\n/**\n * Assert that `path` — including every directory component in the chain —\n * stays under `base` after symlink resolution. No-op when nothing on the\n * path exists yet.\n *\n * Two-bug history:\n *   1. **EC-1** (original fix, kept): a multi-level symlink chain A → B → C\n *      must be resolved end-to-end. `realpathSync` does this in 1 syscall.\n *   2. **Defence-in-depth** (added v1.x): the previous implementation only\n *      called `lstatSync(path)` on the terminal component. If an INTERMEDIATE\n *      directory was a symlink (`base/inner-symlink → /outside`), `lstat` on\n *      `base/inner-symlink/file.txt` followed the symlink and reported the\n *      regular file — escape went undetected. Fix: walk up to the nearest\n *      existing ancestor and `realpath` THAT, then re-attach the suffix and\n *      check the result against the canonical base.\n *\n * @internal\n */\nexport function assertNoSymlinkEscape(path: string, base: string): void {\n  // Canonical base — symlinks in the base path itself are absorbed once here.\n  let baseResolved: string;\n  try {\n    baseResolved = realpathSync(base);\n  } catch {\n    // base doesn't exist as a real directory yet — fall back to lexical resolve.\n    baseResolved = resolve(base);\n  }\n\n  // Find the deepest ancestor of `path` that exists, then realpath it.\n  // Anything from there onward is \"not yet on disk\" and contributes only\n  // its lexical suffix. This covers three cases:\n  //   - path exists (regular file or symlink at any depth) → realpath the full path\n  //   - path doesn't exist but intermediate dir is a symlink → realpath the ancestor\n  //   - nothing on the path exists → no escape risk (return)\n  const resolved = realpathOfDeepestExisting(path);\n  if (resolved === undefined) return; // path has no existing prefix — nothing to attack\n\n  if (resolved !== baseResolved && !resolved.startsWith(baseResolved + sep)) {\n    throw new PathTraversalError(`symlink ${path}`, resolved);\n  }\n}\n\n/**\n * Find the deepest ancestor of `path` that exists on disk, resolve all\n * symlinks in that ancestor via `realpathSync`, and re-attach the\n * lexical suffix. Returns `undefined` when no ancestor exists.\n *\n * Handles dangling symlinks: if the terminal IS a symlink but its target\n * is missing, we still detect escape via `readlinkSync` + parent resolve.\n */\nfunction realpathOfDeepestExisting(path: string): string | undefined {\n  // First try the full path — the common case.\n  try {\n    return realpathSync(path);\n  } catch {\n    // Not resolvable. Two sub-cases.\n  }\n\n  // Sub-case A: terminal is a dangling symlink.\n  try {\n    const stat: Stats = lstatSync(path);\n    if (stat.isSymbolicLink()) {\n      const target = readlinkSync(path);\n      // Resolve target relative to the REAL parent dir, so intermediate\n      // symlinks in the parent chain are absorbed.\n      const parentReal = realpathOfDeepestExisting(dirname(path));\n      const parentBase = parentReal ?? dirname(path);\n      return resolve(parentBase, target);\n    }\n  } catch {\n    // lstat failed too — terminal doesn't exist at all.\n  }\n\n  // Sub-case B: walk up to the nearest existing ancestor, then re-attach\n  // the suffix lexically.\n  let cursor = dirname(path);\n  let suffix = path.slice(cursor.length);\n  while (cursor !== dirname(cursor)) {\n    try {\n      const real = realpathSync(cursor);\n      // Reconstruct: ancestor's realpath + remaining (still-lexical) suffix\n      return resolve(real, `.${suffix}`);\n    } catch {\n      suffix = path.slice(dirname(cursor).length);\n      cursor = dirname(cursor);\n    }\n  }\n  // Reached filesystem root without finding any existing ancestor.\n  return undefined;\n}\n\nconst LOCK_FILES = new Set([\"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\", \"bun.lockb\"]);\n\n/**\n * Decide whether a project-relative path points to a known-sensitive file\n * that a coding agent must not read or write.\n *\n * Universal blocklist (works for any agent operating on a project tree):\n *\n *   - `.env`, `.env.<anything>` — except `.env.example` (template safe to read)\n *   - `.git/` — version control internals\n *   - `node_modules/` — dependency cache (changes don't belong to the user)\n *   - `.theo/` — TheoKit build artefacts / state\n *   - Lock files at any depth: `pnpm-lock.yaml`, `package-lock.json`,\n *     `yarn.lock`, `bun.lockb`\n *\n * Operates on path segments (forward-slash normalized). Cross-platform safe.\n *\n * Use together with `safePathJoin` + `assertNoSymlinkEscape`: the former two\n * defeat traversal, this one defeats reading a file that is lexically inside\n * the project but should not be agent-visible.\n *\n * @public\n */\nexport function isForbiddenPath(input: string): boolean {\n  // Normalize: forward slashes only, strip leading \"./\"\n  const normalized = input.replace(/\\\\/g, \"/\").replace(/^\\.\\//, \"\");\n  if (normalized.length === 0) return false;\n\n  const segments = normalized.split(\"/\").filter((s) => s.length > 0);\n  if (segments.length === 0) return false;\n\n  const first = segments[0]!;\n  // .env.example is explicitly allowlisted (template safe to read)\n  if (first === \".env.example\") return false;\n  if (first === \".env\") return true;\n  if (/^\\.env\\./.test(first)) return true;\n\n  if (first === \".git\") return true;\n  if (first === \"node_modules\") return true;\n  if (first === \".theo\") return true;\n\n  const basename = segments[segments.length - 1]!;\n  if (LOCK_FILES.has(basename)) return true;\n\n  return false;\n}\n\nconst IDENTIFIER_PATTERN = /^[a-z0-9][a-z0-9\\-_]*$/i;\n\n/**\n * Validate that `input` is a safe path component (skill name, agent ID,\n * namespace, etc.) and return its lowercase form. Strict grammar\n * `^[a-z0-9][a-z0-9-_]*$` rejects path separators, dots, null bytes,\n * whitespace, unicode invisible chars, and any leading `-`/`_`.\n *\n * @param input - User-supplied identifier candidate.\n * @param options.maxLen - Maximum allowed length (default 64).\n * @returns Lowercase form of `input`.\n * @throws `ConfigurationError` with code `invalid_identifier` on rejection.\n *\n * @internal\n */\nexport function sanitizeIdentifier(input: string, options?: { maxLen?: number }): string {\n  const maxLen = options?.maxLen ?? 64;\n  if (input.length === 0 || input.length > maxLen) {\n    throw new ConfigurationError(`Identifier length out of range (1-${maxLen}): \"${input}\"`, {\n      code: \"invalid_identifier\",\n    });\n  }\n  if (!IDENTIFIER_PATTERN.test(input)) {\n    throw new ConfigurationError(`Identifier contains invalid characters: \"${input}\"`, {\n      code: \"invalid_identifier\",\n    });\n  }\n  return input.toLowerCase();\n}\n","/**\n * Shared `safePathJoin + assertNoSymlinkEscape` helper for built-in coding\n * tools (git-diff, run-vitest, list-dir, read-file, search-text). Returns a\n * pre-formatted `path_traversal` JSON string on failure or `null` on pass.\n *\n * @internal\n */\n\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  PathTraversalError,\n  safePathJoin,\n} from \"../internal/security/path-guard.js\";\n\nexport function checkPathScope(path: string | undefined, projectRoot: string): string | null {\n  if (path === undefined || path === \"\") return null;\n  try {\n    const abs = safePathJoin(projectRoot, path);\n    assertNoSymlinkEscape(abs, projectRoot);\n    return null;\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return JSON.stringify({ ok: false, error: \"path_traversal\", path });\n    }\n    throw err;\n  }\n}\n","/**\n * Shared subprocess-watch helpers for built-in coding tools (git-diff,\n * run-vitest). Wires the on(close)/on(error) settle pattern in a single\n * place to eliminate the cross-file clone flagged by jscpd.\n *\n * @internal\n */\n\nimport type { ChildProcess } from \"node:child_process\";\n\n/**\n * Settle gate — guarantees the supplied callback fires exactly once across\n * the close/error/timeout race. Clears the timer on settle.\n */\ninterface SettleGate {\n  /** True after first settle; subsequent calls are no-ops. */\n  settled: () => boolean;\n  /** Settle the gate, clear the timer, and call `onSettle()`. */\n  fire: (onSettle: () => void) => void;\n}\n\nfunction createSettleGate(timer: NodeJS.Timeout): SettleGate {\n  let done = false;\n  return {\n    settled: () => done,\n    fire: (onSettle) => {\n      if (done) return;\n      done = true;\n      clearTimeout(timer);\n      onSettle();\n    },\n  };\n}\n\n/**\n * Wire SIGKILL-on-timeout for a detached process group. Returns the settle\n * gate so caller listeners can short-circuit when the timeout already fired.\n */\nexport function armTimeoutKill<T>(\n  child: ChildProcess,\n  timeoutMs: number,\n  onTimeout: () => T,\n  resolve: (value: T) => void,\n): SettleGate {\n  const timer = setTimeout(() => {\n    gate.fire(() => {\n      try {\n        process.kill(-(child.pid ?? 0), \"SIGKILL\");\n      } catch {\n        /* already dead */\n      }\n      resolve(onTimeout());\n    });\n  }, timeoutMs);\n  const gate = createSettleGate(timer);\n  return gate;\n}\n\n/**\n * Attach a close+error pair of listeners that resolve via the supplied\n * callbacks. Honors the gate so timeout-vs-close races settle exactly once.\n */\nexport function attachChildSettlers<T>(\n  child: ChildProcess,\n  gate: SettleGate,\n  onClose: (code: number | null) => T,\n  onError: (err: Error) => T,\n  resolve: (value: T) => void,\n): void {\n  child.on(\"close\", (code) => {\n    gate.fire(() => resolve(onClose(code)));\n  });\n  child.on(\"error\", (err) => {\n    gate.fire(() => resolve(onError(err)));\n  });\n}\n","/**\n * `git_diff` — built-in tool for coding agents.\n *\n * Returns the unified diff of the working tree (or staged changes when\n * `cached=true`). Implemented as a thin `git diff` subprocess wrapper\n * with a couple of hard limits:\n *\n *   - 30s wall clock timeout (kills the process group on expiry)\n *   - 5 MB stdout cap (truncate + flag `truncated=true`)\n *   - Path scope validated through `safePathJoin` + `assertNoSymlinkEscape`\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, diff: string, truncated?: boolean }`\n *   - `{ ok: false, error: 'not_a_repo' | 'path_traversal' | 'timeout' }`\n */\n\nimport { spawn } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { z } from \"zod\";\n\nimport { defineTool } from \"../define-tool.js\";\nimport type { CustomTool } from \"../types/agent.js\";\nimport { checkPathScope } from \"./_path-scope.js\";\nimport { armTimeoutKill, attachChildSettlers } from \"./_subprocess.js\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst DEFAULT_MAX_STDOUT_BYTES = 5 * 1024 * 1024;\n\nexport interface CreateGitDiffToolOptions {\n  projectRoot: string;\n  timeoutMs?: number;\n  maxStdoutBytes?: number;\n}\n\nexport function createGitDiffTool(opts: CreateGitDiffToolOptions): CustomTool {\n  const {\n    projectRoot,\n    timeoutMs = DEFAULT_TIMEOUT_MS,\n    maxStdoutBytes = DEFAULT_MAX_STDOUT_BYTES,\n  } = opts;\n\n  return defineTool({\n    name: \"git_diff\",\n    description:\n      \"Return the unified diff of the project's working tree (or staged \" +\n      \"changes when cached=true). Scoped to a single file when 'path' is \" +\n      \"provided. Requires the project to be a git repository. Returns \" +\n      \"{ ok, diff, truncated? } or { ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().optional().describe(\"Optional project-relative file or dir scope.\"),\n      cached: z\n        .boolean()\n        .optional()\n        .describe(\"If true, show staged changes (git diff --cached). Default false.\"),\n    }),\n    handler: async ({ path, cached }) => {\n      if (!existsSync(join(projectRoot, \".git\"))) {\n        return JSON.stringify({ ok: false, error: \"not_a_repo\" });\n      }\n\n      const scopeCheck = checkPathScope(path, projectRoot);\n      if (scopeCheck !== null) return scopeCheck;\n\n      const args = buildDiffArgs(cached, path);\n      const result = await runGitProcess(projectRoot, args, timeoutMs, maxStdoutBytes);\n      return formatGitResult(result, timeoutMs);\n    },\n  });\n}\n\nfunction buildDiffArgs(cached: boolean | undefined, path: string | undefined): string[] {\n  const args = [\"diff\", \"--no-color\"];\n  if (cached === true) args.push(\"--cached\");\n  if (path !== undefined && path !== \"\") args.push(\"--\", path);\n  return args;\n}\n\nfunction formatGitResult(result: GitProcessResult, timeoutMs: number): string {\n  if (result.kind === \"timeout\") {\n    return JSON.stringify({ ok: false, error: \"timeout\", timeoutMs });\n  }\n  if (result.kind === \"error\") {\n    return JSON.stringify({ ok: false, error: \"git_failed\", stderr: result.stderr });\n  }\n  return JSON.stringify({ ok: true, diff: result.stdout, truncated: result.truncated });\n}\n\ntype GitProcessResult =\n  | { kind: \"ok\"; stdout: string; truncated: boolean }\n  | { kind: \"error\"; stderr: string }\n  | { kind: \"timeout\" };\n\nfunction runGitProcess(\n  cwd: string,\n  args: string[],\n  timeoutMs: number,\n  maxStdoutBytes: number,\n): Promise<GitProcessResult> {\n  return new Promise((resolve) => {\n    // Detached process group so we can kill the whole tree on timeout (EC-7).\n    const child = spawn(\"git\", args, { cwd, detached: true, stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n    let truncated = false;\n\n    const gate = armTimeoutKill<GitProcessResult>(\n      child,\n      timeoutMs,\n      () => ({ kind: \"timeout\" }),\n      resolve,\n    );\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      if (stdoutBytes >= maxStdoutBytes) {\n        truncated = true;\n        return;\n      }\n      const remaining = maxStdoutBytes - stdoutBytes;\n      if (chunk.length > remaining) {\n        stdoutChunks.push(chunk.subarray(0, remaining));\n        stdoutBytes = maxStdoutBytes;\n        truncated = true;\n      } else {\n        stdoutChunks.push(chunk);\n        stdoutBytes += chunk.length;\n      }\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      stderrChunks.push(chunk);\n    });\n\n    attachChildSettlers<GitProcessResult>(\n      child,\n      gate,\n      (code) => {\n        const stdout = Buffer.concat(stdoutChunks).toString(\"utf-8\");\n        const stderr = Buffer.concat(stderrChunks).toString(\"utf-8\");\n        return code === 0 ? { kind: \"ok\", stdout, truncated } : { kind: \"error\", stderr };\n      },\n      (err) => ({ kind: \"error\", stderr: err.message }),\n      resolve,\n    );\n  });\n}\n","/**\n * `list_dir` — built-in tool for coding agents.\n *\n * Returns the direct entries of a project-relative directory. Hardened\n * against the same four bug families as `read_file` plus the\n * **EC-6 unbounded output** failure mode: in a project with 10k files,\n * a naive listing returns a 5 MB JSON payload that freezes the browser\n * and (more importantly) blows past the LLM context window.\n *\n * Defaults:\n *   - `max = 500` entries (override via factory option `{ max }`)\n *   - Result includes `{ truncated: boolean, totalCount: number }` so the\n *     agent can decide whether to drill deeper or call `search_text` instead\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, entries: Array<{ name, type }>, truncated, totalCount }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'not_found' }`\n */\n\nimport type { Dirent } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport { z } from \"zod\";\n\nimport { defineTool } from \"../define-tool.js\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"../internal/security/path-guard.js\";\nimport type { CustomTool } from \"../types/agent.js\";\n\nconst DEFAULT_MAX_ENTRIES = 500;\n\nexport interface CreateListDirToolOptions {\n  /** Absolute path to the project root. Every listing is gated against this boundary. */\n  projectRoot: string;\n  /** Maximum number of entries returned per call. Default 500. */\n  max?: number;\n}\n\nexport function createListDirTool(opts: CreateListDirToolOptions): CustomTool {\n  const { projectRoot, max = DEFAULT_MAX_ENTRIES } = opts;\n\n  return defineTool({\n    name: \"list_dir\",\n    description:\n      `Return the direct entries of a project-relative directory. ` +\n      `Refuses paths outside the project root or in the sensitive-file ` +\n      `blocklist (.env, .git/, node_modules/, .theo/, lock files). Caps ` +\n      `at ${String(max)} entries by default; result carries truncated + totalCount.`,\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative directory path. Use '.' for root.\"),\n    }),\n    handler: async ({ path }) => {\n      const relative = path === \"\" || path === \".\" ? \".\" : path;\n      if (relative !== \".\" && isForbiddenPath(relative)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n      const boundary = resolveDirBoundary(relative, projectRoot, path);\n      if (\"error\" in boundary) return boundary.error;\n      const readResult = await readDirSafe(boundary.absolutePath, path);\n      if (\"error\" in readResult) return readResult.error;\n      return formatListing(readResult.dirents, max);\n    },\n  });\n}\n\nfunction resolveDirBoundary(\n  relative: string,\n  projectRoot: string,\n  originalPath: string,\n): { absolutePath: string } | { error: string } {\n  try {\n    const absolutePath = relative === \".\" ? projectRoot : safePathJoin(projectRoot, relative);\n    assertNoSymlinkEscape(absolutePath, projectRoot);\n    return { absolutePath };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path: originalPath }) };\n    }\n    throw err;\n  }\n}\n\nasync function readDirSafe(\n  absolutePath: string,\n  originalPath: string,\n): Promise<{ dirents: Dirent[] } | { error: string }> {\n  try {\n    const dirents = await readdir(absolutePath, { withFileTypes: true });\n    return { dirents };\n  } catch (err) {\n    const e = err as { code?: string };\n    if (e.code === \"ENOENT\" || e.code === \"ENOTDIR\") {\n      return { error: JSON.stringify({ ok: false, error: \"not_found\", path: originalPath }) };\n    }\n    throw err;\n  }\n}\n\nfunction formatListing(dirents: Dirent[], max: number): string {\n  const totalCount = dirents.length;\n  const truncated = totalCount > max;\n  const entries = dirents.slice(0, max).map((d) => ({\n    name: d.name,\n    type: d.isDirectory() ? (\"directory\" as const) : (\"file\" as const),\n  }));\n  return JSON.stringify({ ok: true, entries, truncated, totalCount });\n}\n","/**\n * `read_file` — built-in tool for coding agents.\n *\n * Reads a project-relative file as UTF-8 and returns its contents.\n * Hardened against the four bug families a coding agent normally hits:\n *\n *   1. **Path traversal** — `safePathJoin` rejects literal `..`,\n *      normalised escape, absolute segments, null-byte injection.\n *   2. **Symlink escape** — `assertNoSymlinkEscape` follows the full\n *      chain (and any intermediate symlinks; defence-in-depth fix v1.x).\n *   3. **Sensitive files** — `isForbiddenPath` blocks `.env*` (except\n *      `.env.example`), `.git/`, `node_modules/`, `.theo/`, lock files.\n *   4. **Binary files** — null-byte check on the first 8 KB. PNG/JPEG/\n *      compiled binaries return a structured `binary_file` error\n *      instead of garbled UTF-8 (EC-5 from the TheoKit Studio review).\n *\n * Return shape (always a JSON string the LLM consumes):\n *   - `{ ok: true, content: string }` on success\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' |\n *        'binary_file' | 'not_found' | 'too_large' }` on refusal\n *\n * The handler intentionally never throws on a \"user mistake\"\n * (traversal / forbidden / not found). Throwing reserved for SDK-side\n * mistakes that should crash the agent loop (input parse errors).\n */\n\nimport { type FileHandle, open } from \"node:fs/promises\";\nimport { z } from \"zod\";\n\nimport { defineTool } from \"../define-tool.js\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"../internal/security/path-guard.js\";\nimport type { CustomTool } from \"../types/agent.js\";\n\n/** Max single-file read size, in bytes. 5 MB ceiling — enough for any source file. */\nconst MAX_FILE_SIZE = 5 * 1024 * 1024;\n\n/** Byte window inspected for null bytes when deciding binary vs text. */\nconst BINARY_PROBE_BYTES = 8 * 1024;\n\nexport interface CreateReadFileToolOptions {\n  /** Absolute path to the project root. Every read is gated against this boundary. */\n  projectRoot: string;\n}\n\nexport function createReadFileTool(opts: CreateReadFileToolOptions): CustomTool {\n  const { projectRoot } = opts;\n\n  return defineTool({\n    name: \"read_file\",\n    description:\n      \"Read a single project-relative text file as UTF-8. Refuses paths \" +\n      \"that escape the project root, are in the sensitive-file blocklist \" +\n      \"(.env, .git/, node_modules/, .theo/, lock files), or contain a null \" +\n      \"byte in the first 8 KB (binary file). Returns { ok, content } or \" +\n      \"{ ok: false, error }.\",\n    inputSchema: z.object({\n      path: z.string().min(1).describe(\"Project-relative file path.\"),\n    }),\n    handler: async ({ path }) => {\n      if (isForbiddenPath(path)) {\n        return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n      }\n      const boundary = resolveBoundary(path, projectRoot);\n      if (\"error\" in boundary) return boundary.error;\n      const opened = await openHandleSafe(boundary.absolutePath, path);\n      if (\"error\" in opened) return opened.error;\n      try {\n        return await readContent(opened.handle, path);\n      } finally {\n        await opened.handle.close();\n      }\n    },\n  });\n}\n\nfunction resolveBoundary(\n  path: string,\n  projectRoot: string,\n): { absolutePath: string } | { error: string } {\n  try {\n    const absolutePath = safePathJoin(projectRoot, path);\n    assertNoSymlinkEscape(absolutePath, projectRoot);\n    return { absolutePath };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function openHandleSafe(\n  absolutePath: string,\n  path: string,\n): Promise<{ handle: FileHandle } | { error: string }> {\n  try {\n    const handle = await open(absolutePath, \"r\");\n    return { handle };\n  } catch (err) {\n    const e = err as { code?: string };\n    if (e.code === \"ENOENT\") {\n      return { error: JSON.stringify({ ok: false, error: \"not_found\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function readContent(handle: FileHandle, path: string): Promise<string> {\n  const stat = await handle.stat();\n  if (stat.size > MAX_FILE_SIZE) {\n    return JSON.stringify({\n      ok: false,\n      error: \"too_large\",\n      path,\n      size: stat.size,\n      limit: MAX_FILE_SIZE,\n    });\n  }\n  if (await isBinaryProbe(handle, Number(stat.size))) {\n    return JSON.stringify({ ok: false, error: \"binary_file\", path, size: stat.size });\n  }\n  const content = await handle.readFile({ encoding: \"utf-8\" });\n  return JSON.stringify({ ok: true, content, size: stat.size });\n}\n\nasync function isBinaryProbe(handle: FileHandle, size: number): Promise<boolean> {\n  const probeLen = Math.min(BINARY_PROBE_BYTES, size);\n  if (probeLen <= 0) return false;\n  const probe = Buffer.alloc(probeLen);\n  const { bytesRead } = await handle.read(probe, 0, probeLen, 0);\n  for (let i = 0; i < bytesRead; i += 1) {\n    if (probe[i] === 0) return true;\n  }\n  return false;\n}\n","/**\n * `run_vitest` — built-in tool for coding agents.\n *\n * Runs vitest against an optional file/pattern scope and returns the\n * parsed JSON report. Hardened against the same subprocess failure\n * modes as `git_diff`:\n *\n *   - 120s wall clock timeout (vitest can be slow on first run)\n *   - Process group kill on timeout (EC-7 — defeats vitest workers as\n *     grandchildren of the spawned shell)\n *   - **EC-12**: vitest stdout may contain deprecation warnings BEFORE\n *     the JSON payload. The parser scans line-by-line and extracts the\n *     LAST valid JSON object, not the first.\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, summary: { numTotalTests, numPassedTests, numFailedTests, success } }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'timeout' |\n *        'no_vitest' | 'unparseable_output' }`\n *\n * Implementation note: invokes vitest via `npx --no-install vitest`. The\n * `--no-install` avoids the agent triggering a multi-megabyte download\n * mid-turn if vitest is missing — the tool fails cleanly with\n * `no_vitest` instead.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { z } from \"zod\";\n\nimport { defineTool } from \"../define-tool.js\";\nimport { isForbiddenPath } from \"../internal/security/path-guard.js\";\nimport type { CustomTool } from \"../types/agent.js\";\nimport { checkPathScope } from \"./_path-scope.js\";\nimport { armTimeoutKill, attachChildSettlers } from \"./_subprocess.js\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst DEFAULT_MAX_STDOUT_BYTES = 10 * 1024 * 1024;\n\nexport interface CreateRunVitestToolOptions {\n  projectRoot: string;\n  timeoutMs?: number;\n  maxStdoutBytes?: number;\n}\n\nexport interface VitestSummary {\n  numTotalTests?: number;\n  numPassedTests?: number;\n  numFailedTests?: number;\n  success?: boolean;\n}\n\nexport function createRunVitestTool(opts: CreateRunVitestToolOptions): CustomTool {\n  const {\n    projectRoot,\n    timeoutMs = DEFAULT_TIMEOUT_MS,\n    maxStdoutBytes = DEFAULT_MAX_STDOUT_BYTES,\n  } = opts;\n\n  return defineTool({\n    name: \"run_vitest\",\n    description:\n      \"Run the project's vitest suite, optionally scoped to a file or \" +\n      \"pattern via 'path'. Returns parsed { ok, summary } or { ok: false, \" +\n      \"error }. Vitest stdout warnings are stripped — the parser extracts \" +\n      \"the trailing JSON report.\",\n    inputSchema: z.object({\n      path: z\n        .string()\n        .optional()\n        .describe(\"Optional vitest pattern or file path (project-relative).\"),\n    }),\n    handler: async ({ path }) => {\n      const scopeError = validateVitestScope(path, projectRoot);\n      if (scopeError !== null) return scopeError;\n\n      const args = [\"--no-install\", \"vitest\", \"run\", \"--reporter=json\"];\n      if (path !== undefined && path !== \"\") args.push(path);\n\n      const result = await runProcess(projectRoot, \"npx\", args, timeoutMs, maxStdoutBytes);\n      return formatVitestResult(result, timeoutMs);\n    },\n  });\n}\n\nfunction validateVitestScope(path: string | undefined, projectRoot: string): string | null {\n  if (path !== undefined && path !== \"\" && isForbiddenPath(path)) {\n    return JSON.stringify({ ok: false, error: \"forbidden_path\", path });\n  }\n  return checkPathScope(path, projectRoot);\n}\n\nfunction formatVitestResult(result: ProcessResult, timeoutMs: number): string {\n  if (result.kind === \"timeout\") {\n    return JSON.stringify({ ok: false, error: \"timeout\", timeoutMs });\n  }\n  if (result.kind === \"spawn_error\") {\n    return JSON.stringify({ ok: false, error: \"no_vitest\", detail: result.message });\n  }\n  const summary = extractTrailingJson(result.stdout) as VitestSummary | null;\n  if (summary === null) {\n    return JSON.stringify({\n      ok: false,\n      error: \"unparseable_output\",\n      stderrPreview: result.stderr.slice(0, 500),\n    });\n  }\n  return JSON.stringify({ ok: true, summary });\n}\n\n/**\n * Find the LAST line in `stdout` that parses as a JSON object. Vitest\n * prepends node deprecation warnings to its JSON reporter output — if\n * we naively `JSON.parse(stdout)` we get a SyntaxError. Workaround: walk\n * lines bottom-up and return the first one that parses.\n *\n * Exported for direct unit testing without spawning vitest.\n */\nexport function extractTrailingJson(stdout: string): unknown {\n  const lines = stdout.split(/\\r?\\n/);\n  for (let i = lines.length - 1; i >= 0; i -= 1) {\n    const line = lines[i]!.trim();\n    if (line.length === 0) continue;\n    if (line[0] !== \"{\" && line[0] !== \"[\") continue;\n    try {\n      return JSON.parse(line) as unknown;\n    } catch {\n      // not valid JSON — keep looking\n    }\n  }\n  return null;\n}\n\nfunction appendCapped(chunks: Buffer[], chunk: Buffer, current: number, cap: number): number {\n  if (current >= cap) return current;\n  const remaining = cap - current;\n  if (chunk.length > remaining) {\n    chunks.push(chunk.subarray(0, remaining));\n    return cap;\n  }\n  chunks.push(chunk);\n  return current + chunk.length;\n}\n\ntype ProcessResult =\n  | { kind: \"ok\"; stdout: string; stderr: string; exitCode: number }\n  | { kind: \"timeout\" }\n  | { kind: \"spawn_error\"; message: string };\n\nfunction runProcess(\n  cwd: string,\n  command: string,\n  args: string[],\n  timeoutMs: number,\n  maxStdoutBytes: number,\n): Promise<ProcessResult> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      cwd,\n      detached: true,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n\n    const gate = armTimeoutKill<ProcessResult>(\n      child,\n      timeoutMs,\n      () => ({ kind: \"timeout\" }),\n      resolve,\n    );\n\n    child.stdout.on(\"data\", (chunk: Buffer) => {\n      if (gate.settled()) return;\n      stdoutBytes = appendCapped(stdoutChunks, chunk, stdoutBytes, maxStdoutBytes);\n    });\n\n    child.stderr.on(\"data\", (chunk: Buffer) => {\n      stderrChunks.push(chunk);\n    });\n\n    attachChildSettlers<ProcessResult>(\n      child,\n      gate,\n      (code) => ({\n        kind: \"ok\",\n        stdout: Buffer.concat(stdoutChunks).toString(\"utf-8\"),\n        stderr: Buffer.concat(stderrChunks).toString(\"utf-8\"),\n        exitCode: code ?? 0,\n      }),\n      (err) => ({ kind: \"spawn_error\", message: err.message }),\n      resolve,\n    );\n  });\n}\n","/**\n * `search_text` — built-in tool for coding agents.\n *\n * Literal text search across the project tree (recursive). Sensible\n * defaults:\n *\n *   - Skips forbidden directories (`.env`, `.git/`, `node_modules/`,\n *     `.theo/`) so the agent never wastes context on dependency soup\n *     or VCS internals.\n *   - Skips files larger than `maxFileSize` (default 1 MB) and binary\n *     files (null-byte detection on first 8 KB) so a megabyte of\n *     minified JS never blows up the result.\n *   - Caps total matches at `maxMatches` (default 100) — the agent\n *     should refine the query if it gets close to the cap.\n *\n * Result shape (always a JSON string):\n *   - `{ ok: true, matches: Array<{ file, line, preview }>, truncated, totalMatches }`\n *   - `{ ok: false, error: 'path_traversal' | 'forbidden_path' | 'not_found' }`\n *\n * Implementation note: this is a plain JS recursive walk. For very\n * large repos a future iteration can shell out to `rg` (ripgrep) when\n * present, but the JS path stays as the dependency-free fallback.\n */\n\nimport type { Dirent } from \"node:fs\";\nimport { readdir, readFile } from \"node:fs/promises\";\nimport { join, relative as relativePath } from \"node:path\";\nimport { z } from \"zod\";\n\nimport { defineTool } from \"../define-tool.js\";\nimport {\n  assertNoSymlinkEscape,\n  ForbiddenPathError,\n  isForbiddenPath,\n  PathTraversalError,\n  safePathJoin,\n} from \"../internal/security/path-guard.js\";\nimport type { CustomTool } from \"../types/agent.js\";\n\nconst DEFAULT_MAX_MATCHES = 100;\nconst DEFAULT_MAX_FILE_SIZE = 1024 * 1024; // 1 MB\nconst BINARY_PROBE_BYTES = 8 * 1024;\nconst PREVIEW_MAX = 200;\n\nexport interface CreateSearchTextToolOptions {\n  projectRoot: string;\n  /** Cap on total matches returned. Default 100. */\n  maxMatches?: number;\n  /** Skip files larger than this (bytes). Default 1 MB. */\n  maxFileSize?: number;\n}\n\ninterface Match {\n  file: string;\n  line: number;\n  preview: string;\n}\n\nexport function createSearchTextTool(opts: CreateSearchTextToolOptions): CustomTool {\n  const {\n    projectRoot,\n    maxMatches = DEFAULT_MAX_MATCHES,\n    maxFileSize = DEFAULT_MAX_FILE_SIZE,\n  } = opts;\n\n  return defineTool({\n    name: \"search_text\",\n    description:\n      `Search the project tree for a literal text query. Skips sensitive ` +\n      `dirs (.env/.git/node_modules/.theo), binary files, and files over ` +\n      `1 MB. Returns up to ${String(maxMatches)} matches as { file, line, preview }. ` +\n      `Use 'path' to scope the search to a subdirectory.`,\n    inputSchema: z.object({\n      query: z.string().min(1).describe(\"Literal text to search for. Case-sensitive.\"),\n      path: z\n        .string()\n        .optional()\n        .describe(\"Optional project-relative directory to scope the search.\"),\n    }),\n    handler: async ({ query, path }) => {\n      const scope = resolveSearchScope(path, projectRoot);\n      if (\"error\" in scope) return scope.error;\n      const state: SearchState = {\n        matches: [],\n        totalMatches: 0,\n        truncated: false,\n        query,\n        maxMatches,\n        maxFileSize,\n        projectRoot,\n      };\n      await walk(scope.scopeAbs, state);\n      return JSON.stringify({\n        ok: true,\n        matches: state.matches,\n        truncated: state.truncated,\n        totalMatches: state.totalMatches,\n      });\n    },\n  });\n}\n\ninterface SearchState {\n  matches: Match[];\n  totalMatches: number;\n  truncated: boolean;\n  query: string;\n  maxMatches: number;\n  maxFileSize: number;\n  projectRoot: string;\n}\n\nfunction resolveSearchScope(\n  path: string | undefined,\n  projectRoot: string,\n): { scopeAbs: string } | { error: string } {\n  const scopeRel = path === undefined || path === \"\" || path === \".\" ? \".\" : path;\n  try {\n    const scopeAbs = scopeRel === \".\" ? projectRoot : safePathJoin(projectRoot, scopeRel);\n    assertNoSymlinkEscape(scopeAbs, projectRoot);\n    return { scopeAbs };\n  } catch (err) {\n    if (err instanceof PathTraversalError || err instanceof ForbiddenPathError) {\n      return { error: JSON.stringify({ ok: false, error: \"path_traversal\", path }) };\n    }\n    throw err;\n  }\n}\n\nasync function handleEntry(entry: Dirent, absDir: string, state: SearchState): Promise<void> {\n  const entryAbs = join(absDir, entry.name);\n  const entryRel = relativePath(state.projectRoot, entryAbs);\n  if (isForbiddenPath(entryRel)) return;\n  if (entry.isDirectory()) {\n    await walk(entryAbs, state);\n    return;\n  }\n  if (entry.isFile()) await scanFile(entryAbs, entryRel, state);\n}\n\nasync function walk(absDir: string, state: SearchState): Promise<void> {\n  if (state.truncated) return;\n  const entries = await readEntriesQuiet(absDir);\n  if (entries === null) return;\n  for (const entry of entries) {\n    if (state.truncated) return;\n    await handleEntry(entry, absDir, state);\n  }\n}\n\nasync function readEntriesQuiet(absDir: string): Promise<Dirent[] | null> {\n  try {\n    return await readdir(absDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n}\n\nasync function readBufferQuiet(absPath: string): Promise<Buffer | null> {\n  try {\n    return await readFile(absPath);\n  } catch {\n    return null;\n  }\n}\n\nfunction isBinaryBuffer(buffer: Buffer): boolean {\n  const probeEnd = Math.min(buffer.length, BINARY_PROBE_BYTES);\n  for (let i = 0; i < probeEnd; i += 1) {\n    if (buffer[i] === 0) return true;\n  }\n  return false;\n}\n\nfunction recordMatch(state: SearchState, file: string, line: number, lineText: string): boolean {\n  state.totalMatches += 1;\n  if (state.matches.length < state.maxMatches) {\n    state.matches.push({\n      file,\n      line,\n      preview: lineText.length > PREVIEW_MAX ? `${lineText.slice(0, PREVIEW_MAX)}…` : lineText,\n    });\n    return true;\n  }\n  state.truncated = true;\n  return false;\n}\n\nasync function scanFile(absPath: string, relPath: string, state: SearchState): Promise<void> {\n  const buffer = await readBufferQuiet(absPath);\n  if (buffer === null || buffer.length > state.maxFileSize) return;\n  if (isBinaryBuffer(buffer)) return;\n  const lines = buffer.toString(\"utf-8\").split(\"\\n\");\n  for (let i = 0; i < lines.length; i += 1) {\n    const line = lines[i]!;\n    if (!line.includes(state.query)) continue;\n    if (!recordMatch(state, relPath, i + 1, line)) return;\n  }\n}\n"]}

package/dist/trajectory-helpers.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `toShareGptTrajectory` — opt-in BatchResult → ShareGPT converter (ADR D139).
+ *
+ * Pure transformation. Returns `null` for failed results so callers can
+ * filter via `.map(toShareGptTrajectory).filter(Boolean)`. Tool calls and
+ * tool results are preserved when an SDKMessage trace is provided; otherwise
+ * a minimal `human → gpt` trajectory is emitted from the final text.
+ *
+ * @public
+ */
+import type { BatchResult } from "./types/batch.js";
+import type { SDKMessage } from "./types/messages.js";
+import type { ShareGptTrajectory } from "./types/trajectory.js";
+/**
+ * Convert a successful `BatchResult` to ShareGPT-format trajectory.
+ *
+ * Behavior:
+ * - `result.ok === false` → returns `null` (EC-11).
+ * - First entry is always `{from: "human", value: result.prompt}`.
+ * - When `options.messages` is supplied, each SDKMessage maps to one or
+ *   more ShareGPT entries (assistant text → gpt, tool_use → gpt + tool).
+ * - Without `options.messages`, fall back to a single `{from: "gpt"}`
+ *   entry carrying `result.result.result` (the final text) when present.
+ * - Malformed message entries are silently skipped (EC-F / EC-14).
+ *
+ * @public
+ */
+export declare function toShareGptTrajectory(result: BatchResult, options?: {
+    messages?: SDKMessage[];
+    model?: string;
+}): ShareGptTrajectory | null;