@tianshu-ai/tianshu 0.3.0

package/plugins/files/dist/tools/text-shape.js

@@ -0,0 +1,57 @@
+// Helpers for preserving the on-disk shape of a text file across
+// `edit_file` round-trips: line ending (LF vs CRLF) and BOM
+// (UTF-8 BOM only — UTF-16 BOMs imply a non-UTF-8 file we can't
+// safely string-edit anyway, so we leave those alone and let the
+// existing binary-detection path or the edit failure surface them).
+//
+// Why: the model can't see what line ending or BOM a file uses.
+// It will send `old_text: "foo\nbar"` even on a CRLF file. Without
+// normalisation:
+//   - the find fails (old_text is LF, file is CRLF)
+//   - or, if the find succeeds via some accident, new_text lands
+//     in the file with mismatched endings, leaving a mixed-ending
+//     mess that's annoying to clean up.
+// And a UTF-8 BOM on the source silently disappears when we
+// fs.writeFileSync the new contents back, because we read
+// utf8-with-BOM into a string and write a string back without
+// re-prepending it.
+//
+// Strategy (mirrors OpenCode's edit.ts):
+//   1. On read, peel a leading UTF-8 BOM (\uFEFF) if present,
+//      remember that we did.
+//   2. Detect line ending: if the original contains \r\n at all,
+//      treat it as a CRLF file; else LF.
+//   3. Normalise each `old_text` / `new_text` to the file's line
+//      ending before string-replace.
+//   4. On write, re-prepend the BOM if the source had one.
+//
+// Step 3 means: if the source is CRLF and the model sends LF,
+// we convert; if the source is LF and the model sends CRLF, we
+// also convert (collapse to LF). The file's existing convention
+// always wins; the model's input is treated as conventionally
+// LF and adapted on the way in.
+const BOM = "\uFEFF";
+/** Inspect a freshly-read file's contents and return the
+ *  normalised text plus shape metadata for round-tripping. */
+export function shapeOf(raw) {
+    const hadBom = raw.length > 0 && raw.charCodeAt(0) === 0xfeff;
+    const text = hadBom ? raw.slice(1) : raw;
+    const ending = text.includes("\r\n") ? "\r\n" : "\n";
+    return { text, hadBom, ending };
+}
+/** Normalise a model-supplied snippet to a target line ending.
+ *  Collapses any \r\n in the input to \n first (so mixed input is
+ *  cleaned), then expands to the target. Idempotent for already-
+ *  normalised input. */
+export function normaliseEnding(input, target) {
+    const lf = input.replace(/\r\n/g, "\n");
+    if (target === "\n")
+        return lf;
+    return lf.replace(/\n/g, "\r\n");
+}
+/** Re-prepend a BOM if the source had one. Always pass the
+ *  already-edited text in. */
+export function applyShape(text, source) {
+    return source.hadBom ? BOM + text : text;
+}
+//# sourceMappingURL=text-shape.js.map

package/plugins/files/dist/tools/text-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-shape.js","sourceRoot":"","sources":["../../src/tools/text-shape.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,4DAA4D;AAC5D,gEAAgE;AAChE,iEAAiE;AACjE,oEAAoE;AACpE,EAAE;AACF,gEAAgE;AAChE,mEAAmE;AACnE,iBAAiB;AACjB,oDAAoD;AACpD,iEAAiE;AACjE,kEAAkE;AAClE,wCAAwC;AACxC,4DAA4D;AAC5D,0DAA0D;AAC1D,8DAA8D;AAC9D,oBAAoB;AACpB,EAAE;AACF,yCAAyC;AACzC,8DAA8D;AAC9D,6BAA6B;AAC7B,iEAAiE;AACjE,yCAAyC;AACzC,iEAAiE;AACjE,qCAAqC;AACrC,2DAA2D;AAC3D,EAAE;AACF,8DAA8D;AAC9D,+DAA+D;AAC/D,gEAAgE;AAChE,8DAA8D;AAC9D,gCAAgC;AAEhC,MAAM,GAAG,GAAG,QAAQ,CAAC;AAWrB;8DAC8D;AAC9D,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;;wBAGwB;AACxB,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,MAAqB;IAErB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;8BAC8B;AAC9B,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAoB;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC"}

package/plugins/files/dist/tools/write-file.d.ts

@@ -0,0 +1,12 @@
+import type { Tool } from "@earendil-works/pi-ai";
+export interface WriteFileToolResult {
+    ok: boolean;
+    text: string;
+    bytesWritten?: number;
+}
+export declare function writeFileSchema(): Tool;
+export declare function executeWriteFile(userHome: string, args: {
+    path: string;
+    content: string;
+}, sessionId?: string): WriteFileToolResult;
+//# sourceMappingURL=write-file.d.ts.map

package/plugins/files/dist/tools/write-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.d.ts","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAWlD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,eAAe,IAAI,IAAI,CAgBtC;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACvC,SAAS,CAAC,EAAE,MAAM,GACjB,mBAAmB,CA4DrB"}

package/plugins/files/dist/tools/write-file.js

@@ -0,0 +1,89 @@
+// write_file — agent tool that creates or overwrites a file.
+//
+// Atomic-ish: writes via a `<file>.tmp.<pid>` sibling and renames into
+// place, so a partial write doesn't leave a half-baked target if the
+// process crashes mid-write.
+//
+// Parent directories are created on demand.
+//
+// Refuses to write outside the user home (path-helper enforced).
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "typebox";
+import { loadPrompt } from "./load-prompt.js";
+import { hasRead, markRead } from "./read-tracker.js";
+import { resolveInUserHome, toWorkspaceUri, PathOutsideRootError, } from "./path-helper.js";
+const MAX_WRITE_BYTES = 5_000_000; // 5 MB
+export function writeFileSchema() {
+    return {
+        name: "write_file",
+        description: loadPrompt("write-file.prompt.md"),
+        parameters: Type.Object({
+            path: Type.String({
+                description: 'Path relative to the workspace root, e.g. "notes/today.md". ' +
+                    'Prefer relative paths over a leading slash \u2014 a leading slash here ' +
+                    'means workspace root, NOT the sandbox OS root that `exec` sees.',
+            }),
+            content: Type.String({
+                description: "Full file contents to write. UTF-8 encoded.",
+            }),
+        }),
+    };
+}
+export function executeWriteFile(userHome, args, sessionId) {
+    let resolved;
+    try {
+        resolved = resolveInUserHome(userHome, args.path);
+    }
+    catch (err) {
+        if (err instanceof PathOutsideRootError) {
+            return { ok: false, text: `path is outside the workspace: ${args.path}` };
+        }
+        throw err;
+    }
+    if (resolved === path.resolve(userHome)) {
+        return { ok: false, text: `cannot write to the workspace root` };
+    }
+    const exists = fs.existsSync(resolved);
+    if (exists && fs.statSync(resolved).isDirectory()) {
+        return { ok: false, text: `is a directory: ${args.path}` };
+    }
+    // Read-required for overwrites: blindly replacing a file the
+    // agent never read is how user work disappears. New files are
+    // exempt — there's nothing to read.
+    if (exists && !hasRead(sessionId, resolved)) {
+        return {
+            ok: false,
+            text: `write_file: ${args.path} already exists and you haven't read it in this session. ` +
+                `Call read_file once on this path (a single full read covers any number ` +
+                `of follow-up edits in the same session) so you can see what you're ` +
+                `about to overwrite, or use edit_file for a targeted change.`,
+        };
+    }
+    const buf = Buffer.from(args.content, "utf8");
+    if (buf.length > MAX_WRITE_BYTES) {
+        return {
+            ok: false,
+            text: `content too large: ${buf.length} bytes > ${MAX_WRITE_BYTES} cap`,
+        };
+    }
+    fs.mkdirSync(path.dirname(resolved), { recursive: true });
+    // Write to a temp sibling and rename so partial writes don't trash
+    // the target on crash.
+    const tmp = `${resolved}.tmp.${process.pid}.${Date.now()}`;
+    fs.writeFileSync(tmp, buf);
+    fs.renameSync(tmp, resolved);
+    // The agent now "knows" the file's contents (it just wrote them),
+    // so a follow-up edit_file in the same session is fine.
+    markRead(sessionId, resolved);
+    return {
+        ok: true,
+        // Emit the canonical workspace:// URI so the LLM has one shape
+        // to reference produced files in its reply (the chat UI's
+        // urlTransform recognises it). Single source of truth: every
+        // fs tool round-trips paths through toWorkspaceUri.
+        text: `wrote ${buf.length} bytes to ${toWorkspaceUri(userHome, resolved)}`,
+        bytesWritten: buf.length,
+    };
+}
+//# sourceMappingURL=write-file.js.map

package/plugins/files/dist/tools/write-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.js","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,6BAA6B;AAC7B,EAAE;AACF,4CAA4C;AAC5C,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,OAAO;AAQ1C,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,UAAU,CAAC,sBAAsB,CAAC;QAC/C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW,EACT,8DAA8D;oBAC9D,yEAAyE;oBACzE,iEAAiE;aACpE,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,EAAE,6CAA6C;aAC3D,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,IAAuC,EACvC,SAAkB;IAElB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kCAAkC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,6DAA6D;IAC7D,8DAA8D;IAC9D,oCAAoC;IACpC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EACF,eAAe,IAAI,CAAC,IAAI,2DAA2D;gBACnF,yEAAyE;gBACzE,qEAAqE;gBACrE,6DAA6D;SAChE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB,GAAG,CAAC,MAAM,YAAY,eAAe,MAAM;SACxE,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,mEAAmE;IACnE,uBAAuB;IACvB,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE7B,kEAAkE;IAClE,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE9B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,+DAA+D;QAC/D,0DAA0D;QAC1D,6DAA6D;QAC7D,oDAAoD;QACpD,IAAI,EAAE,SAAS,GAAG,CAAC,MAAM,aAAa,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QAC1E,YAAY,EAAE,GAAG,CAAC,MAAM;KACzB,CAAC;AACJ,CAAC"}

package/plugins/files/dist/tools/write-file.prompt.md

@@ -0,0 +1,14 @@
+Create or overwrite a file in the workspace. Parent directories
+are created if missing.
+
+## Guidelines
+
+- Use `write_file` for new files or complete rewrites. For
+  in-place changes to an existing file prefer `edit_file`.
+- **If the target file already exists, you must call `read_file`
+  on it first.** `write_file` will refuse to overwrite an
+  unseen file with a specific error — overwriting blind is how
+  you destroy work the user will be sad about.
+- Don't proactively create documentation files (`*.md`,
+  `README.*`) the user didn't ask for.
+- Avoid writing emojis to files unless the user asked.

package/plugins/files/manifest.json

@@ -0,0 +1,100 @@
+{
+  "id": "files",
+  "version": "0.1.0",
+  "displayName": "Workspace Files",
+  "description": "Browse, read, and upload files in the tenant workspace.",
+  "author": "tianshu-ai",
+  "license": "Apache-2.0",
+  "permissions": ["workspace.read", "workspace.write"],
+  "client": { "entry": "@tianshu-builtin/plugin-files/client" },
+  "server": { "entry": "@tianshu-builtin/plugin-files/server" },
+  "contributes": {
+    "topBarButtons": [
+      {
+        "id": "toggle",
+        "icon": "FolderOpen",
+        "tooltip": "Workspace files",
+        "opensPanel": "files.main",
+        "order": 100
+      }
+    ],
+    "rightPanels": [
+      {
+        "id": "main",
+        "displayName": "Files",
+        "component": "FilesPanel"
+      }
+    ],
+    "composerActions": [
+      {
+        "id": "attach",
+        "icon": "Paperclip",
+        "tooltip": "Attach file",
+        "component": "UploadButton",
+        "order": 100
+      }
+    ],
+    "attachmentRenderers": [
+      {
+        "id": "image",
+        "mimePattern": "image/*",
+        "component": "ImageAttachment",
+        "order": 100
+      },
+      {
+        "id": "any",
+        "mimePattern": "*/*",
+        "component": "FileAttachment",
+        "order": 999
+      }
+    ],
+    "apiRoutes": [
+      { "method": "GET",  "path": "/list",   "handler": "list"   },
+      { "method": "GET",  "path": "/read",   "handler": "read"   },
+      { "method": "GET",  "path": "/raw",    "handler": "raw"    },
+      { "method": "POST", "path": "/upload", "handler": "upload" }
+    ],
+    "tools": [
+      { "id": "list_dir",              "module": "ListDirTool"            },
+      { "id": "read_file",             "module": "ReadFileTool"           },
+      { "id": "write_file",            "module": "WriteFileTool"          },
+      { "id": "edit_file",             "module": "EditFileTool"           },
+      { "id": "glob",                  "module": "GlobTool"               },
+      { "id": "tenant_config_list",    "module": "TenantConfigListTool"   },
+      { "id": "tenant_config_read",    "module": "TenantConfigReadTool"   },
+      { "id": "tenant_config_write",   "module": "TenantConfigWriteTool"  },
+      { "id": "tenant_config_edit",    "module": "TenantConfigEditTool"   },
+      { "id": "tenant_config_delete",  "module": "TenantConfigDeleteTool" },
+      { "id": "tenant_config_glob",    "module": "TenantConfigGlobTool"   }
+    ],
+    "skills": [
+      { "id": "workspace-layout", "path": "skills/files-workspace-layout.md" }
+    ],
+    "systemPromptFragments": [
+      {
+        "id": "workspace-layout",
+        "text": "WORKSPACE LAYOUT\nYour default working directory is the user's private home in this tenant.\n\nPersonal directories (use freely):\n  ./projects/<slug>/   active work; reports, code, deliverables go here.\n  ./uploads/           files the user uploaded for you to look at.\n  ./tmp/               scratch space; clean up after yourself.\n  ./trash/             soft-delete; move things here instead of removing them.\n  ./USER.md            personal preferences (read on demand)."
+      },
+      {
+        "id": "workspace-conventions",
+        "text": "Conventions:\n  - Deliverables go to ./projects/<slug>/, never the home root.\n  - When the user uploads a file, expect it under ./uploads/.\n  - Don't leave scratch artefacts in ./projects/ or the root \u2014 use ./tmp/.\n  - Other users' homes in this tenant are off-limits; you cannot reach them."
+      },
+      {
+        "id": "workspace-references",
+        "text": "Referencing files in your reply:\n  - When you point at a workspace file in your response (e.g. an image you just wrote, a generated report, an attachment), use the workspace:// URI you got back from the fs tool, e.g. `![cover](workspace:///projects/x/cover.png)`.\n  - The chat UI knows how to render those; absolute host paths or bare \"./foo\" links won't preview."
+      },
+      {
+        "id": "edit-vs-write",
+        "text": "- `edit_file` is for changes to an existing file (in-place exact-text replace, atomic). `write_file` is for new files or full rewrites of the entire file. Prefer editing existing files; do not create new files unless asked."
+      },
+      {
+        "id": "edit-old-text-uniqueness",
+        "text": "- Each `edit_file` `old_text` must appear exactly once in the file. Keep `old_text` as small as possible while still being unique \u2014 don't pad with large unchanged regions to \"connect\" two distant changes; emit two separate edits in the same `edits[]` batch instead."
+      },
+      {
+        "id": "read-before-edit",
+        "text": "- Before `edit_file` (or `write_file` overwrite) on a file you haven't seen yet in this session, call `read_file` once. The host tracks reads per session, so a single full-file read covers any number of follow-up `edit_file` / `write_file` calls on that same path \u2014 don't re-read between edits. Files you just created with `write_file` count as already-read; you can `edit_file` them right away without reading first."
+      }
+    ]
+  }
+}

package/plugins/files/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@tianshu-builtin/plugin-files",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Workspace file browser for Tianshu (builtin plugin).",
+  "type": "module",
+  "main": "./dist/server.js",
+  "types": "./dist/server.d.ts",
+  "exports": {
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./manifest.json": "./manifest.json"
+  },
+  "files": ["dist", "src", "skills", "manifest.json"],
+  "scripts": {
+    "build": "tsc && node scripts/copy-prompts.mjs",
+    "predev": "node scripts/copy-prompts.mjs",
+    "dev": "tsc --watch --preserveWatchOutput",
+    "copy-prompts": "node scripts/copy-prompts.mjs",
+    "test": "vitest run --passWithNoTests"
+  },
+  "dependencies": {
+    "@tianshu/plugin-sdk": "*"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@types/react": "^19.2.17",
+    "lucide-react": "^1.17.0",
+    "react": "^19.0.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.6"
+  }
+}

package/plugins/files/skills/files-workspace-layout.md

@@ -0,0 +1,29 @@
+---
+name: files-workspace-layout
+description: Conventions for the per-user workspace this `files` plugin manages — directory roles (projects, uploads, tmp, trash), where deliverables go, what NOT to touch.
+when:
+  toolPresent: read_file
+---
+
+Your default working directory is the user's private home in this tenant.
+Filesystem tools (`list_dir`, `read_file`, `write_file`, `edit_file`, `glob`)
+operate relative to this home (`/` = home).
+
+## Personal directories
+
+| Path | Role |
+|------|------|
+| `./projects/<slug>/` | Active work. Reports, code, deliverables go here. |
+| `./uploads/`         | Files the user uploaded for you to look at. |
+| `./tmp/`             | Scratch space. Clean up after yourself. |
+| `./trash/`           | Soft-delete. Move things here instead of removing them. |
+| `./USER.md`          | Personal preferences (read on demand). |
+
+## Conventions
+
+- Deliverables go to `./projects/<slug>/`, never the home root.
+- When the user uploads a file, expect it under `./uploads/`.
+- Don't leave scratch artefacts in `./projects/` or the root — use `./tmp/`.
+- Other users' homes in this tenant are off-limits; you cannot reach them via
+  these tools.
+- When you make changes, briefly say what you changed in your reply.

package/plugins/microsandbox/dist/admin/browser-routes.d.ts

@@ -0,0 +1,41 @@
+import type { Request, Response } from "express";
+import type { SandboxRunner } from "@tianshu/plugin-sdk";
+export interface BrowserRoutesDeps {
+    /** Same accessor pattern as the sandbox routes — lets the routes
+     *  module stay decoupled from plugin activation timing. */
+    getRunner(): SandboxRunner | null;
+}
+/** Public payload returned by GET /browser/status. Stable shape so
+ *  the admin page can render meaningfully through every state of
+ *  the upcoming chromium rollout (no sidecar → sidecar but no
+ *  chromium → chromium up). */
+export interface BrowserStatusPayload {
+    /** True iff every required port forward is detected. v0.1 always
+     *  reports false because the chromium stack ships in N+5.2. */
+    ready: boolean;
+    /** Whatever subset of port forwards the sidecar has seen. Port
+     *  values are host ports; the agent's `browser.cdp` consumer
+     *  builds `http://localhost:<port>` URLs from these. */
+    ports: {
+        cdp: number | null;
+        mcp: number | null;
+        vnc: number | null;
+    };
+    /** Per-tenant viewport last reported by the BrowserPanel
+     *  ResizeObserver, when present. Used by the agent's browser
+     *  tools to set Playwright's viewport before navigating. */
+    lastViewport: {
+        width: number;
+        height: number;
+    } | null;
+    /** Human-readable hint shown by the admin page when ready=false.
+     *  Helps users tell "build the browser layer" from "browser is
+     *  starting up" without grepping logs. */
+    hint?: string;
+}
+export declare function buildBrowserRoutes(deps: BrowserRoutesDeps): {
+    getBrowserStatus: (_req: Request, res: Response) => Promise<void>;
+    postBrowserRestart: (_req: Request, res: Response) => Promise<void>;
+    postBrowserResize: (req: Request, res: Response) => Promise<void>;
+};
+//# sourceMappingURL=browser-routes.d.ts.map

package/plugins/microsandbox/dist/admin/browser-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-routes.d.ts","sourceRoot":"","sources":["../../src/admin/browser-routes.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzE,MAAM,WAAW,iBAAiB;IAChC;+DAC2D;IAC3D,SAAS,IAAI,aAAa,GAAG,IAAI,CAAC;CACnC;AAYD;;;+BAG+B;AAC/B,MAAM,WAAW,oBAAoB;IACnC;mEAC+D;IAC/D,KAAK,EAAE,OAAO,CAAC;IACf;;4DAEwD;IACxD,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;KACpB,CAAC;IACF;;gEAE4D;IAC5D,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvD;;8CAE0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB;6BAMlB,OAAO,OAAO,QAAQ;+BA+BpB,OAAO,OAAO,QAAQ;6BAmDxB,OAAO,OAAO,QAAQ;EA4F7D"}

package/plugins/microsandbox/dist/admin/browser-routes.js

@@ -0,0 +1,208 @@
+// HTTP route handlers for the Browser admin page (N+5.1 scaffold).
+//
+// Pure read-through over the runner's BrowserSidecar plus a
+// best-effort restart endpoint. The chromium / Xvfb / noVNC stack
+// itself isn't shipped yet — those routes report "not running"
+// today, and become meaningful once the Sandboxfile that includes
+// the browser layer lands in N+5.2.
+//
+// Why this is a separate file (not folded into routes.ts):
+// - admin/routes.ts is already 600+ lines and four conceptual
+//   surfaces (sandboxfile / builds / shell / live). Sandwiching a
+//   fifth area in that file makes future readers thumb past 90%
+//   irrelevant code to find browser logic.
+// - These routes also have a different liveness story: the sidecar
+//   may exist but report "no chromium running yet". The route
+//   shape reflects that explicitly via { ready, ports, lastError }
+//   instead of bolting onto the existing sandbox status response.
+import { McpToolset } from "@tianshu/plugin-sdk";
+/**
+ * Cap viewport sizes the runner is willing to set. Matches Xvfb's
+ * `-screen 0 2400x1800x24` framebuffer in browser.yaml; overshooting
+ * means xrandr silently truncates.
+ */
+const VIEWPORT_MIN_W = 640;
+const VIEWPORT_MIN_H = 480;
+const VIEWPORT_MAX_W = 2400;
+const VIEWPORT_MAX_H = 1800;
+export function buildBrowserRoutes(deps) {
+    const getSidecar = () => {
+        const runner = deps.getRunner();
+        return runner?.browser ?? null;
+    };
+    const getBrowserStatus = async (_req, res) => {
+        const sidecar = getSidecar();
+        if (!sidecar) {
+            const payload = {
+                ready: false,
+                ports: { cdp: null, mcp: null, vnc: null },
+                lastViewport: null,
+                hint: "Sandbox runner not active — start it via the Sandbox admin page.",
+            };
+            res.json(payload);
+            return;
+        }
+        const cdp = sidecar.cdpHostPort();
+        const mcp = sidecar.mcpHostPort();
+        const vnc = sidecar.vncHostPort();
+        const ready = cdp !== undefined && mcp !== undefined && vnc !== undefined;
+        const payload = {
+            ready,
+            ports: {
+                cdp: cdp ?? null,
+                mcp: mcp ?? null,
+                vnc: vnc ?? null,
+            },
+            lastViewport: sidecar.getLastViewport() ?? null,
+            hint: ready
+                ? undefined
+                : "Browser stack not running. Add chromium + Playwright MCP + noVNC to your Sandboxfile and rebuild (lands in a follow-up PR).",
+        };
+        res.json(payload);
+    };
+    const postBrowserRestart = async (_req, res) => {
+        const sidecar = getSidecar();
+        if (!sidecar) {
+            res.status(503).json({
+                ok: false,
+                error: "no_sidecar",
+                message: "Sandbox runner not active.",
+            });
+            return;
+        }
+        try {
+            const ok = await sidecar.restart();
+            res.json({
+                ok,
+                // restart() returning false is a normal v0.1 outcome — chromium
+                // isn't running so there's nothing to restart. We surface that
+                // verbatim so the admin page can show a "no-op" badge.
+                message: ok
+                    ? "browser restarted"
+                    : "no chromium stack running; ship the browser sandbox layer first",
+            });
+        }
+        catch (err) {
+            res.status(500).json({
+                ok: false,
+                error: "restart_failed",
+                message: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    // POST /api/p/microsandbox/browser/resize
+    //
+    // Three-layer dynamic resize, copy of the closed-source tianshu
+    // approach (see `/api/browser/resize` in the predecessor):
+    //   (1) xrandr --fb resizes the Xvfb framebuffer so noVNC isn't
+    //       letterboxed or cropped.
+    //   (2) wmctrl re-fits the chromium X11 window to the new
+    //       framebuffer.
+    //   (3) Playwright MCP browser_resize (== page.setViewportSize)
+    //       tells chromium to re-layout its inner viewport — without
+    //       this the X11 window changes but the page content stays
+    //       at its launch size and looks like "app only fills part of
+    //       the panel".
+    // Layer (3) also wins if the sandbox image is missing xrandr/
+    // wmctrl, because Playwright manages the viewport at the chrome
+    // level on its own. Layers (1)+(2) are best-effort.
+    //
+    // The host BrowserViewportPanel POSTs here as the user finishes
+    // dragging the panel resize handle (debounced client-side). We
+    // also stash the latest viewport on the BrowserSidecar so the
+    // browser tool can re-apply it after navigation.
+    const postBrowserResize = async (req, res) => {
+        const sidecar = getSidecar();
+        if (!sidecar) {
+            res.status(503).json({ ok: false, error: "no_sidecar" });
+            return;
+        }
+        const runner = deps.getRunner();
+        const body = (req.body ?? {});
+        const w = clampInt(Number(body.width), VIEWPORT_MIN_W, VIEWPORT_MAX_W);
+        const h = clampInt(Number(body.height), VIEWPORT_MIN_H, VIEWPORT_MAX_H);
+        if (!w || !h) {
+            res.status(400).json({ ok: false, error: "viewport_required" });
+            return;
+        }
+        // (1) + (2): X11 layer — best-effort, errors non-fatal.
+        let x11Note;
+        if (runner && typeof runner.exec === "function") {
+            const script = `DISPLAY=:99 xrandr --fb ${w}x${h} 2>/dev/null || true; ` +
+                `WID=$(DISPLAY=:99 wmctrl -l 2>/dev/null | grep -iE 'chromium|chrome|google' | awk '{print $1; exit}'); ` +
+                `if [ -n "$WID" ]; then DISPLAY=:99 wmctrl -i -r "$WID" -e "0,0,0,${w},${h}" 2>/dev/null || true; fi`;
+            try {
+                await runner.exec({ command: script, timeoutMs: 10_000 });
+            }
+            catch (err) {
+                x11Note =
+                    err instanceof Error ? err.message : String(err);
+            }
+        }
+        // (3): chromium viewport via Playwright MCP. This is what
+        // actually re-layouts the page content. Done after the X11
+        // resize so chrome doesn't fight us by trying to re-fit to
+        // the smaller window first.
+        let mcpNote;
+        const mcpPort = sidecar.mcpHostPort();
+        if (mcpPort) {
+            try {
+                // Spin up a single-shot McpToolset bound to the tenant's
+                // Playwright MCP, call browser_resize, drop. The toolset
+                // handles the Host-header pinning + SDK transport setup.
+                const ts = new McpToolset({
+                    name: "playwright-resize",
+                    prefix: "",
+                    resolve: () => `http://127.0.0.1:${mcpPort}/mcp`,
+                    upstreamHost: "localhost:3200",
+                });
+                await ts.refresh();
+                const tool = ts.listTools().find((t) => t.schema.name === "browser_resize");
+                if (tool) {
+                    await tool.execute({ width: w, height: h }, 
+                    // Stub the per-call context the SDK expects — we don't
+                    // care about logging beyond x11Note here.
+                    {
+                        pluginId: "microsandbox",
+                        tenantId: "unknown",
+                        userId: "unknown",
+                        capabilities: { get: () => undefined, has: () => false },
+                        userHomeDir: "",
+                        tenantHomeDir: "",
+                        log: { info: () => { }, warn: () => { }, error: () => { } },
+                    });
+                }
+                else {
+                    mcpNote = "browser_resize not advertised by upstream MCP";
+                }
+            }
+            catch (err) {
+                mcpNote = err instanceof Error ? err.message : String(err);
+            }
+        }
+        else {
+            mcpNote = "MCP port not yet detected";
+        }
+        // Cache the latest viewport so the agent's browser tool can
+        // re-apply it automatically after each goto (chrome resets
+        // viewport on navigation).
+        sidecar.setLastViewport({ width: w, height: h });
+        res.json({
+            ok: true,
+            applied: { width: w, height: h },
+            ...(x11Note ? { x11Note } : {}),
+            ...(mcpNote ? { mcpNote } : {}),
+        });
+    };
+    return {
+        getBrowserStatus,
+        postBrowserRestart,
+        postBrowserResize,
+    };
+}
+function clampInt(n, lo, hi) {
+    if (!Number.isFinite(n))
+        return 0;
+    return Math.max(lo, Math.min(hi, Math.round(n)));
+}
+//# sourceMappingURL=browser-routes.js.map

package/plugins/microsandbox/dist/admin/browser-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-routes.js","sourceRoot":"","sources":["../../src/admin/browser-routes.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,4DAA4D;AAC5D,kEAAkE;AAClE,+DAA+D;AAC/D,kEAAkE;AAClE,oCAAoC;AACpC,EAAE;AACF,2DAA2D;AAC3D,8DAA8D;AAC9D,kEAAkE;AAClE,gEAAgE;AAChE,2CAA2C;AAC3C,mEAAmE;AACnE,8DAA8D;AAC9D,mEAAmE;AACnE,kEAAkE;AAIlE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQjD;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,IAAI,CAAC;AA4B5B,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,UAAU,GAAG,GAA0B,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAyB;gBACpC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;gBAC1C,YAAY,EAAE,IAAI;gBAClB,IAAI,EAAE,kEAAkE;aACzE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAyB;YACpC,KAAK;YACL,KAAK,EAAE;gBACL,GAAG,EAAE,GAAG,IAAI,IAAI;gBAChB,GAAG,EAAE,GAAG,IAAI,IAAI;gBAChB,GAAG,EAAE,GAAG,IAAI,IAAI;aACjB;YACD,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,IAAI;YAC/C,IAAI,EAAE,KAAK;gBACT,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,6HAA6H;SAClI,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE;gBACF,gEAAgE;gBAChE,+DAA+D;gBAC/D,uDAAuD;gBACvD,OAAO,EAAE,EAAE;oBACT,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,iEAAiE;aACtE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,0CAA0C;IAC1C,EAAE;IACF,gEAAgE;IAChE,2DAA2D;IAC3D,gEAAgE;IAChE,gCAAgC;IAChC,0DAA0D;IAC1D,qBAAqB;IACrB,gEAAgE;IAChE,iEAAiE;IACjE,+DAA+D;IAC/D,kEAAkE;IAClE,oBAAoB;IACpB,8DAA8D;IAC9D,gEAAgE;IAChE,oDAAoD;IACpD,EAAE;IACF,gEAAgE;IAChE,+DAA+D;IAC/D,8DAA8D;IAC9D,iDAAiD;IACjD,MAAM,iBAAiB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwC,CAAC;QACrE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,OAA2B,CAAC;QAChC,IAAI,MAAM,IAAI,OAAQ,MAA6B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACxE,MAAM,MAAM,GACV,2BAA2B,CAAC,IAAI,CAAC,wBAAwB;gBACzD,yGAAyG;gBACzG,oEAAoE,CAAC,IAAI,CAAC,2BAA2B,CAAC;YACxG,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,2DAA2D;QAC3D,2DAA2D;QAC3D,4BAA4B;QAC5B,IAAI,OAA2B,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,yDAAyD;gBACzD,yDAAyD;gBACzD,yDAAyD;gBACzD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC;oBACxB,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,EAAE;oBACV,OAAO,EAAE,GAAG,EAAE,CAAC,oBAAoB,OAAO,MAAM;oBAChD,YAAY,EAAE,gBAAgB;iBAC/B,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;gBAC5E,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,IAAI,CAAC,OAAO,CAChB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;oBACvB,uDAAuD;oBACvD,0CAA0C;oBAC1C;wBACE,QAAQ,EAAE,cAAc;wBACxB,QAAQ,EAAE,SAAS;wBACnB,MAAM,EAAE,SAAS;wBACjB,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;wBACxD,WAAW,EAAE,EAAE;wBACf,aAAa,EAAE,EAAE;wBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;qBACzD,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,+CAA+C,CAAC;gBAC5D,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,2BAA2B,CAAC;QACxC,CAAC;QAED,4DAA4D;QAC5D,2DAA2D;QAC3D,2BAA2B;QAC3B,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAEjD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,gBAAgB;QAChB,kBAAkB;QAClB,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,EAAU,EAAE,EAAU;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC"}