@wascartech/devbot 0.0.0-stage → 2.1.1

package/dist/outbound-webhook.js

@@ -0,0 +1,314 @@
+import { createHmac, randomUUID } from "node:crypto";
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
+import { config } from "./config.js";
+import { log } from "./logger.js";
+import { matchingWebhooks, enqueueDelivery, getWebhook, claimDueDeliveries, settleDeliverySucceeded, settleDeliveryFailed, resetStuckDeliveries, purgeDeliveriesOlderThan, } from "./outbound-webhook-store.js";
+import { getProject } from "./token-store.js";
+import { getPlatform } from "./platform/index.js";
+// Outbound webhook emitter + delivery worker. Forge-agnostic by construction:
+// the only platform call is the neutral links.workItemUrl. emit* is a purely
+// local DB write (one row per matching endpoint); the worker does all network
+// I/O, so a webhook can never block or fail a run.
+const SIGNATURE_HEADER = "X-DevBot-Signature-256";
+export function signPayload(secret, body) {
+    return "sha256=" + createHmac("sha256", secret).update(body).digest("hex");
+}
+// The delivery id carried in the payload; used for the X-DevBot-Delivery header
+// so a receiver can dedupe on the same value it sees in the body.
+function deliveryIdOf(payload) {
+    try {
+        const parsed = JSON.parse(payload);
+        return typeof parsed.delivery === "string" ? parsed.delivery : "";
+    }
+    catch {
+        return "";
+    }
+}
+// ---- SSRF guard ------------------------------------------------------------
+// Outbound URLs are admin-configured, but a URL like http://169.254.169.254/
+// can reach cloud metadata. Block loopback/link-local/private/CGNAT/ULA/
+// multicast/broadcast by default; WEBHOOK_ALLOW_PRIVATE_HOSTS=true opts in to
+// internal CI/messaging endpoints (see docs/outbound-webhooks.md).
+function ipv4Blocked(ip) {
+    const parts = ip.split(".").map((n) => Number(n));
+    const [a, b] = parts;
+    if (a === 0 || a === 10 || a === 127)
+        return true;
+    if (a === 100 && b >= 64 && b <= 127)
+        return true; // CGNAT 100.64/10
+    if (a === 169 && b === 254)
+        return true; // link-local
+    if (a === 172 && b >= 16 && b <= 31)
+        return true; // private
+    if (a === 192 && b === 168)
+        return true; // private
+    if (a === 192 && b === 0)
+        return true; // 192.0.0.0/24 + 192.0.2.0/24
+    if (a >= 224)
+        return true; // multicast + reserved + broadcast
+    return false;
+}
+function ipv6Blocked(ip) {
+    const v = ip.toLowerCase().split("%")[0];
+    if (v === "::1" || v === "::")
+        return true;
+    if (v.startsWith("fe80"))
+        return true; // link-local
+    const first = v.split(":")[0];
+    const n = parseInt(first || "0", 16);
+    if ((n & 0xfe00) === 0xfc00)
+        return true; // ULA fc00::/7
+    if ((n & 0xff00) === 0xff00)
+        return true; // multicast ff00::/8
+    // IPv4-mapped (::ffff:a.b.c.d) — classify on the embedded v4.
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(v);
+    if (mapped)
+        return ipv4Blocked(mapped[1]);
+    return false;
+}
+export function isBlockedAddress(addr) {
+    const v = isIP(addr);
+    if (v === 4)
+        return ipv4Blocked(addr);
+    if (v === 6)
+        return ipv6Blocked(addr);
+    return true; // not an IP literal → treat as blocked/unknown
+}
+// Resolve a URL's host and reject when any resolved address is blocked (unless
+// private hosts are explicitly allowed). Returns an error string, or null when
+// the target is safe to call.
+export async function checkTargetAllowed(rawUrl) {
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return "invalid url";
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return "url must be http(s)";
+    if (config.WEBHOOK_ALLOW_PRIVATE_HOSTS)
+        return null;
+    const host = url.hostname.replace(/^\[|\]$/g, "");
+    if (isIP(host))
+        return isBlockedAddress(host) ? "blocked address" : null;
+    let addrs;
+    try {
+        addrs = await lookup(host, { all: true, verbatim: true });
+    }
+    catch {
+        return "dns resolution failed";
+    }
+    if (addrs.length === 0)
+        return "dns resolution failed";
+    if (addrs.some((a) => isBlockedAddress(a.address)))
+        return "blocked address";
+    return null;
+}
+export function buildRunOutcomePayload(event) {
+    return JSON.stringify(event);
+}
+export function buildMrPayload(event) {
+    return JSON.stringify(event);
+}
+function workItemUrl(projectId, workItemNumber) {
+    const projectPath = getProject(projectId)?.projectPath ?? "";
+    try {
+        return getPlatform().links.workItemUrl(projectPath, workItemNumber);
+    }
+    catch {
+        return "";
+    }
+}
+function projectPath(projectId) {
+    return getProject(projectId)?.projectPath ?? "";
+}
+// Resolve the concrete endpoints (project + global) an event should be sent to.
+// Kept exported for tests and the "test delivery" route.
+export function resolveMatchingEndpoints(projectId, event) {
+    return matchingWebhooks(projectId, event);
+}
+// Persist one delivery row per matching endpoint. Best-effort: a store failure
+// is logged and never propagates into the run.
+export function emitEvent(projectId, event, payloadFor) {
+    let count = 0;
+    try {
+        for (const endpoint of resolveMatchingEndpoints(projectId, event)) {
+            const eventPayload = payloadFor();
+            eventPayload.delivery = randomUUID();
+            enqueueDelivery(projectId, endpoint.name, event, buildRunOutcomePayload(eventPayload));
+            count++;
+        }
+    }
+    catch (e) {
+        log.warn("outbound webhook emit failed", { projectId, event, err: e });
+    }
+    return count;
+}
+// A run emits `run.started` once per task lifecycle — only on the first
+// attempt. A transient failure requeues the row with attempts++, so retries
+// don't re-notify subscribers; a crash-replayed row keeps attempts 0 and does.
+export function shouldEmitRunStarted(attempts) {
+    return attempts === 0;
+}
+// Emit `run.started` for a task that is about to execute. `run.status` is
+// "running" with no failure detail (none exists yet).
+export function emitRunStarted(input) {
+    emitEvent(input.projectId, "run.started", () => baseEvent(input, "run.started", "running", {}));
+}
+export function emitRunOutcome(input, outcome) {
+    const event = outcome.kind === "ok" ? "run.succeeded" : outcome.kind === "cancelled" ? "run.cancelled" : "run.failed";
+    const failure = outcome.failure;
+    emitEvent(input.projectId, event, () => baseEvent(input, event, outcome.kind, {
+        reason: outcome.reason ?? failure?.message ?? "",
+        phase: failure?.phase ?? "",
+        kind: failure?.kind ?? "",
+    }));
+}
+export function emitMrEvent(input, changeRequest, created) {
+    const event = created ? "mr.created" : "mr.updated";
+    emitEvent(input.projectId, event, () => ({
+        ...baseEvent(input, event, "ok", {}),
+        changeRequest: { number: changeRequest.number, url: changeRequest.webUrl, created },
+    }));
+}
+function baseEvent(input, event, status, opts) {
+    return {
+        event,
+        delivery: "",
+        timestamp: new Date().toISOString(),
+        project: { id: input.projectId, path: projectPath(input.projectId) },
+        workItem: {
+            id: input.workItemId,
+            number: input.workItemNumber,
+            url: workItemUrl(input.projectId, input.workItemNumber),
+        },
+        run: {
+            mode: input.mode,
+            model: input.model,
+            variant: input.variant,
+            status,
+            phase: opts.phase ?? "",
+            kind: opts.kind ?? "",
+            reason: opts.reason ?? "",
+        },
+    };
+}
+// ---- Delivery worker -------------------------------------------------------
+async function deliverOnce(endpoint, event, delivery, payload) {
+    const blocked = await checkTargetAllowed(endpoint.url);
+    if (blocked)
+        return { ok: false, responseStatus: null, responseBody: "", error: blocked };
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), config.WEBHOOK_DELIVERY_TIMEOUT_MS);
+    try {
+        const res = await fetch(endpoint.url, {
+            method: "POST",
+            redirect: "manual",
+            signal: controller.signal,
+            headers: {
+                "Content-Type": "application/json",
+                "User-Agent": "DevBot-Webhook/1.0",
+                "X-DevBot-Event": event,
+                "X-DevBot-Delivery": delivery,
+                [SIGNATURE_HEADER]: signPayload(endpoint.secret, payload),
+                ...endpoint.headers,
+            },
+            body: payload,
+        });
+        const body = await res.text().catch(() => "");
+        if (res.status >= 200 && res.status < 300) {
+            return { ok: true, responseStatus: res.status, responseBody: body, error: "" };
+        }
+        if (res.status >= 300 && res.status < 400) {
+            return { ok: false, responseStatus: res.status, responseBody: body, error: `redirect not followed (${res.status})` };
+        }
+        return { ok: false, responseStatus: res.status, responseBody: body, error: `http ${res.status}` };
+    }
+    catch (e) {
+        const msg = e instanceof Error && e.name === "AbortError" ? "timeout" : e instanceof Error ? e.message : String(e);
+        return { ok: false, responseStatus: null, responseBody: "", error: msg };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// Deliver every due row once. Exported so tests can drive it without timers.
+export async function processDueDeliveries(deps = {}) {
+    const now = deps.now ? deps.now() : Date.now();
+    const due = claimDueDeliveries(deps.limit ?? 20, now);
+    for (const delivery of due) {
+        const endpoint = getWebhook(delivery.projectId, delivery.webhookName);
+        if (!endpoint) {
+            // Endpoint removed after enqueue — nothing to deliver.
+            settleDeliveryFailed(delivery.id, {
+                responseStatus: null,
+                responseBody: "",
+                error: "endpoint removed",
+                retryAt: null,
+            });
+            continue;
+        }
+        const result = await deliverOnce(endpoint, delivery.event, deliveryIdOf(delivery.payload), delivery.payload);
+        if (result.ok) {
+            settleDeliverySucceeded(delivery.id, result.responseStatus, result.responseBody);
+            continue;
+        }
+        const willRetry = delivery.attempts + 1 < config.WEBHOOK_RETRY_MAX;
+        settleDeliveryFailed(delivery.id, {
+            responseStatus: result.responseStatus,
+            responseBody: result.responseBody,
+            error: result.error,
+            retryAt: willRetry ? Date.now() + config.WEBHOOK_RETRY_BACKOFF_MS * (delivery.attempts + 1) : null,
+        });
+        log.warn("outbound webhook delivery failed", {
+            projectId: delivery.projectId,
+            webhook: delivery.webhookName,
+            event: delivery.event,
+            status: result.responseStatus,
+            willRetry,
+            error: result.error,
+        });
+    }
+    return due.length;
+}
+let workerTimer = null;
+export function startWebhookWorker() {
+    if (workerTimer)
+        return;
+    const stuck = resetStuckDeliveries();
+    if (stuck > 0)
+        log.info("reset stuck outbound deliveries", { count: stuck });
+    workerTimer = setInterval(() => {
+        void processDueDeliveries().catch((e) => log.warn("outbound webhook worker failed", { err: e }));
+    }, config.WEBHOOK_POLL_INTERVAL_MS);
+    workerTimer.unref();
+    log.info("outbound webhook worker scheduled", {
+        intervalMs: config.WEBHOOK_POLL_INTERVAL_MS,
+        retryMax: config.WEBHOOK_RETRY_MAX,
+    });
+}
+export function stopWebhookWorker() {
+    if (workerTimer) {
+        clearInterval(workerTimer);
+        workerTimer = null;
+    }
+}
+// Test helper: deliver one endpoint synchronously (the UI "Test" button).
+export async function testDelivery(endpoint) {
+    const deliveryId = randomUUID();
+    const payload = buildRunOutcomePayload({
+        event: endpoint.events[0] ?? "run.succeeded",
+        delivery: deliveryId,
+        timestamp: new Date().toISOString(),
+        project: { id: endpoint.projectId, path: projectPath(endpoint.projectId) },
+        workItem: { id: 0, number: 0, url: "" },
+        run: { mode: "test", model: "", variant: "", status: "test", phase: "", kind: "", reason: "test delivery" },
+    });
+    const result = await deliverOnce(endpoint, endpoint.events[0] ?? "run.succeeded", deliveryId, payload);
+    return { ok: result.ok, status: result.responseStatus, error: result.error };
+}
+// Re-export for the delivery-log route.
+export { purgeDeliveriesOlderThan };
+//# sourceMappingURL=outbound-webhook.js.map

package/dist/outbound-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-webhook.js","sourceRoot":"","sources":["../src/outbound-webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GAEzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AAEnD,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAElD,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY;IACtD,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAChF,kEAAkE;AAClE,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2B,CAAC;QAC7D,OAAO,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,mEAAmE;AAEnE,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAyC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;IACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACtD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IACrE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACpD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,eAAe;IACzD,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;IAC/D,8DAA8D;IAC9D,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,CAAC,+CAA+C;AAC9D,CAAC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,8BAA8B;AAC9B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IACxF,IAAI,MAAM,CAAC,2BAA2B;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACvD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAsBD,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAaD,SAAS,WAAW,CAAC,SAAiB,EAAE,cAAsB;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,yDAAyD;AACzD,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,KAAoB;IAC9E,OAAO,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,KAAoB,EAAE,UAAiC;IAClG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;YAClC,YAAY,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;YACrC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC;YACvF,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,0EAA0E;AAC1E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAmB,EACnB,OAAsG;IAEtG,MAAM,KAAK,GACT,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CACrC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,EAAE,OAAO,IAAI,EAAE;QAChD,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;QAC3B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAmB,EACnB,aAAiD,EACjD,OAAgB;IAEhB,MAAM,KAAK,GAAkB,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IACnE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE;KACpF,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAChB,KAAmB,EACnB,KAAoB,EACpB,MAAc,EACd,IAAwD;IAExD,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACpE,QAAQ,EAAE;YACR,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;SACxD;QACD,GAAG,EAAE;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,WAAW,CAAC,QAAuB,EAAE,KAAa,EAAE,QAAgB,EAAE,OAAe;IAMlG,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAE1F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,oBAAoB;gBAClC,gBAAgB,EAAE,KAAK;gBACvB,mBAAmB,EAAE,QAAQ;gBAC7B,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBACzD,GAAG,QAAQ,CAAC,OAAO;aACpB;YACD,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAOD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA0B,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACtD,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,uDAAuD;YACvD,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChC,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7G,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,uBAAuB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,wBAAwB,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SACnG,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC3C,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,WAAW;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,IAAI,WAAW,GAA0C,IAAI,CAAC;AAE9D,MAAM,UAAU,kBAAkB;IAChC,IAAI,WAAW;QAAE,OAAO;IACxB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACpC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;QAC5C,UAAU,EAAE,MAAM,CAAC,wBAAwB;QAC3C,QAAQ,EAAE,MAAM,CAAC,iBAAiB;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAuB;IACxD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe;QAC5C,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAC1E,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACvC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;KAC5G,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvG,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC/E,CAAC;AAED,wCAAwC;AACxC,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/path-sandbox.js

@@ -0,0 +1,200 @@
+// Project-scope path policy (work item #46). One forge-free source of truth for
+// "which paths may the agent (and the tools acting on its behalf) touch?".
+//
+// The policy is intentionally lexical here: the host process never has the run
+// volume mounted, so canonicalisation (realpath) happens where the filesystem
+// actually lives — the container shell in volume-files.ts. This module owns the
+// *rules*; the host validator, the container shell deny cases, the opencode
+// permission globs, and the in-container guard plugin are all derived from it,
+// so they can never drift.
+//
+// Denied by design: hidden/system state that can hold credentials or forge
+// access — `.xdg-*` (legacy in-repo xdg dirs plus the mount name), `.git`
+// (config can carry tokens), `.ssh`, and `.env`/`.env.*` (except `.env.example`).
+// Allowed by design: `.devbot-out/` and `.devbot-peers/` (agent staging dirs,
+// git-excluded) and `.devbot/` (repo init scripts) — the agent is meant to use
+// them.
+export const PROJECT_ROOT = "/workspace";
+export const PATH_POLICY_ENV = "DEVBOT_PATH_POLICY";
+export const PATH_POLICY = {
+    root: PROJECT_ROOT,
+    denied: [".git", ".ssh"],
+    deniedPrefixes: [".xdg"],
+    deniedFiles: [".env"],
+    allowedFiles: [".env.example"],
+    masked: [
+        "/home/devbot/.xdg",
+        "/home/devbot/.config",
+        "$XDG_DATA_HOME",
+        "$XDG_CONFIG_HOME",
+        "$XDG_STATE_HOME",
+        "$XDG_CACHE_HOME",
+        "~/.xdg",
+        "~/.config",
+    ],
+};
+/** A path that the policy refuses to operate on. Carries a user-readable reason. */
+export class PathDeniedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PathDeniedError";
+    }
+}
+/** JSON form of the policy, injected into the run container as
+ *  `--env DEVBOT_PATH_POLICY=...` for the guard plugin to read. */
+export function pathPolicyJson(policy = PATH_POLICY) {
+    return JSON.stringify(policy);
+}
+// ---- Matching --------------------------------------------------------------
+/** True when a single path segment is denied by the policy. */
+export function isDeniedSegment(seg, policy = PATH_POLICY) {
+    if (seg === "")
+        return false;
+    if (policy.allowedFiles.includes(seg))
+        return false;
+    if (policy.denied.includes(seg))
+        return true;
+    if (policy.deniedPrefixes.some((p) => seg === p || seg.startsWith(`${p}-`)))
+        return true;
+    if (policy.deniedFiles.includes(seg))
+        return true;
+    if (seg.startsWith(".env.") && !policy.allowedFiles.includes(seg))
+        return true;
+    return false;
+}
+/** True when any segment of an absolute (or `/`-rooted) path is denied. */
+export function isDeniedPath(absPath, policy = PATH_POLICY) {
+    return absPath.split("/").some((seg) => isDeniedSegment(seg, policy));
+}
+// ---- Host-side resolution --------------------------------------------------
+/** Resolve a tool-supplied path to an absolute path under the project root and
+ *  reject traversal, escapes, and denied segments. Pure; no IO (the container
+ *  shell re-checks the real path to catch symlink escapes). */
+export function resolveProjectPath(raw, policy = PATH_POLICY) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        throw new PathDeniedError("path is required");
+    if (trimmed.includes("\0"))
+        throw new PathDeniedError("path contains a NUL byte");
+    const joined = trimmed.startsWith("/") ? trimmed : `${policy.root}/${trimmed}`;
+    const parts = [];
+    for (const seg of joined.split("/")) {
+        if (seg === "" || seg === ".")
+            continue;
+        if (seg === "..")
+            throw new PathDeniedError(`path must stay inside ${policy.root}`);
+        if (isDeniedSegment(seg, policy))
+            throw new PathDeniedError(`path is restricted: ${seg}`);
+        parts.push(seg);
+    }
+    const abs = `/${parts.join("/")}`;
+    if (abs !== policy.root && !abs.startsWith(`${policy.root}/`)) {
+        throw new PathDeniedError(`path must stay inside ${policy.root}`);
+    }
+    if (abs === policy.root)
+        throw new PathDeniedError("path must point at a file, not the project root");
+    return abs;
+}
+/** Validate a slash-separated *relative* path used to build a path under the
+ *  root (e.g. a peer project's namespace). Rejects absolute paths, `..`,
+ *  empty/denied segments. Returns the normalized relative path. */
+export function validateProjectRelativePath(raw, policy = PATH_POLICY) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        throw new PathDeniedError("path is required");
+    if (trimmed.startsWith("/"))
+        throw new PathDeniedError("path must be relative");
+    const parts = [];
+    for (const seg of trimmed.split("/")) {
+        if (seg === "" || seg === ".")
+            continue;
+        if (seg === "..")
+            throw new PathDeniedError("path must stay inside the project root");
+        if (isDeniedSegment(seg, policy))
+            throw new PathDeniedError(`path is restricted: ${seg}`);
+        parts.push(seg);
+    }
+    if (parts.length === 0)
+        throw new PathDeniedError("path is required");
+    return parts.join("/");
+}
+// ---- Derived views ---------------------------------------------------------
+/** Relative globs for opencode's `read`/`edit`/`glob`/`grep`/`list` permission
+ *  objects. Put these after a `"*": "allow"` and before the allow globs so the
+ *  last matching rule wins. */
+export function denyGlobs(policy = PATH_POLICY) {
+    const globs = [];
+    for (const p of policy.deniedPrefixes) {
+        globs.push(`**/${p}`, `**/${p}/**`, `**/${p}-*`, `**/${p}-*/**`);
+    }
+    for (const d of policy.denied) {
+        globs.push(`**/${d}`, `**/${d}/**`);
+    }
+    for (const f of policy.deniedFiles) {
+        globs.push(`**/${f}`, `**/${f}.*`);
+    }
+    return globs;
+}
+/** Allow globs that must be evaluated *after* denyGlobs (last match wins). */
+export function allowGlobs(policy = PATH_POLICY) {
+    return policy.allowedFiles.map((f) => `**/${f}`);
+}
+/** Permission object used by the generated and static opencode configs. */
+export function permissionGlobRule(policy = PATH_POLICY) {
+    const rule = { "*": "allow" };
+    for (const g of denyGlobs(policy))
+        rule[g] = "deny";
+    for (const g of allowGlobs(policy))
+        rule[g] = "allow";
+    return rule;
+}
+/** `case` glob patterns for the container shell. The allow patterns must be
+ *  tried first (`.env.example` also matches the `.env.*` deny pattern). */
+export function denyShellCasePatterns(policy = PATH_POLICY) {
+    const pats = [];
+    for (const p of policy.deniedPrefixes) {
+        pats.push(`*/${p}`, `*/${p}/*`, `*/${p}-*`, `*/${p}-*/*`);
+    }
+    for (const d of policy.denied) {
+        pats.push(`*/${d}`, `*/${d}/*`);
+    }
+    for (const f of policy.deniedFiles) {
+        pats.push(`*/${f}`, `*/${f}.*`);
+    }
+    return pats;
+}
+export function allowShellCasePatterns(policy = PATH_POLICY) {
+    return policy.allowedFiles.map((f) => `*/${f}`);
+}
+/** Best-effort bash guard: a command string that references a masked root or a
+ *  `..` escape is refused by the plugin. Shell cannot be fully parsed; this
+ *  catches the obvious literal exfiltration commands.
+ *
+ *  A masked root is a violation when it is used *as a path*: a literal path
+ *  (`/home/devbot/.xdg`, `~/.config`) anywhere, or an environment-variable
+ *  expansion followed by `/` (`$XDG_DATA_HOME/...`, `${XDG_CONFIG_HOME}/...`).
+ *  A bare mention of a variable name — `echo $XDG_DATA_HOME`, a `grep` pattern,
+ *  a heredoc — is not an access and must not be blocked, or an agent merely
+ *  inspecting the repo's own docs loops on false positives (work item #96). */
+export function bashGuardReason(command, policy = PATH_POLICY) {
+    for (const m of policy.masked) {
+        if (m.startsWith("$")) {
+            const name = m.slice(1).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+            if (new RegExp(`\\$\\{?${name}\\}?(?=/)`).test(command)) {
+                return `command references restricted path ${m}`;
+            }
+            continue;
+        }
+        if (command.includes(m))
+            return `command references restricted path ${m}`;
+    }
+    // A `..` path segment anywhere is almost always an attempt to leave the root.
+    if (/(^|[\s'"=])\.\.(\/|[\s'"]|$)/.test(command))
+        return "command references a parent path (..)";
+    return null;
+}
+/** Convenience for the runner: `--env DEVBOT_PATH_POLICY=<json>`. */
+export function pathPolicyEnvArgs(policy = PATH_POLICY) {
+    return ["--env", `${PATH_POLICY_ENV}=${pathPolicyJson(policy)}`];
+}
+//# sourceMappingURL=path-sandbox.js.map

package/dist/path-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-sandbox.js","sourceRoot":"","sources":["../src/path-sandbox.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,kFAAkF;AAClF,8EAA8E;AAC9E,+EAA+E;AAC/E,QAAQ;AAER,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAkBpD,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,CAAC,MAAM,CAAC;IACxB,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,MAAM,EAAE;QACN,mBAAmB;QACnB,sBAAsB;QACtB,gBAAgB;QAChB,kBAAkB;QAClB,iBAAiB;QACjB,iBAAiB;QACjB,QAAQ;QACR,WAAW;KACZ;CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;mEACmE;AACnE,MAAM,UAAU,cAAc,CAAC,SAAqB,WAAW;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAE/E,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,SAAqB,WAAW;IAC3E,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAqB,WAAW;IAC5E,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAE/E;;+DAE+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,SAAqB,WAAW;IAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,eAAe,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,iDAAiD,CAAC,CAAC;IACtG,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,SAAqB,WAAW;IACvF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtF,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,+EAA+E;AAE/E;;+BAE+B;AAC/B,MAAM,UAAU,SAAS,CAAC,SAAqB,WAAW;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,SAAqB,WAAW;IACzD,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,SAAqB,WAAW;IACjE,MAAM,IAAI,GAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,SAAqB,WAAW;IACpE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAqB,WAAW;IACrE,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;+EAS+E;AAC/E,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAqB,WAAW;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,IAAI,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,OAAO,sCAAsC,CAAC,EAAE,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,sCAAsC,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,uCAAuC,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,SAAqB,WAAW;IAChE,OAAO,CAAC,OAAO,EAAE,GAAG,eAAe,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/platform/git-auth.js

@@ -0,0 +1,34 @@
+// Git auth helper shared by drivers. GitLab's smart-HTTP endpoint requires HTTP
+// Basic (`oauth2:<token>`); Gitea/ForgeJo accept Basic with any username, with
+// the token as password (common convention: the bot username); GitHub accepts
+// any username with the token as password but conventionally uses
+// `x-access-token` for installation/PAT auth.
+//
+// The header is URL-SCOPED to the forge host (`http.<url>/.extraHeader`)
+// whenever a scope URL is supplied, so git only sends the bot token to the
+// configured forge — a submodule on an external host is fetched without the
+// token instead of leaking it. Scoping is the default for every driver.
+import { config } from "../config.js";
+import { shq } from "../redact.js";
+/** Strip trailing slashes so the URL-scoped config key stays well-formed. */
+export function normalizeScopeUrl(url) {
+    return url.replace(/\/+$/, "");
+}
+export function gitExtraHeaderFor(token, username = "git", scopeUrl) {
+    const basic = Buffer.from(`${username}:${token}`).toString("base64");
+    const key = scopeUrl ? `http.${normalizeScopeUrl(scopeUrl)}/.extraHeader` : "http.extraHeader";
+    return `git -c ${key}=${shq(`Authorization: Basic ${basic}`)}`;
+}
+/** GitLab convention (`oauth2` username), scoped to the forge host. */
+export function gitExtraHeaderGitlab(token, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, "oauth2", url);
+}
+/** Gitea/ForgeJo convention (bot username, token as password), scoped. */
+export function gitExtraHeaderGitea(token, botUsername = config.BOT_USERNAME, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, botUsername, url);
+}
+/** GitHub convention (`x-access-token` username for PAT/OAuth tokens), scoped. */
+export function gitExtraHeaderGithub(token, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, "x-access-token", url);
+}
+//# sourceMappingURL=git-auth.js.map

package/dist/platform/git-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-auth.js","sourceRoot":"","sources":["../../src/platform/git-auth.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,kEAAkE;AAClE,8CAA8C;AAC9C,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,QAAQ,GAAG,KAAK,EAAE,QAAiB;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC/F,OAAO,UAAU,GAAG,IAAI,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC3E,OAAO,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,WAAW,GAAG,MAAM,CAAC,YAAY,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC7G,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC3E,OAAO,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC"}

package/dist/platform/gitealike/attachments.js

@@ -0,0 +1,62 @@
+// Gitea/ForgeJo attachment discovery + fetch. Issue-comment attachments are
+// Markdown links to `/attachments/{uuid}` (with or without a filename suffix),
+// e.g. `[name](/attachments/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee)` or
+// `![alt](https://host/attachments/<uuid>)`. The uuid is the stable id; the
+// download endpoint is the raw URL itself. Discovery is Gitea-specific; the
+// extraction engine lives in ../../attachments.ts.
+import { runtime } from "../../runtime-state.js";
+import { giteaFetchRaw, giteaUpload } from "./http.js";
+import { GiteaAttachmentSchema } from "./schemas.js";
+import { MD_LINK, safeDecode, stripCodeSpans, } from "../../attachments.js";
+const GITEA_ATTACHMENT = /\/attachments\/([0-9a-fA-F-]{8,})\/?([^)\s]*)/;
+export function findGiteaAttachmentRefs(body) {
+    const stripped = stripCodeSpans(body);
+    const refs = [];
+    const seen = new Set();
+    for (const m of stripped.matchAll(MD_LINK)) {
+        const url = m[2] ?? "";
+        const hit = GITEA_ATTACHMENT.exec(url);
+        if (!hit)
+            continue;
+        const uuid = hit[1] ?? "";
+        if (!uuid || seen.has(uuid))
+            continue;
+        seen.add(uuid);
+        const tail = safeDecode((hit[2] ?? "").replace(/^\//, ""));
+        refs.push({
+            raw: m[0] ?? "",
+            secret: uuid,
+            filename: tail || uuid,
+            absolute: /^https?:\/\//i.test(url),
+        });
+    }
+    for (const m of stripped.matchAll(new RegExp(GITEA_ATTACHMENT.source, "g"))) {
+        const uuid = m[1] ?? "";
+        if (!uuid || seen.has(uuid))
+            continue;
+        seen.add(uuid);
+        const tail = safeDecode((m[2] ?? "").replace(/^\//, ""));
+        refs.push({ raw: m[0] ?? "", secret: uuid, filename: tail || uuid, absolute: false });
+    }
+    return refs;
+}
+/** Fetch one Gitea/ForgeJo attachment's full bytes. */
+export async function downloadGiteaAttachment(ref) {
+    const { bytes, contentType } = await giteaFetchRaw(`/attachments/${ref.secret}`, { kind: "bot" }, runtime().attachmentMaxBytes);
+    return { bytes, contentType };
+}
+// Outbound upload via the issue/assets API. Gitea/ForgeJo accept multipart field
+// `attachment` at POST /repos/:owner/:repo/issues/:index/assets and return the
+// stored uuid + browser_download_url. The owner/repo split is done by the driver
+// (it already resolves the numeric repo id to a full_name).
+export async function uploadGiteaAttachment(owner, repo, number, file) {
+    const form = new FormData();
+    form.append("attachment", new Blob([file.bytes], { type: file.contentType }), file.filename);
+    const r = await giteaUpload(`/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/assets`, form, GiteaAttachmentSchema, { kind: "bot" });
+    return {
+        markdown: `![${r.name}](/attachments/${r.uuid})`,
+        url: r.browser_download_url,
+        filename: r.name,
+    };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/platform/gitealike/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/platform/gitealike/attachments.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AAEnD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EACL,OAAO,EACP,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAG9B,MAAM,gBAAgB,GAAG,+CAA+C,CAAC;AAEzE,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YACf,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI,IAAI,IAAI;YACtB,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAkB;IAC9D,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,aAAa,CAChD,gBAAgB,GAAG,CAAC,MAAM,EAAE,EAC5B,EAAE,IAAI,EAAE,KAAK,EAAE,EACf,OAAO,EAAE,CAAC,kBAAkB,CAC7B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,iFAAiF;AACjF,+EAA+E;AAC/E,iFAAiF;AACjF,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,IAAY,EACZ,MAAc,EACd,IAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,MAAM,WAAW,CACzB,UAAU,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,MAAM,SAAS,EACzF,IAAI,EACJ,qBAAqB,EACrB,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,IAAI,GAAG;QAChD,GAAG,EAAE,CAAC,CAAC,oBAAoB;QAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI;KACjB,CAAC;AACJ,CAAC"}