@windagency/valora 2.0.1

package/dist/utils/resource-resolver.js

@@ -0,0 +1,150 @@
+/**
+ * Resource Resolver - Dual-source resource resolution
+ *
+ * Resolves resources (agents, commands, prompts, templates) from two sources:
+ * 1. Project overrides: .valora/{type}/ (highest priority)
+ * 2. Package built-ins: data/{type}/ (fallback)
+ *
+ * Project-level resources override built-in ones when they share the same name.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { getPackageDataDir, getProjectConfigDir } from './paths.js';
+export class ResourceResolver {
+    packageDataDir;
+    projectConfigDir;
+    constructor() {
+        this.packageDataDir = getPackageDataDir();
+        this.projectConfigDir = getProjectConfigDir();
+    }
+    /**
+     * Get ordered list of directories to search for a resource type.
+     * Project directory comes first (higher priority), then package directory.
+     */
+    getSources(resourceType) {
+        const sources = [];
+        // Project override directory (highest priority)
+        if (this.projectConfigDir) {
+            const projectDir = path.join(this.projectConfigDir, resourceType);
+            if (fs.existsSync(projectDir)) {
+                sources.push(projectDir);
+            }
+        }
+        // Package built-in directory (fallback)
+        const packageDir = path.join(this.packageDataDir, resourceType);
+        if (fs.existsSync(packageDir)) {
+            sources.push(packageDir);
+        }
+        return sources;
+    }
+    /**
+     * Resolve the path to a single resource file.
+     * Project override wins over built-in.
+     */
+    resolveResource(resourceType, name) {
+        // Check project override first
+        if (this.projectConfigDir) {
+            const projectPath = path.join(this.projectConfigDir, resourceType, name);
+            if (fs.existsSync(projectPath)) {
+                return projectPath;
+            }
+        }
+        // Fall back to package built-in
+        const packagePath = path.join(this.packageDataDir, resourceType, name);
+        if (fs.existsSync(packagePath)) {
+            return packagePath;
+        }
+        return null;
+    }
+    /**
+     * Resolve a resource directory path.
+     * Returns the first existing directory: project override, then package built-in.
+     * For loaders that need a single directory path.
+     */
+    resolveResourceDir(resourceType) {
+        // If project override directory exists, prefer it
+        if (this.projectConfigDir) {
+            const projectDir = path.join(this.projectConfigDir, resourceType);
+            if (fs.existsSync(projectDir)) {
+                return projectDir;
+            }
+        }
+        // Fall back to package built-in
+        return path.join(this.packageDataDir, resourceType);
+    }
+    /**
+     * List all resources from both sources, merged with deduplication.
+     * Project overrides take precedence when names collide.
+     */
+    listResources(resourceType, extension) {
+        const resources = new Map();
+        // Load package built-ins first
+        const packageDir = path.join(this.packageDataDir, resourceType);
+        this.addResourcesFromDir(packageDir, 'builtin', resources, extension);
+        // Override with project resources (higher priority)
+        if (this.projectConfigDir) {
+            const projectDir = path.join(this.projectConfigDir, resourceType);
+            this.addResourcesFromDir(projectDir, 'project', resources, extension);
+        }
+        return Array.from(resources.values());
+    }
+    /**
+     * Get the package data directory path.
+     */
+    getPackageDataDir() {
+        return this.packageDataDir;
+    }
+    /**
+     * Get the project config directory path, or null if not in a project.
+     */
+    getProjectConfigDir() {
+        return this.projectConfigDir;
+    }
+    /**
+     * Check if a directory is within the package data dir or project config dir.
+     * Used for security validation.
+     */
+    isAllowedDirectory(dirPath) {
+        const resolvedPath = path.resolve(dirPath);
+        // Allow package data directory
+        if (resolvedPath.startsWith(path.resolve(this.packageDataDir))) {
+            return true;
+        }
+        // Allow project config directory
+        if (this.projectConfigDir && resolvedPath.startsWith(path.resolve(this.projectConfigDir))) {
+            return true;
+        }
+        return false;
+    }
+    addResourcesFromDir(dirPath, source, resources, extension) {
+        if (!fs.existsSync(dirPath))
+            return;
+        try {
+            const entries = fs.readdirSync(dirPath, { withFileTypes: true });
+            for (const entry of entries) {
+                if (!entry.isFile())
+                    continue;
+                if (extension && !entry.name.endsWith(extension))
+                    continue;
+                resources.set(entry.name, {
+                    name: entry.name,
+                    path: path.join(dirPath, entry.name),
+                    source
+                });
+            }
+        }
+        catch {
+            // Directory unreadable, skip
+        }
+    }
+}
+// Singleton instance
+let resolverInstance = null;
+export function getResourceResolver() {
+    resolverInstance ??= new ResourceResolver();
+    return resolverInstance;
+}
+export function resetResourceResolver() {
+    resolverInstance = null;
+}
+//# sourceMappingURL=resource-resolver.js.map

package/dist/utils/resource-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-resolver.js","sourceRoot":"","sources":["../../src/utils/resource-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAUjE,MAAM,OAAO,gBAAgB;IACX,cAAc,CAAS;IACvB,gBAAgB,CAAgB;IAEjD;QACC,IAAI,CAAC,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,YAA0B;QACpC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,gDAAgD;QAChD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,YAA0B,EAAE,IAAY;QACvD,+BAA+B;QAC/B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YACzE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,OAAO,WAAW,CAAC;YACpB,CAAC;QACF,CAAC;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAA0B;QAC5C,kDAAkD;QAClD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO,UAAU,CAAC;YACnB,CAAC;QACF,CAAC;QAED,gCAAgC;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,YAA0B,EAAE,SAAkB;QAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;QAElD,+BAA+B;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEtE,oDAAoD;QACpD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,iBAAiB;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,mBAAmB;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,OAAe;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3C,+BAA+B;QAC/B,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,gBAAgB,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,mBAAmB,CAC1B,OAAe,EACf,MAA6B,EAC7B,SAAoC,EACpC,SAAkB;QAElB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO;QAEpC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAC9B,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAE3D,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;oBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;oBACpC,MAAM;iBACN,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,6BAA6B;QAC9B,CAAC;IACF,CAAC;CACD;AAED,qBAAqB;AACrB,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AAErD,MAAM,UAAU,mBAAmB;IAClC,gBAAgB,KAAK,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,gBAAgB,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,gBAAgB,GAAG,IAAI,CAAC;AACzB,CAAC"}

package/dist/utils/safe-exec.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Safe Execution Utilities - Prevent command injection
+ *
+ * Provides safe wrappers for executing git commands without shell injection risks
+ */
+export interface ExecResult {
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+}
+export interface SpawnOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeout?: number;
+}
+/**
+ * Custom error class for command execution failures
+ */
+export declare class CommandExecutionError extends Error {
+    readonly exitCode: number;
+    readonly stdout: string;
+    readonly stderr: string;
+    constructor(message: string, exitCode: number, stdout: string, stderr: string);
+}
+/**
+ * Safe command execution without shell
+ *
+ * Uses spawn with argument array instead of shell interpolation
+ * to prevent command injection attacks
+ */
+export declare class SafeExecutor {
+    /**
+     * Default timeout for git operations (30 seconds)
+     */
+    private static readonly DEFAULT_TIMEOUT;
+    /**
+     * Maximum buffer size for stdout/stderr (10MB)
+     */
+    private static readonly MAX_BUFFER_SIZE;
+    /**
+     * Execute git command safely
+     *
+     * @param args - Command arguments (e.g., ['worktree', 'add', '-b', branch])
+     * @param options - Spawn options
+     * @returns Command output
+     */
+    static executeGit(args: string[], options?: SpawnOptions): Promise<ExecResult>;
+    /**
+     * Execute command safely using spawn
+     *
+     * @param command - Command to execute (e.g., 'git')
+     * @param args - Command arguments
+     * @param options - Spawn options
+     * @returns Command output
+     */
+    static execute(command: string, args: string[], options?: SpawnOptions): Promise<ExecResult>;
+    /**
+     * Execute git command and return stdout only
+     *
+     * Convenience method for common case
+     */
+    static executeGitSimple(args: string[], options?: SpawnOptions): Promise<string>;
+    /**
+     * Check if command exists
+     */
+    static commandExists(command: string): Promise<boolean>;
+}
+/**
+ * Retry wrapper for transient failures
+ */
+export declare class RetryExecutor {
+    /**
+     * Execute with exponential backoff retry
+     *
+     * @param fn - Function to execute
+     * @param maxRetries - Maximum retry attempts
+     * @param baseDelay - Base delay in milliseconds
+     * @returns Function result
+     */
+    static withRetry<T>(fn: () => Promise<T>, maxRetries?: number, baseDelay?: number): Promise<T>;
+    /**
+     * Check if error is retriable
+     */
+    private static isNonRetriableError;
+    /**
+     * Sleep for specified milliseconds
+     */
+    private static sleep;
+}
+//# sourceMappingURL=safe-exec.d.ts.map

package/dist/utils/safe-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-exec.d.ts","sourceRoot":"","sources":["../../src/utils/safe-exec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;aAG9B,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;gBAH9B,OAAO,EAAE,MAAM,EACC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM;CAK/B;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IACxB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAS;IAEhD;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAoB;IAE3D;;;;;;OAMG;WACU,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxF;;;;;;;OAOG;WACU,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;IAyFtG;;;;OAIG;WACU,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1F;;OAEG;WACU,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAQ7D;AAED;;GAEG;AACH,qBAAa,aAAa;IACzB;;;;;;;OAOG;WACU,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,GAAE,MAAU,EAAE,SAAS,GAAE,MAAa,GAAG,OAAO,CAAC,CAAC,CAAC;IA4B7G;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAqBlC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,KAAK;CAGpB"}

package/dist/utils/safe-exec.js

@@ -0,0 +1,210 @@
+/**
+ * Safe Execution Utilities - Prevent command injection
+ *
+ * Provides safe wrappers for executing git commands without shell injection risks
+ */
+import { spawn } from 'child_process';
+import { COMMAND_EXISTENCE_CHECK_TIMEOUT_MS, HEALTH_CHECK_INTERVAL_MS } from '../config/constants.js';
+/**
+ * Custom error class for command execution failures
+ */
+export class CommandExecutionError extends Error {
+    exitCode;
+    stdout;
+    stderr;
+    constructor(message, exitCode, stdout, stderr) {
+        super(message);
+        this.exitCode = exitCode;
+        this.stdout = stdout;
+        this.stderr = stderr;
+        this.name = 'CommandExecutionError';
+    }
+}
+/**
+ * Safe command execution without shell
+ *
+ * Uses spawn with argument array instead of shell interpolation
+ * to prevent command injection attacks
+ */
+export class SafeExecutor {
+    /**
+     * Default timeout for git operations (30 seconds)
+     */
+    static DEFAULT_TIMEOUT = 30000;
+    /**
+     * Maximum buffer size for stdout/stderr (10MB)
+     */
+    static MAX_BUFFER_SIZE = 10 * 1024 * 1024;
+    /**
+     * Execute git command safely
+     *
+     * @param args - Command arguments (e.g., ['worktree', 'add', '-b', branch])
+     * @param options - Spawn options
+     * @returns Command output
+     */
+    static async executeGit(args, options = {}) {
+        return this.execute('git', args, options);
+    }
+    /**
+     * Execute command safely using spawn
+     *
+     * @param command - Command to execute (e.g., 'git')
+     * @param args - Command arguments
+     * @param options - Spawn options
+     * @returns Command output
+     */
+    static async execute(command, args, options = {}) {
+        return new Promise((resolve, reject) => {
+            const timeout = options.timeout ?? this.DEFAULT_TIMEOUT;
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            // Spawn process without shell
+            const child = spawn(command, args, {
+                cwd: options.cwd,
+                env: options.env,
+                shell: false, // CRITICAL: Never use shell
+                stdio: ['ignore', 'pipe', 'pipe']
+            });
+            // Set timeout
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                // Force kill after interval if still running
+                setTimeout(() => {
+                    if (!child.killed) {
+                        child.kill('SIGKILL');
+                    }
+                }, HEALTH_CHECK_INTERVAL_MS);
+            }, timeout);
+            // Collect stdout
+            child.stdout?.on('data', (data) => {
+                stdout += data.toString();
+                // Prevent memory exhaustion
+                if (stdout.length > this.MAX_BUFFER_SIZE) {
+                    child.kill('SIGTERM');
+                    reject(new Error('Command output exceeded maximum buffer size'));
+                }
+            });
+            // Collect stderr
+            child.stderr?.on('data', (data) => {
+                stderr += data.toString();
+                // Prevent memory exhaustion
+                if (stderr.length > this.MAX_BUFFER_SIZE) {
+                    child.kill('SIGTERM');
+                    reject(new Error('Command error output exceeded maximum buffer size'));
+                }
+            });
+            // Handle completion
+            child.on('close', (code) => {
+                clearTimeout(timer);
+                if (timedOut) {
+                    reject(new Error(`Command timed out after ${timeout}ms`));
+                    return;
+                }
+                const exitCode = code ?? -1;
+                // Git commands that write to stderr even on success
+                const successWithStderr = stderr && (stderr.includes('Preparing worktree') || stderr.includes('Switched to'));
+                if (exitCode === 0 || successWithStderr) {
+                    resolve({
+                        exitCode,
+                        stderr,
+                        stdout
+                    });
+                }
+                else {
+                    const error = new CommandExecutionError(`Command failed with exit code ${exitCode}: ${stderr || stdout}`, exitCode, stdout, stderr);
+                    reject(error);
+                }
+            });
+            // Handle errors
+            child.on('error', (error) => {
+                clearTimeout(timer);
+                reject(new Error(`Failed to execute ${command}: ${error.message}`));
+            });
+        });
+    }
+    /**
+     * Execute git command and return stdout only
+     *
+     * Convenience method for common case
+     */
+    static async executeGitSimple(args, options = {}) {
+        const result = await this.executeGit(args, options);
+        return result.stdout;
+    }
+    /**
+     * Check if command exists
+     */
+    static async commandExists(command) {
+        try {
+            await this.execute('which', [command], { timeout: COMMAND_EXISTENCE_CHECK_TIMEOUT_MS });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/**
+ * Retry wrapper for transient failures
+ */
+export class RetryExecutor {
+    /**
+     * Execute with exponential backoff retry
+     *
+     * @param fn - Function to execute
+     * @param maxRetries - Maximum retry attempts
+     * @param baseDelay - Base delay in milliseconds
+     * @returns Function result
+     */
+    static async withRetry(fn, maxRetries = 3, baseDelay = 1000) {
+        let lastError = null;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            try {
+                return await fn();
+            }
+            catch (error) {
+                lastError = error;
+                // Don't retry on validation errors or non-transient errors
+                if (this.isNonRetriableError(error)) {
+                    throw error;
+                }
+                // Don't retry on last attempt
+                if (attempt === maxRetries) {
+                    break;
+                }
+                // Exponential backoff with jitter
+                const delay = baseDelay * Math.pow(2, attempt) + Math.random() * 1000;
+                await this.sleep(delay);
+            }
+        }
+        throw new Error(`Operation failed after ${maxRetries} retries: ${lastError?.message}`);
+    }
+    /**
+     * Check if error is retriable
+     */
+    static isNonRetriableError(error) {
+        const message = error.message.toLowerCase();
+        // Validation errors - don't retry
+        if (message.includes('validation') || message.includes('invalid')) {
+            return true;
+        }
+        // Path/branch already exists - don't retry
+        if (message.includes('already exists') || message.includes('not found')) {
+            return true;
+        }
+        // Permission errors - don't retry
+        if (message.includes('permission denied') || message.includes('access denied')) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Sleep for specified milliseconds
+     */
+    static sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+//# sourceMappingURL=safe-exec.js.map

package/dist/utils/safe-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-exec.js","sourceRoot":"","sources":["../../src/utils/safe-exec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAchG;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG9B;IACA;IACA;IAJjB,YACC,OAAe,EACC,QAAgB,EAChB,MAAc,EACd,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACrC,CAAC;CACD;AAED;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACxB;;OAEG;IACK,MAAM,CAAU,eAAe,GAAG,KAAK,CAAC;IAEhD;;OAEG;IACK,MAAM,CAAU,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAE3D;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAc,EAAE,UAAwB,EAAE;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,IAAc,EAAE,UAAwB,EAAE;QAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC;YACxD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,8BAA8B;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBAClC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,KAAK,EAAE,4BAA4B;gBAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aACjC,CAAC,CAAC;YAEH,cAAc;YACd,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAEtB,6CAA6C;gBAC7C,UAAU,CAAC,GAAG,EAAE;oBACf,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBACnB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACvB,CAAC;gBACF,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC9B,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,iBAAiB;YACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACzC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAE1B,4BAA4B;gBAC5B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;gBAClE,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,iBAAiB;YACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACzC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAE1B,4BAA4B;gBAC5B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACxE,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,oBAAoB;YACpB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;gBACzC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,IAAI,CAAC,CAAC,CAAC;oBAC1D,OAAO;gBACR,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;gBAE5B,oDAAoD;gBACpD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;gBAE9G,IAAI,QAAQ,KAAK,CAAC,IAAI,iBAAiB,EAAE,CAAC;oBACzC,OAAO,CAAC;wBACP,QAAQ;wBACR,MAAM;wBACN,MAAM;qBACN,CAAC,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACP,MAAM,KAAK,GAAG,IAAI,qBAAqB,CACtC,iCAAiC,QAAQ,KAAK,MAAM,IAAI,MAAM,EAAE,EAChE,QAAQ,EACR,MAAM,EACN,MAAM,CACN,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,CAAC;gBACf,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,gBAAgB;YAChB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;gBAClC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAc,EAAE,UAAwB,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAe;QACzC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;;AAGF;;GAEG;AACH,MAAM,OAAO,aAAa;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAI,EAAoB,EAAE,aAAqB,CAAC,EAAE,YAAoB,IAAI;QAC/F,IAAI,SAAS,GAAiB,IAAI,CAAC;QAEnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,CAAC;gBACJ,OAAO,MAAM,EAAE,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,GAAG,KAAc,CAAC;gBAE3B,2DAA2D;gBAC3D,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAc,CAAC,EAAE,CAAC;oBAC9C,MAAM,KAAK,CAAC;gBACb,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM;gBACP,CAAC;gBAED,kCAAkC;gBAClC,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;gBACtE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,aAAa,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,mBAAmB,CAAC,KAAY;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAE5C,kCAAkC;QAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,2CAA2C;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,kCAAkC;QAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,KAAK,CAAC,EAAU;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;CACD"}

package/dist/utils/safe-regex.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Safe Regex Utilities
+ *
+ * Mitigates ReDoS (Regular Expression Denial of Service) risks when
+ * constructing RegExp from user-provided patterns (e.g. hook matchers
+ * in config). Since patterns are user-authored and local, the risk is
+ * low, but these guards prevent accidental catastrophic backtracking.
+ *
+ * Provides:
+ * - Static detection of patterns prone to catastrophic backtracking
+ * - Bounded regex test that limits input length
+ * - Regex-special-character escaping for safe interpolation
+ */
+/**
+ * Check whether a regex pattern string is likely vulnerable to ReDoS
+ * via catastrophic backtracking.
+ *
+ * This is a heuristic check — it will not catch every possible ReDoS
+ * pattern, but it reliably detects the most common dangerous structures
+ * (nested quantifiers, overlapping alternations with quantifiers).
+ *
+ * @param pattern - The regex source string to analyse
+ * @returns Object with `safe` boolean and optional `reason` string
+ */
+export declare function checkReDoSRisk(pattern: string): {
+    reason?: string;
+    safe: boolean;
+};
+/**
+ * Test a regex against an input string with ReDoS safeguards:
+ * 1. Input length is capped to prevent long-input amplification.
+ * 2. Returns false (no match) if input exceeds the cap — tool names
+ *    and similar identifiers should always be short.
+ *
+ * @param regex   - The compiled RegExp to test
+ * @param input   - The string to test against
+ * @param maxLen  - Maximum allowed input length (default 1024)
+ * @returns true if the regex matches the (bounded) input
+ */
+export declare function safeRegexTest(regex: RegExp, input: string, maxLen?: number): boolean;
+/**
+ * Escape all regex-special characters in a string so it can be safely
+ * interpolated into a RegExp pattern as a literal.
+ *
+ * @param str - The string to escape
+ * @returns The escaped string safe for `new RegExp(...)` interpolation
+ */
+export declare function escapeRegExp(str: string): string;
+//# sourceMappingURL=safe-regex.d.ts.map

package/dist/utils/safe-regex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-regex.d.ts","sourceRoot":"","sources":["../../src/utils/safe-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAqCH;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAUlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,MAAiC,GAAG,OAAO,CAK9G;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/utils/safe-regex.js

@@ -0,0 +1,96 @@
+/**
+ * Safe Regex Utilities
+ *
+ * Mitigates ReDoS (Regular Expression Denial of Service) risks when
+ * constructing RegExp from user-provided patterns (e.g. hook matchers
+ * in config). Since patterns are user-authored and local, the risk is
+ * low, but these guards prevent accidental catastrophic backtracking.
+ *
+ * Provides:
+ * - Static detection of patterns prone to catastrophic backtracking
+ * - Bounded regex test that limits input length
+ * - Regex-special-character escaping for safe interpolation
+ */
+/**
+ * Maximum input length for safeRegexTest.
+ * Tool names and similar identifiers should never approach this limit.
+ */
+const DEFAULT_MAX_INPUT_LENGTH = 1024;
+/**
+ * Heuristic patterns that indicate a regex may be vulnerable to
+ * catastrophic backtracking (ReDoS). These detect the most common
+ * problematic structures:
+ *
+ * 1. Nested quantifiers: (a+)+, (a*)+, (a+)*, (a*)*, (a+)?, (a*)?
+ * 2. Overlapping alternation with quantifier: (a|a)+
+ * 3. Quantified groups containing quantified alternations
+ */
+const REDOS_HEURISTICS = [
+    {
+        name: 'nested_quantifier',
+        // A quantifier (+, *, {n,}) immediately after a group close that itself
+        // contains a quantifier. Catches (x+)+, (x*)+, (x+)*, etc.
+        pattern: /([+*]|\{\d+,\d*\})\)([+*?]|\{\d+,\d*\})/
+    },
+    {
+        name: 'nested_quantifier_noncapturing',
+        // Same but for non-capturing groups: (?:x+)+
+        pattern: /([+*]|\{\d+,\d*\})\)([+*?]|\{\d+,\d*\})/
+    },
+    {
+        name: 'overlapping_alternation_quantified',
+        // Alternation of overlapping patterns inside a quantified group:
+        // (a|a)+, (\w|\d)+, (.|x)+ etc.
+        pattern: /\((?:[^)]*\|[^)]*)\)[+*]/
+    }
+];
+/**
+ * Check whether a regex pattern string is likely vulnerable to ReDoS
+ * via catastrophic backtracking.
+ *
+ * This is a heuristic check — it will not catch every possible ReDoS
+ * pattern, but it reliably detects the most common dangerous structures
+ * (nested quantifiers, overlapping alternations with quantifiers).
+ *
+ * @param pattern - The regex source string to analyse
+ * @returns Object with `safe` boolean and optional `reason` string
+ */
+export function checkReDoSRisk(pattern) {
+    for (const { name, pattern: heuristic } of REDOS_HEURISTICS) {
+        if (heuristic.test(pattern)) {
+            return {
+                reason: `Pattern may cause catastrophic backtracking (${name}): "${pattern}"`,
+                safe: false
+            };
+        }
+    }
+    return { safe: true };
+}
+/**
+ * Test a regex against an input string with ReDoS safeguards:
+ * 1. Input length is capped to prevent long-input amplification.
+ * 2. Returns false (no match) if input exceeds the cap — tool names
+ *    and similar identifiers should always be short.
+ *
+ * @param regex   - The compiled RegExp to test
+ * @param input   - The string to test against
+ * @param maxLen  - Maximum allowed input length (default 1024)
+ * @returns true if the regex matches the (bounded) input
+ */
+export function safeRegexTest(regex, input, maxLen = DEFAULT_MAX_INPUT_LENGTH) {
+    if (input.length > maxLen) {
+        return false;
+    }
+    return regex.test(input);
+}
+/**
+ * Escape all regex-special characters in a string so it can be safely
+ * interpolated into a RegExp pattern as a literal.
+ *
+ * @param str - The string to escape
+ * @returns The escaped string safe for `new RegExp(...)` interpolation
+ */
+export function escapeRegExp(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+//# sourceMappingURL=safe-regex.js.map

package/dist/utils/safe-regex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-regex.js","sourceRoot":"","sources":["../../src/utils/safe-regex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAA6C;IAClE;QACC,IAAI,EAAE,mBAAmB;QACzB,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO,EAAE,yCAAyC;KAClD;IACD;QACC,IAAI,EAAE,gCAAgC;QACtC,6CAA6C;QAC7C,OAAO,EAAE,yCAAyC;KAClD;IACD;QACC,IAAI,EAAE,oCAAoC;QAC1C,iEAAiE;QACjE,gCAAgC;QAChC,OAAO,EAAE,0BAA0B;KACnC;CACD,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC7C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC7D,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACN,MAAM,EAAE,gDAAgD,IAAI,OAAO,OAAO,GAAG;gBAC7E,IAAI,EAAE,KAAK;aACX,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,SAAiB,wBAAwB;IACpG,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC"}

package/dist/utils/template-loader.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Template Loader - Loads and populates template files with variables
+ *
+ * Provides caching and variable substitution for markdown templates
+ */
+export interface TemplateVariables {
+    [key: string]: number | string | undefined;
+}
+export declare class TemplateLoader {
+    private templateCache;
+    /**
+     * Load a template file from data/templates/
+     * Results are cached for performance
+     */
+    loadTemplate(templateName: string): Promise<string>;
+    /**
+     * Populate template with variable values
+     * Replaces {{variableName}} placeholders with actual values
+     */
+    populateTemplate(template: string, variables: TemplateVariables): string;
+    /**
+     * Load a template and populate it with variables in one call
+     */
+    renderTemplate(templateName: string, variables: TemplateVariables): Promise<string>;
+    /**
+     * Clear the template cache
+     * Useful for testing or if templates are modified at runtime
+     */
+    clearCache(): void;
+}
+/**
+ * Get the singleton TemplateLoader instance
+ */
+export declare function getTemplateLoader(): TemplateLoader;
+/**
+ * Reset the singleton instance (useful for testing)
+ */
+export declare function resetTemplateLoader(): void;
+//# sourceMappingURL=template-loader.d.ts.map

package/dist/utils/template-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-loader.d.ts","sourceRoot":"","sources":["../../src/utils/template-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,WAAW,iBAAiB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,qBAAa,cAAc;IAC1B,OAAO,CAAC,aAAa,CAAkC;IAEvD;;;OAGG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBzD;;;OAGG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,MAAM;IAexE;;OAEG;IACG,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAKzF;;;OAGG;IACH,UAAU,IAAI,IAAI;CAGlB;AAKD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAGlD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}