@xdxer/dingtalk-agent 0.1.4-beta.8 → 0.1.4

package/dist/src/opencode-provider.js

@@ -0,0 +1,532 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmdirSync, rmSync, writeFileSync, } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, relative, resolve } from 'node:path';
+import { CURRENT_WORKSPACE_FILE, WORKSPACE_STATE_ROOT, inspectAgentProject, showDevelopmentWorkspace, } from './development-workspace.js';
+import { digest, stableStringify } from './events.js';
+import { prepareOpenCodeEvalAgent, runOpenCodeEvaluation, runOpenCodePrompt, } from './opencode-evals.js';
+import { bindRequiredBasicSkill, verifyRequiredBasicSkill, } from './opencode-workspace.js';
+export const OPENCODE_WORKSPACE_ROOT = '.dingtalk-agent/development-workspaces';
+export const OPENCODE_EVIDENCE_ROOT = '.dingtalk-agent/development-workspace-evidence';
+export function planOpenCodeWorkspace(start, name, cliVersion = '') {
+    const info = inspectAgentProject(start, cliVersion);
+    const workspace = requireOpenCodeWorkspace(info.root, name, cliVersion);
+    const target = managedWorkspacePath(info.root, name);
+    const artifactPath = artifactStoragePath(info.root, workspace);
+    const observedHash = existsSync(target) ? hashTree(target) : '';
+    const state = workspace.state;
+    const intact = Boolean(state && state.provider === 'opencode' &&
+        state.desiredHash === workspace.desiredHash && state.observedHash === observedHash &&
+        state.binding.managedPath === relative(info.root, target) &&
+        existsSync(artifactPath) && lstatSync(artifactPath).isDirectory());
+    const action = !existsSync(target) ? 'create' : intact ? 'noop' : 'rebuild';
+    const planId = `opencode_plan_${digest(stableStringify({
+        workspace: name, desiredHash: workspace.desiredHash, observedHash, action,
+    })).slice(0, 24)}`;
+    return {
+        $schema: 'dingtalk-agent/opencode-workspace-plan@1',
+        planId,
+        workspace: name,
+        provider: 'opencode',
+        model: workspace.provider.model,
+        action,
+        root: info.root,
+        managedPath: relative(info.root, target),
+        sourceHash: workspace.sourceHash,
+        desiredHash: workspace.desiredHash,
+        observedHash,
+        currentState: workspace.status,
+        writes: action === 'noop' ? [] : [
+            relative(info.root, target),
+            relative(info.root, artifactPath),
+            join(WORKSPACE_STATE_ROOT, `${name}.json`),
+        ],
+        sideEffect: false,
+        dingtalkSideEffect: false,
+    };
+}
+export function applyOpenCodeWorkspace(start, name, options = {}) {
+    if (!options.yes)
+        throw new Error('workspace create 会写本地 managed Workspace；必须显式传 --yes');
+    const cliVersion = options.cliVersion || '';
+    const plan = planOpenCodeWorkspace(start, name, cliVersion);
+    const workspace = requireOpenCodeWorkspace(plan.root, name, cliVersion);
+    const target = resolve(plan.root, plan.managedPath);
+    const artifactPath = artifactStoragePath(plan.root, workspace);
+    const artifactExisted = existsSync(artifactPath);
+    const command = options.command || process.env.DTA_OPENCODE_BIN || 'opencode';
+    if (plan.action === 'noop') {
+        const binding = workspace.state?.binding || {};
+        const stateStatus = workspace.state?.status === 'ready' ? 'ready' : 'verifying';
+        return {
+            ...plan,
+            $schema: 'dingtalk-agent/opencode-workspace-apply@1',
+            applied: false,
+            idempotent: true,
+            status: stateStatus,
+            binding,
+            sideEffect: 'local-managed-workspace',
+            dingtalkSideEffect: false,
+        };
+    }
+    mkdirSync(dirname(target), { recursive: true });
+    const staging = `${target}.tmp-${process.pid}-${randomUUID().slice(0, 8)}`;
+    const backup = `${target}.backup-${process.pid}-${randomUUID().slice(0, 8)}`;
+    const preflightSandbox = mkdtempSync(join(tmpdir(), `dta-opencode-workspace-preflight-${safeName(name)}-`));
+    let preflight = null;
+    try {
+        mkdirSync(staging, { recursive: false });
+        materializeProject(plan.root, staging, workspace);
+        prepareOpenCodeEvalAgent(staging, 'none');
+        bindRequiredBasicSkill(staging);
+        cpSync(staging, preflightSandbox, { recursive: true });
+        preflight = verifyRequiredBasicSkill(bindRequiredBasicSkill(preflightSandbox), command);
+        if (existsSync(target))
+            renameSync(target, backup);
+        renameSync(staging, target);
+        mkdirSync(artifactPath, { recursive: true });
+        if (existsSync(backup))
+            rmSync(backup, { recursive: true, force: true });
+    }
+    catch (error) {
+        rmSync(staging, { recursive: true, force: true });
+        if (existsSync(backup)) {
+            rmSync(target, { recursive: true, force: true });
+            renameSync(backup, target);
+        }
+        else if (existsSync(target) && plan.action === 'create') {
+            rmSync(target, { recursive: true, force: true });
+        }
+        if (!artifactExisted && existsSync(artifactPath)) {
+            try {
+                rmdirSync(artifactPath);
+            }
+            catch { /* preserve non-empty concurrent writes */ }
+        }
+        throw error;
+    }
+    finally {
+        rmSync(preflightSandbox, { recursive: true, force: true });
+    }
+    const observedHash = hashTree(target);
+    const binding = {
+        managedPath: relative(plan.root, target),
+        model: workspace.provider.model,
+        sourceHash: workspace.sourceHash,
+        basicHash: String(preflight?.skill.hash || ''),
+        basicVersion: String(preflight?.skill.version || ''),
+        configHash: String(preflight?.configHash || ''),
+        openCodeVersion: String(preflight?.openCodeVersion || ''),
+    };
+    writeWorkspaceState(plan.root, {
+        $schema: 'dingtalk-agent/workspace-state@1',
+        workspace: name,
+        provider: 'opencode',
+        status: 'verifying',
+        binding,
+        desiredHash: workspace.desiredHash,
+        observedHash,
+        lastPlanId: plan.planId,
+        lastReceiptId: '',
+        lastEvalId: '',
+    });
+    return {
+        ...plan,
+        $schema: 'dingtalk-agent/opencode-workspace-apply@1',
+        applied: true,
+        idempotent: false,
+        status: 'verifying',
+        observedHash,
+        binding,
+        sideEffect: 'local-managed-workspace',
+        dingtalkSideEffect: false,
+    };
+}
+export function useOpenCodeWorkspace(start, name, cliVersion = '') {
+    const info = inspectAgentProject(start, cliVersion);
+    const workspace = requireOpenCodeWorkspace(info.root, name, cliVersion);
+    assertManagedWorkspaceIntact(info.root, workspace);
+    const path = join(info.root, CURRENT_WORKSPACE_FILE);
+    atomicText(path, `${name}\n`);
+    const readback = readFileSync(path, 'utf8').trim();
+    if (readback !== name)
+        throw new Error('current-workspace 写后回读不一致');
+    return {
+        $schema: 'dingtalk-agent/workspace-selection@1',
+        workspace: name,
+        provider: 'opencode',
+        previous: info.currentWorkspace,
+        current: readback,
+        sideEffect: 'local-selection',
+        dingtalkSideEffect: false,
+    };
+}
+export function runOpenCodeWorkspace(start, name, prompt, options = {}) {
+    if (!prompt.trim())
+        throw new Error('workspace run prompt 不能为空');
+    const info = inspectAgentProject(start);
+    const workspace = requireOpenCodeWorkspace(info.root, name);
+    const managed = assertManagedWorkspaceIntact(info.root, workspace);
+    const timeoutMs = options.timeoutMs ?? 120_000;
+    if (!Number.isInteger(timeoutMs) || timeoutMs < 10_000 || timeoutMs > 300_000) {
+        throw new Error('workspace run timeoutMs 必须为 10000..300000');
+    }
+    const plan = {
+        $schema: 'dingtalk-agent/opencode-workspace-run-plan@1',
+        workspace: name,
+        provider: 'opencode',
+        model: workspace.provider.model,
+        desiredHash: workspace.desiredHash,
+        observedHash: workspace.observedHash,
+        promptHash: sha256(prompt),
+        loadProbe: 'random-per-run',
+        tools: 'none',
+        sideEffect: 'model-only',
+        dingtalkSideEffect: false,
+    };
+    if (!options.execute)
+        return { ...plan, ready: true, executeRequired: true };
+    if (!options.yes)
+        throw new Error('workspace run 会调用 OpenCode 模型；必须同时传 --execute --yes');
+    const runId = `opencode_workspace_run_${Date.now()}_${randomUUID().slice(0, 8)}`;
+    const evidence = safeProjectPath(info.root, options.out || join(OPENCODE_EVIDENCE_ROOT, name, 'runs', runId), false);
+    const sandbox = mkdtempSync(join(tmpdir(), `dta-opencode-workspace-${safeName(name)}-`));
+    const command = options.command || process.env.DTA_OPENCODE_BIN || 'opencode';
+    let report;
+    try {
+        cpSync(managed, sandbox, { recursive: true });
+        const probe = randomUUID();
+        const skillPath = join(sandbox, '.agents', 'skills', 'dingtalk-basic-behavior', 'SKILL.md');
+        const skillBody = readFileSync(skillPath, 'utf8');
+        writeFileSync(skillPath, `${skillBody.trimEnd()}\n\n<!-- dta-load-probe:${probe} -->\n`);
+        const preflight = verifyRequiredBasicSkill(bindRequiredBasicSkill(sandbox), command);
+        const probePrompt = '这是加载链路探针。只依据 Basic Skill 正文末尾注释回答；严格输出 `dta-load-probe=<值>`；' +
+            '若看不到则输出 `dta-load-probe=not-loaded`。禁止调用工具或解释。';
+        const probeExecution = runOpenCodePrompt(command, sandbox, workspace.provider.model, probePrompt, `DTA Workspace ${name} load probe`, timeoutMs);
+        const exactProbe = `dta-load-probe=${probe}`;
+        const loadPassed = probeExecution.exitCode === 0 && probeExecution.answer.trim() === exactProbe &&
+            probeExecution.toolCalls === 0 && probeExecution.directoryMatched;
+        const marker = `[DTA-WORKSPACE-RUN-${safeName(name)}-${randomUUID()}]`;
+        const execution = loadPassed ? runOpenCodePrompt(command, sandbox, workspace.provider.model, `${marker}\n执行协议：第一行逐字符原样输出 ${marker}；从第二行回答用户任务；禁止调用任何工具。\n${prompt}`, `DTA Workspace ${name} run`, timeoutMs) : emptyExecution('load-probe-failed');
+        const exactAttributed = execution.answer.startsWith(marker);
+        const answer = exactAttributed ? execution.answer.slice(marker.length).trim() : execution.answer;
+        const passed = loadPassed && execution.exitCode === 0 && execution.toolCalls === 0 &&
+            execution.directoryMatched && exactAttributed;
+        report = {
+            $schema: 'dingtalk-agent/opencode-workspace-run@1',
+            passed,
+            runId,
+            workspace: name,
+            provider: 'opencode',
+            model: workspace.provider.model,
+            sourceHash: workspace.sourceHash,
+            desiredHash: workspace.desiredHash,
+            observedHash: workspace.observedHash,
+            evidencePath: relative(info.root, evidence),
+            basic: {
+                version: preflight.skill.version,
+                sourceHash: workspace.state?.binding.basicHash || '',
+                instrumentedHash: preflight.skill.hash,
+            },
+            loadProbe: executionSummary(probeExecution, {
+                expected: exactProbe, exactLoaded: probeExecution.answer.trim() === exactProbe,
+            }),
+            execution: executionSummary(execution, { marker, exactAttributed, answer }),
+            sideEffect: 'model-only',
+            dingtalkSideEffect: false,
+        };
+        mkdirSync(evidence, { recursive: true });
+        writeFileSync(join(evidence, 'prompt.txt'), prompt);
+        writeFileSync(join(evidence, 'load-probe.stdout.ndjson'), probeExecution.stdout);
+        writeFileSync(join(evidence, 'run.stdout.ndjson'), execution.stdout);
+        atomicJson(join(evidence, 'report.json'), report);
+        writeProviderOutcome(info.root, workspace, passed ? 'ready' : 'failed', {
+            lastReceiptId: runId,
+        });
+    }
+    catch (error) {
+        report = {
+            ...plan,
+            $schema: 'dingtalk-agent/opencode-workspace-run@1',
+            passed: false,
+            runId,
+            evidencePath: relative(info.root, evidence),
+            failure: error.message,
+        };
+        mkdirSync(evidence, { recursive: true });
+        atomicJson(join(evidence, 'report.json'), report);
+        writeProviderOutcome(info.root, workspace, 'failed', { lastReceiptId: runId });
+    }
+    finally {
+        rmSync(sandbox, { recursive: true, force: true });
+    }
+    return report;
+}
+export function evalOpenCodeWorkspace(start, name, suite, options = {}) {
+    const info = inspectAgentProject(start);
+    const workspace = requireOpenCodeWorkspace(info.root, name);
+    const managed = assertManagedWorkspaceIntact(info.root, workspace);
+    const selectedOut = options.out || join(OPENCODE_EVIDENCE_ROOT, name, 'evals', `opencode_eval_${Date.now()}_${randomUUID().slice(0, 8)}`);
+    const report = runOpenCodeEvaluation(info.root, relative(info.root, managed), suite, {
+        ...options,
+        model: workspace.provider.model,
+        out: selectedOut,
+    });
+    if (!options.execute) {
+        return {
+            $schema: 'dingtalk-agent/opencode-workspace-eval-plan@1',
+            workspace: name,
+            provider: 'opencode',
+            sourceHash: workspace.sourceHash,
+            desiredHash: workspace.desiredHash,
+            observedHash: workspace.observedHash,
+            report,
+            sideEffect: report.sideEffect,
+            dingtalkSideEffect: false,
+        };
+    }
+    const passed = report.passed === true && report.summary?.loadGate === true &&
+        report.summary?.hardGate === true;
+    const evalBinding = bindEvalEvidence(info.root, workspace, report);
+    writeProviderOutcome(info.root, workspace, passed ? 'ready' : 'failed', {
+        lastEvalId: String(report.runId || ''),
+        binding: evalBinding,
+    });
+    return {
+        $schema: 'dingtalk-agent/opencode-workspace-eval@1',
+        workspace: name,
+        provider: 'opencode',
+        sourceHash: workspace.sourceHash,
+        desiredHash: workspace.desiredHash,
+        observedHash: workspace.observedHash,
+        passed,
+        report,
+        sideEffect: report.sideEffect,
+        dingtalkSideEffect: false,
+    };
+}
+function materializeProject(root, target, workspace) {
+    const info = inspectAgentProject(root);
+    copyProjectEntry(root, target, info.project.definition);
+    if (existsSync(join(root, 'opencode.json')))
+        copyProjectEntry(root, target, 'opencode.json');
+    for (const name of info.project.skills) {
+        const source = `skills/${name}`;
+        if (existsSync(join(root, source)))
+            copyProjectEntry(root, target, source);
+        copyProjectEntry(root, target, `.agents/skills/${name}`);
+    }
+    for (const route of [workspace.storage.memory, workspace.storage.knowledge]) {
+        if (!route.startsWith('local-md:'))
+            continue;
+        copyProjectEntry(root, target, route.slice('local-md:'.length));
+    }
+    bindDefinitionInstruction(target, info.project.definition);
+}
+function bindDefinitionInstruction(target, definition) {
+    const path = join(target, 'opencode.json');
+    const config = existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : {};
+    if (!config || typeof config !== 'object' || Array.isArray(config)) {
+        throw new Error('opencode.json 必须是 JSON object');
+    }
+    const instructions = Array.isArray(config.instructions)
+        ? config.instructions.filter((item) => typeof item === 'string') : [];
+    config.instructions = [definition, ...instructions.filter((item) => item !== definition)];
+    atomicJson(path, config);
+}
+function copyProjectEntry(root, target, ref) {
+    const source = safeProjectPath(root, ref, true);
+    const destination = safeTargetPath(target, ref);
+    if (lstatSync(source).isSymbolicLink())
+        throw new Error(`Project source 不允许符号链接: ${ref}`);
+    mkdirSync(dirname(destination), { recursive: true });
+    cpSync(source, destination, {
+        recursive: true,
+        filter: (path) => !lstatSync(path).isSymbolicLink(),
+    });
+}
+function requireOpenCodeWorkspace(start, name, cliVersion = '') {
+    const workspace = showDevelopmentWorkspace(start, name, cliVersion);
+    if (workspace.provider.kind !== 'opencode' || workspace.legacy) {
+        throw new Error(`Workspace ${name} 不是 opencode Provider；W2 不执行 ${workspace.provider.kind}`);
+    }
+    return workspace;
+}
+function assertManagedWorkspaceIntact(root, workspace) {
+    const target = managedWorkspacePath(root, workspace.name);
+    if (!existsSync(target) || !workspace.state) {
+        throw new Error(`Workspace ${workspace.name} 尚未 materialize；先执行 workspace create ${workspace.name} --yes`);
+    }
+    const expectedRelative = relative(root, target);
+    const actualHash = hashTree(target);
+    const failures = [];
+    if (workspace.state.provider !== 'opencode')
+        failures.push('provider');
+    if (workspace.state.binding.managedPath !== expectedRelative)
+        failures.push('managedPath');
+    if (workspace.state.binding.sourceHash !== workspace.sourceHash)
+        failures.push('sourceHash');
+    if (workspace.state.desiredHash !== workspace.desiredHash)
+        failures.push('desiredHash');
+    if (workspace.state.observedHash !== actualHash)
+        failures.push('observedHash');
+    if (failures.length) {
+        throw new Error(`Workspace ${workspace.name} managed state 漂移: ${failures.join(', ')}`);
+    }
+    return target;
+}
+function writeProviderOutcome(root, workspace, status, patch) {
+    if (!workspace.state)
+        throw new Error('Provider outcome 缺少 Workspace state');
+    const target = assertManagedWorkspaceIntact(root, workspace);
+    writeWorkspaceState(root, {
+        ...workspace.state,
+        status,
+        binding: { ...workspace.state.binding, ...(patch.binding || {}) },
+        observedHash: hashTree(target),
+        lastReceiptId: patch.lastReceiptId ?? workspace.state.lastReceiptId,
+        lastEvalId: patch.lastEvalId ?? workspace.state.lastEvalId,
+    });
+}
+function bindEvalEvidence(root, workspace, report) {
+    const runId = String(report.runId || '');
+    const evidencePath = String(report.evidencePath || '');
+    if (!runId || !evidencePath || report.$schema !== 'dingtalk-agent/opencode-eval-report@1') {
+        throw new Error('OpenCode Eval report 缺少可绑定的 runId/evidencePath/schema');
+    }
+    const evidenceRoot = safeProjectPath(root, evidencePath, true);
+    if (!lstatSync(evidenceRoot).isDirectory() || lstatSync(evidenceRoot).isSymbolicLink()) {
+        throw new Error('OpenCode Eval evidence root 必须是 Project 内真实目录');
+    }
+    const planPath = safeProjectPath(root, join(evidencePath, 'plan.json'), true);
+    const suitePath = safeProjectPath(root, join(evidencePath, 'suite.json'), true);
+    const reportPath = safeProjectPath(root, join(evidencePath, 'report.json'), true);
+    const plan = JSON.parse(readFileSync(planPath, 'utf8'));
+    const suite = JSON.parse(readFileSync(suitePath, 'utf8'));
+    const persistedReport = JSON.parse(readFileSync(reportPath, 'utf8'));
+    if (stableStringify(persistedReport) !== stableStringify(report) ||
+        String(persistedReport.runId || '') !== runId ||
+        String(plan.suite || '') !== String(suite.id || '')) {
+        throw new Error('OpenCode Eval evidence 写后回读与内存 report/suite 不一致');
+    }
+    const target = assertManagedWorkspaceIntact(root, workspace);
+    return {
+        evalRunId: runId,
+        evalEvidencePath: evidencePath,
+        evalPlanHash: sha256(readFileSync(planPath)),
+        evalSuiteHash: digest(stableStringify(suite)),
+        evalReportHash: sha256(readFileSync(reportPath)),
+        evalSuiteId: String(suite.id || ''),
+        evalModel: String(report.engine?.model || ''),
+        evalSourceHash: workspace.sourceHash,
+        evalDesiredHash: workspace.desiredHash,
+        evalObservedHash: hashTree(target),
+    };
+}
+function writeWorkspaceState(root, state) {
+    const path = join(root, WORKSPACE_STATE_ROOT, `${state.workspace}.json`);
+    atomicJson(path, state);
+    const readback = JSON.parse(readFileSync(path, 'utf8'));
+    if (stableStringify(readback) !== stableStringify(state)) {
+        throw new Error(`Workspace state 写后回读不一致: ${state.workspace}`);
+    }
+}
+function managedWorkspacePath(root, name) {
+    return safeProjectPath(root, join(OPENCODE_WORKSPACE_ROOT, safeName(name)), false);
+}
+function artifactStoragePath(root, workspace) {
+    const route = workspace.storage.artifacts;
+    if (!route.startsWith('local-dir:')) {
+        throw new Error(`Workspace ${workspace.name} Artifact route 必须是 local-dir`);
+    }
+    return safeProjectPath(root, route.slice('local-dir:'.length), false);
+}
+function hashTree(root) {
+    const rootReal = realpathSync(resolve(root));
+    const entries = [];
+    const visit = (directory, prefix = '') => {
+        for (const entry of readdirSync(directory, { withFileTypes: true })
+            .sort((a, b) => a.name.localeCompare(b.name))) {
+            const path = join(directory, entry.name);
+            const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+            if (entry.isSymbolicLink())
+                throw new Error(`Managed Workspace 不允许符号链接: ${rel}`);
+            if (entry.isDirectory())
+                visit(path, rel);
+            else if (entry.isFile())
+                entries.push({ path: rel, hash: sha256(readFileSync(path)) });
+            else
+                throw new Error(`Managed Workspace 包含特殊文件: ${rel}`);
+        }
+    };
+    visit(rootReal);
+    return digest(stableStringify(entries));
+}
+function safeProjectPath(root, ref, mustExist) {
+    const rootReal = realpathSync(resolve(root));
+    const candidate = resolve(rootReal, ref);
+    const rel = relative(rootReal, candidate);
+    if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)) {
+        throw new Error(`OpenCode Provider 路径必须位于 Project 内: ${ref}`);
+    }
+    if (mustExist && !existsSync(candidate))
+        throw new Error(`Project source 不存在: ${ref}`);
+    if (mustExist && realpathSync(candidate) !== candidate && !isInside(rootReal, realpathSync(candidate))) {
+        throw new Error(`Project source 真实路径越界: ${ref}`);
+    }
+    return candidate;
+}
+function safeTargetPath(target, ref) {
+    const candidate = resolve(target, ref);
+    if (!isInside(resolve(target), candidate) || candidate === resolve(target)) {
+        throw new Error(`Materialized path 必须位于 Workspace 内: ${ref}`);
+    }
+    return candidate;
+}
+function executionSummary(execution, extra) {
+    return {
+        answer: execution.answer,
+        rawAnswer: execution.answer,
+        ...extra,
+        exitCode: execution.exitCode,
+        sessionId: execution.sessionId,
+        sessionDirectory: execution.sessionDirectory,
+        directoryMatched: execution.directoryMatched,
+        toolCalls: execution.toolCalls,
+        toolNames: execution.toolNames,
+        tokens: execution.tokens,
+        cost: execution.cost,
+        durationMs: execution.durationMs,
+    };
+}
+function emptyExecution(reason) {
+    return {
+        exitCode: null, stdout: '', stderr: reason, answer: '', sessionId: '', toolCalls: 0,
+        toolNames: [], toolPaths: [], toolTrace: [], tokens: null, cost: null, durationMs: 0,
+        directoryMatched: false, sessionDirectory: '',
+        sessionExport: { exitCode: null, stdout: '', stderr: '' },
+    };
+}
+function atomicJson(path, value) {
+    atomicText(path, JSON.stringify(value, null, 2) + '\n');
+}
+function atomicText(path, body) {
+    mkdirSync(dirname(path), { recursive: true });
+    const temporary = `${path}.${process.pid}.${randomUUID().slice(0, 8)}.tmp`;
+    writeFileSync(temporary, body, { flag: 'wx' });
+    renameSync(temporary, path);
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function safeName(value) {
+    if (!/^[a-z0-9](?:[a-z0-9._-]{0,62}[a-z0-9])?$/.test(value)) {
+        throw new Error(`Workspace name 非法: ${value}`);
+    }
+    return value;
+}
+function isInside(root, candidate) {
+    const rel = relative(root, candidate);
+    return rel === '' || (rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`));
+}
+//# sourceMappingURL=opencode-provider.js.map

package/dist/src/opencode-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-provider.js","sourceRoot":"","sources":["../../src/opencode-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EACL,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAChF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAC3D,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EACL,sBAAsB,EAAE,oBAAoB,EAC5C,mBAAmB,EAAE,wBAAwB,GAE9C,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EACL,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,GAEnE,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,sBAAsB,EAAE,wBAAwB,GACjD,MAAM,yBAAyB,CAAA;AAEhC,MAAM,CAAC,MAAM,uBAAuB,GAAG,wCAAwC,CAAA;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,gDAAgD,CAAA;AAyCtF,MAAM,UAAU,qBAAqB,CACnC,KAAa,EAAE,IAAY,EAAE,UAAU,GAAG,EAAE;IAE5C,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC9D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAA;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU;QAC3D,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAClF,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzD,UAAU,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,MAAM,MAAM,GAAG,iBAAiB,MAAM,CAAC,eAAe,CAAC;QACrD,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM;KAC1E,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAClB,OAAO;QACL,OAAO,EAAE,0CAA0C;QACnD,MAAM;QACN,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;QAC/B,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY;QACZ,YAAY,EAAE,SAAS,CAAC,MAAM;QAC9B,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;YACjC,IAAI,CAAC,oBAAoB,EAAE,GAAG,IAAI,OAAO,CAAC;SAC3C;QACD,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,KAAK;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,IAAY,EACZ,UAAoE,EAAE;IAEtE,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IAC3C,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC9D,MAAM,eAAe,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAA;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAA;QAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;QAC/E,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,2CAA2C;YACpD,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,WAAW;YACnB,OAAO;YACP,UAAU,EAAE,yBAAyB;YACrC,kBAAkB,EAAE,KAAK;SAC1B,CAAA;IACH,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAC1E,MAAM,MAAM,GAAG,GAAG,MAAM,WAAW,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAC5E,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CACvC,MAAM,EAAE,EAAE,oCAAoC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAChE,CAAC,CAAA;IACF,IAAI,SAAS,GAAkC,IAAI,CAAA;IACnD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACxC,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACjD,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzC,sBAAsB,CAAC,OAAO,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,SAAS,GAAG,wBAAwB,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAA;QACvF,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAClD,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAChD,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC;gBAAC,SAAS,CAAC,YAAY,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;QAC/B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpD,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,IAAI,EAAE,CAAC;QAC/C,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,eAAe,IAAI,EAAE,CAAC;KAC1D,CAAA;IACD,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,kCAAkC;QAC3C,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,WAAW;QACnB,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY;QACZ,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,EAAE;KACf,CAAC,CAAA;IACF,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,2CAA2C;QACpD,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,WAAW;QACnB,YAAY;QACZ,OAAO;QACP,UAAU,EAAE,yBAAyB;QACrC,kBAAkB,EAAE,KAAK;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,IAAY,EAAE,UAAU,GAAG,EAAE;IAC/E,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACvE,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IACpD,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAA;IAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAClD,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACnE,OAAO;QACL,OAAO,EAAE,sCAAsC;QAC/C,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,IAAI,CAAC,gBAAgB;QAC/B,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,iBAAiB;QAC7B,kBAAkB,EAAE,KAAK;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,IAAY,EACZ,MAAc,EACd,UAAuC,EAAE;IAEzC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChE,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,MAAM,IAAI,SAAS,GAAG,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,8CAA8C;QACvD,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;QAC/B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,YAAY;QACxB,kBAAkB,EAAE,KAAK;KAC1B,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAA;IAC5E,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAExF,MAAM,KAAK,GAAG,0BAA0B,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAC7D,sBAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAA;IAC7E,IAAI,MAA2B,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,yBAAyB,EAAE,UAAU,CAAC,CAAA;QAC3F,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACjD,aAAa,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,2BAA2B,KAAK,QAAQ,CAAC,CAAA;QACxF,MAAM,SAAS,GAAG,wBAAwB,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;QACpF,MAAM,WAAW,GACf,8DAA8D;YAC9D,gDAAgD,CAAA;QAClD,MAAM,cAAc,GAAG,iBAAiB,CACtC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EACvD,iBAAiB,IAAI,aAAa,EAAE,SAAS,CAC9C,CAAA;QACD,MAAM,UAAU,GAAG,kBAAkB,KAAK,EAAE,CAAA;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU;YAC7F,cAAc,CAAC,SAAS,KAAK,CAAC,IAAI,cAAc,CAAC,gBAAgB,CAAA;QACnE,MAAM,MAAM,GAAG,sBAAsB,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,GAAG,CAAA;QACtE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAC9C,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAC1C,GAAG,MAAM,qBAAqB,MAAM,0BAA0B,MAAM,EAAE,EACtE,iBAAiB,IAAI,MAAM,EAAE,SAAS,CACvC,CAAC,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;QACvC,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAA;QAChG,MAAM,MAAM,GAAG,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,SAAS,KAAK,CAAC;YAChF,SAAS,CAAC,gBAAgB,IAAI,eAAe,CAAA;QAC/C,MAAM,GAAG;YACP,OAAO,EAAE,yCAAyC;YAClD,MAAM;YACN,KAAK;YACL,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC3C,KAAK,EAAE;gBACL,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO;gBAChC,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;gBACpD,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI;aACvC;YACD,SAAS,EAAE,gBAAgB,CAAC,cAAc,EAAE;gBAC1C,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU;aAC/E,CAAC;YACF,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;YAC3E,UAAU,EAAE,YAAY;YACxB,kBAAkB,EAAE,KAAK;SAC1B,CAAA;QACD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;QACnD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;QAChF,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;QACpE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;QACjD,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;YACtE,aAAa,EAAE,KAAK;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG;YACP,GAAG,IAAI;YACP,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,KAAK;YACb,KAAK;YACL,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAA;QACD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;QACjD,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAA;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,IAAY,EACZ,KAAa,EACb,UAAwC,EAAE;IAE1C,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CACrC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EACrC,iBAAiB,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAC1D,CAAA;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE;QACnF,GAAG,OAAO;QACV,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;QAC/B,GAAG,EAAE,WAAW;KACjB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,+CAA+C;YACxD,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,KAAK;SAC1B,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI;QACxE,MAAM,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAA;IACnC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAClE,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,WAAW;KACrB,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,0CAA0C;QACnD,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,MAAM;QACN,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,kBAAkB,EAAE,KAAK;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAY,EAAE,MAAc,EAAE,SAAmC;IAEjE,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACtC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;IAC5F,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,UAAU,IAAI,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1E,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAQ;QAC5C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc,EAAE,UAAkB;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAa,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChG,MAAM,CAAC,YAAY,GAAG,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAA;IACjG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAA;IACzF,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;QAC1B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAa,EAAE,IAAY,EAAE,UAAU,GAAG,EAAE;IAE5C,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACnE,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,gCAAgC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY,EAAE,SAAmC;IACrF,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IACzD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,CAAC,IAAI,wCAAwC,SAAS,CAAC,IAAI,QAAQ,CAAC,CAAA;IAC5G,CAAC;IACD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACtE,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,gBAAgB;QAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1F,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC5F,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACvF,IAAI,SAAS,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC9E,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,CAAC,IAAI,sBAAsB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,SAAmC,EACnC,MAA0B,EAC1B,KAIC;IAED,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC5D,mBAAmB,CAAC,IAAI,EAAE;QACxB,GAAG,SAAS,CAAC,KAAK;QAClB,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACjE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC,KAAK,CAAC,aAAa;QACnE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,UAAU;KAC3D,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,SAAmC,EACnC,MAA2B;IAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,uCAAuC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAC9D,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAA;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;IAC/E,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAA;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAA;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAwB,CAAA;IAChF,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAwB,CAAA;IAC3F,IAAI,eAAe,CAAC,eAAe,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,KAAK;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC5D,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,YAAY;QAC9B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QACnC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;QAC7C,cAAc,EAAE,SAAS,CAAC,UAAU;QACpC,eAAe,EAAE,SAAS,CAAC,WAAW;QACtC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC;KACnC,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAgC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,CAAA;IACxE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACvD,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,IAAY;IACtD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,SAAmC;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,CAAC,IAAI,+BAA+B,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,MAAM,OAAO,GAA0C,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,MAAM,GAAG,EAAE,EAAQ,EAAE;QACrD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAC3D,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAA;YAChF,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;iBACpC,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAA;;gBACjF,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAA;IACD,KAAK,CAAC,QAAQ,CAAC,CAAA;IACf,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,SAAkB;IACpE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACzC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAA;IACtF,IAAI,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,GAAW;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA4B,EAAE,KAA8B;IACpF,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,MAAM;QAC3B,GAAG,KAAK;QACR,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,UAAU,EAAE,SAAS,CAAC,UAAU;KACjC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO;QACL,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QACnF,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACpF,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;QAC7C,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KAC1D,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAc;IAC9C,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAA;IAC1E,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACrC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;AAC1G,CAAC","sourcesContent":["import { createHash, randomUUID } from 'node:crypto'\nimport {\n  cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync,\n  realpathSync, renameSync, rmdirSync, rmSync, writeFileSync,\n} from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { dirname, join, relative, resolve } from 'node:path'\nimport {\n  CURRENT_WORKSPACE_FILE, WORKSPACE_STATE_ROOT,\n  inspectAgentProject, showDevelopmentWorkspace,\n  type DevelopmentWorkspaceState, type DevelopmentWorkspaceView,\n} from './development-workspace.js'\nimport { digest, stableStringify } from './events.js'\nimport {\n  prepareOpenCodeEvalAgent, runOpenCodeEvaluation, runOpenCodePrompt,\n  type OpenCodeEvalOptions, type OpenCodeExecution,\n} from './opencode-evals.js'\nimport {\n  bindRequiredBasicSkill, verifyRequiredBasicSkill, type OpenCodeSkillPreflight,\n} from './opencode-workspace.js'\n\nexport const OPENCODE_WORKSPACE_ROOT = '.dingtalk-agent/development-workspaces'\nexport const OPENCODE_EVIDENCE_ROOT = '.dingtalk-agent/development-workspace-evidence'\n\nexport interface OpenCodeWorkspacePlan {\n  $schema: 'dingtalk-agent/opencode-workspace-plan@1'\n  planId: string\n  workspace: string\n  provider: 'opencode'\n  model: string\n  action: 'create' | 'rebuild' | 'noop'\n  root: string\n  managedPath: string\n  sourceHash: string\n  desiredHash: string\n  observedHash: string\n  currentState: string\n  writes: string[]\n  sideEffect: false\n  dingtalkSideEffect: false\n}\n\nexport interface OpenCodeWorkspaceApplyResult extends Omit<OpenCodeWorkspacePlan, '$schema' | 'sideEffect'> {\n  $schema: 'dingtalk-agent/opencode-workspace-apply@1'\n  applied: boolean\n  idempotent: boolean\n  status: 'verifying' | 'ready'\n  observedHash: string\n  binding: Record<string, string>\n  sideEffect: 'local-managed-workspace'\n  dingtalkSideEffect: false\n}\n\nexport interface OpenCodeWorkspaceRunOptions {\n  execute?: boolean\n  yes?: boolean\n  command?: string\n  timeoutMs?: number\n  out?: string\n}\n\nexport interface OpenCodeWorkspaceEvalOptions extends OpenCodeEvalOptions {}\n\nexport function planOpenCodeWorkspace(\n  start: string, name: string, cliVersion = '',\n): OpenCodeWorkspacePlan {\n  const info = inspectAgentProject(start, cliVersion)\n  const workspace = requireOpenCodeWorkspace(info.root, name, cliVersion)\n  const target = managedWorkspacePath(info.root, name)\n  const artifactPath = artifactStoragePath(info.root, workspace)\n  const observedHash = existsSync(target) ? hashTree(target) : ''\n  const state = workspace.state\n  const intact = Boolean(state && state.provider === 'opencode' &&\n    state.desiredHash === workspace.desiredHash && state.observedHash === observedHash &&\n    state.binding.managedPath === relative(info.root, target) &&\n    existsSync(artifactPath) && lstatSync(artifactPath).isDirectory())\n  const action = !existsSync(target) ? 'create' : intact ? 'noop' : 'rebuild'\n  const planId = `opencode_plan_${digest(stableStringify({\n    workspace: name, desiredHash: workspace.desiredHash, observedHash, action,\n  })).slice(0, 24)}`\n  return {\n    $schema: 'dingtalk-agent/opencode-workspace-plan@1',\n    planId,\n    workspace: name,\n    provider: 'opencode',\n    model: workspace.provider.model,\n    action,\n    root: info.root,\n    managedPath: relative(info.root, target),\n    sourceHash: workspace.sourceHash,\n    desiredHash: workspace.desiredHash,\n    observedHash,\n    currentState: workspace.status,\n    writes: action === 'noop' ? [] : [\n      relative(info.root, target),\n      relative(info.root, artifactPath),\n      join(WORKSPACE_STATE_ROOT, `${name}.json`),\n    ],\n    sideEffect: false,\n    dingtalkSideEffect: false,\n  }\n}\n\nexport function applyOpenCodeWorkspace(\n  start: string,\n  name: string,\n  options: { yes?: boolean; command?: string; cliVersion?: string } = {},\n): OpenCodeWorkspaceApplyResult {\n  if (!options.yes) throw new Error('workspace create 会写本地 managed Workspace；必须显式传 --yes')\n  const cliVersion = options.cliVersion || ''\n  const plan = planOpenCodeWorkspace(start, name, cliVersion)\n  const workspace = requireOpenCodeWorkspace(plan.root, name, cliVersion)\n  const target = resolve(plan.root, plan.managedPath)\n  const artifactPath = artifactStoragePath(plan.root, workspace)\n  const artifactExisted = existsSync(artifactPath)\n  const command = options.command || process.env.DTA_OPENCODE_BIN || 'opencode'\n  if (plan.action === 'noop') {\n    const binding = workspace.state?.binding || {}\n    const stateStatus = workspace.state?.status === 'ready' ? 'ready' : 'verifying'\n    return {\n      ...plan,\n      $schema: 'dingtalk-agent/opencode-workspace-apply@1',\n      applied: false,\n      idempotent: true,\n      status: stateStatus,\n      binding,\n      sideEffect: 'local-managed-workspace',\n      dingtalkSideEffect: false,\n    }\n  }\n\n  mkdirSync(dirname(target), { recursive: true })\n  const staging = `${target}.tmp-${process.pid}-${randomUUID().slice(0, 8)}`\n  const backup = `${target}.backup-${process.pid}-${randomUUID().slice(0, 8)}`\n  const preflightSandbox = mkdtempSync(join(\n    tmpdir(), `dta-opencode-workspace-preflight-${safeName(name)}-`,\n  ))\n  let preflight: OpenCodeSkillPreflight | null = null\n  try {\n    mkdirSync(staging, { recursive: false })\n    materializeProject(plan.root, staging, workspace)\n    prepareOpenCodeEvalAgent(staging, 'none')\n    bindRequiredBasicSkill(staging)\n    cpSync(staging, preflightSandbox, { recursive: true })\n    preflight = verifyRequiredBasicSkill(bindRequiredBasicSkill(preflightSandbox), command)\n    if (existsSync(target)) renameSync(target, backup)\n    renameSync(staging, target)\n    mkdirSync(artifactPath, { recursive: true })\n    if (existsSync(backup)) rmSync(backup, { recursive: true, force: true })\n  } catch (error) {\n    rmSync(staging, { recursive: true, force: true })\n    if (existsSync(backup)) {\n      rmSync(target, { recursive: true, force: true })\n      renameSync(backup, target)\n    } else if (existsSync(target) && plan.action === 'create') {\n      rmSync(target, { recursive: true, force: true })\n    }\n    if (!artifactExisted && existsSync(artifactPath)) {\n      try { rmdirSync(artifactPath) } catch { /* preserve non-empty concurrent writes */ }\n    }\n    throw error\n  } finally {\n    rmSync(preflightSandbox, { recursive: true, force: true })\n  }\n\n  const observedHash = hashTree(target)\n  const binding = {\n    managedPath: relative(plan.root, target),\n    model: workspace.provider.model,\n    sourceHash: workspace.sourceHash,\n    basicHash: String(preflight?.skill.hash || ''),\n    basicVersion: String(preflight?.skill.version || ''),\n    configHash: String(preflight?.configHash || ''),\n    openCodeVersion: String(preflight?.openCodeVersion || ''),\n  }\n  writeWorkspaceState(plan.root, {\n    $schema: 'dingtalk-agent/workspace-state@1',\n    workspace: name,\n    provider: 'opencode',\n    status: 'verifying',\n    binding,\n    desiredHash: workspace.desiredHash,\n    observedHash,\n    lastPlanId: plan.planId,\n    lastReceiptId: '',\n    lastEvalId: '',\n  })\n  return {\n    ...plan,\n    $schema: 'dingtalk-agent/opencode-workspace-apply@1',\n    applied: true,\n    idempotent: false,\n    status: 'verifying',\n    observedHash,\n    binding,\n    sideEffect: 'local-managed-workspace',\n    dingtalkSideEffect: false,\n  }\n}\n\nexport function useOpenCodeWorkspace(start: string, name: string, cliVersion = ''): Record<string, unknown> {\n  const info = inspectAgentProject(start, cliVersion)\n  const workspace = requireOpenCodeWorkspace(info.root, name, cliVersion)\n  assertManagedWorkspaceIntact(info.root, workspace)\n  const path = join(info.root, CURRENT_WORKSPACE_FILE)\n  atomicText(path, `${name}\\n`)\n  const readback = readFileSync(path, 'utf8').trim()\n  if (readback !== name) throw new Error('current-workspace 写后回读不一致')\n  return {\n    $schema: 'dingtalk-agent/workspace-selection@1',\n    workspace: name,\n    provider: 'opencode',\n    previous: info.currentWorkspace,\n    current: readback,\n    sideEffect: 'local-selection',\n    dingtalkSideEffect: false,\n  }\n}\n\nexport function runOpenCodeWorkspace(\n  start: string,\n  name: string,\n  prompt: string,\n  options: OpenCodeWorkspaceRunOptions = {},\n): Record<string, any> {\n  if (!prompt.trim()) throw new Error('workspace run prompt 不能为空')\n  const info = inspectAgentProject(start)\n  const workspace = requireOpenCodeWorkspace(info.root, name)\n  const managed = assertManagedWorkspaceIntact(info.root, workspace)\n  const timeoutMs = options.timeoutMs ?? 120_000\n  if (!Number.isInteger(timeoutMs) || timeoutMs < 10_000 || timeoutMs > 300_000) {\n    throw new Error('workspace run timeoutMs 必须为 10000..300000')\n  }\n  const plan = {\n    $schema: 'dingtalk-agent/opencode-workspace-run-plan@1',\n    workspace: name,\n    provider: 'opencode',\n    model: workspace.provider.model,\n    desiredHash: workspace.desiredHash,\n    observedHash: workspace.observedHash,\n    promptHash: sha256(prompt),\n    loadProbe: 'random-per-run',\n    tools: 'none',\n    sideEffect: 'model-only',\n    dingtalkSideEffect: false,\n  }\n  if (!options.execute) return { ...plan, ready: true, executeRequired: true }\n  if (!options.yes) throw new Error('workspace run 会调用 OpenCode 模型；必须同时传 --execute --yes')\n\n  const runId = `opencode_workspace_run_${Date.now()}_${randomUUID().slice(0, 8)}`\n  const evidence = safeProjectPath(info.root, options.out || join(\n    OPENCODE_EVIDENCE_ROOT, name, 'runs', runId), false)\n  const sandbox = mkdtempSync(join(tmpdir(), `dta-opencode-workspace-${safeName(name)}-`))\n  const command = options.command || process.env.DTA_OPENCODE_BIN || 'opencode'\n  let report: Record<string, any>\n  try {\n    cpSync(managed, sandbox, { recursive: true })\n    const probe = randomUUID()\n    const skillPath = join(sandbox, '.agents', 'skills', 'dingtalk-basic-behavior', 'SKILL.md')\n    const skillBody = readFileSync(skillPath, 'utf8')\n    writeFileSync(skillPath, `${skillBody.trimEnd()}\\n\\n<!-- dta-load-probe:${probe} -->\\n`)\n    const preflight = verifyRequiredBasicSkill(bindRequiredBasicSkill(sandbox), command)\n    const probePrompt =\n      '这是加载链路探针。只依据 Basic Skill 正文末尾注释回答；严格输出 `dta-load-probe=<值>`；' +\n      '若看不到则输出 `dta-load-probe=not-loaded`。禁止调用工具或解释。'\n    const probeExecution = runOpenCodePrompt(\n      command, sandbox, workspace.provider.model, probePrompt,\n      `DTA Workspace ${name} load probe`, timeoutMs,\n    )\n    const exactProbe = `dta-load-probe=${probe}`\n    const loadPassed = probeExecution.exitCode === 0 && probeExecution.answer.trim() === exactProbe &&\n      probeExecution.toolCalls === 0 && probeExecution.directoryMatched\n    const marker = `[DTA-WORKSPACE-RUN-${safeName(name)}-${randomUUID()}]`\n    const execution = loadPassed ? runOpenCodePrompt(\n      command, sandbox, workspace.provider.model,\n      `${marker}\\n执行协议：第一行逐字符原样输出 ${marker}；从第二行回答用户任务；禁止调用任何工具。\\n${prompt}`,\n      `DTA Workspace ${name} run`, timeoutMs,\n    ) : emptyExecution('load-probe-failed')\n    const exactAttributed = execution.answer.startsWith(marker)\n    const answer = exactAttributed ? execution.answer.slice(marker.length).trim() : execution.answer\n    const passed = loadPassed && execution.exitCode === 0 && execution.toolCalls === 0 &&\n      execution.directoryMatched && exactAttributed\n    report = {\n      $schema: 'dingtalk-agent/opencode-workspace-run@1',\n      passed,\n      runId,\n      workspace: name,\n      provider: 'opencode',\n      model: workspace.provider.model,\n      sourceHash: workspace.sourceHash,\n      desiredHash: workspace.desiredHash,\n      observedHash: workspace.observedHash,\n      evidencePath: relative(info.root, evidence),\n      basic: {\n        version: preflight.skill.version,\n        sourceHash: workspace.state?.binding.basicHash || '',\n        instrumentedHash: preflight.skill.hash,\n      },\n      loadProbe: executionSummary(probeExecution, {\n        expected: exactProbe, exactLoaded: probeExecution.answer.trim() === exactProbe,\n      }),\n      execution: executionSummary(execution, { marker, exactAttributed, answer }),\n      sideEffect: 'model-only',\n      dingtalkSideEffect: false,\n    }\n    mkdirSync(evidence, { recursive: true })\n    writeFileSync(join(evidence, 'prompt.txt'), prompt)\n    writeFileSync(join(evidence, 'load-probe.stdout.ndjson'), probeExecution.stdout)\n    writeFileSync(join(evidence, 'run.stdout.ndjson'), execution.stdout)\n    atomicJson(join(evidence, 'report.json'), report)\n    writeProviderOutcome(info.root, workspace, passed ? 'ready' : 'failed', {\n      lastReceiptId: runId,\n    })\n  } catch (error) {\n    report = {\n      ...plan,\n      $schema: 'dingtalk-agent/opencode-workspace-run@1',\n      passed: false,\n      runId,\n      evidencePath: relative(info.root, evidence),\n      failure: error.message,\n    }\n    mkdirSync(evidence, { recursive: true })\n    atomicJson(join(evidence, 'report.json'), report)\n    writeProviderOutcome(info.root, workspace, 'failed', { lastReceiptId: runId })\n  } finally {\n    rmSync(sandbox, { recursive: true, force: true })\n  }\n  return report\n}\n\nexport function evalOpenCodeWorkspace(\n  start: string,\n  name: string,\n  suite: string,\n  options: OpenCodeWorkspaceEvalOptions = {},\n): Record<string, any> {\n  const info = inspectAgentProject(start)\n  const workspace = requireOpenCodeWorkspace(info.root, name)\n  const managed = assertManagedWorkspaceIntact(info.root, workspace)\n  const selectedOut = options.out || join(\n    OPENCODE_EVIDENCE_ROOT, name, 'evals',\n    `opencode_eval_${Date.now()}_${randomUUID().slice(0, 8)}`,\n  )\n  const report = runOpenCodeEvaluation(info.root, relative(info.root, managed), suite, {\n    ...options,\n    model: workspace.provider.model,\n    out: selectedOut,\n  })\n  if (!options.execute) {\n    return {\n      $schema: 'dingtalk-agent/opencode-workspace-eval-plan@1',\n      workspace: name,\n      provider: 'opencode',\n      sourceHash: workspace.sourceHash,\n      desiredHash: workspace.desiredHash,\n      observedHash: workspace.observedHash,\n      report,\n      sideEffect: report.sideEffect,\n      dingtalkSideEffect: false,\n    }\n  }\n  const passed = report.passed === true && report.summary?.loadGate === true &&\n    report.summary?.hardGate === true\n  const evalBinding = bindEvalEvidence(info.root, workspace, report)\n  writeProviderOutcome(info.root, workspace, passed ? 'ready' : 'failed', {\n    lastEvalId: String(report.runId || ''),\n    binding: evalBinding,\n  })\n  return {\n    $schema: 'dingtalk-agent/opencode-workspace-eval@1',\n    workspace: name,\n    provider: 'opencode',\n    sourceHash: workspace.sourceHash,\n    desiredHash: workspace.desiredHash,\n    observedHash: workspace.observedHash,\n    passed,\n    report,\n    sideEffect: report.sideEffect,\n    dingtalkSideEffect: false,\n  }\n}\n\nfunction materializeProject(\n  root: string, target: string, workspace: DevelopmentWorkspaceView,\n): void {\n  const info = inspectAgentProject(root)\n  copyProjectEntry(root, target, info.project.definition)\n  if (existsSync(join(root, 'opencode.json'))) copyProjectEntry(root, target, 'opencode.json')\n  for (const name of info.project.skills) {\n    const source = `skills/${name}`\n    if (existsSync(join(root, source))) copyProjectEntry(root, target, source)\n    copyProjectEntry(root, target, `.agents/skills/${name}`)\n  }\n  for (const route of [workspace.storage.memory, workspace.storage.knowledge]) {\n    if (!route.startsWith('local-md:')) continue\n    copyProjectEntry(root, target, route.slice('local-md:'.length))\n  }\n  bindDefinitionInstruction(target, info.project.definition)\n}\n\nfunction bindDefinitionInstruction(target: string, definition: string): void {\n  const path = join(target, 'opencode.json')\n  const config = existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : {}\n  if (!config || typeof config !== 'object' || Array.isArray(config)) {\n    throw new Error('opencode.json 必须是 JSON object')\n  }\n  const instructions = Array.isArray(config.instructions)\n    ? config.instructions.filter((item: unknown): item is string => typeof item === 'string') : []\n  config.instructions = [definition, ...instructions.filter((item: string) => item !== definition)]\n  atomicJson(path, config)\n}\n\nfunction copyProjectEntry(root: string, target: string, ref: string): void {\n  const source = safeProjectPath(root, ref, true)\n  const destination = safeTargetPath(target, ref)\n  if (lstatSync(source).isSymbolicLink()) throw new Error(`Project source 不允许符号链接: ${ref}`)\n  mkdirSync(dirname(destination), { recursive: true })\n  cpSync(source, destination, {\n    recursive: true,\n    filter: (path) => !lstatSync(path).isSymbolicLink(),\n  })\n}\n\nfunction requireOpenCodeWorkspace(\n  start: string, name: string, cliVersion = '',\n): DevelopmentWorkspaceView {\n  const workspace = showDevelopmentWorkspace(start, name, cliVersion)\n  if (workspace.provider.kind !== 'opencode' || workspace.legacy) {\n    throw new Error(`Workspace ${name} 不是 opencode Provider；W2 不执行 ${workspace.provider.kind}`)\n  }\n  return workspace\n}\n\nfunction assertManagedWorkspaceIntact(root: string, workspace: DevelopmentWorkspaceView): string {\n  const target = managedWorkspacePath(root, workspace.name)\n  if (!existsSync(target) || !workspace.state) {\n    throw new Error(`Workspace ${workspace.name} 尚未 materialize；先执行 workspace create ${workspace.name} --yes`)\n  }\n  const expectedRelative = relative(root, target)\n  const actualHash = hashTree(target)\n  const failures: string[] = []\n  if (workspace.state.provider !== 'opencode') failures.push('provider')\n  if (workspace.state.binding.managedPath !== expectedRelative) failures.push('managedPath')\n  if (workspace.state.binding.sourceHash !== workspace.sourceHash) failures.push('sourceHash')\n  if (workspace.state.desiredHash !== workspace.desiredHash) failures.push('desiredHash')\n  if (workspace.state.observedHash !== actualHash) failures.push('observedHash')\n  if (failures.length) {\n    throw new Error(`Workspace ${workspace.name} managed state 漂移: ${failures.join(', ')}`)\n  }\n  return target\n}\n\nfunction writeProviderOutcome(\n  root: string,\n  workspace: DevelopmentWorkspaceView,\n  status: 'ready' | 'failed',\n  patch: {\n    lastReceiptId?: string\n    lastEvalId?: string\n    binding?: Record<string, string>\n  },\n): void {\n  if (!workspace.state) throw new Error('Provider outcome 缺少 Workspace state')\n  const target = assertManagedWorkspaceIntact(root, workspace)\n  writeWorkspaceState(root, {\n    ...workspace.state,\n    status,\n    binding: { ...workspace.state.binding, ...(patch.binding || {}) },\n    observedHash: hashTree(target),\n    lastReceiptId: patch.lastReceiptId ?? workspace.state.lastReceiptId,\n    lastEvalId: patch.lastEvalId ?? workspace.state.lastEvalId,\n  })\n}\n\nfunction bindEvalEvidence(\n  root: string,\n  workspace: DevelopmentWorkspaceView,\n  report: Record<string, any>,\n): Record<string, string> {\n  const runId = String(report.runId || '')\n  const evidencePath = String(report.evidencePath || '')\n  if (!runId || !evidencePath || report.$schema !== 'dingtalk-agent/opencode-eval-report@1') {\n    throw new Error('OpenCode Eval report 缺少可绑定的 runId/evidencePath/schema')\n  }\n  const evidenceRoot = safeProjectPath(root, evidencePath, true)\n  if (!lstatSync(evidenceRoot).isDirectory() || lstatSync(evidenceRoot).isSymbolicLink()) {\n    throw new Error('OpenCode Eval evidence root 必须是 Project 内真实目录')\n  }\n  const planPath = safeProjectPath(root, join(evidencePath, 'plan.json'), true)\n  const suitePath = safeProjectPath(root, join(evidencePath, 'suite.json'), true)\n  const reportPath = safeProjectPath(root, join(evidencePath, 'report.json'), true)\n  const plan = JSON.parse(readFileSync(planPath, 'utf8')) as Record<string, any>\n  const suite = JSON.parse(readFileSync(suitePath, 'utf8')) as Record<string, any>\n  const persistedReport = JSON.parse(readFileSync(reportPath, 'utf8')) as Record<string, any>\n  if (stableStringify(persistedReport) !== stableStringify(report) ||\n      String(persistedReport.runId || '') !== runId ||\n      String(plan.suite || '') !== String(suite.id || '')) {\n    throw new Error('OpenCode Eval evidence 写后回读与内存 report/suite 不一致')\n  }\n  const target = assertManagedWorkspaceIntact(root, workspace)\n  return {\n    evalRunId: runId,\n    evalEvidencePath: evidencePath,\n    evalPlanHash: sha256(readFileSync(planPath)),\n    evalSuiteHash: digest(stableStringify(suite)),\n    evalReportHash: sha256(readFileSync(reportPath)),\n    evalSuiteId: String(suite.id || ''),\n    evalModel: String(report.engine?.model || ''),\n    evalSourceHash: workspace.sourceHash,\n    evalDesiredHash: workspace.desiredHash,\n    evalObservedHash: hashTree(target),\n  }\n}\n\nfunction writeWorkspaceState(root: string, state: DevelopmentWorkspaceState): void {\n  const path = join(root, WORKSPACE_STATE_ROOT, `${state.workspace}.json`)\n  atomicJson(path, state)\n  const readback = JSON.parse(readFileSync(path, 'utf8'))\n  if (stableStringify(readback) !== stableStringify(state)) {\n    throw new Error(`Workspace state 写后回读不一致: ${state.workspace}`)\n  }\n}\n\nfunction managedWorkspacePath(root: string, name: string): string {\n  return safeProjectPath(root, join(OPENCODE_WORKSPACE_ROOT, safeName(name)), false)\n}\n\nfunction artifactStoragePath(root: string, workspace: DevelopmentWorkspaceView): string {\n  const route = workspace.storage.artifacts\n  if (!route.startsWith('local-dir:')) {\n    throw new Error(`Workspace ${workspace.name} Artifact route 必须是 local-dir`)\n  }\n  return safeProjectPath(root, route.slice('local-dir:'.length), false)\n}\n\nfunction hashTree(root: string): string {\n  const rootReal = realpathSync(resolve(root))\n  const entries: Array<{ path: string; hash: string }> = []\n  const visit = (directory: string, prefix = ''): void => {\n    for (const entry of readdirSync(directory, { withFileTypes: true })\n      .sort((a, b) => a.name.localeCompare(b.name))) {\n      const path = join(directory, entry.name)\n      const rel = prefix ? `${prefix}/${entry.name}` : entry.name\n      if (entry.isSymbolicLink()) throw new Error(`Managed Workspace 不允许符号链接: ${rel}`)\n      if (entry.isDirectory()) visit(path, rel)\n      else if (entry.isFile()) entries.push({ path: rel, hash: sha256(readFileSync(path)) })\n      else throw new Error(`Managed Workspace 包含特殊文件: ${rel}`)\n    }\n  }\n  visit(rootReal)\n  return digest(stableStringify(entries))\n}\n\nfunction safeProjectPath(root: string, ref: string, mustExist: boolean): string {\n  const rootReal = realpathSync(resolve(root))\n  const candidate = resolve(rootReal, ref)\n  const rel = relative(rootReal, candidate)\n  if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)) {\n    throw new Error(`OpenCode Provider 路径必须位于 Project 内: ${ref}`)\n  }\n  if (mustExist && !existsSync(candidate)) throw new Error(`Project source 不存在: ${ref}`)\n  if (mustExist && realpathSync(candidate) !== candidate && !isInside(rootReal, realpathSync(candidate))) {\n    throw new Error(`Project source 真实路径越界: ${ref}`)\n  }\n  return candidate\n}\n\nfunction safeTargetPath(target: string, ref: string): string {\n  const candidate = resolve(target, ref)\n  if (!isInside(resolve(target), candidate) || candidate === resolve(target)) {\n    throw new Error(`Materialized path 必须位于 Workspace 内: ${ref}`)\n  }\n  return candidate\n}\n\nfunction executionSummary(execution: OpenCodeExecution, extra: Record<string, unknown>): Record<string, unknown> {\n  return {\n    answer: execution.answer,\n    rawAnswer: execution.answer,\n    ...extra,\n    exitCode: execution.exitCode,\n    sessionId: execution.sessionId,\n    sessionDirectory: execution.sessionDirectory,\n    directoryMatched: execution.directoryMatched,\n    toolCalls: execution.toolCalls,\n    toolNames: execution.toolNames,\n    tokens: execution.tokens,\n    cost: execution.cost,\n    durationMs: execution.durationMs,\n  }\n}\n\nfunction emptyExecution(reason: string): OpenCodeExecution {\n  return {\n    exitCode: null, stdout: '', stderr: reason, answer: '', sessionId: '', toolCalls: 0,\n    toolNames: [], toolPaths: [], toolTrace: [], tokens: null, cost: null, durationMs: 0,\n    directoryMatched: false, sessionDirectory: '',\n    sessionExport: { exitCode: null, stdout: '', stderr: '' },\n  }\n}\n\nfunction atomicJson(path: string, value: unknown): void {\n  atomicText(path, JSON.stringify(value, null, 2) + '\\n')\n}\n\nfunction atomicText(path: string, body: string): void {\n  mkdirSync(dirname(path), { recursive: true })\n  const temporary = `${path}.${process.pid}.${randomUUID().slice(0, 8)}.tmp`\n  writeFileSync(temporary, body, { flag: 'wx' })\n  renameSync(temporary, path)\n}\n\nfunction sha256(value: string | Buffer): string {\n  return createHash('sha256').update(value).digest('hex')\n}\n\nfunction safeName(value: string): string {\n  if (!/^[a-z0-9](?:[a-z0-9._-]{0,62}[a-z0-9])?$/.test(value)) {\n    throw new Error(`Workspace name 非法: ${value}`)\n  }\n  return value\n}\n\nfunction isInside(root: string, candidate: string): boolean {\n  const rel = relative(root, candidate)\n  return rel === '' || (rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`))\n}\n"]}