@zaly/agent 0.0.12 → 0.1.0

package/dist/{tools-wvkkuXWH.mjs.map → tools-CJ2x45EZ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"tools-wvkkuXWH.mjs","names":["shellParse"],"sources":["../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/quote.js","../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/parse.js","../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/index.js","../src/utils/bash/parser.ts","../src/utils/bash/tools.ts"],"sourcesContent":["'use strict';\n\n/** @import { ControlOperator } from './parse' */\n\n/** @type {ControlOperator['op'][]} */\nvar OPS = /** @type {const} */ ([\n\t'||',\n\t'&&',\n\t';;&',\n\t';;',\n\t';&',\n\t'|&',\n\t'<(',\n\t'>(',\n\t'<<<',\n\t'<<-',\n\t'<<',\n\t'>>',\n\t'>&',\n\t'>|',\n\t'&>>',\n\t'&>',\n\t'<&',\n\t'<>',\n\t'&',\n\t';',\n\t'(',\n\t')',\n\t'|',\n\t'<',\n\t'>'\n]);\nvar LINE_TERMINATORS = /[\\n\\r\\u2028\\u2029]/;\nvar GLOB_SHELL_SPECIAL = /[\\s#!\"$&'():;<=>@\\\\^`|~]/g;\n\n/** @type {typeof import('./quote')} */\nmodule.exports = function quote(xs) {\n\tvar sawComment = false;\n\treturn xs.map(function (s) {\n\t\tif (sawComment && typeof s === 'string' && LINE_TERMINATORS.test(s)) {\n\t\t\tthrow new TypeError('a token after a `comment` must not contain line terminators');\n\t\t}\n\t\tif (s === '') {\n\t\t\treturn /** @type {const} */ ('\\'\\'');\n\t\t}\n\t\tif (s && typeof s === 'object') {\n\t\t\tif ('op' in s && s.op === 'glob') {\n\t\t\t\tif (typeof s.pattern !== 'string') {\n\t\t\t\t\tthrow new TypeError('glob token requires a string `pattern`');\n\t\t\t\t}\n\t\t\t\tif (LINE_TERMINATORS.test(s.pattern)) {\n\t\t\t\t\tthrow new TypeError('glob `pattern` must not contain line terminators');\n\t\t\t\t}\n\t\t\t\tif (s.pattern === '') {\n\t\t\t\t\treturn /** @type {const} */ ('\\'\\'');\n\t\t\t\t}\n\t\t\t\treturn s.pattern.replace(GLOB_SHELL_SPECIAL, '\\\\$&');\n\t\t\t}\n\t\t\tif ('op' in s && typeof s.op === 'string') {\n\t\t\t\tif (OPS.indexOf(s.op) < 0) {\n\t\t\t\t\tthrow new TypeError('invalid `op` value: ' + JSON.stringify(s.op));\n\t\t\t\t}\n\t\t\t\treturn s.op.replace(/[\\s\\S]/g, '\\\\$&');\n\t\t\t}\n\t\t\tif ('comment' in s && typeof s.comment === 'string') {\n\t\t\t\tif (LINE_TERMINATORS.test(s.comment)) {\n\t\t\t\t\tthrow new TypeError('`comment` must not contain line terminators');\n\t\t\t\t}\n\t\t\t\tsawComment = true;\n\t\t\t\treturn '#' + s.comment;\n\t\t\t}\n\t\t\tthrow new TypeError('unrecognized object token shape');\n\t\t}\n\t\tif ((/'/).test(s) && (/!/).test(s)) {\n\t\t\treturn \"'\" + s.replace(/'/g, \"'\\\"'\\\"'\") + \"'\";\n\t\t}\n\t\tif ((/[\"\\s\\\\]/).test(s) && !(/'/).test(s)) {\n\t\t\treturn \"'\" + s + \"'\";\n\t\t}\n\t\tif ((/[\"'\\s]/).test(s)) {\n\t\t\treturn '\"' + s.replace(/([\"\\\\$`])/g, '\\\\$1') + '\"';\n\t\t}\n\t\treturn String(s).replace(/([A-Za-z]:)?([#!\"$&'()*,:;<=>?@[\\\\\\]^`{|}~])/g, '$1\\\\$2');\n\t}).join(' ');\n};\n","'use strict';\n\n/**\n * @import {\n * \tControlOperator,\n * \tEnv,\n * \tGlobPattern,\n * \tParseEntry,\n * } from './parse' */\n\n// '<(' and '>(' are process substitution operators and\n// can be parsed the same as control operator\nvar CONTROL = /** @type {const} */ ('(?:') + /** @type {const} */ ([\n\t'\\\\|\\\\|',\n\t'\\\\&(?:\\\\&|>>?)', // `&&`, `&>`, and `&>>`\n\t';;\\\\&?', // `;;` and `;;&`\n\t'[;|]\\\\&', // `;&` and `|&`\n\t'\\\\<\\\\(',\n\t'\\\\<\\\\<\\\\<',\n\t'\\\\<\\\\<-',\n\t'\\\\<\\\\<(?!\\\\()', // `<<(` stays `<` and `<(`, as zsh reads it; other shells reject it\n\t'>>',\n\t'>[&|(]', // `>&`, `>|`, and `>(`\n\t'<[&>]', // `<&` and `<>`\n\t'[&;()|<>]'\n]).join(/** @type {const} */ ('|')) + /** @type {const} */ (')');\nvar controlRE = new RegExp('^' + CONTROL + '$');\nvar META = /** @type {const} */ ('|&;()<> \\\\t');\nvar SINGLE_QUOTE = /** @type {const} */ ('\\'([^\\']*?)\\'');\n// bash ANSI-C quoting, `$'...'`: a backslash escapes the next character, including `'`\nvar ANSI_C_BODY = '(?:\\\\\\\\[\\\\s\\\\S]|[^\\\\\\\\\\'])*?';\nvar ANSI_C_QUOTE = '\\\\$\\'' + ANSI_C_BODY + '\\'';\nvar ansiCAt = new RegExp('\\\\$\\'' + ANSI_C_BODY + '(?:(\\')|\\\\\\\\?$)', 'g');\nvar ANSI_C_LETTERS = 'abeEfnrtv';\nvar ANSI_C_CHARS = '\\x07\\b\\x1B\\x1B\\f\\n\\r\\t\\v';\nvar hash = /^#$/;\n\nvar SQ = /** @type {const} */ (\"'\");\nvar DQ = /** @type {const} */ ('\"');\nvar DS = /** @type {const} */ ('$');\n\nvar TOKEN = '';\nvar mult = /** @type {const} */ (0x100000000); // Math.pow(16, 8);\nfor (var i = 0; i < 4; i++) {\n\tTOKEN += (mult * Math.random()).toString(16);\n}\nvar startsWithToken = new RegExp('^' + TOKEN);\n\n/**\n * @param {string} s\n * @param {RegExp} r\n */\nfunction matchAll(s, r) {\n\tvar origIndex = r.lastIndex;\n\n\tvar matches = [];\n\tvar matchObj;\n\n\twhile ((matchObj = r.exec(s))) {\n\t\tmatches[matches.length] = matchObj;\n\t\tif (r.lastIndex === matchObj.index) {\n\t\t\tr.lastIndex += 1;\n\t\t}\n\t}\n\n\tr.lastIndex = origIndex;\n\n\treturn matches;\n}\n\n/**\n * @param {Env} env\n * @param {string} pre\n * @param {string} key\n */\nfunction getVar(env, pre, key) {\n\tvar r = typeof env === 'function' ? env(key) : env[key];\n\tif (typeof r === 'undefined' && key != '') {\n\t\tr = '';\n\t} else if (typeof r === 'undefined') {\n\t\tr = '$';\n\t}\n\n\tif (typeof r === 'object') {\n\t\treturn pre + TOKEN + JSON.stringify(r) + TOKEN;\n\t}\n\treturn pre + r;\n}\n\nvar ansiCEscape = /\\\\([0-7]{1,3}|x[\\dA-Fa-f]{1,2}|u[\\dA-Fa-f]{1,4}|U[\\dA-Fa-f]{1,8}|c(?:\\\\\\\\|[\\s\\S])|[abeEfnrtv\\\\'\"?])/g;\n\n/**\n * @param {string} m\n * @param {string} escape\n */\nfunction expandAnsiCEscape(m, escape) {\n\tvar kind = escape.charAt(0);\n\tif (kind === 'c') {\n\t\tvar ctrl = escape.charAt(1);\n\t\treturn ctrl === '?' ? '\\x7F' : String.fromCharCode(ctrl.charCodeAt(0) & 0x1F);\n\t}\n\tif (kind === 'x' || kind === 'u' || kind === 'U') {\n\t\tvar cp = parseInt(escape.slice(1), 16);\n\t\tif (cp > 0x10FFFF) {\n\t\t\treturn m;\n\t\t}\n\t\treturn String.fromCharCode.apply(null, cp > 0xFFFF ? [0xD7C0 + (cp >> 10), 0xDC00 + (cp & 0x3FF)] : [cp]);\n\t}\n\tif (kind >= '0' && kind <= '7') {\n\t\treturn String.fromCharCode(parseInt(escape, 8) & 0xFF);\n\t}\n\tvar letter = ANSI_C_LETTERS.indexOf(escape);\n\treturn letter < 0 ? escape : ANSI_C_CHARS.charAt(letter);\n}\n\n/** @param {string} body */\nfunction expandAnsiC(body) {\n\treturn body.replace(ansiCEscape, expandAnsiCEscape).split('\\0')[0]; // like bash, a NUL ends the string\n}\n\n/**\n * @param {string} s\n * @param {number} i\n */\nfunction closesAnsiC(s, i) {\n\tansiCAt.lastIndex = i;\n\treturn !!(/** @type {RegExpExecArray} */ (ansiCAt.exec(s)))[1];\n}\n\n/**\n * @param {string} string\n * @param {Env} [env]\n * @param {{ escape?: string, splitUnquoted?: boolean | string }} [opts]\n * @returns {ParseEntry[]}\n */\nfunction parseInternal(string, env, opts) {\n\tif (!opts) {\n\t\topts = {};\n\t}\n\tvar BS = opts.escape || '\\\\';\n\tvar ifs = opts.splitUnquoted === true ? ' \\t\\n' : (typeof opts.splitUnquoted === 'string' ? opts.splitUnquoted : '');\n\tvar BAREWORD = '(\\\\' + BS + '[\\'\"$\\\\' + BS + META + ']|\\\\$\\\\$|\\\\$(?!' + ANSI_C_QUOTE.slice(2) + ')|[^\\\\s\\'\"$' + META + '])+';\n\tvar DOUBLE_QUOTE = '\"(?:\\\\' + BS + '[\\\\s\\\\S]|[^\"\\\\' + BS + '])*\"';\n\n\tvar chunker = new RegExp([\n\t\t'(' + CONTROL + ')', // control chars\n\t\t'(' + ANSI_C_QUOTE + '|' + BAREWORD + '|' + DOUBLE_QUOTE + '|' + SINGLE_QUOTE + ')+'\n\t].join('|'), 'g');\n\n\tvar matches = matchAll(string, chunker);\n\n\tif (matches.length === 0) {\n\t\treturn [];\n\t}\n\tif (!env) {\n\t\tenv = {};\n\t}\n\n\tvar commented = false;\n\n\treturn matches.map(function (match) {\n\t\tvar s = match[0];\n\t\tif (!s || commented) {\n\t\t\treturn void undefined;\n\t\t}\n\t\tif (controlRE.test(s)) {\n\t\t\treturn /** @type {ControlOperator} */ ({ op: s });\n\t\t}\n\n\t\t// Hand-written scanner/parser for Bash quoting rules:\n\t\t//\n\t\t// 1. inside single quotes, all characters are printed literally.\n\t\t// 2. inside double quotes, all characters are printed literally\n\t\t//    except variables prefixed by '$' and backslashes followed by\n\t\t//    either a double quote or another backslash.\n\t\t// 3. outside of any quotes, backslashes are treated as escape\n\t\t//    characters and not printed (unless they are themselves escaped)\n\t\t// 4. quote context can switch mid-token if there is no whitespace\n\t\t//     between the two quote contexts (e.g. all'one'\"token\" parses as\n\t\t//     \"allonetoken\")\n\t\t/** @type {string | boolean} */\n\t\tvar quote = false;\n\t\tvar esc = false;\n\t\tvar out = '';\n\t\t/** @type {string[]} */\n\t\tvar words = [];\n\t\tvar sawQuote = false;\n\t\t/** @type {number | null} */\n\t\tvar pendingNw = null;\n\t\tvar isGlob = false;\n\t\t/** @type {number} */\n\t\tvar i;\n\n\t\tfunction parseEnvVar() {\n\t\t\ti += 1;\n\t\t\t/** @type {number | RegExpMatchArray | null} */\n\t\t\tvar varend;\n\t\t\t/** @type {string} */\n\t\t\tvar varname;\n\t\t\tvar char = s.charAt(i);\n\n\t\t\tif (char === '{') {\n\t\t\t\ti += 1;\n\t\t\t\tif (s.charAt(i) === '}') {\n\t\t\t\t\tthrow new Error('Bad substitution: ' + s.slice(i - 2, i + 1));\n\t\t\t\t}\n\t\t\t\t// match braces by depth so a nested `${` keeps its inner `}` from ending the outer substitution\n\t\t\t\tvar depth = 1;\n\t\t\t\tvarend = i;\n\t\t\t\twhile (depth > 0 && varend < s.length) {\n\t\t\t\t\tif (s.charAt(varend) === '{' && s.charAt(varend - 1) === '$') {\n\t\t\t\t\t\tdepth += 1;\n\t\t\t\t\t} else if (s.charAt(varend) === '}') {\n\t\t\t\t\t\tdepth -= 1;\n\t\t\t\t\t}\n\t\t\t\t\tvarend += 1;\n\t\t\t\t}\n\t\t\t\tif (depth !== 0) {\n\t\t\t\t\tthrow new Error('Bad substitution: ' + s.slice(i));\n\t\t\t\t}\n\t\t\t\tvarend -= 1;\n\t\t\t\tvarname = s.slice(i, varend);\n\t\t\t\ti = varend;\n\t\t\t} else if ((/[*@#?$!-]/).test(char)) {\n\t\t\t\tvarname = char;\n\t\t\t} else {\n\t\t\t\tvar slicedFromI = s.slice(i);\n\t\t\t\tvarend = slicedFromI.match(/[^\\w\\d_]/);\n\t\t\t\tif (!varend) {\n\t\t\t\t\tvarname = slicedFromI;\n\t\t\t\t\ti = s.length;\n\t\t\t\t} else {\n\t\t\t\t\tvarname = slicedFromI.slice(0, varend.index);\n\t\t\t\t\ti += /** @type {number} */ (varend.index) - 1;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn getVar(/** @type {NonNullable<typeof env>} */ (env), '', varname);\n\t\t}\n\n\t\tfunction flushRun() {\n\t\t\tif (pendingNw === null) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (pendingNw === 0) {\n\t\t\t\tif (out !== '') {\n\t\t\t\t\twords[words.length] = out;\n\t\t\t\t\tout = '';\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\twords[words.length] = out;\n\t\t\t\tout = '';\n\t\t\t\tfor (var fe = 1; fe < pendingNw; fe += 1) {\n\t\t\t\t\twords[words.length] = '';\n\t\t\t\t}\n\t\t\t}\n\t\t\tpendingNw = null;\n\t\t}\n\n\t\tfor (i = 0; i < s.length; i++) {\n\t\t\tvar c = s.charAt(i);\n\t\t\tif (ifs && c !== DS) {\n\t\t\t\tflushRun();\n\t\t\t}\n\t\t\tisGlob = isGlob || (!quote && (c === '*' || c === '?'));\n\t\t\tif (esc) {\n\t\t\t\tout += c;\n\t\t\t\tesc = false;\n\t\t\t} else if (quote) {\n\t\t\t\tif (c === quote) {\n\t\t\t\t\tquote = false;\n\t\t\t\t} else if (quote == SQ) {\n\t\t\t\t\tout += c;\n\t\t\t\t} else { // Double quote\n\t\t\t\t\tif (c === BS) {\n\t\t\t\t\t\ti += 1;\n\t\t\t\t\t\tc = s.charAt(i);\n\t\t\t\t\t\tif (c === DQ || c === BS || c === DS) {\n\t\t\t\t\t\t\tout += c;\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tout += BS + c;\n\t\t\t\t\t\t}\n\t\t\t\t\t} else if (c === DS) {\n\t\t\t\t\t\tout += parseEnvVar();\n\t\t\t\t\t} else {\n\t\t\t\t\t\tout += c;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else if (c === DQ || c === SQ) {\n\t\t\t\tquote = c;\n\t\t\t\tsawQuote = true;\n\t\t\t} else if (controlRE.test(c)) {\n\t\t\t\treturn /** @type {ControlOperator} */ ({ op: s });\n\t\t\t} else if (hash.test(c)) {\n\t\t\t\tcommented = true;\n\t\t\t\tvar commentObj = { comment: string.slice(match.index + i + 1) };\n\t\t\t\tif (out.length) {\n\t\t\t\t\treturn /** @type {const} */ ([out, commentObj]);\n\t\t\t\t}\n\t\t\t\treturn /** @type {const} */ ([commentObj]);\n\t\t\t} else if (c === BS) {\n\t\t\t\tesc = true;\n\t\t\t} else if (c === DS && s.charAt(i + 1) === SQ && closesAnsiC(s, i)) {\n\t\t\t\tflushRun();\n\t\t\t\tsawQuote = true;\n\t\t\t\tout += expandAnsiC(s.slice(i + 2, ansiCAt.lastIndex - 1));\n\t\t\t\ti = ansiCAt.lastIndex - 1;\n\t\t\t} else if (c === DS) {\n\t\t\t\tvar value = parseEnvVar();\n\t\t\t\tif (!ifs) {\n\t\t\t\t\tout += value;\n\t\t\t\t} else {\n\t\t\t\t\tfor (var vi = 0; vi < value.length; vi += 1) {\n\t\t\t\t\t\tvar vc = value.charAt(vi);\n\t\t\t\t\t\tif (ifs.indexOf(vc) < 0) {\n\t\t\t\t\t\t\tflushRun();\n\t\t\t\t\t\t\tout += vc;\n\t\t\t\t\t\t} else if (pendingNw === null) {\n\t\t\t\t\t\t\tpendingNw = vc === ' ' || vc === '\\t' || vc === '\\n' ? 0 : 1;\n\t\t\t\t\t\t} else if (vc !== ' ' && vc !== '\\t' && vc !== '\\n') {\n\t\t\t\t\t\t\tpendingNw += 1;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tout += c;\n\t\t\t}\n\t\t}\n\n\t\tif (isGlob) {\n\t\t\treturn /** @type {GlobPattern} */ ({ op: 'glob', pattern: out });\n\t\t}\n\n\t\tif (ifs) {\n\t\t\tif (pendingNw !== null && pendingNw > 0) {\n\t\t\t\twords[words.length] = out;\n\t\t\t\tout = '';\n\t\t\t\tfor (var te = 1; te < pendingNw; te += 1) {\n\t\t\t\t\twords[words.length] = '';\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (out !== '' || (sawQuote && words.length === 0)) {\n\t\t\t\twords[words.length] = out;\n\t\t\t}\n\t\t\treturn words;\n\t\t}\n\n\t\treturn out;\n\t}).reduce(function (prev, arg) { // finalize parsed arguments\n\t\tif (typeof arg === 'undefined') {\n\t\t\treturn prev;\n\t\t}\n\t\t/** @type {ParseEntry[]} */ ([]).concat(arg).forEach(function (entry) {\n\t\t\tprev[prev.length] = entry;\n\t\t});\n\t\treturn prev;\n\t}, /** @type {ParseEntry[]} */ ([]));\n}\n\n/** @type {typeof import('./parse')} */\nmodule.exports = function parse(s, env, opts) {\n\tvar mapped = parseInternal(s, env, opts);\n\tif (typeof env !== 'function') {\n\t\treturn mapped;\n\t}\n\treturn mapped.reduce(function (acc, s) {\n\t\tif (typeof s === 'object') {\n\t\t\tacc[acc.length] = s;\n\t\t\treturn acc;\n\t\t}\n\t\tvar xs = s.split(RegExp('(' + TOKEN + '.*?' + TOKEN + ')', 'g'));\n\t\tif (xs.length === 1) {\n\t\t\tacc[acc.length] = xs[0];\n\t\t\treturn acc;\n\t\t}\n\t\txs.filter(Boolean).forEach(function (x) {\n\t\t\tacc[acc.length] = startsWithToken.test(x)\n\t\t\t\t? JSON.parse(x.split(TOKEN)[1])\n\t\t\t\t: x;\n\t\t});\n\t\treturn acc;\n\t}, /** @type {ParseEntry[]} */ ([]));\n};\n","'use strict';\n\nexports.quote = require('./quote');\nexports.parse = require('./parse');\n","import { safeStringify } from \"@zaly/shared\"\nimport { parse as shellParse } from \"shell-quote\"\n\n/** A shell command broken down into its structural parts. One bash\n *  input may parse to multiple segments (joined by `|`, `&&`, `||`, `;`).\n *  Each segment is evaluated independently by the policy. */\nexport interface Segment {\n  cmd: string\n  args: string[]\n  dyn?: Set<string>\n  /** File paths the segment reads from (`< file` redirects). Built-in\n   *  tools may add inferred reads in the policy layer. */\n  reads: string[]\n  /** File paths the segment writes to (`> file` / `>> file`). */\n  writes: { path: string; mode: \"trunc\" | \"append\" }[]\n  /** True if the input contains command substitution (`$()` or backticks)\n   *  or any other dynamic-evaluation construct. Forces ask. */\n  hasCommandSubst: boolean\n}\n\nexport type ParseResult = { ok: true; segments: Segment[] } | { ok: false; reason: string }\n\n/** Targets a redirect can write to without filesystem implications.\n *  Anything else is treated as a file write and goes through fileWrite\n *  policy. */\nconst SAFE_REDIRECT_TARGETS = new Set([\"/dev/null\", \"/dev/stderr\", \"/dev/stdout\"])\n\n/** A redirect target like `&1`, `&2`, `&-` — duplicates an existing fd,\n *  no filesystem effect. */\nfunction isFdRedirect(target: string): boolean {\n  return /^&(?:\\d+|-)$/.test(target)\n}\n\ntype Op = { op: string }\ntype Glob = { op: \"glob\"; pattern: string }\ntype Comment = { comment: string }\ntype Token = string | Op | Glob | Comment\n\nconst COMMAND_SEPS = new Set([\"|\", \"&&\", \"||\", \";\"])\nconst REDIRECT_OPS = new Set([\">\", \">>\", \"<\", \">&\", \"<&\"])\nconst DYN_SENTINEL = \"\\u{E000}\"\n\n/** Parse a bash command line. Returns segments with a flag for\n *  unsupported constructs that force \"ask\" downstream. Heredocs,\n *  subshells, command substitution, and backticks all surface as\n *  `hasCommandSubst: true` (the umbrella \"we can't reason about this\"\n *  signal) rather than parse failures, so the policy can still decide. */\nexport function parseBash(input: string): ParseResult {\n  // Heredocs derail shell-quote (the body bleeds into surrounding tokens),\n  // so we bail to ok:false here. checkBash maps that to ask.\n  if (/<<-?\\s*['\"]?\\w+/.test(input)) {\n    return { ok: false, reason: \"heredoc not supported\" }\n  }\n  // Backticks command-substitute in bash unless inside single quotes\n  // (single quotes preserve everything literally; double quotes don't\n  // suppress substitution). Flag only the unquoted form so embedded\n  // template literals in `bun -e '... ${x} `tpl` ...'` don't trip us.\n  const hasBackticks = hasUnquotedBacktick(input)\n\n  let rawTokens: Token[]\n  try {\n    rawTokens = shellParse(input, (e) =>\n      e === \"\" ? undefined : `${DYN_SENTINEL}\\${${e}}`\n    ) as Token[]\n  } catch (error) {\n    return { ok: false, reason: `tokenize: ${(error as Error).message}` }\n  }\n\n  // Inline plain `(subshell)` contents as separate segments; strip\n  // `$(...)` regions and flag as command substitution. Backticks\n  // already detected via the pre-scan above.\n  const flat = flattenParens(rawTokens)\n  const hasCommandSubst = hasBackticks || flat.hasCommandSubst\n\n  const segmentTokens: Token[][] = [[]]\n  for (const t of flat.tokens) {\n    if (typeof t === \"object\" && \"comment\" in t) continue\n\n    if (typeof t === \"object\" && \"op\" in t && COMMAND_SEPS.has(t.op)) {\n      if (segmentTokens.at(-1)!.length > 0) segmentTokens.push([])\n      continue\n    }\n\n    segmentTokens.at(-1)!.push(t)\n  }\n\n  if (segmentTokens.at(-1)!.length === 0) segmentTokens.pop()\n\n  const segments: Segment[] = []\n  for (const segToks of segmentTokens) {\n    const seg = parseSegment(segToks)\n    if (!seg.ok) return seg\n    if (seg.segment) segments.push({ ...seg.segment, hasCommandSubst })\n  }\n\n  if (segments.length === 0) {\n    return { ok: false, reason: \"empty input\" }\n  }\n  return { ok: true, segments }\n}\n\nfunction parseSegment(\n  tokens: Token[]\n):\n  | { ok: true; segment: Omit<Segment, \"hasCommandSubst\"> | undefined }\n  | { ok: false; reason: string } {\n  let args: string[] = []\n  let reads: string[] = []\n  let writes: { path: string; mode: \"trunc\" | \"append\" }[] = []\n  const dyn = new Set<string>()\n\n  for (let i = 0; i < tokens.length; i++) {\n    const t = tokens[i]\n\n    if (typeof t === \"string\") {\n      // FD prefix on a redirect (`2>&1`, `2>file`, `1<&-`) — shell-quote\n      // splits the leading digit off as its own token. Don't treat it\n      // as a regular arg; the redirect handler below picks up the op.\n      if (/^\\d+$/.test(t)) {\n        const next = tokens[i + 1]\n        if (typeof next === \"object\" && \"op\" in next && REDIRECT_OPS.has(next.op)) {\n          continue\n        }\n      }\n      args.push(t)\n      continue\n    }\n\n    if (\"comment\" in t) continue\n\n    if (\"pattern\" in t) {\n      // Pass globs through as their pattern — policy layer decides.\n      args.push(t.pattern)\n      dyn.add(t.pattern)\n      continue\n    }\n\n    if (!(\"op\" in t)) {\n      return { ok: false, reason: `unsupported token: ${safeStringify(t)}` }\n    }\n\n    if (REDIRECT_OPS.has(t.op)) {\n      const next = tokens[i + 1]\n      if (typeof next !== \"string\") {\n        return { ok: false, reason: `redirect target missing after ${t.op}` }\n      }\n      i++ // consume target\n\n      if (t.op === \">\" || t.op === \">>\") {\n        // Skip safe targets (/dev/null etc.) and fd redirects entirely.\n        if (SAFE_REDIRECT_TARGETS.has(next) || isFdRedirect(next)) continue\n        writes.push({ mode: t.op === \">>\" ? \"append\" : \"trunc\", path: next })\n      } else if (t.op === \"<\") {\n        if (SAFE_REDIRECT_TARGETS.has(next) || isFdRedirect(next)) continue\n        reads.push(next)\n      }\n      // `>&` / `<&` are fd-duplicating (`2>&1`-style) — no fs impact.\n      continue\n    }\n\n    return { ok: false, reason: `unsupported op: ${t.op}` }\n  }\n\n  const dynPath = (p: string) => {\n    if (!p.includes(DYN_SENTINEL)) return p\n    p = p.replaceAll(DYN_SENTINEL, \"\")\n    dyn.add(p)\n    return p\n  }\n\n  args = args.map((a) => dynPath(a))\n  writes = writes.map((w) => ({ ...w, path: dynPath(w.path) }))\n  reads = reads.map(dynPath)\n\n  // Strip leading wrapper commands (`time`, `nohup`, `nice`, …) so the\n  // policy sees the real command being run. `time bun test` evaluates\n  // as `bun test`; a bare `time` (or `time (subshell)` after flatten)\n  // leaves nothing and signals the caller to drop the segment.\n  const unwrapped = unwrapWrappers(args)\n  if (unwrapped.length === 0) {\n    return { ok: true, segment: undefined }\n  }\n\n  return {\n    ok: true,\n    segment: {\n      args: unwrapped.slice(1),\n      cmd: unwrapped[0],\n      dyn,\n      reads,\n      writes,\n    },\n  }\n}\n\ninterface WrapperSpec {\n  /** Flags that consume the next arg as their value. */\n  valueFlags?: Set<string>\n}\n\n/** Commands that wrap another command — they're transparent for\n *  permission purposes, since the security-relevant action is whatever\n *  they run. `sudo` is intentionally absent: it changes the effective\n *  user and must always be flagged. */\nconst WRAPPERS: Partial<Record<string, WrapperSpec>> = {\n  command: {}, // bash builtin, bypasses aliases\n  ionice: { valueFlags: new Set([\"-c\", \"-n\", \"-p\", \"-P\", \"-u\"]) },\n  nice: { valueFlags: new Set([\"-n\", \"--adjustment\"]) },\n  nohup: {},\n  time: {}, // bash reserved word, also GNU /usr/bin/time\n}\n\n/** Detect backticks outside single-quoted regions. Single quotes in\n *  bash can't be escaped from within, so the toggle is a simple state\n *  flip on every `'`. Double quotes do not suppress backtick\n *  substitution and are ignored here. */\nfunction hasUnquotedBacktick(input: string): boolean {\n  let inSingle = false\n  for (const c of input) {\n    if (c === \"'\") {\n      inSingle = !inSingle\n      continue\n    }\n    if (c === \"`\" && !inSingle) return true\n  }\n  return false\n}\n\n/** Strip leading wrapper-command prefixes from an arg list. Repeats\n *  while the head is a wrapper (so `time nice -n 5 cmd` → `cmd`).\n *  Wrapper-flags (and their values, where applicable) are consumed\n *  along with the wrapper itself. */\nfunction unwrapWrappers(args: string[]): string[] {\n  let current = args\n  while (current.length > 0) {\n    const spec = WRAPPERS[current[0]]\n    if (!spec) break\n    const valueFlags = spec.valueFlags ?? new Set()\n    let i = 1\n    while (i < current.length && current[i].startsWith(\"-\")) {\n      const flag = current[i]\n      i++\n      if (valueFlags.has(flag) && i < current.length) i++ // consume flag value\n    }\n    current = current.slice(i)\n  }\n  return current\n}\n\n/** Walk a token list and resolve paren constructs:\n *  - Plain `(subshell)` → tokens inlined with `;` boundaries on each\n *    side, so the contents become independent segments evaluated by\n *    the same policy. The subshell's own scope (cwd changes etc.) is\n *    irrelevant to permissions — each command is checked individually.\n *  - `$(...)` (command substitution) → stripped entirely, with the\n *    `hasCommandSubst` flag raised. The dynamic value can't be\n *    statically reasoned about. Detected by the leading `$` token\n *    that shell-quote emits before the `(`.\n *\n *  Recurses into subshell contents to handle nesting and to catch\n *  `$(...)` constructs nested inside subshells. */\nfunction flattenParens(tokens: Token[]): { tokens: Token[]; hasCommandSubst: boolean } {\n  const out: Token[] = []\n  let hasCommandSubst = false\n  let i = 0\n  while (i < tokens.length) {\n    const t = tokens[i]\n    if (typeof t === \"object\" && \"op\" in t && t.op === \"(\") {\n      const isSubst = out.at(-1) === \"$\"\n      if (isSubst) out.pop()\n\n      // Find matching `)`, accounting for nesting.\n      let depth = 1\n      let j = i + 1\n      while (j < tokens.length && depth > 0) {\n        const tj = tokens[j]\n        if (typeof tj === \"object\" && \"op\" in tj) {\n          if (tj.op === \"(\") depth++\n          else if (tj.op === \")\") depth--\n        }\n        if (depth > 0) j++\n      }\n      const inner = tokens.slice(i + 1, j)\n\n      if (isSubst) {\n        hasCommandSubst = true\n        // Drop the entire $(...) — its value is dynamic.\n      } else {\n        const sub = flattenParens(inner)\n        if (sub.hasCommandSubst) hasCommandSubst = true\n        // Surround with separators so subshell contents form their own\n        // segments regardless of what's adjacent in the outer chain.\n        out.push({ op: \";\" }, ...sub.tokens, { op: \";\" })\n      }\n      i = j + 1\n      continue\n    }\n\n    if (typeof t === \"object\" && \"op\" in t && t.op === \")\") {\n      // Stray closing paren (unbalanced input). Skip — the parser's\n      // overall result will likely fail downstream on a malformed segment.\n      i++\n      continue\n    }\n\n    out.push(t)\n    i++\n  }\n  return { hasCommandSubst, tokens: out }\n}\n","/**\n * Built-in tool registry — per-command knowledge of which args are\n * input files, output files, and which invocation modes are too\n * complex to safely model.\n *\n * The policy engine consults this registry alongside explicit redirect\n * info from the parser to determine per-command file I/O for the\n * fileRead/fileWrite policy hooks.\n */\nexport interface ToolSpec {\n  /** File paths the command will read from, derived from args. */\n  reads?: (args: string[]) => string[]\n  /** File paths the command will write to. */\n  writes?: (args: string[]) => string[]\n  /** Returns true if the args invoke a mode the parser can't safely\n   *  reason about (e.g. `sed -e 'w out'`, `find -exec`). Forces ask. */\n  unsafe?: (args: string[]) => boolean\n}\n\n/** All bare positional args (no leading dash). Default for many\n *  read-only utilities. */\nfunction positionals(args: string[]): string[] {\n  return args.filter((a) => !a.startsWith(\"-\") && a !== \"\")\n}\n\n/** All positionals after the first one (e.g. `grep PATTERN file...`). */\nfunction positionalsAfterFirst(args: string[]): string[] {\n  const out: string[] = []\n  let seenFirst = false\n  for (const a of args) {\n    if (a.startsWith(\"-\") || a === \"\") continue\n    if (!seenFirst) {\n      seenFirst = true\n      continue\n    }\n    out.push(a)\n  }\n  return out\n}\n\n// ── sed ──────────────────────────────────────────────────────────────────\n\n/** Flags whose value is the *next* arg, not part of the script. */\nconst SED_VALUE_FLAGS = new Set([\"-e\", \"--expression\", \"-f\", \"--file\"])\n\n/** Walk sed args, returning [scripts, positionalsAfterScript]. The\n *  \"script\" is everything passed via `-e` plus the first bare arg\n *  (the implicit script when no `-e` is given). Positionals after\n *  that are input files. */\nfunction sedSplit(args: string[]): { scripts: string[]; files: string[] } {\n  const scripts: string[] = []\n  const files: string[] = []\n  let needsImplicitScript = !args.some(\n    (a) => a === \"-e\" || a === \"--expression\" || a === \"-f\" || a === \"--file\"\n  )\n\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a.startsWith(\"-\")) {\n      if (SED_VALUE_FLAGS.has(a) && i + 1 < args.length) {\n        if (a === \"-e\" || a === \"--expression\") scripts.push(args[i + 1])\n        i++ // consume value\n      }\n      continue\n    }\n    if (needsImplicitScript) {\n      scripts.push(a)\n      needsImplicitScript = false\n      continue\n    }\n    files.push(a)\n  }\n  return { files, scripts }\n}\n\nconst SED_INPLACE = new Set([\"-i\", \"--in-place\"])\n\nfunction sedReads(args: string[]): string[] {\n  return sedSplit(args).files\n}\n\nfunction sedWrites(args: string[]): string[] {\n  // `-i` rewrites positional input files; also supports `-i.bak` form.\n  const inPlace = args.some((a) => SED_INPLACE.has(a) || a.startsWith(\"-i.\"))\n  return inPlace ? sedSplit(args).files : []\n}\n\nfunction sedUnsafe(args: string[]): boolean {\n  // `w` / `W` write commands and `r` / `R` read commands inside the\n  // script can do file I/O the parser can't see. Bail to ask.\n  for (const script of sedSplit(args).scripts) {\n    if (/(?:^|;|\\n)\\s*[wWrR]\\s+\\S/.test(script)) return true\n  }\n  return false\n}\n\n// ── awk ──────────────────────────────────────────────────────────────────\n\nfunction awkReads(args: string[]): string[] {\n  // awk usage: `awk [opts] 'script' [files...]` or `awk [opts] -f file [files...]`\n  // Files come after the script. Skip flags + their values.\n  let sawScript = false\n  let usingFFlag = false\n  const files: string[] = []\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a === \"-f\" || a === \"--file\") {\n      if (i + 1 < args.length) files.push(args[i + 1]) // script file is read too\n      i++\n      sawScript = true\n      usingFFlag = true\n      continue\n    }\n    if (a.startsWith(\"-\")) {\n      // Some awk flags take a value (-v, -F)\n      if (a === \"-v\" || a === \"-F\") i++\n      continue\n    }\n    if (!sawScript) {\n      sawScript = true\n      continue\n    }\n    files.push(a)\n  }\n  return usingFFlag ? files : files\n}\n\nfunction awkUnsafe(args: string[]): boolean {\n  // awk's `print > file` and `printf > file` inside a script write to\n  // files. Detecting reliably without parsing the script is hard, so\n  // bail to ask if the script (or any -e value) contains a `>` operator.\n  // Conservative — false positives are fine for \"ask\".\n  let sawScript = false\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a === \"-f\" || a === \"--file\" || a === \"-v\" || a === \"-F\") {\n      i++\n      continue\n    }\n    if (a.startsWith(\"-\")) continue\n    if (!sawScript) {\n      sawScript = true\n      if (/[>|]/.test(a)) return true\n    }\n  }\n  return false\n}\n\n// ── find ─────────────────────────────────────────────────────────────────\n\nfunction findReads(args: string[]): string[] {\n  // First positional (or `.`) is the path. Multiple paths possible\n  // before the first `-action` flag.\n  const out: string[] = []\n  for (const a of args) {\n    if (a.startsWith(\"-\")) break\n    out.push(a)\n  }\n  return out.length > 0 ? out : [\".\"]\n}\n\nfunction findUnsafe(args: string[]): boolean {\n  // `-delete`, `-exec`, `-execdir`, `-ok`, `-okdir` all do work we\n  // can't trace.\n  return args.some(\n    (a) => a === \"-delete\" || a === \"-exec\" || a === \"-execdir\" || a === \"-ok\" || a === \"-okdir\"\n  )\n}\n\n// ── dynamic execution ────────────────────────────────────────────────────\n//\n// These commands run arbitrary code passed as arguments or sourced from\n// files. We can't reason about their effects from the parser; force ask.\n\nconst dynamicExec = (): boolean => true\n\n// ── registry ─────────────────────────────────────────────────────────────\n\nexport const TOOLS: Partial<Record<string, ToolSpec>> = {\n  \".\": { unsafe: dynamicExec }, // sh: source alias\n  awk: { reads: awkReads, unsafe: awkUnsafe },\n  basename: {},\n  cat: { reads: positionals },\n  cd: {},\n  cut: { reads: positionals },\n  diff: { reads: positionals },\n  dirname: {},\n  echo: {},\n  eval: { unsafe: dynamicExec }, // runs its argument as shell input\n  exec: { unsafe: dynamicExec }, // replaces the shell process\n  file: { reads: positionals },\n  find: { reads: findReads, unsafe: findUnsafe },\n  grep: { reads: positionalsAfterFirst },\n  head: { reads: positionals },\n  hexdump: { reads: positionals },\n  less: { reads: positionals },\n  ls: { reads: positionals },\n  more: { reads: positionals },\n  od: { reads: positionals },\n  printf: {},\n  pwd: {},\n  readlink: { reads: positionals },\n  realpath: { reads: positionals },\n  rg: { reads: positionalsAfterFirst },\n  sed: { reads: sedReads, unsafe: sedUnsafe, writes: sedWrites },\n  sort: { reads: positionals },\n  source: { unsafe: dynamicExec }, // bash: runs the file in current shell\n  stat: { reads: positionals },\n  tail: { reads: positionals },\n  tree: { reads: positionals },\n  uniq: { reads: positionals },\n  wc: { reads: positionals },\n  xxd: { reads: positionals },\n}\n"],"ignoreList":[0,1,2],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKA,IAAI,MAA4B;EAC/B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;CACA,IAAI,mBAAmB;CACvB,IAAI,qBAAqB;;CAGzB,OAAO,UAAU,SAAS,MAAM,IAAI;EACnC,IAAI,aAAa;EACjB,OAAO,GAAG,IAAI,SAAU,GAAG;GAC1B,IAAI,cAAc,OAAO,MAAM,YAAY,iBAAiB,KAAK,CAAC,GACjE,MAAM,IAAI,UAAU,6DAA6D;GAElF,IAAI,MAAM,IACT,OAA6B;GAE9B,IAAI,KAAK,OAAO,MAAM,UAAU;IAC/B,IAAI,QAAQ,KAAK,EAAE,OAAO,QAAQ;KACjC,IAAI,OAAO,EAAE,YAAY,UACxB,MAAM,IAAI,UAAU,wCAAwC;KAE7D,IAAI,iBAAiB,KAAK,EAAE,OAAO,GAClC,MAAM,IAAI,UAAU,kDAAkD;KAEvE,IAAI,EAAE,YAAY,IACjB,OAA6B;KAE9B,OAAO,EAAE,QAAQ,QAAQ,oBAAoB,MAAM;IACpD;IACA,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,UAAU;KAC1C,IAAI,IAAI,QAAQ,EAAE,EAAE,IAAI,GACvB,MAAM,IAAI,UAAU,yBAAyB,KAAK,UAAU,EAAE,EAAE,CAAC;KAElE,OAAO,EAAE,GAAG,QAAQ,WAAW,MAAM;IACtC;IACA,IAAI,aAAa,KAAK,OAAO,EAAE,YAAY,UAAU;KACpD,IAAI,iBAAiB,KAAK,EAAE,OAAO,GAClC,MAAM,IAAI,UAAU,6CAA6C;KAElE,aAAa;KACb,OAAO,MAAM,EAAE;IAChB;IACA,MAAM,IAAI,UAAU,iCAAiC;GACtD;GACA,IAAK,IAAK,KAAK,CAAC,KAAM,IAAK,KAAK,CAAC,GAChC,OAAO,MAAM,EAAE,QAAQ,MAAM,SAAS,IAAI;GAE3C,IAAK,UAAW,KAAK,CAAC,KAAK,CAAE,IAAK,KAAK,CAAC,GACvC,OAAO,MAAM,IAAI;GAElB,IAAK,SAAU,KAAK,CAAC,GACpB,OAAO,OAAM,EAAE,QAAQ,cAAc,MAAM,IAAI;GAEhD,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,iDAAiD,QAAQ;EACnF,CAAC,CAAC,CAAC,KAAK,GAAG;CACZ;;;;;;;;;;;;CCxEA,IAAI,UAAgC,QAA+B;EAClE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC,CAAE,KAA2B,GAAI,IAA0B;CAC5D,IAAI,YAAY,IAAI,OAAO,MAAM,UAAU,GAAG;CAC9C,IAAI,OAA6B;CACjC,IAAI,eAAqC;CAEzC,IAAI,cAAc;CAClB,IAAI,eAAe,SAAU,cAAc;CAC3C,IAAI,UAAU,IAAI,OAAO,SAAU,cAAc,kBAAmB,GAAG;CACvE,IAAI,iBAAiB;CACrB,IAAI,eAAe;CACnB,IAAI,OAAO;CAEX,IAAI,KAA2B;CAC/B,IAAI,KAA2B;CAC/B,IAAI,KAA2B;CAE/B,IAAI,QAAQ;CACZ,IAAI,OAA6B;CACjC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KACtB,UAAU,OAAO,KAAK,OAAO,EAAA,CAAG,SAAS,EAAE;CAE5C,IAAI,kBAAkB,IAAI,OAAO,MAAM,KAAK;;;;;CAM5C,SAAS,SAAS,GAAG,GAAG;EACvB,IAAI,YAAY,EAAE;EAElB,IAAI,UAAU,CAAC;EACf,IAAI;EAEJ,OAAQ,WAAW,EAAE,KAAK,CAAC,GAAI;GAC9B,QAAQ,QAAQ,UAAU;GAC1B,IAAI,EAAE,cAAc,SAAS,OAC5B,EAAE,aAAa;EAEjB;EAEA,EAAE,YAAY;EAEd,OAAO;CACR;;;;;;CAOA,SAAS,OAAO,KAAK,KAAK,KAAK;EAC9B,IAAI,IAAI,OAAO,QAAQ,aAAa,IAAI,GAAG,IAAI,IAAI;EACnD,IAAI,OAAO,MAAM,eAAe,OAAO,IACtC,IAAI;OACE,IAAI,OAAO,MAAM,aACvB,IAAI;EAGL,IAAI,OAAO,MAAM,UAChB,OAAO,MAAM,QAAQ,KAAK,UAAU,CAAC,IAAI;EAE1C,OAAO,MAAM;CACd;CAEA,IAAI,cAAc;;;;;CAMlB,SAAS,kBAAkB,GAAG,QAAQ;EACrC,IAAI,OAAO,OAAO,OAAO,CAAC;EAC1B,IAAI,SAAS,KAAK;GACjB,IAAI,OAAO,OAAO,OAAO,CAAC;GAC1B,OAAO,SAAS,MAAM,MAAS,OAAO,aAAa,KAAK,WAAW,CAAC,IAAI,EAAI;EAC7E;EACA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GACjD,IAAI,KAAK,SAAS,OAAO,MAAM,CAAC,GAAG,EAAE;GACrC,IAAI,KAAK,SACR,OAAO;GAER,OAAO,OAAO,aAAa,MAAM,MAAM,KAAK,QAAS,CAAC,SAAU,MAAM,KAAK,SAAU,KAAK,KAAM,IAAI,CAAC,EAAE,CAAC;EACzG;EACA,IAAI,QAAQ,OAAO,QAAQ,KAC1B,OAAO,OAAO,aAAa,SAAS,QAAQ,CAAC,IAAI,GAAI;EAEtD,IAAI,SAAS,eAAe,QAAQ,MAAM;EAC1C,OAAO,SAAS,IAAI,SAAS,aAAa,OAAO,MAAM;CACxD;;CAGA,SAAS,YAAY,MAAM;EAC1B,OAAO,KAAK,QAAQ,aAAa,iBAAiB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;CACjE;;;;;CAMA,SAAS,YAAY,GAAG,GAAG;EAC1B,QAAQ,YAAY;EACpB,OAAO,CAAC,CAAkC,QAAQ,KAAK,CAAC,CAAC,CAAG;CAC7D;;;;;;;CAQA,SAAS,cAAc,QAAQ,KAAK,MAAM;EACzC,IAAI,CAAC,MACJ,OAAO,CAAC;EAET,IAAI,KAAK,KAAK,UAAU;EACxB,IAAI,MAAM,KAAK,kBAAkB,OAAO,SAAW,OAAO,KAAK,kBAAkB,WAAW,KAAK,gBAAgB;EACjH,IAAI,WAAW,QAAQ,KAAK,YAAY,KAAK,OAAO,oBAAoB,aAAa,MAAM,CAAC,IAAI,gBAAgB,OAAO;EACvH,IAAI,eAAe,YAAW,KAAK,oBAAmB,KAAK;EAO3D,IAAI,UAAU,SAAS,QAAQ,IALb,OAAO,CACxB,MAAM,UAAU,KAChB,MAAM,eAAe,MAAM,WAAW,MAAM,eAAe,MAAM,eAAe,IACjF,CAAC,CAAC,KAAK,GAAG,GAAG,GAEwB,CAAC;EAEtC,IAAI,QAAQ,WAAW,GACtB,OAAO,CAAC;EAET,IAAI,CAAC,KACJ,MAAM,CAAC;EAGR,IAAI,YAAY;EAEhB,OAAO,QAAQ,IAAI,SAAU,OAAO;GACnC,IAAI,IAAI,MAAM;GACd,IAAI,CAAC,KAAK,WACT;GAED,IAAI,UAAU,KAAK,CAAC,GACnB,OAAuC,EAAE,IAAI,EAAE;;GAehD,IAAI,QAAQ;GACZ,IAAI,MAAM;GACV,IAAI,MAAM;;GAEV,IAAI,QAAQ,CAAC;GACb,IAAI,WAAW;;GAEf,IAAI,YAAY;GAChB,IAAI,SAAS;;GAEb,IAAI;GAEJ,SAAS,cAAc;IACtB,KAAK;;IAEL,IAAI;;IAEJ,IAAI;IACJ,IAAI,OAAO,EAAE,OAAO,CAAC;IAErB,IAAI,SAAS,KAAK;KACjB,KAAK;KACL,IAAI,EAAE,OAAO,CAAC,MAAM,KACnB,MAAM,IAAI,MAAM,uBAAuB,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;KAG7D,IAAI,QAAQ;KACZ,SAAS;KACT,OAAO,QAAQ,KAAK,SAAS,EAAE,QAAQ;MACtC,IAAI,EAAE,OAAO,MAAM,MAAM,OAAO,EAAE,OAAO,SAAS,CAAC,MAAM,KACxD,SAAS;WACH,IAAI,EAAE,OAAO,MAAM,MAAM,KAC/B,SAAS;MAEV,UAAU;KACX;KACA,IAAI,UAAU,GACb,MAAM,IAAI,MAAM,uBAAuB,EAAE,MAAM,CAAC,CAAC;KAElD,UAAU;KACV,UAAU,EAAE,MAAM,GAAG,MAAM;KAC3B,IAAI;IACL,OAAO,IAAK,YAAa,KAAK,IAAI,GACjC,UAAU;SACJ;KACN,IAAI,cAAc,EAAE,MAAM,CAAC;KAC3B,SAAS,YAAY,MAAM,UAAU;KACrC,IAAI,CAAC,QAAQ;MACZ,UAAU;MACV,IAAI,EAAE;KACP,OAAO;MACN,UAAU,YAAY,MAAM,GAAG,OAAO,KAAK;MAC3C,KAA4B,OAAO,QAAS;KAC7C;IACD;IACA,OAAO,OAA+C,KAAM,IAAI,OAAO;GACxE;GAEA,SAAS,WAAW;IACnB,IAAI,cAAc,MACjB;IAED,IAAI,cAAc,GACb;SAAA,QAAQ,IAAI;MACf,MAAM,MAAM,UAAU;MACtB,MAAM;KACP;WACM;KACN,MAAM,MAAM,UAAU;KACtB,MAAM;KACN,KAAK,IAAI,KAAK,GAAG,KAAK,WAAW,MAAM,GACtC,MAAM,MAAM,UAAU;IAExB;IACA,YAAY;GACb;GAEA,KAAK,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;IAC9B,IAAI,IAAI,EAAE,OAAO,CAAC;IAClB,IAAI,OAAO,MAAM,IAChB,SAAS;IAEV,SAAS,UAAW,CAAC,UAAU,MAAM,OAAO,MAAM;IAClD,IAAI,KAAK;KACR,OAAO;KACP,MAAM;IACP,OAAO,IAAI,OAAO;KACjB,IAAI,MAAM,OACT,QAAQ;UACF,IAAI,SAAS,IACnB,OAAO;UAEP,IAAI,MAAM,IAAI;MACb,KAAK;MACL,IAAI,EAAE,OAAO,CAAC;MACd,IAAI,MAAM,MAAM,MAAM,MAAM,MAAM,IACjC,OAAO;WAEP,OAAO,KAAK;KAEd,OAAO,IAAI,MAAM,IAChB,OAAO,YAAY;UAEnB,OAAO;IAGV,OAAO,IAAI,MAAM,MAAM,MAAM,IAAI;KAChC,QAAQ;KACR,WAAW;IACZ,OAAO,IAAI,UAAU,KAAK,CAAC,GAC1B,OAAuC,EAAE,IAAI,EAAE;SACzC,IAAI,KAAK,KAAK,CAAC,GAAG;KACxB,YAAY;KACZ,IAAI,aAAa,EAAE,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,CAAC,EAAE;KAC9D,IAAI,IAAI,QACP,OAA6B,CAAC,KAAK,UAAU;KAE9C,OAA6B,CAAC,UAAU;IACzC,OAAO,IAAI,MAAM,IAChB,MAAM;SACA,IAAI,MAAM,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG;KACnE,SAAS;KACT,WAAW;KACX,OAAO,YAAY,EAAE,MAAM,IAAI,GAAG,QAAQ,YAAY,CAAC,CAAC;KACxD,IAAI,QAAQ,YAAY;IACzB,OAAO,IAAI,MAAM,IAAI;KACpB,IAAI,QAAQ,YAAY;KACxB,IAAI,CAAC,KACJ,OAAO;UAEP,KAAK,IAAI,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM,GAAG;MAC5C,IAAI,KAAK,MAAM,OAAO,EAAE;MACxB,IAAI,IAAI,QAAQ,EAAE,IAAI,GAAG;OACxB,SAAS;OACT,OAAO;MACR,OAAO,IAAI,cAAc,MACxB,YAAY,OAAO,OAAO,OAAO,OAAQ,OAAO,OAAO,IAAI;WACrD,IAAI,OAAO,OAAO,OAAO,OAAQ,OAAO,MAC9C,aAAa;KAEf;IAEF,OACC,OAAO;GAET;GAEA,IAAI,QACH,OAAmC;IAAE,IAAI;IAAQ,SAAS;GAAI;GAG/D,IAAI,KAAK;IACR,IAAI,cAAc,QAAQ,YAAY,GAAG;KACxC,MAAM,MAAM,UAAU;KACtB,MAAM;KACN,KAAK,IAAI,KAAK,GAAG,KAAK,WAAW,MAAM,GACtC,MAAM,MAAM,UAAU;IAExB;IACA,IAAI,QAAQ,MAAO,YAAY,MAAM,WAAW,GAC/C,MAAM,MAAM,UAAU;IAEvB,OAAO;GACR;GAEA,OAAO;EACR,CAAC,CAAC,CAAC,OAAO,SAAU,MAAM,KAAK;GAC9B,IAAI,OAAO,QAAQ,aAClB,OAAO;+BAEoB,CAAE,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,SAAU,OAAO;IACrE,KAAK,KAAK,UAAU;GACrB,CAAC;GACD,OAAO;EACR,GAAgC,CAAC,CAAE;CACpC;;CAGA,OAAO,UAAU,SAAS,MAAM,GAAG,KAAK,MAAM;EAC7C,IAAI,SAAS,cAAc,GAAG,KAAK,IAAI;EACvC,IAAI,OAAO,QAAQ,YAClB,OAAO;EAER,OAAO,OAAO,OAAO,SAAU,KAAK,GAAG;GACtC,IAAI,OAAO,MAAM,UAAU;IAC1B,IAAI,IAAI,UAAU;IAClB,OAAO;GACR;GACA,IAAI,KAAK,EAAE,MAAM,OAAO,MAAM,QAAQ,QAAQ,QAAQ,KAAK,GAAG,CAAC;GAC/D,IAAI,GAAG,WAAW,GAAG;IACpB,IAAI,IAAI,UAAU,GAAG;IACrB,OAAO;GACR;GACA,GAAG,OAAO,OAAO,CAAC,CAAC,QAAQ,SAAU,GAAG;IACvC,IAAI,IAAI,UAAU,gBAAgB,KAAK,CAAC,IACrC,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,EAAE,IAC5B;GACJ,CAAC;GACD,OAAO;EACR,GAAgC,CAAC,CAAE;CACpC;;;;;CC3XA,QAAQ,QAAA,cAAA;CACR,QAAQ,QAAA,cAAA;;;;;ACsBR,MAAM,wCAAwB,IAAI,IAAI;CAAC;CAAa;CAAe;AAAa,CAAC;;;AAIjF,SAAS,aAAa,QAAyB;CAC7C,OAAO,eAAe,KAAK,MAAM;AACnC;AAOA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAK;CAAM;CAAM;AAAG,CAAC;AACnD,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAK;CAAM;CAAK;CAAM;AAAI,CAAC;AACzD,MAAM,eAAe;;;;;;AAOrB,SAAgB,UAAU,OAA4B;CAGpD,IAAI,kBAAkB,KAAK,KAAK,GAC9B,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAwB;CAMtD,MAAM,eAAe,oBAAoB,KAAK;CAE9C,IAAI;CACJ,IAAI;EACF,aAAA,GAAYA,mBAAAA,MAAAA,CAAW,QAAQ,MAC7B,MAAM,KAAK,KAAA,IAAY,GAAG,aAAa,KAAK,EAAE,EAChD;CACF,SAAS,OAAO;EACd,OAAO;GAAE,IAAI;GAAO,QAAQ,aAAc,MAAgB;EAAU;CACtE;CAKA,MAAM,OAAO,cAAc,SAAS;CACpC,MAAM,kBAAkB,gBAAgB,KAAK;CAE7C,MAAM,gBAA2B,CAAC,CAAC,CAAC;CACpC,KAAK,MAAM,KAAK,KAAK,QAAQ;EAC3B,IAAI,OAAO,MAAM,YAAY,aAAa,GAAG;EAE7C,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,aAAa,IAAI,EAAE,EAAE,GAAG;GAChE,IAAI,cAAc,GAAG,EAAE,CAAC,CAAE,SAAS,GAAG,cAAc,KAAK,CAAC,CAAC;GAC3D;EACF;EAEA,cAAc,GAAG,EAAE,CAAC,CAAE,KAAK,CAAC;CAC9B;CAEA,IAAI,cAAc,GAAG,EAAE,CAAC,CAAE,WAAW,GAAG,cAAc,IAAI;CAE1D,MAAM,WAAsB,CAAC;CAC7B,KAAK,MAAM,WAAW,eAAe;EACnC,MAAM,MAAM,aAAa,OAAO;EAChC,IAAI,CAAC,IAAI,IAAI,OAAO;EACpB,IAAI,IAAI,SAAS,SAAS,KAAK;GAAE,GAAG,IAAI;GAAS;EAAgB,CAAC;CACpE;CAEA,IAAI,SAAS,WAAW,GACtB,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAc;CAE5C,OAAO;EAAE,IAAI;EAAM;CAAS;AAC9B;AAEA,SAAS,aACP,QAGgC;CAChC,IAAI,OAAiB,CAAC;CACtB,IAAI,QAAkB,CAAC;CACvB,IAAI,SAAuD,CAAC;CAC5D,MAAM,sBAAM,IAAI,IAAY;CAE5B,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACtC,MAAM,IAAI,OAAO;EAEjB,IAAI,OAAO,MAAM,UAAU;GAIzB,IAAI,QAAQ,KAAK,CAAC,GAAG;IACnB,MAAM,OAAO,OAAO,IAAI;IACxB,IAAI,OAAO,SAAS,YAAY,QAAQ,QAAQ,aAAa,IAAI,KAAK,EAAE,GACtE;GAEJ;GACA,KAAK,KAAK,CAAC;GACX;EACF;EAEA,IAAI,aAAa,GAAG;EAEpB,IAAI,aAAa,GAAG;GAElB,KAAK,KAAK,EAAE,OAAO;GACnB,IAAI,IAAI,EAAE,OAAO;GACjB;EACF;EAEA,IAAI,EAAE,QAAQ,IACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,sBAAsB,cAAc,CAAC;EAAI;EAGvE,IAAI,aAAa,IAAI,EAAE,EAAE,GAAG;GAC1B,MAAM,OAAO,OAAO,IAAI;GACxB,IAAI,OAAO,SAAS,UAClB,OAAO;IAAE,IAAI;IAAO,QAAQ,iCAAiC,EAAE;GAAK;GAEtE;GAEA,IAAI,EAAE,OAAO,OAAO,EAAE,OAAO,MAAM;IAEjC,IAAI,sBAAsB,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;IAC3D,OAAO,KAAK;KAAE,MAAM,EAAE,OAAO,OAAO,WAAW;KAAS,MAAM;IAAK,CAAC;GACtE,OAAO,IAAI,EAAE,OAAO,KAAK;IACvB,IAAI,sBAAsB,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;IAC3D,MAAM,KAAK,IAAI;GACjB;GAEA;EACF;EAEA,OAAO;GAAE,IAAI;GAAO,QAAQ,mBAAmB,EAAE;EAAK;CACxD;CAEA,MAAM,WAAW,MAAc;EAC7B,IAAI,CAAC,EAAE,SAAS,YAAY,GAAG,OAAO;EACtC,IAAI,EAAE,WAAW,cAAc,EAAE;EACjC,IAAI,IAAI,CAAC;EACT,OAAO;CACT;CAEA,OAAO,KAAK,KAAK,MAAM,QAAQ,CAAC,CAAC;CACjC,SAAS,OAAO,KAAK,OAAO;EAAE,GAAG;EAAG,MAAM,QAAQ,EAAE,IAAI;CAAE,EAAE;CAC5D,QAAQ,MAAM,IAAI,OAAO;CAMzB,MAAM,YAAY,eAAe,IAAI;CACrC,IAAI,UAAU,WAAW,GACvB,OAAO;EAAE,IAAI;EAAM,SAAS,KAAA;CAAU;CAGxC,OAAO;EACL,IAAI;EACJ,SAAS;GACP,MAAM,UAAU,MAAM,CAAC;GACvB,KAAK,UAAU;GACf;GACA;GACA;EACF;CACF;AACF;;;;;AAWA,MAAM,WAAiD;CACrD,SAAS,CAAC;CACV,QAAQ,EAAE,4BAAY,IAAI,IAAI;EAAC;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,EAAE;CAC9D,MAAM,EAAE,4BAAY,IAAI,IAAI,CAAC,MAAM,cAAc,CAAC,EAAE;CACpD,OAAO,CAAC;CACR,MAAM,CAAC;AACT;;;;;AAMA,SAAS,oBAAoB,OAAwB;CACnD,IAAI,WAAW;CACf,KAAK,MAAM,KAAK,OAAO;EACrB,IAAI,MAAM,KAAK;GACb,WAAW,CAAC;GACZ;EACF;EACA,IAAI,MAAM,OAAO,CAAC,UAAU,OAAO;CACrC;CACA,OAAO;AACT;;;;;AAMA,SAAS,eAAe,MAA0B;CAChD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EACzB,MAAM,OAAO,SAAS,QAAQ;EAC9B,IAAI,CAAC,MAAM;EACX,MAAM,aAAa,KAAK,8BAAc,IAAI,IAAI;EAC9C,IAAI,IAAI;EACR,OAAO,IAAI,QAAQ,UAAU,QAAQ,EAAE,CAAC,WAAW,GAAG,GAAG;GACvD,MAAM,OAAO,QAAQ;GACrB;GACA,IAAI,WAAW,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ;EAClD;EACA,UAAU,QAAQ,MAAM,CAAC;CAC3B;CACA,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAS,cAAc,QAAgE;CACrF,MAAM,MAAe,CAAC;CACtB,IAAI,kBAAkB;CACtB,IAAI,IAAI;CACR,OAAO,IAAI,OAAO,QAAQ;EACxB,MAAM,IAAI,OAAO;EACjB,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,EAAE,OAAO,KAAK;GACtD,MAAM,UAAU,IAAI,GAAG,EAAE,MAAM;GAC/B,IAAI,SAAS,IAAI,IAAI;GAGrB,IAAI,QAAQ;GACZ,IAAI,IAAI,IAAI;GACZ,OAAO,IAAI,OAAO,UAAU,QAAQ,GAAG;IACrC,MAAM,KAAK,OAAO;IAClB,IAAI,OAAO,OAAO,YAAY,QAAQ,IAAI;KACxC,IAAI,GAAG,OAAO,KAAK;UACd,IAAI,GAAG,OAAO,KAAK;IAC1B;IACA,IAAI,QAAQ,GAAG;GACjB;GACA,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG,CAAC;GAEnC,IAAI,SACF,kBAAkB;QAEb;IACL,MAAM,MAAM,cAAc,KAAK;IAC/B,IAAI,IAAI,iBAAiB,kBAAkB;IAG3C,IAAI,KAAK,EAAE,IAAI,IAAI,GAAG,GAAG,IAAI,QAAQ,EAAE,IAAI,IAAI,CAAC;GAClD;GACA,IAAI,IAAI;GACR;EACF;EAEA,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,EAAE,OAAO,KAAK;GAGtD;GACA;EACF;EAEA,IAAI,KAAK,CAAC;EACV;CACF;CACA,OAAO;EAAE;EAAiB,QAAQ;CAAI;AACxC;;;;;AChSA,SAAS,YAAY,MAA0B;CAC7C,OAAO,KAAK,QAAQ,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,MAAM,EAAE;AAC1D;;AAGA,SAAS,sBAAsB,MAA0B;CACvD,MAAM,MAAgB,CAAC;CACvB,IAAI,YAAY;CAChB,KAAK,MAAM,KAAK,MAAM;EACpB,IAAI,EAAE,WAAW,GAAG,KAAK,MAAM,IAAI;EACnC,IAAI,CAAC,WAAW;GACd,YAAY;GACZ;EACF;EACA,IAAI,KAAK,CAAC;CACZ;CACA,OAAO;AACT;;AAKA,MAAM,kCAAkB,IAAI,IAAI;CAAC;CAAM;CAAgB;CAAM;AAAQ,CAAC;;;;;AAMtE,SAAS,SAAS,MAAwD;CACxE,MAAM,UAAoB,CAAC;CAC3B,MAAM,QAAkB,CAAC;CACzB,IAAI,sBAAsB,CAAC,KAAK,MAC7B,MAAM,MAAM,QAAQ,MAAM,kBAAkB,MAAM,QAAQ,MAAM,QACnE;CAEA,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,EAAE,WAAW,GAAG,GAAG;GACrB,IAAI,gBAAgB,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ;IACjD,IAAI,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,KAAK,KAAK,IAAI,EAAE;IAChE;GACF;GACA;EACF;EACA,IAAI,qBAAqB;GACvB,QAAQ,KAAK,CAAC;GACd,sBAAsB;GACtB;EACF;EACA,MAAM,KAAK,CAAC;CACd;CACA,OAAO;EAAE;EAAO;CAAQ;AAC1B;AAEA,MAAM,8BAAc,IAAI,IAAI,CAAC,MAAM,YAAY,CAAC;AAEhD,SAAS,SAAS,MAA0B;CAC1C,OAAO,SAAS,IAAI,CAAC,CAAC;AACxB;AAEA,SAAS,UAAU,MAA0B;CAG3C,OADgB,KAAK,MAAM,MAAM,YAAY,IAAI,CAAC,KAAK,EAAE,WAAW,KAAK,CAC5D,IAAI,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,MAAyB;CAG1C,KAAK,MAAM,UAAU,SAAS,IAAI,CAAC,CAAC,SAClC,IAAI,2BAA2B,KAAK,MAAM,GAAG,OAAO;CAEtD,OAAO;AACT;AAIA,SAAS,SAAS,MAA0B;CAG1C,IAAI,YAAY;CAChB,IAAI,aAAa;CACjB,MAAM,QAAkB,CAAC;CACzB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,QAAQ,MAAM,UAAU;GAChC,IAAI,IAAI,IAAI,KAAK,QAAQ,MAAM,KAAK,KAAK,IAAI,EAAE;GAC/C;GACA,YAAY;GACZ,aAAa;GACb;EACF;EACA,IAAI,EAAE,WAAW,GAAG,GAAG;GAErB,IAAI,MAAM,QAAQ,MAAM,MAAM;GAC9B;EACF;EACA,IAAI,CAAC,WAAW;GACd,YAAY;GACZ;EACF;EACA,MAAM,KAAK,CAAC;CACd;CACA,OAAO,aAAa,QAAQ;AAC9B;AAEA,SAAS,UAAU,MAAyB;CAK1C,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAM,MAAM;GAC5D;GACA;EACF;EACA,IAAI,EAAE,WAAW,GAAG,GAAG;EACvB,IAAI,CAAC,WAAW;GACd,YAAY;GACZ,IAAI,OAAO,KAAK,CAAC,GAAG,OAAO;EAC7B;CACF;CACA,OAAO;AACT;AAIA,SAAS,UAAU,MAA0B;CAG3C,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,KAAK,MAAM;EACpB,IAAI,EAAE,WAAW,GAAG,GAAG;EACvB,IAAI,KAAK,CAAC;CACZ;CACA,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC,GAAG;AACpC;AAEA,SAAS,WAAW,MAAyB;CAG3C,OAAO,KAAK,MACT,MAAM,MAAM,aAAa,MAAM,WAAW,MAAM,cAAc,MAAM,SAAS,MAAM,QACtF;AACF;AAOA,MAAM,oBAA6B;AAInC,MAAa,QAA2C;CACtD,KAAK,EAAE,QAAQ,YAAY;CAC3B,KAAK;EAAE,OAAO;EAAU,QAAQ;CAAU;CAC1C,UAAU,CAAC;CACX,KAAK,EAAE,OAAO,YAAY;CAC1B,IAAI,CAAC;CACL,KAAK,EAAE,OAAO,YAAY;CAC1B,MAAM,EAAE,OAAO,YAAY;CAC3B,SAAS,CAAC;CACV,MAAM,CAAC;CACP,MAAM,EAAE,QAAQ,YAAY;CAC5B,MAAM,EAAE,QAAQ,YAAY;CAC5B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM;EAAE,OAAO;EAAW,QAAQ;CAAW;CAC7C,MAAM,EAAE,OAAO,sBAAsB;CACrC,MAAM,EAAE,OAAO,YAAY;CAC3B,SAAS,EAAE,OAAO,YAAY;CAC9B,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,QAAQ,CAAC;CACT,KAAK,CAAC;CACN,UAAU,EAAE,OAAO,YAAY;CAC/B,UAAU,EAAE,OAAO,YAAY;CAC/B,IAAI,EAAE,OAAO,sBAAsB;CACnC,KAAK;EAAE,OAAO;EAAU,QAAQ;EAAW,QAAQ;CAAU;CAC7D,MAAM,EAAE,OAAO,YAAY;CAC3B,QAAQ,EAAE,QAAQ,YAAY;CAC9B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,KAAK,EAAE,OAAO,YAAY;AAC5B"}
+{"version":3,"file":"tools-CJ2x45EZ.mjs","names":["shellParse"],"sources":["../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/quote.js","../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/parse.js","../../../node_modules/.bun/shell-quote@1.12.0/node_modules/shell-quote/index.js","../src/utils/bash/parser.ts","../src/utils/bash/tools.ts"],"sourcesContent":["'use strict';\n\n/** @import { ControlOperator } from './parse' */\n\n/** @type {ControlOperator['op'][]} */\nvar OPS = /** @type {const} */ ([\n\t'||',\n\t'&&',\n\t';;&',\n\t';;',\n\t';&',\n\t'|&',\n\t'<(',\n\t'>(',\n\t'<<<',\n\t'<<-',\n\t'<<',\n\t'>>',\n\t'>&',\n\t'>|',\n\t'&>>',\n\t'&>',\n\t'<&',\n\t'<>',\n\t'&',\n\t';',\n\t'(',\n\t')',\n\t'|',\n\t'<',\n\t'>'\n]);\nvar LINE_TERMINATORS = /[\\n\\r\\u2028\\u2029]/;\nvar GLOB_SHELL_SPECIAL = /[\\s#!\"$&'():;<=>@\\\\^`|~]/g;\n\n/** @type {typeof import('./quote')} */\nmodule.exports = function quote(xs) {\n\tvar sawComment = false;\n\treturn xs.map(function (s) {\n\t\tif (sawComment && typeof s === 'string' && LINE_TERMINATORS.test(s)) {\n\t\t\tthrow new TypeError('a token after a `comment` must not contain line terminators');\n\t\t}\n\t\tif (s === '') {\n\t\t\treturn /** @type {const} */ ('\\'\\'');\n\t\t}\n\t\tif (s && typeof s === 'object') {\n\t\t\tif ('op' in s && s.op === 'glob') {\n\t\t\t\tif (typeof s.pattern !== 'string') {\n\t\t\t\t\tthrow new TypeError('glob token requires a string `pattern`');\n\t\t\t\t}\n\t\t\t\tif (LINE_TERMINATORS.test(s.pattern)) {\n\t\t\t\t\tthrow new TypeError('glob `pattern` must not contain line terminators');\n\t\t\t\t}\n\t\t\t\tif (s.pattern === '') {\n\t\t\t\t\treturn /** @type {const} */ ('\\'\\'');\n\t\t\t\t}\n\t\t\t\treturn s.pattern.replace(GLOB_SHELL_SPECIAL, '\\\\$&');\n\t\t\t}\n\t\t\tif ('op' in s && typeof s.op === 'string') {\n\t\t\t\tif (OPS.indexOf(s.op) < 0) {\n\t\t\t\t\tthrow new TypeError('invalid `op` value: ' + JSON.stringify(s.op));\n\t\t\t\t}\n\t\t\t\treturn s.op.replace(/[\\s\\S]/g, '\\\\$&');\n\t\t\t}\n\t\t\tif ('comment' in s && typeof s.comment === 'string') {\n\t\t\t\tif (LINE_TERMINATORS.test(s.comment)) {\n\t\t\t\t\tthrow new TypeError('`comment` must not contain line terminators');\n\t\t\t\t}\n\t\t\t\tsawComment = true;\n\t\t\t\treturn '#' + s.comment;\n\t\t\t}\n\t\t\tthrow new TypeError('unrecognized object token shape');\n\t\t}\n\t\tif ((/'/).test(s) && (/!/).test(s)) {\n\t\t\treturn \"'\" + s.replace(/'/g, \"'\\\"'\\\"'\") + \"'\";\n\t\t}\n\t\tif ((/[\"\\s\\\\]/).test(s) && !(/'/).test(s)) {\n\t\t\treturn \"'\" + s + \"'\";\n\t\t}\n\t\tif ((/[\"'\\s]/).test(s)) {\n\t\t\treturn '\"' + s.replace(/([\"\\\\$`])/g, '\\\\$1') + '\"';\n\t\t}\n\t\treturn String(s).replace(/([A-Za-z]:)?([#!\"$&'()*,:;<=>?@[\\\\\\]^`{|}~])/g, '$1\\\\$2');\n\t}).join(' ');\n};\n","'use strict';\n\n/**\n * @import {\n * \tControlOperator,\n * \tEnv,\n * \tGlobPattern,\n * \tParseEntry,\n * } from './parse' */\n\n// '<(' and '>(' are process substitution operators and\n// can be parsed the same as control operator\nvar CONTROL = /** @type {const} */ ('(?:') + /** @type {const} */ ([\n\t'\\\\|\\\\|',\n\t'\\\\&(?:\\\\&|>>?)', // `&&`, `&>`, and `&>>`\n\t';;\\\\&?', // `;;` and `;;&`\n\t'[;|]\\\\&', // `;&` and `|&`\n\t'\\\\<\\\\(',\n\t'\\\\<\\\\<\\\\<',\n\t'\\\\<\\\\<-',\n\t'\\\\<\\\\<(?!\\\\()', // `<<(` stays `<` and `<(`, as zsh reads it; other shells reject it\n\t'>>',\n\t'>[&|(]', // `>&`, `>|`, and `>(`\n\t'<[&>]', // `<&` and `<>`\n\t'[&;()|<>]'\n]).join(/** @type {const} */ ('|')) + /** @type {const} */ (')');\nvar controlRE = new RegExp('^' + CONTROL + '$');\nvar META = /** @type {const} */ ('|&;()<> \\\\t');\nvar SINGLE_QUOTE = /** @type {const} */ ('\\'([^\\']*?)\\'');\n// bash ANSI-C quoting, `$'...'`: a backslash escapes the next character, including `'`\nvar ANSI_C_BODY = '(?:\\\\\\\\[\\\\s\\\\S]|[^\\\\\\\\\\'])*?';\nvar ANSI_C_QUOTE = '\\\\$\\'' + ANSI_C_BODY + '\\'';\nvar ansiCAt = new RegExp('\\\\$\\'' + ANSI_C_BODY + '(?:(\\')|\\\\\\\\?$)', 'g');\nvar ANSI_C_LETTERS = 'abeEfnrtv';\nvar ANSI_C_CHARS = '\\x07\\b\\x1B\\x1B\\f\\n\\r\\t\\v';\nvar hash = /^#$/;\n\nvar SQ = /** @type {const} */ (\"'\");\nvar DQ = /** @type {const} */ ('\"');\nvar DS = /** @type {const} */ ('$');\n\nvar TOKEN = '';\nvar mult = /** @type {const} */ (0x100000000); // Math.pow(16, 8);\nfor (var i = 0; i < 4; i++) {\n\tTOKEN += (mult * Math.random()).toString(16);\n}\nvar startsWithToken = new RegExp('^' + TOKEN);\n\n/**\n * @param {string} s\n * @param {RegExp} r\n */\nfunction matchAll(s, r) {\n\tvar origIndex = r.lastIndex;\n\n\tvar matches = [];\n\tvar matchObj;\n\n\twhile ((matchObj = r.exec(s))) {\n\t\tmatches[matches.length] = matchObj;\n\t\tif (r.lastIndex === matchObj.index) {\n\t\t\tr.lastIndex += 1;\n\t\t}\n\t}\n\n\tr.lastIndex = origIndex;\n\n\treturn matches;\n}\n\n/**\n * @param {Env} env\n * @param {string} pre\n * @param {string} key\n */\nfunction getVar(env, pre, key) {\n\tvar r = typeof env === 'function' ? env(key) : env[key];\n\tif (typeof r === 'undefined' && key != '') {\n\t\tr = '';\n\t} else if (typeof r === 'undefined') {\n\t\tr = '$';\n\t}\n\n\tif (typeof r === 'object') {\n\t\treturn pre + TOKEN + JSON.stringify(r) + TOKEN;\n\t}\n\treturn pre + r;\n}\n\nvar ansiCEscape = /\\\\([0-7]{1,3}|x[\\dA-Fa-f]{1,2}|u[\\dA-Fa-f]{1,4}|U[\\dA-Fa-f]{1,8}|c(?:\\\\\\\\|[\\s\\S])|[abeEfnrtv\\\\'\"?])/g;\n\n/**\n * @param {string} m\n * @param {string} escape\n */\nfunction expandAnsiCEscape(m, escape) {\n\tvar kind = escape.charAt(0);\n\tif (kind === 'c') {\n\t\tvar ctrl = escape.charAt(1);\n\t\treturn ctrl === '?' ? '\\x7F' : String.fromCharCode(ctrl.charCodeAt(0) & 0x1F);\n\t}\n\tif (kind === 'x' || kind === 'u' || kind === 'U') {\n\t\tvar cp = parseInt(escape.slice(1), 16);\n\t\tif (cp > 0x10FFFF) {\n\t\t\treturn m;\n\t\t}\n\t\treturn String.fromCharCode.apply(null, cp > 0xFFFF ? [0xD7C0 + (cp >> 10), 0xDC00 + (cp & 0x3FF)] : [cp]);\n\t}\n\tif (kind >= '0' && kind <= '7') {\n\t\treturn String.fromCharCode(parseInt(escape, 8) & 0xFF);\n\t}\n\tvar letter = ANSI_C_LETTERS.indexOf(escape);\n\treturn letter < 0 ? escape : ANSI_C_CHARS.charAt(letter);\n}\n\n/** @param {string} body */\nfunction expandAnsiC(body) {\n\treturn body.replace(ansiCEscape, expandAnsiCEscape).split('\\0')[0]; // like bash, a NUL ends the string\n}\n\n/**\n * @param {string} s\n * @param {number} i\n */\nfunction closesAnsiC(s, i) {\n\tansiCAt.lastIndex = i;\n\treturn !!(/** @type {RegExpExecArray} */ (ansiCAt.exec(s)))[1];\n}\n\n/**\n * @param {string} string\n * @param {Env} [env]\n * @param {{ escape?: string, splitUnquoted?: boolean | string }} [opts]\n * @returns {ParseEntry[]}\n */\nfunction parseInternal(string, env, opts) {\n\tif (!opts) {\n\t\topts = {};\n\t}\n\tvar BS = opts.escape || '\\\\';\n\tvar ifs = opts.splitUnquoted === true ? ' \\t\\n' : (typeof opts.splitUnquoted === 'string' ? opts.splitUnquoted : '');\n\tvar BAREWORD = '(\\\\' + BS + '[\\'\"$\\\\' + BS + META + ']|\\\\$\\\\$|\\\\$(?!' + ANSI_C_QUOTE.slice(2) + ')|[^\\\\s\\'\"$' + META + '])+';\n\tvar DOUBLE_QUOTE = '\"(?:\\\\' + BS + '[\\\\s\\\\S]|[^\"\\\\' + BS + '])*\"';\n\n\tvar chunker = new RegExp([\n\t\t'(' + CONTROL + ')', // control chars\n\t\t'(' + ANSI_C_QUOTE + '|' + BAREWORD + '|' + DOUBLE_QUOTE + '|' + SINGLE_QUOTE + ')+'\n\t].join('|'), 'g');\n\n\tvar matches = matchAll(string, chunker);\n\n\tif (matches.length === 0) {\n\t\treturn [];\n\t}\n\tif (!env) {\n\t\tenv = {};\n\t}\n\n\tvar commented = false;\n\n\treturn matches.map(function (match) {\n\t\tvar s = match[0];\n\t\tif (!s || commented) {\n\t\t\treturn void undefined;\n\t\t}\n\t\tif (controlRE.test(s)) {\n\t\t\treturn /** @type {ControlOperator} */ ({ op: s });\n\t\t}\n\n\t\t// Hand-written scanner/parser for Bash quoting rules:\n\t\t//\n\t\t// 1. inside single quotes, all characters are printed literally.\n\t\t// 2. inside double quotes, all characters are printed literally\n\t\t//    except variables prefixed by '$' and backslashes followed by\n\t\t//    either a double quote or another backslash.\n\t\t// 3. outside of any quotes, backslashes are treated as escape\n\t\t//    characters and not printed (unless they are themselves escaped)\n\t\t// 4. quote context can switch mid-token if there is no whitespace\n\t\t//     between the two quote contexts (e.g. all'one'\"token\" parses as\n\t\t//     \"allonetoken\")\n\t\t/** @type {string | boolean} */\n\t\tvar quote = false;\n\t\tvar esc = false;\n\t\tvar out = '';\n\t\t/** @type {string[]} */\n\t\tvar words = [];\n\t\tvar sawQuote = false;\n\t\t/** @type {number | null} */\n\t\tvar pendingNw = null;\n\t\tvar isGlob = false;\n\t\t/** @type {number} */\n\t\tvar i;\n\n\t\tfunction parseEnvVar() {\n\t\t\ti += 1;\n\t\t\t/** @type {number | RegExpMatchArray | null} */\n\t\t\tvar varend;\n\t\t\t/** @type {string} */\n\t\t\tvar varname;\n\t\t\tvar char = s.charAt(i);\n\n\t\t\tif (char === '{') {\n\t\t\t\ti += 1;\n\t\t\t\tif (s.charAt(i) === '}') {\n\t\t\t\t\tthrow new Error('Bad substitution: ' + s.slice(i - 2, i + 1));\n\t\t\t\t}\n\t\t\t\t// match braces by depth so a nested `${` keeps its inner `}` from ending the outer substitution\n\t\t\t\tvar depth = 1;\n\t\t\t\tvarend = i;\n\t\t\t\twhile (depth > 0 && varend < s.length) {\n\t\t\t\t\tif (s.charAt(varend) === '{' && s.charAt(varend - 1) === '$') {\n\t\t\t\t\t\tdepth += 1;\n\t\t\t\t\t} else if (s.charAt(varend) === '}') {\n\t\t\t\t\t\tdepth -= 1;\n\t\t\t\t\t}\n\t\t\t\t\tvarend += 1;\n\t\t\t\t}\n\t\t\t\tif (depth !== 0) {\n\t\t\t\t\tthrow new Error('Bad substitution: ' + s.slice(i));\n\t\t\t\t}\n\t\t\t\tvarend -= 1;\n\t\t\t\tvarname = s.slice(i, varend);\n\t\t\t\ti = varend;\n\t\t\t} else if ((/[*@#?$!-]/).test(char)) {\n\t\t\t\tvarname = char;\n\t\t\t} else {\n\t\t\t\tvar slicedFromI = s.slice(i);\n\t\t\t\tvarend = slicedFromI.match(/[^\\w\\d_]/);\n\t\t\t\tif (!varend) {\n\t\t\t\t\tvarname = slicedFromI;\n\t\t\t\t\ti = s.length;\n\t\t\t\t} else {\n\t\t\t\t\tvarname = slicedFromI.slice(0, varend.index);\n\t\t\t\t\ti += /** @type {number} */ (varend.index) - 1;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn getVar(/** @type {NonNullable<typeof env>} */ (env), '', varname);\n\t\t}\n\n\t\tfunction flushRun() {\n\t\t\tif (pendingNw === null) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (pendingNw === 0) {\n\t\t\t\tif (out !== '') {\n\t\t\t\t\twords[words.length] = out;\n\t\t\t\t\tout = '';\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\twords[words.length] = out;\n\t\t\t\tout = '';\n\t\t\t\tfor (var fe = 1; fe < pendingNw; fe += 1) {\n\t\t\t\t\twords[words.length] = '';\n\t\t\t\t}\n\t\t\t}\n\t\t\tpendingNw = null;\n\t\t}\n\n\t\tfor (i = 0; i < s.length; i++) {\n\t\t\tvar c = s.charAt(i);\n\t\t\tif (ifs && c !== DS) {\n\t\t\t\tflushRun();\n\t\t\t}\n\t\t\tisGlob = isGlob || (!quote && (c === '*' || c === '?'));\n\t\t\tif (esc) {\n\t\t\t\tout += c;\n\t\t\t\tesc = false;\n\t\t\t} else if (quote) {\n\t\t\t\tif (c === quote) {\n\t\t\t\t\tquote = false;\n\t\t\t\t} else if (quote == SQ) {\n\t\t\t\t\tout += c;\n\t\t\t\t} else { // Double quote\n\t\t\t\t\tif (c === BS) {\n\t\t\t\t\t\ti += 1;\n\t\t\t\t\t\tc = s.charAt(i);\n\t\t\t\t\t\tif (c === DQ || c === BS || c === DS) {\n\t\t\t\t\t\t\tout += c;\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tout += BS + c;\n\t\t\t\t\t\t}\n\t\t\t\t\t} else if (c === DS) {\n\t\t\t\t\t\tout += parseEnvVar();\n\t\t\t\t\t} else {\n\t\t\t\t\t\tout += c;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else if (c === DQ || c === SQ) {\n\t\t\t\tquote = c;\n\t\t\t\tsawQuote = true;\n\t\t\t} else if (controlRE.test(c)) {\n\t\t\t\treturn /** @type {ControlOperator} */ ({ op: s });\n\t\t\t} else if (hash.test(c)) {\n\t\t\t\tcommented = true;\n\t\t\t\tvar commentObj = { comment: string.slice(match.index + i + 1) };\n\t\t\t\tif (out.length) {\n\t\t\t\t\treturn /** @type {const} */ ([out, commentObj]);\n\t\t\t\t}\n\t\t\t\treturn /** @type {const} */ ([commentObj]);\n\t\t\t} else if (c === BS) {\n\t\t\t\tesc = true;\n\t\t\t} else if (c === DS && s.charAt(i + 1) === SQ && closesAnsiC(s, i)) {\n\t\t\t\tflushRun();\n\t\t\t\tsawQuote = true;\n\t\t\t\tout += expandAnsiC(s.slice(i + 2, ansiCAt.lastIndex - 1));\n\t\t\t\ti = ansiCAt.lastIndex - 1;\n\t\t\t} else if (c === DS) {\n\t\t\t\tvar value = parseEnvVar();\n\t\t\t\tif (!ifs) {\n\t\t\t\t\tout += value;\n\t\t\t\t} else {\n\t\t\t\t\tfor (var vi = 0; vi < value.length; vi += 1) {\n\t\t\t\t\t\tvar vc = value.charAt(vi);\n\t\t\t\t\t\tif (ifs.indexOf(vc) < 0) {\n\t\t\t\t\t\t\tflushRun();\n\t\t\t\t\t\t\tout += vc;\n\t\t\t\t\t\t} else if (pendingNw === null) {\n\t\t\t\t\t\t\tpendingNw = vc === ' ' || vc === '\\t' || vc === '\\n' ? 0 : 1;\n\t\t\t\t\t\t} else if (vc !== ' ' && vc !== '\\t' && vc !== '\\n') {\n\t\t\t\t\t\t\tpendingNw += 1;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tout += c;\n\t\t\t}\n\t\t}\n\n\t\tif (isGlob) {\n\t\t\treturn /** @type {GlobPattern} */ ({ op: 'glob', pattern: out });\n\t\t}\n\n\t\tif (ifs) {\n\t\t\tif (pendingNw !== null && pendingNw > 0) {\n\t\t\t\twords[words.length] = out;\n\t\t\t\tout = '';\n\t\t\t\tfor (var te = 1; te < pendingNw; te += 1) {\n\t\t\t\t\twords[words.length] = '';\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (out !== '' || (sawQuote && words.length === 0)) {\n\t\t\t\twords[words.length] = out;\n\t\t\t}\n\t\t\treturn words;\n\t\t}\n\n\t\treturn out;\n\t}).reduce(function (prev, arg) { // finalize parsed arguments\n\t\tif (typeof arg === 'undefined') {\n\t\t\treturn prev;\n\t\t}\n\t\t/** @type {ParseEntry[]} */ ([]).concat(arg).forEach(function (entry) {\n\t\t\tprev[prev.length] = entry;\n\t\t});\n\t\treturn prev;\n\t}, /** @type {ParseEntry[]} */ ([]));\n}\n\n/** @type {typeof import('./parse')} */\nmodule.exports = function parse(s, env, opts) {\n\tvar mapped = parseInternal(s, env, opts);\n\tif (typeof env !== 'function') {\n\t\treturn mapped;\n\t}\n\treturn mapped.reduce(function (acc, s) {\n\t\tif (typeof s === 'object') {\n\t\t\tacc[acc.length] = s;\n\t\t\treturn acc;\n\t\t}\n\t\tvar xs = s.split(RegExp('(' + TOKEN + '.*?' + TOKEN + ')', 'g'));\n\t\tif (xs.length === 1) {\n\t\t\tacc[acc.length] = xs[0];\n\t\t\treturn acc;\n\t\t}\n\t\txs.filter(Boolean).forEach(function (x) {\n\t\t\tacc[acc.length] = startsWithToken.test(x)\n\t\t\t\t? JSON.parse(x.split(TOKEN)[1])\n\t\t\t\t: x;\n\t\t});\n\t\treturn acc;\n\t}, /** @type {ParseEntry[]} */ ([]));\n};\n","'use strict';\n\nexports.quote = require('./quote');\nexports.parse = require('./parse');\n","import { safeStringify } from \"@zaly/shared\"\nimport { parse as shellParse } from \"shell-quote\"\n\n/** A shell command broken down into its structural parts. One bash\n *  input may parse to multiple segments (joined by `|`, `&&`, `||`, `;`).\n *  Each segment is evaluated independently by the policy. */\nexport interface Segment {\n  cmd: string\n  args: string[]\n  dyn?: Set<string>\n  /** File paths the segment reads from (`< file` redirects). Built-in\n   *  tools may add inferred reads in the policy layer. */\n  reads: string[]\n  /** File paths the segment writes to (`> file` / `>> file`). */\n  writes: { path: string; mode: \"trunc\" | \"append\" }[]\n  /** True if the input contains command substitution (`$()` or backticks)\n   *  or any other dynamic-evaluation construct. Forces ask. */\n  hasCommandSubst: boolean\n}\n\nexport type ParseResult = { ok: true; segments: Segment[] } | { ok: false; reason: string }\n\n/** Targets a redirect can write to without filesystem implications.\n *  Anything else is treated as a file write and goes through fileWrite\n *  policy. */\nconst SAFE_REDIRECT_TARGETS = new Set([\"/dev/null\", \"/dev/stderr\", \"/dev/stdout\"])\n\n/** A redirect target like `&1`, `&2`, `&-` — duplicates an existing fd,\n *  no filesystem effect. */\nfunction isFdRedirect(target: string): boolean {\n  return /^&(?:\\d+|-)$/.test(target)\n}\n\ntype Op = { op: string }\ntype Glob = { op: \"glob\"; pattern: string }\ntype Comment = { comment: string }\ntype Token = string | Op | Glob | Comment\n\nconst COMMAND_SEPS = new Set([\"|\", \"&&\", \"||\", \";\"])\nconst REDIRECT_OPS = new Set([\">\", \">>\", \"<\", \">&\", \"<&\"])\nconst DYN_SENTINEL = \"\\u{E000}\"\n\n/** Parse a bash command line. Returns segments with a flag for\n *  unsupported constructs that force \"ask\" downstream. Heredocs,\n *  subshells, command substitution, and backticks all surface as\n *  `hasCommandSubst: true` (the umbrella \"we can't reason about this\"\n *  signal) rather than parse failures, so the policy can still decide. */\nexport function parseBash(input: string): ParseResult {\n  // Heredocs derail shell-quote (the body bleeds into surrounding tokens),\n  // so we bail to ok:false here. checkBash maps that to ask.\n  if (/<<-?\\s*['\"]?\\w+/.test(input)) {\n    return { ok: false, reason: \"heredoc not supported\" }\n  }\n  // Backticks command-substitute in bash unless inside single quotes\n  // (single quotes preserve everything literally; double quotes don't\n  // suppress substitution). Flag only the unquoted form so embedded\n  // template literals in `bun -e '... ${x} `tpl` ...'` don't trip us.\n  const hasBackticks = hasUnquotedBacktick(input)\n\n  let rawTokens: Token[]\n  try {\n    rawTokens = shellParse(input, (e) =>\n      e === \"\" ? undefined : `${DYN_SENTINEL}\\${${e}}`\n    ) as Token[]\n  } catch (error) {\n    return { ok: false, reason: `tokenize: ${(error as Error).message}` }\n  }\n\n  // Inline plain `(subshell)` contents as separate segments; strip\n  // `$(...)` regions and flag as command substitution. Backticks\n  // already detected via the pre-scan above.\n  const flat = flattenParens(rawTokens)\n  const hasCommandSubst = hasBackticks || flat.hasCommandSubst\n\n  const segmentTokens: Token[][] = [[]]\n  for (const t of flat.tokens) {\n    if (typeof t === \"object\" && \"comment\" in t) continue\n\n    if (typeof t === \"object\" && \"op\" in t && COMMAND_SEPS.has(t.op)) {\n      if (segmentTokens.at(-1)!.length > 0) segmentTokens.push([])\n      continue\n    }\n\n    segmentTokens.at(-1)!.push(t)\n  }\n\n  if (segmentTokens.at(-1)!.length === 0) segmentTokens.pop()\n\n  const segments: Segment[] = []\n  for (const segToks of segmentTokens) {\n    const seg = parseSegment(segToks)\n    if (!seg.ok) return seg\n    if (seg.segment) segments.push({ ...seg.segment, hasCommandSubst })\n  }\n\n  if (segments.length === 0) {\n    return { ok: false, reason: \"empty input\" }\n  }\n  return { ok: true, segments }\n}\n\nfunction parseSegment(\n  tokens: Token[]\n):\n  | { ok: true; segment: Omit<Segment, \"hasCommandSubst\"> | undefined }\n  | { ok: false; reason: string } {\n  let args: string[] = []\n  let reads: string[] = []\n  let writes: { path: string; mode: \"trunc\" | \"append\" }[] = []\n  const dyn = new Set<string>()\n\n  for (let i = 0; i < tokens.length; i++) {\n    const t = tokens[i]\n\n    if (typeof t === \"string\") {\n      // FD prefix on a redirect (`2>&1`, `2>file`, `1<&-`) — shell-quote\n      // splits the leading digit off as its own token. Don't treat it\n      // as a regular arg; the redirect handler below picks up the op.\n      if (/^\\d+$/.test(t)) {\n        const next = tokens[i + 1]\n        if (typeof next === \"object\" && \"op\" in next && REDIRECT_OPS.has(next.op)) {\n          continue\n        }\n      }\n      args.push(t)\n      continue\n    }\n\n    if (\"comment\" in t) continue\n\n    if (\"pattern\" in t) {\n      // Pass globs through as their pattern — policy layer decides.\n      args.push(t.pattern)\n      dyn.add(t.pattern)\n      continue\n    }\n\n    if (!(\"op\" in t)) {\n      return { ok: false, reason: `unsupported token: ${safeStringify(t)}` }\n    }\n\n    if (REDIRECT_OPS.has(t.op)) {\n      const next = tokens[i + 1]\n      if (typeof next !== \"string\") {\n        return { ok: false, reason: `redirect target missing after ${t.op}` }\n      }\n      i++ // consume target\n\n      if (t.op === \">\" || t.op === \">>\") {\n        // Skip safe targets (/dev/null etc.) and fd redirects entirely.\n        if (SAFE_REDIRECT_TARGETS.has(next) || isFdRedirect(next)) continue\n        writes.push({ mode: t.op === \">>\" ? \"append\" : \"trunc\", path: next })\n      } else if (t.op === \"<\") {\n        if (SAFE_REDIRECT_TARGETS.has(next) || isFdRedirect(next)) continue\n        reads.push(next)\n      }\n      // `>&` / `<&` are fd-duplicating (`2>&1`-style) — no fs impact.\n      continue\n    }\n\n    return { ok: false, reason: `unsupported op: ${t.op}` }\n  }\n\n  const dynPath = (p: string) => {\n    if (!p.includes(DYN_SENTINEL)) return p\n    p = p.replaceAll(DYN_SENTINEL, \"\")\n    dyn.add(p)\n    return p\n  }\n\n  args = args.map((a) => dynPath(a))\n  writes = writes.map((w) => ({ ...w, path: dynPath(w.path) }))\n  reads = reads.map(dynPath)\n\n  // Strip leading wrapper commands (`time`, `nohup`, `nice`, …) so the\n  // policy sees the real command being run. `time bun test` evaluates\n  // as `bun test`; a bare `time` (or `time (subshell)` after flatten)\n  // leaves nothing and signals the caller to drop the segment.\n  const unwrapped = unwrapWrappers(args)\n  if (unwrapped.length === 0) {\n    return { ok: true, segment: undefined }\n  }\n\n  return {\n    ok: true,\n    segment: {\n      args: unwrapped.slice(1),\n      cmd: unwrapped[0],\n      dyn,\n      reads,\n      writes,\n    },\n  }\n}\n\ninterface WrapperSpec {\n  /** Flags that consume the next arg as their value. */\n  valueFlags?: Set<string>\n}\n\n/** Commands that wrap another command — they're transparent for\n *  permission purposes, since the security-relevant action is whatever\n *  they run. `sudo` is intentionally absent: it changes the effective\n *  user and must always be flagged. */\nconst WRAPPERS: Partial<Record<string, WrapperSpec>> = {\n  command: {}, // bash builtin, bypasses aliases\n  ionice: { valueFlags: new Set([\"-c\", \"-n\", \"-p\", \"-P\", \"-u\"]) },\n  nice: { valueFlags: new Set([\"-n\", \"--adjustment\"]) },\n  nohup: {},\n  time: {}, // bash reserved word, also GNU /usr/bin/time\n}\n\n/** Detect backticks outside single-quoted regions. Single quotes in\n *  bash can't be escaped from within, so the toggle is a simple state\n *  flip on every `'`. Double quotes do not suppress backtick\n *  substitution and are ignored here. */\nfunction hasUnquotedBacktick(input: string): boolean {\n  let inSingle = false\n  for (const c of input) {\n    if (c === \"'\") {\n      inSingle = !inSingle\n      continue\n    }\n    if (c === \"`\" && !inSingle) return true\n  }\n  return false\n}\n\n/** Strip leading wrapper-command prefixes from an arg list. Repeats\n *  while the head is a wrapper (so `time nice -n 5 cmd` → `cmd`).\n *  Wrapper-flags (and their values, where applicable) are consumed\n *  along with the wrapper itself. */\nfunction unwrapWrappers(args: string[]): string[] {\n  let current = args\n  while (current.length > 0) {\n    const spec = WRAPPERS[current[0]]\n    if (!spec) break\n    const valueFlags = spec.valueFlags ?? new Set()\n    let i = 1\n    while (i < current.length && current[i].startsWith(\"-\")) {\n      const flag = current[i]\n      i++\n      if (valueFlags.has(flag) && i < current.length) i++ // consume flag value\n    }\n    current = current.slice(i)\n  }\n  return current\n}\n\n/** Walk a token list and resolve paren constructs:\n *  - Plain `(subshell)` → tokens inlined with `;` boundaries on each\n *    side, so the contents become independent segments evaluated by\n *    the same policy. The subshell's own scope (cwd changes etc.) is\n *    irrelevant to permissions — each command is checked individually.\n *  - `$(...)` (command substitution) → stripped entirely, with the\n *    `hasCommandSubst` flag raised. The dynamic value can't be\n *    statically reasoned about. Detected by the leading `$` token\n *    that shell-quote emits before the `(`.\n *\n *  Recurses into subshell contents to handle nesting and to catch\n *  `$(...)` constructs nested inside subshells. */\nfunction flattenParens(tokens: Token[]): { tokens: Token[]; hasCommandSubst: boolean } {\n  const out: Token[] = []\n  let hasCommandSubst = false\n  let i = 0\n  while (i < tokens.length) {\n    const t = tokens[i]\n    if (typeof t === \"object\" && \"op\" in t && t.op === \"(\") {\n      const isSubst = out.at(-1) === \"$\"\n      if (isSubst) out.pop()\n\n      // Find matching `)`, accounting for nesting.\n      let depth = 1\n      let j = i + 1\n      while (j < tokens.length && depth > 0) {\n        const tj = tokens[j]\n        if (typeof tj === \"object\" && \"op\" in tj) {\n          if (tj.op === \"(\") depth++\n          else if (tj.op === \")\") depth--\n        }\n        if (depth > 0) j++\n      }\n      const inner = tokens.slice(i + 1, j)\n\n      if (isSubst) {\n        hasCommandSubst = true\n        // Drop the entire $(...) — its value is dynamic.\n      } else {\n        const sub = flattenParens(inner)\n        if (sub.hasCommandSubst) hasCommandSubst = true\n        // Surround with separators so subshell contents form their own\n        // segments regardless of what's adjacent in the outer chain.\n        out.push({ op: \";\" }, ...sub.tokens, { op: \";\" })\n      }\n      i = j + 1\n      continue\n    }\n\n    if (typeof t === \"object\" && \"op\" in t && t.op === \")\") {\n      // Stray closing paren (unbalanced input). Skip — the parser's\n      // overall result will likely fail downstream on a malformed segment.\n      i++\n      continue\n    }\n\n    out.push(t)\n    i++\n  }\n  return { hasCommandSubst, tokens: out }\n}\n","/**\n * Built-in tool registry — per-command knowledge of which args are\n * input files, output files, and which invocation modes are too\n * complex to safely model.\n *\n * The policy engine consults this registry alongside explicit redirect\n * info from the parser to determine per-command file I/O for the\n * fileRead/fileWrite policy hooks.\n */\nexport interface ToolSpec {\n  /** File paths the command will read from, derived from args. */\n  reads?: (args: string[]) => string[]\n  /** File paths the command will write to. */\n  writes?: (args: string[]) => string[]\n  /** Returns true if the args invoke a mode the parser can't safely\n   *  reason about (e.g. `sed -e 'w out'`, `find -exec`). Forces ask. */\n  unsafe?: (args: string[]) => boolean\n}\n\n/** All bare positional args (no leading dash). Default for many\n *  read-only utilities. */\nfunction positionals(args: string[]): string[] {\n  return args.filter((a) => !a.startsWith(\"-\") && a !== \"\")\n}\n\n/** All positionals after the first one (e.g. `grep PATTERN file...`). */\nfunction positionalsAfterFirst(args: string[]): string[] {\n  const out: string[] = []\n  let seenFirst = false\n  for (const a of args) {\n    if (a.startsWith(\"-\") || a === \"\") continue\n    if (!seenFirst) {\n      seenFirst = true\n      continue\n    }\n    out.push(a)\n  }\n  return out\n}\n\n// ── sed ──────────────────────────────────────────────────────────────────\n\n/** Flags whose value is the *next* arg, not part of the script. */\nconst SED_VALUE_FLAGS = new Set([\"-e\", \"--expression\", \"-f\", \"--file\"])\n\n/** Walk sed args, returning [scripts, positionalsAfterScript]. The\n *  \"script\" is everything passed via `-e` plus the first bare arg\n *  (the implicit script when no `-e` is given). Positionals after\n *  that are input files. */\nfunction sedSplit(args: string[]): { scripts: string[]; files: string[] } {\n  const scripts: string[] = []\n  const files: string[] = []\n  let needsImplicitScript = !args.some(\n    (a) => a === \"-e\" || a === \"--expression\" || a === \"-f\" || a === \"--file\"\n  )\n\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a.startsWith(\"-\")) {\n      if (SED_VALUE_FLAGS.has(a) && i + 1 < args.length) {\n        if (a === \"-e\" || a === \"--expression\") scripts.push(args[i + 1])\n        i++ // consume value\n      }\n      continue\n    }\n    if (needsImplicitScript) {\n      scripts.push(a)\n      needsImplicitScript = false\n      continue\n    }\n    files.push(a)\n  }\n  return { files, scripts }\n}\n\nconst SED_INPLACE = new Set([\"-i\", \"--in-place\"])\n\nfunction sedReads(args: string[]): string[] {\n  return sedSplit(args).files\n}\n\nfunction sedWrites(args: string[]): string[] {\n  // `-i` rewrites positional input files; also supports `-i.bak` form.\n  const inPlace = args.some((a) => SED_INPLACE.has(a) || a.startsWith(\"-i.\"))\n  return inPlace ? sedSplit(args).files : []\n}\n\nfunction sedUnsafe(args: string[]): boolean {\n  // `w` / `W` write commands and `r` / `R` read commands inside the\n  // script can do file I/O the parser can't see. Bail to ask.\n  for (const script of sedSplit(args).scripts) {\n    if (/(?:^|;|\\n)\\s*[wWrR]\\s+\\S/.test(script)) return true\n  }\n  return false\n}\n\n// ── awk ──────────────────────────────────────────────────────────────────\n\nfunction awkReads(args: string[]): string[] {\n  // awk usage: `awk [opts] 'script' [files...]` or `awk [opts] -f file [files...]`\n  // Files come after the script. Skip flags + their values.\n  let sawScript = false\n  let usingFFlag = false\n  const files: string[] = []\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a === \"-f\" || a === \"--file\") {\n      if (i + 1 < args.length) files.push(args[i + 1]) // script file is read too\n      i++\n      sawScript = true\n      usingFFlag = true\n      continue\n    }\n    if (a.startsWith(\"-\")) {\n      // Some awk flags take a value (-v, -F)\n      if (a === \"-v\" || a === \"-F\") i++\n      continue\n    }\n    if (!sawScript) {\n      sawScript = true\n      continue\n    }\n    files.push(a)\n  }\n  return usingFFlag ? files : files\n}\n\nfunction awkUnsafe(args: string[]): boolean {\n  // awk's `print > file` and `printf > file` inside a script write to\n  // files. Detecting reliably without parsing the script is hard, so\n  // bail to ask if the script (or any -e value) contains a `>` operator.\n  // Conservative — false positives are fine for \"ask\".\n  let sawScript = false\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i]\n    if (a === \"-f\" || a === \"--file\" || a === \"-v\" || a === \"-F\") {\n      i++\n      continue\n    }\n    if (a.startsWith(\"-\")) continue\n    if (!sawScript) {\n      sawScript = true\n      if (/[>|]/.test(a)) return true\n    }\n  }\n  return false\n}\n\n// ── find ─────────────────────────────────────────────────────────────────\n\nfunction findReads(args: string[]): string[] {\n  // First positional (or `.`) is the path. Multiple paths possible\n  // before the first `-action` flag.\n  const out: string[] = []\n  for (const a of args) {\n    if (a.startsWith(\"-\")) break\n    out.push(a)\n  }\n  return out.length > 0 ? out : [\".\"]\n}\n\nfunction findUnsafe(args: string[]): boolean {\n  // `-delete`, `-exec`, `-execdir`, `-ok`, `-okdir` all do work we\n  // can't trace.\n  return args.some(\n    (a) => a === \"-delete\" || a === \"-exec\" || a === \"-execdir\" || a === \"-ok\" || a === \"-okdir\"\n  )\n}\n\n// ── dynamic execution ────────────────────────────────────────────────────\n//\n// These commands run arbitrary code passed as arguments or sourced from\n// files. We can't reason about their effects from the parser; force ask.\n\nconst dynamicExec = (): boolean => true\n\n// ── registry ─────────────────────────────────────────────────────────────\n\nexport const TOOLS: Partial<Record<string, ToolSpec>> = {\n  \".\": { unsafe: dynamicExec }, // sh: source alias\n  awk: { reads: awkReads, unsafe: awkUnsafe },\n  basename: {},\n  cat: { reads: positionals },\n  cd: {},\n  cut: { reads: positionals },\n  diff: { reads: positionals },\n  dirname: {},\n  echo: {},\n  eval: { unsafe: dynamicExec }, // runs its argument as shell input\n  exec: { unsafe: dynamicExec }, // replaces the shell process\n  file: { reads: positionals },\n  find: { reads: findReads, unsafe: findUnsafe },\n  grep: { reads: positionalsAfterFirst },\n  head: { reads: positionals },\n  hexdump: { reads: positionals },\n  less: { reads: positionals },\n  ls: { reads: positionals },\n  more: { reads: positionals },\n  od: { reads: positionals },\n  printf: {},\n  pwd: {},\n  readlink: { reads: positionals },\n  realpath: { reads: positionals },\n  rg: { reads: positionalsAfterFirst },\n  sed: { reads: sedReads, unsafe: sedUnsafe, writes: sedWrites },\n  sort: { reads: positionals },\n  source: { unsafe: dynamicExec }, // bash: runs the file in current shell\n  stat: { reads: positionals },\n  tail: { reads: positionals },\n  tree: { reads: positionals },\n  uniq: { reads: positionals },\n  wc: { reads: positionals },\n  xxd: { reads: positionals },\n}\n"],"ignoreList":[0,1,2],"mappings":";;;;;;CAKA,IAAI,MAA4B;EAC/B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;CACA,IAAI,mBAAmB;CACvB,IAAI,qBAAqB;;CAGzB,OAAO,UAAU,SAAS,MAAM,IAAI;EACnC,IAAI,aAAa;EACjB,OAAO,GAAG,IAAI,SAAU,GAAG;GAC1B,IAAI,cAAc,OAAO,MAAM,YAAY,iBAAiB,KAAK,CAAC,GACjE,MAAM,IAAI,UAAU,6DAA6D;GAElF,IAAI,MAAM,IACT,OAA6B;GAE9B,IAAI,KAAK,OAAO,MAAM,UAAU;IAC/B,IAAI,QAAQ,KAAK,EAAE,OAAO,QAAQ;KACjC,IAAI,OAAO,EAAE,YAAY,UACxB,MAAM,IAAI,UAAU,wCAAwC;KAE7D,IAAI,iBAAiB,KAAK,EAAE,OAAO,GAClC,MAAM,IAAI,UAAU,kDAAkD;KAEvE,IAAI,EAAE,YAAY,IACjB,OAA6B;KAE9B,OAAO,EAAE,QAAQ,QAAQ,oBAAoB,MAAM;IACpD;IACA,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,UAAU;KAC1C,IAAI,IAAI,QAAQ,EAAE,EAAE,IAAI,GACvB,MAAM,IAAI,UAAU,yBAAyB,KAAK,UAAU,EAAE,EAAE,CAAC;KAElE,OAAO,EAAE,GAAG,QAAQ,WAAW,MAAM;IACtC;IACA,IAAI,aAAa,KAAK,OAAO,EAAE,YAAY,UAAU;KACpD,IAAI,iBAAiB,KAAK,EAAE,OAAO,GAClC,MAAM,IAAI,UAAU,6CAA6C;KAElE,aAAa;KACb,OAAO,MAAM,EAAE;IAChB;IACA,MAAM,IAAI,UAAU,iCAAiC;GACtD;GACA,IAAK,IAAK,KAAK,CAAC,KAAM,IAAK,KAAK,CAAC,GAChC,OAAO,MAAM,EAAE,QAAQ,MAAM,SAAS,IAAI;GAE3C,IAAK,UAAW,KAAK,CAAC,KAAK,CAAE,IAAK,KAAK,CAAC,GACvC,OAAO,MAAM,IAAI;GAElB,IAAK,SAAU,KAAK,CAAC,GACpB,OAAO,OAAM,EAAE,QAAQ,cAAc,MAAM,IAAI;GAEhD,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,iDAAiD,QAAQ;EACnF,CAAC,CAAC,CAAC,KAAK,GAAG;CACZ;;;;;;;;;;;;CCxEA,IAAI,UAAgC,QAA+B;EAClE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC,CAAE,KAA2B,GAAI,IAA0B;CAC5D,IAAI,YAAY,IAAI,OAAO,MAAM,UAAU,GAAG;CAC9C,IAAI,OAA6B;CACjC,IAAI,eAAqC;CAEzC,IAAI,cAAc;CAClB,IAAI,eAAe,SAAU,cAAc;CAC3C,IAAI,UAAU,IAAI,OAAO,SAAU,cAAc,kBAAmB,GAAG;CACvE,IAAI,iBAAiB;CACrB,IAAI,eAAe;CACnB,IAAI,OAAO;CAEX,IAAI,KAA2B;CAC/B,IAAI,KAA2B;CAC/B,IAAI,KAA2B;CAE/B,IAAI,QAAQ;CACZ,IAAI,OAA6B;CACjC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KACtB,UAAU,OAAO,KAAK,OAAO,EAAA,CAAG,SAAS,EAAE;CAE5C,IAAI,kBAAkB,IAAI,OAAO,MAAM,KAAK;;;;;CAM5C,SAAS,SAAS,GAAG,GAAG;EACvB,IAAI,YAAY,EAAE;EAElB,IAAI,UAAU,CAAC;EACf,IAAI;EAEJ,OAAQ,WAAW,EAAE,KAAK,CAAC,GAAI;GAC9B,QAAQ,QAAQ,UAAU;GAC1B,IAAI,EAAE,cAAc,SAAS,OAC5B,EAAE,aAAa;EAEjB;EAEA,EAAE,YAAY;EAEd,OAAO;CACR;;;;;;CAOA,SAAS,OAAO,KAAK,KAAK,KAAK;EAC9B,IAAI,IAAI,OAAO,QAAQ,aAAa,IAAI,GAAG,IAAI,IAAI;EACnD,IAAI,OAAO,MAAM,eAAe,OAAO,IACtC,IAAI;OACE,IAAI,OAAO,MAAM,aACvB,IAAI;EAGL,IAAI,OAAO,MAAM,UAChB,OAAO,MAAM,QAAQ,KAAK,UAAU,CAAC,IAAI;EAE1C,OAAO,MAAM;CACd;CAEA,IAAI,cAAc;;;;;CAMlB,SAAS,kBAAkB,GAAG,QAAQ;EACrC,IAAI,OAAO,OAAO,OAAO,CAAC;EAC1B,IAAI,SAAS,KAAK;GACjB,IAAI,OAAO,OAAO,OAAO,CAAC;GAC1B,OAAO,SAAS,MAAM,MAAS,OAAO,aAAa,KAAK,WAAW,CAAC,IAAI,EAAI;EAC7E;EACA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GACjD,IAAI,KAAK,SAAS,OAAO,MAAM,CAAC,GAAG,EAAE;GACrC,IAAI,KAAK,SACR,OAAO;GAER,OAAO,OAAO,aAAa,MAAM,MAAM,KAAK,QAAS,CAAC,SAAU,MAAM,KAAK,SAAU,KAAK,KAAM,IAAI,CAAC,EAAE,CAAC;EACzG;EACA,IAAI,QAAQ,OAAO,QAAQ,KAC1B,OAAO,OAAO,aAAa,SAAS,QAAQ,CAAC,IAAI,GAAI;EAEtD,IAAI,SAAS,eAAe,QAAQ,MAAM;EAC1C,OAAO,SAAS,IAAI,SAAS,aAAa,OAAO,MAAM;CACxD;;CAGA,SAAS,YAAY,MAAM;EAC1B,OAAO,KAAK,QAAQ,aAAa,iBAAiB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;CACjE;;;;;CAMA,SAAS,YAAY,GAAG,GAAG;EAC1B,QAAQ,YAAY;EACpB,OAAO,CAAC,CAAkC,QAAQ,KAAK,CAAC,CAAC,CAAG;CAC7D;;;;;;;CAQA,SAAS,cAAc,QAAQ,KAAK,MAAM;EACzC,IAAI,CAAC,MACJ,OAAO,CAAC;EAET,IAAI,KAAK,KAAK,UAAU;EACxB,IAAI,MAAM,KAAK,kBAAkB,OAAO,SAAW,OAAO,KAAK,kBAAkB,WAAW,KAAK,gBAAgB;EACjH,IAAI,WAAW,QAAQ,KAAK,YAAY,KAAK,OAAO,oBAAoB,aAAa,MAAM,CAAC,IAAI,gBAAgB,OAAO;EACvH,IAAI,eAAe,YAAW,KAAK,oBAAmB,KAAK;EAO3D,IAAI,UAAU,SAAS,QAAQ,IALb,OAAO,CACxB,MAAM,UAAU,KAChB,MAAM,eAAe,MAAM,WAAW,MAAM,eAAe,MAAM,eAAe,IACjF,CAAC,CAAC,KAAK,GAAG,GAAG,GAEwB,CAAC;EAEtC,IAAI,QAAQ,WAAW,GACtB,OAAO,CAAC;EAET,IAAI,CAAC,KACJ,MAAM,CAAC;EAGR,IAAI,YAAY;EAEhB,OAAO,QAAQ,IAAI,SAAU,OAAO;GACnC,IAAI,IAAI,MAAM;GACd,IAAI,CAAC,KAAK,WACT;GAED,IAAI,UAAU,KAAK,CAAC,GACnB,OAAuC,EAAE,IAAI,EAAE;;GAehD,IAAI,QAAQ;GACZ,IAAI,MAAM;GACV,IAAI,MAAM;;GAEV,IAAI,QAAQ,CAAC;GACb,IAAI,WAAW;;GAEf,IAAI,YAAY;GAChB,IAAI,SAAS;;GAEb,IAAI;GAEJ,SAAS,cAAc;IACtB,KAAK;;IAEL,IAAI;;IAEJ,IAAI;IACJ,IAAI,OAAO,EAAE,OAAO,CAAC;IAErB,IAAI,SAAS,KAAK;KACjB,KAAK;KACL,IAAI,EAAE,OAAO,CAAC,MAAM,KACnB,MAAM,IAAI,MAAM,uBAAuB,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;KAG7D,IAAI,QAAQ;KACZ,SAAS;KACT,OAAO,QAAQ,KAAK,SAAS,EAAE,QAAQ;MACtC,IAAI,EAAE,OAAO,MAAM,MAAM,OAAO,EAAE,OAAO,SAAS,CAAC,MAAM,KACxD,SAAS;WACH,IAAI,EAAE,OAAO,MAAM,MAAM,KAC/B,SAAS;MAEV,UAAU;KACX;KACA,IAAI,UAAU,GACb,MAAM,IAAI,MAAM,uBAAuB,EAAE,MAAM,CAAC,CAAC;KAElD,UAAU;KACV,UAAU,EAAE,MAAM,GAAG,MAAM;KAC3B,IAAI;IACL,OAAO,IAAK,YAAa,KAAK,IAAI,GACjC,UAAU;SACJ;KACN,IAAI,cAAc,EAAE,MAAM,CAAC;KAC3B,SAAS,YAAY,MAAM,UAAU;KACrC,IAAI,CAAC,QAAQ;MACZ,UAAU;MACV,IAAI,EAAE;KACP,OAAO;MACN,UAAU,YAAY,MAAM,GAAG,OAAO,KAAK;MAC3C,KAA4B,OAAO,QAAS;KAC7C;IACD;IACA,OAAO,OAA+C,KAAM,IAAI,OAAO;GACxE;GAEA,SAAS,WAAW;IACnB,IAAI,cAAc,MACjB;IAED,IAAI,cAAc,GACb;SAAA,QAAQ,IAAI;MACf,MAAM,MAAM,UAAU;MACtB,MAAM;KACP;WACM;KACN,MAAM,MAAM,UAAU;KACtB,MAAM;KACN,KAAK,IAAI,KAAK,GAAG,KAAK,WAAW,MAAM,GACtC,MAAM,MAAM,UAAU;IAExB;IACA,YAAY;GACb;GAEA,KAAK,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;IAC9B,IAAI,IAAI,EAAE,OAAO,CAAC;IAClB,IAAI,OAAO,MAAM,IAChB,SAAS;IAEV,SAAS,UAAW,CAAC,UAAU,MAAM,OAAO,MAAM;IAClD,IAAI,KAAK;KACR,OAAO;KACP,MAAM;IACP,OAAO,IAAI,OAAO;KACjB,IAAI,MAAM,OACT,QAAQ;UACF,IAAI,SAAS,IACnB,OAAO;UAEP,IAAI,MAAM,IAAI;MACb,KAAK;MACL,IAAI,EAAE,OAAO,CAAC;MACd,IAAI,MAAM,MAAM,MAAM,MAAM,MAAM,IACjC,OAAO;WAEP,OAAO,KAAK;KAEd,OAAO,IAAI,MAAM,IAChB,OAAO,YAAY;UAEnB,OAAO;IAGV,OAAO,IAAI,MAAM,MAAM,MAAM,IAAI;KAChC,QAAQ;KACR,WAAW;IACZ,OAAO,IAAI,UAAU,KAAK,CAAC,GAC1B,OAAuC,EAAE,IAAI,EAAE;SACzC,IAAI,KAAK,KAAK,CAAC,GAAG;KACxB,YAAY;KACZ,IAAI,aAAa,EAAE,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,CAAC,EAAE;KAC9D,IAAI,IAAI,QACP,OAA6B,CAAC,KAAK,UAAU;KAE9C,OAA6B,CAAC,UAAU;IACzC,OAAO,IAAI,MAAM,IAChB,MAAM;SACA,IAAI,MAAM,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG;KACnE,SAAS;KACT,WAAW;KACX,OAAO,YAAY,EAAE,MAAM,IAAI,GAAG,QAAQ,YAAY,CAAC,CAAC;KACxD,IAAI,QAAQ,YAAY;IACzB,OAAO,IAAI,MAAM,IAAI;KACpB,IAAI,QAAQ,YAAY;KACxB,IAAI,CAAC,KACJ,OAAO;UAEP,KAAK,IAAI,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM,GAAG;MAC5C,IAAI,KAAK,MAAM,OAAO,EAAE;MACxB,IAAI,IAAI,QAAQ,EAAE,IAAI,GAAG;OACxB,SAAS;OACT,OAAO;MACR,OAAO,IAAI,cAAc,MACxB,YAAY,OAAO,OAAO,OAAO,OAAQ,OAAO,OAAO,IAAI;WACrD,IAAI,OAAO,OAAO,OAAO,OAAQ,OAAO,MAC9C,aAAa;KAEf;IAEF,OACC,OAAO;GAET;GAEA,IAAI,QACH,OAAmC;IAAE,IAAI;IAAQ,SAAS;GAAI;GAG/D,IAAI,KAAK;IACR,IAAI,cAAc,QAAQ,YAAY,GAAG;KACxC,MAAM,MAAM,UAAU;KACtB,MAAM;KACN,KAAK,IAAI,KAAK,GAAG,KAAK,WAAW,MAAM,GACtC,MAAM,MAAM,UAAU;IAExB;IACA,IAAI,QAAQ,MAAO,YAAY,MAAM,WAAW,GAC/C,MAAM,MAAM,UAAU;IAEvB,OAAO;GACR;GAEA,OAAO;EACR,CAAC,CAAC,CAAC,OAAO,SAAU,MAAM,KAAK;GAC9B,IAAI,OAAO,QAAQ,aAClB,OAAO;+BAEoB,CAAE,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,SAAU,OAAO;IACrE,KAAK,KAAK,UAAU;GACrB,CAAC;GACD,OAAO;EACR,GAAgC,CAAC,CAAE;CACpC;;CAGA,OAAO,UAAU,SAAS,MAAM,GAAG,KAAK,MAAM;EAC7C,IAAI,SAAS,cAAc,GAAG,KAAK,IAAI;EACvC,IAAI,OAAO,QAAQ,YAClB,OAAO;EAER,OAAO,OAAO,OAAO,SAAU,KAAK,GAAG;GACtC,IAAI,OAAO,MAAM,UAAU;IAC1B,IAAI,IAAI,UAAU;IAClB,OAAO;GACR;GACA,IAAI,KAAK,EAAE,MAAM,OAAO,MAAM,QAAQ,QAAQ,QAAQ,KAAK,GAAG,CAAC;GAC/D,IAAI,GAAG,WAAW,GAAG;IACpB,IAAI,IAAI,UAAU,GAAG;IACrB,OAAO;GACR;GACA,GAAG,OAAO,OAAO,CAAC,CAAC,QAAQ,SAAU,GAAG;IACvC,IAAI,IAAI,UAAU,gBAAgB,KAAK,CAAC,IACrC,KAAK,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,EAAE,IAC5B;GACJ,CAAC;GACD,OAAO;EACR,GAAgC,CAAC,CAAE;CACpC;;;;;CC3XA,QAAQ,QAAA,cAAA;CACR,QAAQ,QAAA,cAAA;;;;;ACsBR,MAAM,wCAAwB,IAAI,IAAI;CAAC;CAAa;CAAe;AAAa,CAAC;;;AAIjF,SAAS,aAAa,QAAyB;CAC7C,OAAO,eAAe,KAAK,MAAM;AACnC;AAOA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAK;CAAM;CAAM;AAAG,CAAC;AACnD,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAK;CAAM;CAAK;CAAM;AAAI,CAAC;AACzD,MAAM,eAAe;;;;;;AAOrB,SAAgB,UAAU,OAA4B;CAGpD,IAAI,kBAAkB,KAAK,KAAK,GAC9B,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAwB;CAMtD,MAAM,eAAe,oBAAoB,KAAK;CAE9C,IAAI;CACJ,IAAI;EACF,aAAA,GAAYA,mBAAAA,MAAAA,CAAW,QAAQ,MAC7B,MAAM,KAAK,KAAA,IAAY,GAAG,aAAa,KAAK,EAAE,EAChD;CACF,SAAS,OAAO;EACd,OAAO;GAAE,IAAI;GAAO,QAAQ,aAAc,MAAgB;EAAU;CACtE;CAKA,MAAM,OAAO,cAAc,SAAS;CACpC,MAAM,kBAAkB,gBAAgB,KAAK;CAE7C,MAAM,gBAA2B,CAAC,CAAC,CAAC;CACpC,KAAK,MAAM,KAAK,KAAK,QAAQ;EAC3B,IAAI,OAAO,MAAM,YAAY,aAAa,GAAG;EAE7C,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,aAAa,IAAI,EAAE,EAAE,GAAG;GAChE,IAAI,cAAc,GAAG,EAAE,CAAC,CAAE,SAAS,GAAG,cAAc,KAAK,CAAC,CAAC;GAC3D;EACF;EAEA,cAAc,GAAG,EAAE,CAAC,CAAE,KAAK,CAAC;CAC9B;CAEA,IAAI,cAAc,GAAG,EAAE,CAAC,CAAE,WAAW,GAAG,cAAc,IAAI;CAE1D,MAAM,WAAsB,CAAC;CAC7B,KAAK,MAAM,WAAW,eAAe;EACnC,MAAM,MAAM,aAAa,OAAO;EAChC,IAAI,CAAC,IAAI,IAAI,OAAO;EACpB,IAAI,IAAI,SAAS,SAAS,KAAK;GAAE,GAAG,IAAI;GAAS;EAAgB,CAAC;CACpE;CAEA,IAAI,SAAS,WAAW,GACtB,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAc;CAE5C,OAAO;EAAE,IAAI;EAAM;CAAS;AAC9B;AAEA,SAAS,aACP,QAGgC;CAChC,IAAI,OAAiB,CAAC;CACtB,IAAI,QAAkB,CAAC;CACvB,IAAI,SAAuD,CAAC;CAC5D,MAAM,sBAAM,IAAI,IAAY;CAE5B,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;EACtC,MAAM,IAAI,OAAO;EAEjB,IAAI,OAAO,MAAM,UAAU;GAIzB,IAAI,QAAQ,KAAK,CAAC,GAAG;IACnB,MAAM,OAAO,OAAO,IAAI;IACxB,IAAI,OAAO,SAAS,YAAY,QAAQ,QAAQ,aAAa,IAAI,KAAK,EAAE,GACtE;GAEJ;GACA,KAAK,KAAK,CAAC;GACX;EACF;EAEA,IAAI,aAAa,GAAG;EAEpB,IAAI,aAAa,GAAG;GAElB,KAAK,KAAK,EAAE,OAAO;GACnB,IAAI,IAAI,EAAE,OAAO;GACjB;EACF;EAEA,IAAI,EAAE,QAAQ,IACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,sBAAsB,cAAc,CAAC;EAAI;EAGvE,IAAI,aAAa,IAAI,EAAE,EAAE,GAAG;GAC1B,MAAM,OAAO,OAAO,IAAI;GACxB,IAAI,OAAO,SAAS,UAClB,OAAO;IAAE,IAAI;IAAO,QAAQ,iCAAiC,EAAE;GAAK;GAEtE;GAEA,IAAI,EAAE,OAAO,OAAO,EAAE,OAAO,MAAM;IAEjC,IAAI,sBAAsB,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;IAC3D,OAAO,KAAK;KAAE,MAAM,EAAE,OAAO,OAAO,WAAW;KAAS,MAAM;IAAK,CAAC;GACtE,OAAO,IAAI,EAAE,OAAO,KAAK;IACvB,IAAI,sBAAsB,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;IAC3D,MAAM,KAAK,IAAI;GACjB;GAEA;EACF;EAEA,OAAO;GAAE,IAAI;GAAO,QAAQ,mBAAmB,EAAE;EAAK;CACxD;CAEA,MAAM,WAAW,MAAc;EAC7B,IAAI,CAAC,EAAE,SAAS,YAAY,GAAG,OAAO;EACtC,IAAI,EAAE,WAAW,cAAc,EAAE;EACjC,IAAI,IAAI,CAAC;EACT,OAAO;CACT;CAEA,OAAO,KAAK,KAAK,MAAM,QAAQ,CAAC,CAAC;CACjC,SAAS,OAAO,KAAK,OAAO;EAAE,GAAG;EAAG,MAAM,QAAQ,EAAE,IAAI;CAAE,EAAE;CAC5D,QAAQ,MAAM,IAAI,OAAO;CAMzB,MAAM,YAAY,eAAe,IAAI;CACrC,IAAI,UAAU,WAAW,GACvB,OAAO;EAAE,IAAI;EAAM,SAAS,KAAA;CAAU;CAGxC,OAAO;EACL,IAAI;EACJ,SAAS;GACP,MAAM,UAAU,MAAM,CAAC;GACvB,KAAK,UAAU;GACf;GACA;GACA;EACF;CACF;AACF;;;;;AAWA,MAAM,WAAiD;CACrD,SAAS,CAAC;CACV,QAAQ,EAAE,4BAAY,IAAI,IAAI;EAAC;EAAM;EAAM;EAAM;EAAM;CAAI,CAAC,EAAE;CAC9D,MAAM,EAAE,4BAAY,IAAI,IAAI,CAAC,MAAM,cAAc,CAAC,EAAE;CACpD,OAAO,CAAC;CACR,MAAM,CAAC;AACT;;;;;AAMA,SAAS,oBAAoB,OAAwB;CACnD,IAAI,WAAW;CACf,KAAK,MAAM,KAAK,OAAO;EACrB,IAAI,MAAM,KAAK;GACb,WAAW,CAAC;GACZ;EACF;EACA,IAAI,MAAM,OAAO,CAAC,UAAU,OAAO;CACrC;CACA,OAAO;AACT;;;;;AAMA,SAAS,eAAe,MAA0B;CAChD,IAAI,UAAU;CACd,OAAO,QAAQ,SAAS,GAAG;EACzB,MAAM,OAAO,SAAS,QAAQ;EAC9B,IAAI,CAAC,MAAM;EACX,MAAM,aAAa,KAAK,8BAAc,IAAI,IAAI;EAC9C,IAAI,IAAI;EACR,OAAO,IAAI,QAAQ,UAAU,QAAQ,EAAE,CAAC,WAAW,GAAG,GAAG;GACvD,MAAM,OAAO,QAAQ;GACrB;GACA,IAAI,WAAW,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ;EAClD;EACA,UAAU,QAAQ,MAAM,CAAC;CAC3B;CACA,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAS,cAAc,QAAgE;CACrF,MAAM,MAAe,CAAC;CACtB,IAAI,kBAAkB;CACtB,IAAI,IAAI;CACR,OAAO,IAAI,OAAO,QAAQ;EACxB,MAAM,IAAI,OAAO;EACjB,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,EAAE,OAAO,KAAK;GACtD,MAAM,UAAU,IAAI,GAAG,EAAE,MAAM;GAC/B,IAAI,SAAS,IAAI,IAAI;GAGrB,IAAI,QAAQ;GACZ,IAAI,IAAI,IAAI;GACZ,OAAO,IAAI,OAAO,UAAU,QAAQ,GAAG;IACrC,MAAM,KAAK,OAAO;IAClB,IAAI,OAAO,OAAO,YAAY,QAAQ,IAAI;KACxC,IAAI,GAAG,OAAO,KAAK;UACd,IAAI,GAAG,OAAO,KAAK;IAC1B;IACA,IAAI,QAAQ,GAAG;GACjB;GACA,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG,CAAC;GAEnC,IAAI,SACF,kBAAkB;QAEb;IACL,MAAM,MAAM,cAAc,KAAK;IAC/B,IAAI,IAAI,iBAAiB,kBAAkB;IAG3C,IAAI,KAAK,EAAE,IAAI,IAAI,GAAG,GAAG,IAAI,QAAQ,EAAE,IAAI,IAAI,CAAC;GAClD;GACA,IAAI,IAAI;GACR;EACF;EAEA,IAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,EAAE,OAAO,KAAK;GAGtD;GACA;EACF;EAEA,IAAI,KAAK,CAAC;EACV;CACF;CACA,OAAO;EAAE;EAAiB,QAAQ;CAAI;AACxC;;;;;AChSA,SAAS,YAAY,MAA0B;CAC7C,OAAO,KAAK,QAAQ,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,MAAM,EAAE;AAC1D;;AAGA,SAAS,sBAAsB,MAA0B;CACvD,MAAM,MAAgB,CAAC;CACvB,IAAI,YAAY;CAChB,KAAK,MAAM,KAAK,MAAM;EACpB,IAAI,EAAE,WAAW,GAAG,KAAK,MAAM,IAAI;EACnC,IAAI,CAAC,WAAW;GACd,YAAY;GACZ;EACF;EACA,IAAI,KAAK,CAAC;CACZ;CACA,OAAO;AACT;;AAKA,MAAM,kCAAkB,IAAI,IAAI;CAAC;CAAM;CAAgB;CAAM;AAAQ,CAAC;;;;;AAMtE,SAAS,SAAS,MAAwD;CACxE,MAAM,UAAoB,CAAC;CAC3B,MAAM,QAAkB,CAAC;CACzB,IAAI,sBAAsB,CAAC,KAAK,MAC7B,MAAM,MAAM,QAAQ,MAAM,kBAAkB,MAAM,QAAQ,MAAM,QACnE;CAEA,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,EAAE,WAAW,GAAG,GAAG;GACrB,IAAI,gBAAgB,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ;IACjD,IAAI,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,KAAK,KAAK,IAAI,EAAE;IAChE;GACF;GACA;EACF;EACA,IAAI,qBAAqB;GACvB,QAAQ,KAAK,CAAC;GACd,sBAAsB;GACtB;EACF;EACA,MAAM,KAAK,CAAC;CACd;CACA,OAAO;EAAE;EAAO;CAAQ;AAC1B;AAEA,MAAM,8BAAc,IAAI,IAAI,CAAC,MAAM,YAAY,CAAC;AAEhD,SAAS,SAAS,MAA0B;CAC1C,OAAO,SAAS,IAAI,CAAC,CAAC;AACxB;AAEA,SAAS,UAAU,MAA0B;CAG3C,OADgB,KAAK,MAAM,MAAM,YAAY,IAAI,CAAC,KAAK,EAAE,WAAW,KAAK,CAC5D,IAAI,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,MAAyB;CAG1C,KAAK,MAAM,UAAU,SAAS,IAAI,CAAC,CAAC,SAClC,IAAI,2BAA2B,KAAK,MAAM,GAAG,OAAO;CAEtD,OAAO;AACT;AAIA,SAAS,SAAS,MAA0B;CAG1C,IAAI,YAAY;CAChB,IAAI,aAAa;CACjB,MAAM,QAAkB,CAAC;CACzB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,QAAQ,MAAM,UAAU;GAChC,IAAI,IAAI,IAAI,KAAK,QAAQ,MAAM,KAAK,KAAK,IAAI,EAAE;GAC/C;GACA,YAAY;GACZ,aAAa;GACb;EACF;EACA,IAAI,EAAE,WAAW,GAAG,GAAG;GAErB,IAAI,MAAM,QAAQ,MAAM,MAAM;GAC9B;EACF;EACA,IAAI,CAAC,WAAW;GACd,YAAY;GACZ;EACF;EACA,MAAM,KAAK,CAAC;CACd;CACA,OAAO,aAAa,QAAQ;AAC9B;AAEA,SAAS,UAAU,MAAyB;CAK1C,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,IAAI,KAAK;EACf,IAAI,MAAM,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAM,MAAM;GAC5D;GACA;EACF;EACA,IAAI,EAAE,WAAW,GAAG,GAAG;EACvB,IAAI,CAAC,WAAW;GACd,YAAY;GACZ,IAAI,OAAO,KAAK,CAAC,GAAG,OAAO;EAC7B;CACF;CACA,OAAO;AACT;AAIA,SAAS,UAAU,MAA0B;CAG3C,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,KAAK,MAAM;EACpB,IAAI,EAAE,WAAW,GAAG,GAAG;EACvB,IAAI,KAAK,CAAC;CACZ;CACA,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC,GAAG;AACpC;AAEA,SAAS,WAAW,MAAyB;CAG3C,OAAO,KAAK,MACT,MAAM,MAAM,aAAa,MAAM,WAAW,MAAM,cAAc,MAAM,SAAS,MAAM,QACtF;AACF;AAOA,MAAM,oBAA6B;AAInC,MAAa,QAA2C;CACtD,KAAK,EAAE,QAAQ,YAAY;CAC3B,KAAK;EAAE,OAAO;EAAU,QAAQ;CAAU;CAC1C,UAAU,CAAC;CACX,KAAK,EAAE,OAAO,YAAY;CAC1B,IAAI,CAAC;CACL,KAAK,EAAE,OAAO,YAAY;CAC1B,MAAM,EAAE,OAAO,YAAY;CAC3B,SAAS,CAAC;CACV,MAAM,CAAC;CACP,MAAM,EAAE,QAAQ,YAAY;CAC5B,MAAM,EAAE,QAAQ,YAAY;CAC5B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM;EAAE,OAAO;EAAW,QAAQ;CAAW;CAC7C,MAAM,EAAE,OAAO,sBAAsB;CACrC,MAAM,EAAE,OAAO,YAAY;CAC3B,SAAS,EAAE,OAAO,YAAY;CAC9B,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,QAAQ,CAAC;CACT,KAAK,CAAC;CACN,UAAU,EAAE,OAAO,YAAY;CAC/B,UAAU,EAAE,OAAO,YAAY;CAC/B,IAAI,EAAE,OAAO,sBAAsB;CACnC,KAAK;EAAE,OAAO;EAAU,QAAQ;EAAW,QAAQ;CAAU;CAC7D,MAAM,EAAE,OAAO,YAAY;CAC3B,QAAQ,EAAE,QAAQ,YAAY;CAC9B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,EAAE,OAAO,YAAY;CAC3B,IAAI,EAAE,OAAO,YAAY;CACzB,KAAK,EAAE,OAAO,YAAY;AAC5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaly/agent",
-  "version": "0.0.12",
+  "version": "0.1.0",
   "description": "Agent runtime, sessions, tools, permissions, compaction, and tasks for zaly.",
   "keywords": [
     "agent",
@@ -33,27 +33,65 @@
     "access": "public"
   },
   "dependencies": {
-    "@zaly/ai": "0.0.12",
-    "@zaly/shared": "0.0.12",
+    "@zaly/ai": "0.1.0",
+    "@zaly/shared": "0.1.0",
     "pathe": "^2.0.3"
   },
   "devDependencies": {
+    "@joplin/turndown-plugin-gfm": "^1.0.68",
+    "@mozilla/readability": "^0.6.0",
     "@types/shell-quote": "^1.7.5",
-    "ignore": "^7.0.12",
+    "@types/turndown": "^5.0.6",
+    "ignore": "^7.0.13",
     "jsonpath-plus": "^11.2.1",
-    "shell-quote": "^1.12.0"
+    "linkedom": "^0.18.14",
+    "shell-quote": "^1.12.0",
+    "turndown": "^7.2.4"
   },
   "peerDependencies": {
-    "typebox": "^1.3.37"
+    "typebox": "^1.4.2"
   },
   "engines": {
     "bun": ">=1.2",
     "node": ">=22.18.0"
   },
   "inlinedDependencies": {
-    "ignore": "7.0.12",
+    "@acemir/cssom": "0.9.32",
+    "@joplin/turndown-plugin-gfm": "1.0.68",
+    "@mixmark-io/domino": "2.2.0",
+    "@mozilla/readability": "0.6.0",
+    "boolbase": "2.0.0",
+    "css-select": "7.0.0",
+    "css-what": "8.0.0",
+    "dom-serializer": [
+      "2.0.0",
+      "3.1.1"
+    ],
+    "domelementtype": [
+      "2.3.0",
+      "3.0.0"
+    ],
+    "domhandler": [
+      "5.0.3",
+      "6.0.1"
+    ],
+    "domutils": [
+      "3.2.2",
+      "4.0.2"
+    ],
+    "entities": [
+      "4.5.0",
+      "7.0.1",
+      "8.1.0"
+    ],
+    "htmlparser2": "10.1.0",
+    "ignore": "7.0.13",
     "jsonpath-plus": "11.2.1",
-    "shell-quote": "1.12.0"
+    "linkedom": "0.18.14",
+    "nth-check": "3.0.1",
+    "shell-quote": "1.12.0",
+    "turndown": "7.2.4",
+    "uhyphen": "0.2.0"
   },
   "scripts": {
     "build": "z build",

package/dist/bash-COgq4W7U.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bash-COgq4W7U.mjs","names":[],"sources":["../src/tools/bash.ts"],"sourcesContent":["import type { MetaOf, MetaPart, Streamable, TextPart, ToolResult } from \"@zaly/ai\"\n\nimport { defineTool } from \"@zaly/ai\"\nimport { normPath, randomHash } from \"@zaly/shared\"\nimport { bufferedTailStream, Spawn, TextStream } from \"@zaly/shared/process\"\nimport { cleanTextTui } from \"@zaly/shared/text\"\nimport { tmpdir } from \"node:os\"\nimport { join } from \"pathe\"\nimport { Type } from \"typebox\"\nimport { truncate } from \"../utils/truncate.ts\"\n\nexport type BashTool = typeof bashTool\nexport type BashToolMeta = MetaOf<BashTool>\n\n/**\n * Run a bash command and capture its output.\n *\n * Lifecycle is fully owned by the Tasks harness:\n *\n *  - The tool returns a `Streamable` immediately. Tasks races its `done`\n *    against a grace window. Sub-grace commands appear synchronous to the\n *    model; longer ones promote to a background task and the model gets\n *    a partial snapshot now plus a system-message completion later.\n *  - There's no blocking wait: a backgrounded command's result arrives\n *    automatically as a `task-done` system message. `task_poll` peeks at\n *    incremental output, `task_stop` aborts, and `wakeup` covers\n *    poll-cadence re-checks. (No more bash_wait / bash_kill — the generic\n *    surface covers it.)\n *  - `timeout` is now a real kill deadline. The Spawn aborts itself when\n *    it elapses; the streamable's `done` resolves with `killReason: \"timeout\"`\n *    in the snapshot. Defaults to 10 minutes (long enough for builds, tests,\n *    installs); pass shorter for tighter deadlines.\n *\n * Output truncation — large outputs are summarised inline as head + tail\n * (split from `max_lines`). Only when truncation actually fires does\n * the tool flush the captured bytes to a per-spawn log file under\n * `tmpdir()/zaly-bash/` and surface `truncated.fullOutputPath`; small\n * outputs that fit inline never touch disk. The model can `read({ path })`\n * the surfaced log to inspect the full bytes.\n *\n * Cancellation — `ctx.signal` (agent abort) propagates to the spawn.\n * `task_stop(id)` calls the streamable's `abort()`, which aborts the spawn.\n */\nconst DEFAULT_TIMEOUT_MS = 600_000 // 10 min — real kill deadline\nconst DEFAULT_MAX_BUFFER = 5 * 1024 * 1024 // 5 MB\n\n// oxlint-disable-next-line sort-keys -- semantic field order: name, desc, params, call\nexport const bashTool = defineTool({\n  name: \"bash\",\n  desc:\n    \"Run a bash command. Returns its output once the command exits, or a \" +\n    \"partial snapshot if the command is still running after the harness's \" +\n    \"grace window — in that case the eventual result arrives as a system \" +\n    \"message. Its result then arrives automatically when it finishes; use \" +\n    \"`task_poll` to peek at output, `task_stop` to terminate one. `timeout` \" +\n    \"is a real kill deadline.\",\n  params: Type.Object({\n    command: Type.String({ description: \"The shell command to run, evaluated by `bash -c`.\" }),\n    description: Type.Optional(\n      Type.String({\n        description:\n          \"Short, human-readable description of what this command does. \" +\n          \"Shown to the user in the TUI alongside the command. Keep it under \" +\n          \"~10 words. Don't restate the command itself — describe the intent \" +\n          '(e.g. \"check the test suite passes\", not \"run bun test\").',\n      })\n    ),\n    max_lines: Type.Optional(\n      Type.Integer({\n        default: 200,\n        description:\n          \"Cap on lines kept inline in the result. Split as head + tail \" +\n          \"(half each). Lower for commands you only need pass/fail on \" +\n          \"(`max_lines: 20`); raise when middle output matters. Output \" +\n          \"above the cap is elided in the inline result, but the full \" +\n          \"log is always written to disk and surfaced as \" +\n          \"`truncated.fullOutputPath` — `read` it if you need to dig deeper.\",\n        minimum: 10,\n      })\n    ),\n    timeout: Type.Optional(\n      Type.Integer({\n        default: DEFAULT_TIMEOUT_MS,\n        description:\n          \"Kill deadline in ms. The process IS killed when this elapses (SIGTERM → SIGKILL).\",\n        minimum: 1,\n      })\n    ),\n  }),\n\n  async preflight(args, ctx) {\n    // Permission gate. The bash handler validates the parsed command\n    // (segments, redirects, sensitive paths) and composes file-scope\n    // checks for any redirect targets via `ctx.validate`.\n    await ctx.need?.(\"bash\", args.command)\n  },\n\n  async call(args, ctx): Promise<Streamable> {\n    const cwd = normPath(ctx.cwd)\n    const timeout = args.timeout\n    const startedAt = Date.now()\n\n    // Buffer in memory; only flip to disk if a snapshot reports the\n    // output exceeded the inline cap.\n    const { stream, startTailing } = bufferedTailStream(new TextStream())\n    const logState: { path?: string } = {}\n    const logPath = (): string => {\n      if (!logState.path) {\n        logState.path = join(\n          ctx.sessionDir ?? join(tmpdir(), \"zaly-bash\"),\n          `bash-${randomHash()}.log`\n        )\n        startTailing(logState.path)\n      }\n      return logState.path\n    }\n\n    const proc = new Spawn(args.command, [], {\n      bash: true,\n      cwd,\n      maxBuffer: DEFAULT_MAX_BUFFER,\n      signal: ctx.signal,\n      stderr: stream,\n      stdout: stream,\n      timeout,\n    })\n\n    const cursor = { combined: 0 }\n\n    return {\n      abort: () => {\n        if (!proc.done) proc.abort({ delay: 5000 })\n      },\n      done: proc.result.then(\n        () => undefined,\n        () => undefined\n      ),\n      // Non-consuming check used by heartbeats: is there incremental\n      // output the model hasn't seen since the last `poll()`? Lets the\n      // heartbeat flag this task with `*new*` without advancing the\n      // cursor (which would consume the bytes for any later poll).\n      hasNew: () => proc.stdout.length > cursor.combined,\n      poll: () => snapshot({ cursor, logPath, maxLines: args.max_lines ?? 200, proc, startedAt }),\n    }\n  },\n})\n\n// ── Internals ─────────────────────────────────────────────────────────\n\ninterface SnapshotOpts {\n  proc: Spawn<string, string>\n  startedAt: number\n  /** Lazily allocate the log path on first call — flips\n   *  bufferedTailStream into tailing mode so subsequent chunks land on\n   *  disk too. Idempotent. */\n  logPath: () => string\n  cursor: { combined: number }\n  maxLines: number\n}\n\n/** Build the current `ToolResult` snapshot for a running or exited bash\n *  command. Slices incremental output since the last poll, summarises\n *  it head+tail, and stamps a `<bash>` MetaPart with status info. */\nfunction snapshot({\n  proc,\n  startedAt,\n  logPath,\n  cursor,\n  maxLines,\n}: SnapshotOpts): ToolResult & { running: boolean } {\n  // Slice incremental combined output since the cursor and advance.\n  let text = proc.stdout.slice(cursor.combined)\n  cursor.combined += text.length // cursor is over bytes, not cleaned text\n\n  // clean text, but keep styles. Styles are stripped in the provider\n  // content transform pipelines\n  text = cleanTextTui(text)\n\n  const status: \"exited\" | \"running\" = proc.done ? \"exited\" : \"running\"\n  const meta: Record<string, unknown> = {\n    durationMs: Date.now() - startedAt,\n    status,\n  }\n  if (status === \"exited\") {\n    meta.code = proc.exitCode ?? -1\n    if (proc.killReason) meta.killReason = proc.killReason\n  }\n\n  const summary = truncate(text, { maxLines, strategy: \"head+tail\" })\n  if (summary.truncated) {\n    const log = logPath()\n    meta.truncated = {\n      fullOutputPath: log,\n      totalLines: summary.origLines,\n    }\n  }\n\n  const parts: (MetaPart | TextPart)[] = [{ data: meta, tag: \"bash\", type: \"meta\" }]\n  if (summary.text !== \"\") parts.push({ text: summary.text, type: \"text\" })\n\n  return {\n    content: parts,\n    isError: false,\n    running: !proc.done,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAG3B,MAAa,WAAW,WAAW;CACjC,MAAM;CACN,MACE;CAMF,QAAQ,KAAK,OAAO;EAClB,SAAS,KAAK,OAAO,EAAE,aAAa,oDAAoD,CAAC;EACzF,aAAa,KAAK,SAChB,KAAK,OAAO,EACV,aACE,iQAIJ,CAAC,CACH;EACA,WAAW,KAAK,SACd,KAAK,QAAQ;GACX,SAAS;GACT,aACE;GAMF,SAAS;EACX,CAAC,CACH;EACA,SAAS,KAAK,SACZ,KAAK,QAAQ;GACX,SAAS;GACT,aACE;GACF,SAAS;EACX,CAAC,CACH;CACF,CAAC;CAED,MAAM,UAAU,MAAM,KAAK;EAIzB,MAAM,IAAI,OAAO,QAAQ,KAAK,OAAO;CACvC;CAEA,MAAM,KAAK,MAAM,KAA0B;EACzC,MAAM,MAAM,SAAS,IAAI,GAAG;EAC5B,MAAM,UAAU,KAAK;EACrB,MAAM,YAAY,KAAK,IAAI;EAI3B,MAAM,EAAE,QAAQ,iBAAiB,mBAAmB,IAAI,WAAW,CAAC;EACpE,MAAM,WAA8B,CAAC;EACrC,MAAM,gBAAwB;GAC5B,IAAI,CAAC,SAAS,MAAM;IAClB,SAAS,OAAO,KACd,IAAI,cAAc,KAAK,OAAO,GAAG,WAAW,GAC5C,QAAQ,WAAW,EAAE,KACvB;IACA,aAAa,SAAS,IAAI;GAC5B;GACA,OAAO,SAAS;EAClB;EAEA,MAAM,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC,GAAG;GACvC,MAAM;GACN;GACA,WAAW;GACX,QAAQ,IAAI;GACZ,QAAQ;GACR,QAAQ;GACR;EACF,CAAC;EAED,MAAM,SAAS,EAAE,UAAU,EAAE;EAE7B,OAAO;GACL,aAAa;IACX,IAAI,CAAC,KAAK,MAAM,KAAK,MAAM,EAAE,OAAO,IAAK,CAAC;GAC5C;GACA,MAAM,KAAK,OAAO,WACV,KAAA,SACA,KAAA,CACR;GAKA,cAAc,KAAK,OAAO,SAAS,OAAO;GAC1C,YAAY,SAAS;IAAE;IAAQ;IAAS,UAAU,KAAK,aAAa;IAAK;IAAM;GAAU,CAAC;EAC5F;CACF;AACF,CAAC;;;;AAkBD,SAAS,SAAS,EAChB,MACA,WACA,SACA,QACA,YACkD;CAElD,IAAI,OAAO,KAAK,OAAO,MAAM,OAAO,QAAQ;CAC5C,OAAO,YAAY,KAAK;CAIxB,OAAO,aAAa,IAAI;CAExB,MAAM,SAA+B,KAAK,OAAO,WAAW;CAC5D,MAAM,OAAgC;EACpC,YAAY,KAAK,IAAI,IAAI;EACzB;CACF;CACA,IAAI,WAAW,UAAU;EACvB,KAAK,OAAO,KAAK,YAAY;EAC7B,IAAI,KAAK,YAAY,KAAK,aAAa,KAAK;CAC9C;CAEA,MAAM,UAAU,SAAS,MAAM;EAAE;EAAU,UAAU;CAAY,CAAC;CAClE,IAAI,QAAQ,WAEV,KAAK,YAAY;EACf,gBAFU,QAEQ;EAClB,YAAY,QAAQ;CACtB;CAGF,MAAM,QAAiC,CAAC;EAAE,MAAM;EAAM,KAAK;EAAQ,MAAM;CAAO,CAAC;CACjF,IAAI,QAAQ,SAAS,IAAI,MAAM,KAAK;EAAE,MAAM,QAAQ;EAAM,MAAM;CAAO,CAAC;CAExE,OAAO;EACL,SAAS;EACT,SAAS;EACT,SAAS,CAAC,KAAK;CACjB;AACF"}

package/dist/fetch-VKhSWdEh.mjs

@@ -1,111 +0,0 @@
-import { defineTool, toAttachment } from "@zaly/ai";
-import { Type } from "typebox";
-//#region src/tools/fetch.ts
-const DEFAULT_MAX_BODY_BYTES = 262144;
-/**
-* Fetch a URL and return the response — JSON when the server speaks JSON,
-* raw text otherwise. Optional `jsonpath` filters the parsed JSON to a
-* subset, which keeps tokens down on chatty APIs.
-*
-* Scope: API endpoints. For HTML pages (browsing, content extraction),
-* the optional `@zaly/browser` package provides browser-backed tools that
-* return a structured a11y tree — much better than raw HTML through this
-* tool. Pointing this at an HTML URL works but the response is a string
-* blob the model has to slog through.
-*
-* Permissions: routes through the `fetch` scope when the agent wires up
-* tool-side permission checks. Until then, callers should restrict via
-* a wrapping permission layer (rule-based or explicit allowlist).
-*/
-const fetchTool = defineTool({
-	desc: "Fetch a URL and return the response. JSON responses are parsed; use `jsonpath` (e.g. `$.items[*].name`) to extract a subset and minimise tokens.Image & PDF are returned as attachments. Best for APIs — for web pages, use the browser tool.",
-	name: "fetch",
-	parallel: true,
-	params: Type.Object({
-		url: Type.String({ description: "Absolute URL." }),
-		method: Type.Optional(Type.Union([
-			Type.Literal("GET"),
-			Type.Literal("POST"),
-			Type.Literal("PUT"),
-			Type.Literal("PATCH"),
-			Type.Literal("DELETE")
-		], {
-			default: "GET",
-			description: "HTTP method."
-		})),
-		headers: Type.Optional(Type.Record(Type.String(), Type.String(), { description: "Request headers." })),
-		query: Type.Optional(Type.Record(Type.String(), Type.String(), { description: "Query string params, appended to the URL." })),
-		body: Type.Optional(Type.String({ description: "Request body as a string. For JSON, stringify it yourself and set `headers: { 'Content-Type': 'application/json' }`." })),
-		jsonpath: Type.Optional(Type.String({ description: "JSONPath expression applied to a JSON response, e.g. `$.items[*].name`. Returns the matched values as an array." }))
-	}),
-	async call(args) {
-		const t0 = Date.now();
-		const url = new URL(args.url);
-		if (args.query) for (const [k, v] of Object.entries(args.query)) url.searchParams.set(k, v);
-		const res = await fetch(url, {
-			body: args.body,
-			headers: args.headers,
-			method: args.method
-		});
-		const contentType = res.headers.get("content-type") ?? "";
-		const bytes = new Uint8Array(await res.arrayBuffer());
-		const meta = {
-			contentType: contentType || void 0,
-			durationMs: Date.now() - t0,
-			ok: res.ok,
-			status: res.status,
-			statusText: res.statusText
-		};
-		const { fileDetect } = await import("@zaly/shared/detect");
-		const file = await fileDetect({
-			data: bytes,
-			mime: contentType || void 0,
-			url: url.toString()
-		});
-		if (file) {
-			const att = await toAttachment(file);
-			if (att) return [{
-				data: meta,
-				tag: "fetch",
-				type: "meta"
-			}, att];
-		}
-		const text = new TextDecoder().decode(bytes);
-		const isJson = file?.type === "text" && file.format === "json";
-		let body = text;
-		if (isJson) try {
-			body = JSON.parse(text);
-		} catch {}
-		if (args.jsonpath !== void 0 && body !== text) {
-			const { JSONPath } = await import("./index-node-esm-CJsN8G51.mjs");
-			body = JSONPath({
-				json: body,
-				path: args.jsonpath
-			});
-		}
-		const bodyText = typeof body === "string" ? body : JSON.stringify(body, void 0, 2);
-		const totalBytes = Buffer.byteLength(bodyText, "utf8");
-		const truncated = totalBytes > DEFAULT_MAX_BODY_BYTES;
-		const displayed = truncated ? bodyText.slice(0, DEFAULT_MAX_BODY_BYTES) : bodyText;
-		if (truncated) meta.truncated = {
-			bytes: totalBytes,
-			hint: args.jsonpath === void 0 ? "body exceeded limit; pass `jsonpath` to filter, or use the browser tool for HTML." : "filtered body still exceeded limit; tighten the JSONPath expression.",
-			limit: DEFAULT_MAX_BODY_BYTES
-		};
-		const parts = [{
-			data: meta,
-			tag: "fetch",
-			type: "meta"
-		}];
-		if (displayed !== "") parts.push({
-			format: isJson ? "json" : void 0,
-			text: displayed,
-			type: "text"
-		});
-		return parts;
-	}
-});
-//#endregion
-export { fetchTool };
-
-//# sourceMappingURL=fetch-VKhSWdEh.mjs.map

package/dist/fetch-VKhSWdEh.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetch-VKhSWdEh.mjs","names":[],"sources":["../src/tools/fetch.ts"],"sourcesContent":["import type { Attachment, MetaPart, TextPart } from \"@zaly/ai\"\n\nimport { defineTool, toAttachment } from \"@zaly/ai\"\nimport { Type } from \"typebox\"\n\nconst DEFAULT_MAX_BODY_BYTES = 256 * 1024 // 256 KB — generous for APIs, caps runaway HTML pages\n\n/**\n * Fetch a URL and return the response — JSON when the server speaks JSON,\n * raw text otherwise. Optional `jsonpath` filters the parsed JSON to a\n * subset, which keeps tokens down on chatty APIs.\n *\n * Scope: API endpoints. For HTML pages (browsing, content extraction),\n * the optional `@zaly/browser` package provides browser-backed tools that\n * return a structured a11y tree — much better than raw HTML through this\n * tool. Pointing this at an HTML URL works but the response is a string\n * blob the model has to slog through.\n *\n * Permissions: routes through the `fetch` scope when the agent wires up\n * tool-side permission checks. Until then, callers should restrict via\n * a wrapping permission layer (rule-based or explicit allowlist).\n */\n// oxlint-disable-next-line sort-keys\nexport const fetchTool = defineTool({\n  desc:\n    `Fetch a URL and return the response. JSON responses are parsed; use \\`jsonpath\\` (e.g. \\`$.items[*].name\\`) to extract a subset and minimise tokens.` +\n    `Image & PDF are returned as attachments. Best for APIs — for web pages, use the browser tool.`,\n  name: \"fetch\",\n  parallel: true,\n\n  // oxlint-disable-next-line sort-keys -- semantic param order: url, method, headers, query, body, jsonpath\n  params: Type.Object({\n    url: Type.String({ description: \"Absolute URL.\" }),\n    method: Type.Optional(\n      Type.Union(\n        [\n          Type.Literal(\"GET\"),\n          Type.Literal(\"POST\"),\n          Type.Literal(\"PUT\"),\n          Type.Literal(\"PATCH\"),\n          Type.Literal(\"DELETE\"),\n        ],\n        { default: \"GET\", description: \"HTTP method.\" }\n      )\n    ),\n    headers: Type.Optional(\n      Type.Record(Type.String(), Type.String(), {\n        description: \"Request headers.\",\n      })\n    ),\n    query: Type.Optional(\n      Type.Record(Type.String(), Type.String(), {\n        description: \"Query string params, appended to the URL.\",\n      })\n    ),\n    body: Type.Optional(\n      Type.String({\n        description:\n          \"Request body as a string. For JSON, stringify it yourself and \" +\n          \"set `headers: { 'Content-Type': 'application/json' }`.\",\n      })\n    ),\n    jsonpath: Type.Optional(\n      Type.String({\n        description:\n          \"JSONPath expression applied to a JSON response, e.g. \" +\n          \"`$.items[*].name`. Returns the matched values as an array.\",\n      })\n    ),\n  }),\n  async call(args): Promise<(Attachment | MetaPart | TextPart)[]> {\n    const t0 = Date.now()\n    const url = new URL(args.url)\n    if (args.query) {\n      for (const [k, v] of Object.entries(args.query)) url.searchParams.set(k, v)\n    }\n\n    const res = await fetch(url, {\n      body: args.body,\n      headers: args.headers,\n      method: args.method,\n    })\n\n    const contentType = res.headers.get(\"content-type\") ?? \"\"\n    const bytes = new Uint8Array(await res.arrayBuffer())\n\n    const meta: Record<string, unknown> = {\n      contentType: contentType || undefined,\n      durationMs: Date.now() - t0,\n      ok: res.ok,\n      status: res.status,\n      statusText: res.statusText,\n    }\n\n    // Magic-byte detection on the response bytes — catches mislabeled\n    // content (HTML served at /file.pdf, images served as\n    // application/octet-stream, etc.). Inlines as base64 (same shape as\n    // the `read` tool) so the model gets the bytes without the provider\n    // re-fetching from its own IP. Only attach kinds the model accepts;\n    // unsupported kinds fall through to the text branch (rendered via\n    // `<image>` / `<pdf>` placeholders by the wire pipeline).\n    const { fileDetect } = await import(\"@zaly/shared/detect\")\n    const file = await fileDetect({\n      data: bytes,\n      mime: contentType || undefined,\n      url: url.toString(),\n    })\n    if (file) {\n      const att = await toAttachment(file)\n      if (att) return [{ data: meta, tag: \"fetch\", type: \"meta\" }, att]\n    }\n\n    const text = new TextDecoder().decode(bytes)\n    // `detectTextFormat` (inside fileDetect) already weighs MIME,\n    // extension, and content sniff — reuse its verdict instead of a\n    // parallel `looksLikeJson` heuristic.\n    const isJson = file?.type === \"text\" && file.format === \"json\"\n\n    let body: unknown = text\n    if (isJson) {\n      try {\n        body = JSON.parse(text)\n      } catch {\n        // Server lied about content-type; keep as text.\n      }\n    }\n\n    if (args.jsonpath !== undefined && body !== text) {\n      // Lazy-import — `jsonpath-plus` is only paid for when actually used,\n      // and it bundles to a few hundred KB which we'd rather not load on\n      // every fetch that doesn't filter.\n      const { JSONPath } = await import(\"jsonpath-plus\")\n      // oxlint-disable-next-line new-cap -- jsonpath-plus exports as TitleCase\n      body = JSONPath({ json: body as object, path: args.jsonpath })\n    }\n\n    // Stringify the body for display. JSON pretty-prints; raw text is\n    // used as-is.\n    const bodyText = typeof body === \"string\" ? body : JSON.stringify(body, undefined, 2)\n\n    // Cap the body before it reaches the model. Total bytes received is\n    // surfaced via the meta so the model can decide whether to refetch\n    // with `jsonpath` or use a different tool (browser for HTML, etc.).\n    const totalBytes = Buffer.byteLength(bodyText, \"utf8\")\n    const truncated = totalBytes > DEFAULT_MAX_BODY_BYTES\n    const displayed = truncated ? bodyText.slice(0, DEFAULT_MAX_BODY_BYTES) : bodyText\n\n    if (truncated) {\n      meta.truncated = {\n        bytes: totalBytes,\n        hint:\n          args.jsonpath === undefined\n            ? \"body exceeded limit; pass `jsonpath` to filter, or use the browser tool for HTML.\"\n            : \"filtered body still exceeded limit; tighten the JSONPath expression.\",\n        limit: DEFAULT_MAX_BODY_BYTES,\n      }\n    }\n\n    const parts: (MetaPart | TextPart)[] = [{ data: meta, tag: \"fetch\", type: \"meta\" }]\n    if (displayed !== \"\")\n      parts.push({ format: isJson ? \"json\" : undefined, text: displayed, type: \"text\" })\n    return parts\n  },\n})\n"],"mappings":";;;AAKA,MAAM,yBAAyB;;;;;;;;;;;;;;;;AAkB/B,MAAa,YAAY,WAAW;CAClC,MACE;CAEF,MAAM;CACN,UAAU;CAGV,QAAQ,KAAK,OAAO;EAClB,KAAK,KAAK,OAAO,EAAE,aAAa,gBAAgB,CAAC;EACjD,QAAQ,KAAK,SACX,KAAK,MACH;GACE,KAAK,QAAQ,KAAK;GAClB,KAAK,QAAQ,MAAM;GACnB,KAAK,QAAQ,KAAK;GAClB,KAAK,QAAQ,OAAO;GACpB,KAAK,QAAQ,QAAQ;EACvB,GACA;GAAE,SAAS;GAAO,aAAa;EAAe,CAChD,CACF;EACA,SAAS,KAAK,SACZ,KAAK,OAAO,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,EACxC,aAAa,mBACf,CAAC,CACH;EACA,OAAO,KAAK,SACV,KAAK,OAAO,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,EACxC,aAAa,4CACf,CAAC,CACH;EACA,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aACE,uHAEJ,CAAC,CACH;EACA,UAAU,KAAK,SACb,KAAK,OAAO,EACV,aACE,kHAEJ,CAAC,CACH;CACF,CAAC;CACD,MAAM,KAAK,MAAqD;EAC9D,MAAM,KAAK,KAAK,IAAI;EACpB,MAAM,MAAM,IAAI,IAAI,KAAK,GAAG;EAC5B,IAAI,KAAK,OACP,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,KAAK,GAAG,IAAI,aAAa,IAAI,GAAG,CAAC;EAG5E,MAAM,MAAM,MAAM,MAAM,KAAK;GAC3B,MAAM,KAAK;GACX,SAAS,KAAK;GACd,QAAQ,KAAK;EACf,CAAC;EAED,MAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;EACvD,MAAM,QAAQ,IAAI,WAAW,MAAM,IAAI,YAAY,CAAC;EAEpD,MAAM,OAAgC;GACpC,aAAa,eAAe,KAAA;GAC5B,YAAY,KAAK,IAAI,IAAI;GACzB,IAAI,IAAI;GACR,QAAQ,IAAI;GACZ,YAAY,IAAI;EAClB;EASA,MAAM,EAAE,eAAe,MAAM,OAAO;EACpC,MAAM,OAAO,MAAM,WAAW;GAC5B,MAAM;GACN,MAAM,eAAe,KAAA;GACrB,KAAK,IAAI,SAAS;EACpB,CAAC;EACD,IAAI,MAAM;GACR,MAAM,MAAM,MAAM,aAAa,IAAI;GACnC,IAAI,KAAK,OAAO,CAAC;IAAE,MAAM;IAAM,KAAK;IAAS,MAAM;GAAO,GAAG,GAAG;EAClE;EAEA,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK;EAI3C,MAAM,SAAS,MAAM,SAAS,UAAU,KAAK,WAAW;EAExD,IAAI,OAAgB;EACpB,IAAI,QACF,IAAI;GACF,OAAO,KAAK,MAAM,IAAI;EACxB,QAAQ,CAER;EAGF,IAAI,KAAK,aAAa,KAAA,KAAa,SAAS,MAAM;GAIhD,MAAM,EAAE,aAAa,MAAM,OAAO;GAElC,OAAO,SAAS;IAAE,MAAM;IAAgB,MAAM,KAAK;GAAS,CAAC;EAC/D;EAIA,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,MAAM,KAAA,GAAW,CAAC;EAKpF,MAAM,aAAa,OAAO,WAAW,UAAU,MAAM;EACrD,MAAM,YAAY,aAAa;EAC/B,MAAM,YAAY,YAAY,SAAS,MAAM,GAAG,sBAAsB,IAAI;EAE1E,IAAI,WACF,KAAK,YAAY;GACf,OAAO;GACP,MACE,KAAK,aAAa,KAAA,IACd,sFACA;GACN,OAAO;EACT;EAGF,MAAM,QAAiC,CAAC;GAAE,MAAM;GAAM,KAAK;GAAS,MAAM;EAAO,CAAC;EAClF,IAAI,cAAc,IAChB,MAAM,KAAK;GAAE,QAAQ,SAAS,SAAS,KAAA;GAAW,MAAM;GAAW,MAAM;EAAO,CAAC;EACnF,OAAO;CACT;AACF,CAAC"}

package/dist/find-CimUGn-L.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-CimUGn-L.mjs","names":[],"sources":["../src/tools/find.ts"],"sourcesContent":["import type { MetaPart, TextPart, ToolContext } from \"@zaly/ai\"\n\nimport { AiError, defineTool } from \"@zaly/ai\"\nimport { normPath } from \"@zaly/shared\"\nimport { find } from \"@zaly/shared/find\"\nimport { Type } from \"typebox\"\nimport { truncate } from \"../utils/truncate.ts\"\n\nconst DEFAULT_LIMIT = 200\nconst MAX_LIMIT = 1000\n\nexport type FindTool = typeof findTool\nexport type FindToolMeta = {\n  cwd: string\n  glob: string | string[]\n  matches: number\n  truncated: boolean\n}\n\n// oxlint-disable-next-line sort-keys -- semantic field order: name, desc, params, call\nexport const findTool = defineTool({\n  name: \"find\",\n  desc:\n    \"Find files using fd/fdfind or rg --files. `glob` is a filename/path glob, \" +\n    \"array of globs, or plain substring; empty, `*`, or `**/*` lists all files. \" +\n    \"Includes hidden files and respects .gitignore by default. Does not follow directory symlinks; \" +\n    \"prefer this over bash find for file discovery.\",\n  parallel: true,\n  // oxlint-disable-next-line sort-keys -- semantic param order\n  params: Type.Object({\n    glob: Type.Optional(\n      Type.Union([Type.String(), Type.Array(Type.String())], {\n        default: \"\",\n        description:\n          \"Filename/path glob, array of globs, or plain substring. Empty, `*`, or `**/*` lists all files.\",\n      })\n    ),\n    paths: Type.Optional(\n      Type.Array(Type.String(), {\n        description: \"Optional directories to search, relative to cwd or absolute.\",\n      })\n    ),\n    hidden: Type.Optional(\n      Type.Boolean({\n        default: true,\n        description: \"Include files in hidden directories and dotfiles.\",\n      })\n    ),\n    ignore: Type.Optional(\n      Type.Boolean({ default: true, description: \"Respect .gitignore/.ignore rules.\" })\n    ),\n    limit: Type.Optional(\n      Type.Integer({\n        default: DEFAULT_LIMIT,\n        description: \"Maximum paths to keep inline.\",\n        maximum: MAX_LIMIT,\n        minimum: 1,\n      })\n    ),\n  }),\n\n  async preflight(args, ctx: ToolContext<FindToolMeta>) {\n    const cwd = normPath(ctx.cwd, \".\")\n    await ctx.need?.(\"read\", cwd)\n    const paths = (args.paths?.length ? args.paths : [\".\"]).map((p) => normPath(cwd, p))\n    await Promise.all(paths.map((path) => Promise.resolve(ctx.need?.(\"read\", path))))\n  },\n\n  async call(args, ctx: ToolContext<FindToolMeta>): Promise<(MetaPart | TextPart)[]> {\n    const cwd = normPath(ctx.cwd, \".\")\n\n    let result: string[] = []\n    try {\n      const batch = await Array.fromAsync(\n        find({ ...args, cwd, pattern: args.glob, signal: ctx.signal })\n      )\n      result = batch.flat()\n    } catch (error) {\n      throw AiError.from(error)\n    }\n\n    const limit = args.limit ?? DEFAULT_LIMIT\n    const summary = truncate(result.join(\"\\n\"), {\n      maxLines: limit + 1,\n      strategy: \"head\",\n    })\n\n    const truncated = summary.truncated\n    ctx.meta = {\n      cwd,\n      glob: args.glob ?? \"\",\n      matches: summary.origLines,\n      truncated,\n    }\n\n    return [{ text: summary.text || \"No files found.\", type: \"text\" }]\n  },\n})\n"],"mappings":";;;;;;AAQA,MAAM,gBAAgB;AAYtB,MAAa,WAAW,WAAW;CACjC,MAAM;CACN,MACE;CAIF,UAAU;CAEV,QAAQ,KAAK,OAAO;EAClB,MAAM,KAAK,SACT,KAAK,MAAM,CAAC,KAAK,OAAO,GAAG,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG;GACrD,SAAS;GACT,aACE;EACJ,CAAC,CACH;EACA,OAAO,KAAK,SACV,KAAK,MAAM,KAAK,OAAO,GAAG,EACxB,aAAa,+DACf,CAAC,CACH;EACA,QAAQ,KAAK,SACX,KAAK,QAAQ;GACX,SAAS;GACT,aAAa;EACf,CAAC,CACH;EACA,QAAQ,KAAK,SACX,KAAK,QAAQ;GAAE,SAAS;GAAM,aAAa;EAAoC,CAAC,CAClF;EACA,OAAO,KAAK,SACV,KAAK,QAAQ;GACX,SAAS;GACT,aAAa;GACb,SAAS;GACT,SAAS;EACX,CAAC,CACH;CACF,CAAC;CAED,MAAM,UAAU,MAAM,KAAgC;EACpD,MAAM,MAAM,SAAS,IAAI,KAAK,GAAG;EACjC,MAAM,IAAI,OAAO,QAAQ,GAAG;EAC5B,MAAM,SAAS,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG,EAAA,CAAG,KAAK,MAAM,SAAS,KAAK,CAAC,CAAC;EACnF,MAAM,QAAQ,IAAI,MAAM,KAAK,SAAS,QAAQ,QAAQ,IAAI,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC;CAClF;CAEA,MAAM,KAAK,MAAM,KAAkE;EACjF,MAAM,MAAM,SAAS,IAAI,KAAK,GAAG;EAEjC,IAAI,SAAmB,CAAC;EACxB,IAAI;GAIF,UAAS,MAHW,MAAM,UACxB,KAAK;IAAE,GAAG;IAAM;IAAK,SAAS,KAAK;IAAM,QAAQ,IAAI;GAAO,CAAC,CAC/D,EAAA,CACe,KAAK;EACtB,SAAS,OAAO;GACd,MAAM,QAAQ,KAAK,KAAK;EAC1B;EAEA,MAAM,QAAQ,KAAK,SAAS;EAC5B,MAAM,UAAU,SAAS,OAAO,KAAK,IAAI,GAAG;GAC1C,UAAU,QAAQ;GAClB,UAAU;EACZ,CAAC;EAED,MAAM,YAAY,QAAQ;EAC1B,IAAI,OAAO;GACT;GACA,MAAM,KAAK,QAAQ;GACnB,SAAS,QAAQ;GACjB;EACF;EAEA,OAAO,CAAC;GAAE,MAAM,QAAQ,QAAQ;GAAmB,MAAM;EAAO,CAAC;CACnE;AACF,CAAC"}

package/dist/grep-6O3mjSvV.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"grep-6O3mjSvV.mjs","names":[],"sources":["../src/tools/grep.ts"],"sourcesContent":["import type { MetaPart, TextPart, ToolContext } from \"@zaly/ai\"\n\nimport { AiError, defineTool } from \"@zaly/ai\"\nimport { normPath } from \"@zaly/shared\"\nimport { defaultExcludes } from \"@zaly/shared/find\"\nimport { Spawn, TextStream, which } from \"@zaly/shared/process\"\nimport { cleanTextTui } from \"@zaly/shared/text\"\nimport { Type } from \"typebox\"\nimport { truncate } from \"../utils/truncate.ts\"\n\nconst MAX_BUFFER = 512 * 1024\nconst DEFAULT_LIMIT = 100\nconst MAX_LIMIT = 1000\nconst MAX_COLUMNS = 200\n\nexport type GrepTool = typeof grepTool\nexport type GrepToolMeta = {\n  cwd: string\n  pattern: string\n  truncated: boolean\n  cmd: string[]\n}\n\n// oxlint-disable-next-line sort-keys -- semantic field order: name, desc, params, call\nexport const grepTool = defineTool({\n  name: \"grep\",\n  desc:\n    `Search file contents using rg/grep. Respects .gitignore by default when ripgrep is available; ` +\n    \"prefer this over bash grep/find for code search. Returns human-readable grouped matches with line numbers.\",\n  parallel: true,\n  // oxlint-disable-next-line sort-keys -- semantic param order\n  params: Type.Object({\n    pattern: Type.String({\n      description:\n        \"Text or regex pattern. Uses smart case: case-insensitive unless uppercase is present.\",\n      minLength: 1,\n    }),\n    paths: Type.Optional(\n      Type.Array(Type.String(), {\n        description: \"Optional files/directories to search, relative to cwd or absolute.\",\n      })\n    ),\n    glob: Type.Optional(\n      Type.Array(Type.String(), {\n        description: \"Ripgrep glob filters, e.g. [`*.ts`, `!dist/**`].\",\n      })\n    ),\n    fixed_strings: Type.Optional(\n      Type.Boolean({\n        default: false,\n        description: \"Treat all patterns as literals instead of as regular expressions\",\n      })\n    ),\n    context: Type.Optional(\n      Type.Integer({\n        default: 0,\n        description: \"Context lines before/after each match. 0-10.\",\n        maximum: 10,\n        minimum: 0,\n      })\n    ),\n    limit: Type.Optional(\n      Type.Integer({\n        default: DEFAULT_LIMIT,\n        description: \"Maximum output lines to keep inline, including file headings and context.\",\n        maximum: MAX_LIMIT,\n        minimum: 1,\n      })\n    ),\n  }),\n\n  async preflight(args, ctx: ToolContext<GrepToolMeta>) {\n    const cwd = normPath(ctx.cwd, \".\")\n    await ctx.need?.(\"read\", cwd)\n\n    const paths = (args.paths?.length ? args.paths : [\".\"]).map((p) => normPath(cwd, p))\n    await Promise.all(paths.map((path) => Promise.resolve(ctx.need?.(\"read\", path))))\n  },\n\n  async call(args, ctx: ToolContext<GrepToolMeta>): Promise<(MetaPart | TextPart)[]> {\n    const command = resolveGrep()\n    if (!command) throw new AiError({ code: \"MISSING_TOOL\", message: \"grep requires rg or grep\" })\n\n    const cwd = normPath(ctx.cwd, \".\")\n    const paths = args.paths?.length ? args.paths : []\n\n    const cmdArgs = buildArgs(command.kind, args, paths)\n    const proc = new Spawn(command.cmd, cmdArgs, {\n      cwd,\n      maxBuffer: MAX_BUFFER,\n      signal: ctx.signal,\n      stderr: new TextStream(),\n      stdout: new TextStream(),\n      timeout: 60_000,\n    })\n    const result = await proc.result.catch((error: unknown) => {\n      throw new AiError({ cause: error, code: \"GREP_FAILED\", message: String(error) })\n    })\n\n    // rg/grep: 0 matches found, 1 no matches, >1 error.\n    if (result.code > 1 && result.killReason !== \"maxBuffer\") {\n      throw new AiError({\n        code: \"GREP_FAILED\",\n        data: { code: result.code, stderr: result.stderr },\n        message: `${command.cmd} failed (${result.code}): ${result.stderr.slice(0, 500)}`,\n      })\n    }\n\n    const text = cleanTextTui(result.stdout)\n    const limit = args.limit ?? DEFAULT_LIMIT\n    const summary = truncate(text, {\n      maxLineChars: command.kind === \"rg\" ? 500 : MAX_COLUMNS,\n      maxLines: limit + 1,\n      strategy: \"head\",\n    })\n\n    const truncated = summary.truncated || result.killReason === \"maxBuffer\"\n    ctx.meta = {\n      cmd: [command.cmd, ...cmdArgs],\n      cwd,\n      pattern: args.pattern,\n      truncated,\n    }\n\n    const parts: (MetaPart | TextPart)[] = []\n\n    const stderr = result.stderr.trim()\n    if (stderr || result.killReason) {\n      const meta: Record<string, unknown> = {\n        command: command.cmd,\n        cwd,\n        truncated,\n      }\n      if (result.killReason) meta.killReason = result.killReason\n      if (stderr) meta.stderr = stderr.slice(0, 500)\n      parts.push({ data: meta, tag: \"grep\", type: \"meta\" })\n    }\n    parts.push({ text: summary.text || \"No matches found.\", type: \"text\" })\n    return parts\n  },\n})\n\ntype GrepArgs = Parameters<GrepTool[\"call\"]>[0]\ntype GrepBackend = { cmd: string; kind: \"rg\" | \"grep\" }\n\nfunction resolveGrep(): GrepBackend | undefined {\n  const rg = which(\"rg\")\n  if (rg) return { cmd: rg, kind: \"rg\" }\n  const grep = which(\"grep\")\n  return grep ? { cmd: grep, kind: \"grep\" } : undefined\n}\n\nfunction buildArgs(kind: GrepBackend[\"kind\"], args: GrepArgs, paths: string[]): string[] {\n  return kind === \"rg\" ? buildRgArgs(args, paths) : buildGrepArgs(args, paths)\n}\n\nfunction buildRgArgs(args: GrepArgs, paths: string[]): string[] {\n  const ret = [\n    \"--color=always\",\n    \"--heading\",\n    \"--with-filename\",\n    \"--line-number\",\n    `--max-columns=${MAX_COLUMNS}`,\n    \"--max-columns-preview\",\n    \"--path-separator=/\",\n  ]\n\n  if (args.fixed_strings) ret.push(\"--fixed-strings\")\n  ret.push(\"--smart-case\", \"--no-hidden\")\n  const context = args.context ?? 0\n  if (context > 0) ret.push(`--context=${context}`)\n\n  for (const e of defaultExcludes(paths)) ret.push(\"--glob\", `!${e}`)\n  for (const g of args.glob ?? []) ret.push(\"--glob\", g)\n\n  ret.push(\"--\", args.pattern, ...paths)\n  return ret\n}\n\nfunction buildGrepArgs(args: GrepArgs, paths: string[]): string[] {\n  const ret = [\n    \"--recursive\",\n    \"--line-number\",\n    \"--with-filename\",\n    \"--binary-files=without-match\",\n    \"--color=always\",\n  ]\n  if (args.fixed_strings) ret.push(\"--fixed-strings\")\n  else ret.push(\"--extended-regexp\")\n  const hasUpper = /[A-Z]/.test(args.pattern)\n  if (!hasUpper) ret.push(\"--ignore-case\")\n  const context = args.context ?? 0\n  if (context > 0) ret.push(\"--context\", String(context))\n  for (const e of defaultExcludes(paths)) ret.push(\"--exclude-dir\", e)\n  for (const g of args.glob ?? []) ret.push(...grepGlobArgs(g))\n  ret.push(\"--\", args.pattern, ...paths)\n  return ret\n}\n\nfunction grepGlobArgs(glob: string): string[] {\n  if (!glob.startsWith(\"!\")) return [\"--include\", glob]\n  const exclude = glob.slice(1)\n  if (exclude.endsWith(\"/**\") && !exclude.slice(0, -3).includes(\"*\")) {\n    return [\"--exclude-dir\", exclude.slice(0, -3)]\n  }\n  return [\"--exclude\", exclude]\n}\n"],"mappings":";;;;;;;;AAUA,MAAM,aAAa;AACnB,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAClB,MAAM,cAAc;AAWpB,MAAa,WAAW,WAAW;CACjC,MAAM;CACN,MACE;CAEF,UAAU;CAEV,QAAQ,KAAK,OAAO;EAClB,SAAS,KAAK,OAAO;GACnB,aACE;GACF,WAAW;EACb,CAAC;EACD,OAAO,KAAK,SACV,KAAK,MAAM,KAAK,OAAO,GAAG,EACxB,aAAa,qEACf,CAAC,CACH;EACA,MAAM,KAAK,SACT,KAAK,MAAM,KAAK,OAAO,GAAG,EACxB,aAAa,mDACf,CAAC,CACH;EACA,eAAe,KAAK,SAClB,KAAK,QAAQ;GACX,SAAS;GACT,aAAa;EACf,CAAC,CACH;EACA,SAAS,KAAK,SACZ,KAAK,QAAQ;GACX,SAAS;GACT,aAAa;GACb,SAAS;GACT,SAAS;EACX,CAAC,CACH;EACA,OAAO,KAAK,SACV,KAAK,QAAQ;GACX,SAAS;GACT,aAAa;GACb,SAAS;GACT,SAAS;EACX,CAAC,CACH;CACF,CAAC;CAED,MAAM,UAAU,MAAM,KAAgC;EACpD,MAAM,MAAM,SAAS,IAAI,KAAK,GAAG;EACjC,MAAM,IAAI,OAAO,QAAQ,GAAG;EAE5B,MAAM,SAAS,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG,EAAA,CAAG,KAAK,MAAM,SAAS,KAAK,CAAC,CAAC;EACnF,MAAM,QAAQ,IAAI,MAAM,KAAK,SAAS,QAAQ,QAAQ,IAAI,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC;CAClF;CAEA,MAAM,KAAK,MAAM,KAAkE;EACjF,MAAM,UAAU,YAAY;EAC5B,IAAI,CAAC,SAAS,MAAM,IAAI,QAAQ;GAAE,MAAM;GAAgB,SAAS;EAA2B,CAAC;EAE7F,MAAM,MAAM,SAAS,IAAI,KAAK,GAAG;EACjC,MAAM,QAAQ,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC;EAEjD,MAAM,UAAU,UAAU,QAAQ,MAAM,MAAM,KAAK;EASnD,MAAM,SAAS,MAAM,IARJ,MAAM,QAAQ,KAAK,SAAS;GAC3C;GACA,WAAW;GACX,QAAQ,IAAI;GACZ,QAAQ,IAAI,WAAW;GACvB,QAAQ,IAAI,WAAW;GACvB,SAAS;EACX,CACwB,CAAC,CAAC,OAAO,OAAO,UAAmB;GACzD,MAAM,IAAI,QAAQ;IAAE,OAAO;IAAO,MAAM;IAAe,SAAS,OAAO,KAAK;GAAE,CAAC;EACjF,CAAC;EAGD,IAAI,OAAO,OAAO,KAAK,OAAO,eAAe,aAC3C,MAAM,IAAI,QAAQ;GAChB,MAAM;GACN,MAAM;IAAE,MAAM,OAAO;IAAM,QAAQ,OAAO;GAAO;GACjD,SAAS,GAAG,QAAQ,IAAI,WAAW,OAAO,KAAK,KAAK,OAAO,OAAO,MAAM,GAAG,GAAG;EAChF,CAAC;EAGH,MAAM,OAAO,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,KAAK,SAAS;EAC5B,MAAM,UAAU,SAAS,MAAM;GAC7B,cAAc,QAAQ,SAAS,OAAO,MAAM;GAC5C,UAAU,QAAQ;GAClB,UAAU;EACZ,CAAC;EAED,MAAM,YAAY,QAAQ,aAAa,OAAO,eAAe;EAC7D,IAAI,OAAO;GACT,KAAK,CAAC,QAAQ,KAAK,GAAG,OAAO;GAC7B;GACA,SAAS,KAAK;GACd;EACF;EAEA,MAAM,QAAiC,CAAC;EAExC,MAAM,SAAS,OAAO,OAAO,KAAK;EAClC,IAAI,UAAU,OAAO,YAAY;GAC/B,MAAM,OAAgC;IACpC,SAAS,QAAQ;IACjB;IACA;GACF;GACA,IAAI,OAAO,YAAY,KAAK,aAAa,OAAO;GAChD,IAAI,QAAQ,KAAK,SAAS,OAAO,MAAM,GAAG,GAAG;GAC7C,MAAM,KAAK;IAAE,MAAM;IAAM,KAAK;IAAQ,MAAM;GAAO,CAAC;EACtD;EACA,MAAM,KAAK;GAAE,MAAM,QAAQ,QAAQ;GAAqB,MAAM;EAAO,CAAC;EACtE,OAAO;CACT;AACF,CAAC;AAKD,SAAS,cAAuC;CAC9C,MAAM,KAAK,MAAM,IAAI;CACrB,IAAI,IAAI,OAAO;EAAE,KAAK;EAAI,MAAM;CAAK;CACrC,MAAM,OAAO,MAAM,MAAM;CACzB,OAAO,OAAO;EAAE,KAAK;EAAM,MAAM;CAAO,IAAI,KAAA;AAC9C;AAEA,SAAS,UAAU,MAA2B,MAAgB,OAA2B;CACvF,OAAO,SAAS,OAAO,YAAY,MAAM,KAAK,IAAI,cAAc,MAAM,KAAK;AAC7E;AAEA,SAAS,YAAY,MAAgB,OAA2B;CAC9D,MAAM,MAAM;EACV;EACA;EACA;EACA;EACA,iBAAiB;EACjB;EACA;CACF;CAEA,IAAI,KAAK,eAAe,IAAI,KAAK,iBAAiB;CAClD,IAAI,KAAK,gBAAgB,aAAa;CACtC,MAAM,UAAU,KAAK,WAAW;CAChC,IAAI,UAAU,GAAG,IAAI,KAAK,aAAa,SAAS;CAEhD,KAAK,MAAM,KAAK,gBAAgB,KAAK,GAAG,IAAI,KAAK,UAAU,IAAI,GAAG;CAClE,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC;CAErD,IAAI,KAAK,MAAM,KAAK,SAAS,GAAG,KAAK;CACrC,OAAO;AACT;AAEA,SAAS,cAAc,MAAgB,OAA2B;CAChE,MAAM,MAAM;EACV;EACA;EACA;EACA;EACA;CACF;CACA,IAAI,KAAK,eAAe,IAAI,KAAK,iBAAiB;MAC7C,IAAI,KAAK,mBAAmB;CAEjC,IAAI,CADa,QAAQ,KAAK,KAAK,OACvB,GAAG,IAAI,KAAK,eAAe;CACvC,MAAM,UAAU,KAAK,WAAW;CAChC,IAAI,UAAU,GAAG,IAAI,KAAK,aAAa,OAAO,OAAO,CAAC;CACtD,KAAK,MAAM,KAAK,gBAAgB,KAAK,GAAG,IAAI,KAAK,iBAAiB,CAAC;CACnE,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC,GAAG,IAAI,KAAK,GAAG,aAAa,CAAC,CAAC;CAC5D,IAAI,KAAK,MAAM,KAAK,SAAS,GAAG,KAAK;CACrC,OAAO;AACT;AAEA,SAAS,aAAa,MAAwB;CAC5C,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI;CACpD,MAAM,UAAU,KAAK,MAAM,CAAC;CAC5B,IAAI,QAAQ,SAAS,KAAK,KAAK,CAAC,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC,SAAS,GAAG,GAC/D,OAAO,CAAC,iBAAiB,QAAQ,MAAM,GAAG,EAAE,CAAC;CAE/C,OAAO,CAAC,aAAa,OAAO;AAC9B"}