agent-tower 0.5.3-beta.7 → 0.5.3-beta.9

package/dist/services/agent-cli/environment.service.js

@@ -0,0 +1,127 @@
+import { NotFoundError, ServiceError, ValidationError } from '../../errors.js';
+import { AgentCliDetector } from './detection.js';
+import { AgentCliDownloader, removePreviewFile, toPublicPreview, } from './downloader.js';
+import { getAgentCliManifest, getAgentCliManifestItem, getServerAgentCliPlatform, } from './manifest.js';
+import { AgentCliInstallTaskManager } from './task-manager.js';
+function cloneCommandSpec(spec) {
+    return {
+        ...spec,
+        args: [...spec.args],
+    };
+}
+function toPublicManifestItem(item) {
+    const base = {
+        ...item,
+        officialSources: item.officialSources.map((source) => ({ ...source })),
+        supportedPlatforms: [...item.supportedPlatforms],
+        detectionCommands: item.detectionCommands.map(cloneCommandSpec),
+        versionCommand: item.versionCommand ? cloneCommandSpec(item.versionCommand) : undefined,
+        authCommand: item.authCommand ? cloneCommandSpec(item.authCommand) : undefined,
+    };
+    if (item.install.kind === 'detect-only') {
+        return {
+            ...base,
+            install: { ...item.install },
+        };
+    }
+    const { verifyCommand: _verifyCommand, ...install } = item.install;
+    return {
+        ...base,
+        install: {
+            ...install,
+            allowedRedirectHosts: [...install.allowedRedirectHosts],
+            allowedExactPaths: [...install.allowedExactPaths],
+            allowedPathPrefixes: [...install.allowedPathPrefixes],
+            interpreters: Object.fromEntries(Object.entries(install.interpreters).map(([platform, interpreter]) => [
+                platform,
+                interpreter ? { command: interpreter.command, args: [...interpreter.args] } : interpreter,
+            ])),
+            fixedArgs: [...install.fixedArgs],
+            riskNotes: [...install.riskNotes],
+        },
+    };
+}
+export class AgentCliEnvironmentService {
+    manifest;
+    downloader;
+    detector;
+    taskManager;
+    previews = new Map();
+    platform;
+    now;
+    constructor(options = {}) {
+        this.platform = getServerAgentCliPlatform(options.platform ?? process.platform);
+        this.now = options.now ?? (() => new Date());
+        this.manifest = getAgentCliManifest();
+        this.downloader = options.downloader ?? new AgentCliDownloader(options.downloaderOptions);
+        this.detector = options.detector ?? new AgentCliDetector(options.execFileImpl, this.platform);
+        this.taskManager = options.taskManager ?? new AgentCliInstallTaskManager(options.runner);
+    }
+    getManifest() {
+        return this.manifest.map(toPublicManifestItem);
+    }
+    getStatus() {
+        return this.detector.getCachedStatus(this.manifest);
+    }
+    refreshStatus() {
+        return this.detector.refresh(this.manifest);
+    }
+    async createPreview(toolId) {
+        await this.cleanupExpiredPreviews();
+        const item = getAgentCliManifestItem(toolId);
+        if (!item)
+            throw new NotFoundError('Agent CLI manifest item', toolId);
+        if (!this.platform || !item.supportedPlatforms.includes(this.platform)) {
+            throw new ServiceError('Agent CLI installer unsupported on this platform', 'AGENT_CLI_UNSUPPORTED_PLATFORM', 400);
+        }
+        if (item.install.kind !== 'downloaded-script') {
+            throw new ServiceError('Agent CLI tool is detect-only', 'AGENT_CLI_INSTALL_UNAVAILABLE', 400);
+        }
+        const preview = await this.downloader.createPreview(item.id, this.platform, item.install);
+        this.previews.set(preview.id, preview);
+        return toPublicPreview(preview);
+    }
+    async getPreview(previewId) {
+        await this.cleanupExpiredPreviews();
+        const preview = this.previews.get(previewId);
+        if (!preview)
+            throw new NotFoundError('Agent CLI install preview', previewId);
+        return toPublicPreview(preview);
+    }
+    async createTask(previewId) {
+        await this.cleanupExpiredPreviews();
+        const preview = this.previews.get(previewId);
+        if (!preview) {
+            throw new ServiceError('Agent CLI install preview expired or not found', 'AGENT_CLI_PREVIEW_EXPIRED', 409);
+        }
+        if (preview.status !== 'ready') {
+            throw new ValidationError('Agent CLI install preview is not ready');
+        }
+        preview.status = 'consumed';
+        const result = this.taskManager.createTask(preview);
+        this.previews.delete(previewId);
+        return result;
+    }
+    getTask(taskId) {
+        return this.taskManager.getTask(taskId);
+    }
+    getLogs(taskId, afterSeq = 0) {
+        return this.taskManager.getLogs(taskId, afterSeq);
+    }
+    cancelTask(taskId) {
+        return this.taskManager.cancel(taskId);
+    }
+    async cleanupExpiredPreviews() {
+        const nowMs = this.now().getTime();
+        const removals = [];
+        for (const [previewId, preview] of this.previews) {
+            if (preview.status !== 'ready' || new Date(preview.expiresAt).getTime() <= nowMs) {
+                preview.status = 'expired';
+                this.previews.delete(previewId);
+                removals.push(removePreviewFile(preview.tempFilePath));
+            }
+        }
+        await Promise.all(removals);
+    }
+}
+//# sourceMappingURL=environment.service.js.map

package/dist/services/agent-cli/environment.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.service.js","sourceRoot":"","sources":["../../../src/services/agent-cli/environment.service.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAyB,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,kBAAkB,EAGlB,iBAAiB,EACjB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,0BAA0B,EAAuB,MAAM,mBAAmB,CAAC;AAapF,SAAS,gBAAgB,CACvB,IAAO;IAEP,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAiC;IAC7D,MAAM,IAAI,GAAG;QACX,GAAG,IAAI;QACP,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC/D,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,CAAC;IAEF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,EACJ,aAAa,EAAE,cAAc,EAC7B,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,OAAO,CAAC;IAEjB,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,OAAO;YACV,oBAAoB,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;YACvD,iBAAiB,EAAE,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACjD,mBAAmB,EAAE,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACrD,YAAY,EAAE,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpE,QAAQ;gBACR,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;aAC1F,CAAC,CACH;YACD,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IACpB,QAAQ,CAAgC;IACxC,UAAU,CAAqB;IAC/B,QAAQ,CAAmB;IAC3B,WAAW,CAA6B;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpD,QAAQ,CAAC;IACT,GAAG,CAAC;IAErB,YAAY,UAA6C,EAAE;QACzD,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAsB;QACxC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,YAAY,CAAC,kDAAkD,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC9C,MAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;QAC9E,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,gDAAgD,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;gBACjF,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/services/agent-cli/manifest-validator.d.ts

@@ -0,0 +1,4 @@
+import type { AgentCliInstallManifestItem } from '@agent-tower/shared';
+export declare function validateAgentCliManifestItem(item: AgentCliInstallManifestItem): void;
+export declare function validateAgentCliManifest(items: readonly AgentCliInstallManifestItem[]): void;
+//# sourceMappingURL=manifest-validator.d.ts.map

package/dist/services/agent-cli/manifest-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validator.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAsBvE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,2BAA2B,GAAG,IAAI,CAgCpF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,GAAG,IAAI,CAS5F"}

package/dist/services/agent-cli/manifest-validator.js

@@ -0,0 +1,56 @@
+import { ValidationError } from '../../errors.js';
+const SHELL_META_PATTERN = /(?:\||&&|\|\||;|`|\$\(|<\(|>\()/;
+function assertNoShellString(value, field) {
+    if (SHELL_META_PATTERN.test(value)) {
+        throw new ValidationError(`Agent CLI manifest contains shell metacharacters in ${field}`);
+    }
+}
+function assertHttpsUrl(value, field) {
+    const url = new URL(value);
+    if (url.protocol !== 'https:') {
+        throw new ValidationError(`Agent CLI manifest ${field} must use HTTPS`);
+    }
+    if (url.username || url.password) {
+        throw new ValidationError(`Agent CLI manifest ${field} must not include userinfo`);
+    }
+    return url;
+}
+export function validateAgentCliManifestItem(item) {
+    if (item.install.kind === 'detect-only')
+        return;
+    const downloadUrl = assertHttpsUrl(item.install.downloadUrl, `${item.id}.install.downloadUrl`);
+    const allowedHosts = new Set(item.install.allowedRedirectHosts.map((host) => host.toLowerCase()));
+    if (!allowedHosts.has(downloadUrl.hostname.toLowerCase())) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} download host is not allowlisted`);
+    }
+    if (item.install.allowedExactPaths.length === 0 && item.install.allowedPathPrefixes.length === 0) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} must allow at least one path`);
+    }
+    if (item.install.maxBytes <= 0 || item.install.maxBytes > 10 * 1024 * 1024) {
+        throw new ValidationError(`Agent CLI manifest ${item.id} has invalid maxBytes`);
+    }
+    for (const [platform, interpreter] of Object.entries(item.install.interpreters)) {
+        assertNoShellString(interpreter.command, `${item.id}.install.interpreters.${platform}.command`);
+        for (const [index, arg] of interpreter.args.entries()) {
+            assertNoShellString(arg, `${item.id}.install.interpreters.${platform}.args.${index}`);
+        }
+    }
+    for (const [index, arg] of item.install.fixedArgs.entries()) {
+        assertNoShellString(arg, `${item.id}.install.fixedArgs.${index}`);
+    }
+    assertNoShellString(item.install.verifyCommand.command, `${item.id}.install.verifyCommand.command`);
+    for (const [index, arg] of item.install.verifyCommand.args.entries()) {
+        assertNoShellString(arg, `${item.id}.install.verifyCommand.args.${index}`);
+    }
+}
+export function validateAgentCliManifest(items) {
+    const seen = new Set();
+    for (const item of items) {
+        if (seen.has(item.id)) {
+            throw new ValidationError(`Duplicate Agent CLI manifest id: ${item.id}`);
+        }
+        seen.add(item.id);
+        validateAgentCliManifestItem(item);
+    }
+}
+//# sourceMappingURL=manifest-validator.js.map

package/dist/services/agent-cli/manifest-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validator.js","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAE7D,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa;IACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,uDAAuD,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,sBAAsB,KAAK,4BAA4B,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAiC;IAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO;IAEhD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC3E,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChF,mBAAmB,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,yBAAyB,QAAQ,UAAU,CAAC,CAAC;QAChG,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,yBAAyB,QAAQ,SAAS,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACrE,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAA6C;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,oCAAoC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/services/agent-cli/manifest.d.ts

@@ -0,0 +1,6 @@
+import type { AgentCliInstallManifestItem, AgentCliPlatform, AgentCliToolId } from '@agent-tower/shared';
+export declare const AGENT_CLI_MANIFEST: readonly AgentCliInstallManifestItem[];
+export declare function getAgentCliManifest(): AgentCliInstallManifestItem[];
+export declare function getAgentCliManifestItem(toolId: AgentCliToolId): AgentCliInstallManifestItem | null;
+export declare function getServerAgentCliPlatform(platform?: NodeJS.Platform): AgentCliPlatform | null;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/services/agent-cli/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAkB7B,eAAO,MAAM,kBAAkB,EAAE,SAAS,2BAA2B,EA8H3D,CAAC;AAIX,wBAAgB,mBAAmB,IAAI,2BAA2B,EAAE,CA+BnE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,2BAA2B,GAAG,IAAI,CAElG;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,gBAAgB,GAAG,IAAI,CAKzB"}

package/dist/services/agent-cli/manifest.js

@@ -0,0 +1,180 @@
+import { validateAgentCliManifest } from './manifest-validator.js';
+const DEFAULT_COMMAND_TIMEOUT_MS = 5000;
+function command(name, args = ['--version'], versionPattern = String.raw `\d+(?:\.\d+){1,3}`) {
+    return {
+        command: name,
+        args,
+        timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        versionPattern,
+    };
+}
+export const AGENT_CLI_MANIFEST = [
+    {
+        id: 'codex',
+        displayName: 'Codex',
+        description: 'OpenAI Codex CLI',
+        legacy: false,
+        officialSources: [
+            { label: 'Codex installer', url: 'https://chatgpt.com/codex/install.sh' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://chatgpt.com/codex/install.sh',
+            allowedRedirectHosts: ['chatgpt.com'],
+            allowedExactPaths: ['/codex/install.sh'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/sh', args: [] },
+                linux: { command: '/bin/sh', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 chatgpt.com 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 CLI 配置。',
+            ],
+            verifyCommand: command('codex'),
+        },
+        detectionCommands: [command('codex')],
+        versionCommand: command('codex'),
+        authCommand: {
+            command: 'codex',
+            args: ['login', 'status'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'claude-code',
+        displayName: 'Claude Code',
+        description: 'Anthropic Claude Code CLI',
+        legacy: false,
+        officialSources: [
+            { label: 'Claude Code installer', url: 'https://claude.ai/install.sh' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://claude.ai/install.sh',
+            allowedRedirectHosts: ['claude.ai'],
+            allowedExactPaths: ['/install.sh'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/bash', args: [] },
+                linux: { command: '/bin/bash', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 claude.ai 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 Claude Code 配置。',
+            ],
+            verifyCommand: command('claude'),
+        },
+        detectionCommands: [command('claude')],
+        versionCommand: command('claude'),
+        authCommand: {
+            command: 'claude',
+            args: ['doctor'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'cursor-agent',
+        displayName: 'Cursor CLI Agent',
+        description: 'Cursor Agent command line interface',
+        legacy: false,
+        officialSources: [
+            { label: 'Cursor installer', url: 'https://cursor.com/install' },
+        ],
+        supportedPlatforms: ['darwin', 'linux'],
+        install: {
+            kind: 'downloaded-script',
+            downloadUrl: 'https://cursor.com/install',
+            allowedRedirectHosts: ['cursor.com'],
+            allowedExactPaths: ['/install'],
+            allowedPathPrefixes: [],
+            interpreters: {
+                darwin: { command: '/bin/bash', args: [] },
+                linux: { command: '/bin/bash', args: [] },
+            },
+            fixedArgs: [],
+            maxBytes: 1024 * 1024,
+            riskNotes: [
+                '将从 cursor.com 下载官方安装脚本并在本机用户环境执行。',
+                '安装器可能修改 PATH、shell profile 或用户目录下的 Cursor 配置。',
+            ],
+            verifyCommand: command('agent'),
+        },
+        detectionCommands: [command('agent'), command('cursor-agent')],
+        versionCommand: command('agent'),
+        authCommand: {
+            command: 'agent',
+            args: ['--version'],
+            timeoutMs: DEFAULT_COMMAND_TIMEOUT_MS,
+        },
+        lastVerifiedAt: '2026-06-18',
+    },
+    {
+        id: 'gemini-cli',
+        displayName: 'Gemini CLI',
+        description: 'Legacy Gemini CLI detection only',
+        legacy: true,
+        officialSources: [
+            { label: 'Gemini CLI repository', url: 'https://github.com/google-gemini/gemini-cli' },
+        ],
+        supportedPlatforms: ['darwin', 'linux', 'win32'],
+        install: {
+            kind: 'detect-only',
+            reason: 'Gemini CLI 首版只检测已安装状态，不默认新装。',
+        },
+        detectionCommands: [command('gemini')],
+        versionCommand: command('gemini'),
+        lastVerifiedAt: '2026-06-18',
+    },
+];
+validateAgentCliManifest(AGENT_CLI_MANIFEST);
+export function getAgentCliManifest() {
+    return AGENT_CLI_MANIFEST.map((item) => ({
+        ...item,
+        officialSources: item.officialSources.map((source) => ({ ...source })),
+        supportedPlatforms: [...item.supportedPlatforms],
+        detectionCommands: item.detectionCommands.map((spec) => ({
+            ...spec,
+            args: [...spec.args],
+        })),
+        versionCommand: item.versionCommand
+            ? { ...item.versionCommand, args: [...item.versionCommand.args] }
+            : undefined,
+        authCommand: item.authCommand
+            ? { ...item.authCommand, args: [...item.authCommand.args] }
+            : undefined,
+        install: item.install.kind === 'downloaded-script'
+            ? {
+                ...item.install,
+                allowedRedirectHosts: [...item.install.allowedRedirectHosts],
+                allowedExactPaths: [...item.install.allowedExactPaths],
+                allowedPathPrefixes: [...item.install.allowedPathPrefixes],
+                fixedArgs: [...item.install.fixedArgs],
+                riskNotes: [...item.install.riskNotes],
+                interpreters: { ...item.install.interpreters },
+                verifyCommand: {
+                    ...item.install.verifyCommand,
+                    args: [...item.install.verifyCommand.args],
+                },
+            }
+            : { ...item.install },
+    }));
+}
+export function getAgentCliManifestItem(toolId) {
+    return getAgentCliManifest().find((item) => item.id === toolId) ?? null;
+}
+export function getServerAgentCliPlatform(platform = process.platform) {
+    if (platform === 'darwin' || platform === 'linux' || platform === 'win32') {
+        return platform;
+    }
+    return null;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/services/agent-cli/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/services/agent-cli/manifest.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAExC,SAAS,OAAO,CACd,IAAY,EACZ,OAAiB,CAAC,WAAW,CAAC,EAC9B,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA,mBAAmB;IAE9C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,0BAA0B;QACrC,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA2C;IACxE;QACE,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,sCAAsC,EAAE;SAC1E;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,sCAAsC;YACnD,oBAAoB,EAAE,CAAC,aAAa,CAAC;YACrC,iBAAiB,EAAE,CAAC,mBAAmB,CAAC;YACxC,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;aACxC;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,oCAAoC;gBACpC,4CAA4C;aAC7C;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;SAChC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE;YACX,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YACzB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,8BAA8B,EAAE;SACxE;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,8BAA8B;YAC3C,oBAAoB,EAAE,CAAC,WAAW,CAAC;YACnC,iBAAiB,EAAE,CAAC,aAAa,CAAC;YAClC,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1C,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC1C;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,kCAAkC;gBAClC,oDAAoD;aACrD;YACD,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC;SACjC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjC,WAAW,EAAE;YACX,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,KAAK;QACb,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,4BAA4B,EAAE;SACjE;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,OAAO,EAAE;YACP,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,4BAA4B;YACzC,oBAAoB,EAAE,CAAC,YAAY,CAAC;YACpC,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAC/B,mBAAmB,EAAE,EAAE;YACvB,YAAY,EAAE;gBACZ,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC1C,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC1C;YACD,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,GAAG,IAAI;YACrB,SAAS,EAAE;gBACT,mCAAmC;gBACnC,+CAA+C;aAChD;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;SAChC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9D,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE;YACX,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,SAAS,EAAE,0BAA0B;SACtC;QACD,cAAc,EAAE,YAAY;KAC7B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE;YACf,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,6CAA6C,EAAE;SACvF;QACD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QAChD,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,8BAA8B;SACvC;QACD,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjC,cAAc,EAAE,YAAY;KAC7B;CACO,CAAC;AAEX,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;AAE7C,MAAM,UAAU,mBAAmB;IACjC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,IAAI;QACP,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvD,GAAG,IAAI;YACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;SACrB,CAAC,CAAC;QACH,cAAc,EAAE,IAAI,CAAC,cAAc;YACjC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;YACjE,CAAC,CAAC,SAAS;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;YAC3B,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;YAC3D,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB;YAChD,CAAC,CAAC;gBACA,GAAG,IAAI,CAAC,OAAO;gBACf,oBAAoB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBAC5D,iBAAiB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBACtD,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBAC1D,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,YAAY,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC9C,aAAa,EAAE;oBACb,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;oBAC7B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC;iBAC3C;aACF;YACD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAsB;IAC5D,OAAO,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/agent-cli/security.d.ts

@@ -0,0 +1,28 @@
+import type { AgentCliInstallLogEntry } from '@agent-tower/shared';
+export declare const SENSITIVE_ENV_KEY_PATTERN: RegExp;
+export declare function redactAgentCliLog(data: string): string;
+export declare function buildCleanAgentCliEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function parseWhitelistedVersion(output: string, versionPattern?: string): string | null;
+export declare class AgentCliLogRingBuffer {
+    private readonly maxEntries;
+    private readonly maxBytes;
+    private entries;
+    private next;
+    private totalBytes;
+    constructor(maxEntries?: number, maxBytes?: number);
+    push(source: AgentCliInstallLogEntry['source'], data: string): AgentCliInstallLogEntry;
+    pushRedacted(source: AgentCliInstallLogEntry['source'], data: string): AgentCliInstallLogEntry;
+    list(afterSeq?: number): {
+        entries: AgentCliInstallLogEntry[];
+        nextSeq: number;
+        truncated: boolean;
+    };
+    private trim;
+}
+export declare class AgentCliStreamingLogRedactor {
+    private carry;
+    private overflowed;
+    push(data: string): string[];
+    flush(): string[];
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/services/agent-cli/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,eAAO,MAAM,yBAAyB,QAAyE,CAAC;AAWhH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAetD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CA6B7F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ9F;AAED,qBAAa,qBAAqB;IAM9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAN3B,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,UAAU,CAAK;gBAGJ,UAAU,SAAO,EACjB,QAAQ,SAAa;IAGxC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,uBAAuB;IAItF,YAAY,CAAC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,uBAAuB;IAc9F,IAAI,CAAC,QAAQ,SAAI,GAAG;QAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE;IAU/F,OAAO,CAAC,IAAI;CAOb;AAED,qBAAa,4BAA4B;IACvC,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,UAAU,CAAS;IAE3B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IA2B5B,KAAK,IAAI,MAAM,EAAE;CAWlB"}

package/dist/services/agent-cli/security.js

@@ -0,0 +1,148 @@
+export const SENSITIVE_ENV_KEY_PATTERN = /(?:^|_)(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|AUTH)(?:_|$)/i;
+const REDACTION_PATTERNS = [
+    /\bBearer\s+[A-Za-z0-9._~+/=-]+/gi,
+    /\b(?:sk|sk-proj|sk-ant|xoxb|ghp|github_pat)_[A-Za-z0-9._-]{8,}\b/gi,
+    /\b(?:OPENAI_API_KEY|ANTHROPIC_API_KEY|GEMINI_API_KEY|GOOGLE_API_KEY|CURSOR_API_KEY|CLAUDE_CODE_OAUTH_TOKEN|CODEX_HOME|ANTHROPIC_AUTH_TOKEN)\s*=\s*["']?[^"'\s]+/gi,
+    /\b(?:api[_-]?key|access[_-]?token|refresh[_-]?token|auth[_-]?token|token|secret)\s*[:=]\s*["']?[A-Za-z0-9._~+/=-]{8,}/gi,
+];
+const STREAM_REDACTOR_CARRY_LIMIT = 512;
+export function redactAgentCliLog(data) {
+    let redacted = data;
+    for (const pattern of REDACTION_PATTERNS) {
+        redacted = redacted.replace(pattern, (match) => {
+            const separatorIndex = Math.max(match.lastIndexOf('='), match.lastIndexOf(':'));
+            if (separatorIndex > 0) {
+                return `${match.slice(0, separatorIndex + 1)}[REDACTED]`;
+            }
+            if (/^Bearer\s+/i.test(match)) {
+                return 'Bearer [REDACTED]';
+            }
+            return '[REDACTED]';
+        });
+    }
+    return redacted;
+}
+export function buildCleanAgentCliEnv(env = process.env) {
+    const allowedKeys = new Set([
+        'PATH',
+        'HOME',
+        'USER',
+        'LOGNAME',
+        'SHELL',
+        'LANG',
+        'LC_ALL',
+        'TERM',
+        'SystemRoot',
+        'COMSPEC',
+        'ComSpec',
+        'PATHEXT',
+        'LOCALAPPDATA',
+        'APPDATA',
+        'USERPROFILE',
+    ]);
+    const cleaned = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (value === undefined)
+            continue;
+        if (!allowedKeys.has(key))
+            continue;
+        if (key.startsWith('AGENT_TOWER_'))
+            continue;
+        if (SENSITIVE_ENV_KEY_PATTERN.test(key))
+            continue;
+        cleaned[key] = value;
+    }
+    return cleaned;
+}
+export function parseWhitelistedVersion(output, versionPattern) {
+    const pattern = versionPattern
+        ? new RegExp(versionPattern)
+        : /\d+(?:\.\d+){1,3}/;
+    const match = output.match(pattern);
+    if (!match)
+        return null;
+    const value = match[0];
+    return /^[0-9A-Za-z][0-9A-Za-z._+-]{0,63}$/.test(value) ? value : null;
+}
+export class AgentCliLogRingBuffer {
+    maxEntries;
+    maxBytes;
+    entries = [];
+    next = 1;
+    totalBytes = 0;
+    constructor(maxEntries = 2000, maxBytes = 256 * 1024) {
+        this.maxEntries = maxEntries;
+        this.maxBytes = maxBytes;
+    }
+    push(source, data) {
+        return this.pushRedacted(source, redactAgentCliLog(data));
+    }
+    pushRedacted(source, data) {
+        const entry = {
+            seq: this.next++,
+            timestamp: new Date().toISOString(),
+            source,
+            data,
+        };
+        this.entries.push(entry);
+        this.totalBytes += Buffer.byteLength(entry.data, 'utf8');
+        this.trim();
+        return entry;
+    }
+    list(afterSeq = 0) {
+        const entries = this.entries.filter((entry) => entry.seq > afterSeq);
+        const firstSeq = this.entries[0]?.seq ?? this.next;
+        return {
+            entries,
+            nextSeq: this.next,
+            truncated: afterSeq > 0 && afterSeq < firstSeq - 1,
+        };
+    }
+    trim() {
+        while (this.entries.length > this.maxEntries || this.totalBytes > this.maxBytes) {
+            const removed = this.entries.shift();
+            if (!removed)
+                return;
+            this.totalBytes -= Buffer.byteLength(removed.data, 'utf8');
+        }
+    }
+}
+export class AgentCliStreamingLogRedactor {
+    carry = '';
+    overflowed = false;
+    push(data) {
+        if (this.overflowed) {
+            const lineBreak = data.search(/\r?\n/);
+            if (lineBreak < 0)
+                return [];
+            this.overflowed = false;
+            this.carry = '';
+            const newlineLength = data[lineBreak] === '\r' && data[lineBreak + 1] === '\n' ? 2 : 1;
+            return this.push(data.slice(lineBreak + newlineLength));
+        }
+        const combined = this.carry + data;
+        const lines = combined.split(/\r?\n/);
+        const completeLines = lines.slice(0, -1);
+        this.carry = lines[lines.length - 1] ?? '';
+        const output = completeLines.map((line) => `${redactAgentCliLog(line)}\n`);
+        if (this.carry.length > STREAM_REDACTOR_CARRY_LIMIT) {
+            this.carry = '';
+            this.overflowed = true;
+            output.push('[log line exceeded redaction window; partial content withheld]\n');
+        }
+        return output;
+    }
+    flush() {
+        if (this.overflowed) {
+            this.overflowed = false;
+            this.carry = '';
+            return [];
+        }
+        if (!this.carry)
+            return [];
+        const data = redactAgentCliLog(this.carry);
+        this.carry = '';
+        return [data];
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/services/agent-cli/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/services/agent-cli/security.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,sEAAsE,CAAC;AAEhH,MAAM,kBAAkB,GAAa;IACnC,kCAAkC;IAClC,oEAAoE;IACpE,mKAAmK;IACnK,yHAAyH;CAC1H,CAAC;AAEF,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;YAC3D,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,mBAAmB,CAAC;YAC7B,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;QAC1B,MAAM;QACN,MAAM;QACN,MAAM;QACN,SAAS;QACT,OAAO;QACP,MAAM;QACN,QAAQ;QACR,MAAM;QACN,YAAY;QACZ,SAAS;QACT,SAAS;QACT,SAAS;QACT,cAAc;QACd,SAAS;QACT,aAAa;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,SAAS;QAC7C,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,cAAuB;IAC7E,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC;QAC5B,CAAC,CAAC,mBAAmB,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,qBAAqB;IAMb;IACA;IANX,OAAO,GAA8B,EAAE,CAAC;IACxC,IAAI,GAAG,CAAC,CAAC;IACT,UAAU,GAAG,CAAC,CAAC;IAEvB,YACmB,aAAa,IAAI,EACjB,WAAW,GAAG,GAAG,IAAI;QADrB,eAAU,GAAV,UAAU,CAAO;QACjB,aAAQ,GAAR,QAAQ,CAAa;IACrC,CAAC;IAEJ,IAAI,CAAC,MAAyC,EAAE,IAAY;QAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,MAAyC,EAAE,IAAY;QAClE,MAAM,KAAK,GAA4B;YACrC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,IAAI;SACL,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,QAAQ,GAAG,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC;QACnD,OAAO;YACL,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,SAAS,EAAE,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,QAAQ,GAAG,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,IAAI;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,4BAA4B;IAC/B,KAAK,GAAG,EAAE,CAAC;IACX,UAAU,GAAG,KAAK,CAAC;IAE3B,IAAI,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAE7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAE3C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3E,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;CACF"}

package/dist/services/agent-cli/task-manager.d.ts

@@ -0,0 +1,39 @@
+import type { AgentCliCommandSpec, AgentCliInstallLogResponse, AgentCliInstallTask } from '@agent-tower/shared';
+import { type AgentCliStoredPreview } from './downloader.js';
+export interface AgentCliRunnerProcess {
+    pid?: number;
+    stdout?: NodeJS.ReadableStream;
+    stderr?: NodeJS.ReadableStream;
+    kill(signal?: NodeJS.Signals | number): boolean;
+    once(event: 'exit', listener: (code: number | null, signal: NodeJS.Signals | null) => void): this;
+    once(event: 'error', listener: (error: Error) => void): this;
+}
+export type AgentCliRunner = (command: string, args: string[], options: {
+    env: NodeJS.ProcessEnv;
+    detached: boolean;
+    stdio: 'pipe';
+    windowsHide: true;
+}) => AgentCliRunnerProcess;
+export type AgentCliVerifier = (spec: AgentCliCommandSpec) => Promise<void>;
+export declare class AgentCliInstallTaskManager {
+    private readonly runner;
+    private readonly forceKillTimeoutMs;
+    private readonly verifier;
+    private tasks;
+    private buffers;
+    private processes;
+    private previewCleanup;
+    constructor(runner?: AgentCliRunner, forceKillTimeoutMs?: number, verifier?: AgentCliVerifier);
+    createTask(preview: AgentCliStoredPreview): {
+        reused: boolean;
+        task: AgentCliInstallTask;
+    };
+    getTask(taskId: string): AgentCliInstallTask;
+    getLogs(taskId: string, afterSeq?: number): AgentCliInstallLogResponse;
+    cancel(taskId: string): AgentCliInstallTask;
+    private getRunningTask;
+    private killProcessGroup;
+    private finishTask;
+    private handleInstallerExit;
+}
+//# sourceMappingURL=task-manager.d.ts.map

package/dist/services/agent-cli/task-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-manager.d.ts","sourceRoot":"","sources":["../../../src/services/agent-cli/task-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,iBAAiB,CAAC;AAEhF,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;IAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;IAC/C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAA;IACjG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAA;CAC7D;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,IAAI,CAAA;CAClB,KACE,qBAAqB,CAAC;AAE3B,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAyC5E,qBAAa,0BAA0B;IAOnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAR3B,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,OAAO,CAA4C;IAC3D,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,cAAc,CAA6B;gBAGhC,MAAM,GAAE,cAA8B,EACtC,kBAAkB,SAA+B,EACjD,QAAQ,GAAE,gBAAkC;IAG/D,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,mBAAmB,CAAA;KAAE;IAwE1F,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAM5C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,0BAA0B;IAYjE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB;IAqB3C,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,UAAU;YA+BJ,mBAAmB;CA0ClC"}