attocode 0.2.4 → 0.2.5

package/dist/src/integrations/safety/sandbox/seatbelt.js

@@ -0,0 +1,298 @@
+/**
+ * Seatbelt Sandbox (macOS)
+ *
+ * Uses macOS sandbox-exec with Seatbelt profiles to restrict command execution.
+ * Seatbelt is Apple's mandatory access control framework.
+ *
+ * Key features:
+ * - Fine-grained file system access control
+ * - Network access restrictions
+ * - Process spawning limits
+ * - Signal restrictions
+ *
+ * Note: This uses spawn() with explicit shell arguments for the sandboxed execution.
+ * The sandbox itself provides the security layer - we're wrapping shell execution
+ * with OS-level access controls.
+ *
+ * Reference: https://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v1.0.pdf
+ */
+import { spawn, execSync } from 'child_process';
+// =============================================================================
+// SEATBELT PROFILE GENERATION
+// =============================================================================
+/**
+ * Generate a Seatbelt profile based on options.
+ */
+function generateSeatbeltProfile(options) {
+    const writablePaths = options.writablePaths ?? ['.'];
+    const readablePaths = options.readablePaths ?? ['/'];
+    const networkAllowed = options.networkAllowed ?? false;
+    const workingDir = options.workingDir ?? process.cwd();
+    // Start with version declaration and deny default
+    const rules = [
+        '(version 1)',
+        '(deny default)',
+    ];
+    // Allow process management
+    rules.push('(allow process-fork)');
+    rules.push('(allow process-exec)');
+    rules.push('(allow signal (target self))');
+    // Allow system basics
+    rules.push('(allow sysctl-read)');
+    rules.push('(allow mach-lookup)');
+    rules.push('(allow ipc-posix-shm)');
+    // Allow file reads for standard paths
+    const standardReadPaths = [
+        '/bin',
+        '/usr/bin',
+        '/usr/local/bin',
+        '/opt/homebrew/bin',
+        '/sbin',
+        '/usr/sbin',
+        '/lib',
+        '/usr/lib',
+        '/usr/local/lib',
+        '/opt/homebrew/lib',
+        '/System',
+        '/Library/Frameworks',
+        '/private/var/db',
+        '/dev/null',
+        '/dev/urandom',
+        '/dev/random',
+        '/dev/tty',
+        '/etc',
+        '/private/etc',
+        '/var/folders', // Temp files
+        '/private/var/folders',
+        '/tmp',
+        '/private/tmp',
+    ];
+    // Add read access for standard paths
+    for (const path of standardReadPaths) {
+        rules.push(`(allow file-read* (subpath "${path}"))`);
+    }
+    // Add user-specified readable paths
+    for (const path of readablePaths) {
+        const resolvedPath = resolvePath(path, workingDir);
+        rules.push(`(allow file-read* (subpath "${resolvedPath}"))`);
+    }
+    // Add write access for specified paths
+    for (const path of writablePaths) {
+        const resolvedPath = resolvePath(path, workingDir);
+        rules.push(`(allow file-read* (subpath "${resolvedPath}"))`);
+        rules.push(`(allow file-write* (subpath "${resolvedPath}"))`);
+    }
+    // Temp directory access
+    rules.push('(allow file-read* (subpath "/tmp"))');
+    rules.push('(allow file-write* (subpath "/tmp"))');
+    rules.push('(allow file-read* (subpath "/private/tmp"))');
+    rules.push('(allow file-write* (subpath "/private/tmp"))');
+    // Allow write to stderr/stdout
+    rules.push('(allow file-write* (literal "/dev/tty"))');
+    rules.push('(allow file-write* (literal "/dev/null"))');
+    // Network access
+    if (networkAllowed) {
+        rules.push('(allow network*)');
+    }
+    else {
+        // Still allow localhost for dev servers
+        rules.push('(allow network-inbound (local ip "*:*"))');
+        rules.push('(allow network-outbound (local ip "localhost:*"))');
+        rules.push('(allow network-outbound (local ip "127.0.0.1:*"))');
+        rules.push('(allow network-outbound (local ip "::1:*"))');
+    }
+    return rules.join('\n');
+}
+/**
+ * Resolve a path relative to working directory.
+ */
+function resolvePath(path, workingDir) {
+    if (path.startsWith('/')) {
+        return path;
+    }
+    if (path === '.') {
+        return workingDir;
+    }
+    return `${workingDir}/${path}`;
+}
+// =============================================================================
+// SEATBELT SANDBOX
+// =============================================================================
+/**
+ * macOS Seatbelt sandbox implementation.
+ */
+export class SeatbeltSandbox {
+    options;
+    available = null;
+    constructor(options) {
+        this.options = options;
+    }
+    /**
+     * Execute a command inside the Seatbelt sandbox.
+     *
+     * Note: We use spawn with 'bash -c' because the sandbox-exec command
+     * itself provides the security boundary. The command string is passed
+     * to the sandboxed shell, which has restricted access via Seatbelt.
+     */
+    async execute(command, options) {
+        const mergedOptions = { ...this.options, ...options };
+        const profile = generateSeatbeltProfile(mergedOptions);
+        const timeout = mergedOptions.timeout ?? 60000;
+        const workDir = mergedOptions.workingDir ?? process.cwd();
+        return new Promise((resolve) => {
+            // sandbox-exec -p 'profile' bash -c 'command'
+            // The sandbox profile restricts what the shell can do
+            const proc = spawn('sandbox-exec', ['-p', profile, 'bash', '-c', command], {
+                cwd: workDir,
+                env: {
+                    ...process.env,
+                    ...mergedOptions.env,
+                    // Add common paths to PATH
+                    PATH: [
+                        process.env.PATH,
+                        '/usr/local/bin',
+                        '/opt/homebrew/bin',
+                        '/usr/bin',
+                        '/bin',
+                    ].filter(Boolean).join(':'),
+                },
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            let stdout = '';
+            let stderr = '';
+            let killed = false;
+            let timedOut = false;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                killed = true;
+                proc.kill('SIGKILL');
+            }, timeout);
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            proc.on('close', (code) => {
+                clearTimeout(timer);
+                // Check if the sandbox blocked something
+                const sandboxError = this.parseSandboxError(stderr);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: code ?? 1,
+                    killed,
+                    timedOut,
+                    error: sandboxError,
+                });
+            });
+            proc.on('error', (err) => {
+                clearTimeout(timer);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: 1,
+                    killed: false,
+                    timedOut: false,
+                    error: err.message,
+                });
+            });
+        });
+    }
+    /**
+     * Check if Seatbelt is available on this system.
+     */
+    async isAvailable() {
+        if (this.available !== null) {
+            return this.available;
+        }
+        // Must be macOS
+        if (process.platform !== 'darwin') {
+            this.available = false;
+            return false;
+        }
+        // Check if sandbox-exec exists
+        try {
+            execSync('which sandbox-exec', { stdio: 'pipe' });
+            this.available = true;
+            return true;
+        }
+        catch {
+            this.available = false;
+            return false;
+        }
+    }
+    /**
+     * Get sandbox type.
+     */
+    getType() {
+        return 'seatbelt';
+    }
+    /**
+     * Cleanup resources.
+     */
+    async cleanup() {
+        // No persistent resources to clean up
+    }
+    /**
+     * Parse sandbox error from stderr.
+     */
+    parseSandboxError(stderr) {
+        // Look for sandbox denial messages
+        if (stderr.includes('sandbox-exec:') || stderr.includes('deny')) {
+            const match = stderr.match(/sandbox-exec: (.+)/);
+            if (match) {
+                return `Sandbox denied: ${match[1]}`;
+            }
+        }
+        return undefined;
+    }
+}
+// =============================================================================
+// PREDEFINED PROFILES
+// =============================================================================
+/**
+ * Strict profile - minimal access for pure computation.
+ */
+export const STRICT_PROFILE = {
+    writablePaths: [],
+    readablePaths: ['/usr/lib', '/System'],
+    networkAllowed: false,
+    timeout: 30000,
+    maxMemoryMB: 256,
+    maxCpuSeconds: 10,
+};
+/**
+ * Development profile - allows npm, node, git operations.
+ */
+export const DEV_PROFILE = {
+    writablePaths: ['.', 'node_modules', '.git'],
+    readablePaths: ['/'],
+    networkAllowed: true, // Allow npm install
+    timeout: 300000, // 5 minutes
+    maxMemoryMB: 1024,
+    maxCpuSeconds: 120,
+};
+/**
+ * Build profile - allows compilation but no network.
+ */
+export const BUILD_PROFILE = {
+    writablePaths: ['.', 'dist', 'build', 'node_modules/.cache'],
+    readablePaths: ['/'],
+    networkAllowed: false,
+    timeout: 300000,
+    maxMemoryMB: 2048,
+    maxCpuSeconds: 300,
+};
+/**
+ * Test profile - allows test execution with limited write access.
+ */
+export const TEST_PROFILE = {
+    writablePaths: ['.', 'coverage', 'test-results', 'node_modules/.cache'],
+    readablePaths: ['/'],
+    networkAllowed: false, // Tests should be isolated
+    timeout: 600000, // 10 minutes
+    maxMemoryMB: 1024,
+    maxCpuSeconds: 300,
+};
+//# sourceMappingURL=seatbelt.js.map

package/dist/src/integrations/safety/sandbox/seatbelt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seatbelt.js","sourceRoot":"","sources":["../../../../../src/integrations/safety/sandbox/seatbelt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGhD,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;GAEG;AACH,SAAS,uBAAuB,CAAC,OAAuB;IACtD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvD,kDAAkD;IAClD,MAAM,KAAK,GAAa;QACtB,aAAa;QACb,gBAAgB;KACjB,CAAC;IAEF,2BAA2B;IAC3B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAE3C,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAEpC,sCAAsC;IACtC,MAAM,iBAAiB,GAAG;QACxB,MAAM;QACN,UAAU;QACV,gBAAgB;QAChB,mBAAmB;QACnB,OAAO;QACP,WAAW;QACX,MAAM;QACN,UAAU;QACV,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,qBAAqB;QACrB,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,aAAa;QACb,UAAU;QACV,MAAM;QACN,cAAc;QACd,cAAc,EAAK,aAAa;QAChC,sBAAsB;QACtB,MAAM;QACN,cAAc;KACf,CAAC;IAEF,qCAAqC;IACrC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,+BAA+B,IAAI,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,+BAA+B,YAAY,KAAK,CAAC,CAAC;IAC/D,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,+BAA+B,YAAY,KAAK,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,gCAAgC,YAAY,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAE3D,+BAA+B;IAC/B,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAExD,iBAAiB;IACjB,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,wCAAwC;QACxC,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,UAAkB;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAiB;IACxB,SAAS,GAAmB,IAAI,CAAC;IAEzC,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiC;QAC9D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,KAAK,CAAC;QAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,8CAA8C;YAC9C,sDAAsD;YACtD,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;gBACzE,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,aAAa,CAAC,GAAG;oBACpB,2BAA2B;oBAC3B,IAAI,EAAE;wBACJ,OAAO,CAAC,GAAG,CAAC,IAAI;wBAChB,gBAAgB;wBAChB,mBAAmB;wBACnB,UAAU;wBACV,MAAM;qBACP,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBAC5B;gBACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,yCAAyC;gBACzC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAEpD,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM;oBACN,QAAQ;oBACR,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,GAAG,CAAC,OAAO;iBACnB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC;YACH,QAAQ,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,sCAAsC;IACxC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAAc;QACtC,mCAAmC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,mBAAmB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;IACtC,cAAc,EAAE,KAAK;IACrB,OAAO,EAAE,KAAK;IACd,WAAW,EAAE,GAAG;IAChB,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAmB;IACzC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,GAAG,CAAC;IACpB,cAAc,EAAE,IAAI,EAAG,oBAAoB;IAC3C,OAAO,EAAE,MAAM,EAAQ,YAAY;IACnC,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,GAAG;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC;IAC5D,aAAa,EAAE,CAAC,GAAG,CAAC;IACpB,cAAc,EAAE,KAAK;IACrB,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,GAAG;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,aAAa,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,qBAAqB,CAAC;IACvE,aAAa,EAAE,CAAC,GAAG,CAAC;IACpB,cAAc,EAAE,KAAK,EAAE,2BAA2B;IAClD,OAAO,EAAE,MAAM,EAAQ,aAAa;IACpC,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,GAAG;CACnB,CAAC"}

package/dist/src/integrations/safety/type-checker.d.ts

@@ -0,0 +1,53 @@
+/**
+ * TypeScript Compilation Checker
+ *
+ * Detects TypeScript projects, runs `tsc --noEmit` periodically during editing
+ * and at completion, and formats errors for agent consumption.
+ *
+ * Uses the same safe spawn pattern as src/tools/bash.ts.
+ */
+export interface TypeCheckError {
+    file: string;
+    line: number;
+    column: number;
+    code: string;
+    message: string;
+}
+export interface TypeCheckResult {
+    success: boolean;
+    errorCount: number;
+    errors: TypeCheckError[];
+    duration: number;
+}
+export interface TypeCheckerState {
+    tsconfigDir: string | null;
+    tsEditsSinceLastCheck: number;
+    lastResult: TypeCheckResult | null;
+    hasRunOnce: boolean;
+}
+/**
+ * Walk up from cwd looking for tsconfig.json.
+ * Returns the containing directory or null.
+ */
+export declare function detectTypeScriptProject(cwd: string): string | null;
+/**
+ * Run `npx tsc --noEmit --pretty false` in tsconfigDir.
+ * Uses spawn (not exec) to avoid shell injection — same safe pattern as tools/bash.ts.
+ * On spawn error (tsc not installed), returns success (graceful degradation).
+ */
+export declare function runTypeCheck(tsconfigDir: string, timeout?: number): Promise<TypeCheckResult>;
+/**
+ * Parse tsc --pretty false output into structured errors.
+ * Format: file(line,column): error TSxxxx: message
+ */
+export declare function parseTypeCheckOutput(output: string): TypeCheckError[];
+/**
+ * Format compilation errors into an agent-readable nudge message.
+ * Shows up to maxErrors errors and ends with a fix instruction.
+ */
+export declare function formatTypeCheckNudge(result: TypeCheckResult, maxErrors?: number): string;
+/**
+ * Create initial TypeCheckerState by detecting the project.
+ */
+export declare function createTypeCheckerState(cwd: string): TypeCheckerState;
+//# sourceMappingURL=type-checker.d.ts.map

package/dist/src/integrations/safety/type-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-checker.d.ts","sourceRoot":"","sources":["../../../../src/integrations/safety/type-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;CACrB;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalE;AAMD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,MAAe,GACvB,OAAO,CAAC,eAAe,CAAC,CA6C1B;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAgBrE;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,SAAS,GAAE,MAAW,GACrB,MAAM,CAmBR;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAOpE"}

package/dist/src/integrations/safety/type-checker.js

@@ -0,0 +1,142 @@
+/**
+ * TypeScript Compilation Checker
+ *
+ * Detects TypeScript projects, runs `tsc --noEmit` periodically during editing
+ * and at completion, and formats errors for agent consumption.
+ *
+ * Uses the same safe spawn pattern as src/tools/bash.ts.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+// =============================================================================
+// PROJECT DETECTION
+// =============================================================================
+/**
+ * Walk up from cwd looking for tsconfig.json.
+ * Returns the containing directory or null.
+ */
+export function detectTypeScriptProject(cwd) {
+    let dir = cwd;
+    const root = dirname(dir) === dir ? dir : undefined; // filesystem root guard
+    for (let i = 0; i < 20; i++) {
+        if (existsSync(join(dir, 'tsconfig.json'))) {
+            return dir;
+        }
+        const parent = dirname(dir);
+        if (parent === dir || parent === root)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+// =============================================================================
+// TSC EXECUTION
+// =============================================================================
+/**
+ * Run `npx tsc --noEmit --pretty false` in tsconfigDir.
+ * Uses spawn (not exec) to avoid shell injection — same safe pattern as tools/bash.ts.
+ * On spawn error (tsc not installed), returns success (graceful degradation).
+ */
+export async function runTypeCheck(tsconfigDir, timeout = 60_000) {
+    const start = Date.now();
+    return new Promise((resolve) => {
+        let stdout = '';
+        let stderr = '';
+        let resolved = false;
+        const done = (success) => {
+            if (resolved)
+                return;
+            resolved = true;
+            const output = stdout + '\n' + stderr;
+            const errors = parseTypeCheckOutput(output);
+            resolve({
+                success,
+                errorCount: errors.length,
+                errors,
+                duration: Date.now() - start,
+            });
+        };
+        try {
+            const child = spawn('npx', ['tsc', '--noEmit', '--pretty', 'false'], {
+                cwd: tsconfigDir,
+                stdio: ['ignore', 'pipe', 'pipe'],
+                env: { ...process.env },
+                timeout,
+            });
+            child.stdout?.on('data', (data) => { stdout += data.toString(); });
+            child.stderr?.on('data', (data) => { stderr += data.toString(); });
+            child.on('close', (code) => {
+                done(code === 0);
+            });
+            child.on('error', () => {
+                // tsc not installed or spawn failed — graceful degradation
+                done(true);
+            });
+        }
+        catch {
+            // Spawn itself failed — graceful degradation
+            done(true);
+        }
+    });
+}
+// =============================================================================
+// OUTPUT PARSING
+// =============================================================================
+/**
+ * Parse tsc --pretty false output into structured errors.
+ * Format: file(line,column): error TSxxxx: message
+ */
+export function parseTypeCheckOutput(output) {
+    const errors = [];
+    const regex = /^(.+?)\((\d+),(\d+)\):\s+error\s+(TS\d+):\s+(.+)$/gm;
+    let match;
+    while ((match = regex.exec(output)) !== null) {
+        errors.push({
+            file: match[1],
+            line: parseInt(match[2], 10),
+            column: parseInt(match[3], 10),
+            code: match[4],
+            message: match[5],
+        });
+    }
+    return errors;
+}
+// =============================================================================
+// NUDGE FORMATTING
+// =============================================================================
+/**
+ * Format compilation errors into an agent-readable nudge message.
+ * Shows up to maxErrors errors and ends with a fix instruction.
+ */
+export function formatTypeCheckNudge(result, maxErrors = 15) {
+    const parts = [
+        `[System] TypeScript compilation failed with ${result.errorCount} error(s):`,
+        '',
+    ];
+    const shown = result.errors.slice(0, maxErrors);
+    for (const err of shown) {
+        parts.push(`  ${err.file}(${err.line},${err.column}): ${err.code}: ${err.message}`);
+    }
+    if (result.errors.length > maxErrors) {
+        parts.push(`  ... and ${result.errors.length - maxErrors} more error(s)`);
+    }
+    parts.push('');
+    parts.push('Fix these TypeScript compilation errors before completing the task.');
+    return parts.join('\n');
+}
+// =============================================================================
+// FACTORY
+// =============================================================================
+/**
+ * Create initial TypeCheckerState by detecting the project.
+ */
+export function createTypeCheckerState(cwd) {
+    return {
+        tsconfigDir: detectTypeScriptProject(cwd),
+        tsEditsSinceLastCheck: 0,
+        lastResult: null,
+        hasRunOnce: false,
+    };
+}
+//# sourceMappingURL=type-checker.js.map

package/dist/src/integrations/safety/type-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-checker.js","sourceRoot":"","sources":["../../../../src/integrations/safety/type-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4B1C,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,wBAAwB;IAE7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM;QAC7C,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,UAAkB,MAAM;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE;YAChC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;YACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,CAAC;gBACN,OAAO;gBACP,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;gBACnE,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBACvB,OAAO;aACR,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,2DAA2D;gBAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,qDAAqD,CAAC;IAEpE,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,YAAoB,EAAE;IAEtB,MAAM,KAAK,GAAa;QACtB,+CAA+C,MAAM,CAAC,UAAU,YAAY;QAC5E,EAAE;KACH,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAElF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO;QACL,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;QACzC,qBAAqB,EAAE,CAAC;QACxB,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC"}

package/dist/src/integrations/skills/skill-executor.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Skill Executor
+ *
+ * Handles invocation of skills with argument parsing and template substitution.
+ * Skills can be invoked like commands: /review --file src/main.ts --focus security
+ */
+import type { Skill, SkillManager } from './skills.js';
+/**
+ * Parsed arguments from command line input.
+ */
+export interface ParsedArgs {
+    /** Named arguments (--name value or -n value) */
+    named: Record<string, unknown>;
+    /** Positional arguments (remaining after named) */
+    positional: string[];
+    /** Any parsing errors */
+    errors: string[];
+}
+/**
+ * Context provided during skill execution.
+ */
+export interface SkillExecutionContext {
+    /** Current working directory */
+    cwd: string;
+    /** Session ID */
+    sessionId?: string;
+    /** Current conversation context (for prompt injection) */
+    conversationContext?: string;
+    /** Callback to run agent with injected prompt */
+    runWithPrompt?: (prompt: string) => Promise<SkillExecutionResult>;
+}
+/**
+ * Result of skill execution.
+ */
+export interface SkillExecutionResult {
+    /** Whether execution succeeded */
+    success: boolean;
+    /** Result message or output */
+    output: string;
+    /** Injected prompt for the agent (if prompt-injection mode) */
+    injectedPrompt?: string;
+    /** Error message if failed */
+    error?: string;
+}
+/**
+ * Skill execution event types.
+ */
+export type SkillExecutorEvent = {
+    type: 'skill.invoke.start';
+    skillName: string;
+    args: string[];
+} | {
+    type: 'skill.invoke.parsed';
+    skillName: string;
+    parsed: ParsedArgs;
+} | {
+    type: 'skill.invoke.complete';
+    skillName: string;
+    result: SkillExecutionResult;
+} | {
+    type: 'skill.invoke.error';
+    skillName: string;
+    error: string;
+};
+export type SkillExecutorEventListener = (event: SkillExecutorEvent) => void;
+/**
+ * Executes invokable skills with argument parsing and template substitution.
+ */
+export declare class SkillExecutor {
+    private skillManager;
+    private eventListeners;
+    constructor(skillManager: SkillManager);
+    /**
+     * Check if an input string is a potential skill invocation.
+     * Returns the skill name if it matches, null otherwise.
+     */
+    isSkillInvocation(input: string): string | null;
+    /**
+     * Parse command-line style arguments.
+     */
+    parseArguments(skill: Skill, rawArgs: string[]): ParsedArgs;
+    /**
+     * Substitute template variables in skill content.
+     * Variables are in the form {{name}} or {{name|default}}.
+     */
+    substituteTemplate(content: string, args: ParsedArgs): string;
+    /**
+     * Execute a skill by name with arguments.
+     */
+    executeSkill(skillName: string, rawArgs: string[], ctx: SkillExecutionContext): Promise<SkillExecutionResult>;
+    /**
+     * Build the prompt to inject based on skill content and arguments.
+     */
+    private buildInjectedPrompt;
+    /**
+     * Format help text for a skill.
+     */
+    formatSkillHelp(skill: Skill): string;
+    /**
+     * Get all invokable skills.
+     */
+    getInvokableSkills(): Skill[];
+    /**
+     * Subscribe to executor events.
+     */
+    subscribe(listener: SkillExecutorEventListener): () => void;
+    private emit;
+}
+/**
+ * Create a skill executor.
+ */
+export declare function createSkillExecutor(skillManager: SkillManager): SkillExecutor;
+//# sourceMappingURL=skill-executor.d.ts.map

package/dist/src/integrations/skills/skill-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-executor.d.ts","sourceRoot":"","sources":["../../../../src/integrations/skills/skill-executor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAiB,YAAY,EAAE,MAAM,aAAa,CAAC;AAMtE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/B,mDAAmD;IACnD,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,yBAAyB;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IAEZ,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,iDAAiD;IACjD,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IAEjB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IAEf,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,MAAM,MAAM,0BAA0B,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAM7E;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,cAAc,CAA8C;gBAExD,YAAY,EAAE,YAAY;IAItC;;;OAGG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAc/C;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU;IA8F3D;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM;IAY7D;;OAEG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EAAE,EACjB,GAAG,EAAE,qBAAqB,GACzB,OAAO,CAAC,oBAAoB,CAAC;IAqEhC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAqB3B;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM;IAoBrC;;OAEG;IACH,kBAAkB,IAAI,KAAK,EAAE;IAI7B;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,IAAI;IAK3D,OAAO,CAAC,IAAI;CASb;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,CAE7E"}