aws-runtime-bridge 1.9.78 → 1.9.80

package/dist/services/workspace-files.js

@@ -1,1275 +1,2 @@
-/**
- * 工作区文件服务
- * 负责在工作区范围内安全地浏览、读取与保存文件。
- */
-import { createReadStream, createWriteStream, promises as fs } from 'node:fs';
-import path from 'node:path';
-import { Readable } from 'node:stream';
-import { pipeline } from 'node:stream/promises';
-import { TextDecoder } from 'node:util';
-import { createGunzip } from 'node:zlib';
-import * as tar from 'tar';
-import unzipper from 'unzipper';
-const { ZipArchive } = await import('archiver');
-const ARCHIVE_LIMITS = {
-    maxEntries: 10_000,
-    maxFileBytes: 512 * 1024 * 1024,
-    maxTotalBytes: 2 * 1024 * 1024 * 1024,
-    maxPathDepth: 64,
-    maxPathLength: 4096,
-};
-const GBK_DECODER = new TextDecoder('gbk');
-function toDisplayPath(targetPath) {
-    return String(targetPath || '').replace(/\\/g, '/');
-}
-/**
- * 规范化并校验工作区路径。
- */
-function resolveWorkspaceRoot(workspacePath) {
-    const normalizedWorkspacePath = path.resolve(String(workspacePath || '').trim());
-    if (!normalizedWorkspacePath) {
-        throw new Error('workspacePath is required');
-    }
-    return normalizedWorkspacePath;
-}
-async function resolveWorkspaceRootRealpath(workspacePath) {
-    const workspaceRoot = resolveWorkspaceRoot(workspacePath);
-    const realWorkspaceRoot = await fs.realpath(workspaceRoot);
-    const stat = await fs.stat(realWorkspaceRoot);
-    if (!stat.isDirectory()) {
-        throw new Error(`Workspace path is not a directory: ${workspaceRoot}`);
-    }
-    return realWorkspaceRoot;
-}
-async function resolveWorkspaceRoots(workspacePath) {
-    const requestedRoot = resolveWorkspaceRoot(workspacePath);
-    return {
-        requestedRoot,
-        workspaceRoot: await resolveWorkspaceRootRealpath(workspacePath),
-    };
-}
-/**
- * 判断目标路径是否位于工作区内。
- */
-function ensureInsideWorkspace(workspaceRoot, targetPath) {
-    const resolvedTargetPath = path.resolve(targetPath);
-    const relativePath = path.relative(workspaceRoot, resolvedTargetPath);
-    const isOutside = relativePath.startsWith('..') || path.isAbsolute(relativePath);
-    if (isOutside) {
-        throw new Error(`Target path is outside workspace: ${resolvedTargetPath}`);
-    }
-    return resolvedTargetPath;
-}
-async function ensureRealPathInsideWorkspace(workspaceRoot, targetPath) {
-    const realTargetPath = await fs.realpath(targetPath);
-    return ensureInsideWorkspace(workspaceRoot, realTargetPath);
-}
-async function ensureWritableParentInsideWorkspace(workspaceRoot, targetPath) {
-    const realParentPath = await fs.realpath(path.dirname(targetPath));
-    ensureInsideWorkspace(workspaceRoot, realParentPath);
-    try {
-        const targetLinkStat = await fs.lstat(targetPath);
-        if (targetLinkStat.isSymbolicLink()) {
-            throw new Error(`Refusing to write through symbolic link: ${targetPath}`);
-        }
-    }
-    catch (error) {
-        const errorCode = typeof error === 'object' && error !== null ? Reflect.get(error, 'code') : undefined;
-        if (errorCode !== 'ENOENT') {
-            throw error;
-        }
-    }
-}
-function resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, requestedPath) {
-    const resolvedRequestedPath = path.resolve(requestedPath);
-    const requestedRelativePath = path.relative(requestedRoot, resolvedRequestedPath);
-    if (requestedRelativePath.startsWith('..') || path.isAbsolute(requestedRelativePath)) {
-        throw new Error(`Target path is outside workspace: ${resolvedRequestedPath}`);
-    }
-    return ensureInsideWorkspace(workspaceRoot, path.join(workspaceRoot, requestedRelativePath));
-}
-/**
- * 解析目录目标路径，空路径时回退到工作区根目录。
- */
-async function resolveDirectoryTarget({ workspacePath, targetPath = '' }) {
-    const { requestedRoot, workspaceRoot } = await resolveWorkspaceRoots(workspacePath);
-    const requestedPath = String(targetPath || '').trim();
-    const lexicalTargetPath = requestedPath
-        ? resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, requestedPath)
-        : workspaceRoot;
-    const resolvedTargetPath = await ensureRealPathInsideWorkspace(workspaceRoot, lexicalTargetPath);
-    return { workspaceRoot, resolvedTargetPath };
-}
-/**
- * 校验工作区内的条目名称，避免跨目录操作与非法名称。
- */
-function normalizeEntryName(rawName) {
-    const entryName = String(rawName || '').trim();
-    if (!entryName) {
-        throw new Error('entryName is required');
-    }
-    if (entryName === '.' || entryName === '..') {
-        throw new Error('entryName is invalid');
-    }
-    if (entryName.includes('/') || entryName.includes('\\') || path.basename(entryName) !== entryName) {
-        throw new Error(`entryName must be a plain file or directory name: ${entryName}`);
-    }
-    return entryName;
-}
-/**
- * 修正 multipart 文件名在部分代理链路中被 latin1 解读造成的 UTF-8 中文乱码。
- */
-function decodePossiblyLatin1Utf8FileName(rawName) {
-    const fileName = String(rawName || '');
-    if (!/[\u00c0-\u00ff]/.test(fileName)) {
-        return fileName;
-    }
-    const decodedFileName = Buffer.from(fileName, 'latin1').toString('utf8');
-    if (!decodedFileName || decodedFileName.includes('\uFFFD')) {
-        return fileName;
-    }
-    return decodedFileName;
-}
-/**
- * 将上传文件名规范化为单级文件名，避免浏览器提交的路径穿透目录。
- */
-function normalizeUploadedFileName(rawName) {
-    const decodedName = decodePossiblyLatin1Utf8FileName(rawName);
-    return normalizeEntryName(path.basename(decodedName.replace(/\\/g, '/')));
-}
-/**
- * 将浏览器传入的上传相对路径拆成安全路径片段，保留文件夹层级但拒绝穿透路径。
- */
-function normalizeUploadedRelativePath(rawPath, fallbackName) {
-    if (!rawPath) {
-        return normalizeUploadedFileName(fallbackName);
-    }
-    const decodedPath = decodePossiblyLatin1Utf8FileName(String(rawPath || fallbackName || '')).replace(/\\/g, '/');
-    const segments = decodedPath.split('/').filter(Boolean).map((segment) => normalizeEntryName(segment));
-    if (segments.length === 0) {
-        return normalizeUploadedFileName(fallbackName);
-    }
-    return path.join(...segments);
-}
-function formatModeOctal(mode) {
-    return (mode & 0o7777).toString(8).padStart(4, '0');
-}
-function parsePermissionMode(rawMode) {
-    const modeText = String(rawMode || '').trim();
-    if (!/^[0-7]{3,4}$/.test(modeText)) {
-        throw new Error('mode must be a 3 or 4 digit octal string');
-    }
-    return Number.parseInt(modeText, 8);
-}
-function permissionTriplet(mode, readBit, writeBit, executeBit, specialBit, specialExecute, specialNoExecute) {
-    const read = (mode & readBit) !== 0 ? 'r' : '-';
-    const write = (mode & writeBit) !== 0 ? 'w' : '-';
-    const hasExecute = (mode & executeBit) !== 0;
-    const hasSpecial = (mode & specialBit) !== 0;
-    const execute = hasSpecial ? (hasExecute ? specialExecute : specialNoExecute) : (hasExecute ? 'x' : '-');
-    return `${read}${write}${execute}`;
-}
-function formatPermissions(mode) {
-    return [
-        permissionTriplet(mode, 0o400, 0o200, 0o100, 0o4000, 's', 'S'),
-        permissionTriplet(mode, 0o040, 0o020, 0o010, 0o2000, 's', 'S'),
-        permissionTriplet(mode, 0o004, 0o002, 0o001, 0o1000, 't', 'T'),
-    ].join('');
-}
-function readPngDimensions(buffer) {
-    if (buffer.length < 24 || buffer.toString('hex', 0, 8) !== '89504e470d0a1a0a') {
-        return undefined;
-    }
-    return {
-        format: 'png',
-        width: buffer.readUInt32BE(16),
-        height: buffer.readUInt32BE(20),
-    };
-}
-function readGifDimensions(buffer) {
-    if (buffer.length < 10 || (buffer.toString('ascii', 0, 6) !== 'GIF87a' && buffer.toString('ascii', 0, 6) !== 'GIF89a')) {
-        return undefined;
-    }
-    return {
-        format: 'gif',
-        width: buffer.readUInt16LE(6),
-        height: buffer.readUInt16LE(8),
-    };
-}
-function readJpegDimensions(buffer) {
-    if (buffer.length < 4 || buffer[0] !== 0xff || buffer[1] !== 0xd8) {
-        return undefined;
-    }
-    let offset = 2;
-    while (offset + 9 < buffer.length) {
-        if (buffer[offset] !== 0xff) {
-            offset += 1;
-            continue;
-        }
-        const marker = buffer[offset + 1];
-        const segmentLength = buffer.readUInt16BE(offset + 2);
-        if (segmentLength < 2) {
-            return undefined;
-        }
-        const isStartOfFrame = marker >= 0xc0 && marker <= 0xcf && ![0xc4, 0xc8, 0xcc].includes(marker);
-        if (isStartOfFrame && offset + 8 < buffer.length) {
-            return {
-                format: 'jpeg',
-                height: buffer.readUInt16BE(offset + 5),
-                width: buffer.readUInt16BE(offset + 7),
-            };
-        }
-        offset += 2 + segmentLength;
-    }
-    return undefined;
-}
-function readWebpDimensions(buffer) {
-    if (buffer.length < 30 || buffer.toString('ascii', 0, 4) !== 'RIFF' || buffer.toString('ascii', 8, 12) !== 'WEBP') {
-        return undefined;
-    }
-    const chunkType = buffer.toString('ascii', 12, 16);
-    if (chunkType === 'VP8X' && buffer.length >= 30) {
-        return {
-            format: 'webp',
-            width: 1 + buffer.readUIntLE(24, 3),
-            height: 1 + buffer.readUIntLE(27, 3),
-        };
-    }
-    if (chunkType === 'VP8 ' && buffer.length >= 30) {
-        return {
-            format: 'webp',
-            width: buffer.readUInt16LE(26) & 0x3fff,
-            height: buffer.readUInt16LE(28) & 0x3fff,
-        };
-    }
-    if (chunkType === 'VP8L' && buffer.length >= 25) {
-        const bits = buffer.readUInt32LE(21);
-        return {
-            format: 'webp',
-            width: (bits & 0x3fff) + 1,
-            height: ((bits >> 14) & 0x3fff) + 1,
-        };
-    }
-    return undefined;
-}
-async function collectChmodTargets(workspaceRoot, targetPath, recursive) {
-    const linkStat = await fs.lstat(targetPath);
-    if (linkStat.isSymbolicLink()) {
-        throw new Error(`Refusing to change permissions on symbolic link: ${targetPath}`);
-    }
-    const stat = await fs.stat(targetPath);
-    if (!recursive || !stat.isDirectory()) {
-        return [targetPath];
-    }
-    const children = await fs.readdir(targetPath);
-    const nestedTargets = await Promise.all(children.map((childName) => {
-        const childPath = ensureInsideWorkspace(workspaceRoot, path.join(targetPath, childName));
-        return collectChmodTargets(workspaceRoot, childPath, true);
-    }));
-    return [targetPath, ...nestedTargets.flat()];
-}
-async function ensureSafeChmodTarget(workspaceRoot, targetPath) {
-    const linkStat = await fs.lstat(targetPath);
-    if (linkStat.isSymbolicLink()) {
-        throw new Error(`Refusing to change permissions on symbolic link: ${targetPath}`);
-    }
-    await ensureRealPathInsideWorkspace(workspaceRoot, targetPath);
-}
-async function readImageProperties(filePath) {
-    const header = await fs.open(filePath, 'r');
-    try {
-        const buffer = Buffer.alloc(512);
-        const { bytesRead } = await header.read(buffer, 0, buffer.length, 0);
-        const imageHeader = buffer.subarray(0, bytesRead);
-        return readPngDimensions(imageHeader)
-            || readGifDimensions(imageHeader)
-            || readJpegDimensions(imageHeader)
-            || readWebpDimensions(imageHeader);
-    }
-    finally {
-        await header.close();
-    }
-}
-/**
- * 解析并校验工作区内条目的目标路径。
- */
-async function resolveEntryTarget({ workspacePath, targetPath }, options = {}) {
-    const { requestedRoot, workspaceRoot } = await resolveWorkspaceRoots(workspacePath);
-    const normalizedTargetPath = String(targetPath || '').trim();
-    if (!normalizedTargetPath) {
-        throw new Error('targetPath is required');
-    }
-    const lexicalTargetPath = resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, normalizedTargetPath);
-    const resolvedTargetPath = await ensureRealPathInsideWorkspace(workspaceRoot, lexicalTargetPath);
-    if (!options.allowWorkspaceRoot && resolvedTargetPath === workspaceRoot) {
-        throw new Error('Workspace root cannot be modified');
-    }
-    return { workspaceRoot, resolvedTargetPath };
-}
-async function resolveWritableDirectory(params) {
-    const { requestedRoot, workspaceRoot } = await resolveWorkspaceRoots(params.workspacePath);
-    const requestedPath = String(params.targetPath || '').trim();
-    if (!requestedPath) {
-        return { workspaceRoot, resolvedTargetPath: workspaceRoot };
-    }
-    const lexicalTargetPath = resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, requestedPath);
-    if (await pathExists(lexicalTargetPath)) {
-        return {
-            workspaceRoot,
-            resolvedTargetPath: await ensureRealPathInsideWorkspace(workspaceRoot, lexicalTargetPath),
-        };
-    }
-    const realParentPath = await fs.realpath(path.dirname(lexicalTargetPath));
-    ensureInsideWorkspace(workspaceRoot, realParentPath);
-    return { workspaceRoot, resolvedTargetPath: lexicalTargetPath };
-}
-function archiveKind(filePath) {
-    const lowerName = filePath.toLowerCase();
-    if (lowerName.endsWith('.zip'))
-        return 'zip';
-    if (lowerName.endsWith('.tar.gz') || lowerName.endsWith('.tgz'))
-        return 'tgz';
-    if (lowerName.endsWith('.tar'))
-        return 'tar';
-    if (lowerName.endsWith('.gz'))
-        return 'gz';
-    return null;
-}
-function stripArchiveExtension(fileName) {
-    return fileName.replace(/\.tar\.gz$/i, '').replace(/\.tgz$/i, '').replace(/\.zip$/i, '').replace(/\.tar$/i, '').replace(/\.gz$/i, '');
-}
-function resolveArchiveUploadOutputPath(uploadTargetDirectory, archiveFileName) {
-    const outputDirectoryName = normalizeEntryName(stripArchiveExtension(archiveFileName) || 'extracted');
-    return path.join(uploadTargetDirectory, outputDirectoryName);
-}
-function ensureArchiveEntryInside(targetRoot, entryPath) {
-    const normalizedEntryPath = String(entryPath || '').replace(/\\/g, '/');
-    const pathSegments = normalizedEntryPath.split('/').filter(Boolean);
-    if (!normalizedEntryPath || normalizedEntryPath.startsWith('/') || /^[A-Za-z]:/.test(normalizedEntryPath)) {
-        throw new Error(`Archive entry path is invalid: ${entryPath}`);
-    }
-    if (normalizedEntryPath.length > ARCHIVE_LIMITS.maxPathLength || pathSegments.length > ARCHIVE_LIMITS.maxPathDepth) {
-        throw new Error(`Archive entry path is too deep or too long: ${entryPath}`);
-    }
-    return ensureInsideWorkspace(targetRoot, path.join(targetRoot, normalizedEntryPath));
-}
-function decodeZipEntryPath(entry) {
-    const pathBuffer = entry.props?.pathBuffer;
-    if (!pathBuffer || entry.props?.flags?.isUnicode) {
-        return entry.path;
-    }
-    const decodedPath = GBK_DECODER.decode(pathBuffer);
-    if (!decodedPath || decodedPath.includes('\uFFFD')) {
-        return entry.path;
-    }
-    return decodedPath;
-}
-async function drainZipEntry(entry) {
-    const drainedStream = entry.autodrain?.();
-    if (!drainedStream) {
-        return;
-    }
-    await new Promise((resolve, reject) => {
-        drainedStream.on('close', resolve);
-        drainedStream.on('end', resolve);
-        drainedStream.on('finish', resolve);
-        drainedStream.on('error', reject);
-    });
-}
-function trackArchiveEntry(meter) {
-    meter.entries += 1;
-    if (meter.entries > ARCHIVE_LIMITS.maxEntries) {
-        throw new Error(`Archive contains too many entries. Limit: ${ARCHIVE_LIMITS.maxEntries}`);
-    }
-}
-function trackArchiveBytes(meter, bytes) {
-    meter.totalBytes += bytes;
-    if (bytes > ARCHIVE_LIMITS.maxFileBytes) {
-        throw new Error(`Archive entry exceeds max size. Limit: ${ARCHIVE_LIMITS.maxFileBytes} bytes`);
-    }
-    if (meter.totalBytes > ARCHIVE_LIMITS.maxTotalBytes) {
-        throw new Error(`Archive extraction exceeds total size. Limit: ${ARCHIVE_LIMITS.maxTotalBytes} bytes`);
-    }
-}
-async function pipelineWithArchiveLimits(input, destinationPath, meter) {
-    let fileBytes = 0;
-    input.on('data', (chunk) => {
-        const chunkBytes = Buffer.isBuffer(chunk) ? chunk.length : Buffer.byteLength(chunk);
-        fileBytes += chunkBytes;
-        if (fileBytes > ARCHIVE_LIMITS.maxFileBytes || meter.totalBytes + fileBytes > ARCHIVE_LIMITS.maxTotalBytes) {
-            if (input instanceof Readable) {
-                input.destroy(new Error('Archive extraction size limit exceeded'));
-            }
-        }
-    });
-    await pipeline(input, createWriteStream(destinationPath));
-    trackArchiveBytes(meter, fileBytes);
-}
-async function pathExists(targetPath) {
-    try {
-        await fs.access(targetPath);
-        return true;
-    }
-    catch (error) {
-        const errorCode = typeof error === 'object' && error !== null ? Reflect.get(error, 'code') : undefined;
-        if (errorCode === 'ENOENT') {
-            return false;
-        }
-        throw error;
-    }
-}
-/**
- * 解析文件目标路径，并确保文件位于工作区中。
- */
-async function resolveFileTarget({ workspacePath, filePath }) {
-    const { requestedRoot, workspaceRoot } = await resolveWorkspaceRoots(workspacePath);
-    const normalizedFilePath = String(filePath || '').trim();
-    if (!normalizedFilePath) {
-        throw new Error('filePath is required');
-    }
-    return {
-        workspaceRoot,
-        resolvedFilePath: resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, normalizedFilePath)
-    };
-}
-/**
- * 列出工作区目录内容。
- */
-export async function listWorkspaceDirectory(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveDirectoryTarget(params);
-    const stat = await fs.stat(resolvedTargetPath);
-    if (!stat.isDirectory()) {
-        throw new Error(`Path is not a directory: ${resolvedTargetPath}`);
-    }
-    const entries = await fs.readdir(resolvedTargetPath, { withFileTypes: true });
-    const items = await Promise.all(entries.map(async (entry) => {
-        const entryPath = path.join(resolvedTargetPath, entry.name);
-        const entrySize = entry.isFile() ? (await fs.stat(entryPath)).size : undefined;
-        return {
-            name: entry.name,
-            path: toDisplayPath(entryPath),
-            isDirectory: entry.isDirectory(),
-            size: entrySize
-        };
-    }));
-    return {
-        currentPath: toDisplayPath(resolvedTargetPath),
-        workspacePath: toDisplayPath(workspaceRoot),
-        items
-    };
-}
-/**
- * 读取工作区中的文本文件。
- */
-export async function readWorkspaceFile(params) {
-    const { workspaceRoot, resolvedFilePath: lexicalFilePath } = await resolveFileTarget(params);
-    const resolvedFilePath = await ensureRealPathInsideWorkspace(workspaceRoot, lexicalFilePath);
-    const stat = await fs.stat(resolvedFilePath);
-    if (!stat.isFile()) {
-        throw new Error(`Path is not a file: ${resolvedFilePath}`);
-    }
-    const content = await fs.readFile(resolvedFilePath, 'utf-8');
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        filePath: toDisplayPath(resolvedFilePath),
-        content
-    };
-}
-/**
- * 目录大小计算上限，避免在工作区体量异常时长时间阻塞属性查询。
- */
-const DIRECTORY_SIZE_LIMITS = {
-    maxEntries: 100_000,
-    maxDepth: 32,
-};
-/**
- * 递归累加目录内所有普通文件的总大小。
- * 跳过符号链接以避免跟随循环，访问失败的单个条目直接忽略。
- */
-async function calculateDirectorySize(workspaceRoot, directoryPath) {
-    let total = 0;
-    let entriesProcessed = 0;
-    async function walk(dirPath, depth) {
-        if (depth >= DIRECTORY_SIZE_LIMITS.maxDepth) {
-            return;
-        }
-        let entries;
-        try {
-            entries = await fs.readdir(dirPath, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            entriesProcessed += 1;
-            if (entriesProcessed > DIRECTORY_SIZE_LIMITS.maxEntries) {
-                return;
-            }
-            if (entry.isSymbolicLink()) {
-                continue;
-            }
-            const entryPath = ensureInsideWorkspace(workspaceRoot, path.join(dirPath, entry.name));
-            try {
-                if (entry.isDirectory()) {
-                    await walk(entryPath, depth + 1);
-                }
-                else if (entry.isFile()) {
-                    const stat = await fs.stat(entryPath);
-                    total += stat.size;
-                }
-            }
-            catch {
-                // 单个条目失败不影响整体统计
-            }
-        }
-    }
-    await walk(directoryPath, 0);
-    return total;
-}
-/**
- * 读取工作区条目的属性信息。
- * 主流程：解析安全路径 -> 读取 stat/lstat -> 文件额外尝试解析图片尺寸。
- * 对于目录，stat.size 只是目录项元数据大小，需要递归统计子文件总和。
- */
-export async function getWorkspaceEntryProperties(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params, { allowWorkspaceRoot: true });
-    const [stat, linkStat] = await Promise.all([
-        fs.stat(resolvedTargetPath),
-        fs.lstat(resolvedTargetPath),
-    ]);
-    const isDirectory = stat.isDirectory();
-    const image = stat.isFile() ? await readImageProperties(resolvedTargetPath) : undefined;
-    const size = isDirectory
-        ? await calculateDirectorySize(workspaceRoot, resolvedTargetPath)
-        : stat.size;
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(resolvedTargetPath),
-        name: path.basename(resolvedTargetPath),
-        isDirectory: stat.isDirectory(),
-        isFile: stat.isFile(),
-        isSymbolicLink: linkStat.isSymbolicLink(),
-        size,
-        mode: stat.mode,
-        modeOctal: formatModeOctal(stat.mode),
-        permissions: formatPermissions(stat.mode),
-        uid: stat.uid,
-        gid: stat.gid,
-        atimeMs: stat.atimeMs,
-        mtimeMs: stat.mtimeMs,
-        ctimeMs: stat.ctimeMs,
-        birthtimeMs: stat.birthtimeMs,
-        ...(image ? { image } : {}),
-    };
-}
-/**
- * 修改工作区条目权限。
- * 主流程：校验八进制权限 -> 解析安全路径 -> 非递归只改目标，递归目录先收集所有非符号链接子项后逐一 chmod。
- */
-export async function chmodWorkspaceEntry(params) {
-    const mode = parsePermissionMode(params.mode);
-    const recursive = Boolean(params.recursive);
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params);
-    const targets = await collectChmodTargets(workspaceRoot, resolvedTargetPath, recursive);
-    for (const targetPath of targets) {
-        await ensureSafeChmodTarget(workspaceRoot, targetPath);
-        await fs.chmod(targetPath, mode);
-    }
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(resolvedTargetPath),
-        mode,
-        modeOctal: formatModeOctal(mode),
-        recursive,
-        changedCount: targets.length,
-    };
-}
-/**
- * 返回工作区内 Word 文档的预览元数据；docx 由前端下载原文件后渲染，旧版 doc 明确提示不支持。
- */
-export async function previewWorkspaceDocument(params) {
-    const { workspaceRoot, resolvedFilePath: lexicalFilePath } = await resolveFileTarget(params);
-    const resolvedFilePath = await ensureRealPathInsideWorkspace(workspaceRoot, lexicalFilePath);
-    const stat = await fs.stat(resolvedFilePath);
-    if (!stat.isFile()) {
-        throw new Error(`Path is not a file: ${resolvedFilePath}`);
-    }
-    const extension = path.extname(resolvedFilePath).toLowerCase();
-    if (extension === '.doc') {
-        return {
-            workspacePath: toDisplayPath(workspaceRoot),
-            filePath: toDisplayPath(resolvedFilePath),
-            kind: 'unsupported',
-            content: '',
-            message: '暂不支持旧版 .doc 格式预览，请另存为 .docx 后再打开。',
-            size: stat.size,
-            mtimeMs: stat.mtimeMs,
-        };
-    }
-    if (extension !== '.docx') {
-        throw new Error('Document preview only supports .docx files');
-    }
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        filePath: toDisplayPath(resolvedFilePath),
-        kind: 'html',
-        content: '',
-        size: stat.size,
-        mtimeMs: stat.mtimeMs,
-    };
-}
-/**
- * 将文本内容保存到工作区文件中。
- */
-export async function writeWorkspaceFile(params) {
-    const { workspaceRoot, resolvedFilePath } = await resolveFileTarget(params);
-    await fs.mkdir(path.dirname(resolvedFilePath), { recursive: true });
-    await ensureWritableParentInsideWorkspace(workspaceRoot, resolvedFilePath);
-    await fs.writeFile(resolvedFilePath, String(params.content ?? ''), 'utf-8');
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        filePath: toDisplayPath(resolvedFilePath)
-    };
-}
-/**
- * 在指定工作区目录下创建文件或目录。
- */
-export async function createWorkspaceEntry(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveDirectoryTarget(params);
-    const entryName = normalizeEntryName(params.entryName);
-    const targetPath = ensureInsideWorkspace(workspaceRoot, path.join(resolvedTargetPath, entryName));
-    const parentStat = await fs.stat(resolvedTargetPath);
-    if (!parentStat.isDirectory()) {
-        throw new Error(`Path is not a directory: ${resolvedTargetPath}`);
-    }
-    try {
-        await fs.access(targetPath);
-        throw new Error(`Path already exists: ${targetPath}`);
-    }
-    catch (error) {
-        const errorCode = typeof error === 'object' && error !== null ? Reflect.get(error, 'code') : undefined;
-        if (errorCode !== 'ENOENT') {
-            throw error;
-        }
-    }
-    if (params.isDirectory) {
-        await fs.mkdir(targetPath, { recursive: false });
-    }
-    else {
-        await fs.mkdir(path.dirname(targetPath), { recursive: true });
-        await ensureWritableParentInsideWorkspace(workspaceRoot, targetPath);
-        await fs.writeFile(targetPath, '', 'utf-8');
-    }
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(targetPath),
-        isDirectory: params.isDirectory
-    };
-}
-/**
- * 在工作区内重命名文件或目录，保持目标仍位于原父目录中。
- */
-export async function renameWorkspaceEntry(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params);
-    const newName = normalizeEntryName(params.newName);
-    const renamedPath = ensureInsideWorkspace(workspaceRoot, path.join(path.dirname(resolvedTargetPath), newName));
-    if (renamedPath === resolvedTargetPath) {
-        return {
-            ok: true,
-            workspacePath: toDisplayPath(workspaceRoot),
-            sourcePath: toDisplayPath(resolvedTargetPath),
-            targetPath: toDisplayPath(renamedPath)
-        };
-    }
-    await fs.stat(resolvedTargetPath);
-    try {
-        await fs.access(renamedPath);
-        throw new Error(`Path already exists: ${renamedPath}`);
-    }
-    catch (error) {
-        const errorCode = typeof error === 'object' && error !== null ? Reflect.get(error, 'code') : undefined;
-        if (errorCode !== 'ENOENT') {
-            throw error;
-        }
-    }
-    await fs.rename(resolvedTargetPath, renamedPath);
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        sourcePath: toDisplayPath(resolvedTargetPath),
-        targetPath: toDisplayPath(renamedPath)
-    };
-}
-/**
- * 将工作区内文件或目录移动到另一个工作区目录，保持原文件名不变。
- */
-export async function moveWorkspaceEntry(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params);
-    const destination = await resolveDirectoryTarget({
-        workspacePath: params.workspacePath,
-        targetPath: params.destinationPath,
-    });
-    const destinationStat = await fs.stat(destination.resolvedTargetPath);
-    if (!destinationStat.isDirectory()) {
-        throw new Error(`Destination is not a directory: ${destination.resolvedTargetPath}`);
-    }
-    const targetStat = await fs.stat(resolvedTargetPath);
-    if (targetStat.isDirectory()) {
-        const relativeDestination = path.relative(resolvedTargetPath, destination.resolvedTargetPath);
-        if (relativeDestination === '' || (!relativeDestination.startsWith('..') && !path.isAbsolute(relativeDestination))) {
-            throw new Error('Cannot move a directory into itself or its descendant');
-        }
-    }
-    const movedPath = ensureInsideWorkspace(workspaceRoot, path.join(destination.resolvedTargetPath, path.basename(resolvedTargetPath)));
-    if (movedPath === resolvedTargetPath) {
-        return {
-            ok: true,
-            workspacePath: toDisplayPath(workspaceRoot),
-            sourcePath: toDisplayPath(resolvedTargetPath),
-            targetPath: toDisplayPath(movedPath),
-            destinationPath: toDisplayPath(destination.resolvedTargetPath),
-        };
-    }
-    try {
-        await fs.access(movedPath);
-        throw new Error(`Path already exists: ${movedPath}`);
-    }
-    catch (error) {
-        const errorCode = typeof error === 'object' && error !== null ? Reflect.get(error, 'code') : undefined;
-        if (errorCode !== 'ENOENT') {
-            throw error;
-        }
-    }
-    await fs.rename(resolvedTargetPath, movedPath);
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        sourcePath: toDisplayPath(resolvedTargetPath),
-        targetPath: toDisplayPath(movedPath),
-        destinationPath: toDisplayPath(destination.resolvedTargetPath),
-    };
-}
-/**
- * 删除工作区内的文件或目录，并阻止误删工作区根目录。
- */
-export async function deleteWorkspaceEntry(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params);
-    const targetStat = await fs.stat(resolvedTargetPath);
-    if (targetStat.isDirectory()) {
-        await fs.rm(resolvedTargetPath, { recursive: true, force: false });
-    }
-    else {
-        await fs.unlink(resolvedTargetPath);
-    }
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(resolvedTargetPath)
-    };
-}
-/**
- * 上传文件到工作区指定目录，并可在上传后自动解压常见归档。
- */
-export async function uploadWorkspaceFiles(params) {
-    if (!Array.isArray(params.files) || params.files.length === 0) {
-        throw new Error('files are required');
-    }
-    const { workspaceRoot, resolvedTargetPath } = await resolveWritableDirectory(params);
-    const targetStat = await fs.stat(resolvedTargetPath);
-    if (!targetStat.isDirectory()) {
-        throw new Error(`Path is not a directory: ${resolvedTargetPath}`);
-    }
-    const files = [];
-    for (const file of params.files) {
-        const fileName = normalizeUploadedFileName(file.originalname);
-        const uploadRelativePath = normalizeUploadedRelativePath(file.relativePath, file.originalname);
-        const destinationPath = ensureInsideWorkspace(workspaceRoot, path.join(resolvedTargetPath, uploadRelativePath));
-        await fs.mkdir(path.dirname(destinationPath), { recursive: true });
-        await ensureWritableParentInsideWorkspace(workspaceRoot, destinationPath);
-        await fs.copyFile(file.path, destinationPath);
-        let extracted;
-        if (params.extractArchives && archiveKind(destinationPath)) {
-            extracted = await extractWorkspaceArchive({
-                workspacePath: workspaceRoot,
-                archivePath: destinationPath,
-                outputPath: resolveArchiveUploadOutputPath(resolvedTargetPath, fileName)
-            });
-        }
-        files.push({
-            fileName,
-            targetPath: toDisplayPath(destinationPath),
-            size: file.size,
-            extracted
-        });
-    }
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(resolvedTargetPath),
-        files
-    };
-}
-/**
- * 解析工作区下载目标；目录由路由层打包为 zip，文件直接流式下载。
- */
-export async function resolveWorkspaceDownloadTarget(params) {
-    const { workspaceRoot, resolvedTargetPath } = await resolveEntryTarget(params);
-    const targetStat = await fs.stat(resolvedTargetPath);
-    const baseName = path.basename(resolvedTargetPath);
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        targetPath: toDisplayPath(resolvedTargetPath),
-        resolvedTargetPath,
-        fileName: targetStat.isDirectory() ? `${baseName || 'workspace'}.zip` : baseName,
-        contentType: targetStat.isDirectory() ? 'application/zip' : 'application/octet-stream',
-        isDirectory: targetStat.isDirectory()
-    };
-}
-/**
- * 将目录内容以 zip 格式写入输出流，避免在磁盘生成临时包。
- */
-export async function streamWorkspaceDirectoryZip(directoryPath, output) {
-    const archive = new ZipArchive({ zlib: { level: 9 } });
-    const completion = new Promise((resolve, reject) => {
-        output.on('close', resolve);
-        output.on('finish', resolve);
-        archive.on('error', reject);
-        output.on('error', reject);
-    });
-    archive.pipe(output);
-    archive.directory(directoryPath, false);
-    await archive.finalize();
-    await completion;
-}
-async function extractZipArchive(archivePath, outputRoot, meter) {
-    let extractedEntries = 0;
-    let extractionError;
-    const sourceStream = createReadStream(archivePath);
-    const parsedStream = sourceStream.pipe(unzipper.Parse({ forceStream: true }));
-    try {
-        for await (const entry of parsedStream) {
-            if (extractionError) {
-                await drainZipEntry(entry);
-                continue;
-            }
-            const entryPath = decodeZipEntryPath(entry);
-            try {
-                const destinationPath = ensureArchiveEntryInside(outputRoot, entryPath);
-                trackArchiveEntry(meter);
-                if (entry.type === 'Directory') {
-                    await fs.mkdir(destinationPath, { recursive: true });
-                    continue;
-                }
-                if (entry.type !== 'File') {
-                    throw new Error(`Unsupported archive entry type: ${entryPath}`);
-                }
-                await fs.mkdir(path.dirname(destinationPath), { recursive: true });
-                await ensureWritableParentInsideWorkspace(outputRoot, destinationPath);
-                await pipelineWithArchiveLimits(entry, destinationPath, meter);
-                extractedEntries += 1;
-            }
-            catch (error) {
-                extractionError = error;
-                await drainZipEntry(entry);
-            }
-        }
-    }
-    finally {
-        sourceStream.destroy();
-        parsedStream.destroy();
-    }
-    if (extractionError) {
-        throw extractionError;
-    }
-    return extractedEntries;
-}
-async function extractTarArchive(archivePath, outputRoot, gzip, meter) {
-    let extractedEntries = 0;
-    let extractionError;
-    /**
-     * 校验 tar 条目并通过 filter 返回值控制是否解压。
-     * tar 的 filter 回调位于流解析链路中，直接抛错会变成未处理异常；这里先记录错误，待流结束后统一 reject。
-     */
-    const shouldExtractTarEntry = (entryPath, entry) => {
-        if (extractionError) {
-            return false;
-        }
-        try {
-            ensureArchiveEntryInside(outputRoot, entryPath);
-            trackArchiveEntry(meter);
-            const entryType = String(entry.type || '').toLowerCase();
-            if (entryType === 'symboliclink' || entryType === 'link') {
-                throw new Error(`Archive links are not supported: ${entryPath}`);
-            }
-            if (entryType !== 'file' && entryType !== 'oldfile' && entryType !== 'contiguousfile' && entryType !== 'directory') {
-                throw new Error(`Unsupported archive entry type: ${entryPath}`);
-            }
-            if (typeof entry.size === 'number') {
-                trackArchiveBytes(meter, entry.size);
-            }
-            if (entryType !== 'directory') {
-                extractedEntries += 1;
-            }
-            return true;
-        }
-        catch (error) {
-            extractionError = error;
-            return false;
-        }
-    };
-    await tar.x({
-        file: archivePath,
-        cwd: outputRoot,
-        gzip,
-        strict: true,
-        filter: (entryPath, entry) => {
-            return shouldExtractTarEntry(entryPath, entry);
-        }
-    });
-    if (extractionError) {
-        throw extractionError;
-    }
-    return extractedEntries;
-}
-async function extractGzipFile(archivePath, outputRoot, meter) {
-    const outputName = stripArchiveExtension(path.basename(archivePath));
-    const destinationPath = ensureArchiveEntryInside(outputRoot, outputName || 'decompressed');
-    trackArchiveEntry(meter);
-    await fs.mkdir(path.dirname(destinationPath), { recursive: true });
-    await ensureWritableParentInsideWorkspace(outputRoot, destinationPath);
-    await pipelineWithArchiveLimits(createReadStream(archivePath).pipe(createGunzip()), destinationPath, meter);
-    return 1;
-}
-/**
- * 解压工作区中的归档文件到指定目录，支持 zip、tar、tar.gz/tgz 与单文件 gz。
- */
-export async function extractWorkspaceArchive(params) {
-    const { requestedRoot, workspaceRoot } = await resolveWorkspaceRoots(params.workspacePath);
-    const { resolvedTargetPath: outputRoot } = await resolveWritableDirectory({
-        workspacePath: params.workspacePath,
-        targetPath: params.outputPath || ''
-    });
-    const lexicalArchivePath = resolveRequestedPathInsideWorkspace(requestedRoot, workspaceRoot, String(params.archivePath || '').trim());
-    const archivePath = await ensureRealPathInsideWorkspace(workspaceRoot, lexicalArchivePath);
-    const archiveStat = await fs.stat(archivePath);
-    if (!archiveStat.isFile()) {
-        throw new Error(`Archive path is not a file: ${archivePath}`);
-    }
-    if (!(await pathExists(outputRoot))) {
-        await fs.mkdir(outputRoot, { recursive: true });
-    }
-    const outputStat = await fs.stat(outputRoot);
-    if (!outputStat.isDirectory()) {
-        throw new Error(`Output path is not a directory: ${outputRoot}`);
-    }
-    const kind = archiveKind(archivePath);
-    if (!kind) {
-        throw new Error('Unsupported archive type. Supported: .zip, .tar, .tar.gz, .tgz, .gz');
-    }
-    let extractedEntries = 0;
-    const meter = { entries: 0, totalBytes: 0 };
-    if (kind === 'zip') {
-        extractedEntries = await extractZipArchive(archivePath, outputRoot, meter);
-    }
-    else if (kind === 'tar' || kind === 'tgz') {
-        extractedEntries = await extractTarArchive(archivePath, outputRoot, kind === 'tgz', meter);
-    }
-    else {
-        extractedEntries = await extractGzipFile(archivePath, outputRoot, meter);
-    }
-    return {
-        ok: true,
-        workspacePath: toDisplayPath(workspaceRoot),
-        archivePath: toDisplayPath(archivePath),
-        targetPath: toDisplayPath(outputRoot),
-        extractedEntries
-    };
-}
-/**
- * 展开简单花括号模式，如 *.{ts,tsx} -> *.ts, *.tsx。
- */
-function expandBracePattern(pattern) {
-    const match = pattern.match(/^(.*?)\{([^}]+)\}(.*)$/);
-    if (!match) {
-        return [pattern];
-    }
-    const [, prefix, options, suffix] = match;
-    return options.split(',').flatMap((option) => expandBracePattern(prefix + option.trim() + suffix));
-}
-/**
- * 判断文件名是否匹配简单 glob 掩码（支持 *、?、** 与 {a,b,c}）。
- */
-function matchesFileMask(fileName, mask) {
-    const normalizedMask = String(mask || '').trim();
-    if (!normalizedMask || normalizedMask === '*' || normalizedMask === '*.*') {
-        return true;
-    }
-    const normalizedFileName = fileName.toLowerCase();
-    const patterns = expandBracePattern(normalizedMask.toLowerCase());
-    return patterns.some((pattern) => {
-        if (pattern === '*')
-            return true;
-        const regexSource = pattern
-            .replace(/\./g, '\\.')
-            .replace(/\*\*/g, '<<GLOBSTAR>>')
-            .replace(/\*/g, '[^/]*')
-            .replace(/\?/g, '[^/]')
-            .replace(/<<GLOBSTAR>>/g, '.*');
-        const regex = new RegExp(`^${regexSource}$`);
-        return regex.test(normalizedFileName);
-    });
-}
-/**
- * 跳过明显不适合文本搜索/替换的目录。
- */
-function isSkippedSearchDirectory(name) {
-    return name === '.git' || name === 'node_modules' || name === '.svn' || name === '.hg';
-}
-const SEARCH_MAX_FILE_BYTES = 10 * 1024 * 1024;
-const SEARCH_DEFAULT_MAX_RESULTS = 1000;
-/**
- * 在工作区范围内搜索文件内容。
- * 主流程：安全解析工作区根 -> 递归遍历目录 -> 按文件掩码过滤 -> 逐行匹配关键词 -> 返回匹配列表。
- */
-export async function searchWorkspaceFiles(params) {
-    const { workspaceRoot } = await resolveWorkspaceRoots(params.workspacePath);
-    const keyword = String(params.keyword || '').trim();
-    if (!keyword) {
-        throw new Error('keyword is required');
-    }
-    const ignoreCase = Boolean(params.ignoreCase);
-    const fileMask = String(params.fileMask || '').trim();
-    const maxResults = typeof params.maxResults === 'number' && params.maxResults > 0
-        ? params.maxResults
-        : SEARCH_DEFAULT_MAX_RESULTS;
-    const searchKeyword = ignoreCase ? keyword.toLowerCase() : keyword;
-    const mode = params.mode === 'filename' ? 'filename' : 'content';
-    const isFilenameMode = mode === 'filename';
-    const matches = [];
-    let totalFiles = 0;
-    let truncated = false;
-    async function walk(directoryPath) {
-        if (truncated)
-            return;
-        let entries;
-        try {
-            entries = await fs.readdir(directoryPath, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            if (truncated)
-                return;
-            const entryPath = ensureInsideWorkspace(workspaceRoot, path.join(directoryPath, entry.name));
-            if (entry.isSymbolicLink())
-                continue;
-            if (entry.isDirectory()) {
-                if (isSkippedSearchDirectory(entry.name))
-                    continue;
-                await walk(entryPath);
-                continue;
-            }
-            if (!entry.isFile())
-                continue;
-            if (fileMask && !matchesFileMask(entry.name, fileMask))
-                continue;
-            totalFiles += 1;
-            let stat;
-            try {
-                stat = await fs.stat(entryPath);
-            }
-            catch {
-                continue;
-            }
-            if (stat.size > SEARCH_MAX_FILE_BYTES)
-                continue;
-            if (isFilenameMode) {
-                const searchName = ignoreCase ? entry.name.toLowerCase() : entry.name;
-                const matchIndex = searchName.indexOf(searchKeyword);
-                if (matchIndex !== -1) {
-                    matches.push({
-                        filePath: toDisplayPath(entryPath),
-                        lineNumber: 0,
-                        lineContent: entry.name,
-                        matchStart: matchIndex,
-                        matchEnd: matchIndex + keyword.length
-                    });
-                    if (matches.length >= maxResults) {
-                        truncated = true;
-                        return;
-                    }
-                }
-                continue;
-            }
-            let content;
-            try {
-                content = await fs.readFile(entryPath, 'utf-8');
-            }
-            catch {
-                continue;
-            }
-            const lines = content.split(/\r?\n/);
-            for (let lineIndex = 0; lineIndex < lines.length; lineIndex += 1) {
-                const line = lines[lineIndex];
-                const searchLine = ignoreCase ? line.toLowerCase() : line;
-                let searchIndex = 0;
-                while (true) {
-                    const matchIndex = searchLine.indexOf(searchKeyword, searchIndex);
-                    if (matchIndex === -1)
-                        break;
-                    matches.push({
-                        filePath: toDisplayPath(entryPath),
-                        lineNumber: lineIndex + 1,
-                        lineContent: line,
-                        matchStart: matchIndex,
-                        matchEnd: matchIndex + keyword.length
-                    });
-                    if (matches.length >= maxResults) {
-                        truncated = true;
-                        return;
-                    }
-                    searchIndex = matchIndex + 1;
-                }
-            }
-        }
-    }
-    await walk(workspaceRoot);
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        keyword,
-        totalFiles,
-        totalMatches: matches.length,
-        matches,
-        truncated
-    };
-}
-/**
- * 在单个文件内执行安全替换，只写入确实有变化的内容。
- */
-async function replaceInFile(workspaceRoot, filePath, keyword, replacement, ignoreCase) {
-    let content;
-    try {
-        content = await fs.readFile(filePath, 'utf-8');
-    }
-    catch {
-        return { changed: false, count: 0 };
-    }
-    const originalContent = content;
-    let count = 0;
-    if (ignoreCase) {
-        const lowerKeyword = keyword.toLowerCase();
-        let index = 0;
-        while (true) {
-            const lowerContent = content.toLowerCase();
-            const matchIndex = lowerContent.indexOf(lowerKeyword, index);
-            if (matchIndex === -1)
-                break;
-            content = content.slice(0, matchIndex) + replacement + content.slice(matchIndex + keyword.length);
-            count += 1;
-            const step = replacement.length || 1;
-            index = matchIndex + step;
-        }
-    }
-    else {
-        let index = 0;
-        while (true) {
-            const matchIndex = content.indexOf(keyword, index);
-            if (matchIndex === -1)
-                break;
-            content = content.slice(0, matchIndex) + replacement + content.slice(matchIndex + keyword.length);
-            count += 1;
-            const step = replacement.length || 1;
-            index = matchIndex + step;
-        }
-    }
-    if (content === originalContent) {
-        return { changed: false, count: 0 };
-    }
-    await ensureWritableParentInsideWorkspace(workspaceRoot, filePath);
-    await fs.writeFile(filePath, content, 'utf-8');
-    return { changed: true, count };
-}
-/**
- * 在工作区范围内批量替换文件内容。
- * 可指定 filePath 只替换单个文件；未指定时递归替换所有匹配掩码的文件。
- */
-export async function replaceWorkspaceFiles(params) {
-    const { workspaceRoot } = await resolveWorkspaceRoots(params.workspacePath);
-    const keyword = String(params.keyword || '').trim();
-    if (!keyword) {
-        throw new Error('keyword is required');
-    }
-    const replacement = String(params.replacement ?? '');
-    const ignoreCase = Boolean(params.ignoreCase);
-    const fileMask = String(params.fileMask || '').trim();
-    const singleFilePath = String(params.filePath || '').trim();
-    let changedFiles = 0;
-    let changedMatches = 0;
-    if (singleFilePath) {
-        const { resolvedFilePath } = await resolveFileTarget({
-            workspacePath: params.workspacePath,
-            filePath: singleFilePath
-        });
-        const result = await replaceInFile(workspaceRoot, resolvedFilePath, keyword, replacement, ignoreCase);
-        if (result.changed) {
-            changedFiles = 1;
-            changedMatches = result.count;
-        }
-        return {
-            workspacePath: toDisplayPath(workspaceRoot),
-            keyword,
-            replacement,
-            changedFiles,
-            changedMatches
-        };
-    }
-    async function walk(directoryPath) {
-        let entries;
-        try {
-            entries = await fs.readdir(directoryPath, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            const entryPath = ensureInsideWorkspace(workspaceRoot, path.join(directoryPath, entry.name));
-            if (entry.isSymbolicLink())
-                continue;
-            if (entry.isDirectory()) {
-                if (isSkippedSearchDirectory(entry.name))
-                    continue;
-                await walk(entryPath);
-                continue;
-            }
-            if (!entry.isFile())
-                continue;
-            if (fileMask && !matchesFileMask(entry.name, fileMask))
-                continue;
-            try {
-                const stat = await fs.stat(entryPath);
-                if (stat.size > SEARCH_MAX_FILE_BYTES)
-                    continue;
-            }
-            catch {
-                continue;
-            }
-            const result = await replaceInFile(workspaceRoot, entryPath, keyword, replacement, ignoreCase);
-            if (result.changed) {
-                changedFiles += 1;
-                changedMatches += result.count;
-            }
-        }
-    }
-    await walk(workspaceRoot);
-    return {
-        workspacePath: toDisplayPath(workspaceRoot),
-        keyword,
-        replacement,
-        changedFiles,
-        changedMatches
-    };
-}
+import{createReadStream as U,createWriteStream as ot,promises as o}from"node:fs";import d from"node:path";import{Readable as st}from"node:stream";import{pipeline as ct}from"node:stream/promises";import{TextDecoder as lt}from"node:util";import{createGunzip as ht}from"node:zlib";import*as ut from"tar";import dt from"unzipper";const{ZipArchive:wt}=await import("archiver"),y={maxEntries:1e4,maxFileBytes:512*1024*1024,maxTotalBytes:2*1024*1024*1024,maxPathDepth:64,maxPathLength:4096},ft=new lt("gbk");function h(t){return String(t||"").replace(/\\/g,"/")}function j(t){const e=d.resolve(String(t||"").trim());if(!e)throw new Error("workspacePath is required");return e}async function pt(t){const e=j(t),r=await o.realpath(e);if(!(await o.stat(r)).isDirectory())throw new Error(`Workspace path is not a directory: ${e}`);return r}async function k(t){return{requestedRoot:j(t),workspaceRoot:await pt(t)}}function p(t,e){const r=d.resolve(e),i=d.relative(t,r);if(i.startsWith("..")||d.isAbsolute(i))throw new Error(`Target path is outside workspace: ${r}`);return r}async function x(t,e){const r=await o.realpath(e);return p(t,r)}async function v(t,e){const r=await o.realpath(d.dirname(e));p(t,r);try{if((await o.lstat(e)).isSymbolicLink())throw new Error(`Refusing to write through symbolic link: ${e}`)}catch(i){if((typeof i=="object"&&i!==null?Reflect.get(i,"code"):void 0)!=="ENOENT")throw i}}function z(t,e,r){const i=d.resolve(r),a=d.relative(t,i);if(a.startsWith("..")||d.isAbsolute(a))throw new Error(`Target path is outside workspace: ${i}`);return p(e,d.join(e,a))}async function $({workspacePath:t,targetPath:e=""}){const{requestedRoot:r,workspaceRoot:i}=await k(t),a=String(e||"").trim(),n=a?z(r,i,a):i,s=await x(i,n);return{workspaceRoot:i,resolvedTargetPath:s}}function D(t){const e=String(t||"").trim();if(!e)throw new Error("entryName is required");if(e==="."||e==="..")throw new Error("entryName is invalid");if(e.includes("/")||e.includes("\\")||d.basename(e)!==e)throw new Error(`entryName must be a plain file or directory name: ${e}`);return e}function q(t){const e=String(t||"");if(!/[\u00c0-\u00ff]/.test(e))return e;const r=Buffer.from(e,"latin1").toString("utf8");return!r||r.includes("\uFFFD")?e:r}function B(t){const e=q(t);return D(d.basename(e.replace(/\\/g,"/")))}function mt(t,e){if(!t)return B(e);const i=q(String(t||e||"")).replace(/\\/g,"/").split("/").filter(Boolean).map(a=>D(a));return i.length===0?B(e):d.join(...i)}function _(t){return(t&4095).toString(8).padStart(4,"0")}function gt(t){const e=String(t||"").trim();if(!/^[0-7]{3,4}$/.test(e))throw new Error("mode must be a 3 or 4 digit octal string");return Number.parseInt(e,8)}function C(t,e,r,i,a,n,s){const c=t&e?"r":"-",u=t&r?"w":"-",l=(t&i)!==0,w=(t&a)!==0?l?n:s:l?"x":"-";return`${c}${u}${w}`}function yt(t){return[C(t,256,128,64,2048,"s","S"),C(t,32,16,8,1024,"s","S"),C(t,4,2,1,512,"t","T")].join("")}function Pt(t){if(!(t.length<24||t.toString("hex",0,8)!=="89504e470d0a1a0a"))return{format:"png",width:t.readUInt32BE(16),height:t.readUInt32BE(20)}}function kt(t){if(!(t.length<10||t.toString("ascii",0,6)!=="GIF87a"&&t.toString("ascii",0,6)!=="GIF89a"))return{format:"gif",width:t.readUInt16LE(6),height:t.readUInt16LE(8)}}function xt(t){if(t.length<4||t[0]!==255||t[1]!==216)return;let e=2;for(;e+9<t.length;){if(t[e]!==255){e+=1;continue}const r=t[e+1],i=t.readUInt16BE(e+2);if(i<2)return;if(r>=192&&r<=207&&![196,200,204].includes(r)&&e+8<t.length)return{format:"jpeg",height:t.readUInt16BE(e+5),width:t.readUInt16BE(e+7)};e+=2+i}}function Et(t){if(t.length<30||t.toString("ascii",0,4)!=="RIFF"||t.toString("ascii",8,12)!=="WEBP")return;const e=t.toString("ascii",12,16);if(e==="VP8X"&&t.length>=30)return{format:"webp",width:1+t.readUIntLE(24,3),height:1+t.readUIntLE(27,3)};if(e==="VP8 "&&t.length>=30)return{format:"webp",width:t.readUInt16LE(26)&16383,height:t.readUInt16LE(28)&16383};if(e==="VP8L"&&t.length>=25){const r=t.readUInt32LE(21);return{format:"webp",width:(r&16383)+1,height:(r>>14&16383)+1}}}async function G(t,e,r){if((await o.lstat(e)).isSymbolicLink())throw new Error(`Refusing to change permissions on symbolic link: ${e}`);const a=await o.stat(e);if(!r||!a.isDirectory())return[e];const n=await o.readdir(e),s=await Promise.all(n.map(c=>{const u=p(t,d.join(e,c));return G(t,u,!0)}));return[e,...s.flat()]}async function vt(t,e){if((await o.lstat(e)).isSymbolicLink())throw new Error(`Refusing to change permissions on symbolic link: ${e}`);await x(t,e)}async function St(t){const e=await o.open(t,"r");try{const r=Buffer.alloc(512),{bytesRead:i}=await e.read(r,0,r.length,0),a=r.subarray(0,i);return Pt(a)||kt(a)||xt(a)||Et(a)}finally{await e.close()}}async function S({workspacePath:t,targetPath:e},r={}){const{requestedRoot:i,workspaceRoot:a}=await k(t),n=String(e||"").trim();if(!n)throw new Error("targetPath is required");const s=z(i,a,n),c=await x(a,s);if(!r.allowWorkspaceRoot&&c===a)throw new Error("Workspace root cannot be modified");return{workspaceRoot:a,resolvedTargetPath:c}}async function Z(t){const{requestedRoot:e,workspaceRoot:r}=await k(t.workspacePath),i=String(t.targetPath||"").trim();if(!i)return{workspaceRoot:r,resolvedTargetPath:r};const a=z(e,r,i);if(await J(a))return{workspaceRoot:r,resolvedTargetPath:await x(r,a)};const n=await o.realpath(d.dirname(a));return p(r,n),{workspaceRoot:r,resolvedTargetPath:a}}function H(t){const e=t.toLowerCase();return e.endsWith(".zip")?"zip":e.endsWith(".tar.gz")||e.endsWith(".tgz")?"tgz":e.endsWith(".tar")?"tar":e.endsWith(".gz")?"gz":null}function K(t){return t.replace(/\.tar\.gz$/i,"").replace(/\.tgz$/i,"").replace(/\.zip$/i,"").replace(/\.tar$/i,"").replace(/\.gz$/i,"")}function Ft(t,e){const r=D(K(e)||"extracted");return d.join(t,r)}function I(t,e){const r=String(e||"").replace(/\\/g,"/"),i=r.split("/").filter(Boolean);if(!r||r.startsWith("/")||/^[A-Za-z]:/.test(r))throw new Error(`Archive entry path is invalid: ${e}`);if(r.length>y.maxPathLength||i.length>y.maxPathDepth)throw new Error(`Archive entry path is too deep or too long: ${e}`);return p(t,d.join(t,r))}function Tt(t){const e=t.props?.pathBuffer;if(!e||t.props?.flags?.isUnicode)return t.path;const r=ft.decode(e);return!r||r.includes("\uFFFD")?t.path:r}async function V(t){const e=t.autodrain?.();e&&await new Promise((r,i)=>{e.on("close",r),e.on("end",r),e.on("finish",r),e.on("error",i)})}function A(t){if(t.entries+=1,t.entries>y.maxEntries)throw new Error(`Archive contains too many entries. Limit: ${y.maxEntries}`)}function X(t,e){if(t.totalBytes+=e,e>y.maxFileBytes)throw new Error(`Archive entry exceeds max size. Limit: ${y.maxFileBytes} bytes`);if(t.totalBytes>y.maxTotalBytes)throw new Error(`Archive extraction exceeds total size. Limit: ${y.maxTotalBytes} bytes`)}async function Y(t,e,r){let i=0;t.on("data",a=>{const n=Buffer.isBuffer(a)?a.length:Buffer.byteLength(a);i+=n,(i>y.maxFileBytes||r.totalBytes+i>y.maxTotalBytes)&&t instanceof st&&t.destroy(new Error("Archive extraction size limit exceeded"))}),await ct(t,ot(e)),X(r,i)}async function J(t){try{return await o.access(t),!0}catch(e){if((typeof e=="object"&&e!==null?Reflect.get(e,"code"):void 0)==="ENOENT")return!1;throw e}}async function W({workspacePath:t,filePath:e}){const{requestedRoot:r,workspaceRoot:i}=await k(t),a=String(e||"").trim();if(!a)throw new Error("filePath is required");return{workspaceRoot:i,resolvedFilePath:z(r,i,a)}}async function Ot(t){const{workspaceRoot:e,resolvedTargetPath:r}=await $(t);if(!(await o.stat(r)).isDirectory())throw new Error(`Path is not a directory: ${r}`);const a=await o.readdir(r,{withFileTypes:!0}),n=await Promise.all(a.map(async s=>{const c=d.join(r,s.name),u=s.isFile()?(await o.stat(c)).size:void 0;return{name:s.name,path:h(c),isDirectory:s.isDirectory(),size:u}}));return{currentPath:h(r),workspacePath:h(e),items:n}}async function Ut(t){const{workspaceRoot:e,resolvedFilePath:r}=await W(t),i=await x(e,r);if(!(await o.stat(i)).isFile())throw new Error(`Path is not a file: ${i}`);const n=await o.readFile(i,"utf-8");return{workspacePath:h(e),filePath:h(i),content:n}}const Q={maxEntries:1e5,maxDepth:32};async function Rt(t,e){let r=0,i=0;async function a(n,s){if(s>=Q.maxDepth)return;let c;try{c=await o.readdir(n,{withFileTypes:!0})}catch{return}for(const u of c){if(i+=1,i>Q.maxEntries)return;if(u.isSymbolicLink())continue;const l=p(t,d.join(n,u.name));try{if(u.isDirectory())await a(l,s+1);else if(u.isFile()){const f=await o.stat(l);r+=f.size}}catch{}}}return await a(e,0),r}async function jt(t){const{workspaceRoot:e,resolvedTargetPath:r}=await S(t,{allowWorkspaceRoot:!0}),[i,a]=await Promise.all([o.stat(r),o.lstat(r)]),n=i.isDirectory(),s=i.isFile()?await St(r):void 0,c=n?await Rt(e,r):i.size;return{workspacePath:h(e),targetPath:h(r),name:d.basename(r),isDirectory:i.isDirectory(),isFile:i.isFile(),isSymbolicLink:a.isSymbolicLink(),size:c,mode:i.mode,modeOctal:_(i.mode),permissions:yt(i.mode),uid:i.uid,gid:i.gid,atimeMs:i.atimeMs,mtimeMs:i.mtimeMs,ctimeMs:i.ctimeMs,birthtimeMs:i.birthtimeMs,...s?{image:s}:{}}}async function qt(t){const e=gt(t.mode),r=!!t.recursive,{workspaceRoot:i,resolvedTargetPath:a}=await S(t),n=await G(i,a,r);for(const s of n)await vt(i,s),await o.chmod(s,e);return{ok:!0,workspacePath:h(i),targetPath:h(a),mode:e,modeOctal:_(e),recursive:r,changedCount:n.length}}async function _t(t){const{workspaceRoot:e,resolvedFilePath:r}=await W(t),i=await x(e,r),a=await o.stat(i);if(!a.isFile())throw new Error(`Path is not a file: ${i}`);const n=d.extname(i).toLowerCase();if(n===".doc")return{workspacePath:h(e),filePath:h(i),kind:"unsupported",content:"",message:"\u6682\u4E0D\u652F\u6301\u65E7\u7248 .doc \u683C\u5F0F\u9884\u89C8\uFF0C\u8BF7\u53E6\u5B58\u4E3A .docx \u540E\u518D\u6253\u5F00\u3002",size:a.size,mtimeMs:a.mtimeMs};if(n!==".docx")throw new Error("Document preview only supports .docx files");return{workspacePath:h(e),filePath:h(i),kind:"html",content:"",size:a.size,mtimeMs:a.mtimeMs}}async function Gt(t){const{workspaceRoot:e,resolvedFilePath:r}=await W(t);return await o.mkdir(d.dirname(r),{recursive:!0}),await v(e,r),await o.writeFile(r,String(t.content??""),"utf-8"),{ok:!0,workspacePath:h(e),filePath:h(r)}}async function Zt(t){const{workspaceRoot:e,resolvedTargetPath:r}=await $(t),i=D(t.entryName),a=p(e,d.join(r,i));if(!(await o.stat(r)).isDirectory())throw new Error(`Path is not a directory: ${r}`);try{throw await o.access(a),new Error(`Path already exists: ${a}`)}catch(s){if((typeof s=="object"&&s!==null?Reflect.get(s,"code"):void 0)!=="ENOENT")throw s}return t.isDirectory?await o.mkdir(a,{recursive:!1}):(await o.mkdir(d.dirname(a),{recursive:!0}),await v(e,a),await o.writeFile(a,"","utf-8")),{ok:!0,workspacePath:h(e),targetPath:h(a),isDirectory:t.isDirectory}}async function Ht(t){const{workspaceRoot:e,resolvedTargetPath:r}=await S(t),i=D(t.newName),a=p(e,d.join(d.dirname(r),i));if(a===r)return{ok:!0,workspacePath:h(e),sourcePath:h(r),targetPath:h(a)};await o.stat(r);try{throw await o.access(a),new Error(`Path already exists: ${a}`)}catch(n){if((typeof n=="object"&&n!==null?Reflect.get(n,"code"):void 0)!=="ENOENT")throw n}return await o.rename(r,a),{ok:!0,workspacePath:h(e),sourcePath:h(r),targetPath:h(a)}}async function Kt(t){const{workspaceRoot:e,resolvedTargetPath:r}=await S(t),i=await $({workspacePath:t.workspacePath,targetPath:t.destinationPath});if(!(await o.stat(i.resolvedTargetPath)).isDirectory())throw new Error(`Destination is not a directory: ${i.resolvedTargetPath}`);if((await o.stat(r)).isDirectory()){const c=d.relative(r,i.resolvedTargetPath);if(c===""||!c.startsWith("..")&&!d.isAbsolute(c))throw new Error("Cannot move a directory into itself or its descendant")}const s=p(e,d.join(i.resolvedTargetPath,d.basename(r)));if(s===r)return{ok:!0,workspacePath:h(e),sourcePath:h(r),targetPath:h(s),destinationPath:h(i.resolvedTargetPath)};try{throw await o.access(s),new Error(`Path already exists: ${s}`)}catch(c){if((typeof c=="object"&&c!==null?Reflect.get(c,"code"):void 0)!=="ENOENT")throw c}return await o.rename(r,s),{ok:!0,workspacePath:h(e),sourcePath:h(r),targetPath:h(s),destinationPath:h(i.resolvedTargetPath)}}async function Vt(t){const{workspaceRoot:e,resolvedTargetPath:r}=await S(t);return(await o.stat(r)).isDirectory()?await o.rm(r,{recursive:!0,force:!1}):await o.unlink(r),{ok:!0,workspacePath:h(e),targetPath:h(r)}}async function Xt(t){if(!Array.isArray(t.files)||t.files.length===0)throw new Error("files are required");const{workspaceRoot:e,resolvedTargetPath:r}=await Z(t);if(!(await o.stat(r)).isDirectory())throw new Error(`Path is not a directory: ${r}`);const a=[];for(const n of t.files){const s=B(n.originalname),c=mt(n.relativePath,n.originalname),u=p(e,d.join(r,c));await o.mkdir(d.dirname(u),{recursive:!0}),await v(e,u),await o.copyFile(n.path,u);let l;t.extractArchives&&H(u)&&(l=await Wt({workspacePath:e,archivePath:u,outputPath:Ft(r,s)})),a.push({fileName:s,targetPath:h(u),size:n.size,extracted:l})}return{ok:!0,workspacePath:h(e),targetPath:h(r),files:a}}async function Yt(t){const{workspaceRoot:e,resolvedTargetPath:r}=await S(t),i=await o.stat(r),a=d.basename(r);return{workspacePath:h(e),targetPath:h(r),resolvedTargetPath:r,fileName:i.isDirectory()?`${a||"workspace"}.zip`:a,contentType:i.isDirectory()?"application/zip":"application/octet-stream",isDirectory:i.isDirectory()}}async function Jt(t,e){const r=new wt({zlib:{level:9}}),i=new Promise((a,n)=>{e.on("close",a),e.on("finish",a),r.on("error",n),e.on("error",n)});r.pipe(e),r.directory(t,!1),await r.finalize(),await i}async function zt(t,e,r){let i=0,a;const n=U(t),s=n.pipe(dt.Parse({forceStream:!0}));try{for await(const c of s){if(a){await V(c);continue}const u=Tt(c);try{const l=I(e,u);if(A(r),c.type==="Directory"){await o.mkdir(l,{recursive:!0});continue}if(c.type!=="File")throw new Error(`Unsupported archive entry type: ${u}`);await o.mkdir(d.dirname(l),{recursive:!0}),await v(e,l),await Y(c,l,r),i+=1}catch(l){a=l,await V(c)}}}finally{n.destroy(),s.destroy()}if(a)throw a;return i}async function Dt(t,e,r,i){let a=0,n;const s=(c,u)=>{if(n)return!1;try{I(e,c),A(i);const l=String(u.type||"").toLowerCase();if(l==="symboliclink"||l==="link")throw new Error(`Archive links are not supported: ${c}`);if(l!=="file"&&l!=="oldfile"&&l!=="contiguousfile"&&l!=="directory")throw new Error(`Unsupported archive entry type: ${c}`);return typeof u.size=="number"&&X(i,u.size),l!=="directory"&&(a+=1),!0}catch(l){return n=l,!1}};if(await ut.x({file:t,cwd:e,gzip:r,strict:!0,filter:(c,u)=>s(c,u)}),n)throw n;return a}async function Lt(t,e,r){const i=K(d.basename(t)),a=I(e,i||"decompressed");return A(r),await o.mkdir(d.dirname(a),{recursive:!0}),await v(e,a),await Y(U(t).pipe(ht()),a,r),1}async function Wt(t){const{requestedRoot:e,workspaceRoot:r}=await k(t.workspacePath),{resolvedTargetPath:i}=await Z({workspacePath:t.workspacePath,targetPath:t.outputPath||""}),a=z(e,r,String(t.archivePath||"").trim()),n=await x(r,a);if(!(await o.stat(n)).isFile())throw new Error(`Archive path is not a file: ${n}`);if(await J(i)||await o.mkdir(i,{recursive:!0}),!(await o.stat(i)).isDirectory())throw new Error(`Output path is not a directory: ${i}`);const u=H(n);if(!u)throw new Error("Unsupported archive type. Supported: .zip, .tar, .tar.gz, .tgz, .gz");let l=0;const f={entries:0,totalBytes:0};return u==="zip"?l=await zt(n,i,f):u==="tar"||u==="tgz"?l=await Dt(n,i,u==="tgz",f):l=await Lt(n,i,f),{ok:!0,workspacePath:h(r),archivePath:h(n),targetPath:h(i),extractedEntries:l}}function tt(t){const e=t.match(/^(.*?)\{([^}]+)\}(.*)$/);if(!e)return[t];const[,r,i,a]=e;return i.split(",").flatMap(n=>tt(r+n.trim()+a))}function et(t,e){const r=String(e||"").trim();if(!r||r==="*"||r==="*.*")return!0;const i=t.toLowerCase();return tt(r.toLowerCase()).some(n=>{if(n==="*")return!0;const s=n.replace(/\./g,"\\.").replace(/\*\*/g,"<<GLOBSTAR>>").replace(/\*/g,"[^/]*").replace(/\?/g,"[^/]").replace(/<<GLOBSTAR>>/g,".*");return new RegExp(`^${s}$`).test(i)})}function rt(t){return t===".git"||t==="node_modules"||t===".svn"||t===".hg"}const it=10*1024*1024,$t=1e3;async function Qt(t){const{workspaceRoot:e}=await k(t.workspacePath),r=String(t.keyword||"").trim();if(!r)throw new Error("keyword is required");const i=!!t.ignoreCase,a=String(t.fileMask||"").trim(),n=typeof t.maxResults=="number"&&t.maxResults>0?t.maxResults:$t,s=i?r.toLowerCase():r,u=(t.mode==="filename"?"filename":"content")==="filename",l=[];let f=0,w=!1;async function m(E){if(w)return;let F;try{F=await o.readdir(E,{withFileTypes:!0})}catch{return}for(const g of F){if(w)return;const T=p(e,d.join(E,g.name));if(g.isSymbolicLink())continue;if(g.isDirectory()){if(rt(g.name))continue;await m(T);continue}if(!g.isFile()||a&&!et(g.name,a))continue;f+=1;let N;try{N=await o.stat(T)}catch{continue}if(N.size>it)continue;if(u){const P=(i?g.name.toLowerCase():g.name).indexOf(s);if(P!==-1&&(l.push({filePath:h(T),lineNumber:0,lineContent:g.name,matchStart:P,matchEnd:P+r.length}),l.length>=n)){w=!0;return}continue}let M;try{M=await o.readFile(T,"utf-8")}catch{continue}const b=M.split(/\r?\n/);for(let R=0;R<b.length;R+=1){const P=b[R],nt=i?P.toLowerCase():P;let O=0;for(;;){const L=nt.indexOf(s,O);if(L===-1)break;if(l.push({filePath:h(T),lineNumber:R+1,lineContent:P,matchStart:L,matchEnd:L+r.length}),l.length>=n){w=!0;return}O=L+1}}}}return await m(e),{workspacePath:h(e),keyword:r,totalFiles:f,totalMatches:l.length,matches:l,truncated:w}}async function at(t,e,r,i,a){let n;try{n=await o.readFile(e,"utf-8")}catch{return{changed:!1,count:0}}const s=n;let c=0;if(a){const u=r.toLowerCase();let l=0;for(;;){const w=n.toLowerCase().indexOf(u,l);if(w===-1)break;n=n.slice(0,w)+i+n.slice(w+r.length),c+=1;const m=i.length||1;l=w+m}}else{let u=0;for(;;){const l=n.indexOf(r,u);if(l===-1)break;n=n.slice(0,l)+i+n.slice(l+r.length),c+=1;const f=i.length||1;u=l+f}}return n===s?{changed:!1,count:0}:(await v(t,e),await o.writeFile(e,n,"utf-8"),{changed:!0,count:c})}async function te(t){const{workspaceRoot:e}=await k(t.workspacePath),r=String(t.keyword||"").trim();if(!r)throw new Error("keyword is required");const i=String(t.replacement??""),a=!!t.ignoreCase,n=String(t.fileMask||"").trim(),s=String(t.filePath||"").trim();let c=0,u=0;if(s){const{resolvedFilePath:f}=await W({workspacePath:t.workspacePath,filePath:s}),w=await at(e,f,r,i,a);return w.changed&&(c=1,u=w.count),{workspacePath:h(e),keyword:r,replacement:i,changedFiles:c,changedMatches:u}}async function l(f){let w;try{w=await o.readdir(f,{withFileTypes:!0})}catch{return}for(const m of w){const E=p(e,d.join(f,m.name));if(m.isSymbolicLink())continue;if(m.isDirectory()){if(rt(m.name))continue;await l(E);continue}if(!m.isFile()||n&&!et(m.name,n))continue;try{if((await o.stat(E)).size>it)continue}catch{continue}const F=await at(e,E,r,i,a);F.changed&&(c+=1,u+=F.count)}}return await l(e),{workspacePath:h(e),keyword:r,replacement:i,changedFiles:c,changedMatches:u}}export{qt as chmodWorkspaceEntry,Zt as createWorkspaceEntry,Vt as deleteWorkspaceEntry,Wt as extractWorkspaceArchive,jt as getWorkspaceEntryProperties,Ot as listWorkspaceDirectory,Kt as moveWorkspaceEntry,_t as previewWorkspaceDocument,Ut as readWorkspaceFile,Ht as renameWorkspaceEntry,te as replaceWorkspaceFiles,Yt as resolveWorkspaceDownloadTarget,Qt as searchWorkspaceFiles,Jt as streamWorkspaceDirectoryZip,Xt as uploadWorkspaceFiles,Gt as writeWorkspaceFile};
+