codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
@@ -0,0 +1,332 @@
1
+ import { createHash, randomBytes, randomUUID } from "node:crypto";
2
+ import fs from "node:fs";
3
+ import path from "node:path";
4
+ import { authorizedResourceFingerprint } from "../policy/integration.js";
5
+ import { semanticDigest } from "../policy/authorizationFacts.js";
6
+ import { describeExecutionResourceV3, describeProcessActionResourceV3, resolveEffectiveEnvironmentV3 } from "../policy/executionResources.js";
7
+ import { assertFullAccessProfileEligibleV3 } from "../policy/fullAccessResources.js";
8
+ import { createToolMeta } from "../tools/schemas/common.js";
9
+ import { readProcessOutputOutputSchema, readProcessOutputOutputSchemaV4, runCommandInputV1Schema, runCommandInputV4Schema, runCommandOutputSchema, runCommandOutputSchemaV4, startProcessInputV1Schema, startProcessInputV4Schema } from "../tools/schemas/execution.js";
10
+ import { attachExecutionAuditFacts } from "../audit/transactionParticipant.js";
11
+ import { attachPendingVerificationReceipt } from "../worktrees/verificationTerminal.js";
12
+ import { compileCommandForWindowsHost } from "./commandCompiler.js";
13
+ import { OutputCursorCodec } from "./outputCursor.js";
14
+ import { OutputQuotaManager } from "./outputQuota.js";
15
+ import { OutputRing } from "./outputRing.js";
16
+ import { StreamingRedactor } from "./streamingRedactor.js";
17
+ import { contractIncludesV4 } from "../tools/contracts/index.js";
18
+ import { FULL_ACCESS_PROCESS_AUTHORITY_V3, FULL_ACCESS_PROCESS_WARNING_V3 } from "./authority.js";
19
+ const TERMINAL_TTL_MS = 5 * 60_000;
20
+ const FIRST_PAGE_BYTES = 64 * 1024;
21
+ function fileBinding(filePath, kind, backendId) {
22
+ const realPath = fs.realpathSync.native(filePath);
23
+ const stat = fs.statSync(realPath, { bigint: true });
24
+ if (!stat.isFile())
25
+ throw new Error("BACKEND_UNAVAILABLE");
26
+ if (stat.size > 512n * 1024n * 1024n)
27
+ throw new Error("BACKEND_UNAVAILABLE");
28
+ const hash = createHash("sha256");
29
+ const handle = fs.openSync(realPath, "r");
30
+ try {
31
+ const buffer = Buffer.allocUnsafe(1024 * 1024);
32
+ let position = 0;
33
+ for (;;) {
34
+ const bytes = fs.readSync(handle, buffer, 0, buffer.length, position);
35
+ if (!bytes)
36
+ break;
37
+ hash.update(buffer.subarray(0, bytes));
38
+ position += bytes;
39
+ }
40
+ }
41
+ finally {
42
+ fs.closeSync(handle);
43
+ }
44
+ const sha256 = hash.digest("hex");
45
+ return Object.freeze({ schemaVersion: 1, backendId, backendVersion: "bound", kind, source: "reviewed_explicit", path: realPath, realPath, sha256, identity: `sha256:${sha256}:dev:${stat.dev}:ino:${stat.ino}` });
46
+ }
47
+ function defaultBackend(command) {
48
+ if (command.kind === "argv") {
49
+ if (!path.win32.isAbsolute(command.executable) && !path.isAbsolute(command.executable))
50
+ throw new Error("BACKEND_UNAVAILABLE");
51
+ return fileBinding(command.executable, "argv", "reviewed-explicit-argv");
52
+ }
53
+ const drive = path.parse(process.execPath).root.replace(/[\\/]$/, "");
54
+ if (command.kind === "powershell") {
55
+ const core = path.join(`${drive}\\`, "Program Files", "PowerShell", "7", "pwsh.exe");
56
+ const windows = path.join(`${drive}\\`, "Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
57
+ const selected = command.edition === "windows" ? windows : command.edition === "core" ? core : fs.existsSync(core) ? core : windows;
58
+ return fileBinding(selected, "powershell", selected === windows ? "windows-powershell" : "powershell-core");
59
+ }
60
+ throw new Error("BACKEND_UNAVAILABLE");
61
+ }
62
+ export class RunCommandRuntimeV3 {
63
+ #options;
64
+ #cursor;
65
+ #quota = new OutputQuotaManager();
66
+ #records = new Map();
67
+ #now;
68
+ #candidateWorkspaces = null;
69
+ constructor(options) {
70
+ if (options.config.executionProfile !== "full_access")
71
+ throw new Error("EXECUTION_PROFILE_DISABLED");
72
+ assertFullAccessProfileEligibleV3(options.fullAccessProfile);
73
+ this.#options = options;
74
+ this.#now = options.now ?? Date.now;
75
+ this.#cursor = new OutputCursorCodec({ key: options.cursorKey ?? randomBytes(32), now: this.#now });
76
+ }
77
+ setCandidateVerificationWorkspace(runtime) {
78
+ if (this.#candidateWorkspaces)
79
+ throw new Error("MERGE_CHECKS_REQUIRED");
80
+ this.#candidateWorkspaces = runtime;
81
+ }
82
+ get toolContractVersion() {
83
+ return contractIncludesV4(this.#options.config.toolContractVersion) ? 4 : 3;
84
+ }
85
+ async beginPersistentVerification(binding) {
86
+ if (!binding)
87
+ return null;
88
+ if (!this.#candidateWorkspaces)
89
+ throw new Error("MERGE_CHECKS_REQUIRED");
90
+ return this.#candidateWorkspaces.beginExecution(binding);
91
+ }
92
+ async completePersistentVerification(binding, before) {
93
+ if (!this.#candidateWorkspaces)
94
+ throw new Error("MERGE_CHECKS_REQUIRED");
95
+ return this.#candidateWorkspaces.completeExecution(binding, before);
96
+ }
97
+ issuePersistentVerificationReceipt(binding, clean, resource, audit, exitCode) {
98
+ if (!this.#candidateWorkspaces ||
99
+ exitCode !== 0 ||
100
+ !resource.backendId ||
101
+ !resource.backendVersion ||
102
+ !resource.policyRevision)
103
+ throw new Error("MERGE_CHECKS_REQUIRED");
104
+ return this.#candidateWorkspaces.issueReceipt(binding, clean, {
105
+ commandDigest: resource.commandDigest,
106
+ commandResourceFingerprint: resource.resourceFingerprint,
107
+ backendId: resource.backendId,
108
+ backendVersion: resource.backendVersion,
109
+ executableIdentity: resource.executableIdentity,
110
+ effectiveEnvironmentDigest: resource.effectiveEnvironmentDigest,
111
+ cwdIdentity: resource.absoluteCwdIdentity,
112
+ policyRevision: resource.policyRevision,
113
+ terminalAuditEventId: audit.eventId,
114
+ exitCode
115
+ });
116
+ }
117
+ #resolve(args, operation = "run_command") {
118
+ const persistentInput = operation === "start_process"
119
+ ? (contractIncludesV4(this.toolContractVersion)
120
+ ? startProcessInputV4Schema.parse(args)
121
+ : startProcessInputV1Schema.parse(args))
122
+ : null;
123
+ const input = persistentInput ?? (contractIncludesV4(this.#options.config.toolContractVersion)
124
+ ? runCommandInputV4Schema.parse(args)
125
+ : runCommandInputV1Schema.parse(args));
126
+ if (input.mode !== "full_access")
127
+ throw new Error("PROCESS_SANDBOX_UNAVAILABLE");
128
+ const command = input.command;
129
+ const backend = (this.#options.backendResolver ?? defaultBackend)(command);
130
+ const verificationRequest = ("verification" in input ? input.verification : undefined);
131
+ if (verificationRequest &&
132
+ (input.mode !== "full_access" || input.cwd.kind !== "workspace" || input.cwd.path !== undefined))
133
+ throw new Error("MERGE_CHECKS_REQUIRED");
134
+ const verificationBinding = verificationRequest
135
+ ? this.#candidateWorkspaces?.describeExecution({
136
+ mergePlanId: verificationRequest.merge_plan_id,
137
+ integrationWorkspaceId: verificationRequest.integration_workspace_id,
138
+ category: verificationRequest.category
139
+ }) ?? (() => { throw new Error("MERGE_CHECKS_REQUIRED"); })()
140
+ : null;
141
+ const cwd = verificationBinding
142
+ ? verificationBinding.cwd
143
+ : input.cwd.kind === "absolute_local"
144
+ ? path.resolve(input.cwd.path)
145
+ : path.resolve(this.#options.config.defaultRoot, input.cwd.path ?? ".");
146
+ const effective = resolveEffectiveEnvironmentV3({ base: {}, overrides: input.environment ?? {}, platform: "win32" });
147
+ const deadlineMs = input.timeout_ms ?? 30_000;
148
+ const cwdIdentity = this.#options.cwdIdentity?.(cwd) ?? semanticDigest({ cwd: fs.realpathSync.native(cwd) });
149
+ const lifetimeMs = persistentInput ? persistentInput.lifetime_ms ?? 30 * 60_000 : deadlineMs;
150
+ const terminal = persistentInput ? persistentInput.terminal ?? "pipes" : "none";
151
+ const resource = describeExecutionResourceV3({
152
+ operation, command, effectiveEnvironmentDigest: effective.digest, logicalCwd: cwd,
153
+ absoluteCwdIdentity: cwdIdentity, backend: { backendId: backend.backendId, backendVersion: backend.backendVersion, executableIdentity: `sha256:${backend.sha256}` },
154
+ terminal, deadlineMs, lifetimeMs, networkPosture: "unrestricted_host", accessMode: "full_access",
155
+ workspaceId: null, leaseId: null, snapshotId: null, contractVersion: 3,
156
+ policyRevision: this.#options.policyRevision(), evidenceRevision: this.#options.evidenceRevision(),
157
+ identityRevision: this.#options.contextFingerprint(), transportRevision: this.#options.contextFingerprint(),
158
+ ...(verificationBinding ? {
159
+ verification: {
160
+ mergePlanId: verificationBinding.record.mergePlanId,
161
+ integrationWorkspaceId: verificationBinding.record.integrationWorkspaceId,
162
+ category: verificationBinding.request.category,
163
+ taskWorktreeId: verificationBinding.record.taskWorktreeId,
164
+ taskGeneration: verificationBinding.record.taskGeneration,
165
+ repositoryId: verificationBinding.record.repositoryId,
166
+ candidateOid: verificationBinding.record.candidateOid,
167
+ candidateTreeOid: verificationBinding.record.candidateTreeOid,
168
+ manifestDigest: `sha256:${verificationBinding.record.manifestDigest}`,
169
+ rootIdentity: `sha256:${verificationBinding.record.rootIdentity}`
170
+ }
171
+ } : {})
172
+ });
173
+ return { input, command, backend, cwd, effective, deadlineMs, lifetimeMs, terminal, resource, verificationBinding };
174
+ }
175
+ describe(toolName, args) {
176
+ this.#purge();
177
+ if (toolName === "run_command" || toolName === "start_process") {
178
+ const resolved = this.#resolve(args, toolName);
179
+ return { resource: resolved.resource, semanticFactsDigest: resolved.resource.semanticFactsDigest, riskClass: "R3", requiredScopes: toolName === "start_process" ? ["shell:execute", "process:manage", "process:persistent", "host:full-access"] : ["shell:execute", "process:manage", "host:full-access"] };
180
+ }
181
+ if (toolName === "read_process_output") {
182
+ const processId = String(args.process_id ?? "");
183
+ const record = this.#records.get(processId);
184
+ const resource = describeProcessActionResourceV3({ operation: "read_process_output", processId, generation: record?.generation, owned: Boolean(record), contextMatches: record?.contextFingerprint === this.#options.contextFingerprint() });
185
+ return { resource: resource, semanticFactsDigest: resource.semanticFactsDigest, riskClass: "R0", requiredScopes: ["process:manage"] };
186
+ }
187
+ throw new Error("PROCESS_NOT_FOUND");
188
+ }
189
+ async runCommand(args) {
190
+ const started = this.#now();
191
+ const resolved = this.#resolve(args);
192
+ const authorized = authorizedResourceFingerprint(args);
193
+ if (authorized && authorized !== resolved.resource.resourceFingerprint)
194
+ throw new Error("BACKEND_STALE");
195
+ const processId = this.#options.processId?.() ?? `process_${randomUUID().replaceAll("-", "")}`;
196
+ const reservation = this.#quota.reserveProcess(this.#options.contextFingerprint(), processId);
197
+ const ring = new OutputRing();
198
+ const stdoutRedactor = new StreamingRedactor();
199
+ const stderrRedactor = new StreamingRedactor();
200
+ let body;
201
+ try {
202
+ const verificationBefore = resolved.verificationBinding
203
+ ? await this.#candidateWorkspaces.beginExecution(resolved.verificationBinding)
204
+ : null;
205
+ const compiled = compileCommandForWindowsHost({ command: resolved.command, backend: resolved.backend, cwd: resolved.cwd, environment: Object.fromEntries(resolved.effective.entries), deadlineMs: resolved.deadlineMs });
206
+ const client = await this.#options.hostRuntime.get();
207
+ ({ body } = await client.request(compiled.request.operation, compiled.request.input, { timeoutMs: resolved.deadlineMs + 10_000 }));
208
+ for (const [stream, key, redactor] of [["stdout", "stdoutBase64", stdoutRedactor], ["stderr", "stderrBase64", stderrRedactor]]) {
209
+ const encoded = typeof body[key] === "string" ? body[key] : "";
210
+ const raw = Buffer.from(encoded, "base64");
211
+ const redacted = Buffer.concat([redactor.write(raw), redactor.end()]);
212
+ if (!this.#quota.claimOutput(processId, redacted.length))
213
+ throw new Error("OUTPUT_LIMIT_EXCEEDED");
214
+ ring.append(stream, redacted);
215
+ }
216
+ ring.close();
217
+ this.#quota.reserveTerminal(processId);
218
+ const timedOut = body.timedOut === true;
219
+ const exitCode = typeof body.exitCode === "number" ? body.exitCode : null;
220
+ const status = timedOut ? "terminated" : body.ok === false && exitCode === null ? "failed" : "exited";
221
+ const record = {
222
+ processId,
223
+ generation: 0,
224
+ contextFingerprint: this.#options.contextFingerprint(),
225
+ ring,
226
+ status,
227
+ exitCode,
228
+ verificationReceipt: null,
229
+ expiresAt: this.#now() + TERMINAL_TTL_MS,
230
+ release: reservation.release
231
+ };
232
+ const output = this.#page(record, { sequence: 0, offset: 0 }, FIRST_PAGE_BYTES);
233
+ const data = { process_id: processId, status, exit_code: exitCode, termination_reason: timedOut ? "timeout" : null,
234
+ backend: { backend_id: resolved.backend.backendId, command_kind: resolved.command.kind, executable_identity: resolved.backend.sha256, terminal: "none" }, authority: FULL_ACCESS_PROCESS_AUTHORITY_V3, output,
235
+ started_at: new Date(started).toISOString(), ended_at: new Date(this.#now()).toISOString(),
236
+ ...(contractIncludesV4(this.#options.config.toolContractVersion) ? { verification_receipt: null } : {}) };
237
+ const schema = contractIncludesV4(this.#options.config.toolContractVersion)
238
+ ? runCommandOutputSchemaV4
239
+ : runCommandOutputSchema;
240
+ const structured = schema.parse({ codexgpt_tool: "run_command", codexgpt_title: "Run Command", ok: true, data, error: null, meta: createToolMeta(this.#now() - started, [FULL_ACCESS_PROCESS_WARNING_V3]) });
241
+ attachExecutionAuditFacts(structured, {
242
+ resultCode: status === "exited" && exitCode === 0 ? "OK" : "COMMAND_FAILED",
243
+ exitCode,
244
+ boundedByteCounts: { returnedBytes: output.returned_bytes },
245
+ changeSetId: null,
246
+ operationCount: 1,
247
+ mutationKinds: [],
248
+ pendingMutationCommit: null
249
+ });
250
+ if (resolved.verificationBinding && verificationBefore && status === "exited" && exitCode === 0) {
251
+ const verificationAfter = await this.#candidateWorkspaces.completeExecution(resolved.verificationBinding, verificationBefore);
252
+ attachPendingVerificationReceipt(structured, {
253
+ finalize: (audit) => this.#candidateWorkspaces.issueReceipt(resolved.verificationBinding, verificationAfter, {
254
+ commandDigest: resolved.resource.commandDigest,
255
+ commandResourceFingerprint: resolved.resource.resourceFingerprint,
256
+ backendId: resolved.resource.backendId,
257
+ backendVersion: resolved.resource.backendVersion,
258
+ executableIdentity: resolved.resource.executableIdentity,
259
+ effectiveEnvironmentDigest: resolved.resource.effectiveEnvironmentDigest,
260
+ cwdIdentity: resolved.resource.absoluteCwdIdentity,
261
+ policyRevision: resolved.resource.policyRevision,
262
+ terminalAuditEventId: audit.eventId,
263
+ exitCode
264
+ }),
265
+ attach: (receipt) => {
266
+ const projected = structured.data;
267
+ if (!projected)
268
+ throw new Error("MERGE_CHECKS_REQUIRED");
269
+ projected.verification_receipt = receipt;
270
+ record.verificationReceipt = receipt;
271
+ }
272
+ });
273
+ }
274
+ this.#records.set(processId, record);
275
+ return structured;
276
+ }
277
+ catch (error) {
278
+ reservation.release();
279
+ throw error;
280
+ }
281
+ }
282
+ preparePersistent(args) {
283
+ const resolved = this.#resolve(args, "start_process");
284
+ const authorized = authorizedResourceFingerprint(args);
285
+ if (authorized && authorized !== resolved.resource.resourceFingerprint)
286
+ throw new Error("BACKEND_STALE");
287
+ const compiled = compileCommandForWindowsHost({ command: resolved.command, backend: resolved.backend, cwd: resolved.cwd, environment: Object.fromEntries(resolved.effective.entries), deadlineMs: resolved.deadlineMs });
288
+ return Object.freeze({ ...resolved, compiled });
289
+ }
290
+ readProcessOutput(args) {
291
+ this.#purge();
292
+ const processId = String(args.process_id ?? "");
293
+ const record = this.#records.get(processId);
294
+ if (!record || record.contextFingerprint !== this.#options.contextFingerprint())
295
+ throw new Error("PROCESS_NOT_FOUND");
296
+ const state = typeof args.cursor === "string" ? this.#cursor.decode(args.cursor, { processId, generation: record.generation, contextFingerprint: record.contextFingerprint }) : { sequence: 0, offset: 0 };
297
+ const output = this.#page(record, state, typeof args.max_bytes === "number" ? args.max_bytes : FIRST_PAGE_BYTES);
298
+ const data = {
299
+ process_id: processId,
300
+ status: record.status,
301
+ output,
302
+ ...(contractIncludesV4(this.toolContractVersion)
303
+ ? {
304
+ exit_code: record.exitCode,
305
+ verification_receipt: record.verificationReceipt
306
+ }
307
+ : {})
308
+ };
309
+ const schema = contractIncludesV4(this.toolContractVersion)
310
+ ? readProcessOutputOutputSchemaV4
311
+ : readProcessOutputOutputSchema;
312
+ return schema.parse({ codexgpt_tool: "read_process_output", codexgpt_title: "Read Process Output", ok: true, data, error: null, meta: createToolMeta() });
313
+ }
314
+ #page(record, cursor, maxBytes) {
315
+ const page = record.ring.read({ ...cursor, maxBytes });
316
+ return { chunks: page.chunks, next_cursor: page.eof ? null : this.#cursor.encode({ processId: record.processId, generation: record.generation, sequence: page.next.sequence, offset: page.next.offset, contextFingerprint: record.contextFingerprint, expiresAt: record.expiresAt }), truncated: page.truncated, eof: page.eof, returned_bytes: page.returnedBytes };
317
+ }
318
+ #purge() {
319
+ for (const [id, record] of this.#records)
320
+ if (this.#now() >= record.expiresAt) {
321
+ record.release();
322
+ this.#records.delete(id);
323
+ }
324
+ }
325
+ close() {
326
+ for (const record of this.#records.values())
327
+ record.release();
328
+ this.#records.clear();
329
+ this.#cursor.dispose();
330
+ }
331
+ }
332
+ //# sourceMappingURL=runCommand.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"runCommand.js","sourceRoot":"","sources":["../../src/process/runCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,6BAA6B,EAA4D,MAAM,0BAA0B,CAAC;AAEnI,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAC9I,OAAO,EAAE,iCAAiC,EAA4B,MAAM,kCAAkC,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAM/E,OAAO,EACL,gCAAgC,EAEjC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAC;AAIxB,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAuCnC,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAwC,EAAE,SAAiB;IAChG,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtE,IAAI,CAAC,KAAK;gBAAE,MAAM;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACvC,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,MAAM,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACpN,CAAC;AAED,SAAS,cAAc,CAAC,OAAsB;IAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/H,OAAO,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACpI,OAAO,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAA6B;IACrC,OAAO,CAAoB;IAC3B,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAClC,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,IAAI,CAAe;IAC5B,oBAAoB,GAA4C,IAAI,CAAC;IAErE,YAAY,OAAmC;QAC7C,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrG,iCAAiC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,iCAAiC,CAAC,OAAyC;QACzE,IAAI,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACxE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,IAAI,mBAAmB;QACrB,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAA2C;QAE3C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,OAAoC,EACpC,MAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,kCAAkC,CAChC,OAAoC,EACpC,KAA+B,EAC/B,QAA+C,EAC/C,KAAuC,EACvC,QAAgB;QAEhB,IACE,CAAC,IAAI,CAAC,oBAAoB;YAC1B,QAAQ,KAAK,CAAC;YACd,CAAC,QAAQ,CAAC,SAAS;YACnB,CAAC,QAAQ,CAAC,cAAc;YACxB,CAAC,QAAQ,CAAC,cAAc;YACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE;YAC5D,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,0BAA0B,EAAE,QAAQ,CAAC,mBAAmB;YACxD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;YAC/D,WAAW,EAAE,QAAQ,CAAC,mBAAmB;YACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,oBAAoB,EAAE,KAAK,CAAC,OAAO;YACnC,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAA6B,EAAE,YAA6C,aAAa;QAChG,MAAM,eAAe,GAAG,SAAS,KAAK,eAAe;YACnD,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAC3C,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,eAAe,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAC5F,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAwB,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,mBAAmB,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAExE,CAAC;QACd,IACE,mBAAmB;YACnB,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,mBAAmB,GAAuC,mBAAmB;YACjF,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC;gBAC3C,WAAW,EAAE,mBAAmB,CAAC,aAAa;gBAC9C,sBAAsB,EAAE,mBAAmB,CAAC,wBAAwB;gBACpE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;aACvC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/D,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,GAAG,GAAG,mBAAmB;YAC7B,CAAC,CAAC,mBAAmB,CAAC,GAAG;YACzB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB;gBACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrH,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7F,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG;YACjF,mBAAmB,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE;YACnK,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa;YAChG,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YACtE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YAClG,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;YAE3G,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACxB,YAAY,EAAE;oBACZ,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC,WAAW;oBACnD,sBAAsB,EAAE,mBAAmB,CAAC,MAAM,CAAC,sBAAsB;oBACzE,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ;oBAC9C,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,cAAc;oBACzD,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,cAAc;oBACzD,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,YAAY;oBACrD,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,YAAY;oBACrD,gBAAgB,EAAE,mBAAmB,CAAC,MAAM,CAAC,gBAAgB;oBAC7D,cAAc,EAAE,UAAU,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE;oBACrE,YAAY,EAAE,UAAU,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE;iBAClE;aACF,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IACtH,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,IAA6B;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAA2C,EAAE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAa,EAAE,cAAc,EAAE,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC1V,CAAC;QACD,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,+BAA+B,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC7O,OAAO,EAAE,QAAQ,EAAE,QAA2C,EAAE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAa,EAAE,cAAc,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpL,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAA6B;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,WAAW,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC/C,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,mBAAmB;gBACrD,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAqB,CAAC,cAAc,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAC/E,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,QAAQ,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACzN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YACrD,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YACnI,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,CAAU,EAAE,CAAC;gBACxI,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACnG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;YACxC,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtG,MAAM,MAAM,GAAmB;gBAC7B,SAAS;gBACT,UAAU,EAAE,CAAC;gBACb,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;gBACtD,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,mBAAmB,EAAE,IAAI;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,eAAe;gBACxC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBAChH,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,gCAAgC,EAAE,MAAM;gBAC7M,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC1F,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9G,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACvE,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,sBAAsB,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAA4B,CAAC;YACxO,yBAAyB,CAAC,UAAU,EAAE;gBACpC,UAAU,EAAE,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;gBAC3E,QAAQ;gBACR,iBAAiB,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE;gBAC3D,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,EAAE;gBACjB,qBAAqB,EAAE,IAAI;aAC5B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,mBAAmB,IAAI,kBAAkB,IAAI,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAChG,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,oBAAqB,CAAC,iBAAiB,CAC1E,QAAQ,CAAC,mBAAmB,EAC5B,kBAAkB,CACnB,CAAC;gBACF,gCAAgC,CAAC,UAAU,EAAE;oBAC3C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAqB,CAAC,YAAY,CAC1D,QAAQ,CAAC,mBAAoB,EAC7B,iBAAiB,EACjB;wBACE,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa;wBAC9C,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;wBACjE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAU;wBACvC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAe;wBACjD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB;wBACxD,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,0BAA0B;wBACxE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;wBAClD,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAe;wBACjD,oBAAoB,EAAE,KAAK,CAAC,OAAO;wBACnC,QAAQ;qBACT,CACF;oBACD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;wBAClB,MAAM,SAAS,GAAG,UAAU,CAAC,IAA2C,CAAC;wBACzE,IAAI,CAAC,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;wBACzD,SAAS,CAAC,oBAAoB,GAAG,OAAO,CAAC;wBACzC,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC;oBACvC,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAA6B;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzN,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,iBAAiB,CAAC,IAA6B;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3M,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACjH,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM;YACN,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAC9C,CAAC,CAAC;oBACE,SAAS,EAAE,MAAM,CAAC,QAAQ;oBAC1B,oBAAoB,EAAE,MAAM,CAAC,mBAAmB;iBACjD;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACzD,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,6BAA6B,CAAC;QAClC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,qBAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAA4B,CAAC;IACvL,CAAC;IAED,KAAK,CAAC,MAAsB,EAAE,MAA4C,EAAE,QAAgB;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IACvW,CAAC;IAED,MAAM;QACJ,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;IAChI,CAAC;IAED,KAAK;QACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;CACF"}
@@ -0,0 +1,105 @@
1
+ export const OUTPUT_REDACTION_CAPABILITY = "best_effort_known_patterns";
2
+ const REPLACEMENT = "[REDACTED_SECRET]";
3
+ const TOKEN_CHARACTER = (character) => /^[A-Za-z0-9._~+/=_-]$/.test(character);
4
+ const QUERY_CHARACTER = (character) => !/[\s&"'`<>]/.test(character);
5
+ function firstMatch(value) {
6
+ const candidates = [];
7
+ const specs = [
8
+ { pattern: /\bsk-[A-Za-z0-9_-]{10}/, continues: TOKEN_CHARACTER },
9
+ { pattern: /\bsk-ant-[A-Za-z0-9_-]{10}/, continues: TOKEN_CHARACTER },
10
+ { pattern: /\bgh[opsru]_[A-Za-z0-9_]{20}/, continues: TOKEN_CHARACTER },
11
+ { pattern: /\bgithub_pat_[A-Za-z0-9_]{20}/, continues: TOKEN_CHARACTER },
12
+ { pattern: /\bnpm_[A-Za-z0-9_-]{20}/, continues: TOKEN_CHARACTER },
13
+ { pattern: /(Authorization\s*:\s*Bearer\s+)[A-Za-z0-9._~+/=-]{12}/i, prefixGroup: 1, continues: TOKEN_CHARACTER },
14
+ { pattern: /([?&](?:codexgpt_token|token|access_token|auth_token|api[_-]?key)=)[^&\s"'`<>]{8}/i, prefixGroup: 1, continues: QUERY_CHARACTER }
15
+ ];
16
+ for (const spec of specs) {
17
+ const match = spec.pattern.exec(value);
18
+ if (!match || match.index === undefined)
19
+ continue;
20
+ const prefix = spec.prefixGroup ? match[spec.prefixGroup] : "";
21
+ candidates.push({
22
+ index: match.index,
23
+ length: match[0].length,
24
+ replacement: `${prefix}${REPLACEMENT}`,
25
+ continues: spec.continues
26
+ });
27
+ }
28
+ candidates.sort((left, right) => left.index - right.index || right.length - left.length);
29
+ return candidates[0] ?? null;
30
+ }
31
+ export class StreamingRedactor {
32
+ #decoder = new TextDecoder("utf-8", { fatal: false });
33
+ #candidateLimit;
34
+ #pending = "";
35
+ #suppress;
36
+ #ansi = false;
37
+ constructor(options = {}) {
38
+ this.#candidateLimit = Math.max(64, Math.min(4096, options.candidateLimit ?? 256));
39
+ }
40
+ write(bytes) {
41
+ return Buffer.from(this.#consume(this.#decoder.decode(bytes, { stream: true })), "utf8");
42
+ }
43
+ end() {
44
+ let output = this.#consume(this.#decoder.decode());
45
+ this.#suppress = undefined;
46
+ output += this.#pending;
47
+ this.#pending = "";
48
+ return Buffer.from(output, "utf8");
49
+ }
50
+ bufferedBytes() {
51
+ return Buffer.byteLength(this.#pending, "utf8");
52
+ }
53
+ #consume(value) {
54
+ let output = "";
55
+ for (const rawCharacter of value) {
56
+ const character = this.#sanitize(rawCharacter);
57
+ if (character === "")
58
+ continue;
59
+ if (this.#suppress) {
60
+ if (this.#suppress(character))
61
+ continue;
62
+ this.#suppress = undefined;
63
+ }
64
+ this.#pending += character;
65
+ const match = firstMatch(this.#pending);
66
+ if (match) {
67
+ output += this.#pending.slice(0, match.index) + match.replacement;
68
+ this.#pending = this.#pending.slice(match.index + match.length);
69
+ this.#suppress = match.continues;
70
+ }
71
+ while (Buffer.byteLength(this.#pending, "utf8") > this.#candidateLimit) {
72
+ output += this.#pending[0];
73
+ this.#pending = this.#pending.slice(1);
74
+ }
75
+ }
76
+ if (!this.#suppress) {
77
+ const lineBoundary = this.#pending.lastIndexOf("\n");
78
+ if (lineBoundary >= 0) {
79
+ output += this.#pending.slice(0, lineBoundary + 1);
80
+ this.#pending = this.#pending.slice(lineBoundary + 1);
81
+ }
82
+ }
83
+ return output;
84
+ }
85
+ #sanitize(character) {
86
+ if (this.#ansi) {
87
+ if (/[@-~]/.test(character) && character !== "[")
88
+ this.#ansi = false;
89
+ return "";
90
+ }
91
+ if (character === "\u001b") {
92
+ this.#ansi = true;
93
+ return "";
94
+ }
95
+ if (character === "\r" || character === "\0")
96
+ return "";
97
+ const code = character.codePointAt(0);
98
+ if (code < 0x20 && character !== "\n" && character !== "\t")
99
+ return "";
100
+ if (code === 0x7f)
101
+ return "";
102
+ return character;
103
+ }
104
+ }
105
+ //# sourceMappingURL=streamingRedactor.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"streamingRedactor.js","sourceRoot":"","sources":["../../src/process/streamingRedactor.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAAqC,CAAC;AACjF,MAAM,WAAW,GAAG,mBAAmB,CAAC;AASxC,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvF,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAE7E,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAgG;QACzG,EAAE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE;QACjE,EAAE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,eAAe,EAAE;QACrE,EAAE,OAAO,EAAE,8BAA8B,EAAE,SAAS,EAAE,eAAe,EAAE;QACvE,EAAE,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAE,eAAe,EAAE;QACxE,EAAE,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,eAAe,EAAE;QAClE,EAAE,OAAO,EAAE,wDAAwD,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE;QACjH,EAAE,OAAO,EAAE,oFAAoF,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE;KAC9I,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,UAAU,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;YACvB,WAAW,EAAE,GAAG,MAAM,GAAG,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,eAAe,CAAS;IACjC,QAAQ,GAAG,EAAE,CAAC;IACd,SAAS,CAAkC;IAC3C,KAAK,GAAG,KAAK,CAAC;IAEd,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAA0B;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,GAAG;QACD,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,aAAa;QACX,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,YAAY,IAAI,KAAK,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,EAAE;gBAAE,SAAS;YAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;YAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;gBAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACnC,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,GAAG;gBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACvC,IAAI,IAAI,GAAG,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACvE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/process/types.ts"],"names":[],"mappings":""}