codexgpt 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.example.md +20 -0
- package/CHANGELOG.md +342 -0
- package/CHATGPT_PROMPT.md +12 -0
- package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
- package/CODEX_PROMPT.md +12 -0
- package/CONTRIBUTING.md +62 -0
- package/DOMAIN_SETUP.md +275 -0
- package/FAQ.md +366 -0
- package/FAQ_ZH.md +329 -0
- package/LICENSE +21 -0
- package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
- package/README.md +490 -0
- package/README_ZH.md +747 -0
- package/SECURITY.md +295 -0
- package/config.example.env +103 -0
- package/dist/access/fullAccessLease.js +148 -0
- package/dist/access/fullAccessLease.js.map +1 -0
- package/dist/access/protectedRoots.js +122 -0
- package/dist/access/protectedRoots.js.map +1 -0
- package/dist/access/rootAdmission.js +347 -0
- package/dist/access/rootAdmission.js.map +1 -0
- package/dist/analysis/cache.js +27 -0
- package/dist/analysis/cache.js.map +1 -0
- package/dist/analysis/classify.js +102 -0
- package/dist/analysis/classify.js.map +1 -0
- package/dist/analysis/extract.js +139 -0
- package/dist/analysis/extract.js.map +1 -0
- package/dist/analysis/graph.js +22 -0
- package/dist/analysis/graph.js.map +1 -0
- package/dist/analysis/impact.js +167 -0
- package/dist/analysis/impact.js.map +1 -0
- package/dist/analysis/index.js +215 -0
- package/dist/analysis/index.js.map +1 -0
- package/dist/analysis/inventory.js +51 -0
- package/dist/analysis/inventory.js.map +1 -0
- package/dist/analysis/providers.js +24 -0
- package/dist/analysis/providers.js.map +1 -0
- package/dist/analysis/rank.js +27 -0
- package/dist/analysis/rank.js.map +1 -0
- package/dist/analysis/types.js +8 -0
- package/dist/analysis/types.js.map +1 -0
- package/dist/audit/canonicalJson.js +79 -0
- package/dist/audit/canonicalJson.js.map +1 -0
- package/dist/audit/diagnostics.js +128 -0
- package/dist/audit/diagnostics.js.map +1 -0
- package/dist/audit/index.js +12 -0
- package/dist/audit/index.js.map +1 -0
- package/dist/audit/lifecycleV3.js +53 -0
- package/dist/audit/lifecycleV3.js.map +1 -0
- package/dist/audit/lifecycleV4.js +70 -0
- package/dist/audit/lifecycleV4.js.map +1 -0
- package/dist/audit/lock.js +195 -0
- package/dist/audit/lock.js.map +1 -0
- package/dist/audit/queryTool.js +120 -0
- package/dist/audit/queryTool.js.map +1 -0
- package/dist/audit/runtime.js +48 -0
- package/dist/audit/runtime.js.map +1 -0
- package/dist/audit/schemas.js +640 -0
- package/dist/audit/schemas.js.map +1 -0
- package/dist/audit/store.js +1309 -0
- package/dist/audit/store.js.map +1 -0
- package/dist/audit/transactionParticipant.js +45 -0
- package/dist/audit/transactionParticipant.js.map +1 -0
- package/dist/audit/types.js +11 -0
- package/dist/audit/types.js.map +1 -0
- package/dist/auth/audit.js +44 -0
- package/dist/auth/audit.js.map +1 -0
- package/dist/auth/authorizationStore.js +333 -0
- package/dist/auth/authorizationStore.js.map +1 -0
- package/dist/auth/challenges.js +25 -0
- package/dist/auth/challenges.js.map +1 -0
- package/dist/auth/clientStore.js +469 -0
- package/dist/auth/clientStore.js.map +1 -0
- package/dist/auth/cloudflareConfig.js +112 -0
- package/dist/auth/cloudflareConfig.js.map +1 -0
- package/dist/auth/configuration.js +167 -0
- package/dist/auth/configuration.js.map +1 -0
- package/dist/auth/credentialStore.js +65 -0
- package/dist/auth/credentialStore.js.map +1 -0
- package/dist/auth/deploymentLock.js +220 -0
- package/dist/auth/deploymentLock.js.map +1 -0
- package/dist/auth/deploymentRegistry.js +149 -0
- package/dist/auth/deploymentRegistry.js.map +1 -0
- package/dist/auth/errors.js +26 -0
- package/dist/auth/errors.js.map +1 -0
- package/dist/auth/grantStore.js +307 -0
- package/dist/auth/grantStore.js.map +1 -0
- package/dist/auth/index.js +39 -0
- package/dist/auth/index.js.map +1 -0
- package/dist/auth/keyManager.js +148 -0
- package/dist/auth/keyManager.js.map +1 -0
- package/dist/auth/localAdminSession.js +173 -0
- package/dist/auth/localAdminSession.js.map +1 -0
- package/dist/auth/metadata.js +69 -0
- package/dist/auth/metadata.js.map +1 -0
- package/dist/auth/oauthProvider.js +589 -0
- package/dist/auth/oauthProvider.js.map +1 -0
- package/dist/auth/ownerApproval.js +51 -0
- package/dist/auth/ownerApproval.js.map +1 -0
- package/dist/auth/policyIdentity.js +189 -0
- package/dist/auth/policyIdentity.js.map +1 -0
- package/dist/auth/rateLimits.js +66 -0
- package/dist/auth/rateLimits.js.map +1 -0
- package/dist/auth/recovery.js +275 -0
- package/dist/auth/recovery.js.map +1 -0
- package/dist/auth/requestContext.js +34 -0
- package/dist/auth/requestContext.js.map +1 -0
- package/dist/auth/resourceMiddleware.js +147 -0
- package/dist/auth/resourceMiddleware.js.map +1 -0
- package/dist/auth/runtimeStatus.js +51 -0
- package/dist/auth/runtimeStatus.js.map +1 -0
- package/dist/auth/schemas.js +84 -0
- package/dist/auth/schemas.js.map +1 -0
- package/dist/auth/stateStore.js +468 -0
- package/dist/auth/stateStore.js.map +1 -0
- package/dist/auth/tokenService.js +631 -0
- package/dist/auth/tokenService.js.map +1 -0
- package/dist/auth/toolSecurity.js +108 -0
- package/dist/auth/toolSecurity.js.map +1 -0
- package/dist/auth/types.js +6 -0
- package/dist/auth/types.js.map +1 -0
- package/dist/auth/windowsDpapi.js +193 -0
- package/dist/auth/windowsDpapi.js.map +1 -0
- package/dist/bashOps.js +292 -0
- package/dist/bashOps.js.map +1 -0
- package/dist/capabilitiesOps.js +412 -0
- package/dist/capabilitiesOps.js.map +1 -0
- package/dist/changesets/crypto.js +92 -0
- package/dist/changesets/crypto.js.map +1 -0
- package/dist/changesets/index.js +9 -0
- package/dist/changesets/index.js.map +1 -0
- package/dist/changesets/moveStore.js +237 -0
- package/dist/changesets/moveStore.js.map +1 -0
- package/dist/changesets/moveUndo.js +386 -0
- package/dist/changesets/moveUndo.js.map +1 -0
- package/dist/changesets/schemas.js +234 -0
- package/dist/changesets/schemas.js.map +1 -0
- package/dist/changesets/store.js +573 -0
- package/dist/changesets/store.js.map +1 -0
- package/dist/changesets/types.js +9 -0
- package/dist/changesets/types.js.map +1 -0
- package/dist/changesets/undo.js +525 -0
- package/dist/changesets/undo.js.map +1 -0
- package/dist/changesets/unifiedUndo.js +31 -0
- package/dist/changesets/unifiedUndo.js.map +1 -0
- package/dist/cliEnvironment.js +85 -0
- package/dist/cliEnvironment.js.map +1 -0
- package/dist/codexSessions.js +733 -0
- package/dist/codexSessions.js.map +1 -0
- package/dist/codexgptSupertool.js +216 -0
- package/dist/codexgptSupertool.js.map +1 -0
- package/dist/codexproSupertool.js +204 -0
- package/dist/codexproSupertool.js.map +1 -0
- package/dist/config.js +733 -0
- package/dist/config.js.map +1 -0
- package/dist/control/localApprovalClient.js +287 -0
- package/dist/control/localApprovalClient.js.map +1 -0
- package/dist/control/localApprovalServer.js +466 -0
- package/dist/control/localApprovalServer.js.map +1 -0
- package/dist/control/runtime.js +178 -0
- package/dist/control/runtime.js.map +1 -0
- package/dist/control/schemas.js +184 -0
- package/dist/control/schemas.js.map +1 -0
- package/dist/control/windowsLocalControl.js +348 -0
- package/dist/control/windowsLocalControl.js.map +1 -0
- package/dist/fsOps.js +541 -0
- package/dist/fsOps.js.map +1 -0
- package/dist/git/admission.js +26 -0
- package/dist/git/admission.js.map +1 -0
- package/dist/git/branchService.js +51 -0
- package/dist/git/branchService.js.map +1 -0
- package/dist/git/capabilities.js +143 -0
- package/dist/git/capabilities.js.map +1 -0
- package/dist/git/commitService.js +344 -0
- package/dist/git/commitService.js.map +1 -0
- package/dist/git/durableState.js +151 -0
- package/dist/git/durableState.js.map +1 -0
- package/dist/git/execution.js +451 -0
- package/dist/git/execution.js.map +1 -0
- package/dist/git/fileTransaction.js +50 -0
- package/dist/git/fileTransaction.js.map +1 -0
- package/dist/git/indexService.js +421 -0
- package/dist/git/indexService.js.map +1 -0
- package/dist/git/integrations.js +653 -0
- package/dist/git/integrations.js.map +1 -0
- package/dist/git/locks.js +287 -0
- package/dist/git/locks.js.map +1 -0
- package/dist/git/mutationContext.js +92 -0
- package/dist/git/mutationContext.js.map +1 -0
- package/dist/git/mutationJournal.js +91 -0
- package/dist/git/mutationJournal.js.map +1 -0
- package/dist/git/mutationService.js +352 -0
- package/dist/git/mutationService.js.map +1 -0
- package/dist/git/normalization.js +57 -0
- package/dist/git/normalization.js.map +1 -0
- package/dist/git/objectQuarantine.js +243 -0
- package/dist/git/objectQuarantine.js.map +1 -0
- package/dist/git/opaqueRecordStore.js +187 -0
- package/dist/git/opaqueRecordStore.js.map +1 -0
- package/dist/git/operationStore.js +287 -0
- package/dist/git/operationStore.js.map +1 -0
- package/dist/git/parsers.js +311 -0
- package/dist/git/parsers.js.map +1 -0
- package/dist/git/privateIndex.js +79 -0
- package/dist/git/privateIndex.js.map +1 -0
- package/dist/git/productionBootstrap.js +39 -0
- package/dist/git/productionBootstrap.js.map +1 -0
- package/dist/git/readService.js +846 -0
- package/dist/git/readService.js.map +1 -0
- package/dist/git/recovery.js +417 -0
- package/dist/git/recovery.js.map +1 -0
- package/dist/git/repositoryIdentity.js +611 -0
- package/dist/git/repositoryIdentity.js.map +1 -0
- package/dist/git/repositoryStore.js +237 -0
- package/dist/git/repositoryStore.js.map +1 -0
- package/dist/git/resources.js +113 -0
- package/dist/git/resources.js.map +1 -0
- package/dist/git/restoreService.js +178 -0
- package/dist/git/restoreService.js.map +1 -0
- package/dist/git/reviewToken.js +86 -0
- package/dist/git/reviewToken.js.map +1 -0
- package/dist/git/stashService.js +566 -0
- package/dist/git/stashService.js.map +1 -0
- package/dist/git/stateToken.js +139 -0
- package/dist/git/stateToken.js.map +1 -0
- package/dist/gitOps.js +147 -0
- package/dist/gitOps.js.map +1 -0
- package/dist/guard.js +608 -0
- package/dist/guard.js.map +1 -0
- package/dist/guidance/diagnostics.js +14 -0
- package/dist/guidance/diagnostics.js.map +1 -0
- package/dist/guidance/instructions.js +167 -0
- package/dist/guidance/instructions.js.map +1 -0
- package/dist/guidance/mode.js +18 -0
- package/dist/guidance/mode.js.map +1 -0
- package/dist/guidance/openaiSkillMetadata.js +29 -0
- package/dist/guidance/openaiSkillMetadata.js.map +1 -0
- package/dist/guidance/safeTextReader.js +171 -0
- package/dist/guidance/safeTextReader.js.map +1 -0
- package/dist/guidance/skillCatalog.js +70 -0
- package/dist/guidance/skillCatalog.js.map +1 -0
- package/dist/guidance/skillDiscovery.js +353 -0
- package/dist/guidance/skillDiscovery.js.map +1 -0
- package/dist/guidance/skillMetadata.js +115 -0
- package/dist/guidance/skillMetadata.js.map +1 -0
- package/dist/guidance/skillResources.js +146 -0
- package/dist/guidance/skillResources.js.map +1 -0
- package/dist/handoffOps.js +449 -0
- package/dist/handoffOps.js.map +1 -0
- package/dist/http/localAdminApp.js +203 -0
- package/dist/http/localAdminApp.js.map +1 -0
- package/dist/http/oauthMcpRuntime.js +294 -0
- package/dist/http/oauthMcpRuntime.js.map +1 -0
- package/dist/http/publicApp.js +350 -0
- package/dist/http/publicApp.js.map +1 -0
- package/dist/http/securityHeaders.js +11 -0
- package/dist/http/securityHeaders.js.map +1 -0
- package/dist/http.js +2076 -0
- package/dist/http.js.map +1 -0
- package/dist/moves/engine.js +1079 -0
- package/dist/moves/engine.js.map +1 -0
- package/dist/moves/index.js +6 -0
- package/dist/moves/index.js.map +1 -0
- package/dist/moves/planner.js +270 -0
- package/dist/moves/planner.js.map +1 -0
- package/dist/moves/recovery.js +557 -0
- package/dist/moves/recovery.js.map +1 -0
- package/dist/moves/service.js +300 -0
- package/dist/moves/service.js.map +1 -0
- package/dist/moves/types.js +11 -0
- package/dist/moves/types.js.map +1 -0
- package/dist/mutations/index.js +4 -0
- package/dist/mutations/index.js.map +1 -0
- package/dist/mutations/lifecycle.js +165 -0
- package/dist/mutations/lifecycle.js.map +1 -0
- package/dist/mutations/localService.js +163 -0
- package/dist/mutations/localService.js.map +1 -0
- package/dist/mutations/runtime.js +322 -0
- package/dist/mutations/runtime.js.map +1 -0
- package/dist/mutations/types.js +2 -0
- package/dist/mutations/types.js.map +1 -0
- package/dist/mutations/writers.js +360 -0
- package/dist/mutations/writers.js.map +1 -0
- package/dist/patchOps.js +420 -0
- package/dist/patchOps.js.map +1 -0
- package/dist/policy/approval.js +306 -0
- package/dist/policy/approval.js.map +1 -0
- package/dist/policy/audit.js +88 -0
- package/dist/policy/audit.js.map +1 -0
- package/dist/policy/authorizationFacts.js +187 -0
- package/dist/policy/authorizationFacts.js.map +1 -0
- package/dist/policy/compat.js +104 -0
- package/dist/policy/compat.js.map +1 -0
- package/dist/policy/context.js +31 -0
- package/dist/policy/context.js.map +1 -0
- package/dist/policy/enforcement.js +46 -0
- package/dist/policy/enforcement.js.map +1 -0
- package/dist/policy/evaluator.js +338 -0
- package/dist/policy/evaluator.js.map +1 -0
- package/dist/policy/executionCapabilities.js +80 -0
- package/dist/policy/executionCapabilities.js.map +1 -0
- package/dist/policy/executionResources.js +192 -0
- package/dist/policy/executionResources.js.map +1 -0
- package/dist/policy/fullAccessResources.js +23 -0
- package/dist/policy/fullAccessResources.js.map +1 -0
- package/dist/policy/hardPolicy.js +50 -0
- package/dist/policy/hardPolicy.js.map +1 -0
- package/dist/policy/identity.js +142 -0
- package/dist/policy/identity.js.map +1 -0
- package/dist/policy/integration.js +331 -0
- package/dist/policy/integration.js.map +1 -0
- package/dist/policy/pendingApprovals.js +301 -0
- package/dist/policy/pendingApprovals.js.map +1 -0
- package/dist/policy/profileStore.js +367 -0
- package/dist/policy/profileStore.js.map +1 -0
- package/dist/policy/resources.js +249 -0
- package/dist/policy/resources.js.map +1 -0
- package/dist/policy/runtime.js +713 -0
- package/dist/policy/runtime.js.map +1 -0
- package/dist/policy/schemas.js +625 -0
- package/dist/policy/schemas.js.map +1 -0
- package/dist/policy/toolPolicy.js +141 -0
- package/dist/policy/toolPolicy.js.map +1 -0
- package/dist/policy/transport.js +10 -0
- package/dist/policy/transport.js.map +1 -0
- package/dist/policy/types.js +31 -0
- package/dist/policy/types.js.map +1 -0
- package/dist/proContext.js +675 -0
- package/dist/proContext.js.map +1 -0
- package/dist/process/authority.js +18 -0
- package/dist/process/authority.js.map +1 -0
- package/dist/process/backendDiscovery.js +83 -0
- package/dist/process/backendDiscovery.js.map +1 -0
- package/dist/process/commandCompiler.js +71 -0
- package/dist/process/commandCompiler.js.map +1 -0
- package/dist/process/outputCursor.js +67 -0
- package/dist/process/outputCursor.js.map +1 -0
- package/dist/process/outputQuota.js +94 -0
- package/dist/process/outputQuota.js.map +1 -0
- package/dist/process/outputRing.js +138 -0
- package/dist/process/outputRing.js.map +1 -0
- package/dist/process/processAuditCoordinator.js +52 -0
- package/dist/process/processAuditCoordinator.js.map +1 -0
- package/dist/process/processManager.js +311 -0
- package/dist/process/processManager.js.map +1 -0
- package/dist/process/runCommand.js +332 -0
- package/dist/process/runCommand.js.map +1 -0
- package/dist/process/streamingRedactor.js +105 -0
- package/dist/process/streamingRedactor.js.map +1 -0
- package/dist/process/types.js +2 -0
- package/dist/process/types.js.map +1 -0
- package/dist/process/windowsHostClient.js +604 -0
- package/dist/process/windowsHostClient.js.map +1 -0
- package/dist/process/windowsHostProtocol.js +270 -0
- package/dist/process/windowsHostProtocol.js.map +1 -0
- package/dist/process/windowsPersistentBackend.js +263 -0
- package/dist/process/windowsPersistentBackend.js.map +1 -0
- package/dist/productionRuntime.js +907 -0
- package/dist/productionRuntime.js.map +1 -0
- package/dist/profileStore.js +231 -0
- package/dist/profileStore.js.map +1 -0
- package/dist/redact.js +124 -0
- package/dist/redact.js.map +1 -0
- package/dist/searchOps.js +186 -0
- package/dist/searchOps.js.map +1 -0
- package/dist/selfTestOps.js +786 -0
- package/dist/selfTestOps.js.map +1 -0
- package/dist/semantic/budgets.js +12 -0
- package/dist/semantic/budgets.js.map +1 -0
- package/dist/semantic/builtin/typescriptAssets.js +68 -0
- package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
- package/dist/semantic/builtin/typescriptProvider.js +211 -0
- package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
- package/dist/semantic/builtin/typescriptWorker.js +365 -0
- package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
- package/dist/semantic/diffPreview.js +36 -0
- package/dist/semantic/diffPreview.js.map +1 -0
- package/dist/semantic/index.js +11 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/manager.js +522 -0
- package/dist/semantic/manager.js.map +1 -0
- package/dist/semantic/positions.js +86 -0
- package/dist/semantic/positions.js.map +1 -0
- package/dist/semantic/previewStore.js +276 -0
- package/dist/semantic/previewStore.js.map +1 -0
- package/dist/semantic/projectResolver.js +309 -0
- package/dist/semantic/projectResolver.js.map +1 -0
- package/dist/semantic/sourceSnapshot.js +54 -0
- package/dist/semantic/sourceSnapshot.js.map +1 -0
- package/dist/semantic/status.js +46 -0
- package/dist/semantic/status.js.map +1 -0
- package/dist/semantic/types.js +2 -0
- package/dist/semantic/types.js.map +1 -0
- package/dist/server.js +8676 -0
- package/dist/server.js.map +1 -0
- package/dist/stdio.js +64 -0
- package/dist/stdio.js.map +1 -0
- package/dist/toolCardWidget.js +2000 -0
- package/dist/toolCardWidget.js.map +1 -0
- package/dist/tools/contracts/catalog.js +111 -0
- package/dist/tools/contracts/catalog.js.map +1 -0
- package/dist/tools/contracts/index.js +8 -0
- package/dist/tools/contracts/index.js.map +1 -0
- package/dist/tools/contracts/registration.js +27 -0
- package/dist/tools/contracts/registration.js.map +1 -0
- package/dist/tools/contracts/schemas.js +11 -0
- package/dist/tools/contracts/schemas.js.map +1 -0
- package/dist/tools/contracts/types.js +2 -0
- package/dist/tools/contracts/types.js.map +1 -0
- package/dist/tools/contracts/v3.js +76 -0
- package/dist/tools/contracts/v3.js.map +1 -0
- package/dist/tools/contracts/v4.js +39 -0
- package/dist/tools/contracts/v4.js.map +1 -0
- package/dist/tools/contracts/v5.js +20 -0
- package/dist/tools/contracts/v5.js.map +1 -0
- package/dist/tools/phase3dServer.js +350 -0
- package/dist/tools/phase3dServer.js.map +1 -0
- package/dist/tools/schemas/applyPatch.js +388 -0
- package/dist/tools/schemas/applyPatch.js.map +1 -0
- package/dist/tools/schemas/bash.js +202 -0
- package/dist/tools/schemas/bash.js.map +1 -0
- package/dist/tools/schemas/closeWorkspace.js +105 -0
- package/dist/tools/schemas/closeWorkspace.js.map +1 -0
- package/dist/tools/schemas/codexContext.js +402 -0
- package/dist/tools/schemas/codexContext.js.map +1 -0
- package/dist/tools/schemas/codexSessions.js +328 -0
- package/dist/tools/schemas/codexSessions.js.map +1 -0
- package/dist/tools/schemas/codexgpt.js +1068 -0
- package/dist/tools/schemas/codexgpt.js.map +1 -0
- package/dist/tools/schemas/codexgptInventory.js +359 -0
- package/dist/tools/schemas/codexgptInventory.js.map +1 -0
- package/dist/tools/schemas/codexgptSelfTest.js +563 -0
- package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
- package/dist/tools/schemas/codexpro.js +917 -0
- package/dist/tools/schemas/codexpro.js.map +1 -0
- package/dist/tools/schemas/codexproInventory.js +352 -0
- package/dist/tools/schemas/codexproInventory.js.map +1 -0
- package/dist/tools/schemas/codexproSelfTest.js +546 -0
- package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
- package/dist/tools/schemas/common.js +21 -0
- package/dist/tools/schemas/common.js.map +1 -0
- package/dist/tools/schemas/createTaskWorktree.js +51 -0
- package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/edit.js +321 -0
- package/dist/tools/schemas/edit.js.map +1 -0
- package/dist/tools/schemas/execution.js +330 -0
- package/dist/tools/schemas/execution.js.map +1 -0
- package/dist/tools/schemas/exportProContext.js +370 -0
- package/dist/tools/schemas/exportProContext.js.map +1 -0
- package/dist/tools/schemas/getTaskWorktree.js +19 -0
- package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/gitBranch.js +42 -0
- package/dist/tools/schemas/gitBranch.js.map +1 -0
- package/dist/tools/schemas/gitCommit.js +40 -0
- package/dist/tools/schemas/gitCommit.js.map +1 -0
- package/dist/tools/schemas/gitCreateBranch.js +22 -0
- package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
- package/dist/tools/schemas/gitDiff.js +222 -0
- package/dist/tools/schemas/gitDiff.js.map +1 -0
- package/dist/tools/schemas/gitLog.js +41 -0
- package/dist/tools/schemas/gitLog.js.map +1 -0
- package/dist/tools/schemas/gitRestore.js +47 -0
- package/dist/tools/schemas/gitRestore.js.map +1 -0
- package/dist/tools/schemas/gitStage.js +33 -0
- package/dist/tools/schemas/gitStage.js.map +1 -0
- package/dist/tools/schemas/gitStash.js +102 -0
- package/dist/tools/schemas/gitStash.js.map +1 -0
- package/dist/tools/schemas/gitStatus.js +226 -0
- package/dist/tools/schemas/gitStatus.js.map +1 -0
- package/dist/tools/schemas/gitV4Common.js +205 -0
- package/dist/tools/schemas/gitV4Common.js.map +1 -0
- package/dist/tools/schemas/guidance.js +40 -0
- package/dist/tools/schemas/guidance.js.map +1 -0
- package/dist/tools/schemas/handoffToAgent.js +276 -0
- package/dist/tools/schemas/handoffToAgent.js.map +1 -0
- package/dist/tools/schemas/handoffToCodex.js +137 -0
- package/dist/tools/schemas/handoffToCodex.js.map +1 -0
- package/dist/tools/schemas/inspectWorkspace.js +379 -0
- package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
- package/dist/tools/schemas/listTaskWorktrees.js +21 -0
- package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
- package/dist/tools/schemas/listWorkspaces.js +134 -0
- package/dist/tools/schemas/listWorkspaces.js.map +1 -0
- package/dist/tools/schemas/loadSkill.js +619 -0
- package/dist/tools/schemas/loadSkill.js.map +1 -0
- package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
- package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/movePaths.js +175 -0
- package/dist/tools/schemas/movePaths.js.map +1 -0
- package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
- package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
- package/dist/tools/schemas/openWorkspace.js +193 -0
- package/dist/tools/schemas/openWorkspace.js.map +1 -0
- package/dist/tools/schemas/queryAuditEvents.js +193 -0
- package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
- package/dist/tools/schemas/read.js +199 -0
- package/dist/tools/schemas/read.js.map +1 -0
- package/dist/tools/schemas/readCodexSession.js +353 -0
- package/dist/tools/schemas/readCodexSession.js.map +1 -0
- package/dist/tools/schemas/readHandoff.js +446 -0
- package/dist/tools/schemas/readHandoff.js.map +1 -0
- package/dist/tools/schemas/removeTaskWorktree.js +40 -0
- package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/search.js +235 -0
- package/dist/tools/schemas/search.js.map +1 -0
- package/dist/tools/schemas/semantic.js +195 -0
- package/dist/tools/schemas/semantic.js.map +1 -0
- package/dist/tools/schemas/serverConfig.js +157 -0
- package/dist/tools/schemas/serverConfig.js.map +1 -0
- package/dist/tools/schemas/showChanges.js +283 -0
- package/dist/tools/schemas/showChanges.js.map +1 -0
- package/dist/tools/schemas/transactionResult.js +11 -0
- package/dist/tools/schemas/transactionResult.js.map +1 -0
- package/dist/tools/schemas/tree.js +136 -0
- package/dist/tools/schemas/tree.js.map +1 -0
- package/dist/tools/schemas/undoChangeSet.js +152 -0
- package/dist/tools/schemas/undoChangeSet.js.map +1 -0
- package/dist/tools/schemas/waitForHandoff.js +462 -0
- package/dist/tools/schemas/waitForHandoff.js.map +1 -0
- package/dist/tools/schemas/workspaceSnapshot.js +145 -0
- package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
- package/dist/tools/schemas/write.js +285 -0
- package/dist/tools/schemas/write.js.map +1 -0
- package/dist/transactions/atomicFs.js +438 -0
- package/dist/transactions/atomicFs.js.map +1 -0
- package/dist/transactions/atomicStateFile.js +190 -0
- package/dist/transactions/atomicStateFile.js.map +1 -0
- package/dist/transactions/engine.js +574 -0
- package/dist/transactions/engine.js.map +1 -0
- package/dist/transactions/index.js +12 -0
- package/dist/transactions/index.js.map +1 -0
- package/dist/transactions/installation.js +158 -0
- package/dist/transactions/installation.js.map +1 -0
- package/dist/transactions/manifestV2Store.js +96 -0
- package/dist/transactions/manifestV2Store.js.map +1 -0
- package/dist/transactions/participantRecovery.js +98 -0
- package/dist/transactions/participantRecovery.js.map +1 -0
- package/dist/transactions/recovery.js +513 -0
- package/dist/transactions/recovery.js.map +1 -0
- package/dist/transactions/schemas.js +365 -0
- package/dist/transactions/schemas.js.map +1 -0
- package/dist/transactions/stateRoot.js +63 -0
- package/dist/transactions/stateRoot.js.map +1 -0
- package/dist/transactions/types.js +11 -0
- package/dist/transactions/types.js.map +1 -0
- package/dist/transactions/workspaceLock.js +201 -0
- package/dist/transactions/workspaceLock.js.map +1 -0
- package/dist/workspaceOps.js +924 -0
- package/dist/workspaceOps.js.map +1 -0
- package/dist/worktrees/candidateWorkspace.js +566 -0
- package/dist/worktrees/candidateWorkspace.js.map +1 -0
- package/dist/worktrees/manager.js +258 -0
- package/dist/worktrees/manager.js.map +1 -0
- package/dist/worktrees/materializer.js +60 -0
- package/dist/worktrees/materializer.js.map +1 -0
- package/dist/worktrees/mergeExecute.js +498 -0
- package/dist/worktrees/mergeExecute.js.map +1 -0
- package/dist/worktrees/mergePlanStore.js +247 -0
- package/dist/worktrees/mergePlanStore.js.map +1 -0
- package/dist/worktrees/mergePrepare.js +709 -0
- package/dist/worktrees/mergePrepare.js.map +1 -0
- package/dist/worktrees/recovery.js +294 -0
- package/dist/worktrees/recovery.js.map +1 -0
- package/dist/worktrees/remove.js +296 -0
- package/dist/worktrees/remove.js.map +1 -0
- package/dist/worktrees/remover.js +57 -0
- package/dist/worktrees/remover.js.map +1 -0
- package/dist/worktrees/root.js +47 -0
- package/dist/worktrees/root.js.map +1 -0
- package/dist/worktrees/service.js +245 -0
- package/dist/worktrees/service.js.map +1 -0
- package/dist/worktrees/store.js +156 -0
- package/dist/worktrees/store.js.map +1 -0
- package/dist/worktrees/treeManifest.js +106 -0
- package/dist/worktrees/treeManifest.js.map +1 -0
- package/dist/worktrees/verificationReceipts.js +215 -0
- package/dist/worktrees/verificationReceipts.js.map +1 -0
- package/dist/worktrees/verificationTerminal.js +23 -0
- package/dist/worktrees/verificationTerminal.js.map +1 -0
- package/dist/worktrees/workspaceAuthority.js +64 -0
- package/dist/worktrees/workspaceAuthority.js.map +1 -0
- package/docs/favicon.svg +5 -0
- package/docs/index.html +624 -0
- package/docs/og.svg +52 -0
- package/docs/script.js +33 -0
- package/docs/star.svg +11 -0
- package/docs/styles.css +1571 -0
- package/docs/zh.html +428 -0
- package/package.json +121 -0
- package/scripts/analysis-cli-smoke.mjs +81 -0
- package/scripts/analysis-smoke.mjs +179 -0
- package/scripts/atomic-file.mjs +137 -0
- package/scripts/ci-change-classifier.mjs +59 -0
- package/scripts/ci-failure-summary.mjs +92 -0
- package/scripts/cloudflared-installer.mjs +215 -0
- package/scripts/cloudflared-release.mjs +63 -0
- package/scripts/codexgpt-entry.mjs +235 -0
- package/scripts/codexgpt.mjs +4987 -0
- package/scripts/connector-auth-output-shim.cjs +66 -0
- package/scripts/doctor-smoke.mjs +90 -0
- package/scripts/doctor.mjs +165 -0
- package/scripts/exact-head-ci.mjs +126 -0
- package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
- package/scripts/execute-handoff-smoke.mjs +1117 -0
- package/scripts/g8-u-live-probe.mjs +208 -0
- package/scripts/http-smoke-compat.mjs +151 -0
- package/scripts/http-smoke.mjs +776 -0
- package/scripts/long-task-runner.mjs +1037 -0
- package/scripts/oauth-admin.mjs +1608 -0
- package/scripts/output-bounds.mjs +29 -0
- package/scripts/owned-temp-root.d.mts +50 -0
- package/scripts/owned-temp-root.mjs +567 -0
- package/scripts/phase-4a-smoke.mjs +36 -0
- package/scripts/policy-windows-spike.mjs +135 -0
- package/scripts/pro-apply.mjs +152 -0
- package/scripts/pro-bundle.mjs +121 -0
- package/scripts/pro-smoke.mjs +97 -0
- package/scripts/process-identity.mjs +67 -0
- package/scripts/repository-policy.mjs +166 -0
- package/scripts/run-and-summarize.mjs +134 -0
- package/scripts/run-smoke.mjs +52 -0
- package/scripts/run-with-cleanup.mjs +98 -0
- package/scripts/settings-smoke-platform-compat.mjs +85 -0
- package/scripts/settings-smoke.mjs +769 -0
- package/scripts/smoke-platform-compat.mjs +302 -0
- package/scripts/smoke.mjs +1180 -0
- package/scripts/stress-contract-compat.mjs +94 -0
- package/scripts/stress.mjs +882 -0
- package/scripts/test-domains.mjs +247 -0
- package/scripts/test-execution-profile-manifest.mjs +273 -0
- package/scripts/test-execution-profiles.mjs +147 -0
- package/scripts/test-performance-reporter.mjs +291 -0
- package/scripts/toolchain-manager.mjs +266 -0
- package/scripts/toolchains.json +19 -0
- package/scripts/windows-conpty-probe-child.mjs +82 -0
- package/scripts/windows-conpty-worker.ps1 +24 -0
- package/scripts/windows-credential-host-manifest.json +16 -0
- package/scripts/windows-credential-host-protocol-v1.json +16 -0
- package/scripts/windows-credential-host.cs +256 -0
- package/scripts/windows-credential-host.ps1 +26 -0
- package/scripts/windows-local-control-manifest.json +23 -0
- package/scripts/windows-local-control-spike.cs +738 -0
- package/scripts/windows-local-control-spike.mjs +415 -0
- package/scripts/windows-local-control-spike.ps1 +35 -0
- package/scripts/windows-local-control.cs +738 -0
- package/scripts/windows-local-control.ps1 +35 -0
- package/scripts/windows-native-api-inventory-v1.json +90 -0
- package/scripts/windows-process-host-manifest.json +20 -0
- package/scripts/windows-process-host-protocol-v1.json +59 -0
- package/scripts/windows-process-host.cs +2385 -0
- package/scripts/windows-process-host.ps1 +59 -0
- package/scripts/windows-realpath-shim.cjs +78 -0
|
@@ -0,0 +1,332 @@
|
|
|
1
|
+
import { createHash, randomBytes, randomUUID } from "node:crypto";
|
|
2
|
+
import fs from "node:fs";
|
|
3
|
+
import path from "node:path";
|
|
4
|
+
import { authorizedResourceFingerprint } from "../policy/integration.js";
|
|
5
|
+
import { semanticDigest } from "../policy/authorizationFacts.js";
|
|
6
|
+
import { describeExecutionResourceV3, describeProcessActionResourceV3, resolveEffectiveEnvironmentV3 } from "../policy/executionResources.js";
|
|
7
|
+
import { assertFullAccessProfileEligibleV3 } from "../policy/fullAccessResources.js";
|
|
8
|
+
import { createToolMeta } from "../tools/schemas/common.js";
|
|
9
|
+
import { readProcessOutputOutputSchema, readProcessOutputOutputSchemaV4, runCommandInputV1Schema, runCommandInputV4Schema, runCommandOutputSchema, runCommandOutputSchemaV4, startProcessInputV1Schema, startProcessInputV4Schema } from "../tools/schemas/execution.js";
|
|
10
|
+
import { attachExecutionAuditFacts } from "../audit/transactionParticipant.js";
|
|
11
|
+
import { attachPendingVerificationReceipt } from "../worktrees/verificationTerminal.js";
|
|
12
|
+
import { compileCommandForWindowsHost } from "./commandCompiler.js";
|
|
13
|
+
import { OutputCursorCodec } from "./outputCursor.js";
|
|
14
|
+
import { OutputQuotaManager } from "./outputQuota.js";
|
|
15
|
+
import { OutputRing } from "./outputRing.js";
|
|
16
|
+
import { StreamingRedactor } from "./streamingRedactor.js";
|
|
17
|
+
import { contractIncludesV4 } from "../tools/contracts/index.js";
|
|
18
|
+
import { FULL_ACCESS_PROCESS_AUTHORITY_V3, FULL_ACCESS_PROCESS_WARNING_V3 } from "./authority.js";
|
|
19
|
+
const TERMINAL_TTL_MS = 5 * 60_000;
|
|
20
|
+
const FIRST_PAGE_BYTES = 64 * 1024;
|
|
21
|
+
function fileBinding(filePath, kind, backendId) {
|
|
22
|
+
const realPath = fs.realpathSync.native(filePath);
|
|
23
|
+
const stat = fs.statSync(realPath, { bigint: true });
|
|
24
|
+
if (!stat.isFile())
|
|
25
|
+
throw new Error("BACKEND_UNAVAILABLE");
|
|
26
|
+
if (stat.size > 512n * 1024n * 1024n)
|
|
27
|
+
throw new Error("BACKEND_UNAVAILABLE");
|
|
28
|
+
const hash = createHash("sha256");
|
|
29
|
+
const handle = fs.openSync(realPath, "r");
|
|
30
|
+
try {
|
|
31
|
+
const buffer = Buffer.allocUnsafe(1024 * 1024);
|
|
32
|
+
let position = 0;
|
|
33
|
+
for (;;) {
|
|
34
|
+
const bytes = fs.readSync(handle, buffer, 0, buffer.length, position);
|
|
35
|
+
if (!bytes)
|
|
36
|
+
break;
|
|
37
|
+
hash.update(buffer.subarray(0, bytes));
|
|
38
|
+
position += bytes;
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
finally {
|
|
42
|
+
fs.closeSync(handle);
|
|
43
|
+
}
|
|
44
|
+
const sha256 = hash.digest("hex");
|
|
45
|
+
return Object.freeze({ schemaVersion: 1, backendId, backendVersion: "bound", kind, source: "reviewed_explicit", path: realPath, realPath, sha256, identity: `sha256:${sha256}:dev:${stat.dev}:ino:${stat.ino}` });
|
|
46
|
+
}
|
|
47
|
+
function defaultBackend(command) {
|
|
48
|
+
if (command.kind === "argv") {
|
|
49
|
+
if (!path.win32.isAbsolute(command.executable) && !path.isAbsolute(command.executable))
|
|
50
|
+
throw new Error("BACKEND_UNAVAILABLE");
|
|
51
|
+
return fileBinding(command.executable, "argv", "reviewed-explicit-argv");
|
|
52
|
+
}
|
|
53
|
+
const drive = path.parse(process.execPath).root.replace(/[\\/]$/, "");
|
|
54
|
+
if (command.kind === "powershell") {
|
|
55
|
+
const core = path.join(`${drive}\\`, "Program Files", "PowerShell", "7", "pwsh.exe");
|
|
56
|
+
const windows = path.join(`${drive}\\`, "Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
|
|
57
|
+
const selected = command.edition === "windows" ? windows : command.edition === "core" ? core : fs.existsSync(core) ? core : windows;
|
|
58
|
+
return fileBinding(selected, "powershell", selected === windows ? "windows-powershell" : "powershell-core");
|
|
59
|
+
}
|
|
60
|
+
throw new Error("BACKEND_UNAVAILABLE");
|
|
61
|
+
}
|
|
62
|
+
export class RunCommandRuntimeV3 {
|
|
63
|
+
#options;
|
|
64
|
+
#cursor;
|
|
65
|
+
#quota = new OutputQuotaManager();
|
|
66
|
+
#records = new Map();
|
|
67
|
+
#now;
|
|
68
|
+
#candidateWorkspaces = null;
|
|
69
|
+
constructor(options) {
|
|
70
|
+
if (options.config.executionProfile !== "full_access")
|
|
71
|
+
throw new Error("EXECUTION_PROFILE_DISABLED");
|
|
72
|
+
assertFullAccessProfileEligibleV3(options.fullAccessProfile);
|
|
73
|
+
this.#options = options;
|
|
74
|
+
this.#now = options.now ?? Date.now;
|
|
75
|
+
this.#cursor = new OutputCursorCodec({ key: options.cursorKey ?? randomBytes(32), now: this.#now });
|
|
76
|
+
}
|
|
77
|
+
setCandidateVerificationWorkspace(runtime) {
|
|
78
|
+
if (this.#candidateWorkspaces)
|
|
79
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
80
|
+
this.#candidateWorkspaces = runtime;
|
|
81
|
+
}
|
|
82
|
+
get toolContractVersion() {
|
|
83
|
+
return contractIncludesV4(this.#options.config.toolContractVersion) ? 4 : 3;
|
|
84
|
+
}
|
|
85
|
+
async beginPersistentVerification(binding) {
|
|
86
|
+
if (!binding)
|
|
87
|
+
return null;
|
|
88
|
+
if (!this.#candidateWorkspaces)
|
|
89
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
90
|
+
return this.#candidateWorkspaces.beginExecution(binding);
|
|
91
|
+
}
|
|
92
|
+
async completePersistentVerification(binding, before) {
|
|
93
|
+
if (!this.#candidateWorkspaces)
|
|
94
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
95
|
+
return this.#candidateWorkspaces.completeExecution(binding, before);
|
|
96
|
+
}
|
|
97
|
+
issuePersistentVerificationReceipt(binding, clean, resource, audit, exitCode) {
|
|
98
|
+
if (!this.#candidateWorkspaces ||
|
|
99
|
+
exitCode !== 0 ||
|
|
100
|
+
!resource.backendId ||
|
|
101
|
+
!resource.backendVersion ||
|
|
102
|
+
!resource.policyRevision)
|
|
103
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
104
|
+
return this.#candidateWorkspaces.issueReceipt(binding, clean, {
|
|
105
|
+
commandDigest: resource.commandDigest,
|
|
106
|
+
commandResourceFingerprint: resource.resourceFingerprint,
|
|
107
|
+
backendId: resource.backendId,
|
|
108
|
+
backendVersion: resource.backendVersion,
|
|
109
|
+
executableIdentity: resource.executableIdentity,
|
|
110
|
+
effectiveEnvironmentDigest: resource.effectiveEnvironmentDigest,
|
|
111
|
+
cwdIdentity: resource.absoluteCwdIdentity,
|
|
112
|
+
policyRevision: resource.policyRevision,
|
|
113
|
+
terminalAuditEventId: audit.eventId,
|
|
114
|
+
exitCode
|
|
115
|
+
});
|
|
116
|
+
}
|
|
117
|
+
#resolve(args, operation = "run_command") {
|
|
118
|
+
const persistentInput = operation === "start_process"
|
|
119
|
+
? (contractIncludesV4(this.toolContractVersion)
|
|
120
|
+
? startProcessInputV4Schema.parse(args)
|
|
121
|
+
: startProcessInputV1Schema.parse(args))
|
|
122
|
+
: null;
|
|
123
|
+
const input = persistentInput ?? (contractIncludesV4(this.#options.config.toolContractVersion)
|
|
124
|
+
? runCommandInputV4Schema.parse(args)
|
|
125
|
+
: runCommandInputV1Schema.parse(args));
|
|
126
|
+
if (input.mode !== "full_access")
|
|
127
|
+
throw new Error("PROCESS_SANDBOX_UNAVAILABLE");
|
|
128
|
+
const command = input.command;
|
|
129
|
+
const backend = (this.#options.backendResolver ?? defaultBackend)(command);
|
|
130
|
+
const verificationRequest = ("verification" in input ? input.verification : undefined);
|
|
131
|
+
if (verificationRequest &&
|
|
132
|
+
(input.mode !== "full_access" || input.cwd.kind !== "workspace" || input.cwd.path !== undefined))
|
|
133
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
134
|
+
const verificationBinding = verificationRequest
|
|
135
|
+
? this.#candidateWorkspaces?.describeExecution({
|
|
136
|
+
mergePlanId: verificationRequest.merge_plan_id,
|
|
137
|
+
integrationWorkspaceId: verificationRequest.integration_workspace_id,
|
|
138
|
+
category: verificationRequest.category
|
|
139
|
+
}) ?? (() => { throw new Error("MERGE_CHECKS_REQUIRED"); })()
|
|
140
|
+
: null;
|
|
141
|
+
const cwd = verificationBinding
|
|
142
|
+
? verificationBinding.cwd
|
|
143
|
+
: input.cwd.kind === "absolute_local"
|
|
144
|
+
? path.resolve(input.cwd.path)
|
|
145
|
+
: path.resolve(this.#options.config.defaultRoot, input.cwd.path ?? ".");
|
|
146
|
+
const effective = resolveEffectiveEnvironmentV3({ base: {}, overrides: input.environment ?? {}, platform: "win32" });
|
|
147
|
+
const deadlineMs = input.timeout_ms ?? 30_000;
|
|
148
|
+
const cwdIdentity = this.#options.cwdIdentity?.(cwd) ?? semanticDigest({ cwd: fs.realpathSync.native(cwd) });
|
|
149
|
+
const lifetimeMs = persistentInput ? persistentInput.lifetime_ms ?? 30 * 60_000 : deadlineMs;
|
|
150
|
+
const terminal = persistentInput ? persistentInput.terminal ?? "pipes" : "none";
|
|
151
|
+
const resource = describeExecutionResourceV3({
|
|
152
|
+
operation, command, effectiveEnvironmentDigest: effective.digest, logicalCwd: cwd,
|
|
153
|
+
absoluteCwdIdentity: cwdIdentity, backend: { backendId: backend.backendId, backendVersion: backend.backendVersion, executableIdentity: `sha256:${backend.sha256}` },
|
|
154
|
+
terminal, deadlineMs, lifetimeMs, networkPosture: "unrestricted_host", accessMode: "full_access",
|
|
155
|
+
workspaceId: null, leaseId: null, snapshotId: null, contractVersion: 3,
|
|
156
|
+
policyRevision: this.#options.policyRevision(), evidenceRevision: this.#options.evidenceRevision(),
|
|
157
|
+
identityRevision: this.#options.contextFingerprint(), transportRevision: this.#options.contextFingerprint(),
|
|
158
|
+
...(verificationBinding ? {
|
|
159
|
+
verification: {
|
|
160
|
+
mergePlanId: verificationBinding.record.mergePlanId,
|
|
161
|
+
integrationWorkspaceId: verificationBinding.record.integrationWorkspaceId,
|
|
162
|
+
category: verificationBinding.request.category,
|
|
163
|
+
taskWorktreeId: verificationBinding.record.taskWorktreeId,
|
|
164
|
+
taskGeneration: verificationBinding.record.taskGeneration,
|
|
165
|
+
repositoryId: verificationBinding.record.repositoryId,
|
|
166
|
+
candidateOid: verificationBinding.record.candidateOid,
|
|
167
|
+
candidateTreeOid: verificationBinding.record.candidateTreeOid,
|
|
168
|
+
manifestDigest: `sha256:${verificationBinding.record.manifestDigest}`,
|
|
169
|
+
rootIdentity: `sha256:${verificationBinding.record.rootIdentity}`
|
|
170
|
+
}
|
|
171
|
+
} : {})
|
|
172
|
+
});
|
|
173
|
+
return { input, command, backend, cwd, effective, deadlineMs, lifetimeMs, terminal, resource, verificationBinding };
|
|
174
|
+
}
|
|
175
|
+
describe(toolName, args) {
|
|
176
|
+
this.#purge();
|
|
177
|
+
if (toolName === "run_command" || toolName === "start_process") {
|
|
178
|
+
const resolved = this.#resolve(args, toolName);
|
|
179
|
+
return { resource: resolved.resource, semanticFactsDigest: resolved.resource.semanticFactsDigest, riskClass: "R3", requiredScopes: toolName === "start_process" ? ["shell:execute", "process:manage", "process:persistent", "host:full-access"] : ["shell:execute", "process:manage", "host:full-access"] };
|
|
180
|
+
}
|
|
181
|
+
if (toolName === "read_process_output") {
|
|
182
|
+
const processId = String(args.process_id ?? "");
|
|
183
|
+
const record = this.#records.get(processId);
|
|
184
|
+
const resource = describeProcessActionResourceV3({ operation: "read_process_output", processId, generation: record?.generation, owned: Boolean(record), contextMatches: record?.contextFingerprint === this.#options.contextFingerprint() });
|
|
185
|
+
return { resource: resource, semanticFactsDigest: resource.semanticFactsDigest, riskClass: "R0", requiredScopes: ["process:manage"] };
|
|
186
|
+
}
|
|
187
|
+
throw new Error("PROCESS_NOT_FOUND");
|
|
188
|
+
}
|
|
189
|
+
async runCommand(args) {
|
|
190
|
+
const started = this.#now();
|
|
191
|
+
const resolved = this.#resolve(args);
|
|
192
|
+
const authorized = authorizedResourceFingerprint(args);
|
|
193
|
+
if (authorized && authorized !== resolved.resource.resourceFingerprint)
|
|
194
|
+
throw new Error("BACKEND_STALE");
|
|
195
|
+
const processId = this.#options.processId?.() ?? `process_${randomUUID().replaceAll("-", "")}`;
|
|
196
|
+
const reservation = this.#quota.reserveProcess(this.#options.contextFingerprint(), processId);
|
|
197
|
+
const ring = new OutputRing();
|
|
198
|
+
const stdoutRedactor = new StreamingRedactor();
|
|
199
|
+
const stderrRedactor = new StreamingRedactor();
|
|
200
|
+
let body;
|
|
201
|
+
try {
|
|
202
|
+
const verificationBefore = resolved.verificationBinding
|
|
203
|
+
? await this.#candidateWorkspaces.beginExecution(resolved.verificationBinding)
|
|
204
|
+
: null;
|
|
205
|
+
const compiled = compileCommandForWindowsHost({ command: resolved.command, backend: resolved.backend, cwd: resolved.cwd, environment: Object.fromEntries(resolved.effective.entries), deadlineMs: resolved.deadlineMs });
|
|
206
|
+
const client = await this.#options.hostRuntime.get();
|
|
207
|
+
({ body } = await client.request(compiled.request.operation, compiled.request.input, { timeoutMs: resolved.deadlineMs + 10_000 }));
|
|
208
|
+
for (const [stream, key, redactor] of [["stdout", "stdoutBase64", stdoutRedactor], ["stderr", "stderrBase64", stderrRedactor]]) {
|
|
209
|
+
const encoded = typeof body[key] === "string" ? body[key] : "";
|
|
210
|
+
const raw = Buffer.from(encoded, "base64");
|
|
211
|
+
const redacted = Buffer.concat([redactor.write(raw), redactor.end()]);
|
|
212
|
+
if (!this.#quota.claimOutput(processId, redacted.length))
|
|
213
|
+
throw new Error("OUTPUT_LIMIT_EXCEEDED");
|
|
214
|
+
ring.append(stream, redacted);
|
|
215
|
+
}
|
|
216
|
+
ring.close();
|
|
217
|
+
this.#quota.reserveTerminal(processId);
|
|
218
|
+
const timedOut = body.timedOut === true;
|
|
219
|
+
const exitCode = typeof body.exitCode === "number" ? body.exitCode : null;
|
|
220
|
+
const status = timedOut ? "terminated" : body.ok === false && exitCode === null ? "failed" : "exited";
|
|
221
|
+
const record = {
|
|
222
|
+
processId,
|
|
223
|
+
generation: 0,
|
|
224
|
+
contextFingerprint: this.#options.contextFingerprint(),
|
|
225
|
+
ring,
|
|
226
|
+
status,
|
|
227
|
+
exitCode,
|
|
228
|
+
verificationReceipt: null,
|
|
229
|
+
expiresAt: this.#now() + TERMINAL_TTL_MS,
|
|
230
|
+
release: reservation.release
|
|
231
|
+
};
|
|
232
|
+
const output = this.#page(record, { sequence: 0, offset: 0 }, FIRST_PAGE_BYTES);
|
|
233
|
+
const data = { process_id: processId, status, exit_code: exitCode, termination_reason: timedOut ? "timeout" : null,
|
|
234
|
+
backend: { backend_id: resolved.backend.backendId, command_kind: resolved.command.kind, executable_identity: resolved.backend.sha256, terminal: "none" }, authority: FULL_ACCESS_PROCESS_AUTHORITY_V3, output,
|
|
235
|
+
started_at: new Date(started).toISOString(), ended_at: new Date(this.#now()).toISOString(),
|
|
236
|
+
...(contractIncludesV4(this.#options.config.toolContractVersion) ? { verification_receipt: null } : {}) };
|
|
237
|
+
const schema = contractIncludesV4(this.#options.config.toolContractVersion)
|
|
238
|
+
? runCommandOutputSchemaV4
|
|
239
|
+
: runCommandOutputSchema;
|
|
240
|
+
const structured = schema.parse({ codexgpt_tool: "run_command", codexgpt_title: "Run Command", ok: true, data, error: null, meta: createToolMeta(this.#now() - started, [FULL_ACCESS_PROCESS_WARNING_V3]) });
|
|
241
|
+
attachExecutionAuditFacts(structured, {
|
|
242
|
+
resultCode: status === "exited" && exitCode === 0 ? "OK" : "COMMAND_FAILED",
|
|
243
|
+
exitCode,
|
|
244
|
+
boundedByteCounts: { returnedBytes: output.returned_bytes },
|
|
245
|
+
changeSetId: null,
|
|
246
|
+
operationCount: 1,
|
|
247
|
+
mutationKinds: [],
|
|
248
|
+
pendingMutationCommit: null
|
|
249
|
+
});
|
|
250
|
+
if (resolved.verificationBinding && verificationBefore && status === "exited" && exitCode === 0) {
|
|
251
|
+
const verificationAfter = await this.#candidateWorkspaces.completeExecution(resolved.verificationBinding, verificationBefore);
|
|
252
|
+
attachPendingVerificationReceipt(structured, {
|
|
253
|
+
finalize: (audit) => this.#candidateWorkspaces.issueReceipt(resolved.verificationBinding, verificationAfter, {
|
|
254
|
+
commandDigest: resolved.resource.commandDigest,
|
|
255
|
+
commandResourceFingerprint: resolved.resource.resourceFingerprint,
|
|
256
|
+
backendId: resolved.resource.backendId,
|
|
257
|
+
backendVersion: resolved.resource.backendVersion,
|
|
258
|
+
executableIdentity: resolved.resource.executableIdentity,
|
|
259
|
+
effectiveEnvironmentDigest: resolved.resource.effectiveEnvironmentDigest,
|
|
260
|
+
cwdIdentity: resolved.resource.absoluteCwdIdentity,
|
|
261
|
+
policyRevision: resolved.resource.policyRevision,
|
|
262
|
+
terminalAuditEventId: audit.eventId,
|
|
263
|
+
exitCode
|
|
264
|
+
}),
|
|
265
|
+
attach: (receipt) => {
|
|
266
|
+
const projected = structured.data;
|
|
267
|
+
if (!projected)
|
|
268
|
+
throw new Error("MERGE_CHECKS_REQUIRED");
|
|
269
|
+
projected.verification_receipt = receipt;
|
|
270
|
+
record.verificationReceipt = receipt;
|
|
271
|
+
}
|
|
272
|
+
});
|
|
273
|
+
}
|
|
274
|
+
this.#records.set(processId, record);
|
|
275
|
+
return structured;
|
|
276
|
+
}
|
|
277
|
+
catch (error) {
|
|
278
|
+
reservation.release();
|
|
279
|
+
throw error;
|
|
280
|
+
}
|
|
281
|
+
}
|
|
282
|
+
preparePersistent(args) {
|
|
283
|
+
const resolved = this.#resolve(args, "start_process");
|
|
284
|
+
const authorized = authorizedResourceFingerprint(args);
|
|
285
|
+
if (authorized && authorized !== resolved.resource.resourceFingerprint)
|
|
286
|
+
throw new Error("BACKEND_STALE");
|
|
287
|
+
const compiled = compileCommandForWindowsHost({ command: resolved.command, backend: resolved.backend, cwd: resolved.cwd, environment: Object.fromEntries(resolved.effective.entries), deadlineMs: resolved.deadlineMs });
|
|
288
|
+
return Object.freeze({ ...resolved, compiled });
|
|
289
|
+
}
|
|
290
|
+
readProcessOutput(args) {
|
|
291
|
+
this.#purge();
|
|
292
|
+
const processId = String(args.process_id ?? "");
|
|
293
|
+
const record = this.#records.get(processId);
|
|
294
|
+
if (!record || record.contextFingerprint !== this.#options.contextFingerprint())
|
|
295
|
+
throw new Error("PROCESS_NOT_FOUND");
|
|
296
|
+
const state = typeof args.cursor === "string" ? this.#cursor.decode(args.cursor, { processId, generation: record.generation, contextFingerprint: record.contextFingerprint }) : { sequence: 0, offset: 0 };
|
|
297
|
+
const output = this.#page(record, state, typeof args.max_bytes === "number" ? args.max_bytes : FIRST_PAGE_BYTES);
|
|
298
|
+
const data = {
|
|
299
|
+
process_id: processId,
|
|
300
|
+
status: record.status,
|
|
301
|
+
output,
|
|
302
|
+
...(contractIncludesV4(this.toolContractVersion)
|
|
303
|
+
? {
|
|
304
|
+
exit_code: record.exitCode,
|
|
305
|
+
verification_receipt: record.verificationReceipt
|
|
306
|
+
}
|
|
307
|
+
: {})
|
|
308
|
+
};
|
|
309
|
+
const schema = contractIncludesV4(this.toolContractVersion)
|
|
310
|
+
? readProcessOutputOutputSchemaV4
|
|
311
|
+
: readProcessOutputOutputSchema;
|
|
312
|
+
return schema.parse({ codexgpt_tool: "read_process_output", codexgpt_title: "Read Process Output", ok: true, data, error: null, meta: createToolMeta() });
|
|
313
|
+
}
|
|
314
|
+
#page(record, cursor, maxBytes) {
|
|
315
|
+
const page = record.ring.read({ ...cursor, maxBytes });
|
|
316
|
+
return { chunks: page.chunks, next_cursor: page.eof ? null : this.#cursor.encode({ processId: record.processId, generation: record.generation, sequence: page.next.sequence, offset: page.next.offset, contextFingerprint: record.contextFingerprint, expiresAt: record.expiresAt }), truncated: page.truncated, eof: page.eof, returned_bytes: page.returnedBytes };
|
|
317
|
+
}
|
|
318
|
+
#purge() {
|
|
319
|
+
for (const [id, record] of this.#records)
|
|
320
|
+
if (this.#now() >= record.expiresAt) {
|
|
321
|
+
record.release();
|
|
322
|
+
this.#records.delete(id);
|
|
323
|
+
}
|
|
324
|
+
}
|
|
325
|
+
close() {
|
|
326
|
+
for (const record of this.#records.values())
|
|
327
|
+
record.release();
|
|
328
|
+
this.#records.clear();
|
|
329
|
+
this.#cursor.dispose();
|
|
330
|
+
}
|
|
331
|
+
}
|
|
332
|
+
//# sourceMappingURL=runCommand.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"runCommand.js","sourceRoot":"","sources":["../../src/process/runCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,6BAA6B,EAA4D,MAAM,0BAA0B,CAAC;AAEnI,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAC9I,OAAO,EAAE,iCAAiC,EAA4B,MAAM,kCAAkC,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAM/E,OAAO,EACL,gCAAgC,EAEjC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAC;AAIxB,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAuCnC,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAwC,EAAE,SAAiB;IAChG,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtE,IAAI,CAAC,KAAK;gBAAE,MAAM;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACvC,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,MAAM,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACpN,CAAC;AAED,SAAS,cAAc,CAAC,OAAsB;IAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/H,OAAO,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACpI,OAAO,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAA6B;IACrC,OAAO,CAAoB;IAC3B,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAClC,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,IAAI,CAAe;IAC5B,oBAAoB,GAA4C,IAAI,CAAC;IAErE,YAAY,OAAmC;QAC7C,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrG,iCAAiC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,iCAAiC,CAAC,OAAyC;QACzE,IAAI,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACxE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,IAAI,mBAAmB;QACrB,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAA2C;QAE3C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,OAAoC,EACpC,MAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,kCAAkC,CAChC,OAAoC,EACpC,KAA+B,EAC/B,QAA+C,EAC/C,KAAuC,EACvC,QAAgB;QAEhB,IACE,CAAC,IAAI,CAAC,oBAAoB;YAC1B,QAAQ,KAAK,CAAC;YACd,CAAC,QAAQ,CAAC,SAAS;YACnB,CAAC,QAAQ,CAAC,cAAc;YACxB,CAAC,QAAQ,CAAC,cAAc;YACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE;YAC5D,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,0BAA0B,EAAE,QAAQ,CAAC,mBAAmB;YACxD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;YAC/D,WAAW,EAAE,QAAQ,CAAC,mBAAmB;YACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,oBAAoB,EAAE,KAAK,CAAC,OAAO;YACnC,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAA6B,EAAE,YAA6C,aAAa;QAChG,MAAM,eAAe,GAAG,SAAS,KAAK,eAAe;YACnD,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAC3C,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,eAAe,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAC5F,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAwB,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,mBAAmB,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAExE,CAAC;QACd,IACE,mBAAmB;YACnB,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,mBAAmB,GAAuC,mBAAmB;YACjF,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC;gBAC3C,WAAW,EAAE,mBAAmB,CAAC,aAAa;gBAC9C,sBAAsB,EAAE,mBAAmB,CAAC,wBAAwB;gBACpE,QAAQ,EAAE,mBAAmB,CAAC,QAAQ;aACvC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/D,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,GAAG,GAAG,mBAAmB;YAC7B,CAAC,CAAC,mBAAmB,CAAC,GAAG;YACzB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB;gBACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrH,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7F,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG;YACjF,mBAAmB,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE;YACnK,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa;YAChG,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YACtE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YAClG,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;YAE3G,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACxB,YAAY,EAAE;oBACZ,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC,WAAW;oBACnD,sBAAsB,EAAE,mBAAmB,CAAC,MAAM,CAAC,sBAAsB;oBACzE,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ;oBAC9C,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,cAAc;oBACzD,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,cAAc;oBACzD,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,YAAY;oBACrD,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,YAAY;oBACrD,gBAAgB,EAAE,mBAAmB,CAAC,MAAM,CAAC,gBAAgB;oBAC7D,cAAc,EAAE,UAAU,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE;oBACrE,YAAY,EAAE,UAAU,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE;iBAClE;aACF,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IACtH,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,IAA6B;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAA2C,EAAE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAa,EAAE,cAAc,EAAE,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC1V,CAAC;QACD,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,+BAA+B,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC7O,OAAO,EAAE,QAAQ,EAAE,QAA2C,EAAE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAa,EAAE,cAAc,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpL,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAA6B;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,WAAW,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC/C,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,mBAAmB;gBACrD,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAqB,CAAC,cAAc,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAC/E,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,QAAQ,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACzN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YACrD,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YACnI,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,CAAU,EAAE,CAAC;gBACxI,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACnG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;YACxC,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtG,MAAM,MAAM,GAAmB;gBAC7B,SAAS;gBACT,UAAU,EAAE,CAAC;gBACb,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;gBACtD,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,mBAAmB,EAAE,IAAI;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,eAAe;gBACxC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBAChH,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,gCAAgC,EAAE,MAAM;gBAC7M,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC1F,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9G,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACvE,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,sBAAsB,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAA4B,CAAC;YACxO,yBAAyB,CAAC,UAAU,EAAE;gBACpC,UAAU,EAAE,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;gBAC3E,QAAQ;gBACR,iBAAiB,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE;gBAC3D,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,EAAE;gBACjB,qBAAqB,EAAE,IAAI;aAC5B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,mBAAmB,IAAI,kBAAkB,IAAI,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAChG,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,oBAAqB,CAAC,iBAAiB,CAC1E,QAAQ,CAAC,mBAAmB,EAC5B,kBAAkB,CACnB,CAAC;gBACF,gCAAgC,CAAC,UAAU,EAAE;oBAC3C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAqB,CAAC,YAAY,CAC1D,QAAQ,CAAC,mBAAoB,EAC7B,iBAAiB,EACjB;wBACE,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa;wBAC9C,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;wBACjE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAU;wBACvC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAe;wBACjD,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB;wBACxD,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,0BAA0B;wBACxE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;wBAClD,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAe;wBACjD,oBAAoB,EAAE,KAAK,CAAC,OAAO;wBACnC,QAAQ;qBACT,CACF;oBACD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;wBAClB,MAAM,SAAS,GAAG,UAAU,CAAC,IAA2C,CAAC;wBACzE,IAAI,CAAC,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;wBACzD,SAAS,CAAC,oBAAoB,GAAG,OAAO,CAAC;wBACzC,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC;oBACvC,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAA6B;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzN,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,iBAAiB,CAAC,IAA6B;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3M,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACjH,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM;YACN,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAC9C,CAAC,CAAC;oBACE,SAAS,EAAE,MAAM,CAAC,QAAQ;oBAC1B,oBAAoB,EAAE,MAAM,CAAC,mBAAmB;iBACjD;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACzD,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,6BAA6B,CAAC;QAClC,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,qBAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAA4B,CAAC;IACvL,CAAC;IAED,KAAK,CAAC,MAAsB,EAAE,MAA4C,EAAE,QAAgB;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IACvW,CAAC;IAED,MAAM;QACJ,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;IAChI,CAAC;IAED,KAAK;QACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;CACF"}
|
|
@@ -0,0 +1,105 @@
|
|
|
1
|
+
export const OUTPUT_REDACTION_CAPABILITY = "best_effort_known_patterns";
|
|
2
|
+
const REPLACEMENT = "[REDACTED_SECRET]";
|
|
3
|
+
const TOKEN_CHARACTER = (character) => /^[A-Za-z0-9._~+/=_-]$/.test(character);
|
|
4
|
+
const QUERY_CHARACTER = (character) => !/[\s&"'`<>]/.test(character);
|
|
5
|
+
function firstMatch(value) {
|
|
6
|
+
const candidates = [];
|
|
7
|
+
const specs = [
|
|
8
|
+
{ pattern: /\bsk-[A-Za-z0-9_-]{10}/, continues: TOKEN_CHARACTER },
|
|
9
|
+
{ pattern: /\bsk-ant-[A-Za-z0-9_-]{10}/, continues: TOKEN_CHARACTER },
|
|
10
|
+
{ pattern: /\bgh[opsru]_[A-Za-z0-9_]{20}/, continues: TOKEN_CHARACTER },
|
|
11
|
+
{ pattern: /\bgithub_pat_[A-Za-z0-9_]{20}/, continues: TOKEN_CHARACTER },
|
|
12
|
+
{ pattern: /\bnpm_[A-Za-z0-9_-]{20}/, continues: TOKEN_CHARACTER },
|
|
13
|
+
{ pattern: /(Authorization\s*:\s*Bearer\s+)[A-Za-z0-9._~+/=-]{12}/i, prefixGroup: 1, continues: TOKEN_CHARACTER },
|
|
14
|
+
{ pattern: /([?&](?:codexgpt_token|token|access_token|auth_token|api[_-]?key)=)[^&\s"'`<>]{8}/i, prefixGroup: 1, continues: QUERY_CHARACTER }
|
|
15
|
+
];
|
|
16
|
+
for (const spec of specs) {
|
|
17
|
+
const match = spec.pattern.exec(value);
|
|
18
|
+
if (!match || match.index === undefined)
|
|
19
|
+
continue;
|
|
20
|
+
const prefix = spec.prefixGroup ? match[spec.prefixGroup] : "";
|
|
21
|
+
candidates.push({
|
|
22
|
+
index: match.index,
|
|
23
|
+
length: match[0].length,
|
|
24
|
+
replacement: `${prefix}${REPLACEMENT}`,
|
|
25
|
+
continues: spec.continues
|
|
26
|
+
});
|
|
27
|
+
}
|
|
28
|
+
candidates.sort((left, right) => left.index - right.index || right.length - left.length);
|
|
29
|
+
return candidates[0] ?? null;
|
|
30
|
+
}
|
|
31
|
+
export class StreamingRedactor {
|
|
32
|
+
#decoder = new TextDecoder("utf-8", { fatal: false });
|
|
33
|
+
#candidateLimit;
|
|
34
|
+
#pending = "";
|
|
35
|
+
#suppress;
|
|
36
|
+
#ansi = false;
|
|
37
|
+
constructor(options = {}) {
|
|
38
|
+
this.#candidateLimit = Math.max(64, Math.min(4096, options.candidateLimit ?? 256));
|
|
39
|
+
}
|
|
40
|
+
write(bytes) {
|
|
41
|
+
return Buffer.from(this.#consume(this.#decoder.decode(bytes, { stream: true })), "utf8");
|
|
42
|
+
}
|
|
43
|
+
end() {
|
|
44
|
+
let output = this.#consume(this.#decoder.decode());
|
|
45
|
+
this.#suppress = undefined;
|
|
46
|
+
output += this.#pending;
|
|
47
|
+
this.#pending = "";
|
|
48
|
+
return Buffer.from(output, "utf8");
|
|
49
|
+
}
|
|
50
|
+
bufferedBytes() {
|
|
51
|
+
return Buffer.byteLength(this.#pending, "utf8");
|
|
52
|
+
}
|
|
53
|
+
#consume(value) {
|
|
54
|
+
let output = "";
|
|
55
|
+
for (const rawCharacter of value) {
|
|
56
|
+
const character = this.#sanitize(rawCharacter);
|
|
57
|
+
if (character === "")
|
|
58
|
+
continue;
|
|
59
|
+
if (this.#suppress) {
|
|
60
|
+
if (this.#suppress(character))
|
|
61
|
+
continue;
|
|
62
|
+
this.#suppress = undefined;
|
|
63
|
+
}
|
|
64
|
+
this.#pending += character;
|
|
65
|
+
const match = firstMatch(this.#pending);
|
|
66
|
+
if (match) {
|
|
67
|
+
output += this.#pending.slice(0, match.index) + match.replacement;
|
|
68
|
+
this.#pending = this.#pending.slice(match.index + match.length);
|
|
69
|
+
this.#suppress = match.continues;
|
|
70
|
+
}
|
|
71
|
+
while (Buffer.byteLength(this.#pending, "utf8") > this.#candidateLimit) {
|
|
72
|
+
output += this.#pending[0];
|
|
73
|
+
this.#pending = this.#pending.slice(1);
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
if (!this.#suppress) {
|
|
77
|
+
const lineBoundary = this.#pending.lastIndexOf("\n");
|
|
78
|
+
if (lineBoundary >= 0) {
|
|
79
|
+
output += this.#pending.slice(0, lineBoundary + 1);
|
|
80
|
+
this.#pending = this.#pending.slice(lineBoundary + 1);
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
return output;
|
|
84
|
+
}
|
|
85
|
+
#sanitize(character) {
|
|
86
|
+
if (this.#ansi) {
|
|
87
|
+
if (/[@-~]/.test(character) && character !== "[")
|
|
88
|
+
this.#ansi = false;
|
|
89
|
+
return "";
|
|
90
|
+
}
|
|
91
|
+
if (character === "\u001b") {
|
|
92
|
+
this.#ansi = true;
|
|
93
|
+
return "";
|
|
94
|
+
}
|
|
95
|
+
if (character === "\r" || character === "\0")
|
|
96
|
+
return "";
|
|
97
|
+
const code = character.codePointAt(0);
|
|
98
|
+
if (code < 0x20 && character !== "\n" && character !== "\t")
|
|
99
|
+
return "";
|
|
100
|
+
if (code === 0x7f)
|
|
101
|
+
return "";
|
|
102
|
+
return character;
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
//# sourceMappingURL=streamingRedactor.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"streamingRedactor.js","sourceRoot":"","sources":["../../src/process/streamingRedactor.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAAqC,CAAC;AACjF,MAAM,WAAW,GAAG,mBAAmB,CAAC;AASxC,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvF,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAE7E,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAgG;QACzG,EAAE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE;QACjE,EAAE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,eAAe,EAAE;QACrE,EAAE,OAAO,EAAE,8BAA8B,EAAE,SAAS,EAAE,eAAe,EAAE;QACvE,EAAE,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAE,eAAe,EAAE;QACxE,EAAE,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,eAAe,EAAE;QAClE,EAAE,OAAO,EAAE,wDAAwD,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE;QACjH,EAAE,OAAO,EAAE,oFAAoF,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE;KAC9I,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,UAAU,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;YACvB,WAAW,EAAE,GAAG,MAAM,GAAG,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,eAAe,CAAS;IACjC,QAAQ,GAAG,EAAE,CAAC;IACd,SAAS,CAAkC;IAC3C,KAAK,GAAG,KAAK,CAAC;IAEd,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAA0B;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,GAAG;QACD,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,aAAa;QACX,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,YAAY,IAAI,KAAK,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,EAAE;gBAAE,SAAS;YAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;YAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;gBAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACnC,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,GAAG;gBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACvC,IAAI,IAAI,GAAG,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACvE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/process/types.ts"],"names":[],"mappings":""}
|