joonecli 0.2.0 → 0.2.1

package/dist/tools/askUser.d.ts

@@ -1,10 +1,19 @@
-import { DynamicToolInterface } from "./index.js";
+import { z } from "zod";
 /**
- * AskUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
+ * askUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
  *
  * Use cases:
  * - Resolving ambiguous requirements before coding.
  * - Getting user preferences (framework choice, styling, naming).
  * - Requesting approval of an implementation plan before proceeding.
  */
-export declare const AskUserQuestionTool: DynamicToolInterface;
+export declare const askUserQuestionTool: import("langchain").DynamicStructuredTool<z.ZodObject<{
+    question: z.ZodString;
+    options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, {
+    question: string;
+    options?: string[];
+}, {
+    question: string;
+    options?: string[] | undefined;
+}, string, "ask_user_question">;

package/dist/tools/askUser.js

@@ -1,42 +1,30 @@
 import { HITLBridge } from "../hitl/bridge.js";
+import { tool } from "langchain";
+import { z } from "zod";
 /**
- * AskUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
+ * askUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
  *
  * Use cases:
  * - Resolving ambiguous requirements before coding.
  * - Getting user preferences (framework choice, styling, naming).
  * - Requesting approval of an implementation plan before proceeding.
  */
-export const AskUserQuestionTool = {
+export const askUserQuestionTool = tool(async ({ question, options }) => {
+    if (!question || question.trim() === "") {
+        return "Error: You must provide a non-empty question.";
+    }
+    const bridge = HITLBridge.getInstance();
+    const answer = await bridge.askUser(question, options);
+    return answer;
+}, {
     name: "ask_user_question",
     description: "Ask the user a question and wait for their response. " +
         "Use this when you need clarification on the task, user preferences, " +
         "or approval before proceeding with a significant change. " +
         "You may optionally provide a list of answer choices.",
-    schema: {
-        type: "object",
-        properties: {
-            question: {
-                type: "string",
-                description: "The question to ask the user.",
-            },
-            options: {
-                type: "array",
-                items: { type: "string" },
-                description: "Optional list of predefined answer choices.",
-            },
-        },
-        required: ["question"],
-    },
-    async execute(args) {
-        const question = args.question;
-        const options = args.options;
-        if (!question || question.trim() === "") {
-            return { content: "Error: You must provide a non-empty question.", isError: true };
-        }
-        const bridge = HITLBridge.getInstance();
-        const answer = await bridge.askUser(question, options);
-        return { content: answer };
-    },
-};
+    schema: z.object({
+        question: z.string().describe("The question to ask the user."),
+        options: z.array(z.string()).optional().describe("Optional list of predefined answer choices."),
+    }),
+});
 //# sourceMappingURL=askUser.js.map

package/dist/tools/askUser.js.map

@@ -1 +1 @@
-{"version":3,"file":"askUser.js","sourceRoot":"","sources":["../../src/tools/askUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACrD,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACP,uDAAuD;QACvD,sEAAsE;QACtE,2DAA2D;QAC3D,sDAAsD;IAC1D,MAAM,EAAE;QACJ,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACR,QAAQ,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+BAA+B;aAC/C;YACD,OAAO,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,6CAA6C;aAC7D;SACJ;QACD,QAAQ,EAAE,CAAC,UAAU,CAAC;KACzB;IACD,KAAK,CAAC,OAAO,CAAC,IAA6B;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAkB,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA+B,CAAC;QAErD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEvD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;CACJ,CAAC"}
+{"version":3,"file":"askUser.js","sourceRoot":"","sources":["../../src/tools/askUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CACnC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAA4C,EAAE,EAAE;IACtE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,+CAA+C,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEvD,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACP,uDAAuD;QACvD,sEAAsE;QACtE,2DAA2D;QAC3D,sDAAsD;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;KAClG,CAAC;CACL,CACJ,CAAC"}

package/dist/tools/bashTool.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+import { SandboxManager } from "../sandbox/manager.js";
+import { FileSync } from "../sandbox/sync.js";
+export declare function bindSandbox(sandbox: SandboxManager, fileSync: FileSync): void;
+export declare const bashTool: import("langchain").DynamicStructuredTool<z.ZodObject<{
+    command: z.ZodString;
+}, z.core.$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "bash">;

package/dist/tools/bashTool.js

@@ -0,0 +1,51 @@
+import { tool } from "langchain";
+import { z } from "zod";
+const BLOCKED_PATTERNS = [
+    // Destructive
+    [/rm\s+(-\w*r\w*f\w*|-\w*f\w*r\w*)\s+\/(\*)?(?:\s|$)/, "destructive: rm -rf /"],
+    [/mkfs\b/, "destructive: filesystem format"],
+    [/\bdd\s+.*of=\/dev\//, "destructive: raw disk write"],
+    [/chmod\s+(-\w+\s+)*777\s+\//, "dangerous: chmod 777 on root"],
+    // Interactive / hanging
+    [/\b(vim|vi|nano|emacs|pico)\b/, "interactive: text editor (hangs the sandbox)"],
+    [/\b(less|more)\b/, "interactive: pager (hangs the sandbox)"],
+    [/\b(top|htop|glances)\b/, "interactive: process monitor (hangs the sandbox)"],
+    [/\bman\s+\w+/, "interactive: man page (hangs the sandbox)"],
+    // Network abuse: pipe-to-shell
+    [/curl\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
+    [/wget\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
+];
+let _sandboxManager = null;
+let _fileSync = null;
+export function bindSandbox(sandbox, fileSync) {
+    _sandboxManager = sandbox;
+    _fileSync = fileSync;
+}
+export const bashTool = tool(async ({ command }) => {
+    for (const [pattern, reason] of BLOCKED_PATTERNS) {
+        if (pattern.test(command)) {
+            return (`⚠ Blocked: Command rejected by sanitizer.\n` +
+                `Reason: ${reason}\n` +
+                `Command: ${command}\n` +
+                `Use a safer alternative or refine your approach.`);
+        }
+    }
+    if (!_sandboxManager || !_sandboxManager.isActive()) {
+        throw new Error("Sandbox is not active. Cannot execute bash commands without an active sandbox session.");
+    }
+    if (_fileSync && _fileSync.pendingCount() > 0) {
+        await _fileSync.syncToSandbox(_sandboxManager);
+    }
+    const result = await _sandboxManager.exec(command);
+    if (result.exitCode !== 0) {
+        return `Command failed (exit code ${result.exitCode}):\nSTDOUT:\n${result.stdout}\nSTDERR:\n${result.stderr}`;
+    }
+    return result.stdout || "(no output)";
+}, {
+    name: "bash",
+    description: "Runs a shell command inside an isolated sandbox. Use for tests, scripts, or installing dependencies. The host machine is never exposed.",
+    schema: z.object({
+        command: z.string().describe("The shell command to execute"),
+    }),
+});
+//# sourceMappingURL=bashTool.js.map

package/dist/tools/bashTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bashTool.js","sourceRoot":"","sources":["../../src/tools/bashTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,gBAAgB,GAAuB;IACzC,cAAc;IACd,CAAC,oDAAoD,EAAE,uBAAuB,CAAC;IAC/E,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IAC5C,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;IACtD,CAAC,4BAA4B,EAAE,8BAA8B,CAAC;IAE9D,wBAAwB;IACxB,CAAC,8BAA8B,EAAE,8CAA8C,CAAC;IAChF,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;IAC7D,CAAC,wBAAwB,EAAE,kDAAkD,CAAC;IAC9E,CAAC,aAAa,EAAE,2CAA2C,CAAC;IAE5D,+BAA+B;IAC/B,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;IACtE,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;CACzE,CAAC;AAEF,IAAI,eAAe,GAA0B,IAAI,CAAC;AAClD,IAAI,SAAS,GAAoB,IAAI,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,QAAkB;IACnE,eAAe,GAAG,OAAO,CAAC;IAC1B,SAAS,GAAG,QAAQ,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CACxB,KAAK,EAAE,EAAE,OAAO,EAAuB,EAAE,EAAE;IACvC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,CACH,6CAA6C;gBAC7C,WAAW,MAAM,IAAI;gBACrB,YAAY,OAAO,IAAI;gBACvB,kDAAkD,CACrD,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACX,wFAAwF,CAC3F,CAAC;IACN,CAAC;IAED,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,6BAA6B,MAAM,CAAC,QAAQ,gBAAgB,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC;IAClH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;AAC1C,CAAC,EACD;IACI,IAAI,EAAE,MAAM;IACZ,WAAW,EACP,yIAAyI;IAC7I,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAC/D,CAAC;CACL,CACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -1,28 +1,15 @@
-import { SandboxManager } from "../sandbox/manager.js";
-import { FileSync } from "../sandbox/sync.js";
-import { AgentEventEmitter } from "../core/events.js";
-export interface ToolResult {
-    content: string;
-    metadata?: Record<string, any>;
-    isError?: boolean;
-}
-export interface DynamicToolInterface {
-    name: string;
-    description: string;
-    schema: Record<string, any>;
-    execute: (args: any, emitter?: AgentEventEmitter) => Promise<ToolResult> | ToolResult;
-}
-/**
- * Binds the tools to a SandboxManager and FileSync instance.
- * Must be called at session start before any tool executions.
- */
-export declare function bindSandbox(sandbox: SandboxManager, fileSync: FileSync): void;
-/**
- * Security: Validates that a resolved path is strictly inside the given workspace dir.
- * Prevents directory traversal attacks from accessing sensitive host files.
- */
-export declare function isPathInsideWorkspace(resolvedPath: string, workspaceDir?: string): boolean;
-export declare const BashTool: DynamicToolInterface;
-export declare const ReadFileTool: DynamicToolInterface;
-export declare const WriteFileTool: DynamicToolInterface;
-export declare const CORE_TOOLS: DynamicToolInterface[];
+import { bindSandbox } from "./bashTool.js";
+export { bindSandbox };
+export declare const CORE_TOOLS: (import("langchain").DynamicStructuredTool<import("zod").ZodObject<{
+    command: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "install_host_dependencies"> | import("langchain").DynamicStructuredTool<import("zod").ZodObject<{
+    command: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "bash">)[];

package/dist/tools/index.js

@@ -1,192 +1,12 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { InstallHostDependenciesTool } from "./installHostDeps.js";
-// ─── Configuration ──────────────────────────────────────────────────────────────
-/** Maximum file size (in bytes) the agent is allowed to read into context. */
-const MAX_FILE_SIZE_BYTES = 512 * 1024; // 512 KB
-/** Maximum number of lines to return if file exceeds line limit. */
-const MAX_FILE_LINES = 2000;
-// ─── Sandbox reference (set at session start) ───────────────────────────────────
-let _sandboxManager = null;
-let _fileSync = null;
-/**
- * Binds the tools to a SandboxManager and FileSync instance.
- * Must be called at session start before any tool executions.
- */
-export function bindSandbox(sandbox, fileSync) {
-    _sandboxManager = sandbox;
-    _fileSync = fileSync;
-}
-/**
- * Security: Validates that a resolved path is strictly inside the given workspace dir.
- * Prevents directory traversal attacks from accessing sensitive host files.
- */
-export function isPathInsideWorkspace(resolvedPath, workspaceDir = process.cwd()) {
-    const normalizedWorkspace = path.resolve(workspaceDir);
-    // path.relative returns a path relative to the first argument.
-    // If it starts with '..' or is absolute, it means resolvedPath has escaped normalizedWorkspace.
-    const relative = path.relative(normalizedWorkspace, resolvedPath);
-    return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative);
-}
-// ─── BashTool ───────────────────────────────────────────────────────────────────
-// Executes shell commands inside the E2B sandbox.
-// The ToolRouter routes this to SANDBOX — the host machine is never exposed.
-export const BashTool = {
-    name: "bash",
-    description: "Runs a shell command inside an isolated sandbox. Use for tests, scripts, or installing dependencies. The host machine is never exposed.",
-    schema: {
-        type: "object",
-        properties: {
-            command: {
-                type: "string",
-                description: "The shell command to execute",
-            },
-        },
-        required: ["command"],
-    },
-    execute: async (args, emitter) => {
-        if (emitter)
-            emitter.emit("agent:event", { type: "system:script_exec", command: args.command, location: "sandbox" });
-        if (!_sandboxManager || !_sandboxManager.isActive()) {
-            throw new Error("Sandbox is not active. Cannot execute bash commands without an active sandbox session.");
-        }
-        // Sync any dirty files from host → sandbox before executing
-        if (_fileSync && _fileSync.pendingCount() > 0) {
-            await _fileSync.syncToSandbox(_sandboxManager);
-        }
-        const result = await _sandboxManager.exec(args.command);
-        if (result.exitCode !== 0) {
-            return {
-                content: `Command failed (exit code ${result.exitCode}):\nSTDOUT:\n${result.stdout}\nSTDERR:\n${result.stderr}`,
-                metadata: { exitCode: result.exitCode },
-                isError: true
-            };
-        }
-        return {
-            content: result.stdout || "(no output)",
-            metadata: { exitCode: result.exitCode },
-            isError: false
-        };
-    },
-};
-// ─── ReadFileTool ───────────────────────────────────────────────────────────────
-// Reads files from the HOST filesystem (so the user's real project is visible).
-// Includes a built-in file size guardrail to prevent sending huge files to the LLM.
-export const ReadFileTool = {
-    name: "read_file",
-    description: "Reads a file from the host filesystem. Includes a file size guardrail — files over 512KB are truncated to prevent context overflow.",
-    schema: {
-        type: "object",
-        properties: {
-            path: {
-                type: "string",
-                description: "Absolute or relative path to the file",
-            },
-            startLine: {
-                type: "number",
-                description: "Optional 1-indexed start line for partial reads",
-            },
-            endLine: {
-                type: "number",
-                description: "Optional 1-indexed end line for partial reads",
-            },
-        },
-        required: ["path"],
-    },
-    execute: async (args, emitter) => {
-        const filePath = path.resolve(args.path);
-        if (emitter)
-            emitter.emit("agent:event", { type: "file:io", action: "read", path: filePath });
-        // ── Security Guardrail ──
-        if (!isPathInsideWorkspace(filePath)) {
-            return {
-                content: `Security Error: Access Denied. Cannot read files outside the current project workspace (${process.cwd()}).`,
-                isError: true
-            };
-        }
-        // ── Check existence ──
-        if (!fs.existsSync(filePath)) {
-            return {
-                content: `Error: File not found — ${filePath}`,
-                isError: true
-            };
-        }
-        // ── File Size Guardrail ──
-        const stat = fs.statSync(filePath);
-        if (stat.size > MAX_FILE_SIZE_BYTES) {
-            return {
-                content: `Error: File too large (${Math.round(stat.size / 1024)}KB). Maximum size is 512KB. Use line ranges or grep_search.`,
-                isError: true
-            };
-        }
-        const fileContent = fs.readFileSync(filePath, "utf-8");
-        const lines = fileContent.split("\n");
-        if (args.startLine !== undefined || args.endLine !== undefined) {
-            const start = Math.max(1, args.startLine ?? 1) - 1;
-            const end = Math.min(lines.length, args.endLine ?? lines.length);
-            const sliced = lines.slice(start, end);
-            return { content: sliced.map((line, i) => `${start + i + 1}: ${line}`).join("\n") };
-        }
-        // ── Line count guardrail ──
-        if (lines.length > MAX_FILE_LINES) {
-            const truncated = lines.slice(0, MAX_FILE_LINES);
-            return {
-                content: truncated.map((line, i) => `${i + 1}: ${line}`).join("\n") +
-                    `\n\n--- Truncated at ${MAX_FILE_LINES} lines (total: ${lines.length}) ---`
-            };
-        }
-        return { content: fileContent };
-    },
-};
-// ─── WriteFileTool ──────────────────────────────────────────────────────────────
-// Writes files to the HOST filesystem (so the user sees changes in their IDE).
-// Marks written files as dirty so FileSync uploads them before sandbox execution.
-export const WriteFileTool = {
-    name: "write_file",
-    description: "Writes content to a file on the host filesystem. The user will see changes in their IDE immediately. The file is automatically synced to the sandbox before the next command execution.",
-    schema: {
-        type: "object",
-        properties: {
-            path: {
-                type: "string",
-                description: "Absolute or relative path to the file",
-            },
-            content: {
-                type: "string",
-                description: "The full file content to write",
-            },
-        },
-        required: ["path", "content"],
-    },
-    execute: async (args, emitter) => {
-        const filePath = path.resolve(args.path);
-        if (emitter)
-            emitter.emit("agent:event", { type: "file:io", action: "write", path: filePath });
-        // ── Security Guardrail ──
-        if (!isPathInsideWorkspace(filePath)) {
-            return {
-                content: `Security Error: Access Denied. Cannot write files outside the current project workspace (${process.cwd()}).`,
-                isError: true
-            };
-        }
-        // Create parent directories if needed
-        const dir = path.dirname(filePath);
-        if (!fs.existsSync(dir)) {
-            fs.mkdirSync(dir, { recursive: true });
-        }
-        fs.writeFileSync(filePath, args.content, "utf-8");
-        // Mark file as dirty for next sandbox sync
-        if (_fileSync) {
-            _fileSync.markDirty(filePath);
-        }
-        return { content: `File written: ${filePath}` };
-    },
-};
-// ─── Core Tool Set ──────────────────────────────────────────────────────────────
+import { installHostDependenciesTool } from "./installHostDeps.js";
+import { bashTool, bindSandbox } from "./bashTool.js";
+// Re-export bindSandbox so index.ts can initialize it
+export { bindSandbox };
+// The core custom tools that the agent needs.
+// Note: File I/O (read_file, write_file, edit_file, ls, grep) and Subagents
+// are provided natively by Deep Agents via the FilesystemBackend and createSubAgentMiddleware.
 export const CORE_TOOLS = [
-    BashTool,
-    ReadFileTool,
-    WriteFileTool,
-    InstallHostDependenciesTool,
+    bashTool,
+    installHostDependenciesTool,
 ];
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAenE,mFAAmF;AAEnF,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,SAAS;AAEjD,oEAAoE;AACpE,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,mFAAmF;AAEnF,IAAI,eAAe,GAA0B,IAAI,CAAC;AAClD,IAAI,SAAS,GAAoB,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,QAAkB;IACnE,eAAe,GAAG,OAAO,CAAC;IAC1B,SAAS,GAAG,QAAQ,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACjC,YAAoB,EACpB,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE;IAE5B,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,+DAA+D;IAC/D,gGAAgG;IAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED,mFAAmF;AACnF,kDAAkD;AAClD,6EAA6E;AAE7E,MAAM,CAAC,MAAM,QAAQ,GAAyB;IAC1C,IAAI,EAAE,MAAM;IACZ,WAAW,EACP,yIAAyI;IAC7I,MAAM,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8BAA8B;aAC9C;SACJ;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACxB;IACD,OAAO,EAAE,KAAK,EAAE,IAAyB,EAAE,OAA2B,EAAuB,EAAE;QAC3F,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACrH,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACX,wFAAwF,CAC3F,CAAC;QACN,CAAC;QAED,4DAA4D;QAC5D,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACH,OAAO,EAAE,6BAA6B,MAAM,CAAC,QAAQ,gBAAgB,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,EAAE;gBAC/G,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACvC,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,aAAa;YACvC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YACvC,OAAO,EAAE,KAAK;SACjB,CAAC;IACN,CAAC;CACJ,CAAC;AAEF,mFAAmF;AACnF,gFAAgF;AAChF,oFAAoF;AAEpF,MAAM,CAAC,MAAM,YAAY,GAAyB;IAC9C,IAAI,EAAE,WAAW;IACjB,WAAW,EACP,qIAAqI;IACzI,MAAM,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,IAAI,EAAE;gBACF,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uCAAuC;aACvD;YACD,SAAS,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,iDAAiD;aACjE;YACD,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC/D;SACJ;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KACrB;IACD,OAAO,EAAE,KAAK,EAAE,IAA4D,EAAE,OAA2B,EAAuB,EAAE;QAC9H,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9F,2BAA2B;QAC3B,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO;gBACH,OAAO,EAAE,2FAA2F,OAAO,CAAC,GAAG,EAAE,IAAI;gBACrH,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACH,OAAO,EAAE,2BAA2B,QAAQ,EAAE;gBAC9C,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,4BAA4B;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;YAClC,OAAO;gBACH,OAAO,EAAE,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,6DAA6D;gBAC5H,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,CAAC;QAED,6BAA6B;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YACjD,OAAO;gBACH,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACnE,wBAAwB,cAAc,kBAAkB,KAAK,CAAC,MAAM,OAAO;aAC9E,CAAC;QACN,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;CACJ,CAAC;AAEF,mFAAmF;AACnF,+EAA+E;AAC/E,kFAAkF;AAElF,MAAM,CAAC,MAAM,aAAa,GAAyB;IAC/C,IAAI,EAAE,YAAY;IAClB,WAAW,EACP,yLAAyL;IAC7L,MAAM,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,IAAI,EAAE;gBACF,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uCAAuC;aACvD;YACD,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gCAAgC;aAChD;SACJ;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;KAChC;IACD,OAAO,EAAE,KAAK,EAAE,IAAuC,EAAE,OAA2B,EAAuB,EAAE;QACzG,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/F,2BAA2B;QAC3B,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO;gBACH,OAAO,EAAE,4FAA4F,OAAO,CAAC,GAAG,EAAE,IAAI;gBACtH,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,sCAAsC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElD,2CAA2C;QAC3C,IAAI,SAAS,EAAE,CAAC;YACZ,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC;IACpD,CAAC;CACJ,CAAC;AAEF,mFAAmF;AAEnF,MAAM,CAAC,MAAM,UAAU,GAA2B;IAC9C,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,2BAA2B;CAC9B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEtD,sDAAsD;AACtD,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,8CAA8C;AAC9C,4EAA4E;AAC5E,+FAA+F;AAC/F,MAAM,CAAC,MAAM,UAAU,GAAG;IACtB,QAAQ;IACR,2BAA2B;CAC9B,CAAC"}

package/dist/tools/installHostDeps.d.ts

@@ -1,2 +1,8 @@
-import { DynamicToolInterface } from "./index.js";
-export declare const InstallHostDependenciesTool: DynamicToolInterface;
+import { z } from "zod";
+export declare const installHostDependenciesTool: import("langchain").DynamicStructuredTool<z.ZodObject<{
+    command: z.ZodString;
+}, z.core.$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "install_host_dependencies">;

package/dist/tools/installHostDeps.js

@@ -1,37 +1,44 @@
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
+import { tool } from "langchain";
+import { z } from "zod";
 const execAsync = promisify(exec);
-export const InstallHostDependenciesTool = {
+const ALLOWED_INSTALLERS = {
+    npm: new Set(["install", "i", "ci", "add"]),
+    yarn: new Set(["add", "install"]),
+    pnpm: new Set(["add", "install", "i"]),
+    pip: new Set(["install"]),
+    pip3: new Set(["install"]),
+    cargo: new Set(["add", "install"]),
+    poetry: new Set(["add", "install"]),
+    gem: new Set(["install"]),
+    composer: new Set(["require", "install"]),
+    go: new Set(["get", "install"]),
+    bun: new Set(["add", "install"]),
+};
+export const installHostDependenciesTool = tool(async ({ command }) => {
+    const trimmedCmd = command.trim();
+    const parts = trimmedCmd.split(/\s+/);
+    const bin = parts[0];
+    const subcmd = parts[1];
+    if (!ALLOWED_INSTALLERS[bin] || !ALLOWED_INSTALLERS[bin].has(subcmd)) {
+        return `Security Error: Command '${bin} ${subcmd}' is not allowed. Only dependency installation commands (like 'npm install') are permitted by this tool.`;
+    }
+    if (/[&|;`$]/.test(trimmedCmd)) {
+        return `Security Error: Command contains forbidden shell operators (&, |, ;, \`, $).`;
+    }
+    try {
+        const { stdout, stderr } = await execAsync(command, { cwd: process.cwd() });
+        return `Successfully ran on host:\nSTDOUT:\n${stdout}\nSTDERR:\n${stderr}`;
+    }
+    catch (error) {
+        return `Host command failed (exit code ${error.code}):\nSTDOUT:\n${error.stdout}\nSTDERR:\n${error.stderr}\nMESSAGE:\n${error.message}`;
+    }
+}, {
     name: "install_host_dependencies",
     description: "Installs dependencies natively on the host OS (e.g. npm install, pip install). Use this carefully to bootstrap projects outside the sandbox. This runs directly on the user's machine.",
-    schema: {
-        type: "object",
-        properties: {
-            command: {
-                type: "string",
-                description: "The native installation command (e.g., 'npm install express')",
-            },
-        },
-        required: ["command"],
-    },
-    execute: async (args, emitter) => {
-        if (emitter) {
-            emitter.emit("agent:event", { type: "system:script_exec", command: args.command, location: "host" });
-        }
-        try {
-            const { stdout, stderr } = await execAsync(args.command, { cwd: process.cwd() });
-            return {
-                content: `Successfully ran on host:\nSTDOUT:\n${stdout}\nSTDERR:\n${stderr}`,
-                isError: false,
-            };
-        }
-        catch (error) {
-            return {
-                content: `Host command failed (exit code ${error.code}):\nSTDOUT:\n${error.stdout}\nSTDERR:\n${error.stderr}\nMESSAGE:\n${error.message}`,
-                metadata: { exitCode: error.code },
-                isError: true
-            };
-        }
-    },
-};
+    schema: z.object({
+        command: z.string().describe("The native installation command (e.g., 'npm install express')"),
+    }),
+});
 //# sourceMappingURL=installHostDeps.js.map

package/dist/tools/installHostDeps.js.map

@@ -1 +1 @@
-{"version":3,"file":"installHostDeps.js","sourceRoot":"","sources":["../../src/tools/installHostDeps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,2BAA2B,GAAyB;IAC7D,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACP,wLAAwL;IAC5L,MAAM,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+DAA+D;aAC/E;SACJ;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACxB;IACD,OAAO,EAAE,KAAK,EAAE,IAAyB,EAAE,OAA2B,EAAuB,EAAE;QAC3F,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjF,OAAO;gBACH,OAAO,EAAE,uCAAuC,MAAM,cAAc,MAAM,EAAE;gBAC5E,OAAO,EAAE,KAAK;aACjB,CAAC;QACN,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACjB,OAAO;gBACJ,OAAO,EAAE,kCAAkC,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,OAAO,EAAE;gBACzI,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBAClC,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;IACL,CAAC;CACJ,CAAC"}
+{"version":3,"file":"installHostDeps.js","sourceRoot":"","sources":["../../src/tools/installHostDeps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,kBAAkB,GAAgC;IACpD,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACtC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACzB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1B,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACzB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/B,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAC3C,KAAK,EAAE,EAAE,OAAO,EAAuB,EAAE,EAAE;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,4BAA4B,GAAG,IAAI,MAAM,0GAA0G,CAAC;IAC/J,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,8EAA8E,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,uCAAuC,MAAM,cAAc,MAAM,EAAE,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,OAAO,kCAAkC,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5I,CAAC;AACL,CAAC,EACD;IACI,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACP,wLAAwL;IAC5L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;KAChG,CAAC;CACL,CACJ,CAAC"}