mindweave 0.0.1 → 2.1.2

package/dist/tools/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/tools/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAoB,MAAM,gBAAgB,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,KAAK;IACL,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAmBH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,KAAa,EACb,OAAoB,EAAE;IAEtB,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;IAE9C,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,MAAqB;QACvD,IAAI,SAAS;YAAE,OAAO;QACtB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,2DAA2D;QACrE,CAAC;QAED,qEAAqE;QACrE,IAAI,KAAK,GAAG,MAAM,CAAC;QACnB,IAAI,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK;gBAAE,KAAK,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS,CAAC,yCAAyC;YAClF,IAAI,KAAK,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;gBAAE,SAAS;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9D,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;oBAC1B,SAAS,GAAG,IAAI,CAAC;oBACjB,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,kEAAkE;AAClE,SAAS,SAAS,CAAC,KAA6B,EAAE,GAAW,EAAE,KAAc;IAC3E,OAAO,SAAS,CACd,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1E,KAAK,CACN,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;IAEtD,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,yEAAyE;gBACzE,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC3B,EAAE,IAAI,UAAU,CAAC;oBACjB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,EAAE,IAAI,IAAI,CAAC;oBACX,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,EAAE,IAAI,KAAK,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClD,EAAE,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAChD,CAAC,GAAG,GAAG,CAAC;YACV,CAAC;QACH,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/tools/web.js

@@ -0,0 +1,61 @@
+import { searchWeb } from "./webSearch.js";
+import { fetchWeb } from "./webFetch.js";
+import { DISTILL_OVER_CHARS } from "./webFetch.js";
+import { failQuietly } from "./results.js";
+export const web = {
+    name: "web",
+    /** Deferred: many coding sessions never touch the network at all. Cache-safe now that
+     *  discovery is append-only — find_tools returns the schema in its result and the
+     *  advertised list never moves. */
+    deferred: true,
+    readOnly: true,
+    description: "Reach the internet. Pass `query` to SEARCH, or `url` to READ a specific page.\n" +
+        "SEARCH: give a `query` the way you would type it into a search engine. Use it for " +
+        "anything that changed after your training data — current library APIs, recent " +
+        "releases, version-specific behaviour, whether a package still exists. You get an " +
+        "answer grounded in the pages found, plus their URLs. Not every model can search; " +
+        "if this one cannot, the tool says so and you should ask the user for a URL rather " +
+        "than retrying.\n" +
+        "READ: give a `url` and optionally a `prompt` describing what to extract. Use it for " +
+        "docs, articles, changelogs, or any public URL — including following a URL search " +
+        "just gave you. " +
+        `A page longer than ${DISTILL_OVER_CHARS.toLocaleString("en-US")} characters is ` +
+        "condensed against your `prompt` so you get the answer rather than the page; below " +
+        "that you simply get the whole thing and the prompt is not needed. " +
+        "A bare host is fine (\"example.com\" becomes https://example.com), http is upgraded " +
+        "to https, and private or localhost addresses are refused. " +
+        "For GitHub, prefer the gh CLI via run_command when you can.",
+    parameters: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            query: {
+                type: "string",
+                description: "What to search for, phrased as a search query. Use this OR `url`, not both.",
+            },
+            url: {
+                type: "string",
+                description: "A page to read. A bare host works. Use this OR `query`, not both.",
+            },
+            prompt: {
+                type: "string",
+                description: "Reading only: what to extract from the page (used to focus a large page).",
+            },
+        },
+    },
+    async execute(args, ctx) {
+        const url = typeof args.url === "string" ? args.url.trim() : "";
+        const query = typeof args.query === "string" ? args.query.trim() : "";
+        // Both is refused rather than silently picking one: it means the model was unsure
+        // what it wanted, and quietly answering half the request is the worse outcome.
+        if (url && query) {
+            return failQuietly("pass either `query` to search or `url` to read a page, not both.");
+        }
+        if (url)
+            return fetchWeb(args, ctx);
+        if (query)
+            return searchWeb(args, ctx);
+        return failQuietly("`query` (to search) or `url` (to read a page) is required.");
+    },
+};
+//# sourceMappingURL=web.js.map

package/dist/tools/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/tools/web.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,GAAG,GAAS;IACvB,IAAI,EAAE,KAAK;IACX;;uCAEmC;IACnC,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,WAAW,EACT,iFAAiF;QACjF,oFAAoF;QACpF,gFAAgF;QAChF,mFAAmF;QACnF,mFAAmF;QACnF,oFAAoF;QACpF,kBAAkB;QAClB,sFAAsF;QACtF,mFAAmF;QACnF,iBAAiB;QACjB,sBAAsB,kBAAkB,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB;QACjF,oFAAoF;QACpF,oEAAoE;QACpE,sFAAsF;QACtF,4DAA4D;QAC5D,6DAA6D;IAC/D,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6EAA6E;aAC3F;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,mEAAmE;aACjF;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,2EAA2E;aACzF;SACF;KACF;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,kFAAkF;QAClF,+EAA+E;QAC/E,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC,kEAAkE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,WAAW,CAAC,4DAA4D,CAAC,CAAC;IACnF,CAAC;CACF,CAAC"}

package/dist/tools/webFetch.js

@@ -0,0 +1,444 @@
+/**
+ * webFetch.ts — read a web page.
+ *
+ * A coding agent constantly needs something off the web: a docs page, a changelog,
+ * an RFC, an error explained. Without this the user has to paste it in. The shape
+ * is simple: input is a `url` plus an optional `prompt` describing what to pull out.
+ *
+ * Pipeline: fetch (https-upgraded, timed out, size-capped) → strip to readable
+ * markdown (HTML via turndown; text/json/markdown pass through) → if the page is
+ * large and the model gave a `prompt`, DISTILL it with one cheap model call so the
+ * answer lands in context instead of a giant page; otherwise return the cleaned
+ * content (capped). Read-only — touches no files.
+ *
+ * Model-work boundary: the optional distillation is a model call inside a tool.
+ * Its prompt is deliberately thin — "answer this from the page" — no analysis
+ * rules baked in; the engineering judgment stays with the model. Degrade-safe: no
+ * API key, or any failure, falls back to returning the cleaned/truncated content.
+ *
+ * Safety: only http/https, and a basic SSRF guard refuses localhost / private-network
+ * hosts so the tool can't be pointed at internal services.
+ */
+import TurndownService from "turndown";
+import { activeDriver } from "../drivers/registry.js";
+import { frameExternal } from "./untrusted.js";
+import { outputDetail } from "./detail.js";
+import { estimateTokens } from "../memory/compaction.js";
+import { fail, failQuietly } from "./results.js";
+const FETCH_TIMEOUT_MS = 20_000;
+const DOWNLOAD_CAP_BYTES = 3_000_000; // stop reading a response past ~3MB
+const CONTENT_CAP_CHARS = 12_000; // how much cleaned content we return / distill from
+export const DISTILL_OVER_CHARS = 12_000; // above this, summarize via a model call (if a prompt is given)
+/** Redirect hops followed before giving up. Enough for shorteners and canonical
+ *  redirects, short enough that a redirect loop cannot spin. */
+const MAX_REDIRECTS = 5;
+const turndown = new TurndownService({ headingStyle: "atx", codeBlockStyle: "fenced" });
+turndown.remove(["script", "style", "noscript", "iframe"]);
+const webFetchTool = {
+    name: "web_fetch",
+    readOnly: true,
+    // This description was already accurate, so only two things were added, both of
+    // which prevent a wasted call: a bare host works (no need to hand-build the scheme),
+    // and on a page small enough to return whole the `prompt` simply is not used, which
+    // otherwise reads as the prompt having been ignored or failed.
+    description: "Fetch a web page and return its content as readable markdown. Give a `url` and " +
+        "optionally a `prompt` describing what to extract. Use it to read docs, articles, " +
+        "changelogs, or any public URL. " +
+        `A page longer than ${DISTILL_OVER_CHARS.toLocaleString("en-US")} characters is ` +
+        "condensed against your `prompt` so you get the answer rather than the page; below " +
+        "that you simply get the whole thing, and the prompt is not needed. " +
+        "A bare host is fine (\"example.com\" becomes https://example.com), http is upgraded " +
+        "to https, and private or localhost addresses are refused. " +
+        "For GitHub, prefer the gh CLI via run_command when you can.",
+    parameters: {
+        type: "object",
+        additionalProperties: false,
+        required: ["url"],
+        properties: {
+            url: { type: "string", description: "The URL to fetch (a fully-formed http(s) URL)." },
+            prompt: {
+                type: "string",
+                description: "Optional: what to extract from the page (used to focus a large page).",
+            },
+        },
+    },
+    async execute(args, ctx) {
+        const rawUrl = typeof args.url === "string" ? args.url.trim() : "";
+        const prompt = typeof args.prompt === "string" ? args.prompt.trim() : "";
+        if (!rawUrl)
+            return failQuietly("`url` is required.");
+        const url = normalizeUrl(rawUrl);
+        if (typeof url === "string")
+            return failQuietly(url); // a validation message
+        const blocked = ssrfReason(url);
+        if (blocked)
+            return fail(blocked);
+        const fetched = await fetchUrl(url);
+        if (typeof fetched === "string")
+            return fail(fetched);
+        const { finalUrl, status, contentType, body } = fetched;
+        if (!isTextual(contentType)) {
+            return {
+                output: `Fetched ${finalUrl} (HTTP ${status}, ${contentType || "unknown type"}). ` +
+                    `This is binary/non-text content, which web_fetch can't read. ` +
+                    `If you need it, download it with run_command.`,
+                summary: `fetched ${hostOf(url)} (non-text)`,
+                detail: fetchDetail(finalUrl, status, [`Content-Type: ${contentType || "unknown"} — not text, not read`]),
+            };
+        }
+        let content = contentType.includes("html") ? htmlToMarkdown(body) : body.trim();
+        const redirected = hostOf(finalUrl) !== hostOf(url) ? `\n(note: redirected to ${finalUrl})` : "";
+        // Large page + a prompt → distill to the answer. Otherwise return content,
+        // capped. Distillation is best-effort; failure falls back to truncation.
+        if (content.length > DISTILL_OVER_CHARS && prompt) {
+            const distilled = await distill(content.slice(0, CONTENT_CAP_CHARS * 3), prompt, ctx);
+            if (distilled) {
+                // Framed too. Distillation is a summary OF untrusted text, so an instruction
+                // planted in the page can survive into it — passing it through unmarked would
+                // launder the page's words into something that reads as ours.
+                return {
+                    output: frameExternal({ tag: "web_page", attrs: { url: finalUrl }, what: "an external web page" }, `(focused on: ${prompt})${redirected}\n\n${distilled}`),
+                    summary: `fetched ${hostOf(url)} (summarized)`,
+                    detail: fetchDetail(finalUrl, status, [
+                        `Condensed against: "${prompt}"`,
+                        ...(redirected ? [`Redirected from ${hostOf(url)}`] : []),
+                    ]),
+                };
+            }
+        }
+        let out = content;
+        let truncated = false;
+        if (out.length > CONTENT_CAP_CHARS) {
+            out = out.slice(0, CONTENT_CAP_CHARS);
+            truncated = true;
+        }
+        const footer = truncated
+            ? `\n\n… (content truncated at ${CONTENT_CAP_CHARS} chars; fetch a more specific URL or pass a prompt to focus it)`
+            : "";
+        return {
+            output: frameExternal({ tag: "web_page", attrs: { url: finalUrl, status: String(status) }, what: "an external web page" }, `${redirected}${redirected ? "\n\n" : ""}${out}${footer}`),
+            summary: `fetched ${hostOf(url)} (${out.length} chars${truncated ? ", truncated" : ""})`,
+            detail: fetchDetail(finalUrl, status, [
+                `Extracted ${estimateTokens(out).toLocaleString("en-US")} tokens${truncated ? ", truncated" : ""}`,
+                ...(pageTitle(body) ? [`Title: ${pageTitle(body)}`] : []),
+                ...(redirected ? [`Redirected from ${hostOf(url)}`] : []),
+            ], byteSize(body)),
+        };
+    },
+};
+/** The UI-only detail block under a Fetch row — never sent to the model
+ *  (`frameExternal`'s `output` is what the model sees). `bytes` is what came off the
+ *  wire, which is the number that says whether the page was worth the round trip. */
+export function fetchDetail(finalUrl, status, extra, bytes) {
+    const lead = bytes === undefined ? `Received ${finalUrl}` : `Received ${formatBytes(bytes)} from ${finalUrl}`;
+    return outputDetail([`${lead} (HTTP ${status})`, ...extra].join("\n"));
+}
+/** Bytes as a person reads them: `412 B`, `24.8 KB`, `1.3 MB`. */
+export function formatBytes(n) {
+    if (n < 1024)
+        return `${n} B`;
+    if (n < 1024 * 1024)
+        return `${(n / 1024).toFixed(1)} KB`;
+    return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+/** The transferred size — byte length, not character count, since a page of non-ASCII
+ *  text is meaningfully larger on the wire than its `.length` suggests. */
+function byteSize(body) {
+    return Buffer.byteLength(body, "utf8");
+}
+/**
+ * A page's `<title>`, when it has one worth showing.
+ *
+ * What the page calls itself is the fastest way to tell "I fetched the right doc" from
+ * "I fetched a login wall", and it is the one fact a URL alone cannot give.
+ */
+export function pageTitle(body) {
+    const m = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(body);
+    if (!m)
+        return "";
+    const text = m[1].replace(/\s+/g, " ").trim();
+    return text.length > 80 ? text.slice(0, 79) + "…" : text;
+}
+/**
+ * Fetch with timeout + size cap, checking EVERY hop. Body, or an error string.
+ *
+ * Redirects are followed by hand rather than by `fetch`. Letting the client follow
+ * them means the SSRF guard only ever sees the URL the model supplied, and a public
+ * URL that answers `302 -> http://127.0.0.1:8080` (or the cloud metadata address) is
+ * then fetched with no check at all. That is a live bug class rather than a
+ * hypothetical: the same shape was fixed in pyload, crewai-tools, WeasyPrint and
+ * open-webui through 2026. The guidance is to refuse redirects or revalidate each
+ * hop; revalidating keeps ordinary shortened and canonicalising links working, which
+ * a coding agent hits constantly.
+ */
+async function fetchUrl(startUrl) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    let url = startUrl;
+    try {
+        for (let hop = 0;; hop++) {
+            const res = await fetch(url, {
+                // Manual, so a redirect target is a value we inspect rather than a request
+                // the client has already made on our behalf.
+                redirect: "manual",
+                signal: controller.signal,
+                headers: { "User-Agent": "Mindweave/0.1 (+terminal coding agent)", Accept: "text/html,text/*,application/json;q=0.9,*/*;q=0.8" },
+            });
+            const location = res.status >= 300 && res.status < 400 ? res.headers.get("location") : null;
+            if (!location) {
+                const contentType = (res.headers.get("content-type") ?? "").toLowerCase();
+                const body = await readCapped(res);
+                return { finalUrl: url.toString(), status: res.status, contentType, body };
+            }
+            // Discard the redirect's own body; only the destination matters from here.
+            await res.body?.cancel().catch(() => { });
+            const step = redirectStep(location, url, hop);
+            if ("error" in step)
+                return step.error;
+            url = step.url;
+        }
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === "AbortError") {
+            return `Timed out fetching ${startUrl.toString()} after ${FETCH_TIMEOUT_MS / 1000}s.`;
+        }
+        return `Could not fetch ${startUrl.toString()}: ${error instanceof Error ? error.message : String(error)}`;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Decide whether one redirect hop may be followed (pure).
+ *
+ * Everything that makes a redirect dangerous is decided here, with no I/O, so the
+ * rule is unit-testable rather than only reachable through a live server — which
+ * matters because the interesting cases redirect INTO private addresses, and a test
+ * that has to bind one is a test nobody writes.
+ */
+export function redirectStep(location, from, hop) {
+    if (hop >= MAX_REDIRECTS) {
+        return { error: `Gave up after ${MAX_REDIRECTS} redirects, most recently at ${from.toString()}.` };
+    }
+    // Relative Location headers are legal and common.
+    let next;
+    try {
+        next = new URL(location, from);
+    }
+    catch {
+        return { error: `Got an unreadable redirect target ("${location}") from ${from.toString()}.` };
+    }
+    // A redirect must not become a way to reach a scheme the tool would have refused
+    // outright — `file:`, `gopher:` and friends are a standard SSRF escalation.
+    if (next.protocol === "http:")
+        next.protocol = "https:";
+    if (next.protocol !== "https:") {
+        return { error: `Refusing to follow a redirect to a "${next.protocol}" URL (${next.toString()}).` };
+    }
+    const blocked = ssrfReason(next);
+    if (blocked)
+        return { error: `Refusing to follow a redirect from ${from.hostname}: ${blocked}` };
+    return { url: next };
+}
+/** Read a response body, stopping once past the byte cap. */
+async function readCapped(res) {
+    if (!res.body)
+        return await res.text();
+    const reader = res.body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (value) {
+            chunks.push(value);
+            total += value.length;
+            if (total >= DOWNLOAD_CAP_BYTES) {
+                await reader.cancel().catch(() => { });
+                break;
+            }
+        }
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+// ── transform ───────────────────────────────────────────────────────────────
+function htmlToMarkdown(html) {
+    try {
+        return turndown.turndown(html).replace(/\n{3,}/g, "\n\n").trim();
+    }
+    catch {
+        // Fall back to a crude tag-strip if turndown chokes on malformed markup.
+        return html.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+    }
+}
+/** One cheap model call to answer `prompt` from the page. null on any failure. */
+async function distill(content, prompt, ctx) {
+    try {
+        const turn = await activeDriver().toolTurn({
+            system: "You extract information from a web page to answer the user's request. " +
+                "Answer only from the content provided; be concise and include relevant " +
+                "code or quotes. If the answer isn't present, say so.",
+            messages: [{ role: "user", content: `Web page content:\n---\n${content}\n---\n\nRequest: ${prompt}` }],
+        });
+        // A distillation is a real model call on the user's key, made on the agent's
+        // initiative rather than the user's. Reporting it keeps the meter from being
+        // short by exactly the work nobody could see.
+        if (turn.usage)
+            ctx?.reportUsage?.(turn.usage);
+        return turn.content.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+// ── url + safety ──────────────────────────────────────────────────────────────
+/** Validate, default-to-https, and upgrade http→https. Returns a URL or an error string. */
+export function normalizeUrl(raw) {
+    let text = raw;
+    if (!/^[a-z]+:\/\//i.test(text))
+        text = "https://" + text; // bare host → https
+    let url;
+    try {
+        url = new URL(text);
+    }
+    catch {
+        return `Invalid URL: "${raw}".`;
+    }
+    if (url.protocol === "http:")
+        url.protocol = "https:";
+    if (url.protocol !== "https:")
+        return `Unsupported URL scheme "${url.protocol}" — only http/https.`;
+    return url;
+}
+/**
+ * SSRF guard: refuse localhost, private, and link-local hosts.
+ *
+ * Pure, and deliberately so — every hop of a redirect chain is put through it, and a
+ * check that needed I/O could not be run that often.
+ *
+ * Three things this covers beyond the obvious dotted-quad:
+ *
+ *  - **IPv6.** Blocking only `::1` left unique-local (`fc00::/7`) and link-local
+ *    (`fe80::/10`) wide open, which is most of what an internal IPv6 network uses.
+ *  - **Alternate IPv4 encodings.** `http://2130706433/` is `127.0.0.1` written as a
+ *    single decimal, and `0x7f.1` is the same host again. A string match on
+ *    "127." sees neither, and every SSRF filter-bypass list opens with this.
+ *  - **169.254.0.0/16**, which is where cloud instance metadata lives. It was
+ *    already covered, and it is the reason the rest matters.
+ *
+ * What it does NOT do: resolve DNS. A name that resolves to a private address still
+ * passes, and defending against that (or against rebinding between check and connect)
+ * means pinning the connection to a checked IP, which Node's fetch does not expose.
+ * Stated rather than papered over.
+ */
+export function ssrfReason(url) {
+    const host = url.hostname.toLowerCase();
+    if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) {
+        return `Refusing to fetch a local address (${host}).`;
+    }
+    // IPv6 literals arrive from `URL` still wrapped in brackets.
+    if (host.startsWith("[") && host.endsWith("]")) {
+        const v6 = host.slice(1, -1);
+        if (v6 === "::1" || v6 === "::")
+            return `Refusing to fetch a loopback address (${host}).`;
+        // fc00::/7 (unique-local) and fe80::/10 (link-local).
+        if (/^f[cd][0-9a-f]{0,2}:/i.test(v6) || /^fe[89ab][0-9a-f]?:/i.test(v6)) {
+            return `Refusing to fetch a private/link-local address (${host}).`;
+        }
+        // IPv4 wearing an IPv6 hat. Both spellings have to be handled, because `URL`
+        // rewrites the readable one: `[::ffff:127.0.0.1]` is normalised to
+        // `[::ffff:7f00:1]` before this ever sees it, so matching only dotted form
+        // would catch nothing at all.
+        const mappedDotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/i.exec(v6);
+        if (mappedDotted && isPrivateV4(mappedDotted[1])) {
+            return `Refusing to fetch a private/loopback address (${host}).`;
+        }
+        const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(v6);
+        if (mappedHex) {
+            const n = (parseInt(mappedHex[1], 16) << 16) | parseInt(mappedHex[2], 16);
+            const dotted = [(n >>> 24) & 255, (n >>> 16) & 255, (n >>> 8) & 255, n & 255].join(".");
+            if (isPrivateV4(dotted))
+                return `Refusing to fetch a private/loopback address (${host}).`;
+        }
+        return null;
+    }
+    if (host === "::1" || host === "::")
+        return `Refusing to fetch a loopback address (${host}).`;
+    const v4 = asIPv4(host);
+    if (v4 && isPrivateV4(v4))
+        return `Refusing to fetch a private/loopback address (${host}).`;
+    return null;
+}
+/**
+ * Normalise anything that is really an IPv4 address into dotted-quad, or null (pure).
+ *
+ * Covers dotted decimal, a bare 32-bit integer (`2130706433`), and hex/octal parts
+ * (`0x7f.0.0.1`, `0177.0.0.1`) — the standard filter-bypass encodings. Anything that
+ * is not unambiguously an address returns null and is treated as a hostname.
+ */
+export function asIPv4(host) {
+    if (/^\d+$/.test(host)) {
+        const n = Number(host);
+        if (!Number.isSafeInteger(n) || n < 0 || n > 0xffffffff)
+            return null;
+        return [(n >>> 24) & 255, (n >>> 16) & 255, (n >>> 8) & 255, n & 255].join(".");
+    }
+    const parts = host.split(".");
+    if (parts.length !== 4)
+        return null;
+    const nums = [];
+    for (const p of parts) {
+        if (p === "")
+            return null;
+        let n;
+        if (/^0x[0-9a-f]+$/i.test(p))
+            n = parseInt(p, 16);
+        else if (/^0[0-7]+$/.test(p))
+            n = parseInt(p, 8);
+        else if (/^\d+$/.test(p))
+            n = Number(p);
+        else
+            return null;
+        if (!Number.isInteger(n) || n < 0 || n > 255)
+            return null;
+        nums.push(n);
+    }
+    return nums.join(".");
+}
+/** Is a dotted-quad in a loopback, private, or link-local range? (pure) */
+function isPrivateV4(dotted) {
+    const p = dotted.split(".").map(Number);
+    const [a, b] = [p[0], p[1]];
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        (a === 169 && b === 254) || // link-local, and cloud instance metadata
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168) ||
+        (a === 100 && b >= 64 && b <= 127) || // carrier-grade NAT
+        a >= 224 // multicast and reserved
+    );
+}
+function isTextual(contentType) {
+    if (!contentType)
+        return true; // unknown — assume text and let cleanup handle it
+    return (contentType.includes("text/") ||
+        contentType.includes("html") ||
+        contentType.includes("json") ||
+        contentType.includes("xml") ||
+        contentType.includes("markdown"));
+}
+function hostOf(u) {
+    try {
+        return new URL(u.toString()).hostname;
+    }
+    catch {
+        return String(u);
+    }
+}
+/** The fetch half of the merged `web` tool. Logic unchanged. */
+export const fetchWeb = webFetchTool.execute;
+/** Kept for tests that assert on the fetch description/flags directly. */
+export const webFetch = webFetchTool;
+//# sourceMappingURL=webFetch.js.map

package/dist/tools/webFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webFetch.js","sourceRoot":"","sources":["../../src/tools/webFetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,eAAe,MAAM,UAAU,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,SAAS,CAAC,CAAC,oCAAoC;AAC1E,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,oDAAoD;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAC,gEAAgE;AAC1G;gEACgE;AAChE,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;AACxF,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAS;IACzB,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,IAAI;IACd,gFAAgF;IAChF,qFAAqF;IACrF,oFAAoF;IACpF,+DAA+D;IAC/D,WAAW,EACT,iFAAiF;QACjF,mFAAmF;QACnF,iCAAiC;QACjC,sBAAsB,kBAAkB,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB;QACjF,oFAAoF;QACpF,qEAAqE;QACrE,sFAAsF;QACtF,4DAA4D;QAC5D,6DAA6D;IAC/D,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,KAAK,CAAC;QACjB,UAAU,EAAE;YACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;YACtF,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uEAAuE;aACrF;SACF;KACF;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;QAE7E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAExD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,WAAW,QAAQ,UAAU,MAAM,KAAK,WAAW,IAAI,cAAc,KAAK;oBAChF,+DAA+D;oBAC/D,+CAA+C;gBACjD,OAAO,EAAE,WAAW,MAAM,CAAC,GAAG,CAAC,aAAa;gBAC5C,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,iBAAiB,WAAW,IAAI,SAAS,uBAAuB,CAAC,CAAC;aAC1G,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjG,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,IAAI,MAAM,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,SAAS,EAAE,CAAC;gBACd,6EAA6E;gBAC7E,8EAA8E;gBAC9E,8DAA8D;gBAC9D,OAAO;oBACL,MAAM,EAAE,aAAa,CACnB,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAC3E,gBAAgB,MAAM,IAAI,UAAU,OAAO,SAAS,EAAE,CACvD;oBACD,OAAO,EAAE,WAAW,MAAM,CAAC,GAAG,CAAC,eAAe;oBAC9C,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE;wBACpC,uBAAuB,MAAM,GAAG;wBAChC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1D,CAAC;iBACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,GAAG,GAAG,OAAO,CAAC;QAClB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACtC,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC,+BAA+B,iBAAiB,iEAAiE;YACnH,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;YACL,MAAM,EAAE,aAAa,CACnB,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EACnG,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,EAAE,CAC1D;YACD,OAAO,EAAE,WAAW,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG;YACxF,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE;gBACpC,aAAa,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;SACnB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;qFAEqF;AACrF,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAe,EAAE,KAAc;IAC3F,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,KAAK,CAAC,SAAS,QAAQ,EAAE,CAAC;IAC9G,OAAO,YAAY,CAAC,CAAC,GAAG,IAAI,UAAU,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC;AAED;2EAC2E;AAC3E,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,QAAQ,CAAC,QAAa;IACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACrE,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,2EAA2E;gBAC3E,6CAA6C;gBAC7C,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,YAAY,EAAE,wCAAwC,EAAE,MAAM,EAAE,mDAAmD,EAAE;aACjI,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC1E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC7E,CAAC;YAED,2EAA2E;YAC3E,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAEzC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,OAAO,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC;YACvC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,OAAO,sBAAsB,QAAQ,CAAC,QAAQ,EAAE,UAAU,gBAAgB,GAAG,IAAI,IAAI,CAAC;QACxF,CAAC;QACD,OAAO,mBAAmB,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7G,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAS,EAAE,GAAW;IACnE,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,iBAAiB,aAAa,gCAAgC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;IACrG,CAAC;IACD,kDAAkD;IAClD,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,uCAAuC,QAAQ,WAAW,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;IACjG,CAAC;IACD,iFAAiF;IACjF,4EAA4E;IAC5E,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,uCAAuC,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,EAAE,CAAC;IACjG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,IAAI,kBAAkB,EAAE,CAAC;gBAChC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACtC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAE/E,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,MAAc,EAAE,GAAiB;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC,QAAQ,CAAC;YACzC,MAAM,EACJ,wEAAwE;gBACxE,yEAAyE;gBACzE,sDAAsD;YACxD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,OAAO,qBAAqB,MAAM,EAAE,EAAE,CAAC;SACvG,CAAC,CAAC;QACH,6EAA6E;QAC7E,6EAA6E;QAC7E,8CAA8C;QAC9C,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,oBAAoB;IAC/E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,2BAA2B,GAAG,CAAC,QAAQ,sBAAsB,CAAC;IACpG,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,UAAU,CAAC,GAAQ;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO,sCAAsC,IAAI,IAAI,CAAC;IACxD,CAAC;IAED,6DAA6D;IAC7D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,yCAAyC,IAAI,IAAI,CAAC;QAC1F,sDAAsD;QACtD,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxE,OAAO,mDAAmD,IAAI,IAAI,CAAC;QACrE,CAAC;QACD,6EAA6E;QAC7E,mEAAmE;QACnE,2EAA2E;QAC3E,8BAA8B;QAC9B,MAAM,YAAY,GAAG,gDAAgD,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,YAAY,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YAClD,OAAO,iDAAiD,IAAI,IAAI,CAAC;QACnE,CAAC;QACD,MAAM,SAAS,GAAG,2CAA2C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxF,IAAI,WAAW,CAAC,MAAM,CAAC;gBAAE,OAAO,iDAAiD,IAAI,IAAI,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,yCAAyC,IAAI,IAAI,CAAC;IAE9F,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC;QAAE,OAAO,iDAAiD,IAAI,IAAI,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU;YAAE,OAAO,IAAI,CAAC;QACrE,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAS,CAAC;QACd,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aAC7C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;;YACnC,OAAO,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9B,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,0CAA0C;QACtE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,oBAAoB;QAC1D,CAAC,IAAI,GAAG,CAAC,yBAAyB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,CAAC,kDAAkD;IACjF,OAAO,CACL,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7B,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,CAAe;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAGD,gEAAgE;AAChE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC;AAE7C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC"}