neoctl 0.2.36 → 0.2.38

package/dist/web/smoke-tool-call-detail.js

@@ -0,0 +1,106 @@
+import { InMemorySecretRedactionRegistry } from '../secrets/secret-redaction.js';
+import { runToolUseToMessages } from '../tools/run-tool-use.js';
+import { ToolRegistry } from '../tools/registry.js';
+import { InMemoryAppState } from '../app/app-state.js';
+import { readFileTool } from '../tools/builtins/filesystem-tools.js';
+import { editTool } from '../tools/builtins/edit-tool.js';
+import { createSubagentTools } from '../tasks/subagent-tools.js';
+import { TaskStore } from '../tasks/task-store.js';
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { readToolCallDetail, redactToolDetail, allowToolDetailRequest } from './tool-call-detail.js';
+import { SessionStore } from '../session/session-store.js';
+import { FileToolResultMemory } from '../session/tool-result-memory.js';
+import { createToolResultMessage } from '../types/messages.js';
+import { restoreWebHistoryLines, WebRepl } from './index.js';
+const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'obs01-'));
+let checks = 0;
+const check = (v) => { assert.ok(v); checks++; };
+try {
+    const request = { id: 'call-one', name: 'file_read', input: { path: 'missing.txt', offset: 0, token: 'INPUT_SECRET' } };
+    const use = { id: 'use-message', role: 'assistant', createdAt: '', blocks: [{ type: 'tool_use', ...request }] };
+    const entry = (message) => ({ type: 'message', message });
+    const options = { sessionId: 's1', expectedSessionId: 's1', sessionDir: dir, toolUseId: request.id };
+    for (const error of ['ENOENT: missing.txt', 'oldString not found', 'input.path must be string', 'Unknown agent target: nobody']) {
+        const result = createToolResultMessage(request, false, { error });
+        const entries = [entry(use), entry(result)];
+        const detail = await readToolCallDetail({ ...options, entries });
+        check(detail?.error.text === error);
+        check(detail?.input.text.includes('missing.txt') && !detail?.input.text.includes('INPUT_SECRET'));
+        const lines = restoreWebHistoryLines({ engine: { getDisplayEntries: () => entries } });
+        check(lines.some(line => line.kind === 'error' && line.toolUseId === request.id && line.toolError === error));
+    }
+    const tools = new ToolRegistry();
+    tools.register(readFileTool);
+    tools.register(editTool);
+    for (const tool of createSubagentTools(new TaskStore()))
+        tools.register(tool);
+    await fs.writeFile(path.join(dir, 'edit.txt'), 'unchanged');
+    const context = { emit: () => { }, agentId: 'test', tools, appState: new InMemoryAppState('test', dir), session: { sessionId: 's1', sessionDir: dir } };
+    for (const actual of [
+        { id: 'real-read', name: 'file_read', input: { path: path.join(dir, 'absent.txt') } },
+        { id: 'real-edit', name: 'file_edit', input: { path: path.join(dir, 'edit.txt'), oldString: 'NOT_FOUND', newString: 'new' } },
+        { id: 'real-schema', name: 'file_read', input: { path: 123 } },
+        { id: 'real-agent', name: 'subagent_message', input: { target: 'nonexistent', message: 'hello' } }
+    ]) {
+        const messages = await runToolUseToMessages(actual, context);
+        const actualUse = { ...use, id: actual.id + '-input', blocks: [{ type: 'tool_use', ...actual }] };
+        const detail = await readToolCallDetail({ ...options, toolUseId: actual.id, entries: [entry(actualUse), ...messages.map(entry)] });
+        check(detail?.ok === false && !!detail.error.text && detail.error.text !== '未提供错误原因');
+        console.log(actual.name + ' actual failure: ' + detail?.error.text);
+    }
+    const registry = new InMemorySecretRedactionRegistry();
+    registry.record('runtime-secret', 'REGISTERED_NOT_IN_ENV');
+    const registryResult = await readToolCallDetail({ ...options, redact: value => registry.redact(value), entries: [entry(use), entry(createToolResultMessage(request, true, { content: 'REGISTERED_NOT_IN_ENV', lastText: 'HIDDEN_CAMEL' }))] });
+    check(!JSON.stringify(registryResult).includes('REGISTERED_NOT_IN_ENV') && !JSON.stringify(registryResult).includes('HIDDEN_CAMEL'));
+    const fake = { runtime: { engine: { snapshot: () => ({ session: { sessionId: 's1' } }), redactDisplayValue: (v) => registry.redact(v), isFastMode: () => false, getAppPrompt: () => ({}) } },
+        lines: [{ id: 1, toolError: 'REGISTERED_NOT_IN_ENV' }], backgroundTasks: () => [], terminalTaskHistory: () => [], backgroundSessionRuns: new Map(), pendingDeltaOperations: [], scheduleDeltaFlush: () => { } };
+    // Snapshot also needs the existing task-store projection contract.
+    Object.assign(fake.runtime, { taskStore: { list: () => [] } });
+    const projected = WebRepl.prototype.snapshot.call(fake);
+    check(projected.lines[0].toolError === '[secret:runtime-secret]');
+    const queue = WebRepl.prototype.queueDeltaOperation;
+    queue.call(fake, { type: 'line.append', line: { id: 2, toolError: 'REGISTERED_NOT_IN_ENV' } });
+    queue.call(fake, { type: 'line.patch', id: 2, patch: { toolError: 'REGISTERED_NOT_IN_ENV' } });
+    check(!JSON.stringify(fake.pendingDeltaOperations).includes('REGISTERED_NOT_IN_ENV'));
+    const memory = new FileToolResultMemory({ sessionDir: dir, thresholdChars: 100 });
+    const full = { arbitrary: 'REGISTERED_NOT_IN_ENV', content: 'FULL_START\n' + 'x'.repeat(9000) + '\nFULL_END', password: 'OUTPUT_SECRET' };
+    const processed = await memory.processToolResult(request.id, full);
+    const result = createToolResultMessage(request, true, processed.output);
+    const entries = [entry(use), entry(result)];
+    const detail = await readToolCallDetail({ ...options, entries });
+    const store = await SessionStore.open({ agentId: 'test', rootDir: dir, sessionId: 'persisted' });
+    for (const item of entries)
+        store.recordMessage(item.message);
+    const restored = await SessionStore.open({ agentId: 'test', rootDir: dir, sessionId: 'persisted', resume: true });
+    check((await readToolCallDetail({ ...options, entries: restored.getDisplayEntries() }))?.result.text === detail?.result.text);
+    check(detail?.result.state === 'complete' && detail.result.text.includes('FULL_END'));
+    check(!JSON.stringify(detail).includes('OUTPUT_SECRET'));
+    check(!JSON.stringify(await readToolCallDetail({ ...options, entries, redact: value => registry.redact(value) })).includes('REGISTERED_NOT_IN_ENV'));
+    check((await readToolCallDetail({ ...options, entries: JSON.parse(JSON.stringify(entries)) }))?.result.text === detail?.result.text);
+    check(await readToolCallDetail({ ...options, entries, expectedSessionId: 'other' }) === undefined);
+    check(await readToolCallDetail({ ...options, entries, toolUseId: 'other' }) === undefined);
+    check(await readToolCallDetail({ ...options, entries, messageId: 'other' }) === undefined);
+    check(await readToolCallDetail({ ...options, entries: [...entries, entry(use)] }) === undefined);
+    await fs.rm(path.join(dir, 'tool-results'), { recursive: true });
+    check((await readToolCallDetail({ ...options, entries }))?.result.state === 'unavailable');
+    const malicious = createToolResultMessage(request, true, '<persisted-output>\nFull output saved to: ' + path.join(dir, '../private.txt') + '\n');
+    check((await readToolCallDetail({ ...options, entries: [entry(use), entry(malicious)] }))?.result.state === 'unavailable');
+    for (const output of [0, false, [], '', null])
+        check((await readToolCallDetail({ ...options, entries: [entry(createToolResultMessage(request, true, output))] }))?.result.state === 'complete');
+    check((await readToolCallDetail({ ...options, entries: [entry(createToolResultMessage(request, true, { truncated: true, content: 'preview' }))] }))?.result.state === 'truncated');
+    check((await readToolCallDetail({ ...options, entries: [entry(result)] }))?.input.state === 'missing');
+    check(!allowToolDetailRequest('https://evil.example', 'localhost:123', 'cross-site'));
+    check(allowToolDetailRequest('http://localhost:123', 'localhost:123', 'same-origin'));
+    const redacted = JSON.stringify(redactToolDetail({ config: { a: 'PRIVATE_CONFIG' }, thinking: 'HIDDEN', nested: { apiKey: 'KEY' }, error: 'Authorization: Bearer abc123 password=abcd sk-very-secret-key' }));
+    for (const secret of ['PRIVATE_CONFIG', 'HIDDEN', 'abc123', 'abcd', 'sk-very-secret-key'])
+        check(!redacted.includes(secret));
+    check(await readToolCallDetail({ ...options, entries: [entry({ ...use, blocks: [{ type: 'tool_use', ...request, name: 'secret_get' }] })] }) === undefined);
+    console.log(`OBS-01 service smoke passed: ${checks} assertions`);
+}
+finally {
+    await fs.rm(dir, { recursive: true, force: true });
+}
+//# sourceMappingURL=smoke-tool-call-detail.js.map

package/dist/web/smoke-tool-call-detail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-tool-call-detail.js","sourceRoot":"","sources":["../../src/web/smoke-tool-call-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAgB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/D,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,IAAI,CAAC;IACJ,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;IACxH,MAAM,GAAG,GAAY,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IACzH,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACrG,KAAK,MAAM,KAAK,IAAI,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,EAAE,CAAC;QAChI,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAW,CAAC,CAAC;QAChG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,IAAI,SAAS,EAAE,CAAC;QAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAC,SAAS,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,EAAC,EAAE,CAAC;IAClJ,KAAK,MAAM,MAAM,IAAI;QACnB,EAAC,EAAE,EAAC,WAAW,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,YAAY,CAAC,EAAC,EAAC;QAC1E,EAAC,EAAE,EAAC,WAAW,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,UAAU,CAAC,EAAC,SAAS,EAAC,WAAW,EAAC,SAAS,EAAC,KAAK,EAAC,EAAC;QAC9G,EAAC,EAAE,EAAC,aAAa,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,GAAG,EAAC,EAAC;QACpD,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,kBAAkB,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,aAAa,EAAC,OAAO,EAAC,OAAO,EAAC,EAAC;KACvF,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAY,EAAC,GAAG,GAAG,EAAE,EAAE,EAAC,MAAM,CAAC,EAAE,GAAC,QAAQ,EAAE,MAAM,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,MAAM,EAAC,CAAC,EAAC,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAC,GAAG,OAAO,EAAC,SAAS,EAAC,MAAM,CAAC,EAAE,EAAC,OAAO,EAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC;QAC5H,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,mBAAmB,GAAG,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,+BAA+B,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAC,uBAAuB,CAAC,CAAC;IAClH,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,EAAC,GAAG,OAAO,EAAC,MAAM,EAAC,KAAK,CAAA,EAAE,CAAA,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAC,IAAI,EAAC,EAAC,OAAO,EAAC,uBAAuB,EAAC,QAAQ,EAAC,cAAc,EAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;IAC/N,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IACrI,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAC,GAAE,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,EAAC,CAAC,EAAE,kBAAkB,EAAC,CAAI,CAAG,EAAC,EAAE,CAAA,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAC,GAAE,EAAE,CAAA,KAAK,EAAE,YAAY,EAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,EAAE,EAAE;QAC/K,KAAK,EAAC,CAAC,EAAC,EAAE,EAAC,CAAC,EAAC,SAAS,EAAC,uBAAuB,EAAC,CAAC,EAAE,eAAe,EAAC,GAAE,EAAE,CAAA,EAAE,EAAE,mBAAmB,EAAC,GAAE,EAAE,CAAA,EAAE,EAAE,qBAAqB,EAAC,IAAI,GAAG,EAAE,EAAE,sBAAsB,EAAC,EAAE,EAAE,kBAAkB,EAAC,GAAE,EAAE,GAAC,CAAC,EAAE,CAAC;IAC9L,mEAAmE;IACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,GAAE,EAAE,CAAA,EAAE,EAAC,EAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAa,CAAC,CAAC;IACjE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,yBAAyB,CAAC,CAAC;IAClE,MAAM,KAAK,GAAI,OAAO,CAAC,SAAiE,CAAC,mBAAmB,CAAC;IAC7G,KAAK,CAAC,IAAI,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAC,EAAC,EAAE,EAAC,CAAC,EAAC,SAAS,EAAC,uBAAuB,EAAC,EAAC,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,YAAY,EAAC,EAAE,EAAC,CAAC,EAAC,KAAK,EAAC,EAAC,SAAS,EAAC,uBAAuB,EAAC,EAAC,CAAC,CAAC;IACpF,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,uBAAuB,EAAE,OAAO,EAAE,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC1I,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,GAAG,EAAC,SAAS,EAAC,WAAW,EAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,GAAG,EAAC,SAAS,EAAC,WAAW,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;IACzG,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAC,GAAG,OAAO,EAAC,OAAO,EAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1H,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,EAAC,GAAG,OAAO,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAA,EAAE,CAAA,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9I,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrI,KAAK,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IACnG,KAAK,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3F,KAAK,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3F,KAAK,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IACjG,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,4CAA4C,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IACjJ,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC;IAC3H,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC;QAAE,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IAChM,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;IACnL,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvG,KAAK,CAAC,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC,CAAC,CAAC;IAC9M,KAAK,MAAM,MAAM,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC;QAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,KAAK,CAAC,MAAM,kBAAkB,CAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAC,CAAC,KAAK,CAAC,EAAC,GAAG,GAAG,EAAC,MAAM,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,OAAO,EAAC,IAAI,EAAC,YAAY,EAAC,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/I,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,aAAa,CAAC,CAAC;AAClE,CAAC;QAAS,CAAC;IAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAC,CAAC"}

package/dist/web/smoke-tool-call-http.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/web/smoke-tool-call-http.js

@@ -0,0 +1,100 @@
+// Real Node HTTP route + WebRepl detail + real disk storage; no model/network provider.
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { runWebServer, WebRepl, restoreWebHistoryLines } from './index.js';
+import { FileToolResultMemory } from '../session/tool-result-memory.js';
+import { createToolResultMessage } from '../types/messages.js';
+const root = await fs.mkdtemp(path.join(os.tmpdir(), 'obs01-http-'));
+const sessions = new Map();
+for (const id of ['A', 'B']) {
+    const dir = path.join(root, id);
+    await fs.mkdir(dir);
+    const req = { id: 'same-call', name: 'file_read', input: { path: `${id}.txt` } };
+    const memory = new FileToolResultMemory({ sessionDir: dir, thresholdChars: 20 });
+    const output = await memory.processToolResult(req.id, { content: `SESSION_${id}_ONLY` + 'x'.repeat(100) });
+    sessions.set(id, { dir, entries: [{ type: 'message', message: { id: `use-${id}`, role: 'assistant', createdAt: '', blocks: [{ type: 'tool_use', ...req }] } }, { type: 'message', message: { ...createToolResultMessage(req, true, output.output), id: `result-${id}` } }] });
+}
+let server;
+const original = http.createServer;
+const probe = original();
+await new Promise(r => probe.listen(0, "127.0.0.1", r));
+const probeAddress = probe.address();
+assert.ok(probeAddress && typeof probeAddress === "object");
+const port = probeAddress.port;
+await new Promise(r => probe.close(() => r()));
+// Capture the real server solely to close it after running its private production route.
+http.createServer = (...args) => { server = original(...args); return server; };
+let executions = 0;
+try {
+    await runWebServer(['--host', '127.0.0.1', '--port', String(port)], {
+        createRuntime: async (options) => ({ sessionId: options?.sessionId }),
+        createRepl: runtime => {
+            const id = runtime.sessionId;
+            const data = sessions.get(id);
+            const fake = { runtime: { engine: { snapshot: () => ({ session: { sessionId: id, sessionDir: data?.dir } }), getDisplayEntries: () => data?.entries ?? [], redactDisplayValue: (v) => v } }, toolCallDetail: WebRepl.prototype.toolCallDetail, submit: () => { executions++; throw new Error('must not execute'); } };
+            return fake;
+        }
+    });
+    const address = server.address();
+    assert.ok(address && typeof address === 'object');
+    const base = `http://127.0.0.1:${address.port}`;
+    const url = (s, m = '') => `${base}/api/tool-call-detail?sessionId=${s}&toolUseId=same-call${m ? '&messageId=' + m : ''}`;
+    let count = 0;
+    const check = (v) => { assert.ok(v); count++; };
+    for (const id of ['A', 'B']) {
+        const r = await fetch(url(id));
+        check(r.status === 200);
+        check(r.headers.get('cache-control') === 'no-store');
+        const body = await r.json();
+        check(body.sessionId === id);
+        check(body.result.text.includes(`SESSION_${id}_ONLY`));
+        check(!body.result.text.includes(`SESSION_${id === 'A' ? 'B' : 'A'}_ONLY`));
+    }
+    // Agent source provenance must hold at the ordinary-call HTTP boundary too.
+    for (const name of ['subagent_run', 'subagent_get', 'subagent_output']) {
+        const request = { id: `legacy-${name}`, name, input: { task_id: 'legacy-task' } };
+        const legacy = name === 'subagent_output'
+            ? '<retrieval_status>ready</retrieval_status>\n<task_id>legacy-task</task_id>\n<task_type>agent</task_type>\n<status>completed</status>\n<run_generation>2</run_generation>\n<pending_messages>0</pending_messages>\n<requires_resume>false</requires_resume>\n<agent_id>legacy-agent</agent_id>\n<output>PRIVATE_LEGACY_REASONING</output>'
+            : { task_id: 'legacy-task', run_generation: 2, status: 'completed', result: { content: 'PRIVATE_LEGACY_REASONING' }, progress: { last_text: 'PRIVATE_LEGACY_PROGRESS' } };
+        sessions.get('A').entries.push({ type: 'message', message: createToolResultMessage(request, true, legacy) });
+        const r = await fetch(`${base}/api/tool-call-detail?sessionId=A&toolUseId=${request.id}`);
+        check(r.status === 200);
+        const body = await r.json();
+        check(!JSON.stringify(body).includes('PRIVATE_LEGACY_'));
+        check(body.result.state === 'unavailable');
+        check(body.result.text.includes('legacy-task') && body.result.text.includes('2'));
+        const lines = restoreWebHistoryLines({ engine: { getDisplayEntries: () => sessions.get('A').entries } });
+        check(!JSON.stringify(lines).includes('PRIVATE_LEGACY_'));
+    }
+    // Windows junction is an actual filesystem symlink/reparse point, no admin privilege needed.
+    const a = sessions.get('A');
+    await fs.rm(path.join(a.dir, 'tool-results'), { recursive: true });
+    await fs.symlink(path.join(sessions.get('B').dir, 'tool-results'), path.join(a.dir, 'tool-results'), 'junction');
+    check((await fs.lstat(path.join(a.dir, 'tool-results'))).isSymbolicLink());
+    const attack = await (await fetch(url('A'))).json();
+    check(attack.result.state === 'unavailable');
+    check(!attack.result.text.includes('SESSION_B_ONLY'));
+    await fs.unlink(path.join(a.dir, 'tool-results'));
+    // Same caller-selected session cannot request the other session's result-message identity.
+    const denied = await fetch(url('A', 'result-B'));
+    console.log('Actual cross-session status:', denied.status);
+    check(denied.status === 404);
+    check(!(await denied.text()).includes('SESSION_B_ONLY'));
+    check((await fetch(url('absent'))).status === 404);
+    check((await fetch(url('A'), { headers: { Origin: 'https://evil.invalid', 'Sec-Fetch-Site': 'cross-site' } })).status === 403);
+    check((await fetch(url('A'), { method: 'POST' })).status === 404);
+    check(executions === 0);
+    console.log(`OBS-01 real HTTP passed: ${count} assertions; GET read-only, 403/404, two runtime session roots, cross-session message refusal, real junction escape refused`);
+}
+finally {
+    http.createServer = original;
+    server?.closeAllConnections();
+    await new Promise(resolve => server ? server.close(() => resolve()) : resolve());
+    // Never recursively follow the test junction on failure.
+    await fs.unlink(path.join(root, 'A', 'tool-results')).catch(() => { });
+    await fs.rm(root, { recursive: true, force: true });
+}
+//# sourceMappingURL=smoke-tool-call-http.js.map

package/dist/web/smoke-tool-call-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-tool-call-http.js","sourceRoot":"","sources":["../../src/web/smoke-tool-call-http.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAgB,MAAM,sBAAsB,CAAC;AAC7E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAC,aAAa,CAAC,CAAC,CAAC;AACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgE,CAAC;AACzF,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAC,EAAC,EAAE,EAAC,WAAW,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,GAAG,EAAE,MAAM,EAAC,EAAC,CAAC;IACrE,MAAM,MAAM,GAAC,IAAI,oBAAoB,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,cAAc,EAAC,EAAE,EAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,WAAW,EAAE,OAAO,GAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC;IACnG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,GAAG,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,EAAE,EAAC,OAAO,EAAE,EAAE,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,GAAG,EAAC,CAAC,EAAC,EAAC,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,GAAG,uBAAuB,CAAC,GAAG,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,EAAE,EAAC,UAAU,EAAE,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,CAAC;AAC5O,CAAC;AACD,IAAI,MAA+B,CAAC;AACpC,MAAM,QAAQ,GAAC,IAAI,CAAC,YAAY,CAAC;AACjC,MAAM,KAAK,GAAC,QAAQ,EAAE,CAAC;AAAA,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC,CAAC;AACjF,MAAM,YAAY,GAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAAA,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC;AAC/F,MAAM,IAAI,GAAC,YAAY,CAAC,IAAI,CAAC;AAAA,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,yFAAyF;AACxF,IAA2C,CAAC,YAAY,GAAC,CAAC,GAAG,IAAc,EAAC,EAAE,GAAC,MAAM,GAAE,QAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,CAAA,CAAC,CAAC;AACvI,IAAI,UAAU,GAAC,CAAC,CAAC;AACjB,IAAI,CAAC;IACJ,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAC,WAAW,EAAC,QAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAC;QAC/D,aAAa,EAAC,KAAK,EAAC,OAAO,EAAA,EAAE,CAAA,CAAC,EAAC,SAAS,EAAC,OAAO,EAAE,SAAS,EAAW,CAAA;QACtE,UAAU,EAAC,OAAO,CAAA,EAAE;YACnB,MAAM,EAAE,GAAE,OAAyC,CAAC,SAAS,CAAC;YAC9D,MAAM,IAAI,GAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,GAAE,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,UAAU,EAAC,IAAI,EAAE,GAAG,EAAC,EAAC,CAAC,EAAC,iBAAiB,EAAC,GAAE,EAAE,CAAA,IAAI,EAAE,OAAO,IAAE,EAAE,EAAC,kBAAkB,EAAC,CAAI,CAAG,EAAC,EAAE,CAAA,CAAC,EAAC,EAAC,EAAC,cAAc,EAAC,OAAO,CAAC,SAAS,CAAC,cAAc,EAAC,MAAM,EAAC,GAAE,EAAE,GAAC,UAAU,EAAE,CAAC,CAAA,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;YACnR,OAAO,IAA0B,CAAC;QACnC,CAAC;KACD,CAAC,CAAC;IACH,MAAM,OAAO,GAAC,MAAO,CAAC,OAAO,EAAE,CAAC;IAAA,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,OAAO,OAAO,KAAG,QAAQ,CAAC,CAAC;IAChF,MAAM,IAAI,GAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAC,CAAC,CAAQ,EAAC,CAAC,GAAC,EAAE,EAAC,EAAE,CAAA,GAAG,IAAI,mCAAmC,CAAC,uBAAuB,CAAC,CAAA,CAAC,CAAA,aAAa,GAAC,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC;IACpH,IAAI,KAAK,GAAC,CAAC,CAAC;IAAC,MAAM,KAAK,GAAC,CAAC,CAAS,EAAC,EAAE,GAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;IAC9D,KAAI,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAC,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAG,UAAU,CAAC,CAAC;QACtG,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,SAAS,KAAG,EAAE,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAG,GAAG,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,OAAO,CAAC,CAAC,CAAC;IACnL,CAAC;IACD,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxE,MAAM,OAAO,GAAC,EAAC,EAAE,EAAC,UAAU,IAAI,EAAE,EAAC,IAAI,EAAC,KAAK,EAAC,EAAC,OAAO,EAAC,aAAa,EAAC,EAAC,CAAC;QACvE,MAAM,MAAM,GAAC,IAAI,KAAG,iBAAiB;YACpC,CAAC,CAAC,0UAA0U;YAC5U,CAAC,CAAC,EAAC,OAAO,EAAC,aAAa,EAAC,cAAc,EAAC,CAAC,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,0BAA0B,EAAC,EAAC,QAAQ,EAAC,EAAC,SAAS,EAAC,yBAAyB,EAAC,EAAC,CAAC;QAC1J,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,uBAAuB,CAAC,OAAO,EAAC,IAAI,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC;QACvG,MAAM,CAAC,GAAC,MAAM,KAAK,CAAC,GAAG,IAAI,+CAA+C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,KAAK,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;QAAA,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAG,aAAa,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,KAAK,GAAC,sBAAsB,CAAC,EAAC,MAAM,EAAC,EAAC,iBAAiB,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,OAAO,EAAC,EAAU,CAAC,CAAC;QACzG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,6FAA6F;IAC7F,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAAA,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;IACzF,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,UAAU,CAAC,CAAC;IAC9G,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAA,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAG,aAAa,CAAC,CAAC;IAAA,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnJ,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC;IACjD,2FAA2F;IAC3F,MAAM,MAAM,GAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAC,UAAU,CAAC,CAAC,CAAC;IAAA,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAA,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IAAA,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5L,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IACjD,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,sBAAsB,EAAC,gBAAgB,EAAC,YAAY,EAAC,EAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IACpH,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IAC5D,KAAK,CAAC,UAAU,KAAG,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,6HAA6H,CAAC,CAAC;AAC7K,CAAC;QAAS,CAAC;IACT,IAA2C,CAAC,YAAY,GAAC,QAAQ,CAAC;IACnE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAAA,MAAM,IAAI,OAAO,CAAO,OAAO,CAAA,EAAE,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAA,CAAC,CAAA,OAAO,EAAE,CAAC,CAAC;IAC7G,yDAAyD;IACzD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/web/smoke-tool-detail-fields-http.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/web/smoke-tool-detail-fields-http.js

@@ -0,0 +1,121 @@
+// Real Node HTTP route + WebRepl detail + real disk storage; no model/network provider.
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { runWebServer, WebRepl } from './index.js';
+import { FileToolResultMemory } from '../session/tool-result-memory.js';
+import { createToolResultMessage } from '../types/messages.js';
+const root = await fs.mkdtemp(path.join(os.tmpdir(), 'obs06-http-'));
+const sessions = new Map();
+for (const id of ['A', 'B']) {
+    const dir = path.join(root, id);
+    await fs.mkdir(dir);
+    const req = { id: 'same-call', name: 'file_read', input: { path: `${id}.txt`, offset: 0, limit: 0, description: 'FULL PURPOSE ' + id } };
+    const memory = new FileToolResultMemory({ sessionDir: dir, thresholdChars: 20 });
+    const output = await memory.processToolResult(req.id, { path: path.join(dir, `${id}.txt`), content: `SESSION_${id}_ONLY` + 'x'.repeat(100) });
+    sessions.set(id, { dir, entries: [{ type: 'message', message: { id: `use-${id}`, role: 'assistant', createdAt: '', blocks: [{ type: 'tool_use', ...req }] } }, { type: 'message', message: { ...createToolResultMessage(req, true, output.output), id: `result-${id}` } }] });
+}
+let server;
+const original = http.createServer;
+const probe = original();
+await new Promise(r => probe.listen(0, "127.0.0.1", r));
+const probeAddress = probe.address();
+assert.ok(probeAddress && typeof probeAddress === "object");
+const port = probeAddress.port;
+await new Promise(r => probe.close(() => r()));
+// Capture the real server solely to close it after running its private production route.
+http.createServer = (...args) => { server = original(...args); return server; };
+let executions = 0;
+try {
+    await runWebServer(['--host', '127.0.0.1', '--port', String(port)], {
+        createRuntime: async (options) => ({ sessionId: options?.sessionId }),
+        createRepl: runtime => {
+            const id = runtime.sessionId;
+            const data = sessions.get(id);
+            const fake = { runtime: { engine: { snapshot: () => ({ session: { sessionId: id, sessionDir: data?.dir } }), getDisplayEntries: () => data?.entries ?? [], redactDisplayValue: (v) => v } }, toolCallDetail: WebRepl.prototype.toolCallDetail, submit: () => { executions++; throw new Error('must not execute'); } };
+            return fake;
+        }
+    });
+    const address = server.address();
+    assert.ok(address && typeof address === 'object');
+    const base = `http://127.0.0.1:${address.port}`;
+    const url = (s, m = '') => `${base}/api/tool-call-detail?sessionId=${s}&toolUseId=same-call${m ? '&messageId=' + m : ''}`;
+    let count = 0;
+    const check = (v) => { assert.ok(v); count++; };
+    for (const id of ['A', 'B']) {
+        const r = await fetch(url(id));
+        check(r.status === 200);
+        check(r.headers.get('cache-control') === 'no-store');
+        const body = await r.json();
+        check(body.sessionId === id);
+        check(body.fields.purpose.value === 'FULL PURPOSE ' + id);
+        check(body.fields.actualPath.copyValue === path.join(sessions.get(id).dir, `${id}.txt`));
+        check(body.fields.keyParameters.find((p) => p.key === 'offset').value === 0);
+        check(body.result.text.includes(`SESSION_${id}_ONLY`));
+        check(!body.result.text.includes(`SESSION_${id === 'A' ? 'B' : 'A'}_ONLY`));
+    }
+    // Exercise real production route classification for non-file contracts and old records.
+    const data = sessions.get('A');
+    const cases = [
+        { name: 'web_search', input: { query: 'q', provider: 'openai', includeDomains: [], startPublishedDate: '2026-01-01' }, output: { provider: 'exa', results: [] } },
+        { name: 'file_edit', input: { path: 'relative', oldString: '', newString: 'line1\nline2', replaceAll: false }, output: { path: path.join(data.dir, 'real.txt') } },
+        { name: 'subagent_message', input: { target: 'worker', message: 'LONG_BODY_'.repeat(3000) }, output: { task_id: 'resolved-task', run_generation: 0 } },
+        { name: 'file_read', input: undefined, output: { truncated: true, path: path.join(data.dir, 'preview.txt') } },
+    ];
+    for (const [i, c] of cases.entries()) {
+        const req = { id: 'fields-' + i, name: c.name, input: c.input };
+        data.entries.push({ type: 'message', message: { id: 'use-fields-' + i, role: 'assistant', createdAt: '', blocks: [{ type: 'tool_use', ...req }] } }, { type: 'message', message: createToolResultMessage(req, true, c.output) });
+        const r = await fetch(`${base}/api/tool-call-detail?sessionId=A&toolUseId=${req.id}`);
+        check(r.status === 200);
+        const d = await r.json();
+        const f = d.fields;
+        if (i === 0) {
+            check(f.actualProvider.value === 'exa');
+            check(f.result.empty);
+            check(f.keyParameters.find((p) => p.key === 'excludeDomains').state === 'unspecified');
+        }
+        if (i === 1) {
+            check(f.actualPath.copyValue === c.output.path);
+            check(f.keyParameters.find((p) => p.key === 'replaceAll').value === false);
+        }
+        if (i === 2) {
+            check(f.object.value === 'resolved-task');
+            check(f.keyParameters.find((p) => p.key === 'message').value === c.input.message);
+        }
+        if (i === 3) {
+            check(f.input.completeness === 'missing');
+            check(f.actualPath.copyValue === undefined);
+            check(f.actualPath.completeness === 'truncated');
+        }
+    }
+    // Windows junction is an actual filesystem symlink/reparse point, no admin privilege needed.
+    const a = sessions.get('A');
+    await fs.rm(path.join(a.dir, 'tool-results'), { recursive: true });
+    await fs.symlink(path.join(sessions.get('B').dir, 'tool-results'), path.join(a.dir, 'tool-results'), 'junction');
+    check((await fs.lstat(path.join(a.dir, 'tool-results'))).isSymbolicLink());
+    const attack = await (await fetch(url('A'))).json();
+    check(attack.result.state === 'unavailable');
+    check(!attack.result.text.includes('SESSION_B_ONLY'));
+    await fs.unlink(path.join(a.dir, 'tool-results'));
+    // Same caller-selected session cannot request the other session's result-message identity.
+    const denied = await fetch(url('A', 'result-B'));
+    console.log('Actual cross-session status:', denied.status);
+    check(denied.status === 404);
+    check(!(await denied.text()).includes('SESSION_B_ONLY'));
+    check((await fetch(url('absent'))).status === 404);
+    check((await fetch(url('A'), { headers: { Origin: 'https://evil.invalid', 'Sec-Fetch-Site': 'cross-site' } })).status === 403);
+    check((await fetch(url('A'), { method: 'POST' })).status === 404);
+    check(executions === 0);
+    console.log(`OBS-06 real HTTP fields passed: ${count} assertions; GET read-only, 403/404, two runtime session roots, cross-session message refusal, real junction escape refused`);
+}
+finally {
+    http.createServer = original;
+    server?.closeAllConnections();
+    await new Promise(resolve => server ? server.close(() => resolve()) : resolve());
+    // Never recursively follow the test junction on failure.
+    await fs.unlink(path.join(root, 'A', 'tool-results')).catch(() => { });
+    await fs.rm(root, { recursive: true, force: true });
+}
+//# sourceMappingURL=smoke-tool-detail-fields-http.js.map

package/dist/web/smoke-tool-detail-fields-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-tool-detail-fields-http.js","sourceRoot":"","sources":["../../src/web/smoke-tool-detail-fields-http.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAgB,MAAM,sBAAsB,CAAC;AAC7E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAC,aAAa,CAAC,CAAC,CAAC;AACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgE,CAAC;AACzF,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAC,EAAC,EAAE,EAAC,WAAW,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,GAAG,EAAE,MAAM,EAAC,MAAM,EAAC,CAAC,EAAC,KAAK,EAAC,CAAC,EAAC,WAAW,EAAC,eAAe,GAAC,EAAE,EAAC,EAAC,CAAC;IACrH,MAAM,MAAM,GAAC,IAAI,oBAAoB,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,cAAc,EAAC,EAAE,EAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,GAAG,EAAE,MAAM,CAAC,EAAC,OAAO,EAAC,WAAW,EAAE,OAAO,GAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC;IACnI,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,GAAG,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,EAAE,EAAC,OAAO,EAAE,EAAE,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,GAAG,EAAC,CAAC,EAAC,EAAC,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,GAAG,uBAAuB,CAAC,GAAG,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,EAAE,EAAC,UAAU,EAAE,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,CAAC;AAC5O,CAAC;AACD,IAAI,MAA+B,CAAC;AACpC,MAAM,QAAQ,GAAC,IAAI,CAAC,YAAY,CAAC;AACjC,MAAM,KAAK,GAAC,QAAQ,EAAE,CAAC;AAAA,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC,CAAC;AACjF,MAAM,YAAY,GAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAAA,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC;AAC/F,MAAM,IAAI,GAAC,YAAY,CAAC,IAAI,CAAC;AAAA,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,yFAAyF;AACxF,IAA2C,CAAC,YAAY,GAAC,CAAC,GAAG,IAAc,EAAC,EAAE,GAAC,MAAM,GAAE,QAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,CAAA,CAAC,CAAC;AACvI,IAAI,UAAU,GAAC,CAAC,CAAC;AACjB,IAAI,CAAC;IACJ,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAC,WAAW,EAAC,QAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAC;QAC/D,aAAa,EAAC,KAAK,EAAC,OAAO,EAAA,EAAE,CAAA,CAAC,EAAC,SAAS,EAAC,OAAO,EAAE,SAAS,EAAW,CAAA;QACtE,UAAU,EAAC,OAAO,CAAA,EAAE;YACnB,MAAM,EAAE,GAAE,OAAyC,CAAC,SAAS,CAAC;YAC9D,MAAM,IAAI,GAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,GAAE,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,UAAU,EAAC,IAAI,EAAE,GAAG,EAAC,EAAC,CAAC,EAAC,iBAAiB,EAAC,GAAE,EAAE,CAAA,IAAI,EAAE,OAAO,IAAE,EAAE,EAAC,kBAAkB,EAAC,CAAI,CAAG,EAAC,EAAE,CAAA,CAAC,EAAC,EAAC,EAAC,cAAc,EAAC,OAAO,CAAC,SAAS,CAAC,cAAc,EAAC,MAAM,EAAC,GAAE,EAAE,GAAC,UAAU,EAAE,CAAC,CAAA,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;YACnR,OAAO,IAA0B,CAAC;QACnC,CAAC;KACD,CAAC,CAAC;IACH,MAAM,OAAO,GAAC,MAAO,CAAC,OAAO,EAAE,CAAC;IAAA,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,OAAO,OAAO,KAAG,QAAQ,CAAC,CAAC;IAChF,MAAM,IAAI,GAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAC,CAAC,CAAQ,EAAC,CAAC,GAAC,EAAE,EAAC,EAAE,CAAA,GAAG,IAAI,mCAAmC,CAAC,uBAAuB,CAAC,CAAA,CAAC,CAAA,aAAa,GAAC,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC;IACpH,IAAI,KAAK,GAAC,CAAC,CAAC;IAAC,MAAM,KAAK,GAAC,CAAC,CAAS,EAAC,EAAE,GAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;IAC9D,KAAI,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAC,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAG,UAAU,CAAC,CAAC;QACtG,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,SAAS,KAAG,EAAE,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAG,eAAe,GAAC,EAAE,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,KAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,GAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAK,EAAC,EAAE,CAAA,CAAC,CAAC,GAAG,KAAG,QAAQ,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAG,GAAG,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,OAAO,CAAC,CAAC,CAAC;IAC3Y,CAAC;IACD,wFAAwF;IACxF,MAAM,IAAI,GAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAC9B,MAAM,KAAK,GAAC;QACX,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,EAAC,KAAK,EAAC,GAAG,EAAC,QAAQ,EAAC,QAAQ,EAAC,cAAc,EAAC,EAAE,EAAC,kBAAkB,EAAC,YAAY,EAAC,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,OAAO,EAAC,EAAE,EAAC,EAAC;QAC5I,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,EAAE,EAAC,SAAS,EAAC,cAAc,EAAC,UAAU,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,UAAU,CAAC,EAAC,EAAC;QAC9I,EAAC,IAAI,EAAC,kBAAkB,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,eAAe,EAAC,cAAc,EAAC,CAAC,EAAC,EAAC;QACrI,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,SAAS,EAAC,MAAM,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,EAAC,EAAC;KACjG,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAC,EAAC,EAAE,EAAC,SAAS,GAAC,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,EAAC,EAAE,EAAC,aAAa,GAAC,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,GAAG,EAAC,CAAC,EAAC,EAAC,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,uBAAuB,CAAC,GAAG,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;QACrM,MAAM,CAAC,GAAC,MAAM,KAAK,CAAC,GAAG,IAAI,+CAA+C,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAAA,KAAK,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;QAC1G,MAAM,CAAC,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAAA,MAAM,CAAC,GAAC,CAAC,CAAC,MAAM,CAAC;QACxC,IAAG,CAAC,KAAG,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,KAAG,KAAK,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAK,EAAC,EAAE,CAAA,CAAC,CAAC,GAAG,KAAG,gBAAgB,CAAC,CAAC,KAAK,KAAG,aAAa,CAAC,CAAC;QAAA,CAAC;QAC5J,IAAG,CAAC,KAAG,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,KAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAK,EAAC,EAAE,CAAA,CAAC,CAAC,GAAG,KAAG,YAAY,CAAC,CAAC,KAAK,KAAG,KAAK,CAAC,CAAC;QAAA,CAAC;QAClI,IAAG,CAAC,KAAG,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAG,eAAe,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAK,EAAC,EAAE,CAAA,CAAC,CAAC,GAAG,KAAG,SAAS,CAAC,CAAC,KAAK,KAAG,CAAC,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QACpI,IAAG,CAAC,KAAG,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,KAAG,SAAS,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,KAAG,SAAS,CAAC,CAAC;YAAA,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,KAAG,WAAW,CAAC,CAAC;QAAA,CAAC;IAC7I,CAAC;IACD,6FAA6F;IAC7F,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAAA,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;IACzF,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,EAAC,UAAU,CAAC,CAAC;IAC9G,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAA,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAG,aAAa,CAAC,CAAC;IAAA,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnJ,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC;IACjD,2FAA2F;IAC3F,MAAM,MAAM,GAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAC,UAAU,CAAC,CAAC,CAAC;IAAA,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAA,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IAAA,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5L,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IACjD,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,sBAAsB,EAAC,gBAAgB,EAAC,YAAY,EAAC,EAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IACpH,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,MAAM,KAAG,GAAG,CAAC,CAAC;IAC5D,KAAK,CAAC,UAAU,KAAG,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,6HAA6H,CAAC,CAAC;AACpL,CAAC;QAAS,CAAC;IACT,IAA2C,CAAC,YAAY,GAAC,QAAQ,CAAC;IACnE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAAA,MAAM,IAAI,OAAO,CAAO,OAAO,CAAA,EAAE,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAA,CAAC,CAAA,OAAO,EAAE,CAAC,CAAC;IAC7G,yDAAyD;IACzD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,GAAG,EAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;AAC/C,CAAC"}