patchwork-os 0.2.0-alpha.0

package/dist/tools/httpClient.js

@@ -0,0 +1,486 @@
+import dns from "node:dns/promises";
+import fs from "node:fs/promises";
+import { error, optionalBool, optionalInt, optionalString, requireString, resolveFilePath, successStructured, truncateOutput, } from "./utils.js";
+const ALLOWED_METHODS = new Set([
+    "GET",
+    "POST",
+    "PUT",
+    "PATCH",
+    "DELETE",
+    "HEAD",
+    "OPTIONS",
+]);
+const DEFAULT_RESPONSE_BYTES = 50 * 1024; // 50 KB
+const MAX_RESPONSE_BYTES = 1024 * 1024; // 1 MB hard cap
+/**
+ * Block requests to private/loopback addresses to prevent SSRF.
+ * Checks hostname patterns only — DNS resolution happens separately in the
+ * handler via dns.lookup() so that hostnames that resolve to private IPs are
+ * also blocked.
+ */
+function isPrivateHost(hostname) {
+    // Strip IPv6 brackets: [::1] → ::1
+    const host = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1).toLowerCase()
+        : hostname.toLowerCase();
+    if (host === "localhost" || host.endsWith(".localhost"))
+        return true;
+    if (host === "0.0.0.0")
+        return true;
+    // Reject non-decimal IPv4 notations that bypass the dotted-quad regex below:
+    //   hex:   0x7f000001  → 127.0.0.1
+    //   octal: 0177.0.0.1  → 127.0.0.1
+    // Node's URL parser may normalize these on some platforms; block unconditionally.
+    if (/^0x[0-9a-f]+$/i.test(host) || /^0[0-7]{7,}$/.test(host))
+        return true;
+    // IPv4 range checks
+    const ipv4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4) {
+        const a = Number(ipv4[1]);
+        const b = Number(ipv4[2]);
+        if (a === 127)
+            return true; // 127.0.0.0/8  loopback
+        if (a === 10)
+            return true; // 10.0.0.0/8   RFC 1918 private
+        if (a === 172 && b >= 16 && b <= 31)
+            return true; // 172.16.0.0/12 RFC 1918 private
+        if (a === 192 && b === 168)
+            return true; // 192.168.0.0/16 RFC 1918 private
+        if (a === 169 && b === 254)
+            return true; // 169.254.0.0/16 link-local / AWS metadata endpoint
+        if (a === 100 && b >= 64 && b <= 127)
+            return true; // 100.64.0.0/10 CGNAT (RFC 6598)
+        if (a === 0)
+            return true; // 0.0.0.0/8
+    }
+    // IPv6 checks
+    if (host === "::1")
+        return true; // loopback
+    if (host.startsWith("fe80:"))
+        return true; // link-local
+    if (host.startsWith("fc") || host.startsWith("fd"))
+        return true; // ULA (RFC 4193)
+    // IPv6-mapped IPv4 addresses (::ffff:x.x.x.x) bypass the IPv4 block above
+    // on dual-stack systems — recurse on the embedded IPv4 part.
+    if (host.startsWith("::ffff:"))
+        return isPrivateHost(host.slice(7));
+    // RFC 2765 SIIT alternate mapped form (::ffff:0:x.x.x.x)
+    if (host.startsWith("::ffff:0:"))
+        return isPrivateHost(host.slice(9));
+    return false;
+}
+export function createSendHttpRequestTool(options) {
+    const allowPrivateHttp = options?.allowPrivateHttp ?? false;
+    return {
+        schema: {
+            name: "sendHttpRequest",
+            description: "HTTP/HTTPS request → status, headers, body. Body truncated at maxResponseBytes (default 50 KB).",
+            annotations: { openWorldHint: true },
+            inputSchema: {
+                $schema: "http://json-schema.org/draft-07/schema#",
+                type: "object",
+                additionalProperties: false,
+                required: ["method", "url"],
+                properties: {
+                    method: {
+                        type: "string",
+                        enum: ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"],
+                        description: "HTTP method",
+                    },
+                    url: {
+                        type: "string",
+                        description: "Full URL (http:// or https://)",
+                    },
+                    headers: {
+                        type: "object",
+                        additionalProperties: { type: "string" },
+                        description: "Optional request headers as key/value pairs",
+                    },
+                    body: {
+                        type: "string",
+                        description: "Request body. JSON: pass serialized string + Content-Type: application/json. Ignored for GET/HEAD.",
+                    },
+                    timeoutMs: {
+                        type: "integer",
+                        description: "Timeout in ms (default: 30000, max: 120000)",
+                    },
+                    maxResponseBytes: {
+                        type: "integer",
+                        description: `Body cap in bytes (default: ${DEFAULT_RESPONSE_BYTES}, max: ${MAX_RESPONSE_BYTES}).`,
+                    },
+                    followRedirects: {
+                        type: "boolean",
+                        description: "Follow HTTP redirects (max 10 hops, default: true)",
+                    },
+                },
+            },
+            outputSchema: {
+                type: "object",
+                properties: {
+                    status: { type: "integer" },
+                    statusText: { type: "string" },
+                    headers: { type: "object" },
+                    body: { type: "string" },
+                    durationMs: { type: "integer" },
+                    redirects: { type: "integer" },
+                    truncated: { type: "boolean" },
+                    fullBytes: { type: "integer" },
+                },
+                required: ["status", "body", "durationMs"],
+            },
+        },
+        timeoutMs: 30_000,
+        async handler(args, signal) {
+            const method = requireString(args, "method", 16).toUpperCase();
+            if (!ALLOWED_METHODS.has(method)) {
+                return error(`Unsupported method "${method}". Allowed: ${[...ALLOWED_METHODS].join(", ")}`);
+            }
+            const urlStr = requireString(args, "url", 4096);
+            let parsedUrl;
+            try {
+                parsedUrl = new URL(urlStr);
+            }
+            catch {
+                return error(`Invalid URL: "${urlStr}"`);
+            }
+            if (!["http:", "https:"].includes(parsedUrl.protocol)) {
+                return error(`URL must use http:// or https://, got "${parsedUrl.protocol}"`);
+            }
+            if (!allowPrivateHttp && isPrivateHost(parsedUrl.hostname)) {
+                return error(`Requests to private/loopback addresses are not allowed ("${parsedUrl.hostname}"). Only public hosts are permitted. Use --allow-private-http to enable.`);
+            }
+            // DNS pre-resolution SSRF guard: resolve the hostname and re-check the
+            // resulting IP against the private-range blocklist. This catches hostnames
+            // like "internal.corp.example.com" that resolve to RFC-1918 addresses and
+            // would bypass the purely-lexical isPrivateHost check above.
+            //
+            // After validation, we pin the connection to the resolved IP by rewriting
+            // the request URL's hostname. This closes the TOCTOU window between
+            // dns.lookup() and the actual fetch — without pinning, an attacker can
+            // serve a public IP on the first DNS response and a private IP on the
+            // second. We preserve the original hostname in a Host header so virtual
+            // hosting and SNI still work. DNS failures fall through to fetch naturally.
+            let resolvedIp = null;
+            try {
+                const { address } = await dns.lookup(parsedUrl.hostname);
+                if (!allowPrivateHttp && isPrivateHost(address)) {
+                    return error(`Hostname "${parsedUrl.hostname}" resolves to a private address (${address}) — request blocked`);
+                }
+                resolvedIp = address;
+            }
+            catch {
+                // DNS lookup failed — let fetch report the error with its own message
+            }
+            // Build the initial URL: if we successfully resolved an IP, use it as the
+            // hostname so Node's fetch does not re-resolve (closes the TOCTOU window).
+            // IPv6 addresses require bracket wrapping in URLs.
+            let initialUrl = urlStr;
+            if (resolvedIp !== null) {
+                const pinnedUrl = new URL(urlStr);
+                pinnedUrl.hostname = resolvedIp.includes(":")
+                    ? `[${resolvedIp}]`
+                    : resolvedIp;
+                initialUrl = pinnedUrl.toString();
+            }
+            // Validate and collect headers
+            const rawHeaders = args.headers;
+            const headers = {};
+            if (rawHeaders != null) {
+                if (typeof rawHeaders !== "object" || Array.isArray(rawHeaders)) {
+                    return error("headers must be a plain object of string values");
+                }
+                for (const [k, v] of Object.entries(rawHeaders)) {
+                    if (typeof v !== "string") {
+                        return error(`Header value for "${k}" must be a string`);
+                    }
+                    // Block CRLF and null bytes — header injection prevention
+                    if (/[\r\n\x00]/.test(k) || /[\r\n\x00]/.test(v)) {
+                        return error(`Header "${k}" contains invalid characters (CR, LF, or null byte)`);
+                    }
+                    // Normalize header key to lowercase so user-supplied "Host" and "host"
+                    // are treated as the same key and our override below reliably overwrites it.
+                    headers[k.toLowerCase()] = v;
+                }
+            }
+            // Override host AFTER user headers so a caller-supplied host cannot
+            // bypass IP-pinning SSRF protection. Virtual hosting / SNI still works
+            // because we use the original hostname (before IP substitution).
+            // Written as lowercase "host" to match the normalized user headers above.
+            if (resolvedIp !== null) {
+                headers.host = parsedUrl.hostname;
+            }
+            const body = optionalString(args, "body", 1024 * 1024);
+            const timeoutMs = Math.min(optionalInt(args, "timeoutMs", 1, 120_000) ?? 30_000, 120_000);
+            const maxBytes = Math.min(optionalInt(args, "maxResponseBytes", 1, MAX_RESPONSE_BYTES) ??
+                DEFAULT_RESPONSE_BYTES, MAX_RESPONSE_BYTES);
+            const followRedirects = optionalBool(args, "followRedirects") ?? true;
+            const MAX_REDIRECTS = 10;
+            // Compose AbortSignal: merge caller signal with our own timeout.
+            // Capture the forwarder so we can remove it once the request settles —
+            // without cleanup the listener would accumulate on long-lived signals.
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+            let abortForwarder;
+            if (signal) {
+                abortForwarder = () => controller.abort(signal.reason);
+                signal.addEventListener("abort", abortForwarder, { once: true });
+            }
+            const cleanup = () => {
+                clearTimeout(timeoutId);
+                if (abortForwarder !== undefined)
+                    signal?.removeEventListener("abort", abortForwarder);
+            };
+            const requestBody = body !== undefined && method !== "GET" && method !== "HEAD"
+                ? body
+                : undefined;
+            const start = Date.now();
+            try {
+                let currentUrl = initialUrl;
+                let redirectCount = 0;
+                let resp;
+                // Manual redirect loop so we can cap hops and re-validate each location
+                while (true) {
+                    resp = await fetch(currentUrl, {
+                        method,
+                        headers,
+                        body: requestBody,
+                        signal: controller.signal,
+                        redirect: "manual", // always manual — we control the loop
+                    });
+                    const isRedirect = resp.status >= 300 && resp.status < 400;
+                    if (!followRedirects || !isRedirect)
+                        break;
+                    const location = resp.headers.get("location");
+                    if (!location)
+                        break;
+                    if (redirectCount >= MAX_REDIRECTS) {
+                        cleanup();
+                        return error(`Too many redirects (>${MAX_REDIRECTS})`);
+                    }
+                    // Resolve relative redirect URL and re-validate it
+                    let nextUrl;
+                    try {
+                        nextUrl = new URL(location, currentUrl);
+                    }
+                    catch {
+                        cleanup();
+                        return error(`Invalid redirect location: "${location}"`);
+                    }
+                    if (!["http:", "https:"].includes(nextUrl.protocol)) {
+                        cleanup();
+                        return error(`Redirect to non-http(s) protocol blocked: "${nextUrl.protocol}"`);
+                    }
+                    if (!allowPrivateHttp && isPrivateHost(nextUrl.hostname)) {
+                        cleanup();
+                        return error(`Redirect to private/loopback address blocked ("${nextUrl.hostname}")`);
+                    }
+                    // Pin the redirect hop to its resolved IP to close the TOCTOU window.
+                    // DNS failures fall through — fetch will report the error naturally.
+                    try {
+                        const { address: redirectIp } = await dns.lookup(nextUrl.hostname);
+                        if (!allowPrivateHttp && isPrivateHost(redirectIp)) {
+                            cleanup();
+                            return error(`Redirect hostname "${nextUrl.hostname}" resolves to a private address (${redirectIp}) — blocked`);
+                        }
+                        // Mutate nextUrl in-place to pin to the resolved IP
+                        nextUrl.hostname = redirectIp.includes(":")
+                            ? `[${redirectIp}]`
+                            : redirectIp;
+                        // Preserve original Host for virtual hosting / SNI
+                        // Use lowercase "host" to stay consistent with the normalized headers above.
+                        headers.host = new URL(location, currentUrl).hostname;
+                    }
+                    catch {
+                        // DNS failed — use un-pinned URL; fetch will fail naturally
+                    }
+                    currentUrl = nextUrl.toString();
+                    redirectCount++;
+                }
+                cleanup();
+                // Collect response headers
+                const respHeaders = {};
+                resp.headers.forEach((v, k) => {
+                    respHeaders[k] = v;
+                });
+                // Check Content-Length before reading to avoid loading a known-huge body into memory
+                const contentLengthHeader = resp.headers.get("content-length");
+                if (contentLengthHeader !== null) {
+                    const declaredLength = Number(contentLengthHeader);
+                    if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+                        return error(`Response Content-Length (${declaredLength} bytes) exceeds maxResponseBytes (${maxBytes} bytes). Increase maxResponseBytes or use a different approach to fetch this resource.`);
+                    }
+                }
+                // Read body with size cap enforced during streaming so a chunked response
+                // with no Content-Length cannot exhaust the bridge process heap.
+                const reader = resp.body?.getReader();
+                const chunks = [];
+                let totalBytes = 0;
+                let streamTruncated = false;
+                if (reader) {
+                    try {
+                        while (true) {
+                            const { done, value } = await reader.read();
+                            if (done || value === undefined)
+                                break;
+                            if (totalBytes + value.byteLength > maxBytes) {
+                                chunks.push(value.slice(0, maxBytes - totalBytes));
+                                totalBytes = maxBytes;
+                                streamTruncated = true;
+                                await reader.cancel();
+                                break;
+                            }
+                            chunks.push(value);
+                            totalBytes += value.byteLength;
+                        }
+                    }
+                    finally {
+                        reader.releaseLock();
+                    }
+                }
+                const fullBytes = totalBytes;
+                const rawBody = Buffer.concat(chunks.map((c) => Buffer.from(c))).toString("utf-8");
+                const { text: responseBody, truncated } = streamTruncated
+                    ? { text: rawBody, truncated: true }
+                    : truncateOutput(rawBody, maxBytes);
+                return successStructured({
+                    status: resp.status,
+                    statusText: resp.statusText,
+                    headers: respHeaders,
+                    body: responseBody,
+                    durationMs: Date.now() - start,
+                    ...(redirectCount > 0 ? { redirects: redirectCount } : {}),
+                    ...(truncated ? { truncated: true, fullBytes } : {}),
+                });
+            }
+            catch (err) {
+                cleanup();
+                if (err instanceof Error &&
+                    (err.name === "AbortError" || err.name === "TimeoutError")) {
+                    return error(`Request timed out after ${timeoutMs}ms`);
+                }
+                const msg = err instanceof Error ? err.message : String(err);
+                return error(`Request failed: ${msg}`);
+            }
+        },
+    };
+}
+const REQUEST_LINE_RE = /^(GET|POST|PUT|PATCH|DELETE|HEAD|OPTIONS)\s+(\S+)/i;
+function parseHttpFileContent(content) {
+    const requests = [];
+    // Split on "###" separators (with optional trailing label on same line)
+    const sections = content.split(/^###[^\S\r\n]*/m);
+    for (const section of sections) {
+        const lines = section.split(/\r?\n/);
+        let i = 0;
+        // Skip leading blank lines
+        while (i < lines.length && !lines[i]?.trim())
+            i++;
+        if (i >= lines.length)
+            continue;
+        // If the first non-blank line is NOT a request line, treat it as the request name
+        let name;
+        const candidate = lines[i]?.trim();
+        if (candidate && !REQUEST_LINE_RE.test(candidate)) {
+            name = candidate;
+            i++;
+            // Skip blank lines between name and request line
+            while (i < lines.length && !lines[i]?.trim())
+                i++;
+        }
+        const requestLine = (lines[i] ?? "").trim();
+        const match = REQUEST_LINE_RE.exec(requestLine);
+        if (!match)
+            continue; // Section has no valid request line
+        const method = (match[1] ?? "").toUpperCase();
+        const url = match[2] ?? "";
+        i++;
+        // Parse headers: non-blank lines immediately following the request line
+        // Credential headers are redacted to prevent token leakage into MCP responses
+        // and the activity log.
+        const CREDENTIAL_HEADERS = new Set([
+            "authorization",
+            "x-api-key",
+            "x-auth-token",
+            "cookie",
+            "set-cookie",
+            "proxy-authorization",
+            "x-amz-security-token",
+            "x-goog-api-key",
+        ]);
+        const headers = {};
+        while (i < lines.length) {
+            const line = (lines[i] ?? "").trim();
+            if (!line)
+                break; // blank line separates headers from body
+            const colonIdx = line.indexOf(":");
+            if (colonIdx === -1)
+                break; // not a header line
+            const headerName = line.slice(0, colonIdx).trim();
+            const headerValue = line.slice(colonIdx + 1).trim();
+            headers[headerName] = CREDENTIAL_HEADERS.has(headerName.toLowerCase())
+                ? "[REDACTED]"
+                : headerValue;
+            i++;
+        }
+        // Skip the blank separator line
+        i++;
+        // Everything remaining is the body
+        const bodyLines = [];
+        while (i < lines.length) {
+            bodyLines.push(lines[i] ?? "");
+            i++;
+        }
+        const body = bodyLines.join("\n").trim() || undefined;
+        requests.push({
+            ...(name ? { name } : {}),
+            method,
+            url,
+            headers,
+            ...(body ? { body } : {}),
+        });
+    }
+    return requests;
+}
+export function createParseHttpFileTool(workspace) {
+    return {
+        schema: {
+            name: "parseHttpFile",
+            description: "Parse VS Code REST Client file (.http/.rest). Returns method, URL, headers, body per request.",
+            annotations: { readOnlyHint: true },
+            inputSchema: {
+                $schema: "http://json-schema.org/draft-07/schema#",
+                type: "object",
+                additionalProperties: false,
+                required: ["filePath"],
+                properties: {
+                    filePath: {
+                        type: "string",
+                        description: "Path to the .http or .rest file within the workspace",
+                    },
+                },
+            },
+            outputSchema: {
+                type: "object",
+                properties: {
+                    requests: { type: "array" },
+                    count: { type: "integer" },
+                },
+                required: ["requests", "count"],
+            },
+        },
+        async handler(args) {
+            const rawPath = requireString(args, "filePath");
+            const filePath = resolveFilePath(rawPath, workspace);
+            let content;
+            try {
+                content = await fs.readFile(filePath, "utf-8");
+            }
+            catch {
+                return error(`Cannot read file: ${rawPath}`);
+            }
+            const requests = parseHttpFileContent(content);
+            return successStructured({ requests, count: requests.length });
+        },
+    };
+}
+//# sourceMappingURL=httpClient.js.map

package/dist/tools/httpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.js","sourceRoot":"","sources":["../../src/tools/httpClient.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,mBAAmB,CAAC;AACpC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EACL,KAAK,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gBAAgB;AAExD;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB;IACrC,mCAAmC;IACnC,MAAM,IAAI,GACR,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE7B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpC,6EAA6E;IAC7E,mCAAmC;IACnC,mCAAmC;IACnC,kFAAkF;IAClF,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1E,oBAAoB;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACxE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;QACpD,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;QACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;QAC3E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,oDAAoD;QAC7F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;QACpF,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,YAAY;IACxC,CAAC;IAED,cAAc;IACd,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,WAAW;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAClF,0EAA0E;IAC1E,6DAA6D;IAC7D,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,yDAAyD;IACzD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAEzC;IACC,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC;IAC5D,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,iGAAiG;YACnG,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;YACpC,WAAW,EAAE;gBACX,OAAO,EAAE,yCAAyC;gBAClD,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAC3B,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC;wBAClE,WAAW,EAAE,aAAa;qBAC3B;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,gCAAgC;qBAC9C;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,WAAW,EAAE,6CAA6C;qBAC3D;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,oGAAoG;qBACvG;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,6CAA6C;qBAC3D;oBACD,gBAAgB,EAAE;wBAChB,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,+BAA+B,sBAAsB,UAAU,kBAAkB,IAAI;qBACnG;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,oDAAoD;qBAClE;iBACF;aACF;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC9B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC9B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC/B;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC;aAC3C;SACF;QAED,SAAS,EAAE,MAAM;QAEjB,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,MAAoB;YAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CACV,uBAAuB,MAAM,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,iBAAiB,MAAM,GAAG,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtD,OAAO,KAAK,CACV,0CAA0C,SAAS,CAAC,QAAQ,GAAG,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,OAAO,KAAK,CACV,4DAA4D,SAAS,CAAC,QAAQ,0EAA0E,CACzJ,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,2EAA2E;YAC3E,0EAA0E;YAC1E,6DAA6D;YAC7D,EAAE;YACF,0EAA0E;YAC1E,oEAAoE;YACpE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,4EAA4E;YAC5E,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACzD,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChD,OAAO,KAAK,CACV,aAAa,SAAS,CAAC,QAAQ,oCAAoC,OAAO,qBAAqB,CAChG,CAAC;gBACJ,CAAC;gBACD,UAAU,GAAG,OAAO,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;YAED,0EAA0E;YAC1E,2EAA2E;YAC3E,mDAAmD;YACnD,IAAI,UAAU,GAAG,MAAM,CAAC;YACxB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAC3C,CAAC,CAAC,IAAI,UAAU,GAAG;oBACnB,CAAC,CAAC,UAAU,CAAC;gBACf,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;YACpC,CAAC;YAED,+BAA+B;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;YAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChE,OAAO,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBAClE,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CACjC,UAAqC,CACtC,EAAE,CAAC;oBACF,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,KAAK,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;oBAC3D,CAAC;oBACD,0DAA0D;oBAC1D,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,OAAO,KAAK,CACV,WAAW,CAAC,sDAAsD,CACnE,CAAC;oBACJ,CAAC;oBACD,uEAAuE;oBACvE,6EAA6E;oBAC7E,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,0EAA0E;YAC1E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC;YACpC,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,CAAC,IAAI,MAAM,EACpD,OAAO,CACR,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,kBAAkB,CAAC;gBAC1D,sBAAsB,EACxB,kBAAkB,CACnB,CAAC;YACF,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,IAAI,CAAC;YACtE,MAAM,aAAa,GAAG,EAAE,CAAC;YAEzB,iEAAiE;YACjE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,cAAwC,CAAC;YAC7C,IAAI,MAAM,EAAE,CAAC;gBACX,cAAc,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,IAAI,cAAc,KAAK,SAAS;oBAC9B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACzD,CAAC,CAAC;YAEF,MAAM,WAAW,GACf,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;gBACzD,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,SAAS,CAAC;YAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,UAAU,GAAG,UAAU,CAAC;gBAC5B,IAAI,aAAa,GAAG,CAAC,CAAC;gBACtB,IAAI,IAAc,CAAC;gBAEnB,wEAAwE;gBACxE,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;wBAC7B,MAAM;wBACN,OAAO;wBACP,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,QAAQ,EAAE,QAAQ,EAAE,sCAAsC;qBAC3D,CAAC,CAAC;oBAEH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;oBAC3D,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU;wBAAE,MAAM;oBAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC9C,IAAI,CAAC,QAAQ;wBAAE,MAAM;oBAErB,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;wBACnC,OAAO,EAAE,CAAC;wBACV,OAAO,KAAK,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC;oBACzD,CAAC;oBAED,mDAAmD;oBACnD,IAAI,OAAY,CAAC;oBACjB,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;oBAC1C,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,EAAE,CAAC;wBACV,OAAO,KAAK,CAAC,+BAA+B,QAAQ,GAAG,CAAC,CAAC;oBAC3D,CAAC;oBACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACpD,OAAO,EAAE,CAAC;wBACV,OAAO,KAAK,CACV,8CAA8C,OAAO,CAAC,QAAQ,GAAG,CAClE,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzD,OAAO,EAAE,CAAC;wBACV,OAAO,KAAK,CACV,kDAAkD,OAAO,CAAC,QAAQ,IAAI,CACvE,CAAC;oBACJ,CAAC;oBAED,sEAAsE;oBACtE,qEAAqE;oBACrE,IAAI,CAAC;wBACH,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;wBACnE,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;4BACnD,OAAO,EAAE,CAAC;4BACV,OAAO,KAAK,CACV,sBAAsB,OAAO,CAAC,QAAQ,oCAAoC,UAAU,aAAa,CAClG,CAAC;wBACJ,CAAC;wBACD,oDAAoD;wBACpD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;4BACzC,CAAC,CAAC,IAAI,UAAU,GAAG;4BACnB,CAAC,CAAC,UAAU,CAAC;wBACf,mDAAmD;wBACnD,6EAA6E;wBAC7E,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,4DAA4D;oBAC9D,CAAC;oBAED,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAChC,aAAa,EAAE,CAAC;gBAClB,CAAC;gBAED,OAAO,EAAE,CAAC;gBAEV,2BAA2B;gBAC3B,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBAC5B,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,qFAAqF;gBACrF,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC/D,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;oBACjC,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBACnD,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;wBACjE,OAAO,KAAK,CACV,4BAA4B,cAAc,qCAAqC,QAAQ,wFAAwF,CAChL,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAiB,EAAE,CAAC;gBAChC,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,IAAI,eAAe,GAAG,KAAK,CAAC;gBAC5B,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,OAAO,IAAI,EAAE,CAAC;4BACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,IAAI,IAAI,KAAK,KAAK,SAAS;gCAAE,MAAM;4BACvC,IAAI,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;gCAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;gCACnD,UAAU,GAAG,QAAQ,CAAC;gCACtB,eAAe,GAAG,IAAI,CAAC;gCACvB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gCACtB,MAAM;4BACR,CAAC;4BACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACnB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;wBACjC,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,UAAU,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAClC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpB,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,eAAe;oBACvD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;oBACpC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAEtC,OAAO,iBAAiB,CAAC;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,IACE,GAAG,YAAY,KAAK;oBACpB,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,EAC1D,CAAC;oBACD,OAAO,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAcD,MAAM,eAAe,GAAG,oDAAoD,CAAC;AAE7E,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,wEAAwE;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEV,2BAA2B;QAC3B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YAAE,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS;QAEhC,kFAAkF;QAClF,IAAI,IAAwB,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,SAAS,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,iDAAiD;YACjD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBAAE,CAAC,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,oCAAoC;QAE1D,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC,EAAE,CAAC;QAEJ,wEAAwE;QACxE,8EAA8E;QAC9E,wBAAwB;QACxB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;YACjC,eAAe;YACf,WAAW;YACX,cAAc;YACd,QAAQ;YACR,YAAY;YACZ,qBAAqB;YACrB,sBAAsB;YACtB,gBAAgB;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,MAAM,CAAC,yCAAyC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,oBAAoB;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,UAAU,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACpE,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,WAAW,CAAC;YAChB,CAAC,EAAE,CAAC;QACN,CAAC;QAED,gCAAgC;QAChC,CAAC,EAAE,CAAC;QAEJ,mCAAmC;QACnC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC,EAAE,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAEtD,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM;YACN,GAAG;YACH,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,+FAA+F;YACjG,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;YACnC,WAAW,EAAE;gBACX,OAAO,EAAE,yCAAyC;gBAClD,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,UAAU,EAAE;oBACV,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,sDAAsD;qBACpE;iBACF;aACF;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC3B;gBACD,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;aAChC;SACF;QAED,KAAK,CAAC,OAAO,CAAC,IAA6B;YACzC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAErD,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,49 @@
+import type { ActivityLog } from "../activityLog.js";
+import type { AutomationHooks } from "../automation.js";
+import type { ClaudeOrchestrator } from "../claudeOrchestrator.js";
+import type { Config } from "../config.js";
+import type { ExtensionClient } from "../extensionClient.js";
+import type { FileLock } from "../fileLock.js";
+import type { LoadedPluginTool } from "../pluginLoader.js";
+import type { ProbeResults } from "../probe.js";
+import type { McpTransport } from "../transport.js";
+import { type DisconnectInfo } from "./bridgeStatus.js";
+/**
+ * The IDE-exclusive tools registered in slim mode (opt-in via `--slim`).
+ *
+ * Full mode is the default (enabled since v2.43.0). Slim mode exposes only
+ * tools that require a live IDE extension — tools Claude cannot replicate via
+ * its native Read/Write/Bash capabilities. Everything else (git, terminal,
+ * file ops, HTTP, GitHub) is available in full mode.
+ *
+ * To move a tool between modes: add or remove its name from this set.
+ */
+export declare const SLIM_TOOL_NAMES: Set<string>;
+/**
+ * Context object for all tool factories.
+ *
+ * Currently tools receive individual parameters via registerAllTools — this
+ * interface documents the full context surface and serves as the migration
+ * path toward a single `ctx: ToolContext` parameter in a future refactor.
+ */
+export interface ToolContext {
+    transport: McpTransport;
+    config: Config;
+    openedFiles: Set<string>;
+    probes: ProbeResults;
+    extensionClient: ExtensionClient;
+    activityLog?: ActivityLog;
+    terminalPrefix?: string;
+    fileLock?: FileLock;
+    sessions?: Map<string, unknown>;
+    orchestrator?: ClaudeOrchestrator | null;
+    sessionId?: string;
+    pluginTools?: LoadedPluginTool[];
+}
+export declare function registerAllTools(transport: McpTransport, config: Config, openedFiles: Set<string>, probes: ProbeResults, extensionClient: ExtensionClient, activityLog?: ActivityLog, terminalPrefix?: string, fileLock?: FileLock, sessions?: Map<string, unknown>, orchestrator?: ClaudeOrchestrator | null, sessionId?: string, pluginTools?: LoadedPluginTool[], automationHooks?: AutomationHooks | undefined, getDisconnectInfo?: () => DisconnectInfo, onContextCacheUpdated?: (generatedAt: string) => void, getExtensionDisconnectCount?: () => number, commitIssueLinkLog?: import("../commitIssueLinkLog.js").CommitIssueLinkLog, recipeRunLog?: import("../runLog.js").RecipeRunLog, decisionTraceLog?: import("../decisionTraceLog.js").DecisionTraceLog): void;
+/**
+ * Category map for searchTools discovery.
+ * Maps tool name → category list. Categories: lsp, git, terminal, debug,
+ * editor, analysis, github, bridge, automation, http.
+ */
+export declare const TOOL_CATEGORIES: Record<string, string[]>;