pi-codex-auto-review 0.1.0

package/dist/sandbox/hard-links.js

@@ -0,0 +1,145 @@
+import { access, lstat, readdir, realpath } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { join, parse } from 'node:path';
+import { GuardError } from '../contracts.js';
+import { isWithin } from '../policy/paths.js';
+const MAX_SCAN_MS = 30000;
+const runFind = promisify(execFile);
+const isMissing = (error) => ['ENOENT', 'ENOTDIR'].includes(error.code ?? '');
+async function existingRoots(paths) {
+    const values = [];
+    for (const path of paths) {
+        try {
+            values.push(await realpath(path));
+        }
+        catch (error) {
+            if (!isMissing(error))
+                throw error;
+        }
+    }
+    return [...new Set(values)].filter((path, _, all) => !all.some(parent => parent !== path && isWithin(path, parent)));
+}
+/** Path-based OS sandboxes cannot distinguish names of an inode linked before launch. */
+export async function assertHardLinkBoundaries(profile, delta, config, signal) {
+    const deadlineMs = Date.now() + MAX_SCAN_MS;
+    const check = () => {
+        signal.throwIfAborted();
+        if (Date.now() > deadlineMs)
+            throw new GuardError('HARD_LINK_SCAN_LIMIT', 'The filesystem is too large to qualify hard-link boundaries safely');
+    };
+    const scanned = new Map();
+    const opaqueDirectories = async (paths, exclusions) => {
+        const pending = (await existingRoots(paths)).filter(root => root !== parse(root).root), denied = await existingRoots(exclusions), result = [], seen = new Set();
+        while (pending.length) {
+            check();
+            if (seen.size > 100000)
+                throw new GuardError('HARD_LINK_SCAN_LIMIT', 'Directory metadata scope is too large to qualify safely');
+            await Promise.all(pending.splice(-64).map(async (path) => {
+                if (seen.has(path) || denied.some(root => isWithin(path, root)))
+                    return;
+                seen.add(path);
+                let entries;
+                try {
+                    entries = await readdir(path, { withFileTypes: true });
+                }
+                catch (error) {
+                    if (isMissing(error))
+                        return;
+                    if (['EACCES', 'EPERM'].includes(error.code ?? '')) {
+                        const isSearchable = await access(path, constants.X_OK).then(() => true, error => { if (['EACCES', 'EPERM'].includes(error.code ?? ''))
+                            return false; throw error; });
+                        if (!isSearchable) {
+                            if (/[?*[\]{}]/.test(path))
+                                throw new GuardError('NATIVE_SCOPE_UNSUPPORTED', 'An opaque directory cannot be represented safely in the native profile');
+                            result.push(path);
+                            return;
+                        }
+                    }
+                    // An unlistable but searchable directory can still expose known filenames.
+                    throw error;
+                }
+                check();
+                for (const entry of entries)
+                    if (entry.isDirectory())
+                        pending.push(join(path, entry.name));
+            }));
+        }
+        return result;
+    };
+    const inspect = async (paths, exclusions = []) => {
+        const roots = await existingRoots(paths), denied = await existingRoots(exclusions);
+        // Every name is already in scope when the filesystem root is admitted (or denied).
+        if (roots.some(root => root === parse(root).root) && denied.length === 0)
+            return;
+        const key = JSON.stringify([roots, denied]);
+        if (scanned.has(key))
+            return scanned.get(key);
+        const scan = async () => {
+            const admitted = roots.filter(path => !denied.some(root => isWithin(path, root)));
+            if (!admitted.length)
+                return;
+            // Native find performs the metadata traversal without one JS promise/stat per ordinary file.
+            // Arguments are passed directly (no shell); NUL framing preserves spaces/newlines in names.
+            const prune = denied.filter(path => admitted.some(root => isWithin(path, root)));
+            const escapePattern = (path) => path.replace(/[?*\[\]\\]/g, '\\$&');
+            const terms = prune.flatMap((path, index) => [...(index ? ['-o'] : []), '-path', escapePattern(path)]);
+            const args = [...admitted, ...(terms.length ? ['(', ...terms, ')', '-prune', '-o'] : []), '-type', 'f', '-links', '+1', '-print0'];
+            check();
+            const { stdout } = await runFind('/usr/bin/find', args, { encoding: 'buffer', maxBuffer: 16 * 1024 * 1024, timeout: Math.max(1, deadlineMs - Date.now()), killSignal: 'SIGKILL', signal, env: {} });
+            const names = [];
+            for (let start = 0, end = stdout.indexOf(0); end >= 0; start = end + 1, end = stdout.indexOf(0, start))
+                names.push(stdout.subarray(start, end));
+            if (stdout.length && stdout.at(-1) !== 0)
+                throw new GuardError('HARD_LINK_SCAN_FAILED', 'Incomplete hard-link scan output');
+            const links = new Map();
+            for (const path of names) {
+                check();
+                const info = await lstat(path);
+                if (!info.isFile() || info.nlink < 2)
+                    throw new GuardError('HARD_LINK_CHANGED', 'Hard-link topology changed during qualification');
+                const inode = `${info.dev}:${info.ino}`, prior = links.get(inode);
+                if (prior && prior.nlink !== info.nlink)
+                    throw new GuardError('HARD_LINK_CHANGED', 'Hard-link topology changed during qualification');
+                links.set(inode, { count: (prior?.count ?? 0) + 1, nlink: info.nlink, path });
+            }
+            for (const value of links.values()) {
+                check();
+                const info = await lstat(value.path);
+                if (value.count !== value.nlink || info.nlink !== value.nlink)
+                    throw new GuardError('HARD_LINK_BOUNDARY', 'A pre-existing hard link crosses the admitted filesystem boundary');
+            }
+        };
+        const pending = scan();
+        scanned.set(key, pending);
+        await pending;
+    };
+    try {
+        // A protected inode with another name outside these denies must never be read.
+        await inspect(profile.denyRead);
+        const reads = [...profile.readRoots, ...delta.readPaths, ...delta.writePaths];
+        const hasFullRead = (config.filesystem.allowRead ?? []).some(root => root === parse(root).root);
+        const writes = config.filesystem.allowWrite ?? [], writeDenies = config.filesystem.denyWrite ?? [];
+        const opaque = [...new Set([...(hasFullRead ? [] : await opaqueDirectories(reads, profile.denyRead)), ...await opaqueDirectories(writes, writeDenies)])];
+        // Keep opaque subtrees inaccessible in the workload, including chmod and ancestor moves.
+        // Never silently ignore a failed scan of a protected or searchable directory.
+        config.filesystem.denyRead = [...(config.filesystem.denyRead ?? []), ...opaque];
+        config.filesystem.denyWrite = [...writeDenies, ...opaque];
+        if (!hasFullRead)
+            await inspect(reads, [...profile.denyRead, ...opaque]);
+        if (writes.length) {
+            if ((await existingRoots(writes)).some(root => root === parse(root).root))
+                await inspect(writeDenies);
+            else
+                await inspect(writes, [...writeDenies, ...opaque]);
+        }
+        check();
+    }
+    catch (error) {
+        if (error instanceof GuardError || signal.aborted)
+            throw error;
+        throw new GuardError('HARD_LINK_SCAN_FAILED', 'Hard-link boundaries could not be qualified; no workload was launched', { cause: error });
+    }
+}
+//# sourceMappingURL=hard-links.js.map

package/dist/sandbox/hard-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hard-links.js","sourceRoot":"","sources":["../../src/sandbox/hard-links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,UAAU,EAAgD,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjH,KAAK,UAAU,aAAa,CAAC,KAAwB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAClG,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AACD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B,EAAE,KAAsB,EAAE,MAA4B,EAAE,MAAmB;IAClJ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oEAAoE,CAAC,CAAC;IAClJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,EAAE,KAAwB,EAAE,UAA6B,EAAE,EAAE;QAC1F,MAAM,OAAO,GAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,KAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,GAAC,MAAM,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAW,EAAE,EAAE,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;QACtK,OAAM,OAAO,CAAC,MAAM,EAAC,CAAC;YACpB,KAAK,EAAE,CAAC;YAAA,IAAG,IAAI,CAAC,IAAI,GAAC,MAAM;gBAAC,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAC,yDAAyD,CAAC,CAAC;YACnI,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAA,EAAE;gBACtD,IAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;oBAAC,OAAO;gBAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,OAAO,CAAC;gBACZ,IAAG,CAAC;oBAAA,OAAO,GAAC,MAAM,OAAO,CAAC,IAAI,EAAC,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAA,CAAC;gBACtD,OAAM,KAAK,EAAC,CAAC;oBACX,IAAG,SAAS,CAAC,KAAK,CAAC;wBAAC,OAAO;oBAC3B,IAAG,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAE,EAAE,CAAC,EAAC,CAAC;wBACzE,MAAM,YAAY,GAAC,MAAM,MAAM,CAAC,IAAI,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,EAAC,KAAK,CAAA,EAAE,GAAC,IAAG,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAE,EAAE,CAAC;4BAAC,OAAO,KAAK,CAAC,CAAA,MAAM,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;wBACjL,IAAG,CAAC,YAAY,EAAC,CAAC;4BAChB,IAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gCAAC,MAAM,IAAI,UAAU,CAAC,0BAA0B,EAAC,wEAAwE,CAAC,CAAC;4BACpJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAAA,OAAO;wBAC3B,CAAC;oBACH,CAAC;oBACD,2EAA2E;oBAC3E,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,KAAK,EAAE,CAAC;gBAAA,KAAI,MAAM,KAAK,IAAI,OAAO;oBAAC,IAAG,KAAK,CAAC,WAAW,EAAE;wBAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAwB,EAAE,aAAgC,EAAE,EAAE,EAAE;QACrF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QACnF,mFAAmF;QACnF,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAC7B,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAC,GAAG,KAAK,EAAC,GAAG,EAAC,QAAQ,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAC,GAAG,EAAC,QAAQ,EAAC,IAAI,EAAC,SAAS,CAAC,CAAC;YAC3H,KAAK,EAAE,CAAC;YACR,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,OAAO,CAAC,eAAe,EAAC,IAAI,EAAC,EAAC,QAAQ,EAAC,QAAQ,EAAC,SAAS,EAAC,EAAE,GAAC,IAAI,GAAC,IAAI,EAAC,OAAO,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,CAAC,CAAC;YAC7K,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAC,GAAG,CAAC,CAAC,CAAC;YAC9I,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAC,kCAAkC,CAAC,CAAC;YAC3H,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoD,CAAC;YAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,EAAE,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,iDAAiD,CAAC,CAAC;gBAClI,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClE,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,iDAAiD,CAAC,CAAC;gBACrI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,EAAC,KAAK,EAAC,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,GAAC,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnC,KAAK,EAAE,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;oBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,mEAAmE,CAAC,CAAC;YACjL,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAC,OAAO,CAAC,CAAC;QAAC,MAAM,OAAO,CAAC;IAClE,CAAC,CAAC;IACF,IAAI,CAAC;QACH,+EAA+E;QAC/E,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,IAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,KAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;QACnG,MAAM,MAAM,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,MAAM,iBAAiB,CAAC,KAAK,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChJ,yFAAyF;QACzF,8EAA8E;QAC9E,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAE,EAAE,CAAC,EAAC,GAAG,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,SAAS,GAAC,CAAC,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW;YAAE,MAAM,OAAO,CAAC,KAAK,EAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;;gBACjG,MAAM,OAAO,CAAC,MAAM,EAAC,CAAC,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC;QAC/D,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,uEAAuE,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC;IACxI,CAAC;AACH,CAAC"}

package/dist/sandbox/linux-read-paths.d.ts

@@ -0,0 +1,7 @@
+/**
+ * SRT 0.0.78 restores write mounts before read mounts below a denyRead tmpfs.
+ * An enclosing read mount would therefore hide a narrower write mount.
+ * Partition only those enclosing directories, retaining readable siblings
+ * without making any additional path writable or following an escaping link.
+ */
+export declare function linuxReadPaths(reads: readonly string[], writes: readonly string[]): Promise<string[]>;

package/dist/sandbox/linux-read-paths.js

@@ -0,0 +1,47 @@
+import { readdir, realpath } from 'node:fs/promises';
+import { join } from 'node:path';
+import { GuardError } from '../contracts.js';
+import { isWithin } from '../policy/paths.js';
+/**
+ * SRT 0.0.78 restores write mounts before read mounts below a denyRead tmpfs.
+ * An enclosing read mount would therefore hide a narrower write mount.
+ * Partition only those enclosing directories, retaining readable siblings
+ * without making any additional path writable or following an escaping link.
+ */
+export async function linuxReadPaths(reads, writes) {
+    if (process.platform !== 'linux' || reads.includes('/'))
+        return [...reads];
+    const result = new Set();
+    let entries = 0;
+    async function visit(path, root) {
+        if (writes.some(write => isWithin(path, write)))
+            return;
+        if (!writes.some(write => write !== path && isWithin(write, path))) {
+            result.add(path);
+            return;
+        }
+        const children = await readdir(path, { withFileTypes: true });
+        entries += children.length;
+        if (entries > 10000)
+            throw new GuardError('READ_SCOPE_TOO_LARGE', 'Cannot safely partition this read scope for the requested Linux write grant');
+        for (const child of children) {
+            const childPath = join(path, child.name);
+            if (child.isSymbolicLink()) {
+                let target;
+                try {
+                    target = await realpath(childPath);
+                }
+                catch {
+                    continue;
+                }
+                if (!isWithin(target, root))
+                    continue;
+            }
+            await visit(childPath, root);
+        }
+    }
+    for (const path of new Set(reads))
+        await visit(path, path);
+    return [...result];
+}
+//# sourceMappingURL=linux-read-paths.js.map

package/dist/sandbox/linux-read-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-read-paths.js","sourceRoot":"","sources":["../../src/sandbox/linux-read-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAwB,EAAE,MAAyB;IACtF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,IAAY;QAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO;QACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,6EAA6E,CAAC,CAAC;QACjJ,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,IAAI,MAAc,CAAC;gBACnB,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;YACxC,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC"}

package/dist/sandbox/paths.d.ts

@@ -0,0 +1,3 @@
+/** The pinned runtime treats these characters as globs, with no literal-path config API. */
+export declare function hasNativePatternChars(path: string): boolean;
+export declare function assertLiteralNativePaths(paths: readonly string[]): void;

package/dist/sandbox/paths.js

@@ -0,0 +1,10 @@
+import { GuardError } from '../contracts.js';
+/** The pinned runtime treats these characters as globs, with no literal-path config API. */
+export function hasNativePatternChars(path) {
+    return /[*?[\]]/.test(path);
+}
+export function assertLiteralNativePaths(paths) {
+    if (paths.some(hasNativePatternChars))
+        throw new GuardError('NATIVE_PATH_UNSUPPORTED', 'Native permission roots containing *, ?, [ or ] are unsupported; no pattern permission was granted');
+}
+//# sourceMappingURL=paths.js.map

package/dist/sandbox/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/sandbox/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAC/D,IAAI,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,oGAAoG,CAAC,CAAC;AAC/L,CAAC"}

package/dist/sandbox/runtime-write-paths.d.ts

@@ -0,0 +1,2 @@
+/** File destinations implicitly writable in the pinned runtime, excluding device I/O. */
+export declare function runtimeWritePaths(cwd: string): Promise<string[]>;

package/dist/sandbox/runtime-write-paths.js

@@ -0,0 +1,8 @@
+import { getDefaultWritePaths } from '@anthropic-ai/sandbox-runtime';
+import { canonicalPath } from '../policy/paths.js';
+/** File destinations implicitly writable in the pinned runtime, excluding device I/O. */
+export async function runtimeWritePaths(cwd) {
+    const paths = getDefaultWritePaths().filter(path => !path.startsWith('/dev/'));
+    return [...new Set(await Promise.all(paths.map(path => canonicalPath(path, cwd))))];
+}
+//# sourceMappingURL=runtime-write-paths.js.map

package/dist/sandbox/runtime-write-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-write-paths.js","sourceRoot":"","sources":["../../src/sandbox/runtime-write-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IACjD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/sandbox/seccomp.d.ts

@@ -0,0 +1,5 @@
+/** Trusted launcher metadata; never sourced from a tool's caller environment. */
+export declare function seccompRuntime(): {
+    architecture: string;
+    applyPath: string;
+} | undefined;

package/dist/sandbox/seccomp.js

@@ -0,0 +1,16 @@
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { GuardError } from '../contracts.js';
+/** Trusted launcher metadata; never sourced from a tool's caller environment. */
+export function seccompRuntime() {
+    if (process.platform !== 'linux')
+        return undefined;
+    const architecture = process.env.PI_GUARD_KERNEL_ARCH ?? process.arch;
+    if (architecture !== 'x64' && architecture !== 'arm64')
+        throw new GuardError('ENVIRONMENT_BLOCKED', 'ENVIRONMENT_BLOCKED: unsupported kernel architecture for native seccomp');
+    // The process can be emulated while seccomp is enforced by a different-ISA
+    // kernel. Use that kernel's pinned native helper, retaining the same filter.
+    const entry = fileURLToPath(import.meta.resolve('@anthropic-ai/sandbox-runtime'));
+    return { architecture, applyPath: resolve(dirname(entry), '../vendor/seccomp', architecture, 'apply-seccomp') };
+}
+//# sourceMappingURL=seccomp.js.map

package/dist/sandbox/seccomp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seccomp.js","sourceRoot":"","sources":["../../src/sandbox/seccomp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,iFAAiF;AACjF,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IACtE,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,yEAAyE,CAAC,CAAC;IAC/K,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;AAClH,CAAC"}

package/dist/sandbox/worker.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sandbox/worker.js

@@ -0,0 +1,73 @@
+import { createInterface } from 'node:readline';
+import { spawn } from 'node:child_process';
+import { access, readFile, writeFile, mkdir, stat, readdir } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { constants as osConstants } from 'node:os';
+import { TOOL_NAMES, GuardError } from '../contracts.js';
+const send = (frame) => process.stdout.write(JSON.stringify(frame) + '\n');
+const input = createInterface({ input: process.stdin, crlfDelay: Infinity });
+let hasJob = false;
+input.on('line', line => {
+    if (hasJob) {
+        process.exitCode = 1;
+        return;
+    }
+    hasJob = true;
+    input.close();
+    void execute(JSON.parse(line)).then(result => send({ schemaVersion: 1, type: 'result', result })).catch(error => send({ schemaVersion: 1, type: 'error', code: error.code ?? 'WORKLOAD_ERROR', message: error.message }));
+});
+async function execute(job) {
+    if (!job || !['shell', 'tool', 'file'].includes(job.kind))
+        throw new GuardError('INVALID_IPC', 'Invalid workload job');
+    if (job.kind === 'shell') {
+        return new Promise((resolve, reject) => {
+            // All descendants inherit the kernel sandbox. The unsandboxed broker never evaluates this string.
+            const shellPath = job.shellPath ?? '/bin/bash';
+            if (!shellPath.startsWith('/') || shellPath.includes('\0'))
+                throw new GuardError('INVALID_SHELL', 'Shell path must be absolute');
+            const child = spawn(shellPath, ['-c', job.command], { cwd: job.cwd, env: process.env, stdio: ['ignore', 'pipe', 'pipe'] });
+            const data = (chunk) => send({ schemaVersion: 1, type: 'data', data: chunk.toString('base64') });
+            child.stdout.on('data', data);
+            child.stderr.on('data', data);
+            child.on('error', reject);
+            child.on('close', (code, signal) => resolve({ exitCode: code ?? (signal ? 128 + osConstants.signals[signal] : null) }));
+        });
+    }
+    if (job.kind === 'file') {
+        if (typeof job.path !== 'string' || !job.path.startsWith('/') || job.path.includes('\0'))
+            throw new GuardError('INVALID_IPC', 'Expected an absolute worker path');
+        switch (job.operation) {
+            case 'read': return { data: (await readFile(job.path)).toString('base64') };
+            case 'write':
+                await writeFile(job.path, job.content ?? '');
+                return null;
+            case 'mkdir':
+                await mkdir(job.path, { recursive: true });
+                return null;
+            case 'access':
+                await access(job.path, constants.R_OK);
+                return null;
+            case 'stat': return { isDirectory: (await stat(job.path)).isDirectory() };
+            case 'list': return await readdir(job.path);
+            default: throw new GuardError('INVALID_IPC', 'Unknown file operation');
+        }
+    }
+    if (!TOOL_NAMES.includes(job.tool))
+        throw new GuardError('INVALID_IPC', 'Unknown local tool');
+    // Running the public Pi definition inside the boundary also confines grep's rg process,
+    // image MIME reads, find globbing, edit matching, access, mkdir and stat helpers.
+    const pi = await import('@earendil-works/pi-coding-agent');
+    const definitions = {
+        bash: pi.createBashToolDefinition,
+        read: pi.createReadToolDefinition,
+        edit: pi.createEditToolDefinition,
+        write: pi.createWriteToolDefinition,
+        grep: pi.createGrepToolDefinition,
+        find: pi.createFindToolDefinition,
+        ls: pi.createLsToolDefinition,
+    };
+    const tool = definitions[job.tool](job.cwd, job.tool === 'read' ? job.options : undefined);
+    const result = await tool.execute(job.toolCallId, job.args, undefined, update => send({ schemaVersion: 1, type: 'update', result: update }), undefined);
+    return JSON.parse(JSON.stringify(result));
+}
+//# sourceMappingURL=worker.js.map

package/dist/sandbox/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/sandbox/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAA+C,MAAM,iBAAiB,CAAC;AAEtG,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACxF,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7E,IAAI,MAAM,GAAG,KAAK,CAAC;AACnB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;IACtB,IAAI,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC7C,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC7B,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,EAAE,KAAoB,CAAC,IAAI,IAAE,gBAAgB,EAAC,OAAO,EAAE,KAAe,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC;AACnP,CAAC,CAAC,CAAC;AACH,KAAK,UAAU,OAAO,CAAC,GAAc;IACnC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,sBAAsB,CAAC,CAAC;IACpH,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,kGAAkG;YAClG,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAC,6BAA6B,CAAC,CAAC;YAChI,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzH,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;YAClG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;YACrF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,CAAC,IAAI,EAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC,CAAC;QACnH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,kCAAkC,CAAC,CAAC;QACjK,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,CAAC,OAAO,EAAC,IAAI,EAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC;YACzE,KAAK,OAAO;gBAAE,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YACvE,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAClE,KAAK,QAAQ;gBAAE,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAClE,KAAK,MAAM,CAAC,CAAC,OAAO,EAAC,WAAW,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC;YACvE,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,wBAAwB,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,oBAAoB,CAAC,CAAC;IAC7F,wFAAwF;IACxF,kFAAkF;IAClF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG;QAClB,IAAI,EAAE,EAAE,CAAC,wBAAwB;QACjC,IAAI,EAAE,EAAE,CAAC,wBAAwB;QACjC,IAAI,EAAE,EAAE,CAAC,wBAAwB;QACjC,KAAK,EAAE,EAAE,CAAC,yBAAyB;QACnC,IAAI,EAAE,EAAE,CAAC,wBAAwB;QACjC,IAAI,EAAE,EAAE,CAAC,wBAAwB;QACjC,EAAE,EAAE,EAAE,CAAC,sBAAsB;KAC9B,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAa,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAe,EAAC,CAAC,EAAE,SAAkB,CAAC,CAAC;IAC5K,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAS,CAAC;AACpD,CAAC"}

package/dist/signals.d.ts

@@ -0,0 +1,10 @@
+export interface Clock {
+    setTimeout(fn: () => void, delayMs: number): unknown;
+    clearTimeout(id: unknown): void;
+}
+export declare const SYSTEM_CLOCK: Clock;
+export declare function deadlineSignal(caller: AbortSignal | undefined, timeoutMs: number, clock?: Clock): {
+    signal: AbortSignal;
+    dispose(): void;
+};
+export declare function withSignal<T>(work: Promise<T>, signal: AbortSignal): Promise<T>;

package/dist/signals.js

@@ -0,0 +1,21 @@
+import { GuardError } from './contracts.js';
+export const SYSTEM_CLOCK = { setTimeout: (fn, delayMs) => setTimeout(fn, delayMs), clearTimeout: id => clearTimeout(id) };
+export function deadlineSignal(caller, timeoutMs, clock = SYSTEM_CLOCK) {
+    const controller = new AbortController();
+    const onAbort = () => controller.abort(caller?.reason ?? new GuardError('CANCELLED', 'Call cancelled'));
+    if (caller?.aborted)
+        onAbort();
+    else
+        caller?.addEventListener('abort', onAbort, { once: true });
+    const id = clock.setTimeout(() => controller.abort(new GuardError('TIMEOUT', 'Configured deadline expired')), timeoutMs);
+    return { signal: controller.signal, dispose() { clock.clearTimeout(id); caller?.removeEventListener('abort', onAbort); } };
+}
+export async function withSignal(work, signal) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(signal.reason ?? new GuardError('CANCELLED', 'Call cancelled'));
+        signal.addEventListener('abort', onAbort, { once: true });
+        work.then(value => { signal.removeEventListener('abort', onAbort); resolve(value); }, error => { signal.removeEventListener('abort', onAbort); reject(error); });
+    });
+}
+//# sourceMappingURL=signals.js.map

package/dist/signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.js","sourceRoot":"","sources":["../src/signals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAK5C,MAAM,CAAC,MAAM,YAAY,GAAU,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,EAAoB,CAAC,EAAE,CAAC;AACpJ,MAAM,UAAU,cAAc,CAAC,MAA+B,EAAE,SAAiB,EAAE,QAAe,YAAY;IAC5G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxG,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,CAAC;;QAAM,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzH,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7H,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,IAAgB,EAAE,MAAmB;IACvE,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnK,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/startup.d.ts

@@ -0,0 +1,22 @@
+import { SessionManager, SettingsManager, type ModelRuntime, type InlineExtension, type CreateAgentSessionOptions } from '@earendil-works/pi-coding-agent';
+import { type GuardOptions } from './index.js';
+import { type ExternalExtension } from './tools/mcp.js';
+export declare function assertSupportedPi(): Promise<string>;
+export interface GuardedRuntimeOptions extends GuardOptions {
+    cwd: string;
+    agentDir: string;
+    modelRuntime?: ModelRuntime;
+    settingsManager?: SettingsManager;
+    /** Explicit trust for the initially selected project; later cwd changes use their own trust record. */
+    isProjectTrusted?: boolean;
+    model?: CreateAgentSessionOptions['model'];
+    /** Resolve an explicitly selected model after trusted provider extensions have registered. */
+    modelSelection?: {
+        readonly provider: string;
+        readonly id: string;
+    };
+    sessionManager?: SessionManager;
+    trustedExtensions?: InlineExtension[];
+    externalExtensions?: readonly ExternalExtension[];
+}
+export declare function createGuardedRuntime(options: GuardedRuntimeOptions): Promise<import("@earendil-works/pi-coding-agent").AgentSessionRuntime>;

package/dist/startup.js

@@ -0,0 +1,100 @@
+import { readFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createAgentSessionRuntime, createAgentSessionServices, createAgentSessionFromServices, createCodemodeExtension, SessionManager, SettingsManager, ProjectTrustStore } from '@earendil-works/pi-coding-agent';
+import { GuardError } from './contracts.js';
+import { createGuardExtension } from './index.js';
+import { loadContextFiles } from './context-files.js';
+import { guardedExternalExtension } from './tools/mcp.js';
+export async function assertSupportedPi() {
+    let path = dirname(fileURLToPath(import.meta.resolve('@earendil-works/pi-coding-agent')));
+    for (let i = 0; i < 8; i++) {
+        try {
+            const pkg = JSON.parse(await readFile(join(path, 'package.json'), 'utf8'));
+            if (pkg.name === '@earendil-works/pi-coding-agent') {
+                if (pkg.version !== '0.99.1')
+                    throw new GuardError('UNSUPPORTED_PI', 'Pi APIs are not qualified for this version');
+                return pkg.version;
+            }
+        }
+        catch (error) {
+            if (error instanceof GuardError)
+                throw error;
+        }
+        path = dirname(path);
+    }
+    throw new GuardError('UNSUPPORTED_PI', 'Host Pi version could not be verified');
+}
+export async function createGuardedRuntime(options) {
+    await assertSupportedPi();
+    if (options.model && options.modelSelection)
+        throw new GuardError('CONFLICTING_MODEL_SELECTION', 'Provide either a model object or a provider/model selection');
+    if (options.isProjectTrusted !== undefined && typeof options.isProjectTrusted !== 'boolean')
+        throw new GuardError('INVALID_PROJECT_TRUST', 'Project trust must be an explicit boolean');
+    const initialCwd = resolve(options.cwd), agentDir = resolve(options.agentDir);
+    const trustedExtensionPaths = (options.trustedExtensionPaths ?? []).map(path => resolve(initialCwd, path));
+    const createRuntime = async (input) => {
+        const settingsManager = options.settingsManager ?? SettingsManager.create(input.cwd, input.agentDir, { projectTrusted: false });
+        const explicitTrust = resolve(input.cwd) === initialCwd ? options.isProjectTrusted : undefined;
+        if (options.settingsManager) {
+            if (explicitTrust !== undefined && settingsManager.isProjectTrusted() !== explicitTrust)
+                throw new GuardError('CONFLICTING_PROJECT_TRUST', 'Explicit project trust conflicts with the supplied settings manager');
+        }
+        else {
+            const storedTrust = new ProjectTrustStore(input.agentDir).get(input.cwd);
+            settingsManager.setProjectTrusted(explicitTrust ?? storedTrust ?? settingsManager.getDefaultProjectTrust() === 'always');
+        }
+        const guard = createGuardExtension({ ...options, trustedExtensionPaths, cwd: input.cwd, agentDir: input.agentDir, bashOptions: { commandPrefix: settingsManager.getShellCommandPrefix(), shellPath: settingsManager.getShellPath(), ...options.bashOptions }, readOptions: { autoResizeImages: settingsManager.getImageAutoResize(), ...options.readOptions } });
+        try {
+            const external = (options.externalExtensions ?? []).map(extension => guardedExternalExtension(extension, () => guard.assertReady()));
+            const services = await createAgentSessionServices({ cwd: input.cwd, agentDir: input.agentDir, modelRuntime: options.modelRuntime, settingsManager,
+                resourceLoaderOptions: { additionalExtensionPaths: trustedExtensionPaths, extensionFactories: [{ name: 'pi-codex-auto-review', factory: guard.factory }, createCodemodeExtension({ models: false }), ...external, ...(options.trustedExtensions ?? [])], noExtensions: true, noContextFiles: true,
+                    agentsFilesOverride: () => { const controller = guard.assertReady(); return { agentsFiles: loadContextFiles({ cwd: input.cwd, agentDir: input.agentDir, profile: controller.policy.profile, settings: controller.options.settings, isProjectTrusted: settingsManager.isProjectTrusted() }) }; } } });
+            const loaded = services.resourceLoader.getExtensions();
+            if (loaded.errors.length || services.diagnostics.some(item => item.type === 'error'))
+                throw new GuardError('GUARDED_STARTUP_FAILED', 'An extension or runtime service failed to load');
+            guard.assertReady();
+            const selectedModel = options.modelSelection ? services.modelRuntime.getModel(options.modelSelection.provider, options.modelSelection.id) : options.model;
+            if (options.modelSelection && !selectedModel)
+                throw new GuardError('MODEL_UNAVAILABLE', `Registered model not found: ${options.modelSelection.provider}/${options.modelSelection.id}`);
+            // A fixed SDK `tools` list is a permanent allowlist and discards later MCP registrations.
+            // Local tools still have final execution guards; unknown tools are blocked by the guard hook.
+            const result = await createAgentSessionFromServices({ services, sessionManager: input.sessionManager, model: selectedModel, sessionStartEvent: input.sessionStartEvent, excludeTools: ['powershell'] });
+            await result.session.bindExtensions({ mode: 'print' });
+            guard.assertReady();
+            const session = result.session;
+            session.setActiveToolsByName(session.getAllTools().filter(tool => ['read', 'bash', 'edit', 'write', 'grep', 'find', 'ls', 'codemode', ...(options.settings?.trustedTools ?? [])].includes(tool.name) || guard.assertReady().isExternalTool(tool.name)).filter(tool => ['direct', 'model-only'].includes(tool.exposure)).map(tool => tool.name));
+            const prompt = session.prompt.bind(session);
+            session.prompt = async (...args) => { guard.assertReady(); return prompt(...args); };
+            const reload = session.reload.bind(session);
+            session.reload = async (...args) => {
+                await reload(...args);
+                const controller = guard.assertReady();
+                // Pi omits session_start after reload when print/SDK mode has no UI or command bindings.
+                if (!controller.isBoundToSession(session.sessionManager.getSessionId())) {
+                    await args[0]?.beforeSessionStart?.();
+                    await session.extensionRunner.emit({ type: 'session_start', reason: 'reload' });
+                }
+                guard.assertReady();
+            };
+            const executeBash = session.executeBash.bind(session);
+            session.executeBash = async (command, onChunk, options) => {
+                const controller = guard.assertReady();
+                const handled = options?.operations ? { operations: options.operations } : await session.extensionRunner.emitUserBash({ type: 'user_bash', command, cwd: session.sessionManager.getCwd(), excludeFromContext: options?.excludeFromContext ?? false });
+                if (!handled?.operations || !controller.isGuardedOperations(handled.operations))
+                    throw new GuardError('UNGUARDED_OPERATIONS', 'Protected sessions require guarded shell operations');
+                return executeBash(command, onChunk, { ...options, operations: handled.operations });
+            };
+            return { ...result, services, diagnostics: services.diagnostics };
+        }
+        catch (error) {
+            try {
+                await guard.assertReady().close();
+            }
+            catch { }
+            throw error;
+        }
+    };
+    return createAgentSessionRuntime(createRuntime, { cwd: initialCwd, agentDir, sessionManager: options.sessionManager ?? SessionManager.create(initialCwd, join(agentDir, 'sessions')) });
+}
+//# sourceMappingURL=startup.js.map

package/dist/startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup.js","sourceRoot":"","sources":["../src/startup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAA2E,MAAM,iCAAiC,CAAC;AAC9R,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAqB,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAA0B,MAAM,gBAAgB,CAAC;AAElF,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC;IAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAC,cAAc,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,GAAG,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;gBACnD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,4CAA4C,CAAC,CAAC;gBAClH,OAAO,GAAG,CAAC,OAAiB,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACjE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,uCAAuC,CAAC,CAAC;AACjF,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IACvE,MAAM,iBAAiB,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,EAAC,6DAA6D,CAAC,CAAC;IAC/J,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAC,2CAA2C,CAAC,CAAC;IACvL,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,qBAAqB,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3G,MAAM,aAAa,GAAG,KAAK,EAAE,KAAmI,EAAE,EAAE;QAClK,MAAM,eAAe,GAAC,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAC,KAAK,CAAC,QAAQ,EAAC,EAAC,cAAc,EAAC,KAAK,EAAC,CAAC,CAAC;QACzH,MAAM,aAAa,GAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,aAAa,KAAK,SAAS,IAAI,eAAe,CAAC,gBAAgB,EAAE,KAAK,aAAa;gBAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,qEAAqE,CAAC,CAAC;QACnN,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvE,eAAe,CAAC,iBAAiB,CAAC,aAAa,IAAI,WAAW,IAAI,eAAe,CAAC,sBAAsB,EAAE,KAAG,QAAQ,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAC,GAAG,OAAO,EAAC,qBAAqB,EAAC,GAAG,EAAC,KAAK,CAAC,GAAG,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,WAAW,EAAC,EAAC,aAAa,EAAC,eAAe,CAAC,qBAAqB,EAAE,EAAC,SAAS,EAAC,eAAe,CAAC,YAAY,EAAE,EAAC,GAAG,OAAO,CAAC,WAAW,EAAC,EAAC,WAAW,EAAC,EAAC,gBAAgB,EAAC,eAAe,CAAC,kBAAkB,EAAE,EAAC,GAAG,OAAO,CAAC,WAAW,EAAC,EAAC,CAAC,CAAC;QAC5U,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACrI,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAC,GAAG,EAAC,KAAK,CAAC,GAAG,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,YAAY,EAAC,OAAO,CAAC,YAAY,EAAC,eAAe;gBACxI,qBAAqB,EAAC,EAAC,wBAAwB,EAAC,qBAAqB,EAAC,kBAAkB,EAAC,CAAC,EAAC,IAAI,EAAC,sBAAsB,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,EAAC,uBAAuB,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,EAAC,GAAG,QAAQ,EAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,EAAC,YAAY,EAAC,IAAI,EAAC,cAAc,EAAC,IAAI;oBAC3Q,mBAAmB,EAAC,GAAE,EAAE,GAAC,MAAM,UAAU,GAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA,OAAO,EAAC,WAAW,EAAC,gBAAgB,CAAC,EAAC,GAAG,EAAC,KAAK,CAAC,GAAG,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAC,QAAQ,EAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAC,gBAAgB,EAAC,eAAe,CAAC,gBAAgB,EAAE,EAAC,CAAC,EAAC,CAAC,CAAA,CAAC,EAAC,EAAC,CAAC,CAAC;YACjR,MAAM,MAAM,GAAC,QAAQ,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAC,gDAAgD,CAAC,CAAC;YAClL,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAC1J,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,+BAA+B,OAAO,CAAC,cAAc,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACtL,0FAA0F;YAC1F,8FAA8F;YAC9F,MAAM,MAAM,GAAC,MAAM,8BAA8B,CAAC,EAAC,QAAQ,EAAC,cAAc,EAAC,KAAK,CAAC,cAAc,EAAC,KAAK,EAAC,aAAa,EAAC,iBAAiB,EAAC,KAAK,CAAC,iBAAiB,EAAC,YAAY,EAAC,CAAC,YAAY,CAAC,EAAC,CAAC,CAAC;YAC5L,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,CAAC;YACpD,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;YAC7B,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACvU,MAAM,MAAM,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,GAAC,KAAK,EAAE,GAAG,IAAI,EAAC,EAAE,GAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA,OAAO,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,GAAC,KAAK,EAAC,GAAG,IAAI,EAAC,EAAE;gBAC7B,MAAM,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,yFAAyF;gBACzF,IAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,EAAC,CAAC;oBACtE,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC;oBACtC,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,eAAe,EAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,CAAC,CAAC;YACF,MAAM,WAAW,GAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,OAAO,CAAC,WAAW,GAAC,KAAK,EAAC,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,EAAE;gBAClD,MAAM,UAAU,GAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,OAAO,EAAC,GAAG,EAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,EAAC,kBAAkB,EAAC,OAAO,EAAE,kBAAkB,IAAI,KAAK,EAAC,CAAC,CAAC;gBACzO,IAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;oBAAC,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAC,qDAAqD,CAAC,CAAC;gBAClL,OAAO,WAAW,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,GAAG,OAAO,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,CAAC,CAAC;YACjF,CAAC,CAAC;YACF,OAAO,EAAC,GAAG,MAAM,EAAC,QAAQ,EAAC,WAAW,EAAC,QAAQ,CAAC,WAAW,EAAC,CAAC;QAC/D,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAA,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;YAAA,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACnF,CAAC,CAAC;IACF,OAAO,yBAAyB,CAAC,aAAa,EAAC,EAAC,GAAG,EAAC,UAAU,EAAC,QAAQ,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,QAAQ,EAAC,UAAU,CAAC,CAAC,EAAC,CAAC,CAAC;AACjL,CAAC"}