reasonix 0.34.1 → 0.36.0

package/dist/cli/chunk-SX6L4HZZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/tools/jobs.ts","../../src/tools/shell.ts","../../src/core/pause-gate.ts","../../src/tools/shell/exec.ts","../../src/tools/shell-chain.ts","../../src/tools/shell/parse.ts"],"sourcesContent":["/** Background process registry for never-exiting commands; ready-signal detection short-circuits the startup wait. */\n\nimport { type ChildProcess, type SpawnOptions, spawn } from \"node:child_process\";\nimport * as pathMod from \"node:path\";\nimport { detectShellOperator, prepareSpawn, tokenizeCommand } from \"./shell.js\";\n\n/** Kills the whole tree — `child.kill` only hits the direct child, leaving npm-spawned dev servers orphaned. */\nfunction killProcessTree(pid: number, signal: \"SIGTERM\" | \"SIGKILL\"): void {\n  if (process.platform === \"win32\") {\n    // taskkill: /T = tree, /F = force (TerminateProcess, no cleanup).\n    // Graceful path still uses /F on Windows because there's no signal\n    // in the POSIX sense — the closest equivalent is Ctrl+Break, which\n    // is unreliable from another console. /F with /T is what most\n    // process managers ship on Windows.\n    const args = [\"/pid\", String(pid), \"/T\"];\n    if (signal === \"SIGKILL\") args.push(\"/F\");\n    try {\n      const killer = spawn(\"taskkill\", args, {\n        stdio: \"ignore\",\n        windowsHide: true,\n      });\n      // Swallow ENOENT / EACCES — we did our best. Not awaiting is\n      // intentional: taskkill can take a few hundred ms and the caller\n      // already has its own deadline.\n      killer.on(\"error\", () => {\n        /* ignore */\n      });\n    } catch {\n      /* ignore */\n    }\n    return;\n  }\n  // POSIX: negative pid signals the whole process group. Requires the\n  // spawn to have been detached (which `start()` does below).\n  try {\n    process.kill(-pid, signal);\n    return;\n  } catch {\n    /* group-kill failed — fall back to direct */\n  }\n  try {\n    process.kill(pid, signal);\n  } catch {\n    /* ignore — already dead */\n  }\n}\n\n/** Per-job output ring. Capped so a chatty dev server doesn't OOM. */\nconst DEFAULT_OUTPUT_CAP_BYTES = 64 * 1024; // 64 KB\n\n/** First match cuts startup wait short; conservative patterns — a false negative costs a real stall. */\nconst READY_SIGNALS: ReadonlyArray<RegExp> = [\n  // HTTP server banners\n  /\\blistening on\\b/i,\n  /\\blocal:\\s+https?:\\/\\//i,\n  /\\bhttps?:\\/\\/(?:localhost|127\\.0\\.0\\.1|0\\.0\\.0\\.0)(?::\\d+)?\\b/i,\n  /\\b(?:ready|server started|started server|app listening)\\b/i,\n  // Bundlers / compilers\n  /\\bcompiled successfully\\b/i,\n  /\\bbuild complete(?:d)?\\b/i,\n  /\\bwatching for (?:file )?changes\\b/i,\n  /\\bready in \\d+/i,\n  // Generic\n  /\\bstartup (?:complete|finished)\\b/i,\n];\n\nexport interface JobStartOptions {\n  /** Absolute path to cwd for the spawned child. */\n  cwd: string;\n  /** Capped at 30; ready-signal match short-circuits. Default 3. */\n  waitSec?: number;\n  /** Signal plumbed through from the calling tool's AbortSignal. */\n  signal?: AbortSignal;\n  /** Total per-job output buffer cap (bytes). Default 64 KB. */\n  maxBufferBytes?: number;\n}\n\nexport interface JobStartResult {\n  jobId: number;\n  pid: number | null;\n  /** True iff the child was still running at the point we returned. */\n  stillRunning: boolean;\n  /** True iff a READY_SIGNALS pattern matched during the wait window. */\n  readyMatched: boolean;\n  /** Preview of combined stdout+stderr accumulated during the wait. */\n  preview: string;\n  /** If the child exited during the wait, its exit code; else null. */\n  exitCode: number | null;\n}\n\nexport interface JobRecord {\n  id: number;\n  command: string;\n  pid: number | null;\n  startedAt: number;\n  /** Exit code once the process terminates; null while running. */\n  exitCode: number | null;\n  /** Combined stdout+stderr, ring-trimmed. */\n  output: string;\n  /** Counts all bytes the child wrote, not just what's still buffered in `output`. */\n  totalBytesWritten: number;\n  /** True iff the child is still alive. */\n  running: boolean;\n  /** Error from spawn() itself (ENOENT, etc.) once surfaced. */\n  spawnError?: string;\n}\n\nexport class JobRegistry {\n  private readonly jobs = new Map<number, InternalJob>();\n  private nextId = 1;\n\n  /** Resolves on (a) ready signal, (b) early exit, or (c) waitSec deadline — child keeps running regardless. */\n  async start(command: string, opts: JobStartOptions): Promise<JobStartResult> {\n    const trimmed = command.trim();\n    if (!trimmed) throw new Error(\"run_background: empty command\");\n    const op = detectShellOperator(trimmed);\n    if (op !== null) {\n      throw new Error(\n        `run_background: shell operator \"${op}\" is not supported — spawn one process per background job. Compose via your orchestration, not the shell.`,\n      );\n    }\n    const argv = tokenizeCommand(trimmed);\n    if (argv.length === 0) throw new Error(\"run_background: empty command\");\n    const waitMs = Math.max(0, Math.min(30, opts.waitSec ?? 3)) * 1000;\n    const maxBytes = opts.maxBufferBytes ?? DEFAULT_OUTPUT_CAP_BYTES;\n\n    const { bin, args, spawnOverrides } = prepareSpawn(argv);\n    const spawnOpts: SpawnOptions = {\n      cwd: pathMod.resolve(opts.cwd),\n      shell: false,\n      windowsHide: true,\n      env: process.env,\n      // POSIX: detach so the child becomes its own process-group leader.\n      // Required for `process.kill(-pid, …)` later — without it a group\n      // kill fails and we end up only signaling the wrapper, leaving\n      // grandchildren (node → vite → esbuild …) orphaned.\n      // Windows: detached would spawn a new console window; leave the\n      // default and use taskkill /T for tree termination.\n      detached: process.platform !== \"win32\",\n      ...spawnOverrides,\n    };\n\n    let child: ChildProcess;\n    try {\n      child = spawn(bin, args, spawnOpts);\n    } catch (err) {\n      // Can't even spawn — record a dead job so the model sees the\n      // failure in list_jobs, and return a synthetic result.\n      const id = this.nextId++;\n      const job: InternalJob = {\n        id,\n        command: trimmed,\n        pid: null,\n        startedAt: Date.now(),\n        exitCode: null,\n        output: `[spawn failed] ${(err as Error).message}`,\n        totalBytesWritten: 0,\n        running: false,\n        spawnError: (err as Error).message,\n        child: null,\n        readyPromise: Promise.resolve(),\n        signalReady: () => {},\n        closedPromise: Promise.resolve(),\n        signalClosed: () => {},\n        outputWaiters: new Set(),\n      };\n      this.jobs.set(id, job);\n      return {\n        jobId: id,\n        pid: null,\n        stillRunning: false,\n        readyMatched: false,\n        preview: job.output,\n        exitCode: null,\n      };\n    }\n\n    const id = this.nextId++;\n    let readyResolve: () => void = () => {};\n    const readyPromise = new Promise<void>((res) => {\n      readyResolve = res;\n    });\n    let closedResolve: () => void = () => {};\n    const closedPromise = new Promise<void>((res) => {\n      closedResolve = res;\n    });\n    const job: InternalJob = {\n      id,\n      command: trimmed,\n      pid: child.pid ?? null,\n      startedAt: Date.now(),\n      exitCode: null,\n      output: \"\",\n      totalBytesWritten: 0,\n      running: true,\n      child,\n      readyPromise,\n      signalReady: readyResolve,\n      closedPromise,\n      signalClosed: closedResolve,\n      outputWaiters: new Set(),\n    };\n    this.jobs.set(id, job);\n\n    let readyMatched = false;\n    // Sliding window for cross-chunk ready-signal matching. A banner\n    // line might land split across two reads — we want the regex to\n    // see it as one piece — but testing against the full `job.output`\n    // (which can be tens of KB by the time the server is up) is\n    // O(N²) when 9 regexes each run on a growing buffer per chunk.\n    // 1KB is comfortably bigger than any banner line we look for and\n    // bounds the per-chunk regex cost regardless of total output.\n    let recentForReady = \"\";\n    const READY_WINDOW = 1024;\n    const onData = (chunk: Buffer | string) => {\n      const s = chunk.toString();\n      job.totalBytesWritten += s.length;\n      job.output += s;\n      if (job.output.length > maxBytes) {\n        // Drop the oldest bytes, but keep a marker so the model can see\n        // output was truncated. Trim on a rough line boundary to avoid\n        // chopping a line mid-sentence.\n        const overflow = job.output.length - maxBytes;\n        const cut = job.output.indexOf(\"\\n\", overflow);\n        const start = cut >= 0 ? cut + 1 : overflow;\n        job.output = `[… older output dropped …]\\n${job.output.slice(start)}`;\n      }\n      if (!readyMatched) {\n        recentForReady = (recentForReady + s).slice(-READY_WINDOW);\n        for (const re of READY_SIGNALS) {\n          if (re.test(recentForReady)) {\n            readyMatched = true;\n            job.signalReady();\n            break;\n          }\n        }\n      }\n      if (job.outputWaiters.size > 0) {\n        const waiters = [...job.outputWaiters];\n        job.outputWaiters.clear();\n        for (const wake of waiters) wake();\n      }\n    };\n    child.stdout?.on(\"data\", onData);\n    child.stderr?.on(\"data\", onData);\n    child.on(\"error\", (err) => {\n      job.running = false;\n      job.spawnError = err.message;\n      job.signalReady();\n      job.signalClosed();\n    });\n    child.on(\"close\", (code) => {\n      job.running = false;\n      job.exitCode = code;\n      job.signalReady();\n      job.signalClosed();\n    });\n\n    const onAbort = () => this.stop(id, { graceMs: 100 });\n    if (opts.signal?.aborted) {\n      onAbort();\n    } else {\n      opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n    }\n\n    // Race: (a) ready signal, (b) child exit, (c) wait deadline.\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    await Promise.race([\n      readyPromise,\n      new Promise<void>((res) => {\n        timer = setTimeout(res, waitMs);\n      }),\n    ]);\n    if (timer) clearTimeout(timer);\n\n    return {\n      jobId: id,\n      pid: job.pid,\n      stillRunning: job.running,\n      readyMatched,\n      preview: job.output,\n      exitCode: job.exitCode,\n    };\n  }\n\n  read(id: number, opts: { since?: number; tailLines?: number } = {}): JobReadResult | null {\n    const job = this.jobs.get(id);\n    if (!job) return null;\n    const full = job.output;\n    let slice = full;\n    if (typeof opts.since === \"number\" && opts.since >= 0 && opts.since < full.length) {\n      slice = full.slice(opts.since);\n    }\n    if (typeof opts.tailLines === \"number\" && opts.tailLines > 0) {\n      const lines = slice.split(\"\\n\");\n      const keep = lines.slice(Math.max(0, lines.length - opts.tailLines));\n      slice = keep.join(\"\\n\");\n    }\n    return {\n      output: slice,\n      byteLength: full.length,\n      running: job.running,\n      exitCode: job.exitCode,\n      command: job.command,\n      pid: job.pid,\n      spawnError: job.spawnError,\n    };\n  }\n\n  async waitForJob(id: number, opts: { timeoutMs?: number } = {}): Promise<JobWaitResult | null> {\n    const job = this.jobs.get(id);\n    if (!job) return null;\n    if (!job.running) {\n      return {\n        exited: true,\n        exitCode: job.exitCode,\n        latestOutput: job.output,\n      };\n    }\n\n    const timeoutMs = Math.max(0, Math.min(30_000, opts.timeoutMs ?? 5_000));\n    const startOutput = job.output;\n    let wakeOutput: (() => void) | null = null;\n    const outputPromise = new Promise<void>((resolve) => {\n      wakeOutput = resolve;\n      job.outputWaiters.add(resolve);\n    });\n\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    await Promise.race([\n      job.closedPromise,\n      outputPromise,\n      new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, timeoutMs);\n      }),\n    ]);\n    if (timer) clearTimeout(timer);\n    if (wakeOutput) job.outputWaiters.delete(wakeOutput);\n\n    return {\n      exited: !job.running,\n      exitCode: job.exitCode,\n      latestOutput: latestOutputSince(startOutput, job.output),\n    };\n  }\n\n  /** SIGTERM, wait graceMs, then SIGKILL. Idempotent on already-exited jobs. */\n  async stop(id: number, opts: { graceMs?: number } = {}): Promise<JobRecord | null> {\n    const job = this.jobs.get(id);\n    if (!job) return null;\n    if (!job.running || !job.child) return snapshot(job);\n    const graceMs = Math.max(0, opts.graceMs ?? 2000);\n    // Tree kill — reaches grandchildren (vite, esbuild, etc.) instead\n    // of just the npm/cmd.exe wrapper that our direct child represents.\n    // Falls back to child.kill() only when we somehow don't have a pid.\n    if (job.pid !== null) {\n      killProcessTree(job.pid, \"SIGTERM\");\n    } else {\n      try {\n        job.child.kill(\"SIGTERM\");\n      } catch {\n        /* already dead — fall through */\n      }\n    }\n    // closedPromise (not readyPromise) — readyPromise can have fired at\n    // startup on a ready-signal regex match, which would short-circuit\n    // this race even though the process is still alive.\n    await Promise.race([job.closedPromise, new Promise<void>((res) => setTimeout(res, graceMs))]);\n    if (job.running) {\n      if (job.pid !== null) {\n        killProcessTree(job.pid, \"SIGKILL\");\n      } else {\n        try {\n          job.child.kill(\"SIGKILL\");\n        } catch {\n          /* ignore */\n        }\n      }\n      // Wait for the actual close handler — a fixed timer can return\n      // before Node's `close` event fires under load (Windows taskkill\n      // /T /F on a three-level tree can take ~1s to propagate).\n      await Promise.race([job.closedPromise, new Promise<void>((res) => setTimeout(res, 5000))]);\n    }\n    return snapshot(job);\n  }\n\n  list(): JobRecord[] {\n    return [...this.jobs.values()].map(snapshot);\n  }\n\n  async shutdown(deadlineMs = 5000): Promise<void> {\n    const start = Date.now();\n    const runningJobs = [...this.jobs.values()].filter((j) => j.running && j.child);\n    if (runningJobs.length === 0) return;\n\n    for (const job of runningJobs) {\n      if (job.pid !== null) killProcessTree(job.pid, \"SIGTERM\");\n      else\n        try {\n          job.child?.kill(\"SIGTERM\");\n        } catch {\n          /* ignore */\n        }\n    }\n    const allClose = Promise.all(runningJobs.map((j) => j.readyPromise));\n    const elapsed = () => Date.now() - start;\n    // Grace window: give well-behaved apps time to clean up, capped at\n    // half the deadline so we always leave room for a SIGKILL pass +\n    // reap confirmation.\n    const graceMs = Math.min(1500, Math.max(0, deadlineMs / 2));\n    await Promise.race([allClose, new Promise<void>((res) => setTimeout(res, graceMs))]);\n    // Force-kill everything still alive.\n    for (const job of runningJobs) {\n      if (!job.running) continue;\n      if (job.pid !== null) killProcessTree(job.pid, \"SIGKILL\");\n      else\n        try {\n          job.child?.kill(\"SIGKILL\");\n        } catch {\n          /* ignore */\n        }\n    }\n    // Wait for close events post-SIGKILL. taskkill /T on Windows is\n    // async — without this final wait, shutdown() can return while\n    // grandchildren are still mid-teardown, which is what \"runningCount\n    // non-zero after shutdown\" looks like.\n    const remaining = Math.max(800, deadlineMs - elapsed());\n    await Promise.race([allClose, new Promise<void>((res) => setTimeout(res, remaining))]);\n  }\n\n  /** Count of still-running jobs — drives the TUI status-bar indicator. */\n  runningCount(): number {\n    let n = 0;\n    for (const job of this.jobs.values()) if (job.running) n++;\n    return n;\n  }\n}\n\ninterface InternalJob extends JobRecord {\n  /** Underlying Node child process. Null only on spawn failure. */\n  child: ChildProcess | null;\n  /** Resolved when ready-signal fires OR the child exits. */\n  readyPromise: Promise<void>;\n  /** Fires readyPromise — called by ready-signal OR close/error handlers. */\n  signalReady: () => void;\n  /** Resolves only on close/error — never on ready-signal. Used by stop() to wait for actual exit. */\n  closedPromise: Promise<void>;\n  signalClosed: () => void;\n  /** One-shot waiters for \"some new output arrived\". Cleared after every wake. */\n  outputWaiters: Set<() => void>;\n}\n\nexport interface JobReadResult {\n  output: string;\n  /** Total bytes ever in the buffer (pre-slice). Caller passes back as `since`. */\n  byteLength: number;\n  running: boolean;\n  exitCode: number | null;\n  command: string;\n  pid: number | null;\n  spawnError?: string;\n}\n\nexport interface JobWaitResult {\n  exited: boolean;\n  exitCode: number | null;\n  latestOutput: string;\n}\n\nfunction snapshot(job: InternalJob): JobRecord {\n  return {\n    id: job.id,\n    command: job.command,\n    pid: job.pid,\n    startedAt: job.startedAt,\n    exitCode: job.exitCode,\n    output: job.output,\n    totalBytesWritten: job.totalBytesWritten,\n    running: job.running,\n    spawnError: job.spawnError,\n  };\n}\n\nfunction latestOutputSince(before: string, after: string): string {\n  if (!before) return after;\n  if (after.startsWith(before)) return after.slice(before.length);\n  return after;\n}\n","/** cwd pinned to root; non-allowlisted commands throw to a UI confirm gate; spawn is `shell: false`, tokenized argv only. */\n\nimport * as pathMod from \"node:path\";\nimport { addProjectShellAllowed } from \"../config.js\";\nimport { pauseGate } from \"../core/pause-gate.js\";\nimport type { ToolRegistry } from \"../tools.js\";\nimport { JobRegistry } from \"./jobs.js\";\nimport {\n  DEFAULT_MAX_OUTPUT_CHARS,\n  DEFAULT_TIMEOUT_SEC,\n  type RunCommandResult,\n  runCommand,\n} from \"./shell/exec.js\";\nimport { isCommandAllowed } from \"./shell/parse.js\";\n\nexport {\n  BUILTIN_ALLOWLIST,\n  detectShellOperator,\n  isAllowed,\n  isCommandAllowed,\n  isDqEscape,\n  tokenizeCommand,\n} from \"./shell/parse.js\";\nexport type { ResolveExecutableOptions, RunCommandResult } from \"./shell/exec.js\";\nexport {\n  injectPowerShellUtf8,\n  killProcessTree,\n  prepareSpawn,\n  quoteForCmdExe,\n  resolveExecutable,\n  runCommand,\n  smartDecodeOutput,\n  withUtf8Codepage,\n} from \"./shell/exec.js\";\n\nexport interface ShellToolsOptions {\n  /** Directory to run commands in. Must be an absolute path. */\n  rootDir: string;\n  /** Seconds before an individual command is killed. Default: 60. */\n  timeoutSec?: number;\n  maxOutputChars?: number;\n  /** Getter form is load-bearing — newly-persisted \"always allow\" prefixes MUST take effect mid-session. */\n  extraAllowed?: readonly string[] | (() => readonly string[]);\n  /** Getter form lets `editMode === \"yolo\"` flip mid-session without re-registering tools. */\n  allowAll?: boolean | (() => boolean);\n  jobs?: JobRegistry;\n}\n\n/** Error thrown by `run_command` when the command isn't allowlisted. */\nexport class NeedsConfirmationError extends Error {\n  readonly command: string;\n  constructor(command: string) {\n    super(\n      `run_command: \"${command}\" needs the user's approval before it runs. STOP calling tools now — the TUI has already prompted the user to press y (run) or n (deny). Wait for their next message; it will either be the command's output (if they approved) or an instruction to continue without it (if they denied). Don't retry the command or call other shell commands in the meantime.`,\n    );\n    this.name = \"NeedsConfirmationError\";\n    this.command = command;\n  }\n}\n\nexport function registerShellTools(registry: ToolRegistry, opts: ShellToolsOptions): ToolRegistry {\n  const rootDir = pathMod.resolve(opts.rootDir);\n  const timeoutSec = opts.timeoutSec ?? DEFAULT_TIMEOUT_SEC;\n  const maxOutputChars = opts.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  const jobs = opts.jobs ?? new JobRegistry();\n  // Resolved on every dispatch so newly-persisted \"always allow\"\n  // prefixes take effect inside the session that added them, not just\n  // on the next launch. Static arrays are wrapped into a constant\n  // getter so the call site below is uniform.\n  const getExtraAllowed: () => readonly string[] =\n    typeof opts.extraAllowed === \"function\"\n      ? opts.extraAllowed\n      : (() => {\n          const snapshot = opts.extraAllowed ?? [];\n          return () => snapshot;\n        })();\n  // Resolve dynamically so the TUI can flip yolo mode mid-session and\n  // have the registry pick it up on the next dispatch. Static booleans\n  // are wrapped into a thunk for uniformity.\n  const isAllowAll: () => boolean =\n    typeof opts.allowAll === \"function\" ? opts.allowAll : () => opts.allowAll === true;\n\n  registry.register({\n    name: \"run_command\",\n    description:\n      \"Run a shell command in the project root and return its combined stdout+stderr.\\n\\nConstraints (read these before the first call):\\n• Chain operators `|`, `||`, `&&`, `;` ARE supported — parsed natively, no shell invoked, so semantics are identical on Windows / macOS / Linux. Each chain segment is allowlist-checked individually: `git status | grep main` runs if both halves are allowed.\\n• File redirects ARE supported: `>` truncate, `>>` append, `<` stdin from file, `2>` / `2>>` stderr to file, `2>&1` merge stderr→stdout, `&>` both to file. Targets resolve relative to the project root. At most one redirect per fd per segment.\\n• Background `&`, heredoc `<<`, command substitution `$(…)`, subshells `(…)`, and process substitution `<(…)` are NOT supported. Wrap a literal `&` arg in quotes; for input use a `<` file or the binary's own --input flag.\\n• Env-var expansion `$VAR` is NOT performed — `$VAR` is passed as a literal string. Use the binary's own --env flag or substitute the value yourself.\\n• `cd` DOES NOT PERSIST between calls — each call spawns a fresh process rooted at the project. `cd` also does not persist within parsed chains like `cd dir && command`. Use a command-native cwd flag instead: `npm --prefix <dir> run <script>`, `npm --prefix <dir> exec -- <bin>`, `git -C <dir> ...`, `cargo -C <dir> ...`, `pytest <dir>/tests`.\\n• Glob patterns (`*.ts`) are passed through as literal arguments — no shell expansion. Use `grep -r`, `rg`, `find -name`, etc.\\n• Avoid commands with unbounded output (`netstat -ano`, `find /`, etc.) — they waste tokens. Filter at source: `netstat -ano -p TCP`, `find src -name '*.ts'`, `grep -c`, `wc -l`.\\n\\nCommon read-only inspection and test/lint/typecheck commands run immediately; anything that could mutate state, install dependencies, or touch the network is refused until the user confirms it in the TUI. Prefer this over asking the user to run a command manually — after edits, run the project's tests to verify.\",\n    // Plan-mode gate: allow allowlisted commands through (git status,\n    // cargo check, ls, grep …) so the model can actually investigate\n    // during planning. Anything that would otherwise trigger a\n    // confirmation prompt is treated as \"not read-only\" and bounced.\n    readOnlyCheck: (args: { command?: unknown }) => {\n      if (isAllowAll()) return true;\n      const cmd = typeof args?.command === \"string\" ? args.command.trim() : \"\";\n      if (!cmd) return false;\n      return isCommandAllowed(cmd, getExtraAllowed());\n    },\n    parameters: {\n      type: \"object\",\n      properties: {\n        command: {\n          type: \"string\",\n          description:\n            'Full command line. POSIX-ish quoting. Chain operators `|`, `||`, `&&`, `;` and file redirects `>` / `>>` / `<` / `2>` / `2>>` / `2>&1` / `&>` work natively (no shell). Background `&`, heredoc `<<`, env-var expansion `$VAR`, and command substitution `$(…)` are rejected (or passed through as literal in the case of `$VAR`). To pass an operator character as a literal argument (e.g. a regex), wrap it in quotes: `grep \"a|b\" file.txt`.',\n        },\n        timeoutSec: {\n          type: \"integer\",\n          description: `Override the default ${timeoutSec}s timeout for a single command.`,\n        },\n      },\n      required: [\"command\"],\n    },\n    fn: async (args: { command: string; timeoutSec?: number }, ctx) => {\n      const cmd = args.command.trim();\n      if (!cmd) throw new Error(\"run_command: empty command\");\n      if (!isAllowAll() && !isCommandAllowed(cmd, getExtraAllowed())) {\n        const gate = ctx?.confirmationGate ?? pauseGate;\n        const choice = await gate.ask({ kind: \"run_command\", payload: { command: cmd } });\n        if (choice.type === \"deny\") {\n          throw new Error(\n            `user denied: ${cmd}${choice.denyContext ? ` — ${choice.denyContext}` : \"\"}`,\n          );\n        }\n        if (choice.type === \"always_allow\") {\n          addProjectShellAllowed(rootDir, choice.prefix);\n        }\n        // \"run_once\" — fall through and execute\n      }\n      const effectiveTimeout = Math.max(1, Math.min(600, args.timeoutSec ?? timeoutSec));\n      const result = await runCommand(cmd, {\n        cwd: rootDir,\n        timeoutSec: effectiveTimeout,\n        maxOutputChars,\n        signal: ctx?.signal,\n      });\n      return formatCommandResult(cmd, result);\n    },\n  });\n\n  registry.register({\n    name: \"run_background\",\n    description:\n      \"Spawn a long-running process (dev server, watcher, any command that doesn't naturally exit) and detach. Waits up to `waitSec` seconds for startup (or until the output matches a readiness signal like 'Local:', 'listening on', 'compiled successfully'), then returns the job id + startup preview. The process keeps running; call `job_output` to tail its logs, `stop_job` to kill it, `list_jobs` to see all running jobs.\\n\\nSame shell constraints as run_command: NO `&&` / `||` / `|` / `;` / `>` / `<` / `2>&1`, `cd` doesn't persist. Dev servers that need a subdirectory: use the tool's own --prefix / --cwd flag. For Vite specifically, `--prefix` on npm only tells npm where package.json is; vite's server root still defaults to process cwd, so pass `vite <project-dir>` or configure via `vite.config.ts` root.\\n\\nUSE THIS — not `run_command` — for: npm/yarn/pnpm run dev, uvicorn / flask run, go run, cargo watch, tsc --watch, webpack serve, anything with 'dev' / 'serve' / 'watch' in the name.\",\n    parameters: {\n      type: \"object\",\n      properties: {\n        command: {\n          type: \"string\",\n          description:\n            \"Full command line. Same quoting rules as run_command (no pipes / redirects / chaining).\",\n        },\n        waitSec: {\n          type: \"integer\",\n          description:\n            \"Max seconds to wait for startup before returning. 0..30, default 3. A ready-signal match short-circuits this.\",\n        },\n      },\n      required: [\"command\"],\n    },\n    fn: async (args: { command: string; waitSec?: number }, ctx) => {\n      const cmd = args.command.trim();\n      if (!cmd) throw new Error(\"run_background: empty command\");\n      if (!isAllowAll() && !isCommandAllowed(cmd, getExtraAllowed())) {\n        const gate = ctx?.confirmationGate ?? pauseGate;\n        const choice = await gate.ask({ kind: \"run_background\", payload: { command: cmd } });\n        if (choice.type === \"deny\") {\n          throw new Error(\n            `user denied: ${cmd}${choice.denyContext ? ` — ${choice.denyContext}` : \"\"}`,\n          );\n        }\n        if (choice.type === \"always_allow\") {\n          addProjectShellAllowed(rootDir, choice.prefix);\n        }\n        // \"run_once\" — fall through and execute\n      }\n      const result = await jobs.start(cmd, {\n        cwd: rootDir,\n        waitSec: args.waitSec,\n        signal: ctx?.signal,\n      });\n      return formatJobStart(result);\n    },\n  });\n\n  registry.register({\n    name: \"job_output\",\n    description:\n      \"Read the latest output of a background job started with `run_background`. By default returns the tail of the buffer (last 80 lines). Pass `since` (the `byteLength` from a previous call) to stream only new content incrementally. Tells you whether the job is still running, so you can stop polling when it's done.\",\n    readOnly: true,\n    parallelSafe: true,\n    stormExempt: true,\n    parameters: {\n      type: \"object\",\n      properties: {\n        jobId: { type: \"integer\", description: \"Job id returned by run_background.\" },\n        since: {\n          type: \"integer\",\n          description:\n            \"Return only output written past this byte offset (for incremental polling).\",\n        },\n        tailLines: {\n          type: \"integer\",\n          description: \"Cap the returned slice to the last N lines. Default 80, 0 = unlimited.\",\n        },\n      },\n      required: [\"jobId\"],\n    },\n    fn: async (args: { jobId: number; since?: number; tailLines?: number }) => {\n      const out = jobs.read(args.jobId, {\n        since: args.since,\n        tailLines: args.tailLines ?? 80,\n      });\n      if (!out) return `job ${args.jobId}: not found (use list_jobs)`;\n      return formatJobRead(args.jobId, out);\n    },\n  });\n\n  registry.register({\n    name: \"wait_for_job\",\n    description:\n      \"Block until a background job exits or produces new output, bounded by `timeoutMs`. Use this instead of polling `job_output` with identical args when you're intentionally waiting for state to change. Returns JSON with `exited`, `exitCode`, and `latestOutput`.\",\n    readOnly: true,\n    parameters: {\n      type: \"object\",\n      properties: {\n        jobId: { type: \"integer\", description: \"Job id returned by run_background.\" },\n        timeoutMs: {\n          type: \"integer\",\n          description:\n            \"Max time to block before returning if nothing changes. Clamped to 0..30000. Default 5000.\",\n        },\n      },\n      required: [\"jobId\"],\n    },\n    fn: async (args: { jobId: number; timeoutMs?: number }) => {\n      const out = await jobs.waitForJob(args.jobId, { timeoutMs: args.timeoutMs });\n      if (!out) return `job ${args.jobId}: not found (use list_jobs)`;\n      return {\n        jobId: args.jobId,\n        exited: out.exited,\n        exitCode: out.exitCode,\n        latestOutput: out.latestOutput,\n      };\n    },\n  });\n\n  registry.register({\n    name: \"stop_job\",\n    description:\n      \"Stop a background job started with `run_background`. SIGTERM first; SIGKILL after a short grace period if it doesn't exit cleanly. Returns the final output + exit code. Safe to call on an already-exited job.\",\n    parameters: {\n      type: \"object\",\n      properties: {\n        jobId: { type: \"integer\" },\n      },\n      required: [\"jobId\"],\n    },\n    fn: async (args: { jobId: number }) => {\n      const rec = await jobs.stop(args.jobId);\n      if (!rec) return `job ${args.jobId}: not found`;\n      return formatJobStop(rec);\n    },\n  });\n\n  registry.register({\n    name: \"list_jobs\",\n    description:\n      \"List every background job started this session — running and exited — with id, command, pid, status. Use when you've lost track of which job_id corresponds to which process, or to see what's still alive.\",\n    readOnly: true,\n    parallelSafe: true,\n    stormExempt: true,\n    parameters: { type: \"object\", properties: {} },\n    fn: async () => {\n      const all = jobs.list();\n      if (all.length === 0) return \"(no background jobs started this session)\";\n      return all.map(formatJobRow).join(\"\\n\");\n    },\n  });\n\n  return registry;\n}\n\nfunction formatJobStart(r: import(\"./jobs.js\").JobStartResult): string {\n  const header = r.stillRunning\n    ? `[job ${r.jobId} started · pid ${r.pid ?? \"?\"} · ${r.readyMatched ? \"READY signal matched\" : \"running (no ready signal yet)\"}]`\n    : r.exitCode !== null\n      ? `[job ${r.jobId} exited during startup · exit ${r.exitCode}]`\n      : `[job ${r.jobId} failed to start]`;\n  return r.preview ? `${header}\\n${r.preview}` : header;\n}\n\nfunction formatJobRead(jobId: number, r: import(\"./jobs.js\").JobReadResult): string {\n  const status = r.running\n    ? `running · pid ${r.pid ?? \"?\"}`\n    : r.exitCode !== null\n      ? `exited ${r.exitCode}`\n      : r.spawnError\n        ? `failed (${r.spawnError})`\n        : \"stopped\";\n  const header = `[job ${jobId} · ${status} · byteLength=${r.byteLength}]\\n$ ${r.command}`;\n  return r.output ? `${header}\\n${r.output}` : header;\n}\n\nfunction formatJobStop(r: import(\"./jobs.js\").JobRecord): string {\n  const running = r.running\n    ? \"still running (SIGKILL may be pending)\"\n    : `exit ${r.exitCode ?? \"?\"}`;\n  const tail = tailLines(r.output, 40);\n  const header = `[job ${r.id} stopped · ${running}]\\n$ ${r.command}`;\n  return tail ? `${header}\\n${tail}` : header;\n}\n\nfunction formatJobRow(r: import(\"./jobs.js\").JobRecord): string {\n  const age = ((Date.now() - r.startedAt) / 1000).toFixed(1);\n  const state = r.running\n    ? `running   ·  pid ${r.pid ?? \"?\"}`\n    : r.exitCode !== null\n      ? `exit ${r.exitCode}`\n      : r.spawnError\n        ? \"failed\"\n        : \"stopped\";\n  return `  ${String(r.id).padStart(3)}  ${state.padEnd(24)}  ${age}s ago   $ ${r.command}`;\n}\n\nfunction tailLines(s: string, n: number): string {\n  if (!s) return \"\";\n  const lines = s.split(\"\\n\");\n  if (lines.length <= n) return s;\n  const dropped = lines.length - n;\n  return [`[… ${dropped} earlier lines …]`, ...lines.slice(-n)].join(\"\\n\");\n}\n\nexport function formatCommandResult(cmd: string, r: RunCommandResult): string {\n  const header = r.timedOut\n    ? `$ ${cmd}\\n[killed after timeout]`\n    : `$ ${cmd}\\n[exit ${r.exitCode ?? \"?\"}]`;\n  return r.output ? `${header}\\n${r.output}` : header;\n}\n","/** Generic pause gate — bridges tool functions and the App's modals via Promises. */\n// Tools call gate.ask(kind, payload) and await the result; the App subscribes\n// with gate.on() to show the right modal, then calls gate.resolve() on user pick.\n\nexport type ConfirmationChoice =\n  | { type: \"deny\"; denyContext?: string }\n  | { type: \"run_once\" }\n  | { type: \"always_allow\"; prefix: string };\n\nexport type PlanVerdict = { type: \"approve\" } | { type: \"refine\" } | { type: \"cancel\" };\n\nexport type CheckpointVerdict =\n  | { type: \"continue\" }\n  | { type: \"revise\"; feedback?: string }\n  | { type: \"stop\" };\n\nexport type RevisionVerdict = { type: \"accepted\" } | { type: \"rejected\" } | { type: \"cancelled\" };\n\nexport type ChoiceVerdict =\n  | { type: \"pick\"; optionId: string }\n  | { type: \"text\"; text: string }\n  | { type: \"cancel\" };\n\nexport type ToolConfirmationAuditEvent =\n  | {\n      type: \"tool.confirm.allow\";\n      kind: \"run_command\" | \"run_background\";\n      payload: { command: string };\n    }\n  | {\n      type: \"tool.confirm.deny\";\n      kind: \"run_command\" | \"run_background\";\n      payload: { command: string };\n      denyContext?: string;\n    }\n  | {\n      type: \"tool.confirm.always_allow\";\n      kind: \"run_command\" | \"run_background\";\n      payload: { command: string };\n      prefix: string;\n    };\n\ninterface PauseResponseMap {\n  run_command: ConfirmationChoice;\n  run_background: ConfirmationChoice;\n  plan_proposed: PlanVerdict;\n  plan_checkpoint: CheckpointVerdict;\n  plan_revision: RevisionVerdict;\n  choice: ChoiceVerdict;\n}\n\ntype PauseKind = keyof PauseResponseMap;\n\ninterface PausePayloadMap {\n  run_command: { command: string };\n  run_background: { command: string };\n  plan_proposed: { plan: string; steps?: unknown[]; summary?: string };\n  plan_checkpoint: { stepId: string; title?: string; result: string; notes?: string };\n  plan_revision: { reason: string; remainingSteps: unknown[]; summary?: string };\n  choice: { question: string; options: unknown[]; allowCustom: boolean };\n}\n\nexport type PauseRequest = {\n  id: number;\n  kind: PauseKind;\n  payload: unknown;\n};\n\ntype GateListener = (request: PauseRequest) => void;\ntype AuditListener = (event: ToolConfirmationAuditEvent) => void;\n\n/** Named options for PauseGate.ask() — makes it obvious which field is kind vs payload. */\nexport interface PauseAskOpts<K extends PauseKind = PauseKind> {\n  kind: K;\n  payload: PausePayloadMap[K];\n}\n\nexport class PauseGate {\n  private _nextId = 0;\n  private _pending = new Map<number, { resolve: (data: unknown) => void; request: PauseRequest }>();\n  private _listeners: Set<GateListener> = new Set();\n  private _auditListener: AuditListener | null = null;\n\n  /** Block until the user responds. Takes a named options object so the\n   *  kind and payload fields don't get confused at the call site. */\n  ask<K extends PauseKind>(opts: PauseAskOpts<K>): Promise<PauseResponseMap[K]> {\n    const { kind, payload } = opts;\n    if (this._listeners.size === 0) {\n      throw new Error(\n        `${kind}: no confirmation listener registered — cannot prompt the user. This tool can only be used inside an interactive Reasonix session.`,\n      );\n    }\n    return new Promise((resolve) => {\n      const id = this._nextId++;\n      const request: PauseRequest = { id, kind, payload };\n      this._pending.set(id, { resolve: resolve as (d: unknown) => void, request });\n      for (const fn of this._listeners) {\n        try {\n          fn(request);\n        } catch {\n          /* listener error shouldn't break the gate */\n        }\n      }\n    });\n  }\n\n  /** Resolve a pending request. Called by the App's modal callback. */\n  resolve(id: number, data: unknown): void {\n    const p = this._pending.get(id);\n    if (!p) return;\n    this._pending.delete(id);\n    this.emitAuditEvent(p.request, data);\n    p.resolve(data);\n  }\n\n  setAuditListener(fn: AuditListener | null): void {\n    this._auditListener = fn;\n  }\n\n  /** Subscribe to new pause requests. Returns an unsubscribe function. */\n  on(fn: GateListener): () => void {\n    this._listeners.add(fn);\n    return () => {\n      this._listeners.delete(fn);\n    };\n  }\n\n  /** Current pending request, if any (polling fallback). */\n  get current(): PauseRequest | null {\n    for (const [, p] of this._pending) return p.request;\n    return null;\n  }\n\n  private emitAuditEvent(request: PauseRequest, data: unknown): void {\n    if (!this._auditListener) return;\n    if (request.kind !== \"run_command\" && request.kind !== \"run_background\") return;\n    if (!data || typeof data !== \"object\") return;\n    const choice = data as Partial<ConfirmationChoice>;\n    try {\n      switch (choice.type) {\n        case \"run_once\":\n          this._auditListener({\n            type: \"tool.confirm.allow\",\n            kind: request.kind,\n            payload: request.payload as { command: string },\n          });\n          break;\n        case \"deny\":\n          this._auditListener({\n            type: \"tool.confirm.deny\",\n            kind: request.kind,\n            payload: request.payload as { command: string },\n            denyContext: choice.denyContext,\n          });\n          break;\n        case \"always_allow\":\n          if (typeof choice.prefix !== \"string\") return;\n          this._auditListener({\n            type: \"tool.confirm.always_allow\",\n            kind: request.kind,\n            payload: request.payload as { command: string },\n            prefix: choice.prefix,\n          });\n          break;\n        default:\n          break;\n      }\n    } catch {\n      /* audit path must never break the gate */\n    }\n  }\n}\n\n/** Singleton shared between tools and the App. */\nexport const pauseGate = new PauseGate();\n","import { type ChildProcess, type SpawnOptions, spawn, spawnSync } from \"node:child_process\";\nimport { existsSync, statSync } from \"node:fs\";\nimport * as pathMod from \"node:path\";\nimport { parseCommandChain, runChain } from \"../shell-chain.js\";\nimport { tokenizeCommand } from \"./parse.js\";\n\nexport const DEFAULT_TIMEOUT_SEC = 60;\nexport const DEFAULT_MAX_OUTPUT_CHARS = 32_000;\n\n/** Kill child + descendants. Windows: taskkill /T /F. Unix: SIGKILL the process group when detached, else fall back to SIGKILL on the leader. */\nexport function killProcessTree(child: ChildProcess): void {\n  if (!child.pid || child.killed) return;\n  if (process.platform === \"win32\") {\n    try {\n      spawnSync(\"taskkill\", [\"/pid\", String(child.pid), \"/T\", \"/F\"], {\n        stdio: \"ignore\",\n        windowsHide: true,\n      });\n      return;\n    } catch {\n      /* fall through to SIGKILL */\n    }\n  }\n  try {\n    process.kill(-child.pid, \"SIGKILL\");\n    return;\n  } catch {\n    /* not a process group leader — fall through */\n  }\n  try {\n    child.kill(\"SIGKILL\");\n  } catch {\n    /* already gone */\n  }\n}\n\nexport interface RunCommandResult {\n  exitCode: number | null;\n  /** Combined stdout+stderr, truncated to `maxOutputChars` with a marker. */\n  output: string;\n  /** True when the process was killed for exceeding `timeoutSec`. */\n  timedOut: boolean;\n}\n\nexport async function runCommand(\n  cmd: string,\n  opts: {\n    cwd: string;\n    timeoutSec?: number;\n    maxOutputChars?: number;\n    signal?: AbortSignal;\n  },\n): Promise<RunCommandResult> {\n  const timeoutSec = opts.timeoutSec ?? DEFAULT_TIMEOUT_SEC;\n  const maxChars = opts.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  const argv = tokenizeCommand(cmd);\n  if (argv.length === 0) throw new Error(\"run_command: empty command\");\n  const chain = parseCommandChain(cmd);\n  if (chain !== null) {\n    return await runChain(chain, {\n      cwd: opts.cwd,\n      timeoutSec,\n      maxOutputChars: maxChars,\n      signal: opts.signal,\n    });\n  }\n  const timeoutMs = timeoutSec * 1000;\n\n  const spawnOpts: SpawnOptions = {\n    cwd: opts.cwd,\n    shell: false, // no shell-expansion — see header comment\n    windowsHide: true,\n    // PYTHONIOENCODING + PYTHONUTF8 force any spawned Python child\n    // (run_command running `python script.py`, etc.) to emit UTF-8\n    // on stdout/stderr. Without this, Chinese-Windows defaults\n    // Python's stdout encoder to GBK and `print(\"…\")` raises\n    // UnicodeEncodeError on emoji / non-GBK chars — the model then\n    // sees a Python traceback instead of the script's real output\n    // and goes around in circles trying to fix the wrong problem.\n    // Harmless on non-Python processes (env vars they don't read).\n    env: { ...process.env, PYTHONIOENCODING: \"utf-8\", PYTHONUTF8: \"1\" },\n  };\n\n  // Windows: two layered fixes on top of shell:false —\n  //   1. Resolve bare command names via PATH × PATHEXT (CreateProcess\n  //      ignores PATHEXT, so `npm` alone misses `npm.cmd`).\n  //   2. Node 21.7.3+ (CVE-2024-27980) refuses to spawn `.cmd`/`.bat`\n  //      directly even with shell:false and safe args — throws\n  //      EINVAL at invocation time. Wrap those via `cmd.exe /d /s /c`\n  //      with verbatim args + manual quoting, so shell metacharacters\n  //      in arguments stay literal.\n  // Unix path is unchanged.\n  const { bin, args, spawnOverrides } = prepareSpawn(argv);\n  const effectiveSpawnOpts = { ...spawnOpts, ...spawnOverrides };\n\n  return await new Promise<RunCommandResult>((resolve, reject) => {\n    let child: import(\"node:child_process\").ChildProcess;\n    try {\n      child = spawn(bin, args, effectiveSpawnOpts);\n    } catch (err) {\n      reject(err);\n      return;\n    }\n    // Collect raw Buffer chunks rather than decoding incrementally —\n    // a multi-byte sequence can land split across chunks, and a naïve\n    // chunk.toString() corrupts it before the second half arrives.\n    // We decode once at close time, where smartDecodeOutput can also\n    // sniff non-UTF-8 codepages cleanly. The byte cap mirrors the\n    // prior char cap (2× maxChars worth) so a chatty process can't\n    // OOM us.\n    const chunks: Buffer[] = [];\n    let totalBytes = 0;\n    const byteCap = maxChars * 2 * 4; // worst-case 4 bytes/char for utf-8/gbk\n    let timedOut = false;\n    let aborted = false;\n    const killChildTree = () => killProcessTree(child);\n    const killTimer = setTimeout(() => {\n      timedOut = true;\n      killChildTree();\n    }, timeoutMs);\n    const onAbort = () => {\n      aborted = true;\n      killChildTree();\n    };\n    // Check synchronously first — if the signal aborted before listener attach\n    // (parent loop was already cancelled), addEventListener with `once:true`\n    // never fires, child runs unbounded.\n    if (opts.signal?.aborted) {\n      onAbort();\n    } else {\n      opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n    }\n\n    const onData = (chunk: Buffer | string) => {\n      const b = typeof chunk === \"string\" ? Buffer.from(chunk) : chunk;\n      if (totalBytes >= byteCap) return;\n      const remaining = byteCap - totalBytes;\n      if (b.length > remaining) {\n        chunks.push(b.subarray(0, remaining));\n        totalBytes = byteCap;\n      } else {\n        chunks.push(b);\n        totalBytes += b.length;\n      }\n    };\n    child.stdout?.on(\"data\", onData);\n    child.stderr?.on(\"data\", onData);\n    child.on(\"error\", (err) => {\n      clearTimeout(killTimer);\n      opts.signal?.removeEventListener(\"abort\", onAbort);\n      reject(err);\n    });\n    child.on(\"close\", (code) => {\n      clearTimeout(killTimer);\n      opts.signal?.removeEventListener(\"abort\", onAbort);\n      const merged = Buffer.concat(chunks);\n      const buf = smartDecodeOutput(merged);\n      const output =\n        buf.length > maxChars\n          ? `${buf.slice(0, maxChars)}\\n\\n[… truncated ${buf.length - maxChars} chars …]`\n          : buf;\n      resolve({ exitCode: code, output, timedOut });\n    });\n  });\n}\n\n/** GBK fallback on Windows — cmd.exe's localized error DLL and native EXE stderr ignore chcp 65001. */\nexport function smartDecodeOutput(buf: Buffer): string {\n  if (buf.length === 0) return \"\";\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true }).decode(buf);\n  } catch {\n    // Fall through to platform-specific fallback.\n  }\n  if (process.platform === \"win32\") {\n    try {\n      // TextDecoder supports gbk / gb18030 in Node 18+ via the WHATWG\n      // Encoding spec. gb18030 is the modern superset; falling back\n      // to it covers GBK byte sequences plus the rare 4-byte CJK\n      // characters that appear in newer system messages.\n      return new TextDecoder(\"gb18030\").decode(buf);\n    } catch {\n      // Decoder unavailable in this build — fall through.\n    }\n  }\n  // Last resort: lossy UTF-8 with replacement chars. The model still\n  // gets \"something happened\" with the structural exit-code marker\n  // intact, which is more useful than throwing away the entire output.\n  return buf.toString(\"utf8\");\n}\n\nexport interface ResolveExecutableOptions {\n  platform?: NodeJS.Platform;\n  env?: { PATH?: string; PATHEXT?: string };\n  isFile?: (path: string) => boolean;\n  pathDelimiter?: string;\n}\n\n/** CreateProcess ignores PATHEXT — bare `npm` fails ENOENT under `shell:false` without this resolver. */\nexport function resolveExecutable(cmd: string, opts: ResolveExecutableOptions = {}): string {\n  const platform = opts.platform ?? process.platform;\n  if (platform !== \"win32\") return cmd;\n  if (!cmd) return cmd;\n  // Already a path fragment — spawn handles these natively.\n  if (cmd.includes(\"/\") || cmd.includes(\"\\\\\") || pathMod.isAbsolute(cmd)) return cmd;\n  // If the model wrote `npm.cmd` explicitly, respect that verbatim.\n  if (pathMod.extname(cmd)) return cmd;\n\n  const env = opts.env ?? process.env;\n  const pathExt = (env.PATHEXT ?? \".COM;.EXE;.BAT;.CMD\")\n    .split(\";\")\n    .map((e) => e.trim())\n    .filter(Boolean);\n  const delimiter = opts.pathDelimiter ?? (platform === \"win32\" ? \";\" : pathMod.delimiter);\n  const pathDirs = (env.PATH ?? \"\").split(delimiter).filter(Boolean);\n  const isFile = opts.isFile ?? defaultIsFile;\n\n  for (const dir of pathDirs) {\n    for (const ext of pathExt) {\n      // Force win32 join so CI tests that pass `platform: \"win32\"`\n      // from a Linux runner get backslash-joined paths; the real-\n      // Windows runtime path lands here too and gets the correct\n      // separator regardless of where pathMod defaults.\n      const full = pathMod.win32.join(dir, cmd + ext);\n      if (isFile(full)) return full;\n    }\n  }\n  return cmd;\n}\n\nfunction defaultIsFile(full: string): boolean {\n  try {\n    return existsSync(full) && statSync(full).isFile();\n  } catch {\n    return false;\n  }\n}\n\n/** Windows workarounds: PATHEXT lookup + CVE-2024-27980 prohibition on direct `.cmd`/`.bat` spawn. */\nexport function prepareSpawn(\n  argv: readonly string[],\n  opts: ResolveExecutableOptions = {},\n): { bin: string; args: string[]; spawnOverrides: SpawnOptions } {\n  const head = argv[0] ?? \"\";\n  const tail = argv.slice(1);\n  const platform = opts.platform ?? process.platform;\n  const resolved = resolveExecutable(head, opts);\n\n  if (platform !== \"win32\") {\n    return { bin: resolved, args: [...tail], spawnOverrides: {} };\n  }\n\n  // `.cmd` / `.bat` wrappers require cmd.exe on post-CVE Node.\n  if (/\\.(cmd|bat)$/i.test(resolved)) {\n    const cmdline = [resolved, ...tail].map(quoteForCmdExe).join(\" \");\n    return {\n      bin: \"cmd.exe\",\n      args: [\"/d\", \"/s\", \"/c\", withUtf8Codepage(cmdline)],\n      // windowsVerbatimArguments prevents Node from re-quoting the /c\n      // payload — we've already composed an exact cmd.exe command\n      // line. Without this Node wraps our already-quoted string in\n      // another round of quotes and cmd.exe can't parse it.\n      spawnOverrides: { windowsVerbatimArguments: true },\n    };\n  }\n\n  // Bare command names that PATH × PATHEXT couldn't resolve to an\n  // on-disk file — these are almost always cmd.exe built-ins (`dir`,\n  // `echo`, `type`, `ver`, `vol`, `where`, `help`, …) which don't\n  // exist as standalone executables. Direct spawn crashes with ENOENT;\n  // routing through cmd.exe lets the built-in resolve, and if it's\n  // genuinely unknown the user gets the standard \"'foo' is not\n  // recognized\" message instead of a raw spawn failure.\n  if (isBareWindowsName(resolved) && resolved === head) {\n    const cmdline = [head, ...tail].map(quoteForCmdExe).join(\" \");\n    return {\n      bin: \"cmd.exe\",\n      args: [\"/d\", \"/s\", \"/c\", withUtf8Codepage(cmdline)],\n      spawnOverrides: { windowsVerbatimArguments: true },\n    };\n  }\n\n  // PowerShell variants: chcp 65001 doesn't help here because PowerShell\n  // sets its own [Console]::OutputEncoding at startup — usually system\n  // codepage (CP936/CP932/CP949 on CJK Windows) or UTF-16. The result\n  // is mojibake when our `chunk.toString()` UTF-8-decodes its stdout.\n  // Inject a UTF-8 setup prelude into the `-Command` (or `-c`) arg so\n  // any output produced thereafter is UTF-8.\n  if (isPowerShellExe(resolved)) {\n    const patched = injectPowerShellUtf8(tail);\n    if (patched) {\n      return { bin: resolved, args: patched, spawnOverrides: {} };\n    }\n  }\n\n  return { bin: resolved, args: [...tail], spawnOverrides: {} };\n}\n\n/** Resolved bin path looks like Windows PowerShell or PowerShell Core. */\nfunction isPowerShellExe(resolved: string): boolean {\n  return /(?:^|[\\\\/])(?:powershell|pwsh)(?:\\.exe)?$/i.test(resolved);\n}\n\n/** Targets `-Command` only — PowerShell quoting is finicky enough that wrapping script-file mode could break it. */\nexport function injectPowerShellUtf8(args: readonly string[]): string[] | null {\n  const prelude =\n    \"[Console]::OutputEncoding=[System.Text.Encoding]::UTF8;$OutputEncoding=[System.Text.Encoding]::UTF8;\";\n  for (let i = 0; i < args.length; i++) {\n    const a = args[i] ?? \"\";\n    if (/^-(?:Command|c)$/i.test(a) && i + 1 < args.length) {\n      const out = [...args];\n      out[i + 1] = `${prelude}${args[i + 1] ?? \"\"}`;\n      return out;\n    }\n  }\n  return null;\n}\n\n/** Single `&` (not `&&`) so the command still runs on Win7 where chcp can return non-zero. */\nexport function withUtf8Codepage(cmdline: string): string {\n  return `chcp 65001 >nul & ${cmdline}`;\n}\n\nfunction isBareWindowsName(s: string): boolean {\n  if (!s) return false;\n  if (s.includes(\"/\") || s.includes(\"\\\\\")) return false;\n  if (pathMod.isAbsolute(s)) return false;\n  if (pathMod.extname(s)) return false;\n  return true;\n}\n\n/** Doubles embedded quotes per cmd.exe's `\"\"` escape rule; bare alnum passes through unquoted. */\nexport function quoteForCmdExe(arg: string): string {\n  if (arg === \"\") return '\"\"';\n  if (!/[\\s\"&|<>^%(),;!]/.test(arg)) return arg;\n  return `\"${arg.replace(/\"/g, '\"\"')}\"`;\n}\n","/** Parse + spawn `cmd1 | cmd2 && cmd3 > out` ourselves — never invoke a shell, sidestep PS5.1's `&&` parse error and codepage drift. */\n\nimport { type ChildProcess, type SpawnOptions, spawn } from \"node:child_process\";\nimport { closeSync, openSync } from \"node:fs\";\nimport * as pathMod from \"node:path\";\nimport { isDqEscape, killProcessTree, prepareSpawn, smartDecodeOutput } from \"./shell.js\";\n\nexport type ChainOp = \"|\" | \"||\" | \"&&\" | \";\";\n\nexport type RedirectKind = \">\" | \">>\" | \"<\" | \"2>\" | \"2>>\" | \"2>&1\" | \"&>\";\n\nexport interface Redirect {\n  kind: RedirectKind;\n  /** File path resolved against the chain's cwd; empty for `2>&1`. */\n  target: string;\n}\n\nexport interface ChainSegment {\n  argv: string[];\n  redirects: Redirect[];\n}\n\nexport interface CommandChain {\n  segments: ChainSegment[];\n  /** length === segments.length - 1 */\n  ops: ChainOp[];\n}\n\nexport class UnsupportedSyntaxError extends Error {\n  constructor(detail: string) {\n    super(`run_command: ${detail}`);\n    this.name = \"UnsupportedSyntaxError\";\n  }\n}\n\n/** Whitespace-bounded splitter — chain ops only count when they begin a token, so `--flag=1&2` stays literal. */\nfunction splitOnChainOps(cmd: string): { segs: string[]; ops: ChainOp[] } {\n  const segs: string[] = [];\n  const ops: ChainOp[] = [];\n  let segStart = 0;\n  let i = 0;\n  let quote: '\"' | \"'\" | null = null;\n  let atTokenStart = true;\n  while (i < cmd.length) {\n    const ch = cmd[i]!;\n    if (quote) {\n      if (ch === quote) quote = null;\n      else if (quote === '\"' && isDqEscape(ch, cmd[i + 1])) i++;\n      i++;\n      atTokenStart = false;\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      quote = ch;\n      i++;\n      atTokenStart = false;\n      continue;\n    }\n    if (ch === \" \" || ch === \"\\t\") {\n      i++;\n      atTokenStart = true;\n      continue;\n    }\n    if (atTokenStart) {\n      let op: ChainOp | null = null;\n      let opLen = 0;\n      const next = cmd[i + 1];\n      if (ch === \"|\" && next === \"|\") {\n        op = \"||\";\n        opLen = 2;\n      } else if (ch === \"&\" && next === \"&\") {\n        op = \"&&\";\n        opLen = 2;\n      } else if (ch === \"|\") {\n        op = \"|\";\n        opLen = 1;\n      } else if (ch === \";\") {\n        op = \";\";\n        opLen = 1;\n      }\n      if (op !== null) {\n        segs.push(cmd.slice(segStart, i));\n        ops.push(op);\n        i += opLen;\n        segStart = i;\n        atTokenStart = true;\n        continue;\n      }\n    }\n    i++;\n    atTokenStart = false;\n  }\n  segs.push(cmd.slice(segStart));\n  return { segs, ops };\n}\n\n/** Single-pass parser: extract argv + trailing/inline redirects from one segment string. */\nfunction parseSegment(segStr: string): ChainSegment {\n  const argv: string[] = [];\n  const redirects: Redirect[] = [];\n  let cur = \"\";\n  let curHasContent = false;\n  let pending: RedirectKind | null = null;\n  let quote: '\"' | \"'\" | null = null;\n  const flush = () => {\n    if (!curHasContent && cur.length === 0) return;\n    if (pending) {\n      redirects.push({ kind: pending, target: cur });\n      pending = null;\n    } else {\n      argv.push(cur);\n    }\n    cur = \"\";\n    curHasContent = false;\n  };\n  let i = 0;\n  while (i < segStr.length) {\n    const ch = segStr[i]!;\n    if (quote) {\n      if (ch === quote) {\n        quote = null;\n      } else if (quote === '\"' && isDqEscape(ch, segStr[i + 1])) {\n        cur += segStr[++i] ?? \"\";\n        curHasContent = true;\n      } else {\n        cur += ch;\n        curHasContent = true;\n      }\n      i++;\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      quote = ch;\n      curHasContent = true;\n      i++;\n      continue;\n    }\n    if (ch === \" \" || ch === \"\\t\") {\n      flush();\n      i++;\n      continue;\n    }\n    if (cur.length === 0 && !curHasContent) {\n      const remaining = segStr.slice(i);\n      let matched: { op: RedirectKind; len: number } | null = null;\n      if (remaining.startsWith(\"2>&1\")) matched = { op: \"2>&1\", len: 4 };\n      else if (remaining.startsWith(\"&>\")) matched = { op: \"&>\", len: 2 };\n      else if (remaining.startsWith(\"2>>\")) matched = { op: \"2>>\", len: 3 };\n      else if (remaining.startsWith(\"2>\")) matched = { op: \"2>\", len: 2 };\n      else if (remaining.startsWith(\">>\")) matched = { op: \">>\", len: 2 };\n      else if (remaining.startsWith(\">\")) matched = { op: \">\", len: 1 };\n      else if (remaining.startsWith(\"<<\")) {\n        throw new UnsupportedSyntaxError(\n          'shell operator \"<<\" is not supported — heredoc / here-string is not implemented; pass input via a \"<\" file or the binary\\'s --input flag',\n        );\n      } else if (remaining.startsWith(\"<\")) matched = { op: \"<\", len: 1 };\n      if (matched) {\n        if (pending !== null) {\n          throw new UnsupportedSyntaxError(\n            `redirect \"${pending}\" is missing a target file before \"${matched.op}\"`,\n          );\n        }\n        if (matched.op === \"2>&1\") {\n          redirects.push({ kind: \"2>&1\", target: \"\" });\n        } else {\n          pending = matched.op;\n        }\n        i += matched.len;\n        continue;\n      }\n      if (ch === \"&\") {\n        throw new UnsupportedSyntaxError(\n          'shell operator \"&\" is not supported — background runs need run_background, not run_command. Wrap a literal `&` arg in quotes.',\n        );\n      }\n    }\n    cur += ch;\n    curHasContent = true;\n    i++;\n  }\n  if (quote) throw new Error(`unclosed ${quote} in command`);\n  flush();\n  if (pending) throw new UnsupportedSyntaxError(`redirect \"${pending}\" is missing a target file`);\n  if (argv.length === 0 && redirects.length > 0) {\n    throw new UnsupportedSyntaxError(\n      \"redirect without a command — segment must have at least one program argument\",\n    );\n  }\n  validateRedirectFds(redirects);\n  return { argv, redirects };\n}\n\n/** stdin (`<`) ≤1, stdout (`>`/`>>`/`&>`) ≤1, stderr (`2>`/`2>>`/`&>`/`2>&1`) ≤1; reject conflicts. */\nfunction validateRedirectFds(redirects: readonly Redirect[]): void {\n  let stdin = 0;\n  let stdout = 0;\n  let stderr = 0;\n  for (const r of redirects) {\n    if (r.kind === \"<\") stdin++;\n    else if (r.kind === \">\" || r.kind === \">>\") stdout++;\n    else if (r.kind === \"2>\" || r.kind === \"2>>\" || r.kind === \"2>&1\") stderr++;\n    else if (r.kind === \"&>\") {\n      stdout++;\n      stderr++;\n    }\n  }\n  if (stdin > 1) throw new UnsupportedSyntaxError(\"multiple `<` stdin redirects in one segment\");\n  if (stdout > 1)\n    throw new UnsupportedSyntaxError(\n      \"multiple stdout redirects in one segment (`>` / `>>` / `&>` conflict)\",\n    );\n  if (stderr > 1)\n    throw new UnsupportedSyntaxError(\n      \"multiple stderr redirects in one segment (`2>` / `2>>` / `&>` / `2>&1` conflict)\",\n    );\n}\n\n/** Returns null on plain commands without redirects (caller takes the simple path). */\nexport function parseCommandChain(cmd: string): CommandChain | null {\n  const { segs, ops } = splitOnChainOps(cmd);\n  const segments: ChainSegment[] = [];\n  for (let i = 0; i < segs.length; i++) {\n    const trimmed = segs[i]!.trim();\n    if (trimmed.length === 0) {\n      const op = i === 0 ? ops[0]! : ops[i - 1]!;\n      throw new UnsupportedSyntaxError(\n        i === 0\n          ? `empty segment before \"${op}\"`\n          : i === segs.length - 1\n            ? `chain ends with \"${op}\"`\n            : `empty segment between \"${ops[i - 1]}\" and \"${ops[i]}\"`,\n      );\n    }\n    segments.push(parseSegment(trimmed));\n  }\n  // Reject `cd` inside parsed chains — the executor cannot carry cwd\n  // changes between segments, and silently running the wrong directory\n  // is worse than rejecting early with clear guidance.\n  for (const seg of segments) {\n    const cmdName = seg.argv[0] ?? \"\";\n    if (cmdName.toLowerCase() === \"cd\") {\n      throw new UnsupportedSyntaxError(\n        \"cd in parsed command chains does not change cwd for later segments. Use a command-native cwd flag instead, such as `npm --prefix <dir> run <script>`, `git -C <dir> ...`, or `cargo -C <dir> ...`.\",\n      );\n    }\n  }\n\n  if (ops.length === 0 && segments[0]!.redirects.length === 0) return null;\n  return { segments, ops };\n}\n\n/** Each segment must individually clear the allowlist for the chain to auto-run. */\nexport function chainAllowed(\n  chain: CommandChain,\n  isAllowed: (segmentCmd: string) => boolean,\n): boolean {\n  for (const seg of chain.segments) {\n    if (!isAllowed(seg.argv.join(\" \"))) return false;\n  }\n  return true;\n}\n\nexport interface ChainResult {\n  exitCode: number | null;\n  output: string;\n  timedOut: boolean;\n}\n\ninterface ChainGroup {\n  segments: ChainSegment[];\n  /** Op connecting the PREVIOUS group to THIS one (`||`, `&&`, `;`); null on the first group. */\n  opBefore: Exclude<ChainOp, \"|\"> | null;\n}\n\n/** Pipe groups are runs of segments joined by `|`; sequential ops (`||`, `&&`, `;`) split them. */\nfunction groupChain(chain: CommandChain): ChainGroup[] {\n  const groups: ChainGroup[] = [{ segments: [chain.segments[0]!], opBefore: null }];\n  for (let i = 0; i < chain.ops.length; i++) {\n    const op = chain.ops[i]!;\n    const next = chain.segments[i + 1]!;\n    if (op === \"|\") {\n      groups[groups.length - 1]!.segments.push(next);\n    } else {\n      groups.push({ segments: [next], opBefore: op });\n    }\n  }\n  return groups;\n}\n\nexport interface RunChainOptions {\n  cwd: string;\n  timeoutSec: number;\n  maxOutputChars: number;\n  signal?: AbortSignal;\n}\n\nexport async function runChain(chain: CommandChain, opts: RunChainOptions): Promise<ChainResult> {\n  const groups = groupChain(chain);\n  const buf = new OutputBuffer(opts.maxOutputChars * 2 * 4);\n  const deadline = Date.now() + opts.timeoutSec * 1000;\n  let lastExit: number | null = 0;\n  let timedOut = false;\n  for (const group of groups) {\n    if (group.opBefore === \"&&\" && lastExit !== 0) continue;\n    if (group.opBefore === \"||\" && lastExit === 0) continue;\n    const remainingMs = deadline - Date.now();\n    if (remainingMs <= 0) {\n      timedOut = true;\n      break;\n    }\n    const result = await runPipeGroup(group.segments, {\n      cwd: opts.cwd,\n      timeoutMs: remainingMs,\n      buf,\n      signal: opts.signal,\n    });\n    lastExit = result.exitCode;\n    if (result.timedOut) {\n      timedOut = true;\n      break;\n    }\n    if (opts.signal?.aborted) break;\n  }\n  const output = buf.toString();\n  const truncated =\n    output.length > opts.maxOutputChars\n      ? `${output.slice(0, opts.maxOutputChars)}\\n\\n[… truncated ${output.length - opts.maxOutputChars} chars …]`\n      : output;\n  return { exitCode: lastExit, output: truncated, timedOut };\n}\n\ninterface PipeGroupResult {\n  exitCode: number | null;\n  timedOut: boolean;\n}\n\ninterface PipeGroupOptions {\n  cwd: string;\n  timeoutMs: number;\n  buf: OutputBuffer;\n  signal?: AbortSignal;\n}\n\ninterface SegmentStdio {\n  /** Input fd for `<` redirect, or null when reading from prev pipe / nothing. */\n  stdinFd: number | null;\n  /** Output fd for `>`/`>>`/`&>` redirect, or null when writing to pipe / our buffer. */\n  stdoutFd: number | null;\n  /** Output fd for `2>`/`2>>`/`&>` redirect, or null when default. */\n  stderrFd: number | null;\n  mergeStderrToStdout: boolean;\n  toClose: number[];\n}\n\nfunction openRedirects(redirects: readonly Redirect[], cwd: string): SegmentStdio {\n  let stdinFd: number | null = null;\n  let stdoutFd: number | null = null;\n  let stderrFd: number | null = null;\n  let mergeStderrToStdout = false;\n  let bothFd: number | null = null;\n  const toClose: number[] = [];\n  const open = (target: string, flags: \"r\" | \"w\" | \"a\"): number => {\n    const resolved = pathMod.resolve(cwd, target);\n    const fd = openSync(resolved, flags);\n    toClose.push(fd);\n    return fd;\n  };\n  for (const r of redirects) {\n    if (r.kind === \"<\") stdinFd = open(r.target, \"r\");\n    else if (r.kind === \">\") stdoutFd = open(r.target, \"w\");\n    else if (r.kind === \">>\") stdoutFd = open(r.target, \"a\");\n    else if (r.kind === \"2>\") stderrFd = open(r.target, \"w\");\n    else if (r.kind === \"2>>\") stderrFd = open(r.target, \"a\");\n    else if (r.kind === \"&>\") {\n      bothFd = open(r.target, \"w\");\n      stdoutFd = bothFd;\n      stderrFd = bothFd;\n    } else if (r.kind === \"2>&1\") {\n      mergeStderrToStdout = true;\n    }\n  }\n  return { stdinFd, stdoutFd, stderrFd, mergeStderrToStdout, toClose };\n}\n\nasync function runPipeGroup(\n  segments: ChainSegment[],\n  opts: PipeGroupOptions,\n): Promise<PipeGroupResult> {\n  const env = { ...process.env, PYTHONIOENCODING: \"utf-8\", PYTHONUTF8: \"1\" };\n  const children: ChildProcess[] = [];\n  const allFds: number[] = [];\n  let timedOut = false;\n  const killAll = () => {\n    for (const c of children) killProcessTree(c);\n  };\n  const killTimer = setTimeout(() => {\n    timedOut = true;\n    killAll();\n  }, opts.timeoutMs);\n  const onAbort = () => killAll();\n  if (opts.signal?.aborted) {\n    onAbort();\n  } else {\n    opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n  }\n  try {\n    for (let i = 0; i < segments.length; i++) {\n      const isFirst = i === 0;\n      const isLast = i === segments.length - 1;\n      const seg = segments[i]!;\n      const io = openRedirects(seg.redirects, opts.cwd);\n      allFds.push(...io.toClose);\n      const { bin, args, spawnOverrides } = prepareSpawn(seg.argv);\n      const stdoutSpec = io.stdoutFd !== null ? io.stdoutFd : \"pipe\";\n      const stderrSpec =\n        io.stderrFd !== null ? io.stderrFd : io.mergeStderrToStdout ? stdoutSpec : \"pipe\";\n      const stdinSpec = io.stdinFd !== null ? io.stdinFd : isFirst ? \"ignore\" : \"pipe\";\n      const spawnOpts: SpawnOptions = {\n        cwd: opts.cwd,\n        shell: false,\n        windowsHide: true,\n        env,\n        stdio: [stdinSpec, stdoutSpec, stderrSpec],\n        ...spawnOverrides,\n      };\n      let child: ChildProcess;\n      try {\n        child = spawn(bin, args, spawnOpts);\n      } catch (err) {\n        for (const fd of allFds) tryClose(fd);\n        killAll();\n        clearTimeout(killTimer);\n        opts.signal?.removeEventListener(\"abort\", onAbort);\n        throw err;\n      }\n      children.push(child);\n      if (!isFirst && io.stdinFd === null) {\n        const prev = children[i - 1]!;\n        prev.stdout?.on(\"error\", () => {});\n        child.stdin?.on(\"error\", () => {});\n        const prevMergesStderr =\n          segments[i - 1]!.redirects.some((r) => r.kind === \"2>&1\") && !!prev.stderr;\n        if (prevMergesStderr && prev.stderr) {\n          prev.stderr.on(\"error\", () => {});\n          let openSources = 2;\n          const closeIfDone = () => {\n            if (--openSources === 0) child.stdin?.end();\n          };\n          prev.stdout?.pipe(child.stdin!, { end: false });\n          prev.stderr.pipe(child.stdin!, { end: false });\n          prev.stdout?.once(\"end\", closeIfDone);\n          prev.stderr.once(\"end\", closeIfDone);\n        } else {\n          prev.stdout?.pipe(child.stdin!);\n        }\n      }\n      if (child.stderr && io.stderrFd === null && !(io.mergeStderrToStdout && !isLast)) {\n        child.stderr.on(\"data\", (chunk: Buffer | string) => opts.buf.push(toBuf(chunk)));\n      }\n      if (isLast && child.stdout && io.stdoutFd === null) {\n        child.stdout.on(\"data\", (chunk: Buffer | string) => opts.buf.push(toBuf(chunk)));\n        if (io.mergeStderrToStdout && child.stderr && io.stderrFd === null) {\n          child.stderr.removeAllListeners(\"data\");\n          child.stderr.on(\"data\", (chunk: Buffer | string) => opts.buf.push(toBuf(chunk)));\n        }\n      }\n    }\n    const exits = await Promise.all(\n      children.map(\n        (c) =>\n          new Promise<number | null>((resolve) => {\n            c.once(\"error\", () => resolve(null));\n            c.once(\"close\", (code) => resolve(code));\n          }),\n      ),\n    );\n    return { exitCode: exits[exits.length - 1] ?? null, timedOut };\n  } finally {\n    for (const fd of allFds) tryClose(fd);\n    clearTimeout(killTimer);\n    opts.signal?.removeEventListener(\"abort\", onAbort);\n  }\n}\n\nfunction tryClose(fd: number): void {\n  try {\n    closeSync(fd);\n  } catch {\n    /* already closed by spawn handover or kernel */\n  }\n}\n\nfunction toBuf(chunk: Buffer | string): Buffer {\n  return typeof chunk === \"string\" ? Buffer.from(chunk) : chunk;\n}\n\nclass OutputBuffer {\n  private chunks: Buffer[] = [];\n  private bytes = 0;\n  constructor(private readonly cap: number) {}\n  push(b: Buffer): void {\n    if (this.bytes >= this.cap) return;\n    const remaining = this.cap - this.bytes;\n    if (b.length > remaining) {\n      this.chunks.push(b.subarray(0, remaining));\n      this.bytes = this.cap;\n    } else {\n      this.chunks.push(b);\n      this.bytes += b.length;\n    }\n  }\n  toString(): string {\n    return smartDecodeOutput(Buffer.concat(this.chunks));\n  }\n}\n","import { type CommandChain, chainAllowed, parseCommandChain } from \"../shell-chain.js\";\n\n/** Read-only reports + test runners whose failure mode is \"exit 1 with output\". */\nexport const BUILTIN_ALLOWLIST: ReadonlyArray<string> = [\n  // Repo inspection\n  \"git status\",\n  \"git diff\",\n  \"git log\",\n  \"git show\",\n  \"git blame\",\n  \"git branch\",\n  \"git remote\",\n  \"git rev-parse\",\n  \"git config --get\",\n  // Filesystem inspection\n  \"ls\",\n  \"pwd\",\n  \"cat\",\n  \"head\",\n  \"tail\",\n  \"wc\",\n  \"file\",\n  \"tree\",\n  \"find\",\n  \"grep\",\n  \"rg\",\n  // Language version probes\n  \"node --version\",\n  \"node -v\",\n  \"npm --version\",\n  \"npx --version\",\n  \"python --version\",\n  \"python3 --version\",\n  \"cargo --version\",\n  \"go version\",\n  \"rustc --version\",\n  \"deno --version\",\n  \"bun --version\",\n  // Test runners (non-destructive by convention)\n  \"npm test\",\n  \"npm run test\",\n  \"npx vitest run\",\n  \"npx vitest\",\n  \"npx jest\",\n  \"pytest\",\n  \"python -m pytest\",\n  \"cargo test\",\n  \"cargo check\",\n  \"cargo clippy\",\n  \"go test\",\n  \"go vet\",\n  \"deno test\",\n  \"bun test\",\n  // Linters / typecheckers (read-only by convention)\n  \"npm run lint\",\n  \"npm run typecheck\",\n  \"npx tsc --noEmit\",\n  \"npx biome check\",\n  \"npx eslint\",\n  \"npx prettier --check\",\n  \"ruff\",\n  \"mypy\",\n];\n\n/** Inside `\"…\"` only `\\\"` and `\\\\` are escapes — `\\X` otherwise stays literal so Windows paths like `\"C:\\Users\\foo\\.bar\"` survive tokenization. */\nexport function isDqEscape(prev: string, next: string | undefined): boolean {\n  return prev === \"\\\\\" && (next === '\"' || next === \"\\\\\");\n}\n\n/** No env / glob / backtick / `$(…)` expansion — prevents bypass of allowlist via concatenation. */\nexport function tokenizeCommand(cmd: string): string[] {\n  const out: string[] = [];\n  let cur = \"\";\n  let quote: '\"' | \"'\" | null = null;\n  for (let i = 0; i < cmd.length; i++) {\n    const ch = cmd[i]!;\n    if (quote) {\n      if (ch === quote) {\n        quote = null;\n      } else if (quote === '\"' && isDqEscape(ch, cmd[i + 1])) {\n        cur += cmd[++i];\n      } else {\n        cur += ch;\n      }\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      quote = ch;\n      continue;\n    }\n    if (ch === \" \" || ch === \"\\t\") {\n      if (cur.length > 0) {\n        out.push(cur);\n        cur = \"\";\n      }\n      continue;\n    }\n    cur += ch;\n  }\n  if (quote) throw new Error(`unclosed ${quote} in command`);\n  if (cur.length > 0) out.push(cur);\n  return out;\n}\n\n/** Up-front detection — without it, `dir | findstr foo` quotes `|` literal and pipe silently fails. */\nexport function detectShellOperator(cmd: string): string | null {\n  const opPrefix = /^(?:2>&1|&>|\\|{1,2}|&{1,2}|2>{1,2}|>{1,2}|<{1,2})/;\n  let cur = \"\";\n  let curQuoted = false;\n  let quote: '\"' | \"'\" | null = null;\n  const check = (): string | null => {\n    if (cur.length === 0 && !curQuoted) return null;\n    if (!curQuoted) {\n      const m = opPrefix.exec(cur);\n      if (m) return m[0] ?? null;\n    }\n    return null;\n  };\n  for (let i = 0; i < cmd.length; i++) {\n    const ch = cmd[i]!;\n    if (quote) {\n      if (ch === quote) {\n        quote = null;\n      } else if (quote === '\"' && isDqEscape(ch, cmd[i + 1])) {\n        cur += cmd[++i];\n        curQuoted = true;\n      } else {\n        cur += ch;\n        curQuoted = true;\n      }\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      quote = ch;\n      curQuoted = true;\n      continue;\n    }\n    if (ch === \" \" || ch === \"\\t\") {\n      const op = check();\n      if (op) return op;\n      cur = \"\";\n      curQuoted = false;\n      continue;\n    }\n    cur += ch;\n  }\n  if (quote) return null; // let tokenizeCommand throw the unclosed-quote error\n  return check();\n}\n\n/** Per-prefix demotion: an otherwise-allowlisted match falls back to the confirm gate when one of these tokens appears in the tail. Issue #257: `git branch -D` skipped review. Each token also matches its `--flag=value` form. */\nconst RISKY_ARGS: Readonly<Record<string, ReadonlyArray<string>>> = {\n  // Branch / remote mutation\n  \"git branch\": [\"-d\", \"-D\", \"--delete\", \"-m\", \"-M\", \"--move\", \"-c\", \"-C\", \"--copy\", \"--force\"],\n  \"git remote\": [\"add\", \"remove\", \"rm\", \"rename\", \"set-url\", \"set-head\", \"prune\"],\n  // `--output` writes to an arbitrary path; `--ext-diff` invokes user-config'd external programs.\n  \"git diff\": [\"--output\", \"--ext-diff\"],\n  \"git log\": [\"--output\"],\n  \"git show\": [\"--output\"],\n  // `-exec*` / `-ok*` are RCE; `-delete` and `-fprint*` / `-fls` write to arbitrary paths.\n  find: [\n    \"-delete\",\n    \"-exec\",\n    \"-execdir\",\n    \"-ok\",\n    \"-okdir\",\n    \"-fprint\",\n    \"-fprint0\",\n    \"-fprintf\",\n    \"-fls\",\n  ],\n  // `-o FILE` writes the tree to an arbitrary path.\n  tree: [\"-o\"],\n  // Auto-fix mutates source files.\n  \"npx eslint\": [\"--fix\", \"--fix-dry-run\"],\n  \"npx biome check\": [\"--write\", \"--apply\", \"--apply-unsafe\"],\n  ruff: [\"--fix\", \"--unsafe-fixes\", \"format\"],\n};\n\nfunction tailHasRisky(tail: readonly string[], risky: readonly string[]): boolean {\n  for (const a of tail) {\n    for (const r of risky) {\n      if (a === r) return true;\n      if (a.startsWith(`${r}=`)) return true;\n    }\n  }\n  return false;\n}\n\n/** Allowlist match on leading argv tokens; demoted by `RISKY_ARGS` when a destructive flag appears in the tail. */\nexport function isAllowed(cmd: string, extra: readonly string[] = []): boolean {\n  let argv: string[];\n  try {\n    argv = tokenizeCommand(cmd);\n  } catch {\n    return false;\n  }\n  if (argv.length === 0) return false;\n\n  const allowlist = [...BUILTIN_ALLOWLIST, ...extra];\n  for (const prefix of allowlist) {\n    const prefixTokens = prefix.split(\" \");\n    if (argv.length < prefixTokens.length) continue;\n    let match = true;\n    for (let i = 0; i < prefixTokens.length; i++) {\n      if (argv[i] !== prefixTokens[i]) {\n        match = false;\n        break;\n      }\n    }\n    if (!match) continue;\n\n    const risky = RISKY_ARGS[prefix];\n    if (risky && tailHasRisky(argv.slice(prefixTokens.length), risky)) return false;\n    return true;\n  }\n  return false;\n}\n\n/** For chain commands, every segment must individually clear the allowlist. */\nexport function isCommandAllowed(cmd: string, extra: readonly string[] = []): boolean {\n  let chain: CommandChain | null;\n  try {\n    chain = parseCommandChain(cmd);\n  } catch {\n    return false;\n  }\n  if (chain === null) return isAllowed(cmd, extra);\n  return chainAllowed(chain, (seg) => isAllowed(seg, extra));\n}\n"],"mappings":";;;;;;AAEA,SAA+C,SAAAA,cAAa;AAC5D,YAAYC,cAAa;;;ACDzB,YAAYC,cAAa;;;AC2ElB,IAAM,YAAN,MAAgB;AAAA,EACb,UAAU;AAAA,EACV,WAAW,oBAAI,IAAyE;AAAA,EACxF,aAAgC,oBAAI,IAAI;AAAA,EACxC,iBAAuC;AAAA;AAAA;AAAA,EAI/C,IAAyB,MAAqD;AAC5E,UAAM,EAAE,MAAM,QAAQ,IAAI;AAC1B,QAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,YAAM,IAAI;AAAA,QACR,GAAG,IAAI;AAAA,MACT;AAAA,IACF;AACA,WAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,YAAM,KAAK,KAAK;AAChB,YAAM,UAAwB,EAAE,IAAI,MAAM,QAAQ;AAClD,WAAK,SAAS,IAAI,IAAI,EAAE,SAASA,UAAiC,QAAQ,CAAC;AAC3E,iBAAW,MAAM,KAAK,YAAY;AAChC,YAAI;AACF,aAAG,OAAO;AAAA,QACZ,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,QAAQ,IAAY,MAAqB;AACvC,UAAM,IAAI,KAAK,SAAS,IAAI,EAAE;AAC9B,QAAI,CAAC,EAAG;AACR,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,eAAe,EAAE,SAAS,IAAI;AACnC,MAAE,QAAQ,IAAI;AAAA,EAChB;AAAA,EAEA,iBAAiB,IAAgC;AAC/C,SAAK,iBAAiB;AAAA,EACxB;AAAA;AAAA,EAGA,GAAG,IAA8B;AAC/B,SAAK,WAAW,IAAI,EAAE;AACtB,WAAO,MAAM;AACX,WAAK,WAAW,OAAO,EAAE;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,UAA+B;AACjC,eAAW,CAAC,EAAE,CAAC,KAAK,KAAK,SAAU,QAAO,EAAE;AAC5C,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,SAAuB,MAAqB;AACjE,QAAI,CAAC,KAAK,eAAgB;AAC1B,QAAI,QAAQ,SAAS,iBAAiB,QAAQ,SAAS,iBAAkB;AACzE,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAM,SAAS;AACf,QAAI;AACF,cAAQ,OAAO,MAAM;AAAA,QACnB,KAAK;AACH,eAAK,eAAe;AAAA,YAClB,MAAM;AAAA,YACN,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,UACnB,CAAC;AACD;AAAA,QACF,KAAK;AACH,eAAK,eAAe;AAAA,YAClB,MAAM;AAAA,YACN,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,aAAa,OAAO;AAAA,UACtB,CAAC;AACD;AAAA,QACF,KAAK;AACH,cAAI,OAAO,OAAO,WAAW,SAAU;AACvC,eAAK,eAAe;AAAA,YAClB,MAAM;AAAA,YACN,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,QAAQ,OAAO;AAAA,UACjB,CAAC;AACD;AAAA,QACF;AACE;AAAA,MACJ;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAGO,IAAM,YAAY,IAAI,UAAU;;;AC9KvC,SAA+C,SAAAC,QAAO,iBAAiB;AACvE,SAAS,YAAY,gBAAgB;AACrC,YAAYC,cAAa;;;ACAzB,SAA+C,aAAa;AAC5D,SAAS,WAAW,gBAAgB;AACpC,YAAY,aAAa;AAwBlB,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAChD,YAAY,QAAgB;AAC1B,UAAM,gBAAgB,MAAM,EAAE;AAC9B,SAAK,OAAO;AAAA,EACd;AACF;AAGA,SAAS,gBAAgB,KAAiD;AACxE,QAAM,OAAiB,CAAC;AACxB,QAAM,MAAiB,CAAC;AACxB,MAAI,WAAW;AACf,MAAI,IAAI;AACR,MAAI,QAA0B;AAC9B,MAAI,eAAe;AACnB,SAAO,IAAI,IAAI,QAAQ;AACrB,UAAM,KAAK,IAAI,CAAC;AAChB,QAAI,OAAO;AACT,UAAI,OAAO,MAAO,SAAQ;AAAA,eACjB,UAAU,OAAO,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,EAAG;AACtD;AACA,qBAAe;AACf;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAK;AAC5B,cAAQ;AACR;AACA,qBAAe;AACf;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAM;AAC7B;AACA,qBAAe;AACf;AAAA,IACF;AACA,QAAI,cAAc;AAChB,UAAI,KAAqB;AACzB,UAAI,QAAQ;AACZ,YAAM,OAAO,IAAI,IAAI,CAAC;AACtB,UAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,aAAK;AACL,gBAAQ;AAAA,MACV,WAAW,OAAO,OAAO,SAAS,KAAK;AACrC,aAAK;AACL,gBAAQ;AAAA,MACV,WAAW,OAAO,KAAK;AACrB,aAAK;AACL,gBAAQ;AAAA,MACV,WAAW,OAAO,KAAK;AACrB,aAAK;AACL,gBAAQ;AAAA,MACV;AACA,UAAI,OAAO,MAAM;AACf,aAAK,KAAK,IAAI,MAAM,UAAU,CAAC,CAAC;AAChC,YAAI,KAAK,EAAE;AACX,aAAK;AACL,mBAAW;AACX,uBAAe;AACf;AAAA,MACF;AAAA,IACF;AACA;AACA,mBAAe;AAAA,EACjB;AACA,OAAK,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC7B,SAAO,EAAE,MAAM,IAAI;AACrB;AAGA,SAAS,aAAa,QAA8B;AAClD,QAAM,OAAiB,CAAC;AACxB,QAAM,YAAwB,CAAC;AAC/B,MAAI,MAAM;AACV,MAAI,gBAAgB;AACpB,MAAI,UAA+B;AACnC,MAAI,QAA0B;AAC9B,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,iBAAiB,IAAI,WAAW,EAAG;AACxC,QAAI,SAAS;AACX,gBAAU,KAAK,EAAE,MAAM,SAAS,QAAQ,IAAI,CAAC;AAC7C,gBAAU;AAAA,IACZ,OAAO;AACL,WAAK,KAAK,GAAG;AAAA,IACf;AACA,UAAM;AACN,oBAAgB;AAAA,EAClB;AACA,MAAI,IAAI;AACR,SAAO,IAAI,OAAO,QAAQ;AACxB,UAAM,KAAK,OAAO,CAAC;AACnB,QAAI,OAAO;AACT,UAAI,OAAO,OAAO;AAChB,gBAAQ;AAAA,MACV,WAAW,UAAU,OAAO,WAAW,IAAI,OAAO,IAAI,CAAC,CAAC,GAAG;AACzD,eAAO,OAAO,EAAE,CAAC,KAAK;AACtB,wBAAgB;AAAA,MAClB,OAAO;AACL,eAAO;AACP,wBAAgB;AAAA,MAClB;AACA;AACA;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAK;AAC5B,cAAQ;AACR,sBAAgB;AAChB;AACA;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAM;AAC7B,YAAM;AACN;AACA;AAAA,IACF;AACA,QAAI,IAAI,WAAW,KAAK,CAAC,eAAe;AACtC,YAAM,YAAY,OAAO,MAAM,CAAC;AAChC,UAAI,UAAoD;AACxD,UAAI,UAAU,WAAW,MAAM,EAAG,WAAU,EAAE,IAAI,QAAQ,KAAK,EAAE;AAAA,eACxD,UAAU,WAAW,IAAI,EAAG,WAAU,EAAE,IAAI,MAAM,KAAK,EAAE;AAAA,eACzD,UAAU,WAAW,KAAK,EAAG,WAAU,EAAE,IAAI,OAAO,KAAK,EAAE;AAAA,eAC3D,UAAU,WAAW,IAAI,EAAG,WAAU,EAAE,IAAI,MAAM,KAAK,EAAE;AAAA,eACzD,UAAU,WAAW,IAAI,EAAG,WAAU,EAAE,IAAI,MAAM,KAAK,EAAE;AAAA,eACzD,UAAU,WAAW,GAAG,EAAG,WAAU,EAAE,IAAI,KAAK,KAAK,EAAE;AAAA,eACvD,UAAU,WAAW,IAAI,GAAG;AACnC,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF,WAAW,UAAU,WAAW,GAAG,EAAG,WAAU,EAAE,IAAI,KAAK,KAAK,EAAE;AAClE,UAAI,SAAS;AACX,YAAI,YAAY,MAAM;AACpB,gBAAM,IAAI;AAAA,YACR,aAAa,OAAO,sCAAsC,QAAQ,EAAE;AAAA,UACtE;AAAA,QACF;AACA,YAAI,QAAQ,OAAO,QAAQ;AACzB,oBAAU,KAAK,EAAE,MAAM,QAAQ,QAAQ,GAAG,CAAC;AAAA,QAC7C,OAAO;AACL,oBAAU,QAAQ;AAAA,QACpB;AACA,aAAK,QAAQ;AACb;AAAA,MACF;AACA,UAAI,OAAO,KAAK;AACd,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AACP,oBAAgB;AAChB;AAAA,EACF;AACA,MAAI,MAAO,OAAM,IAAI,MAAM,YAAY,KAAK,aAAa;AACzD,QAAM;AACN,MAAI,QAAS,OAAM,IAAI,uBAAuB,aAAa,OAAO,4BAA4B;AAC9F,MAAI,KAAK,WAAW,KAAK,UAAU,SAAS,GAAG;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,sBAAoB,SAAS;AAC7B,SAAO,EAAE,MAAM,UAAU;AAC3B;AAGA,SAAS,oBAAoB,WAAsC;AACjE,MAAI,QAAQ;AACZ,MAAI,SAAS;AACb,MAAI,SAAS;AACb,aAAW,KAAK,WAAW;AACzB,QAAI,EAAE,SAAS,IAAK;AAAA,aACX,EAAE,SAAS,OAAO,EAAE,SAAS,KAAM;AAAA,aACnC,EAAE,SAAS,QAAQ,EAAE,SAAS,SAAS,EAAE,SAAS,OAAQ;AAAA,aAC1D,EAAE,SAAS,MAAM;AACxB;AACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,EAAG,OAAM,IAAI,uBAAuB,6CAA6C;AAC7F,MAAI,SAAS;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AACF,MAAI,SAAS;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AACJ;AAGO,SAAS,kBAAkB,KAAkC;AAClE,QAAM,EAAE,MAAM,IAAI,IAAI,gBAAgB,GAAG;AACzC,QAAM,WAA2B,CAAC;AAClC,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,UAAU,KAAK,CAAC,EAAG,KAAK;AAC9B,QAAI,QAAQ,WAAW,GAAG;AACxB,YAAM,KAAK,MAAM,IAAI,IAAI,CAAC,IAAK,IAAI,IAAI,CAAC;AACxC,YAAM,IAAI;AAAA,QACR,MAAM,IACF,yBAAyB,EAAE,MAC3B,MAAM,KAAK,SAAS,IAClB,oBAAoB,EAAE,MACtB,0BAA0B,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;AAAA,MAC5D;AAAA,IACF;AACA,aAAS,KAAK,aAAa,OAAO,CAAC;AAAA,EACrC;AAIA,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,IAAI,KAAK,CAAC,KAAK;AAC/B,QAAI,QAAQ,YAAY,MAAM,MAAM;AAClC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,WAAW,KAAK,SAAS,CAAC,EAAG,UAAU,WAAW,EAAG,QAAO;AACpE,SAAO,EAAE,UAAU,IAAI;AACzB;AAGO,SAAS,aACd,OACAC,YACS;AACT,aAAW,OAAO,MAAM,UAAU;AAChC,QAAI,CAACA,WAAU,IAAI,KAAK,KAAK,GAAG,CAAC,EAAG,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAeA,SAAS,WAAW,OAAmC;AACrD,QAAM,SAAuB,CAAC,EAAE,UAAU,CAAC,MAAM,SAAS,CAAC,CAAE,GAAG,UAAU,KAAK,CAAC;AAChF,WAAS,IAAI,GAAG,IAAI,MAAM,IAAI,QAAQ,KAAK;AACzC,UAAM,KAAK,MAAM,IAAI,CAAC;AACtB,UAAM,OAAO,MAAM,SAAS,IAAI,CAAC;AACjC,QAAI,OAAO,KAAK;AACd,aAAO,OAAO,SAAS,CAAC,EAAG,SAAS,KAAK,IAAI;AAAA,IAC/C,OAAO;AACL,aAAO,KAAK,EAAE,UAAU,CAAC,IAAI,GAAG,UAAU,GAAG,CAAC;AAAA,IAChD;AAAA,EACF;AACA,SAAO;AACT;AASA,eAAsB,SAAS,OAAqB,MAA6C;AAC/F,QAAM,SAAS,WAAW,KAAK;AAC/B,QAAM,MAAM,IAAI,aAAa,KAAK,iBAAiB,IAAI,CAAC;AACxD,QAAM,WAAW,KAAK,IAAI,IAAI,KAAK,aAAa;AAChD,MAAI,WAA0B;AAC9B,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,aAAa,QAAQ,aAAa,EAAG;AAC/C,QAAI,MAAM,aAAa,QAAQ,aAAa,EAAG;AAC/C,UAAM,cAAc,WAAW,KAAK,IAAI;AACxC,QAAI,eAAe,GAAG;AACpB,iBAAW;AACX;AAAA,IACF;AACA,UAAM,SAAS,MAAM,aAAa,MAAM,UAAU;AAAA,MAChD,KAAK,KAAK;AAAA,MACV,WAAW;AAAA,MACX;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAC;AACD,eAAW,OAAO;AAClB,QAAI,OAAO,UAAU;AACnB,iBAAW;AACX;AAAA,IACF;AACA,QAAI,KAAK,QAAQ,QAAS;AAAA,EAC5B;AACA,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,YACJ,OAAO,SAAS,KAAK,iBACjB,GAAG,OAAO,MAAM,GAAG,KAAK,cAAc,CAAC;AAAA;AAAA,oBAAoB,OAAO,SAAS,KAAK,cAAc,mBAC9F;AACN,SAAO,EAAE,UAAU,UAAU,QAAQ,WAAW,SAAS;AAC3D;AAyBA,SAAS,cAAc,WAAgC,KAA2B;AAChF,MAAI,UAAyB;AAC7B,MAAI,WAA0B;AAC9B,MAAI,WAA0B;AAC9B,MAAI,sBAAsB;AAC1B,MAAI,SAAwB;AAC5B,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,CAAC,QAAgB,UAAmC;AAC/D,UAAM,WAAmB,gBAAQ,KAAK,MAAM;AAC5C,UAAM,KAAK,SAAS,UAAU,KAAK;AACnC,YAAQ,KAAK,EAAE;AACf,WAAO;AAAA,EACT;AACA,aAAW,KAAK,WAAW;AACzB,QAAI,EAAE,SAAS,IAAK,WAAU,KAAK,EAAE,QAAQ,GAAG;AAAA,aACvC,EAAE,SAAS,IAAK,YAAW,KAAK,EAAE,QAAQ,GAAG;AAAA,aAC7C,EAAE,SAAS,KAAM,YAAW,KAAK,EAAE,QAAQ,GAAG;AAAA,aAC9C,EAAE,SAAS,KAAM,YAAW,KAAK,EAAE,QAAQ,GAAG;AAAA,aAC9C,EAAE,SAAS,MAAO,YAAW,KAAK,EAAE,QAAQ,GAAG;AAAA,aAC/C,EAAE,SAAS,MAAM;AACxB,eAAS,KAAK,EAAE,QAAQ,GAAG;AAC3B,iBAAW;AACX,iBAAW;AAAA,IACb,WAAW,EAAE,SAAS,QAAQ;AAC5B,4BAAsB;AAAA,IACxB;AAAA,EACF;AACA,SAAO,EAAE,SAAS,UAAU,UAAU,qBAAqB,QAAQ;AACrE;AAEA,eAAe,aACb,UACA,MAC0B;AAC1B,QAAM,MAAM,EAAE,GAAG,QAAQ,KAAK,kBAAkB,SAAS,YAAY,IAAI;AACzE,QAAM,WAA2B,CAAC;AAClC,QAAM,SAAmB,CAAC;AAC1B,MAAI,WAAW;AACf,QAAM,UAAU,MAAM;AACpB,eAAW,KAAK,SAAU,iBAAgB,CAAC;AAAA,EAC7C;AACA,QAAM,YAAY,WAAW,MAAM;AACjC,eAAW;AACX,YAAQ;AAAA,EACV,GAAG,KAAK,SAAS;AACjB,QAAM,UAAU,MAAM,QAAQ;AAC9B,MAAI,KAAK,QAAQ,SAAS;AACxB,YAAQ;AAAA,EACV,OAAO;AACL,SAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAChE;AACA,MAAI;AACF,aAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,YAAM,UAAU,MAAM;AACtB,YAAM,SAAS,MAAM,SAAS,SAAS;AACvC,YAAM,MAAM,SAAS,CAAC;AACtB,YAAM,KAAK,cAAc,IAAI,WAAW,KAAK,GAAG;AAChD,aAAO,KAAK,GAAG,GAAG,OAAO;AACzB,YAAM,EAAE,KAAK,MAAM,eAAe,IAAI,aAAa,IAAI,IAAI;AAC3D,YAAM,aAAa,GAAG,aAAa,OAAO,GAAG,WAAW;AACxD,YAAM,aACJ,GAAG,aAAa,OAAO,GAAG,WAAW,GAAG,sBAAsB,aAAa;AAC7E,YAAM,YAAY,GAAG,YAAY,OAAO,GAAG,UAAU,UAAU,WAAW;AAC1E,YAAM,YAA0B;AAAA,QAC9B,KAAK,KAAK;AAAA,QACV,OAAO;AAAA,QACP,aAAa;AAAA,QACb;AAAA,QACA,OAAO,CAAC,WAAW,YAAY,UAAU;AAAA,QACzC,GAAG;AAAA,MACL;AACA,UAAI;AACJ,UAAI;AACF,gBAAQ,MAAM,KAAK,MAAM,SAAS;AAAA,MACpC,SAAS,KAAK;AACZ,mBAAW,MAAM,OAAQ,UAAS,EAAE;AACpC,gBAAQ;AACR,qBAAa,SAAS;AACtB,aAAK,QAAQ,oBAAoB,SAAS,OAAO;AACjD,cAAM;AAAA,MACR;AACA,eAAS,KAAK,KAAK;AACnB,UAAI,CAAC,WAAW,GAAG,YAAY,MAAM;AACnC,cAAM,OAAO,SAAS,IAAI,CAAC;AAC3B,aAAK,QAAQ,GAAG,SAAS,MAAM;AAAA,QAAC,CAAC;AACjC,cAAM,OAAO,GAAG,SAAS,MAAM;AAAA,QAAC,CAAC;AACjC,cAAM,mBACJ,SAAS,IAAI,CAAC,EAAG,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,KAAK,CAAC,CAAC,KAAK;AACtE,YAAI,oBAAoB,KAAK,QAAQ;AACnC,eAAK,OAAO,GAAG,SAAS,MAAM;AAAA,UAAC,CAAC;AAChC,cAAI,cAAc;AAClB,gBAAM,cAAc,MAAM;AACxB,gBAAI,EAAE,gBAAgB,EAAG,OAAM,OAAO,IAAI;AAAA,UAC5C;AACA,eAAK,QAAQ,KAAK,MAAM,OAAQ,EAAE,KAAK,MAAM,CAAC;AAC9C,eAAK,OAAO,KAAK,MAAM,OAAQ,EAAE,KAAK,MAAM,CAAC;AAC7C,eAAK,QAAQ,KAAK,OAAO,WAAW;AACpC,eAAK,OAAO,KAAK,OAAO,WAAW;AAAA,QACrC,OAAO;AACL,eAAK,QAAQ,KAAK,MAAM,KAAM;AAAA,QAChC;AAAA,MACF;AACA,UAAI,MAAM,UAAU,GAAG,aAAa,QAAQ,EAAE,GAAG,uBAAuB,CAAC,SAAS;AAChF,cAAM,OAAO,GAAG,QAAQ,CAAC,UAA2B,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MACjF;AACA,UAAI,UAAU,MAAM,UAAU,GAAG,aAAa,MAAM;AAClD,cAAM,OAAO,GAAG,QAAQ,CAAC,UAA2B,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AAC/E,YAAI,GAAG,uBAAuB,MAAM,UAAU,GAAG,aAAa,MAAM;AAClE,gBAAM,OAAO,mBAAmB,MAAM;AACtC,gBAAM,OAAO,GAAG,QAAQ,CAAC,UAA2B,KAAK,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1B,SAAS;AAAA,QACP,CAAC,MACC,IAAI,QAAuB,CAACC,aAAY;AACtC,YAAE,KAAK,SAAS,MAAMA,SAAQ,IAAI,CAAC;AACnC,YAAE,KAAK,SAAS,CAAC,SAASA,SAAQ,IAAI,CAAC;AAAA,QACzC,CAAC;AAAA,MACL;AAAA,IACF;AACA,WAAO,EAAE,UAAU,MAAM,MAAM,SAAS,CAAC,KAAK,MAAM,SAAS;AAAA,EAC/D,UAAE;AACA,eAAW,MAAM,OAAQ,UAAS,EAAE;AACpC,iBAAa,SAAS;AACtB,SAAK,QAAQ,oBAAoB,SAAS,OAAO;AAAA,EACnD;AACF;AAEA,SAAS,SAAS,IAAkB;AAClC,MAAI;AACF,cAAU,EAAE;AAAA,EACd,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,MAAM,OAAgC;AAC7C,SAAO,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI;AAC1D;AAEA,IAAM,eAAN,MAAmB;AAAA,EAGjB,YAA6B,KAAa;AAAb;AAAA,EAAc;AAAA,EAAd;AAAA,EAFrB,SAAmB,CAAC;AAAA,EACpB,QAAQ;AAAA,EAEhB,KAAK,GAAiB;AACpB,QAAI,KAAK,SAAS,KAAK,IAAK;AAC5B,UAAM,YAAY,KAAK,MAAM,KAAK;AAClC,QAAI,EAAE,SAAS,WAAW;AACxB,WAAK,OAAO,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;AACzC,WAAK,QAAQ,KAAK;AAAA,IACpB,OAAO;AACL,WAAK,OAAO,KAAK,CAAC;AAClB,WAAK,SAAS,EAAE;AAAA,IAClB;AAAA,EACF;AAAA,EACA,WAAmB;AACjB,WAAO,kBAAkB,OAAO,OAAO,KAAK,MAAM,CAAC;AAAA,EACrD;AACF;;;AC/fO,IAAM,oBAA2C;AAAA;AAAA,EAEtD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,SAAS,WAAW,MAAc,MAAmC;AAC1E,SAAO,SAAS,SAAS,SAAS,OAAO,SAAS;AACpD;AAGO,SAAS,gBAAgB,KAAuB;AACrD,QAAM,MAAgB,CAAC;AACvB,MAAI,MAAM;AACV,MAAI,QAA0B;AAC9B,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,KAAK,IAAI,CAAC;AAChB,QAAI,OAAO;AACT,UAAI,OAAO,OAAO;AAChB,gBAAQ;AAAA,MACV,WAAW,UAAU,OAAO,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG;AACtD,eAAO,IAAI,EAAE,CAAC;AAAA,MAChB,OAAO;AACL,eAAO;AAAA,MACT;AACA;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAK;AAC5B,cAAQ;AACR;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAM;AAC7B,UAAI,IAAI,SAAS,GAAG;AAClB,YAAI,KAAK,GAAG;AACZ,cAAM;AAAA,MACR;AACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAO,OAAM,IAAI,MAAM,YAAY,KAAK,aAAa;AACzD,MAAI,IAAI,SAAS,EAAG,KAAI,KAAK,GAAG;AAChC,SAAO;AACT;AAGO,SAAS,oBAAoB,KAA4B;AAC9D,QAAM,WAAW;AACjB,MAAI,MAAM;AACV,MAAI,YAAY;AAChB,MAAI,QAA0B;AAC9B,QAAM,QAAQ,MAAqB;AACjC,QAAI,IAAI,WAAW,KAAK,CAAC,UAAW,QAAO;AAC3C,QAAI,CAAC,WAAW;AACd,YAAM,IAAI,SAAS,KAAK,GAAG;AAC3B,UAAI,EAAG,QAAO,EAAE,CAAC,KAAK;AAAA,IACxB;AACA,WAAO;AAAA,EACT;AACA,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,KAAK,IAAI,CAAC;AAChB,QAAI,OAAO;AACT,UAAI,OAAO,OAAO;AAChB,gBAAQ;AAAA,MACV,WAAW,UAAU,OAAO,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG;AACtD,eAAO,IAAI,EAAE,CAAC;AACd,oBAAY;AAAA,MACd,OAAO;AACL,eAAO;AACP,oBAAY;AAAA,MACd;AACA;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAK;AAC5B,cAAQ;AACR,kBAAY;AACZ;AAAA,IACF;AACA,QAAI,OAAO,OAAO,OAAO,KAAM;AAC7B,YAAM,KAAK,MAAM;AACjB,UAAI,GAAI,QAAO;AACf,YAAM;AACN,kBAAY;AACZ;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAO,QAAO;AAClB,SAAO,MAAM;AACf;AAGA,IAAM,aAA8D;AAAA;AAAA,EAElE,cAAc,CAAC,MAAM,MAAM,YAAY,MAAM,MAAM,UAAU,MAAM,MAAM,UAAU,SAAS;AAAA,EAC5F,cAAc,CAAC,OAAO,UAAU,MAAM,UAAU,WAAW,YAAY,OAAO;AAAA;AAAA,EAE9E,YAAY,CAAC,YAAY,YAAY;AAAA,EACrC,WAAW,CAAC,UAAU;AAAA,EACtB,YAAY,CAAC,UAAU;AAAA;AAAA,EAEvB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,MAAM,CAAC,IAAI;AAAA;AAAA,EAEX,cAAc,CAAC,SAAS,eAAe;AAAA,EACvC,mBAAmB,CAAC,WAAW,WAAW,gBAAgB;AAAA,EAC1D,MAAM,CAAC,SAAS,kBAAkB,QAAQ;AAC5C;AAEA,SAAS,aAAa,MAAyB,OAAmC;AAChF,aAAW,KAAK,MAAM;AACpB,eAAW,KAAK,OAAO;AACrB,UAAI,MAAM,EAAG,QAAO;AACpB,UAAI,EAAE,WAAW,GAAG,CAAC,GAAG,EAAG,QAAO;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,UAAU,KAAa,QAA2B,CAAC,GAAY;AAC7E,MAAI;AACJ,MAAI;AACF,WAAO,gBAAgB,GAAG;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,EAAG,QAAO;AAE9B,QAAM,YAAY,CAAC,GAAG,mBAAmB,GAAG,KAAK;AACjD,aAAW,UAAU,WAAW;AAC9B,UAAM,eAAe,OAAO,MAAM,GAAG;AACrC,QAAI,KAAK,SAAS,aAAa,OAAQ;AACvC,QAAI,QAAQ;AACZ,aAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,UAAI,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG;AAC/B,gBAAQ;AACR;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,MAAO;AAEZ,UAAM,QAAQ,WAAW,MAAM;AAC/B,QAAI,SAAS,aAAa,KAAK,MAAM,aAAa,MAAM,GAAG,KAAK,EAAG,QAAO;AAC1E,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,KAAa,QAA2B,CAAC,GAAY;AACpF,MAAI;AACJ,MAAI;AACF,YAAQ,kBAAkB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,UAAU,KAAM,QAAO,UAAU,KAAK,KAAK;AAC/C,SAAO,aAAa,OAAO,CAAC,QAAQ,UAAU,KAAK,KAAK,CAAC;AAC3D;;;AF/NO,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AAGjC,SAAS,gBAAgB,OAA2B;AACzD,MAAI,CAAC,MAAM,OAAO,MAAM,OAAQ;AAChC,MAAI,QAAQ,aAAa,SAAS;AAChC,QAAI;AACF,gBAAU,YAAY,CAAC,QAAQ,OAAO,MAAM,GAAG,GAAG,MAAM,IAAI,GAAG;AAAA,QAC7D,OAAO;AAAA,QACP,aAAa;AAAA,MACf,CAAC;AACD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI;AACF,YAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;AAClC;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,KAAK,SAAS;AAAA,EACtB,QAAQ;AAAA,EAER;AACF;AAUA,eAAsB,WACpB,KACA,MAM2B;AAC3B,QAAM,aAAa,KAAK,cAAc;AACtC,QAAM,WAAW,KAAK,kBAAkB;AACxC,QAAM,OAAO,gBAAgB,GAAG;AAChC,MAAI,KAAK,WAAW,EAAG,OAAM,IAAI,MAAM,4BAA4B;AACnE,QAAM,QAAQ,kBAAkB,GAAG;AACnC,MAAI,UAAU,MAAM;AAClB,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,KAAK,KAAK;AAAA,MACV;AAAA,MACA,gBAAgB;AAAA,MAChB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AACA,QAAM,YAAY,aAAa;AAE/B,QAAM,YAA0B;AAAA,IAC9B,KAAK,KAAK;AAAA,IACV,OAAO;AAAA;AAAA,IACP,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASb,KAAK,EAAE,GAAG,QAAQ,KAAK,kBAAkB,SAAS,YAAY,IAAI;AAAA,EACpE;AAWA,QAAM,EAAE,KAAK,MAAM,eAAe,IAAI,aAAa,IAAI;AACvD,QAAM,qBAAqB,EAAE,GAAG,WAAW,GAAG,eAAe;AAE7D,SAAO,MAAM,IAAI,QAA0B,CAACC,UAAS,WAAW;AAC9D,QAAI;AACJ,QAAI;AACF,cAAQC,OAAM,KAAK,MAAM,kBAAkB;AAAA,IAC7C,SAAS,KAAK;AACZ,aAAO,GAAG;AACV;AAAA,IACF;AAQA,UAAM,SAAmB,CAAC;AAC1B,QAAI,aAAa;AACjB,UAAM,UAAU,WAAW,IAAI;AAC/B,QAAI,WAAW;AACf,QAAI,UAAU;AACd,UAAM,gBAAgB,MAAM,gBAAgB,KAAK;AACjD,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW;AACX,oBAAc;AAAA,IAChB,GAAG,SAAS;AACZ,UAAM,UAAU,MAAM;AACpB,gBAAU;AACV,oBAAc;AAAA,IAChB;AAIA,QAAI,KAAK,QAAQ,SAAS;AACxB,cAAQ;AAAA,IACV,OAAO;AACL,WAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,IAChE;AAEA,UAAM,SAAS,CAAC,UAA2B;AACzC,YAAM,IAAI,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI;AAC3D,UAAI,cAAc,QAAS;AAC3B,YAAM,YAAY,UAAU;AAC5B,UAAI,EAAE,SAAS,WAAW;AACxB,eAAO,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;AACpC,qBAAa;AAAA,MACf,OAAO;AACL,eAAO,KAAK,CAAC;AACb,sBAAc,EAAE;AAAA,MAClB;AAAA,IACF;AACA,UAAM,QAAQ,GAAG,QAAQ,MAAM;AAC/B,UAAM,QAAQ,GAAG,QAAQ,MAAM;AAC/B,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,mBAAa,SAAS;AACtB,WAAK,QAAQ,oBAAoB,SAAS,OAAO;AACjD,aAAO,GAAG;AAAA,IACZ,CAAC;AACD,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,mBAAa,SAAS;AACtB,WAAK,QAAQ,oBAAoB,SAAS,OAAO;AACjD,YAAM,SAAS,OAAO,OAAO,MAAM;AACnC,YAAM,MAAM,kBAAkB,MAAM;AACpC,YAAM,SACJ,IAAI,SAAS,WACT,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC;AAAA;AAAA,oBAAoB,IAAI,SAAS,QAAQ,mBAClE;AACN,MAAAD,SAAQ,EAAE,UAAU,MAAM,QAAQ,SAAS,CAAC;AAAA,IAC9C,CAAC;AAAA,EACH,CAAC;AACH;AAGO,SAAS,kBAAkB,KAAqB;AACrD,MAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,MAAI;AACF,WAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,GAAG;AAAA,EAC7D,QAAQ;AAAA,EAER;AACA,MAAI,QAAQ,aAAa,SAAS;AAChC,QAAI;AAKF,aAAO,IAAI,YAAY,SAAS,EAAE,OAAO,GAAG;AAAA,IAC9C,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,SAAO,IAAI,SAAS,MAAM;AAC5B;AAUO,SAAS,kBAAkB,KAAa,OAAiC,CAAC,GAAW;AAC1F,QAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,MAAI,aAAa,QAAS,QAAO;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI,IAAI,SAAS,GAAG,KAAK,IAAI,SAAS,IAAI,KAAa,oBAAW,GAAG,EAAG,QAAO;AAE/E,MAAY,iBAAQ,GAAG,EAAG,QAAO;AAEjC,QAAM,MAAM,KAAK,OAAO,QAAQ;AAChC,QAAM,WAAW,IAAI,WAAW,uBAC7B,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAME,aAAY,KAAK,kBAAkB,aAAa,UAAU,MAAc;AAC9E,QAAM,YAAY,IAAI,QAAQ,IAAI,MAAMA,UAAS,EAAE,OAAO,OAAO;AACjE,QAAM,SAAS,KAAK,UAAU;AAE9B,aAAW,OAAO,UAAU;AAC1B,eAAW,OAAO,SAAS;AAKzB,YAAM,OAAe,eAAM,KAAK,KAAK,MAAM,GAAG;AAC9C,UAAI,OAAO,IAAI,EAAG,QAAO;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAuB;AAC5C,MAAI;AACF,WAAO,WAAW,IAAI,KAAK,SAAS,IAAI,EAAE,OAAO;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,aACd,MACA,OAAiC,CAAC,GAC6B;AAC/D,QAAM,OAAO,KAAK,CAAC,KAAK;AACxB,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,QAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,QAAM,WAAW,kBAAkB,MAAM,IAAI;AAE7C,MAAI,aAAa,SAAS;AACxB,WAAO,EAAE,KAAK,UAAU,MAAM,CAAC,GAAG,IAAI,GAAG,gBAAgB,CAAC,EAAE;AAAA,EAC9D;AAGA,MAAI,gBAAgB,KAAK,QAAQ,GAAG;AAClC,UAAM,UAAU,CAAC,UAAU,GAAG,IAAI,EAAE,IAAI,cAAc,EAAE,KAAK,GAAG;AAChE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,MAAM,CAAC,MAAM,MAAM,MAAM,iBAAiB,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKlD,gBAAgB,EAAE,0BAA0B,KAAK;AAAA,IACnD;AAAA,EACF;AASA,MAAI,kBAAkB,QAAQ,KAAK,aAAa,MAAM;AACpD,UAAM,UAAU,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,cAAc,EAAE,KAAK,GAAG;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,MAAM,CAAC,MAAM,MAAM,MAAM,iBAAiB,OAAO,CAAC;AAAA,MAClD,gBAAgB,EAAE,0BAA0B,KAAK;AAAA,IACnD;AAAA,EACF;AAQA,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,UAAM,UAAU,qBAAqB,IAAI;AACzC,QAAI,SAAS;AACX,aAAO,EAAE,KAAK,UAAU,MAAM,SAAS,gBAAgB,CAAC,EAAE;AAAA,IAC5D;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,UAAU,MAAM,CAAC,GAAG,IAAI,GAAG,gBAAgB,CAAC,EAAE;AAC9D;AAGA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,6CAA6C,KAAK,QAAQ;AACnE;AAGO,SAAS,qBAAqB,MAA0C;AAC7E,QAAM,UACJ;AACF,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,IAAI,KAAK,CAAC,KAAK;AACrB,QAAI,oBAAoB,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ;AACtD,YAAM,MAAM,CAAC,GAAG,IAAI;AACpB,UAAI,IAAI,CAAC,IAAI,GAAG,OAAO,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,SAAyB;AACxD,SAAO,qBAAqB,OAAO;AACrC;AAEA,SAAS,kBAAkB,GAAoB;AAC7C,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,EAAG,QAAO;AAChD,MAAY,oBAAW,CAAC,EAAG,QAAO;AAClC,MAAY,iBAAQ,CAAC,EAAG,QAAO;AAC/B,SAAO;AACT;AAGO,SAAS,eAAe,KAAqB;AAClD,MAAI,QAAQ,GAAI,QAAO;AACvB,MAAI,CAAC,mBAAmB,KAAK,GAAG,EAAG,QAAO;AAC1C,SAAO,IAAI,IAAI,QAAQ,MAAM,IAAI,CAAC;AACpC;;;AFpRO,SAAS,mBAAmB,UAAwB,MAAuC;AAChG,QAAM,UAAkB,iBAAQ,KAAK,OAAO;AAC5C,QAAM,aAAa,KAAK,cAAc;AACtC,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,QAAM,OAAO,KAAK,QAAQ,IAAI,YAAY;AAK1C,QAAM,kBACJ,OAAO,KAAK,iBAAiB,aACzB,KAAK,gBACJ,MAAM;AACL,UAAMC,YAAW,KAAK,gBAAgB,CAAC;AACvC,WAAO,MAAMA;AAAA,EACf,GAAG;AAIT,QAAM,aACJ,OAAO,KAAK,aAAa,aAAa,KAAK,WAAW,MAAM,KAAK,aAAa;AAEhF,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKF,eAAe,CAAC,SAAgC;AAC9C,UAAI,WAAW,EAAG,QAAO;AACzB,YAAM,MAAM,OAAO,MAAM,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI;AACtE,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO,iBAAiB,KAAK,gBAAgB,CAAC;AAAA,IAChD;AAAA,IACA,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aACE;AAAA,QACJ;AAAA,QACA,YAAY;AAAA,UACV,MAAM;AAAA,UACN,aAAa,wBAAwB,UAAU;AAAA,QACjD;AAAA,MACF;AAAA,MACA,UAAU,CAAC,SAAS;AAAA,IACtB;AAAA,IACA,IAAI,OAAO,MAAgD,QAAQ;AACjE,YAAM,MAAM,KAAK,QAAQ,KAAK;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,4BAA4B;AACtD,UAAI,CAAC,WAAW,KAAK,CAAC,iBAAiB,KAAK,gBAAgB,CAAC,GAAG;AAC9D,cAAM,OAAO,KAAK,oBAAoB;AACtC,cAAM,SAAS,MAAM,KAAK,IAAI,EAAE,MAAM,eAAe,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC;AAChF,YAAI,OAAO,SAAS,QAAQ;AAC1B,gBAAM,IAAI;AAAA,YACR,gBAAgB,GAAG,GAAG,OAAO,cAAc,WAAM,OAAO,WAAW,KAAK,EAAE;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,gBAAgB;AAClC,iCAAuB,SAAS,OAAO,MAAM;AAAA,QAC/C;AAAA,MAEF;AACA,YAAM,mBAAmB,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,cAAc,UAAU,CAAC;AACjF,YAAM,SAAS,MAAM,WAAW,KAAK;AAAA,QACnC,KAAK;AAAA,QACL,YAAY;AAAA,QACZ;AAAA,QACA,QAAQ,KAAK;AAAA,MACf,CAAC;AACD,aAAO,oBAAoB,KAAK,MAAM;AAAA,IACxC;AAAA,EACF,CAAC;AAED,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aACE;AAAA,QACJ;AAAA,QACA,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aACE;AAAA,QACJ;AAAA,MACF;AAAA,MACA,UAAU,CAAC,SAAS;AAAA,IACtB;AAAA,IACA,IAAI,OAAO,MAA6C,QAAQ;AAC9D,YAAM,MAAM,KAAK,QAAQ,KAAK;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+BAA+B;AACzD,UAAI,CAAC,WAAW,KAAK,CAAC,iBAAiB,KAAK,gBAAgB,CAAC,GAAG;AAC9D,cAAM,OAAO,KAAK,oBAAoB;AACtC,cAAM,SAAS,MAAM,KAAK,IAAI,EAAE,MAAM,kBAAkB,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC;AACnF,YAAI,OAAO,SAAS,QAAQ;AAC1B,gBAAM,IAAI;AAAA,YACR,gBAAgB,GAAG,GAAG,OAAO,cAAc,WAAM,OAAO,WAAW,KAAK,EAAE;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,gBAAgB;AAClC,iCAAuB,SAAS,OAAO,MAAM;AAAA,QAC/C;AAAA,MAEF;AACA,YAAM,SAAS,MAAM,KAAK,MAAM,KAAK;AAAA,QACnC,KAAK;AAAA,QACL,SAAS,KAAK;AAAA,QACd,QAAQ,KAAK;AAAA,MACf,CAAC;AACD,aAAO,eAAe,MAAM;AAAA,IAC9B;AAAA,EACF,CAAC;AAED,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,IACV,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,WAAW,aAAa,qCAAqC;AAAA,QAC5E,OAAO;AAAA,UACL,MAAM;AAAA,UACN,aACE;AAAA,QACJ;AAAA,QACA,WAAW;AAAA,UACT,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,IAAI,OAAO,SAAgE;AACzE,YAAM,MAAM,KAAK,KAAK,KAAK,OAAO;AAAA,QAChC,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK,aAAa;AAAA,MAC/B,CAAC;AACD,UAAI,CAAC,IAAK,QAAO,OAAO,KAAK,KAAK;AAClC,aAAO,cAAc,KAAK,OAAO,GAAG;AAAA,IACtC;AAAA,EACF,CAAC;AAED,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,IACV,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,WAAW,aAAa,qCAAqC;AAAA,QAC5E,WAAW;AAAA,UACT,MAAM;AAAA,UACN,aACE;AAAA,QACJ;AAAA,MACF;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,IAAI,OAAO,SAAgD;AACzD,YAAM,MAAM,MAAM,KAAK,WAAW,KAAK,OAAO,EAAE,WAAW,KAAK,UAAU,CAAC;AAC3E,UAAI,CAAC,IAAK,QAAO,OAAO,KAAK,KAAK;AAClC,aAAO;AAAA,QACL,OAAO,KAAK;AAAA,QACZ,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,cAAc,IAAI;AAAA,MACpB;AAAA,IACF;AAAA,EACF,CAAC;AAED,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,UAAU;AAAA,MAC3B;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,IAAI,OAAO,SAA4B;AACrC,YAAM,MAAM,MAAM,KAAK,KAAK,KAAK,KAAK;AACtC,UAAI,CAAC,IAAK,QAAO,OAAO,KAAK,KAAK;AAClC,aAAO,cAAc,GAAG;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,WAAS,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,IACV,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,IAC7C,IAAI,YAAY;AACd,YAAM,MAAM,KAAK,KAAK;AACtB,UAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,aAAO,IAAI,IAAI,YAAY,EAAE,KAAK,IAAI;AAAA,IACxC;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAEA,SAAS,eAAe,GAA+C;AACrE,QAAM,SAAS,EAAE,eACb,QAAQ,EAAE,KAAK,qBAAkB,EAAE,OAAO,GAAG,SAAM,EAAE,eAAe,yBAAyB,+BAA+B,MAC5H,EAAE,aAAa,OACb,QAAQ,EAAE,KAAK,oCAAiC,EAAE,QAAQ,MAC1D,QAAQ,EAAE,KAAK;AACrB,SAAO,EAAE,UAAU,GAAG,MAAM;AAAA,EAAK,EAAE,OAAO,KAAK;AACjD;AAEA,SAAS,cAAc,OAAe,GAA8C;AAClF,QAAM,SAAS,EAAE,UACb,oBAAiB,EAAE,OAAO,GAAG,KAC7B,EAAE,aAAa,OACb,UAAU,EAAE,QAAQ,KACpB,EAAE,aACA,WAAW,EAAE,UAAU,MACvB;AACR,QAAM,SAAS,QAAQ,KAAK,SAAM,MAAM,oBAAiB,EAAE,UAAU;AAAA,IAAQ,EAAE,OAAO;AACtF,SAAO,EAAE,SAAS,GAAG,MAAM;AAAA,EAAK,EAAE,MAAM,KAAK;AAC/C;AAEA,SAAS,cAAc,GAA0C;AAC/D,QAAM,UAAU,EAAE,UACd,2CACA,QAAQ,EAAE,YAAY,GAAG;AAC7B,QAAM,OAAO,UAAU,EAAE,QAAQ,EAAE;AACnC,QAAM,SAAS,QAAQ,EAAE,EAAE,iBAAc,OAAO;AAAA,IAAQ,EAAE,OAAO;AACjE,SAAO,OAAO,GAAG,MAAM;AAAA,EAAK,IAAI,KAAK;AACvC;AAEA,SAAS,aAAa,GAA0C;AAC9D,QAAM,QAAQ,KAAK,IAAI,IAAI,EAAE,aAAa,KAAM,QAAQ,CAAC;AACzD,QAAM,QAAQ,EAAE,UACZ,uBAAoB,EAAE,OAAO,GAAG,KAChC,EAAE,aAAa,OACb,QAAQ,EAAE,QAAQ,KAClB,EAAE,aACA,WACA;AACR,SAAO,KAAK,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,MAAM,OAAO,EAAE,CAAC,KAAK,GAAG,aAAa,EAAE,OAAO;AACzF;AAEA,SAAS,UAAU,GAAW,GAAmB;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,QAAQ,EAAE,MAAM,IAAI;AAC1B,MAAI,MAAM,UAAU,EAAG,QAAO;AAC9B,QAAM,UAAU,MAAM,SAAS;AAC/B,SAAO,CAAC,WAAM,OAAO,0BAAqB,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI;AACzE;AAEO,SAAS,oBAAoB,KAAa,GAA6B;AAC5E,QAAM,SAAS,EAAE,WACb,KAAK,GAAG;AAAA,0BACR,KAAK,GAAG;AAAA,QAAW,EAAE,YAAY,GAAG;AACxC,SAAO,EAAE,SAAS,GAAG,MAAM;AAAA,EAAK,EAAE,MAAM,KAAK;AAC/C;;;ADzUA,SAASC,iBAAgB,KAAa,QAAqC;AACzE,MAAI,QAAQ,aAAa,SAAS;AAMhC,UAAM,OAAO,CAAC,QAAQ,OAAO,GAAG,GAAG,IAAI;AACvC,QAAI,WAAW,UAAW,MAAK,KAAK,IAAI;AACxC,QAAI;AACF,YAAM,SAASC,OAAM,YAAY,MAAM;AAAA,QACrC,OAAO;AAAA,QACP,aAAa;AAAA,MACf,CAAC;AAID,aAAO,GAAG,SAAS,MAAM;AAAA,MAEzB,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AACA;AAAA,EACF;AAGA,MAAI;AACF,YAAQ,KAAK,CAAC,KAAK,MAAM;AACzB;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,YAAQ,KAAK,KAAK,MAAM;AAAA,EAC1B,QAAQ;AAAA,EAER;AACF;AAGA,IAAM,2BAA2B,KAAK;AAGtC,IAAM,gBAAuC;AAAA;AAAA,EAE3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AACF;AA2CO,IAAM,cAAN,MAAkB;AAAA,EACN,OAAO,oBAAI,IAAyB;AAAA,EAC7C,SAAS;AAAA;AAAA,EAGjB,MAAM,MAAM,SAAiB,MAAgD;AAC3E,UAAM,UAAU,QAAQ,KAAK;AAC7B,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAC7D,UAAM,KAAK,oBAAoB,OAAO;AACtC,QAAI,OAAO,MAAM;AACf,YAAM,IAAI;AAAA,QACR,mCAAmC,EAAE;AAAA,MACvC;AAAA,IACF;AACA,UAAM,OAAO,gBAAgB,OAAO;AACpC,QAAI,KAAK,WAAW,EAAG,OAAM,IAAI,MAAM,+BAA+B;AACtE,UAAM,SAAS,KAAK,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,IAAI;AAC9D,UAAM,WAAW,KAAK,kBAAkB;AAExC,UAAM,EAAE,KAAK,MAAM,eAAe,IAAI,aAAa,IAAI;AACvD,UAAM,YAA0B;AAAA,MAC9B,KAAa,iBAAQ,KAAK,GAAG;AAAA,MAC7B,OAAO;AAAA,MACP,aAAa;AAAA,MACb,KAAK,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOb,UAAU,QAAQ,aAAa;AAAA,MAC/B,GAAG;AAAA,IACL;AAEA,QAAI;AACJ,QAAI;AACF,cAAQA,OAAM,KAAK,MAAM,SAAS;AAAA,IACpC,SAAS,KAAK;AAGZ,YAAMC,MAAK,KAAK;AAChB,YAAMC,OAAmB;AAAA,QACvB,IAAAD;AAAA,QACA,SAAS;AAAA,QACT,KAAK;AAAA,QACL,WAAW,KAAK,IAAI;AAAA,QACpB,UAAU;AAAA,QACV,QAAQ,kBAAmB,IAAc,OAAO;AAAA,QAChD,mBAAmB;AAAA,QACnB,SAAS;AAAA,QACT,YAAa,IAAc;AAAA,QAC3B,OAAO;AAAA,QACP,cAAc,QAAQ,QAAQ;AAAA,QAC9B,aAAa,MAAM;AAAA,QAAC;AAAA,QACpB,eAAe,QAAQ,QAAQ;AAAA,QAC/B,cAAc,MAAM;AAAA,QAAC;AAAA,QACrB,eAAe,oBAAI,IAAI;AAAA,MACzB;AACA,WAAK,KAAK,IAAIA,KAAIC,IAAG;AACrB,aAAO;AAAA,QACL,OAAOD;AAAA,QACP,KAAK;AAAA,QACL,cAAc;AAAA,QACd,cAAc;AAAA,QACd,SAASC,KAAI;AAAA,QACb,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,UAAM,KAAK,KAAK;AAChB,QAAI,eAA2B,MAAM;AAAA,IAAC;AACtC,UAAM,eAAe,IAAI,QAAc,CAAC,QAAQ;AAC9C,qBAAe;AAAA,IACjB,CAAC;AACD,QAAI,gBAA4B,MAAM;AAAA,IAAC;AACvC,UAAM,gBAAgB,IAAI,QAAc,CAAC,QAAQ;AAC/C,sBAAgB;AAAA,IAClB,CAAC;AACD,UAAM,MAAmB;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,MACT,KAAK,MAAM,OAAO;AAAA,MAClB,WAAW,KAAK,IAAI;AAAA,MACpB,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,mBAAmB;AAAA,MACnB,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb;AAAA,MACA,cAAc;AAAA,MACd,eAAe,oBAAI,IAAI;AAAA,IACzB;AACA,SAAK,KAAK,IAAI,IAAI,GAAG;AAErB,QAAI,eAAe;AAQnB,QAAI,iBAAiB;AACrB,UAAM,eAAe;AACrB,UAAM,SAAS,CAAC,UAA2B;AACzC,YAAM,IAAI,MAAM,SAAS;AACzB,UAAI,qBAAqB,EAAE;AAC3B,UAAI,UAAU;AACd,UAAI,IAAI,OAAO,SAAS,UAAU;AAIhC,cAAM,WAAW,IAAI,OAAO,SAAS;AACrC,cAAM,MAAM,IAAI,OAAO,QAAQ,MAAM,QAAQ;AAC7C,cAAM,QAAQ,OAAO,IAAI,MAAM,IAAI;AACnC,YAAI,SAAS;AAAA,EAA+B,IAAI,OAAO,MAAM,KAAK,CAAC;AAAA,MACrE;AACA,UAAI,CAAC,cAAc;AACjB,0BAAkB,iBAAiB,GAAG,MAAM,CAAC,YAAY;AACzD,mBAAW,MAAM,eAAe;AAC9B,cAAI,GAAG,KAAK,cAAc,GAAG;AAC3B,2BAAe;AACf,gBAAI,YAAY;AAChB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,UAAI,IAAI,cAAc,OAAO,GAAG;AAC9B,cAAM,UAAU,CAAC,GAAG,IAAI,aAAa;AACrC,YAAI,cAAc,MAAM;AACxB,mBAAW,QAAQ,QAAS,MAAK;AAAA,MACnC;AAAA,IACF;AACA,UAAM,QAAQ,GAAG,QAAQ,MAAM;AAC/B,UAAM,QAAQ,GAAG,QAAQ,MAAM;AAC/B,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,UAAI,UAAU;AACd,UAAI,aAAa,IAAI;AACrB,UAAI,YAAY;AAChB,UAAI,aAAa;AAAA,IACnB,CAAC;AACD,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,UAAU;AACd,UAAI,WAAW;AACf,UAAI,YAAY;AAChB,UAAI,aAAa;AAAA,IACnB,CAAC;AAED,UAAM,UAAU,MAAM,KAAK,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;AACpD,QAAI,KAAK,QAAQ,SAAS;AACxB,cAAQ;AAAA,IACV,OAAO;AACL,WAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,IAChE;AAGA,QAAI,QAA8C;AAClD,UAAM,QAAQ,KAAK;AAAA,MACjB;AAAA,MACA,IAAI,QAAc,CAAC,QAAQ;AACzB,gBAAQ,WAAW,KAAK,MAAM;AAAA,MAChC,CAAC;AAAA,IACH,CAAC;AACD,QAAI,MAAO,cAAa,KAAK;AAE7B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,KAAK,IAAI;AAAA,MACT,cAAc,IAAI;AAAA,MAClB;AAAA,MACA,SAAS,IAAI;AAAA,MACb,UAAU,IAAI;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,KAAK,IAAY,OAA+C,CAAC,GAAyB;AACxF,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,OAAO,IAAI;AACjB,QAAI,QAAQ;AACZ,QAAI,OAAO,KAAK,UAAU,YAAY,KAAK,SAAS,KAAK,KAAK,QAAQ,KAAK,QAAQ;AACjF,cAAQ,KAAK,MAAM,KAAK,KAAK;AAAA,IAC/B;AACA,QAAI,OAAO,KAAK,cAAc,YAAY,KAAK,YAAY,GAAG;AAC5D,YAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,YAAM,OAAO,MAAM,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,KAAK,SAAS,CAAC;AACnE,cAAQ,KAAK,KAAK,IAAI;AAAA,IACxB;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,SAAS,IAAI;AAAA,MACb,UAAU,IAAI;AAAA,MACd,SAAS,IAAI;AAAA,MACb,KAAK,IAAI;AAAA,MACT,YAAY,IAAI;AAAA,IAClB;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,IAAY,OAA+B,CAAC,GAAkC;AAC7F,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI,CAAC,IAAI,SAAS;AAChB,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,IAAI;AAAA,QACd,cAAc,IAAI;AAAA,MACpB;AAAA,IACF;AAEA,UAAM,YAAY,KAAK,IAAI,GAAG,KAAK,IAAI,KAAQ,KAAK,aAAa,GAAK,CAAC;AACvE,UAAM,cAAc,IAAI;AACxB,QAAI,aAAkC;AACtC,UAAM,gBAAgB,IAAI,QAAc,CAACC,aAAY;AACnD,mBAAaA;AACb,UAAI,cAAc,IAAIA,QAAO;AAAA,IAC/B,CAAC;AAED,QAAI,QAA8C;AAClD,UAAM,QAAQ,KAAK;AAAA,MACjB,IAAI;AAAA,MACJ;AAAA,MACA,IAAI,QAAc,CAACA,aAAY;AAC7B,gBAAQ,WAAWA,UAAS,SAAS;AAAA,MACvC,CAAC;AAAA,IACH,CAAC;AACD,QAAI,MAAO,cAAa,KAAK;AAC7B,QAAI,WAAY,KAAI,cAAc,OAAO,UAAU;AAEnD,WAAO;AAAA,MACL,QAAQ,CAAC,IAAI;AAAA,MACb,UAAU,IAAI;AAAA,MACd,cAAc,kBAAkB,aAAa,IAAI,MAAM;AAAA,IACzD;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,KAAK,IAAY,OAA6B,CAAC,GAA8B;AACjF,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI,CAAC,IAAI,WAAW,CAAC,IAAI,MAAO,QAAO,SAAS,GAAG;AACnD,UAAM,UAAU,KAAK,IAAI,GAAG,KAAK,WAAW,GAAI;AAIhD,QAAI,IAAI,QAAQ,MAAM;AACpB,MAAAJ,iBAAgB,IAAI,KAAK,SAAS;AAAA,IACpC,OAAO;AACL,UAAI;AACF,YAAI,MAAM,KAAK,SAAS;AAAA,MAC1B,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,UAAM,QAAQ,KAAK,CAAC,IAAI,eAAe,IAAI,QAAc,CAAC,QAAQ,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC;AAC5F,QAAI,IAAI,SAAS;AACf,UAAI,IAAI,QAAQ,MAAM;AACpB,QAAAA,iBAAgB,IAAI,KAAK,SAAS;AAAA,MACpC,OAAO;AACL,YAAI;AACF,cAAI,MAAM,KAAK,SAAS;AAAA,QAC1B,QAAQ;AAAA,QAER;AAAA,MACF;AAIA,YAAM,QAAQ,KAAK,CAAC,IAAI,eAAe,IAAI,QAAc,CAAC,QAAQ,WAAW,KAAK,GAAI,CAAC,CAAC,CAAC;AAAA,IAC3F;AACA,WAAO,SAAS,GAAG;AAAA,EACrB;AAAA,EAEA,OAAoB;AAClB,WAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,IAAI,QAAQ;AAAA,EAC7C;AAAA,EAEA,MAAM,SAAS,aAAa,KAAqB;AAC/C,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,cAAc,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;AAC9E,QAAI,YAAY,WAAW,EAAG;AAE9B,eAAW,OAAO,aAAa;AAC7B,UAAI,IAAI,QAAQ,KAAM,CAAAA,iBAAgB,IAAI,KAAK,SAAS;AAAA;AAEtD,YAAI;AACF,cAAI,OAAO,KAAK,SAAS;AAAA,QAC3B,QAAQ;AAAA,QAER;AAAA,IACJ;AACA,UAAM,WAAW,QAAQ,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;AACnE,UAAM,UAAU,MAAM,KAAK,IAAI,IAAI;AAInC,UAAM,UAAU,KAAK,IAAI,MAAM,KAAK,IAAI,GAAG,aAAa,CAAC,CAAC;AAC1D,UAAM,QAAQ,KAAK,CAAC,UAAU,IAAI,QAAc,CAAC,QAAQ,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC;AAEnF,eAAW,OAAO,aAAa;AAC7B,UAAI,CAAC,IAAI,QAAS;AAClB,UAAI,IAAI,QAAQ,KAAM,CAAAA,iBAAgB,IAAI,KAAK,SAAS;AAAA;AAEtD,YAAI;AACF,cAAI,OAAO,KAAK,SAAS;AAAA,QAC3B,QAAQ;AAAA,QAER;AAAA,IACJ;AAKA,UAAM,YAAY,KAAK,IAAI,KAAK,aAAa,QAAQ,CAAC;AACtD,UAAM,QAAQ,KAAK,CAAC,UAAU,IAAI,QAAc,CAAC,QAAQ,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC;AAAA,EACvF;AAAA;AAAA,EAGA,eAAuB;AACrB,QAAI,IAAI;AACR,eAAW,OAAO,KAAK,KAAK,OAAO,EAAG,KAAI,IAAI,QAAS;AACvD,WAAO;AAAA,EACT;AACF;AAiCA,SAAS,SAAS,KAA6B;AAC7C,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,WAAW,IAAI;AAAA,IACf,UAAU,IAAI;AAAA,IACd,QAAQ,IAAI;AAAA,IACZ,mBAAmB,IAAI;AAAA,IACvB,SAAS,IAAI;AAAA,IACb,YAAY,IAAI;AAAA,EAClB;AACF;AAEA,SAAS,kBAAkB,QAAgB,OAAuB;AAChE,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,MAAM,WAAW,MAAM,EAAG,QAAO,MAAM,MAAM,OAAO,MAAM;AAC9D,SAAO;AACT;","names":["spawn","pathMod","pathMod","resolve","spawn","pathMod","isAllowed","resolve","resolve","spawn","delimiter","snapshot","killProcessTree","spawn","id","job","resolve"]}

package/dist/cli/chunk-U3V2ZQ5J.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/prompt-fragments.ts","../../src/memory/project.ts","../../src/skills.ts"],"sourcesContent":["/** Shared prompt fragments — single source so house-style rules can't drift across agent/subagent/skill prompts. */\n\n/** Embedded literally — no interpolation, so prefix-cache hash stays stable across sessions. */\nexport const TUI_FORMATTING_RULES = `Formatting (rendered in a TUI with a real markdown renderer):\n- Tabular data → GitHub-Flavored Markdown tables with ASCII pipes (\\`| col | col |\\` header + \\`| --- | --- |\\` separator). Never use Unicode box-drawing characters (│ ─ ┼ ┌ ┐ └ ┘ ├ ┤) — they look intentional but break terminal word-wrap and render as garbled columns at narrow widths.\n- Keep table cells short (one phrase each). If a cell needs a paragraph, use bullets below the table instead.\n- Code, file paths with line ranges, and shell commands → fenced code blocks (\\`\\`\\`).\n- Do NOT draw decorative frames around content with \\`┌──┐ │ └──┘\\` characters. The renderer adds its own borders; extra ASCII art adds noise and shatters at narrow widths.\n- For flow charts and diagrams: a plain bullet list with \\`→\\` or \\`↓\\` between steps. Don't try to draw boxes-and-arrows in ASCII; it never survives word-wrap.`;\n\nexport const ESCALATION_CONTRACT = `Cost-aware escalation (when you're running on deepseek-v4-flash):\n\nIf a task CLEARLY exceeds what flash can do well — complex cross-file architecture refactors, subtle concurrency / security / correctness invariants you can't resolve with confidence, or a design trade-off you'd be guessing at — output the marker as the FIRST line of your response (nothing before it, not even whitespace on a separate line). This aborts the current call and retries this turn on deepseek-v4-pro, one shot.\n\nTwo accepted forms:\n- \\`<<<NEEDS_PRO>>>\\` — bare marker, no rationale.\n- \\`<<<NEEDS_PRO: <one-sentence reason>>>>\\` — preferred. The reason text appears in the user-visible warning (\"⇧ flash requested escalation — <your reason>\"), so they understand WHY a more expensive call is happening. Keep it under ~150 chars, no newlines, no nested \\`>\\` characters. Examples: \\`<<<NEEDS_PRO: cross-file refactor across 6 modules with circular imports>>>\\` or \\`<<<NEEDS_PRO: subtle session-token race; flash would likely miss the locking invariant>>>\\`.\n\nDo NOT emit any other content in the same response when you request escalation. Use this sparingly: normal tasks — reading files, small edits, clear bug fixes, straightforward feature additions — stay on flash. Request escalation ONLY when you would otherwise produce a guess or a visibly-mediocre answer. If in doubt, attempt the task on flash first; the system also escalates automatically if you hit 3+ repair / SEARCH-mismatch errors in a single turn (the user sees a typed breakdown).`;\n\nexport const NEGATIVE_CLAIM_RULE = `Negative claims (\"X is missing\", \"Y isn't implemented\", \"there's no Z\") are the #1 hallucination shape. They feel safe to write because no citation seems possible — but that's exactly why you must NOT write them on instinct.\n\nIf you have a search tool (\\`search_content\\`, \\`grep\\`, web search), call it FIRST before asserting absence:\n- Returns matches → you were wrong; correct yourself and cite the matches.\n- Returns nothing → state the absence WITH the search query as evidence: \\`No callers of \\\\\\`foo()\\\\\\` found (search_content \"foo\").\\`\n\nIf you have no search tool, qualify hard: \"I haven't verified — this is a guess.\" Never assert absence with fake authority.`;\n","/** REASONIX.md pinned into ImmutablePrefix.system; edits invalidate the prefix-cache fingerprint. */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nexport const PROJECT_MEMORY_FILE = \"REASONIX.md\";\nexport const PROJECT_MEMORY_MAX_CHARS = 8000;\n\nexport interface ProjectMemory {\n  /** Absolute path the memory was read from. */\n  path: string;\n  /** Post-truncation content (may include a \"… (truncated N chars)\" marker). */\n  content: string;\n  /** Original byte length before truncation. */\n  originalChars: number;\n  /** True iff `originalChars > PROJECT_MEMORY_MAX_CHARS`. */\n  truncated: boolean;\n}\n\n/** Empty / whitespace-only files return null so they don't perturb the cache prefix. */\nexport function readProjectMemory(rootDir: string): ProjectMemory | null {\n  const path = join(rootDir, PROJECT_MEMORY_FILE);\n  if (!existsSync(path)) return null;\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  }\n  const trimmed = raw.trim();\n  if (!trimmed) return null;\n  const originalChars = trimmed.length;\n  const truncated = originalChars > PROJECT_MEMORY_MAX_CHARS;\n  const content = truncated\n    ? `${trimmed.slice(0, PROJECT_MEMORY_MAX_CHARS)}\\n… (truncated ${\n        originalChars - PROJECT_MEMORY_MAX_CHARS\n      } chars)`\n    : trimmed;\n  return { path, content, originalChars, truncated };\n}\n\nexport function memoryEnabled(): boolean {\n  const env = process.env.REASONIX_MEMORY;\n  if (env === \"off\" || env === \"false\" || env === \"0\") return false;\n  return true;\n}\n\n/** Deterministic — same memory file always yields the same prefix hash. */\nexport function applyProjectMemory(basePrompt: string, rootDir: string): string {\n  if (!memoryEnabled()) return basePrompt;\n  const mem = readProjectMemory(rootDir);\n  if (!mem) return basePrompt;\n  return `${basePrompt}\n\n# Project memory (REASONIX.md)\n\nThe user pinned these notes about this project — treat them as authoritative context for every turn:\n\n\\`\\`\\`\n${mem.content}\n\\`\\`\\`\n`;\n}\n","/** Project scope wins over global. Only names+descriptions enter the prefix; bodies load lazily into the append-only log. */\n\nimport { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { NEGATIVE_CLAIM_RULE, TUI_FORMATTING_RULES } from \"./prompt-fragments.js\";\n\nexport const SKILLS_DIRNAME = \"skills\";\nexport const SKILL_FILE = \"SKILL.md\";\n/** Cap on the pinned skills-index block, mirrors memory-index cap. */\nexport const SKILLS_INDEX_MAX_CHARS = 4000;\n/** Skill identifier shape — alnum + `_` + `-` + interior `.`, 1-64 chars. */\nconst VALID_SKILL_NAME = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/;\n\nexport type SkillScope = \"project\" | \"global\" | \"builtin\";\n\n/** inline = body enters parent log; subagent = isolated child loop, only final answer returns. */\nexport type SkillRunAs = \"inline\" | \"subagent\";\n\nexport interface Skill {\n  /** Canonical name — sanitized, matches the directory / filename stem. */\n  name: string;\n  /** One-line description shown in the pinned index. */\n  description: string;\n  /** Full markdown body (post-frontmatter). Loaded on demand. */\n  body: string;\n  /** Which scope this skill was loaded from. */\n  scope: SkillScope;\n  /** Absolute path to the SKILL.md (or {name}.md) file, or \"(builtin)\" for shipped defaults. */\n  path: string;\n  /** Parsed `allowed-tools` frontmatter — when present, the spawned subagent's registry is scoped to these literal tool names. */\n  allowedTools?: readonly string[];\n  runAs: SkillRunAs;\n  /** Subagent model override; only meaningful when `runAs === \"subagent\"`. */\n  model?: string;\n}\n\nexport interface SkillStoreOptions {\n  /** Override `$HOME` — tests point this at a tmpdir. */\n  homeDir?: string;\n  /** Required for project-scope skills; omit to read only the global scope. */\n  projectRoot?: string;\n  /** Suppress bundled built-ins — for tests asserting exact list contents. */\n  disableBuiltins?: boolean;\n}\n\nfunction parseFrontmatter(raw: string): { data: Record<string, string>; body: string } {\n  const lines = raw.split(/\\r?\\n/);\n  if (lines[0] !== \"---\") return { data: {}, body: raw };\n  const end = lines.indexOf(\"---\", 1);\n  if (end < 0) return { data: {}, body: raw };\n  const data: Record<string, string> = {};\n  for (let i = 1; i < end; i++) {\n    const line = lines[i];\n    if (!line) continue;\n    const m = line.match(/^([a-zA-Z_][a-zA-Z0-9_-]*):\\s*(.*)$/);\n    if (m?.[1]) data[m[1]] = (m[2] ?? \"\").trim();\n  }\n  return {\n    data,\n    body: lines\n      .slice(end + 1)\n      .join(\"\\n\")\n      .replace(/^\\n+/, \"\"),\n  };\n}\n\nfunction isValidSkillName(name: string): boolean {\n  return VALID_SKILL_NAME.test(name);\n}\n\nfunction parseAllowedTools(raw: string | undefined): readonly string[] | undefined {\n  if (raw === undefined) return undefined;\n  const names = raw\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter(Boolean);\n  return names.length > 0 ? Object.freeze(names) : undefined;\n}\n\nexport class SkillStore {\n  private readonly homeDir: string;\n  private readonly projectRoot: string | undefined;\n  private readonly disableBuiltins: boolean;\n\n  constructor(opts: SkillStoreOptions = {}) {\n    this.homeDir = opts.homeDir ?? homedir();\n    this.projectRoot = opts.projectRoot ? resolve(opts.projectRoot) : undefined;\n    this.disableBuiltins = opts.disableBuiltins === true;\n  }\n\n  /** True iff this store was configured with a project root. */\n  hasProjectScope(): boolean {\n    return this.projectRoot !== undefined;\n  }\n\n  /** Project scope first so per-repo skill overrides a global with the same name. */\n  roots(): Array<{ dir: string; scope: SkillScope }> {\n    const out: Array<{ dir: string; scope: SkillScope }> = [];\n    if (this.projectRoot) {\n      out.push({\n        dir: join(this.projectRoot, \".reasonix\", SKILLS_DIRNAME),\n        scope: \"project\",\n      });\n    }\n    out.push({ dir: join(this.homeDir, \".reasonix\", SKILLS_DIRNAME), scope: \"global\" });\n    return out;\n  }\n\n  /** Higher-priority root wins on collision (project > global > builtin); sorted for stable prefix hash. */\n  list(): Skill[] {\n    const byName = new Map<string, Skill>();\n    for (const { dir, scope } of this.roots()) {\n      if (!existsSync(dir)) continue;\n      let entries: import(\"node:fs\").Dirent[];\n      try {\n        entries = readdirSync(dir, { withFileTypes: true });\n      } catch {\n        continue;\n      }\n      for (const entry of entries) {\n        const skill = this.readEntry(dir, scope, entry);\n        if (!skill) continue;\n        if (!byName.has(skill.name)) byName.set(skill.name, skill);\n      }\n    }\n    // Builtins last so user/project files override on name collision.\n    if (!this.disableBuiltins) {\n      for (const skill of BUILTIN_SKILLS) {\n        if (!byName.has(skill.name)) byName.set(skill.name, skill);\n      }\n    }\n    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));\n  }\n\n  /** Scaffold a new skill stub at the chosen scope. Refuses to overwrite. */\n  create(name: string, scope: \"project\" | \"global\"): { path: string } | { error: string } {\n    if (!isValidSkillName(name)) {\n      return { error: `invalid skill name: \"${name}\" — use letters, digits, _, -, .` };\n    }\n    if (scope === \"project\" && !this.projectRoot) {\n      return { error: \"project scope requires a workspace — run from `reasonix code`\" };\n    }\n    const root =\n      scope === \"project\"\n        ? join(this.projectRoot ?? \"\", \".reasonix\", SKILLS_DIRNAME)\n        : join(this.homeDir, \".reasonix\", SKILLS_DIRNAME);\n    const flat = join(root, `${name}.md`);\n    const folder = join(root, name, SKILL_FILE);\n    if (existsSync(folder)) {\n      return { error: `skill \"${name}\" already exists at ${folder}` };\n    }\n    mkdirSync(dirname(flat), { recursive: true });\n    try {\n      writeFileSync(flat, skillStubBody(name), { encoding: \"utf8\", flag: \"wx\" });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n        return { error: `skill \"${name}\" already exists at ${flat}` };\n      }\n      throw err;\n    }\n    return { path: flat };\n  }\n\n  /** Resolve one skill by name. Returns `null` if not found or malformed. */\n  read(name: string): Skill | null {\n    if (!isValidSkillName(name)) return null;\n    for (const { dir, scope } of this.roots()) {\n      if (!existsSync(dir)) continue;\n      const dirCandidate = join(dir, name, SKILL_FILE);\n      if (existsSync(dirCandidate) && statSync(dirCandidate).isFile()) {\n        return this.parse(dirCandidate, name, scope);\n      }\n      const flatCandidate = join(dir, `${name}.md`);\n      if (existsSync(flatCandidate) && statSync(flatCandidate).isFile()) {\n        return this.parse(flatCandidate, name, scope);\n      }\n    }\n    if (!this.disableBuiltins) {\n      for (const skill of BUILTIN_SKILLS) {\n        if (skill.name === name) return skill;\n      }\n    }\n    return null;\n  }\n\n  private readEntry(dir: string, scope: SkillScope, entry: import(\"node:fs\").Dirent): Skill | null {\n    if (entry.isDirectory()) {\n      if (!isValidSkillName(entry.name)) return null;\n      const file = join(dir, entry.name, SKILL_FILE);\n      if (!existsSync(file)) return null;\n      return this.parse(file, entry.name, scope);\n    }\n    if (entry.isFile() && entry.name.endsWith(\".md\")) {\n      const stem = entry.name.slice(0, -3);\n      if (!isValidSkillName(stem)) return null;\n      return this.parse(join(dir, entry.name), stem, scope);\n    }\n    return null;\n  }\n\n  private parse(path: string, stem: string, scope: SkillScope): Skill | null {\n    let raw: string;\n    try {\n      raw = readFileSync(path, \"utf8\");\n    } catch {\n      return null;\n    }\n    const { data, body } = parseFrontmatter(raw);\n    const name = data.name && isValidSkillName(data.name) ? data.name : stem;\n    return {\n      name,\n      description: (data.description ?? \"\").trim(),\n      body: body.trim(),\n      scope,\n      path,\n      allowedTools: parseAllowedTools(data[\"allowed-tools\"]),\n      runAs: parseRunAs(data.runAs),\n      model: data.model?.startsWith(\"deepseek-\") ? data.model : undefined,\n    };\n  }\n}\n\n/** Unknown values default to the safe (non-spawning) `inline` mode. */\nfunction parseRunAs(raw: string | undefined): SkillRunAs {\n  return raw?.trim() === \"subagent\" ? \"subagent\" : \"inline\";\n}\n\n/** Stub markdown for `/skill new` — minimal frontmatter + scaffolding the user fills in. */\nfunction skillStubBody(name: string): string {\n  return `---\nname: ${name}\ndescription: One-liner — what does this skill do?\n---\n\n# ${name}\n\nReplace this body with the playbook the model should follow when this skill is invoked.\n\nTips:\n- Reference tools by name (run_command, edit_file, search_content, ...)\n- Add \\`runAs: subagent\\` to frontmatter to spawn an isolated subagent loop\n- Add \\`allowed-tools: read_file, search_content\\` to scope a subagent's tools\n`;\n}\n\n/** Subagent tag goes AFTER the name in brackets — leading-marker tags get copied into `name` arg verbatim. */\nfunction skillIndexLine(s: Pick<Skill, \"name\" | \"description\" | \"runAs\">): string {\n  const safeDesc = s.description.replace(/\\n/g, \" \").trim();\n  const tag = s.runAs === \"subagent\" ? \" [🧬 subagent]\" : \"\";\n  const max = 130 - s.name.length - tag.length;\n  const clipped = safeDesc.length > max ? `${safeDesc.slice(0, Math.max(1, max - 1))}…` : safeDesc;\n  return clipped ? `- ${s.name}${tag} — ${clipped}` : `- ${s.name}${tag}`;\n}\n\n/** Bodies stay out — prefix must stay short + cacheable; bodies load on demand. */\nexport function applySkillsIndex(basePrompt: string, opts: SkillStoreOptions = {}): string {\n  const store = new SkillStore(opts);\n  const skills = store.list().filter((s) => s.description);\n  if (skills.length === 0) return basePrompt;\n  const lines = skills.map(skillIndexLine);\n  const joined = lines.join(\"\\n\");\n  const truncated =\n    joined.length > SKILLS_INDEX_MAX_CHARS\n      ? `${joined.slice(0, SKILLS_INDEX_MAX_CHARS)}\\n… (truncated ${\n          joined.length - SKILLS_INDEX_MAX_CHARS\n        } chars)`\n      : joined;\n  return [\n    basePrompt,\n    \"\",\n    \"# Skills — playbooks you can invoke\",\n    \"\",\n    'One-liner index. Each entry is either a built-in or a user-authored playbook. Call `run_skill({ name: \"<skill-name>\", arguments: \"<task>\" })` — the `name` is JUST the skill identifier (e.g. `\"explore\"`), NOT the `[🧬 subagent]` tag that appears after it. Entries tagged `[🧬 subagent]` spawn an **isolated subagent** — its tool calls and reasoning never enter your context, only its final answer does. Use subagent skills for tasks that would otherwise flood your context (deep exploration, multi-step research, anything where you only need the conclusion). Plain skills are inlined: their body becomes a tool result you read and act on directly. The user can also invoke a skill via `/skill <name>`.',\n    \"\",\n    \"```\",\n    truncated,\n    \"```\",\n  ].join(\"\\n\");\n}\n\nconst BUILTIN_EXPLORE_BODY = `You are running as an exploration subagent. Your job is to investigate the codebase the parent agent pointed you at, then return one focused, distilled answer.\n\nHow to operate:\n- Use read_file, search_files, search_content, directory_tree, list_directory, get_file_info as your primary tools. Stay read-only.\n- For \"find all places that call / reference / use X\" questions, use \\`search_content\\` (content grep) — NOT \\`search_files\\` (which only matches file names). This is the most common subagent mistake; using the wrong tool gives empty results and you waste your iter budget chasing a phantom.\n- Cast a wide net first (search_content for symbol references, directory_tree for structure) to map the territory; then read the 3-10 most relevant files in full.\n- Don't read every file — be selective. Aim for breadth on the first pass, depth only where the question demands it.\n- Stop exploring as soon as you can answer the question. The parent doesn't see your tool calls, so over-exploration is pure waste.\n\nYour final answer:\n- One paragraph (or a few short bullets). Lead with the conclusion.\n- Cite specific file paths + line ranges when they support the answer.\n- If the question can't be answered from what you found, say so plainly and suggest where to look next.\n- No follow-up offers, no \"let me know if you need more.\" The parent will ask again if they need more.\n\n${NEGATIVE_CLAIM_RULE}\n\n${TUI_FORMATTING_RULES}\n\nThe 'task' the parent gave you is the question you must answer. Treat any other reading of it as scope creep.`;\n\nconst BUILTIN_RESEARCH_BODY = `You are running as a research subagent. Your job is to gather information from code AND the web, synthesize it, and return one focused conclusion.\n\nHow to operate:\n- Combine code reading (read_file, search_files) with web tools (web_search, web_fetch) as appropriate to the question.\n- For \"how does X work\" / \"is Y supported\" questions: web first to find the canonical reference, then verify against the local code.\n- For \"what's our policy on Z\" / \"where do we use Q\": local code first, web only if you need to compare against external standards.\n- Cap yourself at ~10 tool calls. If you can't converge in 10, return what you have plus a note about what's missing.\n\nYour final answer:\n- One paragraph (or short bullets). Lead with the conclusion.\n- Cite both code (file:line) AND web sources (URL) when they back the answer.\n- Distinguish \"I verified this in code\" from \"I read this on a docs page\" — the parent will trust the former more.\n- If the answer is uncertain, say so. Don't invent confidence.\n\n${NEGATIVE_CLAIM_RULE}\n\n${TUI_FORMATTING_RULES}\n\nThe 'task' the parent gave you is the research question. Stay on it.`;\n\nconst BUILTIN_REVIEW_BODY = `You are running as a code-review subagent. Your job is to inspect the changes the user is about to ship — usually the current git branch vs its upstream — and produce a focused review the parent can hand back to the user.\n\nHow to operate:\n- Default scope: the current branch's diff vs the default branch. If the user's task names a specific commit range or files, honor that instead.\n- Discover scope first: \\`run_command git status\\`, \\`git diff --stat\\`, \\`git log --oneline\\` to see what changed. Then \\`git diff\\` (or \\`git diff <base>...HEAD\\`) for the actual hunks.\n- Read the touched files (\\`read_file\\`) when the diff alone doesn't carry enough context — function signatures, surrounding invariants, callers.\n- For \"any callers depending on this?\" questions: \\`search_content\\` against the symbol BEFORE asserting impact.\n- Stay read-only. Never \\`run_command git commit\\`, never write files, never propose SEARCH/REPLACE blocks. The parent decides whether to act on your findings.\n- Cap yourself at ~12 tool calls. If the diff is too big to review in one pass, pick the riskiest 2-3 files and say so explicitly.\n\nWhat to look for, in priority order:\n1. **Correctness bugs** — off-by-one, null/undefined handling, race conditions, wrong sign / wrong operator, edge cases the code doesn't handle.\n2. **Security** — injection (SQL, shell, path traversal), secrets in code, missing authz checks, unsafe deserialization.\n3. **Behavior changes the diff hides** — renames that miss callers, removed branches that were load-bearing, error-handling that now swallows what used to surface.\n4. **Tests** — does the change have tests for the new behavior? Are existing tests still meaningful, or did the change make them tautological?\n5. **Style + consistency** — only flag deviations that matter (unsafe \\`any\\`, missing types in TypeScript, inconsistent error shape). Don't pile on cosmetic nits if the substance is clean.\n\nYour final answer:\n- Lead with a one-sentence verdict: \"ship as-is\" / \"minor nits, OK to ship after\" / \"blocking issues, do not ship\".\n- Then a short bulleted list of issues, each with: file:line citation + the problem in one sentence + what to change.\n- Group by severity if you have more than 4 items: **Blocking**, **Should-fix**, **Nits**.\n- If everything looks clean, say so plainly. Don't manufacture concerns.\n\n${NEGATIVE_CLAIM_RULE}\n\n${TUI_FORMATTING_RULES}\n\nThe 'task' the parent gave you describes WHAT to review (a branch, a file set, or \"the pending changes\"). Stay on it; don't redesign the feature.`;\n\nconst BUILTIN_SECURITY_REVIEW_BODY = `You are running as a security-review subagent. Your job is to inspect the changes the user is about to ship — usually the current git branch vs its upstream — through a security lens specifically, and report exploitable issues.\n\nHow to operate:\n- Default scope: the current branch's diff vs the default branch. If the user names a different range or a directory, honor that.\n- Discover scope first: \\`git status\\`, \\`git diff --stat\\`, \\`git diff <base>...HEAD\\`. Read touched files (\\`read_file\\`) when the diff alone doesn't carry security context — auth checks, input validation, the actual handler that calls into the changed function.\n- Use \\`search_content\\` to verify \"is this user-controlled input ever sanitized later?\" / \"are there other call sites that depend on this validation?\" before asserting impact.\n- Stay read-only. Never write, never run destructive commands, never propose SEARCH/REPLACE blocks. The parent decides what to act on.\n- Cap yourself at ~12 tool calls. If the diff is too big, focus on the riskiest 2-3 files and say so explicitly.\n\nThreat model — flag with severity:\n\n**CRITICAL** (do-not-ship):\n- SQL / NoSQL / shell / template injection — user input concatenated into a query, command, or template without parameterization.\n- Path traversal — user-controlled filenames touching the filesystem without canonicalization + sandbox check.\n- Authentication / authorization missing — endpoints / actions that should require a session check but don't.\n- Hardcoded secrets — API keys, passwords, signing tokens visible in the diff.\n- Deserialization of untrusted input — \\`pickle.loads\\`, \\`yaml.load\\` (non-safe), \\`eval\\`, \\`Function()\\`, \\`unserialize()\\`.\n- Cryptographic mistakes — homemade crypto, weak hashes (MD5/SHA-1) for passwords, missing IVs, ECB mode, predictable nonces.\n\n**HIGH**:\n- XSS — user input rendered into HTML without escaping (or wrong escaping context).\n- SSRF — fetching URLs from user input without an allowlist.\n- Race conditions in security-relevant code — TOCTOU on auth/file checks.\n- Open redirects — user-controlled URL passed to a redirect helper.\n- Insufficient logging on security events (login failure, permission denial) — only flag if the codebase clearly DOES log elsewhere.\n\n**MEDIUM**:\n- Verbose error messages leaking internal paths / stack traces / SQL.\n- Missing rate limiting on a credential / token endpoint.\n- Cross-origin / cookie-flag issues (missing \\`Secure\\` / \\`HttpOnly\\` / \\`SameSite\\`).\n\nThings to NOT pile on (out of scope here — the regular /review covers them):\n- Style, formatting, naming.\n- Performance, refactor opportunities, test coverage gaps that aren't security-relevant.\n- \"Should be a constant\" / \"extract this helper\" — irrelevant to ship-blocking.\n\nYour final answer:\n- Lead with a one-sentence verdict: \"no security issues found\", \"minor concerns\", or \"blocking issues\".\n- Then a list grouped by severity. Each item: file:line + 1-sentence threat + 1-sentence fix direction (no full SEARCH/REPLACE — the user / parent agent will write that).\n- If clean, say so plainly. Don't manufacture findings.\n\n${NEGATIVE_CLAIM_RULE}\n\n${TUI_FORMATTING_RULES}\n\nThe 'task' the parent gave you names what to review. Stay on it; don't redesign the feature.`;\n\nconst BUILTIN_TEST_BODY = `You are running as the parent agent — this skill is INLINED, not a subagent. The user invoked /test (or asked you to \"run the tests and fix failures\"). Your job: run the project's test suite, diagnose any failure, propose fixes as SEARCH/REPLACE edit blocks, then re-run. Repeat until green or you hit a wall you should escalate.\n\nHow to operate:\n\n1. **Detect the test command**.\n   - Look for \\`package.json\\` → \\`scripts.test\\` first (most common: \\`npm test\\`, \\`pnpm test\\`, \\`yarn test\\`).\n   - If no package.json or no test script: try \\`pytest\\`, \\`go test ./...\\`, \\`cargo test\\` based on what files exist (pyproject.toml/requirements.txt → pytest; go.mod → go test; Cargo.toml → cargo test).\n   - If you can't tell, ASK the user for the command — don't guess. One question, one tool call to confirm.\n\n2. **Run it via run_command** (typical timeout 120s, bigger if the suite is large). Capture stdout + stderr.\n\n3. **Read the failures**. Pull out: which test names failed, the actual error/traceback, the file + line that threw. Don't just paraphrase — locate the exact assertion or stack frame.\n\n4. **Propose fixes**. For each distinct failure:\n   - If the failure is in PRODUCTION code (test catches a real bug) → propose a SEARCH/REPLACE that fixes the production code.\n   - If the failure is in TEST code (test is wrong, codebase is right) → propose a SEARCH/REPLACE that updates the test, AND say so explicitly: \"This is a test bug, not a production bug — updating the assertion.\"\n   - If the failure is environmental (missing dep, wrong node version, missing fixture file) → say so and stop. Don't try to install packages or change config without checking with the user.\n\n5. **Apply + re-run**. After the user accepts the edit blocks, run the test command again. Iterate.\n\n6. **Stop conditions**:\n   - All tests pass → report green, summarize what changed.\n   - Same test still failing after 2 fix attempts on the same line → STOP. Tell the user \"I've tried twice, it's still failing — here's what I think is happening, want me to try a different angle?\". Don't loop indefinitely.\n   - 3+ unrelated failures → fix one at a time, smallest first, so each pass narrows the surface.\n\nDon't:\n- Run \\`npm install\\` / \\`pip install\\` / \\`cargo update\\` without asking — those mutate lockfiles and have global effects.\n- Disable, skip, or delete failing tests to \"make it green\". If a test seems wrong, update its assertion with a one-sentence explanation, but never add \\`.skip\\` / \\`it.skip\\` / \\`@pytest.mark.skip\\`.\n- Modify the test runner config (vitest.config, jest.config, etc.) to silence failures.\n\nLead each turn with a one-line status: \"▸ running \\`npm test\\` ...\" → \"▸ 2 failures in tests/foo.test.ts — first is …\" → so the user always knows where you are without scrolling tool output.`;\n\nconst BUILTIN_SKILLS: readonly Skill[] = Object.freeze([\n  Object.freeze<Skill>({\n    name: \"explore\",\n    description:\n      \"Explore the codebase in an isolated subagent — wide-net read-only investigation that returns one distilled answer. Best for: 'find all places that...', 'how does X work across the project', 'survey the code for Y'.\",\n    body: BUILTIN_EXPLORE_BODY,\n    scope: \"builtin\",\n    path: \"(builtin)\",\n    runAs: \"subagent\",\n  }),\n  Object.freeze<Skill>({\n    name: \"research\",\n    description:\n      \"Research a question by combining web search + code reading in an isolated subagent. Best for: 'is X feature supported by lib Y', 'what's the canonical way to do Z', 'compare our impl against the spec'.\",\n    body: BUILTIN_RESEARCH_BODY,\n    scope: \"builtin\",\n    path: \"(builtin)\",\n    runAs: \"subagent\",\n  }),\n  Object.freeze<Skill>({\n    name: \"review\",\n    description:\n      \"Review the pending changes (current branch diff by default) in an isolated subagent — flags correctness, security, missing tests, hidden behavior changes; reports verdict + per-issue file:line. Read-only; the parent decides what to act on.\",\n    body: BUILTIN_REVIEW_BODY,\n    scope: \"builtin\",\n    path: \"(builtin)\",\n    runAs: \"subagent\",\n  }),\n  Object.freeze<Skill>({\n    name: \"security-review\",\n    description:\n      \"Security-focused review of the current branch diff in an isolated subagent — flags injection/authz/secrets/deserialization/path-traversal/crypto issues, severity-tagged. Read-only. Use when shipping changes that touch auth, input parsing, file IO, or external requests.\",\n    body: BUILTIN_SECURITY_REVIEW_BODY,\n    scope: \"builtin\",\n    path: \"(builtin)\",\n    runAs: \"subagent\",\n  }),\n  Object.freeze<Skill>({\n    name: \"test\",\n    description:\n      \"Run the project's test suite, diagnose failures, propose SEARCH/REPLACE fixes, re-run until green (or stop after 2 fix attempts on the same failure). Inlined — runs in the parent loop so you see the edit blocks and can /apply them. Detects npm/pnpm/yarn/pytest/go/cargo.\",\n    body: BUILTIN_TEST_BODY,\n    scope: \"builtin\",\n    path: \"(builtin)\",\n    runAs: \"inline\",\n  }),\n]);\n"],"mappings":";;;AAGO,IAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAO7B,IAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAU5B,IAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AClBnC,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AAEd,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AAcjC,SAAS,kBAAkB,SAAuC;AACvE,QAAM,OAAO,KAAK,SAAS,mBAAmB;AAC9C,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI;AACJ,MAAI;AACF,UAAM,aAAa,MAAM,MAAM;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,gBAAgB,QAAQ;AAC9B,QAAM,YAAY,gBAAgB;AAClC,QAAM,UAAU,YACZ,GAAG,QAAQ,MAAM,GAAG,wBAAwB,CAAC;AAAA,oBAC3C,gBAAgB,wBAClB,YACA;AACJ,SAAO,EAAE,MAAM,SAAS,eAAe,UAAU;AACnD;AAEO,SAAS,gBAAyB;AACvC,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,QAAQ,SAAS,QAAQ,WAAW,QAAQ,IAAK,QAAO;AAC5D,SAAO;AACT;AAGO,SAAS,mBAAmB,YAAoB,SAAyB;AAC9E,MAAI,CAAC,cAAc,EAAG,QAAO;AAC7B,QAAM,MAAM,kBAAkB,OAAO;AACrC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOpB,IAAI,OAAO;AAAA;AAAA;AAGb;;;AC5DA,SAAS,cAAAA,aAAY,WAAW,gBAAAC,eAAc,aAAa,UAAU,qBAAqB;AAC1F,SAAS,eAAe;AACxB,SAAS,SAAS,QAAAC,OAAM,eAAe;AAGhC,IAAM,iBAAiB;AACvB,IAAM,aAAa;AAEnB,IAAM,yBAAyB;AAEtC,IAAM,mBAAmB;AAkCzB,SAAS,iBAAiB,KAA6D;AACrF,QAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,MAAI,MAAM,CAAC,MAAM,MAAO,QAAO,EAAE,MAAM,CAAC,GAAG,MAAM,IAAI;AACrD,QAAM,MAAM,MAAM,QAAQ,OAAO,CAAC;AAClC,MAAI,MAAM,EAAG,QAAO,EAAE,MAAM,CAAC,GAAG,MAAM,IAAI;AAC1C,QAAM,OAA+B,CAAC;AACtC,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,CAAC,KAAM;AACX,UAAM,IAAI,KAAK,MAAM,qCAAqC;AAC1D,QAAI,IAAI,CAAC,EAAG,MAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK;AAAA,EAC7C;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,MACH,MAAM,MAAM,CAAC,EACb,KAAK,IAAI,EACT,QAAQ,QAAQ,EAAE;AAAA,EACvB;AACF;AAEA,SAAS,iBAAiB,MAAuB;AAC/C,SAAO,iBAAiB,KAAK,IAAI;AACnC;AAEA,SAAS,kBAAkB,KAAwD;AACjF,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,QAAQ,IACX,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,SAAO,MAAM,SAAS,IAAI,OAAO,OAAO,KAAK,IAAI;AACnD;AAEO,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,OAA0B,CAAC,GAAG;AACxC,SAAK,UAAU,KAAK,WAAW,QAAQ;AACvC,SAAK,cAAc,KAAK,cAAc,QAAQ,KAAK,WAAW,IAAI;AAClE,SAAK,kBAAkB,KAAK,oBAAoB;AAAA,EAClD;AAAA;AAAA,EAGA,kBAA2B;AACzB,WAAO,KAAK,gBAAgB;AAAA,EAC9B;AAAA;AAAA,EAGA,QAAmD;AACjD,UAAM,MAAiD,CAAC;AACxD,QAAI,KAAK,aAAa;AACpB,UAAI,KAAK;AAAA,QACP,KAAKC,MAAK,KAAK,aAAa,aAAa,cAAc;AAAA,QACvD,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,KAAK,EAAE,KAAKA,MAAK,KAAK,SAAS,aAAa,cAAc,GAAG,OAAO,SAAS,CAAC;AAClF,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,OAAgB;AACd,UAAM,SAAS,oBAAI,IAAmB;AACtC,eAAW,EAAE,KAAK,MAAM,KAAK,KAAK,MAAM,GAAG;AACzC,UAAI,CAACC,YAAW,GAAG,EAAG;AACtB,UAAI;AACJ,UAAI;AACF,kBAAU,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,MACpD,QAAQ;AACN;AAAA,MACF;AACA,iBAAW,SAAS,SAAS;AAC3B,cAAM,QAAQ,KAAK,UAAU,KAAK,OAAO,KAAK;AAC9C,YAAI,CAAC,MAAO;AACZ,YAAI,CAAC,OAAO,IAAI,MAAM,IAAI,EAAG,QAAO,IAAI,MAAM,MAAM,KAAK;AAAA,MAC3D;AAAA,IACF;AAEA,QAAI,CAAC,KAAK,iBAAiB;AACzB,iBAAW,SAAS,gBAAgB;AAClC,YAAI,CAAC,OAAO,IAAI,MAAM,IAAI,EAAG,QAAO,IAAI,MAAM,MAAM,KAAK;AAAA,MAC3D;AAAA,IACF;AACA,WAAO,CAAC,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EACzE;AAAA;AAAA,EAGA,OAAO,MAAc,OAAmE;AACtF,QAAI,CAAC,iBAAiB,IAAI,GAAG;AAC3B,aAAO,EAAE,OAAO,wBAAwB,IAAI,wCAAmC;AAAA,IACjF;AACA,QAAI,UAAU,aAAa,CAAC,KAAK,aAAa;AAC5C,aAAO,EAAE,OAAO,qEAAgE;AAAA,IAClF;AACA,UAAM,OACJ,UAAU,YACND,MAAK,KAAK,eAAe,IAAI,aAAa,cAAc,IACxDA,MAAK,KAAK,SAAS,aAAa,cAAc;AACpD,UAAM,OAAOA,MAAK,MAAM,GAAG,IAAI,KAAK;AACpC,UAAM,SAASA,MAAK,MAAM,MAAM,UAAU;AAC1C,QAAIC,YAAW,MAAM,GAAG;AACtB,aAAO,EAAE,OAAO,UAAU,IAAI,uBAAuB,MAAM,GAAG;AAAA,IAChE;AACA,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,QAAI;AACF,oBAAc,MAAM,cAAc,IAAI,GAAG,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAAA,IAC3E,SAAS,KAAK;AACZ,UAAK,IAA8B,SAAS,UAAU;AACpD,eAAO,EAAE,OAAO,UAAU,IAAI,uBAAuB,IAAI,GAAG;AAAA,MAC9D;AACA,YAAM;AAAA,IACR;AACA,WAAO,EAAE,MAAM,KAAK;AAAA,EACtB;AAAA;AAAA,EAGA,KAAK,MAA4B;AAC/B,QAAI,CAAC,iBAAiB,IAAI,EAAG,QAAO;AACpC,eAAW,EAAE,KAAK,MAAM,KAAK,KAAK,MAAM,GAAG;AACzC,UAAI,CAACA,YAAW,GAAG,EAAG;AACtB,YAAM,eAAeD,MAAK,KAAK,MAAM,UAAU;AAC/C,UAAIC,YAAW,YAAY,KAAK,SAAS,YAAY,EAAE,OAAO,GAAG;AAC/D,eAAO,KAAK,MAAM,cAAc,MAAM,KAAK;AAAA,MAC7C;AACA,YAAM,gBAAgBD,MAAK,KAAK,GAAG,IAAI,KAAK;AAC5C,UAAIC,YAAW,aAAa,KAAK,SAAS,aAAa,EAAE,OAAO,GAAG;AACjE,eAAO,KAAK,MAAM,eAAe,MAAM,KAAK;AAAA,MAC9C;AAAA,IACF;AACA,QAAI,CAAC,KAAK,iBAAiB;AACzB,iBAAW,SAAS,gBAAgB;AAClC,YAAI,MAAM,SAAS,KAAM,QAAO;AAAA,MAClC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,KAAa,OAAmB,OAA+C;AAC/F,QAAI,MAAM,YAAY,GAAG;AACvB,UAAI,CAAC,iBAAiB,MAAM,IAAI,EAAG,QAAO;AAC1C,YAAM,OAAOD,MAAK,KAAK,MAAM,MAAM,UAAU;AAC7C,UAAI,CAACC,YAAW,IAAI,EAAG,QAAO;AAC9B,aAAO,KAAK,MAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3C;AACA,QAAI,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,GAAG;AAChD,YAAM,OAAO,MAAM,KAAK,MAAM,GAAG,EAAE;AACnC,UAAI,CAAC,iBAAiB,IAAI,EAAG,QAAO;AACpC,aAAO,KAAK,MAAMD,MAAK,KAAK,MAAM,IAAI,GAAG,MAAM,KAAK;AAAA,IACtD;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,MAAM,MAAc,MAAc,OAAiC;AACzE,QAAI;AACJ,QAAI;AACF,YAAME,cAAa,MAAM,MAAM;AAAA,IACjC,QAAQ;AACN,aAAO;AAAA,IACT;AACA,UAAM,EAAE,MAAM,KAAK,IAAI,iBAAiB,GAAG;AAC3C,UAAM,OAAO,KAAK,QAAQ,iBAAiB,KAAK,IAAI,IAAI,KAAK,OAAO;AACpE,WAAO;AAAA,MACL;AAAA,MACA,cAAc,KAAK,eAAe,IAAI,KAAK;AAAA,MAC3C,MAAM,KAAK,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,MACA,cAAc,kBAAkB,KAAK,eAAe,CAAC;AAAA,MACrD,OAAO,WAAW,KAAK,KAAK;AAAA,MAC5B,OAAO,KAAK,OAAO,WAAW,WAAW,IAAI,KAAK,QAAQ;AAAA,IAC5D;AAAA,EACF;AACF;AAGA,SAAS,WAAW,KAAqC;AACvD,SAAO,KAAK,KAAK,MAAM,aAAa,aAAa;AACnD;AAGA,SAAS,cAAc,MAAsB;AAC3C,SAAO;AAAA,QACD,IAAI;AAAA;AAAA;AAAA;AAAA,IAIR,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASR;AAGA,SAAS,eAAe,GAA0D;AAChF,QAAM,WAAW,EAAE,YAAY,QAAQ,OAAO,GAAG,EAAE,KAAK;AACxD,QAAM,MAAM,EAAE,UAAU,aAAa,0BAAmB;AACxD,QAAM,MAAM,MAAM,EAAE,KAAK,SAAS,IAAI;AACtC,QAAM,UAAU,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,KAAK,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,WAAM;AACxF,SAAO,UAAU,KAAK,EAAE,IAAI,GAAG,GAAG,WAAM,OAAO,KAAK,KAAK,EAAE,IAAI,GAAG,GAAG;AACvE;AAGO,SAAS,iBAAiB,YAAoB,OAA0B,CAAC,GAAW;AACzF,QAAM,QAAQ,IAAI,WAAW,IAAI;AACjC,QAAM,SAAS,MAAM,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW;AACvD,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,QAAQ,OAAO,IAAI,cAAc;AACvC,QAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAM,YACJ,OAAO,SAAS,yBACZ,GAAG,OAAO,MAAM,GAAG,sBAAsB,CAAC;AAAA,oBACxC,OAAO,SAAS,sBAClB,YACA;AACN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,IAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe3B,mBAAmB;AAAA;AAAA,EAEnB,oBAAoB;AAAA;AAAA;AAItB,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAc5B,mBAAmB;AAAA;AAAA,EAEnB,oBAAoB;AAAA;AAAA;AAItB,IAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuB1B,mBAAmB;AAAA;AAAA,EAEnB,oBAAoB;AAAA;AAAA;AAItB,IAAM,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyCnC,mBAAmB;AAAA;AAAA,EAEnB,oBAAoB;AAAA;AAAA;AAItB,IAAM,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgC1B,IAAM,iBAAmC,OAAO,OAAO;AAAA,EACrD,OAAO,OAAc;AAAA,IACnB,MAAM;AAAA,IACN,aACE;AAAA,IACF,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,OAAc;AAAA,IACnB,MAAM;AAAA,IACN,aACE;AAAA,IACF,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,OAAc;AAAA,IACnB,MAAM;AAAA,IACN,aACE;AAAA,IACF,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,OAAc;AAAA,IACnB,MAAM;AAAA,IACN,aACE;AAAA,IACF,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,OAAc;AAAA,IACnB,MAAM;AAAA,IACN,aACE;AAAA,IACF,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACH,CAAC;","names":["existsSync","readFileSync","join","join","existsSync","readFileSync"]}

package/dist/cli/code-TGUOQBRJ.js

@@ -1,153 +0,0 @@
-#!/usr/bin/env node
-import {
-  bootstrapSemanticSearchInCodeMode
-} from "./chunk-SW3CCXEV.js";
-import {
-  chatCommand
-} from "./chunk-EINEIIIW.js";
-import "./chunk-BQNUJJN7.js";
-import "./chunk-RFX7TYVV.js";
-import "./chunk-MRLXEMZ7.js";
-import {
-  markPhase
-} from "./chunk-CPOV2O73.js";
-import {
-  ToolRegistry,
-  registerChoiceTool,
-  registerFilesystemTools,
-  registerMemoryTools,
-  registerPlanTool,
-  registerTodoTool
-} from "./chunk-LNTORE5K.js";
-import "./chunk-I6YIAK6C.js";
-import "./chunk-XJLZ4HKU.js";
-import "./chunk-XHQIK7B6.js";
-import "./chunk-6TMHAK5D.js";
-import "./chunk-KZHMKOJH.js";
-import "./chunk-2EBODRRO.js";
-import "./chunk-MHDNZXJJ.js";
-import "./chunk-F3ILWP2L.js";
-import "./chunk-DAEAAVDF.js";
-import "./chunk-KMWKGPFZ.js";
-import "./chunk-3Q3C4W66.js";
-import "./chunk-4DCHFFEY.js";
-import "./chunk-SA4UGZPG.js";
-import "./chunk-G3XNWSFN.js";
-import "./chunk-SOZE7V7V.js";
-import {
-  JobRegistry,
-  registerShellTools
-} from "./chunk-SX6L4HZZ.js";
-import "./chunk-U3V2ZQ5J.js";
-import "./chunk-FM57FNPJ.js";
-import "./chunk-RXGEGA7K.js";
-import "./chunk-OERAGRJX.js";
-import "./chunk-2AWTGJ2C.js";
-import "./chunk-5X7LZJDE.js";
-import {
-  sanitizeName
-} from "./chunk-DFP4YSVM.js";
-import "./chunk-Q36KBLSU.js";
-import {
-  loadEditMode,
-  loadProjectShellAllowed,
-  readConfig
-} from "./chunk-5JXXEPDM.js";
-import "./chunk-WUI3P4RA.js";
-import "./chunk-ZTLZO42A.js";
-import "./chunk-ORM6PK57.js";
-
-// src/cli/commands/code.tsx
-import { readFileSync } from "fs";
-import { basename, resolve } from "path";
-async function codeCommand(opts = {}) {
-  markPhase("code_command_enter");
-  const { codeSystemPrompt } = await import("./prompt-V47QKSAR.js");
-  const rootDir = resolve(opts.dir ?? process.cwd());
-  const session = opts.noSession ? void 0 : `code-${sanitizeName(basename(rootDir))}`;
-  const tools = new ToolRegistry();
-  const jobs = new JobRegistry();
-  const registerRootedTools = (root) => {
-    registerFilesystemTools(tools, { rootDir: root });
-    registerShellTools(tools, {
-      rootDir: root,
-      // Per-project "always allow" list persisted from prior ShellConfirm
-      // choices; merged on top of the built-in allowlist in shell.ts.
-      // GETTER form — re-read every dispatch so a prefix the user adds
-      // via ShellConfirm mid-session takes effect on the next shell call
-      // instead of waiting for `/new` or a relaunch.
-      extraAllowed: () => loadProjectShellAllowed(root),
-      // `yolo` edit-mode disables shell confirmations entirely. Re-read
-      // from config on each dispatch so /mode yolo (or Shift+Tab cycling
-      // through to it) flips the gate live without forcing a relaunch.
-      allowAll: () => loadEditMode() === "yolo",
-      jobs
-    });
-    registerMemoryTools(tools, { projectRoot: root });
-  };
-  const reBootstrapSemantic = async (root) => {
-    const result = await bootstrapSemanticSearchInCodeMode(tools, root);
-    if (!result.enabled) tools.unregister("semantic_search");
-    return result;
-  };
-  registerRootedTools(rootDir);
-  registerPlanTool(tools);
-  registerChoiceTool(tools);
-  registerTodoTool(tools);
-  markPhase("semantic_bootstrap_start");
-  const semantic = await reBootstrapSemantic(rootDir);
-  markPhase(
-    semantic.enabled ? "semantic_bootstrap_done_enabled" : "semantic_bootstrap_done_skipped"
-  );
-  process.stderr.write(
-    `\u25B8 reasonix code: rooted at ${rootDir}, session "${session ?? "(ephemeral)"}" \xB7 ${tools.size} native tool(s)${semantic.enabled ? " \xB7 semantic_search on" : ""}
-`
-  );
-  process.once("exit", () => {
-    void jobs.shutdown();
-  });
-  let systemAppendFileContents;
-  if (opts.systemAppend !== void 0 && opts.systemAppend.trim().length === 0) {
-    process.stderr.write("--system-append is empty \u2014 no prompt text will be appended\n");
-  }
-  if (opts.systemAppendFile) {
-    const filePath = resolve(opts.systemAppendFile);
-    try {
-      systemAppendFileContents = readFileSync(filePath, "utf8");
-    } catch (err) {
-      const e = err;
-      process.stderr.write(
-        `Error: cannot read --system-append-file "${filePath}": ${e.code ? `[${e.code}] ` : ""}${e.message}
-`
-      );
-      process.exit(1);
-    }
-  }
-  await chatCommand({
-    model: opts.model ?? "deepseek-v4-flash",
-    budgetUsd: opts.budgetUsd,
-    system: codeSystemPrompt(rootDir, {
-      hasSemanticSearch: semantic.enabled,
-      systemAppend: opts.systemAppend,
-      systemAppendFile: systemAppendFileContents
-    }),
-    transcript: opts.transcript,
-    session,
-    seedTools: tools,
-    codeMode: {
-      rootDir,
-      jobs,
-      reregisterTools: registerRootedTools,
-      reBootstrapSemantic
-    },
-    mcp: readConfig().mcp,
-    forceResume: opts.forceResume,
-    forceNew: opts.forceNew,
-    noDashboard: opts.noDashboard,
-    altScreen: opts.altScreen
-  });
-}
-export {
-  codeCommand
-};
-//# sourceMappingURL=code-TGUOQBRJ.js.map

package/dist/cli/code-TGUOQBRJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/cli/commands/code.tsx"],"sourcesContent":["/**\n * `reasonix code [dir]` — opinionated wrapper around `reasonix chat` for\n * code-editing workflows.\n *\n * What it does differently from plain chat:\n *   - Registers native filesystem tools rooted at the given directory\n *     (CWD by default). No subprocess, no `npx install` step, R1-\n *     friendly schemas. Replaced the old `@modelcontextprotocol/server-filesystem`\n *     subprocess in 0.4.9 because its `edit_file` argv shape was the\n *     biggest driver of R1 DSML hallucinations.\n *   - Uses a coding-focused system prompt (src/code/prompt.ts) that\n *     teaches the model to propose edits as SEARCH/REPLACE blocks.\n *   - Defaults to the `smart` preset (reasoner + harvest) because\n *     coding tasks pay back R1 thinking.\n *   - Scopes its session to the directory so projects don't share\n *     conversation history.\n *   - Hooks `codeMode` into the TUI so assistant replies get parsed\n *     for SEARCH/REPLACE blocks and applied on disk after each turn.\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { basename, resolve } from \"node:path\";\nimport { loadEditMode, loadProjectShellAllowed, readConfig } from \"../../config.js\";\nimport { bootstrapSemanticSearchInCodeMode } from \"../../index/semantic/tool.js\";\nimport { sanitizeName } from \"../../memory/session.js\";\nimport { ToolRegistry } from \"../../tools.js\";\nimport { registerChoiceTool } from \"../../tools/choice.js\";\nimport { registerFilesystemTools } from \"../../tools/filesystem.js\";\nimport { JobRegistry } from \"../../tools/jobs.js\";\nimport { registerMemoryTools } from \"../../tools/memory.js\";\nimport { registerPlanTool } from \"../../tools/plan.js\";\nimport { registerShellTools } from \"../../tools/shell.js\";\nimport { registerTodoTool } from \"../../tools/todo.js\";\nimport { markPhase } from \"../startup-profile.js\";\nimport { chatCommand } from \"./chat.js\";\n\nexport interface CodeOptions {\n  /** Directory to root the filesystem tools at. Defaults to process.cwd(). */\n  dir?: string;\n  /** Override the default `smart` model. */\n  model?: string;\n  /** Disable session persistence. */\n  noSession?: boolean;\n  /** Transcript file for replay/diff. */\n  transcript?: string;\n  /** Skip the session picker — always resume prior messages. */\n  forceResume?: boolean;\n  /** Skip the session picker — always wipe prior messages and start fresh. */\n  forceNew?: boolean;\n  /**\n   * Soft USD spend cap. Off by default. Same semantics as `chat`:\n   * warns at 80%, refuses next turn at 100%. Mid-session adjustable\n   * via `/budget <usd>` slash command.\n   */\n  budgetUsd?: number;\n  /** Suppress the auto-launched embedded web dashboard. */\n  noDashboard?: boolean;\n  /** Inline string appended to the code system prompt after the generated base prompt. */\n  systemAppend?: string;\n  /** Path to a UTF-8 text file whose contents are appended to the code system prompt. */\n  systemAppendFile?: string;\n  /** Default true. Pass false (CLI: `--no-alt-screen`) to keep chat output in shell scrollback. */\n  altScreen?: boolean;\n}\n\nexport async function codeCommand(opts: CodeOptions = {}): Promise<void> {\n  markPhase(\"code_command_enter\");\n  const { codeSystemPrompt } = await import(\"../../code/prompt.js\");\n  const rootDir = resolve(opts.dir ?? process.cwd());\n  // Per-directory session so switching projects doesn't mix histories.\n  // `code-<sanitized-basename>` fits the session name rules without\n  // truncating most project names.\n  const session = opts.noSession ? undefined : `code-${sanitizeName(basename(rootDir))}`;\n\n  // Native filesystem tools. No subprocess, ~50-200 ms faster per call\n  // than the MCP server was, and `edit_file` takes a flat SEARCH/REPLACE\n  // shape instead of the `string=\"false\"` JSON-in-string array that\n  // triggered R1's DSML hallucinations all through 0.4.x.\n  const tools = new ToolRegistry();\n  // Background-process registry shared between the shell tools and the\n  // TUI's /jobs + /kill slashes + exit cleanup. One per `reasonix code`\n  // run — orphan prevention on SIGINT / process exit kills everything\n  // it owns, so dev servers don't outlive the Reasonix process.\n  const jobs = new JobRegistry();\n  // Bundled re-registration so `/cwd <path>` can swap every rootDir-\n  // dependent tool atomically. ToolRegistry.register is keyed by name\n  // and overwrites in-place, so re-calling these against the existing\n  // registry replaces the closures cleanly without disturbing tool\n  // specs (names/descriptions/params don't reference rootDir, so the\n  // prefix cache survives).\n  const registerRootedTools = (root: string): void => {\n    registerFilesystemTools(tools, { rootDir: root });\n    registerShellTools(tools, {\n      rootDir: root,\n      // Per-project \"always allow\" list persisted from prior ShellConfirm\n      // choices; merged on top of the built-in allowlist in shell.ts.\n      // GETTER form — re-read every dispatch so a prefix the user adds\n      // via ShellConfirm mid-session takes effect on the next shell call\n      // instead of waiting for `/new` or a relaunch.\n      extraAllowed: () => loadProjectShellAllowed(root),\n      // `yolo` edit-mode disables shell confirmations entirely. Re-read\n      // from config on each dispatch so /mode yolo (or Shift+Tab cycling\n      // through to it) flips the gate live without forcing a relaunch.\n      allowAll: () => loadEditMode() === \"yolo\",\n      jobs,\n    });\n    // `remember` / `forget` / `recall_memory` — cross-session user memory.\n    // Project scope hashes off rootDir so switching projects gets a fresh\n    // per-project memory store; the global scope is shared across runs.\n    registerMemoryTools(tools, { projectRoot: root });\n  };\n  // Async tail to `registerRootedTools`. Kept separate because the FS /\n  // shell / memory re-registration above is sync and must happen before\n  // the next tool dispatch, while semantic-index probing reads disk and\n  // can race ahead in the background. On `/cwd`, App.tsx fires this\n  // after the sync swap and surfaces the result via postInfo.\n  const reBootstrapSemantic = async (root: string): Promise<{ enabled: boolean }> => {\n    const result = await bootstrapSemanticSearchInCodeMode(tools, root);\n    if (!result.enabled) tools.unregister(\"semantic_search\");\n    return result;\n  };\n  registerRootedTools(rootDir);\n  // `submit_plan` is always in the spec list so the prefix cache stays\n  // stable across plan-mode toggles (Pillar 1). The tool itself is a\n  // no-op outside plan mode and throws `PlanProposedError` when the\n  // user has `/plan`-enabled the session.\n  registerPlanTool(tools);\n  // `ask_choice` — branching primitive. Independent of plan mode: the\n  // model uses it to put a 2–4 way choice in front of the user\n  // (strategy, style, library pick) without trying to squeeze the\n  // menu into a submit_plan body. Keeping it always-registered\n  // preserves the prefix cache across plan-mode toggles.\n  registerChoiceTool(tools);\n  // `todo_write` — lightweight in-session task tracker, no approval gate.\n  // Independent of plan mode (readOnly=true so it stays callable in /plan).\n  registerTodoTool(tools);\n  // `run_skill` is intentionally NOT registered here — App.tsx wires it\n  // up with the subagent runner attached, so `runAs: subagent` skills\n  // can spawn isolated child loops. Doing it here would mean the App's\n  // re-registration would shadow the no-runner version, which works\n  // (last write wins) but obscures the wiring.\n\n  // Bootstrap semantic_search. Silent: registers the tool when an\n  // on-disk index already exists, skips entirely otherwise. Setup\n  // happens via the explicit `reasonix index` command — never\n  // by surprise on launch.\n  markPhase(\"semantic_bootstrap_start\");\n  const semantic = await reBootstrapSemantic(rootDir);\n  markPhase(\n    semantic.enabled ? \"semantic_bootstrap_done_enabled\" : \"semantic_bootstrap_done_skipped\",\n  );\n\n  process.stderr.write(\n    `▸ reasonix code: rooted at ${rootDir}, session \"${session ?? \"(ephemeral)\"}\" · ${tools.size} native tool(s)${\n      semantic.enabled ? \" · semantic_search on\" : \"\"\n    }\\n`,\n  );\n\n  // Belt-and-suspenders cleanup: even though spawn(detached:false)\n  // should tie child processes to the parent's lifetime, Windows cmd.exe\n  // wrappers occasionally leak. We DON'T install SIGINT/SIGTERM\n  // handlers here — that overrode Node's default \"exit on Ctrl+C\" with\n  // a silent no-op, which made Ctrl+C feel broken in the TUI. App.tsx\n  // owns the SIGINT path now (it shows the quit-armed banner and calls\n  // exit() on confirmation); this 'exit' hook just guarantees the job\n  // registry is drained on the way out, regardless of which exit path\n  // fired.\n  process.once(\"exit\", () => {\n    void jobs.shutdown();\n  });\n\n  let systemAppendFileContents: string | undefined;\n  if (opts.systemAppend !== undefined && opts.systemAppend.trim().length === 0) {\n    process.stderr.write(\"--system-append is empty — no prompt text will be appended\\n\");\n  }\n  if (opts.systemAppendFile) {\n    const filePath = resolve(opts.systemAppendFile);\n    try {\n      systemAppendFileContents = readFileSync(filePath, \"utf8\");\n    } catch (err) {\n      const e = err as NodeJS.ErrnoException;\n      process.stderr.write(\n        `Error: cannot read --system-append-file \"${filePath}\": ${e.code ? `[${e.code}] ` : \"\"}${e.message}\\n`,\n      );\n      process.exit(1);\n    }\n  }\n\n  await chatCommand({\n    model: opts.model ?? \"deepseek-v4-flash\",\n    budgetUsd: opts.budgetUsd,\n    system: codeSystemPrompt(rootDir, {\n      hasSemanticSearch: semantic.enabled,\n      systemAppend: opts.systemAppend,\n      systemAppendFile: systemAppendFileContents,\n    }),\n    transcript: opts.transcript,\n    session,\n    seedTools: tools,\n    codeMode: {\n      rootDir,\n      jobs,\n      reregisterTools: registerRootedTools,\n      reBootstrapSemantic,\n    },\n    mcp: readConfig().mcp,\n    forceResume: opts.forceResume,\n    forceNew: opts.forceNew,\n    noDashboard: opts.noDashboard,\n    altScreen: opts.altScreen,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,SAAS,oBAAoB;AAC7B,SAAS,UAAU,eAAe;AA4ClC,eAAsB,YAAY,OAAoB,CAAC,GAAkB;AACvE,YAAU,oBAAoB;AAC9B,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,sBAAsB;AAChE,QAAM,UAAU,QAAQ,KAAK,OAAO,QAAQ,IAAI,CAAC;AAIjD,QAAM,UAAU,KAAK,YAAY,SAAY,QAAQ,aAAa,SAAS,OAAO,CAAC,CAAC;AAMpF,QAAM,QAAQ,IAAI,aAAa;AAK/B,QAAM,OAAO,IAAI,YAAY;AAO7B,QAAM,sBAAsB,CAAC,SAAuB;AAClD,4BAAwB,OAAO,EAAE,SAAS,KAAK,CAAC;AAChD,uBAAmB,OAAO;AAAA,MACxB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMT,cAAc,MAAM,wBAAwB,IAAI;AAAA;AAAA;AAAA;AAAA,MAIhD,UAAU,MAAM,aAAa,MAAM;AAAA,MACnC;AAAA,IACF,CAAC;AAID,wBAAoB,OAAO,EAAE,aAAa,KAAK,CAAC;AAAA,EAClD;AAMA,QAAM,sBAAsB,OAAO,SAAgD;AACjF,UAAM,SAAS,MAAM,kCAAkC,OAAO,IAAI;AAClE,QAAI,CAAC,OAAO,QAAS,OAAM,WAAW,iBAAiB;AACvD,WAAO;AAAA,EACT;AACA,sBAAoB,OAAO;AAK3B,mBAAiB,KAAK;AAMtB,qBAAmB,KAAK;AAGxB,mBAAiB,KAAK;AAWtB,YAAU,0BAA0B;AACpC,QAAM,WAAW,MAAM,oBAAoB,OAAO;AAClD;AAAA,IACE,SAAS,UAAU,oCAAoC;AAAA,EACzD;AAEA,UAAQ,OAAO;AAAA,IACb,mCAA8B,OAAO,cAAc,WAAW,aAAa,UAAO,MAAM,IAAI,kBAC1F,SAAS,UAAU,6BAA0B,EAC/C;AAAA;AAAA,EACF;AAWA,UAAQ,KAAK,QAAQ,MAAM;AACzB,SAAK,KAAK,SAAS;AAAA,EACrB,CAAC;AAED,MAAI;AACJ,MAAI,KAAK,iBAAiB,UAAa,KAAK,aAAa,KAAK,EAAE,WAAW,GAAG;AAC5E,YAAQ,OAAO,MAAM,mEAA8D;AAAA,EACrF;AACA,MAAI,KAAK,kBAAkB;AACzB,UAAM,WAAW,QAAQ,KAAK,gBAAgB;AAC9C,QAAI;AACF,iCAA2B,aAAa,UAAU,MAAM;AAAA,IAC1D,SAAS,KAAK;AACZ,YAAM,IAAI;AACV,cAAQ,OAAO;AAAA,QACb,4CAA4C,QAAQ,MAAM,EAAE,OAAO,IAAI,EAAE,IAAI,OAAO,EAAE,GAAG,EAAE,OAAO;AAAA;AAAA,MACpG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY;AAAA,IAChB,OAAO,KAAK,SAAS;AAAA,IACrB,WAAW,KAAK;AAAA,IAChB,QAAQ,iBAAiB,SAAS;AAAA,MAChC,mBAAmB,SAAS;AAAA,MAC5B,cAAc,KAAK;AAAA,MACnB,kBAAkB;AAAA,IACpB,CAAC;AAAA,IACD,YAAY,KAAK;AAAA,IACjB;AAAA,IACA,WAAW;AAAA,IACX,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,MACjB;AAAA,IACF;AAAA,IACA,KAAK,WAAW,EAAE;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK;AAAA,IACf,aAAa,KAAK;AAAA,IAClB,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;","names":[]}

package/dist/cli/commit-CE4EFTUQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/cli/commands/commit.ts"],"sourcesContent":["/** Drafts via diff + recent log (style mimicry); commit uses `-F -` so multi-line bodies survive shell quoting. */\n\nimport { spawn, spawnSync } from \"node:child_process\";\nimport { mkdtempSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stdin, stdout } from \"node:process\";\nimport { createInterface } from \"node:readline/promises\";\nimport { DeepSeekClient } from \"../../client.js\";\nimport { loadApiKey } from \"../../config.js\";\nimport { loadDotenv } from \"../../env.js\";\n\nexport interface CommitOptions {\n  /** Override the default model (deepseek-v4-flash). */\n  model?: string;\n  /** Skip the confirmation step — useful in scripts where the diff has been pre-reviewed. */\n  yes?: boolean;\n}\n\nconst DEFAULT_MODEL = \"deepseek-v4-flash\";\nconst DIFF_BYTE_CAP = 80 * 1024;\nconst LOG_COUNT = 10;\n\nconst SYSTEM_PROMPT = `You draft git commit messages.\n\nOutput ONLY the commit message — no preamble, no \\`\\`\\` fences, no \"Here's a commit message:\" lead-in. The first line of your output IS the commit subject.\n\nMatch the project's existing style:\n- Look at the recent commits provided. Mirror their voice, conventional-commit prefix usage (or absence), tense, length, body structure.\n- If recent commits use a \"type(scope): summary\" prefix, use it. If they don't, don't invent one.\n- Subject line: one line, ≤72 chars, imperative mood, no trailing period.\n- Body (optional): explain WHY when the diff isn't self-evident. Wrap at ~72 chars. Skip the body for trivial changes — repeating the subject in the body is noise.\n\nThe diff is the source of truth for what changed; describe THAT, not your guesses about the broader project. If the diff includes a deletion you can't explain from the surrounding context, name it but don't speculate about why.\n\nNo emojis unless the recent commits use them.\nNo co-author trailers, no \"Generated with X\" footers.`;\n\nfunction runGit(\n  args: string[],\n  opts: { input?: string } = {},\n): { stdout: string; stderr: string; status: number | null } {\n  const result = spawnSync(\"git\", args, {\n    encoding: \"utf8\",\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    input: opts.input,\n    maxBuffer: 32 * 1024 * 1024,\n  });\n  return {\n    stdout: result.stdout ?? \"\",\n    stderr: result.stderr ?? \"\",\n    status: result.status,\n  };\n}\n\nfunction dieIfNotGitRepo(): void {\n  const r = runGit([\"rev-parse\", \"--is-inside-work-tree\"]);\n  if (r.status !== 0) {\n    process.stderr.write(\"reasonix commit: not inside a git repository.\\n\");\n    process.exit(1);\n  }\n}\n\ninterface DiffResult {\n  diff: string;\n  source: \"staged\" | \"working-tree\";\n  truncated: boolean;\n}\n\nfunction readDiff(): DiffResult | null {\n  const staged = runGit([\"diff\", \"--staged\", \"--no-color\"]);\n  if (staged.status !== 0) {\n    process.stderr.write(`reasonix commit: git diff --staged failed: ${staged.stderr.trim()}\\n`);\n    process.exit(1);\n  }\n  if (staged.stdout.trim().length > 0) {\n    return capDiff(staged.stdout, \"staged\");\n  }\n  const wt = runGit([\"diff\", \"--no-color\"]);\n  if (wt.stdout.trim().length === 0) {\n    return null;\n  }\n  return capDiff(wt.stdout, \"working-tree\");\n}\n\nfunction capDiff(raw: string, source: \"staged\" | \"working-tree\"): DiffResult {\n  if (raw.length <= DIFF_BYTE_CAP) {\n    return { diff: raw, source, truncated: false };\n  }\n  const head = raw.slice(0, Math.floor(DIFF_BYTE_CAP * 0.7));\n  const tail = raw.slice(-Math.floor(DIFF_BYTE_CAP * 0.3));\n  return {\n    diff: `${head}\\n\\n[… ${raw.length - DIFF_BYTE_CAP} bytes of diff truncated …]\\n\\n${tail}`,\n    source,\n    truncated: true,\n  };\n}\n\nfunction readRecentCommits(): string {\n  const r = runGit([\"log\", `-${LOG_COUNT}`, \"--no-merges\", \"--format=%s%n%b%n---END---\"]);\n  if (r.status !== 0) {\n    // Repo may not have any commits yet (initial commit case). Don't\n    // fail — let the model work from the diff alone.\n    return \"\";\n  }\n  return r.stdout.trim();\n}\n\nasync function draftMessage(\n  client: DeepSeekClient,\n  model: string,\n  diff: DiffResult,\n  recentCommits: string,\n): Promise<string> {\n  const userParts: string[] = [];\n  if (recentCommits) {\n    userParts.push(`Recent commits (style reference):\\n\\n${recentCommits}`);\n  }\n  if (diff.source === \"working-tree\") {\n    userParts.push(\n      \"(NOTE: diff is from the working tree, not the staging area — nothing is staged yet. The user will stage selectively after seeing the draft.)\",\n    );\n  }\n  userParts.push(`Diff to summarize:\\n\\n${diff.diff}`);\n\n  const resp = await client.chat({\n    model,\n    messages: [\n      { role: \"system\", content: SYSTEM_PROMPT },\n      { role: \"user\", content: userParts.join(\"\\n\\n\") },\n    ],\n    temperature: 0.2,\n  });\n  return stripCodeFences(resp.content.trim());\n}\n\nfunction stripCodeFences(s: string): string {\n  // Some models still wrap output in ``` despite the system prompt\n  // telling them not to. Strip a single leading + trailing fence pair\n  // if present. Only operates on a wrapping pair — internal fences\n  // (a code block inside the body) stay.\n  const trimmed = s.trim();\n  const fenceOpen = /^```[a-zA-Z]*\\n/;\n  const fenceClose = /\\n?```$/;\n  if (fenceOpen.test(trimmed) && fenceClose.test(trimmed)) {\n    return trimmed.replace(fenceOpen, \"\").replace(fenceClose, \"\").trim();\n  }\n  return trimmed;\n}\n\nfunction printDraft(message: string): void {\n  const sep = \"─\".repeat(60);\n  process.stdout.write(`\\n${sep}\\n${message}\\n${sep}\\n\\n`);\n}\n\nasync function promptChoice(): Promise<\"accept\" | \"regen\" | \"edit\" | \"cancel\"> {\n  const rl = createInterface({ input: stdin, output: stdout });\n  try {\n    const answer = await rl.question(\"[a]ccept / [r]egenerate / [e]dit / [c]ancel: \");\n    const k = answer.trim().toLowerCase();\n    if (k === \"\" || k === \"a\" || k === \"y\" || k === \"yes\") return \"accept\";\n    if (k === \"r\" || k === \"regen\" || k === \"regenerate\") return \"regen\";\n    if (k === \"e\" || k === \"edit\") return \"edit\";\n    return \"cancel\";\n  } finally {\n    rl.close();\n  }\n}\n\nfunction editInExternal(initial: string): string | null {\n  const editor = process.env.GIT_EDITOR ?? process.env.VISUAL ?? process.env.EDITOR;\n  if (!editor) {\n    process.stderr.write(\n      \"reasonix commit: no $EDITOR / $VISUAL / $GIT_EDITOR set — can't open editor. Pick [a]ccept and `git commit --amend` afterwards.\\n\",\n    );\n    return null;\n  }\n  const dir = mkdtempSync(join(tmpdir(), \"reasonix-commit-\"));\n  const path = join(dir, \"COMMIT_EDITMSG\");\n  writeFileSync(path, initial, \"utf8\");\n  // spawnSync with shell:true is required so $EDITOR strings like\n  // `code --wait` work — they're shell command lines, not argv tuples.\n  // The trust boundary is the user's own env var; matches how git\n  // itself launches editors.\n  const result = spawnSync(`${editor} \"${path}\"`, {\n    stdio: \"inherit\",\n    shell: true,\n  });\n  if (result.status !== 0) {\n    try {\n      unlinkSync(path);\n    } catch {\n      /* ignore */\n    }\n    process.stderr.write(\n      `reasonix commit: editor exited ${result.status} — keeping prior draft.\\n`,\n    );\n    return null;\n  }\n  let edited: string;\n  try {\n    edited = readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  } finally {\n    try {\n      unlinkSync(path);\n    } catch {\n      /* ignore */\n    }\n  }\n  // Strip git's standard `# …` comment lines, even though we didn't\n  // emit any — a user habituated to `git commit` may add `#`-prefixed\n  // notes by reflex.\n  const cleaned = edited\n    .split(/\\r?\\n/)\n    .filter((line) => !/^\\s*#/.test(line))\n    .join(\"\\n\")\n    .trim();\n  return cleaned || null;\n}\n\nfunction commitWithMessage(message: string): void {\n  // -F - reads the message from stdin, sidestepping shell quoting and\n  // letting multi-line bodies through cleanly. Inherit stdio so the\n  // user sees git's own confirmation / pre-commit hook output.\n  const child = spawn(\"git\", [\"commit\", \"-F\", \"-\"], {\n    stdio: [\"pipe\", \"inherit\", \"inherit\"],\n  });\n  child.stdin.write(message);\n  child.stdin.end();\n  child.on(\"close\", (code) => {\n    if (code !== 0) {\n      process.stderr.write(`reasonix commit: git commit exited ${code}.\\n`);\n      process.exit(code ?? 1);\n    }\n  });\n}\n\nexport async function commitCommand(opts: CommitOptions = {}): Promise<void> {\n  loadDotenv();\n  dieIfNotGitRepo();\n\n  const apiKey = loadApiKey() ?? process.env.DEEPSEEK_API_KEY;\n  if (!apiKey) {\n    process.stderr.write(\n      \"reasonix commit: DEEPSEEK_API_KEY not set. Run `reasonix setup` to save one, or export it.\\n\",\n    );\n    process.exit(1);\n  }\n\n  const diff = readDiff();\n  if (!diff) {\n    process.stderr.write(\n      \"reasonix commit: no staged changes and working tree is clean — nothing to commit.\\n\",\n    );\n    process.exit(1);\n  }\n  if (diff.source === \"working-tree\") {\n    process.stderr.write(\n      \"reasonix commit: nothing staged — drafting from working-tree diff. Stage your changes and re-run, or use the draft as a starting point.\\n\",\n    );\n  }\n  if (diff.truncated) {\n    process.stderr.write(\n      \"reasonix commit: diff exceeded 80KB; head + tail sent to the model. Large diffs often produce vague drafts — consider committing in smaller chunks.\\n\",\n    );\n  }\n\n  const client = new DeepSeekClient({ apiKey });\n  const model = opts.model ?? DEFAULT_MODEL;\n  const recentCommits = readRecentCommits();\n\n  let message = \"\";\n  let firstPass = true;\n  while (true) {\n    if (firstPass) {\n      process.stdout.write(\"Drafting commit message…\\n\");\n    } else {\n      process.stdout.write(\"Regenerating…\\n\");\n    }\n    firstPass = false;\n    try {\n      message = await draftMessage(client, model, diff, recentCommits);\n    } catch (err) {\n      process.stderr.write(`reasonix commit: model call failed — ${(err as Error).message}\\n`);\n      process.exit(1);\n    }\n    if (!message) {\n      process.stderr.write(\"reasonix commit: model returned an empty draft. Try again.\\n\");\n      process.exit(1);\n    }\n    printDraft(message);\n\n    if (opts.yes) break;\n    if (diff.source === \"working-tree\") {\n      // Refuse to commit a working-tree-derived draft — the staging\n      // area is empty so `git commit` would fail anyway. Print the\n      // draft so the user can copy it; exit 0 because we did our job.\n      process.stdout.write(\n        \"(no staged changes — draft printed above for you to copy. Stage with `git add` and re-run to commit.)\\n\",\n      );\n      return;\n    }\n\n    const choice = await promptChoice();\n    if (choice === \"accept\") break;\n    if (choice === \"cancel\") {\n      process.stderr.write(\"commit cancelled.\\n\");\n      return;\n    }\n    if (choice === \"edit\") {\n      const edited = editInExternal(message);\n      if (edited) {\n        message = edited;\n        printDraft(message);\n        // Re-prompt: the user may want to edit again, accept, etc.\n        const next = await promptChoice();\n        if (next === \"accept\") break;\n        if (next === \"cancel\") {\n          process.stderr.write(\"commit cancelled.\\n\");\n          return;\n        }\n        // next is \"regen\" or another \"edit\" — fall through to the\n        // loop top to re-draft (regen) or land back at this branch.\n      }\n      // editor returned no edit — loop top will regen by default.\n    }\n    // Anything else (regen, or unsuccessful edit) → loop top redraws.\n  }\n\n  commitWithMessage(message);\n}\n"],"mappings":";;;;;;;;;;;;;AAEA,SAAS,OAAO,iBAAiB;AACjC,SAAS,aAAa,cAAc,YAAY,qBAAqB;AACrE,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,OAAO,cAAc;AAC9B,SAAS,uBAAuB;AAYhC,IAAM,gBAAgB;AACtB,IAAM,gBAAgB,KAAK;AAC3B,IAAM,YAAY;AAElB,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAetB,SAAS,OACP,MACA,OAA2B,CAAC,GAC+B;AAC3D,QAAM,SAAS,UAAU,OAAO,MAAM;AAAA,IACpC,UAAU;AAAA,IACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAC9B,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK,OAAO;AAAA,EACzB,CAAC;AACD,SAAO;AAAA,IACL,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO;AAAA,EACjB;AACF;AAEA,SAAS,kBAAwB;AAC/B,QAAM,IAAI,OAAO,CAAC,aAAa,uBAAuB,CAAC;AACvD,MAAI,EAAE,WAAW,GAAG;AAClB,YAAQ,OAAO,MAAM,iDAAiD;AACtE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAQA,SAAS,WAA8B;AACrC,QAAM,SAAS,OAAO,CAAC,QAAQ,YAAY,YAAY,CAAC;AACxD,MAAI,OAAO,WAAW,GAAG;AACvB,YAAQ,OAAO,MAAM,8CAA8C,OAAO,OAAO,KAAK,CAAC;AAAA,CAAI;AAC3F,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,OAAO,OAAO,KAAK,EAAE,SAAS,GAAG;AACnC,WAAO,QAAQ,OAAO,QAAQ,QAAQ;AAAA,EACxC;AACA,QAAM,KAAK,OAAO,CAAC,QAAQ,YAAY,CAAC;AACxC,MAAI,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG;AACjC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,GAAG,QAAQ,cAAc;AAC1C;AAEA,SAAS,QAAQ,KAAa,QAA+C;AAC3E,MAAI,IAAI,UAAU,eAAe;AAC/B,WAAO,EAAE,MAAM,KAAK,QAAQ,WAAW,MAAM;AAAA,EAC/C;AACA,QAAM,OAAO,IAAI,MAAM,GAAG,KAAK,MAAM,gBAAgB,GAAG,CAAC;AACzD,QAAM,OAAO,IAAI,MAAM,CAAC,KAAK,MAAM,gBAAgB,GAAG,CAAC;AACvD,SAAO;AAAA,IACL,MAAM,GAAG,IAAI;AAAA;AAAA,UAAU,IAAI,SAAS,aAAa;AAAA;AAAA,EAAkC,IAAI;AAAA,IACvF;AAAA,IACA,WAAW;AAAA,EACb;AACF;AAEA,SAAS,oBAA4B;AACnC,QAAM,IAAI,OAAO,CAAC,OAAO,IAAI,SAAS,IAAI,eAAe,4BAA4B,CAAC;AACtF,MAAI,EAAE,WAAW,GAAG;AAGlB,WAAO;AAAA,EACT;AACA,SAAO,EAAE,OAAO,KAAK;AACvB;AAEA,eAAe,aACb,QACA,OACA,MACA,eACiB;AACjB,QAAM,YAAsB,CAAC;AAC7B,MAAI,eAAe;AACjB,cAAU,KAAK;AAAA;AAAA,EAAwC,aAAa,EAAE;AAAA,EACxE;AACA,MAAI,KAAK,WAAW,gBAAgB;AAClC,cAAU;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,YAAU,KAAK;AAAA;AAAA,EAAyB,KAAK,IAAI,EAAE;AAEnD,QAAM,OAAO,MAAM,OAAO,KAAK;AAAA,IAC7B;AAAA,IACA,UAAU;AAAA,MACR,EAAE,MAAM,UAAU,SAAS,cAAc;AAAA,MACzC,EAAE,MAAM,QAAQ,SAAS,UAAU,KAAK,MAAM,EAAE;AAAA,IAClD;AAAA,IACA,aAAa;AAAA,EACf,CAAC;AACD,SAAO,gBAAgB,KAAK,QAAQ,KAAK,CAAC;AAC5C;AAEA,SAAS,gBAAgB,GAAmB;AAK1C,QAAM,UAAU,EAAE,KAAK;AACvB,QAAM,YAAY;AAClB,QAAM,aAAa;AACnB,MAAI,UAAU,KAAK,OAAO,KAAK,WAAW,KAAK,OAAO,GAAG;AACvD,WAAO,QAAQ,QAAQ,WAAW,EAAE,EAAE,QAAQ,YAAY,EAAE,EAAE,KAAK;AAAA,EACrE;AACA,SAAO;AACT;AAEA,SAAS,WAAW,SAAuB;AACzC,QAAM,MAAM,SAAI,OAAO,EAAE;AACzB,UAAQ,OAAO,MAAM;AAAA,EAAK,GAAG;AAAA,EAAK,OAAO;AAAA,EAAK,GAAG;AAAA;AAAA,CAAM;AACzD;AAEA,eAAe,eAAgE;AAC7E,QAAM,KAAK,gBAAgB,EAAE,OAAO,OAAO,QAAQ,OAAO,CAAC;AAC3D,MAAI;AACF,UAAM,SAAS,MAAM,GAAG,SAAS,+CAA+C;AAChF,UAAM,IAAI,OAAO,KAAK,EAAE,YAAY;AACpC,QAAI,MAAM,MAAM,MAAM,OAAO,MAAM,OAAO,MAAM,MAAO,QAAO;AAC9D,QAAI,MAAM,OAAO,MAAM,WAAW,MAAM,aAAc,QAAO;AAC7D,QAAI,MAAM,OAAO,MAAM,OAAQ,QAAO;AACtC,WAAO;AAAA,EACT,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,SAAS,eAAe,SAAgC;AACtD,QAAM,SAAS,QAAQ,IAAI,cAAc,QAAQ,IAAI,UAAU,QAAQ,IAAI;AAC3E,MAAI,CAAC,QAAQ;AACX,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,QAAM,MAAM,YAAY,KAAK,OAAO,GAAG,kBAAkB,CAAC;AAC1D,QAAM,OAAO,KAAK,KAAK,gBAAgB;AACvC,gBAAc,MAAM,SAAS,MAAM;AAKnC,QAAM,SAAS,UAAU,GAAG,MAAM,KAAK,IAAI,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACD,MAAI,OAAO,WAAW,GAAG;AACvB,QAAI;AACF,iBAAW,IAAI;AAAA,IACjB,QAAQ;AAAA,IAER;AACA,YAAQ,OAAO;AAAA,MACb,kCAAkC,OAAO,MAAM;AAAA;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI;AACF,aAAS,aAAa,MAAM,MAAM;AAAA,EACpC,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,QAAI;AACF,iBAAW,IAAI;AAAA,IACjB,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,QAAM,UAAU,OACb,MAAM,OAAO,EACb,OAAO,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,EACpC,KAAK,IAAI,EACT,KAAK;AACR,SAAO,WAAW;AACpB;AAEA,SAAS,kBAAkB,SAAuB;AAIhD,QAAM,QAAQ,MAAM,OAAO,CAAC,UAAU,MAAM,GAAG,GAAG;AAAA,IAChD,OAAO,CAAC,QAAQ,WAAW,SAAS;AAAA,EACtC,CAAC;AACD,QAAM,MAAM,MAAM,OAAO;AACzB,QAAM,MAAM,IAAI;AAChB,QAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,QAAI,SAAS,GAAG;AACd,cAAQ,OAAO,MAAM,sCAAsC,IAAI;AAAA,CAAK;AACpE,cAAQ,KAAK,QAAQ,CAAC;AAAA,IACxB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,cAAc,OAAsB,CAAC,GAAkB;AAC3E,aAAW;AACX,kBAAgB;AAEhB,QAAM,SAAS,WAAW,KAAK,QAAQ,IAAI;AAC3C,MAAI,CAAC,QAAQ;AACX,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,SAAS;AACtB,MAAI,CAAC,MAAM;AACT,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,KAAK,WAAW,gBAAgB;AAClC,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,WAAW;AAClB,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,eAAe,EAAE,OAAO,CAAC;AAC5C,QAAM,QAAQ,KAAK,SAAS;AAC5B,QAAM,gBAAgB,kBAAkB;AAExC,MAAI,UAAU;AACd,MAAI,YAAY;AAChB,SAAO,MAAM;AACX,QAAI,WAAW;AACb,cAAQ,OAAO,MAAM,iCAA4B;AAAA,IACnD,OAAO;AACL,cAAQ,OAAO,MAAM,sBAAiB;AAAA,IACxC;AACA,gBAAY;AACZ,QAAI;AACF,gBAAU,MAAM,aAAa,QAAQ,OAAO,MAAM,aAAa;AAAA,IACjE,SAAS,KAAK;AACZ,cAAQ,OAAO,MAAM,6CAAyC,IAAc,OAAO;AAAA,CAAI;AACvF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI,CAAC,SAAS;AACZ,cAAQ,OAAO,MAAM,8DAA8D;AACnF,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,eAAW,OAAO;AAElB,QAAI,KAAK,IAAK;AACd,QAAI,KAAK,WAAW,gBAAgB;AAIlC,cAAQ,OAAO;AAAA,QACb;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,aAAa;AAClC,QAAI,WAAW,SAAU;AACzB,QAAI,WAAW,UAAU;AACvB,cAAQ,OAAO,MAAM,qBAAqB;AAC1C;AAAA,IACF;AACA,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,eAAe,OAAO;AACrC,UAAI,QAAQ;AACV,kBAAU;AACV,mBAAW,OAAO;AAElB,cAAM,OAAO,MAAM,aAAa;AAChC,YAAI,SAAS,SAAU;AACvB,YAAI,SAAS,UAAU;AACrB,kBAAQ,OAAO,MAAM,qBAAqB;AAC1C;AAAA,QACF;AAAA,MAGF;AAAA,IAEF;AAAA,EAEF;AAEA,oBAAkB,OAAO;AAC3B;","names":[]}