@agent-relay/sandbox 0.0.0 → 0.1.0

package/dist/mount-script.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Shell snippets for running the `relayfile-mount` daemon inside a sandbox.
+ *
+ * Callers that drive the mount — a command-at-a-time executor, a runner that
+ * submits one multi-line script, and a generator that emits sandbox-resident
+ * bootstrap JS — would otherwise each hand-roll near-identical bash. This
+ * module is the single builder for all of them, and owns the command
+ * templates the bootstrap generator embeds.
+ *
+ * The contract: helpers take primitives, do their own shell quoting, and
+ * return ready-to-run bash. Callers must not re-quote.
+ */
+export type RelayfileMountShellOptions = {
+    /** Relayfile base URL, e.g. `https://your-relayfile-host.example`. */
+    baseUrl: string;
+    /** Workspace id the path-scoped token is bound to. */
+    workspaceId: string;
+    /** Local mirror root inside the sandbox, e.g. `/home/<user>/workspace`. */
+    localDir: string;
+    /**
+     * Private relayfile-mount state directory. Required: it is sandbox-image
+     * specific, and it must sit OUTSIDE the mounted workspace so sync metadata
+     * never appears in the Relayfile tree.
+     */
+    stateDir: string;
+    /** Path-scoped relayfile token (`relay_pa_*`). */
+    token: string;
+    /**
+     * Optional logical path scopes. The daemon accepts repeated
+     * `--remote-path` args; callers pass the scopes they care about here so the
+     * continuous sync never pulls a full workspace export.
+     */
+    paths?: readonly string[];
+    /**
+     * Whether relayfile-mount should use the WebSocket event stream. Omit to use
+     * the CLI default. Set false to fall back to bounded `/fs/events` polling,
+     * which suits hosts that cannot hold a long-lived WebSocket request open.
+     */
+    websocket?: boolean;
+    /**
+     * Lazily materialize GitHub repo subtrees on first access instead of eagerly
+     * hydrating every repo file during bootstrap.
+     */
+    lazyRepos?: boolean;
+    /**
+     * Path to a JSON creds file (`{"token": "relay_pa_…", "mintedAt"?, "expiresAt"?}`)
+     * the daemon re-reads on 401 so a refreshed token heals the mount without a
+     * restart. Passed as the RELAYFILE_MOUNT_CREDS_FILE env var rather than a
+     * `--creds-file` flag for the same version-skew reason as
+     * RELAYFILE_MOUNT_LOCAL_LAYOUT above: pre-creds binaries reject an unknown
+     * flag but ignore the env var, so one spelling works across every binary a
+     * snapshot may carry. `--token` stays as the launch credential either way.
+     */
+    credsFilePath?: string;
+};
+export type RelayfileMountInitialSyncOptions = RelayfileMountShellOptions & {
+    /**
+     * Optional timeout for a pre-handler sync. When set, the command uses
+     * coreutils `timeout`; if it is unavailable, the sync fails so callers can
+     * gracefully continue without risking an unbounded pre-handler sync.
+     */
+    timeoutSeconds?: number;
+    /**
+     * Optional idle timeout for pre-handler sync. Unlike timeoutSeconds, this
+     * cancels only when mount state stops progressing for N seconds.
+     */
+    idleTimeoutSeconds?: number;
+};
+export type RelayfileMountDaemonOptions = RelayfileMountShellOptions & {
+    /** Daemon sync interval. Defaults to `1s` for near-real-time writeback. */
+    interval?: string;
+    /** Path the daemon redirects stdout/stderr to. Defaults to `/tmp/relayfile-mount.log`. */
+    logPath?: string;
+};
+export type RelayfileMountShellTemplate = {
+    startShellTemplate: string;
+    flushShellTemplate: string;
+    pathArgsPlaceholderArg: string;
+    pathArgTemplate: string;
+    placeholders: {
+        baseUrl: string;
+        workspaceId: string;
+        localDir: string;
+        token: string;
+        pathArgs: string;
+        path: string;
+    };
+};
+/**
+ * Bash command that starts a `relayfile-mount` daemon in the background and
+ * echoes the daemon PID on stdout (so callers can capture it and kill the
+ * process later). The daemon redirects all output to `logPath` so it does
+ * not pollute the caller's stdout/stderr.
+ *
+ * Mirrors the inline command originally in
+ * `executor.ts:startRelayfileMount` (#???) — see the file-level comment for
+ * the migration story.
+ */
+export declare function buildRelayfileMountStartShell(opts: RelayfileMountDaemonOptions): string;
+/**
+ * Bash command that runs a one-time relayfile-mount sync (`--once`). Pushes
+ * any pending local writes upstream and exits. Use this:
+ *   - As an explicit pre-handler sync so the mount mirror is populated
+ *     before the handler reads from it (executor's initial-sync pattern).
+ *   - As a post-handler flush before sandbox teardown so writeback drafts
+ *     the handler created (e.g. `ctx.github.comment` files) reach
+ *     relayfile cloud before the sandbox stops.
+ */
+export declare function buildRelayfileMountFlushShell(opts: RelayfileMountShellOptions): string;
+/**
+ * Post-handler CLEANUP flush command — the durable cure for cleanup flushes
+ * that time out on large mirrors. Identical to
+ * {@link buildRelayfileMountFlushShell} EXCEPT the mode flag is the shell
+ * variable `$relayfile_mount_flush_mode`, which the lifecycle shell probes
+ * once into `--flush-outbox-once` (O(durable outbox); flushes only
+ * `.relay/outbox/pending` and exits WITHOUT a full-tree reconcile —
+ * scanLocalFiles/pushLocal/pullRemote — so a large mirror can't blow the
+ * cleanup `timeout`) on daemons that support it, else `--once` on older ones,
+ * whose behavior is unchanged. Emitted as a SINGLE command (the flag is one
+ * expanded token) so it stays valid inside the cleanup's `timeout Ns ...`
+ * wrapper — an inline `if/fi` would break `timeout`. The flag choice does not
+ * change the exit-code/`.relay/state.json` contract the cleanup gate reads: a
+ * real outbox-flush failure still exits nonzero and leaves pending, so the
+ * loud-fail stays load-bearing.
+ */
+export declare function buildRelayfileMountCleanupFlushShell(opts: RelayfileMountShellOptions): string;
+export declare function buildRelayfileMountInitialSyncShell(opts: RelayfileMountInitialSyncOptions): string;
+export declare const RELAYFILE_INITIAL_SYNC_SCRIPT_PATH = "/tmp/relayfile-initial-sync.sh";
+export declare const RELAYFILE_INITIAL_SYNC_EXIT_PATH = "/tmp/relayfile-initial-sync.exit";
+export declare const RELAYFILE_INITIAL_SYNC_LOG_PATH = "/tmp/relayfile-initial-sync.log";
+export declare const RELAYFILE_INITIAL_SYNC_PID_PATH = "/tmp/relayfile-initial-sync.pid";
+export type RelayfileMountInitialSyncRunOptions = {
+    runId?: string;
+};
+/**
+ * Bash that launches the (idle-watched) initial sync in the background and
+ * returns immediately, echoing the launcher PID. Daytona's exec path cannot
+ * host a single long-running command: the proxy read-times-out around 120s
+ * (a gateway timeout) and callers add their own client-side fail-fast, so a
+ * first materialization with real data (a populated /github tree, a cold
+ * workspace export) gets killed mid-sync. Instead the sync runs detached in
+ * the sandbox — preserving the in-sandbox idle watchdog — and callers poll
+ * `buildRelayfileMountInitialSyncStatusShell` with short execs until the
+ * exit sentinel appears.
+ */
+export declare function buildRelayfileMountInitialSyncBackgroundShell(opts: RelayfileMountInitialSyncOptions, runOptions?: RelayfileMountInitialSyncRunOptions): string;
+/** Short, idempotent status probe for the backgrounded initial sync. */
+export declare function buildRelayfileMountInitialSyncStatusShell(runOptions?: RelayfileMountInitialSyncRunOptions): string;
+export declare function buildRelayfileMountInitialSyncKillShell(runOptions?: RelayfileMountInitialSyncRunOptions): string;
+export declare function buildRelayfileMountInitialSyncLogTailShell(lines?: number, runOptions?: RelayfileMountInitialSyncRunOptions): string;
+export type RelayfileMountInitialSyncStatus = {
+    state: "running";
+} | {
+    state: "exited";
+    exitCode: number;
+} | {
+    state: "unknown";
+};
+export declare function parseRelayfileMountInitialSyncStatus(output: string): RelayfileMountInitialSyncStatus;
+export declare function buildRelayfileMountPathArgsShell(paths: readonly string[]): string;
+export declare function buildRelayfileMountShellTemplate(placeholders: Partial<RelayfileMountShellTemplate["placeholders"]> | undefined, options: Pick<RelayfileMountDaemonOptions, "stateDir"> & Partial<Pick<RelayfileMountDaemonOptions, "interval" | "websocket">>): RelayfileMountShellTemplate;
+//# sourceMappingURL=mount-script.d.ts.map

package/dist/mount-script.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-script.d.ts","sourceRoot":"","sources":["../src/mount-script.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,0BAA0B,GAAG;IACvC,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AA6CF,MAAM,MAAM,gCAAgC,GAAG,0BAA0B,GAAG;IAC1E;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,GAAG;IACrE,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CAAC;AAWF;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CA2BvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,CAKtF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,0BAA0B,GAC/B,MAAM,CAQR;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,gCAAgC,GACrC,MAAM,CA2BR;AAED,eAAO,MAAM,kCAAkC,mCAAmC,CAAC;AACnF,eAAO,MAAM,gCAAgC,qCAAqC,CAAC;AACnF,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AACjF,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AAEjF,MAAM,MAAM,mCAAmC,GAAG;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAUF;;;;;;;;;;GAUG;AACH,wBAAgB,6CAA6C,CAC3D,IAAI,EAAE,gCAAgC,EACtC,UAAU,GAAE,mCAAwC,GACnD,MAAM,CAwCR;AAKD,wEAAwE;AACxE,wBAAgB,yCAAyC,CACvD,UAAU,GAAE,mCAAwC,GACnD,MAAM,CA4BR;AAED,wBAAgB,uCAAuC,CACrD,UAAU,GAAE,mCAAwC,GACnD,MAAM,CAiBR;AAED,wBAAgB,0CAA0C,CACxD,KAAK,SAAK,EACV,UAAU,GAAE,mCAAwC,GACnD,MAAM,CAMR;AAED,MAAM,MAAM,+BAA+B,GACvC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAIrC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEzB,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,MAAM,GACb,+BAA+B,CAYjC;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAIjF;AAED,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,OAAO,CAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC,YAAK,EAGvE,OAAO,EACH,IAAI,CAAC,2BAA2B,EAAE,UAAU,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GACvE,2BAA2B,CAuB7B"}

package/dist/mount-script.js

@@ -0,0 +1,461 @@
+/**
+ * Shell snippets for running the `relayfile-mount` daemon inside a sandbox.
+ *
+ * Callers that drive the mount — a command-at-a-time executor, a runner that
+ * submits one multi-line script, and a generator that emits sandbox-resident
+ * bootstrap JS — would otherwise each hand-roll near-identical bash. This
+ * module is the single builder for all of them, and owns the command
+ * templates the bootstrap generator embeds.
+ *
+ * The contract: helpers take primitives, do their own shell quoting, and
+ * return ready-to-run bash. Callers must not re-quote.
+ */
+/**
+ * Pin the daemon's local layout to `scoped` (remote path appended under
+ * --local-dir) on every invocation.
+ *
+ * Newer daemon releases made the layout explicit: they default to `exact`
+ * (--local-dir IS the mirror root) and hard-error on multiple --remote-path
+ * values unless `--local-layout=scoped`. All builders in this module
+ * pre-compute an UNSCOPED local dir (see `unscopedLocalDir`) and rely on the
+ * daemon appending the remote path, which is what older binaries did
+ * implicitly. Without this pin, a newer binary breaks two ways: multi-path
+ * mounts fail at startup, and single-path mounts silently mirror at the wrong
+ * depth.
+ *
+ * Pinned via env var rather than the `--local-layout` flag on purpose: older
+ * binaries reject the unknown flag but ignore the env var, while newer ones
+ * read RELAYFILE_MOUNT_LOCAL_LAYOUT as the flag default. One spelling
+ * therefore yields an identical on-disk layout across every binary version a
+ * sandbox image may carry — which matters because the image and this code are
+ * versioned independently. The pathless case is safe: scoped layout with
+ * remote path "/" is a no-op join (normalizeMountRemotePath("/") → localDir).
+ *
+ * Spelled `env VAR=… relayfile-mount` (not the bare `VAR=… relayfile-mount`
+ * shell form) because initial-sync commands get wrapped by coreutils
+ * `timeout`, which execs its argument instead of shell-parsing it — a bare
+ * assignment prefix would make `timeout '20s' VAR=… relayfile-mount` fail
+ * with "failed to run command". `env` is a real executable, so the same
+ * prefix composes under `timeout`, `nohup`, and direct execution alike.
+ */
+const SCOPED_LOCAL_LAYOUT_ENV = "env RELAYFILE_MOUNT_LOCAL_LAYOUT=scoped ";
+/**
+ * `env`-prefix for every relayfile-mount invocation: always pins the scoped
+ * local layout, and when the caller provides a creds file, also points the
+ * daemon at it via RELAYFILE_MOUNT_CREDS_FILE (see `credsFilePath` docs for
+ * the version-skew rationale).
+ */
+function mountEnvPrefix(opts) {
+    if (!opts.credsFilePath) {
+        return SCOPED_LOCAL_LAYOUT_ENV;
+    }
+    return `env RELAYFILE_MOUNT_LOCAL_LAYOUT=scoped RELAYFILE_MOUNT_CREDS_FILE=${shellQuote(opts.credsFilePath)} `;
+}
+const DEFAULT_TEMPLATE_PLACEHOLDERS = {
+    baseUrl: "__relayfile_base_url__",
+    workspaceId: "__relayfile_workspace_id__",
+    localDir: "__relayfile_local_dir__",
+    token: "__relayfile_token__",
+    pathArgs: "__relayfile_path_args__",
+    path: "__relayfile_path__",
+};
+/**
+ * Bash command that starts a `relayfile-mount` daemon in the background and
+ * echoes the daemon PID on stdout (so callers can capture it and kill the
+ * process later). The daemon redirects all output to `logPath` so it does
+ * not pollute the caller's stdout/stderr.
+ *
+ * Mirrors the inline command originally in
+ * `executor.ts:startRelayfileMount` (#???) — see the file-level comment for
+ * the migration story.
+ */
+export function buildRelayfileMountStartShell(opts) {
+    const scopedRoots = scopedRemoteRoots(opts.paths ?? [], { allowProviderRoot: true });
+    const localDir = unscopedLocalDir(opts.localDir, scopedRoots);
+    const args = buildMountArgs({ ...opts, localDir, paths: scopedRoots });
+    const interval = opts.interval ?? "1s";
+    const logPath = opts.logPath ?? "/tmp/relayfile-mount.log";
+    const startShell = [
+        `${mountEnvPrefix(opts)}nohup relayfile-mount`,
+        ...args,
+        `--interval ${shellQuote(interval)}`,
+        `> ${shellQuote(logPath)} 2>&1 & echo $!`,
+    ].join(" ");
+    if (scopedRoots.length <= 1) {
+        return startShell;
+    }
+    // `paths-file` is the new-daemon sentinel: the release that added it also
+    // added repeated `--remote-path` support. The Go flag package prints
+    // `-paths-file` in help while the command accepts `--paths-file`, so probe
+    // for the flag name without assuming dash style.
+    return [
+        "if relayfile-mount --help 2>&1 | grep -q -- 'paths-file'; then",
+        `${startShell};`,
+        "else",
+        "echo 'relayfile-mount multi-path filters unsupported; starting one daemon per remote path' >&2;",
+        `${buildRelayfileMountFallbackStartShell({ ...opts, paths: scopedRoots })};`,
+        "fi",
+    ].join(" ");
+}
+/**
+ * Bash command that runs a one-time relayfile-mount sync (`--once`). Pushes
+ * any pending local writes upstream and exits. Use this:
+ *   - As an explicit pre-handler sync so the mount mirror is populated
+ *     before the handler reads from it (executor's initial-sync pattern).
+ *   - As a post-handler flush before sandbox teardown so writeback drafts
+ *     the handler created (e.g. `ctx.github.comment` files) reach
+ *     relayfile cloud before the sandbox stops.
+ */
+export function buildRelayfileMountFlushShell(opts) {
+    const scopedRoots = scopedRemoteRoots(opts.paths ?? [], { allowProviderRoot: true });
+    const localDir = unscopedLocalDir(opts.localDir, scopedRoots);
+    const args = buildMountArgs({ ...opts, localDir, paths: scopedRoots });
+    return [`${mountEnvPrefix(opts)}relayfile-mount --once`, ...args].join(" ");
+}
+/**
+ * Post-handler CLEANUP flush command — the durable cure for cleanup flushes
+ * that time out on large mirrors. Identical to
+ * {@link buildRelayfileMountFlushShell} EXCEPT the mode flag is the shell
+ * variable `$relayfile_mount_flush_mode`, which the lifecycle shell probes
+ * once into `--flush-outbox-once` (O(durable outbox); flushes only
+ * `.relay/outbox/pending` and exits WITHOUT a full-tree reconcile —
+ * scanLocalFiles/pushLocal/pullRemote — so a large mirror can't blow the
+ * cleanup `timeout`) on daemons that support it, else `--once` on older ones,
+ * whose behavior is unchanged. Emitted as a SINGLE command (the flag is one
+ * expanded token) so it stays valid inside the cleanup's `timeout Ns ...`
+ * wrapper — an inline `if/fi` would break `timeout`. The flag choice does not
+ * change the exit-code/`.relay/state.json` contract the cleanup gate reads: a
+ * real outbox-flush failure still exits nonzero and leaves pending, so the
+ * loud-fail stays load-bearing.
+ */
+export function buildRelayfileMountCleanupFlushShell(opts) {
+    const scopedRoots = scopedRemoteRoots(opts.paths ?? [], { allowProviderRoot: true });
+    const localDir = unscopedLocalDir(opts.localDir, scopedRoots);
+    const args = buildMountArgs({ ...opts, localDir, paths: scopedRoots });
+    return [
+        `${mountEnvPrefix(opts)}relayfile-mount "$relayfile_mount_flush_mode"`,
+        ...args,
+    ].join(" ");
+}
+export function buildRelayfileMountInitialSyncShell(opts) {
+    const commands = buildInitialSyncCommands(opts);
+    const command = commands.join(" && ");
+    if (opts.idleTimeoutSeconds && opts.idleTimeoutSeconds > 0) {
+        return buildIdleWatchedCommand(command, initialSyncProgressFiles(opts), opts.idleTimeoutSeconds);
+    }
+    if (!opts.timeoutSeconds || opts.timeoutSeconds <= 0) {
+        return command;
+    }
+    const timeout = `${Math.ceil(opts.timeoutSeconds)}s`;
+    const timedCommand = commands
+        .map((entry) => `timeout ${shellQuote(timeout)} ${entry}`)
+        .join(" && ");
+    return [
+        "{",
+        "if command -v timeout >/dev/null 2>&1; then",
+        `${timedCommand};`,
+        "else",
+        "echo 'timeout command unavailable for relayfile initial sync' >&2;",
+        "false;",
+        "fi;",
+        "}",
+    ].join(" ");
+}
+export const RELAYFILE_INITIAL_SYNC_SCRIPT_PATH = "/tmp/relayfile-initial-sync.sh";
+export const RELAYFILE_INITIAL_SYNC_EXIT_PATH = "/tmp/relayfile-initial-sync.exit";
+export const RELAYFILE_INITIAL_SYNC_LOG_PATH = "/tmp/relayfile-initial-sync.log";
+export const RELAYFILE_INITIAL_SYNC_PID_PATH = "/tmp/relayfile-initial-sync.pid";
+function relayfileInitialSyncPath(path, runId) {
+    if (!runId) {
+        return path;
+    }
+    const safeRunId = runId.replace(/[^A-Za-z0-9_.-]/g, "_");
+    return `${path}.${safeRunId}`;
+}
+/**
+ * Bash that launches the (idle-watched) initial sync in the background and
+ * returns immediately, echoing the launcher PID. Daytona's exec path cannot
+ * host a single long-running command: the proxy read-times-out around 120s
+ * (a gateway timeout) and callers add their own client-side fail-fast, so a
+ * first materialization with real data (a populated /github tree, a cold
+ * workspace export) gets killed mid-sync. Instead the sync runs detached in
+ * the sandbox — preserving the in-sandbox idle watchdog — and callers poll
+ * `buildRelayfileMountInitialSyncStatusShell` with short execs until the
+ * exit sentinel appears.
+ */
+export function buildRelayfileMountInitialSyncBackgroundShell(opts, runOptions = {}) {
+    const scriptPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_SCRIPT_PATH, runOptions.runId);
+    const exitPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_EXIT_PATH, runOptions.runId);
+    const logPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_LOG_PATH, runOptions.runId);
+    const pidPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_PID_PATH, runOptions.runId);
+    const syncShell = buildRelayfileMountInitialSyncShell(opts);
+    const runner = [
+        "if command -v setsid >/dev/null 2>&1; then",
+        `  setsid sh ${shellQuote(scriptPath)} > ${shellQuote(logPath)} 2>&1 &`,
+        "else",
+        `  sh ${shellQuote(scriptPath)} > ${shellQuote(logPath)} 2>&1 &`,
+        "fi;",
+        "relayfile_initial_sync_pid=$!;",
+        `echo "$relayfile_initial_sync_pid" > ${shellQuote(pidPath)};`,
+        'wait "$relayfile_initial_sync_pid";',
+        `echo $? > ${shellQuote(exitPath)}`,
+    ].join(" ");
+    return [
+        "set -e",
+        `rm -f ${shellQuote(scriptPath)} ${shellQuote(exitPath)} ${shellQuote(logPath)} ${shellQuote(pidPath)} &&`,
+        // Quoted heredoc delimiter: the sync shell lands in the script file
+        // verbatim, with no re-quoting hazards from nesting it in `sh -c`.
+        `cat > ${shellQuote(scriptPath)} <<'RELAYFILE_INITIAL_SYNC_EOF'
+${syncShell}
+RELAYFILE_INITIAL_SYNC_EOF
+`,
+        `nohup sh -c ${shellQuote(runner)} >/dev/null 2>&1 & echo $!`,
+    ].join("\n");
+}
+const RELAYFILE_INITIAL_SYNC_EXIT_MARKER = "relayfile-initial-sync-exit:";
+const RELAYFILE_INITIAL_SYNC_RUNNING_MARKER = "relayfile-initial-sync-running";
+/** Short, idempotent status probe for the backgrounded initial sync. */
+export function buildRelayfileMountInitialSyncStatusShell(runOptions = {}) {
+    const exitPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_EXIT_PATH, runOptions.runId);
+    const pidPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_PID_PATH, runOptions.runId);
+    return [
+        `if [ -f ${shellQuote(exitPath)} ]; then`,
+        `echo "${RELAYFILE_INITIAL_SYNC_EXIT_MARKER}$(cat ${shellQuote(exitPath)})";`,
+        `elif [ -f ${shellQuote(pidPath)} ]; then`,
+        `relayfile_initial_sync_pid=$(cat ${shellQuote(pidPath)} 2>/dev/null || true);`,
+        'case "$relayfile_initial_sync_pid" in',
+        `  ''|*[!0-9]*) echo ${RELAYFILE_INITIAL_SYNC_RUNNING_MARKER} ;;`,
+        '  *)',
+        '    if kill -0 "$relayfile_initial_sync_pid" 2>/dev/null; then',
+        `      echo ${RELAYFILE_INITIAL_SYNC_RUNNING_MARKER};`,
+        "    else",
+        `      echo "${RELAYFILE_INITIAL_SYNC_EXIT_MARKER}127";`,
+        "    fi",
+        "    ;;",
+        "esac",
+        "else",
+        `echo ${RELAYFILE_INITIAL_SYNC_RUNNING_MARKER};`,
+        "fi",
+    ].join(" ");
+}
+export function buildRelayfileMountInitialSyncKillShell(runOptions = {}) {
+    const pidPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_PID_PATH, runOptions.runId);
+    return [
+        `if [ -f ${shellQuote(pidPath)} ]; then`,
+        `relayfile_initial_sync_pid=$(cat ${shellQuote(pidPath)} 2>/dev/null || true);`,
+        'case "$relayfile_initial_sync_pid" in',
+        "  ''|*[!0-9]*) ;;",
+        '  *)',
+        '    kill -TERM -- "-$relayfile_initial_sync_pid" 2>/dev/null || true;',
+        '    kill "$relayfile_initial_sync_pid" 2>/dev/null || true',
+        "    ;;",
+        "esac",
+        "fi",
+    ].join(" ");
+}
+export function buildRelayfileMountInitialSyncLogTailShell(lines = 40, runOptions = {}) {
+    const logPath = relayfileInitialSyncPath(RELAYFILE_INITIAL_SYNC_LOG_PATH, runOptions.runId);
+    return `tail -n ${Math.max(1, Math.floor(lines))} ${shellQuote(logPath)} 2>/dev/null || true`;
+}
+export function parseRelayfileMountInitialSyncStatus(output) {
+    const match = output.match(new RegExp(`${RELAYFILE_INITIAL_SYNC_EXIT_MARKER}(-?\\d+)`));
+    const exitCode = match?.[1];
+    if (exitCode !== undefined) {
+        return { state: "exited", exitCode: Number.parseInt(exitCode, 10) };
+    }
+    if (output.includes(RELAYFILE_INITIAL_SYNC_RUNNING_MARKER)) {
+        return { state: "running" };
+    }
+    return { state: "unknown" };
+}
+export function buildRelayfileMountPathArgsShell(paths) {
+    return scopedRemoteRoots(paths, { allowProviderRoot: true })
+        .map(buildMountPathArg)
+        .join("");
+}
+export function buildRelayfileMountShellTemplate(placeholders = {}, 
+// `stateDir` is required (sandbox-image specific); `interval` / `websocket`
+// stay optional.
+options) {
+    const resolved = { ...DEFAULT_TEMPLATE_PLACEHOLDERS, ...placeholders };
+    const baseOpts = {
+        baseUrl: resolved.baseUrl,
+        workspaceId: resolved.workspaceId,
+        localDir: resolved.localDir,
+        token: resolved.token,
+        ...options,
+    };
+    const pathArgsPlaceholderArg = buildMountPathArg(resolved.pathArgs);
+    const pathArgTemplate = buildMountPathArg(resolved.path);
+    const startShellWithoutPaths = buildRelayfileMountStartShell(baseOpts);
+    const flushShellWithoutPaths = buildRelayfileMountFlushShell(baseOpts);
+    return {
+        startShellTemplate: insertStartTemplatePathArgs(startShellWithoutPaths, pathArgsPlaceholderArg),
+        flushShellTemplate: `${flushShellWithoutPaths}${pathArgsPlaceholderArg}`,
+        pathArgsPlaceholderArg,
+        pathArgTemplate,
+        placeholders: resolved,
+    };
+}
+function buildMountArgs(opts) {
+    return [
+        `--base-url ${shellQuote(opts.baseUrl)}`,
+        `--workspace ${shellQuote(opts.workspaceId)}`,
+        `--local-dir ${shellQuote(opts.localDir)}`,
+        `--state-dir ${shellQuote(opts.stateDir)}`,
+        `--token ${shellQuote(opts.token)}`,
+        ...(opts.websocket === false ? ["--websocket=false"] : []),
+        ...(opts.lazyRepos ? ["--lazy-repos"] : []),
+        ...scopedRemoteRoots(opts.paths ?? [], { allowProviderRoot: true })
+            .map((path) => `--remote-path ${shellQuote(path)}`),
+    ];
+}
+function buildInitialSyncCommands(opts) {
+    const roots = scopedRemoteRoots(opts.paths ?? []);
+    if (roots.length === 0) {
+        return [buildRelayfileMountFlushShell(opts)];
+    }
+    const localDir = unscopedLocalDir(opts.localDir, roots);
+    return roots
+        .map((remoteRoot, index) => {
+        const args = [
+            ...buildMountArgs({ ...opts, localDir, paths: [] }),
+            `--remote-path ${shellQuote(remoteRoot)}`,
+            `--state-file ${shellQuote(`/tmp/relayfile-mount-initial-sync-${index}.json`)}`,
+        ];
+        return [`${mountEnvPrefix(opts)}relayfile-mount --once`, ...args].join(" ");
+    });
+}
+function initialSyncProgressFiles(opts) {
+    const roots = scopedRemoteRoots(opts.paths ?? []);
+    if (roots.length === 0) {
+        const stateDir = opts.stateDir;
+        return [
+            `${stateDir.replace(/\/+$/u, "")}/.relayfile-mount-state.json`,
+        ];
+    }
+    return roots.map((_remoteRoot, index) => `/tmp/relayfile-mount-initial-sync-${index}.json`);
+}
+function buildIdleWatchedCommand(command, progressFiles, idleTimeoutSeconds) {
+    const idle = Math.max(1, Math.ceil(idleTimeoutSeconds));
+    const poll = Math.max(1, Math.min(5, Math.floor(idle / 3) || 1));
+    const progressArgs = progressFiles.map(shellQuote).join(" ");
+    return [
+        "(",
+        `set -- ${progressArgs};`,
+        "relayfile_mount_marker=$(mktemp /tmp/relayfile-mount-progress.XXXXXX) || exit 1;",
+        'touch "$relayfile_mount_marker";',
+        `(${command}) &`,
+        "relayfile_mount_sync_pid=$!;",
+        "relayfile_mount_status=0;",
+        'while kill -0 "$relayfile_mount_sync_pid" 2>/dev/null; do',
+        '  for relayfile_mount_progress_file in "$@"; do',
+        '    if [ -f "$relayfile_mount_progress_file" ] && [ "$relayfile_mount_progress_file" -nt "$relayfile_mount_marker" ]; then',
+        '      touch "$relayfile_mount_marker";',
+        "    fi;",
+        "  done;",
+        "  relayfile_mount_now=$(date +%s);",
+        '  relayfile_mount_marker_mtime=$(date -r "$relayfile_mount_marker" +%s 2>/dev/null || stat -c %Y "$relayfile_mount_marker" 2>/dev/null || echo "$relayfile_mount_now");',
+        `  if [ $((relayfile_mount_now - relayfile_mount_marker_mtime)) -ge ${idle} ]; then`,
+        `    echo 'relayfile initial sync made no progress for ${idle}s; canceling' >&2;`,
+        '    kill "$relayfile_mount_sync_pid" 2>/dev/null || true;',
+        '    wait "$relayfile_mount_sync_pid" 2>/dev/null || true;',
+        '    rm -f "$relayfile_mount_marker";',
+        "    exit 124;",
+        "  fi;",
+        `  sleep ${poll};`,
+        "done;",
+        'wait "$relayfile_mount_sync_pid" || relayfile_mount_status=$?;',
+        'rm -f "$relayfile_mount_marker";',
+        'exit "$relayfile_mount_status";',
+        ")",
+    ].join(" ");
+}
+function scopedRemoteRoots(paths, options = {}) {
+    const roots = new Set();
+    for (const path of paths) {
+        const root = scopedRemoteRoot(path, options);
+        if (root) {
+            roots.add(root);
+        }
+    }
+    return [...roots].sort();
+}
+function scopedRemoteRoot(path, options = {}) {
+    const trimmed = path.trim();
+    if (!trimmed.startsWith("/")) {
+        return null;
+    }
+    const withoutGlob = trimmed.endsWith("/**") ? trimmed.slice(0, -3) : trimmed;
+    const normalized = withoutGlob.replace(/\/{2,}/g, "/").replace(/\/$/u, "");
+    if (!normalized || normalized === "/" || normalized.includes("*")) {
+        return null;
+    }
+    if (!options.allowProviderRoot && normalized.slice(1).split("/").length < 2) {
+        return null;
+    }
+    return normalized;
+}
+function unscopedLocalDir(localRoot, remoteRoots) {
+    let normalizedRoot = localRoot.replace(/\/+$/u, "");
+    const suffixes = remoteRoots
+        .map((remoteRoot) => remoteRoot.replace(/^\/+/u, "").replace(/\/+$/u, ""))
+        .filter(Boolean)
+        .sort((left, right) => right.length - left.length);
+    for (const suffix of suffixes) {
+        if (!suffix) {
+            continue;
+        }
+        if (normalizedRoot === suffix) {
+            normalizedRoot = "";
+            continue;
+        }
+        if (normalizedRoot.endsWith(`/${suffix}`)) {
+            normalizedRoot = normalizedRoot.slice(0, -suffix.length).replace(/\/+$/u, "");
+            continue;
+        }
+        const nestedSuffix = `/${suffix}/`;
+        const nestedIndex = normalizedRoot.indexOf(nestedSuffix);
+        if (nestedIndex !== -1) {
+            normalizedRoot = normalizedRoot.slice(0, nestedIndex).replace(/\/+$/u, "");
+        }
+    }
+    return normalizedRoot || "/";
+}
+function buildMountPathArg(path) {
+    return ` --remote-path ${shellQuote(path)}`;
+}
+function insertStartTemplatePathArgs(shell, pathArgsPlaceholderArg) {
+    return shell.replace(" --interval ", `${pathArgsPlaceholderArg} --interval `);
+}
+function buildRelayfileMountFallbackStartShell(opts) {
+    const roots = scopedRemoteRoots(opts.paths ?? [], { allowProviderRoot: true });
+    const localDir = unscopedLocalDir(opts.localDir, roots);
+    const interval = opts.interval ?? "1s";
+    const logPath = opts.logPath ?? "/tmp/relayfile-mount.log";
+    const starts = roots.map((root) => [
+        `${mountEnvPrefix(opts)}relayfile-mount`,
+        ...buildMountArgs({ ...opts, localDir, paths: [root] }),
+        `--interval ${shellQuote(interval)}`,
+        `>> ${shellQuote(logPath)} 2>&1 &`,
+        "relayfile_mount_pids=\"$relayfile_mount_pids $!\";",
+    ].join(" "));
+    return [
+        "(",
+        "relayfile_mount_pids='';",
+        ...starts,
+        "trap 'kill $relayfile_mount_pids 2>/dev/null || true; wait' INT TERM EXIT;",
+        "wait",
+        ") >/dev/null 2>&1 & echo $!",
+    ].join(" ");
+}
+/**
+ * POSIX-safe single-quote escape. `foo` → `'foo'`, `foo's` → `'foo'\''s'`.
+ * Conservative — quotes every value, even ones that don't strictly need it,
+ * so callers never have to think about characters that would otherwise be
+ * shell-interpreted (spaces, `$`, etc.).
+ */
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=mount-script.js.map

package/dist/mount-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-script.js","sourceRoot":"","sources":["../src/mount-script.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8CH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,uBAAuB,GAAG,0CAA0C,CAAC;AAE3E;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAuD;IAC7E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,sEAAsE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;AACjH,CAAC;AAsCD,MAAM,6BAA6B,GAAgD;IACjF,OAAO,EAAE,wBAAwB;IACjC,WAAW,EAAE,4BAA4B;IACzC,QAAQ,EAAE,yBAAyB;IACnC,KAAK,EAAE,qBAAqB;IAC5B,QAAQ,EAAE,yBAAyB;IACnC,IAAI,EAAE,oBAAoB;CAC3B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAiC;IAC7E,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC3D,MAAM,UAAU,GAAG;QACjB,GAAG,cAAc,CAAC,IAAI,CAAC,uBAAuB;QAC9C,GAAG,IAAI;QACP,cAAc,UAAU,CAAC,QAAQ,CAAC,EAAE;QACpC,KAAK,UAAU,CAAC,OAAO,CAAC,iBAAiB;KAC1C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,iDAAiD;IACjD,OAAO;QACL,gEAAgE;QAChE,GAAG,UAAU,GAAG;QAChB,MAAM;QACN,iGAAiG;QACjG,GAAG,qCAAqC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG;QAC5E,IAAI;KACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAgC;IAC5E,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oCAAoC,CAClD,IAAgC;IAEhC,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,GAAG,cAAc,CAAC,IAAI,CAAC,+CAA+C;QACtE,GAAG,IAAI;KACR,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAAsC;IAEtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,uBAAuB,CAC5B,OAAO,EACP,wBAAwB,CAAC,IAAI,CAAC,EAC9B,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;IACrD,MAAM,YAAY,GAAG,QAAQ;SAC1B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;SACzD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,OAAO;QACL,GAAG;QACH,6CAA6C;QAC7C,GAAG,YAAY,GAAG;QAClB,MAAM;QACN,oEAAoE;QACpE,QAAQ;QACR,KAAK;QACL,GAAG;KACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG,gCAAgC,CAAC;AACnF,MAAM,CAAC,MAAM,gCAAgC,GAAG,kCAAkC,CAAC;AACnF,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AACjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AAMjF,SAAS,wBAAwB,CAAC,IAAY,EAAE,KAAyB;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6CAA6C,CAC3D,IAAsC,EACtC,aAAkD,EAAE;IAEpD,MAAM,UAAU,GAAG,wBAAwB,CACzC,kCAAkC,EAClC,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,MAAM,QAAQ,GAAG,wBAAwB,CACvC,gCAAgC,EAChC,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CACtC,+BAA+B,EAC/B,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CACtC,+BAA+B,EAC/B,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,MAAM,SAAS,GAAG,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG;QACb,4CAA4C;QAC5C,eAAe,UAAU,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS;QACvE,MAAM;QACN,QAAQ,UAAU,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS;QAChE,KAAK;QACL,gCAAgC;QAChC,wCAAwC,UAAU,CAAC,OAAO,CAAC,GAAG;QAC9D,qCAAqC;QACrC,aAAa,UAAU,CAAC,QAAQ,CAAC,EAAE;KACpC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO;QACL,QAAQ;QACR,SAAS,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK;QAC1G,oEAAoE;QACpE,mEAAmE;QACnE,SAAS,UAAU,CAAC,UAAU,CAAC;EACjC,SAAS;;CAEV;QACG,eAAe,UAAU,CAAC,MAAM,CAAC,4BAA4B;KAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,kCAAkC,GAAG,8BAA8B,CAAC;AAC1E,MAAM,qCAAqC,GAAG,gCAAgC,CAAC;AAE/E,wEAAwE;AACxE,MAAM,UAAU,yCAAyC,CACvD,aAAkD,EAAE;IAEpD,MAAM,QAAQ,GAAG,wBAAwB,CACvC,gCAAgC,EAChC,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CACtC,+BAA+B,EAC/B,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,OAAO;QACL,WAAW,UAAU,CAAC,QAAQ,CAAC,UAAU;QACzC,SAAS,kCAAkC,SAAS,UAAU,CAAC,QAAQ,CAAC,KAAK;QAC7E,aAAa,UAAU,CAAC,OAAO,CAAC,UAAU;QAC1C,oCAAoC,UAAU,CAAC,OAAO,CAAC,wBAAwB;QAC/E,uCAAuC;QACvC,uBAAuB,qCAAqC,KAAK;QACjE,MAAM;QACN,gEAAgE;QAChE,cAAc,qCAAqC,GAAG;QACtD,UAAU;QACV,eAAe,kCAAkC,OAAO;QACxD,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,MAAM;QACN,QAAQ,qCAAqC,GAAG;QAChD,IAAI;KACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,aAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,wBAAwB,CACtC,+BAA+B,EAC/B,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,OAAO;QACL,WAAW,UAAU,CAAC,OAAO,CAAC,UAAU;QACxC,oCAAoC,UAAU,CAAC,OAAO,CAAC,wBAAwB;QAC/E,uCAAuC;QACvC,mBAAmB;QACnB,MAAM;QACN,uEAAuE;QACvE,4DAA4D;QAC5D,QAAQ;QACR,MAAM;QACN,IAAI;KACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,KAAK,GAAG,EAAE,EACV,aAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,wBAAwB,CACtC,+BAA+B,EAC/B,UAAU,CAAC,KAAK,CACjB,CAAC;IACF,OAAO,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,sBAAsB,CAAC;AAChG,CAAC;AAUD,MAAM,UAAU,oCAAoC,CAClD,MAAc;IAEd,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CACxB,IAAI,MAAM,CAAC,GAAG,kCAAkC,UAAU,CAAC,CAC5D,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAwB;IACvE,OAAO,iBAAiB,CAAC,KAAK,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SACzD,GAAG,CAAC,iBAAiB,CAAC;SACtB,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,eAAqE,EAAE;AACvE,4EAA4E;AAC5E,iBAAiB;AACjB,OAEwE;IAExE,MAAM,QAAQ,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,YAAY,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,GAAG,OAAO;KACX,CAAC;IACF,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO;QACL,kBAAkB,EAAE,2BAA2B,CAC7C,sBAAsB,EACtB,sBAAsB,CACvB;QACD,kBAAkB,EAAE,GAAG,sBAAsB,GAAG,sBAAsB,EAAE;QACxE,sBAAsB;QACtB,eAAe;QACf,YAAY,EAAE,QAAQ;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAgC;IACtD,OAAO;QACL,cAAc,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACxC,eAAe,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;QAC7C,eAAe,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAC1C,eAAe,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAC1C,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACnC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;aAChE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAsC;IACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG;YACX,GAAG,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnD,iBAAiB,UAAU,CAAC,UAAU,CAAC,EAAE;YACzC,gBAAgB,UAAU,CAAC,qCAAqC,KAAK,OAAO,CAAC,EAAE;SAChF,CAAC;QACF,OAAO,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAsC;IACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,OAAO;YACL,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,8BAA8B;SAC/D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CACtC,qCAAqC,KAAK,OAAO,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAe,EACf,aAAgC,EAChC,kBAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG;QACH,UAAU,YAAY,GAAG;QACzB,kFAAkF;QAClF,kCAAkC;QAClC,IAAI,OAAO,KAAK;QAChB,8BAA8B;QAC9B,2BAA2B;QAC3B,2DAA2D;QAC3D,iDAAiD;QACjD,4HAA4H;QAC5H,wCAAwC;QACxC,SAAS;QACT,SAAS;QACT,oCAAoC;QACpC,yKAAyK;QACzK,sEAAsE,IAAI,UAAU;QACpF,yDAAyD,IAAI,oBAAoB;QACjF,2DAA2D;QAC3D,2DAA2D;QAC3D,sCAAsC;QACtC,eAAe;QACf,OAAO;QACP,WAAW,IAAI,GAAG;QAClB,OAAO;QACP,gEAAgE;QAChE,kCAAkC;QAClC,iCAAiC;QACjC,GAAG;KACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAwB,EACxB,UAA2C,EAAE;IAE7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,UAA2C,EAAE;IAE7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,WAA8B;IACzE,IAAI,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,WAAW;SACzB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;SACzE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9B,cAAc,GAAG,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;YAC1C,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,MAAM,GAAG,CAAC;QACnC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,cAAc,IAAI,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,kBAAkB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,sBAA8B;IAChF,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,sBAAsB,cAAc,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,qCAAqC,CAAC,IAAiC;IAC9E,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,GAAG,cAAc,CAAC,IAAI,CAAC,iBAAiB;QACxC,GAAG,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,cAAc,UAAU,CAAC,QAAQ,CAAC,EAAE;QACpC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS;QAClC,oDAAoD;KACrD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACb,OAAO;QACL,GAAG;QACH,0BAA0B;QAC1B,GAAG,MAAM;QACT,4EAA4E;QAC5E,MAAM;QACN,6BAA6B;KAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC"}