@agent-vm/agent-vm 0.0.20

package/dist/cli/ssh-commands.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import type { SystemConfig } from '../config/system-config.js';
+import { type CliDependencies, type CliIo } from './agent-vm-cli-support.js';
+interface RunSshCommandOptions {
+    readonly dependencies: CliDependencies;
+    readonly io: CliIo;
+    readonly restArguments: readonly string[];
+    readonly systemConfig: SystemConfig;
+}
+export declare const zoneSshAccessResponseSchema: z.ZodObject<{
+    command: z.ZodOptional<z.ZodString>;
+    host: z.ZodOptional<z.ZodString>;
+    identityFile: z.ZodOptional<z.ZodString>;
+    port: z.ZodOptional<z.ZodNumber>;
+    user: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export type ZoneSshAccessResponse = z.infer<typeof zoneSshAccessResponseSchema>;
+export declare function runSshCommand(options: RunSshCommandOptions): Promise<void>;
+export {};
+//# sourceMappingURL=ssh-commands.d.ts.map

package/dist/cli/ssh-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-commands.d.ts","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,KAAK,EAIV,MAAM,2BAA2B,CAAC;AAEnC,UAAU,oBAAoB;IAC7B,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAED,eAAO,MAAM,2BAA2B;;;;;;iBAQzB,CAAC;AAEhB,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAahF,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8DhF"}

package/dist/cli/ssh-commands.js

@@ -0,0 +1,72 @@
+import { execa } from 'execa';
+import { z } from 'zod';
+import { readZoneFlag, requireZone, resolveControllerBaseUrl, } from './agent-vm-cli-support.js';
+export const zoneSshAccessResponseSchema = z
+    .object({
+    command: z.string().min(1).optional(),
+    host: z.string().min(1).optional(),
+    identityFile: z.string().min(1).optional(),
+    port: z.number().int().positive().optional(),
+    user: z.string().min(1).optional(),
+})
+    .passthrough();
+const openClawShellEnvFilePath = '/etc/profile.d/openclaw-env.sh';
+function shellQuote(value) {
+    return `'${value.replace(/'/gu, `'\\''`)}'`;
+}
+function buildOpenClawAwareRemoteCommand(commandArguments) {
+    const quotedCommand = commandArguments.map((commandPart) => shellQuote(commandPart)).join(' ');
+    return `bash -lc ${shellQuote(`source ${openClawShellEnvFilePath} && exec ${quotedCommand}`)}`;
+}
+export async function runSshCommand(options) {
+    const controllerClient = options.dependencies.createControllerClient({
+        baseUrl: resolveControllerBaseUrl(options.systemConfig),
+    });
+    const zone = requireZone(options.systemConfig, readZoneFlag(options.restArguments));
+    const parsedSshResponse = zoneSshAccessResponseSchema.safeParse(await controllerClient.enableZoneSsh(zone.id));
+    if (!parsedSshResponse.success) {
+        throw new Error('Controller returned an invalid SSH response.');
+    }
+    const sshResponse = parsedSshResponse.data;
+    const printOnly = options.restArguments.includes('--print');
+    const commandSeparatorIndex = options.restArguments.indexOf('--');
+    const remoteCommandArguments = commandSeparatorIndex >= 0 ? options.restArguments.slice(commandSeparatorIndex + 1) : [];
+    if (printOnly || !sshResponse.host || !sshResponse.port) {
+        if (sshResponse.command) {
+            const printedCommand = remoteCommandArguments.length > 0
+                ? `${sshResponse.command} ${remoteCommandArguments.join(' ')}`
+                : sshResponse.command;
+            options.io.stdout.write(`${printedCommand}\n`);
+            return;
+        }
+        throw new Error('Controller returned incomplete SSH access details. Re-run with --print if you expect a raw SSH command.');
+    }
+    const sshArguments = [
+        '-o',
+        'StrictHostKeyChecking=no',
+        '-o',
+        'UserKnownHostsFile=/dev/null',
+        ...(sshResponse.identityFile ? ['-i', sshResponse.identityFile] : []),
+        '-p',
+        String(sshResponse.port),
+        `${sshResponse.user ?? 'root'}@${sshResponse.host}`,
+        ...(remoteCommandArguments.length > 0
+            ? [buildOpenClawAwareRemoteCommand(remoteCommandArguments)]
+            : []),
+    ];
+    const runInteractiveProcess = options.dependencies.runInteractiveProcess ??
+        (async (command, arguments_) => {
+            await execa(command, arguments_, {
+                stdio: 'inherit',
+            });
+        });
+    try {
+        await runInteractiveProcess('ssh', sshArguments);
+    }
+    catch (error) {
+        throw new Error(`Failed to open SSH session to ${sshResponse.user ?? 'root'}@${sshResponse.host}:${sshResponse.port}: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
+    }
+}
+//# sourceMappingURL=ssh-commands.js.map

package/dist/cli/ssh-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-commands.js","sourceRoot":"","sources":["../../src/cli/ssh-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAGN,YAAY,EACZ,WAAW,EACX,wBAAwB,GACxB,MAAM,2BAA2B,CAAC;AASnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAElE,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,+BAA+B,CAAC,gBAAmC;IAC3E,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/F,OAAO,YAAY,UAAU,CAAC,UAAU,wBAAwB,YAAY,aAAa,EAAE,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;QACpE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,SAAS,CAC9D,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAC7C,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAA0B,iBAAiB,CAAC,IAAI,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,sBAAsB,GAC3B,qBAAqB,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1F,IAAI,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,cAAc,GACnB,sBAAsB,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC9D,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;YACxB,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,MAAM,IAAI,KAAK,CACd,yGAAyG,CACzG,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACpB,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,8BAA8B;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI;QACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,GAAG,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;IACF,MAAM,qBAAqB,GAC1B,OAAO,CAAC,YAAY,CAAC,qBAAqB;QAC1C,CAAC,KAAK,EAAE,OAAe,EAAE,UAA6B,EAAiB,EAAE;YACxE,MAAM,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE;gBAChC,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC;QACJ,MAAM,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,iCAAiC,WAAW,CAAC,IAAI,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAChK;YACC,KAAK,EAAE,KAAK;SACZ,CACD,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/cli/vm-host-system-templates.d.ts

@@ -0,0 +1,12 @@
+export interface RenderVmHostSystemDockerfileOptions {
+    readonly gondolinPackageSpec: string;
+    readonly zigVersion: string;
+}
+export interface RenderVmHostSystemZoneOptions {
+    readonly zoneId: string;
+}
+export declare function renderVmHostSystemDockerfile(options: RenderVmHostSystemDockerfileOptions): string;
+export declare function renderVmHostSystemStartScript(options: RenderVmHostSystemZoneOptions): string;
+export declare function renderVmHostSystemSystemdUnit(): string;
+export declare function renderVmHostSystemReadme(options: RenderVmHostSystemZoneOptions): string;
+//# sourceMappingURL=vm-host-system-templates.d.ts.map

package/dist/cli/vm-host-system-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-host-system-templates.d.ts","sourceRoot":"","sources":["../../src/cli/vm-host-system-templates.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mCAAmC;IACnD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mCAAmC,GAAG,MAAM,CA+EjG;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,6BAA6B,GAAG,MAAM,CA0E5F;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAetD;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,6BAA6B,GAAG,MAAM,CAavF"}

package/dist/cli/vm-host-system-templates.js

@@ -0,0 +1,186 @@
+export function renderVmHostSystemDockerfile(options) {
+    return `# syntax=docker/dockerfile:1.7
+# --------------------------------------------------------------------
+# agent-vm vm-host-system - container host runtime image (multi-stage)
+#
+# Stage 1 (builder): pnpm install + build, then pnpm deploy --legacy.
+# Stage 2 (runtime): COPY --from=builder the deployed directories.
+# --------------------------------------------------------------------
+
+FROM node:24-slim AS builder
+
+ENV PNPM_HOME=/usr/local/share/pnpm
+ENV PATH=\${PNPM_HOME}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ENV CI=true
+
+RUN npm install -g pnpm@10
+
+WORKDIR /build
+
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
+COPY packages/ ./packages/
+
+RUN pnpm install --frozen-lockfile \\
+    && pnpm build
+
+RUN pnpm --filter @agent-vm/agent-vm --prod --legacy \\
+      deploy /deploy-agent-vm \\
+    && pnpm --filter @agent-vm/agent-vm-worker --prod --legacy \\
+      deploy /deploy-agent-vm-worker
+
+FROM docker.io/nestybox/ubuntu-noble-systemd-docker:latest
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \\
+    && apt-get install -y --no-install-recommends nodejs=24.*
+
+RUN apt-get update \\
+    && apt-get install -y --no-install-recommends \\
+      qemu-system-x86 qemu-utils e2fsprogs curl xz-utils cpio lz4 \\
+    && apt-get clean \\
+    && rm -rf /var/lib/apt/lists/*
+
+RUN curl -fsSL https://ziglang.org/download/${options.zigVersion}/zig-x86_64-linux-${options.zigVersion}.tar.xz \\
+    | tar -xJ -C /opt \\
+    && ln -s /opt/zig-x86_64-linux-${options.zigVersion}/zig /usr/local/bin/zig
+
+COPY --from=builder /deploy-agent-vm /opt/agent-vm
+RUN printf '#!/bin/sh\\nexec node /opt/agent-vm/dist/cli/agent-vm-entrypoint.js "$@"\\n' > /usr/local/bin/agent-vm && \\
+    chmod +x /usr/local/bin/agent-vm
+
+RUN mkdir -p /etc/agent-vm/vm-images/gateways/worker/agent-vm-worker
+COPY --from=builder /deploy-agent-vm-worker /etc/agent-vm/vm-images/gateways/worker/agent-vm-worker
+
+RUN npm install -g pnpm@10
+
+RUN pnpm dlx ${options.gondolinPackageSpec} image pull \\
+    || echo "[WARN] Gondolin guest asset warmup failed; cold starts will be slow"
+
+COPY config/ /etc/agent-vm/
+COPY vm-images/gateways/worker/Dockerfile \\
+     vm-images/gateways/worker/build-config.json \\
+     /etc/agent-vm/vm-images/gateways/worker/
+
+ARG GIT_SHA
+RUN test -n "\${GIT_SHA}" \\
+    || (echo "GIT_SHA build-arg required" >&2; exit 1) \\
+    && printf '{\\n  "$comment": "System cache identifier. Contents hash into every Gondolin image fingerprint. gitSha=local is the intentional sentinel for bare-metal dev. Container-host builds usually replace gitSha with a build provenance string such as a commit SHA.",\\n  "schemaVersion": 1,\\n  "os": "linux",\\n  "hostSystemType": "container",\\n  "gitSha": "%s"\\n}\\n' "\${GIT_SHA}" \\
+    > /etc/agent-vm/systemCacheIdentifier.json
+
+COPY vm-host-system/start.sh /usr/local/bin/start.sh
+COPY vm-host-system/agent-vm-controller.service /etc/systemd/system/agent-vm-controller.service
+
+RUN chmod +x /usr/local/bin/start.sh \\
+    && mkdir -p /var/agent-vm/state /var/agent-vm/workspace /var/agent-vm/cache \\
+    && systemctl enable agent-vm-controller.service
+
+EXPOSE 18800
+`;
+}
+export function renderVmHostSystemStartScript(options) {
+    return `#!/bin/bash
+set -euo pipefail
+
+while IFS= read -r -d '' env_line; do
+  env_key="\${env_line%%=*}"
+  case "$env_key" in
+    ''|PATH|HOME|PWD|SHLVL|_|OLDPWD) continue ;;
+  esac
+  export "$env_line"
+done < /proc/1/environ
+
+export HOME=/root
+export PNPM_HOME=/usr/local/share/pnpm
+export PATH="\${PNPM_HOME}:\${PATH}"
+
+echo "[start] Waiting for Docker daemon (timeout 120s)..."
+if ! timeout 120 bash -c 'until docker info >/dev/null 2>&1; do sleep 1; done'; then
+  echo "[FATAL] Docker daemon did not start within 120 seconds" >&2
+  echo "[HINT] Check systemd: journalctl -u docker.service" >&2
+  exit 1
+fi
+
+echo "[start] Running preflight checks..."
+for cmd in zig mke2fs docker agent-vm cpio lz4 qemu-img qemu-system-x86_64; do
+  if ! command -v "$cmd" >/dev/null 2>&1; then
+    echo "[FATAL] Required command not found: $cmd" >&2
+    exit 1
+  fi
+done
+
+for required_var in OPENAI_API_KEY GITHUB_TOKEN; do
+  if [ -z "\${!required_var:-}" ]; then
+    echo "[FATAL] Required environment variable $required_var is not set" >&2
+    exit 1
+  fi
+done
+echo "[start] Preflight checks passed"
+
+echo "[start] Checking Gondolin image cache..."
+CACHE_JSON="$(agent-vm cache list --config /etc/agent-vm/system.json)"
+CACHE_STATUS="$(
+  node -e '
+      const input = process.argv[1] ?? "";
+    try {
+      const data = JSON.parse(input);
+      const gatewayHit = data.gateways.worker.some((entry) => entry.current) ? "yes" : "no";
+      console.log(gatewayHit);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.error(\`[FATAL] Failed to parse agent-vm cache list JSON: \${message}\`);
+      console.error(\`[FATAL] First 200 chars: \${input.slice(0, 200)}\`);
+      process.exit(1);
+    }
+  ' "$CACHE_JSON"
+)"
+read -r GATEWAY_CACHE_HIT <<< "$CACHE_STATUS"
+
+if [ "$GATEWAY_CACHE_HIT" = "yes" ]; then
+  echo "[start] EFS cache hit for gateway image; skipping docker build and agent-vm build"
+else
+  echo "[start] EFS cache miss; building OCI gateway image..."
+  docker build \\
+    -t agent-vm-gateway:catalog \\
+    -f /etc/agent-vm/vm-images/gateways/worker/Dockerfile \\
+    /etc/agent-vm/vm-images/gateways/worker/
+
+  echo "[start] Building Gondolin VM assets into /var/agent-vm/cache (EFS)..."
+  agent-vm build --config /etc/agent-vm/system.json
+fi
+
+echo "[start] Starting controller..."
+exec agent-vm controller start --config /etc/agent-vm/system.json --zone ${options.zoneId}
+`;
+}
+export function renderVmHostSystemSystemdUnit() {
+    return `[Unit]
+Description=agent-vm controller startup
+Requires=docker.service
+After=docker.service
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/start.sh
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+`;
+}
+export function renderVmHostSystemReadme(options) {
+    return `# vm-host-system
+
+\`vm-host-system/\` contains the outer runtime image and boot plumbing for the container host that runs agent-vm.
+
+It is separate from \`vm-images/\`: those are inner Gondolin VM recipes. This folder is the host system that starts Docker, checks the shared cache, builds the nested gateway OCI image on cache miss, and launches the controller for zone \`${options.zoneId}\`.
+
+Regenerate these files with:
+
+\`\`\`bash
+agent-vm init ${options.zoneId} --type worker --preset container-x86 --overwrite
+\`\`\`
+`;
+}
+//# sourceMappingURL=vm-host-system-templates.js.map

package/dist/cli/vm-host-system-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-host-system-templates.js","sourceRoot":"","sources":["../../src/cli/vm-host-system-templates.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,4BAA4B,CAAC,OAA4C;IACxF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8CA0CsC,OAAO,CAAC,UAAU,qBAAqB,OAAO,CAAC,UAAU;;qCAElE,OAAO,CAAC,UAAU;;;;;;;;;;;eAWxC,OAAO,CAAC,mBAAmB;;;;;;;;;;;;;;;;;;;;;;CAsBzC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAsC;IACnF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAuEmE,OAAO,CAAC,MAAM;CACxF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC5C,OAAO;;;;;;;;;;;;;CAaP,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAsC;IAC9E,OAAO;;;;iPAIyO,OAAO,CAAC,MAAM;;;;;gBAK/O,OAAO,CAAC,MAAM;;CAE7B,CAAC;AACF,CAAC"}

package/dist/config/resource-contracts/index.d.ts

@@ -0,0 +1,3 @@
+export * from './resource-contract-schemas.js';
+export type * from './repo-resource-contract-types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/config/resource-contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/resource-contracts/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,mBAAmB,mCAAmC,CAAC"}

package/dist/config/resource-contracts/index.js

@@ -0,0 +1,2 @@
+export * from './resource-contract-schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/config/resource-contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/config/resource-contracts/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC"}

package/dist/config/resource-contracts/repo-resource-contract-types.d.ts

@@ -0,0 +1,110 @@
+/**
+ * TCP binding name that code inside the VM uses to reach a resource.
+ *
+ * The host is a logical VM hostname, not a Docker Compose service name. The
+ * controller maps this binding to the selected external resource or repo-local
+ * provider target.
+ */
+export interface ResourceBinding {
+    /** Hostname visible from the VM, for example `pg.local`. */
+    readonly host: string;
+    /** TCP port visible from the VM. */
+    readonly port: number;
+}
+/** Environment variables associated with one logical resource. */
+export type ResourceEnv = Record<string, string>;
+/**
+ * Resource a repo needs in order to run its task.
+ *
+ * Requirements are keyed by logical resource name. Repos that require the same
+ * name share one task-level resource, while different names such as `pg` and
+ * `pg-blah` remain distinct.
+ */
+export interface RepoResourceRequirement {
+    /** VM-facing binding that this repo expects to use. */
+    readonly binding: ResourceBinding;
+    /**
+     * Optional template or hint for variables the repo expects. Final values are
+     * produced by external resources or `finalizeRepoResourceSetup()`.
+     */
+    readonly env?: ResourceEnv;
+}
+/**
+ * Repo-local Docker Compose provider for a logical resource.
+ *
+ * The service name is local to this repo's Compose file. The logical resource
+ * name is the key in `provides`, so two repos may both provide `pg` without
+ * colliding in Docker.
+ */
+export interface ComposeResourceProvider {
+    readonly type: 'compose';
+    /** Service name from `.agent-vm/docker-compose.yml`. */
+    readonly service: string;
+}
+/**
+ * Describe-time contract exported by `.agent-vm/repo-resources.ts`.
+ *
+ * This phase must be cheap and side-effect free. It only declares what the repo
+ * needs and what it can provide; actual setup happens later.
+ */
+export interface RepoResourcesDescription {
+    /**
+     * Repo-relative setup script run once after this repo's selected Compose
+     * services are up. Defaults to `.agent-vm/run-setup.sh`.
+     *
+     * The script is repo-owned imperative bootstrap. It receives
+     * `COMPOSE_PROJECT_NAME` and `RESOURCE_OUTPUT_DIR`, not resource names or
+     * resolved host/port values.
+     */
+    readonly setupCommand?: string;
+    /** Logical resources this repo needs. */
+    readonly requires?: Record<string, RepoResourceRequirement>;
+    /** Logical resources this repo can provide from repo-local Compose services. */
+    readonly provides?: Record<string, ComposeResourceProvider>;
+}
+/** Input passed to `finalizeRepoResourceSetup()` after providers are selected. */
+export interface FinalizeRepoResourceSetupInput {
+    /** Stable, human-readable repo id derived from the repo URL. */
+    readonly repoId: string;
+    /** Original repo URL from the Worker task request. */
+    readonly repoUrl: string;
+    /** Absolute path to the cloned repo root. */
+    readonly repoDir: string;
+    /** Absolute path where generated files and mocks must be written. */
+    readonly outputDir: string;
+    /** Resources selected for this repo, keyed by logical resource name. */
+    readonly selectedResources: Record<string, {
+        /** VM-facing binding requested by consumers. */
+        readonly binding: ResourceBinding;
+        /** Provider target discovered by the controller. */
+        readonly target: ResourceBinding;
+    }>;
+}
+/** Final resolved resource returned by `finalizeRepoResourceSetup()`. */
+export interface FinalizedResource {
+    /** VM-facing binding requested by consumers. */
+    readonly binding: ResourceBinding;
+    /** Provider target discovered by the controller. */
+    readonly target: ResourceBinding;
+    /** Final environment variables injected into the task VM. */
+    readonly env?: ResourceEnv;
+}
+/**
+ * Final setup output returned by `.agent-vm/repo-resources.ts`.
+ *
+ * Use this to publish resolved env vars and to tell the agent about generated
+ * files or directories it should inspect.
+ */
+export interface RepoResourcesFinal {
+    /** Final resolved resources keyed by logical resource name. */
+    readonly resources?: Record<string, FinalizedResource>;
+    /** Generated files or directories under `outputDir`. */
+    readonly generated?: {
+        readonly kind: 'file' | 'directory';
+        /** Relative path under `outputDir`; traversal and absolute paths are rejected. */
+        readonly path: string;
+        /** Human-readable hint shown to agents and docs. */
+        readonly description?: string | undefined;
+    }[];
+}
+//# sourceMappingURL=repo-resource-contract-types.d.ts.map

package/dist/config/resource-contracts/repo-resource-contract-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-resource-contract-types.d.ts","sourceRoot":"","sources":["../../../src/config/resource-contracts/repo-resource-contract-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,kEAAkE;AAClE,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACvC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAElC;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAE5D,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CAC5D;AAED,kFAAkF;AAClF,MAAM,WAAW,8BAA8B;IAC9C,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CACjC,MAAM,EACN;QACC,gDAAgD;QAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;QAElC,oDAAoD;QACpD,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;KACjC,CACD,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IACjC,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAElC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAEjC,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAEvD,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAEpC,kFAAkF;QAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAEtB,oDAAoD;QACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1C,EAAE,CAAC;CACJ"}

package/dist/config/resource-contracts/repo-resource-contract-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=repo-resource-contract-types.js.map

package/dist/config/resource-contracts/repo-resource-contract-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-resource-contract-types.js","sourceRoot":"","sources":["../../../src/config/resource-contracts/repo-resource-contract-types.ts"],"names":[],"mappings":""}

package/dist/config/resource-contracts/resource-contract-schemas.d.ts

@@ -0,0 +1,198 @@
+import { z } from 'zod';
+export declare const resourceNameSchema: z.ZodString;
+export declare const resourceBindingSchema: z.ZodObject<{
+    host: z.ZodString;
+    port: z.ZodNumber;
+}, z.core.$strict>;
+export declare const RESERVED_RESOURCE_ENV_KEYS: Set<string>;
+export declare const resourceEnvSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+export declare const generatedPathSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        file: "file";
+        directory: "directory";
+    }>;
+    path: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const repoResourceRequirementSchema: z.ZodObject<{
+    binding: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export declare const composeResourceProviderSchema: z.ZodObject<{
+    type: z.ZodLiteral<"compose">;
+    service: z.ZodString;
+}, z.core.$strict>;
+export declare const repoResourcesDescriptionSchema: z.ZodObject<{
+    setupCommand: z.ZodDefault<z.ZodString>;
+    requires: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        binding: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>>;
+    provides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodLiteral<"compose">;
+        service: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const finalizeRepoResourceSetupInputSchema: z.ZodObject<{
+    repoId: z.ZodString;
+    repoUrl: z.ZodString;
+    repoDir: z.ZodString;
+    outputDir: z.ZodString;
+    selectedResources: z.ZodRecord<z.ZodString, z.ZodObject<{
+        binding: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        target: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const finalizedResourceSchema: z.ZodObject<{
+    binding: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export declare const repoResourcesFinalSchema: z.ZodObject<{
+    resources: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        binding: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        target: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>>;
+    generated: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            file: "file";
+            directory: "directory";
+        }>;
+        path: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const externalResourceSchema: z.ZodObject<{
+    name: z.ZodString;
+    binding: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export declare const externalResourcesSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    name: z.ZodString;
+    binding: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>>>;
+export declare const workerTaskResourcesSchema: z.ZodDefault<z.ZodObject<{
+    externalResources: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        name: z.ZodString;
+        binding: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        target: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strict>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>>;
+export declare const repoTargetSchema: z.ZodObject<{
+    repoUrl: z.ZodString;
+    baseBranch: z.ZodDefault<z.ZodString>;
+}, z.core.$strict>;
+export declare const workerTaskRequestSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    repos: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        repoUrl: z.ZodString;
+        baseBranch: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>>;
+    context: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    resources: z.ZodDefault<z.ZodObject<{
+        externalResources: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            name: z.ZodString;
+            binding: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+            }, z.core.$strict>;
+            target: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+            }, z.core.$strict>;
+            env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const workerTaskControllerRequestSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    repos: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        repoUrl: z.ZodString;
+        baseBranch: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>>;
+    context: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    resources: z.ZodDefault<z.ZodObject<{
+        externalResources: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            name: z.ZodString;
+            binding: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+            }, z.core.$strict>;
+            target: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+            }, z.core.$strict>;
+            env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+    requestTaskId: z.ZodString;
+}, z.core.$strict>;
+export declare const zoneResourcesPolicySchema: z.ZodObject<{
+    allowRepoResources: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strict>;
+export type ResourceName = z.infer<typeof resourceNameSchema>;
+export type GeneratedPath = z.infer<typeof generatedPathSchema>;
+export type ResolvedRepoResourceRequirement = z.infer<typeof repoResourceRequirementSchema>;
+export type ResolvedComposeResourceProvider = z.infer<typeof composeResourceProviderSchema>;
+export type ResolvedRepoResourcesDescription = z.infer<typeof repoResourcesDescriptionSchema>;
+export type ResolvedFinalizeRepoResourceSetupInput = z.infer<typeof finalizeRepoResourceSetupInputSchema>;
+export type ResolvedFinalizedResource = z.infer<typeof finalizedResourceSchema>;
+export type ResolvedRepoResourcesFinal = z.infer<typeof repoResourcesFinalSchema>;
+export type ExternalResource = z.infer<typeof externalResourceSchema>;
+export type ExternalResources = z.infer<typeof externalResourcesSchema>;
+export type WorkerTaskResources = z.infer<typeof workerTaskResourcesSchema>;
+export type RepoTarget = z.infer<typeof repoTargetSchema>;
+export type WorkerTaskRequestInput = z.input<typeof workerTaskRequestSchema>;
+export type WorkerTaskRequest = z.infer<typeof workerTaskRequestSchema>;
+export type WorkerTaskControllerRequestInput = z.input<typeof workerTaskControllerRequestSchema>;
+export type WorkerTaskControllerRequest = z.infer<typeof workerTaskControllerRequestSchema>;
+export type ZoneResourcesPolicy = z.infer<typeof zoneResourcesPolicySchema>;
+export type { ComposeResourceProvider, FinalizedResource, FinalizeRepoResourceSetupInput, RepoResourceRequirement, RepoResourcesDescription, RepoResourcesFinal, ResourceBinding, ResourceEnv, } from './repo-resource-contract-types.js';
+//# sourceMappingURL=resource-contract-schemas.d.ts.map

package/dist/config/resource-contracts/resource-contract-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-contract-schemas.d.ts","sourceRoot":"","sources":["../../../src/config/resource-contracts/resource-contract-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB,aAGiE,CAAC;AAEjG,eAAO,MAAM,qBAAqB;;;kBAKxB,CAAC;AAEX,eAAO,MAAM,0BAA0B,aAarC,CAAC;AAEH,eAAO,MAAM,iBAAiB,qDAaT,CAAC;AAUtB,eAAO,MAAM,mBAAmB;;;;;;;kBAUtB,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;;;;kBAKhC,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;kBAKhC,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;kBAWjC,CAAC;AAEX,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;kBAgBvC,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;kBAM1B,CAAC;AAEX,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;kBAK3B,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;;;;;;;;kBAOzB,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;;oBAaf,CAAC;AAEtB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;mBAOlC,CAAC;AAEL,eAAO,MAAM,gBAAgB;;;kBAKnB,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;kBAU1B,CAAC;AAEX,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;kBAE5C,CAAC;AAEH,eAAO,MAAM,yBAAyB;;kBAI5B,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAC5F,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAC5F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC9F,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,oCAAoC,CAC3C,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC7E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AACjG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,YAAY,EACX,uBAAuB,EACvB,iBAAiB,EACjB,8BAA8B,EAC9B,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,WAAW,GACX,MAAM,mCAAmC,CAAC"}