@ai-hero/sandcastle 0.0.1

package/dist/RecoveryMessage.js

@@ -0,0 +1,81 @@
+/**
+ * Build copy-pastable recovery commands for a failed sync-out.
+ * Pure function: takes failure state, returns formatted terminal output.
+ */
+export const buildRecoveryMessage = (input) => {
+    const { patchDir, failedStep, hasCommits, hasDiff, hasUntracked, branch } = input;
+    // When --branch is set, commands run inside .sandcastle/worktree,
+    // so patch paths need ../../ prefix to reach repo root
+    const cmdPatchDir = branch ? `../../${patchDir}` : patchDir;
+    // Determine the step number for the failed step
+    const steps = [];
+    if (hasCommits)
+        steps.push({ key: "commits", label: "committed changes", has: true });
+    if (hasDiff)
+        steps.push({ key: "diff", label: "uncommitted changes", has: true });
+    if (hasUntracked)
+        steps.push({ key: "untracked", label: "untracked files", has: true });
+    const failedIndex = steps.findIndex((s) => s.key === failedStep);
+    const failedStepInfo = steps[failedIndex];
+    const stepNumber = failedIndex + 1;
+    const lines = [];
+    lines.push(`Patch application failed at step ${stepNumber} (${failedStepInfo.label}).`);
+    lines.push("");
+    // Add worktree setup preamble for --branch
+    if (branch) {
+        lines.push("Set up worktree, then resolve:");
+        lines.push(formatCommandBlock([
+            `git worktree add .sandcastle/worktree ${branch}`,
+            `cd .sandcastle/worktree`,
+        ]));
+        lines.push("");
+    }
+    if (failedStep === "commits") {
+        // git am failure — lean on git's built-in workflow
+        lines.push("Resolve conflicts, then continue with:");
+        lines.push(`  git am --continue`);
+        // Remaining steps after git am resolves
+        const remaining = buildRemainingCommands(cmdPatchDir, steps.slice(failedIndex + 1));
+        if (remaining.length > 0) {
+            lines.push("");
+            lines.push("After all commits are applied, run the remaining steps:");
+            lines.push(formatCommandBlock(remaining));
+        }
+    }
+    else {
+        // diff or untracked failure — print remaining commands from failed step onward
+        const remaining = buildRemainingCommands(cmdPatchDir, steps.slice(failedIndex));
+        if (remaining.length > 0) {
+            lines.push("Run the remaining steps:");
+            lines.push(formatCommandBlock(remaining));
+        }
+    }
+    return lines.join("\n");
+};
+const buildRemainingCommands = (patchDir, steps) => {
+    const commands = [];
+    for (const step of steps) {
+        if (!step.has)
+            continue;
+        if (step.key === "commits") {
+            commands.push(`git am --3way ${patchDir}/*.patch`);
+        }
+        else if (step.key === "diff") {
+            commands.push(`git apply ${patchDir}/changes.patch`);
+        }
+        else if (step.key === "untracked") {
+            commands.push(`cp -r ${patchDir}/untracked/* .`);
+        }
+    }
+    return commands;
+};
+const formatCommandBlock = (commands) => {
+    if (commands.length === 1) {
+        return `  ${commands[0]}`;
+    }
+    // Join with && \ continuation
+    return commands
+        .map((cmd, i) => (i < commands.length - 1 ? `  ${cmd} && \\` : `  ${cmd}`))
+        .join("\n");
+};
+//# sourceMappingURL=RecoveryMessage.js.map

package/dist/RecoveryMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RecoveryMessage.js","sourceRoot":"","sources":["../src/RecoveryMessage.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAoB,EAAU,EAAE;IACnE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GACvE,KAAK,CAAC;IAER,kEAAkE;IAClE,uDAAuD;IACvD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE5D,gDAAgD;IAChD,MAAM,KAAK,GAAuD,EAAE,CAAC;IACrE,IAAI,UAAU;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO;QACT,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,YAAY;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,oCAAoC,UAAU,KAAK,cAAc,CAAC,KAAK,IAAI,CAC5E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,2CAA2C;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,kBAAkB,CAAC;YACjB,yCAAyC,MAAM,EAAE;YACjD,yBAAyB;SAC1B,CAAC,CACH,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,mDAAmD;QACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAElC,wCAAwC;QACxC,MAAM,SAAS,GAAG,sBAAsB,CACtC,WAAW,EACX,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAC7B,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,+EAA+E;QAC/E,MAAM,SAAS,GAAG,sBAAsB,CACtC,WAAW,EACX,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CACzB,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,QAAgB,EAChB,KAA0C,EAChC,EAAE;IACZ,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,iBAAiB,QAAQ,UAAU,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,aAAa,QAAQ,gBAAgB,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,SAAS,QAAQ,gBAAgB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,QAAkB,EAAU,EAAE;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC;IACD,8BAA8B;IAC9B,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;SAC1E,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC"}

package/dist/Sandbox.d.ts

@@ -0,0 +1,23 @@
+import { Context, Effect } from "effect";
+import type { CopyError, ExecError } from "./errors.js";
+export { type SandboxError } from "./errors.js";
+export { ExecError, ExecHostError, CopyError, DockerError, SyncError, PromptError, AgentError, ConfigDirError, InitError, } from "./errors.js";
+export interface ExecResult {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+}
+export interface SandboxService {
+    readonly exec: (command: string, options?: {
+        cwd?: string;
+    }) => Effect.Effect<ExecResult, ExecError>;
+    readonly execStreaming: (command: string, onStdoutLine: (line: string) => void, options?: {
+        cwd?: string;
+    }) => Effect.Effect<ExecResult, ExecError>;
+    readonly copyIn: (hostPath: string, sandboxPath: string) => Effect.Effect<void, CopyError>;
+    readonly copyOut: (sandboxPath: string, hostPath: string) => Effect.Effect<void, CopyError>;
+}
+declare const Sandbox_base: Context.TagClass<Sandbox, "Sandbox", SandboxService>;
+export declare class Sandbox extends Sandbox_base {
+}
+//# sourceMappingURL=Sandbox.d.ts.map

package/dist/Sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.d.ts","sourceRoot":"","sources":["../src/Sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,SAAS,EACT,aAAa,EACb,SAAS,EACT,WAAW,EACX,SAAS,EACT,WAAW,EACX,UAAU,EACV,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE1C,QAAQ,CAAC,aAAa,EAAE,CACtB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EACpC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE1C,QAAQ,CAAC,MAAM,EAAE,CACf,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,KAChB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpC,QAAQ,CAAC,OAAO,EAAE,CAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;CACrC;;AAED,qBAAa,OAAQ,SAAQ,YAG1B;CAAG"}

package/dist/Sandbox.js

@@ -0,0 +1,5 @@
+import { Context } from "effect";
+export { ExecError, ExecHostError, CopyError, DockerError, SyncError, PromptError, AgentError, ConfigDirError, InitError, } from "./errors.js";
+export class Sandbox extends Context.Tag("Sandbox")() {
+}
+//# sourceMappingURL=Sandbox.js.map

package/dist/Sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.js","sourceRoot":"","sources":["../src/Sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,QAAQ,CAAC;AAIzC,OAAO,EACL,SAAS,EACT,aAAa,EACb,SAAS,EACT,WAAW,EACX,SAAS,EACT,WAAW,EACX,UAAU,EACV,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AA+BrB,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAGhD;CAAG"}

package/dist/SandboxFactory.d.ts

@@ -0,0 +1,56 @@
+import { Context, Effect, Layer } from "effect";
+import { FileSystem } from "@effect/platform";
+import { CopyError, ExecError, type DockerError, type WorktreeError } from "./errors.js";
+import { Display } from "./Display.js";
+export interface ExecResult {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+}
+export interface SandboxService {
+    readonly exec: (command: string, options?: {
+        cwd?: string;
+    }) => Effect.Effect<ExecResult, ExecError>;
+    readonly execStreaming: (command: string, onStdoutLine: (line: string) => void, options?: {
+        cwd?: string;
+    }) => Effect.Effect<ExecResult, ExecError>;
+    readonly copyIn: (hostPath: string, sandboxPath: string) => Effect.Effect<void, CopyError>;
+    readonly copyOut: (sandboxPath: string, hostPath: string) => Effect.Effect<void, CopyError>;
+}
+declare const Sandbox_base: Context.TagClass<Sandbox, "Sandbox", SandboxService>;
+export declare class Sandbox extends Sandbox_base {
+}
+/** The mount point inside the container where the project worktree is bound. */
+export declare const SANDBOX_WORKSPACE_DIR = "/home/agent/workspace";
+export interface SandboxInfo {
+    /** Host-side path to the worktree directory (worktree mode only). */
+    readonly hostWorktreePath?: string;
+}
+declare const SandboxFactory_base: Context.TagClass<SandboxFactory, "SandboxFactory", {
+    readonly withSandbox: <A, E, R>(makeEffect: (info: SandboxInfo) => Effect.Effect<A, E, R | Sandbox>) => Effect.Effect<A, E | DockerError | WorktreeError, Exclude<R, Sandbox>>;
+}>;
+export declare class SandboxFactory extends SandboxFactory_base {
+}
+declare const WorktreeSandboxConfig_base: Context.TagClass<WorktreeSandboxConfig, "WorktreeSandboxConfig", {
+    readonly imageName: string;
+    readonly env: Record<string, string>;
+    readonly hostRepoDir: string;
+    /** When specified, the worktree checks out this branch. Otherwise a temp branch is created. */
+    readonly branch?: string | undefined;
+    /** Paths relative to the host repo root to copy into the worktree before container start. */
+    readonly copyToSandbox?: string[] | undefined;
+    /** When specified, the agent name is included in the auto-generated branch and worktree names. */
+    readonly agentName?: string | undefined;
+}>;
+export declare class WorktreeSandboxConfig extends WorktreeSandboxConfig_base {
+}
+/**
+ * Worktree sandbox mode: creates a git worktree and bind-mounts it into the
+ * container at SANDBOX_WORKSPACE_DIR. The host's .git directory is also bind-mounted at
+ * its original host path so the worktree's .git file pointer resolves correctly.
+ */
+export declare const WorktreeDockerSandboxFactory: {
+    layer: Layer.Layer<SandboxFactory, never, Display | FileSystem.FileSystem | WorktreeSandboxConfig>;
+};
+export {};
+//# sourceMappingURL=SandboxFactory.d.ts.map

package/dist/SandboxFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxFactory.d.ts","sourceRoot":"","sources":["../src/SandboxFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,OAAO,EACL,SAAS,EACT,SAAS,EACT,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE1C,QAAQ,CAAC,aAAa,EAAE,CACtB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EACpC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE1C,QAAQ,CAAC,MAAM,EAAE,CACf,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,KAChB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpC,QAAQ,CAAC,OAAO,EAAE,CAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;CACrC;;AAED,qBAAa,OAAQ,SAAQ,YAG1B;CAAG;AAgLN,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;;2BAK0B,CAAC,EAAE,CAAC,EAAE,CAAC;;AAHlC,qBAAa,cAAe,SAAQ,mBAOjC;CAAG;;;;;IAoBF,+FAA+F;;IAE/F,6FAA6F;;IAE7F,kGAAkG;;;AAVtG,qBAAa,qBAAsB,SAAQ,0BAaxC;CAAG;AAoBN;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;CA4HxC,CAAC"}

package/dist/SandboxFactory.js

@@ -0,0 +1,219 @@
+import { Context, Effect, Layer } from "effect";
+import { FileSystem } from "@effect/platform";
+import { NodeFileSystem } from "@effect/platform-node";
+import { randomUUID } from "node:crypto";
+import { execFile, execFileSync, spawn } from "node:child_process";
+import { dirname, join } from "node:path";
+import { createInterface } from "node:readline";
+import { startContainer, removeContainer, chownInContainer, } from "./DockerLifecycle.js";
+import { CopyError, ExecError, } from "./errors.js";
+import * as WorktreeManager from "./WorktreeManager.js";
+import { copyToSandbox } from "./CopyToSandbox.js";
+import { Display } from "./Display.js";
+export class Sandbox extends Context.Tag("Sandbox")() {
+}
+const makeDockerSandbox = (containerName) => Effect.gen(function* () {
+    const fs = yield* FileSystem.FileSystem;
+    return {
+        exec: (command, options) => Effect.async((resume) => {
+            const args = ["exec"];
+            if (options?.cwd) {
+                args.push("-w", options.cwd);
+            }
+            args.push(containerName, "sh", "-c", command);
+            execFile("docker", args, { maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {
+                if (error && error.code === undefined) {
+                    resume(Effect.fail(new ExecError({
+                        command,
+                        message: `docker exec failed: ${error.message}`,
+                    })));
+                }
+                else {
+                    resume(Effect.succeed({
+                        stdout: stdout.toString(),
+                        stderr: stderr.toString(),
+                        exitCode: typeof error?.code === "number"
+                            ? error.code
+                            : 0,
+                    }));
+                }
+            });
+        }),
+        execStreaming: (command, onStdoutLine, options) => Effect.async((resume) => {
+            const args = ["exec"];
+            if (options?.cwd) {
+                args.push("-w", options.cwd);
+            }
+            args.push(containerName, "sh", "-c", command);
+            const proc = spawn("docker", args, {
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            const stdoutChunks = [];
+            const stderrChunks = [];
+            const rl = createInterface({ input: proc.stdout });
+            rl.on("line", (line) => {
+                stdoutChunks.push(line);
+                onStdoutLine(line);
+            });
+            proc.stderr.on("data", (chunk) => {
+                stderrChunks.push(chunk.toString());
+            });
+            proc.on("error", (error) => {
+                resume(Effect.fail(new ExecError({
+                    command,
+                    message: `docker exec streaming failed: ${error.message}`,
+                })));
+            });
+            proc.on("close", (code) => {
+                resume(Effect.succeed({
+                    stdout: stdoutChunks.join("\n"),
+                    stderr: stderrChunks.join(""),
+                    exitCode: code ?? 0,
+                }));
+            });
+        }),
+        copyIn: (hostPath, sandboxPath) => Effect.gen(function* () {
+            const parentDir = dirname(sandboxPath);
+            yield* Effect.async((resume) => {
+                execFile("docker", ["exec", containerName, "mkdir", "-p", parentDir], (error) => {
+                    if (error) {
+                        resume(Effect.fail(new CopyError({
+                            message: `Failed to create dir ${parentDir}: ${error.message}`,
+                        })));
+                    }
+                    else {
+                        resume(Effect.succeed(undefined));
+                    }
+                });
+            });
+            yield* Effect.async((resume) => {
+                execFile("docker", ["cp", hostPath, `${containerName}:${sandboxPath}`], (error) => {
+                    if (error) {
+                        resume(Effect.fail(new CopyError({
+                            message: `Failed to copy ${hostPath} -> ${containerName}:${sandboxPath}: ${error.message}`,
+                        })));
+                    }
+                    else {
+                        resume(Effect.succeed(undefined));
+                    }
+                });
+            });
+        }),
+        copyOut: (sandboxPath, hostPath) => Effect.gen(function* () {
+            yield* fs.makeDirectory(dirname(hostPath), { recursive: true }).pipe(Effect.mapError((error) => new CopyError({
+                message: `Failed to create host dir ${dirname(hostPath)}: ${error}`,
+            })));
+            yield* Effect.async((resume) => {
+                execFile("docker", ["cp", `${containerName}:${sandboxPath}`, hostPath], (error) => {
+                    if (error) {
+                        resume(Effect.fail(new CopyError({
+                            message: `Failed to copy ${containerName}:${sandboxPath} -> ${hostPath}: ${error.message}`,
+                        })));
+                    }
+                    else {
+                        resume(Effect.succeed(undefined));
+                    }
+                });
+            });
+        }),
+    };
+});
+const makeDockerSandboxLayer = (containerName) => Layer.effect(Sandbox, makeDockerSandbox(containerName)).pipe(Layer.provide(NodeFileSystem.layer));
+/** The mount point inside the container where the project worktree is bound. */
+export const SANDBOX_WORKSPACE_DIR = "/home/agent/workspace";
+export class SandboxFactory extends Context.Tag("SandboxFactory")() {
+}
+/**
+ * Synchronously force-remove a Docker container.
+ * Used in process exit handlers where async operations are not possible.
+ */
+const forceRemoveContainerSync = (containerName) => {
+    try {
+        execFileSync("docker", ["rm", "-f", containerName], { stdio: "ignore" });
+    }
+    catch {
+        // Best-effort — container may already be gone
+    }
+};
+export class WorktreeSandboxConfig extends Context.Tag("WorktreeSandboxConfig")() {
+}
+/**
+ * Synchronously force-remove a git worktree.
+ * Used in process exit handlers where async operations are not possible.
+ */
+const forceRemoveWorktreeSync = (worktreePath, repoDir) => {
+    try {
+        execFileSync("git", ["worktree", "remove", "--force", worktreePath], {
+            stdio: "ignore",
+            cwd: repoDir,
+        });
+    }
+    catch {
+        // Best-effort — worktree may already be gone
+    }
+};
+/**
+ * Worktree sandbox mode: creates a git worktree and bind-mounts it into the
+ * container at SANDBOX_WORKSPACE_DIR. The host's .git directory is also bind-mounted at
+ * its original host path so the worktree's .git file pointer resolves correctly.
+ */
+export const WorktreeDockerSandboxFactory = {
+    layer: Layer.effect(SandboxFactory, Effect.gen(function* () {
+        const { imageName, env, hostRepoDir, branch, copyToSandbox: copyPaths, agentName, } = yield* WorktreeSandboxConfig;
+        const fileSystem = yield* FileSystem.FileSystem;
+        const display = yield* Display;
+        return {
+            withSandbox: (makeEffect) => {
+                const containerName = `sandcastle-${randomUUID()}`;
+                return Effect.acquireUseRelease(
+                // Acquire: prune stale worktrees (best-effort), create worktree, then start container
+                WorktreeManager.pruneStale(hostRepoDir)
+                    .pipe(Effect.catchAll((e) => Effect.sync(() => {
+                    console.error("[sandcastle] Warning: failed to prune stale worktrees:", e.message);
+                })))
+                    .pipe(Effect.andThen(branch
+                    ? WorktreeManager.create(hostRepoDir, { branch })
+                    : WorktreeManager.create(hostRepoDir, { agentName })))
+                    .pipe(Effect.provideService(FileSystem.FileSystem, fileSystem))
+                    .pipe(Effect.flatMap((worktreeInfo) => (copyPaths && copyPaths.length > 0
+                    ? display.spinner("Copying to sandbox", copyToSandbox(copyPaths, hostRepoDir, worktreeInfo.path))
+                    : Effect.succeed(undefined)).pipe(Effect.map(() => worktreeInfo))))
+                    .pipe(Effect.flatMap((worktreeInfo) => {
+                    const gitDir = join(hostRepoDir, ".git");
+                    const volumeMounts = [
+                        `${worktreeInfo.path}:${SANDBOX_WORKSPACE_DIR}`,
+                        `${gitDir}:${gitDir}`,
+                    ];
+                    const cleanup = () => {
+                        forceRemoveContainerSync(containerName);
+                        forceRemoveWorktreeSync(worktreeInfo.path, hostRepoDir);
+                    };
+                    const onSignal = () => {
+                        cleanup();
+                        process.exit(1);
+                    };
+                    const hostUid = process.getuid?.() ?? 1000;
+                    const hostGid = process.getgid?.() ?? 1000;
+                    return startContainer(containerName, imageName, env, {
+                        volumeMounts,
+                        workdir: SANDBOX_WORKSPACE_DIR,
+                        user: `${hostUid}:${hostGid}`,
+                    }).pipe(Effect.andThen(chownInContainer(containerName, `${hostUid}:${hostGid}`, "/home/agent")), Effect.tap(() => Effect.sync(() => {
+                        process.on("exit", cleanup);
+                        process.on("SIGINT", onSignal);
+                        process.on("SIGTERM", onSignal);
+                    })), Effect.map(() => ({ worktreeInfo, cleanup, onSignal })));
+                })), 
+                // Use
+                ({ worktreeInfo }) => makeEffect({ hostWorktreePath: worktreeInfo.path }).pipe(Effect.provide(makeDockerSandboxLayer(containerName))), 
+                // Release: remove container, then remove worktree
+                ({ worktreeInfo, cleanup, onSignal }) => Effect.sync(() => {
+                    process.removeListener("exit", cleanup);
+                    process.removeListener("SIGINT", onSignal);
+                    process.removeListener("SIGTERM", onSignal);
+                }).pipe(Effect.andThen(removeContainer(containerName)), Effect.andThen(WorktreeManager.remove(worktreeInfo.path)), Effect.orDie));
+            },
+        };
+    })),
+};
+//# sourceMappingURL=SandboxFactory.js.map

package/dist/SandboxFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxFactory.js","sourceRoot":"","sources":["../src/SandboxFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,SAAS,GAGV,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AA+BvC,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAGhD;CAAG;AAEN,MAAM,iBAAiB,GAAG,CACxB,aAAqB,EACwC,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACzB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAE9C,QAAQ,CACN,QAAQ,EACR,IAAI,EACJ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAC/B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;wBACZ,OAAO;wBACP,OAAO,EAAE,uBAAuB,KAAK,CAAC,OAAO,EAAE;qBAChD,CAAC,CACH,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CACJ,MAAM,CAAC,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;wBACzB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;wBACzB,QAAQ,EACN,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;4BAC7B,CAAC,CAAC,KAAK,CAAC,IAAI;4BACZ,CAAC,CAAE,CAAY;qBACpB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QAEJ,aAAa,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAChD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAE9C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;gBACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAO,EAAE,CAAC,CAAC;YACpD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACrB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACzB,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;oBACZ,OAAO;oBACP,OAAO,EAAE,iCAAiC,KAAK,CAAC,OAAO,EAAE;iBAC1D,CAAC,CACH,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,MAAM,CACJ,MAAM,CAAC,OAAO,CAAC;oBACb,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC/B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,QAAQ,EAAE,IAAI,IAAI,CAAC;iBACpB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEJ,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YACvC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAkB,CAAC,MAAM,EAAE,EAAE;gBAC9C,QAAQ,CACN,QAAQ,EACR,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EACjD,CAAC,KAAK,EAAE,EAAE;oBACR,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;4BACZ,OAAO,EAAE,wBAAwB,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE;yBAC/D,CAAC,CACH,CACF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAkB,CAAC,MAAM,EAAE,EAAE;gBAC9C,QAAQ,CACN,QAAQ,EACR,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,IAAI,WAAW,EAAE,CAAC,EACnD,CAAC,KAAK,EAAE,EAAE;oBACR,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;4BACZ,OAAO,EAAE,kBAAkB,QAAQ,OAAO,aAAa,IAAI,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE;yBAC3F,CAAC,CACH,CACF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,SAAS,CAAC;gBACZ,OAAO,EAAE,6BAA6B,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE;aACpE,CAAC,CACL,CACF,CAAC;YAEF,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAkB,CAAC,MAAM,EAAE,EAAE;gBAC9C,QAAQ,CACN,QAAQ,EACR,CAAC,IAAI,EAAE,GAAG,aAAa,IAAI,WAAW,EAAE,EAAE,QAAQ,CAAC,EACnD,CAAC,KAAK,EAAE,EAAE;oBACR,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;4BACZ,OAAO,EAAE,kBAAkB,aAAa,IAAI,WAAW,OAAO,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE;yBAC3F,CAAC,CACH,CACF,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;KACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,sBAAsB,GAAG,CAAC,aAAqB,EAAwB,EAAE,CAC7E,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAC1D,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CACpC,CAAC;AAEJ,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAO7D,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAO9D;CAAG;AAEN;;;GAGG;AACH,MAAM,wBAAwB,GAAG,CAAC,aAAqB,EAAQ,EAAE;IAC/D,IAAI,CAAC;QACH,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAa5E;CAAG;AAEN;;;GAGG;AACH,MAAM,uBAAuB,GAAG,CAC9B,YAAoB,EACpB,OAAe,EACT,EAAE;IACR,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE;YACnE,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,KAAK,EAAE,KAAK,CAAC,MAAM,CACjB,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,EACJ,SAAS,EACT,GAAG,EACH,WAAW,EACX,MAAM,EACN,aAAa,EAAE,SAAS,EACxB,SAAS,GACV,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;QAC/B,OAAO;YACL,WAAW,EAAE,CACX,UAAmE,EAKnE,EAAE;gBACF,MAAM,aAAa,GAAG,cAAc,UAAU,EAAE,EAAE,CAAC;gBAEnD,OAAO,MAAM,CAAC,iBAAiB;gBAC7B,sFAAsF;gBACtF,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;qBACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBACf,OAAO,CAAC,KAAK,CACX,wDAAwD,EACxD,CAAC,CAAC,OAAO,CACV,CAAC;gBACJ,CAAC,CAAC,CACH,CACF;qBACA,IAAI,CACH,MAAM,CAAC,OAAO,CACZ,MAAM;oBACJ,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;oBACjD,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CACvD,CACF;qBACA,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;qBAC9D,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAC9B,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;oBAChC,CAAC,CAAC,OAAO,CAAC,OAAO,CACb,oBAAoB,EACpB,aAAa,CACX,SAAS,EACT,WAAW,EACX,YAAY,CAAC,IAAI,CAClB,CACF;oBACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC5B,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CACvC,CACF;qBACA,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;oBAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;oBACzC,MAAM,YAAY,GAAG;wBACnB,GAAG,YAAY,CAAC,IAAI,IAAI,qBAAqB,EAAE;wBAC/C,GAAG,MAAM,IAAI,MAAM,EAAE;qBACtB,CAAC;oBAEF,MAAM,OAAO,GAAG,GAAG,EAAE;wBACnB,wBAAwB,CAAC,aAAa,CAAC,CAAC;wBACxC,uBAAuB,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC1D,CAAC,CAAC;oBACF,MAAM,QAAQ,GAAG,GAAG,EAAE;wBACpB,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC,CAAC;oBAEF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;oBAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;oBAE3C,OAAO,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE;wBACnD,YAAY;wBACZ,OAAO,EAAE,qBAAqB;wBAC9B,IAAI,EAAE,GAAG,OAAO,IAAI,OAAO,EAAE;qBAC9B,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,gBAAgB,CACd,aAAa,EACb,GAAG,OAAO,IAAI,OAAO,EAAE,EACvB,aAAa,CACd,CACF,EACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACf,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;wBAC5B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;wBAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAClC,CAAC,CAAC,CACH,EACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CACxD,CAAC;gBACJ,CAAC,CAAC,CACH;gBACH,MAAM;gBACN,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACnB,UAAU,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CACI;gBAC7D,kDAAkD;gBAClD,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CACtC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBACf,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACxC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC9C,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,EAC9C,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EACzD,MAAM,CAAC,KAAK,CACb,CACJ,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC,CAAC,CACH;CACF,CAAC"}

package/dist/SandboxLifecycle.d.ts

@@ -0,0 +1,32 @@
+import { Effect } from "effect";
+import { Display } from "./Display.js";
+import { type SandboxError } from "./errors.js";
+import { Sandbox, type SandboxService } from "./SandboxFactory.js";
+export type SandboxHooks = {
+    readonly onSandboxReady?: ReadonlyArray<{
+        readonly command: string;
+    }>;
+};
+export interface SandboxLifecycleOptions {
+    readonly hostRepoDir: string;
+    readonly sandboxRepoDir: string;
+    readonly hooks?: SandboxHooks;
+    readonly branch?: string;
+    /** Host-side path to the worktree directory. Required when sandboxRepoDir
+     *  is a container path that doesn't exist on the host (e.g. /home/agent/workspace). */
+    readonly hostWorktreePath?: string;
+}
+export interface SandboxContext {
+    readonly sandbox: SandboxService;
+    readonly sandboxRepoDir: string;
+    readonly baseHead: string;
+}
+export interface SandboxLifecycleResult<A> {
+    readonly result: A;
+    readonly branch: string;
+    readonly commits: {
+        sha: string;
+    }[];
+}
+export declare const withSandboxLifecycle: <A>(options: SandboxLifecycleOptions, work: (ctx: SandboxContext) => Effect.Effect<A, SandboxError, Display | Sandbox>) => Effect.Effect<SandboxLifecycleResult<A>, SandboxError, Display | Sandbox>;
+//# sourceMappingURL=SandboxLifecycle.d.ts.map

package/dist/SandboxLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxLifecycle.d.ts","sourceRoot":"","sources":["../src/SandboxLifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,OAAO,EAEP,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAoB7B,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;2FACuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrC;AAED,eAAO,MAAM,oBAAoB,GAAI,CAAC,kMA6LlC,CAAC"}

package/dist/SandboxLifecycle.js

@@ -0,0 +1,152 @@
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import { Effect } from "effect";
+import { Display } from "./Display.js";
+import { ExecError, SyncError } from "./errors.js";
+import { Sandbox, } from "./SandboxFactory.js";
+const execOk = (sandbox, command, options) => Effect.flatMap(sandbox.exec(command, options), (result) => result.exitCode !== 0
+    ? Effect.fail(new ExecError({
+        command,
+        message: `Command failed (exit ${result.exitCode}): ${command}\n${result.stderr}`,
+    }))
+    : Effect.succeed(result));
+const execAsync = promisify(exec);
+export const withSandboxLifecycle = (options, work) => Effect.gen(function* () {
+    const sandbox = yield* Sandbox;
+    const display = yield* Display;
+    const { hostRepoDir, sandboxRepoDir, hooks, branch, hostWorktreePath } = options;
+    // Without an explicit branch, record host's current branch for cherry-pick
+    const hostCurrentBranch = !branch
+        ? yield* Effect.promise(async () => {
+            const { stdout } = await execAsync("git rev-parse --abbrev-ref HEAD", { cwd: hostRepoDir });
+            return stdout.trim();
+        })
+        : null;
+    // Read host git identity before entering the sandbox
+    const [hostGitName, hostGitEmail] = yield* Effect.promise(async () => {
+        const [nameResult, emailResult] = await Promise.all([
+            execAsync("git config user.name", { cwd: hostRepoDir })
+                .then((r) => r.stdout.trim())
+                .catch(() => ""),
+            execAsync("git config user.email", { cwd: hostRepoDir })
+                .then((r) => r.stdout.trim())
+                .catch(() => ""),
+        ]);
+        return [nameResult, emailResult];
+    });
+    // Setup: onSandboxReady hooks
+    let resolvedBranch = "";
+    yield* display.taskLog("Setting up sandbox", (message) => Effect.gen(function* () {
+        // The bind-mounted worktree may be owned by a different UID (host user
+        // vs container user). Mark it safe so git doesn't reject it with
+        // "dubious ownership".
+        yield* execOk(sandbox, `git config --global --add safe.directory "${sandboxRepoDir}"`);
+        // Propagate host git identity into the sandbox so commits are attributed
+        // to the actual developer without requiring manual setup.
+        if (hostGitName) {
+            yield* execOk(sandbox, `git config --global user.name "${hostGitName.replace(/"/g, '\\"')}"`);
+        }
+        if (hostGitEmail) {
+            yield* execOk(sandbox, `git config --global user.email "${hostGitEmail.replace(/"/g, '\\"')}"`);
+        }
+        // Repo is bind-mounted — discover branch directly
+        resolvedBranch = (yield* execOk(sandbox, "git rev-parse --abbrev-ref HEAD", { cwd: sandboxRepoDir })).stdout.trim();
+        if (hooks?.onSandboxReady?.length) {
+            for (const hook of hooks.onSandboxReady) {
+                message(hook.command);
+                yield* execOk(sandbox, hook.command, { cwd: sandboxRepoDir });
+            }
+        }
+    }));
+    const targetBranch = branch ?? resolvedBranch;
+    // Record base HEAD
+    const baseHead = (yield* execOk(sandbox, "git rev-parse HEAD", {
+        cwd: sandboxRepoDir,
+    })).stdout.trim();
+    // Run the caller's work
+    const result = yield* work({ sandbox, sandboxRepoDir, baseHead });
+    // Collect commits and handle cherry-pick for temp branches
+    let commits;
+    let finalBranch;
+    // For host-side git operations in worktree mode, use hostWorktreePath
+    // (the real path on the host) instead of sandboxRepoDir (which may be a container path
+    // like /home/agent/workspace that doesn't exist on the host).
+    const hostSideWorktreePath = hostWorktreePath ?? sandboxRepoDir;
+    if (hostCurrentBranch !== null) {
+        // Temp branch mode: fast-forward host branch to temp branch, then delete temp branch.
+        // We use fast-forward instead of cherry-pick because cherry-pick breaks when the
+        // temp branch contains merge commits (e.g. a merge agent merging multiple parallel
+        // branches). The temp branch is always a direct descendant of hostCurrentBranch,
+        // so fast-forward is always valid.
+        // Check if there are any new commits on the temp branch
+        const hasNewCommits = yield* Effect.promise(async () => {
+            try {
+                const { stdout } = await execAsync(`git rev-list "${baseHead}..HEAD" --count`, { cwd: hostSideWorktreePath });
+                return parseInt(stdout.trim(), 10) > 0;
+            }
+            catch {
+                return false;
+            }
+        });
+        // Detach the worktree from the temp branch so the branch can be deleted
+        yield* execOk(sandbox, "git checkout --detach", { cwd: sandboxRepoDir });
+        if (hasNewCommits) {
+            // Fast-forward host's current branch to the temp branch
+            yield* Effect.tryPromise({
+                try: async () => {
+                    try {
+                        await execAsync(`git merge --ff-only "${resolvedBranch}"`, {
+                            cwd: hostRepoDir,
+                        });
+                    }
+                    catch {
+                        throw new Error(`Fast-forward merge of '${resolvedBranch}' onto '${hostCurrentBranch}' failed. ` +
+                            `The temporary branch '${resolvedBranch}' has been preserved. ` +
+                            `To retry: git merge --ff-only ${resolvedBranch}, ` +
+                            `then clean up: git branch -D ${resolvedBranch}`);
+                    }
+                },
+                catch: (e) => new SyncError({
+                    message: String(e instanceof Error ? e.message : e),
+                }),
+            });
+        }
+        // Delete the temp branch (now merged into host branch)
+        yield* Effect.promise(() => execAsync(`git branch -D "${resolvedBranch}"`, {
+            cwd: hostRepoDir,
+        }).catch(() => { }));
+        // Collect the commits now on the host branch
+        commits = yield* Effect.promise(async () => {
+            try {
+                const { stdout } = await execAsync(`git rev-list "${baseHead}..HEAD" --reverse`, { cwd: hostRepoDir });
+                const lines = stdout.trim();
+                if (!lines)
+                    return [];
+                return lines.split("\n").map((sha) => ({ sha }));
+            }
+            catch {
+                return [];
+            }
+        });
+        finalBranch = hostCurrentBranch;
+    }
+    else {
+        // Explicit branch: commits stay on that branch
+        commits = yield* Effect.promise(async () => {
+            try {
+                const { stdout } = await execAsync(`git rev-list "${baseHead}..refs/heads/${targetBranch}" --reverse`, { cwd: hostRepoDir });
+                const lines = stdout.trim();
+                if (!lines)
+                    return [];
+                return lines.split("\n").map((sha) => ({ sha }));
+            }
+            catch {
+                // Branch doesn't exist on host (no commits were produced)
+                return [];
+            }
+        });
+        finalBranch = targetBranch;
+    }
+    return { result, branch: finalBranch, commits };
+});
+//# sourceMappingURL=SandboxLifecycle.js.map

package/dist/SandboxLifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxLifecycle.js","sourceRoot":"","sources":["../src/SandboxLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,OAAO,GAGR,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,GAAG,CACb,OAAuB,EACvB,OAAe,EACf,OAA0B,EACY,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CACxD,MAAM,CAAC,QAAQ,KAAK,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;QACZ,OAAO;QACP,OAAO,EAAE,wBAAwB,MAAM,CAAC,QAAQ,MAAM,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAC3B,CAAC;AAEJ,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AA4BlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAgC,EAChC,IAEsD,EACqB,EAAE,CAC7E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,GACpE,OAAO,CAAC;IAEV,2EAA2E;IAC3E,MAAM,iBAAiB,GAAkB,CAAC,MAAM;QAC9C,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,iCAAiC,EACjC,EAAE,GAAG,EAAE,WAAW,EAAE,CACrB,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAET,qDAAqD;IACrD,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,SAAS,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;iBACpD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;iBAC5B,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAClB,SAAS,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;iBACrD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;iBAC5B,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,WAAW,CAAU,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAC9B,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,uEAAuE;QACvE,iEAAiE;QACjE,uBAAuB;QACvB,KAAK,CAAC,CAAC,MAAM,CACX,OAAO,EACP,6CAA6C,cAAc,GAAG,CAC/D,CAAC;QAEF,yEAAyE;QACzE,0DAA0D;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,CAAC,MAAM,CACX,OAAO,EACP,kCAAkC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,CAAC,MAAM,CACX,OAAO,EACP,mCAAmC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CACxE,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAC7B,OAAO,EACP,iCAAiC,EACjC,EAAE,GAAG,EAAE,cAAc,EAAE,CACxB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAEjB,IAAI,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,IAAI,cAAc,CAAC;IAE9C,mBAAmB;IACnB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE;QAC7D,GAAG,EAAE,cAAc;KACpB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAElB,wBAAwB;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElE,2DAA2D;IAC3D,IAAI,OAA0B,CAAC;IAC/B,IAAI,WAAmB,CAAC;IAExB,sEAAsE;IACtE,uFAAuF;IACvF,8DAA8D;IAC9D,MAAM,oBAAoB,GAAG,gBAAgB,IAAI,cAAc,CAAC;IAEhE,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,sFAAsF;QACtF,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,mCAAmC;QAEnC,wDAAwD;QACxD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,iBAAiB,QAAQ,iBAAiB,EAC1C,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAC9B,CAAC;gBACF,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAEzE,IAAI,aAAa,EAAE,CAAC;YAClB,wDAAwD;YACxD,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,IAAI,CAAC;wBACH,MAAM,SAAS,CAAC,wBAAwB,cAAc,GAAG,EAAE;4BACzD,GAAG,EAAE,WAAW;yBACjB,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,KAAK,CACb,0BAA0B,cAAc,WAAW,iBAAiB,YAAY;4BAC9E,yBAAyB,cAAc,wBAAwB;4BAC/D,iCAAiC,cAAc,IAAI;4BACnD,gCAAgC,cAAc,EAAE,CACnD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,IAAI,SAAS,CAAC;oBACZ,OAAO,EAAE,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;iBACpD,CAAC;aACL,CAAC,CAAC;QACL,CAAC;QAED,uDAAuD;QACvD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CACzB,SAAS,CAAC,kBAAkB,cAAc,GAAG,EAAE;YAC7C,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;QAEF,6CAA6C;QAC7C,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,iBAAiB,QAAQ,mBAAmB,EAC5C,EAAE,GAAG,EAAE,WAAW,EAAE,CACrB,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK;oBAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,WAAW,GAAG,iBAAiB,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,+CAA+C;QAC/C,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,iBAAiB,QAAQ,gBAAgB,YAAY,aAAa,EAClE,EAAE,GAAG,EAAE,WAAW,EAAE,CACrB,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK;oBAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;gBAC1D,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,WAAW,GAAG,YAAY,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC,CAAC,CAAC"}