@aigne/afs-sandbox 1.11.0-beta.7 → 1.11.0-beta.8

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { AFSAccessMode, AFSDeleteResult, AFSEntry, AFSExecResult, AFSExplainResult, AFSListResult, AFSModuleLoadParams, AFSRoot, AFSStatResult, AFSWriteEntryPayload, AFSWriteResult } from "@aigne/afs";
+import { AFSAccessMode, AFSDeleteResult, AFSEntry, AFSExecResult, AFSExplainResult, AFSListResult, AFSModuleLoadParams, AFSRoot, AFSStatResult, AFSWriteEntryPayload, AFSWriteResult, ProviderManifest } from "@aigne/afs";
 import { AFSBaseProvider, RouteContext } from "@aigne/afs/provider";
 import { z } from "zod";
 
@@ -246,128 +246,34 @@ declare class AFSSandbox extends AFSBaseProvider {
   static schema(): z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
-    accessMode: z.ZodOptional<z.ZodEnum<["readonly", "readwrite"]>>;
+    accessMode: z.ZodOptional<z.ZodEnum<{
+      readonly: "readonly";
+      readwrite: "readwrite";
+    }>>;
     runtime: z.ZodOptional<z.ZodObject<{
       timeout: z.ZodOptional<z.ZodNumber>;
       memoryLimit: z.ZodOptional<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-      timeout?: number | undefined;
-      memoryLimit?: number | undefined;
-    }, {
-      timeout?: number | undefined;
-      memoryLimit?: number | undefined;
-    }>>;
+    }, z.core.$strip>>;
     capabilities: z.ZodOptional<z.ZodObject<{
       afs: z.ZodOptional<z.ZodObject<{
         read: z.ZodOptional<z.ZodBoolean>;
         write: z.ZodOptional<z.ZodBoolean>;
-        allowPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        denyPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-      }, "strip", z.ZodTypeAny, {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      }, {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      }>>;
-    }, "strip", z.ZodTypeAny, {
-      afs?: {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      } | undefined;
-    }, {
-      afs?: {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      } | undefined;
-    }>>;
+        allowPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        denyPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      }, z.core.$strip>>;
+    }, z.core.$strip>>;
     audit: z.ZodOptional<z.ZodObject<{
       enabled: z.ZodBoolean;
-      onEvent: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
+      onEvent: z.ZodOptional<z.ZodAny>;
       maxEntries: z.ZodOptional<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-      enabled: boolean;
-      onEvent?: ((...args: unknown[]) => unknown) | undefined;
-      maxEntries?: number | undefined;
-    }, {
-      enabled: boolean;
-      onEvent?: ((...args: unknown[]) => unknown) | undefined;
-      maxEntries?: number | undefined;
-    }>>;
+    }, z.core.$strip>>;
     rateLimit: z.ZodOptional<z.ZodObject<{
       maxExecutionsPerMinute: z.ZodOptional<z.ZodNumber>;
       maxExecutionsPerMinutePerUser: z.ZodOptional<z.ZodNumber>;
       maxExecutionsPerMinutePerScript: z.ZodOptional<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-      maxExecutionsPerMinute?: number | undefined;
-      maxExecutionsPerMinutePerUser?: number | undefined;
-      maxExecutionsPerMinutePerScript?: number | undefined;
-    }, {
-      maxExecutionsPerMinute?: number | undefined;
-      maxExecutionsPerMinutePerUser?: number | undefined;
-      maxExecutionsPerMinutePerScript?: number | undefined;
-    }>>;
-  }, "strip", z.ZodTypeAny, {
-    name?: string | undefined;
-    description?: string | undefined;
-    accessMode?: "readonly" | "readwrite" | undefined;
-    runtime?: {
-      timeout?: number | undefined;
-      memoryLimit?: number | undefined;
-    } | undefined;
-    capabilities?: {
-      afs?: {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      } | undefined;
-    } | undefined;
-    audit?: {
-      enabled: boolean;
-      onEvent?: ((...args: unknown[]) => unknown) | undefined;
-      maxEntries?: number | undefined;
-    } | undefined;
-    rateLimit?: {
-      maxExecutionsPerMinute?: number | undefined;
-      maxExecutionsPerMinutePerUser?: number | undefined;
-      maxExecutionsPerMinutePerScript?: number | undefined;
-    } | undefined;
-  }, {
-    name?: string | undefined;
-    description?: string | undefined;
-    accessMode?: "readonly" | "readwrite" | undefined;
-    runtime?: {
-      timeout?: number | undefined;
-      memoryLimit?: number | undefined;
-    } | undefined;
-    capabilities?: {
-      afs?: {
-        read?: boolean | undefined;
-        write?: boolean | undefined;
-        allowPaths?: string[] | undefined;
-        denyPaths?: string[] | undefined;
-      } | undefined;
-    } | undefined;
-    audit?: {
-      enabled: boolean;
-      onEvent?: ((...args: unknown[]) => unknown) | undefined;
-      maxEntries?: number | undefined;
-    } | undefined;
-    rateLimit?: {
-      maxExecutionsPerMinute?: number | undefined;
-      maxExecutionsPerMinutePerUser?: number | undefined;
-      maxExecutionsPerMinutePerScript?: number | undefined;
-    } | undefined;
-  }>;
+    }, z.core.$strip>>;
+  }, z.core.$strip>;
+  static manifest(): ProviderManifest;
   /**
    * Loads a module instance from configuration
    */

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/index.ts"],"mappings":";;;;;;;;KAKY,QAAA;AAAZ;;;AAAA,UAKiB,QAAA;EACf,KAAA,EAAO,QAAA;EACP,OAAA;EACA,SAAA;AAAA;;;;UAMe,eAAA;EANf;EAQA,OAAA;EARS;EAUT,MAAA;EAJ8B;EAM9B,KAAA;EAIc;EAFd,KAAA;EAJA;EAMA,IAAA,EAAM,QAAA;EAFN;EAIA,QAAA;EAFM;EAIN,QAAA;AAAA;;;;UA0Fe,cAAA;EAiHf;EA/GA,OAAA;EA+GW;EA7GX,WAAA;AAAA;;AAqHF;;UA/GiB,kBAAA;EA+Ge;EA7G9B,GAAA;IAiHA,6BA/GE,IAAA,YAiH6B;IA/G7B,KAAA,YAqHa;IAnHb,UAAA,aAmH6B;IAjH7B,SAAA;EAAA;AAAA;;;;UAOa,cAAA;EAsHF;EApHb,IAAA;EA0He;EAxHf,WAAA;;EAEA,YAAA;EA+HU;EA7HV,aAAA;EAmIQ;EAjIR,WAAA,GAAc,MAAA;EAoIa;EAlI3B,YAAA,GAAe,MAAA;EAkHf;EAhHA,UAAA,EAAY,IAAA;EAoHZ;EAlHA,OAAA;AAAA;;;;UAMe,cAAA;EAqHP;EAnHR,IAAA;EAsHY;EApHZ,WAAA;EAoH2B;EAlH3B,OAAA;;EAEA,SAAA;IACE,IAAA;IACA,WAAA;IACA,QAAA;IACA,OAAA;EAAA;;EAGF,QAAA;AAAA;;;;KAMU,cAAA;;;;UAWK,UAAA;;EAEf,IAAA,EAAM,cAAA;;EAEN,SAAA;;EAEA,MAAA;;EAEA,SAAA;;EAEA,UAAA;;EAEA,UAAA;;EAEA,UAAA;;EAEA,IAAA;;EAEA,OAAA;;EAEA,KAAA;;EAEA,OAAA,GAAU,MAAA;AAAA;;;;UAMK,WAAA;;EAEf,OAAA;;EAEA,OAAA,IAAW,KAAA,EAAO,UAAA;;EAElB,UAAA;AAAA;;;;UAMe,eAAA;;EAEf,sBAAA;EC6CoB;ED3CpB,6BAAA;EC2CiE;EDzCjE,+BAAA;AAAA;;;;UAMe,gBAAA;ECoEgC;EDlE/C,eAAA;EC8EsB;ED5EtB,YAAA;EC4E6D;ED1E7D,YAAA;EC2G4E;EDzG5E,YAAA;ECsHO;EDpHP,eAAA;ECqHG;EDnHH,aAAA;AAAA;;;;UAMe,iBAAA;ECwJS;EDtJxB,IAAA;ECsJuC;EDpJvC,WAAA;EC4KqD;ED1KrD,UAAA,GAAa,aAAA;EC8LS;ED3LtB,OAAA,GAAU,cAAA;EC2L2B;EDxLrC,YAAA,GAAe,kBAAA;ECkMoC;ED/LnD,KAAA,GAAQ,WAAA;EC0SqB;EDvS7B,SAAA,GAAY,eAAA;AAAA;;;AA/Rd;;;;;AAKA;;;;;;;;;;AASA;;;;;;;;;;;;;;AAwGA;;;;;AAUA;AAhIA,cCqOa,UAAA,SAAmB,eAAA;EAAA,SACZ,IAAA;EAAA,SACA,WAAA;EAAA,SACA,UAAA,EAAY,aAAA;EAAA,iBAEb,OAAA;EAAA,iBACA,OAAA;EAAA,iBACA,OAAA;EAAA,QACT,YAAA;EAAA,iBAGS,eAAA;EAAA,iBAGA,QAAA;EAAA,iBACA,WAAA;EAAA,iBAGA,eAAA;EAAA,iBACA,mBAAA;EAAA,iBACA,uBAAA;EAAA,iBACA,yBAAA;EAAA,QAGT,OAAA;EAAA,iBAQS,aAAA;cAEL,OAAA,GAAS,iBAAA;EDpHrB;;;EAAA,OCoIO,MAAA,CAAA,GAAM,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAOA,IAAA,CAAA;IAAO;EAAA,IAAU,mBAAA,GAA2B,OAAA,CAAQ,UAAA;;;;EAQjE,OAAA,CAAQ,GAAA,EAAK,OAAA;;;;EAUP,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAetC,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAYzC,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;;;;EAiC/D,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;;;;EAYtE,4BAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KACnB,OAAA,CAAQ,aAAA;;;;EAYL,aAAA,CAAc,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EA/GpC;;;EAkIP,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,aAAA;EAzGpD;;;EAqHf,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAtGA;;;EA8HzC,iBAAA,CAAkB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAlHQ;;;EAsIvD,SAAA,CAAU,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAxFtC;;;EAkGD,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EArFF;;;EAgM3C,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;EAjK7B;;;EAoMzC,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA5KC;;;EAmMvC,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EArKtB;;;EA6KtB,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA/BhD;;;EA4Cf,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EAbtD;;;EAgChB,iBAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;IAAoB,OAAA;EAAA,KACvC,OAAA,CAAQ,QAAA;EAAA;;;EAgCL,qBAAA,CAAsB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EAmB5B;;;EAA9C,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAQa;;;EAA3D,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,QAAA;EAmCL;;;EAb9D,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA6CtB;;;EAhCnB,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA0DlD;;;EAzCpB,SAAA,CAAU,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA4DmC;;;EA7C1E,YAAA,CAAa,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAgE4B;;;EAnDtE,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAmFvB;;;EAtEtB,cAAA,CAAe,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA0G/C;;;EAvFpB,qBAAA,CAAsB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EAyG7E;;;EAtFG,yBAAA,CAA0B,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA4Kb;;;EAzJjE,iBAAA,CAAkB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAuKM;;;EA1JrD,gBAAA,CAAiB,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,QAAA;EAwQrE;;;EAjPF,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA4P3C;;;EA/OF,aAAA,CAAc,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA2PL;;;EA5OtC,WAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,KAAA,EAAO,oBAAA,GACN,OAAA,CAAQ,cAAA;EA6Q0D;;;EApM/D,kBAAA,CACJ,IAAA,EAAM,YAAA;IAAe,UAAA;IAAoB,OAAA;EAAA,IACzC,MAAA,EAAQ,oBAAA,GACP,OAAA,CAAQ,cAAA;EA2OsD;;;EAjO3D,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,eAAA;EAiQ/B;;;EAnPlC,cAAA,CAAe,GAAA,EAAK,YAAA;IAAe,IAAA;EAAA,KAAkB,OAAA,CAAQ,eAAA;EA4TH;;;EAlT1D,UAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EA10BkC;;;EAy6BvC,gBAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EAv6BM;;;EA+6BX,cAAA,CACJ,GAAA,EAAK,YAAA;IAAe,MAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EAx6BM;;;EAm7BX,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EA76B3B;;;EAm8BX,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAt7B7B;;;EAo8Bf,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;;;;EA4B/D,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAc9C,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,aAAA;;;;EAkBnE,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAc5C,YAAA,CAAa,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAgB1C,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,gBAAA;;;;EAyDzC,aAAA,CAAc,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,gBAAA;;;;EAwClE,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;UAsD5C,gBAAA;;;;UAuBA,0BAAA;;;;UAYA,4BAAA;;;;UAgBA,0BAAA;;;;UAgBA,wBAAA;;;;UAYA,QAAA;;;;UA0BA,cAAA;;;;UA2CA,eAAA;;;;UAoBA,aAAA;;;;UAgDA,iBAAA;;;;UAuBA,aAAA;;;;UAWM,aAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/index.ts"],"mappings":";;;;;;;;KAKY,QAAA;AAAZ;;;AAAA,UAKiB,QAAA;EACf,KAAA,EAAO,QAAA;EACP,OAAA;EACA,SAAA;AAAA;;;;UAMe,eAAA;EANf;EAQA,OAAA;EARS;EAUT,MAAA;EAJ8B;EAM9B,KAAA;EAIc;EAFd,KAAA;EAJA;EAMA,IAAA,EAAM,QAAA;EAFN;EAIA,QAAA;EAFM;EAIN,QAAA;AAAA;;;;UA0Fe,cAAA;EAiHf;EA/GA,OAAA;EA+GW;EA7GX,WAAA;AAAA;;AAqHF;;UA/GiB,kBAAA;EA+Ge;EA7G9B,GAAA;IAiHA,6BA/GE,IAAA,YAiH6B;IA/G7B,KAAA,YAqHa;IAnHb,UAAA,aAmH6B;IAjH7B,SAAA;EAAA;AAAA;;;;UAOa,cAAA;EAsHF;EApHb,IAAA;EA0He;EAxHf,WAAA;;EAEA,YAAA;EA+HU;EA7HV,aAAA;EAmIQ;EAjIR,WAAA,GAAc,MAAA;EAoIa;EAlI3B,YAAA,GAAe,MAAA;EAkHf;EAhHA,UAAA,EAAY,IAAA;EAoHZ;EAlHA,OAAA;AAAA;;;;UAMe,cAAA;EAqHP;EAnHR,IAAA;EAsHY;EApHZ,WAAA;EAoH2B;EAlH3B,OAAA;;EAEA,SAAA;IACE,IAAA;IACA,WAAA;IACA,QAAA;IACA,OAAA;EAAA;;EAGF,QAAA;AAAA;;;;KAMU,cAAA;;;;UAWK,UAAA;;EAEf,IAAA,EAAM,cAAA;;EAEN,SAAA;;EAEA,MAAA;;EAEA,SAAA;;EAEA,UAAA;;EAEA,UAAA;;EAEA,UAAA;;EAEA,IAAA;;EAEA,OAAA;;EAEA,KAAA;;EAEA,OAAA,GAAU,MAAA;AAAA;;;;UAMK,WAAA;;EAEf,OAAA;;EAEA,OAAA,IAAW,KAAA,EAAO,UAAA;;EAElB,UAAA;AAAA;;;;UAMe,eAAA;EC2DK;EDzDpB,sBAAA;ECyDiE;EDvDjE,6BAAA;EC+Da;ED7Db,+BAAA;AAAA;;;;UAMe,gBAAA;EC4FO;ED1FtB,eAAA;EC0F6D;EDxF7D,YAAA;ECyH4E;EDvH5E,YAAA;ECoIO;EDlIP,YAAA;ECmIG;EDjIH,eAAA;EC6IiD;ED3IjD,aAAA;AAAA;;;;UAMe,iBAAA;ECoKwB;EDlKvC,IAAA;EC0LqD;EDxLrD,WAAA;EC4MsB;ED1MtB,UAAA,GAAa,aAAA;EC0MwB;EDvMrC,OAAA,GAAU,cAAA;ECiNyC;ED9MnD,YAAA,GAAe,kBAAA;ECyTc;EDtT7B,KAAA,GAAQ,WAAA;ECsT4D;EDnTpE,SAAA,GAAY,eAAA;AAAA;;;AA/Rd;;;;;AAKA;;;;;;;;;;AASA;;;;;;;;;;;;;;AAwGA;;;;;AAUA;AAhIA,cCsOa,UAAA,SAAmB,eAAA;EAAA,SACZ,IAAA;EAAA,SACA,WAAA;EAAA,SACA,UAAA,EAAY,aAAA;EAAA,iBAEb,OAAA;EAAA,iBACA,OAAA;EAAA,iBACA,OAAA;EAAA,QACT,YAAA;EAAA,iBAGS,eAAA;EAAA,iBAGA,QAAA;EAAA,iBACA,WAAA;EAAA,iBAGA,eAAA;EAAA,iBACA,mBAAA;EAAA,iBACA,uBAAA;EAAA,iBACA,yBAAA;EAAA,QAGT,OAAA;EAAA,iBAQS,aAAA;cAEL,OAAA,GAAS,iBAAA;EDrHrB;;;EAAA,OCqIO,MAAA,CAAA,GAAM,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAIN,QAAA,CAAA,GAAY,gBAAA;EDrFM;;;EAAA,OCmGZ,IAAA,CAAA;IAAO;EAAA,IAAU,mBAAA,GAA2B,OAAA,CAAQ,UAAA;EDjG3D;;;ECyGN,OAAA,CAAQ,GAAA,EAAK,OAAA;EDjGb;;;EC2GM,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EDnG5C;;;ECkHM,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;ED9G/B;;AAMlB;ECoHQ,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;EDlHrE;;;ECmJM,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;ED/IlE;AAMZ;;ECqJQ,4BAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KACnB,OAAA,CAAQ,aAAA;EDnJX;;;EC+JM,aAAA,CAAc,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EDvJlC;;;EC0KT,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,aAAA;EDpKzE;;;ECgLM,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;ED1KlC;;AAMf;EC4LQ,iBAAA,CAAkB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;;;;EAoB/C,SAAA,CAAU,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EDjMrC;;;EC2MF,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EDxNnD;;;ECmUM,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;EDzT5E;;;EC4VM,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EDtV5C;;;EC6WM,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;EAQ5C,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA3avC;;;EAwbxB,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;;;;EAmBtE,iBAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;IAAoB,OAAA;EAAA,KACvC,OAAA,CAAQ,QAAA;;;;EAgCL,qBAAA,CAAsB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;;;;EAmB1E,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;EAQ9C,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,QAAA;;;;EAsBnE,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;EAazC,iBAAA,CAAkB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;;;;EAiBtE,SAAA,CAAU,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;EAevC,YAAA,CAAa,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;;;;EAa1C,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAvhB/B;;;EAoiBd,cAAA,CAAe,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EAlhB7B;;;EAqiBtC,qBAAA,CAAsB,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA1gBX;;;EA6hB/D,yBAAA,CAA0B,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,QAAA;EA9ezE;;;EAigBL,iBAAA,CAAkB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EArfZ;;;EAkgBnC,gBAAA,CAAiB,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,QAAA;EAnetC;;;EA0fjC,eAAA,CAAgB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA9c7B;;;EA2dhB,aAAA,CAAc,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EAjdE;;;EAge7C,WAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,KAAA,EAAO,oBAAA,GACN,OAAA,CAAQ,cAAA;EArViC;;;EA8ZtC,kBAAA,CACJ,IAAA,EAAM,YAAA;IAAe,UAAA;IAAoB,OAAA;EAAA,IACzC,MAAA,EAAQ,oBAAA,GACP,OAAA,CAAQ,cAAA;EAlYkD;;;EA4YvD,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,eAAA;EA1WpE;;;EAwXG,cAAA,CAAe,GAAA,EAAK,YAAA;IAAe,IAAA;EAAA,KAAkB,OAAA,CAAQ,eAAA;EArUvB;;;EA+UtC,UAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EApT4B;;;EAmZjC,gBAAA,CACJ,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EAxX0B;;;EAgY/B,cAAA,CACJ,GAAA,EAAK,YAAA;IAAe,MAAA;EAAA,IACpB,IAAA,EAAM,MAAA,oBACL,OAAA,CAAQ,aAAA;EAvWgC;;;EAkXrC,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAlVX;;;EAwW3B,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EArVkC;;;EAmW9E,UAAA,CAAW,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,aAAA;EAnUQ;;;EA+VvE,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAxUT;;;EAsVrC,YAAA,CAAa,GAAA,EAAK,YAAA;IAAe,YAAA;EAAA,KAA0B,OAAA,CAAQ,aAAA;EAvT9D;;;EAyUL,cAAA,CAAe,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EA7PvC;;;EA2QL,YAAA,CAAa,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,aAAA;EAjQe;;;EAiRzD,WAAA,CAAY,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,gBAAA;EAxPxC;;;EAiTD,aAAA,CAAc,GAAA,EAAK,YAAA;IAAe,UAAA;EAAA,KAAwB,OAAA,CAAQ,gBAAA;EA7M7D;;;EAqPL,gBAAA,CAAiB,IAAA,EAAM,YAAA,GAAe,OAAA,CAAQ,QAAA;EA1OzC;;;EAAA,QAgSH,gBAAA;EArR4B;;;EAAA,QA4S5B,0BAAA;EAxQc;;;EAAA,QAoRd,4BAAA;EAxP4C;;;EAAA,QAwQ5C,0BAAA;EA1PyD;;;EAAA,QA0QzD,wBAAA;EA1OiB;;;EAAA,QAsPjB,QAAA;EAtOuC;;;EAAA,QAgQvC,cAAA;EAvMwD;;;EAAA,QAkPxD,eAAA;EAt3CsB;;;EAAA,QA04CtB,aAAA;EAz4CU;;;EAAA,QAy7CV,iBAAA;EAr7CS;;;EAAA,QA48CT,aAAA;EAt8CS;;;EAAA,QAi9CH,aAAA;AAAA"}

package/dist/index.mjs

@@ -343,7 +343,7 @@ const afsSandboxOptionsSchema = z.object({
 	}).optional().describe("AFS access configuration") }).optional().describe("Capabilities configuration"),
 	audit: z.object({
 		enabled: z.boolean().describe("Enable audit logging"),
-		onEvent: z.function().optional().describe("Callback for audit events"),
+		onEvent: z.any().optional(),
 		maxEntries: z.number().positive().optional().describe("Max audit entries to keep")
 	}).optional().describe("Audit configuration"),
 	rateLimit: z.object({
@@ -501,6 +501,20 @@ var AFSSandbox = class AFSSandbox extends AFSBaseProvider {
 	static schema() {
 		return afsSandboxOptionsSchema;
 	}
+	static manifest() {
+		return {
+			name: "sandbox",
+			description: "Sandboxed JavaScript execution environment for LLM-generated code",
+			uriTemplate: "sandbox://",
+			category: "compute",
+			schema: z.object({}),
+			tags: [
+				"sandbox",
+				"compute",
+				"javascript"
+			]
+		};
+	}
 	/**
 	* Loads a module instance from configuration
 	*/

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["result","storedScript","promotedAction"],"sources":["../src/capabilities/index.ts","../src/runtime/isolate.ts","../src/index.ts"],"sourcesContent":["import type { AFSRoot } from \"@aigne/afs\";\nimport type { CapabilitiesConfig } from \"../types.js\";\n\n/**\n * Capability functions that can be called from within the sandbox.\n * These are injected as `afs.*` methods.\n */\nexport type CapabilityFunctions = Record<string, (...args: unknown[]) => Promise<unknown>>;\n\n/**\n * Check if a path matches any patterns in the list.\n */\nfunction pathMatchesPatterns(path: string, patterns: string[]): boolean {\n  for (const pattern of patterns) {\n    // Simple glob-like matching\n    if (pattern === \"*\" || pattern === \"**\") return true;\n    if (pattern.endsWith(\"/**\") && path.startsWith(pattern.slice(0, -3))) {\n      return true;\n    }\n    if (pattern.endsWith(\"/*\") && path.startsWith(pattern.slice(0, -2))) {\n      // Only match direct children\n      const rest = path.slice(pattern.length - 2);\n      if (!rest.includes(\"/\") || rest === \"\") return true;\n    }\n    if (path === pattern) return true;\n    if (path.startsWith(`${pattern}/`)) return true;\n  }\n  return false;\n}\n\n/**\n * Check if a path is allowed based on allow/deny patterns.\n */\nfunction isPathAllowed(path: string, allowPaths?: string[], denyPaths?: string[]): boolean {\n  // If deny patterns exist and path matches, deny\n  if (denyPaths && denyPaths.length > 0 && pathMatchesPatterns(path, denyPaths)) {\n    return false;\n  }\n\n  // If allow patterns exist, path must match\n  if (allowPaths && allowPaths.length > 0) {\n    return pathMatchesPatterns(path, allowPaths);\n  }\n\n  // No restrictions, allow\n  return true;\n}\n\n/**\n * Normalize and validate a path for security.\n * Checks for path traversal attacks, null bytes, etc.\n */\nfunction normalizePath(path: string): string {\n  // Check for null bytes\n  if (path.includes(\"\\x00\")) {\n    throw new Error(\"Invalid path: null byte detected\");\n  }\n\n  // URL decode the path to catch encoded attacks\n  let decoded = path;\n  try {\n    decoded = decodeURIComponent(path);\n  } catch {\n    // If decoding fails, use original\n  }\n\n  // Check for path traversal after decoding\n  if (decoded.includes(\"..\")) {\n    throw new Error(\"Path traversal not allowed\");\n  }\n\n  // Check for control characters (ASCII 0-31 and 127)\n  for (const char of decoded) {\n    const code = char.charCodeAt(0);\n    if (code < 32 || code === 127) {\n      throw new Error(\"Invalid path: control characters detected\");\n    }\n  }\n\n  return decoded;\n}\n\n/**\n * Create capability functions based on configuration.\n *\n * @param afs - The AFS root for filesystem operations\n * @param config - Capabilities configuration\n * @returns Record of capability functions to inject into sandbox\n */\nexport function createCapabilities(\n  afs: AFSRoot | undefined,\n  config: CapabilitiesConfig,\n): CapabilityFunctions {\n  const capabilities: CapabilityFunctions = {};\n\n  // AFS read capability\n  if (afs?.read && config.afs?.read !== false) {\n    const afsRead = afs.read.bind(afs);\n    capabilities.read = async (path: unknown): Promise<string | null> => {\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.read: path must be a string\");\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(path, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.read: access denied to path \"${path}\"`);\n      }\n\n      try {\n        const result = await afsRead(path);\n        if (!result.data) {\n          return null;\n        }\n\n        // Return content as string\n        const content = result.data.content;\n        if (content === undefined || content === null) {\n          return null;\n        }\n\n        if (typeof content === \"string\") {\n          return content;\n        }\n\n        // For non-string content, serialize to JSON\n        return JSON.stringify(content);\n      } catch (error) {\n        throw new Error(\n          `afs.read: failed to read \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  }\n\n  // AFS write capability (Phase 2)\n  if (afs?.write && config.afs?.write === true) {\n    const afsWrite = afs.write.bind(afs);\n    capabilities.write = async (\n      path: unknown,\n      content: unknown,\n    ): Promise<{ success: boolean; path: string }> => {\n      // Validate path\n      if (path === undefined || path === null) {\n        throw new Error(\"afs.write: path is required\");\n      }\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.write: path must be a string\");\n      }\n\n      // Validate content\n      if (typeof content !== \"string\") {\n        throw new Error(\"afs.write: content must be a string\");\n      }\n      if (content === \"\") {\n        throw new Error(\"afs.write: content cannot be empty\");\n      }\n\n      // Normalize and check for path traversal attacks\n      let normalizedPath: string;\n      try {\n        normalizedPath = normalizePath(path);\n      } catch (error) {\n        throw new Error(`afs.write: ${error instanceof Error ? error.message : String(error)}`);\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(normalizedPath, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.write: access denied to path \"${path}\"`);\n      }\n\n      try {\n        await afsWrite(normalizedPath, { content });\n        return { success: true, path: normalizedPath };\n      } catch (error) {\n        throw new Error(\n          `afs.write: failed to write \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  } else {\n    // Provide a stub that throws when write is disabled\n    capabilities.write = async (): Promise<never> => {\n      throw new Error(\"afs.write: write capability not enabled\");\n    };\n  }\n\n  // AFS list capability (useful for Phase 2, but add basic support now)\n  if (afs?.list && config.afs?.read !== false) {\n    const afsList = afs.list.bind(afs);\n    capabilities.list = async (\n      path: unknown,\n      options?: unknown,\n    ): Promise<{ path: string; type: string }[]> => {\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.list: path must be a string\");\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(path, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.list: access denied to path \"${path}\"`);\n      }\n\n      try {\n        const listOptions = typeof options === \"object\" && options !== null ? options : {};\n        const result = await afsList(path, listOptions as Record<string, unknown>);\n\n        // Return simplified entry info\n        return result.data.map((entry) => ({\n          path: entry.path,\n          type: (entry.meta?.type as string | undefined) ?? \"unknown\",\n        }));\n      } catch (error) {\n        throw new Error(\n          `afs.list: failed to list \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  }\n\n  return capabilities;\n}\n","import { getQuickJS } from \"quickjs-emscripten\";\nimport type {\n  ExecutionContext,\n  ExecutionResult,\n  LogEntry,\n  LogLevel,\n  RuntimeOptions,\n} from \"../types.js\";\n\nconst DEFAULT_TIMEOUT_MS = 5000;\nconst DEFAULT_MEMORY_LIMIT_MB = 128;\n\n/**\n * Sandbox runtime using QuickJS (WebAssembly) for secure JavaScript execution.\n *\n * Provides sandboxed execution with:\n * - Memory limits\n * - CPU time limits (timeout via interrupt)\n * - Capability injection for controlled AFS access\n *\n * Note: Async/await in sandbox code is limited. Capability functions return\n * Promises that can be used for type checking, but full async execution\n * requires calling capabilities synchronously for now.\n */\nexport class SandboxRuntime {\n  private readonly timeout: number;\n  private readonly memoryLimit: number;\n\n  constructor(options: RuntimeOptions = {}) {\n    this.timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n    this.memoryLimit = options.memoryLimit ?? DEFAULT_MEMORY_LIMIT_MB;\n  }\n\n  /**\n   * Execute JavaScript code in an isolated QuickJS sandbox.\n   *\n   * @param code - JavaScript source code to execute\n   * @param capabilities - Capability functions to inject into sandbox\n   * @param context - Execution context with args and tracking info\n   * @returns Execution result with success status, return value, errors, and logs\n   */\n  async execute(\n    code: string,\n    capabilities: Record<string, (...args: unknown[]) => Promise<unknown>>,\n    context: ExecutionContext = {},\n  ): Promise<ExecutionResult> {\n    const logs: LogEntry[] = [];\n    const startTime = Date.now();\n\n    // Get QuickJS instance\n    const QuickJS = await getQuickJS();\n\n    // Create runtime with memory limit\n    const runtime = QuickJS.newRuntime();\n    runtime.setMemoryLimit(this.memoryLimit * 1024 * 1024);\n\n    // Set up interrupt handler for timeout\n    let timedOut = false;\n    const deadline = Date.now() + this.timeout;\n    runtime.setInterruptHandler(() => {\n      if (Date.now() > deadline) {\n        timedOut = true;\n        return true; // Interrupt execution\n      }\n      return false;\n    });\n\n    // Create context\n    const vm = runtime.newContext();\n\n    try {\n      // Inject logging function\n      const logFn = vm.newFunction(\"log\", (levelHandle, messageHandle) => {\n        const level = vm.getString(levelHandle) as LogLevel;\n        const message = vm.getString(messageHandle);\n        logs.push({\n          level,\n          message,\n          timestamp: Date.now(),\n        });\n      });\n      vm.setProp(vm.global, \"__log\", logFn);\n      logFn.dispose();\n\n      // Inject args\n      const argsJson = JSON.stringify(context.args ?? {});\n      vm.evalCode(`const __args = ${argsJson};`);\n\n      // Inject context object (timestamp, executionId, userId, sessionId)\n      const contextObj = {\n        timestamp: context.timestamp ?? Date.now(),\n        executionId: context.executionId ?? `exec-${Date.now()}`,\n        userId: context.userId,\n        sessionId: context.sessionId,\n      };\n      const contextJson = JSON.stringify(contextObj);\n      vm.evalCode(`const __context = ${contextJson};`);\n\n      // Create pending promises tracker for async capabilities\n      const pendingPromises: Map<\n        number,\n        {\n          resolve: (value: unknown) => void;\n          reject: (error: Error) => void;\n        }\n      > = new Map();\n      let promiseId = 0;\n\n      // Inject capability functions\n      for (const [name, fn] of Object.entries(capabilities)) {\n        // Create a sync function that returns a promise ID\n        const capFn = vm.newFunction(`__cap_${name}`, (...argHandles) => {\n          const args = argHandles.map((h) => {\n            const type = vm.typeof(h);\n            if (type === \"string\") return vm.getString(h);\n            if (type === \"number\") return vm.getNumber(h);\n            if (type === \"boolean\") return vm.dump(h);\n            if (type === \"object\" || type === \"undefined\") return vm.dump(h);\n            return vm.dump(h);\n          });\n\n          // Store the promise for later resolution\n          const id = promiseId++;\n\n          // Execute the capability async\n          fn(...args)\n            .then((result) => {\n              pendingPromises.get(id)?.resolve(result);\n              pendingPromises.delete(id);\n            })\n            .catch((error) => {\n              pendingPromises\n                .get(id)\n                ?.reject(error instanceof Error ? error : new Error(String(error)));\n              pendingPromises.delete(id);\n            });\n\n          return vm.newNumber(id);\n        });\n        vm.setProp(vm.global, `__cap_${name}`, capFn);\n        capFn.dispose();\n      }\n\n      // Build the afs object and wrapper code\n      const capabilitySetups = Object.keys(capabilities)\n        .map(\n          (name) => `\n    ${name}: function(...args) {\n      return new Promise((resolve, reject) => {\n        const id = __cap_${name}(...args);\n        __pendingResolvers[id] = { resolve, reject };\n      });\n    }`,\n        )\n        .join(\",\\n\");\n\n      const wrapperCode = `\n(function() {\n  // Pending promise resolvers\n  const __pendingResolvers = {};\n  globalThis.__pendingResolvers = __pendingResolvers;\n\n  // Set up afs object with logging and capabilities\n  const afs = {\n    log: function(level, message) {\n      __log(String(level), String(message));\n    },\n    ${capabilitySetups}\n  };\n\n  // Get arguments and context\n  const args = __args;\n  const context = Object.freeze(__context);\n\n  // User code\n  ${code}\n})();\n`;\n\n      // Execute the code\n      const result = vm.evalCode(wrapperCode);\n\n      if (timedOut) {\n        result.dispose();\n        return {\n          success: false,\n          error: `Script execution timed out after ${this.timeout}ms`,\n          logs,\n          duration: Date.now() - startTime,\n          timedOut: true,\n        };\n      }\n\n      if (result.error) {\n        const errorValue = vm.dump(result.error);\n        result.error.dispose();\n\n        const errorMessage =\n          typeof errorValue === \"object\" && errorValue !== null\n            ? ((errorValue as { message?: string }).message ?? String(errorValue))\n            : String(errorValue);\n\n        return {\n          success: false,\n          error: errorMessage,\n          stack:\n            typeof errorValue === \"object\" && errorValue !== null\n              ? (errorValue as { stack?: string }).stack\n              : undefined,\n          logs,\n          duration: Date.now() - startTime,\n        };\n      }\n\n      // Get the result value\n      const resultValue = vm.dump(result.value);\n      result.value.dispose();\n\n      return {\n        success: true,\n        result: resultValue,\n        logs,\n        duration: Date.now() - startTime,\n        timedOut: false,\n      };\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      const stack = error instanceof Error ? error.stack : undefined;\n\n      return {\n        success: false,\n        error: errorMessage,\n        stack,\n        logs,\n        duration: Date.now() - startTime,\n      };\n    } finally {\n      // Cleanup\n      vm.dispose();\n      runtime.dispose();\n    }\n  }\n}\n","import {\n  type AFSAccessMode,\n  type AFSDeleteResult,\n  type AFSEntry,\n  type AFSExecResult,\n  type AFSExplainResult,\n  type AFSListResult,\n  type AFSModuleClass,\n  type AFSModuleLoadParams,\n  AFSNotFoundError,\n  type AFSRoot,\n  type AFSStatResult,\n  type AFSWriteEntryPayload,\n  type AFSWriteResult,\n  type CapabilitiesManifest,\n} from \"@aigne/afs\";\nimport {\n  Actions,\n  AFSBaseProvider,\n  Delete,\n  Exec,\n  Explain,\n  List,\n  Meta,\n  Read,\n  type RouteContext,\n  Stat,\n  Write,\n} from \"@aigne/afs/provider\";\nimport { joinURL } from \"ufo\";\nimport { z } from \"zod\";\nimport { type CapabilityFunctions, createCapabilities } from \"./capabilities/index.js\";\nimport { SandboxRuntime } from \"./runtime/isolate.js\";\nimport type {\n  AFSSandboxOptions,\n  AuditConfig,\n  AuditEvent,\n  ExecutionContext,\n  ExecutionHistoryEntry,\n  ExecutionMetrics,\n  ExecutionResult,\n  PromotedAction,\n  RateLimitConfig,\n  ScriptMetadata,\n  ScriptTemplate,\n  ScriptVersion,\n  StoredScript,\n} from \"./types.js\";\n\nexport type {\n  AFSSandboxOptions,\n  AuditConfig,\n  AuditEvent,\n  AuditEventType,\n  ExecutionMetrics,\n  ExecutionResult,\n  LogEntry,\n  LogLevel,\n  PromotedAction,\n  RateLimitConfig,\n  ScriptTemplate,\n} from \"./types.js\";\n\n/** Maximum number of versions to keep per script */\nconst MAX_VERSIONS = 5;\n/** Maximum number of execution history entries per script */\nconst MAX_EXEC_HISTORY = 100;\n/** Sensitive fields to redact from execution history */\nconst SENSITIVE_FIELDS = [\"password\", \"secret\", \"token\", \"key\", \"credential\", \"auth\"];\n\n/**\n * Generate a unique execution ID\n */\nfunction generateExecutionId(): string {\n  return `exec-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;\n}\n\n/**\n * Sanitize args by redacting sensitive fields\n */\nfunction sanitizeArgs(args: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    if (SENSITIVE_FIELDS.some((f) => key.toLowerCase().includes(f))) {\n      sanitized[key] = \"[REDACTED]\";\n    } else if (typeof value === \"object\" && value !== null) {\n      sanitized[key] = sanitizeArgs(value as Record<string, unknown>);\n    } else {\n      sanitized[key] = value;\n    }\n  }\n  return sanitized;\n}\n\n/**\n * Zod schema for configuration validation\n */\nconst afsSandboxOptionsSchema = z.object({\n  name: z.string().optional().describe(\"Module name\"),\n  description: z.string().optional().describe(\"Module description\"),\n  accessMode: z.enum([\"readonly\", \"readwrite\"]).optional().describe(\"Access mode for this module\"),\n  runtime: z\n    .object({\n      timeout: z.number().positive().optional().describe(\"Execution timeout in milliseconds\"),\n      memoryLimit: z.number().positive().optional().describe(\"Memory limit in MB\"),\n    })\n    .optional()\n    .describe(\"Runtime configuration\"),\n  capabilities: z\n    .object({\n      afs: z\n        .object({\n          read: z.boolean().optional().describe(\"Enable read operations\"),\n          write: z.boolean().optional().describe(\"Enable write operations\"),\n          allowPaths: z.array(z.string()).optional().describe(\"Allowed path patterns\"),\n          denyPaths: z.array(z.string()).optional().describe(\"Denied path patterns\"),\n        })\n        .optional()\n        .describe(\"AFS access configuration\"),\n    })\n    .optional()\n    .describe(\"Capabilities configuration\"),\n  audit: z\n    .object({\n      enabled: z.boolean().describe(\"Enable audit logging\"),\n      onEvent: z.function().optional().describe(\"Callback for audit events\"),\n      maxEntries: z.number().positive().optional().describe(\"Max audit entries to keep\"),\n    })\n    .optional()\n    .describe(\"Audit configuration\"),\n  rateLimit: z\n    .object({\n      maxExecutionsPerMinute: z.number().positive().optional(),\n      maxExecutionsPerMinutePerUser: z.number().positive().optional(),\n      maxExecutionsPerMinutePerScript: z.number().positive().optional(),\n    })\n    .optional()\n    .describe(\"Rate limiting configuration\"),\n});\n\n/** Reserved action names that cannot be used for promoted actions */\nconst RESERVED_ACTION_NAMES = [\"run\", \"validate\", \"rollback\", \"promote\", \"create-from-template\"];\n\n/** Built-in script templates */\nconst BUILT_IN_TEMPLATES: ScriptTemplate[] = [\n  {\n    name: \"basic\",\n    description: \"A basic script template\",\n    content: `// Basic script template\nreturn args.input;`,\n    category: \"general\",\n  },\n  {\n    name: \"data-transform\",\n    description: \"Transform input data to output format\",\n    content: `// Data transformation script\nconst {{inputField}} = args.{{inputField}};\nconst {{outputField}} = {{inputField}};\nreturn { {{outputField}} };`,\n    variables: [\n      { name: \"inputField\", description: \"Name of the input field\", required: true },\n      { name: \"outputField\", description: \"Name of the output field\", required: true },\n    ],\n    category: \"data\",\n  },\n  {\n    name: \"validation\",\n    description: \"Validate input data against rules\",\n    content: `// Validation script\nconst value = args.{{fieldName}};\nconst errors = [];\n\nif (value === undefined || value === null) {\n  errors.push('{{fieldName}} is required');\n}\n\nreturn { valid: errors.length === 0, errors };`,\n    variables: [\n      { name: \"fieldName\", description: \"Name of the field to validate\", required: true },\n    ],\n    category: \"validation\",\n  },\n  {\n    name: \"aggregation\",\n    description: \"Aggregate array data\",\n    content: `// Aggregation script\nconst items = args.items || [];\nconst sum = items.reduce((acc, item) => acc + (item.{{valueField}} || 0), 0);\nconst count = items.length;\nconst average = count > 0 ? sum / count : 0;\n\nreturn { sum, count, average };`,\n    variables: [\n      { name: \"valueField\", description: \"Field to aggregate\", required: true, default: \"value\" },\n    ],\n    category: \"data\",\n  },\n];\n\n/**\n * AFS Sandbox Provider\n *\n * Provides a sandboxed JavaScript execution environment for LLM-generated code.\n * Scripts are stored at `/scripts/{name}.js` and executed directly via exec().\n *\n * Structure:\n * - `/` - root directory\n * - `/scripts` - stored scripts directory\n * - `/scripts/{name}.js` - individual script files (executable)\n * - `/templates` - script templates\n * - `/templates/{name}` - individual templates\n * - `/metrics` - execution metrics\n * - `/audit` - audit log\n * - `/.actions` - root-level actions (run, validate, promote, create-from-template)\n * - `/scripts/{name}.js/.actions` - script-level actions (exec, history, exec-history)\n *\n * @example\n * ```typescript\n * const sandbox = new AFSSandbox({ name: \"sandbox\" });\n * afs.mount(sandbox);\n *\n * // Write a script\n * await afs.write(\"/modules/sandbox/scripts/greet.js\", {\n *   content: `\n *     afs.log(\"info\", \"Hello from sandbox!\");\n *     return \"Hello, \" + args.name;\n *   `\n * });\n *\n * // Execute the script\n * const result = await afs.exec(\"/modules/sandbox/scripts/greet.js\", { name: \"World\" });\n * // result.data = { success: true, result: \"Hello, World\", logs: [...] }\n * ```\n */\nexport class AFSSandbox extends AFSBaseProvider {\n  override readonly name: string;\n  override readonly description?: string;\n  override readonly accessMode: AFSAccessMode;\n\n  private readonly runtime: SandboxRuntime;\n  private readonly options: AFSSandboxOptions;\n  private readonly scripts: Map<string, StoredScript> = new Map();\n  private capabilities: CapabilityFunctions = {};\n\n  // Promoted actions storage\n  private readonly promotedActions: Map<string, PromotedAction> = new Map();\n\n  // Audit logging\n  private readonly auditLog: AuditEvent[] = [];\n  private readonly auditConfig?: AuditConfig;\n\n  // Rate limiting\n  private readonly rateLimitConfig?: RateLimitConfig;\n  private readonly executionTimestamps: number[] = [];\n  private readonly userExecutionTimestamps: Map<string, number[]> = new Map();\n  private readonly scriptExecutionTimestamps: Map<string, number[]> = new Map();\n\n  // Metrics\n  private metrics: ExecutionMetrics = {\n    totalExecutions: 0,\n    successCount: 0,\n    failureCount: 0,\n    timeoutCount: 0,\n    averageDuration: 0,\n    totalDuration: 0,\n  };\n  private readonly scriptMetrics: Map<string, ExecutionMetrics> = new Map();\n\n  constructor(options: AFSSandboxOptions = {}) {\n    super();\n    this.options = afsSandboxOptionsSchema.parse(options);\n    this.name = options.name ?? \"sandbox\";\n    this.description = options.description ?? \"JavaScript sandbox for LLM code execution\";\n    this.accessMode = options.accessMode ?? \"readwrite\";\n    this.runtime = new SandboxRuntime(options.runtime);\n    this.auditConfig = options.audit;\n    this.rateLimitConfig = options.rateLimit;\n    // Initialize capabilities with undefined AFS (stubs only)\n    this.capabilities = createCapabilities(undefined, this.options.capabilities ?? {});\n  }\n\n  /**\n   * Returns the Zod schema for configuration validation\n   */\n  static schema() {\n    return afsSandboxOptionsSchema;\n  }\n\n  /**\n   * Loads a module instance from configuration\n   */\n  static async load({ config }: AFSModuleLoadParams = {}): Promise<AFSSandbox> {\n    const validated = afsSandboxOptionsSchema.parse(config);\n    return new AFSSandbox(validated);\n  }\n\n  /**\n   * Called when the module is mounted to AFS\n   */\n  onMount(afs: AFSRoot): void {\n    this.capabilities = createCapabilities(afs, this.options.capabilities ?? {});\n  }\n\n  // ========== List Handlers ==========\n\n  /**\n   * List root directory children\n   */\n  @List(\"/\")\n  async listRoot(_ctx: RouteContext): Promise<AFSListResult> {\n    return {\n      data: [\n        this.buildScriptsDirectoryEntry(),\n        this.buildTemplatesDirectoryEntry(),\n        this.buildMetricsDirectoryEntry(),\n        this.buildAuditDirectoryEntry(),\n      ],\n    };\n  }\n\n  /**\n   * List all scripts\n   */\n  @List(\"/scripts\")\n  async listScripts(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [];\n    for (const [name, script] of this.scripts) {\n      entries.push(this.buildScriptEntry(name, script));\n    }\n    return { data: entries };\n  }\n\n  /**\n   * List script children (@history, @execHistory)\n   */\n  @List(\"/scripts/:scriptName\")\n  async listScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    const basePath = joinURL(\"/scripts\", ctx.params.scriptName);\n    return {\n      data: [\n        {\n          id: joinURL(basePath, \"@history\"),\n          path: joinURL(basePath, \"@history\"),\n          summary: \"Version history\",\n          meta: { kind: \"sandbox:history\", type: \"history\", count: (script.versions ?? []).length },\n        },\n        {\n          id: joinURL(basePath, \"@execHistory\"),\n          path: joinURL(basePath, \"@execHistory\"),\n          summary: \"Execution history\",\n          meta: {\n            kind: \"sandbox:exec-history\",\n            type: \"execHistory\",\n            count: (script.execHistory ?? []).length,\n          },\n        },\n      ],\n    };\n  }\n\n  /**\n   * List @history children (leaf node)\n   */\n  @List(\"/scripts/:scriptName/@history\")\n  async listScriptHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List @execHistory children (leaf node)\n   */\n  @List(\"/scripts/:scriptName/@execHistory\")\n  async listScriptExecHistoryEntries(\n    ctx: RouteContext<{ scriptName: string }>,\n  ): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List all templates\n   */\n  @List(\"/templates\")\n  async listTemplates(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries = BUILT_IN_TEMPLATES.map((t) => ({\n      id: joinURL(\"/templates\", t.name),\n      path: joinURL(\"/templates\", t.name),\n      summary: t.description,\n      meta: {\n        kind: \"sandbox:template\",\n        type: \"template\",\n        category: t.category,\n        variables: t.variables,\n      },\n    }));\n    return { data: entries };\n  }\n\n  /**\n   * List template children (leaf node)\n   */\n  @List(\"/templates/:templateName\")\n  async listTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSListResult> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List metrics children\n   */\n  @List(\"/metrics\")\n  async listMetrics(_ctx: RouteContext): Promise<AFSListResult> {\n    if (this.scriptMetrics.size === 0) {\n      return { data: [] };\n    }\n    return {\n      data: [\n        {\n          id: \"/metrics/scripts\",\n          path: \"/metrics/scripts\",\n          summary: \"Per-script execution metrics\",\n          meta: {\n            kind: \"sandbox:directory\",\n            type: \"directory\",\n            childrenCount: this.scriptMetrics.size,\n          },\n        },\n      ],\n    };\n  }\n\n  /**\n   * List per-script metrics\n   */\n  @List(\"/metrics/scripts\")\n  async listScriptMetrics(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [];\n    for (const [name, metrics] of this.scriptMetrics) {\n      entries.push({\n        id: joinURL(\"/metrics/scripts\", name),\n        path: joinURL(\"/metrics/scripts\", name),\n        meta: {\n          kind: \"sandbox:metrics\",\n          type: \"script-metrics\",\n          totalExecutions: metrics.totalExecutions,\n        },\n      });\n    }\n    return { data: entries };\n  }\n\n  /**\n   * List audit children (leaf node)\n   */\n  @List(\"/audit\")\n  async listAudit(_ctx: RouteContext): Promise<AFSListResult> {\n    return { data: [] };\n  }\n\n  // ========== Actions Listing ==========\n\n  /**\n   * List root-level actions\n   */\n  @Actions(\"/\")\n  async listRootActions(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [\n      {\n        id: \"run\",\n        path: \"/.actions/run\",\n        summary: \"Run inline JavaScript code\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"run\",\n          description: \"Execute inline JavaScript code\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              code: { type: \"string\", description: \"JavaScript code to execute\" },\n              args: { type: \"object\", description: \"Arguments to pass to the code\" },\n            },\n            required: [\"code\"],\n          },\n        },\n      },\n      {\n        id: \"validate\",\n        path: \"/.actions/validate\",\n        summary: \"Validate JavaScript syntax\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"validate\",\n          description: \"Check JavaScript code for syntax errors\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              code: { type: \"string\", description: \"JavaScript code to validate\" },\n            },\n            required: [\"code\"],\n          },\n        },\n      },\n      {\n        id: \"promote\",\n        path: \"/.actions/promote\",\n        summary: \"Promote a script to a formal action\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"promote\",\n          description: \"Promote a tested script to a formal action\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              script: { type: \"string\", description: \"Script name to promote\" },\n              name: { type: \"string\", description: \"Action name\" },\n              description: { type: \"string\", description: \"Action description\" },\n              inputSchema: { type: \"object\", description: \"JSON schema for inputs\" },\n              outputSchema: { type: \"object\", description: \"JSON schema for outputs\" },\n            },\n            required: [\"script\", \"name\"],\n          },\n        },\n      },\n      {\n        id: \"create-from-template\",\n        path: \"/.actions/create-from-template\",\n        summary: \"Create a script from a template\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"create-from-template\",\n          description: \"Create a new script from a template\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              template: { type: \"string\", description: \"Template name\" },\n              name: { type: \"string\", description: \"Script name to create\" },\n              variables: { type: \"object\", description: \"Template variables\" },\n            },\n            required: [\"template\", \"name\"],\n          },\n        },\n      },\n    ];\n\n    // Add promoted actions\n    for (const [actionName, action] of this.promotedActions) {\n      entries.push({\n        id: actionName,\n        path: joinURL(\"/.actions\", actionName),\n        summary: action.description ?? `Promoted action: ${actionName}`,\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: actionName,\n          description: action.description ?? `Execute ${actionName}`,\n          inputSchema: action.inputSchema,\n          outputSchema: action.outputSchema,\n        },\n      });\n    }\n\n    return { data: entries };\n  }\n\n  /**\n   * List script-level actions\n   */\n  @Actions(\"/scripts/:scriptName\")\n  async listScriptActions(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n\n    const basePath = joinURL(\"/scripts\", ctx.params.scriptName, \".actions\");\n    return {\n      data: [\n        {\n          id: \"exec\",\n          path: joinURL(basePath, \"exec\"),\n          summary: `Execute script ${name}`,\n          meta: {\n            kind: \"afs:executable\",\n            kinds: [\"afs:executable\", \"afs:node\"],\n            name: \"exec\",\n            description: `Execute the ${name} script`,\n            inputSchema: {\n              type: \"object\",\n              description: \"Arguments passed to the script's default export function\",\n            },\n          },\n        },\n      ],\n    };\n  }\n\n  // ========== Read Handlers ==========\n\n  /**\n   * Read root entry\n   */\n  @Read(\"/\")\n  async readRoot(_ctx: RouteContext): Promise<AFSEntry> {\n    const actions = [\n      { name: \"run\", description: \"Run inline JavaScript code\" },\n      { name: \"validate\", description: \"Validate JavaScript syntax\" },\n      { name: \"promote\", description: \"Promote a script to a formal action\" },\n      { name: \"create-from-template\", description: \"Create a script from a template\" },\n      ...Array.from(this.promotedActions.entries()).map(([name, action]) => ({\n        name,\n        description: action.description ?? `Promoted action: ${name}`,\n      })),\n    ];\n    return {\n      id: \"/\",\n      path: \"/\",\n      meta: { type: \"directory\", childrenCount: 4 },\n      actions,\n    };\n  }\n\n  /**\n   * Read scripts directory\n   */\n  @Read(\"/scripts\")\n  async readScriptsDir(_ctx: RouteContext): Promise<AFSEntry> {\n    return this.buildScriptsDirectoryEntry();\n  }\n\n  /**\n   * Read a specific script\n   */\n  @Read(\"/scripts/:scriptName\")\n  async readScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    return this.buildScriptEntry(name, script);\n  }\n\n  /**\n   * Read version history for a script\n   */\n  @Read(\"/scripts/:scriptName/@history\")\n  async readScriptHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const versions = script.versions ?? [];\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@history\"),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@history\"),\n      content: versions,\n      meta: { type: \"history\", count: versions.length },\n    };\n  }\n\n  /**\n   * Read a specific version\n   */\n  @Read(\"/scripts/:scriptName/@history/:version\")\n  async readScriptVersion(\n    ctx: RouteContext<{ scriptName: string; version: string }>,\n  ): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const versionNum = Number.parseInt(ctx.params.version, 10);\n    if (Number.isNaN(versionNum) || versionNum < 0) {\n      throw new AFSNotFoundError(ctx.path, \"Invalid version number\");\n    }\n    const versions = script.versions ?? [];\n    const version = versions.find((v) => v.version === versionNum);\n    if (!version) {\n      throw new AFSNotFoundError(ctx.path, `Version ${versionNum} not found`);\n    }\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@history\", String(versionNum)),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@history\", String(versionNum)),\n      content: version.content,\n      meta: {\n        type: \"version\",\n        version: version.version,\n        timestamp: version.timestamp,\n        size: version.size,\n      },\n    };\n  }\n\n  /**\n   * Read execution history for a script\n   */\n  @Read(\"/scripts/:scriptName/@execHistory\")\n  async readScriptExecHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const execHistory = script.execHistory ?? [];\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@execHistory\"),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@execHistory\"),\n      content: execHistory,\n      meta: { type: \"execHistory\", count: execHistory.length },\n    };\n  }\n\n  /**\n   * Read templates directory\n   */\n  @Read(\"/templates\")\n  async readTemplatesDir(_ctx: RouteContext): Promise<AFSEntry> {\n    return this.buildTemplatesDirectoryEntry();\n  }\n\n  /**\n   * Read a specific template\n   */\n  @Read(\"/templates/:templateName\")\n  async readTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSEntry> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path, `Template not found: ${ctx.params.templateName}`);\n    }\n    return {\n      id: joinURL(\"/templates\", template.name),\n      path: joinURL(\"/templates\", template.name),\n      content: template.content,\n      meta: {\n        type: \"template\",\n        description: template.description,\n        category: template.category,\n        variables: template.variables,\n      },\n    };\n  }\n\n  /**\n   * Read metrics\n   */\n  @Read(\"/metrics\")\n  async readMetrics(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/metrics\",\n      path: \"/metrics\",\n      content: this.metrics,\n      meta: { type: \"metrics\" },\n    };\n  }\n\n  /**\n   * Read per-script metrics\n   */\n  @Read(\"/metrics/scripts/:scriptName\")\n  async readScriptMetrics(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const scriptMetrics = this.scriptMetrics.get(ctx.params.scriptName);\n    if (!scriptMetrics) {\n      throw new AFSNotFoundError(ctx.path, `Script metrics not found: ${ctx.params.scriptName}`);\n    }\n    return {\n      id: joinURL(\"/metrics/scripts\", ctx.params.scriptName),\n      path: joinURL(\"/metrics/scripts\", ctx.params.scriptName),\n      content: { executionCount: scriptMetrics.totalExecutions, ...scriptMetrics },\n      meta: { type: \"script-metrics\", scriptName: ctx.params.scriptName },\n    };\n  }\n\n  /**\n   * Read audit log\n   */\n  @Read(\"/audit\")\n  async readAudit(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/audit\",\n      path: \"/audit\",\n      content: this.auditLog,\n      meta: { type: \"audit\", count: this.auditLog.length },\n    };\n  }\n\n  // ========== Meta Handlers ==========\n\n  /**\n   * Root metadata\n   */\n  @Meta(\"/\")\n  async readRootMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/.meta\",\n      path: \"/.meta\",\n      content: { type: \"directory\", childrenCount: 4 },\n      meta: { type: \"directory\", childrenCount: 4 },\n    };\n  }\n\n  /**\n   * Scripts directory metadata\n   */\n  @Meta(\"/scripts\")\n  async readScriptsMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/scripts/.meta\",\n      path: \"/scripts/.meta\",\n      content: { type: \"directory\", childrenCount: this.scripts.size },\n      meta: { type: \"directory\", childrenCount: this.scripts.size },\n    };\n  }\n\n  /**\n   * Script metadata\n   */\n  @Meta(\"/scripts/:scriptName\")\n  async readScriptMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const entry = this.buildScriptEntry(name, script);\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \".meta\"),\n      content: entry.meta ?? {},\n      meta: entry.meta ?? {},\n    };\n  }\n\n  /**\n   * @history metadata\n   */\n  @Meta(\"/scripts/:scriptName/@history\")\n  async readScriptHistoryMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const meta = { type: \"history\", count: (script.versions ?? []).length };\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \"@history\", \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \"@history\", \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * @execHistory metadata\n   */\n  @Meta(\"/scripts/:scriptName/@execHistory\")\n  async readScriptExecHistoryMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const meta = { type: \"execHistory\", count: (script.execHistory ?? []).length };\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \"@execHistory\", \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \"@execHistory\", \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * Templates directory metadata\n   */\n  @Meta(\"/templates\")\n  async readTemplatesMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/templates/.meta\",\n      path: \"/templates/.meta\",\n      content: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n      meta: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n    };\n  }\n\n  /**\n   * Template metadata\n   */\n  @Meta(\"/templates/:templateName\")\n  async readTemplateMeta(ctx: RouteContext<{ templateName: string }>): Promise<AFSEntry> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path, `Template not found: ${ctx.params.templateName}`);\n    }\n    const meta = {\n      type: \"template\",\n      description: template.description,\n      category: template.category,\n      variables: template.variables,\n    };\n    return {\n      id: joinURL(\"/templates\", ctx.params.templateName, \".meta\"),\n      path: joinURL(\"/templates\", ctx.params.templateName, \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * Metrics metadata\n   */\n  @Meta(\"/metrics\")\n  async readMetricsMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/metrics/.meta\",\n      path: \"/metrics/.meta\",\n      content: { type: \"metrics\" },\n      meta: { type: \"metrics\" },\n    };\n  }\n\n  /**\n   * Audit metadata\n   */\n  @Meta(\"/audit\")\n  async readAuditMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/audit/.meta\",\n      path: \"/audit/.meta\",\n      content: { type: \"audit\", entryCount: this.auditLog.length },\n      meta: { type: \"audit\", entryCount: this.auditLog.length },\n    };\n  }\n\n  // ========== Write Handlers ==========\n\n  /**\n   * Write (create or update) a script\n   */\n  @Write(\"/scripts/:scriptName\")\n  async writeScript(\n    ctx: RouteContext<{ scriptName: string }>,\n    entry: AFSWriteEntryPayload,\n  ): Promise<AFSWriteResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n\n    const now = new Date();\n    const existing = this.scripts.get(name);\n\n    // Handle meta-only writes — preserve existing content\n    if (entry.content === undefined && existing) {\n      const meta: ScriptMetadata = {\n        name,\n        createdAt: existing.meta.createdAt,\n        updatedAt: now,\n        lastRun: existing.meta.lastRun,\n        runCount: existing.meta.runCount,\n      };\n      const storedScript: StoredScript = {\n        content: existing.content,\n        meta,\n        versions: existing.versions,\n        execHistory: existing.execHistory,\n      };\n      this.scripts.set(name, storedScript);\n      return {\n        data: this.buildScriptEntry(name, storedScript),\n        message: \"Script updated\",\n      };\n    }\n\n    const content =\n      typeof entry.content === \"string\" ? entry.content : JSON.stringify(entry.content);\n\n    // Build version history\n    const versions: ScriptVersion[] = existing?.versions ? [...existing.versions] : [];\n    const maxVersion = versions.length > 0 ? Math.max(...versions.map((v) => v.version)) : 0;\n    const newVersion: ScriptVersion = {\n      version: maxVersion + 1,\n      content,\n      timestamp: now,\n      size: new TextEncoder().encode(content).length,\n    };\n    versions.push(newVersion);\n\n    // Keep only last MAX_VERSIONS\n    while (versions.length > MAX_VERSIONS) {\n      versions.shift();\n    }\n\n    const meta: ScriptMetadata = {\n      name,\n      createdAt: existing?.meta.createdAt ?? now,\n      updatedAt: now,\n      lastRun: existing?.meta.lastRun,\n      runCount: existing?.meta.runCount ?? 0,\n    };\n\n    const storedScript: StoredScript = {\n      content,\n      meta,\n      versions,\n      execHistory: existing?.execHistory ?? [],\n    };\n    this.scripts.set(name, storedScript);\n\n    return {\n      data: this.buildScriptEntry(name, storedScript),\n      message: existing ? \"Script updated\" : \"Script created\",\n    };\n  }\n\n  /**\n   * Reject writes to @history paths\n   */\n  @Write(\"/scripts/:scriptName/@history/:version\")\n  async writeScriptHistory(\n    _ctx: RouteContext<{ scriptName: string; version: string }>,\n    _entry: AFSWriteEntryPayload,\n  ): Promise<AFSWriteResult> {\n    throw new Error(\"Cannot write to history directly\");\n  }\n\n  // ========== Delete Handlers ==========\n\n  /**\n   * Delete a stored script\n   */\n  @Delete(\"/scripts/:scriptName\")\n  async deleteScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSDeleteResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    this.scripts.delete(name);\n    this.scriptMetrics.delete(name);\n    return { message: `Script '${name}' deleted` };\n  }\n\n  /**\n   * Catch-all delete handler for unsupported paths\n   */\n  @Delete(\"/:path*\")\n  async deleteCatchAll(ctx: RouteContext<{ path: string }>): Promise<AFSDeleteResult> {\n    throw new AFSNotFoundError(ctx.path);\n  }\n\n  // ========== Exec Handlers ==========\n\n  /**\n   * Execute a stored script directly\n   */\n  @Actions.Exec(\"/scripts/:scriptName\", \"exec\")\n  async execScript(\n    ctx: RouteContext<{ scriptName: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      return {\n        success: false,\n        data: {\n          error: `Script not found: ${name}`,\n          logs: [],\n          duration: 0,\n        },\n      };\n    }\n\n    const options = (ctx.options as { context?: { userId?: string; sessionId?: string } }) ?? {};\n\n    // Check rate limit\n    const rateCheck = this.checkRateLimit(options.context?.userId, name);\n    if (rateCheck.limited) {\n      return {\n        success: false,\n        data: {\n          error: `Rate limit exceeded: ${rateCheck.reason}`,\n          logs: [],\n          duration: 0,\n          rateLimited: true,\n        },\n      };\n    }\n\n    // Record execution for rate limiting\n    this.recordExecution(options.context?.userId, name);\n\n    // Update metadata\n    script.meta.lastRun = new Date();\n    script.meta.runCount++;\n\n    // Generate execution context\n    const executionId = generateExecutionId();\n    const timestamp = Date.now();\n\n    const execContext: ExecutionContext = {\n      args,\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      timestamp,\n      executionId,\n    };\n\n    // Log audit event\n    this.logAudit({\n      type: \"execution\",\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      scriptName: name,\n      details: { args: sanitizeArgs(args) },\n    });\n\n    const result = await this.runtime.execute(script.content, this.capabilities, execContext);\n    const scriptExecResult = result as ExecutionResult;\n\n    // Update metrics\n    this.updateMetrics(name, scriptExecResult);\n\n    // Record execution history\n    const historyEntry: ExecutionHistoryEntry = {\n      executionId,\n      timestamp: new Date(timestamp),\n      success: scriptExecResult.success,\n      duration: scriptExecResult.duration,\n      error: scriptExecResult.error,\n      timedOut: scriptExecResult.timedOut,\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      args: sanitizeArgs(args),\n    };\n\n    script.execHistory = script.execHistory ?? [];\n    script.execHistory.push(historyEntry);\n\n    while (script.execHistory.length > MAX_EXEC_HISTORY) {\n      script.execHistory.shift();\n    }\n\n    const { success, ...data } = result as unknown as {\n      success: boolean;\n      [key: string]: unknown;\n    };\n    return { success, data: data as Record<string, unknown> };\n  }\n\n  /**\n   * Execute a stored script directly via exec(\"/scripts/:name\")\n   */\n  @Exec(\"/scripts/:scriptName\")\n  async execScriptDirect(\n    ctx: RouteContext<{ scriptName: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    return this.execScript(ctx, args);\n  }\n\n  /**\n   * Execute root-level actions (run, validate, promote, create-from-template, promoted actions)\n   */\n  @Actions.Exec(\"/\")\n  async execRootAction(\n    ctx: RouteContext<{ action: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    const actionName = ctx.params.action;\n    return this.executeAction(actionName, args, ctx);\n  }\n\n  // ========== Stat Handlers ==========\n\n  /**\n   * Stat root → sandbox overview\n   */\n  @Stat(\"/\")\n  async statRoot(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/\",\n        path: \"/\",\n        meta: {\n          type: \"directory\",\n          childrenCount: 4,\n          scriptCount: this.scripts.size,\n          templateCount: BUILT_IN_TEMPLATES.length,\n          totalExecutions: this.metrics.totalExecutions,\n          successCount: this.metrics.successCount,\n          failureCount: this.metrics.failureCount,\n        },\n      },\n    };\n  }\n\n  /**\n   * Stat scripts directory\n   */\n  @Stat(\"/scripts\")\n  async statScriptsDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/scripts\",\n        path: \"/scripts\",\n        meta: { type: \"directory\", childrenCount: this.scripts.size },\n      },\n    };\n  }\n\n  /**\n   * Stat a specific script → runCount, lastRun, versionCount\n   */\n  @Stat(\"/scripts/:scriptName\")\n  async statScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSStatResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    return {\n      data: {\n        id: joinURL(\"/scripts\", `${name}.js`),\n        path: joinURL(\"/scripts\", `${name}.js`),\n        createdAt: script.meta.createdAt,\n        updatedAt: script.meta.updatedAt,\n        meta: {\n          type: \"file\",\n          kind: \"afs:script\",\n          scriptName: name,\n          runCount: script.meta.runCount,\n          lastRun: script.meta.lastRun ?? null,\n          versionCount: (script.versions ?? []).length,\n        },\n      },\n    };\n  }\n\n  /**\n   * Stat templates directory\n   */\n  @Stat(\"/templates\")\n  async statTemplatesDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/templates\",\n        path: \"/templates\",\n        meta: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n      },\n    };\n  }\n\n  /**\n   * Stat a specific template\n   */\n  @Stat(\"/templates/:templateName\")\n  async statTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSStatResult> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return {\n      data: {\n        id: joinURL(\"/templates\", template.name),\n        path: joinURL(\"/templates\", template.name),\n        meta: { type: \"template\", category: template.category },\n      },\n    };\n  }\n\n  /**\n   * Stat metrics directory\n   */\n  @Stat(\"/metrics\")\n  async statMetricsDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/metrics\",\n        path: \"/metrics\",\n        meta: { type: \"metrics\", childrenCount: this.scriptMetrics.size > 0 ? 1 : 0 },\n      },\n    };\n  }\n\n  /**\n   * Stat audit directory\n   */\n  @Stat(\"/audit\")\n  async statAuditDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/audit\",\n        path: \"/audit\",\n        meta: { type: \"audit\", entryCount: this.auditLog.length },\n      },\n    };\n  }\n\n  // ========== Explain Handlers ==========\n\n  /**\n   * Explain root → sandbox overview with security limits, templates, metrics\n   */\n  @Explain(\"/\")\n  async explainRoot(_ctx: RouteContext): Promise<AFSExplainResult> {\n    const lines: string[] = [];\n    lines.push(`# ${this.name}`);\n    lines.push(\"\");\n    if (this.description) {\n      lines.push(this.description);\n      lines.push(\"\");\n    }\n    lines.push(\"## Overview\");\n    lines.push(\"\");\n    lines.push(`- **Scripts**: ${this.scripts.size}`);\n    lines.push(`- **Templates**: ${BUILT_IN_TEMPLATES.length}`);\n    lines.push(`- **Total Executions**: ${this.metrics.totalExecutions}`);\n    lines.push(\n      `- **Success Rate**: ${this.metrics.totalExecutions > 0 ? ((this.metrics.successCount / this.metrics.totalExecutions) * 100).toFixed(1) : 0}%`,\n    );\n    lines.push(\"\");\n    lines.push(\"## Security & Isolation\");\n    lines.push(\"\");\n    lines.push(\"Scripts execute in an isolated sandbox environment with:\");\n    lines.push(`- **Timeout**: ${this.options.runtime?.timeout ?? 5000}ms`);\n    lines.push(`- **Memory Limit**: ${this.options.runtime?.memoryLimit ?? \"default\"}MB`);\n    if (this.options.capabilities?.afs) {\n      const afsCaps = this.options.capabilities.afs;\n      lines.push(`- **AFS Read**: ${afsCaps.read ?? false}`);\n      lines.push(`- **AFS Write**: ${afsCaps.write ?? false}`);\n      if (afsCaps.allowPaths?.length) {\n        lines.push(`- **Allowed Paths**: ${afsCaps.allowPaths.join(\", \")}`);\n      }\n      if (afsCaps.denyPaths?.length) {\n        lines.push(`- **Denied Paths**: ${afsCaps.denyPaths.join(\", \")}`);\n      }\n    }\n    lines.push(\"\");\n    lines.push(\"## Templates\");\n    lines.push(\"\");\n    for (const t of BUILT_IN_TEMPLATES) {\n      lines.push(`- **${t.name}** (${t.category}): ${t.description}`);\n    }\n    lines.push(\"\");\n    if (this.scripts.size > 0) {\n      lines.push(\"## Scripts\");\n      lines.push(\"\");\n      for (const [name, script] of this.scripts) {\n        const lastRun = script.meta.lastRun ? new Date(script.meta.lastRun).toISOString() : \"never\";\n        lines.push(`- **${name}.js**: ${script.meta.runCount} execution(s), last run: ${lastRun}`);\n      }\n      lines.push(\"\");\n    }\n\n    return { format: \"markdown\", content: lines.join(\"\\n\") };\n  }\n\n  /**\n   * Explain a specific script → run count, code summary\n   */\n  @Explain(\"/scripts/:scriptName\")\n  async explainScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSExplainResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n\n    const lines: string[] = [];\n    lines.push(`# Script: ${name}.js`);\n    lines.push(\"\");\n    lines.push(\"## Metadata\");\n    lines.push(\"\");\n    lines.push(`- **Created**: ${new Date(script.meta.createdAt).toISOString()}`);\n    lines.push(`- **Updated**: ${new Date(script.meta.updatedAt).toISOString()}`);\n    lines.push(`- **Run Count**: ${script.meta.runCount}`);\n    lines.push(\n      `- **Last Run**: ${script.meta.lastRun ? new Date(script.meta.lastRun).toISOString() : \"never\"}`,\n    );\n    lines.push(`- **Versions**: ${(script.versions ?? []).length}`);\n    lines.push(`- **Size**: ${new TextEncoder().encode(script.content).length} bytes`);\n    lines.push(\"\");\n    lines.push(\"## Code Summary\");\n    lines.push(\"\");\n    const codeLines = script.content.split(\"\\n\");\n    lines.push(`- **Lines**: ${codeLines.length}`);\n    const firstLine = codeLines[0]?.trim() ?? \"\";\n    if (firstLine.startsWith(\"//\")) {\n      lines.push(`- **Description**: ${firstLine.slice(2).trim()}`);\n    }\n    lines.push(\"\");\n\n    return { format: \"markdown\", content: lines.join(\"\\n\") };\n  }\n\n  // ========== Capabilities ==========\n\n  /**\n   * Read /.meta/.capabilities → capabilities manifest with action catalog\n   */\n  @Read(\"/.meta/.capabilities\")\n  async readCapabilities(_ctx: RouteContext): Promise<AFSEntry> {\n    const rootActionCatalog = [\n      { name: \"run\", description: \"Execute inline JavaScript code\" },\n      { name: \"validate\", description: \"Validate JavaScript syntax\" },\n      { name: \"promote\", description: \"Promote a script to a formal action\" },\n      { name: \"create-from-template\", description: \"Create a script from a template\" },\n    ];\n\n    // Add promoted actions\n    for (const [actionName, action] of this.promotedActions) {\n      rootActionCatalog.push({\n        name: actionName,\n        description: action.description ?? `Promoted action: ${actionName}`,\n      });\n    }\n\n    const manifest: CapabilitiesManifest = {\n      schemaVersion: 1,\n      provider: this.name,\n      description: this.description,\n      tools: [],\n      operations: this.getOperationsDeclaration(),\n      actions: [\n        {\n          description: \"Root-level sandbox actions\",\n          catalog: rootActionCatalog,\n          discovery: { pathTemplate: \"/.actions\" },\n        },\n        {\n          kind: \"afs:script\",\n          description: \"Script-level actions\",\n          catalog: [{ name: \"exec\", description: \"Execute the script\" }],\n          discovery: { pathTemplate: \"/scripts/:scriptName/.actions\" },\n        },\n      ],\n    };\n\n    return {\n      id: \"/.meta/.capabilities\",\n      path: \"/.meta/.capabilities\",\n      content: manifest,\n      meta: {\n        kind: \"afs:capabilities\",\n        description: \"Sandbox provider capabilities manifest\",\n        operations: [\"list\", \"read\", \"write\", \"delete\", \"exec\", \"stat\", \"explain\"],\n      },\n    };\n  }\n\n  // ========== Private Helpers ==========\n\n  /**\n   * Build AFSEntry for a stored script\n   */\n  private buildScriptEntry(name: string, script: StoredScript): AFSEntry {\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`),\n      path: joinURL(\"/scripts\", `${name}.js`),\n      content: script.content,\n      createdAt: script.meta.createdAt,\n      updatedAt: script.meta.updatedAt,\n      meta: {\n        type: \"file\",\n        kind: \"afs:script\",\n        kinds: [\"afs:script\", \"afs:executable\", \"afs:node\"],\n        childrenCount: 2,\n        scriptName: name,\n        lastRun: script.meta.lastRun,\n        runCount: script.meta.runCount,\n      },\n      actions: [{ name: \"exec\", description: `Execute script ${name}` }],\n    };\n  }\n\n  /**\n   * Build scripts directory entry\n   */\n  private buildScriptsDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/scripts\",\n      path: \"/scripts\",\n      summary: \"Stored JavaScript scripts\",\n      meta: { kind: \"sandbox:directory\", type: \"directory\", childrenCount: this.scripts.size },\n    };\n  }\n\n  /**\n   * Build templates directory entry\n   */\n  private buildTemplatesDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/templates\",\n      path: \"/templates\",\n      summary: \"Script templates\",\n      meta: {\n        kind: \"sandbox:directory\",\n        type: \"directory\",\n        childrenCount: BUILT_IN_TEMPLATES.length,\n      },\n    };\n  }\n\n  /**\n   * Build metrics directory entry\n   */\n  private buildMetricsDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/metrics\",\n      path: \"/metrics\",\n      summary: \"Execution metrics\",\n      meta: {\n        kind: \"sandbox:directory\",\n        type: \"metrics\",\n        childrenCount: this.scriptMetrics.size > 0 ? 1 : 0,\n      },\n    };\n  }\n\n  /**\n   * Build audit directory entry\n   */\n  private buildAuditDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/audit\",\n      path: \"/audit\",\n      summary: \"Audit log\",\n      meta: { kind: \"sandbox:directory\", type: \"audit\", entryCount: this.auditLog.length },\n    };\n  }\n\n  /**\n   * Log an audit event\n   */\n  private logAudit(event: Omit<AuditEvent, \"timestamp\">): void {\n    if (!this.auditConfig?.enabled) return;\n\n    const fullEvent: AuditEvent = {\n      ...event,\n      timestamp: Date.now(),\n    };\n\n    this.auditLog.push(fullEvent);\n    const maxEntries = this.auditConfig.maxEntries ?? 1000;\n    while (this.auditLog.length > maxEntries) {\n      this.auditLog.shift();\n    }\n\n    if (this.auditConfig.onEvent) {\n      try {\n        this.auditConfig.onEvent(fullEvent);\n      } catch {\n        // Ignore callback errors\n      }\n    }\n  }\n\n  /**\n   * Check if execution is rate limited\n   */\n  private checkRateLimit(\n    userId?: string,\n    scriptName?: string,\n  ): { limited: boolean; reason?: string } {\n    if (!this.rateLimitConfig) return { limited: false };\n\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const cleanTimestamps = (arr: number[]) => arr.filter((t) => t > oneMinuteAgo);\n\n    if (this.rateLimitConfig.maxExecutionsPerMinute) {\n      const recentExecutions = cleanTimestamps(this.executionTimestamps);\n      this.executionTimestamps.length = 0;\n      this.executionTimestamps.push(...recentExecutions);\n      if (recentExecutions.length >= this.rateLimitConfig.maxExecutionsPerMinute) {\n        return { limited: true, reason: \"Global rate limit exceeded\" };\n      }\n    }\n\n    if (userId && this.rateLimitConfig.maxExecutionsPerMinutePerUser) {\n      const userTimestamps = cleanTimestamps(this.userExecutionTimestamps.get(userId) ?? []);\n      this.userExecutionTimestamps.set(userId, userTimestamps);\n      if (userTimestamps.length >= this.rateLimitConfig.maxExecutionsPerMinutePerUser) {\n        return { limited: true, reason: \"Per-user rate limit exceeded\" };\n      }\n    }\n\n    if (scriptName && this.rateLimitConfig.maxExecutionsPerMinutePerScript) {\n      const scriptTimestamps = cleanTimestamps(\n        this.scriptExecutionTimestamps.get(scriptName) ?? [],\n      );\n      this.scriptExecutionTimestamps.set(scriptName, scriptTimestamps);\n      if (scriptTimestamps.length >= this.rateLimitConfig.maxExecutionsPerMinutePerScript) {\n        return { limited: true, reason: \"Per-script rate limit exceeded\" };\n      }\n    }\n\n    return { limited: false };\n  }\n\n  /**\n   * Record execution for rate limiting\n   */\n  private recordExecution(userId?: string, scriptName?: string): void {\n    const now = Date.now();\n    this.executionTimestamps.push(now);\n\n    if (userId) {\n      const userTimestamps = this.userExecutionTimestamps.get(userId) ?? [];\n      userTimestamps.push(now);\n      this.userExecutionTimestamps.set(userId, userTimestamps);\n    }\n\n    if (scriptName) {\n      const scriptTimestamps = this.scriptExecutionTimestamps.get(scriptName) ?? [];\n      scriptTimestamps.push(now);\n      this.scriptExecutionTimestamps.set(scriptName, scriptTimestamps);\n    }\n  }\n\n  /**\n   * Update execution metrics\n   */\n  private updateMetrics(scriptName: string | undefined, result: ExecutionResult): void {\n    this.metrics.totalExecutions++;\n    this.metrics.totalDuration += result.duration;\n    this.metrics.averageDuration = this.metrics.totalDuration / this.metrics.totalExecutions;\n\n    if (result.success) {\n      this.metrics.successCount++;\n    } else {\n      this.metrics.failureCount++;\n    }\n\n    if (result.timedOut) {\n      this.metrics.timeoutCount++;\n    }\n\n    if (scriptName) {\n      let scriptMetrics = this.scriptMetrics.get(scriptName);\n      if (!scriptMetrics) {\n        scriptMetrics = {\n          totalExecutions: 0,\n          successCount: 0,\n          failureCount: 0,\n          timeoutCount: 0,\n          averageDuration: 0,\n          totalDuration: 0,\n        };\n        this.scriptMetrics.set(scriptName, scriptMetrics);\n      }\n\n      scriptMetrics.totalExecutions++;\n      scriptMetrics.totalDuration += result.duration;\n      scriptMetrics.averageDuration = scriptMetrics.totalDuration / scriptMetrics.totalExecutions;\n\n      if (result.success) {\n        scriptMetrics.successCount++;\n      } else {\n        scriptMetrics.failureCount++;\n      }\n\n      if (result.timedOut) {\n        scriptMetrics.timeoutCount++;\n      }\n    }\n  }\n\n  /**\n   * Validate action name\n   */\n  private isValidActionName(name: string): { valid: boolean; error?: string } {\n    if (!name || typeof name !== \"string\") {\n      return { valid: false, error: \"Action name is required\" };\n    }\n    if (RESERVED_ACTION_NAMES.includes(name)) {\n      return { valid: false, error: `Action name \"${name}\" is reserved` };\n    }\n    if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(name)) {\n      return {\n        valid: false,\n        error:\n          \"Action name must start with a letter and contain only letters, numbers, hyphens, and underscores\",\n      };\n    }\n    if (name.includes(\"..\") || name.includes(\"/\") || name.includes(\"\\\\\")) {\n      return { valid: false, error: \"Action name cannot contain path separators\" };\n    }\n    return { valid: true };\n  }\n\n  /**\n   * Apply template variables to content\n   */\n  private applyTemplate(content: string, variables: Record<string, string>): string {\n    let result = content;\n    for (const [key, value] of Object.entries(variables)) {\n      result = result.replace(new RegExp(`\\\\{\\\\{${key}\\\\}\\\\}`, \"g\"), value);\n    }\n    return result;\n  }\n\n  /**\n   * Execute a built-in or promoted action\n   */\n  private async executeAction(\n    actionName: string,\n    args: Record<string, unknown>,\n    ctx: RouteContext,\n  ): Promise<AFSExecResult> {\n    const options = (ctx.options as { context?: { userId?: string; sessionId?: string } }) ?? {};\n\n    if (actionName === \"run\") {\n      const code = args.code;\n      if (typeof code !== \"string\") {\n        throw new Error(\"action 'run' requires 'code' parameter as string\");\n      }\n\n      const rateCheck = this.checkRateLimit(options.context?.userId, undefined);\n      if (rateCheck.limited) {\n        return {\n          success: false,\n          data: {\n            error: `Rate limit exceeded: ${rateCheck.reason}`,\n            logs: [],\n            duration: 0,\n            rateLimited: true,\n          },\n        };\n      }\n\n      this.recordExecution(options.context?.userId, undefined);\n\n      const executionId = generateExecutionId();\n      const timestamp = Date.now();\n\n      const execContext: ExecutionContext = {\n        args: (args.args as Record<string, unknown>) ?? {},\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        timestamp,\n        executionId,\n      };\n\n      this.logAudit({\n        type: \"execution\",\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        actionName: \"run\",\n        details: { codeLength: code.length },\n      });\n\n      const result = await this.runtime.execute(code, this.capabilities, execContext);\n      const runExecResult = result as ExecutionResult;\n\n      this.updateMetrics(undefined, runExecResult);\n\n      const { success: runSuccess, ...runData } = result as unknown as {\n        success: boolean;\n        [key: string]: unknown;\n      };\n      return { success: runSuccess, data: runData as Record<string, unknown> };\n    }\n\n    if (actionName === \"validate\") {\n      const code = args.code;\n      if (typeof code !== \"string\") {\n        throw new Error(\"action 'validate' requires 'code' parameter as string\");\n      }\n\n      try {\n        new Function(`\"use strict\"; return async () => { ${code} }`);\n        return {\n          success: true,\n          data: { valid: true, message: \"Syntax is valid\" },\n        };\n      } catch (error) {\n        return {\n          success: true,\n          data: {\n            valid: false,\n            error: error instanceof Error ? error.message : String(error),\n          },\n        };\n      }\n    }\n\n    if (actionName === \"rollback\") {\n      const scriptName = args.script;\n      const version = args.version;\n\n      if (typeof scriptName !== \"string\") {\n        throw new Error(\"action 'rollback' requires 'script' parameter as string\");\n      }\n      if (typeof version !== \"number\" || version < 1) {\n        throw new Error(\"action 'rollback' requires 'version' parameter as positive number\");\n      }\n\n      const script = this.scripts.get(scriptName);\n      if (!script) {\n        return { success: false, data: { error: `Script not found: ${scriptName}` } };\n      }\n\n      const versions = script.versions ?? [];\n      const targetVersion = versions.find((v) => v.version === version);\n      if (!targetVersion) {\n        return { success: false, data: { error: `Version ${version} not found` } };\n      }\n\n      await this.writeScript(\n        {\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n          params: { scriptName: `${scriptName}.js` },\n          options: {},\n        },\n        { content: targetVersion.content },\n      );\n\n      return {\n        success: true,\n        data: {\n          message: `Rolled back to version ${version}`,\n          newVersion: script.versions?.length ?? 0,\n        },\n      };\n    }\n\n    if (actionName === \"promote\") {\n      const scriptName = args.script as string | undefined;\n      const actionNameArg = args.name as string | undefined;\n\n      if (!scriptName || typeof scriptName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'promote' requires 'script' parameter as string\" },\n        };\n      }\n      if (!actionNameArg || typeof actionNameArg !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'promote' requires 'name' parameter as string\" },\n        };\n      }\n\n      const nameValidation = this.isValidActionName(actionNameArg);\n      if (!nameValidation.valid) {\n        return { success: false, data: { error: nameValidation.error } };\n      }\n\n      const script = this.scripts.get(scriptName);\n      if (!script) {\n        return { success: false, data: { error: `Script not found: ${scriptName}` } };\n      }\n\n      try {\n        new Function(`\"use strict\"; return async () => { ${script.content} }`);\n      } catch (error) {\n        return {\n          success: false,\n          data: {\n            error: `Script has syntax error: ${error instanceof Error ? error.message : String(error)}`,\n          },\n        };\n      }\n\n      const currentVersion = script.versions?.length\n        ? Math.max(...script.versions.map((v) => v.version))\n        : 1;\n\n      const existing = this.promotedActions.get(actionNameArg);\n      const promotedAction: PromotedAction = {\n        name: actionNameArg,\n        description: (args.description as string) ?? existing?.description,\n        sourceScript: scriptName,\n        sourceVersion: currentVersion,\n        inputSchema: (args.inputSchema as Record<string, unknown>) ?? existing?.inputSchema,\n        outputSchema: (args.outputSchema as Record<string, unknown>) ?? existing?.outputSchema,\n        promotedAt: new Date(),\n        version: (existing?.version ?? 0) + 1,\n      };\n\n      this.promotedActions.set(actionNameArg, promotedAction);\n\n      this.logAudit({\n        type: \"action_promote\",\n        actionName: actionNameArg,\n        scriptName,\n        details: { version: promotedAction.version },\n      });\n\n      return {\n        success: true,\n        data: {\n          message: `Script '${scriptName}' promoted to action '${actionNameArg}' (version ${promotedAction.version})`,\n          action: promotedAction,\n        },\n      };\n    }\n\n    if (actionName === \"create-from-template\") {\n      const templateName = args.template as string | undefined;\n      const scriptName = args.name as string | undefined;\n      const variables = (args.variables as Record<string, string>) ?? {};\n\n      if (!templateName || typeof templateName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'create-from-template' requires 'template' parameter as string\" },\n        };\n      }\n      if (!scriptName || typeof scriptName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'create-from-template' requires 'name' parameter as string\" },\n        };\n      }\n\n      if (\n        templateName.includes(\"..\") ||\n        templateName.includes(\"/\") ||\n        templateName.includes(\"\\\\\")\n      ) {\n        return { success: false, data: { error: \"Invalid template name\" } };\n      }\n\n      const template = BUILT_IN_TEMPLATES.find((t) => t.name === templateName);\n      if (!template) {\n        return { success: false, data: { error: `Template not found: ${templateName}` } };\n      }\n\n      if (template.variables) {\n        for (const v of template.variables) {\n          if (v.required && variables[v.name] === undefined && v.default === undefined) {\n            return { success: false, data: { error: `Missing required variable: ${v.name}` } };\n          }\n        }\n        for (const v of template.variables) {\n          if (variables[v.name] === undefined && v.default !== undefined) {\n            variables[v.name] = v.default;\n          }\n        }\n      }\n\n      const content = this.applyTemplate(template.content, variables);\n\n      await this.writeScript(\n        {\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n          params: { scriptName: `${scriptName}.js` },\n          options: {},\n        },\n        { content },\n      );\n\n      return {\n        success: true,\n        data: {\n          message: `Script '${scriptName}' created from template '${templateName}'`,\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n        },\n      };\n    }\n\n    // Check if it's a promoted action\n    const promotedAction = this.promotedActions.get(actionName);\n    if (promotedAction) {\n      const script = this.scripts.get(promotedAction.sourceScript);\n      if (!script) {\n        return {\n          success: false,\n          data: {\n            error: `Source script not found: ${promotedAction.sourceScript}`,\n            logs: [],\n            duration: 0,\n          },\n        };\n      }\n\n      const rateCheck = this.checkRateLimit(options.context?.userId, promotedAction.sourceScript);\n      if (rateCheck.limited) {\n        return {\n          success: false,\n          data: {\n            error: `Rate limit exceeded: ${rateCheck.reason}`,\n            logs: [],\n            duration: 0,\n            rateLimited: true,\n          },\n        };\n      }\n\n      this.recordExecution(options.context?.userId, promotedAction.sourceScript);\n\n      const executionId = generateExecutionId();\n      const timestamp = Date.now();\n\n      const execContext: ExecutionContext = {\n        args,\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        timestamp,\n        executionId,\n      };\n\n      this.logAudit({\n        type: \"execution\",\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        actionName,\n        scriptName: promotedAction.sourceScript,\n        details: { args: sanitizeArgs(args) },\n      });\n\n      const result = await this.runtime.execute(script.content, this.capabilities, execContext);\n      const promotedExecResult = result as ExecutionResult;\n\n      this.updateMetrics(promotedAction.sourceScript, promotedExecResult);\n\n      const { success: promotedSuccess, ...promotedData } = result as unknown as {\n        success: boolean;\n        [key: string]: unknown;\n      };\n      return { success: promotedSuccess, data: promotedData as Record<string, unknown> };\n    }\n\n    throw new Error(`Unknown action: ${actionName}`);\n  }\n}\n\n// Type check to ensure AFSSandbox implements AFSModuleClass\nconst _typeCheck: AFSModuleClass<AFSSandbox, AFSSandboxOptions> = AFSSandbox;\n\nexport default AFSSandbox;\n"],"mappings":";;;;;;;;;;AAYA,SAAS,oBAAoB,MAAc,UAA6B;AACtE,MAAK,MAAM,WAAW,UAAU;AAE9B,MAAI,YAAY,OAAO,YAAY,KAAM,QAAO;AAChD,MAAI,QAAQ,SAAS,MAAM,IAAI,KAAK,WAAW,QAAQ,MAAM,GAAG,GAAG,CAAC,CAClE,QAAO;AAET,MAAI,QAAQ,SAAS,KAAK,IAAI,KAAK,WAAW,QAAQ,MAAM,GAAG,GAAG,CAAC,EAAE;GAEnE,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS,EAAE;AAC3C,OAAI,CAAC,KAAK,SAAS,IAAI,IAAI,SAAS,GAAI,QAAO;;AAEjD,MAAI,SAAS,QAAS,QAAO;AAC7B,MAAI,KAAK,WAAW,GAAG,QAAQ,GAAG,CAAE,QAAO;;AAE7C,QAAO;;;;;AAMT,SAAS,cAAc,MAAc,YAAuB,WAA+B;AAEzF,KAAI,aAAa,UAAU,SAAS,KAAK,oBAAoB,MAAM,UAAU,CAC3E,QAAO;AAIT,KAAI,cAAc,WAAW,SAAS,EACpC,QAAO,oBAAoB,MAAM,WAAW;AAI9C,QAAO;;;;;;AAOT,SAAS,cAAc,MAAsB;AAE3C,KAAI,KAAK,SAAS,KAAO,CACvB,OAAM,IAAI,MAAM,mCAAmC;CAIrD,IAAI,UAAU;AACd,KAAI;AACF,YAAU,mBAAmB,KAAK;SAC5B;AAKR,KAAI,QAAQ,SAAS,KAAK,CACxB,OAAM,IAAI,MAAM,6BAA6B;AAI/C,MAAK,MAAM,QAAQ,SAAS;EAC1B,MAAM,OAAO,KAAK,WAAW,EAAE;AAC/B,MAAI,OAAO,MAAM,SAAS,IACxB,OAAM,IAAI,MAAM,4CAA4C;;AAIhE,QAAO;;;;;;;;;AAUT,SAAgB,mBACd,KACA,QACqB;CACrB,MAAM,eAAoC,EAAE;AAG5C,KAAI,KAAK,QAAQ,OAAO,KAAK,SAAS,OAAO;EAC3C,MAAM,UAAU,IAAI,KAAK,KAAK,IAAI;AAClC,eAAa,OAAO,OAAO,SAA0C;AACnE,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,kCAAkC;AAIpD,OAAI,CAAC,cAAc,MAAM,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CACrE,OAAM,IAAI,MAAM,oCAAoC,KAAK,GAAG;AAG9D,OAAI;IACF,MAAM,SAAS,MAAM,QAAQ,KAAK;AAClC,QAAI,CAAC,OAAO,KACV,QAAO;IAIT,MAAM,UAAU,OAAO,KAAK;AAC5B,QAAI,YAAY,UAAa,YAAY,KACvC,QAAO;AAGT,QAAI,OAAO,YAAY,SACrB,QAAO;AAIT,WAAO,KAAK,UAAU,QAAQ;YACvB,OAAO;AACd,UAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAC9F;;;;AAMP,KAAI,KAAK,SAAS,OAAO,KAAK,UAAU,MAAM;EAC5C,MAAM,WAAW,IAAI,MAAM,KAAK,IAAI;AACpC,eAAa,QAAQ,OACnB,MACA,YACgD;AAEhD,OAAI,SAAS,UAAa,SAAS,KACjC,OAAM,IAAI,MAAM,8BAA8B;AAEhD,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,mCAAmC;AAIrD,OAAI,OAAO,YAAY,SACrB,OAAM,IAAI,MAAM,sCAAsC;AAExD,OAAI,YAAY,GACd,OAAM,IAAI,MAAM,qCAAqC;GAIvD,IAAI;AACJ,OAAI;AACF,qBAAiB,cAAc,KAAK;YAC7B,OAAO;AACd,UAAM,IAAI,MAAM,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAAG;;AAIzF,OAAI,CAAC,cAAc,gBAAgB,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CAC/E,OAAM,IAAI,MAAM,qCAAqC,KAAK,GAAG;AAG/D,OAAI;AACF,UAAM,SAAS,gBAAgB,EAAE,SAAS,CAAC;AAC3C,WAAO;KAAE,SAAS;KAAM,MAAM;KAAgB;YACvC,OAAO;AACd,UAAM,IAAI,MACR,+BAA+B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAChG;;;OAKL,cAAa,QAAQ,YAA4B;AAC/C,QAAM,IAAI,MAAM,0CAA0C;;AAK9D,KAAI,KAAK,QAAQ,OAAO,KAAK,SAAS,OAAO;EAC3C,MAAM,UAAU,IAAI,KAAK,KAAK,IAAI;AAClC,eAAa,OAAO,OAClB,MACA,YAC8C;AAC9C,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,kCAAkC;AAIpD,OAAI,CAAC,cAAc,MAAM,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CACrE,OAAM,IAAI,MAAM,oCAAoC,KAAK,GAAG;AAG9D,OAAI;AAKF,YAHe,MAAM,QAAQ,MADT,OAAO,YAAY,YAAY,YAAY,OAAO,UAAU,EAAE,CACR,EAG5D,KAAK,KAAK,WAAW;KACjC,MAAM,MAAM;KACZ,MAAO,MAAM,MAAM,QAA+B;KACnD,EAAE;YACI,OAAO;AACd,UAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAC9F;;;;AAKP,QAAO;;;;;AClNT,MAAM,qBAAqB;AAC3B,MAAM,0BAA0B;;;;;;;;;;;;;AAchC,IAAa,iBAAb,MAA4B;CAC1B,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA0B,EAAE,EAAE;AACxC,OAAK,UAAU,QAAQ,WAAW;AAClC,OAAK,cAAc,QAAQ,eAAe;;;;;;;;;;CAW5C,MAAM,QACJ,MACA,cACA,UAA4B,EAAE,EACJ;EAC1B,MAAM,OAAmB,EAAE;EAC3B,MAAM,YAAY,KAAK,KAAK;EAM5B,MAAM,WAHU,MAAM,YAAY,EAGV,YAAY;AACpC,UAAQ,eAAe,KAAK,cAAc,OAAO,KAAK;EAGtD,IAAI,WAAW;EACf,MAAM,WAAW,KAAK,KAAK,GAAG,KAAK;AACnC,UAAQ,0BAA0B;AAChC,OAAI,KAAK,KAAK,GAAG,UAAU;AACzB,eAAW;AACX,WAAO;;AAET,UAAO;IACP;EAGF,MAAM,KAAK,QAAQ,YAAY;AAE/B,MAAI;GAEF,MAAM,QAAQ,GAAG,YAAY,QAAQ,aAAa,kBAAkB;IAClE,MAAM,QAAQ,GAAG,UAAU,YAAY;IACvC,MAAM,UAAU,GAAG,UAAU,cAAc;AAC3C,SAAK,KAAK;KACR;KACA;KACA,WAAW,KAAK,KAAK;KACtB,CAAC;KACF;AACF,MAAG,QAAQ,GAAG,QAAQ,SAAS,MAAM;AACrC,SAAM,SAAS;GAGf,MAAM,WAAW,KAAK,UAAU,QAAQ,QAAQ,EAAE,CAAC;AACnD,MAAG,SAAS,kBAAkB,SAAS,GAAG;GAG1C,MAAM,aAAa;IACjB,WAAW,QAAQ,aAAa,KAAK,KAAK;IAC1C,aAAa,QAAQ,eAAe,QAAQ,KAAK,KAAK;IACtD,QAAQ,QAAQ;IAChB,WAAW,QAAQ;IACpB;GACD,MAAM,cAAc,KAAK,UAAU,WAAW;AAC9C,MAAG,SAAS,qBAAqB,YAAY,GAAG;GAGhD,MAAM,kCAMF,IAAI,KAAK;GACb,IAAI,YAAY;AAGhB,QAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,aAAa,EAAE;IAErD,MAAM,QAAQ,GAAG,YAAY,SAAS,SAAS,GAAG,eAAe;KAC/D,MAAM,OAAO,WAAW,KAAK,MAAM;MACjC,MAAM,OAAO,GAAG,OAAO,EAAE;AACzB,UAAI,SAAS,SAAU,QAAO,GAAG,UAAU,EAAE;AAC7C,UAAI,SAAS,SAAU,QAAO,GAAG,UAAU,EAAE;AAC7C,UAAI,SAAS,UAAW,QAAO,GAAG,KAAK,EAAE;AACzC,UAAI,SAAS,YAAY,SAAS,YAAa,QAAO,GAAG,KAAK,EAAE;AAChE,aAAO,GAAG,KAAK,EAAE;OACjB;KAGF,MAAM,KAAK;AAGX,QAAG,GAAG,KAAK,CACR,MAAM,aAAW;AAChB,sBAAgB,IAAI,GAAG,EAAE,QAAQA,SAAO;AACxC,sBAAgB,OAAO,GAAG;OAC1B,CACD,OAAO,UAAU;AAChB,sBACG,IAAI,GAAG,EACN,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;AACrE,sBAAgB,OAAO,GAAG;OAC1B;AAEJ,YAAO,GAAG,UAAU,GAAG;MACvB;AACF,OAAG,QAAQ,GAAG,QAAQ,SAAS,QAAQ,MAAM;AAC7C,UAAM,SAAS;;GAgBjB,MAAM,cAAc;;;;;;;;;;;MAZK,OAAO,KAAK,aAAa,CAC/C,KACE,SAAS;MACd,KAAK;;2BAEgB,KAAK;;;OAIvB,CACA,KAAK,MAAM,CAaG;;;;;;;;IAQnB,KAAK;;;GAKH,MAAM,SAAS,GAAG,SAAS,YAAY;AAEvC,OAAI,UAAU;AACZ,WAAO,SAAS;AAChB,WAAO;KACL,SAAS;KACT,OAAO,oCAAoC,KAAK,QAAQ;KACxD;KACA,UAAU,KAAK,KAAK,GAAG;KACvB,UAAU;KACX;;AAGH,OAAI,OAAO,OAAO;IAChB,MAAM,aAAa,GAAG,KAAK,OAAO,MAAM;AACxC,WAAO,MAAM,SAAS;AAOtB,WAAO;KACL,SAAS;KACT,OANA,OAAO,eAAe,YAAY,eAAe,OAC3C,WAAoC,WAAW,OAAO,WAAW,GACnE,OAAO,WAAW;KAKtB,OACE,OAAO,eAAe,YAAY,eAAe,OAC5C,WAAkC,QACnC;KACN;KACA,UAAU,KAAK,KAAK,GAAG;KACxB;;GAIH,MAAM,cAAc,GAAG,KAAK,OAAO,MAAM;AACzC,UAAO,MAAM,SAAS;AAEtB,UAAO;IACL,SAAS;IACT,QAAQ;IACR;IACA,UAAU,KAAK,KAAK,GAAG;IACvB,UAAU;IACX;WACM,OAAO;AAId,UAAO;IACL,SAAS;IACT,OALmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAMzE,OALY,iBAAiB,QAAQ,MAAM,QAAQ;IAMnD;IACA,UAAU,KAAK,KAAK,GAAG;IACxB;YACO;AAER,MAAG,SAAS;AACZ,WAAQ,SAAS;;;;;;;;;;;;;;;;;AC/KvB,MAAM,eAAe;;AAErB,MAAM,mBAAmB;;AAEzB,MAAM,mBAAmB;CAAC;CAAY;CAAU;CAAS;CAAO;CAAc;CAAO;;;;AAKrF,SAAS,sBAA8B;AACrC,QAAO,QAAQ,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,GAAG,GAAG;;;;;AAMtE,SAAS,aAAa,MAAwD;CAC5E,MAAM,YAAqC,EAAE;AAC7C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,CAC7C,KAAI,iBAAiB,MAAM,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC,CAC7D,WAAU,OAAO;UACR,OAAO,UAAU,YAAY,UAAU,KAChD,WAAU,OAAO,aAAa,MAAiC;KAE/D,WAAU,OAAO;AAGrB,QAAO;;;;;AAMT,MAAM,0BAA0B,EAAE,OAAO;CACvC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,cAAc;CACnD,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,qBAAqB;CACjE,YAAY,EAAE,KAAK,CAAC,YAAY,YAAY,CAAC,CAAC,UAAU,CAAC,SAAS,8BAA8B;CAChG,SAAS,EACN,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,oCAAoC;EACvF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,qBAAqB;EAC7E,CAAC,CACD,UAAU,CACV,SAAS,wBAAwB;CACpC,cAAc,EACX,OAAO,EACN,KAAK,EACF,OAAO;EACN,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,yBAAyB;EAC/D,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,0BAA0B;EACjE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,SAAS,wBAAwB;EAC5E,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,SAAS,uBAAuB;EAC3E,CAAC,CACD,UAAU,CACV,SAAS,2BAA2B,EACxC,CAAC,CACD,UAAU,CACV,SAAS,6BAA6B;CACzC,OAAO,EACJ,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,SAAS,uBAAuB;EACrD,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS,4BAA4B;EACtE,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,4BAA4B;EACnF,CAAC,CACD,UAAU,CACV,SAAS,sBAAsB;CAClC,WAAW,EACR,OAAO;EACN,wBAAwB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EACxD,+BAA+B,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,iCAAiC,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAClE,CAAC,CACD,UAAU,CACV,SAAS,8BAA8B;CAC3C,CAAC;;AAGF,MAAM,wBAAwB;CAAC;CAAO;CAAY;CAAY;CAAW;CAAuB;;AAGhG,MAAM,qBAAuC;CAC3C;EACE,MAAM;EACN,aAAa;EACb,SAAS;;EAET,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;EAIT,WAAW,CACT;GAAE,MAAM;GAAc,aAAa;GAA2B,UAAU;GAAM,EAC9E;GAAE,MAAM;GAAe,aAAa;GAA4B,UAAU;GAAM,CACjF;EACD,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;;;;;;EAST,WAAW,CACT;GAAE,MAAM;GAAa,aAAa;GAAiC,UAAU;GAAM,CACpF;EACD,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;;;;EAOT,WAAW,CACT;GAAE,MAAM;GAAc,aAAa;GAAsB,UAAU;GAAM,SAAS;GAAS,CAC5F;EACD,UAAU;EACX;CACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCD,IAAa,aAAb,MAAa,mBAAmB,gBAAgB;CAC9C,AAAkB;CAClB,AAAkB;CAClB,AAAkB;CAElB,AAAiB;CACjB,AAAiB;CACjB,AAAiB,0BAAqC,IAAI,KAAK;CAC/D,AAAQ,eAAoC,EAAE;CAG9C,AAAiB,kCAA+C,IAAI,KAAK;CAGzE,AAAiB,WAAyB,EAAE;CAC5C,AAAiB;CAGjB,AAAiB;CACjB,AAAiB,sBAAgC,EAAE;CACnD,AAAiB,0CAAiD,IAAI,KAAK;CAC3E,AAAiB,4CAAmD,IAAI,KAAK;CAG7E,AAAQ,UAA4B;EAClC,iBAAiB;EACjB,cAAc;EACd,cAAc;EACd,cAAc;EACd,iBAAiB;EACjB,eAAe;EAChB;CACD,AAAiB,gCAA+C,IAAI,KAAK;CAEzE,YAAY,UAA6B,EAAE,EAAE;AAC3C,SAAO;AACP,OAAK,UAAU,wBAAwB,MAAM,QAAQ;AACrD,OAAK,OAAO,QAAQ,QAAQ;AAC5B,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,aAAa,QAAQ,cAAc;AACxC,OAAK,UAAU,IAAI,eAAe,QAAQ,QAAQ;AAClD,OAAK,cAAc,QAAQ;AAC3B,OAAK,kBAAkB,QAAQ;AAE/B,OAAK,eAAe,mBAAmB,QAAW,KAAK,QAAQ,gBAAgB,EAAE,CAAC;;;;;CAMpF,OAAO,SAAS;AACd,SAAO;;;;;CAMT,aAAa,KAAK,EAAE,WAAgC,EAAE,EAAuB;AAE3E,SAAO,IAAI,WADO,wBAAwB,MAAM,OAAO,CACvB;;;;;CAMlC,QAAQ,KAAoB;AAC1B,OAAK,eAAe,mBAAmB,KAAK,KAAK,QAAQ,gBAAgB,EAAE,CAAC;;;;;CAQ9E,MACM,SAAS,MAA4C;AACzD,SAAO,EACL,MAAM;GACJ,KAAK,4BAA4B;GACjC,KAAK,8BAA8B;GACnC,KAAK,4BAA4B;GACjC,KAAK,0BAA0B;GAChC,EACF;;;;;CAMH,MACM,YAAY,MAA4C;EAC5D,MAAM,UAAsB,EAAE;AAC9B,OAAK,MAAM,CAAC,MAAM,WAAW,KAAK,QAChC,SAAQ,KAAK,KAAK,iBAAiB,MAAM,OAAO,CAAC;AAEnD,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,WAAW,KAAmE;EAClF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,KAAK;EAEtC,MAAM,WAAW,QAAQ,YAAY,IAAI,OAAO,WAAW;AAC3D,SAAO,EACL,MAAM,CACJ;GACE,IAAI,QAAQ,UAAU,WAAW;GACjC,MAAM,QAAQ,UAAU,WAAW;GACnC,SAAS;GACT,MAAM;IAAE,MAAM;IAAmB,MAAM;IAAW,QAAQ,OAAO,YAAY,EAAE,EAAE;IAAQ;GAC1F,EACD;GACE,IAAI,QAAQ,UAAU,eAAe;GACrC,MAAM,QAAQ,UAAU,eAAe;GACvC,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,QAAQ,OAAO,eAAe,EAAE,EAAE;IACnC;GACF,CACF,EACF;;;;;CAMH,MACM,kBAAkB,KAAmE;EACzF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,6BACJ,KACwB;EACxB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,cAAc,MAA4C;AAY9D,SAAO,EAAE,MAXO,mBAAmB,KAAK,OAAO;GAC7C,IAAI,QAAQ,cAAc,EAAE,KAAK;GACjC,MAAM,QAAQ,cAAc,EAAE,KAAK;GACnC,SAAS,EAAE;GACX,MAAM;IACJ,MAAM;IACN,MAAM;IACN,UAAU,EAAE;IACZ,WAAW,EAAE;IACd;GACF,EAAE,EACqB;;;;;CAM1B,MACM,aAAa,KAAqE;AAEtF,MAAI,CADa,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa,CAEjF,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,YAAY,MAA4C;AAC5D,MAAI,KAAK,cAAc,SAAS,EAC9B,QAAO,EAAE,MAAM,EAAE,EAAE;AAErB,SAAO,EACL,MAAM,CACJ;GACE,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,KAAK,cAAc;IACnC;GACF,CACF,EACF;;;;;CAMH,MACM,kBAAkB,MAA4C;EAClE,MAAM,UAAsB,EAAE;AAC9B,OAAK,MAAM,CAAC,MAAM,YAAY,KAAK,cACjC,SAAQ,KAAK;GACX,IAAI,QAAQ,oBAAoB,KAAK;GACrC,MAAM,QAAQ,oBAAoB,KAAK;GACvC,MAAM;IACJ,MAAM;IACN,MAAM;IACN,iBAAiB,QAAQ;IAC1B;GACF,CAAC;AAEJ,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,UAAU,MAA4C;AAC1D,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAQrB,MACM,gBAAgB,MAA4C;EAChE,MAAM,UAAsB;GAC1B;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,MAAM;QAAE,MAAM;QAAU,aAAa;QAA8B;OACnE,MAAM;QAAE,MAAM;QAAU,aAAa;QAAiC;OACvE;MACD,UAAU,CAAC,OAAO;MACnB;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY,EACV,MAAM;OAAE,MAAM;OAAU,aAAa;OAA+B,EACrE;MACD,UAAU,CAAC,OAAO;MACnB;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,QAAQ;QAAE,MAAM;QAAU,aAAa;QAA0B;OACjE,MAAM;QAAE,MAAM;QAAU,aAAa;QAAe;OACpD,aAAa;QAAE,MAAM;QAAU,aAAa;QAAsB;OAClE,aAAa;QAAE,MAAM;QAAU,aAAa;QAA0B;OACtE,cAAc;QAAE,MAAM;QAAU,aAAa;QAA2B;OACzE;MACD,UAAU,CAAC,UAAU,OAAO;MAC7B;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,UAAU;QAAE,MAAM;QAAU,aAAa;QAAiB;OAC1D,MAAM;QAAE,MAAM;QAAU,aAAa;QAAyB;OAC9D,WAAW;QAAE,MAAM;QAAU,aAAa;QAAsB;OACjE;MACD,UAAU,CAAC,YAAY,OAAO;MAC/B;KACF;IACF;GACF;AAGD,OAAK,MAAM,CAAC,YAAY,WAAW,KAAK,gBACtC,SAAQ,KAAK;GACX,IAAI;GACJ,MAAM,QAAQ,aAAa,WAAW;GACtC,SAAS,OAAO,eAAe,oBAAoB;GACnD,MAAM;IACJ,MAAM;IACN,OAAO,CAAC,kBAAkB,WAAW;IACrC,MAAM;IACN,aAAa,OAAO,eAAe,WAAW;IAC9C,aAAa,OAAO;IACpB,cAAc,OAAO;IACtB;GACF,CAAC;AAGJ,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,kBAAkB,KAAmE;EACzF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AAEvD,MAAI,CADW,KAAK,QAAQ,IAAI,KAAK,CAEnC,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAItC,SAAO,EACL,MAAM,CACJ;GACE,IAAI;GACJ,MAAM,QALK,QAAQ,YAAY,IAAI,OAAO,YAAY,WAAW,EAKzC,OAAO;GAC/B,SAAS,kBAAkB;GAC3B,MAAM;IACJ,MAAM;IACN,OAAO,CAAC,kBAAkB,WAAW;IACrC,MAAM;IACN,aAAa,eAAe,KAAK;IACjC,aAAa;KACX,MAAM;KACN,aAAa;KACd;IACF;GACF,CACF,EACF;;;;;CAQH,MACM,SAAS,MAAuC;AAWpD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe;IAAG;GAC7C,SAdc;IACd;KAAE,MAAM;KAAO,aAAa;KAA8B;IAC1D;KAAE,MAAM;KAAY,aAAa;KAA8B;IAC/D;KAAE,MAAM;KAAW,aAAa;KAAuC;IACvE;KAAE,MAAM;KAAwB,aAAa;KAAmC;IAChF,GAAG,MAAM,KAAK,KAAK,gBAAgB,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa;KACrE;KACA,aAAa,OAAO,eAAe,oBAAoB;KACxD,EAAE;IACJ;GAMA;;;;;CAMH,MACM,eAAe,MAAuC;AAC1D,SAAO,KAAK,4BAA4B;;;;;CAM1C,MACM,WAAW,KAA8D;EAC7E,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,SAAO,KAAK,iBAAiB,MAAM,OAAO;;;;;CAM5C,MACM,kBAAkB,KAA8D;EACpF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,WAAW,OAAO,YAAY,EAAE;AACtC,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,WAAW;GACjD,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,WAAW;GACnD,SAAS;GACT,MAAM;IAAE,MAAM;IAAW,OAAO,SAAS;IAAQ;GAClD;;;;;CAMH,MACM,kBACJ,KACmB;EACnB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,aAAa,OAAO,SAAS,IAAI,OAAO,SAAS,GAAG;AAC1D,MAAI,OAAO,MAAM,WAAW,IAAI,aAAa,EAC3C,OAAM,IAAI,iBAAiB,IAAI,MAAM,yBAAyB;EAGhE,MAAM,WADW,OAAO,YAAY,EAAE,EACb,MAAM,MAAM,EAAE,YAAY,WAAW;AAC9D,MAAI,CAAC,QACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,WAAW,WAAW,YAAY;AAEzE,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,YAAY,OAAO,WAAW,CAAC;GACrE,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,YAAY,OAAO,WAAW,CAAC;GACvE,SAAS,QAAQ;GACjB,MAAM;IACJ,MAAM;IACN,SAAS,QAAQ;IACjB,WAAW,QAAQ;IACnB,MAAM,QAAQ;IACf;GACF;;;;;CAMH,MACM,sBAAsB,KAA8D;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,cAAc,OAAO,eAAe,EAAE;AAC5C,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,eAAe;GACrD,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,eAAe;GACvD,SAAS;GACT,MAAM;IAAE,MAAM;IAAe,OAAO,YAAY;IAAQ;GACzD;;;;;CAMH,MACM,iBAAiB,MAAuC;AAC5D,SAAO,KAAK,8BAA8B;;;;;CAM5C,MACM,aAAa,KAAgE;EACjF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,uBAAuB,IAAI,OAAO,eAAe;AAExF,SAAO;GACL,IAAI,QAAQ,cAAc,SAAS,KAAK;GACxC,MAAM,QAAQ,cAAc,SAAS,KAAK;GAC1C,SAAS,SAAS;GAClB,MAAM;IACJ,MAAM;IACN,aAAa,SAAS;IACtB,UAAU,SAAS;IACnB,WAAW,SAAS;IACrB;GACF;;;;;CAMH,MACM,YAAY,MAAuC;AACvD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,KAAK;GACd,MAAM,EAAE,MAAM,WAAW;GAC1B;;;;;CAMH,MACM,kBAAkB,KAA8D;EACpF,MAAM,gBAAgB,KAAK,cAAc,IAAI,IAAI,OAAO,WAAW;AACnE,MAAI,CAAC,cACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,6BAA6B,IAAI,OAAO,aAAa;AAE5F,SAAO;GACL,IAAI,QAAQ,oBAAoB,IAAI,OAAO,WAAW;GACtD,MAAM,QAAQ,oBAAoB,IAAI,OAAO,WAAW;GACxD,SAAS;IAAE,gBAAgB,cAAc;IAAiB,GAAG;IAAe;GAC5E,MAAM;IAAE,MAAM;IAAkB,YAAY,IAAI,OAAO;IAAY;GACpE;;;;;CAMH,MACM,UAAU,MAAuC;AACrD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,KAAK;GACd,MAAM;IAAE,MAAM;IAAS,OAAO,KAAK,SAAS;IAAQ;GACrD;;;;;CAQH,MACM,aAAa,MAAuC;AACxD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe;IAAG;GAChD,MAAM;IAAE,MAAM;IAAa,eAAe;IAAG;GAC9C;;;;;CAMH,MACM,gBAAgB,MAAuC;AAC3D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAChE,MAAM;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAC9D;;;;;CAMH,MACM,eAAe,KAA8D;EACjF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,QAAQ,KAAK,iBAAiB,MAAM,OAAO;AACjD,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,QAAQ;GACvD,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,QAAQ;GACzD,SAAS,MAAM,QAAQ,EAAE;GACzB,MAAM,MAAM,QAAQ,EAAE;GACvB;;;;;CAMH,MACM,sBAAsB,KAA8D;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,OAAO;GAAE,MAAM;GAAW,QAAQ,OAAO,YAAY,EAAE,EAAE;GAAQ;AACvE,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,YAAY,QAAQ;GACnE,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,YAAY,QAAQ;GACrE,SAAS;GACT;GACD;;;;;CAMH,MACM,0BAA0B,KAA8D;EAC5F,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,OAAO;GAAE,MAAM;GAAe,QAAQ,OAAO,eAAe,EAAE,EAAE;GAAQ;AAC9E,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,gBAAgB,QAAQ;GACvE,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,gBAAgB,QAAQ;GACzE,SAAS;GACT;GACD;;;;;CAMH,MACM,kBAAkB,MAAuC;AAC7D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACxE,MAAM;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACtE;;;;;CAMH,MACM,iBAAiB,KAAgE;EACrF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,uBAAuB,IAAI,OAAO,eAAe;EAExF,MAAM,OAAO;GACX,MAAM;GACN,aAAa,SAAS;GACtB,UAAU,SAAS;GACnB,WAAW,SAAS;GACrB;AACD,SAAO;GACL,IAAI,QAAQ,cAAc,IAAI,OAAO,cAAc,QAAQ;GAC3D,MAAM,QAAQ,cAAc,IAAI,OAAO,cAAc,QAAQ;GAC7D,SAAS;GACT;GACD;;;;;CAMH,MACM,gBAAgB,MAAuC;AAC3D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,EAAE,MAAM,WAAW;GAC5B,MAAM,EAAE,MAAM,WAAW;GAC1B;;;;;CAMH,MACM,cAAc,MAAuC;AACzD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC5D,MAAM;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC1D;;;;;CAQH,MACM,YACJ,KACA,OACyB;EACzB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EAEvD,MAAM,sBAAM,IAAI,MAAM;EACtB,MAAM,WAAW,KAAK,QAAQ,IAAI,KAAK;AAGvC,MAAI,MAAM,YAAY,UAAa,UAAU;GAC3C,MAAM,OAAuB;IAC3B;IACA,WAAW,SAAS,KAAK;IACzB,WAAW;IACX,SAAS,SAAS,KAAK;IACvB,UAAU,SAAS,KAAK;IACzB;GACD,MAAMC,iBAA6B;IACjC,SAAS,SAAS;IAClB;IACA,UAAU,SAAS;IACnB,aAAa,SAAS;IACvB;AACD,QAAK,QAAQ,IAAI,MAAMA,eAAa;AACpC,UAAO;IACL,MAAM,KAAK,iBAAiB,MAAMA,eAAa;IAC/C,SAAS;IACV;;EAGH,MAAM,UACJ,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAK,UAAU,MAAM,QAAQ;EAGnF,MAAM,WAA4B,UAAU,WAAW,CAAC,GAAG,SAAS,SAAS,GAAG,EAAE;EAElF,MAAM,aAA4B;GAChC,UAFiB,SAAS,SAAS,IAAI,KAAK,IAAI,GAAG,SAAS,KAAK,MAAM,EAAE,QAAQ,CAAC,GAAG,KAE/D;GACtB;GACA,WAAW;GACX,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ,CAAC;GACzC;AACD,WAAS,KAAK,WAAW;AAGzB,SAAO,SAAS,SAAS,aACvB,UAAS,OAAO;EAWlB,MAAM,eAA6B;GACjC;GACA,MAV2B;IAC3B;IACA,WAAW,UAAU,KAAK,aAAa;IACvC,WAAW;IACX,SAAS,UAAU,KAAK;IACxB,UAAU,UAAU,KAAK,YAAY;IACtC;GAKC;GACA,aAAa,UAAU,eAAe,EAAE;GACzC;AACD,OAAK,QAAQ,IAAI,MAAM,aAAa;AAEpC,SAAO;GACL,MAAM,KAAK,iBAAiB,MAAM,aAAa;GAC/C,SAAS,WAAW,mBAAmB;GACxC;;;;;CAMH,MACM,mBACJ,MACA,QACyB;AACzB,QAAM,IAAI,MAAM,mCAAmC;;;;;CAQrD,MACM,aAAa,KAAqE;EACtF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,OAAK,QAAQ,OAAO,KAAK;AACzB,OAAK,cAAc,OAAO,KAAK;AAC/B,SAAO,EAAE,SAAS,WAAW,KAAK,YAAY;;;;;CAMhD,MACM,eAAe,KAA+D;AAClF,QAAM,IAAI,iBAAiB,IAAI,KAAK;;;;;CAQtC,MACM,WACJ,KACA,MACwB;EACxB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,QAAO;GACL,SAAS;GACT,MAAM;IACJ,OAAO,qBAAqB;IAC5B,MAAM,EAAE;IACR,UAAU;IACX;GACF;EAGH,MAAM,UAAW,IAAI,WAAqE,EAAE;EAG5F,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,KAAK;AACpE,MAAI,UAAU,QACZ,QAAO;GACL,SAAS;GACT,MAAM;IACJ,OAAO,wBAAwB,UAAU;IACzC,MAAM,EAAE;IACR,UAAU;IACV,aAAa;IACd;GACF;AAIH,OAAK,gBAAgB,QAAQ,SAAS,QAAQ,KAAK;AAGnD,SAAO,KAAK,0BAAU,IAAI,MAAM;AAChC,SAAO,KAAK;EAGZ,MAAM,cAAc,qBAAqB;EACzC,MAAM,YAAY,KAAK,KAAK;EAE5B,MAAM,cAAgC;GACpC;GACA,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B;GACA;GACD;AAGD,OAAK,SAAS;GACZ,MAAM;GACN,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B,YAAY;GACZ,SAAS,EAAE,MAAM,aAAa,KAAK,EAAE;GACtC,CAAC;EAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,OAAO,SAAS,KAAK,cAAc,YAAY;EACzF,MAAM,mBAAmB;AAGzB,OAAK,cAAc,MAAM,iBAAiB;EAG1C,MAAM,eAAsC;GAC1C;GACA,WAAW,IAAI,KAAK,UAAU;GAC9B,SAAS,iBAAiB;GAC1B,UAAU,iBAAiB;GAC3B,OAAO,iBAAiB;GACxB,UAAU,iBAAiB;GAC3B,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B,MAAM,aAAa,KAAK;GACzB;AAED,SAAO,cAAc,OAAO,eAAe,EAAE;AAC7C,SAAO,YAAY,KAAK,aAAa;AAErC,SAAO,OAAO,YAAY,SAAS,iBACjC,QAAO,YAAY,OAAO;EAG5B,MAAM,EAAE,SAAS,GAAG,SAAS;AAI7B,SAAO;GAAE;GAAe;GAAiC;;;;;CAM3D,MACM,iBACJ,KACA,MACwB;AACxB,SAAO,KAAK,WAAW,KAAK,KAAK;;;;;CAMnC,MACM,eACJ,KACA,MACwB;EACxB,MAAM,aAAa,IAAI,OAAO;AAC9B,SAAO,KAAK,cAAc,YAAY,MAAM,IAAI;;;;;CAQlD,MACM,SAAS,MAA4C;AACzD,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IACJ,MAAM;IACN,eAAe;IACf,aAAa,KAAK,QAAQ;IAC1B,eAAe,mBAAmB;IAClC,iBAAiB,KAAK,QAAQ;IAC9B,cAAc,KAAK,QAAQ;IAC3B,cAAc,KAAK,QAAQ;IAC5B;GACF,EACF;;;;;CAMH,MACM,eAAe,MAA4C;AAC/D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAC9D,EACF;;;;;CAMH,MACM,WAAW,KAAmE;EAClF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,SAAO,EACL,MAAM;GACJ,IAAI,QAAQ,YAAY,GAAG,KAAK,KAAK;GACrC,MAAM,QAAQ,YAAY,GAAG,KAAK,KAAK;GACvC,WAAW,OAAO,KAAK;GACvB,WAAW,OAAO,KAAK;GACvB,MAAM;IACJ,MAAM;IACN,MAAM;IACN,YAAY;IACZ,UAAU,OAAO,KAAK;IACtB,SAAS,OAAO,KAAK,WAAW;IAChC,eAAe,OAAO,YAAY,EAAE,EAAE;IACvC;GACF,EACF;;;;;CAMH,MACM,iBAAiB,MAA4C;AACjE,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACtE,EACF;;;;;CAMH,MACM,aAAa,KAAqE;EACtF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EACL,MAAM;GACJ,IAAI,QAAQ,cAAc,SAAS,KAAK;GACxC,MAAM,QAAQ,cAAc,SAAS,KAAK;GAC1C,MAAM;IAAE,MAAM;IAAY,UAAU,SAAS;IAAU;GACxD,EACF;;;;;CAMH,MACM,eAAe,MAA4C;AAC/D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAW,eAAe,KAAK,cAAc,OAAO,IAAI,IAAI;IAAG;GAC9E,EACF;;;;;CAMH,MACM,aAAa,MAA4C;AAC7D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC1D,EACF;;;;;CAQH,MACM,YAAY,MAA+C;EAC/D,MAAM,QAAkB,EAAE;AAC1B,QAAM,KAAK,KAAK,KAAK,OAAO;AAC5B,QAAM,KAAK,GAAG;AACd,MAAI,KAAK,aAAa;AACpB,SAAM,KAAK,KAAK,YAAY;AAC5B,SAAM,KAAK,GAAG;;AAEhB,QAAM,KAAK,cAAc;AACzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB,KAAK,QAAQ,OAAO;AACjD,QAAM,KAAK,oBAAoB,mBAAmB,SAAS;AAC3D,QAAM,KAAK,2BAA2B,KAAK,QAAQ,kBAAkB;AACrE,QAAM,KACJ,uBAAuB,KAAK,QAAQ,kBAAkB,KAAM,KAAK,QAAQ,eAAe,KAAK,QAAQ,kBAAmB,KAAK,QAAQ,EAAE,GAAG,EAAE,GAC7I;AACD,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,0BAA0B;AACrC,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,2DAA2D;AACtE,QAAM,KAAK,kBAAkB,KAAK,QAAQ,SAAS,WAAW,IAAK,IAAI;AACvE,QAAM,KAAK,uBAAuB,KAAK,QAAQ,SAAS,eAAe,UAAU,IAAI;AACrF,MAAI,KAAK,QAAQ,cAAc,KAAK;GAClC,MAAM,UAAU,KAAK,QAAQ,aAAa;AAC1C,SAAM,KAAK,mBAAmB,QAAQ,QAAQ,QAAQ;AACtD,SAAM,KAAK,oBAAoB,QAAQ,SAAS,QAAQ;AACxD,OAAI,QAAQ,YAAY,OACtB,OAAM,KAAK,wBAAwB,QAAQ,WAAW,KAAK,KAAK,GAAG;AAErE,OAAI,QAAQ,WAAW,OACrB,OAAM,KAAK,uBAAuB,QAAQ,UAAU,KAAK,KAAK,GAAG;;AAGrE,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,eAAe;AAC1B,QAAM,KAAK,GAAG;AACd,OAAK,MAAM,KAAK,mBACd,OAAM,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,SAAS,KAAK,EAAE,cAAc;AAEjE,QAAM,KAAK,GAAG;AACd,MAAI,KAAK,QAAQ,OAAO,GAAG;AACzB,SAAM,KAAK,aAAa;AACxB,SAAM,KAAK,GAAG;AACd,QAAK,MAAM,CAAC,MAAM,WAAW,KAAK,SAAS;IACzC,MAAM,UAAU,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,CAAC,aAAa,GAAG;AACpF,UAAM,KAAK,OAAO,KAAK,SAAS,OAAO,KAAK,SAAS,2BAA2B,UAAU;;AAE5F,SAAM,KAAK,GAAG;;AAGhB,SAAO;GAAE,QAAQ;GAAY,SAAS,MAAM,KAAK,KAAK;GAAE;;;;;CAM1D,MACM,cAAc,KAAsE;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAGnE,MAAM,QAAkB,EAAE;AAC1B,QAAM,KAAK,aAAa,KAAK,KAAK;AAClC,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,cAAc;AACzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,aAAa,GAAG;AAC7E,QAAM,KAAK,kBAAkB,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,aAAa,GAAG;AAC7E,QAAM,KAAK,oBAAoB,OAAO,KAAK,WAAW;AACtD,QAAM,KACJ,mBAAmB,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,CAAC,aAAa,GAAG,UACxF;AACD,QAAM,KAAK,oBAAoB,OAAO,YAAY,EAAE,EAAE,SAAS;AAC/D,QAAM,KAAK,eAAe,IAAI,aAAa,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,QAAQ;AAClF,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB;AAC7B,QAAM,KAAK,GAAG;EACd,MAAM,YAAY,OAAO,QAAQ,MAAM,KAAK;AAC5C,QAAM,KAAK,gBAAgB,UAAU,SAAS;EAC9C,MAAM,YAAY,UAAU,IAAI,MAAM,IAAI;AAC1C,MAAI,UAAU,WAAW,KAAK,CAC5B,OAAM,KAAK,sBAAsB,UAAU,MAAM,EAAE,CAAC,MAAM,GAAG;AAE/D,QAAM,KAAK,GAAG;AAEd,SAAO;GAAE,QAAQ;GAAY,SAAS,MAAM,KAAK,KAAK;GAAE;;;;;CAQ1D,MACM,iBAAiB,MAAuC;EAC5D,MAAM,oBAAoB;GACxB;IAAE,MAAM;IAAO,aAAa;IAAkC;GAC9D;IAAE,MAAM;IAAY,aAAa;IAA8B;GAC/D;IAAE,MAAM;IAAW,aAAa;IAAuC;GACvE;IAAE,MAAM;IAAwB,aAAa;IAAmC;GACjF;AAGD,OAAK,MAAM,CAAC,YAAY,WAAW,KAAK,gBACtC,mBAAkB,KAAK;GACrB,MAAM;GACN,aAAa,OAAO,eAAe,oBAAoB;GACxD,CAAC;AAwBJ,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAxBqC;IACrC,eAAe;IACf,UAAU,KAAK;IACf,aAAa,KAAK;IAClB,OAAO,EAAE;IACT,YAAY,KAAK,0BAA0B;IAC3C,SAAS,CACP;KACE,aAAa;KACb,SAAS;KACT,WAAW,EAAE,cAAc,aAAa;KACzC,EACD;KACE,MAAM;KACN,aAAa;KACb,SAAS,CAAC;MAAE,MAAM;MAAQ,aAAa;MAAsB,CAAC;KAC9D,WAAW,EAAE,cAAc,iCAAiC;KAC7D,CACF;IACF;GAMC,MAAM;IACJ,MAAM;IACN,aAAa;IACb,YAAY;KAAC;KAAQ;KAAQ;KAAS;KAAU;KAAQ;KAAQ;KAAU;IAC3E;GACF;;;;;CAQH,AAAQ,iBAAiB,MAAc,QAAgC;AACrE,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,KAAK;GACrC,MAAM,QAAQ,YAAY,GAAG,KAAK,KAAK;GACvC,SAAS,OAAO;GAChB,WAAW,OAAO,KAAK;GACvB,WAAW,OAAO,KAAK;GACvB,MAAM;IACJ,MAAM;IACN,MAAM;IACN,OAAO;KAAC;KAAc;KAAkB;KAAW;IACnD,eAAe;IACf,YAAY;IACZ,SAAS,OAAO,KAAK;IACrB,UAAU,OAAO,KAAK;IACvB;GACD,SAAS,CAAC;IAAE,MAAM;IAAQ,aAAa,kBAAkB;IAAQ,CAAC;GACnE;;;;;CAMH,AAAQ,6BAAuC;AAC7C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IAAE,MAAM;IAAqB,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GACzF;;;;;CAMH,AAAQ,+BAAyC;AAC/C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,mBAAmB;IACnC;GACF;;;;;CAMH,AAAQ,6BAAuC;AAC7C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,KAAK,cAAc,OAAO,IAAI,IAAI;IAClD;GACF;;;;;CAMH,AAAQ,2BAAqC;AAC3C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IAAE,MAAM;IAAqB,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GACrF;;;;;CAMH,AAAQ,SAAS,OAA4C;AAC3D,MAAI,CAAC,KAAK,aAAa,QAAS;EAEhC,MAAM,YAAwB;GAC5B,GAAG;GACH,WAAW,KAAK,KAAK;GACtB;AAED,OAAK,SAAS,KAAK,UAAU;EAC7B,MAAM,aAAa,KAAK,YAAY,cAAc;AAClD,SAAO,KAAK,SAAS,SAAS,WAC5B,MAAK,SAAS,OAAO;AAGvB,MAAI,KAAK,YAAY,QACnB,KAAI;AACF,QAAK,YAAY,QAAQ,UAAU;UAC7B;;;;;CASZ,AAAQ,eACN,QACA,YACuC;AACvC,MAAI,CAAC,KAAK,gBAAiB,QAAO,EAAE,SAAS,OAAO;EAGpD,MAAM,eADM,KAAK,KAAK,GACK;EAC3B,MAAM,mBAAmB,QAAkB,IAAI,QAAQ,MAAM,IAAI,aAAa;AAE9E,MAAI,KAAK,gBAAgB,wBAAwB;GAC/C,MAAM,mBAAmB,gBAAgB,KAAK,oBAAoB;AAClE,QAAK,oBAAoB,SAAS;AAClC,QAAK,oBAAoB,KAAK,GAAG,iBAAiB;AAClD,OAAI,iBAAiB,UAAU,KAAK,gBAAgB,uBAClD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAA8B;;AAIlE,MAAI,UAAU,KAAK,gBAAgB,+BAA+B;GAChE,MAAM,iBAAiB,gBAAgB,KAAK,wBAAwB,IAAI,OAAO,IAAI,EAAE,CAAC;AACtF,QAAK,wBAAwB,IAAI,QAAQ,eAAe;AACxD,OAAI,eAAe,UAAU,KAAK,gBAAgB,8BAChD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAAgC;;AAIpE,MAAI,cAAc,KAAK,gBAAgB,iCAAiC;GACtE,MAAM,mBAAmB,gBACvB,KAAK,0BAA0B,IAAI,WAAW,IAAI,EAAE,CACrD;AACD,QAAK,0BAA0B,IAAI,YAAY,iBAAiB;AAChE,OAAI,iBAAiB,UAAU,KAAK,gBAAgB,gCAClD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAAkC;;AAItE,SAAO,EAAE,SAAS,OAAO;;;;;CAM3B,AAAQ,gBAAgB,QAAiB,YAA2B;EAClE,MAAM,MAAM,KAAK,KAAK;AACtB,OAAK,oBAAoB,KAAK,IAAI;AAElC,MAAI,QAAQ;GACV,MAAM,iBAAiB,KAAK,wBAAwB,IAAI,OAAO,IAAI,EAAE;AACrE,kBAAe,KAAK,IAAI;AACxB,QAAK,wBAAwB,IAAI,QAAQ,eAAe;;AAG1D,MAAI,YAAY;GACd,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,WAAW,IAAI,EAAE;AAC7E,oBAAiB,KAAK,IAAI;AAC1B,QAAK,0BAA0B,IAAI,YAAY,iBAAiB;;;;;;CAOpE,AAAQ,cAAc,YAAgC,QAA+B;AACnF,OAAK,QAAQ;AACb,OAAK,QAAQ,iBAAiB,OAAO;AACrC,OAAK,QAAQ,kBAAkB,KAAK,QAAQ,gBAAgB,KAAK,QAAQ;AAEzE,MAAI,OAAO,QACT,MAAK,QAAQ;MAEb,MAAK,QAAQ;AAGf,MAAI,OAAO,SACT,MAAK,QAAQ;AAGf,MAAI,YAAY;GACd,IAAI,gBAAgB,KAAK,cAAc,IAAI,WAAW;AACtD,OAAI,CAAC,eAAe;AAClB,oBAAgB;KACd,iBAAiB;KACjB,cAAc;KACd,cAAc;KACd,cAAc;KACd,iBAAiB;KACjB,eAAe;KAChB;AACD,SAAK,cAAc,IAAI,YAAY,cAAc;;AAGnD,iBAAc;AACd,iBAAc,iBAAiB,OAAO;AACtC,iBAAc,kBAAkB,cAAc,gBAAgB,cAAc;AAE5E,OAAI,OAAO,QACT,eAAc;OAEd,eAAc;AAGhB,OAAI,OAAO,SACT,eAAc;;;;;;CAQpB,AAAQ,kBAAkB,MAAkD;AAC1E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;GAAE,OAAO;GAAO,OAAO;GAA2B;AAE3D,MAAI,sBAAsB,SAAS,KAAK,CACtC,QAAO;GAAE,OAAO;GAAO,OAAO,gBAAgB,KAAK;GAAgB;AAErE,MAAI,CAAC,2BAA2B,KAAK,KAAK,CACxC,QAAO;GACL,OAAO;GACP,OACE;GACH;AAEH,MAAI,KAAK,SAAS,KAAK,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,CAClE,QAAO;GAAE,OAAO;GAAO,OAAO;GAA8C;AAE9E,SAAO,EAAE,OAAO,MAAM;;;;;CAMxB,AAAQ,cAAc,SAAiB,WAA2C;EAChF,IAAI,SAAS;AACb,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,UAAS,OAAO,QAAQ,IAAI,OAAO,SAAS,IAAI,SAAS,IAAI,EAAE,MAAM;AAEvE,SAAO;;;;;CAMT,MAAc,cACZ,YACA,MACA,KACwB;EACxB,MAAM,UAAW,IAAI,WAAqE,EAAE;AAE5F,MAAI,eAAe,OAAO;GACxB,MAAM,OAAO,KAAK;AAClB,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,mDAAmD;GAGrE,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,OAAU;AACzE,OAAI,UAAU,QACZ,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,wBAAwB,UAAU;KACzC,MAAM,EAAE;KACR,UAAU;KACV,aAAa;KACd;IACF;AAGH,QAAK,gBAAgB,QAAQ,SAAS,QAAQ,OAAU;GAExD,MAAM,cAAc,qBAAqB;GACzC,MAAM,YAAY,KAAK,KAAK;GAE5B,MAAM,cAAgC;IACpC,MAAO,KAAK,QAAoC,EAAE;IAClD,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA;IACD;AAED,QAAK,SAAS;IACZ,MAAM;IACN,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B,YAAY;IACZ,SAAS,EAAE,YAAY,KAAK,QAAQ;IACrC,CAAC;GAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,MAAM,KAAK,cAAc,YAAY;GAC/E,MAAM,gBAAgB;AAEtB,QAAK,cAAc,QAAW,cAAc;GAE5C,MAAM,EAAE,SAAS,YAAY,GAAG,YAAY;AAI5C,UAAO;IAAE,SAAS;IAAY,MAAM;IAAoC;;AAG1E,MAAI,eAAe,YAAY;GAC7B,MAAM,OAAO,KAAK;AAClB,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,wDAAwD;AAG1E,OAAI;AACF,QAAI,SAAS,sCAAsC,KAAK,IAAI;AAC5D,WAAO;KACL,SAAS;KACT,MAAM;MAAE,OAAO;MAAM,SAAS;MAAmB;KAClD;YACM,OAAO;AACd,WAAO;KACL,SAAS;KACT,MAAM;MACJ,OAAO;MACP,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;MAC9D;KACF;;;AAIL,MAAI,eAAe,YAAY;GAC7B,MAAM,aAAa,KAAK;GACxB,MAAM,UAAU,KAAK;AAErB,OAAI,OAAO,eAAe,SACxB,OAAM,IAAI,MAAM,0DAA0D;AAE5E,OAAI,OAAO,YAAY,YAAY,UAAU,EAC3C,OAAM,IAAI,MAAM,oEAAoE;GAGtF,MAAM,SAAS,KAAK,QAAQ,IAAI,WAAW;AAC3C,OAAI,CAAC,OACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,qBAAqB,cAAc;IAAE;GAI/E,MAAM,iBADW,OAAO,YAAY,EAAE,EACP,MAAM,MAAM,EAAE,YAAY,QAAQ;AACjE,OAAI,CAAC,cACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,WAAW,QAAQ,aAAa;IAAE;AAG5E,SAAM,KAAK,YACT;IACE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;IAC7C,QAAQ,EAAE,YAAY,GAAG,WAAW,MAAM;IAC1C,SAAS,EAAE;IACZ,EACD,EAAE,SAAS,cAAc,SAAS,CACnC;AAED,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,0BAA0B;KACnC,YAAY,OAAO,UAAU,UAAU;KACxC;IACF;;AAGH,MAAI,eAAe,WAAW;GAC5B,MAAM,aAAa,KAAK;GACxB,MAAM,gBAAgB,KAAK;AAE3B,OAAI,CAAC,cAAc,OAAO,eAAe,SACvC,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,0DAA0D;IAC1E;AAEH,OAAI,CAAC,iBAAiB,OAAO,kBAAkB,SAC7C,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,wDAAwD;IACxE;GAGH,MAAM,iBAAiB,KAAK,kBAAkB,cAAc;AAC5D,OAAI,CAAC,eAAe,MAClB,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,eAAe,OAAO;IAAE;GAGlE,MAAM,SAAS,KAAK,QAAQ,IAAI,WAAW;AAC3C,OAAI,CAAC,OACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,qBAAqB,cAAc;IAAE;AAG/E,OAAI;AACF,QAAI,SAAS,sCAAsC,OAAO,QAAQ,IAAI;YAC/D,OAAO;AACd,WAAO;KACL,SAAS;KACT,MAAM,EACJ,OAAO,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC1F;KACF;;GAGH,MAAM,iBAAiB,OAAO,UAAU,SACpC,KAAK,IAAI,GAAG,OAAO,SAAS,KAAK,MAAM,EAAE,QAAQ,CAAC,GAClD;GAEJ,MAAM,WAAW,KAAK,gBAAgB,IAAI,cAAc;GACxD,MAAMC,mBAAiC;IACrC,MAAM;IACN,aAAc,KAAK,eAA0B,UAAU;IACvD,cAAc;IACd,eAAe;IACf,aAAc,KAAK,eAA2C,UAAU;IACxE,cAAe,KAAK,gBAA4C,UAAU;IAC1E,4BAAY,IAAI,MAAM;IACtB,UAAU,UAAU,WAAW,KAAK;IACrC;AAED,QAAK,gBAAgB,IAAI,eAAeA,iBAAe;AAEvD,QAAK,SAAS;IACZ,MAAM;IACN,YAAY;IACZ;IACA,SAAS,EAAE,SAASA,iBAAe,SAAS;IAC7C,CAAC;AAEF,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,WAAW,WAAW,wBAAwB,cAAc,aAAaA,iBAAe,QAAQ;KACzG,QAAQA;KACT;IACF;;AAGH,MAAI,eAAe,wBAAwB;GACzC,MAAM,eAAe,KAAK;GAC1B,MAAM,aAAa,KAAK;GACxB,MAAM,YAAa,KAAK,aAAwC,EAAE;AAElE,OAAI,CAAC,gBAAgB,OAAO,iBAAiB,SAC3C,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,yEAAyE;IACzF;AAEH,OAAI,CAAC,cAAc,OAAO,eAAe,SACvC,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,qEAAqE;IACrF;AAGH,OACE,aAAa,SAAS,KAAK,IAC3B,aAAa,SAAS,IAAI,IAC1B,aAAa,SAAS,KAAK,CAE3B,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,yBAAyB;IAAE;GAGrE,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,aAAa;AACxE,OAAI,CAAC,SACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,uBAAuB,gBAAgB;IAAE;AAGnF,OAAI,SAAS,WAAW;AACtB,SAAK,MAAM,KAAK,SAAS,UACvB,KAAI,EAAE,YAAY,UAAU,EAAE,UAAU,UAAa,EAAE,YAAY,OACjE,QAAO;KAAE,SAAS;KAAO,MAAM,EAAE,OAAO,8BAA8B,EAAE,QAAQ;KAAE;AAGtF,SAAK,MAAM,KAAK,SAAS,UACvB,KAAI,UAAU,EAAE,UAAU,UAAa,EAAE,YAAY,OACnD,WAAU,EAAE,QAAQ,EAAE;;GAK5B,MAAM,UAAU,KAAK,cAAc,SAAS,SAAS,UAAU;AAE/D,SAAM,KAAK,YACT;IACE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;IAC7C,QAAQ,EAAE,YAAY,GAAG,WAAW,MAAM;IAC1C,SAAS,EAAE;IACZ,EACD,EAAE,SAAS,CACZ;AAED,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,WAAW,WAAW,2BAA2B,aAAa;KACvE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;KAC9C;IACF;;EAIH,MAAM,iBAAiB,KAAK,gBAAgB,IAAI,WAAW;AAC3D,MAAI,gBAAgB;GAClB,MAAM,SAAS,KAAK,QAAQ,IAAI,eAAe,aAAa;AAC5D,OAAI,CAAC,OACH,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,4BAA4B,eAAe;KAClD,MAAM,EAAE;KACR,UAAU;KACX;IACF;GAGH,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,eAAe,aAAa;AAC3F,OAAI,UAAU,QACZ,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,wBAAwB,UAAU;KACzC,MAAM,EAAE;KACR,UAAU;KACV,aAAa;KACd;IACF;AAGH,QAAK,gBAAgB,QAAQ,SAAS,QAAQ,eAAe,aAAa;GAE1E,MAAM,cAAc,qBAAqB;GACzC,MAAM,YAAY,KAAK,KAAK;GAE5B,MAAM,cAAgC;IACpC;IACA,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA;IACD;AAED,QAAK,SAAS;IACZ,MAAM;IACN,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA,YAAY,eAAe;IAC3B,SAAS,EAAE,MAAM,aAAa,KAAK,EAAE;IACtC,CAAC;GAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,OAAO,SAAS,KAAK,cAAc,YAAY;GACzF,MAAM,qBAAqB;AAE3B,QAAK,cAAc,eAAe,cAAc,mBAAmB;GAEnE,MAAM,EAAE,SAAS,iBAAiB,GAAG,iBAAiB;AAItD,UAAO;IAAE,SAAS;IAAiB,MAAM;IAAyC;;AAGpF,QAAM,IAAI,MAAM,mBAAmB,aAAa;;;YAvsDjD,KAAK,IAAI;YAeT,KAAK,WAAW;YAYhB,KAAK,uBAAuB;YAiC5B,KAAK,gCAAgC;YAYrC,KAAK,oCAAoC;YAczC,KAAK,aAAa;YAmBlB,KAAK,2BAA2B;YAYhC,KAAK,WAAW;YAwBhB,KAAK,mBAAmB;YAoBxB,KAAK,SAAS;YAUd,QAAQ,IAAI;YA2GZ,QAAQ,uBAAuB;YAmC/B,KAAK,IAAI;YAuBT,KAAK,WAAW;YAQhB,KAAK,uBAAuB;YAa5B,KAAK,gCAAgC;YAmBrC,KAAK,yCAAyC;YAkC9C,KAAK,oCAAoC;YAmBzC,KAAK,aAAa;YAQlB,KAAK,2BAA2B;YAsBhC,KAAK,WAAW;YAahB,KAAK,+BAA+B;YAiBpC,KAAK,SAAS;YAed,KAAK,IAAI;YAaT,KAAK,WAAW;YAahB,KAAK,uBAAuB;YAmB5B,KAAK,gCAAgC;YAmBrC,KAAK,oCAAoC;YAmBzC,KAAK,aAAa;YAalB,KAAK,2BAA2B;YAuBhC,KAAK,WAAW;YAahB,KAAK,SAAS;YAed,MAAM,uBAAuB;YA4E7B,MAAM,yCAAyC;YAa/C,OAAO,uBAAuB;YAc9B,OAAO,UAAU;YAUjB,QAAQ,KAAK,wBAAwB,OAAO;YAkG5C,KAAK,uBAAuB;YAW5B,QAAQ,KAAK,IAAI;YAcjB,KAAK,IAAI;YAsBT,KAAK,WAAW;YAchB,KAAK,uBAAuB;YA4B5B,KAAK,aAAa;YAclB,KAAK,2BAA2B;YAkBhC,KAAK,WAAW;YAchB,KAAK,SAAS;YAgBd,QAAQ,IAAI;YAyDZ,QAAQ,uBAAuB;YAwC/B,KAAK,uBAAuB;AAwnB/B,kBAAe"}
+{"version":3,"file":"index.mjs","names":["result","storedScript","promotedAction"],"sources":["../src/capabilities/index.ts","../src/runtime/isolate.ts","../src/index.ts"],"sourcesContent":["import type { AFSRoot } from \"@aigne/afs\";\nimport type { CapabilitiesConfig } from \"../types.js\";\n\n/**\n * Capability functions that can be called from within the sandbox.\n * These are injected as `afs.*` methods.\n */\nexport type CapabilityFunctions = Record<string, (...args: unknown[]) => Promise<unknown>>;\n\n/**\n * Check if a path matches any patterns in the list.\n */\nfunction pathMatchesPatterns(path: string, patterns: string[]): boolean {\n  for (const pattern of patterns) {\n    // Simple glob-like matching\n    if (pattern === \"*\" || pattern === \"**\") return true;\n    if (pattern.endsWith(\"/**\") && path.startsWith(pattern.slice(0, -3))) {\n      return true;\n    }\n    if (pattern.endsWith(\"/*\") && path.startsWith(pattern.slice(0, -2))) {\n      // Only match direct children\n      const rest = path.slice(pattern.length - 2);\n      if (!rest.includes(\"/\") || rest === \"\") return true;\n    }\n    if (path === pattern) return true;\n    if (path.startsWith(`${pattern}/`)) return true;\n  }\n  return false;\n}\n\n/**\n * Check if a path is allowed based on allow/deny patterns.\n */\nfunction isPathAllowed(path: string, allowPaths?: string[], denyPaths?: string[]): boolean {\n  // If deny patterns exist and path matches, deny\n  if (denyPaths && denyPaths.length > 0 && pathMatchesPatterns(path, denyPaths)) {\n    return false;\n  }\n\n  // If allow patterns exist, path must match\n  if (allowPaths && allowPaths.length > 0) {\n    return pathMatchesPatterns(path, allowPaths);\n  }\n\n  // No restrictions, allow\n  return true;\n}\n\n/**\n * Normalize and validate a path for security.\n * Checks for path traversal attacks, null bytes, etc.\n */\nfunction normalizePath(path: string): string {\n  // Check for null bytes\n  if (path.includes(\"\\x00\")) {\n    throw new Error(\"Invalid path: null byte detected\");\n  }\n\n  // URL decode the path to catch encoded attacks\n  let decoded = path;\n  try {\n    decoded = decodeURIComponent(path);\n  } catch {\n    // If decoding fails, use original\n  }\n\n  // Check for path traversal after decoding\n  if (decoded.includes(\"..\")) {\n    throw new Error(\"Path traversal not allowed\");\n  }\n\n  // Check for control characters (ASCII 0-31 and 127)\n  for (const char of decoded) {\n    const code = char.charCodeAt(0);\n    if (code < 32 || code === 127) {\n      throw new Error(\"Invalid path: control characters detected\");\n    }\n  }\n\n  return decoded;\n}\n\n/**\n * Create capability functions based on configuration.\n *\n * @param afs - The AFS root for filesystem operations\n * @param config - Capabilities configuration\n * @returns Record of capability functions to inject into sandbox\n */\nexport function createCapabilities(\n  afs: AFSRoot | undefined,\n  config: CapabilitiesConfig,\n): CapabilityFunctions {\n  const capabilities: CapabilityFunctions = {};\n\n  // AFS read capability\n  if (afs?.read && config.afs?.read !== false) {\n    const afsRead = afs.read.bind(afs);\n    capabilities.read = async (path: unknown): Promise<string | null> => {\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.read: path must be a string\");\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(path, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.read: access denied to path \"${path}\"`);\n      }\n\n      try {\n        const result = await afsRead(path);\n        if (!result.data) {\n          return null;\n        }\n\n        // Return content as string\n        const content = result.data.content;\n        if (content === undefined || content === null) {\n          return null;\n        }\n\n        if (typeof content === \"string\") {\n          return content;\n        }\n\n        // For non-string content, serialize to JSON\n        return JSON.stringify(content);\n      } catch (error) {\n        throw new Error(\n          `afs.read: failed to read \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  }\n\n  // AFS write capability (Phase 2)\n  if (afs?.write && config.afs?.write === true) {\n    const afsWrite = afs.write.bind(afs);\n    capabilities.write = async (\n      path: unknown,\n      content: unknown,\n    ): Promise<{ success: boolean; path: string }> => {\n      // Validate path\n      if (path === undefined || path === null) {\n        throw new Error(\"afs.write: path is required\");\n      }\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.write: path must be a string\");\n      }\n\n      // Validate content\n      if (typeof content !== \"string\") {\n        throw new Error(\"afs.write: content must be a string\");\n      }\n      if (content === \"\") {\n        throw new Error(\"afs.write: content cannot be empty\");\n      }\n\n      // Normalize and check for path traversal attacks\n      let normalizedPath: string;\n      try {\n        normalizedPath = normalizePath(path);\n      } catch (error) {\n        throw new Error(`afs.write: ${error instanceof Error ? error.message : String(error)}`);\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(normalizedPath, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.write: access denied to path \"${path}\"`);\n      }\n\n      try {\n        await afsWrite(normalizedPath, { content });\n        return { success: true, path: normalizedPath };\n      } catch (error) {\n        throw new Error(\n          `afs.write: failed to write \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  } else {\n    // Provide a stub that throws when write is disabled\n    capabilities.write = async (): Promise<never> => {\n      throw new Error(\"afs.write: write capability not enabled\");\n    };\n  }\n\n  // AFS list capability (useful for Phase 2, but add basic support now)\n  if (afs?.list && config.afs?.read !== false) {\n    const afsList = afs.list.bind(afs);\n    capabilities.list = async (\n      path: unknown,\n      options?: unknown,\n    ): Promise<{ path: string; type: string }[]> => {\n      if (typeof path !== \"string\") {\n        throw new Error(\"afs.list: path must be a string\");\n      }\n\n      // Check path permissions\n      if (!isPathAllowed(path, config.afs?.allowPaths, config.afs?.denyPaths)) {\n        throw new Error(`afs.list: access denied to path \"${path}\"`);\n      }\n\n      try {\n        const listOptions = typeof options === \"object\" && options !== null ? options : {};\n        const result = await afsList(path, listOptions as Record<string, unknown>);\n\n        // Return simplified entry info\n        return result.data.map((entry) => ({\n          path: entry.path,\n          type: (entry.meta?.type as string | undefined) ?? \"unknown\",\n        }));\n      } catch (error) {\n        throw new Error(\n          `afs.list: failed to list \"${path}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    };\n  }\n\n  return capabilities;\n}\n","import { getQuickJS } from \"quickjs-emscripten\";\nimport type {\n  ExecutionContext,\n  ExecutionResult,\n  LogEntry,\n  LogLevel,\n  RuntimeOptions,\n} from \"../types.js\";\n\nconst DEFAULT_TIMEOUT_MS = 5000;\nconst DEFAULT_MEMORY_LIMIT_MB = 128;\n\n/**\n * Sandbox runtime using QuickJS (WebAssembly) for secure JavaScript execution.\n *\n * Provides sandboxed execution with:\n * - Memory limits\n * - CPU time limits (timeout via interrupt)\n * - Capability injection for controlled AFS access\n *\n * Note: Async/await in sandbox code is limited. Capability functions return\n * Promises that can be used for type checking, but full async execution\n * requires calling capabilities synchronously for now.\n */\nexport class SandboxRuntime {\n  private readonly timeout: number;\n  private readonly memoryLimit: number;\n\n  constructor(options: RuntimeOptions = {}) {\n    this.timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n    this.memoryLimit = options.memoryLimit ?? DEFAULT_MEMORY_LIMIT_MB;\n  }\n\n  /**\n   * Execute JavaScript code in an isolated QuickJS sandbox.\n   *\n   * @param code - JavaScript source code to execute\n   * @param capabilities - Capability functions to inject into sandbox\n   * @param context - Execution context with args and tracking info\n   * @returns Execution result with success status, return value, errors, and logs\n   */\n  async execute(\n    code: string,\n    capabilities: Record<string, (...args: unknown[]) => Promise<unknown>>,\n    context: ExecutionContext = {},\n  ): Promise<ExecutionResult> {\n    const logs: LogEntry[] = [];\n    const startTime = Date.now();\n\n    // Get QuickJS instance\n    const QuickJS = await getQuickJS();\n\n    // Create runtime with memory limit\n    const runtime = QuickJS.newRuntime();\n    runtime.setMemoryLimit(this.memoryLimit * 1024 * 1024);\n\n    // Set up interrupt handler for timeout\n    let timedOut = false;\n    const deadline = Date.now() + this.timeout;\n    runtime.setInterruptHandler(() => {\n      if (Date.now() > deadline) {\n        timedOut = true;\n        return true; // Interrupt execution\n      }\n      return false;\n    });\n\n    // Create context\n    const vm = runtime.newContext();\n\n    try {\n      // Inject logging function\n      const logFn = vm.newFunction(\"log\", (levelHandle, messageHandle) => {\n        const level = vm.getString(levelHandle) as LogLevel;\n        const message = vm.getString(messageHandle);\n        logs.push({\n          level,\n          message,\n          timestamp: Date.now(),\n        });\n      });\n      vm.setProp(vm.global, \"__log\", logFn);\n      logFn.dispose();\n\n      // Inject args\n      const argsJson = JSON.stringify(context.args ?? {});\n      vm.evalCode(`const __args = ${argsJson};`);\n\n      // Inject context object (timestamp, executionId, userId, sessionId)\n      const contextObj = {\n        timestamp: context.timestamp ?? Date.now(),\n        executionId: context.executionId ?? `exec-${Date.now()}`,\n        userId: context.userId,\n        sessionId: context.sessionId,\n      };\n      const contextJson = JSON.stringify(contextObj);\n      vm.evalCode(`const __context = ${contextJson};`);\n\n      // Create pending promises tracker for async capabilities\n      const pendingPromises: Map<\n        number,\n        {\n          resolve: (value: unknown) => void;\n          reject: (error: Error) => void;\n        }\n      > = new Map();\n      let promiseId = 0;\n\n      // Inject capability functions\n      for (const [name, fn] of Object.entries(capabilities)) {\n        // Create a sync function that returns a promise ID\n        const capFn = vm.newFunction(`__cap_${name}`, (...argHandles) => {\n          const args = argHandles.map((h) => {\n            const type = vm.typeof(h);\n            if (type === \"string\") return vm.getString(h);\n            if (type === \"number\") return vm.getNumber(h);\n            if (type === \"boolean\") return vm.dump(h);\n            if (type === \"object\" || type === \"undefined\") return vm.dump(h);\n            return vm.dump(h);\n          });\n\n          // Store the promise for later resolution\n          const id = promiseId++;\n\n          // Execute the capability async\n          fn(...args)\n            .then((result) => {\n              pendingPromises.get(id)?.resolve(result);\n              pendingPromises.delete(id);\n            })\n            .catch((error) => {\n              pendingPromises\n                .get(id)\n                ?.reject(error instanceof Error ? error : new Error(String(error)));\n              pendingPromises.delete(id);\n            });\n\n          return vm.newNumber(id);\n        });\n        vm.setProp(vm.global, `__cap_${name}`, capFn);\n        capFn.dispose();\n      }\n\n      // Build the afs object and wrapper code\n      const capabilitySetups = Object.keys(capabilities)\n        .map(\n          (name) => `\n    ${name}: function(...args) {\n      return new Promise((resolve, reject) => {\n        const id = __cap_${name}(...args);\n        __pendingResolvers[id] = { resolve, reject };\n      });\n    }`,\n        )\n        .join(\",\\n\");\n\n      const wrapperCode = `\n(function() {\n  // Pending promise resolvers\n  const __pendingResolvers = {};\n  globalThis.__pendingResolvers = __pendingResolvers;\n\n  // Set up afs object with logging and capabilities\n  const afs = {\n    log: function(level, message) {\n      __log(String(level), String(message));\n    },\n    ${capabilitySetups}\n  };\n\n  // Get arguments and context\n  const args = __args;\n  const context = Object.freeze(__context);\n\n  // User code\n  ${code}\n})();\n`;\n\n      // Execute the code\n      const result = vm.evalCode(wrapperCode);\n\n      if (timedOut) {\n        result.dispose();\n        return {\n          success: false,\n          error: `Script execution timed out after ${this.timeout}ms`,\n          logs,\n          duration: Date.now() - startTime,\n          timedOut: true,\n        };\n      }\n\n      if (result.error) {\n        const errorValue = vm.dump(result.error);\n        result.error.dispose();\n\n        const errorMessage =\n          typeof errorValue === \"object\" && errorValue !== null\n            ? ((errorValue as { message?: string }).message ?? String(errorValue))\n            : String(errorValue);\n\n        return {\n          success: false,\n          error: errorMessage,\n          stack:\n            typeof errorValue === \"object\" && errorValue !== null\n              ? (errorValue as { stack?: string }).stack\n              : undefined,\n          logs,\n          duration: Date.now() - startTime,\n        };\n      }\n\n      // Get the result value\n      const resultValue = vm.dump(result.value);\n      result.value.dispose();\n\n      return {\n        success: true,\n        result: resultValue,\n        logs,\n        duration: Date.now() - startTime,\n        timedOut: false,\n      };\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      const stack = error instanceof Error ? error.stack : undefined;\n\n      return {\n        success: false,\n        error: errorMessage,\n        stack,\n        logs,\n        duration: Date.now() - startTime,\n      };\n    } finally {\n      // Cleanup\n      vm.dispose();\n      runtime.dispose();\n    }\n  }\n}\n","import {\n  type AFSAccessMode,\n  type AFSDeleteResult,\n  type AFSEntry,\n  type AFSExecResult,\n  type AFSExplainResult,\n  type AFSListResult,\n  type AFSModuleClass,\n  type AFSModuleLoadParams,\n  AFSNotFoundError,\n  type AFSRoot,\n  type AFSStatResult,\n  type AFSWriteEntryPayload,\n  type AFSWriteResult,\n  type CapabilitiesManifest,\n  type ProviderManifest,\n} from \"@aigne/afs\";\nimport {\n  Actions,\n  AFSBaseProvider,\n  Delete,\n  Exec,\n  Explain,\n  List,\n  Meta,\n  Read,\n  type RouteContext,\n  Stat,\n  Write,\n} from \"@aigne/afs/provider\";\nimport { joinURL } from \"ufo\";\nimport { z } from \"zod\";\nimport { type CapabilityFunctions, createCapabilities } from \"./capabilities/index.js\";\nimport { SandboxRuntime } from \"./runtime/isolate.js\";\nimport type {\n  AFSSandboxOptions,\n  AuditConfig,\n  AuditEvent,\n  ExecutionContext,\n  ExecutionHistoryEntry,\n  ExecutionMetrics,\n  ExecutionResult,\n  PromotedAction,\n  RateLimitConfig,\n  ScriptMetadata,\n  ScriptTemplate,\n  ScriptVersion,\n  StoredScript,\n} from \"./types.js\";\n\nexport type {\n  AFSSandboxOptions,\n  AuditConfig,\n  AuditEvent,\n  AuditEventType,\n  ExecutionMetrics,\n  ExecutionResult,\n  LogEntry,\n  LogLevel,\n  PromotedAction,\n  RateLimitConfig,\n  ScriptTemplate,\n} from \"./types.js\";\n\n/** Maximum number of versions to keep per script */\nconst MAX_VERSIONS = 5;\n/** Maximum number of execution history entries per script */\nconst MAX_EXEC_HISTORY = 100;\n/** Sensitive fields to redact from execution history */\nconst SENSITIVE_FIELDS = [\"password\", \"secret\", \"token\", \"key\", \"credential\", \"auth\"];\n\n/**\n * Generate a unique execution ID\n */\nfunction generateExecutionId(): string {\n  return `exec-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;\n}\n\n/**\n * Sanitize args by redacting sensitive fields\n */\nfunction sanitizeArgs(args: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    if (SENSITIVE_FIELDS.some((f) => key.toLowerCase().includes(f))) {\n      sanitized[key] = \"[REDACTED]\";\n    } else if (typeof value === \"object\" && value !== null) {\n      sanitized[key] = sanitizeArgs(value as Record<string, unknown>);\n    } else {\n      sanitized[key] = value;\n    }\n  }\n  return sanitized;\n}\n\n/**\n * Zod schema for configuration validation\n */\nconst afsSandboxOptionsSchema = z.object({\n  name: z.string().optional().describe(\"Module name\"),\n  description: z.string().optional().describe(\"Module description\"),\n  accessMode: z.enum([\"readonly\", \"readwrite\"]).optional().describe(\"Access mode for this module\"),\n  runtime: z\n    .object({\n      timeout: z.number().positive().optional().describe(\"Execution timeout in milliseconds\"),\n      memoryLimit: z.number().positive().optional().describe(\"Memory limit in MB\"),\n    })\n    .optional()\n    .describe(\"Runtime configuration\"),\n  capabilities: z\n    .object({\n      afs: z\n        .object({\n          read: z.boolean().optional().describe(\"Enable read operations\"),\n          write: z.boolean().optional().describe(\"Enable write operations\"),\n          allowPaths: z.array(z.string()).optional().describe(\"Allowed path patterns\"),\n          denyPaths: z.array(z.string()).optional().describe(\"Denied path patterns\"),\n        })\n        .optional()\n        .describe(\"AFS access configuration\"),\n    })\n    .optional()\n    .describe(\"Capabilities configuration\"),\n  audit: z\n    .object({\n      enabled: z.boolean().describe(\"Enable audit logging\"),\n      onEvent: z.any().optional(),\n      maxEntries: z.number().positive().optional().describe(\"Max audit entries to keep\"),\n    })\n    .optional()\n    .describe(\"Audit configuration\"),\n  rateLimit: z\n    .object({\n      maxExecutionsPerMinute: z.number().positive().optional(),\n      maxExecutionsPerMinutePerUser: z.number().positive().optional(),\n      maxExecutionsPerMinutePerScript: z.number().positive().optional(),\n    })\n    .optional()\n    .describe(\"Rate limiting configuration\"),\n});\n\n/** Reserved action names that cannot be used for promoted actions */\nconst RESERVED_ACTION_NAMES = [\"run\", \"validate\", \"rollback\", \"promote\", \"create-from-template\"];\n\n/** Built-in script templates */\nconst BUILT_IN_TEMPLATES: ScriptTemplate[] = [\n  {\n    name: \"basic\",\n    description: \"A basic script template\",\n    content: `// Basic script template\nreturn args.input;`,\n    category: \"general\",\n  },\n  {\n    name: \"data-transform\",\n    description: \"Transform input data to output format\",\n    content: `// Data transformation script\nconst {{inputField}} = args.{{inputField}};\nconst {{outputField}} = {{inputField}};\nreturn { {{outputField}} };`,\n    variables: [\n      { name: \"inputField\", description: \"Name of the input field\", required: true },\n      { name: \"outputField\", description: \"Name of the output field\", required: true },\n    ],\n    category: \"data\",\n  },\n  {\n    name: \"validation\",\n    description: \"Validate input data against rules\",\n    content: `// Validation script\nconst value = args.{{fieldName}};\nconst errors = [];\n\nif (value === undefined || value === null) {\n  errors.push('{{fieldName}} is required');\n}\n\nreturn { valid: errors.length === 0, errors };`,\n    variables: [\n      { name: \"fieldName\", description: \"Name of the field to validate\", required: true },\n    ],\n    category: \"validation\",\n  },\n  {\n    name: \"aggregation\",\n    description: \"Aggregate array data\",\n    content: `// Aggregation script\nconst items = args.items || [];\nconst sum = items.reduce((acc, item) => acc + (item.{{valueField}} || 0), 0);\nconst count = items.length;\nconst average = count > 0 ? sum / count : 0;\n\nreturn { sum, count, average };`,\n    variables: [\n      { name: \"valueField\", description: \"Field to aggregate\", required: true, default: \"value\" },\n    ],\n    category: \"data\",\n  },\n];\n\n/**\n * AFS Sandbox Provider\n *\n * Provides a sandboxed JavaScript execution environment for LLM-generated code.\n * Scripts are stored at `/scripts/{name}.js` and executed directly via exec().\n *\n * Structure:\n * - `/` - root directory\n * - `/scripts` - stored scripts directory\n * - `/scripts/{name}.js` - individual script files (executable)\n * - `/templates` - script templates\n * - `/templates/{name}` - individual templates\n * - `/metrics` - execution metrics\n * - `/audit` - audit log\n * - `/.actions` - root-level actions (run, validate, promote, create-from-template)\n * - `/scripts/{name}.js/.actions` - script-level actions (exec, history, exec-history)\n *\n * @example\n * ```typescript\n * const sandbox = new AFSSandbox({ name: \"sandbox\" });\n * afs.mount(sandbox);\n *\n * // Write a script\n * await afs.write(\"/modules/sandbox/scripts/greet.js\", {\n *   content: `\n *     afs.log(\"info\", \"Hello from sandbox!\");\n *     return \"Hello, \" + args.name;\n *   `\n * });\n *\n * // Execute the script\n * const result = await afs.exec(\"/modules/sandbox/scripts/greet.js\", { name: \"World\" });\n * // result.data = { success: true, result: \"Hello, World\", logs: [...] }\n * ```\n */\nexport class AFSSandbox extends AFSBaseProvider {\n  override readonly name: string;\n  override readonly description?: string;\n  override readonly accessMode: AFSAccessMode;\n\n  private readonly runtime: SandboxRuntime;\n  private readonly options: AFSSandboxOptions;\n  private readonly scripts: Map<string, StoredScript> = new Map();\n  private capabilities: CapabilityFunctions = {};\n\n  // Promoted actions storage\n  private readonly promotedActions: Map<string, PromotedAction> = new Map();\n\n  // Audit logging\n  private readonly auditLog: AuditEvent[] = [];\n  private readonly auditConfig?: AuditConfig;\n\n  // Rate limiting\n  private readonly rateLimitConfig?: RateLimitConfig;\n  private readonly executionTimestamps: number[] = [];\n  private readonly userExecutionTimestamps: Map<string, number[]> = new Map();\n  private readonly scriptExecutionTimestamps: Map<string, number[]> = new Map();\n\n  // Metrics\n  private metrics: ExecutionMetrics = {\n    totalExecutions: 0,\n    successCount: 0,\n    failureCount: 0,\n    timeoutCount: 0,\n    averageDuration: 0,\n    totalDuration: 0,\n  };\n  private readonly scriptMetrics: Map<string, ExecutionMetrics> = new Map();\n\n  constructor(options: AFSSandboxOptions = {}) {\n    super();\n    this.options = afsSandboxOptionsSchema.parse(options);\n    this.name = options.name ?? \"sandbox\";\n    this.description = options.description ?? \"JavaScript sandbox for LLM code execution\";\n    this.accessMode = options.accessMode ?? \"readwrite\";\n    this.runtime = new SandboxRuntime(options.runtime);\n    this.auditConfig = options.audit;\n    this.rateLimitConfig = options.rateLimit;\n    // Initialize capabilities with undefined AFS (stubs only)\n    this.capabilities = createCapabilities(undefined, this.options.capabilities ?? {});\n  }\n\n  /**\n   * Returns the Zod schema for configuration validation\n   */\n  static schema() {\n    return afsSandboxOptionsSchema;\n  }\n\n  static manifest(): ProviderManifest {\n    return {\n      name: \"sandbox\",\n      description: \"Sandboxed JavaScript execution environment for LLM-generated code\",\n      uriTemplate: \"sandbox://\",\n      category: \"compute\",\n      schema: z.object({}),\n      tags: [\"sandbox\", \"compute\", \"javascript\"],\n    };\n  }\n\n  /**\n   * Loads a module instance from configuration\n   */\n  static async load({ config }: AFSModuleLoadParams = {}): Promise<AFSSandbox> {\n    const validated = afsSandboxOptionsSchema.parse(config);\n    return new AFSSandbox(validated);\n  }\n\n  /**\n   * Called when the module is mounted to AFS\n   */\n  onMount(afs: AFSRoot): void {\n    this.capabilities = createCapabilities(afs, this.options.capabilities ?? {});\n  }\n\n  // ========== List Handlers ==========\n\n  /**\n   * List root directory children\n   */\n  @List(\"/\")\n  async listRoot(_ctx: RouteContext): Promise<AFSListResult> {\n    return {\n      data: [\n        this.buildScriptsDirectoryEntry(),\n        this.buildTemplatesDirectoryEntry(),\n        this.buildMetricsDirectoryEntry(),\n        this.buildAuditDirectoryEntry(),\n      ],\n    };\n  }\n\n  /**\n   * List all scripts\n   */\n  @List(\"/scripts\")\n  async listScripts(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [];\n    for (const [name, script] of this.scripts) {\n      entries.push(this.buildScriptEntry(name, script));\n    }\n    return { data: entries };\n  }\n\n  /**\n   * List script children (@history, @execHistory)\n   */\n  @List(\"/scripts/:scriptName\")\n  async listScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    const basePath = joinURL(\"/scripts\", ctx.params.scriptName);\n    return {\n      data: [\n        {\n          id: joinURL(basePath, \"@history\"),\n          path: joinURL(basePath, \"@history\"),\n          summary: \"Version history\",\n          meta: { kind: \"sandbox:history\", type: \"history\", count: (script.versions ?? []).length },\n        },\n        {\n          id: joinURL(basePath, \"@execHistory\"),\n          path: joinURL(basePath, \"@execHistory\"),\n          summary: \"Execution history\",\n          meta: {\n            kind: \"sandbox:exec-history\",\n            type: \"execHistory\",\n            count: (script.execHistory ?? []).length,\n          },\n        },\n      ],\n    };\n  }\n\n  /**\n   * List @history children (leaf node)\n   */\n  @List(\"/scripts/:scriptName/@history\")\n  async listScriptHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List @execHistory children (leaf node)\n   */\n  @List(\"/scripts/:scriptName/@execHistory\")\n  async listScriptExecHistoryEntries(\n    ctx: RouteContext<{ scriptName: string }>,\n  ): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List all templates\n   */\n  @List(\"/templates\")\n  async listTemplates(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries = BUILT_IN_TEMPLATES.map((t) => ({\n      id: joinURL(\"/templates\", t.name),\n      path: joinURL(\"/templates\", t.name),\n      summary: t.description,\n      meta: {\n        kind: \"sandbox:template\",\n        type: \"template\",\n        category: t.category,\n        variables: t.variables,\n      },\n    }));\n    return { data: entries };\n  }\n\n  /**\n   * List template children (leaf node)\n   */\n  @List(\"/templates/:templateName\")\n  async listTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSListResult> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return { data: [] };\n  }\n\n  /**\n   * List metrics children\n   */\n  @List(\"/metrics\")\n  async listMetrics(_ctx: RouteContext): Promise<AFSListResult> {\n    if (this.scriptMetrics.size === 0) {\n      return { data: [] };\n    }\n    return {\n      data: [\n        {\n          id: \"/metrics/scripts\",\n          path: \"/metrics/scripts\",\n          summary: \"Per-script execution metrics\",\n          meta: {\n            kind: \"sandbox:directory\",\n            type: \"directory\",\n            childrenCount: this.scriptMetrics.size,\n          },\n        },\n      ],\n    };\n  }\n\n  /**\n   * List per-script metrics\n   */\n  @List(\"/metrics/scripts\")\n  async listScriptMetrics(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [];\n    for (const [name, metrics] of this.scriptMetrics) {\n      entries.push({\n        id: joinURL(\"/metrics/scripts\", name),\n        path: joinURL(\"/metrics/scripts\", name),\n        meta: {\n          kind: \"sandbox:metrics\",\n          type: \"script-metrics\",\n          totalExecutions: metrics.totalExecutions,\n        },\n      });\n    }\n    return { data: entries };\n  }\n\n  /**\n   * List audit children (leaf node)\n   */\n  @List(\"/audit\")\n  async listAudit(_ctx: RouteContext): Promise<AFSListResult> {\n    return { data: [] };\n  }\n\n  // ========== Actions Listing ==========\n\n  /**\n   * List root-level actions\n   */\n  @Actions(\"/\")\n  async listRootActions(_ctx: RouteContext): Promise<AFSListResult> {\n    const entries: AFSEntry[] = [\n      {\n        id: \"run\",\n        path: \"/.actions/run\",\n        summary: \"Run inline JavaScript code\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"run\",\n          description: \"Execute inline JavaScript code\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              code: { type: \"string\", description: \"JavaScript code to execute\" },\n              args: { type: \"object\", description: \"Arguments to pass to the code\" },\n            },\n            required: [\"code\"],\n          },\n        },\n      },\n      {\n        id: \"validate\",\n        path: \"/.actions/validate\",\n        summary: \"Validate JavaScript syntax\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"validate\",\n          description: \"Check JavaScript code for syntax errors\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              code: { type: \"string\", description: \"JavaScript code to validate\" },\n            },\n            required: [\"code\"],\n          },\n        },\n      },\n      {\n        id: \"promote\",\n        path: \"/.actions/promote\",\n        summary: \"Promote a script to a formal action\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"promote\",\n          description: \"Promote a tested script to a formal action\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              script: { type: \"string\", description: \"Script name to promote\" },\n              name: { type: \"string\", description: \"Action name\" },\n              description: { type: \"string\", description: \"Action description\" },\n              inputSchema: { type: \"object\", description: \"JSON schema for inputs\" },\n              outputSchema: { type: \"object\", description: \"JSON schema for outputs\" },\n            },\n            required: [\"script\", \"name\"],\n          },\n        },\n      },\n      {\n        id: \"create-from-template\",\n        path: \"/.actions/create-from-template\",\n        summary: \"Create a script from a template\",\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: \"create-from-template\",\n          description: \"Create a new script from a template\",\n          inputSchema: {\n            type: \"object\",\n            properties: {\n              template: { type: \"string\", description: \"Template name\" },\n              name: { type: \"string\", description: \"Script name to create\" },\n              variables: { type: \"object\", description: \"Template variables\" },\n            },\n            required: [\"template\", \"name\"],\n          },\n        },\n      },\n    ];\n\n    // Add promoted actions\n    for (const [actionName, action] of this.promotedActions) {\n      entries.push({\n        id: actionName,\n        path: joinURL(\"/.actions\", actionName),\n        summary: action.description ?? `Promoted action: ${actionName}`,\n        meta: {\n          kind: \"afs:executable\",\n          kinds: [\"afs:executable\", \"afs:node\"],\n          name: actionName,\n          description: action.description ?? `Execute ${actionName}`,\n          inputSchema: action.inputSchema,\n          outputSchema: action.outputSchema,\n        },\n      });\n    }\n\n    return { data: entries };\n  }\n\n  /**\n   * List script-level actions\n   */\n  @Actions(\"/scripts/:scriptName\")\n  async listScriptActions(ctx: RouteContext<{ scriptName: string }>): Promise<AFSListResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n\n    const basePath = joinURL(\"/scripts\", ctx.params.scriptName, \".actions\");\n    return {\n      data: [\n        {\n          id: \"exec\",\n          path: joinURL(basePath, \"exec\"),\n          summary: `Execute script ${name}`,\n          meta: {\n            kind: \"afs:executable\",\n            kinds: [\"afs:executable\", \"afs:node\"],\n            name: \"exec\",\n            description: `Execute the ${name} script`,\n            inputSchema: {\n              type: \"object\",\n              description: \"Arguments passed to the script's default export function\",\n            },\n          },\n        },\n      ],\n    };\n  }\n\n  // ========== Read Handlers ==========\n\n  /**\n   * Read root entry\n   */\n  @Read(\"/\")\n  async readRoot(_ctx: RouteContext): Promise<AFSEntry> {\n    const actions = [\n      { name: \"run\", description: \"Run inline JavaScript code\" },\n      { name: \"validate\", description: \"Validate JavaScript syntax\" },\n      { name: \"promote\", description: \"Promote a script to a formal action\" },\n      { name: \"create-from-template\", description: \"Create a script from a template\" },\n      ...Array.from(this.promotedActions.entries()).map(([name, action]) => ({\n        name,\n        description: action.description ?? `Promoted action: ${name}`,\n      })),\n    ];\n    return {\n      id: \"/\",\n      path: \"/\",\n      meta: { type: \"directory\", childrenCount: 4 },\n      actions,\n    };\n  }\n\n  /**\n   * Read scripts directory\n   */\n  @Read(\"/scripts\")\n  async readScriptsDir(_ctx: RouteContext): Promise<AFSEntry> {\n    return this.buildScriptsDirectoryEntry();\n  }\n\n  /**\n   * Read a specific script\n   */\n  @Read(\"/scripts/:scriptName\")\n  async readScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    return this.buildScriptEntry(name, script);\n  }\n\n  /**\n   * Read version history for a script\n   */\n  @Read(\"/scripts/:scriptName/@history\")\n  async readScriptHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const versions = script.versions ?? [];\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@history\"),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@history\"),\n      content: versions,\n      meta: { type: \"history\", count: versions.length },\n    };\n  }\n\n  /**\n   * Read a specific version\n   */\n  @Read(\"/scripts/:scriptName/@history/:version\")\n  async readScriptVersion(\n    ctx: RouteContext<{ scriptName: string; version: string }>,\n  ): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const versionNum = Number.parseInt(ctx.params.version, 10);\n    if (Number.isNaN(versionNum) || versionNum < 0) {\n      throw new AFSNotFoundError(ctx.path, \"Invalid version number\");\n    }\n    const versions = script.versions ?? [];\n    const version = versions.find((v) => v.version === versionNum);\n    if (!version) {\n      throw new AFSNotFoundError(ctx.path, `Version ${versionNum} not found`);\n    }\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@history\", String(versionNum)),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@history\", String(versionNum)),\n      content: version.content,\n      meta: {\n        type: \"version\",\n        version: version.version,\n        timestamp: version.timestamp,\n        size: version.size,\n      },\n    };\n  }\n\n  /**\n   * Read execution history for a script\n   */\n  @Read(\"/scripts/:scriptName/@execHistory\")\n  async readScriptExecHistory(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const execHistory = script.execHistory ?? [];\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`, \"@execHistory\"),\n      path: joinURL(\"/scripts\", `${name}.js`, \"@execHistory\"),\n      content: execHistory,\n      meta: { type: \"execHistory\", count: execHistory.length },\n    };\n  }\n\n  /**\n   * Read templates directory\n   */\n  @Read(\"/templates\")\n  async readTemplatesDir(_ctx: RouteContext): Promise<AFSEntry> {\n    return this.buildTemplatesDirectoryEntry();\n  }\n\n  /**\n   * Read a specific template\n   */\n  @Read(\"/templates/:templateName\")\n  async readTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSEntry> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path, `Template not found: ${ctx.params.templateName}`);\n    }\n    return {\n      id: joinURL(\"/templates\", template.name),\n      path: joinURL(\"/templates\", template.name),\n      content: template.content,\n      meta: {\n        type: \"template\",\n        description: template.description,\n        category: template.category,\n        variables: template.variables,\n      },\n    };\n  }\n\n  /**\n   * Read metrics\n   */\n  @Read(\"/metrics\")\n  async readMetrics(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/metrics\",\n      path: \"/metrics\",\n      content: this.metrics,\n      meta: { type: \"metrics\" },\n    };\n  }\n\n  /**\n   * Read per-script metrics\n   */\n  @Read(\"/metrics/scripts/:scriptName\")\n  async readScriptMetrics(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const scriptMetrics = this.scriptMetrics.get(ctx.params.scriptName);\n    if (!scriptMetrics) {\n      throw new AFSNotFoundError(ctx.path, `Script metrics not found: ${ctx.params.scriptName}`);\n    }\n    return {\n      id: joinURL(\"/metrics/scripts\", ctx.params.scriptName),\n      path: joinURL(\"/metrics/scripts\", ctx.params.scriptName),\n      content: { executionCount: scriptMetrics.totalExecutions, ...scriptMetrics },\n      meta: { type: \"script-metrics\", scriptName: ctx.params.scriptName },\n    };\n  }\n\n  /**\n   * Read audit log\n   */\n  @Read(\"/audit\")\n  async readAudit(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/audit\",\n      path: \"/audit\",\n      content: this.auditLog,\n      meta: { type: \"audit\", count: this.auditLog.length },\n    };\n  }\n\n  // ========== Meta Handlers ==========\n\n  /**\n   * Root metadata\n   */\n  @Meta(\"/\")\n  async readRootMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/.meta\",\n      path: \"/.meta\",\n      content: { type: \"directory\", childrenCount: 4 },\n      meta: { type: \"directory\", childrenCount: 4 },\n    };\n  }\n\n  /**\n   * Scripts directory metadata\n   */\n  @Meta(\"/scripts\")\n  async readScriptsMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/scripts/.meta\",\n      path: \"/scripts/.meta\",\n      content: { type: \"directory\", childrenCount: this.scripts.size },\n      meta: { type: \"directory\", childrenCount: this.scripts.size },\n    };\n  }\n\n  /**\n   * Script metadata\n   */\n  @Meta(\"/scripts/:scriptName\")\n  async readScriptMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const entry = this.buildScriptEntry(name, script);\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \".meta\"),\n      content: entry.meta ?? {},\n      meta: entry.meta ?? {},\n    };\n  }\n\n  /**\n   * @history metadata\n   */\n  @Meta(\"/scripts/:scriptName/@history\")\n  async readScriptHistoryMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const meta = { type: \"history\", count: (script.versions ?? []).length };\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \"@history\", \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \"@history\", \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * @execHistory metadata\n   */\n  @Meta(\"/scripts/:scriptName/@execHistory\")\n  async readScriptExecHistoryMeta(ctx: RouteContext<{ scriptName: string }>): Promise<AFSEntry> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    const meta = { type: \"execHistory\", count: (script.execHistory ?? []).length };\n    return {\n      id: joinURL(\"/scripts\", ctx.params.scriptName, \"@execHistory\", \".meta\"),\n      path: joinURL(\"/scripts\", ctx.params.scriptName, \"@execHistory\", \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * Templates directory metadata\n   */\n  @Meta(\"/templates\")\n  async readTemplatesMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/templates/.meta\",\n      path: \"/templates/.meta\",\n      content: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n      meta: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n    };\n  }\n\n  /**\n   * Template metadata\n   */\n  @Meta(\"/templates/:templateName\")\n  async readTemplateMeta(ctx: RouteContext<{ templateName: string }>): Promise<AFSEntry> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path, `Template not found: ${ctx.params.templateName}`);\n    }\n    const meta = {\n      type: \"template\",\n      description: template.description,\n      category: template.category,\n      variables: template.variables,\n    };\n    return {\n      id: joinURL(\"/templates\", ctx.params.templateName, \".meta\"),\n      path: joinURL(\"/templates\", ctx.params.templateName, \".meta\"),\n      content: meta,\n      meta,\n    };\n  }\n\n  /**\n   * Metrics metadata\n   */\n  @Meta(\"/metrics\")\n  async readMetricsMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/metrics/.meta\",\n      path: \"/metrics/.meta\",\n      content: { type: \"metrics\" },\n      meta: { type: \"metrics\" },\n    };\n  }\n\n  /**\n   * Audit metadata\n   */\n  @Meta(\"/audit\")\n  async readAuditMeta(_ctx: RouteContext): Promise<AFSEntry> {\n    return {\n      id: \"/audit/.meta\",\n      path: \"/audit/.meta\",\n      content: { type: \"audit\", entryCount: this.auditLog.length },\n      meta: { type: \"audit\", entryCount: this.auditLog.length },\n    };\n  }\n\n  // ========== Write Handlers ==========\n\n  /**\n   * Write (create or update) a script\n   */\n  @Write(\"/scripts/:scriptName\")\n  async writeScript(\n    ctx: RouteContext<{ scriptName: string }>,\n    entry: AFSWriteEntryPayload,\n  ): Promise<AFSWriteResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n\n    const now = new Date();\n    const existing = this.scripts.get(name);\n\n    // Handle meta-only writes — preserve existing content\n    if (entry.content === undefined && existing) {\n      const meta: ScriptMetadata = {\n        name,\n        createdAt: existing.meta.createdAt,\n        updatedAt: now,\n        lastRun: existing.meta.lastRun,\n        runCount: existing.meta.runCount,\n      };\n      const storedScript: StoredScript = {\n        content: existing.content,\n        meta,\n        versions: existing.versions,\n        execHistory: existing.execHistory,\n      };\n      this.scripts.set(name, storedScript);\n      return {\n        data: this.buildScriptEntry(name, storedScript),\n        message: \"Script updated\",\n      };\n    }\n\n    const content =\n      typeof entry.content === \"string\" ? entry.content : JSON.stringify(entry.content);\n\n    // Build version history\n    const versions: ScriptVersion[] = existing?.versions ? [...existing.versions] : [];\n    const maxVersion = versions.length > 0 ? Math.max(...versions.map((v) => v.version)) : 0;\n    const newVersion: ScriptVersion = {\n      version: maxVersion + 1,\n      content,\n      timestamp: now,\n      size: new TextEncoder().encode(content).length,\n    };\n    versions.push(newVersion);\n\n    // Keep only last MAX_VERSIONS\n    while (versions.length > MAX_VERSIONS) {\n      versions.shift();\n    }\n\n    const meta: ScriptMetadata = {\n      name,\n      createdAt: existing?.meta.createdAt ?? now,\n      updatedAt: now,\n      lastRun: existing?.meta.lastRun,\n      runCount: existing?.meta.runCount ?? 0,\n    };\n\n    const storedScript: StoredScript = {\n      content,\n      meta,\n      versions,\n      execHistory: existing?.execHistory ?? [],\n    };\n    this.scripts.set(name, storedScript);\n\n    return {\n      data: this.buildScriptEntry(name, storedScript),\n      message: existing ? \"Script updated\" : \"Script created\",\n    };\n  }\n\n  /**\n   * Reject writes to @history paths\n   */\n  @Write(\"/scripts/:scriptName/@history/:version\")\n  async writeScriptHistory(\n    _ctx: RouteContext<{ scriptName: string; version: string }>,\n    _entry: AFSWriteEntryPayload,\n  ): Promise<AFSWriteResult> {\n    throw new Error(\"Cannot write to history directly\");\n  }\n\n  // ========== Delete Handlers ==========\n\n  /**\n   * Delete a stored script\n   */\n  @Delete(\"/scripts/:scriptName\")\n  async deleteScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSDeleteResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    if (!this.scripts.has(name)) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    this.scripts.delete(name);\n    this.scriptMetrics.delete(name);\n    return { message: `Script '${name}' deleted` };\n  }\n\n  /**\n   * Catch-all delete handler for unsupported paths\n   */\n  @Delete(\"/:path*\")\n  async deleteCatchAll(ctx: RouteContext<{ path: string }>): Promise<AFSDeleteResult> {\n    throw new AFSNotFoundError(ctx.path);\n  }\n\n  // ========== Exec Handlers ==========\n\n  /**\n   * Execute a stored script directly\n   */\n  @Actions.Exec(\"/scripts/:scriptName\", \"exec\")\n  async execScript(\n    ctx: RouteContext<{ scriptName: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      return {\n        success: false,\n        data: {\n          error: `Script not found: ${name}`,\n          logs: [],\n          duration: 0,\n        },\n      };\n    }\n\n    const options = (ctx.options as { context?: { userId?: string; sessionId?: string } }) ?? {};\n\n    // Check rate limit\n    const rateCheck = this.checkRateLimit(options.context?.userId, name);\n    if (rateCheck.limited) {\n      return {\n        success: false,\n        data: {\n          error: `Rate limit exceeded: ${rateCheck.reason}`,\n          logs: [],\n          duration: 0,\n          rateLimited: true,\n        },\n      };\n    }\n\n    // Record execution for rate limiting\n    this.recordExecution(options.context?.userId, name);\n\n    // Update metadata\n    script.meta.lastRun = new Date();\n    script.meta.runCount++;\n\n    // Generate execution context\n    const executionId = generateExecutionId();\n    const timestamp = Date.now();\n\n    const execContext: ExecutionContext = {\n      args,\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      timestamp,\n      executionId,\n    };\n\n    // Log audit event\n    this.logAudit({\n      type: \"execution\",\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      scriptName: name,\n      details: { args: sanitizeArgs(args) },\n    });\n\n    const result = await this.runtime.execute(script.content, this.capabilities, execContext);\n    const scriptExecResult = result as ExecutionResult;\n\n    // Update metrics\n    this.updateMetrics(name, scriptExecResult);\n\n    // Record execution history\n    const historyEntry: ExecutionHistoryEntry = {\n      executionId,\n      timestamp: new Date(timestamp),\n      success: scriptExecResult.success,\n      duration: scriptExecResult.duration,\n      error: scriptExecResult.error,\n      timedOut: scriptExecResult.timedOut,\n      userId: options.context?.userId,\n      sessionId: options.context?.sessionId,\n      args: sanitizeArgs(args),\n    };\n\n    script.execHistory = script.execHistory ?? [];\n    script.execHistory.push(historyEntry);\n\n    while (script.execHistory.length > MAX_EXEC_HISTORY) {\n      script.execHistory.shift();\n    }\n\n    const { success, ...data } = result as unknown as {\n      success: boolean;\n      [key: string]: unknown;\n    };\n    return { success, data: data as Record<string, unknown> };\n  }\n\n  /**\n   * Execute a stored script directly via exec(\"/scripts/:name\")\n   */\n  @Exec(\"/scripts/:scriptName\")\n  async execScriptDirect(\n    ctx: RouteContext<{ scriptName: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    return this.execScript(ctx, args);\n  }\n\n  /**\n   * Execute root-level actions (run, validate, promote, create-from-template, promoted actions)\n   */\n  @Actions.Exec(\"/\")\n  async execRootAction(\n    ctx: RouteContext<{ action: string }>,\n    args: Record<string, unknown>,\n  ): Promise<AFSExecResult> {\n    const actionName = ctx.params.action;\n    return this.executeAction(actionName, args, ctx);\n  }\n\n  // ========== Stat Handlers ==========\n\n  /**\n   * Stat root → sandbox overview\n   */\n  @Stat(\"/\")\n  async statRoot(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/\",\n        path: \"/\",\n        meta: {\n          type: \"directory\",\n          childrenCount: 4,\n          scriptCount: this.scripts.size,\n          templateCount: BUILT_IN_TEMPLATES.length,\n          totalExecutions: this.metrics.totalExecutions,\n          successCount: this.metrics.successCount,\n          failureCount: this.metrics.failureCount,\n        },\n      },\n    };\n  }\n\n  /**\n   * Stat scripts directory\n   */\n  @Stat(\"/scripts\")\n  async statScriptsDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/scripts\",\n        path: \"/scripts\",\n        meta: { type: \"directory\", childrenCount: this.scripts.size },\n      },\n    };\n  }\n\n  /**\n   * Stat a specific script → runCount, lastRun, versionCount\n   */\n  @Stat(\"/scripts/:scriptName\")\n  async statScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSStatResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n    return {\n      data: {\n        id: joinURL(\"/scripts\", `${name}.js`),\n        path: joinURL(\"/scripts\", `${name}.js`),\n        createdAt: script.meta.createdAt,\n        updatedAt: script.meta.updatedAt,\n        meta: {\n          type: \"file\",\n          kind: \"afs:script\",\n          scriptName: name,\n          runCount: script.meta.runCount,\n          lastRun: script.meta.lastRun ?? null,\n          versionCount: (script.versions ?? []).length,\n        },\n      },\n    };\n  }\n\n  /**\n   * Stat templates directory\n   */\n  @Stat(\"/templates\")\n  async statTemplatesDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/templates\",\n        path: \"/templates\",\n        meta: { type: \"directory\", childrenCount: BUILT_IN_TEMPLATES.length },\n      },\n    };\n  }\n\n  /**\n   * Stat a specific template\n   */\n  @Stat(\"/templates/:templateName\")\n  async statTemplate(ctx: RouteContext<{ templateName: string }>): Promise<AFSStatResult> {\n    const template = BUILT_IN_TEMPLATES.find((t) => t.name === ctx.params.templateName);\n    if (!template) {\n      throw new AFSNotFoundError(ctx.path);\n    }\n    return {\n      data: {\n        id: joinURL(\"/templates\", template.name),\n        path: joinURL(\"/templates\", template.name),\n        meta: { type: \"template\", category: template.category },\n      },\n    };\n  }\n\n  /**\n   * Stat metrics directory\n   */\n  @Stat(\"/metrics\")\n  async statMetricsDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/metrics\",\n        path: \"/metrics\",\n        meta: { type: \"metrics\", childrenCount: this.scriptMetrics.size > 0 ? 1 : 0 },\n      },\n    };\n  }\n\n  /**\n   * Stat audit directory\n   */\n  @Stat(\"/audit\")\n  async statAuditDir(_ctx: RouteContext): Promise<AFSStatResult> {\n    return {\n      data: {\n        id: \"/audit\",\n        path: \"/audit\",\n        meta: { type: \"audit\", entryCount: this.auditLog.length },\n      },\n    };\n  }\n\n  // ========== Explain Handlers ==========\n\n  /**\n   * Explain root → sandbox overview with security limits, templates, metrics\n   */\n  @Explain(\"/\")\n  async explainRoot(_ctx: RouteContext): Promise<AFSExplainResult> {\n    const lines: string[] = [];\n    lines.push(`# ${this.name}`);\n    lines.push(\"\");\n    if (this.description) {\n      lines.push(this.description);\n      lines.push(\"\");\n    }\n    lines.push(\"## Overview\");\n    lines.push(\"\");\n    lines.push(`- **Scripts**: ${this.scripts.size}`);\n    lines.push(`- **Templates**: ${BUILT_IN_TEMPLATES.length}`);\n    lines.push(`- **Total Executions**: ${this.metrics.totalExecutions}`);\n    lines.push(\n      `- **Success Rate**: ${this.metrics.totalExecutions > 0 ? ((this.metrics.successCount / this.metrics.totalExecutions) * 100).toFixed(1) : 0}%`,\n    );\n    lines.push(\"\");\n    lines.push(\"## Security & Isolation\");\n    lines.push(\"\");\n    lines.push(\"Scripts execute in an isolated sandbox environment with:\");\n    lines.push(`- **Timeout**: ${this.options.runtime?.timeout ?? 5000}ms`);\n    lines.push(`- **Memory Limit**: ${this.options.runtime?.memoryLimit ?? \"default\"}MB`);\n    if (this.options.capabilities?.afs) {\n      const afsCaps = this.options.capabilities.afs;\n      lines.push(`- **AFS Read**: ${afsCaps.read ?? false}`);\n      lines.push(`- **AFS Write**: ${afsCaps.write ?? false}`);\n      if (afsCaps.allowPaths?.length) {\n        lines.push(`- **Allowed Paths**: ${afsCaps.allowPaths.join(\", \")}`);\n      }\n      if (afsCaps.denyPaths?.length) {\n        lines.push(`- **Denied Paths**: ${afsCaps.denyPaths.join(\", \")}`);\n      }\n    }\n    lines.push(\"\");\n    lines.push(\"## Templates\");\n    lines.push(\"\");\n    for (const t of BUILT_IN_TEMPLATES) {\n      lines.push(`- **${t.name}** (${t.category}): ${t.description}`);\n    }\n    lines.push(\"\");\n    if (this.scripts.size > 0) {\n      lines.push(\"## Scripts\");\n      lines.push(\"\");\n      for (const [name, script] of this.scripts) {\n        const lastRun = script.meta.lastRun ? new Date(script.meta.lastRun).toISOString() : \"never\";\n        lines.push(`- **${name}.js**: ${script.meta.runCount} execution(s), last run: ${lastRun}`);\n      }\n      lines.push(\"\");\n    }\n\n    return { format: \"markdown\", content: lines.join(\"\\n\") };\n  }\n\n  /**\n   * Explain a specific script → run count, code summary\n   */\n  @Explain(\"/scripts/:scriptName\")\n  async explainScript(ctx: RouteContext<{ scriptName: string }>): Promise<AFSExplainResult> {\n    const name = ctx.params.scriptName.replace(/\\.js$/, \"\");\n    const script = this.scripts.get(name);\n    if (!script) {\n      throw new AFSNotFoundError(ctx.path, `Script not found: ${name}`);\n    }\n\n    const lines: string[] = [];\n    lines.push(`# Script: ${name}.js`);\n    lines.push(\"\");\n    lines.push(\"## Metadata\");\n    lines.push(\"\");\n    lines.push(`- **Created**: ${new Date(script.meta.createdAt).toISOString()}`);\n    lines.push(`- **Updated**: ${new Date(script.meta.updatedAt).toISOString()}`);\n    lines.push(`- **Run Count**: ${script.meta.runCount}`);\n    lines.push(\n      `- **Last Run**: ${script.meta.lastRun ? new Date(script.meta.lastRun).toISOString() : \"never\"}`,\n    );\n    lines.push(`- **Versions**: ${(script.versions ?? []).length}`);\n    lines.push(`- **Size**: ${new TextEncoder().encode(script.content).length} bytes`);\n    lines.push(\"\");\n    lines.push(\"## Code Summary\");\n    lines.push(\"\");\n    const codeLines = script.content.split(\"\\n\");\n    lines.push(`- **Lines**: ${codeLines.length}`);\n    const firstLine = codeLines[0]?.trim() ?? \"\";\n    if (firstLine.startsWith(\"//\")) {\n      lines.push(`- **Description**: ${firstLine.slice(2).trim()}`);\n    }\n    lines.push(\"\");\n\n    return { format: \"markdown\", content: lines.join(\"\\n\") };\n  }\n\n  // ========== Capabilities ==========\n\n  /**\n   * Read /.meta/.capabilities → capabilities manifest with action catalog\n   */\n  @Read(\"/.meta/.capabilities\")\n  async readCapabilities(_ctx: RouteContext): Promise<AFSEntry> {\n    const rootActionCatalog = [\n      { name: \"run\", description: \"Execute inline JavaScript code\" },\n      { name: \"validate\", description: \"Validate JavaScript syntax\" },\n      { name: \"promote\", description: \"Promote a script to a formal action\" },\n      { name: \"create-from-template\", description: \"Create a script from a template\" },\n    ];\n\n    // Add promoted actions\n    for (const [actionName, action] of this.promotedActions) {\n      rootActionCatalog.push({\n        name: actionName,\n        description: action.description ?? `Promoted action: ${actionName}`,\n      });\n    }\n\n    const manifest: CapabilitiesManifest = {\n      schemaVersion: 1,\n      provider: this.name,\n      description: this.description,\n      tools: [],\n      operations: this.getOperationsDeclaration(),\n      actions: [\n        {\n          description: \"Root-level sandbox actions\",\n          catalog: rootActionCatalog,\n          discovery: { pathTemplate: \"/.actions\" },\n        },\n        {\n          kind: \"afs:script\",\n          description: \"Script-level actions\",\n          catalog: [{ name: \"exec\", description: \"Execute the script\" }],\n          discovery: { pathTemplate: \"/scripts/:scriptName/.actions\" },\n        },\n      ],\n    };\n\n    return {\n      id: \"/.meta/.capabilities\",\n      path: \"/.meta/.capabilities\",\n      content: manifest,\n      meta: {\n        kind: \"afs:capabilities\",\n        description: \"Sandbox provider capabilities manifest\",\n        operations: [\"list\", \"read\", \"write\", \"delete\", \"exec\", \"stat\", \"explain\"],\n      },\n    };\n  }\n\n  // ========== Private Helpers ==========\n\n  /**\n   * Build AFSEntry for a stored script\n   */\n  private buildScriptEntry(name: string, script: StoredScript): AFSEntry {\n    return {\n      id: joinURL(\"/scripts\", `${name}.js`),\n      path: joinURL(\"/scripts\", `${name}.js`),\n      content: script.content,\n      createdAt: script.meta.createdAt,\n      updatedAt: script.meta.updatedAt,\n      meta: {\n        type: \"file\",\n        kind: \"afs:script\",\n        kinds: [\"afs:script\", \"afs:executable\", \"afs:node\"],\n        childrenCount: 2,\n        scriptName: name,\n        lastRun: script.meta.lastRun,\n        runCount: script.meta.runCount,\n      },\n      actions: [{ name: \"exec\", description: `Execute script ${name}` }],\n    };\n  }\n\n  /**\n   * Build scripts directory entry\n   */\n  private buildScriptsDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/scripts\",\n      path: \"/scripts\",\n      summary: \"Stored JavaScript scripts\",\n      meta: { kind: \"sandbox:directory\", type: \"directory\", childrenCount: this.scripts.size },\n    };\n  }\n\n  /**\n   * Build templates directory entry\n   */\n  private buildTemplatesDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/templates\",\n      path: \"/templates\",\n      summary: \"Script templates\",\n      meta: {\n        kind: \"sandbox:directory\",\n        type: \"directory\",\n        childrenCount: BUILT_IN_TEMPLATES.length,\n      },\n    };\n  }\n\n  /**\n   * Build metrics directory entry\n   */\n  private buildMetricsDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/metrics\",\n      path: \"/metrics\",\n      summary: \"Execution metrics\",\n      meta: {\n        kind: \"sandbox:directory\",\n        type: \"metrics\",\n        childrenCount: this.scriptMetrics.size > 0 ? 1 : 0,\n      },\n    };\n  }\n\n  /**\n   * Build audit directory entry\n   */\n  private buildAuditDirectoryEntry(): AFSEntry {\n    return {\n      id: \"/audit\",\n      path: \"/audit\",\n      summary: \"Audit log\",\n      meta: { kind: \"sandbox:directory\", type: \"audit\", entryCount: this.auditLog.length },\n    };\n  }\n\n  /**\n   * Log an audit event\n   */\n  private logAudit(event: Omit<AuditEvent, \"timestamp\">): void {\n    if (!this.auditConfig?.enabled) return;\n\n    const fullEvent: AuditEvent = {\n      ...event,\n      timestamp: Date.now(),\n    };\n\n    this.auditLog.push(fullEvent);\n    const maxEntries = this.auditConfig.maxEntries ?? 1000;\n    while (this.auditLog.length > maxEntries) {\n      this.auditLog.shift();\n    }\n\n    if (this.auditConfig.onEvent) {\n      try {\n        this.auditConfig.onEvent(fullEvent);\n      } catch {\n        // Ignore callback errors\n      }\n    }\n  }\n\n  /**\n   * Check if execution is rate limited\n   */\n  private checkRateLimit(\n    userId?: string,\n    scriptName?: string,\n  ): { limited: boolean; reason?: string } {\n    if (!this.rateLimitConfig) return { limited: false };\n\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const cleanTimestamps = (arr: number[]) => arr.filter((t) => t > oneMinuteAgo);\n\n    if (this.rateLimitConfig.maxExecutionsPerMinute) {\n      const recentExecutions = cleanTimestamps(this.executionTimestamps);\n      this.executionTimestamps.length = 0;\n      this.executionTimestamps.push(...recentExecutions);\n      if (recentExecutions.length >= this.rateLimitConfig.maxExecutionsPerMinute) {\n        return { limited: true, reason: \"Global rate limit exceeded\" };\n      }\n    }\n\n    if (userId && this.rateLimitConfig.maxExecutionsPerMinutePerUser) {\n      const userTimestamps = cleanTimestamps(this.userExecutionTimestamps.get(userId) ?? []);\n      this.userExecutionTimestamps.set(userId, userTimestamps);\n      if (userTimestamps.length >= this.rateLimitConfig.maxExecutionsPerMinutePerUser) {\n        return { limited: true, reason: \"Per-user rate limit exceeded\" };\n      }\n    }\n\n    if (scriptName && this.rateLimitConfig.maxExecutionsPerMinutePerScript) {\n      const scriptTimestamps = cleanTimestamps(\n        this.scriptExecutionTimestamps.get(scriptName) ?? [],\n      );\n      this.scriptExecutionTimestamps.set(scriptName, scriptTimestamps);\n      if (scriptTimestamps.length >= this.rateLimitConfig.maxExecutionsPerMinutePerScript) {\n        return { limited: true, reason: \"Per-script rate limit exceeded\" };\n      }\n    }\n\n    return { limited: false };\n  }\n\n  /**\n   * Record execution for rate limiting\n   */\n  private recordExecution(userId?: string, scriptName?: string): void {\n    const now = Date.now();\n    this.executionTimestamps.push(now);\n\n    if (userId) {\n      const userTimestamps = this.userExecutionTimestamps.get(userId) ?? [];\n      userTimestamps.push(now);\n      this.userExecutionTimestamps.set(userId, userTimestamps);\n    }\n\n    if (scriptName) {\n      const scriptTimestamps = this.scriptExecutionTimestamps.get(scriptName) ?? [];\n      scriptTimestamps.push(now);\n      this.scriptExecutionTimestamps.set(scriptName, scriptTimestamps);\n    }\n  }\n\n  /**\n   * Update execution metrics\n   */\n  private updateMetrics(scriptName: string | undefined, result: ExecutionResult): void {\n    this.metrics.totalExecutions++;\n    this.metrics.totalDuration += result.duration;\n    this.metrics.averageDuration = this.metrics.totalDuration / this.metrics.totalExecutions;\n\n    if (result.success) {\n      this.metrics.successCount++;\n    } else {\n      this.metrics.failureCount++;\n    }\n\n    if (result.timedOut) {\n      this.metrics.timeoutCount++;\n    }\n\n    if (scriptName) {\n      let scriptMetrics = this.scriptMetrics.get(scriptName);\n      if (!scriptMetrics) {\n        scriptMetrics = {\n          totalExecutions: 0,\n          successCount: 0,\n          failureCount: 0,\n          timeoutCount: 0,\n          averageDuration: 0,\n          totalDuration: 0,\n        };\n        this.scriptMetrics.set(scriptName, scriptMetrics);\n      }\n\n      scriptMetrics.totalExecutions++;\n      scriptMetrics.totalDuration += result.duration;\n      scriptMetrics.averageDuration = scriptMetrics.totalDuration / scriptMetrics.totalExecutions;\n\n      if (result.success) {\n        scriptMetrics.successCount++;\n      } else {\n        scriptMetrics.failureCount++;\n      }\n\n      if (result.timedOut) {\n        scriptMetrics.timeoutCount++;\n      }\n    }\n  }\n\n  /**\n   * Validate action name\n   */\n  private isValidActionName(name: string): { valid: boolean; error?: string } {\n    if (!name || typeof name !== \"string\") {\n      return { valid: false, error: \"Action name is required\" };\n    }\n    if (RESERVED_ACTION_NAMES.includes(name)) {\n      return { valid: false, error: `Action name \"${name}\" is reserved` };\n    }\n    if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(name)) {\n      return {\n        valid: false,\n        error:\n          \"Action name must start with a letter and contain only letters, numbers, hyphens, and underscores\",\n      };\n    }\n    if (name.includes(\"..\") || name.includes(\"/\") || name.includes(\"\\\\\")) {\n      return { valid: false, error: \"Action name cannot contain path separators\" };\n    }\n    return { valid: true };\n  }\n\n  /**\n   * Apply template variables to content\n   */\n  private applyTemplate(content: string, variables: Record<string, string>): string {\n    let result = content;\n    for (const [key, value] of Object.entries(variables)) {\n      result = result.replace(new RegExp(`\\\\{\\\\{${key}\\\\}\\\\}`, \"g\"), value);\n    }\n    return result;\n  }\n\n  /**\n   * Execute a built-in or promoted action\n   */\n  private async executeAction(\n    actionName: string,\n    args: Record<string, unknown>,\n    ctx: RouteContext,\n  ): Promise<AFSExecResult> {\n    const options = (ctx.options as { context?: { userId?: string; sessionId?: string } }) ?? {};\n\n    if (actionName === \"run\") {\n      const code = args.code;\n      if (typeof code !== \"string\") {\n        throw new Error(\"action 'run' requires 'code' parameter as string\");\n      }\n\n      const rateCheck = this.checkRateLimit(options.context?.userId, undefined);\n      if (rateCheck.limited) {\n        return {\n          success: false,\n          data: {\n            error: `Rate limit exceeded: ${rateCheck.reason}`,\n            logs: [],\n            duration: 0,\n            rateLimited: true,\n          },\n        };\n      }\n\n      this.recordExecution(options.context?.userId, undefined);\n\n      const executionId = generateExecutionId();\n      const timestamp = Date.now();\n\n      const execContext: ExecutionContext = {\n        args: (args.args as Record<string, unknown>) ?? {},\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        timestamp,\n        executionId,\n      };\n\n      this.logAudit({\n        type: \"execution\",\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        actionName: \"run\",\n        details: { codeLength: code.length },\n      });\n\n      const result = await this.runtime.execute(code, this.capabilities, execContext);\n      const runExecResult = result as ExecutionResult;\n\n      this.updateMetrics(undefined, runExecResult);\n\n      const { success: runSuccess, ...runData } = result as unknown as {\n        success: boolean;\n        [key: string]: unknown;\n      };\n      return { success: runSuccess, data: runData as Record<string, unknown> };\n    }\n\n    if (actionName === \"validate\") {\n      const code = args.code;\n      if (typeof code !== \"string\") {\n        throw new Error(\"action 'validate' requires 'code' parameter as string\");\n      }\n\n      try {\n        new Function(`\"use strict\"; return async () => { ${code} }`);\n        return {\n          success: true,\n          data: { valid: true, message: \"Syntax is valid\" },\n        };\n      } catch (error) {\n        return {\n          success: true,\n          data: {\n            valid: false,\n            error: error instanceof Error ? error.message : String(error),\n          },\n        };\n      }\n    }\n\n    if (actionName === \"rollback\") {\n      const scriptName = args.script;\n      const version = args.version;\n\n      if (typeof scriptName !== \"string\") {\n        throw new Error(\"action 'rollback' requires 'script' parameter as string\");\n      }\n      if (typeof version !== \"number\" || version < 1) {\n        throw new Error(\"action 'rollback' requires 'version' parameter as positive number\");\n      }\n\n      const script = this.scripts.get(scriptName);\n      if (!script) {\n        return { success: false, data: { error: `Script not found: ${scriptName}` } };\n      }\n\n      const versions = script.versions ?? [];\n      const targetVersion = versions.find((v) => v.version === version);\n      if (!targetVersion) {\n        return { success: false, data: { error: `Version ${version} not found` } };\n      }\n\n      await this.writeScript(\n        {\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n          params: { scriptName: `${scriptName}.js` },\n          options: {},\n        },\n        { content: targetVersion.content },\n      );\n\n      return {\n        success: true,\n        data: {\n          message: `Rolled back to version ${version}`,\n          newVersion: script.versions?.length ?? 0,\n        },\n      };\n    }\n\n    if (actionName === \"promote\") {\n      const scriptName = args.script as string | undefined;\n      const actionNameArg = args.name as string | undefined;\n\n      if (!scriptName || typeof scriptName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'promote' requires 'script' parameter as string\" },\n        };\n      }\n      if (!actionNameArg || typeof actionNameArg !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'promote' requires 'name' parameter as string\" },\n        };\n      }\n\n      const nameValidation = this.isValidActionName(actionNameArg);\n      if (!nameValidation.valid) {\n        return { success: false, data: { error: nameValidation.error } };\n      }\n\n      const script = this.scripts.get(scriptName);\n      if (!script) {\n        return { success: false, data: { error: `Script not found: ${scriptName}` } };\n      }\n\n      try {\n        new Function(`\"use strict\"; return async () => { ${script.content} }`);\n      } catch (error) {\n        return {\n          success: false,\n          data: {\n            error: `Script has syntax error: ${error instanceof Error ? error.message : String(error)}`,\n          },\n        };\n      }\n\n      const currentVersion = script.versions?.length\n        ? Math.max(...script.versions.map((v) => v.version))\n        : 1;\n\n      const existing = this.promotedActions.get(actionNameArg);\n      const promotedAction: PromotedAction = {\n        name: actionNameArg,\n        description: (args.description as string) ?? existing?.description,\n        sourceScript: scriptName,\n        sourceVersion: currentVersion,\n        inputSchema: (args.inputSchema as Record<string, unknown>) ?? existing?.inputSchema,\n        outputSchema: (args.outputSchema as Record<string, unknown>) ?? existing?.outputSchema,\n        promotedAt: new Date(),\n        version: (existing?.version ?? 0) + 1,\n      };\n\n      this.promotedActions.set(actionNameArg, promotedAction);\n\n      this.logAudit({\n        type: \"action_promote\",\n        actionName: actionNameArg,\n        scriptName,\n        details: { version: promotedAction.version },\n      });\n\n      return {\n        success: true,\n        data: {\n          message: `Script '${scriptName}' promoted to action '${actionNameArg}' (version ${promotedAction.version})`,\n          action: promotedAction,\n        },\n      };\n    }\n\n    if (actionName === \"create-from-template\") {\n      const templateName = args.template as string | undefined;\n      const scriptName = args.name as string | undefined;\n      const variables = (args.variables as Record<string, string>) ?? {};\n\n      if (!templateName || typeof templateName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'create-from-template' requires 'template' parameter as string\" },\n        };\n      }\n      if (!scriptName || typeof scriptName !== \"string\") {\n        return {\n          success: false,\n          data: { error: \"action 'create-from-template' requires 'name' parameter as string\" },\n        };\n      }\n\n      if (\n        templateName.includes(\"..\") ||\n        templateName.includes(\"/\") ||\n        templateName.includes(\"\\\\\")\n      ) {\n        return { success: false, data: { error: \"Invalid template name\" } };\n      }\n\n      const template = BUILT_IN_TEMPLATES.find((t) => t.name === templateName);\n      if (!template) {\n        return { success: false, data: { error: `Template not found: ${templateName}` } };\n      }\n\n      if (template.variables) {\n        for (const v of template.variables) {\n          if (v.required && variables[v.name] === undefined && v.default === undefined) {\n            return { success: false, data: { error: `Missing required variable: ${v.name}` } };\n          }\n        }\n        for (const v of template.variables) {\n          if (variables[v.name] === undefined && v.default !== undefined) {\n            variables[v.name] = v.default;\n          }\n        }\n      }\n\n      const content = this.applyTemplate(template.content, variables);\n\n      await this.writeScript(\n        {\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n          params: { scriptName: `${scriptName}.js` },\n          options: {},\n        },\n        { content },\n      );\n\n      return {\n        success: true,\n        data: {\n          message: `Script '${scriptName}' created from template '${templateName}'`,\n          path: joinURL(\"/scripts\", `${scriptName}.js`),\n        },\n      };\n    }\n\n    // Check if it's a promoted action\n    const promotedAction = this.promotedActions.get(actionName);\n    if (promotedAction) {\n      const script = this.scripts.get(promotedAction.sourceScript);\n      if (!script) {\n        return {\n          success: false,\n          data: {\n            error: `Source script not found: ${promotedAction.sourceScript}`,\n            logs: [],\n            duration: 0,\n          },\n        };\n      }\n\n      const rateCheck = this.checkRateLimit(options.context?.userId, promotedAction.sourceScript);\n      if (rateCheck.limited) {\n        return {\n          success: false,\n          data: {\n            error: `Rate limit exceeded: ${rateCheck.reason}`,\n            logs: [],\n            duration: 0,\n            rateLimited: true,\n          },\n        };\n      }\n\n      this.recordExecution(options.context?.userId, promotedAction.sourceScript);\n\n      const executionId = generateExecutionId();\n      const timestamp = Date.now();\n\n      const execContext: ExecutionContext = {\n        args,\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        timestamp,\n        executionId,\n      };\n\n      this.logAudit({\n        type: \"execution\",\n        userId: options.context?.userId,\n        sessionId: options.context?.sessionId,\n        actionName,\n        scriptName: promotedAction.sourceScript,\n        details: { args: sanitizeArgs(args) },\n      });\n\n      const result = await this.runtime.execute(script.content, this.capabilities, execContext);\n      const promotedExecResult = result as ExecutionResult;\n\n      this.updateMetrics(promotedAction.sourceScript, promotedExecResult);\n\n      const { success: promotedSuccess, ...promotedData } = result as unknown as {\n        success: boolean;\n        [key: string]: unknown;\n      };\n      return { success: promotedSuccess, data: promotedData as Record<string, unknown> };\n    }\n\n    throw new Error(`Unknown action: ${actionName}`);\n  }\n}\n\n// Type check to ensure AFSSandbox implements AFSModuleClass\nconst _typeCheck: AFSModuleClass<AFSSandbox, AFSSandboxOptions> = AFSSandbox;\n\nexport default AFSSandbox;\n"],"mappings":";;;;;;;;;;AAYA,SAAS,oBAAoB,MAAc,UAA6B;AACtE,MAAK,MAAM,WAAW,UAAU;AAE9B,MAAI,YAAY,OAAO,YAAY,KAAM,QAAO;AAChD,MAAI,QAAQ,SAAS,MAAM,IAAI,KAAK,WAAW,QAAQ,MAAM,GAAG,GAAG,CAAC,CAClE,QAAO;AAET,MAAI,QAAQ,SAAS,KAAK,IAAI,KAAK,WAAW,QAAQ,MAAM,GAAG,GAAG,CAAC,EAAE;GAEnE,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS,EAAE;AAC3C,OAAI,CAAC,KAAK,SAAS,IAAI,IAAI,SAAS,GAAI,QAAO;;AAEjD,MAAI,SAAS,QAAS,QAAO;AAC7B,MAAI,KAAK,WAAW,GAAG,QAAQ,GAAG,CAAE,QAAO;;AAE7C,QAAO;;;;;AAMT,SAAS,cAAc,MAAc,YAAuB,WAA+B;AAEzF,KAAI,aAAa,UAAU,SAAS,KAAK,oBAAoB,MAAM,UAAU,CAC3E,QAAO;AAIT,KAAI,cAAc,WAAW,SAAS,EACpC,QAAO,oBAAoB,MAAM,WAAW;AAI9C,QAAO;;;;;;AAOT,SAAS,cAAc,MAAsB;AAE3C,KAAI,KAAK,SAAS,KAAO,CACvB,OAAM,IAAI,MAAM,mCAAmC;CAIrD,IAAI,UAAU;AACd,KAAI;AACF,YAAU,mBAAmB,KAAK;SAC5B;AAKR,KAAI,QAAQ,SAAS,KAAK,CACxB,OAAM,IAAI,MAAM,6BAA6B;AAI/C,MAAK,MAAM,QAAQ,SAAS;EAC1B,MAAM,OAAO,KAAK,WAAW,EAAE;AAC/B,MAAI,OAAO,MAAM,SAAS,IACxB,OAAM,IAAI,MAAM,4CAA4C;;AAIhE,QAAO;;;;;;;;;AAUT,SAAgB,mBACd,KACA,QACqB;CACrB,MAAM,eAAoC,EAAE;AAG5C,KAAI,KAAK,QAAQ,OAAO,KAAK,SAAS,OAAO;EAC3C,MAAM,UAAU,IAAI,KAAK,KAAK,IAAI;AAClC,eAAa,OAAO,OAAO,SAA0C;AACnE,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,kCAAkC;AAIpD,OAAI,CAAC,cAAc,MAAM,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CACrE,OAAM,IAAI,MAAM,oCAAoC,KAAK,GAAG;AAG9D,OAAI;IACF,MAAM,SAAS,MAAM,QAAQ,KAAK;AAClC,QAAI,CAAC,OAAO,KACV,QAAO;IAIT,MAAM,UAAU,OAAO,KAAK;AAC5B,QAAI,YAAY,UAAa,YAAY,KACvC,QAAO;AAGT,QAAI,OAAO,YAAY,SACrB,QAAO;AAIT,WAAO,KAAK,UAAU,QAAQ;YACvB,OAAO;AACd,UAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAC9F;;;;AAMP,KAAI,KAAK,SAAS,OAAO,KAAK,UAAU,MAAM;EAC5C,MAAM,WAAW,IAAI,MAAM,KAAK,IAAI;AACpC,eAAa,QAAQ,OACnB,MACA,YACgD;AAEhD,OAAI,SAAS,UAAa,SAAS,KACjC,OAAM,IAAI,MAAM,8BAA8B;AAEhD,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,mCAAmC;AAIrD,OAAI,OAAO,YAAY,SACrB,OAAM,IAAI,MAAM,sCAAsC;AAExD,OAAI,YAAY,GACd,OAAM,IAAI,MAAM,qCAAqC;GAIvD,IAAI;AACJ,OAAI;AACF,qBAAiB,cAAc,KAAK;YAC7B,OAAO;AACd,UAAM,IAAI,MAAM,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAAG;;AAIzF,OAAI,CAAC,cAAc,gBAAgB,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CAC/E,OAAM,IAAI,MAAM,qCAAqC,KAAK,GAAG;AAG/D,OAAI;AACF,UAAM,SAAS,gBAAgB,EAAE,SAAS,CAAC;AAC3C,WAAO;KAAE,SAAS;KAAM,MAAM;KAAgB;YACvC,OAAO;AACd,UAAM,IAAI,MACR,+BAA+B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAChG;;;OAKL,cAAa,QAAQ,YAA4B;AAC/C,QAAM,IAAI,MAAM,0CAA0C;;AAK9D,KAAI,KAAK,QAAQ,OAAO,KAAK,SAAS,OAAO;EAC3C,MAAM,UAAU,IAAI,KAAK,KAAK,IAAI;AAClC,eAAa,OAAO,OAClB,MACA,YAC8C;AAC9C,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,kCAAkC;AAIpD,OAAI,CAAC,cAAc,MAAM,OAAO,KAAK,YAAY,OAAO,KAAK,UAAU,CACrE,OAAM,IAAI,MAAM,oCAAoC,KAAK,GAAG;AAG9D,OAAI;AAKF,YAHe,MAAM,QAAQ,MADT,OAAO,YAAY,YAAY,YAAY,OAAO,UAAU,EAAE,CACR,EAG5D,KAAK,KAAK,WAAW;KACjC,MAAM,MAAM;KACZ,MAAO,MAAM,MAAM,QAA+B;KACnD,EAAE;YACI,OAAO;AACd,UAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAC9F;;;;AAKP,QAAO;;;;;AClNT,MAAM,qBAAqB;AAC3B,MAAM,0BAA0B;;;;;;;;;;;;;AAchC,IAAa,iBAAb,MAA4B;CAC1B,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA0B,EAAE,EAAE;AACxC,OAAK,UAAU,QAAQ,WAAW;AAClC,OAAK,cAAc,QAAQ,eAAe;;;;;;;;;;CAW5C,MAAM,QACJ,MACA,cACA,UAA4B,EAAE,EACJ;EAC1B,MAAM,OAAmB,EAAE;EAC3B,MAAM,YAAY,KAAK,KAAK;EAM5B,MAAM,WAHU,MAAM,YAAY,EAGV,YAAY;AACpC,UAAQ,eAAe,KAAK,cAAc,OAAO,KAAK;EAGtD,IAAI,WAAW;EACf,MAAM,WAAW,KAAK,KAAK,GAAG,KAAK;AACnC,UAAQ,0BAA0B;AAChC,OAAI,KAAK,KAAK,GAAG,UAAU;AACzB,eAAW;AACX,WAAO;;AAET,UAAO;IACP;EAGF,MAAM,KAAK,QAAQ,YAAY;AAE/B,MAAI;GAEF,MAAM,QAAQ,GAAG,YAAY,QAAQ,aAAa,kBAAkB;IAClE,MAAM,QAAQ,GAAG,UAAU,YAAY;IACvC,MAAM,UAAU,GAAG,UAAU,cAAc;AAC3C,SAAK,KAAK;KACR;KACA;KACA,WAAW,KAAK,KAAK;KACtB,CAAC;KACF;AACF,MAAG,QAAQ,GAAG,QAAQ,SAAS,MAAM;AACrC,SAAM,SAAS;GAGf,MAAM,WAAW,KAAK,UAAU,QAAQ,QAAQ,EAAE,CAAC;AACnD,MAAG,SAAS,kBAAkB,SAAS,GAAG;GAG1C,MAAM,aAAa;IACjB,WAAW,QAAQ,aAAa,KAAK,KAAK;IAC1C,aAAa,QAAQ,eAAe,QAAQ,KAAK,KAAK;IACtD,QAAQ,QAAQ;IAChB,WAAW,QAAQ;IACpB;GACD,MAAM,cAAc,KAAK,UAAU,WAAW;AAC9C,MAAG,SAAS,qBAAqB,YAAY,GAAG;GAGhD,MAAM,kCAMF,IAAI,KAAK;GACb,IAAI,YAAY;AAGhB,QAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,aAAa,EAAE;IAErD,MAAM,QAAQ,GAAG,YAAY,SAAS,SAAS,GAAG,eAAe;KAC/D,MAAM,OAAO,WAAW,KAAK,MAAM;MACjC,MAAM,OAAO,GAAG,OAAO,EAAE;AACzB,UAAI,SAAS,SAAU,QAAO,GAAG,UAAU,EAAE;AAC7C,UAAI,SAAS,SAAU,QAAO,GAAG,UAAU,EAAE;AAC7C,UAAI,SAAS,UAAW,QAAO,GAAG,KAAK,EAAE;AACzC,UAAI,SAAS,YAAY,SAAS,YAAa,QAAO,GAAG,KAAK,EAAE;AAChE,aAAO,GAAG,KAAK,EAAE;OACjB;KAGF,MAAM,KAAK;AAGX,QAAG,GAAG,KAAK,CACR,MAAM,aAAW;AAChB,sBAAgB,IAAI,GAAG,EAAE,QAAQA,SAAO;AACxC,sBAAgB,OAAO,GAAG;OAC1B,CACD,OAAO,UAAU;AAChB,sBACG,IAAI,GAAG,EACN,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;AACrE,sBAAgB,OAAO,GAAG;OAC1B;AAEJ,YAAO,GAAG,UAAU,GAAG;MACvB;AACF,OAAG,QAAQ,GAAG,QAAQ,SAAS,QAAQ,MAAM;AAC7C,UAAM,SAAS;;GAgBjB,MAAM,cAAc;;;;;;;;;;;MAZK,OAAO,KAAK,aAAa,CAC/C,KACE,SAAS;MACd,KAAK;;2BAEgB,KAAK;;;OAIvB,CACA,KAAK,MAAM,CAaG;;;;;;;;IAQnB,KAAK;;;GAKH,MAAM,SAAS,GAAG,SAAS,YAAY;AAEvC,OAAI,UAAU;AACZ,WAAO,SAAS;AAChB,WAAO;KACL,SAAS;KACT,OAAO,oCAAoC,KAAK,QAAQ;KACxD;KACA,UAAU,KAAK,KAAK,GAAG;KACvB,UAAU;KACX;;AAGH,OAAI,OAAO,OAAO;IAChB,MAAM,aAAa,GAAG,KAAK,OAAO,MAAM;AACxC,WAAO,MAAM,SAAS;AAOtB,WAAO;KACL,SAAS;KACT,OANA,OAAO,eAAe,YAAY,eAAe,OAC3C,WAAoC,WAAW,OAAO,WAAW,GACnE,OAAO,WAAW;KAKtB,OACE,OAAO,eAAe,YAAY,eAAe,OAC5C,WAAkC,QACnC;KACN;KACA,UAAU,KAAK,KAAK,GAAG;KACxB;;GAIH,MAAM,cAAc,GAAG,KAAK,OAAO,MAAM;AACzC,UAAO,MAAM,SAAS;AAEtB,UAAO;IACL,SAAS;IACT,QAAQ;IACR;IACA,UAAU,KAAK,KAAK,GAAG;IACvB,UAAU;IACX;WACM,OAAO;AAId,UAAO;IACL,SAAS;IACT,OALmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAMzE,OALY,iBAAiB,QAAQ,MAAM,QAAQ;IAMnD;IACA,UAAU,KAAK,KAAK,GAAG;IACxB;YACO;AAER,MAAG,SAAS;AACZ,WAAQ,SAAS;;;;;;;;;;;;;;;;;AC9KvB,MAAM,eAAe;;AAErB,MAAM,mBAAmB;;AAEzB,MAAM,mBAAmB;CAAC;CAAY;CAAU;CAAS;CAAO;CAAc;CAAO;;;;AAKrF,SAAS,sBAA8B;AACrC,QAAO,QAAQ,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,GAAG,GAAG;;;;;AAMtE,SAAS,aAAa,MAAwD;CAC5E,MAAM,YAAqC,EAAE;AAC7C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,CAC7C,KAAI,iBAAiB,MAAM,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC,CAC7D,WAAU,OAAO;UACR,OAAO,UAAU,YAAY,UAAU,KAChD,WAAU,OAAO,aAAa,MAAiC;KAE/D,WAAU,OAAO;AAGrB,QAAO;;;;;AAMT,MAAM,0BAA0B,EAAE,OAAO;CACvC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,cAAc;CACnD,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,qBAAqB;CACjE,YAAY,EAAE,KAAK,CAAC,YAAY,YAAY,CAAC,CAAC,UAAU,CAAC,SAAS,8BAA8B;CAChG,SAAS,EACN,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,oCAAoC;EACvF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,qBAAqB;EAC7E,CAAC,CACD,UAAU,CACV,SAAS,wBAAwB;CACpC,cAAc,EACX,OAAO,EACN,KAAK,EACF,OAAO;EACN,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,yBAAyB;EAC/D,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,0BAA0B;EACjE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,SAAS,wBAAwB;EAC5E,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,SAAS,uBAAuB;EAC3E,CAAC,CACD,UAAU,CACV,SAAS,2BAA2B,EACxC,CAAC,CACD,UAAU,CACV,SAAS,6BAA6B;CACzC,OAAO,EACJ,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,SAAS,uBAAuB;EACrD,SAAS,EAAE,KAAK,CAAC,UAAU;EAC3B,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,4BAA4B;EACnF,CAAC,CACD,UAAU,CACV,SAAS,sBAAsB;CAClC,WAAW,EACR,OAAO;EACN,wBAAwB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EACxD,+BAA+B,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/D,iCAAiC,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAClE,CAAC,CACD,UAAU,CACV,SAAS,8BAA8B;CAC3C,CAAC;;AAGF,MAAM,wBAAwB;CAAC;CAAO;CAAY;CAAY;CAAW;CAAuB;;AAGhG,MAAM,qBAAuC;CAC3C;EACE,MAAM;EACN,aAAa;EACb,SAAS;;EAET,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;EAIT,WAAW,CACT;GAAE,MAAM;GAAc,aAAa;GAA2B,UAAU;GAAM,EAC9E;GAAE,MAAM;GAAe,aAAa;GAA4B,UAAU;GAAM,CACjF;EACD,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;;;;;;EAST,WAAW,CACT;GAAE,MAAM;GAAa,aAAa;GAAiC,UAAU;GAAM,CACpF;EACD,UAAU;EACX;CACD;EACE,MAAM;EACN,aAAa;EACb,SAAS;;;;;;;EAOT,WAAW,CACT;GAAE,MAAM;GAAc,aAAa;GAAsB,UAAU;GAAM,SAAS;GAAS,CAC5F;EACD,UAAU;EACX;CACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCD,IAAa,aAAb,MAAa,mBAAmB,gBAAgB;CAC9C,AAAkB;CAClB,AAAkB;CAClB,AAAkB;CAElB,AAAiB;CACjB,AAAiB;CACjB,AAAiB,0BAAqC,IAAI,KAAK;CAC/D,AAAQ,eAAoC,EAAE;CAG9C,AAAiB,kCAA+C,IAAI,KAAK;CAGzE,AAAiB,WAAyB,EAAE;CAC5C,AAAiB;CAGjB,AAAiB;CACjB,AAAiB,sBAAgC,EAAE;CACnD,AAAiB,0CAAiD,IAAI,KAAK;CAC3E,AAAiB,4CAAmD,IAAI,KAAK;CAG7E,AAAQ,UAA4B;EAClC,iBAAiB;EACjB,cAAc;EACd,cAAc;EACd,cAAc;EACd,iBAAiB;EACjB,eAAe;EAChB;CACD,AAAiB,gCAA+C,IAAI,KAAK;CAEzE,YAAY,UAA6B,EAAE,EAAE;AAC3C,SAAO;AACP,OAAK,UAAU,wBAAwB,MAAM,QAAQ;AACrD,OAAK,OAAO,QAAQ,QAAQ;AAC5B,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,aAAa,QAAQ,cAAc;AACxC,OAAK,UAAU,IAAI,eAAe,QAAQ,QAAQ;AAClD,OAAK,cAAc,QAAQ;AAC3B,OAAK,kBAAkB,QAAQ;AAE/B,OAAK,eAAe,mBAAmB,QAAW,KAAK,QAAQ,gBAAgB,EAAE,CAAC;;;;;CAMpF,OAAO,SAAS;AACd,SAAO;;CAGT,OAAO,WAA6B;AAClC,SAAO;GACL,MAAM;GACN,aAAa;GACb,aAAa;GACb,UAAU;GACV,QAAQ,EAAE,OAAO,EAAE,CAAC;GACpB,MAAM;IAAC;IAAW;IAAW;IAAa;GAC3C;;;;;CAMH,aAAa,KAAK,EAAE,WAAgC,EAAE,EAAuB;AAE3E,SAAO,IAAI,WADO,wBAAwB,MAAM,OAAO,CACvB;;;;;CAMlC,QAAQ,KAAoB;AAC1B,OAAK,eAAe,mBAAmB,KAAK,KAAK,QAAQ,gBAAgB,EAAE,CAAC;;;;;CAQ9E,MACM,SAAS,MAA4C;AACzD,SAAO,EACL,MAAM;GACJ,KAAK,4BAA4B;GACjC,KAAK,8BAA8B;GACnC,KAAK,4BAA4B;GACjC,KAAK,0BAA0B;GAChC,EACF;;;;;CAMH,MACM,YAAY,MAA4C;EAC5D,MAAM,UAAsB,EAAE;AAC9B,OAAK,MAAM,CAAC,MAAM,WAAW,KAAK,QAChC,SAAQ,KAAK,KAAK,iBAAiB,MAAM,OAAO,CAAC;AAEnD,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,WAAW,KAAmE;EAClF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,KAAK;EAEtC,MAAM,WAAW,QAAQ,YAAY,IAAI,OAAO,WAAW;AAC3D,SAAO,EACL,MAAM,CACJ;GACE,IAAI,QAAQ,UAAU,WAAW;GACjC,MAAM,QAAQ,UAAU,WAAW;GACnC,SAAS;GACT,MAAM;IAAE,MAAM;IAAmB,MAAM;IAAW,QAAQ,OAAO,YAAY,EAAE,EAAE;IAAQ;GAC1F,EACD;GACE,IAAI,QAAQ,UAAU,eAAe;GACrC,MAAM,QAAQ,UAAU,eAAe;GACvC,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,QAAQ,OAAO,eAAe,EAAE,EAAE;IACnC;GACF,CACF,EACF;;;;;CAMH,MACM,kBAAkB,KAAmE;EACzF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,6BACJ,KACwB;EACxB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,cAAc,MAA4C;AAY9D,SAAO,EAAE,MAXO,mBAAmB,KAAK,OAAO;GAC7C,IAAI,QAAQ,cAAc,EAAE,KAAK;GACjC,MAAM,QAAQ,cAAc,EAAE,KAAK;GACnC,SAAS,EAAE;GACX,MAAM;IACJ,MAAM;IACN,MAAM;IACN,UAAU,EAAE;IACZ,WAAW,EAAE;IACd;GACF,EAAE,EACqB;;;;;CAM1B,MACM,aAAa,KAAqE;AAEtF,MAAI,CADa,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa,CAEjF,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAMrB,MACM,YAAY,MAA4C;AAC5D,MAAI,KAAK,cAAc,SAAS,EAC9B,QAAO,EAAE,MAAM,EAAE,EAAE;AAErB,SAAO,EACL,MAAM,CACJ;GACE,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,KAAK,cAAc;IACnC;GACF,CACF,EACF;;;;;CAMH,MACM,kBAAkB,MAA4C;EAClE,MAAM,UAAsB,EAAE;AAC9B,OAAK,MAAM,CAAC,MAAM,YAAY,KAAK,cACjC,SAAQ,KAAK;GACX,IAAI,QAAQ,oBAAoB,KAAK;GACrC,MAAM,QAAQ,oBAAoB,KAAK;GACvC,MAAM;IACJ,MAAM;IACN,MAAM;IACN,iBAAiB,QAAQ;IAC1B;GACF,CAAC;AAEJ,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,UAAU,MAA4C;AAC1D,SAAO,EAAE,MAAM,EAAE,EAAE;;;;;CAQrB,MACM,gBAAgB,MAA4C;EAChE,MAAM,UAAsB;GAC1B;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,MAAM;QAAE,MAAM;QAAU,aAAa;QAA8B;OACnE,MAAM;QAAE,MAAM;QAAU,aAAa;QAAiC;OACvE;MACD,UAAU,CAAC,OAAO;MACnB;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY,EACV,MAAM;OAAE,MAAM;OAAU,aAAa;OAA+B,EACrE;MACD,UAAU,CAAC,OAAO;MACnB;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,QAAQ;QAAE,MAAM;QAAU,aAAa;QAA0B;OACjE,MAAM;QAAE,MAAM;QAAU,aAAa;QAAe;OACpD,aAAa;QAAE,MAAM;QAAU,aAAa;QAAsB;OAClE,aAAa;QAAE,MAAM;QAAU,aAAa;QAA0B;OACtE,cAAc;QAAE,MAAM;QAAU,aAAa;QAA2B;OACzE;MACD,UAAU,CAAC,UAAU,OAAO;MAC7B;KACF;IACF;GACD;IACE,IAAI;IACJ,MAAM;IACN,SAAS;IACT,MAAM;KACJ,MAAM;KACN,OAAO,CAAC,kBAAkB,WAAW;KACrC,MAAM;KACN,aAAa;KACb,aAAa;MACX,MAAM;MACN,YAAY;OACV,UAAU;QAAE,MAAM;QAAU,aAAa;QAAiB;OAC1D,MAAM;QAAE,MAAM;QAAU,aAAa;QAAyB;OAC9D,WAAW;QAAE,MAAM;QAAU,aAAa;QAAsB;OACjE;MACD,UAAU,CAAC,YAAY,OAAO;MAC/B;KACF;IACF;GACF;AAGD,OAAK,MAAM,CAAC,YAAY,WAAW,KAAK,gBACtC,SAAQ,KAAK;GACX,IAAI;GACJ,MAAM,QAAQ,aAAa,WAAW;GACtC,SAAS,OAAO,eAAe,oBAAoB;GACnD,MAAM;IACJ,MAAM;IACN,OAAO,CAAC,kBAAkB,WAAW;IACrC,MAAM;IACN,aAAa,OAAO,eAAe,WAAW;IAC9C,aAAa,OAAO;IACpB,cAAc,OAAO;IACtB;GACF,CAAC;AAGJ,SAAO,EAAE,MAAM,SAAS;;;;;CAM1B,MACM,kBAAkB,KAAmE;EACzF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AAEvD,MAAI,CADW,KAAK,QAAQ,IAAI,KAAK,CAEnC,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAItC,SAAO,EACL,MAAM,CACJ;GACE,IAAI;GACJ,MAAM,QALK,QAAQ,YAAY,IAAI,OAAO,YAAY,WAAW,EAKzC,OAAO;GAC/B,SAAS,kBAAkB;GAC3B,MAAM;IACJ,MAAM;IACN,OAAO,CAAC,kBAAkB,WAAW;IACrC,MAAM;IACN,aAAa,eAAe,KAAK;IACjC,aAAa;KACX,MAAM;KACN,aAAa;KACd;IACF;GACF,CACF,EACF;;;;;CAQH,MACM,SAAS,MAAuC;AAWpD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe;IAAG;GAC7C,SAdc;IACd;KAAE,MAAM;KAAO,aAAa;KAA8B;IAC1D;KAAE,MAAM;KAAY,aAAa;KAA8B;IAC/D;KAAE,MAAM;KAAW,aAAa;KAAuC;IACvE;KAAE,MAAM;KAAwB,aAAa;KAAmC;IAChF,GAAG,MAAM,KAAK,KAAK,gBAAgB,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa;KACrE;KACA,aAAa,OAAO,eAAe,oBAAoB;KACxD,EAAE;IACJ;GAMA;;;;;CAMH,MACM,eAAe,MAAuC;AAC1D,SAAO,KAAK,4BAA4B;;;;;CAM1C,MACM,WAAW,KAA8D;EAC7E,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,SAAO,KAAK,iBAAiB,MAAM,OAAO;;;;;CAM5C,MACM,kBAAkB,KAA8D;EACpF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,WAAW,OAAO,YAAY,EAAE;AACtC,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,WAAW;GACjD,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,WAAW;GACnD,SAAS;GACT,MAAM;IAAE,MAAM;IAAW,OAAO,SAAS;IAAQ;GAClD;;;;;CAMH,MACM,kBACJ,KACmB;EACnB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,aAAa,OAAO,SAAS,IAAI,OAAO,SAAS,GAAG;AAC1D,MAAI,OAAO,MAAM,WAAW,IAAI,aAAa,EAC3C,OAAM,IAAI,iBAAiB,IAAI,MAAM,yBAAyB;EAGhE,MAAM,WADW,OAAO,YAAY,EAAE,EACb,MAAM,MAAM,EAAE,YAAY,WAAW;AAC9D,MAAI,CAAC,QACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,WAAW,WAAW,YAAY;AAEzE,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,YAAY,OAAO,WAAW,CAAC;GACrE,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,YAAY,OAAO,WAAW,CAAC;GACvE,SAAS,QAAQ;GACjB,MAAM;IACJ,MAAM;IACN,SAAS,QAAQ;IACjB,WAAW,QAAQ;IACnB,MAAM,QAAQ;IACf;GACF;;;;;CAMH,MACM,sBAAsB,KAA8D;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,cAAc,OAAO,eAAe,EAAE;AAC5C,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,MAAM,eAAe;GACrD,MAAM,QAAQ,YAAY,GAAG,KAAK,MAAM,eAAe;GACvD,SAAS;GACT,MAAM;IAAE,MAAM;IAAe,OAAO,YAAY;IAAQ;GACzD;;;;;CAMH,MACM,iBAAiB,MAAuC;AAC5D,SAAO,KAAK,8BAA8B;;;;;CAM5C,MACM,aAAa,KAAgE;EACjF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,uBAAuB,IAAI,OAAO,eAAe;AAExF,SAAO;GACL,IAAI,QAAQ,cAAc,SAAS,KAAK;GACxC,MAAM,QAAQ,cAAc,SAAS,KAAK;GAC1C,SAAS,SAAS;GAClB,MAAM;IACJ,MAAM;IACN,aAAa,SAAS;IACtB,UAAU,SAAS;IACnB,WAAW,SAAS;IACrB;GACF;;;;;CAMH,MACM,YAAY,MAAuC;AACvD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,KAAK;GACd,MAAM,EAAE,MAAM,WAAW;GAC1B;;;;;CAMH,MACM,kBAAkB,KAA8D;EACpF,MAAM,gBAAgB,KAAK,cAAc,IAAI,IAAI,OAAO,WAAW;AACnE,MAAI,CAAC,cACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,6BAA6B,IAAI,OAAO,aAAa;AAE5F,SAAO;GACL,IAAI,QAAQ,oBAAoB,IAAI,OAAO,WAAW;GACtD,MAAM,QAAQ,oBAAoB,IAAI,OAAO,WAAW;GACxD,SAAS;IAAE,gBAAgB,cAAc;IAAiB,GAAG;IAAe;GAC5E,MAAM;IAAE,MAAM;IAAkB,YAAY,IAAI,OAAO;IAAY;GACpE;;;;;CAMH,MACM,UAAU,MAAuC;AACrD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,KAAK;GACd,MAAM;IAAE,MAAM;IAAS,OAAO,KAAK,SAAS;IAAQ;GACrD;;;;;CAQH,MACM,aAAa,MAAuC;AACxD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe;IAAG;GAChD,MAAM;IAAE,MAAM;IAAa,eAAe;IAAG;GAC9C;;;;;CAMH,MACM,gBAAgB,MAAuC;AAC3D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAChE,MAAM;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAC9D;;;;;CAMH,MACM,eAAe,KAA8D;EACjF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,QAAQ,KAAK,iBAAiB,MAAM,OAAO;AACjD,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,QAAQ;GACvD,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,QAAQ;GACzD,SAAS,MAAM,QAAQ,EAAE;GACzB,MAAM,MAAM,QAAQ,EAAE;GACvB;;;;;CAMH,MACM,sBAAsB,KAA8D;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,OAAO;GAAE,MAAM;GAAW,QAAQ,OAAO,YAAY,EAAE,EAAE;GAAQ;AACvE,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,YAAY,QAAQ;GACnE,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,YAAY,QAAQ;GACrE,SAAS;GACT;GACD;;;;;CAMH,MACM,0BAA0B,KAA8D;EAC5F,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAEnE,MAAM,OAAO;GAAE,MAAM;GAAe,QAAQ,OAAO,eAAe,EAAE,EAAE;GAAQ;AAC9E,SAAO;GACL,IAAI,QAAQ,YAAY,IAAI,OAAO,YAAY,gBAAgB,QAAQ;GACvE,MAAM,QAAQ,YAAY,IAAI,OAAO,YAAY,gBAAgB,QAAQ;GACzE,SAAS;GACT;GACD;;;;;CAMH,MACM,kBAAkB,MAAuC;AAC7D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACxE,MAAM;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACtE;;;;;CAMH,MACM,iBAAiB,KAAgE;EACrF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,uBAAuB,IAAI,OAAO,eAAe;EAExF,MAAM,OAAO;GACX,MAAM;GACN,aAAa,SAAS;GACtB,UAAU,SAAS;GACnB,WAAW,SAAS;GACrB;AACD,SAAO;GACL,IAAI,QAAQ,cAAc,IAAI,OAAO,cAAc,QAAQ;GAC3D,MAAM,QAAQ,cAAc,IAAI,OAAO,cAAc,QAAQ;GAC7D,SAAS;GACT;GACD;;;;;CAMH,MACM,gBAAgB,MAAuC;AAC3D,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS,EAAE,MAAM,WAAW;GAC5B,MAAM,EAAE,MAAM,WAAW;GAC1B;;;;;CAMH,MACM,cAAc,MAAuC;AACzD,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC5D,MAAM;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC1D;;;;;CAQH,MACM,YACJ,KACA,OACyB;EACzB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EAEvD,MAAM,sBAAM,IAAI,MAAM;EACtB,MAAM,WAAW,KAAK,QAAQ,IAAI,KAAK;AAGvC,MAAI,MAAM,YAAY,UAAa,UAAU;GAC3C,MAAM,OAAuB;IAC3B;IACA,WAAW,SAAS,KAAK;IACzB,WAAW;IACX,SAAS,SAAS,KAAK;IACvB,UAAU,SAAS,KAAK;IACzB;GACD,MAAMC,iBAA6B;IACjC,SAAS,SAAS;IAClB;IACA,UAAU,SAAS;IACnB,aAAa,SAAS;IACvB;AACD,QAAK,QAAQ,IAAI,MAAMA,eAAa;AACpC,UAAO;IACL,MAAM,KAAK,iBAAiB,MAAMA,eAAa;IAC/C,SAAS;IACV;;EAGH,MAAM,UACJ,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAK,UAAU,MAAM,QAAQ;EAGnF,MAAM,WAA4B,UAAU,WAAW,CAAC,GAAG,SAAS,SAAS,GAAG,EAAE;EAElF,MAAM,aAA4B;GAChC,UAFiB,SAAS,SAAS,IAAI,KAAK,IAAI,GAAG,SAAS,KAAK,MAAM,EAAE,QAAQ,CAAC,GAAG,KAE/D;GACtB;GACA,WAAW;GACX,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ,CAAC;GACzC;AACD,WAAS,KAAK,WAAW;AAGzB,SAAO,SAAS,SAAS,aACvB,UAAS,OAAO;EAWlB,MAAM,eAA6B;GACjC;GACA,MAV2B;IAC3B;IACA,WAAW,UAAU,KAAK,aAAa;IACvC,WAAW;IACX,SAAS,UAAU,KAAK;IACxB,UAAU,UAAU,KAAK,YAAY;IACtC;GAKC;GACA,aAAa,UAAU,eAAe,EAAE;GACzC;AACD,OAAK,QAAQ,IAAI,MAAM,aAAa;AAEpC,SAAO;GACL,MAAM,KAAK,iBAAiB,MAAM,aAAa;GAC/C,SAAS,WAAW,mBAAmB;GACxC;;;;;CAMH,MACM,mBACJ,MACA,QACyB;AACzB,QAAM,IAAI,MAAM,mCAAmC;;;;;CAQrD,MACM,aAAa,KAAqE;EACtF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;AACvD,MAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CACzB,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,OAAK,QAAQ,OAAO,KAAK;AACzB,OAAK,cAAc,OAAO,KAAK;AAC/B,SAAO,EAAE,SAAS,WAAW,KAAK,YAAY;;;;;CAMhD,MACM,eAAe,KAA+D;AAClF,QAAM,IAAI,iBAAiB,IAAI,KAAK;;;;;CAQtC,MACM,WACJ,KACA,MACwB;EACxB,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,QAAO;GACL,SAAS;GACT,MAAM;IACJ,OAAO,qBAAqB;IAC5B,MAAM,EAAE;IACR,UAAU;IACX;GACF;EAGH,MAAM,UAAW,IAAI,WAAqE,EAAE;EAG5F,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,KAAK;AACpE,MAAI,UAAU,QACZ,QAAO;GACL,SAAS;GACT,MAAM;IACJ,OAAO,wBAAwB,UAAU;IACzC,MAAM,EAAE;IACR,UAAU;IACV,aAAa;IACd;GACF;AAIH,OAAK,gBAAgB,QAAQ,SAAS,QAAQ,KAAK;AAGnD,SAAO,KAAK,0BAAU,IAAI,MAAM;AAChC,SAAO,KAAK;EAGZ,MAAM,cAAc,qBAAqB;EACzC,MAAM,YAAY,KAAK,KAAK;EAE5B,MAAM,cAAgC;GACpC;GACA,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B;GACA;GACD;AAGD,OAAK,SAAS;GACZ,MAAM;GACN,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B,YAAY;GACZ,SAAS,EAAE,MAAM,aAAa,KAAK,EAAE;GACtC,CAAC;EAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,OAAO,SAAS,KAAK,cAAc,YAAY;EACzF,MAAM,mBAAmB;AAGzB,OAAK,cAAc,MAAM,iBAAiB;EAG1C,MAAM,eAAsC;GAC1C;GACA,WAAW,IAAI,KAAK,UAAU;GAC9B,SAAS,iBAAiB;GAC1B,UAAU,iBAAiB;GAC3B,OAAO,iBAAiB;GACxB,UAAU,iBAAiB;GAC3B,QAAQ,QAAQ,SAAS;GACzB,WAAW,QAAQ,SAAS;GAC5B,MAAM,aAAa,KAAK;GACzB;AAED,SAAO,cAAc,OAAO,eAAe,EAAE;AAC7C,SAAO,YAAY,KAAK,aAAa;AAErC,SAAO,OAAO,YAAY,SAAS,iBACjC,QAAO,YAAY,OAAO;EAG5B,MAAM,EAAE,SAAS,GAAG,SAAS;AAI7B,SAAO;GAAE;GAAe;GAAiC;;;;;CAM3D,MACM,iBACJ,KACA,MACwB;AACxB,SAAO,KAAK,WAAW,KAAK,KAAK;;;;;CAMnC,MACM,eACJ,KACA,MACwB;EACxB,MAAM,aAAa,IAAI,OAAO;AAC9B,SAAO,KAAK,cAAc,YAAY,MAAM,IAAI;;;;;CAQlD,MACM,SAAS,MAA4C;AACzD,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IACJ,MAAM;IACN,eAAe;IACf,aAAa,KAAK,QAAQ;IAC1B,eAAe,mBAAmB;IAClC,iBAAiB,KAAK,QAAQ;IAC9B,cAAc,KAAK,QAAQ;IAC3B,cAAc,KAAK,QAAQ;IAC5B;GACF,EACF;;;;;CAMH,MACM,eAAe,MAA4C;AAC/D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GAC9D,EACF;;;;;CAMH,MACM,WAAW,KAAmE;EAClF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;AAEnE,SAAO,EACL,MAAM;GACJ,IAAI,QAAQ,YAAY,GAAG,KAAK,KAAK;GACrC,MAAM,QAAQ,YAAY,GAAG,KAAK,KAAK;GACvC,WAAW,OAAO,KAAK;GACvB,WAAW,OAAO,KAAK;GACvB,MAAM;IACJ,MAAM;IACN,MAAM;IACN,YAAY;IACZ,UAAU,OAAO,KAAK;IACtB,SAAS,OAAO,KAAK,WAAW;IAChC,eAAe,OAAO,YAAY,EAAE,EAAE;IACvC;GACF,EACF;;;;;CAMH,MACM,iBAAiB,MAA4C;AACjE,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAa,eAAe,mBAAmB;IAAQ;GACtE,EACF;;;;;CAMH,MACM,aAAa,KAAqE;EACtF,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,aAAa;AACnF,MAAI,CAAC,SACH,OAAM,IAAI,iBAAiB,IAAI,KAAK;AAEtC,SAAO,EACL,MAAM;GACJ,IAAI,QAAQ,cAAc,SAAS,KAAK;GACxC,MAAM,QAAQ,cAAc,SAAS,KAAK;GAC1C,MAAM;IAAE,MAAM;IAAY,UAAU,SAAS;IAAU;GACxD,EACF;;;;;CAMH,MACM,eAAe,MAA4C;AAC/D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAW,eAAe,KAAK,cAAc,OAAO,IAAI,IAAI;IAAG;GAC9E,EACF;;;;;CAMH,MACM,aAAa,MAA4C;AAC7D,SAAO,EACL,MAAM;GACJ,IAAI;GACJ,MAAM;GACN,MAAM;IAAE,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GAC1D,EACF;;;;;CAQH,MACM,YAAY,MAA+C;EAC/D,MAAM,QAAkB,EAAE;AAC1B,QAAM,KAAK,KAAK,KAAK,OAAO;AAC5B,QAAM,KAAK,GAAG;AACd,MAAI,KAAK,aAAa;AACpB,SAAM,KAAK,KAAK,YAAY;AAC5B,SAAM,KAAK,GAAG;;AAEhB,QAAM,KAAK,cAAc;AACzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB,KAAK,QAAQ,OAAO;AACjD,QAAM,KAAK,oBAAoB,mBAAmB,SAAS;AAC3D,QAAM,KAAK,2BAA2B,KAAK,QAAQ,kBAAkB;AACrE,QAAM,KACJ,uBAAuB,KAAK,QAAQ,kBAAkB,KAAM,KAAK,QAAQ,eAAe,KAAK,QAAQ,kBAAmB,KAAK,QAAQ,EAAE,GAAG,EAAE,GAC7I;AACD,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,0BAA0B;AACrC,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,2DAA2D;AACtE,QAAM,KAAK,kBAAkB,KAAK,QAAQ,SAAS,WAAW,IAAK,IAAI;AACvE,QAAM,KAAK,uBAAuB,KAAK,QAAQ,SAAS,eAAe,UAAU,IAAI;AACrF,MAAI,KAAK,QAAQ,cAAc,KAAK;GAClC,MAAM,UAAU,KAAK,QAAQ,aAAa;AAC1C,SAAM,KAAK,mBAAmB,QAAQ,QAAQ,QAAQ;AACtD,SAAM,KAAK,oBAAoB,QAAQ,SAAS,QAAQ;AACxD,OAAI,QAAQ,YAAY,OACtB,OAAM,KAAK,wBAAwB,QAAQ,WAAW,KAAK,KAAK,GAAG;AAErE,OAAI,QAAQ,WAAW,OACrB,OAAM,KAAK,uBAAuB,QAAQ,UAAU,KAAK,KAAK,GAAG;;AAGrE,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,eAAe;AAC1B,QAAM,KAAK,GAAG;AACd,OAAK,MAAM,KAAK,mBACd,OAAM,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,SAAS,KAAK,EAAE,cAAc;AAEjE,QAAM,KAAK,GAAG;AACd,MAAI,KAAK,QAAQ,OAAO,GAAG;AACzB,SAAM,KAAK,aAAa;AACxB,SAAM,KAAK,GAAG;AACd,QAAK,MAAM,CAAC,MAAM,WAAW,KAAK,SAAS;IACzC,MAAM,UAAU,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,CAAC,aAAa,GAAG;AACpF,UAAM,KAAK,OAAO,KAAK,SAAS,OAAO,KAAK,SAAS,2BAA2B,UAAU;;AAE5F,SAAM,KAAK,GAAG;;AAGhB,SAAO;GAAE,QAAQ;GAAY,SAAS,MAAM,KAAK,KAAK;GAAE;;;;;CAM1D,MACM,cAAc,KAAsE;EACxF,MAAM,OAAO,IAAI,OAAO,WAAW,QAAQ,SAAS,GAAG;EACvD,MAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,MAAI,CAAC,OACH,OAAM,IAAI,iBAAiB,IAAI,MAAM,qBAAqB,OAAO;EAGnE,MAAM,QAAkB,EAAE;AAC1B,QAAM,KAAK,aAAa,KAAK,KAAK;AAClC,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,cAAc;AACzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,aAAa,GAAG;AAC7E,QAAM,KAAK,kBAAkB,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,aAAa,GAAG;AAC7E,QAAM,KAAK,oBAAoB,OAAO,KAAK,WAAW;AACtD,QAAM,KACJ,mBAAmB,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,CAAC,aAAa,GAAG,UACxF;AACD,QAAM,KAAK,oBAAoB,OAAO,YAAY,EAAE,EAAE,SAAS;AAC/D,QAAM,KAAK,eAAe,IAAI,aAAa,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,QAAQ;AAClF,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,kBAAkB;AAC7B,QAAM,KAAK,GAAG;EACd,MAAM,YAAY,OAAO,QAAQ,MAAM,KAAK;AAC5C,QAAM,KAAK,gBAAgB,UAAU,SAAS;EAC9C,MAAM,YAAY,UAAU,IAAI,MAAM,IAAI;AAC1C,MAAI,UAAU,WAAW,KAAK,CAC5B,OAAM,KAAK,sBAAsB,UAAU,MAAM,EAAE,CAAC,MAAM,GAAG;AAE/D,QAAM,KAAK,GAAG;AAEd,SAAO;GAAE,QAAQ;GAAY,SAAS,MAAM,KAAK,KAAK;GAAE;;;;;CAQ1D,MACM,iBAAiB,MAAuC;EAC5D,MAAM,oBAAoB;GACxB;IAAE,MAAM;IAAO,aAAa;IAAkC;GAC9D;IAAE,MAAM;IAAY,aAAa;IAA8B;GAC/D;IAAE,MAAM;IAAW,aAAa;IAAuC;GACvE;IAAE,MAAM;IAAwB,aAAa;IAAmC;GACjF;AAGD,OAAK,MAAM,CAAC,YAAY,WAAW,KAAK,gBACtC,mBAAkB,KAAK;GACrB,MAAM;GACN,aAAa,OAAO,eAAe,oBAAoB;GACxD,CAAC;AAwBJ,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAxBqC;IACrC,eAAe;IACf,UAAU,KAAK;IACf,aAAa,KAAK;IAClB,OAAO,EAAE;IACT,YAAY,KAAK,0BAA0B;IAC3C,SAAS,CACP;KACE,aAAa;KACb,SAAS;KACT,WAAW,EAAE,cAAc,aAAa;KACzC,EACD;KACE,MAAM;KACN,aAAa;KACb,SAAS,CAAC;MAAE,MAAM;MAAQ,aAAa;MAAsB,CAAC;KAC9D,WAAW,EAAE,cAAc,iCAAiC;KAC7D,CACF;IACF;GAMC,MAAM;IACJ,MAAM;IACN,aAAa;IACb,YAAY;KAAC;KAAQ;KAAQ;KAAS;KAAU;KAAQ;KAAQ;KAAU;IAC3E;GACF;;;;;CAQH,AAAQ,iBAAiB,MAAc,QAAgC;AACrE,SAAO;GACL,IAAI,QAAQ,YAAY,GAAG,KAAK,KAAK;GACrC,MAAM,QAAQ,YAAY,GAAG,KAAK,KAAK;GACvC,SAAS,OAAO;GAChB,WAAW,OAAO,KAAK;GACvB,WAAW,OAAO,KAAK;GACvB,MAAM;IACJ,MAAM;IACN,MAAM;IACN,OAAO;KAAC;KAAc;KAAkB;KAAW;IACnD,eAAe;IACf,YAAY;IACZ,SAAS,OAAO,KAAK;IACrB,UAAU,OAAO,KAAK;IACvB;GACD,SAAS,CAAC;IAAE,MAAM;IAAQ,aAAa,kBAAkB;IAAQ,CAAC;GACnE;;;;;CAMH,AAAQ,6BAAuC;AAC7C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IAAE,MAAM;IAAqB,MAAM;IAAa,eAAe,KAAK,QAAQ;IAAM;GACzF;;;;;CAMH,AAAQ,+BAAyC;AAC/C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,mBAAmB;IACnC;GACF;;;;;CAMH,AAAQ,6BAAuC;AAC7C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IACJ,MAAM;IACN,MAAM;IACN,eAAe,KAAK,cAAc,OAAO,IAAI,IAAI;IAClD;GACF;;;;;CAMH,AAAQ,2BAAqC;AAC3C,SAAO;GACL,IAAI;GACJ,MAAM;GACN,SAAS;GACT,MAAM;IAAE,MAAM;IAAqB,MAAM;IAAS,YAAY,KAAK,SAAS;IAAQ;GACrF;;;;;CAMH,AAAQ,SAAS,OAA4C;AAC3D,MAAI,CAAC,KAAK,aAAa,QAAS;EAEhC,MAAM,YAAwB;GAC5B,GAAG;GACH,WAAW,KAAK,KAAK;GACtB;AAED,OAAK,SAAS,KAAK,UAAU;EAC7B,MAAM,aAAa,KAAK,YAAY,cAAc;AAClD,SAAO,KAAK,SAAS,SAAS,WAC5B,MAAK,SAAS,OAAO;AAGvB,MAAI,KAAK,YAAY,QACnB,KAAI;AACF,QAAK,YAAY,QAAQ,UAAU;UAC7B;;;;;CASZ,AAAQ,eACN,QACA,YACuC;AACvC,MAAI,CAAC,KAAK,gBAAiB,QAAO,EAAE,SAAS,OAAO;EAGpD,MAAM,eADM,KAAK,KAAK,GACK;EAC3B,MAAM,mBAAmB,QAAkB,IAAI,QAAQ,MAAM,IAAI,aAAa;AAE9E,MAAI,KAAK,gBAAgB,wBAAwB;GAC/C,MAAM,mBAAmB,gBAAgB,KAAK,oBAAoB;AAClE,QAAK,oBAAoB,SAAS;AAClC,QAAK,oBAAoB,KAAK,GAAG,iBAAiB;AAClD,OAAI,iBAAiB,UAAU,KAAK,gBAAgB,uBAClD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAA8B;;AAIlE,MAAI,UAAU,KAAK,gBAAgB,+BAA+B;GAChE,MAAM,iBAAiB,gBAAgB,KAAK,wBAAwB,IAAI,OAAO,IAAI,EAAE,CAAC;AACtF,QAAK,wBAAwB,IAAI,QAAQ,eAAe;AACxD,OAAI,eAAe,UAAU,KAAK,gBAAgB,8BAChD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAAgC;;AAIpE,MAAI,cAAc,KAAK,gBAAgB,iCAAiC;GACtE,MAAM,mBAAmB,gBACvB,KAAK,0BAA0B,IAAI,WAAW,IAAI,EAAE,CACrD;AACD,QAAK,0BAA0B,IAAI,YAAY,iBAAiB;AAChE,OAAI,iBAAiB,UAAU,KAAK,gBAAgB,gCAClD,QAAO;IAAE,SAAS;IAAM,QAAQ;IAAkC;;AAItE,SAAO,EAAE,SAAS,OAAO;;;;;CAM3B,AAAQ,gBAAgB,QAAiB,YAA2B;EAClE,MAAM,MAAM,KAAK,KAAK;AACtB,OAAK,oBAAoB,KAAK,IAAI;AAElC,MAAI,QAAQ;GACV,MAAM,iBAAiB,KAAK,wBAAwB,IAAI,OAAO,IAAI,EAAE;AACrE,kBAAe,KAAK,IAAI;AACxB,QAAK,wBAAwB,IAAI,QAAQ,eAAe;;AAG1D,MAAI,YAAY;GACd,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,WAAW,IAAI,EAAE;AAC7E,oBAAiB,KAAK,IAAI;AAC1B,QAAK,0BAA0B,IAAI,YAAY,iBAAiB;;;;;;CAOpE,AAAQ,cAAc,YAAgC,QAA+B;AACnF,OAAK,QAAQ;AACb,OAAK,QAAQ,iBAAiB,OAAO;AACrC,OAAK,QAAQ,kBAAkB,KAAK,QAAQ,gBAAgB,KAAK,QAAQ;AAEzE,MAAI,OAAO,QACT,MAAK,QAAQ;MAEb,MAAK,QAAQ;AAGf,MAAI,OAAO,SACT,MAAK,QAAQ;AAGf,MAAI,YAAY;GACd,IAAI,gBAAgB,KAAK,cAAc,IAAI,WAAW;AACtD,OAAI,CAAC,eAAe;AAClB,oBAAgB;KACd,iBAAiB;KACjB,cAAc;KACd,cAAc;KACd,cAAc;KACd,iBAAiB;KACjB,eAAe;KAChB;AACD,SAAK,cAAc,IAAI,YAAY,cAAc;;AAGnD,iBAAc;AACd,iBAAc,iBAAiB,OAAO;AACtC,iBAAc,kBAAkB,cAAc,gBAAgB,cAAc;AAE5E,OAAI,OAAO,QACT,eAAc;OAEd,eAAc;AAGhB,OAAI,OAAO,SACT,eAAc;;;;;;CAQpB,AAAQ,kBAAkB,MAAkD;AAC1E,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;GAAE,OAAO;GAAO,OAAO;GAA2B;AAE3D,MAAI,sBAAsB,SAAS,KAAK,CACtC,QAAO;GAAE,OAAO;GAAO,OAAO,gBAAgB,KAAK;GAAgB;AAErE,MAAI,CAAC,2BAA2B,KAAK,KAAK,CACxC,QAAO;GACL,OAAO;GACP,OACE;GACH;AAEH,MAAI,KAAK,SAAS,KAAK,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,CAClE,QAAO;GAAE,OAAO;GAAO,OAAO;GAA8C;AAE9E,SAAO,EAAE,OAAO,MAAM;;;;;CAMxB,AAAQ,cAAc,SAAiB,WAA2C;EAChF,IAAI,SAAS;AACb,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,UAAS,OAAO,QAAQ,IAAI,OAAO,SAAS,IAAI,SAAS,IAAI,EAAE,MAAM;AAEvE,SAAO;;;;;CAMT,MAAc,cACZ,YACA,MACA,KACwB;EACxB,MAAM,UAAW,IAAI,WAAqE,EAAE;AAE5F,MAAI,eAAe,OAAO;GACxB,MAAM,OAAO,KAAK;AAClB,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,mDAAmD;GAGrE,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,OAAU;AACzE,OAAI,UAAU,QACZ,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,wBAAwB,UAAU;KACzC,MAAM,EAAE;KACR,UAAU;KACV,aAAa;KACd;IACF;AAGH,QAAK,gBAAgB,QAAQ,SAAS,QAAQ,OAAU;GAExD,MAAM,cAAc,qBAAqB;GACzC,MAAM,YAAY,KAAK,KAAK;GAE5B,MAAM,cAAgC;IACpC,MAAO,KAAK,QAAoC,EAAE;IAClD,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA;IACD;AAED,QAAK,SAAS;IACZ,MAAM;IACN,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B,YAAY;IACZ,SAAS,EAAE,YAAY,KAAK,QAAQ;IACrC,CAAC;GAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,MAAM,KAAK,cAAc,YAAY;GAC/E,MAAM,gBAAgB;AAEtB,QAAK,cAAc,QAAW,cAAc;GAE5C,MAAM,EAAE,SAAS,YAAY,GAAG,YAAY;AAI5C,UAAO;IAAE,SAAS;IAAY,MAAM;IAAoC;;AAG1E,MAAI,eAAe,YAAY;GAC7B,MAAM,OAAO,KAAK;AAClB,OAAI,OAAO,SAAS,SAClB,OAAM,IAAI,MAAM,wDAAwD;AAG1E,OAAI;AACF,QAAI,SAAS,sCAAsC,KAAK,IAAI;AAC5D,WAAO;KACL,SAAS;KACT,MAAM;MAAE,OAAO;MAAM,SAAS;MAAmB;KAClD;YACM,OAAO;AACd,WAAO;KACL,SAAS;KACT,MAAM;MACJ,OAAO;MACP,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;MAC9D;KACF;;;AAIL,MAAI,eAAe,YAAY;GAC7B,MAAM,aAAa,KAAK;GACxB,MAAM,UAAU,KAAK;AAErB,OAAI,OAAO,eAAe,SACxB,OAAM,IAAI,MAAM,0DAA0D;AAE5E,OAAI,OAAO,YAAY,YAAY,UAAU,EAC3C,OAAM,IAAI,MAAM,oEAAoE;GAGtF,MAAM,SAAS,KAAK,QAAQ,IAAI,WAAW;AAC3C,OAAI,CAAC,OACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,qBAAqB,cAAc;IAAE;GAI/E,MAAM,iBADW,OAAO,YAAY,EAAE,EACP,MAAM,MAAM,EAAE,YAAY,QAAQ;AACjE,OAAI,CAAC,cACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,WAAW,QAAQ,aAAa;IAAE;AAG5E,SAAM,KAAK,YACT;IACE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;IAC7C,QAAQ,EAAE,YAAY,GAAG,WAAW,MAAM;IAC1C,SAAS,EAAE;IACZ,EACD,EAAE,SAAS,cAAc,SAAS,CACnC;AAED,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,0BAA0B;KACnC,YAAY,OAAO,UAAU,UAAU;KACxC;IACF;;AAGH,MAAI,eAAe,WAAW;GAC5B,MAAM,aAAa,KAAK;GACxB,MAAM,gBAAgB,KAAK;AAE3B,OAAI,CAAC,cAAc,OAAO,eAAe,SACvC,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,0DAA0D;IAC1E;AAEH,OAAI,CAAC,iBAAiB,OAAO,kBAAkB,SAC7C,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,wDAAwD;IACxE;GAGH,MAAM,iBAAiB,KAAK,kBAAkB,cAAc;AAC5D,OAAI,CAAC,eAAe,MAClB,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,eAAe,OAAO;IAAE;GAGlE,MAAM,SAAS,KAAK,QAAQ,IAAI,WAAW;AAC3C,OAAI,CAAC,OACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,qBAAqB,cAAc;IAAE;AAG/E,OAAI;AACF,QAAI,SAAS,sCAAsC,OAAO,QAAQ,IAAI;YAC/D,OAAO;AACd,WAAO;KACL,SAAS;KACT,MAAM,EACJ,OAAO,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAC1F;KACF;;GAGH,MAAM,iBAAiB,OAAO,UAAU,SACpC,KAAK,IAAI,GAAG,OAAO,SAAS,KAAK,MAAM,EAAE,QAAQ,CAAC,GAClD;GAEJ,MAAM,WAAW,KAAK,gBAAgB,IAAI,cAAc;GACxD,MAAMC,mBAAiC;IACrC,MAAM;IACN,aAAc,KAAK,eAA0B,UAAU;IACvD,cAAc;IACd,eAAe;IACf,aAAc,KAAK,eAA2C,UAAU;IACxE,cAAe,KAAK,gBAA4C,UAAU;IAC1E,4BAAY,IAAI,MAAM;IACtB,UAAU,UAAU,WAAW,KAAK;IACrC;AAED,QAAK,gBAAgB,IAAI,eAAeA,iBAAe;AAEvD,QAAK,SAAS;IACZ,MAAM;IACN,YAAY;IACZ;IACA,SAAS,EAAE,SAASA,iBAAe,SAAS;IAC7C,CAAC;AAEF,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,WAAW,WAAW,wBAAwB,cAAc,aAAaA,iBAAe,QAAQ;KACzG,QAAQA;KACT;IACF;;AAGH,MAAI,eAAe,wBAAwB;GACzC,MAAM,eAAe,KAAK;GAC1B,MAAM,aAAa,KAAK;GACxB,MAAM,YAAa,KAAK,aAAwC,EAAE;AAElE,OAAI,CAAC,gBAAgB,OAAO,iBAAiB,SAC3C,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,yEAAyE;IACzF;AAEH,OAAI,CAAC,cAAc,OAAO,eAAe,SACvC,QAAO;IACL,SAAS;IACT,MAAM,EAAE,OAAO,qEAAqE;IACrF;AAGH,OACE,aAAa,SAAS,KAAK,IAC3B,aAAa,SAAS,IAAI,IAC1B,aAAa,SAAS,KAAK,CAE3B,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,yBAAyB;IAAE;GAGrE,MAAM,WAAW,mBAAmB,MAAM,MAAM,EAAE,SAAS,aAAa;AACxE,OAAI,CAAC,SACH,QAAO;IAAE,SAAS;IAAO,MAAM,EAAE,OAAO,uBAAuB,gBAAgB;IAAE;AAGnF,OAAI,SAAS,WAAW;AACtB,SAAK,MAAM,KAAK,SAAS,UACvB,KAAI,EAAE,YAAY,UAAU,EAAE,UAAU,UAAa,EAAE,YAAY,OACjE,QAAO;KAAE,SAAS;KAAO,MAAM,EAAE,OAAO,8BAA8B,EAAE,QAAQ;KAAE;AAGtF,SAAK,MAAM,KAAK,SAAS,UACvB,KAAI,UAAU,EAAE,UAAU,UAAa,EAAE,YAAY,OACnD,WAAU,EAAE,QAAQ,EAAE;;GAK5B,MAAM,UAAU,KAAK,cAAc,SAAS,SAAS,UAAU;AAE/D,SAAM,KAAK,YACT;IACE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;IAC7C,QAAQ,EAAE,YAAY,GAAG,WAAW,MAAM;IAC1C,SAAS,EAAE;IACZ,EACD,EAAE,SAAS,CACZ;AAED,UAAO;IACL,SAAS;IACT,MAAM;KACJ,SAAS,WAAW,WAAW,2BAA2B,aAAa;KACvE,MAAM,QAAQ,YAAY,GAAG,WAAW,KAAK;KAC9C;IACF;;EAIH,MAAM,iBAAiB,KAAK,gBAAgB,IAAI,WAAW;AAC3D,MAAI,gBAAgB;GAClB,MAAM,SAAS,KAAK,QAAQ,IAAI,eAAe,aAAa;AAC5D,OAAI,CAAC,OACH,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,4BAA4B,eAAe;KAClD,MAAM,EAAE;KACR,UAAU;KACX;IACF;GAGH,MAAM,YAAY,KAAK,eAAe,QAAQ,SAAS,QAAQ,eAAe,aAAa;AAC3F,OAAI,UAAU,QACZ,QAAO;IACL,SAAS;IACT,MAAM;KACJ,OAAO,wBAAwB,UAAU;KACzC,MAAM,EAAE;KACR,UAAU;KACV,aAAa;KACd;IACF;AAGH,QAAK,gBAAgB,QAAQ,SAAS,QAAQ,eAAe,aAAa;GAE1E,MAAM,cAAc,qBAAqB;GACzC,MAAM,YAAY,KAAK,KAAK;GAE5B,MAAM,cAAgC;IACpC;IACA,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA;IACD;AAED,QAAK,SAAS;IACZ,MAAM;IACN,QAAQ,QAAQ,SAAS;IACzB,WAAW,QAAQ,SAAS;IAC5B;IACA,YAAY,eAAe;IAC3B,SAAS,EAAE,MAAM,aAAa,KAAK,EAAE;IACtC,CAAC;GAEF,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,OAAO,SAAS,KAAK,cAAc,YAAY;GACzF,MAAM,qBAAqB;AAE3B,QAAK,cAAc,eAAe,cAAc,mBAAmB;GAEnE,MAAM,EAAE,SAAS,iBAAiB,GAAG,iBAAiB;AAItD,UAAO;IAAE,SAAS;IAAiB,MAAM;IAAyC;;AAGpF,QAAM,IAAI,MAAM,mBAAmB,aAAa;;;YAvsDjD,KAAK,IAAI;YAeT,KAAK,WAAW;YAYhB,KAAK,uBAAuB;YAiC5B,KAAK,gCAAgC;YAYrC,KAAK,oCAAoC;YAczC,KAAK,aAAa;YAmBlB,KAAK,2BAA2B;YAYhC,KAAK,WAAW;YAwBhB,KAAK,mBAAmB;YAoBxB,KAAK,SAAS;YAUd,QAAQ,IAAI;YA2GZ,QAAQ,uBAAuB;YAmC/B,KAAK,IAAI;YAuBT,KAAK,WAAW;YAQhB,KAAK,uBAAuB;YAa5B,KAAK,gCAAgC;YAmBrC,KAAK,yCAAyC;YAkC9C,KAAK,oCAAoC;YAmBzC,KAAK,aAAa;YAQlB,KAAK,2BAA2B;YAsBhC,KAAK,WAAW;YAahB,KAAK,+BAA+B;YAiBpC,KAAK,SAAS;YAed,KAAK,IAAI;YAaT,KAAK,WAAW;YAahB,KAAK,uBAAuB;YAmB5B,KAAK,gCAAgC;YAmBrC,KAAK,oCAAoC;YAmBzC,KAAK,aAAa;YAalB,KAAK,2BAA2B;YAuBhC,KAAK,WAAW;YAahB,KAAK,SAAS;YAed,MAAM,uBAAuB;YA4E7B,MAAM,yCAAyC;YAa/C,OAAO,uBAAuB;YAc9B,OAAO,UAAU;YAUjB,QAAQ,KAAK,wBAAwB,OAAO;YAkG5C,KAAK,uBAAuB;YAW5B,QAAQ,KAAK,IAAI;YAcjB,KAAK,IAAI;YAsBT,KAAK,WAAW;YAchB,KAAK,uBAAuB;YA4B5B,KAAK,aAAa;YAclB,KAAK,2BAA2B;YAkBhC,KAAK,WAAW;YAchB,KAAK,SAAS;YAgBd,QAAQ,IAAI;YAyDZ,QAAQ,uBAAuB;YAwC/B,KAAK,uBAAuB;AAwnB/B,kBAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aigne/afs-sandbox",
-  "version": "1.11.0-beta.7",
+  "version": "1.11.0-beta.8",
   "description": "AIGNE AFS sandbox provider for executing JavaScript code in isolated environments",
   "license": "UNLICENSED",
   "publishConfig": {
@@ -35,8 +35,8 @@
   "dependencies": {
     "quickjs-emscripten": "^0.31.0",
     "ufo": "^1.6.3",
-    "zod": "^3.25.67",
-    "@aigne/afs": "^1.11.0-beta.7"
+    "zod": "^4.0.0",
+    "@aigne/afs": "^1.11.0-beta.8"
   },
   "devDependencies": {
     "@types/bun": "^1.3.6",
@@ -44,8 +44,8 @@
     "rimraf": "^6.1.2",
     "tsdown": "0.20.0-beta.3",
     "typescript": "5.9.2",
-    "@aigne/afs-json": "1.11.0-beta.7",
-    "@aigne/afs-testing": "1.11.0-beta.7",
+    "@aigne/afs-json": "1.11.0-beta.8",
+    "@aigne/afs-testing": "1.11.0-beta.8",
     "@aigne/scripts": "0.0.0",
     "@aigne/typescript-config": "0.0.0"
   },