@anvia/sandbox 0.3.6 → 0.3.7

package/dist/index.js

@@ -196,11 +196,14 @@ var DockerSandbox = class _DockerSandbox {
     this.pull = options.pull ?? "missing";
     this.workdir = options.workdir ?? defaultWorkdir;
     this.workspace = options.workspace ?? { mode: "ephemeral" };
-    this.lifecycle = {
-      autoDestroy: options.lifecycle?.autoDestroy ?? true,
-      ...options.lifecycle?.ttlMs === void 0 ? {} : { ttlMs: options.lifecycle.ttlMs },
-      ...options.lifecycle?.idleTimeoutMs === void 0 ? {} : { idleTimeoutMs: options.lifecycle.idleTimeoutMs }
+    const lifecycle = {
+      autoDestroy: options.lifecycle?.autoDestroy ?? true
     };
+    if (options.lifecycle?.ttlMs !== void 0) lifecycle.ttlMs = options.lifecycle.ttlMs;
+    if (options.lifecycle?.idleTimeoutMs !== void 0) {
+      lifecycle.idleTimeoutMs = options.lifecycle.idleTimeoutMs;
+    }
+    this.lifecycle = lifecycle;
     this.network = options.network ?? false;
     this.dockerPath = options.dockerPath ?? "docker";
     this.labels = options.labels ?? {};
@@ -398,20 +401,22 @@ var DockerSandboxSession = class {
   }
   async exec(options) {
     return this.runOperation(async () => {
-      await this.hooks.onExecStart?.({
+      const startEvent = {
         ...this.event(),
         command: options.command,
-        args: options.args ?? [],
-        ...options.cwd === void 0 ? {} : { cwd: options.cwd }
-      });
+        args: options.args ?? []
+      };
+      if (options.cwd !== void 0) startEvent.cwd = options.cwd;
+      await this.hooks.onExecStart?.(startEvent);
       const normalizedResult = await this.execCommand(options);
-      await this.hooks.onExecEnd?.({
+      const endEvent = {
         ...this.event(),
         command: options.command,
         args: options.args ?? [],
-        ...options.cwd === void 0 ? {} : { cwd: options.cwd },
         result: normalizedResult
-      });
+      };
+      if (options.cwd !== void 0) endEvent.cwd = options.cwd;
+      await this.hooks.onExecEnd?.(endEvent);
       return normalizedResult;
     });
   }
@@ -594,12 +599,12 @@ var DockerSandboxSession = class {
     const cliOptions = {
       dockerPath: this.dockerPath,
       timeoutMs: options.timeoutMs ?? this.limits.timeoutMs ?? defaultTimeoutMs,
-      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes2,
-      ...options.input === void 0 ? {} : { input: options.input },
-      ...options.signal === void 0 ? {} : { signal: options.signal },
-      ...options.onStdout === void 0 ? {} : { onStdout: options.onStdout },
-      ...options.onStderr === void 0 ? {} : { onStderr: options.onStderr }
+      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes2
     };
+    if (options.input !== void 0) cliOptions.input = options.input;
+    if (options.signal !== void 0) cliOptions.signal = options.signal;
+    if (options.onStdout !== void 0) cliOptions.onStdout = options.onStdout;
+    if (options.onStderr !== void 0) cliOptions.onStderr = options.onStderr;
     const result = await runDockerCli(args, cliOptions);
     if (result.timedOut) {
       return {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/docker-sandbox.ts","../src/docker-cli.ts","../src/errors.ts","../src/path.ts","../src/tools.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { assertDockerCli, runDockerCli } from \"./docker-cli\";\nimport {\n  SandboxDockerCommandError,\n  SandboxFileSizeError,\n  SandboxSessionDestroyedError,\n  SandboxTimeoutError,\n} from \"./errors\";\nimport { containerPath, normalizeSandboxPath, parentSandboxPath } from \"./path\";\nimport type {\n  DockerSandboxOptions,\n  Sandbox,\n  SandboxCreateSessionOptions,\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxExecStreamEvent,\n  SandboxFileEntry,\n  SandboxFileType,\n  SandboxHooks,\n  SandboxLifecycleOptions,\n  SandboxLimits,\n  SandboxManifest,\n  SandboxSession,\n  SandboxSessionEvent,\n  SandboxWorkspaceOptions,\n} from \"./types\";\n\nconst defaultImage = \"node:22-bookworm\";\nconst defaultWorkdir = \"/workspace\";\nconst defaultTimeoutMs = 30_000;\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport class DockerSandbox implements Sandbox {\n  readonly provider = \"docker\";\n\n  private readonly image: string;\n  private readonly pull: \"missing\" | \"always\" | \"never\";\n  private readonly workdir: string;\n  private readonly workspace: SandboxWorkspaceOptions;\n  private readonly lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n    Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n  private readonly network: NonNullable<DockerSandboxOptions[\"network\"]>;\n  private readonly dockerPath: string;\n  private readonly labels: Record<string, string>;\n  private readonly limits: SandboxLimits;\n  private readonly security: Required<NonNullable<DockerSandboxOptions[\"security\"]>>;\n  private readonly hooks: SandboxHooks;\n  private readonly user: string | undefined;\n\n  constructor(options: DockerSandboxOptions = {}) {\n    this.image = options.image ?? defaultImage;\n    this.pull = options.pull ?? \"missing\";\n    this.workdir = options.workdir ?? defaultWorkdir;\n    this.workspace = options.workspace ?? { mode: \"ephemeral\" };\n    this.lifecycle = {\n      autoDestroy: options.lifecycle?.autoDestroy ?? true,\n      ...(options.lifecycle?.ttlMs === undefined ? {} : { ttlMs: options.lifecycle.ttlMs }),\n      ...(options.lifecycle?.idleTimeoutMs === undefined\n        ? {}\n        : { idleTimeoutMs: options.lifecycle.idleTimeoutMs }),\n    };\n    this.network = options.network ?? false;\n    this.dockerPath = options.dockerPath ?? \"docker\";\n    this.labels = options.labels ?? {};\n    this.limits = options.limits ?? {};\n    this.security = {\n      readonlyRootfs: options.security?.readonlyRootfs ?? false,\n      noNewPrivileges: options.security?.noNewPrivileges ?? true,\n      dropCapabilities: options.security?.dropCapabilities ?? [\"ALL\"],\n    };\n    this.hooks = options.hooks ?? {};\n    this.user = options.user;\n  }\n\n  static node(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"node:22-bookworm\" });\n  }\n\n  static python(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"python:3.13-bookworm\" });\n  }\n\n  static deno(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"denoland/deno:debian\" });\n  }\n\n  async createSession(options: SandboxCreateSessionOptions = {}): Promise<SandboxSession> {\n    await this.ensureImage();\n\n    const id = sanitizeResourceId(options.id ?? randomUUID());\n    const workspace = options.workspace ?? this.workspace;\n    const workspaceId = getWorkspaceId(workspace, id);\n    const containerName = `anvia-sandbox-${id}`;\n    const volumeName = `anvia-sandbox-${workspaceId}-workspace`;\n    const removeVolumeOnDestroy = shouldDestroyWorkspace(workspace);\n\n    await assertDockerCli([\"volume\", \"create\", volumeName], this.cliOptions());\n\n    try {\n      await assertDockerCli(\n        this.createRunArgs(containerName, volumeName, workspace, options.metadata),\n        {\n          ...this.cliOptions(),\n          timeoutMs: this.limits.timeoutMs ?? defaultTimeoutMs,\n        },\n      );\n\n      const session = new DockerSandboxSession({\n        id,\n        containerName,\n        volumeName,\n        workdir: this.workdir,\n        dockerPath: this.dockerPath,\n        limits: this.limits,\n        lifecycle: this.lifecycle,\n        removeVolumeOnDestroy,\n        env: options.manifest?.env ?? {},\n        hooks: this.hooks,\n      });\n\n      await session.applyManifest(options.manifest);\n      await this.hooks.onSessionCreate?.(session.event());\n      return session;\n    } catch (error) {\n      await this.cleanup(containerName, removeVolumeOnDestroy ? volumeName : undefined);\n      throw error;\n    }\n  }\n\n  private async ensureImage(): Promise<void> {\n    if (this.pull === \"always\") {\n      await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      return;\n    }\n\n    if (this.pull === \"missing\") {\n      const inspect = await runDockerCli([\"image\", \"inspect\", this.image], this.cliOptions());\n      if (inspect.exitCode !== 0) {\n        await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      }\n    }\n  }\n\n  private createRunArgs(\n    containerName: string,\n    volumeName: string,\n    workspace: SandboxWorkspaceOptions,\n    metadata: Record<string, string> | undefined,\n  ): string[] {\n    const args = [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      \"-v\",\n      `${volumeName}:${this.workdir}`,\n      \"-w\",\n      this.workdir,\n      \"--label\",\n      \"anvia.sandbox=true\",\n      \"--label\",\n      `anvia.sandbox.workspace.mode=${workspace.mode ?? \"ephemeral\"}`,\n      \"--label\",\n      `anvia.sandbox.workspace.volume=${volumeName}`,\n    ];\n\n    for (const [key, value] of Object.entries(this.labels)) {\n      args.push(\"--label\", `${key}=${value}`);\n    }\n\n    if (metadata !== undefined) {\n      for (const [key, value] of Object.entries(metadata)) {\n        args.push(\"--label\", `anvia.sandbox.metadata.${key}=${value}`);\n      }\n    }\n\n    this.appendNetworkArgs(args);\n    this.appendLimitArgs(args);\n    this.appendSecurityArgs(args);\n\n    if (this.user !== undefined) {\n      args.push(\"-u\", this.user);\n    }\n\n    args.push(\n      this.image,\n      \"sh\",\n      \"-c\",\n      \"trap 'exit 0' TERM INT; while :; do sleep 3600 & wait $!; done\",\n    );\n    return args;\n  }\n\n  private appendNetworkArgs(args: string[]): void {\n    const mode = typeof this.network === \"object\" ? this.network.mode : this.network;\n\n    if (mode === false || mode === \"none\") {\n      args.push(\"--network\", \"none\");\n      return;\n    }\n\n    if (mode !== true) {\n      args.push(\"--network\", mode);\n    }\n  }\n\n  private appendLimitArgs(args: string[]): void {\n    if (this.limits.memoryMb !== undefined) {\n      args.push(\"--memory\", `${this.limits.memoryMb}m`);\n    }\n\n    if (this.limits.cpus !== undefined) {\n      args.push(\"--cpus\", String(this.limits.cpus));\n    }\n\n    if (this.limits.pidsLimit !== undefined) {\n      args.push(\"--pids-limit\", String(this.limits.pidsLimit));\n    }\n  }\n\n  private appendSecurityArgs(args: string[]): void {\n    if (this.security.readonlyRootfs) {\n      args.push(\"--read-only\");\n    }\n\n    if (this.security.noNewPrivileges) {\n      args.push(\"--security-opt\", \"no-new-privileges\");\n    }\n\n    for (const capability of this.security.dropCapabilities) {\n      args.push(\"--cap-drop\", capability);\n    }\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private async cleanup(containerName: string, volumeName: string | undefined): Promise<void> {\n    await runDockerCli([\"rm\", \"-f\", containerName], this.cliOptions()).catch(() => undefined);\n\n    if (volumeName !== undefined) {\n      await runDockerCli([\"volume\", \"rm\", \"-f\", volumeName], this.cliOptions()).catch(\n        () => undefined,\n      );\n    }\n  }\n}\n\nclass DockerSandboxSession implements SandboxSession {\n  readonly provider = \"docker\";\n  readonly id: string;\n  readonly workdir: string;\n\n  private readonly containerName: string;\n  private readonly volumeName: string;\n  private readonly dockerPath: string;\n  private readonly limits: SandboxLimits;\n  private readonly lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n    Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n  private readonly removeVolumeOnDestroy: boolean;\n  private readonly env: Record<string, string>;\n  private readonly hooks: SandboxHooks;\n  private ttlTimer: ReturnType<typeof setTimeout> | undefined;\n  private idleTimer: ReturnType<typeof setTimeout> | undefined;\n  private activeOperations = 0;\n  private destroyed = false;\n\n  constructor(options: {\n    id: string;\n    containerName: string;\n    volumeName: string;\n    workdir: string;\n    dockerPath: string;\n    limits: SandboxLimits;\n    lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n      Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n    removeVolumeOnDestroy: boolean;\n    env: Record<string, string>;\n    hooks: SandboxHooks;\n  }) {\n    this.id = options.id;\n    this.containerName = options.containerName;\n    this.volumeName = options.volumeName;\n    this.workdir = options.workdir;\n    this.dockerPath = options.dockerPath;\n    this.limits = options.limits;\n    this.lifecycle = options.lifecycle;\n    this.removeVolumeOnDestroy = options.removeVolumeOnDestroy;\n    this.env = options.env;\n    this.hooks = options.hooks;\n    this.startLifecycleTimers();\n  }\n\n  async applyManifest(manifest: SandboxManifest | undefined): Promise<void> {\n    await this.runOperation(async () => {\n      for (const directory of manifest?.directories ?? []) {\n        await this.mkdir(directory);\n      }\n\n      for (const [filePath, content] of Object.entries(manifest?.files ?? {})) {\n        await this.writeFile(filePath, content);\n      }\n    });\n  }\n\n  async exec(options: SandboxExecOptions): Promise<SandboxExecResult> {\n    return this.runOperation(async () => {\n      await this.hooks.onExecStart?.({\n        ...this.event(),\n        command: options.command,\n        args: options.args ?? [],\n        ...(options.cwd === undefined ? {} : { cwd: options.cwd }),\n      });\n\n      const normalizedResult = await this.execCommand(options);\n\n      await this.hooks.onExecEnd?.({\n        ...this.event(),\n        command: options.command,\n        args: options.args ?? [],\n        ...(options.cwd === undefined ? {} : { cwd: options.cwd }),\n        result: normalizedResult,\n      });\n\n      return normalizedResult;\n    });\n  }\n\n  async *execStream(options: SandboxExecOptions): AsyncIterable<SandboxExecStreamEvent> {\n    const events: SandboxExecStreamEvent[] = [];\n    let notify: (() => void) | undefined;\n    let done = false;\n    let error: unknown;\n\n    const push = (event: SandboxExecStreamEvent) => {\n      events.push(event);\n      notify?.();\n      notify = undefined;\n    };\n\n    const wait = () =>\n      new Promise<void>((resolve) => {\n        notify = resolve;\n      });\n\n    const run = this.exec({\n      ...options,\n      onStdout: (chunk) => {\n        options.onStdout?.(chunk);\n        push({ type: \"stdout\", chunk, text: Buffer.from(chunk).toString(\"utf8\") });\n      },\n      onStderr: (chunk) => {\n        options.onStderr?.(chunk);\n        push({ type: \"stderr\", chunk, text: Buffer.from(chunk).toString(\"utf8\") });\n      },\n    })\n      .then((result) => {\n        push({ type: \"exit\", result });\n      })\n      .catch((caught) => {\n        error = caught;\n      })\n      .finally(() => {\n        done = true;\n        notify?.();\n        notify = undefined;\n      });\n\n    try {\n      while (!done || events.length > 0) {\n        const event = events.shift();\n        if (event !== undefined) {\n          yield event;\n          continue;\n        }\n\n        await wait();\n      }\n\n      if (error !== undefined) {\n        throw error;\n      }\n    } finally {\n      await run;\n    }\n  }\n\n  async readFile(filePath: string): Promise<Uint8Array> {\n    return this.runOperation(async () => {\n      const normalized = normalizeSandboxPath(filePath);\n      const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-read-\"));\n      const target = path.join(tempDir, path.basename(normalized));\n\n      try {\n        await assertDockerCli(\n          [\"cp\", `${this.containerName}:${containerPath(this.workdir, normalized)}`, target],\n          this.cliOptions(),\n        );\n        const { readFile } = await import(\"node:fs/promises\");\n        const bytes = await readFile(target);\n        this.assertFileSize(bytes.byteLength, filePath);\n        return bytes;\n      } finally {\n        await rm(tempDir, { recursive: true, force: true });\n      }\n    });\n  }\n\n  async readTextFile(filePath: string): Promise<string> {\n    const bytes = await this.readFile(filePath);\n    return new TextDecoder().decode(bytes);\n  }\n\n  async writeFile(filePath: string, data: string | Uint8Array): Promise<void> {\n    await this.runOperation(async () => {\n      const size = byteLength(data);\n      this.assertFileSize(size, filePath);\n      const normalized = normalizeSandboxPath(filePath);\n      await this.mkdir(parentSandboxPath(normalized));\n\n      const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-write-\"));\n      const source = path.join(tempDir, path.basename(normalized));\n\n      try {\n        await writeFile(source, data);\n        await assertDockerCli(\n          [\"cp\", source, `${this.containerName}:${containerPath(this.workdir, normalized)}`],\n          this.cliOptions(),\n        );\n        await this.hooks.onFileWrite?.({ ...this.event(), path: normalized, size });\n      } finally {\n        await rm(tempDir, { recursive: true, force: true });\n      }\n    });\n  }\n\n  async writeTextFile(filePath: string, content: string): Promise<void> {\n    await this.writeFile(filePath, content);\n  }\n\n  async listFiles(filePath = \".\"): Promise<SandboxFileEntry[]> {\n    return this.runOperation(async () => {\n      const normalized = normalizeSandboxPath(filePath, { allowRoot: true });\n      const target = containerPath(this.workdir, normalized);\n      const result = await this.execCommand({\n        command: \"find\",\n        args: [target, \"-mindepth\", \"1\", \"-maxdepth\", \"1\", \"-printf\", \"%p\\t%y\\t%s\\n\"],\n      });\n\n      if (result.timedOut) {\n        throw new SandboxTimeoutError(`Listing files timed out for ${filePath}.`);\n      }\n\n      if (result.exitCode !== 0) {\n        throw new SandboxDockerCommandError(`Unable to list sandbox path: ${filePath}`, result);\n      }\n\n      return result.stdout\n        .split(\"\\n\")\n        .filter((line) => line.trim().length > 0)\n        .map((line) => this.parseFindEntry(line));\n    });\n  }\n\n  async destroy(): Promise<void> {\n    if (this.destroyed) {\n      return;\n    }\n\n    this.destroyed = true;\n    this.clearLifecycleTimers();\n    await runDockerCli([\"rm\", \"-f\", this.containerName], this.cliOptions()).catch(() => undefined);\n\n    if (this.removeVolumeOnDestroy) {\n      await runDockerCli([\"volume\", \"rm\", \"-f\", this.volumeName], this.cliOptions()).catch(\n        () => undefined,\n      );\n    }\n\n    await this.hooks.onDestroy?.(this.event());\n  }\n\n  private async mkdir(directoryPath: string): Promise<void> {\n    const normalized = normalizeSandboxPath(directoryPath, { allowRoot: true });\n    const result = await this.execCommand({\n      command: \"mkdir\",\n      args: [\"-p\", containerPath(this.workdir, normalized)],\n    });\n\n    if (result.exitCode !== 0) {\n      throw new SandboxDockerCommandError(\n        `Unable to create sandbox directory: ${directoryPath}`,\n        result,\n      );\n    }\n  }\n\n  private parseFindEntry(line: string): SandboxFileEntry {\n    const [rawPath, rawType, rawSize] = line.split(\"\\t\");\n    const absolutePath = rawPath ?? \"\";\n    const relativePath = absolutePath.startsWith(`${this.workdir}/`)\n      ? absolutePath.slice(this.workdir.length + 1)\n      : absolutePath;\n    const size = rawSize === undefined ? undefined : Number(rawSize);\n    const entry: SandboxFileEntry = {\n      path: relativePath,\n      type: mapFindType(rawType),\n    };\n\n    if (size !== undefined && Number.isFinite(size)) {\n      entry.size = size;\n    }\n\n    return entry;\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private async execCommand(options: SandboxExecOptions): Promise<SandboxExecResult> {\n    if (options.command.trim().length === 0) {\n      throw new SandboxDockerCommandError(\"Sandbox command cannot be empty.\", {\n        stdout: \"\",\n        stderr: \"\",\n        exitCode: 1,\n      });\n    }\n\n    const args = [\"exec\"];\n\n    if (options.input !== undefined) {\n      args.push(\"-i\");\n    }\n\n    const cwd = containerPath(this.workdir, options.cwd ?? \".\");\n    args.push(\"-w\", cwd);\n\n    for (const [key, value] of Object.entries({ ...this.env, ...options.env })) {\n      args.push(\"-e\", `${key}=${value}`);\n    }\n\n    args.push(this.containerName, options.command, ...(options.args ?? []));\n\n    const cliOptions = {\n      dockerPath: this.dockerPath,\n      timeoutMs: options.timeoutMs ?? this.limits.timeoutMs ?? defaultTimeoutMs,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n      ...(options.input === undefined ? {} : { input: options.input }),\n      ...(options.signal === undefined ? {} : { signal: options.signal }),\n      ...(options.onStdout === undefined ? {} : { onStdout: options.onStdout }),\n      ...(options.onStderr === undefined ? {} : { onStderr: options.onStderr }),\n    };\n\n    const result = await runDockerCli(args, cliOptions);\n\n    if (result.timedOut) {\n      return {\n        ...result,\n        exitCode: result.exitCode === 0 ? 124 : result.exitCode,\n      };\n    }\n\n    return result;\n  }\n\n  private assertActive(): void {\n    if (this.destroyed) {\n      throw new SandboxSessionDestroyedError(`Sandbox session ${this.id} has been destroyed.`);\n    }\n  }\n\n  event(): SandboxSessionEvent {\n    return {\n      sessionId: this.id,\n      provider: this.provider,\n      workdir: this.workdir,\n    };\n  }\n\n  private async runOperation<T>(operation: () => Promise<T>): Promise<T> {\n    this.assertActive();\n    this.activeOperations += 1;\n    this.clearIdleTimer();\n\n    try {\n      return await operation();\n    } finally {\n      this.activeOperations -= 1;\n      this.scheduleIdleTimer();\n    }\n  }\n\n  private assertFileSize(size: number, filePath: string): void {\n    if (this.limits.maxFileBytes !== undefined && size > this.limits.maxFileBytes) {\n      throw new SandboxFileSizeError(\n        `Sandbox file exceeds maxFileBytes (${size} > ${this.limits.maxFileBytes}): ${filePath}`,\n      );\n    }\n  }\n\n  private startLifecycleTimers(): void {\n    if (!this.lifecycle.autoDestroy) {\n      return;\n    }\n\n    if (this.lifecycle.ttlMs !== undefined) {\n      this.ttlTimer = setTimeout(() => {\n        void this.destroy().catch(() => undefined);\n      }, this.lifecycle.ttlMs);\n      this.ttlTimer.unref?.();\n    }\n\n    this.scheduleIdleTimer();\n  }\n\n  private scheduleIdleTimer(): void {\n    if (!this.lifecycle.autoDestroy || this.lifecycle.idleTimeoutMs === undefined) {\n      return;\n    }\n\n    if (this.destroyed || this.activeOperations > 0) {\n      return;\n    }\n\n    this.clearIdleTimer();\n    this.idleTimer = setTimeout(() => {\n      void this.destroy().catch(() => undefined);\n    }, this.lifecycle.idleTimeoutMs);\n    this.idleTimer.unref?.();\n  }\n\n  private clearLifecycleTimers(): void {\n    if (this.ttlTimer !== undefined) {\n      clearTimeout(this.ttlTimer);\n      this.ttlTimer = undefined;\n    }\n    this.clearIdleTimer();\n  }\n\n  private clearIdleTimer(): void {\n    if (this.idleTimer !== undefined) {\n      clearTimeout(this.idleTimer);\n      this.idleTimer = undefined;\n    }\n  }\n}\n\nfunction getWorkspaceId(workspace: SandboxWorkspaceOptions, sessionId: string): string {\n  if (workspace.mode === \"persistent\") {\n    return sanitizeResourceId(workspace.id);\n  }\n\n  return sessionId;\n}\n\nfunction shouldDestroyWorkspace(workspace: SandboxWorkspaceOptions): boolean {\n  if (workspace.mode === \"persistent\") {\n    return workspace.destroyOnSessionDestroy ?? false;\n  }\n\n  return true;\n}\n\nfunction sanitizeResourceId(id: string): string {\n  const sanitized = id\n    .toLowerCase()\n    .replaceAll(/[^a-z0-9_.-]/g, \"-\")\n    .replaceAll(/^-+|-+$/g, \"\");\n  return sanitized.length > 0 ? sanitized : randomUUID();\n}\n\nfunction byteLength(data: string | Uint8Array): number {\n  return typeof data === \"string\" ? Buffer.byteLength(data) : data.byteLength;\n}\n\nfunction mapFindType(type: string | undefined): SandboxFileType {\n  if (type === \"f\") {\n    return \"file\";\n  }\n  if (type === \"d\") {\n    return \"directory\";\n  }\n  if (type === \"l\") {\n    return \"symlink\";\n  }\n  return \"other\";\n}\n","import { spawn } from \"node:child_process\";\nimport { SandboxDockerCommandError, SandboxDockerUnavailableError } from \"./errors\";\n\nexport interface DockerCliResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  durationMs: number;\n  timedOut: boolean;\n  aborted: boolean;\n  stdoutTruncated: boolean;\n  stderrTruncated: boolean;\n}\n\nexport interface DockerCliOptions {\n  dockerPath: string;\n  timeoutMs?: number;\n  maxOutputBytes?: number;\n  input?: string | Uint8Array;\n  signal?: AbortSignal;\n  onStdout?: (chunk: Uint8Array) => void;\n  onStderr?: (chunk: Uint8Array) => void;\n}\n\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport async function runDockerCli(\n  args: string[],\n  options: DockerCliOptions,\n): Promise<DockerCliResult> {\n  const startedAt = Date.now();\n  const maxOutputBytes = options.maxOutputBytes ?? defaultMaxOutputBytes;\n  const stdout = createOutputCollector(maxOutputBytes, options.onStdout);\n  const stderr = createOutputCollector(maxOutputBytes, options.onStderr);\n\n  return new Promise((resolve, reject) => {\n    const child = spawn(options.dockerPath, args, {\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let timedOut = false;\n    let aborted = false;\n    let settled = false;\n\n    const timeout =\n      options.timeoutMs === undefined\n        ? undefined\n        : setTimeout(() => {\n            timedOut = true;\n            child.kill(\"SIGKILL\");\n          }, options.timeoutMs);\n\n    const abort = () => {\n      aborted = true;\n      child.kill(\"SIGKILL\");\n    };\n\n    if (options.signal?.aborted === true) {\n      abort();\n    } else {\n      options.signal?.addEventListener(\"abort\", abort, { once: true });\n    }\n\n    child.stdout.on(\"data\", (chunk: Buffer) => stdout.accept(chunk));\n    child.stderr.on(\"data\", (chunk: Buffer) => stderr.accept(chunk));\n\n    child.on(\"error\", (error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        reject(new SandboxDockerUnavailableError(\"Docker CLI was not found.\", error));\n        return;\n      }\n\n      reject(error);\n    });\n\n    child.on(\"close\", (code) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      resolve({\n        stdout: stdout.text(),\n        stderr: stderr.text(),\n        exitCode: code ?? 1,\n        durationMs: Date.now() - startedAt,\n        timedOut,\n        aborted,\n        stdoutTruncated: stdout.truncated,\n        stderrTruncated: stderr.truncated,\n      });\n    });\n\n    if (options.input !== undefined) {\n      child.stdin.end(options.input);\n    } else {\n      child.stdin.end();\n    }\n  });\n}\n\nexport async function assertDockerCli(args: string[], options: DockerCliOptions): Promise<string> {\n  const result = await runDockerCli(args, options);\n\n  if (result.exitCode !== 0) {\n    throw new SandboxDockerCommandError(`Docker command failed: docker ${args.join(\" \")}`, result);\n  }\n\n  return result.stdout.trim();\n}\n\nfunction createOutputCollector(maxBytes: number, onChunk?: (chunk: Uint8Array) => void) {\n  const chunks: Buffer[] = [];\n  let length = 0;\n  let truncated = false;\n\n  return {\n    get truncated() {\n      return truncated;\n    },\n    accept(chunk: Buffer) {\n      onChunk?.(chunk);\n\n      if (length >= maxBytes) {\n        truncated = true;\n        return;\n      }\n\n      const remaining = maxBytes - length;\n      const next = chunk.length > remaining ? chunk.subarray(0, remaining) : chunk;\n      chunks.push(next);\n      length += next.length;\n\n      if (next.length < chunk.length) {\n        truncated = true;\n      }\n    },\n    text() {\n      return Buffer.concat(chunks, length).toString(\"utf8\");\n    },\n  };\n}\n","export class SandboxError extends Error {\n  constructor(\n    message: string,\n    readonly cause?: unknown,\n  ) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class SandboxDockerUnavailableError extends SandboxError {}\n\nexport class SandboxDockerCommandError extends SandboxError {\n  constructor(\n    message: string,\n    readonly result: {\n      stdout: string;\n      stderr: string;\n      exitCode: number;\n    },\n  ) {\n    super(message);\n  }\n}\n\nexport class SandboxSessionDestroyedError extends SandboxError {}\n\nexport class SandboxPathError extends SandboxError {}\n\nexport class SandboxTimeoutError extends SandboxError {}\n\nexport class SandboxFileSizeError extends SandboxError {}\n\nexport class SandboxToolPolicyError extends SandboxError {}\n","import path from \"node:path\";\nimport { SandboxPathError } from \"./errors\";\n\nexport function normalizeSandboxPath(input: string, options: { allowRoot?: boolean } = {}): string {\n  if (input.length === 0) {\n    throw new SandboxPathError(\"Sandbox path cannot be empty.\");\n  }\n\n  if (input.includes(\"\\0\")) {\n    throw new SandboxPathError(\"Sandbox path cannot contain null bytes.\");\n  }\n\n  const normalized = path.posix.normalize(input.replaceAll(\"\\\\\", \"/\"));\n\n  if (path.posix.isAbsolute(normalized)) {\n    throw new SandboxPathError(`Sandbox path must be relative: ${input}`);\n  }\n\n  if (normalized === \"..\" || normalized.startsWith(\"../\")) {\n    throw new SandboxPathError(`Sandbox path cannot leave the workspace: ${input}`);\n  }\n\n  if (normalized === \".\" && options.allowRoot !== true) {\n    throw new SandboxPathError(\n      \"Sandbox path must refer to a file or directory inside the workspace.\",\n    );\n  }\n\n  return normalized;\n}\n\nexport function containerPath(workdir: string, relativePath: string): string {\n  const normalizedWorkdir = path.posix.normalize(workdir);\n  const normalizedPath = normalizeSandboxPath(relativePath, { allowRoot: true });\n  return normalizedPath === \".\"\n    ? normalizedWorkdir\n    : path.posix.join(normalizedWorkdir, normalizedPath);\n}\n\nexport function parentSandboxPath(relativePath: string): string {\n  const normalized = normalizeSandboxPath(relativePath);\n  const parent = path.posix.dirname(normalized);\n  return parent === \".\" ? \".\" : parent;\n}\n","import { type AnyTool, createTool } from \"@anvia/core/tool\";\nimport { z } from \"zod\";\nimport { SandboxToolPolicyError } from \"./errors\";\nimport type {\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxSession,\n  SandboxToolName,\n  SandboxToolsOptions,\n} from \"./types\";\n\nconst execCommandInput = z.object({\n  command: z.string().min(1).describe(\"Executable to run inside the sandbox workspace.\"),\n  args: z.array(z.string()).optional().describe(\"Command arguments.\"),\n  cwd: z.string().optional().describe(\"Relative working directory inside the sandbox.\"),\n  env: z\n    .record(z.string(), z.string())\n    .optional()\n    .describe(\"Environment variables for this command.\"),\n  timeoutMs: z\n    .number()\n    .int()\n    .positive()\n    .max(300_000)\n    .optional()\n    .describe(\"Optional command timeout in milliseconds.\"),\n  input: z.string().optional().describe(\"Optional stdin text to pass to the command.\"),\n});\n\nconst readFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n});\n\nconst writeFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n  content: z.string().describe(\"Complete text content to write.\"),\n});\n\nconst listFilesInput = z.object({\n  path: z\n    .string()\n    .optional()\n    .describe(\"Relative directory path inside the sandbox. Defaults to root.\"),\n});\n\nconst textOutput = z.string();\n\nexport function createSandboxTools(\n  session: SandboxSession,\n  options: SandboxToolsOptions = {},\n): AnyTool[] {\n  const include = new Set<SandboxToolName>(\n    options.allow ?? options.include ?? [\"exec_command\", \"read_file\", \"write_file\", \"list_files\"],\n  );\n  const tools: AnyTool[] = [];\n\n  if (include.has(\"exec_command\")) {\n    tools.push(createExecCommandTool(session, options));\n  }\n\n  if (include.has(\"read_file\")) {\n    tools.push(createReadFileTool(session, options));\n  }\n\n  if (include.has(\"write_file\")) {\n    tools.push(createWriteFileTool(session, options));\n  }\n\n  if (include.has(\"list_files\")) {\n    tools.push(createListFilesTool(session));\n  }\n\n  return tools;\n}\n\nfunction createExecCommandTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  const policy = options.exec ?? {};\n\n  return createTool({\n    name: \"exec_command\",\n    description:\n      \"Run a command inside the sandbox workspace. Use structured args instead of shell quoting.\",\n    input: execCommandInput,\n    output: textOutput,\n    execute: async ({ command, args, cwd, env, timeoutMs, input }) => {\n      assertCommandAllowed(command, options);\n\n      const execOptions: SandboxExecOptions = {\n        command,\n      };\n\n      if (args !== undefined) {\n        execOptions.args = args;\n      }\n      if (cwd !== undefined) {\n        execOptions.cwd = cwd;\n      }\n      if (env !== undefined) {\n        execOptions.env = env;\n      }\n      const effectiveTimeoutMs = timeoutMs ?? policy.defaultTimeoutMs ?? options.execTimeoutMs;\n      if (effectiveTimeoutMs !== undefined) {\n        assertTimeoutAllowed(effectiveTimeoutMs, options);\n        execOptions.timeoutMs = effectiveTimeoutMs;\n      }\n      if (input !== undefined) {\n        execOptions.input = input;\n      }\n\n      const result = await session.exec(execOptions);\n\n      return formatExecResult(result);\n    },\n  });\n}\n\nfunction createReadFileTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  return createTool({\n    name: \"read_file\",\n    description: \"Read a text file from the sandbox workspace.\",\n    input: readFileInput,\n    output: textOutput,\n    execute: async ({ path }) => {\n      const content = await session.readTextFile(path);\n      assertReadAllowed(content, options);\n      return content;\n    },\n  });\n}\n\nfunction createWriteFileTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  return createTool({\n    name: \"write_file\",\n    description: \"Write a text file inside the sandbox workspace. Creates parent directories.\",\n    input: writeFileInput,\n    output: textOutput,\n    execute: async ({ path, content }) => {\n      assertContentAllowed(content, options);\n      await session.writeTextFile(path, content);\n      return `Wrote ${path}`;\n    },\n  });\n}\n\nfunction createListFilesTool(session: SandboxSession): AnyTool {\n  return createTool({\n    name: \"list_files\",\n    description: \"List files and directories inside the sandbox workspace.\",\n    input: listFilesInput,\n    output: textOutput,\n    execute: async ({ path }) => {\n      const entries = await session.listFiles(path);\n\n      if (entries.length === 0) {\n        return \"No files found.\";\n      }\n\n      return entries\n        .map((entry) => {\n          const size = entry.size === undefined ? \"\" : ` ${entry.size}b`;\n          return `${entry.type}${size}\\t${entry.path}`;\n        })\n        .join(\"\\n\");\n    },\n  });\n}\n\nfunction formatExecResult(result: SandboxExecResult): string {\n  const parts = [`exit_code: ${result.exitCode}`];\n\n  if (result.timedOut) {\n    parts.push(\"timed_out: true\");\n  }\n\n  if (result.aborted) {\n    parts.push(\"aborted: true\");\n  }\n\n  if (result.stdout.length > 0) {\n    parts.push(`stdout:\\n${result.stdout.trimEnd()}`);\n  }\n\n  if (result.stderr.length > 0) {\n    parts.push(`stderr:\\n${result.stderr.trimEnd()}`);\n  }\n\n  if (result.stdoutTruncated || result.stderrTruncated) {\n    parts.push(\"output_truncated: true\");\n  }\n\n  return parts.join(\"\\n\\n\");\n}\n\nfunction assertCommandAllowed(command: string, options: SandboxToolsOptions): void {\n  const policy = options.exec;\n\n  if (policy?.blockedCommands?.includes(command)) {\n    throw new SandboxToolPolicyError(`Command is blocked by sandbox tool policy: ${command}`);\n  }\n\n  if (policy?.allowedCommands !== undefined && !policy.allowedCommands.includes(command)) {\n    throw new SandboxToolPolicyError(`Command is not allowed by sandbox tool policy: ${command}`);\n  }\n}\n\nfunction assertTimeoutAllowed(timeoutMs: number, options: SandboxToolsOptions): void {\n  const maxTimeoutMs = options.exec?.maxTimeoutMs;\n\n  if (maxTimeoutMs !== undefined && timeoutMs > maxTimeoutMs) {\n    throw new SandboxToolPolicyError(\n      `Command timeout exceeds sandbox tool policy (${timeoutMs} > ${maxTimeoutMs}).`,\n    );\n  }\n}\n\nfunction assertContentAllowed(content: string, options: SandboxToolsOptions): void {\n  const maxBytes = options.writeFile?.maxBytes;\n\n  if (maxBytes !== undefined && Buffer.byteLength(content) > maxBytes) {\n    throw new SandboxToolPolicyError(\"File content exceeds sandbox tool policy.\");\n  }\n}\n\nfunction assertReadAllowed(content: string, options: SandboxToolsOptions): void {\n  const maxBytes = options.readFile?.maxBytes;\n\n  if (maxBytes !== undefined && Buffer.byteLength(content) > maxBytes) {\n    throw new SandboxToolPolicyError(\"File content exceeds sandbox tool policy.\");\n  }\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS,IAAI,iBAAiB;AACvC,OAAO,QAAQ;AACf,OAAOA,WAAU;;;ACHjB,SAAS,aAAa;;;ACAf,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACE,SACS,OACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO,WAAW;AAAA,EACzB;AAAA,EAJW;AAKb;AAEO,IAAM,gCAAN,cAA4C,aAAa;AAAC;AAE1D,IAAM,4BAAN,cAAwC,aAAa;AAAA,EAC1D,YACE,SACS,QAKT;AACA,UAAM,OAAO;AANJ;AAAA,EAOX;AAAA,EAPW;AAQb;AAEO,IAAM,+BAAN,cAA2C,aAAa;AAAC;AAEzD,IAAM,mBAAN,cAA+B,aAAa;AAAC;AAE7C,IAAM,sBAAN,cAAkC,aAAa;AAAC;AAEhD,IAAM,uBAAN,cAAmC,aAAa;AAAC;AAEjD,IAAM,yBAAN,cAAqC,aAAa;AAAC;;;ADT1D,IAAM,wBAAwB,OAAO;AAErC,eAAsB,aACpB,MACA,SAC0B;AAC1B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AACrE,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AAErE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM;AAAA,MAC5C,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAED,QAAI,WAAW;AACf,QAAI,UAAU;AACd,QAAI,UAAU;AAEd,UAAM,UACJ,QAAQ,cAAc,SAClB,SACA,WAAW,MAAM;AACf,iBAAW;AACX,YAAM,KAAK,SAAS;AAAA,IACtB,GAAG,QAAQ,SAAS;AAE1B,UAAM,QAAQ,MAAM;AAClB,gBAAU;AACV,YAAM,KAAK,SAAS;AAAA,IACtB;AAEA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,YAAM;AAAA,IACR,OAAO;AACL,cAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,IACjE;AAEA,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAC/D,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAE/D,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,UAAK,MAAgC,SAAS,UAAU;AACtD,eAAO,IAAI,8BAA8B,6BAA6B,KAAK,CAAC;AAC5E;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,cAAQ;AAAA,QACN,QAAQ,OAAO,KAAK;AAAA,QACpB,QAAQ,OAAO,KAAK;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB;AAAA,QACA;AAAA,QACA,iBAAiB,OAAO;AAAA,QACxB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,QAAQ,UAAU,QAAW;AAC/B,YAAM,MAAM,IAAI,QAAQ,KAAK;AAAA,IAC/B,OAAO;AACL,YAAM,MAAM,IAAI;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,gBAAgB,MAAgB,SAA4C;AAChG,QAAM,SAAS,MAAM,aAAa,MAAM,OAAO;AAE/C,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,0BAA0B,iCAAiC,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM;AAAA,EAC/F;AAEA,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,sBAAsB,UAAkB,SAAuC;AACtF,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AACb,MAAI,YAAY;AAEhB,SAAO;AAAA,IACL,IAAI,YAAY;AACd,aAAO;AAAA,IACT;AAAA,IACA,OAAO,OAAe;AACpB,gBAAU,KAAK;AAEf,UAAI,UAAU,UAAU;AACtB,oBAAY;AACZ;AAAA,MACF;AAEA,YAAM,YAAY,WAAW;AAC7B,YAAM,OAAO,MAAM,SAAS,YAAY,MAAM,SAAS,GAAG,SAAS,IAAI;AACvE,aAAO,KAAK,IAAI;AAChB,gBAAU,KAAK;AAEf,UAAI,KAAK,SAAS,MAAM,QAAQ;AAC9B,oBAAY;AAAA,MACd;AAAA,IACF;AAAA,IACA,OAAO;AACL,aAAO,OAAO,OAAO,QAAQ,MAAM,EAAE,SAAS,MAAM;AAAA,IACtD;AAAA,EACF;AACF;;;AEtJA,OAAO,UAAU;AAGV,SAAS,qBAAqB,OAAe,UAAmC,CAAC,GAAW;AACjG,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,iBAAiB,+BAA+B;AAAA,EAC5D;AAEA,MAAI,MAAM,SAAS,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,yCAAyC;AAAA,EACtE;AAEA,QAAM,aAAa,KAAK,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,CAAC;AAEnE,MAAI,KAAK,MAAM,WAAW,UAAU,GAAG;AACrC,UAAM,IAAI,iBAAiB,kCAAkC,KAAK,EAAE;AAAA,EACtE;AAEA,MAAI,eAAe,QAAQ,WAAW,WAAW,KAAK,GAAG;AACvD,UAAM,IAAI,iBAAiB,4CAA4C,KAAK,EAAE;AAAA,EAChF;AAEA,MAAI,eAAe,OAAO,QAAQ,cAAc,MAAM;AACpD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,cAAc,SAAiB,cAA8B;AAC3E,QAAM,oBAAoB,KAAK,MAAM,UAAU,OAAO;AACtD,QAAM,iBAAiB,qBAAqB,cAAc,EAAE,WAAW,KAAK,CAAC;AAC7E,SAAO,mBAAmB,MACtB,oBACA,KAAK,MAAM,KAAK,mBAAmB,cAAc;AACvD;AAEO,SAAS,kBAAkB,cAA8B;AAC9D,QAAM,aAAa,qBAAqB,YAAY;AACpD,QAAM,SAAS,KAAK,MAAM,QAAQ,UAAU;AAC5C,SAAO,WAAW,MAAM,MAAM;AAChC;;;AHbA,IAAM,eAAe;AACrB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAMC,yBAAwB,OAAO;AAE9B,IAAM,gBAAN,MAAM,eAAiC;AAAA,EACnC,WAAW;AAAA,EAEH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAgC,CAAC,GAAG;AAC9C,SAAK,QAAQ,QAAQ,SAAS;AAC9B,SAAK,OAAO,QAAQ,QAAQ;AAC5B,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,YAAY,QAAQ,aAAa,EAAE,MAAM,YAAY;AAC1D,SAAK,YAAY;AAAA,MACf,aAAa,QAAQ,WAAW,eAAe;AAAA,MAC/C,GAAI,QAAQ,WAAW,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,UAAU,MAAM;AAAA,MACnF,GAAI,QAAQ,WAAW,kBAAkB,SACrC,CAAC,IACD,EAAE,eAAe,QAAQ,UAAU,cAAc;AAAA,IACvD;AACA,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,WAAW;AAAA,MACd,gBAAgB,QAAQ,UAAU,kBAAkB;AAAA,MACpD,iBAAiB,QAAQ,UAAU,mBAAmB;AAAA,MACtD,kBAAkB,QAAQ,UAAU,oBAAoB,CAAC,KAAK;AAAA,IAChE;AACA,SAAK,QAAQ,QAAQ,SAAS,CAAC;AAC/B,SAAK,OAAO,QAAQ;AAAA,EACtB;AAAA,EAEA,OAAO,KAAK,UAAgC,CAAC,GAAkB;AAC7D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,EACrF;AAAA,EAEA,OAAO,OAAO,UAAgC,CAAC,GAAkB;AAC/D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,EACzF;AAAA,EAEA,OAAO,KAAK,UAAgC,CAAC,GAAkB;AAC7D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,EACzF;AAAA,EAEA,MAAM,cAAc,UAAuC,CAAC,GAA4B;AACtF,UAAM,KAAK,YAAY;AAEvB,UAAM,KAAK,mBAAmB,QAAQ,MAAM,WAAW,CAAC;AACxD,UAAM,YAAY,QAAQ,aAAa,KAAK;AAC5C,UAAM,cAAc,eAAe,WAAW,EAAE;AAChD,UAAM,gBAAgB,iBAAiB,EAAE;AACzC,UAAM,aAAa,iBAAiB,WAAW;AAC/C,UAAM,wBAAwB,uBAAuB,SAAS;AAE9D,UAAM,gBAAgB,CAAC,UAAU,UAAU,UAAU,GAAG,KAAK,WAAW,CAAC;AAEzE,QAAI;AACF,YAAM;AAAA,QACJ,KAAK,cAAc,eAAe,YAAY,WAAW,QAAQ,QAAQ;AAAA,QACzE;AAAA,UACE,GAAG,KAAK,WAAW;AAAA,UACnB,WAAW,KAAK,OAAO,aAAa;AAAA,QACtC;AAAA,MACF;AAEA,YAAM,UAAU,IAAI,qBAAqB;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK;AAAA,QAChB;AAAA,QACA,KAAK,QAAQ,UAAU,OAAO,CAAC;AAAA,QAC/B,OAAO,KAAK;AAAA,MACd,CAAC;AAED,YAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,YAAM,KAAK,MAAM,kBAAkB,QAAQ,MAAM,CAAC;AAClD,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,KAAK,QAAQ,eAAe,wBAAwB,aAAa,MAAS;AAChF,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,SAAS,UAAU;AAC1B,YAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAC7D;AAAA,IACF;AAEA,QAAI,KAAK,SAAS,WAAW;AAC3B,YAAM,UAAU,MAAM,aAAa,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AACtF,UAAI,QAAQ,aAAa,GAAG;AAC1B,cAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cACN,eACA,YACA,WACA,UACU;AACV,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,UAAU,IAAI,KAAK,OAAO;AAAA,MAC7B;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,gCAAgC,UAAU,QAAQ,WAAW;AAAA,MAC7D;AAAA,MACA,kCAAkC,UAAU;AAAA,IAC9C;AAEA,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,MAAM,GAAG;AACtD,WAAK,KAAK,WAAW,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACxC;AAEA,QAAI,aAAa,QAAW;AAC1B,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACnD,aAAK,KAAK,WAAW,0BAA0B,GAAG,IAAI,KAAK,EAAE;AAAA,MAC/D;AAAA,IACF;AAEA,SAAK,kBAAkB,IAAI;AAC3B,SAAK,gBAAgB,IAAI;AACzB,SAAK,mBAAmB,IAAI;AAE5B,QAAI,KAAK,SAAS,QAAW;AAC3B,WAAK,KAAK,MAAM,KAAK,IAAI;AAAA,IAC3B;AAEA,SAAK;AAAA,MACH,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,kBAAkB,MAAsB;AAC9C,UAAM,OAAO,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,OAAO,KAAK;AAEzE,QAAI,SAAS,SAAS,SAAS,QAAQ;AACrC,WAAK,KAAK,aAAa,MAAM;AAC7B;AAAA,IACF;AAEA,QAAI,SAAS,MAAM;AACjB,WAAK,KAAK,aAAa,IAAI;AAAA,IAC7B;AAAA,EACF;AAAA,EAEQ,gBAAgB,MAAsB;AAC5C,QAAI,KAAK,OAAO,aAAa,QAAW;AACtC,WAAK,KAAK,YAAY,GAAG,KAAK,OAAO,QAAQ,GAAG;AAAA,IAClD;AAEA,QAAI,KAAK,OAAO,SAAS,QAAW;AAClC,WAAK,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA,IAC9C;AAEA,QAAI,KAAK,OAAO,cAAc,QAAW;AACvC,WAAK,KAAK,gBAAgB,OAAO,KAAK,OAAO,SAAS,CAAC;AAAA,IACzD;AAAA,EACF;AAAA,EAEQ,mBAAmB,MAAsB;AAC/C,QAAI,KAAK,SAAS,gBAAgB;AAChC,WAAK,KAAK,aAAa;AAAA,IACzB;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,WAAK,KAAK,kBAAkB,mBAAmB;AAAA,IACjD;AAEA,eAAW,cAAc,KAAK,SAAS,kBAAkB;AACvD,WAAK,KAAK,cAAc,UAAU;AAAA,IACpC;AAAA,EACF;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,eAAuB,YAA+C;AAC1F,UAAM,aAAa,CAAC,MAAM,MAAM,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AAExF,QAAI,eAAe,QAAW;AAC5B,YAAM,aAAa,CAAC,UAAU,MAAM,MAAM,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,QACxE,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAM,uBAAN,MAAqD;AAAA,EAC1C,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,YAAY;AAAA,EAEpB,YAAY,SAYT;AACD,SAAK,KAAK,QAAQ;AAClB,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,aAAa,QAAQ;AAC1B,SAAK,UAAU,QAAQ;AACvB,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ;AACzB,SAAK,wBAAwB,QAAQ;AACrC,SAAK,MAAM,QAAQ;AACnB,SAAK,QAAQ,QAAQ;AACrB,SAAK,qBAAqB;AAAA,EAC5B;AAAA,EAEA,MAAM,cAAc,UAAsD;AACxE,UAAM,KAAK,aAAa,YAAY;AAClC,iBAAW,aAAa,UAAU,eAAe,CAAC,GAAG;AACnD,cAAM,KAAK,MAAM,SAAS;AAAA,MAC5B;AAEA,iBAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,UAAU,SAAS,CAAC,CAAC,GAAG;AACvE,cAAM,KAAK,UAAU,UAAU,OAAO;AAAA,MACxC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAK,SAAyD;AAClE,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,KAAK,MAAM,cAAc;AAAA,QAC7B,GAAG,KAAK,MAAM;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,MAAM,QAAQ,QAAQ,CAAC;AAAA,QACvB,GAAI,QAAQ,QAAQ,SAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI;AAAA,MAC1D,CAAC;AAED,YAAM,mBAAmB,MAAM,KAAK,YAAY,OAAO;AAEvD,YAAM,KAAK,MAAM,YAAY;AAAA,QAC3B,GAAG,KAAK,MAAM;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,MAAM,QAAQ,QAAQ,CAAC;AAAA,QACvB,GAAI,QAAQ,QAAQ,SAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI;AAAA,QACxD,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,WAAW,SAAoE;AACpF,UAAM,SAAmC,CAAC;AAC1C,QAAI;AACJ,QAAI,OAAO;AACX,QAAI;AAEJ,UAAM,OAAO,CAAC,UAAkC;AAC9C,aAAO,KAAK,KAAK;AACjB,eAAS;AACT,eAAS;AAAA,IACX;AAEA,UAAM,OAAO,MACX,IAAI,QAAc,CAAC,YAAY;AAC7B,eAAS;AAAA,IACX,CAAC;AAEH,UAAM,MAAM,KAAK,KAAK;AAAA,MACpB,GAAG;AAAA,MACH,UAAU,CAAC,UAAU;AACnB,gBAAQ,WAAW,KAAK;AACxB,aAAK,EAAE,MAAM,UAAU,OAAO,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;AAAA,MAC3E;AAAA,MACA,UAAU,CAAC,UAAU;AACnB,gBAAQ,WAAW,KAAK;AACxB,aAAK,EAAE,MAAM,UAAU,OAAO,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;AAAA,MAC3E;AAAA,IACF,CAAC,EACE,KAAK,CAAC,WAAW;AAChB,WAAK,EAAE,MAAM,QAAQ,OAAO,CAAC;AAAA,IAC/B,CAAC,EACA,MAAM,CAAC,WAAW;AACjB,cAAQ;AAAA,IACV,CAAC,EACA,QAAQ,MAAM;AACb,aAAO;AACP,eAAS;AACT,eAAS;AAAA,IACX,CAAC;AAEH,QAAI;AACF,aAAO,CAAC,QAAQ,OAAO,SAAS,GAAG;AACjC,cAAM,QAAQ,OAAO,MAAM;AAC3B,YAAI,UAAU,QAAW;AACvB,gBAAM;AACN;AAAA,QACF;AAEA,cAAM,KAAK;AAAA,MACb;AAEA,UAAI,UAAU,QAAW;AACvB,cAAM;AAAA,MACR;AAAA,IACF,UAAE;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,UAAuC;AACpD,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,aAAa,qBAAqB,QAAQ;AAChD,YAAM,UAAU,MAAM,QAAQC,MAAK,KAAK,GAAG,OAAO,GAAG,qBAAqB,CAAC;AAC3E,YAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,UAAI;AACF,cAAM;AAAA,UACJ,CAAC,MAAM,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,IAAI,MAAM;AAAA,UACjF,KAAK,WAAW;AAAA,QAClB;AACA,cAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,cAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,aAAK,eAAe,MAAM,YAAY,QAAQ;AAC9C,eAAO;AAAA,MACT,UAAE;AACA,cAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,UAAmC;AACpD,UAAM,QAAQ,MAAM,KAAK,SAAS,QAAQ;AAC1C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,UAAU,UAAkB,MAA0C;AAC1E,UAAM,KAAK,aAAa,YAAY;AAClC,YAAM,OAAO,WAAW,IAAI;AAC5B,WAAK,eAAe,MAAM,QAAQ;AAClC,YAAM,aAAa,qBAAqB,QAAQ;AAChD,YAAM,KAAK,MAAM,kBAAkB,UAAU,CAAC;AAE9C,YAAM,UAAU,MAAM,QAAQA,MAAK,KAAK,GAAG,OAAO,GAAG,sBAAsB,CAAC;AAC5E,YAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,UAAI;AACF,cAAM,UAAU,QAAQ,IAAI;AAC5B,cAAM;AAAA,UACJ,CAAC,MAAM,QAAQ,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAAA,UACjF,KAAK,WAAW;AAAA,QAClB;AACA,cAAM,KAAK,MAAM,cAAc,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,YAAY,KAAK,CAAC;AAAA,MAC5E,UAAE;AACA,cAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,UAAkB,SAAgC;AACpE,UAAM,KAAK,UAAU,UAAU,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,UAAU,WAAW,KAAkC;AAC3D,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,aAAa,qBAAqB,UAAU,EAAE,WAAW,KAAK,CAAC;AACrE,YAAM,SAAS,cAAc,KAAK,SAAS,UAAU;AACrD,YAAM,SAAS,MAAM,KAAK,YAAY;AAAA,QACpC,SAAS;AAAA,QACT,MAAM,CAAC,QAAQ,aAAa,KAAK,aAAa,KAAK,WAAW,YAAc;AAAA,MAC9E,CAAC;AAED,UAAI,OAAO,UAAU;AACnB,cAAM,IAAI,oBAAoB,+BAA+B,QAAQ,GAAG;AAAA,MAC1E;AAEA,UAAI,OAAO,aAAa,GAAG;AACzB,cAAM,IAAI,0BAA0B,gCAAgC,QAAQ,IAAI,MAAM;AAAA,MACxF;AAEA,aAAO,OAAO,OACX,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC,EACvC,IAAI,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAyB;AAC7B,QAAI,KAAK,WAAW;AAClB;AAAA,IACF;AAEA,SAAK,YAAY;AACjB,SAAK,qBAAqB;AAC1B,UAAM,aAAa,CAAC,MAAM,MAAM,KAAK,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AAE7F,QAAI,KAAK,uBAAuB;AAC9B,YAAM,aAAa,CAAC,UAAU,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,QAC7E,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,KAAK,MAAM,YAAY,KAAK,MAAM,CAAC;AAAA,EAC3C;AAAA,EAEA,MAAc,MAAM,eAAsC;AACxD,UAAM,aAAa,qBAAqB,eAAe,EAAE,WAAW,KAAK,CAAC;AAC1E,UAAM,SAAS,MAAM,KAAK,YAAY;AAAA,MACpC,SAAS;AAAA,MACT,MAAM,CAAC,MAAM,cAAc,KAAK,SAAS,UAAU,CAAC;AAAA,IACtD,CAAC;AAED,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,uCAAuC,aAAa;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,eAAe,MAAgC;AACrD,UAAM,CAAC,SAAS,SAAS,OAAO,IAAI,KAAK,MAAM,GAAI;AACnD,UAAM,eAAe,WAAW;AAChC,UAAM,eAAe,aAAa,WAAW,GAAG,KAAK,OAAO,GAAG,IAC3D,aAAa,MAAM,KAAK,QAAQ,SAAS,CAAC,IAC1C;AACJ,UAAM,OAAO,YAAY,SAAY,SAAY,OAAO,OAAO;AAC/D,UAAM,QAA0B;AAAA,MAC9B,MAAM;AAAA,MACN,MAAM,YAAY,OAAO;AAAA,IAC3B;AAEA,QAAI,SAAS,UAAa,OAAO,SAAS,IAAI,GAAG;AAC/C,YAAM,OAAO;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBD;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,YAAY,SAAyD;AACjF,QAAI,QAAQ,QAAQ,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI,0BAA0B,oCAAoC;AAAA,QACtE,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,CAAC,MAAM;AAEpB,QAAI,QAAQ,UAAU,QAAW;AAC/B,WAAK,KAAK,IAAI;AAAA,IAChB;AAEA,UAAM,MAAM,cAAc,KAAK,SAAS,QAAQ,OAAO,GAAG;AAC1D,SAAK,KAAK,MAAM,GAAG;AAEnB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,EAAE,GAAG,KAAK,KAAK,GAAG,QAAQ,IAAI,CAAC,GAAG;AAC1E,WAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACnC;AAEA,SAAK,KAAK,KAAK,eAAe,QAAQ,SAAS,GAAI,QAAQ,QAAQ,CAAC,CAAE;AAEtE,UAAM,aAAa;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,WAAW,QAAQ,aAAa,KAAK,OAAO,aAAa;AAAA,MACzD,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,MAC9C,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,MAC9D,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACjE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,MACvE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM,aAAa,MAAM,UAAU;AAElD,QAAI,OAAO,UAAU;AACnB,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,OAAO,aAAa,IAAI,MAAM,OAAO;AAAA,MACjD;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAqB;AAC3B,QAAI,KAAK,WAAW;AAClB,YAAM,IAAI,6BAA6B,mBAAmB,KAAK,EAAE,sBAAsB;AAAA,IACzF;AAAA,EACF;AAAA,EAEA,QAA6B;AAC3B,WAAO;AAAA,MACL,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,SAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAc,aAAgB,WAAyC;AACrE,SAAK,aAAa;AAClB,SAAK,oBAAoB;AACzB,SAAK,eAAe;AAEpB,QAAI;AACF,aAAO,MAAM,UAAU;AAAA,IACzB,UAAE;AACA,WAAK,oBAAoB;AACzB,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA,EAEQ,eAAe,MAAc,UAAwB;AAC3D,QAAI,KAAK,OAAO,iBAAiB,UAAa,OAAO,KAAK,OAAO,cAAc;AAC7E,YAAM,IAAI;AAAA,QACR,sCAAsC,IAAI,MAAM,KAAK,OAAO,YAAY,MAAM,QAAQ;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,uBAA6B;AACnC,QAAI,CAAC,KAAK,UAAU,aAAa;AAC/B;AAAA,IACF;AAEA,QAAI,KAAK,UAAU,UAAU,QAAW;AACtC,WAAK,WAAW,WAAW,MAAM;AAC/B,aAAK,KAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,MAC3C,GAAG,KAAK,UAAU,KAAK;AACvB,WAAK,SAAS,QAAQ;AAAA,IACxB;AAEA,SAAK,kBAAkB;AAAA,EACzB;AAAA,EAEQ,oBAA0B;AAChC,QAAI,CAAC,KAAK,UAAU,eAAe,KAAK,UAAU,kBAAkB,QAAW;AAC7E;AAAA,IACF;AAEA,QAAI,KAAK,aAAa,KAAK,mBAAmB,GAAG;AAC/C;AAAA,IACF;AAEA,SAAK,eAAe;AACpB,SAAK,YAAY,WAAW,MAAM;AAChC,WAAK,KAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,IAC3C,GAAG,KAAK,UAAU,aAAa;AAC/B,SAAK,UAAU,QAAQ;AAAA,EACzB;AAAA,EAEQ,uBAA6B;AACnC,QAAI,KAAK,aAAa,QAAW;AAC/B,mBAAa,KAAK,QAAQ;AAC1B,WAAK,WAAW;AAAA,IAClB;AACA,SAAK,eAAe;AAAA,EACtB;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,KAAK,cAAc,QAAW;AAChC,mBAAa,KAAK,SAAS;AAC3B,WAAK,YAAY;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,WAAoC,WAA2B;AACrF,MAAI,UAAU,SAAS,cAAc;AACnC,WAAO,mBAAmB,UAAU,EAAE;AAAA,EACxC;AAEA,SAAO;AACT;AAEA,SAAS,uBAAuB,WAA6C;AAC3E,MAAI,UAAU,SAAS,cAAc;AACnC,WAAO,UAAU,2BAA2B;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,IAAoB;AAC9C,QAAM,YAAY,GACf,YAAY,EACZ,WAAW,iBAAiB,GAAG,EAC/B,WAAW,YAAY,EAAE;AAC5B,SAAO,UAAU,SAAS,IAAI,YAAY,WAAW;AACvD;AAEA,SAAS,WAAW,MAAmC;AACrD,SAAO,OAAO,SAAS,WAAW,OAAO,WAAW,IAAI,IAAI,KAAK;AACnE;AAEA,SAAS,YAAY,MAA2C;AAC9D,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;AIzrBA,SAAuB,kBAAkB;AACzC,SAAS,SAAS;AAUlB,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,iDAAiD;AAAA,EACrF,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,EAClE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gDAAgD;AAAA,EACpF,KAAK,EACF,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAC7B,SAAS,EACT,SAAS,yCAAyC;AAAA,EACrD,WAAW,EACR,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,GAAO,EACX,SAAS,EACT,SAAS,2CAA2C;AAAA,EACvD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AACrF,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAC3E,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAAA,EACzE,SAAS,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAChE,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EACH,OAAO,EACP,SAAS,EACT,SAAS,+DAA+D;AAC7E,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAErB,SAAS,mBACd,SACA,UAA+B,CAAC,GACrB;AACX,QAAM,UAAU,IAAI;AAAA,IAClB,QAAQ,SAAS,QAAQ,WAAW,CAAC,gBAAgB,aAAa,cAAc,YAAY;AAAA,EAC9F;AACA,QAAM,QAAmB,CAAC;AAE1B,MAAI,QAAQ,IAAI,cAAc,GAAG;AAC/B,UAAM,KAAK,sBAAsB,SAAS,OAAO,CAAC;AAAA,EACpD;AAEA,MAAI,QAAQ,IAAI,WAAW,GAAG;AAC5B,UAAM,KAAK,mBAAmB,SAAS,OAAO,CAAC;AAAA,EACjD;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,SAAS,OAAO,CAAC;AAAA,EAClD;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,OAAO,CAAC;AAAA,EACzC;AAEA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAyB,SAAuC;AAC7F,QAAM,SAAS,QAAQ,QAAQ,CAAC;AAEhC,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,SAAS,MAAM,KAAK,KAAK,WAAW,MAAM,MAAM;AAChE,2BAAqB,SAAS,OAAO;AAErC,YAAM,cAAkC;AAAA,QACtC;AAAA,MACF;AAEA,UAAI,SAAS,QAAW;AACtB,oBAAY,OAAO;AAAA,MACrB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,YAAM,qBAAqB,aAAa,OAAO,oBAAoB,QAAQ;AAC3E,UAAI,uBAAuB,QAAW;AACpC,6BAAqB,oBAAoB,OAAO;AAChD,oBAAY,YAAY;AAAA,MAC1B;AACA,UAAI,UAAU,QAAW;AACvB,oBAAY,QAAQ;AAAA,MACtB;AAEA,YAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAE7C,aAAO,iBAAiB,MAAM;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,mBAAmB,SAAyB,SAAuC;AAC1F,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAE,MAAK,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,aAAaA,KAAI;AAC/C,wBAAkB,SAAS,OAAO;AAClC,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAyB,SAAuC;AAC3F,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,OAAM,QAAQ,MAAM;AACpC,2BAAqB,SAAS,OAAO;AACrC,YAAM,QAAQ,cAAcA,OAAM,OAAO;AACzC,aAAO,SAASA,KAAI;AAAA,IACtB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAkC;AAC7D,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,MAAK,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,UAAUA,KAAI;AAE5C,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO;AAAA,MACT;AAEA,aAAO,QACJ,IAAI,CAAC,UAAU;AACd,cAAM,OAAO,MAAM,SAAS,SAAY,KAAK,IAAI,MAAM,IAAI;AAC3D,eAAO,GAAG,MAAM,IAAI,GAAG,IAAI,IAAK,MAAM,IAAI;AAAA,MAC5C,CAAC,EACA,KAAK,IAAI;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,QAAQ,CAAC,cAAc,OAAO,QAAQ,EAAE;AAE9C,MAAI,OAAO,UAAU;AACnB,UAAM,KAAK,iBAAiB;AAAA,EAC9B;AAEA,MAAI,OAAO,SAAS;AAClB,UAAM,KAAK,eAAe;AAAA,EAC5B;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,mBAAmB,OAAO,iBAAiB;AACpD,UAAM,KAAK,wBAAwB;AAAA,EACrC;AAEA,SAAO,MAAM,KAAK,MAAM;AAC1B;AAEA,SAAS,qBAAqB,SAAiB,SAAoC;AACjF,QAAM,SAAS,QAAQ;AAEvB,MAAI,QAAQ,iBAAiB,SAAS,OAAO,GAAG;AAC9C,UAAM,IAAI,uBAAuB,8CAA8C,OAAO,EAAE;AAAA,EAC1F;AAEA,MAAI,QAAQ,oBAAoB,UAAa,CAAC,OAAO,gBAAgB,SAAS,OAAO,GAAG;AACtF,UAAM,IAAI,uBAAuB,kDAAkD,OAAO,EAAE;AAAA,EAC9F;AACF;AAEA,SAAS,qBAAqB,WAAmB,SAAoC;AACnF,QAAM,eAAe,QAAQ,MAAM;AAEnC,MAAI,iBAAiB,UAAa,YAAY,cAAc;AAC1D,UAAM,IAAI;AAAA,MACR,gDAAgD,SAAS,MAAM,YAAY;AAAA,IAC7E;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,SAAiB,SAAoC;AACjF,QAAM,WAAW,QAAQ,WAAW;AAEpC,MAAI,aAAa,UAAa,OAAO,WAAW,OAAO,IAAI,UAAU;AACnE,UAAM,IAAI,uBAAuB,2CAA2C;AAAA,EAC9E;AACF;AAEA,SAAS,kBAAkB,SAAiB,SAAoC;AAC9E,QAAM,WAAW,QAAQ,UAAU;AAEnC,MAAI,aAAa,UAAa,OAAO,WAAW,OAAO,IAAI,UAAU;AACnE,UAAM,IAAI,uBAAuB,2CAA2C;AAAA,EAC9E;AACF;","names":["path","defaultMaxOutputBytes","path","path"]}
+{"version":3,"sources":["../src/docker-sandbox.ts","../src/docker-cli.ts","../src/errors.ts","../src/path.ts","../src/tools.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { assertDockerCli, type DockerCliOptions, runDockerCli } from \"./docker-cli\";\nimport {\n  SandboxDockerCommandError,\n  SandboxFileSizeError,\n  SandboxSessionDestroyedError,\n  SandboxTimeoutError,\n} from \"./errors\";\nimport { containerPath, normalizeSandboxPath, parentSandboxPath } from \"./path\";\nimport type {\n  DockerSandboxOptions,\n  Sandbox,\n  SandboxCreateSessionOptions,\n  SandboxExecEndEvent,\n  SandboxExecEvent,\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxExecStreamEvent,\n  SandboxFileEntry,\n  SandboxFileType,\n  SandboxHooks,\n  SandboxLifecycleOptions,\n  SandboxLimits,\n  SandboxManifest,\n  SandboxSession,\n  SandboxSessionEvent,\n  SandboxWorkspaceOptions,\n} from \"./types\";\n\nconst defaultImage = \"node:22-bookworm\";\nconst defaultWorkdir = \"/workspace\";\nconst defaultTimeoutMs = 30_000;\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport class DockerSandbox implements Sandbox {\n  readonly provider = \"docker\";\n\n  private readonly image: string;\n  private readonly pull: \"missing\" | \"always\" | \"never\";\n  private readonly workdir: string;\n  private readonly workspace: SandboxWorkspaceOptions;\n  private readonly lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n    Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n  private readonly network: NonNullable<DockerSandboxOptions[\"network\"]>;\n  private readonly dockerPath: string;\n  private readonly labels: Record<string, string>;\n  private readonly limits: SandboxLimits;\n  private readonly security: Required<NonNullable<DockerSandboxOptions[\"security\"]>>;\n  private readonly hooks: SandboxHooks;\n  private readonly user: string | undefined;\n\n  constructor(options: DockerSandboxOptions = {}) {\n    this.image = options.image ?? defaultImage;\n    this.pull = options.pull ?? \"missing\";\n    this.workdir = options.workdir ?? defaultWorkdir;\n    this.workspace = options.workspace ?? { mode: \"ephemeral\" };\n    const lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n      Omit<SandboxLifecycleOptions, \"autoDestroy\"> = {\n      autoDestroy: options.lifecycle?.autoDestroy ?? true,\n    };\n    if (options.lifecycle?.ttlMs !== undefined) lifecycle.ttlMs = options.lifecycle.ttlMs;\n    if (options.lifecycle?.idleTimeoutMs !== undefined) {\n      lifecycle.idleTimeoutMs = options.lifecycle.idleTimeoutMs;\n    }\n    this.lifecycle = lifecycle;\n    this.network = options.network ?? false;\n    this.dockerPath = options.dockerPath ?? \"docker\";\n    this.labels = options.labels ?? {};\n    this.limits = options.limits ?? {};\n    this.security = {\n      readonlyRootfs: options.security?.readonlyRootfs ?? false,\n      noNewPrivileges: options.security?.noNewPrivileges ?? true,\n      dropCapabilities: options.security?.dropCapabilities ?? [\"ALL\"],\n    };\n    this.hooks = options.hooks ?? {};\n    this.user = options.user;\n  }\n\n  static node(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"node:22-bookworm\" });\n  }\n\n  static python(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"python:3.13-bookworm\" });\n  }\n\n  static deno(options: DockerSandboxOptions = {}): DockerSandbox {\n    return new DockerSandbox({ ...options, image: options.image ?? \"denoland/deno:debian\" });\n  }\n\n  async createSession(options: SandboxCreateSessionOptions = {}): Promise<SandboxSession> {\n    await this.ensureImage();\n\n    const id = sanitizeResourceId(options.id ?? randomUUID());\n    const workspace = options.workspace ?? this.workspace;\n    const workspaceId = getWorkspaceId(workspace, id);\n    const containerName = `anvia-sandbox-${id}`;\n    const volumeName = `anvia-sandbox-${workspaceId}-workspace`;\n    const removeVolumeOnDestroy = shouldDestroyWorkspace(workspace);\n\n    await assertDockerCli([\"volume\", \"create\", volumeName], this.cliOptions());\n\n    try {\n      await assertDockerCli(\n        this.createRunArgs(containerName, volumeName, workspace, options.metadata),\n        {\n          ...this.cliOptions(),\n          timeoutMs: this.limits.timeoutMs ?? defaultTimeoutMs,\n        },\n      );\n\n      const session = new DockerSandboxSession({\n        id,\n        containerName,\n        volumeName,\n        workdir: this.workdir,\n        dockerPath: this.dockerPath,\n        limits: this.limits,\n        lifecycle: this.lifecycle,\n        removeVolumeOnDestroy,\n        env: options.manifest?.env ?? {},\n        hooks: this.hooks,\n      });\n\n      await session.applyManifest(options.manifest);\n      await this.hooks.onSessionCreate?.(session.event());\n      return session;\n    } catch (error) {\n      await this.cleanup(containerName, removeVolumeOnDestroy ? volumeName : undefined);\n      throw error;\n    }\n  }\n\n  private async ensureImage(): Promise<void> {\n    if (this.pull === \"always\") {\n      await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      return;\n    }\n\n    if (this.pull === \"missing\") {\n      const inspect = await runDockerCli([\"image\", \"inspect\", this.image], this.cliOptions());\n      if (inspect.exitCode !== 0) {\n        await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      }\n    }\n  }\n\n  private createRunArgs(\n    containerName: string,\n    volumeName: string,\n    workspace: SandboxWorkspaceOptions,\n    metadata: Record<string, string> | undefined,\n  ): string[] {\n    const args = [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      \"-v\",\n      `${volumeName}:${this.workdir}`,\n      \"-w\",\n      this.workdir,\n      \"--label\",\n      \"anvia.sandbox=true\",\n      \"--label\",\n      `anvia.sandbox.workspace.mode=${workspace.mode ?? \"ephemeral\"}`,\n      \"--label\",\n      `anvia.sandbox.workspace.volume=${volumeName}`,\n    ];\n\n    for (const [key, value] of Object.entries(this.labels)) {\n      args.push(\"--label\", `${key}=${value}`);\n    }\n\n    if (metadata !== undefined) {\n      for (const [key, value] of Object.entries(metadata)) {\n        args.push(\"--label\", `anvia.sandbox.metadata.${key}=${value}`);\n      }\n    }\n\n    this.appendNetworkArgs(args);\n    this.appendLimitArgs(args);\n    this.appendSecurityArgs(args);\n\n    if (this.user !== undefined) {\n      args.push(\"-u\", this.user);\n    }\n\n    args.push(\n      this.image,\n      \"sh\",\n      \"-c\",\n      \"trap 'exit 0' TERM INT; while :; do sleep 3600 & wait $!; done\",\n    );\n    return args;\n  }\n\n  private appendNetworkArgs(args: string[]): void {\n    const mode = typeof this.network === \"object\" ? this.network.mode : this.network;\n\n    if (mode === false || mode === \"none\") {\n      args.push(\"--network\", \"none\");\n      return;\n    }\n\n    if (mode !== true) {\n      args.push(\"--network\", mode);\n    }\n  }\n\n  private appendLimitArgs(args: string[]): void {\n    if (this.limits.memoryMb !== undefined) {\n      args.push(\"--memory\", `${this.limits.memoryMb}m`);\n    }\n\n    if (this.limits.cpus !== undefined) {\n      args.push(\"--cpus\", String(this.limits.cpus));\n    }\n\n    if (this.limits.pidsLimit !== undefined) {\n      args.push(\"--pids-limit\", String(this.limits.pidsLimit));\n    }\n  }\n\n  private appendSecurityArgs(args: string[]): void {\n    if (this.security.readonlyRootfs) {\n      args.push(\"--read-only\");\n    }\n\n    if (this.security.noNewPrivileges) {\n      args.push(\"--security-opt\", \"no-new-privileges\");\n    }\n\n    for (const capability of this.security.dropCapabilities) {\n      args.push(\"--cap-drop\", capability);\n    }\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private async cleanup(containerName: string, volumeName: string | undefined): Promise<void> {\n    await runDockerCli([\"rm\", \"-f\", containerName], this.cliOptions()).catch(() => undefined);\n\n    if (volumeName !== undefined) {\n      await runDockerCli([\"volume\", \"rm\", \"-f\", volumeName], this.cliOptions()).catch(\n        () => undefined,\n      );\n    }\n  }\n}\n\nclass DockerSandboxSession implements SandboxSession {\n  readonly provider = \"docker\";\n  readonly id: string;\n  readonly workdir: string;\n\n  private readonly containerName: string;\n  private readonly volumeName: string;\n  private readonly dockerPath: string;\n  private readonly limits: SandboxLimits;\n  private readonly lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n    Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n  private readonly removeVolumeOnDestroy: boolean;\n  private readonly env: Record<string, string>;\n  private readonly hooks: SandboxHooks;\n  private ttlTimer: ReturnType<typeof setTimeout> | undefined;\n  private idleTimer: ReturnType<typeof setTimeout> | undefined;\n  private activeOperations = 0;\n  private destroyed = false;\n\n  constructor(options: {\n    id: string;\n    containerName: string;\n    volumeName: string;\n    workdir: string;\n    dockerPath: string;\n    limits: SandboxLimits;\n    lifecycle: Required<Pick<SandboxLifecycleOptions, \"autoDestroy\">> &\n      Omit<SandboxLifecycleOptions, \"autoDestroy\">;\n    removeVolumeOnDestroy: boolean;\n    env: Record<string, string>;\n    hooks: SandboxHooks;\n  }) {\n    this.id = options.id;\n    this.containerName = options.containerName;\n    this.volumeName = options.volumeName;\n    this.workdir = options.workdir;\n    this.dockerPath = options.dockerPath;\n    this.limits = options.limits;\n    this.lifecycle = options.lifecycle;\n    this.removeVolumeOnDestroy = options.removeVolumeOnDestroy;\n    this.env = options.env;\n    this.hooks = options.hooks;\n    this.startLifecycleTimers();\n  }\n\n  async applyManifest(manifest: SandboxManifest | undefined): Promise<void> {\n    await this.runOperation(async () => {\n      for (const directory of manifest?.directories ?? []) {\n        await this.mkdir(directory);\n      }\n\n      for (const [filePath, content] of Object.entries(manifest?.files ?? {})) {\n        await this.writeFile(filePath, content);\n      }\n    });\n  }\n\n  async exec(options: SandboxExecOptions): Promise<SandboxExecResult> {\n    return this.runOperation(async () => {\n      const startEvent: SandboxExecEvent = {\n        ...this.event(),\n        command: options.command,\n        args: options.args ?? [],\n      };\n      if (options.cwd !== undefined) startEvent.cwd = options.cwd;\n      await this.hooks.onExecStart?.(startEvent);\n\n      const normalizedResult = await this.execCommand(options);\n\n      const endEvent: SandboxExecEndEvent = {\n        ...this.event(),\n        command: options.command,\n        args: options.args ?? [],\n        result: normalizedResult,\n      };\n      if (options.cwd !== undefined) endEvent.cwd = options.cwd;\n      await this.hooks.onExecEnd?.(endEvent);\n\n      return normalizedResult;\n    });\n  }\n\n  async *execStream(options: SandboxExecOptions): AsyncIterable<SandboxExecStreamEvent> {\n    const events: SandboxExecStreamEvent[] = [];\n    let notify: (() => void) | undefined;\n    let done = false;\n    let error: unknown;\n\n    const push = (event: SandboxExecStreamEvent) => {\n      events.push(event);\n      notify?.();\n      notify = undefined;\n    };\n\n    const wait = () =>\n      new Promise<void>((resolve) => {\n        notify = resolve;\n      });\n\n    const run = this.exec({\n      ...options,\n      onStdout: (chunk) => {\n        options.onStdout?.(chunk);\n        push({ type: \"stdout\", chunk, text: Buffer.from(chunk).toString(\"utf8\") });\n      },\n      onStderr: (chunk) => {\n        options.onStderr?.(chunk);\n        push({ type: \"stderr\", chunk, text: Buffer.from(chunk).toString(\"utf8\") });\n      },\n    })\n      .then((result) => {\n        push({ type: \"exit\", result });\n      })\n      .catch((caught) => {\n        error = caught;\n      })\n      .finally(() => {\n        done = true;\n        notify?.();\n        notify = undefined;\n      });\n\n    try {\n      while (!done || events.length > 0) {\n        const event = events.shift();\n        if (event !== undefined) {\n          yield event;\n          continue;\n        }\n\n        await wait();\n      }\n\n      if (error !== undefined) {\n        throw error;\n      }\n    } finally {\n      await run;\n    }\n  }\n\n  async readFile(filePath: string): Promise<Uint8Array> {\n    return this.runOperation(async () => {\n      const normalized = normalizeSandboxPath(filePath);\n      const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-read-\"));\n      const target = path.join(tempDir, path.basename(normalized));\n\n      try {\n        await assertDockerCli(\n          [\"cp\", `${this.containerName}:${containerPath(this.workdir, normalized)}`, target],\n          this.cliOptions(),\n        );\n        const { readFile } = await import(\"node:fs/promises\");\n        const bytes = await readFile(target);\n        this.assertFileSize(bytes.byteLength, filePath);\n        return bytes;\n      } finally {\n        await rm(tempDir, { recursive: true, force: true });\n      }\n    });\n  }\n\n  async readTextFile(filePath: string): Promise<string> {\n    const bytes = await this.readFile(filePath);\n    return new TextDecoder().decode(bytes);\n  }\n\n  async writeFile(filePath: string, data: string | Uint8Array): Promise<void> {\n    await this.runOperation(async () => {\n      const size = byteLength(data);\n      this.assertFileSize(size, filePath);\n      const normalized = normalizeSandboxPath(filePath);\n      await this.mkdir(parentSandboxPath(normalized));\n\n      const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-write-\"));\n      const source = path.join(tempDir, path.basename(normalized));\n\n      try {\n        await writeFile(source, data);\n        await assertDockerCli(\n          [\"cp\", source, `${this.containerName}:${containerPath(this.workdir, normalized)}`],\n          this.cliOptions(),\n        );\n        await this.hooks.onFileWrite?.({ ...this.event(), path: normalized, size });\n      } finally {\n        await rm(tempDir, { recursive: true, force: true });\n      }\n    });\n  }\n\n  async writeTextFile(filePath: string, content: string): Promise<void> {\n    await this.writeFile(filePath, content);\n  }\n\n  async listFiles(filePath = \".\"): Promise<SandboxFileEntry[]> {\n    return this.runOperation(async () => {\n      const normalized = normalizeSandboxPath(filePath, { allowRoot: true });\n      const target = containerPath(this.workdir, normalized);\n      const result = await this.execCommand({\n        command: \"find\",\n        args: [target, \"-mindepth\", \"1\", \"-maxdepth\", \"1\", \"-printf\", \"%p\\t%y\\t%s\\n\"],\n      });\n\n      if (result.timedOut) {\n        throw new SandboxTimeoutError(`Listing files timed out for ${filePath}.`);\n      }\n\n      if (result.exitCode !== 0) {\n        throw new SandboxDockerCommandError(`Unable to list sandbox path: ${filePath}`, result);\n      }\n\n      return result.stdout\n        .split(\"\\n\")\n        .filter((line) => line.trim().length > 0)\n        .map((line) => this.parseFindEntry(line));\n    });\n  }\n\n  async destroy(): Promise<void> {\n    if (this.destroyed) {\n      return;\n    }\n\n    this.destroyed = true;\n    this.clearLifecycleTimers();\n    await runDockerCli([\"rm\", \"-f\", this.containerName], this.cliOptions()).catch(() => undefined);\n\n    if (this.removeVolumeOnDestroy) {\n      await runDockerCli([\"volume\", \"rm\", \"-f\", this.volumeName], this.cliOptions()).catch(\n        () => undefined,\n      );\n    }\n\n    await this.hooks.onDestroy?.(this.event());\n  }\n\n  private async mkdir(directoryPath: string): Promise<void> {\n    const normalized = normalizeSandboxPath(directoryPath, { allowRoot: true });\n    const result = await this.execCommand({\n      command: \"mkdir\",\n      args: [\"-p\", containerPath(this.workdir, normalized)],\n    });\n\n    if (result.exitCode !== 0) {\n      throw new SandboxDockerCommandError(\n        `Unable to create sandbox directory: ${directoryPath}`,\n        result,\n      );\n    }\n  }\n\n  private parseFindEntry(line: string): SandboxFileEntry {\n    const [rawPath, rawType, rawSize] = line.split(\"\\t\");\n    const absolutePath = rawPath ?? \"\";\n    const relativePath = absolutePath.startsWith(`${this.workdir}/`)\n      ? absolutePath.slice(this.workdir.length + 1)\n      : absolutePath;\n    const size = rawSize === undefined ? undefined : Number(rawSize);\n    const entry: SandboxFileEntry = {\n      path: relativePath,\n      type: mapFindType(rawType),\n    };\n\n    if (size !== undefined && Number.isFinite(size)) {\n      entry.size = size;\n    }\n\n    return entry;\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private async execCommand(options: SandboxExecOptions): Promise<SandboxExecResult> {\n    if (options.command.trim().length === 0) {\n      throw new SandboxDockerCommandError(\"Sandbox command cannot be empty.\", {\n        stdout: \"\",\n        stderr: \"\",\n        exitCode: 1,\n      });\n    }\n\n    const args = [\"exec\"];\n\n    if (options.input !== undefined) {\n      args.push(\"-i\");\n    }\n\n    const cwd = containerPath(this.workdir, options.cwd ?? \".\");\n    args.push(\"-w\", cwd);\n\n    for (const [key, value] of Object.entries({ ...this.env, ...options.env })) {\n      args.push(\"-e\", `${key}=${value}`);\n    }\n\n    args.push(this.containerName, options.command, ...(options.args ?? []));\n\n    const cliOptions: DockerCliOptions = {\n      dockerPath: this.dockerPath,\n      timeoutMs: options.timeoutMs ?? this.limits.timeoutMs ?? defaultTimeoutMs,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n    if (options.input !== undefined) cliOptions.input = options.input;\n    if (options.signal !== undefined) cliOptions.signal = options.signal;\n    if (options.onStdout !== undefined) cliOptions.onStdout = options.onStdout;\n    if (options.onStderr !== undefined) cliOptions.onStderr = options.onStderr;\n\n    const result = await runDockerCli(args, cliOptions);\n\n    if (result.timedOut) {\n      return {\n        ...result,\n        exitCode: result.exitCode === 0 ? 124 : result.exitCode,\n      };\n    }\n\n    return result;\n  }\n\n  private assertActive(): void {\n    if (this.destroyed) {\n      throw new SandboxSessionDestroyedError(`Sandbox session ${this.id} has been destroyed.`);\n    }\n  }\n\n  event(): SandboxSessionEvent {\n    return {\n      sessionId: this.id,\n      provider: this.provider,\n      workdir: this.workdir,\n    };\n  }\n\n  private async runOperation<T>(operation: () => Promise<T>): Promise<T> {\n    this.assertActive();\n    this.activeOperations += 1;\n    this.clearIdleTimer();\n\n    try {\n      return await operation();\n    } finally {\n      this.activeOperations -= 1;\n      this.scheduleIdleTimer();\n    }\n  }\n\n  private assertFileSize(size: number, filePath: string): void {\n    if (this.limits.maxFileBytes !== undefined && size > this.limits.maxFileBytes) {\n      throw new SandboxFileSizeError(\n        `Sandbox file exceeds maxFileBytes (${size} > ${this.limits.maxFileBytes}): ${filePath}`,\n      );\n    }\n  }\n\n  private startLifecycleTimers(): void {\n    if (!this.lifecycle.autoDestroy) {\n      return;\n    }\n\n    if (this.lifecycle.ttlMs !== undefined) {\n      this.ttlTimer = setTimeout(() => {\n        void this.destroy().catch(() => undefined);\n      }, this.lifecycle.ttlMs);\n      this.ttlTimer.unref?.();\n    }\n\n    this.scheduleIdleTimer();\n  }\n\n  private scheduleIdleTimer(): void {\n    if (!this.lifecycle.autoDestroy || this.lifecycle.idleTimeoutMs === undefined) {\n      return;\n    }\n\n    if (this.destroyed || this.activeOperations > 0) {\n      return;\n    }\n\n    this.clearIdleTimer();\n    this.idleTimer = setTimeout(() => {\n      void this.destroy().catch(() => undefined);\n    }, this.lifecycle.idleTimeoutMs);\n    this.idleTimer.unref?.();\n  }\n\n  private clearLifecycleTimers(): void {\n    if (this.ttlTimer !== undefined) {\n      clearTimeout(this.ttlTimer);\n      this.ttlTimer = undefined;\n    }\n    this.clearIdleTimer();\n  }\n\n  private clearIdleTimer(): void {\n    if (this.idleTimer !== undefined) {\n      clearTimeout(this.idleTimer);\n      this.idleTimer = undefined;\n    }\n  }\n}\n\nfunction getWorkspaceId(workspace: SandboxWorkspaceOptions, sessionId: string): string {\n  if (workspace.mode === \"persistent\") {\n    return sanitizeResourceId(workspace.id);\n  }\n\n  return sessionId;\n}\n\nfunction shouldDestroyWorkspace(workspace: SandboxWorkspaceOptions): boolean {\n  if (workspace.mode === \"persistent\") {\n    return workspace.destroyOnSessionDestroy ?? false;\n  }\n\n  return true;\n}\n\nfunction sanitizeResourceId(id: string): string {\n  const sanitized = id\n    .toLowerCase()\n    .replaceAll(/[^a-z0-9_.-]/g, \"-\")\n    .replaceAll(/^-+|-+$/g, \"\");\n  return sanitized.length > 0 ? sanitized : randomUUID();\n}\n\nfunction byteLength(data: string | Uint8Array): number {\n  return typeof data === \"string\" ? Buffer.byteLength(data) : data.byteLength;\n}\n\nfunction mapFindType(type: string | undefined): SandboxFileType {\n  if (type === \"f\") {\n    return \"file\";\n  }\n  if (type === \"d\") {\n    return \"directory\";\n  }\n  if (type === \"l\") {\n    return \"symlink\";\n  }\n  return \"other\";\n}\n","import { spawn } from \"node:child_process\";\nimport { SandboxDockerCommandError, SandboxDockerUnavailableError } from \"./errors\";\n\nexport interface DockerCliResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  durationMs: number;\n  timedOut: boolean;\n  aborted: boolean;\n  stdoutTruncated: boolean;\n  stderrTruncated: boolean;\n}\n\nexport interface DockerCliOptions {\n  dockerPath: string;\n  timeoutMs?: number;\n  maxOutputBytes?: number;\n  input?: string | Uint8Array;\n  signal?: AbortSignal;\n  onStdout?: (chunk: Uint8Array) => void;\n  onStderr?: (chunk: Uint8Array) => void;\n}\n\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport async function runDockerCli(\n  args: string[],\n  options: DockerCliOptions,\n): Promise<DockerCliResult> {\n  const startedAt = Date.now();\n  const maxOutputBytes = options.maxOutputBytes ?? defaultMaxOutputBytes;\n  const stdout = createOutputCollector(maxOutputBytes, options.onStdout);\n  const stderr = createOutputCollector(maxOutputBytes, options.onStderr);\n\n  return new Promise((resolve, reject) => {\n    const child = spawn(options.dockerPath, args, {\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let timedOut = false;\n    let aborted = false;\n    let settled = false;\n\n    const timeout =\n      options.timeoutMs === undefined\n        ? undefined\n        : setTimeout(() => {\n            timedOut = true;\n            child.kill(\"SIGKILL\");\n          }, options.timeoutMs);\n\n    const abort = () => {\n      aborted = true;\n      child.kill(\"SIGKILL\");\n    };\n\n    if (options.signal?.aborted === true) {\n      abort();\n    } else {\n      options.signal?.addEventListener(\"abort\", abort, { once: true });\n    }\n\n    child.stdout.on(\"data\", (chunk: Buffer) => stdout.accept(chunk));\n    child.stderr.on(\"data\", (chunk: Buffer) => stderr.accept(chunk));\n\n    child.on(\"error\", (error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        reject(new SandboxDockerUnavailableError(\"Docker CLI was not found.\", error));\n        return;\n      }\n\n      reject(error);\n    });\n\n    child.on(\"close\", (code) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      resolve({\n        stdout: stdout.text(),\n        stderr: stderr.text(),\n        exitCode: code ?? 1,\n        durationMs: Date.now() - startedAt,\n        timedOut,\n        aborted,\n        stdoutTruncated: stdout.truncated,\n        stderrTruncated: stderr.truncated,\n      });\n    });\n\n    if (options.input !== undefined) {\n      child.stdin.end(options.input);\n    } else {\n      child.stdin.end();\n    }\n  });\n}\n\nexport async function assertDockerCli(args: string[], options: DockerCliOptions): Promise<string> {\n  const result = await runDockerCli(args, options);\n\n  if (result.exitCode !== 0) {\n    throw new SandboxDockerCommandError(`Docker command failed: docker ${args.join(\" \")}`, result);\n  }\n\n  return result.stdout.trim();\n}\n\nfunction createOutputCollector(maxBytes: number, onChunk?: (chunk: Uint8Array) => void) {\n  const chunks: Buffer[] = [];\n  let length = 0;\n  let truncated = false;\n\n  return {\n    get truncated() {\n      return truncated;\n    },\n    accept(chunk: Buffer) {\n      onChunk?.(chunk);\n\n      if (length >= maxBytes) {\n        truncated = true;\n        return;\n      }\n\n      const remaining = maxBytes - length;\n      const next = chunk.length > remaining ? chunk.subarray(0, remaining) : chunk;\n      chunks.push(next);\n      length += next.length;\n\n      if (next.length < chunk.length) {\n        truncated = true;\n      }\n    },\n    text() {\n      return Buffer.concat(chunks, length).toString(\"utf8\");\n    },\n  };\n}\n","export class SandboxError extends Error {\n  constructor(\n    message: string,\n    readonly cause?: unknown,\n  ) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class SandboxDockerUnavailableError extends SandboxError {}\n\nexport class SandboxDockerCommandError extends SandboxError {\n  constructor(\n    message: string,\n    readonly result: {\n      stdout: string;\n      stderr: string;\n      exitCode: number;\n    },\n  ) {\n    super(message);\n  }\n}\n\nexport class SandboxSessionDestroyedError extends SandboxError {}\n\nexport class SandboxPathError extends SandboxError {}\n\nexport class SandboxTimeoutError extends SandboxError {}\n\nexport class SandboxFileSizeError extends SandboxError {}\n\nexport class SandboxToolPolicyError extends SandboxError {}\n","import path from \"node:path\";\nimport { SandboxPathError } from \"./errors\";\n\nexport function normalizeSandboxPath(input: string, options: { allowRoot?: boolean } = {}): string {\n  if (input.length === 0) {\n    throw new SandboxPathError(\"Sandbox path cannot be empty.\");\n  }\n\n  if (input.includes(\"\\0\")) {\n    throw new SandboxPathError(\"Sandbox path cannot contain null bytes.\");\n  }\n\n  const normalized = path.posix.normalize(input.replaceAll(\"\\\\\", \"/\"));\n\n  if (path.posix.isAbsolute(normalized)) {\n    throw new SandboxPathError(`Sandbox path must be relative: ${input}`);\n  }\n\n  if (normalized === \"..\" || normalized.startsWith(\"../\")) {\n    throw new SandboxPathError(`Sandbox path cannot leave the workspace: ${input}`);\n  }\n\n  if (normalized === \".\" && options.allowRoot !== true) {\n    throw new SandboxPathError(\n      \"Sandbox path must refer to a file or directory inside the workspace.\",\n    );\n  }\n\n  return normalized;\n}\n\nexport function containerPath(workdir: string, relativePath: string): string {\n  const normalizedWorkdir = path.posix.normalize(workdir);\n  const normalizedPath = normalizeSandboxPath(relativePath, { allowRoot: true });\n  return normalizedPath === \".\"\n    ? normalizedWorkdir\n    : path.posix.join(normalizedWorkdir, normalizedPath);\n}\n\nexport function parentSandboxPath(relativePath: string): string {\n  const normalized = normalizeSandboxPath(relativePath);\n  const parent = path.posix.dirname(normalized);\n  return parent === \".\" ? \".\" : parent;\n}\n","import { type AnyTool, createTool } from \"@anvia/core/tool\";\nimport { z } from \"zod\";\nimport { SandboxToolPolicyError } from \"./errors\";\nimport type {\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxSession,\n  SandboxToolName,\n  SandboxToolsOptions,\n} from \"./types\";\n\nconst execCommandInput = z.object({\n  command: z.string().min(1).describe(\"Executable to run inside the sandbox workspace.\"),\n  args: z.array(z.string()).optional().describe(\"Command arguments.\"),\n  cwd: z.string().optional().describe(\"Relative working directory inside the sandbox.\"),\n  env: z\n    .record(z.string(), z.string())\n    .optional()\n    .describe(\"Environment variables for this command.\"),\n  timeoutMs: z\n    .number()\n    .int()\n    .positive()\n    .max(300_000)\n    .optional()\n    .describe(\"Optional command timeout in milliseconds.\"),\n  input: z.string().optional().describe(\"Optional stdin text to pass to the command.\"),\n});\n\nconst readFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n});\n\nconst writeFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n  content: z.string().describe(\"Complete text content to write.\"),\n});\n\nconst listFilesInput = z.object({\n  path: z\n    .string()\n    .optional()\n    .describe(\"Relative directory path inside the sandbox. Defaults to root.\"),\n});\n\nconst textOutput = z.string();\n\nexport function createSandboxTools(\n  session: SandboxSession,\n  options: SandboxToolsOptions = {},\n): AnyTool[] {\n  const include = new Set<SandboxToolName>(\n    options.allow ?? options.include ?? [\"exec_command\", \"read_file\", \"write_file\", \"list_files\"],\n  );\n  const tools: AnyTool[] = [];\n\n  if (include.has(\"exec_command\")) {\n    tools.push(createExecCommandTool(session, options));\n  }\n\n  if (include.has(\"read_file\")) {\n    tools.push(createReadFileTool(session, options));\n  }\n\n  if (include.has(\"write_file\")) {\n    tools.push(createWriteFileTool(session, options));\n  }\n\n  if (include.has(\"list_files\")) {\n    tools.push(createListFilesTool(session));\n  }\n\n  return tools;\n}\n\nfunction createExecCommandTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  const policy = options.exec ?? {};\n\n  return createTool({\n    name: \"exec_command\",\n    description:\n      \"Run a command inside the sandbox workspace. Use structured args instead of shell quoting.\",\n    input: execCommandInput,\n    output: textOutput,\n    execute: async ({ command, args, cwd, env, timeoutMs, input }) => {\n      assertCommandAllowed(command, options);\n\n      const execOptions: SandboxExecOptions = {\n        command,\n      };\n\n      if (args !== undefined) {\n        execOptions.args = args;\n      }\n      if (cwd !== undefined) {\n        execOptions.cwd = cwd;\n      }\n      if (env !== undefined) {\n        execOptions.env = env;\n      }\n      const effectiveTimeoutMs = timeoutMs ?? policy.defaultTimeoutMs ?? options.execTimeoutMs;\n      if (effectiveTimeoutMs !== undefined) {\n        assertTimeoutAllowed(effectiveTimeoutMs, options);\n        execOptions.timeoutMs = effectiveTimeoutMs;\n      }\n      if (input !== undefined) {\n        execOptions.input = input;\n      }\n\n      const result = await session.exec(execOptions);\n\n      return formatExecResult(result);\n    },\n  });\n}\n\nfunction createReadFileTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  return createTool({\n    name: \"read_file\",\n    description: \"Read a text file from the sandbox workspace.\",\n    input: readFileInput,\n    output: textOutput,\n    execute: async ({ path }) => {\n      const content = await session.readTextFile(path);\n      assertReadAllowed(content, options);\n      return content;\n    },\n  });\n}\n\nfunction createWriteFileTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  return createTool({\n    name: \"write_file\",\n    description: \"Write a text file inside the sandbox workspace. Creates parent directories.\",\n    input: writeFileInput,\n    output: textOutput,\n    execute: async ({ path, content }) => {\n      assertContentAllowed(content, options);\n      await session.writeTextFile(path, content);\n      return `Wrote ${path}`;\n    },\n  });\n}\n\nfunction createListFilesTool(session: SandboxSession): AnyTool {\n  return createTool({\n    name: \"list_files\",\n    description: \"List files and directories inside the sandbox workspace.\",\n    input: listFilesInput,\n    output: textOutput,\n    execute: async ({ path }) => {\n      const entries = await session.listFiles(path);\n\n      if (entries.length === 0) {\n        return \"No files found.\";\n      }\n\n      return entries\n        .map((entry) => {\n          const size = entry.size === undefined ? \"\" : ` ${entry.size}b`;\n          return `${entry.type}${size}\\t${entry.path}`;\n        })\n        .join(\"\\n\");\n    },\n  });\n}\n\nfunction formatExecResult(result: SandboxExecResult): string {\n  const parts = [`exit_code: ${result.exitCode}`];\n\n  if (result.timedOut) {\n    parts.push(\"timed_out: true\");\n  }\n\n  if (result.aborted) {\n    parts.push(\"aborted: true\");\n  }\n\n  if (result.stdout.length > 0) {\n    parts.push(`stdout:\\n${result.stdout.trimEnd()}`);\n  }\n\n  if (result.stderr.length > 0) {\n    parts.push(`stderr:\\n${result.stderr.trimEnd()}`);\n  }\n\n  if (result.stdoutTruncated || result.stderrTruncated) {\n    parts.push(\"output_truncated: true\");\n  }\n\n  return parts.join(\"\\n\\n\");\n}\n\nfunction assertCommandAllowed(command: string, options: SandboxToolsOptions): void {\n  const policy = options.exec;\n\n  if (policy?.blockedCommands?.includes(command)) {\n    throw new SandboxToolPolicyError(`Command is blocked by sandbox tool policy: ${command}`);\n  }\n\n  if (policy?.allowedCommands !== undefined && !policy.allowedCommands.includes(command)) {\n    throw new SandboxToolPolicyError(`Command is not allowed by sandbox tool policy: ${command}`);\n  }\n}\n\nfunction assertTimeoutAllowed(timeoutMs: number, options: SandboxToolsOptions): void {\n  const maxTimeoutMs = options.exec?.maxTimeoutMs;\n\n  if (maxTimeoutMs !== undefined && timeoutMs > maxTimeoutMs) {\n    throw new SandboxToolPolicyError(\n      `Command timeout exceeds sandbox tool policy (${timeoutMs} > ${maxTimeoutMs}).`,\n    );\n  }\n}\n\nfunction assertContentAllowed(content: string, options: SandboxToolsOptions): void {\n  const maxBytes = options.writeFile?.maxBytes;\n\n  if (maxBytes !== undefined && Buffer.byteLength(content) > maxBytes) {\n    throw new SandboxToolPolicyError(\"File content exceeds sandbox tool policy.\");\n  }\n}\n\nfunction assertReadAllowed(content: string, options: SandboxToolsOptions): void {\n  const maxBytes = options.readFile?.maxBytes;\n\n  if (maxBytes !== undefined && Buffer.byteLength(content) > maxBytes) {\n    throw new SandboxToolPolicyError(\"File content exceeds sandbox tool policy.\");\n  }\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS,IAAI,iBAAiB;AACvC,OAAO,QAAQ;AACf,OAAOA,WAAU;;;ACHjB,SAAS,aAAa;;;ACAf,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACE,SACS,OACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO,WAAW;AAAA,EACzB;AAAA,EAJW;AAKb;AAEO,IAAM,gCAAN,cAA4C,aAAa;AAAC;AAE1D,IAAM,4BAAN,cAAwC,aAAa;AAAA,EAC1D,YACE,SACS,QAKT;AACA,UAAM,OAAO;AANJ;AAAA,EAOX;AAAA,EAPW;AAQb;AAEO,IAAM,+BAAN,cAA2C,aAAa;AAAC;AAEzD,IAAM,mBAAN,cAA+B,aAAa;AAAC;AAE7C,IAAM,sBAAN,cAAkC,aAAa;AAAC;AAEhD,IAAM,uBAAN,cAAmC,aAAa;AAAC;AAEjD,IAAM,yBAAN,cAAqC,aAAa;AAAC;;;ADT1D,IAAM,wBAAwB,OAAO;AAErC,eAAsB,aACpB,MACA,SAC0B;AAC1B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AACrE,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AAErE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM;AAAA,MAC5C,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAED,QAAI,WAAW;AACf,QAAI,UAAU;AACd,QAAI,UAAU;AAEd,UAAM,UACJ,QAAQ,cAAc,SAClB,SACA,WAAW,MAAM;AACf,iBAAW;AACX,YAAM,KAAK,SAAS;AAAA,IACtB,GAAG,QAAQ,SAAS;AAE1B,UAAM,QAAQ,MAAM;AAClB,gBAAU;AACV,YAAM,KAAK,SAAS;AAAA,IACtB;AAEA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,YAAM;AAAA,IACR,OAAO;AACL,cAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,IACjE;AAEA,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAC/D,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAE/D,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,UAAK,MAAgC,SAAS,UAAU;AACtD,eAAO,IAAI,8BAA8B,6BAA6B,KAAK,CAAC;AAC5E;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,cAAQ;AAAA,QACN,QAAQ,OAAO,KAAK;AAAA,QACpB,QAAQ,OAAO,KAAK;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB;AAAA,QACA;AAAA,QACA,iBAAiB,OAAO;AAAA,QACxB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,QAAQ,UAAU,QAAW;AAC/B,YAAM,MAAM,IAAI,QAAQ,KAAK;AAAA,IAC/B,OAAO;AACL,YAAM,MAAM,IAAI;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,gBAAgB,MAAgB,SAA4C;AAChG,QAAM,SAAS,MAAM,aAAa,MAAM,OAAO;AAE/C,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,0BAA0B,iCAAiC,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM;AAAA,EAC/F;AAEA,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,sBAAsB,UAAkB,SAAuC;AACtF,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AACb,MAAI,YAAY;AAEhB,SAAO;AAAA,IACL,IAAI,YAAY;AACd,aAAO;AAAA,IACT;AAAA,IACA,OAAO,OAAe;AACpB,gBAAU,KAAK;AAEf,UAAI,UAAU,UAAU;AACtB,oBAAY;AACZ;AAAA,MACF;AAEA,YAAM,YAAY,WAAW;AAC7B,YAAM,OAAO,MAAM,SAAS,YAAY,MAAM,SAAS,GAAG,SAAS,IAAI;AACvE,aAAO,KAAK,IAAI;AAChB,gBAAU,KAAK;AAEf,UAAI,KAAK,SAAS,MAAM,QAAQ;AAC9B,oBAAY;AAAA,MACd;AAAA,IACF;AAAA,IACA,OAAO;AACL,aAAO,OAAO,OAAO,QAAQ,MAAM,EAAE,SAAS,MAAM;AAAA,IACtD;AAAA,EACF;AACF;;;AEtJA,OAAO,UAAU;AAGV,SAAS,qBAAqB,OAAe,UAAmC,CAAC,GAAW;AACjG,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,iBAAiB,+BAA+B;AAAA,EAC5D;AAEA,MAAI,MAAM,SAAS,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,yCAAyC;AAAA,EACtE;AAEA,QAAM,aAAa,KAAK,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,CAAC;AAEnE,MAAI,KAAK,MAAM,WAAW,UAAU,GAAG;AACrC,UAAM,IAAI,iBAAiB,kCAAkC,KAAK,EAAE;AAAA,EACtE;AAEA,MAAI,eAAe,QAAQ,WAAW,WAAW,KAAK,GAAG;AACvD,UAAM,IAAI,iBAAiB,4CAA4C,KAAK,EAAE;AAAA,EAChF;AAEA,MAAI,eAAe,OAAO,QAAQ,cAAc,MAAM;AACpD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,cAAc,SAAiB,cAA8B;AAC3E,QAAM,oBAAoB,KAAK,MAAM,UAAU,OAAO;AACtD,QAAM,iBAAiB,qBAAqB,cAAc,EAAE,WAAW,KAAK,CAAC;AAC7E,SAAO,mBAAmB,MACtB,oBACA,KAAK,MAAM,KAAK,mBAAmB,cAAc;AACvD;AAEO,SAAS,kBAAkB,cAA8B;AAC9D,QAAM,aAAa,qBAAqB,YAAY;AACpD,QAAM,SAAS,KAAK,MAAM,QAAQ,UAAU;AAC5C,SAAO,WAAW,MAAM,MAAM;AAChC;;;AHXA,IAAM,eAAe;AACrB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAMC,yBAAwB,OAAO;AAE9B,IAAM,gBAAN,MAAM,eAAiC;AAAA,EACnC,WAAW;AAAA,EAEH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAgC,CAAC,GAAG;AAC9C,SAAK,QAAQ,QAAQ,SAAS;AAC9B,SAAK,OAAO,QAAQ,QAAQ;AAC5B,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,YAAY,QAAQ,aAAa,EAAE,MAAM,YAAY;AAC1D,UAAM,YAC2C;AAAA,MAC/C,aAAa,QAAQ,WAAW,eAAe;AAAA,IACjD;AACA,QAAI,QAAQ,WAAW,UAAU,OAAW,WAAU,QAAQ,QAAQ,UAAU;AAChF,QAAI,QAAQ,WAAW,kBAAkB,QAAW;AAClD,gBAAU,gBAAgB,QAAQ,UAAU;AAAA,IAC9C;AACA,SAAK,YAAY;AACjB,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,WAAW;AAAA,MACd,gBAAgB,QAAQ,UAAU,kBAAkB;AAAA,MACpD,iBAAiB,QAAQ,UAAU,mBAAmB;AAAA,MACtD,kBAAkB,QAAQ,UAAU,oBAAoB,CAAC,KAAK;AAAA,IAChE;AACA,SAAK,QAAQ,QAAQ,SAAS,CAAC;AAC/B,SAAK,OAAO,QAAQ;AAAA,EACtB;AAAA,EAEA,OAAO,KAAK,UAAgC,CAAC,GAAkB;AAC7D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,EACrF;AAAA,EAEA,OAAO,OAAO,UAAgC,CAAC,GAAkB;AAC/D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,EACzF;AAAA,EAEA,OAAO,KAAK,UAAgC,CAAC,GAAkB;AAC7D,WAAO,IAAI,eAAc,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,EACzF;AAAA,EAEA,MAAM,cAAc,UAAuC,CAAC,GAA4B;AACtF,UAAM,KAAK,YAAY;AAEvB,UAAM,KAAK,mBAAmB,QAAQ,MAAM,WAAW,CAAC;AACxD,UAAM,YAAY,QAAQ,aAAa,KAAK;AAC5C,UAAM,cAAc,eAAe,WAAW,EAAE;AAChD,UAAM,gBAAgB,iBAAiB,EAAE;AACzC,UAAM,aAAa,iBAAiB,WAAW;AAC/C,UAAM,wBAAwB,uBAAuB,SAAS;AAE9D,UAAM,gBAAgB,CAAC,UAAU,UAAU,UAAU,GAAG,KAAK,WAAW,CAAC;AAEzE,QAAI;AACF,YAAM;AAAA,QACJ,KAAK,cAAc,eAAe,YAAY,WAAW,QAAQ,QAAQ;AAAA,QACzE;AAAA,UACE,GAAG,KAAK,WAAW;AAAA,UACnB,WAAW,KAAK,OAAO,aAAa;AAAA,QACtC;AAAA,MACF;AAEA,YAAM,UAAU,IAAI,qBAAqB;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK;AAAA,QAChB;AAAA,QACA,KAAK,QAAQ,UAAU,OAAO,CAAC;AAAA,QAC/B,OAAO,KAAK;AAAA,MACd,CAAC;AAED,YAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,YAAM,KAAK,MAAM,kBAAkB,QAAQ,MAAM,CAAC;AAClD,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,KAAK,QAAQ,eAAe,wBAAwB,aAAa,MAAS;AAChF,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,SAAS,UAAU;AAC1B,YAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAC7D;AAAA,IACF;AAEA,QAAI,KAAK,SAAS,WAAW;AAC3B,YAAM,UAAU,MAAM,aAAa,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AACtF,UAAI,QAAQ,aAAa,GAAG;AAC1B,cAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cACN,eACA,YACA,WACA,UACU;AACV,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,UAAU,IAAI,KAAK,OAAO;AAAA,MAC7B;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,gCAAgC,UAAU,QAAQ,WAAW;AAAA,MAC7D;AAAA,MACA,kCAAkC,UAAU;AAAA,IAC9C;AAEA,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,MAAM,GAAG;AACtD,WAAK,KAAK,WAAW,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACxC;AAEA,QAAI,aAAa,QAAW;AAC1B,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACnD,aAAK,KAAK,WAAW,0BAA0B,GAAG,IAAI,KAAK,EAAE;AAAA,MAC/D;AAAA,IACF;AAEA,SAAK,kBAAkB,IAAI;AAC3B,SAAK,gBAAgB,IAAI;AACzB,SAAK,mBAAmB,IAAI;AAE5B,QAAI,KAAK,SAAS,QAAW;AAC3B,WAAK,KAAK,MAAM,KAAK,IAAI;AAAA,IAC3B;AAEA,SAAK;AAAA,MACH,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,kBAAkB,MAAsB;AAC9C,UAAM,OAAO,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,OAAO,KAAK;AAEzE,QAAI,SAAS,SAAS,SAAS,QAAQ;AACrC,WAAK,KAAK,aAAa,MAAM;AAC7B;AAAA,IACF;AAEA,QAAI,SAAS,MAAM;AACjB,WAAK,KAAK,aAAa,IAAI;AAAA,IAC7B;AAAA,EACF;AAAA,EAEQ,gBAAgB,MAAsB;AAC5C,QAAI,KAAK,OAAO,aAAa,QAAW;AACtC,WAAK,KAAK,YAAY,GAAG,KAAK,OAAO,QAAQ,GAAG;AAAA,IAClD;AAEA,QAAI,KAAK,OAAO,SAAS,QAAW;AAClC,WAAK,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA,IAC9C;AAEA,QAAI,KAAK,OAAO,cAAc,QAAW;AACvC,WAAK,KAAK,gBAAgB,OAAO,KAAK,OAAO,SAAS,CAAC;AAAA,IACzD;AAAA,EACF;AAAA,EAEQ,mBAAmB,MAAsB;AAC/C,QAAI,KAAK,SAAS,gBAAgB;AAChC,WAAK,KAAK,aAAa;AAAA,IACzB;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,WAAK,KAAK,kBAAkB,mBAAmB;AAAA,IACjD;AAEA,eAAW,cAAc,KAAK,SAAS,kBAAkB;AACvD,WAAK,KAAK,cAAc,UAAU;AAAA,IACpC;AAAA,EACF;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,eAAuB,YAA+C;AAC1F,UAAM,aAAa,CAAC,MAAM,MAAM,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AAExF,QAAI,eAAe,QAAW;AAC5B,YAAM,aAAa,CAAC,UAAU,MAAM,MAAM,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,QACxE,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAM,uBAAN,MAAqD;AAAA,EAC1C,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,YAAY;AAAA,EAEpB,YAAY,SAYT;AACD,SAAK,KAAK,QAAQ;AAClB,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,aAAa,QAAQ;AAC1B,SAAK,UAAU,QAAQ;AACvB,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ;AACzB,SAAK,wBAAwB,QAAQ;AACrC,SAAK,MAAM,QAAQ;AACnB,SAAK,QAAQ,QAAQ;AACrB,SAAK,qBAAqB;AAAA,EAC5B;AAAA,EAEA,MAAM,cAAc,UAAsD;AACxE,UAAM,KAAK,aAAa,YAAY;AAClC,iBAAW,aAAa,UAAU,eAAe,CAAC,GAAG;AACnD,cAAM,KAAK,MAAM,SAAS;AAAA,MAC5B;AAEA,iBAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,UAAU,SAAS,CAAC,CAAC,GAAG;AACvE,cAAM,KAAK,UAAU,UAAU,OAAO;AAAA,MACxC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAK,SAAyD;AAClE,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,aAA+B;AAAA,QACnC,GAAG,KAAK,MAAM;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,MAAM,QAAQ,QAAQ,CAAC;AAAA,MACzB;AACA,UAAI,QAAQ,QAAQ,OAAW,YAAW,MAAM,QAAQ;AACxD,YAAM,KAAK,MAAM,cAAc,UAAU;AAEzC,YAAM,mBAAmB,MAAM,KAAK,YAAY,OAAO;AAEvD,YAAM,WAAgC;AAAA,QACpC,GAAG,KAAK,MAAM;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,MAAM,QAAQ,QAAQ,CAAC;AAAA,QACvB,QAAQ;AAAA,MACV;AACA,UAAI,QAAQ,QAAQ,OAAW,UAAS,MAAM,QAAQ;AACtD,YAAM,KAAK,MAAM,YAAY,QAAQ;AAErC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,WAAW,SAAoE;AACpF,UAAM,SAAmC,CAAC;AAC1C,QAAI;AACJ,QAAI,OAAO;AACX,QAAI;AAEJ,UAAM,OAAO,CAAC,UAAkC;AAC9C,aAAO,KAAK,KAAK;AACjB,eAAS;AACT,eAAS;AAAA,IACX;AAEA,UAAM,OAAO,MACX,IAAI,QAAc,CAAC,YAAY;AAC7B,eAAS;AAAA,IACX,CAAC;AAEH,UAAM,MAAM,KAAK,KAAK;AAAA,MACpB,GAAG;AAAA,MACH,UAAU,CAAC,UAAU;AACnB,gBAAQ,WAAW,KAAK;AACxB,aAAK,EAAE,MAAM,UAAU,OAAO,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;AAAA,MAC3E;AAAA,MACA,UAAU,CAAC,UAAU;AACnB,gBAAQ,WAAW,KAAK;AACxB,aAAK,EAAE,MAAM,UAAU,OAAO,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;AAAA,MAC3E;AAAA,IACF,CAAC,EACE,KAAK,CAAC,WAAW;AAChB,WAAK,EAAE,MAAM,QAAQ,OAAO,CAAC;AAAA,IAC/B,CAAC,EACA,MAAM,CAAC,WAAW;AACjB,cAAQ;AAAA,IACV,CAAC,EACA,QAAQ,MAAM;AACb,aAAO;AACP,eAAS;AACT,eAAS;AAAA,IACX,CAAC;AAEH,QAAI;AACF,aAAO,CAAC,QAAQ,OAAO,SAAS,GAAG;AACjC,cAAM,QAAQ,OAAO,MAAM;AAC3B,YAAI,UAAU,QAAW;AACvB,gBAAM;AACN;AAAA,QACF;AAEA,cAAM,KAAK;AAAA,MACb;AAEA,UAAI,UAAU,QAAW;AACvB,cAAM;AAAA,MACR;AAAA,IACF,UAAE;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,UAAuC;AACpD,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,aAAa,qBAAqB,QAAQ;AAChD,YAAM,UAAU,MAAM,QAAQC,MAAK,KAAK,GAAG,OAAO,GAAG,qBAAqB,CAAC;AAC3E,YAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,UAAI;AACF,cAAM;AAAA,UACJ,CAAC,MAAM,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,IAAI,MAAM;AAAA,UACjF,KAAK,WAAW;AAAA,QAClB;AACA,cAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,cAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,aAAK,eAAe,MAAM,YAAY,QAAQ;AAC9C,eAAO;AAAA,MACT,UAAE;AACA,cAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,UAAmC;AACpD,UAAM,QAAQ,MAAM,KAAK,SAAS,QAAQ;AAC1C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,UAAU,UAAkB,MAA0C;AAC1E,UAAM,KAAK,aAAa,YAAY;AAClC,YAAM,OAAO,WAAW,IAAI;AAC5B,WAAK,eAAe,MAAM,QAAQ;AAClC,YAAM,aAAa,qBAAqB,QAAQ;AAChD,YAAM,KAAK,MAAM,kBAAkB,UAAU,CAAC;AAE9C,YAAM,UAAU,MAAM,QAAQA,MAAK,KAAK,GAAG,OAAO,GAAG,sBAAsB,CAAC;AAC5E,YAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,UAAI;AACF,cAAM,UAAU,QAAQ,IAAI;AAC5B,cAAM;AAAA,UACJ,CAAC,MAAM,QAAQ,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAAA,UACjF,KAAK,WAAW;AAAA,QAClB;AACA,cAAM,KAAK,MAAM,cAAc,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,YAAY,KAAK,CAAC;AAAA,MAC5E,UAAE;AACA,cAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,UAAkB,SAAgC;AACpE,UAAM,KAAK,UAAU,UAAU,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,UAAU,WAAW,KAAkC;AAC3D,WAAO,KAAK,aAAa,YAAY;AACnC,YAAM,aAAa,qBAAqB,UAAU,EAAE,WAAW,KAAK,CAAC;AACrE,YAAM,SAAS,cAAc,KAAK,SAAS,UAAU;AACrD,YAAM,SAAS,MAAM,KAAK,YAAY;AAAA,QACpC,SAAS;AAAA,QACT,MAAM,CAAC,QAAQ,aAAa,KAAK,aAAa,KAAK,WAAW,YAAc;AAAA,MAC9E,CAAC;AAED,UAAI,OAAO,UAAU;AACnB,cAAM,IAAI,oBAAoB,+BAA+B,QAAQ,GAAG;AAAA,MAC1E;AAEA,UAAI,OAAO,aAAa,GAAG;AACzB,cAAM,IAAI,0BAA0B,gCAAgC,QAAQ,IAAI,MAAM;AAAA,MACxF;AAEA,aAAO,OAAO,OACX,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC,EACvC,IAAI,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAyB;AAC7B,QAAI,KAAK,WAAW;AAClB;AAAA,IACF;AAEA,SAAK,YAAY;AACjB,SAAK,qBAAqB;AAC1B,UAAM,aAAa,CAAC,MAAM,MAAM,KAAK,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AAE7F,QAAI,KAAK,uBAAuB;AAC9B,YAAM,aAAa,CAAC,UAAU,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,QAC7E,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,KAAK,MAAM,YAAY,KAAK,MAAM,CAAC;AAAA,EAC3C;AAAA,EAEA,MAAc,MAAM,eAAsC;AACxD,UAAM,aAAa,qBAAqB,eAAe,EAAE,WAAW,KAAK,CAAC;AAC1E,UAAM,SAAS,MAAM,KAAK,YAAY;AAAA,MACpC,SAAS;AAAA,MACT,MAAM,CAAC,MAAM,cAAc,KAAK,SAAS,UAAU,CAAC;AAAA,IACtD,CAAC;AAED,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,uCAAuC,aAAa;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,eAAe,MAAgC;AACrD,UAAM,CAAC,SAAS,SAAS,OAAO,IAAI,KAAK,MAAM,GAAI;AACnD,UAAM,eAAe,WAAW;AAChC,UAAM,eAAe,aAAa,WAAW,GAAG,KAAK,OAAO,GAAG,IAC3D,aAAa,MAAM,KAAK,QAAQ,SAAS,CAAC,IAC1C;AACJ,UAAM,OAAO,YAAY,SAAY,SAAY,OAAO,OAAO;AAC/D,UAAM,QAA0B;AAAA,MAC9B,MAAM;AAAA,MACN,MAAM,YAAY,OAAO;AAAA,IAC3B;AAEA,QAAI,SAAS,UAAa,OAAO,SAAS,IAAI,GAAG;AAC/C,YAAM,OAAO;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBD;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,YAAY,SAAyD;AACjF,QAAI,QAAQ,QAAQ,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI,0BAA0B,oCAAoC;AAAA,QACtE,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,CAAC,MAAM;AAEpB,QAAI,QAAQ,UAAU,QAAW;AAC/B,WAAK,KAAK,IAAI;AAAA,IAChB;AAEA,UAAM,MAAM,cAAc,KAAK,SAAS,QAAQ,OAAO,GAAG;AAC1D,SAAK,KAAK,MAAM,GAAG;AAEnB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,EAAE,GAAG,KAAK,KAAK,GAAG,QAAQ,IAAI,CAAC,GAAG;AAC1E,WAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACnC;AAEA,SAAK,KAAK,KAAK,eAAe,QAAQ,SAAS,GAAI,QAAQ,QAAQ,CAAC,CAAE;AAEtE,UAAM,aAA+B;AAAA,MACnC,YAAY,KAAK;AAAA,MACjB,WAAW,QAAQ,aAAa,KAAK,OAAO,aAAa;AAAA,MACzD,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,IAChD;AACA,QAAI,QAAQ,UAAU,OAAW,YAAW,QAAQ,QAAQ;AAC5D,QAAI,QAAQ,WAAW,OAAW,YAAW,SAAS,QAAQ;AAC9D,QAAI,QAAQ,aAAa,OAAW,YAAW,WAAW,QAAQ;AAClE,QAAI,QAAQ,aAAa,OAAW,YAAW,WAAW,QAAQ;AAElE,UAAM,SAAS,MAAM,aAAa,MAAM,UAAU;AAElD,QAAI,OAAO,UAAU;AACnB,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,OAAO,aAAa,IAAI,MAAM,OAAO;AAAA,MACjD;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAqB;AAC3B,QAAI,KAAK,WAAW;AAClB,YAAM,IAAI,6BAA6B,mBAAmB,KAAK,EAAE,sBAAsB;AAAA,IACzF;AAAA,EACF;AAAA,EAEA,QAA6B;AAC3B,WAAO;AAAA,MACL,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,SAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAc,aAAgB,WAAyC;AACrE,SAAK,aAAa;AAClB,SAAK,oBAAoB;AACzB,SAAK,eAAe;AAEpB,QAAI;AACF,aAAO,MAAM,UAAU;AAAA,IACzB,UAAE;AACA,WAAK,oBAAoB;AACzB,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA,EAEQ,eAAe,MAAc,UAAwB;AAC3D,QAAI,KAAK,OAAO,iBAAiB,UAAa,OAAO,KAAK,OAAO,cAAc;AAC7E,YAAM,IAAI;AAAA,QACR,sCAAsC,IAAI,MAAM,KAAK,OAAO,YAAY,MAAM,QAAQ;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,uBAA6B;AACnC,QAAI,CAAC,KAAK,UAAU,aAAa;AAC/B;AAAA,IACF;AAEA,QAAI,KAAK,UAAU,UAAU,QAAW;AACtC,WAAK,WAAW,WAAW,MAAM;AAC/B,aAAK,KAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,MAC3C,GAAG,KAAK,UAAU,KAAK;AACvB,WAAK,SAAS,QAAQ;AAAA,IACxB;AAEA,SAAK,kBAAkB;AAAA,EACzB;AAAA,EAEQ,oBAA0B;AAChC,QAAI,CAAC,KAAK,UAAU,eAAe,KAAK,UAAU,kBAAkB,QAAW;AAC7E;AAAA,IACF;AAEA,QAAI,KAAK,aAAa,KAAK,mBAAmB,GAAG;AAC/C;AAAA,IACF;AAEA,SAAK,eAAe;AACpB,SAAK,YAAY,WAAW,MAAM;AAChC,WAAK,KAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,IAC3C,GAAG,KAAK,UAAU,aAAa;AAC/B,SAAK,UAAU,QAAQ;AAAA,EACzB;AAAA,EAEQ,uBAA6B;AACnC,QAAI,KAAK,aAAa,QAAW;AAC/B,mBAAa,KAAK,QAAQ;AAC1B,WAAK,WAAW;AAAA,IAClB;AACA,SAAK,eAAe;AAAA,EACtB;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,KAAK,cAAc,QAAW;AAChC,mBAAa,KAAK,SAAS;AAC3B,WAAK,YAAY;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,WAAoC,WAA2B;AACrF,MAAI,UAAU,SAAS,cAAc;AACnC,WAAO,mBAAmB,UAAU,EAAE;AAAA,EACxC;AAEA,SAAO;AACT;AAEA,SAAS,uBAAuB,WAA6C;AAC3E,MAAI,UAAU,SAAS,cAAc;AACnC,WAAO,UAAU,2BAA2B;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,IAAoB;AAC9C,QAAM,YAAY,GACf,YAAY,EACZ,WAAW,iBAAiB,GAAG,EAC/B,WAAW,YAAY,EAAE;AAC5B,SAAO,UAAU,SAAS,IAAI,YAAY,WAAW;AACvD;AAEA,SAAS,WAAW,MAAmC;AACrD,SAAO,OAAO,SAAS,WAAW,OAAO,WAAW,IAAI,IAAI,KAAK;AACnE;AAEA,SAAS,YAAY,MAA2C;AAC9D,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;AI/rBA,SAAuB,kBAAkB;AACzC,SAAS,SAAS;AAUlB,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,iDAAiD;AAAA,EACrF,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,EAClE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gDAAgD;AAAA,EACpF,KAAK,EACF,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAC7B,SAAS,EACT,SAAS,yCAAyC;AAAA,EACrD,WAAW,EACR,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,GAAO,EACX,SAAS,EACT,SAAS,2CAA2C;AAAA,EACvD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AACrF,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAC3E,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAAA,EACzE,SAAS,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAChE,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EACH,OAAO,EACP,SAAS,EACT,SAAS,+DAA+D;AAC7E,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAErB,SAAS,mBACd,SACA,UAA+B,CAAC,GACrB;AACX,QAAM,UAAU,IAAI;AAAA,IAClB,QAAQ,SAAS,QAAQ,WAAW,CAAC,gBAAgB,aAAa,cAAc,YAAY;AAAA,EAC9F;AACA,QAAM,QAAmB,CAAC;AAE1B,MAAI,QAAQ,IAAI,cAAc,GAAG;AAC/B,UAAM,KAAK,sBAAsB,SAAS,OAAO,CAAC;AAAA,EACpD;AAEA,MAAI,QAAQ,IAAI,WAAW,GAAG;AAC5B,UAAM,KAAK,mBAAmB,SAAS,OAAO,CAAC;AAAA,EACjD;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,SAAS,OAAO,CAAC;AAAA,EAClD;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,OAAO,CAAC;AAAA,EACzC;AAEA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAyB,SAAuC;AAC7F,QAAM,SAAS,QAAQ,QAAQ,CAAC;AAEhC,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,SAAS,MAAM,KAAK,KAAK,WAAW,MAAM,MAAM;AAChE,2BAAqB,SAAS,OAAO;AAErC,YAAM,cAAkC;AAAA,QACtC;AAAA,MACF;AAEA,UAAI,SAAS,QAAW;AACtB,oBAAY,OAAO;AAAA,MACrB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,YAAM,qBAAqB,aAAa,OAAO,oBAAoB,QAAQ;AAC3E,UAAI,uBAAuB,QAAW;AACpC,6BAAqB,oBAAoB,OAAO;AAChD,oBAAY,YAAY;AAAA,MAC1B;AACA,UAAI,UAAU,QAAW;AACvB,oBAAY,QAAQ;AAAA,MACtB;AAEA,YAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAE7C,aAAO,iBAAiB,MAAM;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,mBAAmB,SAAyB,SAAuC;AAC1F,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAE,MAAK,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,aAAaA,KAAI;AAC/C,wBAAkB,SAAS,OAAO;AAClC,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAyB,SAAuC;AAC3F,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,OAAM,QAAQ,MAAM;AACpC,2BAAqB,SAAS,OAAO;AACrC,YAAM,QAAQ,cAAcA,OAAM,OAAO;AACzC,aAAO,SAASA,KAAI;AAAA,IACtB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAkC;AAC7D,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,MAAK,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,UAAUA,KAAI;AAE5C,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO;AAAA,MACT;AAEA,aAAO,QACJ,IAAI,CAAC,UAAU;AACd,cAAM,OAAO,MAAM,SAAS,SAAY,KAAK,IAAI,MAAM,IAAI;AAC3D,eAAO,GAAG,MAAM,IAAI,GAAG,IAAI,IAAK,MAAM,IAAI;AAAA,MAC5C,CAAC,EACA,KAAK,IAAI;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,QAAQ,CAAC,cAAc,OAAO,QAAQ,EAAE;AAE9C,MAAI,OAAO,UAAU;AACnB,UAAM,KAAK,iBAAiB;AAAA,EAC9B;AAEA,MAAI,OAAO,SAAS;AAClB,UAAM,KAAK,eAAe;AAAA,EAC5B;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,mBAAmB,OAAO,iBAAiB;AACpD,UAAM,KAAK,wBAAwB;AAAA,EACrC;AAEA,SAAO,MAAM,KAAK,MAAM;AAC1B;AAEA,SAAS,qBAAqB,SAAiB,SAAoC;AACjF,QAAM,SAAS,QAAQ;AAEvB,MAAI,QAAQ,iBAAiB,SAAS,OAAO,GAAG;AAC9C,UAAM,IAAI,uBAAuB,8CAA8C,OAAO,EAAE;AAAA,EAC1F;AAEA,MAAI,QAAQ,oBAAoB,UAAa,CAAC,OAAO,gBAAgB,SAAS,OAAO,GAAG;AACtF,UAAM,IAAI,uBAAuB,kDAAkD,OAAO,EAAE;AAAA,EAC9F;AACF;AAEA,SAAS,qBAAqB,WAAmB,SAAoC;AACnF,QAAM,eAAe,QAAQ,MAAM;AAEnC,MAAI,iBAAiB,UAAa,YAAY,cAAc;AAC1D,UAAM,IAAI;AAAA,MACR,gDAAgD,SAAS,MAAM,YAAY;AAAA,IAC7E;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,SAAiB,SAAoC;AACjF,QAAM,WAAW,QAAQ,WAAW;AAEpC,MAAI,aAAa,UAAa,OAAO,WAAW,OAAO,IAAI,UAAU;AACnE,UAAM,IAAI,uBAAuB,2CAA2C;AAAA,EAC9E;AACF;AAEA,SAAS,kBAAkB,SAAiB,SAAoC;AAC9E,QAAM,WAAW,QAAQ,UAAU;AAEnC,MAAI,aAAa,UAAa,OAAO,WAAW,OAAO,IAAI,UAAU;AACnE,UAAM,IAAI,uBAAuB,2CAA2C;AAAA,EAC9E;AACF;","names":["path","defaultMaxOutputBytes","path","path"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anvia/sandbox",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Sandboxed workspace tools for Anvia agents.",
   "author": "anvia",
   "maintainer": "Indra Zulfi",
@@ -33,7 +33,7 @@
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.8",
-    "@anvia/core": "0.12.4"
+    "@anvia/core": "0.13.1"
   },
   "peerDependencies": {
     "@anvia/core": ">=0.7.1 <1.0.0"