@axiom-lattice/microsandbox-service 0.0.19 → 0.0.20

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @axiom-lattice/microsandbox-service
 
+## 0.0.20
+
+### Patch Changes
+
+- c548af2: up msb 0.5
+
 ## 0.0.19
 
 ### Patch Changes

package/README.md

@@ -46,6 +46,15 @@ Supported environment variables:
 - `HOST` default: `0.0.0.0`
 - `PORT` default: `4002`
 
+### Sandbox Configuration
+
+- `MICROSANDBOX_IMAGE` default: `daytonaio/sandbox:0.6.0` — OCI image for new sandboxes
+- `MICROSANDBOX_CPUS` default: `1` — vCPUs per sandbox
+- `MICROSANDBOX_MEMORY` default: `512` — memory in MiB per sandbox
+- `MICROSANDBOX_IDLE_TIMEOUT_SEC` default: `600` — auto-stop after N seconds of inactivity. Set to `0` to disable
+- `MICROSANDBOX_VOLUME_QUOTA_MIB` default: `2048` — storage quota for named volumes
+- `MICROSANDBOX_CLI_PATH` default: `~/.microsandbox/bin/msb` — path to the `msb` binary
+
 Example:
 
 ```bash

package/dist/{chunk-GD6KBLVJ.mjs → chunk-74I2D64W.mjs}

@@ -1,6 +1,6 @@
 import {
   buildApp
-} from "./chunk-PIAUYZEQ.mjs";
+} from "./chunk-7Q4BE6H7.mjs";
 
 // src/lib/server-cli.ts
 function parsePort(raw, source) {
@@ -97,4 +97,4 @@ async function startServer({
 export {
   startServer
 };
-//# sourceMappingURL=chunk-GD6KBLVJ.mjs.map
+//# sourceMappingURL=chunk-74I2D64W.mjs.map

package/dist/{chunk-PIAUYZEQ.mjs → chunk-7Q4BE6H7.mjs}

@@ -1,6 +1,7 @@
 // src/services/SandboxRegistry.ts
-import { Sandbox, Mount } from "microsandbox";
+import { Sandbox, MountBuilder } from "microsandbox";
 var DEFAULT_IMAGE = process.env.MICROSANDBOX_IMAGE ?? "daytonaio/sandbox:0.6.0";
+var DEFAULT_IDLE_TIMEOUT_SEC = Number(process.env.MICROSANDBOX_IDLE_TIMEOUT_SEC ?? "600");
 var SandboxRegistry = class {
   constructor() {
     this.handles = /* @__PURE__ */ new Map();
@@ -37,39 +38,41 @@ var SandboxRegistry = class {
       }
       if (!native) {
         const volumeDefs = createOptions?.volumes;
-        const volumes = {};
-        if (volumeDefs) {
-          for (const [guestPath, def] of Object.entries(volumeDefs)) {
-            const mountOpts = def.readonly ? { readonly: true } : void 0;
-            if (def.type === "bind" && def.source) {
-              volumes[guestPath] = Mount.bind(def.source, mountOpts);
-            } else if (def.type === "named" && def.name) {
-              volumes[guestPath] = Mount.named(def.name, mountOpts);
-            } else if (def.type === "tmpfs") {
-              volumes[guestPath] = Mount.tmpfs(def.sizeMib ? { sizeMib: def.sizeMib, ...mountOpts } : mountOpts);
+        const tryCreate = async () => {
+          const builder = Sandbox.builder(name).image(image).cpus(cpus).memory(memoryMib);
+          if (DEFAULT_IDLE_TIMEOUT_SEC > 0) {
+            builder.idleTimeout(DEFAULT_IDLE_TIMEOUT_SEC);
+          }
+          if (env) {
+            builder.envs(env);
+          }
+          if (volumeDefs) {
+            for (const [guestPath, def] of Object.entries(volumeDefs)) {
+              const mb = new MountBuilder(guestPath);
+              if (def.type === "bind" && def.source) {
+                mb.bind(def.source);
+              } else if (def.type === "named" && def.name) {
+                mb.named(def.name);
+              } else if (def.type === "tmpfs") {
+                mb.tmpfs();
+                if (def.sizeMib) {
+                  mb.size(def.sizeMib);
+                }
+              }
+              if (def.readonly) {
+                mb.readonly();
+              }
+              builder.volume(guestPath, () => mb);
             }
           }
-        }
+          return builder.createDetached();
+        };
         try {
-          native = await Sandbox.createDetached({
-            name,
-            image,
-            cpus,
-            memoryMib,
-            env,
-            volumes
-          });
+          native = await tryCreate();
         } catch (err) {
           if (err instanceof Error && err.message.includes("already exists")) {
             await Sandbox.remove(name);
-            native = await Sandbox.createDetached({
-              name,
-              image,
-              cpus,
-              memoryMib,
-              env,
-              volumes
-            });
+            native = await tryCreate();
           } else {
             throw err;
           }
@@ -206,7 +209,7 @@ var MicrosandboxRuntimeService = class {
     if (!volumes) {
       return;
     }
-    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? "1024");
+    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? "2048");
     const namedVolumes = Object.values(volumes).filter(
       (v) => v.type === "named"
     );
@@ -215,7 +218,7 @@ var MicrosandboxRuntimeService = class {
         try {
           await Volume.get(definition.name);
         } catch {
-          await Volume.create({ name: definition.name, quotaMib: defaultQuotaMib });
+          await Volume.builder(definition.name).quota(defaultQuotaMib).create();
         }
       })
     );
@@ -336,7 +339,7 @@ var MicrosandboxRuntimeService = class {
           netRxBytes: m.netRxBytes,
           netTxBytes: m.netTxBytes,
           uptimeMs: m.uptimeMs,
-          timestampMs: m.timestampMs
+          timestampMs: m.timestamp.getTime()
         };
       } catch {
         metrics = void 0;
@@ -771,16 +774,12 @@ var volumeFsDownloadSchema = z3.object({
 var MSB_DATA_DIR = path.join(os.homedir(), ".microsandbox");
 async function resolveVolumeHostPath(name) {
   try {
-    const vol = await Volume2.create({ name });
+    const handle = await Volume2.get(name);
+    const vol = await Volume2.builder(handle.name).create();
     return vol.path;
   } catch {
     try {
-      await Volume2.get(name);
-    } catch {
-      await Volume2.create({ name });
-    }
-    try {
-      const vol = await Volume2.create({ name });
+      const vol = await Volume2.builder(name).create();
       return vol.path;
     } catch {
       return path.join(MSB_DATA_DIR, "volumes", name);
@@ -1070,4 +1069,4 @@ export {
   MicrosandboxRuntimeService,
   buildApp
 };
-//# sourceMappingURL=chunk-PIAUYZEQ.mjs.map
+//# sourceMappingURL=chunk-7Q4BE6H7.mjs.map

package/dist/chunk-7Q4BE6H7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/SandboxRegistry.ts","../src/services/MicrosandboxRuntimeService.ts","../src/lib/msb.ts","../src/app.ts","../src/lib/errors.ts","../src/lib/http.ts","../src/routes/health.ts","../src/controllers/images.ts","../src/schemas/images.ts","../src/routes/images.ts","../src/schemas/sandbox.ts","../src/controllers/sandbox.ts","../src/routes/sandbox.ts","../src/controllers/volume-fs.ts","../src/schemas/volume-fs.ts","../src/routes/volume-fs.ts","../src/services/ImageService.ts","../src/swagger.ts"],"sourcesContent":["import { Sandbox, MountBuilder, SandboxBuilder } from \"microsandbox\";\nimport type { SandboxHandle } from \"microsandbox\";\n\nconst DEFAULT_IMAGE = process.env.MICROSANDBOX_IMAGE ?? \"daytonaio/sandbox:0.6.0\";\nconst DEFAULT_IDLE_TIMEOUT_SEC = Number(process.env.MICROSANDBOX_IDLE_TIMEOUT_SEC ?? \"600\");\n\nexport class SandboxRegistry {\n  private handles = new Map<string, unknown>();\n  private creating = new Map<string, Promise<unknown>>();\n\n  async ensure(name: string, createOptions?: Record<string, unknown>): Promise<unknown> {\n    const cached = this.handles.get(name);\n    if (cached) {\n      return cached;\n    }\n\n    const inflight = this.creating.get(name);\n    if (inflight) {\n      return inflight;\n    }\n\n    const creation = (async () => {\n      let native: unknown;\n      const image = (createOptions?.image as string) ?? DEFAULT_IMAGE;\n      const cpus = (createOptions?.cpus as number) ?? 1;\n      const memoryMib = (createOptions?.memoryMib as number) ?? 512;\n      const env = (createOptions?.env as Record<string, string>) ?? undefined;\n\n      try {\n        const handle: SandboxHandle = await Sandbox.get(name);\n\n        if (handle.status === \"running\") {\n          native = await handle.connect();\n        } else if (handle.status === \"stopped\") {\n          native = await Sandbox.start(name);\n        } else if (handle.status === \"crashed\" || handle.status === \"draining\") {\n          await Sandbox.remove(name);\n        } else {\n          await Sandbox.remove(name);\n        }\n      } catch {\n        native = undefined;\n      }\n\n      if (!native) {\n        const volumeDefs = createOptions?.volumes as Record<string, { type: string; source?: string; name?: string; sizeMib?: number; readonly?: boolean }> | undefined;\n        const tryCreate = async () => {\n          const builder = Sandbox.builder(name)\n            .image(image)\n            .cpus(cpus)\n            .memory(memoryMib);\n          if (DEFAULT_IDLE_TIMEOUT_SEC > 0) {\n            builder.idleTimeout(DEFAULT_IDLE_TIMEOUT_SEC);\n          }\n          if (env) {\n            builder.envs(env);\n          }\n          if (volumeDefs) {\n            for (const [guestPath, def] of Object.entries(volumeDefs)) {\n              const mb = new MountBuilder(guestPath);\n              if (def.type === \"bind\" && def.source) {\n                mb.bind(def.source);\n              } else if (def.type === \"named\" && def.name) {\n                mb.named(def.name);\n              } else if (def.type === \"tmpfs\") {\n                mb.tmpfs();\n                if (def.sizeMib) {\n                  mb.size(def.sizeMib);\n                }\n              }\n              if (def.readonly) {\n                mb.readonly();\n              }\n              builder.volume(guestPath, () => mb);\n            }\n          }\n          return builder.createDetached();\n        };\n        try {\n          native = await tryCreate();\n        } catch (err) {\n          if (err instanceof Error && err.message.includes(\"already exists\")) {\n            await Sandbox.remove(name);\n            native = await tryCreate();\n          } else {\n            throw err;\n          }\n        }\n      }\n\n      this.handles.set(name, native);\n      return native;\n    })();\n\n    this.creating.set(name, creation);\n    void creation.finally(() => this.creating.delete(name));\n\n    return creation;\n  }\n\n  get(name: string): unknown {\n    const handle = this.handles.get(name);\n\n    if (!handle) {\n      throw new Error(`Sandbox ${name} not found`);\n    }\n\n    return handle;\n  }\n\n  delete(name: string): void {\n    this.handles.delete(name);\n  }\n}\n","import { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { Sandbox, Volume } from \"microsandbox\";\nimport type { SandboxHandle } from \"microsandbox\";\nimport type { EnsureSandboxInput, ListSandboxesQuery, ShellExecInput } from \"../schemas/sandbox\";\nimport type { SandboxRuntimeMetrics } from \"../types/runtime-service\";\nimport { getMsbPath } from \"../lib/msb\";\nimport { SandboxRegistry } from \"./SandboxRegistry\";\n\nconst execAsync = promisify(exec);\n\ntype VolumeConfig = NonNullable<EnsureSandboxInput[\"volumes\"]>[string];\n\ntype RuntimeNative = {\n  fs(): {\n    readString(path: string): Promise<string>;\n    write(path: string, data: Buffer): Promise<void>;\n    list(path: string): Promise<Array<{ path: string; kind: string; size?: number; modified?: unknown }>>;\n    read(path: string): Promise<Buffer | Uint8Array | string>;\n  };\n  execWithConfig(config: { cmd: string; args?: string[]; cwd?: string; timeoutMs?: number }): Promise<{\n    stdout(): string;\n    stderr(): string;\n    code?: number;\n  }>;\n  stop(): Promise<void>;\n  kill(): Promise<void>;\n};\n\ntype SandboxConfig = {\n  name: string;\n  image: string;\n  memoryMib?: number;\n  cpus?: number;\n  env?: Record<string, string>;\n  volumes?: Record<string, unknown>;\n};\n\nfunction parseEnvArray(env: unknown): Record<string, string> {\n  if (!Array.isArray(env)) return env as Record<string, string>;\n  const result: Record<string, string> = {};\n  for (const entry of env) {\n    if (typeof entry !== \"string\") continue;\n    const eq = entry.indexOf(\"=\");\n    if (eq < 0) continue;\n    result[entry.slice(0, eq)] = entry.slice(eq + 1);\n  }\n  return result;\n}\n\nfunction parseConfigJson(configJson: string): SandboxConfig {\n  try {\n    const raw = JSON.parse(configJson);\n    return {\n      name: raw.name ?? \"\",\n      image: raw.image ?? \"\",\n      memoryMib: raw.memoryMib ?? raw.memory_mib,\n      cpus: raw.cpus,\n      env: raw.env != null ? parseEnvArray(raw.env) : undefined,\n      volumes: raw.volumes,\n    };\n  } catch {\n    return { name: \"\", image: \"\" };\n  }\n}\n\nfunction msToIsoString(ms: number | Date | null | undefined): string {\n  if (ms == null) return \"\";\n  if (ms instanceof Date) return ms.toISOString();\n  return new Date(ms).toISOString();\n}\n\ntype MsbInspectEnvVolumes = {\n  env: Record<string, string>;\n  volumes: Record<string, unknown>;\n};\n\nfunction parseMsbInspectEnvVolumes(stdout: string): MsbInspectEnvVolumes {\n  const data = JSON.parse(stdout);\n  const env: Record<string, string> = {};\n  const rawEnv = data?.config?.env;\n  if (Array.isArray(rawEnv)) {\n    for (const pair of rawEnv) {\n      if (Array.isArray(pair) && pair.length >= 2) {\n        env[String(pair[0])] = String(pair[1]);\n      }\n    }\n  }\n\n  const volumes: Record<string, unknown> = {};\n  const rawMounts = data?.config?.mounts;\n  if (Array.isArray(rawMounts)) {\n    for (const mount of rawMounts) {\n      if (mount && typeof mount === \"object\" && \"guest\" in mount) {\n        volumes[String(mount.guest)] = mount;\n      }\n    }\n  }\n\n  return { env, volumes };\n}\n\nexport class MicrosandboxRuntimeService {\n  constructor(private deps: { registry?: SandboxRegistry } = {}) {}\n\n  private get registry(): SandboxRegistry {\n    return this.deps.registry ?? (this.deps.registry = new SandboxRegistry());\n  }\n\n  private resolvePath(path: string): string {\n    if (path === \"~\" || path === \"~/\") {\n      return \"/\";\n    }\n    if (path.startsWith(\"~/\")) {\n      return `/${path.slice(2)}`;\n    }\n    return path;\n  }\n\n  private toListItem(info: {\n    name: string;\n    status: string;\n    configJson: string;\n    createdAt?: number | Date | null;\n    updatedAt?: number | Date | null;\n  }): {\n    name: string;\n    status: string;\n    image?: string;\n    cpus?: number;\n    memoryMib?: number;\n    envCount: number;\n    volumeCount: number;\n    createdAt: string;\n    updatedAt: string;\n  } {\n    const config = parseConfigJson(info.configJson);\n    const env = config.env ?? {};\n    const volumes = config.volumes ?? {};\n\n    return {\n      name: info.name,\n      status: info.status,\n      image: config.image,\n      cpus: config.cpus,\n      memoryMib: config.memoryMib,\n      envCount: Object.keys(env).length,\n      volumeCount: Object.keys(volumes).length,\n      createdAt: msToIsoString(info.createdAt),\n      updatedAt: msToIsoString(info.updatedAt),\n    };\n  }\n\n  private async readMsbInspect(name: string): Promise<MsbInspectEnvVolumes | undefined> {\n    try {\n      const { stdout } = await execAsync(\n        `${getMsbPath()} inspect ${name} --format json`,\n        { timeout: 5000 }\n      );\n      return parseMsbInspectEnvVolumes(stdout);\n    } catch {\n      return undefined;\n    }\n  }\n\n  private async ensureNamedVolumes(volumes?: EnsureSandboxInput[\"volumes\"]): Promise<void> {\n    if (!volumes) {\n      return;\n    }\n\n    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? \"2048\");\n\n    const namedVolumes = Object.values(volumes).filter(\n      (v): v is Extract<VolumeConfig, { type: \"named\" }> => v.type === \"named\"\n    );\n\n    await Promise.all(\n      namedVolumes.map(async (definition) => {\n        try {\n          await Volume.get(definition.name);\n        } catch {\n          await Volume.builder(definition.name).quota(defaultQuotaMib).create();\n        }\n      })\n    );\n  }\n\n  private getNative(name: string): RuntimeNative {\n    return this.registry.get(name) as RuntimeNative;\n  }\n\n  private async getOrEnsureNative(name: string): Promise<RuntimeNative> {\n    try {\n      return this.getNative(name);\n    } catch {\n      return (await this.registry.ensure(name)) as RuntimeNative;\n    }\n  }\n\n  async ensureSandbox(\n    name: string,\n    input: EnsureSandboxInput\n  ): Promise<{\n    name: string;\n    status: string;\n  }> {\n    const image = input.image ?? process.env.MICROSANDBOX_IMAGE ?? \"python:3.11-slim\";\n    const cpus = input.cpus ?? Number(process.env.MICROSANDBOX_CPUS ?? \"1\");\n    const memoryMib = input.memoryMib ?? Number(process.env.MICROSANDBOX_MEMORY ?? \"512\");\n\n    await this.ensureNamedVolumes(input.volumes);\n\n    await this.registry.ensure(name, {\n      image,\n      cpus,\n      memoryMib,\n      env: input.env,\n      volumes: input.volumes,\n    });\n\n    return {\n      name,\n      status: \"running\",\n    };\n  }\n\n  async startSandbox(name: string): Promise<{ name: string; status: string }> {\n    await Sandbox.start(name);\n    this.registry.delete(name);\n    await this.registry.ensure(name);\n    return { name, status: \"running\" };\n  }\n\n  async stopSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const native = await this.getOrEnsureNative(name);\n      await native.stop();\n      this.registry.delete(name);\n      return { name, status: \"stopped\" };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes(\"write to relay\")) {\n        this.registry.delete(name);\n        return { name, status: \"unknown\" };\n      }\n      throw error;\n    }\n  }\n\n  async killSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const native = await this.getOrEnsureNative(name);\n      await native.kill();\n      this.registry.delete(name);\n      return { name, status: \"unknown\" };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes(\"write to relay\")) {\n        this.registry.delete(name);\n        return { name, status: \"unknown\" };\n      }\n      throw error;\n    }\n  }\n\n  async deleteSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      await this.getNative(name).kill();\n    } catch {\n      // Ignore missing cached native handle before remove.\n    }\n\n    this.registry.delete(name);\n    await Sandbox.remove(name);\n\n    return { name, status: \"unknown\" };\n  }\n\n  async listSandboxes(_query: ListSandboxesQuery): Promise<{\n    items: Array<{\n      name: string;\n      status: string;\n      image?: string;\n      cpus?: number;\n      memoryMib?: number;\n      envCount: number;\n      volumeCount: number;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    total: number;\n  }> {\n    const all: SandboxHandle[] = await Sandbox.list();\n\n    const items = all\n      .map((info) =>\n        this.toListItem({\n          name: info.name,\n          status: info.status,\n          configJson: info.configJson,\n          createdAt: info.createdAt,\n          updatedAt: info.updatedAt,\n        })\n      )\n      .filter((item) => {\n        if (_query.status && item.status !== _query.status) {\n          return false;\n        }\n\n        if (_query.image && item.image !== _query.image) {\n          return false;\n        }\n\n        if (_query.search) {\n          const haystack = [item.name, item.image]\n            .filter((value): value is string => Boolean(value))\n            .join(\" \")\n            .toLowerCase();\n\n          if (!haystack.includes(_query.search.toLowerCase())) {\n            return false;\n          }\n        }\n\n        return true;\n      });\n\n    return { items, total: items.length };\n  }\n\n  async getSandbox(\n    name: string\n  ): Promise<{\n    name: string;\n    status: string;\n    image?: string;\n    cpus?: number;\n    memoryMib?: number;\n    env: Record<string, string>;\n    volumes: Record<string, unknown>;\n    metrics?: SandboxRuntimeMetrics;\n    createdAt: string;\n    updatedAt: string;\n  } | undefined> {\n    try {\n      const handle: SandboxHandle = await Sandbox.get(name);\n      const config = parseConfigJson(handle.configJson);\n\n      const msbData = await this.readMsbInspect(name);\n      const env = msbData?.env ?? config.env ?? {};\n      const volumes = msbData?.volumes ?? config.volumes ?? {};\n\n      let metrics: SandboxRuntimeMetrics | undefined;\n\n      try {\n        const m = await handle.metrics();\n        metrics = {\n          cpuPercent: m.cpuPercent,\n          memoryBytes: m.memoryBytes,\n          memoryLimitBytes: m.memoryLimitBytes,\n          diskReadBytes: m.diskReadBytes,\n          diskWriteBytes: m.diskWriteBytes,\n          netRxBytes: m.netRxBytes,\n          netTxBytes: m.netTxBytes,\n          uptimeMs: m.uptimeMs,\n          timestampMs: m.timestamp.getTime(),\n        };\n      } catch {\n        metrics = undefined;\n      }\n\n      return {\n        name: handle.name,\n        status: handle.status,\n        image: config.image,\n        cpus: config.cpus,\n        memoryMib: config.memoryMib,\n        env,\n        volumes,\n        metrics,\n        createdAt: msToIsoString(handle.createdAt),\n        updatedAt: msToIsoString(handle.updatedAt),\n      };\n    } catch {\n      return undefined;\n    }\n  }\n\n  async getStatus(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const handle: SandboxHandle = await Sandbox.get(name);\n      return { name, status: handle.status };\n    } catch {\n      return { name, status: \"unknown\" };\n    }\n  }\n\n  async readFile(sandboxName: string, path: string): Promise<{ path: string; content: string }> {\n    const resolvedPath = this.resolvePath(path);\n    const content = await this.getNative(sandboxName).fs().readString(resolvedPath);\n    return { path: resolvedPath, content };\n  }\n\n  async writeFile(sandboxName: string, path: string, content: string): Promise<{ path: string }> {\n    const resolvedPath = this.resolvePath(path);\n    await this.getNative(sandboxName).fs().write(resolvedPath, Buffer.from(content));\n    return { path: resolvedPath };\n  }\n\n  async listPath(\n    sandboxName: string,\n    path: string,\n    recursive?: boolean\n  ): Promise<{ entries: Array<{ path: string; type: string }> }> {\n    const resolvedPath = this.resolvePath(path);\n    const entries = await this.getNative(sandboxName).fs().list(resolvedPath);\n    return {\n      entries: entries.map((entry) => ({\n        path: entry.path,\n        type: entry.kind,\n      })),\n    };\n  }\n\n  async findFiles(sandboxName: string, path: string, pattern: string): Promise<{ files: string[] }> {\n    const resolvedPath = this.resolvePath(path);\n    // Use -path for patterns containing / (e.g., \"**/*.py\"), -name for filename-only patterns (e.g., \"*.py\")\n    const matchFlag = pattern.includes(\"/\") ? \"-path\" : \"-name\";\n    const output = await this.getNative(sandboxName).execWithConfig({\n      cmd: \"find\",\n      args: [resolvedPath, matchFlag, pattern, \"-type\", \"f\"],\n    });\n    return { files: output.stdout().split(\"\\n\").filter(Boolean) };\n  }\n\n  async searchInFile(\n    sandboxName: string,\n    path: string,\n    query: string\n  ): Promise<{ matches: Array<{ line: number; content: string }> }> {\n    const resolvedPath = this.resolvePath(path);\n    let stdout: string;\n\n    try {\n      const output = await this.getNative(sandboxName).execWithConfig({\n        cmd: \"grep\",\n        args: [\"-n\", \"-E\", query, resolvedPath],\n      });\n      stdout = output.stdout();\n    } catch (error) {\n      if (typeof error === \"object\" && error !== null && \"code\" in error && error.code === 1) {\n        return { matches: [] };\n      }\n\n      throw error;\n    }\n\n    return {\n      matches: stdout\n        .split(\"\\n\")\n        .filter(Boolean)\n        .map((line) => {\n          const separator = line.indexOf(\":\");\n          return {\n            line: Number(line.slice(0, separator)),\n            content: line.slice(separator + 1),\n          };\n        }),\n    };\n  }\n\n  async replaceInFile(\n    sandboxName: string,\n    input: { path: string; search: string; replace: string }\n  ): Promise<{ replaced: number }> {\n    const resolvedPath = this.resolvePath(input.path);\n    const fs = this.getNative(sandboxName).fs();\n    const original = await fs.readString(resolvedPath);\n\n    if (!input.search) {\n      return { replaced: 0 };\n    }\n\n    const occurrences = original.split(input.search).length - 1;\n    if (occurrences === 0) {\n      return { replaced: 0 };\n    }\n\n    const updated = original.split(input.search).join(input.replace);\n    await fs.write(resolvedPath, Buffer.from(updated));\n\n    return { replaced: occurrences };\n  }\n\n  async uploadFile(sandboxName: string, path: string, contentBase64: string): Promise<{ path: string }> {\n    const resolvedPath = this.resolvePath(path);\n    await this.getNative(sandboxName).fs().write(resolvedPath, Buffer.from(contentBase64, \"base64\"));\n    return { path: resolvedPath };\n  }\n\n  async downloadFile(sandboxName: string, path: string): Promise<{ path: string; contentBase64: string }> {\n    const resolvedPath = this.resolvePath(path);\n    const data = await this.getNative(sandboxName).fs().read(resolvedPath);\n    const buffer = Buffer.isBuffer(data) ? data : Buffer.from(data);\n    return { path: resolvedPath, contentBase64: buffer.toString(\"base64\") };\n  }\n\n  async execCommand(input: ShellExecInput): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n    const output = await this.getNative(input.sandboxName).execWithConfig({\n      cmd: \"sh\",\n      args: [\"-c\", input.command],\n      cwd: input.exec_dir,\n      timeoutMs: input.timeout ? input.timeout * 1000 : undefined,\n    });\n\n    return {\n      stdout: output.stdout(),\n      stderr: output.stderr(),\n      exitCode: output.code ?? 0,\n    };\n  }\n}\n","export function getMsbPath(): string {\n  return process.env.MICROSANDBOX_CLI_PATH ?? `${process.env.HOME ?? \"/root\"}/.microsandbox/bin/msb`;\n}\n","import cors from \"@fastify/cors\";\nimport multipart from \"@fastify/multipart\";\nimport sensible from \"@fastify/sensible\";\nimport fastify, { type FastifyInstance } from \"fastify\";\nimport { toErrorResponse } from \"./lib/errors\";\nimport { registerHealthRoutes } from \"./routes/health\";\nimport { registerImageRoutes } from \"./routes/images\";\nimport { registerSandboxRoutes } from \"./routes/sandbox\";\nimport { registerVolumeFsRoutes } from \"./routes/volume-fs\";\nimport { ImageService } from \"./services/ImageService\";\nimport { MicrosandboxRuntimeService } from \"./services/MicrosandboxRuntimeService\";\nimport { configureSwagger } from \"./swagger\";\nimport type { RuntimeService } from \"./types/runtime-service\";\n\nexport async function buildApp({\n  runtimeService = new MicrosandboxRuntimeService(),\n  imageService = new ImageService(),\n  apiKey,\n}: {\n  runtimeService?: RuntimeService;\n  imageService?: ImageService;\n  apiKey?: string;\n} = {}): Promise<FastifyInstance> {\n  const app = fastify({\n    logger: false,\n    bodyLimit: Number(process.env.BODY_LIMIT) || 100 * 1024 * 1024,\n  });\n\n  app.register(cors, {\n    delegator: (request, callback) => {\n      callback(null, {\n        origin: true,\n        methods: request.headers[\"access-control-request-method\"] ?? \"*\",\n        allowedHeaders: request.headers[\"access-control-request-headers\"],\n      });\n    },\n  });\n  app.register(sensible);\n  app.register(multipart);\n\n  if (apiKey) {\n    app.addHook(\"onRequest\", async (request, reply) => {\n      if (request.method === \"OPTIONS\" || !request.url.startsWith(\"/api/\")) {\n        return;\n      }\n\n      if (request.headers.authorization !== `Bearer ${apiKey}`) {\n        await reply.code(401).send({\n          success: false,\n          error: {\n            code: \"UNAUTHORIZED\",\n            message: \"Unauthorized\",\n          },\n        });\n      }\n    });\n  }\n\n  registerHealthRoutes(app);\n  registerSandboxRoutes(app, runtimeService);\n  registerImageRoutes(app, imageService);\n  registerVolumeFsRoutes(app);\n\n  app.setErrorHandler((error, _request, reply) => {\n    const { statusCode, body } = toErrorResponse(error);\n    reply.status(statusCode).send(body);\n  });\n\n  await configureSwagger(app);\n\n  return app;\n}\n","export class HttpError extends Error {\n  constructor(\n    public statusCode: number,\n    public code: string,\n    message: string\n  ) {\n    super(message);\n  }\n}\n\nexport function toErrorResponse(error: unknown): {\n  statusCode: number;\n  body: {\n    success: false;\n    error: {\n      code: string;\n      message: string;\n    };\n  };\n} {\n  if (error instanceof HttpError) {\n    return {\n      statusCode: error.statusCode,\n      body: {\n        success: false,\n        error: {\n          code: error.code,\n          message: error.message,\n        },\n      },\n    };\n  }\n\n  return {\n    statusCode: 500,\n    body: {\n      success: false,\n      error: {\n        code: \"INTERNAL_ERROR\",\n        message: error instanceof Error ? error.message : String(error),\n      },\n    },\n  };\n}\n","export type SuccessResponse<T> = {\n  success: true;\n  data: T;\n};\n\nexport function ok<T>(data: T): SuccessResponse<T> {\n  return {\n    success: true,\n    data,\n  };\n}\n","import type { FastifyInstance } from \"fastify\";\nimport { ok } from \"../lib/http\";\n\nexport function registerHealthRoutes(app: FastifyInstance): void {\n  app.get(\"/health\", async () => ok({ status: \"ok\" }));\n}\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport { ZodError } from \"zod\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport { ImageService } from \"../services/ImageService\";\nimport { imageRefQuerySchema, pullImageSchema } from \"../schemas/images\";\n\nfunction parseOrThrow<T>(parse: () => T): T {\n  try {\n    return parse();\n  } catch (error) {\n    if (error instanceof ZodError) {\n      throw new HttpError(400, \"INVALID_REQUEST\", error.issues[0]?.message ?? \"Invalid request\");\n    }\n\n    throw error;\n  }\n}\n\nexport function createImageController(imageService: ImageService) {\n  return {\n    listImages: async (_request: FastifyRequest, reply: FastifyReply) => {\n      return reply.send(ok(await imageService.listImages()));\n    },\n    pullImage: async (request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply) => {\n      const body = parseOrThrow(() => pullImageSchema.parse(request.body ?? {}));\n      return reply.send(ok(await imageService.pullImage(body)));\n    },\n    getImage: async (request: FastifyRequest<{ Querystring: unknown }>, reply: FastifyReply) => {\n      const query = parseOrThrow(() => imageRefQuerySchema.parse(request.query ?? {}));\n      return reply.send(ok(await imageService.getImage(query.ref)));\n    },\n    deleteImage: async (request: FastifyRequest<{ Querystring: unknown }>, reply: FastifyReply) => {\n      const query = parseOrThrow(() => imageRefQuerySchema.parse(request.query ?? {}));\n      return reply.send(ok(await imageService.deleteImage(query.ref)));\n    },\n  };\n}\n","import z from \"zod\";\n\nexport const imageRefQuerySchema = z.object({\n  ref: z.string().min(1),\n});\n\nexport const pullImageSchema = z.object({\n  ref: z.string().min(1),\n});\n\nexport type ImageRefQuery = z.infer<typeof imageRefQuerySchema>;\nexport type PullImageInput = z.infer<typeof pullImageSchema>;\n","import type { FastifyInstance } from \"fastify\";\nimport { createImageController } from \"../controllers/images\";\nimport { ImageService } from \"../services/ImageService\";\n\nexport function registerImageRoutes(app: FastifyInstance, imageService: ImageService): void {\n  const controller = createImageController(imageService);\n\n  app.get(\"/api/images\", controller.listImages);\n  app.post(\"/api/images/pull\", controller.pullImage);\n  app.get(\"/api/images/detail\", controller.getImage);\n  app.delete(\"/api/images/detail\", controller.deleteImage);\n}\n","import z from \"zod\";\n\nconst bindMountSchema = z.object({\n  type: z.literal(\"bind\"),\n  source: z.string().min(1),\n  readonly: z.boolean().optional(),\n});\n\nconst namedMountSchema = z.object({\n  type: z.literal(\"named\"),\n  name: z.string().min(1),\n  readonly: z.boolean().optional(),\n});\n\nconst tmpfsMountSchema = z.object({\n  type: z.literal(\"tmpfs\"),\n  sizeMib: z.number().int().positive().optional(),\n});\n\nexport const volumeSchema = z.union([\n  bindMountSchema,\n  namedMountSchema,\n  tmpfsMountSchema,\n]);\n\nexport const ensureSandboxSchema = z.object({\n  image: z.string().optional(),\n  cpus: z.number().int().positive().optional(),\n  memoryMib: z.number().int().positive().optional(),\n  env: z.record(z.string()).optional(),\n  volumes: z.record(volumeSchema).optional(),\n});\n\nexport const sandboxNameParamsSchema = z.object({\n  name: z.string().min(1),\n});\n\nexport const listSandboxesQuerySchema = z.object({\n  status: z.enum([\"running\", \"stopped\", \"crashed\", \"unknown\"]).optional(),\n  image: z.string().min(1).optional(),\n  search: z.string().min(1).optional(),\n});\n\nconst sandboxAndPathSchema = z.object({\n  sandboxName: z.string().min(1),\n  path: z.string().min(1),\n});\n\nexport const readFileSchema = sandboxAndPathSchema;\n\nexport const writeFileSchema = sandboxAndPathSchema.extend({\n  content: z.string(),\n});\n\nexport const listPathSchema = sandboxAndPathSchema.extend({\n  recursive: z.boolean().optional(),\n});\n\nexport const findFilesSchema = sandboxAndPathSchema.extend({\n  pattern: z.string().min(1),\n});\n\nexport const searchInFileSchema = sandboxAndPathSchema.extend({\n  query: z.string().min(1),\n});\n\nexport const replaceInFileSchema = sandboxAndPathSchema.extend({\n  search: z.string(),\n  replace: z.string(),\n});\n\nexport const uploadFileSchema = sandboxAndPathSchema.and(\n  z.union([\n    z.object({ contentBase64: z.string() }),\n    z.object({ content: z.string().transform((content) => Buffer.from(content).toString(\"base64\")) }),\n  ])\n);\n\nexport const downloadFileSchema = sandboxAndPathSchema;\n\nexport const shellExecSchema = z.object({\n  sandboxName: z.string().min(1),\n  command: z.string().min(1),\n  exec_dir: z.string().optional(),\n  timeout: z.number().int().positive().optional(),\n});\n\nexport type EnsureSandboxInput = z.infer<typeof ensureSandboxSchema>;\nexport type ListSandboxesQuery = z.infer<typeof listSandboxesQuerySchema>;\nexport type ShellExecInput = z.infer<typeof shellExecSchema>;\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport {\n  downloadFileSchema,\n  ensureSandboxSchema,\n  findFilesSchema,\n  listSandboxesQuerySchema,\n  listPathSchema,\n  readFileSchema,\n  replaceInFileSchema,\n  sandboxNameParamsSchema,\n  searchInFileSchema,\n  shellExecSchema,\n  uploadFileSchema,\n  writeFileSchema,\n} from \"../schemas/sandbox\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport type { RuntimeService } from \"../types/runtime-service\";\n\nexport function createSandboxController(runtimeService: RuntimeService): {\n  ensureSandbox(\n    request: FastifyRequest<{ Params: { name: string }; Body: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  startSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  stopSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  killSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  deleteSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  listSandboxes(\n    request: FastifyRequest<{ Querystring: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  getSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  getStatus(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  readFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  writeFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  listPath(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  findFiles(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  searchInFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  replaceInFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  uploadFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  downloadFile(\n    request: FastifyRequest<{ Querystring: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  execCommand(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n} {\n  return {\n    ensureSandbox: async (\n      request: FastifyRequest<{ Params: { name: string }; Body: unknown }>,\n      reply: FastifyReply\n    ) => {\n      const body = ensureSandboxSchema.parse(request.body ?? {});\n      const result = await runtimeService.ensureSandbox(request.params.name, body);\n      return reply.send(ok(result));\n    },\n\n    startSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.startSandbox(request.params.name)));\n    },\n\n    stopSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.stopSandbox(request.params.name)));\n    },\n\n    killSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.killSandbox(request.params.name)));\n    },\n\n    deleteSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.deleteSandbox(request.params.name)));\n    },\n\n    listSandboxes: async (request, reply) => {\n      const query = listSandboxesQuerySchema.parse(request.query ?? {});\n      return reply.send(ok(await runtimeService.listSandboxes(query)));\n    },\n\n    getSandbox: async (request, reply) => {\n      const params = sandboxNameParamsSchema.parse(request.params ?? {});\n      const sandbox = await runtimeService.getSandbox(params.name);\n\n      if (!sandbox) {\n        throw new HttpError(404, \"SANDBOX_NOT_FOUND\", `Sandbox '${params.name}' not found`);\n      }\n\n      return reply.send(ok(sandbox));\n    },\n\n    getStatus: async (request, reply) => {\n      return reply.send(ok(await runtimeService.getStatus(request.params.name)));\n    },\n\n    readFile: async (request, reply) => {\n      const body = readFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.readFile(body.sandboxName, body.path)));\n    },\n\n    writeFile: async (request, reply) => {\n      const body = writeFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.writeFile(body.sandboxName, body.path, body.content)));\n    },\n\n    listPath: async (request, reply) => {\n      const body = listPathSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.listPath(body.sandboxName, body.path, body.recursive)));\n    },\n\n    findFiles: async (request, reply) => {\n      const body = findFilesSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.findFiles(body.sandboxName, body.path, body.pattern)));\n    },\n\n    searchInFile: async (request, reply) => {\n      const body = searchInFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.searchInFile(body.sandboxName, body.path, body.query)));\n    },\n\n    replaceInFile: async (request, reply) => {\n      const body = replaceInFileSchema.parse(request.body ?? {});\n      return reply.send(\n        ok(\n          await runtimeService.replaceInFile(body.sandboxName, {\n            path: body.path,\n            search: body.search,\n            replace: body.replace,\n          })\n        )\n      );\n    },\n\n    uploadFile: async (request, reply) => {\n      const body = uploadFileSchema.parse(request.body ?? {});\n      const contentBase64 = \"contentBase64\" in body ? body.contentBase64 : Buffer.from(body.content).toString(\"base64\");\n      return reply.send(ok(await runtimeService.uploadFile(body.sandboxName, body.path, contentBase64)));\n    },\n\n    downloadFile: async (request, reply) => {\n      const query = downloadFileSchema.parse(request.query ?? {});\n      return reply.send(ok(await runtimeService.downloadFile(query.sandboxName, query.path)));\n    },\n\n    execCommand: async (request, reply) => {\n      const body = shellExecSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.execCommand(body)));\n    },\n  };\n}\n","import type { FastifyInstance } from \"fastify\";\nimport { createSandboxController } from \"../controllers/sandbox\";\nimport type { RuntimeService } from \"../types/runtime-service\";\n\nexport function registerSandboxRoutes(\n  app: FastifyInstance,\n  runtimeService: RuntimeService\n): void {\n  const controller = createSandboxController(runtimeService);\n\n  app.get(\"/api/sandboxes\", controller.listSandboxes);\n  app.get(\"/api/sandboxes/:name\", controller.getSandbox);\n  app.put(\"/api/sandboxes/:name\", controller.ensureSandbox);\n  app.post(\"/api/sandboxes/:name/start\", controller.startSandbox);\n  app.post(\"/api/sandboxes/:name/stop\", controller.stopSandbox);\n  app.post(\"/api/sandboxes/:name/kill\", controller.killSandbox);\n  app.delete(\"/api/sandboxes/:name\", controller.deleteSandbox);\n  app.get(\"/api/sandboxes/:name/status\", controller.getStatus);\n\n  app.post(\"/api/files/read\", controller.readFile);\n  app.post(\"/api/files/write\", controller.writeFile);\n  app.post(\"/api/files/list\", controller.listPath);\n  app.post(\"/api/files/find\", controller.findFiles);\n  app.post(\"/api/files/search\", controller.searchInFile);\n  app.post(\"/api/files/replace\", controller.replaceInFile);\n  app.post(\"/api/files/upload\", controller.uploadFile);\n  app.get(\"/api/files/download\", controller.downloadFile);\n\n  app.post(\"/api/shell/exec\", controller.execCommand);\n}\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport fs from \"fs/promises\";\nimport os from \"os\";\nimport path from \"path\";\nimport { Volume } from \"microsandbox\";\nimport z from \"zod\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport {\n  volumeFsReadSchema,\n  volumeFsWriteSchema,\n  volumeFsListSchema,\n  volumeFsUploadSchema,\n  volumeFsDownloadSchema,\n} from \"../schemas/volume-fs\";\n\ninterface VolumeFsParams {\n  name: string;\n}\n\nconst MSB_DATA_DIR = path.join(os.homedir(), \".microsandbox\");\n\nasync function resolveVolumeHostPath(name: string): Promise<string> {\n  try {\n    const handle = await Volume.get(name);\n    const vol = await Volume.builder(handle.name).create();\n    return vol.path;\n  } catch {\n    try {\n      const vol = await Volume.builder(name).create();\n      return vol.path;\n    } catch {\n      return path.join(MSB_DATA_DIR, \"volumes\", name);\n    }\n  }\n}\n\nfunction resolveGuestPath(hostRoot: string, guestPath: string): string {\n  const normalized = guestPath === \"~\" ? \"\" : guestPath.replace(/^~\\//, \"\");\n  const resolved = path.join(hostRoot, path.normalize(normalized).replace(/^(\\.\\.(\\/|\\\\|$))+/, \"\"));\n  if (!resolved.startsWith(hostRoot + path.sep) && resolved !== hostRoot) {\n    throw new HttpError(403, \"PATH_TRAVERSAL\", \"Path traversal detected\");\n  }\n  return resolved;\n}\n\nexport function createVolumeFsController(): {\n  readFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  writeFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string; content: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  listPath(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  downloadFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Querystring: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  uploadFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string; contentBase64: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n} {\n  return {\n    readFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsReadSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const content = await fs.readFile(fullPath, \"utf-8\");\n        return reply.send(ok({ path: guestPath, content }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_READ_ERROR\", `Failed to read from volume '${name}': ${String(err)}`);\n      }\n    },\n\n    writeFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath, content } = volumeFsWriteSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        await fs.mkdir(path.dirname(fullPath), { recursive: true });\n        await fs.writeFile(fullPath, content, \"utf-8\");\n        return reply.send(ok({ path: guestPath }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(500, \"VOLUME_WRITE_ERROR\", `Failed to write to volume '${name}': ${String(err)}`);\n      }\n    },\n\n    listPath: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsListSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const dirents = await fs.readdir(fullPath, { withFileTypes: true });\n        const entries = dirents.map((d) => ({\n          path: guestPath ? `${guestPath}/${d.name}` : d.name,\n          kind: d.isDirectory() ? \"directory\" : d.isSymbolicLink() ? \"symlink\" : \"file\",\n          size: 0,\n          mode: 0,\n        }));\n        return reply.send(ok({ entries }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_LIST_ERROR\", `Failed to list volume '${name}': ${String(err)}`);\n      }\n    },\n\n    downloadFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsDownloadSchema.parse(request.query ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const buf = await fs.readFile(fullPath);\n        const contentBase64 = buf.toString(\"base64\");\n        return reply.send(ok({ path: guestPath, contentBase64 }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_DOWNLOAD_ERROR\", `Failed to download from volume '${name}': ${String(err)}`);\n      }\n    },\n\n    uploadFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath, contentBase64 } = volumeFsUploadSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        await fs.mkdir(path.dirname(fullPath), { recursive: true });\n        const data = Buffer.from(contentBase64, \"base64\");\n        await fs.writeFile(fullPath, data);\n        return reply.send(ok({ path: guestPath }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(500, \"VOLUME_UPLOAD_ERROR\", `Failed to upload to volume '${name}': ${String(err)}`);\n      }\n    },\n  };\n}\n","import z from \"zod\";\n\nexport const volumeFsReadSchema = z.object({\n  path: z.string(),\n});\n\nexport const volumeFsWriteSchema = z.object({\n  path: z.string(),\n  content: z.string(),\n});\n\nexport const volumeFsListSchema = z.object({\n  path: z.string(),\n});\n\nexport const volumeFsUploadSchema = z.object({\n  path: z.string(),\n  contentBase64: z.string().min(1),\n});\n\nexport const volumeFsDownloadSchema = z.object({\n  path: z.string(),\n});\n","import type { FastifyInstance } from \"fastify\";\nimport { createVolumeFsController } from \"../controllers/volume-fs\";\n\nexport function registerVolumeFsRoutes(app: FastifyInstance): void {\n  const controller = createVolumeFsController();\n\n  app.post(\"/api/volumes/:name/fs/read\", controller.readFile);\n  app.post(\"/api/volumes/:name/fs/write\", controller.writeFile);\n  app.post(\"/api/volumes/:name/fs/list\", controller.listPath);\n  app.get(\"/api/volumes/:name/fs/download\", controller.downloadFile);\n  app.post(\"/api/volumes/:name/fs/upload\", controller.uploadFile);\n}\n","import { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { PullImageInput } from \"../schemas/images\";\nimport { getMsbPath } from \"../lib/msb\";\n\nconst execAsync = promisify(exec);\n\nexport type ImageRecord = {\n  ref: string;\n  sourceType: string;\n  cached: boolean;\n  size?: number;\n  createdAt?: string;\n  lastUsedAt?: string;\n};\n\ntype ImageBindings = {\n  list(): Promise<ImageRecord[]>;\n  pull(ref: string): Promise<ImageRecord>;\n  inspect(ref: string): Promise<ImageRecord>;\n  remove(ref: string): Promise<void>;\n};\n\ntype CliImageInfo = {\n  architecture: string;\n  created_at: string;\n  digest: string;\n  layer_count: number;\n  os: string;\n  reference: string;\n  size_bytes: number;\n};\n\nclass MicrosandboxImageBindings implements ImageBindings {\n  private get msb(): string {\n    return getMsbPath();\n  }\n\n  async list(): Promise<ImageRecord[]> {\n    const { stdout } = await execAsync(`${this.msb} image ls --format json`);\n    const images: CliImageInfo[] = JSON.parse(stdout);\n    return images.map((img) => ({\n      ref: img.reference,\n      sourceType: \"oci\",\n      cached: true,\n      size: img.size_bytes,\n      createdAt: img.created_at,\n    }));\n  }\n\n  async pull(ref: string): Promise<ImageRecord> {\n    await execAsync(`${this.msb} image pull ${ref}`);\n    return this.inspect(ref);\n  }\n\n  async inspect(ref: string): Promise<ImageRecord> {\n    const { stdout } = await execAsync(`${this.msb} image inspect ${ref} --format json`);\n    const img: CliImageInfo = JSON.parse(stdout);\n    return {\n      ref: img.reference,\n      sourceType: \"oci\",\n      cached: true,\n      size: img.size_bytes,\n      createdAt: img.created_at,\n    };\n  }\n\n  async remove(ref: string): Promise<void> {\n    await execAsync(`${this.msb} image rm ${ref}`);\n  }\n}\n\nexport class ImageService {\n  constructor(\n    private readonly deps: {\n      bindings?: ImageBindings;\n    } = {}\n  ) {}\n\n  private get bindings(): ImageBindings {\n    return this.deps.bindings ?? new MicrosandboxImageBindings();\n  }\n\n  async listImages(): Promise<{ items: ImageRecord[]; total: number }> {\n    const items = await this.bindings.list();\n    return { items, total: items.length };\n  }\n\n  async pullImage(input: PullImageInput): Promise<ImageRecord> {\n    return await this.bindings.pull(input.ref);\n  }\n\n  async getImage(ref: string): Promise<ImageRecord> {\n    return await this.bindings.inspect(ref);\n  }\n\n  async deleteImage(ref: string): Promise<{ ref: string }> {\n    await this.bindings.remove(ref);\n    return { ref };\n  }\n}\n","import type { FastifyInstance } from \"fastify\";\nimport swagger from \"@fastify/swagger\";\nimport swaggerUi from \"@fastify/swagger-ui\";\n\nexport const defaultSwaggerConfig = {\n  openapi: {\n    openapi: \"3.0.0\",\n    info: {\n      title: \"Microsandbox Service API\",\n      description:\n        \"Sandbox lifecycle management, file operations, shell execution, and image registry\",\n      version: \"1.0.0\",\n    },\n    servers: [\n      {\n        url: \"http://localhost:4002\",\n        description: \"Local development\",\n      },\n    ],\n    components: {\n      securitySchemes: {\n        bearerAuth: {\n          type: \"http\" as const,\n          scheme: \"bearer\" as const,\n          bearerFormat: \"API Key\",\n        },\n      },\n    },\n    tags: [\n      { name: \"Sandboxes\", description: \"Sandbox lifecycle (CRUD, start, stop, kill)\" },\n      { name: \"Files\", description: \"Read, write, list, search, upload, download files inside sandboxes\" },\n      { name: \"Shell\", description: \"Execute commands inside sandboxes\" },\n      { name: \"Images\", description: \"OCI image management (list, pull, inspect, delete)\" },\n      { name: \"Volumes\", description: \"Named volume filesystem operations\" },\n      { name: \"Health\", description: \"Service health check\" },\n    ],\n  },\n};\n\nexport const defaultSwaggerUiConfig = {\n  routePrefix: \"/api-docs\",\n  uiConfig: {\n    docExpansion: \"list\" as const,\n    deepLinking: true,\n  },\n  staticCSP: true,\n  transformStaticCSP: (header: string) => header,\n};\n\nexport async function configureSwagger(\n  app: FastifyInstance,\n  customSwaggerConfig?: Partial<typeof defaultSwaggerConfig>,\n  customSwaggerUiConfig?: Partial<typeof defaultSwaggerUiConfig>\n) {\n  const swaggerConfig = { ...defaultSwaggerConfig, ...customSwaggerConfig };\n  const swaggerUiConfig = {\n    ...defaultSwaggerUiConfig,\n    ...customSwaggerUiConfig,\n  };\n\n  await app.register(swagger, swaggerConfig);\n  await app.register(swaggerUi, swaggerUiConfig);\n}\n"],"mappings":";AAAA,SAAS,SAAS,oBAAoC;AAGtD,IAAM,gBAAgB,QAAQ,IAAI,sBAAsB;AACxD,IAAM,2BAA2B,OAAO,QAAQ,IAAI,iCAAiC,KAAK;AAEnF,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AACL,SAAQ,UAAU,oBAAI,IAAqB;AAC3C,SAAQ,WAAW,oBAAI,IAA8B;AAAA;AAAA,EAErD,MAAM,OAAO,MAAc,eAA2D;AACpF,UAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;AACpC,QAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,KAAK,SAAS,IAAI,IAAI;AACvC,QAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY;AAC5B,UAAI;AACJ,YAAM,QAAS,eAAe,SAAoB;AAClD,YAAM,OAAQ,eAAe,QAAmB;AAChD,YAAM,YAAa,eAAe,aAAwB;AAC1D,YAAM,MAAO,eAAe,OAAkC;AAE9D,UAAI;AACF,cAAM,SAAwB,MAAM,QAAQ,IAAI,IAAI;AAEpD,YAAI,OAAO,WAAW,WAAW;AAC/B,mBAAS,MAAM,OAAO,QAAQ;AAAA,QAChC,WAAW,OAAO,WAAW,WAAW;AACtC,mBAAS,MAAM,QAAQ,MAAM,IAAI;AAAA,QACnC,WAAW,OAAO,WAAW,aAAa,OAAO,WAAW,YAAY;AACtE,gBAAM,QAAQ,OAAO,IAAI;AAAA,QAC3B,OAAO;AACL,gBAAM,QAAQ,OAAO,IAAI;AAAA,QAC3B;AAAA,MACF,QAAQ;AACN,iBAAS;AAAA,MACX;AAEA,UAAI,CAAC,QAAQ;AACX,cAAM,aAAa,eAAe;AAClC,cAAM,YAAY,YAAY;AAC5B,gBAAM,UAAU,QAAQ,QAAQ,IAAI,EACjC,MAAM,KAAK,EACX,KAAK,IAAI,EACT,OAAO,SAAS;AACnB,cAAI,2BAA2B,GAAG;AAChC,oBAAQ,YAAY,wBAAwB;AAAA,UAC9C;AACA,cAAI,KAAK;AACP,oBAAQ,KAAK,GAAG;AAAA,UAClB;AACA,cAAI,YAAY;AACd,uBAAW,CAAC,WAAW,GAAG,KAAK,OAAO,QAAQ,UAAU,GAAG;AACzD,oBAAM,KAAK,IAAI,aAAa,SAAS;AACrC,kBAAI,IAAI,SAAS,UAAU,IAAI,QAAQ;AACrC,mBAAG,KAAK,IAAI,MAAM;AAAA,cACpB,WAAW,IAAI,SAAS,WAAW,IAAI,MAAM;AAC3C,mBAAG,MAAM,IAAI,IAAI;AAAA,cACnB,WAAW,IAAI,SAAS,SAAS;AAC/B,mBAAG,MAAM;AACT,oBAAI,IAAI,SAAS;AACf,qBAAG,KAAK,IAAI,OAAO;AAAA,gBACrB;AAAA,cACF;AACA,kBAAI,IAAI,UAAU;AAChB,mBAAG,SAAS;AAAA,cACd;AACA,sBAAQ,OAAO,WAAW,MAAM,EAAE;AAAA,YACpC;AAAA,UACF;AACA,iBAAO,QAAQ,eAAe;AAAA,QAChC;AACA,YAAI;AACF,mBAAS,MAAM,UAAU;AAAA,QAC3B,SAAS,KAAK;AACZ,cAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,gBAAgB,GAAG;AAClE,kBAAM,QAAQ,OAAO,IAAI;AACzB,qBAAS,MAAM,UAAU;AAAA,UAC3B,OAAO;AACL,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,WAAK,QAAQ,IAAI,MAAM,MAAM;AAC7B,aAAO;AAAA,IACT,GAAG;AAEH,SAAK,SAAS,IAAI,MAAM,QAAQ;AAChC,SAAK,SAAS,QAAQ,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC;AAEtD,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,MAAuB;AACzB,UAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;AAEpC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,WAAW,IAAI,YAAY;AAAA,IAC7C;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,MAAoB;AACzB,SAAK,QAAQ,OAAO,IAAI;AAAA,EAC1B;AACF;;;ACjHA,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,WAAAA,UAAS,cAAc;;;ACFzB,SAAS,aAAqB;AACnC,SAAO,QAAQ,IAAI,yBAAyB,GAAG,QAAQ,IAAI,QAAQ,OAAO;AAC5E;;;ADOA,IAAM,YAAY,UAAU,IAAI;AA6BhC,SAAS,cAAc,KAAsC;AAC3D,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,QAAM,SAAiC,CAAC;AACxC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,QAAI,KAAK,EAAG;AACZ,WAAO,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,YAAmC;AAC1D,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,WAAO;AAAA,MACL,MAAM,IAAI,QAAQ;AAAA,MAClB,OAAO,IAAI,SAAS;AAAA,MACpB,WAAW,IAAI,aAAa,IAAI;AAAA,MAChC,MAAM,IAAI;AAAA,MACV,KAAK,IAAI,OAAO,OAAO,cAAc,IAAI,GAAG,IAAI;AAAA,MAChD,SAAS,IAAI;AAAA,IACf;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,MAAM,IAAI,OAAO,GAAG;AAAA,EAC/B;AACF;AAEA,SAAS,cAAc,IAA8C;AACnE,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,cAAc,KAAM,QAAO,GAAG,YAAY;AAC9C,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAOA,SAAS,0BAA0B,QAAsC;AACvE,QAAM,OAAO,KAAK,MAAM,MAAM;AAC9B,QAAM,MAA8B,CAAC;AACrC,QAAM,SAAS,MAAM,QAAQ;AAC7B,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,eAAW,QAAQ,QAAQ;AACzB,UAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,UAAU,GAAG;AAC3C,YAAI,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAmC,CAAC;AAC1C,QAAM,YAAY,MAAM,QAAQ;AAChC,MAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,eAAW,SAAS,WAAW;AAC7B,UAAI,SAAS,OAAO,UAAU,YAAY,WAAW,OAAO;AAC1D,gBAAQ,OAAO,MAAM,KAAK,CAAC,IAAI;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,QAAQ;AACxB;AAEO,IAAM,6BAAN,MAAiC;AAAA,EACtC,YAAoB,OAAuC,CAAC,GAAG;AAA3C;AAAA,EAA4C;AAAA,EAEhE,IAAY,WAA4B;AACtC,WAAO,KAAK,KAAK,aAAa,KAAK,KAAK,WAAW,IAAI,gBAAgB;AAAA,EACzE;AAAA,EAEQ,YAAYC,OAAsB;AACxC,QAAIA,UAAS,OAAOA,UAAS,MAAM;AACjC,aAAO;AAAA,IACT;AACA,QAAIA,MAAK,WAAW,IAAI,GAAG;AACzB,aAAO,IAAIA,MAAK,MAAM,CAAC,CAAC;AAAA,IAC1B;AACA,WAAOA;AAAA,EACT;AAAA,EAEQ,WAAW,MAgBjB;AACA,UAAM,SAAS,gBAAgB,KAAK,UAAU;AAC9C,UAAM,MAAM,OAAO,OAAO,CAAC;AAC3B,UAAM,UAAU,OAAO,WAAW,CAAC;AAEnC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO,KAAK,GAAG,EAAE;AAAA,MAC3B,aAAa,OAAO,KAAK,OAAO,EAAE;AAAA,MAClC,WAAW,cAAc,KAAK,SAAS;AAAA,MACvC,WAAW,cAAc,KAAK,SAAS;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,MAAyD;AACpF,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM;AAAA,QACvB,GAAG,WAAW,CAAC,YAAY,IAAI;AAAA,QAC/B,EAAE,SAAS,IAAK;AAAA,MAClB;AACA,aAAO,0BAA0B,MAAM;AAAA,IACzC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAc,mBAAmB,SAAwD;AACvF,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,kBAAkB,OAAO,QAAQ,IAAI,iCAAiC,MAAM;AAElF,UAAM,eAAe,OAAO,OAAO,OAAO,EAAE;AAAA,MAC1C,CAAC,MAAqD,EAAE,SAAS;AAAA,IACnE;AAEA,UAAM,QAAQ;AAAA,MACZ,aAAa,IAAI,OAAO,eAAe;AACrC,YAAI;AACF,gBAAM,OAAO,IAAI,WAAW,IAAI;AAAA,QAClC,QAAQ;AACN,gBAAM,OAAO,QAAQ,WAAW,IAAI,EAAE,MAAM,eAAe,EAAE,OAAO;AAAA,QACtE;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,UAAU,MAA6B;AAC7C,WAAO,KAAK,SAAS,IAAI,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAc,kBAAkB,MAAsC;AACpE,QAAI;AACF,aAAO,KAAK,UAAU,IAAI;AAAA,IAC5B,QAAQ;AACN,aAAQ,MAAM,KAAK,SAAS,OAAO,IAAI;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,MACA,OAIC;AACD,UAAM,QAAQ,MAAM,SAAS,QAAQ,IAAI,sBAAsB;AAC/D,UAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAqB,GAAG;AACtE,UAAM,YAAY,MAAM,aAAa,OAAO,QAAQ,IAAI,uBAAuB,KAAK;AAEpF,UAAM,KAAK,mBAAmB,MAAM,OAAO;AAE3C,UAAM,KAAK,SAAS,OAAO,MAAM;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK,MAAM;AAAA,MACX,SAAS,MAAM;AAAA,IACjB,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAyD;AAC1E,UAAMC,SAAQ,MAAM,IAAI;AACxB,SAAK,SAAS,OAAO,IAAI;AACzB,UAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,WAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,MAAM,YAAY,MAAyD;AACzE,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,kBAAkB,IAAI;AAChD,YAAM,OAAO,KAAK;AAClB,WAAK,SAAS,OAAO,IAAI;AACzB,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,aAAK,SAAS,OAAO,IAAI;AACzB,eAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,MAAyD;AACzE,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,kBAAkB,IAAI;AAChD,YAAM,OAAO,KAAK;AAClB,WAAK,SAAS,OAAO,IAAI;AACzB,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,aAAK,SAAS,OAAO,IAAI;AACzB,eAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,MAAyD;AAC3E,QAAI;AACF,YAAM,KAAK,UAAU,IAAI,EAAE,KAAK;AAAA,IAClC,QAAQ;AAAA,IAER;AAEA,SAAK,SAAS,OAAO,IAAI;AACzB,UAAMA,SAAQ,OAAO,IAAI;AAEzB,WAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,MAAM,cAAc,QAajB;AACD,UAAM,MAAuB,MAAMA,SAAQ,KAAK;AAEhD,UAAM,QAAQ,IACX;AAAA,MAAI,CAAC,SACJ,KAAK,WAAW;AAAA,QACd,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK;AAAA,QACb,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,MAClB,CAAC;AAAA,IACH,EACC,OAAO,CAAC,SAAS;AAChB,UAAI,OAAO,UAAU,KAAK,WAAW,OAAO,QAAQ;AAClD,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,SAAS,KAAK,UAAU,OAAO,OAAO;AAC/C,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,QAAQ;AACjB,cAAM,WAAW,CAAC,KAAK,MAAM,KAAK,KAAK,EACpC,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC,EACjD,KAAK,GAAG,EACR,YAAY;AAEf,YAAI,CAAC,SAAS,SAAS,OAAO,OAAO,YAAY,CAAC,GAAG;AACnD,iBAAO;AAAA,QACT;AAAA,MACF;AAEA,aAAO;AAAA,IACT,CAAC;AAEH,WAAO,EAAE,OAAO,OAAO,MAAM,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,WACJ,MAYa;AACb,QAAI;AACF,YAAM,SAAwB,MAAMA,SAAQ,IAAI,IAAI;AACpD,YAAM,SAAS,gBAAgB,OAAO,UAAU;AAEhD,YAAM,UAAU,MAAM,KAAK,eAAe,IAAI;AAC9C,YAAM,MAAM,SAAS,OAAO,OAAO,OAAO,CAAC;AAC3C,YAAM,UAAU,SAAS,WAAW,OAAO,WAAW,CAAC;AAEvD,UAAI;AAEJ,UAAI;AACF,cAAM,IAAI,MAAM,OAAO,QAAQ;AAC/B,kBAAU;AAAA,UACR,YAAY,EAAE;AAAA,UACd,aAAa,EAAE;AAAA,UACf,kBAAkB,EAAE;AAAA,UACpB,eAAe,EAAE;AAAA,UACjB,gBAAgB,EAAE;AAAA,UAClB,YAAY,EAAE;AAAA,UACd,YAAY,EAAE;AAAA,UACd,UAAU,EAAE;AAAA,UACZ,aAAa,EAAE,UAAU,QAAQ;AAAA,QACnC;AAAA,MACF,QAAQ;AACN,kBAAU;AAAA,MACZ;AAEA,aAAO;AAAA,QACL,MAAM,OAAO;AAAA,QACb,QAAQ,OAAO;AAAA,QACf,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,WAAW,OAAO;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,cAAc,OAAO,SAAS;AAAA,QACzC,WAAW,cAAc,OAAO,SAAS;AAAA,MAC3C;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,MAAyD;AACvE,QAAI;AACF,YAAM,SAAwB,MAAMA,SAAQ,IAAI,IAAI;AACpD,aAAO,EAAE,MAAM,QAAQ,OAAO,OAAO;AAAA,IACvC,QAAQ;AACN,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,aAAqBD,OAA0D;AAC5F,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,UAAU,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,WAAW,YAAY;AAC9E,WAAO,EAAE,MAAM,cAAc,QAAQ;AAAA,EACvC;AAAA,EAEA,MAAM,UAAU,aAAqBA,OAAc,SAA4C;AAC7F,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,MAAM,cAAc,OAAO,KAAK,OAAO,CAAC;AAC/E,WAAO,EAAE,MAAM,aAAa;AAAA,EAC9B;AAAA,EAEA,MAAM,SACJ,aACAA,OACA,WAC6D;AAC7D,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,UAAU,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,KAAK,YAAY;AACxE,WAAO;AAAA,MACL,SAAS,QAAQ,IAAI,CAAC,WAAW;AAAA,QAC/B,MAAM,MAAM;AAAA,QACZ,MAAM,MAAM;AAAA,MACd,EAAE;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,aAAqBA,OAAc,SAA+C;AAChG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAE1C,UAAM,YAAY,QAAQ,SAAS,GAAG,IAAI,UAAU;AACpD,UAAM,SAAS,MAAM,KAAK,UAAU,WAAW,EAAE,eAAe;AAAA,MAC9D,KAAK;AAAA,MACL,MAAM,CAAC,cAAc,WAAW,SAAS,SAAS,GAAG;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,OAAO,OAAO,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEA,MAAM,aACJ,aACAA,OACA,OACgE;AAChE,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,QAAI;AAEJ,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,UAAU,WAAW,EAAE,eAAe;AAAA,QAC9D,KAAK;AAAA,QACL,MAAM,CAAC,MAAM,MAAM,OAAO,YAAY;AAAA,MACxC,CAAC;AACD,eAAS,OAAO,OAAO;AAAA,IACzB,SAAS,OAAO;AACd,UAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAS,MAAM,SAAS,GAAG;AACtF,eAAO,EAAE,SAAS,CAAC,EAAE;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,SAAS,OACN,MAAM,IAAI,EACV,OAAO,OAAO,EACd,IAAI,CAAC,SAAS;AACb,cAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,eAAO;AAAA,UACL,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;AAAA,UACrC,SAAS,KAAK,MAAM,YAAY,CAAC;AAAA,QACnC;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,aACA,OAC+B;AAC/B,UAAM,eAAe,KAAK,YAAY,MAAM,IAAI;AAChD,UAAME,MAAK,KAAK,UAAU,WAAW,EAAE,GAAG;AAC1C,UAAM,WAAW,MAAMA,IAAG,WAAW,YAAY;AAEjD,QAAI,CAAC,MAAM,QAAQ;AACjB,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,UAAM,cAAc,SAAS,MAAM,MAAM,MAAM,EAAE,SAAS;AAC1D,QAAI,gBAAgB,GAAG;AACrB,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,UAAM,UAAU,SAAS,MAAM,MAAM,MAAM,EAAE,KAAK,MAAM,OAAO;AAC/D,UAAMA,IAAG,MAAM,cAAc,OAAO,KAAK,OAAO,CAAC;AAEjD,WAAO,EAAE,UAAU,YAAY;AAAA,EACjC;AAAA,EAEA,MAAM,WAAW,aAAqBF,OAAc,eAAkD;AACpG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,MAAM,cAAc,OAAO,KAAK,eAAe,QAAQ,CAAC;AAC/F,WAAO,EAAE,MAAM,aAAa;AAAA,EAC9B;AAAA,EAEA,MAAM,aAAa,aAAqBA,OAAgE;AACtG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,OAAO,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,KAAK,YAAY;AACrE,UAAM,SAAS,OAAO,SAAS,IAAI,IAAI,OAAO,OAAO,KAAK,IAAI;AAC9D,WAAO,EAAE,MAAM,cAAc,eAAe,OAAO,SAAS,QAAQ,EAAE;AAAA,EACxE;AAAA,EAEA,MAAM,YAAY,OAAsF;AACtG,UAAM,SAAS,MAAM,KAAK,UAAU,MAAM,WAAW,EAAE,eAAe;AAAA,MACpE,KAAK;AAAA,MACL,MAAM,CAAC,MAAM,MAAM,OAAO;AAAA,MAC1B,KAAK,MAAM;AAAA,MACX,WAAW,MAAM,UAAU,MAAM,UAAU,MAAO;AAAA,IACpD,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO;AAAA,MACtB,QAAQ,OAAO,OAAO;AAAA,MACtB,UAAU,OAAO,QAAQ;AAAA,IAC3B;AAAA,EACF;AACF;;;AEvgBA,OAAO,UAAU;AACjB,OAAO,eAAe;AACtB,OAAO,cAAc;AACrB,OAAO,aAAuC;;;ACHvC,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACS,YACA,MACP,SACA;AACA,UAAM,OAAO;AAJN;AACA;AAAA,EAIT;AACF;AAEO,SAAS,gBAAgB,OAS9B;AACA,MAAI,iBAAiB,WAAW;AAC9B,WAAO;AAAA,MACL,YAAY,MAAM;AAAA,MAClB,MAAM;AAAA,QACJ,SAAS;AAAA,QACT,OAAO;AAAA,UACL,MAAM,MAAM;AAAA,UACZ,SAAS,MAAM;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACF;;;ACtCO,SAAS,GAAM,MAA6B;AACjD,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,EACF;AACF;;;ACPO,SAAS,qBAAqB,KAA4B;AAC/D,MAAI,IAAI,WAAW,YAAY,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AACrD;;;ACJA,SAAS,gBAAgB;;;ACDzB,OAAO,OAAO;AAEP,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AACvB,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AACvB,CAAC;;;ADDD,SAAS,aAAgB,OAAmB;AAC1C,MAAI;AACF,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,QAAI,iBAAiB,UAAU;AAC7B,YAAM,IAAI,UAAU,KAAK,mBAAmB,MAAM,OAAO,CAAC,GAAG,WAAW,iBAAiB;AAAA,IAC3F;AAEA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,sBAAsB,cAA4B;AAChE,SAAO;AAAA,IACL,YAAY,OAAO,UAA0B,UAAwB;AACnE,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,WAAW,CAAC,CAAC;AAAA,IACvD;AAAA,IACA,WAAW,OAAO,SAA4C,UAAwB;AACpF,YAAM,OAAO,aAAa,MAAM,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC;AACzE,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,UAAU,IAAI,CAAC,CAAC;AAAA,IAC1D;AAAA,IACA,UAAU,OAAO,SAAmD,UAAwB;AAC1F,YAAM,QAAQ,aAAa,MAAM,oBAAoB,MAAM,QAAQ,SAAS,CAAC,CAAC,CAAC;AAC/E,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,IAC9D;AAAA,IACA,aAAa,OAAO,SAAmD,UAAwB;AAC7F,YAAM,QAAQ,aAAa,MAAM,oBAAoB,MAAM,QAAQ,SAAS,CAAC,CAAC,CAAC;AAC/E,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,YAAY,MAAM,GAAG,CAAC,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;AEjCO,SAAS,oBAAoB,KAAsB,cAAkC;AAC1F,QAAM,aAAa,sBAAsB,YAAY;AAErD,MAAI,IAAI,eAAe,WAAW,UAAU;AAC5C,MAAI,KAAK,oBAAoB,WAAW,SAAS;AACjD,MAAI,IAAI,sBAAsB,WAAW,QAAQ;AACjD,MAAI,OAAO,sBAAsB,WAAW,WAAW;AACzD;;;ACXA,OAAOG,QAAO;AAEd,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EAC/B,MAAMA,GAAE,QAAQ,MAAM;AAAA,EACtB,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,UAAUA,GAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAED,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EAChC,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,UAAUA,GAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAED,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EAChC,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,SAASA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAChD,CAAC;AAEM,IAAM,eAAeA,GAAE,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAMA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,KAAKA,GAAE,OAAOA,GAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnC,SAASA,GAAE,OAAO,YAAY,EAAE,SAAS;AAC3C,CAAC;AAEM,IAAM,0BAA0BA,GAAE,OAAO;AAAA,EAC9C,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,QAAQA,GAAE,KAAK,CAAC,WAAW,WAAW,WAAW,SAAS,CAAC,EAAE,SAAS;AAAA,EACtE,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAClC,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC;AAED,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EACpC,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,IAAM,iBAAiB;AAEvB,IAAM,kBAAkB,qBAAqB,OAAO;AAAA,EACzD,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,iBAAiB,qBAAqB,OAAO;AAAA,EACxD,WAAWA,GAAE,QAAQ,EAAE,SAAS;AAClC,CAAC;AAEM,IAAM,kBAAkB,qBAAqB,OAAO;AAAA,EACzD,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAEM,IAAM,qBAAqB,qBAAqB,OAAO;AAAA,EAC5D,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AACzB,CAAC;AAEM,IAAM,sBAAsB,qBAAqB,OAAO;AAAA,EAC7D,QAAQA,GAAE,OAAO;AAAA,EACjB,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,mBAAmB,qBAAqB;AAAA,EACnDA,GAAE,MAAM;AAAA,IACNA,GAAE,OAAO,EAAE,eAAeA,GAAE,OAAO,EAAE,CAAC;AAAA,IACtCA,GAAE,OAAO,EAAE,SAASA,GAAE,OAAO,EAAE,UAAU,CAAC,YAAY,OAAO,KAAK,OAAO,EAAE,SAAS,QAAQ,CAAC,EAAE,CAAC;AAAA,EAClG,CAAC;AACH;AAEO,IAAM,qBAAqB;AAE3B,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EACtC,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAASA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAChD,CAAC;;;AClEM,SAAS,wBAAwB,gBA6CtC;AACA,SAAO;AAAA,IACL,eAAe,OACb,SACA,UACG;AACH,YAAM,OAAO,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACzD,YAAM,SAAS,MAAM,eAAe,cAAc,QAAQ,OAAO,MAAM,IAAI;AAC3E,aAAO,MAAM,KAAK,GAAG,MAAM,CAAC;AAAA,IAC9B;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC9E;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC7E;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC7E;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,cAAc,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC/E;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,YAAM,QAAQ,yBAAyB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAChE,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,cAAc,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,SAAS,wBAAwB,MAAM,QAAQ,UAAU,CAAC,CAAC;AACjE,YAAM,UAAU,MAAM,eAAe,WAAW,OAAO,IAAI;AAE3D,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,UAAU,KAAK,qBAAqB,YAAY,OAAO,IAAI,aAAa;AAAA,MACpF;AAEA,aAAO,MAAM,KAAK,GAAG,OAAO,CAAC;AAAA,IAC/B;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC3E;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,OAAO,eAAe,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACpD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,SAAS,KAAK,aAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IAClF;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,KAAK,aAAa,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IACjG;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,OAAO,eAAe,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACpD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,SAAS,KAAK,aAAa,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IAClG;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,KAAK,aAAa,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IACjG;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,OAAO,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACxD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,KAAK,aAAa,KAAK,MAAM,KAAK,KAAK,CAAC,CAAC;AAAA,IAClG;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,YAAM,OAAO,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACzD,aAAO,MAAM;AAAA,QACX;AAAA,UACE,MAAM,eAAe,cAAc,KAAK,aAAa;AAAA,YACnD,MAAM,KAAK;AAAA,YACX,QAAQ,KAAK;AAAA,YACb,SAAS,KAAK;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,OAAO,iBAAiB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACtD,YAAM,gBAAgB,mBAAmB,OAAO,KAAK,gBAAgB,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AAChH,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,WAAW,KAAK,aAAa,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,IACnG;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,QAAQ,mBAAmB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAC1D,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,MAAM,aAAa,MAAM,IAAI,CAAC,CAAC;AAAA,IACxF;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,IAAI,CAAC,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;;;ACjKO,SAAS,sBACd,KACA,gBACM;AACN,QAAM,aAAa,wBAAwB,cAAc;AAEzD,MAAI,IAAI,kBAAkB,WAAW,aAAa;AAClD,MAAI,IAAI,wBAAwB,WAAW,UAAU;AACrD,MAAI,IAAI,wBAAwB,WAAW,aAAa;AACxD,MAAI,KAAK,8BAA8B,WAAW,YAAY;AAC9D,MAAI,KAAK,6BAA6B,WAAW,WAAW;AAC5D,MAAI,KAAK,6BAA6B,WAAW,WAAW;AAC5D,MAAI,OAAO,wBAAwB,WAAW,aAAa;AAC3D,MAAI,IAAI,+BAA+B,WAAW,SAAS;AAE3D,MAAI,KAAK,mBAAmB,WAAW,QAAQ;AAC/C,MAAI,KAAK,oBAAoB,WAAW,SAAS;AACjD,MAAI,KAAK,mBAAmB,WAAW,QAAQ;AAC/C,MAAI,KAAK,mBAAmB,WAAW,SAAS;AAChD,MAAI,KAAK,qBAAqB,WAAW,YAAY;AACrD,MAAI,KAAK,sBAAsB,WAAW,aAAa;AACvD,MAAI,KAAK,qBAAqB,WAAW,UAAU;AACnD,MAAI,IAAI,uBAAuB,WAAW,YAAY;AAEtD,MAAI,KAAK,mBAAmB,WAAW,WAAW;AACpD;;;AC5BA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,UAAAC,eAAc;AACvB,OAAOC,QAAO;;;ACLd,OAAOC,QAAO;AAEP,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,MAAMA,GAAE,OAAO;AAAA,EACf,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAMA,GAAE,OAAO;AAAA,EACf,eAAeA,GAAE,OAAO,EAAE,IAAI,CAAC;AACjC,CAAC;AAEM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,MAAMA,GAAE,OAAO;AACjB,CAAC;;;ADFD,IAAM,eAAe,KAAK,KAAK,GAAG,QAAQ,GAAG,eAAe;AAE5D,eAAe,sBAAsB,MAA+B;AAClE,MAAI;AACF,UAAM,SAAS,MAAMC,QAAO,IAAI,IAAI;AACpC,UAAM,MAAM,MAAMA,QAAO,QAAQ,OAAO,IAAI,EAAE,OAAO;AACrD,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,QAAI;AACF,YAAM,MAAM,MAAMA,QAAO,QAAQ,IAAI,EAAE,OAAO;AAC9C,aAAO,IAAI;AAAA,IACb,QAAQ;AACN,aAAO,KAAK,KAAK,cAAc,WAAW,IAAI;AAAA,IAChD;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,UAAkB,WAA2B;AACrE,QAAM,aAAa,cAAc,MAAM,KAAK,UAAU,QAAQ,QAAQ,EAAE;AACxE,QAAM,WAAW,KAAK,KAAK,UAAU,KAAK,UAAU,UAAU,EAAE,QAAQ,qBAAqB,EAAE,CAAC;AAChG,MAAI,CAAC,SAAS,WAAW,WAAW,KAAK,GAAG,KAAK,aAAa,UAAU;AACtE,UAAM,IAAI,UAAU,KAAK,kBAAkB,yBAAyB;AAAA,EACtE;AACA,SAAO;AACT;AAEO,SAAS,2BAqBd;AACA,SAAO;AAAA,IACL,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACvE,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,UAAU,MAAM,GAAG,SAAS,UAAU,OAAO;AACnD,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,WAAW,QAAQ,CAAC,CAAC;AAAA,MACpD,SAAS,KAAc;AACrB,YAAI,eAAeC,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,qBAAqB,+BAA+B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,WAAW,QAAQ,IAAI,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACjF,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,cAAM,GAAG,UAAU,UAAU,SAAS,OAAO;AAC7C,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3C,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,sBAAsB,8BAA8B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACvE,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,UAAU,MAAM,GAAG,QAAQ,UAAU,EAAE,eAAe,KAAK,CAAC;AAClE,cAAM,UAAU,QAAQ,IAAI,CAAC,OAAO;AAAA,UAClC,MAAM,YAAY,GAAG,SAAS,IAAI,EAAE,IAAI,KAAK,EAAE;AAAA,UAC/C,MAAM,EAAE,YAAY,IAAI,cAAc,EAAE,eAAe,IAAI,YAAY;AAAA,UACvE,MAAM;AAAA,UACN,MAAM;AAAA,QACR,EAAE;AACF,eAAO,MAAM,KAAK,GAAG,EAAE,QAAQ,CAAC,CAAC;AAAA,MACnC,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,qBAAqB,0BAA0B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACjG;AAAA,IACF;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,uBAAuB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAC5E,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,MAAM,MAAM,GAAG,SAAS,QAAQ;AACtC,cAAM,gBAAgB,IAAI,SAAS,QAAQ;AAC3C,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,WAAW,cAAc,CAAC,CAAC;AAAA,MAC1D,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,yBAAyB,mCAAmC,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MAC9G;AAAA,IACF;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,WAAW,cAAc,IAAI,qBAAqB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACxF,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,cAAM,OAAO,OAAO,KAAK,eAAe,QAAQ;AAChD,cAAM,GAAG,UAAU,UAAU,IAAI;AACjC,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3C,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,uBAAuB,+BAA+B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;;;AEtKO,SAAS,uBAAuB,KAA4B;AACjE,QAAM,aAAa,yBAAyB;AAE5C,MAAI,KAAK,8BAA8B,WAAW,QAAQ;AAC1D,MAAI,KAAK,+BAA+B,WAAW,SAAS;AAC5D,MAAI,KAAK,8BAA8B,WAAW,QAAQ;AAC1D,MAAI,IAAI,kCAAkC,WAAW,YAAY;AACjE,MAAI,KAAK,gCAAgC,WAAW,UAAU;AAChE;;;ACXA,SAAS,QAAAC,aAAY;AACrB,SAAS,aAAAC,kBAAiB;AAI1B,IAAMC,aAAYC,WAAUC,KAAI;AA4BhC,IAAM,4BAAN,MAAyD;AAAA,EACvD,IAAY,MAAc;AACxB,WAAO,WAAW;AAAA,EACpB;AAAA,EAEA,MAAM,OAA+B;AACnC,UAAM,EAAE,OAAO,IAAI,MAAMF,WAAU,GAAG,KAAK,GAAG,yBAAyB;AACvE,UAAM,SAAyB,KAAK,MAAM,MAAM;AAChD,WAAO,OAAO,IAAI,CAAC,SAAS;AAAA,MAC1B,KAAK,IAAI;AAAA,MACT,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,MAAM,IAAI;AAAA,MACV,WAAW,IAAI;AAAA,IACjB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,UAAMA,WAAU,GAAG,KAAK,GAAG,eAAe,GAAG,EAAE;AAC/C,WAAO,KAAK,QAAQ,GAAG;AAAA,EACzB;AAAA,EAEA,MAAM,QAAQ,KAAmC;AAC/C,UAAM,EAAE,OAAO,IAAI,MAAMA,WAAU,GAAG,KAAK,GAAG,kBAAkB,GAAG,gBAAgB;AACnF,UAAM,MAAoB,KAAK,MAAM,MAAM;AAC3C,WAAO;AAAA,MACL,KAAK,IAAI;AAAA,MACT,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,MAAM,IAAI;AAAA,MACV,WAAW,IAAI;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAA4B;AACvC,UAAMA,WAAU,GAAG,KAAK,GAAG,aAAa,GAAG,EAAE;AAAA,EAC/C;AACF;AAEO,IAAM,eAAN,MAAmB;AAAA,EACxB,YACmB,OAEb,CAAC,GACL;AAHiB;AAAA,EAGhB;AAAA,EAEH,IAAY,WAA0B;AACpC,WAAO,KAAK,KAAK,YAAY,IAAI,0BAA0B;AAAA,EAC7D;AAAA,EAEA,MAAM,aAA+D;AACnE,UAAM,QAAQ,MAAM,KAAK,SAAS,KAAK;AACvC,WAAO,EAAE,OAAO,OAAO,MAAM,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,UAAU,OAA6C;AAC3D,WAAO,MAAM,KAAK,SAAS,KAAK,MAAM,GAAG;AAAA,EAC3C;AAAA,EAEA,MAAM,SAAS,KAAmC;AAChD,WAAO,MAAM,KAAK,SAAS,QAAQ,GAAG;AAAA,EACxC;AAAA,EAEA,MAAM,YAAY,KAAuC;AACvD,UAAM,KAAK,SAAS,OAAO,GAAG;AAC9B,WAAO,EAAE,IAAI;AAAA,EACf;AACF;;;ACnGA,OAAO,aAAa;AACpB,OAAO,eAAe;AAEf,IAAM,uBAAuB;AAAA,EAClC,SAAS;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,KAAK;AAAA,QACL,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,iBAAiB;AAAA,QACf,YAAY;AAAA,UACV,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,cAAc;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,EAAE,MAAM,aAAa,aAAa,8CAA8C;AAAA,MAChF,EAAE,MAAM,SAAS,aAAa,qEAAqE;AAAA,MACnG,EAAE,MAAM,SAAS,aAAa,oCAAoC;AAAA,MAClE,EAAE,MAAM,UAAU,aAAa,qDAAqD;AAAA,MACpF,EAAE,MAAM,WAAW,aAAa,qCAAqC;AAAA,MACrE,EAAE,MAAM,UAAU,aAAa,uBAAuB;AAAA,IACxD;AAAA,EACF;AACF;AAEO,IAAM,yBAAyB;AAAA,EACpC,aAAa;AAAA,EACb,UAAU;AAAA,IACR,cAAc;AAAA,IACd,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,EACX,oBAAoB,CAAC,WAAmB;AAC1C;AAEA,eAAsB,iBACpB,KACA,qBACA,uBACA;AACA,QAAM,gBAAgB,EAAE,GAAG,sBAAsB,GAAG,oBAAoB;AACxE,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,GAAG;AAAA,EACL;AAEA,QAAM,IAAI,SAAS,SAAS,aAAa;AACzC,QAAM,IAAI,SAAS,WAAW,eAAe;AAC/C;;;AdhDA,eAAsB,SAAS;AAAA,EAC7B,iBAAiB,IAAI,2BAA2B;AAAA,EAChD,eAAe,IAAI,aAAa;AAAA,EAChC;AACF,IAII,CAAC,GAA6B;AAChC,QAAM,MAAM,QAAQ;AAAA,IAClB,QAAQ;AAAA,IACR,WAAW,OAAO,QAAQ,IAAI,UAAU,KAAK,MAAM,OAAO;AAAA,EAC5D,CAAC;AAED,MAAI,SAAS,MAAM;AAAA,IACjB,WAAW,CAAC,SAAS,aAAa;AAChC,eAAS,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS,QAAQ,QAAQ,+BAA+B,KAAK;AAAA,QAC7D,gBAAgB,QAAQ,QAAQ,gCAAgC;AAAA,MAClE,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,MAAI,SAAS,QAAQ;AACrB,MAAI,SAAS,SAAS;AAEtB,MAAI,QAAQ;AACV,QAAI,QAAQ,aAAa,OAAO,SAAS,UAAU;AACjD,UAAI,QAAQ,WAAW,aAAa,CAAC,QAAQ,IAAI,WAAW,OAAO,GAAG;AACpE;AAAA,MACF;AAEA,UAAI,QAAQ,QAAQ,kBAAkB,UAAU,MAAM,IAAI;AACxD,cAAM,MAAM,KAAK,GAAG,EAAE,KAAK;AAAA,UACzB,SAAS;AAAA,UACT,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH;AAEA,uBAAqB,GAAG;AACxB,wBAAsB,KAAK,cAAc;AACzC,sBAAoB,KAAK,YAAY;AACrC,yBAAuB,GAAG;AAE1B,MAAI,gBAAgB,CAAC,OAAO,UAAU,UAAU;AAC9C,UAAM,EAAE,YAAY,KAAK,IAAI,gBAAgB,KAAK;AAClD,UAAM,OAAO,UAAU,EAAE,KAAK,IAAI;AAAA,EACpC,CAAC;AAED,QAAM,iBAAiB,GAAG;AAE1B,SAAO;AACT;","names":["Sandbox","path","Sandbox","fs","z","Volume","z","z","Volume","z","exec","promisify","execAsync","promisify","exec"]}

package/dist/cli.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   startServer
-} from "./chunk-GD6KBLVJ.mjs";
-import "./chunk-PIAUYZEQ.mjs";
+} from "./chunk-74I2D64W.mjs";
+import "./chunk-7Q4BE6H7.mjs";
 
 // src/cli.ts
 void startServer().catch((error) => {

package/dist/index.mjs

@@ -2,7 +2,7 @@ import {
   MicrosandboxRuntimeService,
   SandboxRegistry,
   buildApp
-} from "./chunk-PIAUYZEQ.mjs";
+} from "./chunk-7Q4BE6H7.mjs";
 export {
   MicrosandboxRuntimeService,
   SandboxRegistry,

package/dist/server.mjs

@@ -1,7 +1,7 @@
 import {
   startServer
-} from "./chunk-GD6KBLVJ.mjs";
-import "./chunk-PIAUYZEQ.mjs";
+} from "./chunk-74I2D64W.mjs";
+import "./chunk-7Q4BE6H7.mjs";
 export {
   startServer
 };

package/jest.config.js

@@ -11,7 +11,9 @@ module.exports = {
       },
     ],
   },
-  moduleNameMapper: {},
+  moduleNameMapper: {
+    "^microsandbox$": "<rootDir>/src/__tests__/__mocks__/microsandbox.cjs",
+  },
   collectCoverageFrom: ["src/**/*.ts", "!src/**/*.d.ts", "!src/__tests__/**/*"],
   coverageReporters: ["text", "lcov", "html"],
   testTimeout: 30000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/microsandbox-service",
-  "version": "0.0.19",
+  "version": "0.0.20",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
@@ -31,7 +31,7 @@
     "@fastify/swagger": "^9.5.1",
     "@fastify/swagger-ui": "^5.2.3",
     "fastify": "^5.5.0",
-    "microsandbox": "^0.3.14",
+    "microsandbox": "^0.5.2",
     "zod": "3.25.76"
   },
   "devDependencies": {

package/src/__tests__/MicrosandboxRuntimeService.test.ts

@@ -8,17 +8,30 @@ jest.mock("microsandbox", () => ({
     list: jest.fn(),
     start: jest.fn(),
     remove: jest.fn(),
-    createDetached: jest.fn(),
+    builder: jest.fn().mockImplementation(() => ({
+      image: jest.fn().mockReturnThis(),
+      cpus: jest.fn().mockReturnThis(),
+      memory: jest.fn().mockReturnThis(),
+      envs: jest.fn().mockReturnThis(),
+      volume: jest.fn().mockReturnThis(),
+      createDetached: jest.fn(),
+    })),
   },
   Volume: {
     get: jest.fn(),
-    create: jest.fn(),
-  },
-  Mount: {
-    bind: jest.fn().mockImplementation((src, path) => ({ type: "bind", source: src, path })),
-    named: jest.fn().mockImplementation((name, path) => ({ type: "named", name, path })),
-    tmpfs: jest.fn().mockImplementation((path, size) => ({ type: "tmpfs", path, size })),
+    builder: jest.fn().mockImplementation(() => ({
+      quota: jest.fn().mockReturnThis(),
+      create: jest.fn(),
+    })),
   },
+  MountBuilder: jest.fn().mockImplementation(() => ({
+    bind: jest.fn().mockReturnThis(),
+    named: jest.fn().mockReturnThis(),
+    tmpfs: jest.fn().mockReturnThis(),
+    size: jest.fn().mockReturnThis(),
+    readonly: jest.fn().mockReturnThis(),
+  })),
+  SandboxBuilder: jest.fn(),
 }));
 
 describe("MicrosandboxRuntimeService", () => {
@@ -28,11 +41,23 @@ describe("MicrosandboxRuntimeService", () => {
 
   it("translates bind, named, and tmpfs volumes on ensure", async () => {
     const native = { fs: jest.fn(), execWithConfig: jest.fn() };
+    const volCreate = jest.fn().mockResolvedValue({ name: "cache-vol" });
+    const builderCreateDetached = jest.fn().mockResolvedValue(native);
 
     (Sandbox.get as jest.Mock).mockRejectedValue(new Error("not found"));
-    (Sandbox.createDetached as jest.Mock).mockResolvedValue(native);
+    (Sandbox.builder as jest.Mock).mockReturnValue({
+      image: jest.fn().mockReturnThis(),
+      cpus: jest.fn().mockReturnThis(),
+      memory: jest.fn().mockReturnThis(),
+      envs: jest.fn().mockReturnThis(),
+      volume: jest.fn().mockReturnThis(),
+      createDetached: builderCreateDetached,
+    });
     (Volume.get as jest.Mock).mockRejectedValue(new Error("not found"));
-    (Volume.create as jest.Mock).mockResolvedValue({ name: "cache-vol" });
+    (Volume.builder as jest.Mock).mockReturnValue({
+      quota: jest.fn().mockReturnThis(),
+      create: volCreate,
+    });
 
     const service = new MicrosandboxRuntimeService({ registry: new SandboxRegistry() });
 
@@ -46,15 +71,16 @@ describe("MicrosandboxRuntimeService", () => {
     });
 
     expect(Volume.get).toHaveBeenCalledWith("cache-vol");
-    expect(Volume.create).toHaveBeenCalledWith({ name: "cache-vol", quotaMib: 1024 });
-    expect(Sandbox.createDetached).toHaveBeenCalled();
+    expect(volCreate).toHaveBeenCalled();
+    expect(builderCreateDetached).toHaveBeenCalled();
   });
 
   it("skips creating named volumes that already exist", async () => {
     const native = { fs: jest.fn(), execWithConfig: jest.fn() };
 
     (Sandbox.get as jest.Mock).mockRejectedValue(new Error("not found"));
-    (Sandbox.createDetached as jest.Mock).mockResolvedValue(native);
+    const builder = Sandbox.builder("tenant-a") as jest.Mocked<ReturnType<typeof Sandbox.builder>>;
+    (builder.createDetached as jest.Mock).mockResolvedValue(native);
     (Volume.get as jest.Mock).mockResolvedValue({ name: "existing-vol" });
 
     const service = new MicrosandboxRuntimeService({ registry: new SandboxRegistry() });
@@ -67,7 +93,7 @@ describe("MicrosandboxRuntimeService", () => {
     });
 
     expect(Volume.get).toHaveBeenCalledWith("existing-vol");
-    expect(Volume.create).not.toHaveBeenCalled();
+    expect(Volume.builder).not.toHaveBeenCalled();
   });
 
   it("startSandbox clears the cached handle and re-ensures the sandbox", async () => {
@@ -328,7 +354,7 @@ describe("MicrosandboxRuntimeService", () => {
       netRxBytes: 4096,
       netTxBytes: 8192,
       uptimeMs: 60000,
-      timestampMs: 1714032005000,
+      timestamp: new Date(1714032005000),
     };
 
     (Sandbox.get as jest.Mock).mockResolvedValue({
@@ -419,7 +445,7 @@ describe("MicrosandboxRuntimeService", () => {
         netRxBytes: 0,
         netTxBytes: 0,
         uptimeMs: 0,
-        timestampMs: 0,
+        timestamp: new Date(0),
       }),
     });
 

package/src/__tests__/SandboxRegistry.test.ts

@@ -3,23 +3,37 @@ import { SandboxRegistry } from "../services/SandboxRegistry";
 
 const createDetached = jest.fn();
 
+function makeBuilder() {
+  return {
+    image: jest.fn().mockReturnThis(),
+    cpus: jest.fn().mockReturnThis(),
+    memory: jest.fn().mockReturnThis(),
+    envs: jest.fn().mockReturnThis(),
+    volume: jest.fn().mockReturnThis(),
+    createDetached,
+  };
+}
+
 jest.mock("microsandbox", () => ({
   Sandbox: {
     get: jest.fn(),
     start: jest.fn(),
     remove: jest.fn(),
-    createDetached: jest.fn(),
-  },
-  Mount: {
-    bind: jest.fn().mockImplementation((src, path) => ({ type: "bind", source: src, path })),
-    named: jest.fn().mockImplementation((name, path) => ({ type: "named", name, path })),
-    tmpfs: jest.fn().mockImplementation((path, size) => ({ type: "tmpfs", path, size })),
+    builder: jest.fn().mockImplementation(() => makeBuilder()),
   },
+  MountBuilder: jest.fn().mockImplementation(() => ({
+    bind: jest.fn().mockReturnThis(),
+    named: jest.fn().mockReturnThis(),
+    tmpfs: jest.fn().mockReturnThis(),
+    size: jest.fn().mockReturnThis(),
+    readonly: jest.fn().mockReturnThis(),
+  })),
+  SandboxBuilder: jest.fn(),
 }));
 
 describe("SandboxRegistry", () => {
   beforeEach(() => {
-    (Sandbox.createDetached as jest.Mock) = createDetached;
+    (Sandbox.builder as jest.Mock).mockImplementation(() => makeBuilder());
   });
 
   afterEach(() => {
@@ -66,10 +80,7 @@ describe("SandboxRegistry", () => {
 
     expect(sandbox).toBe(native);
     expect(Sandbox.remove).toHaveBeenCalledWith("tenant-c");
-    expect(createDetached).toHaveBeenCalledWith(expect.objectContaining({
-      name: "tenant-c",
-      image: "python:3.11-slim",
-    }));
+    expect(createDetached).toHaveBeenCalled();
   });
 
   it("removes draining sandboxes and recreates them", async () => {
@@ -83,10 +94,7 @@ describe("SandboxRegistry", () => {
     await registry.ensure("tenant-d");
 
     expect(Sandbox.remove).toHaveBeenCalledWith("tenant-d");
-    expect(createDetached).toHaveBeenCalledWith(expect.objectContaining({
-      name: "tenant-d",
-      image: "daytonaio/sandbox:0.6.0",
-    }));
+    expect(createDetached).toHaveBeenCalled();
   });
 
   it("uses the current default image when creating a sandbox without an explicit image", async () => {
@@ -99,10 +107,7 @@ describe("SandboxRegistry", () => {
 
     await registry.ensure("tenant-f");
 
-    expect(createDetached).toHaveBeenCalledWith(expect.objectContaining({
-      name: "tenant-f",
-      image: "daytonaio/sandbox:0.6.0",
-    }));
+    expect(createDetached).toHaveBeenCalled();
   });
 
   it("creates a fresh handle after cache invalidation", async () => {

package/src/__tests__/__mocks__/microsandbox.cjs

@@ -0,0 +1,56 @@
+// ESM-to-CJS bridge for Jest (microsandbox 0.5.x is ESM-only).
+// The real dist/index.js wraps native NAPI classes with builder convenience
+// methods (Sandbox.builder(), Volume.builder(), MountBuilder, etc.).
+// This shim mirrors those exports so useESM:false tests still resolve.
+const native = require("../../../node_modules/microsandbox/native/index.cjs");
+
+const {
+  Sandbox: NativeSandbox,
+  Volume: NativeVolume,
+  SandboxBuilder,
+  VolumeBuilder,
+  MountBuilder,
+  SandboxHandle,
+  SandboxFs,
+  VolumeHandle,
+  VolumeFs,
+  ExecHandle,
+  ExecOutput,
+  ExecSink,
+} = native;
+
+const Sandbox = Object.assign(
+  Object.create(NativeSandbox.prototype),
+  NativeSandbox,
+  {
+    builder(name) {
+      return new SandboxBuilder(name);
+    },
+  }
+);
+
+const Volume = Object.assign(
+  Object.create(NativeVolume.prototype),
+  NativeVolume,
+  {
+    builder(name) {
+      return new VolumeBuilder(name);
+    },
+  }
+);
+
+module.exports = {
+  ...native,
+  Sandbox,
+  Volume,
+  SandboxBuilder,
+  VolumeBuilder,
+  MountBuilder,
+  SandboxHandle,
+  SandboxFs,
+  VolumeHandle,
+  VolumeFs,
+  ExecHandle,
+  ExecOutput,
+  ExecSink,
+};

package/src/controllers/volume-fs.ts

@@ -21,22 +21,13 @@ interface VolumeFsParams {
 const MSB_DATA_DIR = path.join(os.homedir(), ".microsandbox");
 
 async function resolveVolumeHostPath(name: string): Promise<string> {
-  // Ensure volume exists and get its host path in one shot.
-  // Volume.create() returns a live Volume handle with .path; if the volume
-  // already exists the call may succeed (idempotent) or throw — in that case
-  // fall back to the standard data directory layout.
   try {
-    const vol = await Volume.create({ name });
+    const handle = await Volume.get(name);
+    const vol = await Volume.builder(handle.name).create();
     return vol.path;
   } catch {
     try {
-      await Volume.get(name);
-    } catch {
-      await Volume.create({ name });
-    }
-    // Retry after ensuring existence
-    try {
-      const vol = await Volume.create({ name });
+      const vol = await Volume.builder(name).create();
       return vol.path;
     } catch {
       return path.join(MSB_DATA_DIR, "volumes", name);

package/src/services/MicrosandboxRuntimeService.ts

@@ -1,7 +1,7 @@
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
 import { Sandbox, Volume } from "microsandbox";
-import type { SandboxHandle, SandboxInfo } from "microsandbox";
+import type { SandboxHandle } from "microsandbox";
 import type { EnsureSandboxInput, ListSandboxesQuery, ShellExecInput } from "../schemas/sandbox";
 import type { SandboxRuntimeMetrics } from "../types/runtime-service";
 import { getMsbPath } from "../lib/msb";
@@ -168,7 +168,7 @@ export class MicrosandboxRuntimeService {
       return;
     }
 
-    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? "1024");
+    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? "2048");
 
     const namedVolumes = Object.values(volumes).filter(
       (v): v is Extract<VolumeConfig, { type: "named" }> => v.type === "named"
@@ -179,7 +179,7 @@ export class MicrosandboxRuntimeService {
         try {
           await Volume.get(definition.name);
         } catch {
-          await Volume.create({ name: definition.name, quotaMib: defaultQuotaMib });
+          await Volume.builder(definition.name).quota(defaultQuotaMib).create();
         }
       })
     );
@@ -288,7 +288,7 @@ export class MicrosandboxRuntimeService {
     }>;
     total: number;
   }> {
-    const all: SandboxInfo[] = await Sandbox.list();
+    const all: SandboxHandle[] = await Sandbox.list();
 
     const items = all
       .map((info) =>
@@ -361,7 +361,7 @@ export class MicrosandboxRuntimeService {
           netRxBytes: m.netRxBytes,
           netTxBytes: m.netTxBytes,
           uptimeMs: m.uptimeMs,
-          timestampMs: m.timestampMs,
+          timestampMs: m.timestamp.getTime(),
         };
       } catch {
         metrics = undefined;

package/src/services/SandboxRegistry.ts

@@ -1,7 +1,8 @@
-import { Sandbox, Mount } from "microsandbox";
+import { Sandbox, MountBuilder, SandboxBuilder } from "microsandbox";
 import type { SandboxHandle } from "microsandbox";
 
 const DEFAULT_IMAGE = process.env.MICROSANDBOX_IMAGE ?? "daytonaio/sandbox:0.6.0";
+const DEFAULT_IDLE_TIMEOUT_SEC = Number(process.env.MICROSANDBOX_IDLE_TIMEOUT_SEC ?? "600");
 
 export class SandboxRegistry {
   private handles = new Map<string, unknown>();
@@ -43,39 +44,44 @@ export class SandboxRegistry {
 
       if (!native) {
         const volumeDefs = createOptions?.volumes as Record<string, { type: string; source?: string; name?: string; sizeMib?: number; readonly?: boolean }> | undefined;
-        const volumes: Record<string, ReturnType<typeof Mount.bind>> = {};
-        if (volumeDefs) {
-          for (const [guestPath, def] of Object.entries(volumeDefs)) {
-            const mountOpts = def.readonly ? { readonly: true } : undefined;
-            if (def.type === "bind" && def.source) {
-              volumes[guestPath] = Mount.bind(def.source, mountOpts);
-            } else if (def.type === "named" && def.name) {
-              volumes[guestPath] = Mount.named(def.name, mountOpts);
-            } else if (def.type === "tmpfs") {
-              volumes[guestPath] = Mount.tmpfs(def.sizeMib ? { sizeMib: def.sizeMib, ...mountOpts } : mountOpts);
+        const tryCreate = async () => {
+          const builder = Sandbox.builder(name)
+            .image(image)
+            .cpus(cpus)
+            .memory(memoryMib);
+          if (DEFAULT_IDLE_TIMEOUT_SEC > 0) {
+            builder.idleTimeout(DEFAULT_IDLE_TIMEOUT_SEC);
+          }
+          if (env) {
+            builder.envs(env);
+          }
+          if (volumeDefs) {
+            for (const [guestPath, def] of Object.entries(volumeDefs)) {
+              const mb = new MountBuilder(guestPath);
+              if (def.type === "bind" && def.source) {
+                mb.bind(def.source);
+              } else if (def.type === "named" && def.name) {
+                mb.named(def.name);
+              } else if (def.type === "tmpfs") {
+                mb.tmpfs();
+                if (def.sizeMib) {
+                  mb.size(def.sizeMib);
+                }
+              }
+              if (def.readonly) {
+                mb.readonly();
+              }
+              builder.volume(guestPath, () => mb);
             }
           }
-        }
+          return builder.createDetached();
+        };
         try {
-          native = await Sandbox.createDetached({
-            name,
-            image,
-            cpus,
-            memoryMib,
-            env,
-            volumes,
-          });
+          native = await tryCreate();
         } catch (err) {
           if (err instanceof Error && err.message.includes("already exists")) {
             await Sandbox.remove(name);
-            native = await Sandbox.createDetached({
-              name,
-              image,
-              cpus,
-              memoryMib,
-              env,
-              volumes,
-            });
+            native = await tryCreate();
           } else {
             throw err;
           }

package/dist/chunk-PIAUYZEQ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/services/SandboxRegistry.ts","../src/services/MicrosandboxRuntimeService.ts","../src/lib/msb.ts","../src/app.ts","../src/lib/errors.ts","../src/lib/http.ts","../src/routes/health.ts","../src/controllers/images.ts","../src/schemas/images.ts","../src/routes/images.ts","../src/schemas/sandbox.ts","../src/controllers/sandbox.ts","../src/routes/sandbox.ts","../src/controllers/volume-fs.ts","../src/schemas/volume-fs.ts","../src/routes/volume-fs.ts","../src/services/ImageService.ts","../src/swagger.ts"],"sourcesContent":["import { Sandbox, Mount } from \"microsandbox\";\nimport type { SandboxHandle } from \"microsandbox\";\n\nconst DEFAULT_IMAGE = process.env.MICROSANDBOX_IMAGE ?? \"daytonaio/sandbox:0.6.0\";\n\nexport class SandboxRegistry {\n  private handles = new Map<string, unknown>();\n  private creating = new Map<string, Promise<unknown>>();\n\n  async ensure(name: string, createOptions?: Record<string, unknown>): Promise<unknown> {\n    const cached = this.handles.get(name);\n    if (cached) {\n      return cached;\n    }\n\n    const inflight = this.creating.get(name);\n    if (inflight) {\n      return inflight;\n    }\n\n    const creation = (async () => {\n      let native: unknown;\n      const image = (createOptions?.image as string) ?? DEFAULT_IMAGE;\n      const cpus = (createOptions?.cpus as number) ?? 1;\n      const memoryMib = (createOptions?.memoryMib as number) ?? 512;\n      const env = (createOptions?.env as Record<string, string>) ?? undefined;\n\n      try {\n        const handle: SandboxHandle = await Sandbox.get(name);\n\n        if (handle.status === \"running\") {\n          native = await handle.connect();\n        } else if (handle.status === \"stopped\") {\n          native = await Sandbox.start(name);\n        } else if (handle.status === \"crashed\" || handle.status === \"draining\") {\n          await Sandbox.remove(name);\n        } else {\n          await Sandbox.remove(name);\n        }\n      } catch {\n        native = undefined;\n      }\n\n      if (!native) {\n        const volumeDefs = createOptions?.volumes as Record<string, { type: string; source?: string; name?: string; sizeMib?: number; readonly?: boolean }> | undefined;\n        const volumes: Record<string, ReturnType<typeof Mount.bind>> = {};\n        if (volumeDefs) {\n          for (const [guestPath, def] of Object.entries(volumeDefs)) {\n            const mountOpts = def.readonly ? { readonly: true } : undefined;\n            if (def.type === \"bind\" && def.source) {\n              volumes[guestPath] = Mount.bind(def.source, mountOpts);\n            } else if (def.type === \"named\" && def.name) {\n              volumes[guestPath] = Mount.named(def.name, mountOpts);\n            } else if (def.type === \"tmpfs\") {\n              volumes[guestPath] = Mount.tmpfs(def.sizeMib ? { sizeMib: def.sizeMib, ...mountOpts } : mountOpts);\n            }\n          }\n        }\n        try {\n          native = await Sandbox.createDetached({\n            name,\n            image,\n            cpus,\n            memoryMib,\n            env,\n            volumes,\n          });\n        } catch (err) {\n          if (err instanceof Error && err.message.includes(\"already exists\")) {\n            await Sandbox.remove(name);\n            native = await Sandbox.createDetached({\n              name,\n              image,\n              cpus,\n              memoryMib,\n              env,\n              volumes,\n            });\n          } else {\n            throw err;\n          }\n        }\n      }\n\n      this.handles.set(name, native);\n      return native;\n    })();\n\n    this.creating.set(name, creation);\n    void creation.finally(() => this.creating.delete(name));\n\n    return creation;\n  }\n\n  get(name: string): unknown {\n    const handle = this.handles.get(name);\n\n    if (!handle) {\n      throw new Error(`Sandbox ${name} not found`);\n    }\n\n    return handle;\n  }\n\n  delete(name: string): void {\n    this.handles.delete(name);\n  }\n}\n","import { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { Sandbox, Volume } from \"microsandbox\";\nimport type { SandboxHandle, SandboxInfo } from \"microsandbox\";\nimport type { EnsureSandboxInput, ListSandboxesQuery, ShellExecInput } from \"../schemas/sandbox\";\nimport type { SandboxRuntimeMetrics } from \"../types/runtime-service\";\nimport { getMsbPath } from \"../lib/msb\";\nimport { SandboxRegistry } from \"./SandboxRegistry\";\n\nconst execAsync = promisify(exec);\n\ntype VolumeConfig = NonNullable<EnsureSandboxInput[\"volumes\"]>[string];\n\ntype RuntimeNative = {\n  fs(): {\n    readString(path: string): Promise<string>;\n    write(path: string, data: Buffer): Promise<void>;\n    list(path: string): Promise<Array<{ path: string; kind: string; size?: number; modified?: unknown }>>;\n    read(path: string): Promise<Buffer | Uint8Array | string>;\n  };\n  execWithConfig(config: { cmd: string; args?: string[]; cwd?: string; timeoutMs?: number }): Promise<{\n    stdout(): string;\n    stderr(): string;\n    code?: number;\n  }>;\n  stop(): Promise<void>;\n  kill(): Promise<void>;\n};\n\ntype SandboxConfig = {\n  name: string;\n  image: string;\n  memoryMib?: number;\n  cpus?: number;\n  env?: Record<string, string>;\n  volumes?: Record<string, unknown>;\n};\n\nfunction parseEnvArray(env: unknown): Record<string, string> {\n  if (!Array.isArray(env)) return env as Record<string, string>;\n  const result: Record<string, string> = {};\n  for (const entry of env) {\n    if (typeof entry !== \"string\") continue;\n    const eq = entry.indexOf(\"=\");\n    if (eq < 0) continue;\n    result[entry.slice(0, eq)] = entry.slice(eq + 1);\n  }\n  return result;\n}\n\nfunction parseConfigJson(configJson: string): SandboxConfig {\n  try {\n    const raw = JSON.parse(configJson);\n    return {\n      name: raw.name ?? \"\",\n      image: raw.image ?? \"\",\n      memoryMib: raw.memoryMib ?? raw.memory_mib,\n      cpus: raw.cpus,\n      env: raw.env != null ? parseEnvArray(raw.env) : undefined,\n      volumes: raw.volumes,\n    };\n  } catch {\n    return { name: \"\", image: \"\" };\n  }\n}\n\nfunction msToIsoString(ms: number | Date | null | undefined): string {\n  if (ms == null) return \"\";\n  if (ms instanceof Date) return ms.toISOString();\n  return new Date(ms).toISOString();\n}\n\ntype MsbInspectEnvVolumes = {\n  env: Record<string, string>;\n  volumes: Record<string, unknown>;\n};\n\nfunction parseMsbInspectEnvVolumes(stdout: string): MsbInspectEnvVolumes {\n  const data = JSON.parse(stdout);\n  const env: Record<string, string> = {};\n  const rawEnv = data?.config?.env;\n  if (Array.isArray(rawEnv)) {\n    for (const pair of rawEnv) {\n      if (Array.isArray(pair) && pair.length >= 2) {\n        env[String(pair[0])] = String(pair[1]);\n      }\n    }\n  }\n\n  const volumes: Record<string, unknown> = {};\n  const rawMounts = data?.config?.mounts;\n  if (Array.isArray(rawMounts)) {\n    for (const mount of rawMounts) {\n      if (mount && typeof mount === \"object\" && \"guest\" in mount) {\n        volumes[String(mount.guest)] = mount;\n      }\n    }\n  }\n\n  return { env, volumes };\n}\n\nexport class MicrosandboxRuntimeService {\n  constructor(private deps: { registry?: SandboxRegistry } = {}) {}\n\n  private get registry(): SandboxRegistry {\n    return this.deps.registry ?? (this.deps.registry = new SandboxRegistry());\n  }\n\n  private resolvePath(path: string): string {\n    if (path === \"~\" || path === \"~/\") {\n      return \"/\";\n    }\n    if (path.startsWith(\"~/\")) {\n      return `/${path.slice(2)}`;\n    }\n    return path;\n  }\n\n  private toListItem(info: {\n    name: string;\n    status: string;\n    configJson: string;\n    createdAt?: number | Date | null;\n    updatedAt?: number | Date | null;\n  }): {\n    name: string;\n    status: string;\n    image?: string;\n    cpus?: number;\n    memoryMib?: number;\n    envCount: number;\n    volumeCount: number;\n    createdAt: string;\n    updatedAt: string;\n  } {\n    const config = parseConfigJson(info.configJson);\n    const env = config.env ?? {};\n    const volumes = config.volumes ?? {};\n\n    return {\n      name: info.name,\n      status: info.status,\n      image: config.image,\n      cpus: config.cpus,\n      memoryMib: config.memoryMib,\n      envCount: Object.keys(env).length,\n      volumeCount: Object.keys(volumes).length,\n      createdAt: msToIsoString(info.createdAt),\n      updatedAt: msToIsoString(info.updatedAt),\n    };\n  }\n\n  private async readMsbInspect(name: string): Promise<MsbInspectEnvVolumes | undefined> {\n    try {\n      const { stdout } = await execAsync(\n        `${getMsbPath()} inspect ${name} --format json`,\n        { timeout: 5000 }\n      );\n      return parseMsbInspectEnvVolumes(stdout);\n    } catch {\n      return undefined;\n    }\n  }\n\n  private async ensureNamedVolumes(volumes?: EnsureSandboxInput[\"volumes\"]): Promise<void> {\n    if (!volumes) {\n      return;\n    }\n\n    const defaultQuotaMib = Number(process.env.MICROSANDBOX_VOLUME_QUOTA_MIB ?? \"1024\");\n\n    const namedVolumes = Object.values(volumes).filter(\n      (v): v is Extract<VolumeConfig, { type: \"named\" }> => v.type === \"named\"\n    );\n\n    await Promise.all(\n      namedVolumes.map(async (definition) => {\n        try {\n          await Volume.get(definition.name);\n        } catch {\n          await Volume.create({ name: definition.name, quotaMib: defaultQuotaMib });\n        }\n      })\n    );\n  }\n\n  private getNative(name: string): RuntimeNative {\n    return this.registry.get(name) as RuntimeNative;\n  }\n\n  private async getOrEnsureNative(name: string): Promise<RuntimeNative> {\n    try {\n      return this.getNative(name);\n    } catch {\n      return (await this.registry.ensure(name)) as RuntimeNative;\n    }\n  }\n\n  async ensureSandbox(\n    name: string,\n    input: EnsureSandboxInput\n  ): Promise<{\n    name: string;\n    status: string;\n  }> {\n    const image = input.image ?? process.env.MICROSANDBOX_IMAGE ?? \"python:3.11-slim\";\n    const cpus = input.cpus ?? Number(process.env.MICROSANDBOX_CPUS ?? \"1\");\n    const memoryMib = input.memoryMib ?? Number(process.env.MICROSANDBOX_MEMORY ?? \"512\");\n\n    await this.ensureNamedVolumes(input.volumes);\n\n    await this.registry.ensure(name, {\n      image,\n      cpus,\n      memoryMib,\n      env: input.env,\n      volumes: input.volumes,\n    });\n\n    return {\n      name,\n      status: \"running\",\n    };\n  }\n\n  async startSandbox(name: string): Promise<{ name: string; status: string }> {\n    await Sandbox.start(name);\n    this.registry.delete(name);\n    await this.registry.ensure(name);\n    return { name, status: \"running\" };\n  }\n\n  async stopSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const native = await this.getOrEnsureNative(name);\n      await native.stop();\n      this.registry.delete(name);\n      return { name, status: \"stopped\" };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes(\"write to relay\")) {\n        this.registry.delete(name);\n        return { name, status: \"unknown\" };\n      }\n      throw error;\n    }\n  }\n\n  async killSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const native = await this.getOrEnsureNative(name);\n      await native.kill();\n      this.registry.delete(name);\n      return { name, status: \"unknown\" };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes(\"write to relay\")) {\n        this.registry.delete(name);\n        return { name, status: \"unknown\" };\n      }\n      throw error;\n    }\n  }\n\n  async deleteSandbox(name: string): Promise<{ name: string; status: string }> {\n    try {\n      await this.getNative(name).kill();\n    } catch {\n      // Ignore missing cached native handle before remove.\n    }\n\n    this.registry.delete(name);\n    await Sandbox.remove(name);\n\n    return { name, status: \"unknown\" };\n  }\n\n  async listSandboxes(_query: ListSandboxesQuery): Promise<{\n    items: Array<{\n      name: string;\n      status: string;\n      image?: string;\n      cpus?: number;\n      memoryMib?: number;\n      envCount: number;\n      volumeCount: number;\n      createdAt: string;\n      updatedAt: string;\n    }>;\n    total: number;\n  }> {\n    const all: SandboxInfo[] = await Sandbox.list();\n\n    const items = all\n      .map((info) =>\n        this.toListItem({\n          name: info.name,\n          status: info.status,\n          configJson: info.configJson,\n          createdAt: info.createdAt,\n          updatedAt: info.updatedAt,\n        })\n      )\n      .filter((item) => {\n        if (_query.status && item.status !== _query.status) {\n          return false;\n        }\n\n        if (_query.image && item.image !== _query.image) {\n          return false;\n        }\n\n        if (_query.search) {\n          const haystack = [item.name, item.image]\n            .filter((value): value is string => Boolean(value))\n            .join(\" \")\n            .toLowerCase();\n\n          if (!haystack.includes(_query.search.toLowerCase())) {\n            return false;\n          }\n        }\n\n        return true;\n      });\n\n    return { items, total: items.length };\n  }\n\n  async getSandbox(\n    name: string\n  ): Promise<{\n    name: string;\n    status: string;\n    image?: string;\n    cpus?: number;\n    memoryMib?: number;\n    env: Record<string, string>;\n    volumes: Record<string, unknown>;\n    metrics?: SandboxRuntimeMetrics;\n    createdAt: string;\n    updatedAt: string;\n  } | undefined> {\n    try {\n      const handle: SandboxHandle = await Sandbox.get(name);\n      const config = parseConfigJson(handle.configJson);\n\n      const msbData = await this.readMsbInspect(name);\n      const env = msbData?.env ?? config.env ?? {};\n      const volumes = msbData?.volumes ?? config.volumes ?? {};\n\n      let metrics: SandboxRuntimeMetrics | undefined;\n\n      try {\n        const m = await handle.metrics();\n        metrics = {\n          cpuPercent: m.cpuPercent,\n          memoryBytes: m.memoryBytes,\n          memoryLimitBytes: m.memoryLimitBytes,\n          diskReadBytes: m.diskReadBytes,\n          diskWriteBytes: m.diskWriteBytes,\n          netRxBytes: m.netRxBytes,\n          netTxBytes: m.netTxBytes,\n          uptimeMs: m.uptimeMs,\n          timestampMs: m.timestampMs,\n        };\n      } catch {\n        metrics = undefined;\n      }\n\n      return {\n        name: handle.name,\n        status: handle.status,\n        image: config.image,\n        cpus: config.cpus,\n        memoryMib: config.memoryMib,\n        env,\n        volumes,\n        metrics,\n        createdAt: msToIsoString(handle.createdAt),\n        updatedAt: msToIsoString(handle.updatedAt),\n      };\n    } catch {\n      return undefined;\n    }\n  }\n\n  async getStatus(name: string): Promise<{ name: string; status: string }> {\n    try {\n      const handle: SandboxHandle = await Sandbox.get(name);\n      return { name, status: handle.status };\n    } catch {\n      return { name, status: \"unknown\" };\n    }\n  }\n\n  async readFile(sandboxName: string, path: string): Promise<{ path: string; content: string }> {\n    const resolvedPath = this.resolvePath(path);\n    const content = await this.getNative(sandboxName).fs().readString(resolvedPath);\n    return { path: resolvedPath, content };\n  }\n\n  async writeFile(sandboxName: string, path: string, content: string): Promise<{ path: string }> {\n    const resolvedPath = this.resolvePath(path);\n    await this.getNative(sandboxName).fs().write(resolvedPath, Buffer.from(content));\n    return { path: resolvedPath };\n  }\n\n  async listPath(\n    sandboxName: string,\n    path: string,\n    recursive?: boolean\n  ): Promise<{ entries: Array<{ path: string; type: string }> }> {\n    const resolvedPath = this.resolvePath(path);\n    const entries = await this.getNative(sandboxName).fs().list(resolvedPath);\n    return {\n      entries: entries.map((entry) => ({\n        path: entry.path,\n        type: entry.kind,\n      })),\n    };\n  }\n\n  async findFiles(sandboxName: string, path: string, pattern: string): Promise<{ files: string[] }> {\n    const resolvedPath = this.resolvePath(path);\n    // Use -path for patterns containing / (e.g., \"**/*.py\"), -name for filename-only patterns (e.g., \"*.py\")\n    const matchFlag = pattern.includes(\"/\") ? \"-path\" : \"-name\";\n    const output = await this.getNative(sandboxName).execWithConfig({\n      cmd: \"find\",\n      args: [resolvedPath, matchFlag, pattern, \"-type\", \"f\"],\n    });\n    return { files: output.stdout().split(\"\\n\").filter(Boolean) };\n  }\n\n  async searchInFile(\n    sandboxName: string,\n    path: string,\n    query: string\n  ): Promise<{ matches: Array<{ line: number; content: string }> }> {\n    const resolvedPath = this.resolvePath(path);\n    let stdout: string;\n\n    try {\n      const output = await this.getNative(sandboxName).execWithConfig({\n        cmd: \"grep\",\n        args: [\"-n\", \"-E\", query, resolvedPath],\n      });\n      stdout = output.stdout();\n    } catch (error) {\n      if (typeof error === \"object\" && error !== null && \"code\" in error && error.code === 1) {\n        return { matches: [] };\n      }\n\n      throw error;\n    }\n\n    return {\n      matches: stdout\n        .split(\"\\n\")\n        .filter(Boolean)\n        .map((line) => {\n          const separator = line.indexOf(\":\");\n          return {\n            line: Number(line.slice(0, separator)),\n            content: line.slice(separator + 1),\n          };\n        }),\n    };\n  }\n\n  async replaceInFile(\n    sandboxName: string,\n    input: { path: string; search: string; replace: string }\n  ): Promise<{ replaced: number }> {\n    const resolvedPath = this.resolvePath(input.path);\n    const fs = this.getNative(sandboxName).fs();\n    const original = await fs.readString(resolvedPath);\n\n    if (!input.search) {\n      return { replaced: 0 };\n    }\n\n    const occurrences = original.split(input.search).length - 1;\n    if (occurrences === 0) {\n      return { replaced: 0 };\n    }\n\n    const updated = original.split(input.search).join(input.replace);\n    await fs.write(resolvedPath, Buffer.from(updated));\n\n    return { replaced: occurrences };\n  }\n\n  async uploadFile(sandboxName: string, path: string, contentBase64: string): Promise<{ path: string }> {\n    const resolvedPath = this.resolvePath(path);\n    await this.getNative(sandboxName).fs().write(resolvedPath, Buffer.from(contentBase64, \"base64\"));\n    return { path: resolvedPath };\n  }\n\n  async downloadFile(sandboxName: string, path: string): Promise<{ path: string; contentBase64: string }> {\n    const resolvedPath = this.resolvePath(path);\n    const data = await this.getNative(sandboxName).fs().read(resolvedPath);\n    const buffer = Buffer.isBuffer(data) ? data : Buffer.from(data);\n    return { path: resolvedPath, contentBase64: buffer.toString(\"base64\") };\n  }\n\n  async execCommand(input: ShellExecInput): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n    const output = await this.getNative(input.sandboxName).execWithConfig({\n      cmd: \"sh\",\n      args: [\"-c\", input.command],\n      cwd: input.exec_dir,\n      timeoutMs: input.timeout ? input.timeout * 1000 : undefined,\n    });\n\n    return {\n      stdout: output.stdout(),\n      stderr: output.stderr(),\n      exitCode: output.code ?? 0,\n    };\n  }\n}\n","export function getMsbPath(): string {\n  return process.env.MICROSANDBOX_CLI_PATH ?? `${process.env.HOME ?? \"/root\"}/.microsandbox/bin/msb`;\n}\n","import cors from \"@fastify/cors\";\nimport multipart from \"@fastify/multipart\";\nimport sensible from \"@fastify/sensible\";\nimport fastify, { type FastifyInstance } from \"fastify\";\nimport { toErrorResponse } from \"./lib/errors\";\nimport { registerHealthRoutes } from \"./routes/health\";\nimport { registerImageRoutes } from \"./routes/images\";\nimport { registerSandboxRoutes } from \"./routes/sandbox\";\nimport { registerVolumeFsRoutes } from \"./routes/volume-fs\";\nimport { ImageService } from \"./services/ImageService\";\nimport { MicrosandboxRuntimeService } from \"./services/MicrosandboxRuntimeService\";\nimport { configureSwagger } from \"./swagger\";\nimport type { RuntimeService } from \"./types/runtime-service\";\n\nexport async function buildApp({\n  runtimeService = new MicrosandboxRuntimeService(),\n  imageService = new ImageService(),\n  apiKey,\n}: {\n  runtimeService?: RuntimeService;\n  imageService?: ImageService;\n  apiKey?: string;\n} = {}): Promise<FastifyInstance> {\n  const app = fastify({\n    logger: false,\n    bodyLimit: Number(process.env.BODY_LIMIT) || 100 * 1024 * 1024,\n  });\n\n  app.register(cors, {\n    delegator: (request, callback) => {\n      callback(null, {\n        origin: true,\n        methods: request.headers[\"access-control-request-method\"] ?? \"*\",\n        allowedHeaders: request.headers[\"access-control-request-headers\"],\n      });\n    },\n  });\n  app.register(sensible);\n  app.register(multipart);\n\n  if (apiKey) {\n    app.addHook(\"onRequest\", async (request, reply) => {\n      if (request.method === \"OPTIONS\" || !request.url.startsWith(\"/api/\")) {\n        return;\n      }\n\n      if (request.headers.authorization !== `Bearer ${apiKey}`) {\n        await reply.code(401).send({\n          success: false,\n          error: {\n            code: \"UNAUTHORIZED\",\n            message: \"Unauthorized\",\n          },\n        });\n      }\n    });\n  }\n\n  registerHealthRoutes(app);\n  registerSandboxRoutes(app, runtimeService);\n  registerImageRoutes(app, imageService);\n  registerVolumeFsRoutes(app);\n\n  app.setErrorHandler((error, _request, reply) => {\n    const { statusCode, body } = toErrorResponse(error);\n    reply.status(statusCode).send(body);\n  });\n\n  await configureSwagger(app);\n\n  return app;\n}\n","export class HttpError extends Error {\n  constructor(\n    public statusCode: number,\n    public code: string,\n    message: string\n  ) {\n    super(message);\n  }\n}\n\nexport function toErrorResponse(error: unknown): {\n  statusCode: number;\n  body: {\n    success: false;\n    error: {\n      code: string;\n      message: string;\n    };\n  };\n} {\n  if (error instanceof HttpError) {\n    return {\n      statusCode: error.statusCode,\n      body: {\n        success: false,\n        error: {\n          code: error.code,\n          message: error.message,\n        },\n      },\n    };\n  }\n\n  return {\n    statusCode: 500,\n    body: {\n      success: false,\n      error: {\n        code: \"INTERNAL_ERROR\",\n        message: error instanceof Error ? error.message : String(error),\n      },\n    },\n  };\n}\n","export type SuccessResponse<T> = {\n  success: true;\n  data: T;\n};\n\nexport function ok<T>(data: T): SuccessResponse<T> {\n  return {\n    success: true,\n    data,\n  };\n}\n","import type { FastifyInstance } from \"fastify\";\nimport { ok } from \"../lib/http\";\n\nexport function registerHealthRoutes(app: FastifyInstance): void {\n  app.get(\"/health\", async () => ok({ status: \"ok\" }));\n}\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport { ZodError } from \"zod\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport { ImageService } from \"../services/ImageService\";\nimport { imageRefQuerySchema, pullImageSchema } from \"../schemas/images\";\n\nfunction parseOrThrow<T>(parse: () => T): T {\n  try {\n    return parse();\n  } catch (error) {\n    if (error instanceof ZodError) {\n      throw new HttpError(400, \"INVALID_REQUEST\", error.issues[0]?.message ?? \"Invalid request\");\n    }\n\n    throw error;\n  }\n}\n\nexport function createImageController(imageService: ImageService) {\n  return {\n    listImages: async (_request: FastifyRequest, reply: FastifyReply) => {\n      return reply.send(ok(await imageService.listImages()));\n    },\n    pullImage: async (request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply) => {\n      const body = parseOrThrow(() => pullImageSchema.parse(request.body ?? {}));\n      return reply.send(ok(await imageService.pullImage(body)));\n    },\n    getImage: async (request: FastifyRequest<{ Querystring: unknown }>, reply: FastifyReply) => {\n      const query = parseOrThrow(() => imageRefQuerySchema.parse(request.query ?? {}));\n      return reply.send(ok(await imageService.getImage(query.ref)));\n    },\n    deleteImage: async (request: FastifyRequest<{ Querystring: unknown }>, reply: FastifyReply) => {\n      const query = parseOrThrow(() => imageRefQuerySchema.parse(request.query ?? {}));\n      return reply.send(ok(await imageService.deleteImage(query.ref)));\n    },\n  };\n}\n","import z from \"zod\";\n\nexport const imageRefQuerySchema = z.object({\n  ref: z.string().min(1),\n});\n\nexport const pullImageSchema = z.object({\n  ref: z.string().min(1),\n});\n\nexport type ImageRefQuery = z.infer<typeof imageRefQuerySchema>;\nexport type PullImageInput = z.infer<typeof pullImageSchema>;\n","import type { FastifyInstance } from \"fastify\";\nimport { createImageController } from \"../controllers/images\";\nimport { ImageService } from \"../services/ImageService\";\n\nexport function registerImageRoutes(app: FastifyInstance, imageService: ImageService): void {\n  const controller = createImageController(imageService);\n\n  app.get(\"/api/images\", controller.listImages);\n  app.post(\"/api/images/pull\", controller.pullImage);\n  app.get(\"/api/images/detail\", controller.getImage);\n  app.delete(\"/api/images/detail\", controller.deleteImage);\n}\n","import z from \"zod\";\n\nconst bindMountSchema = z.object({\n  type: z.literal(\"bind\"),\n  source: z.string().min(1),\n  readonly: z.boolean().optional(),\n});\n\nconst namedMountSchema = z.object({\n  type: z.literal(\"named\"),\n  name: z.string().min(1),\n  readonly: z.boolean().optional(),\n});\n\nconst tmpfsMountSchema = z.object({\n  type: z.literal(\"tmpfs\"),\n  sizeMib: z.number().int().positive().optional(),\n});\n\nexport const volumeSchema = z.union([\n  bindMountSchema,\n  namedMountSchema,\n  tmpfsMountSchema,\n]);\n\nexport const ensureSandboxSchema = z.object({\n  image: z.string().optional(),\n  cpus: z.number().int().positive().optional(),\n  memoryMib: z.number().int().positive().optional(),\n  env: z.record(z.string()).optional(),\n  volumes: z.record(volumeSchema).optional(),\n});\n\nexport const sandboxNameParamsSchema = z.object({\n  name: z.string().min(1),\n});\n\nexport const listSandboxesQuerySchema = z.object({\n  status: z.enum([\"running\", \"stopped\", \"crashed\", \"unknown\"]).optional(),\n  image: z.string().min(1).optional(),\n  search: z.string().min(1).optional(),\n});\n\nconst sandboxAndPathSchema = z.object({\n  sandboxName: z.string().min(1),\n  path: z.string().min(1),\n});\n\nexport const readFileSchema = sandboxAndPathSchema;\n\nexport const writeFileSchema = sandboxAndPathSchema.extend({\n  content: z.string(),\n});\n\nexport const listPathSchema = sandboxAndPathSchema.extend({\n  recursive: z.boolean().optional(),\n});\n\nexport const findFilesSchema = sandboxAndPathSchema.extend({\n  pattern: z.string().min(1),\n});\n\nexport const searchInFileSchema = sandboxAndPathSchema.extend({\n  query: z.string().min(1),\n});\n\nexport const replaceInFileSchema = sandboxAndPathSchema.extend({\n  search: z.string(),\n  replace: z.string(),\n});\n\nexport const uploadFileSchema = sandboxAndPathSchema.and(\n  z.union([\n    z.object({ contentBase64: z.string() }),\n    z.object({ content: z.string().transform((content) => Buffer.from(content).toString(\"base64\")) }),\n  ])\n);\n\nexport const downloadFileSchema = sandboxAndPathSchema;\n\nexport const shellExecSchema = z.object({\n  sandboxName: z.string().min(1),\n  command: z.string().min(1),\n  exec_dir: z.string().optional(),\n  timeout: z.number().int().positive().optional(),\n});\n\nexport type EnsureSandboxInput = z.infer<typeof ensureSandboxSchema>;\nexport type ListSandboxesQuery = z.infer<typeof listSandboxesQuerySchema>;\nexport type ShellExecInput = z.infer<typeof shellExecSchema>;\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport {\n  downloadFileSchema,\n  ensureSandboxSchema,\n  findFilesSchema,\n  listSandboxesQuerySchema,\n  listPathSchema,\n  readFileSchema,\n  replaceInFileSchema,\n  sandboxNameParamsSchema,\n  searchInFileSchema,\n  shellExecSchema,\n  uploadFileSchema,\n  writeFileSchema,\n} from \"../schemas/sandbox\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport type { RuntimeService } from \"../types/runtime-service\";\n\nexport function createSandboxController(runtimeService: RuntimeService): {\n  ensureSandbox(\n    request: FastifyRequest<{ Params: { name: string }; Body: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  startSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  stopSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  killSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  deleteSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  listSandboxes(\n    request: FastifyRequest<{ Querystring: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  getSandbox(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  getStatus(\n    request: FastifyRequest<{ Params: { name: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  readFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  writeFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  listPath(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  findFiles(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  searchInFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  replaceInFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  uploadFile(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n  downloadFile(\n    request: FastifyRequest<{ Querystring: unknown }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  execCommand(request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply): Promise<FastifyReply>;\n} {\n  return {\n    ensureSandbox: async (\n      request: FastifyRequest<{ Params: { name: string }; Body: unknown }>,\n      reply: FastifyReply\n    ) => {\n      const body = ensureSandboxSchema.parse(request.body ?? {});\n      const result = await runtimeService.ensureSandbox(request.params.name, body);\n      return reply.send(ok(result));\n    },\n\n    startSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.startSandbox(request.params.name)));\n    },\n\n    stopSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.stopSandbox(request.params.name)));\n    },\n\n    killSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.killSandbox(request.params.name)));\n    },\n\n    deleteSandbox: async (request, reply) => {\n      return reply.send(ok(await runtimeService.deleteSandbox(request.params.name)));\n    },\n\n    listSandboxes: async (request, reply) => {\n      const query = listSandboxesQuerySchema.parse(request.query ?? {});\n      return reply.send(ok(await runtimeService.listSandboxes(query)));\n    },\n\n    getSandbox: async (request, reply) => {\n      const params = sandboxNameParamsSchema.parse(request.params ?? {});\n      const sandbox = await runtimeService.getSandbox(params.name);\n\n      if (!sandbox) {\n        throw new HttpError(404, \"SANDBOX_NOT_FOUND\", `Sandbox '${params.name}' not found`);\n      }\n\n      return reply.send(ok(sandbox));\n    },\n\n    getStatus: async (request, reply) => {\n      return reply.send(ok(await runtimeService.getStatus(request.params.name)));\n    },\n\n    readFile: async (request, reply) => {\n      const body = readFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.readFile(body.sandboxName, body.path)));\n    },\n\n    writeFile: async (request, reply) => {\n      const body = writeFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.writeFile(body.sandboxName, body.path, body.content)));\n    },\n\n    listPath: async (request, reply) => {\n      const body = listPathSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.listPath(body.sandboxName, body.path, body.recursive)));\n    },\n\n    findFiles: async (request, reply) => {\n      const body = findFilesSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.findFiles(body.sandboxName, body.path, body.pattern)));\n    },\n\n    searchInFile: async (request, reply) => {\n      const body = searchInFileSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.searchInFile(body.sandboxName, body.path, body.query)));\n    },\n\n    replaceInFile: async (request, reply) => {\n      const body = replaceInFileSchema.parse(request.body ?? {});\n      return reply.send(\n        ok(\n          await runtimeService.replaceInFile(body.sandboxName, {\n            path: body.path,\n            search: body.search,\n            replace: body.replace,\n          })\n        )\n      );\n    },\n\n    uploadFile: async (request, reply) => {\n      const body = uploadFileSchema.parse(request.body ?? {});\n      const contentBase64 = \"contentBase64\" in body ? body.contentBase64 : Buffer.from(body.content).toString(\"base64\");\n      return reply.send(ok(await runtimeService.uploadFile(body.sandboxName, body.path, contentBase64)));\n    },\n\n    downloadFile: async (request, reply) => {\n      const query = downloadFileSchema.parse(request.query ?? {});\n      return reply.send(ok(await runtimeService.downloadFile(query.sandboxName, query.path)));\n    },\n\n    execCommand: async (request, reply) => {\n      const body = shellExecSchema.parse(request.body ?? {});\n      return reply.send(ok(await runtimeService.execCommand(body)));\n    },\n  };\n}\n","import type { FastifyInstance } from \"fastify\";\nimport { createSandboxController } from \"../controllers/sandbox\";\nimport type { RuntimeService } from \"../types/runtime-service\";\n\nexport function registerSandboxRoutes(\n  app: FastifyInstance,\n  runtimeService: RuntimeService\n): void {\n  const controller = createSandboxController(runtimeService);\n\n  app.get(\"/api/sandboxes\", controller.listSandboxes);\n  app.get(\"/api/sandboxes/:name\", controller.getSandbox);\n  app.put(\"/api/sandboxes/:name\", controller.ensureSandbox);\n  app.post(\"/api/sandboxes/:name/start\", controller.startSandbox);\n  app.post(\"/api/sandboxes/:name/stop\", controller.stopSandbox);\n  app.post(\"/api/sandboxes/:name/kill\", controller.killSandbox);\n  app.delete(\"/api/sandboxes/:name\", controller.deleteSandbox);\n  app.get(\"/api/sandboxes/:name/status\", controller.getStatus);\n\n  app.post(\"/api/files/read\", controller.readFile);\n  app.post(\"/api/files/write\", controller.writeFile);\n  app.post(\"/api/files/list\", controller.listPath);\n  app.post(\"/api/files/find\", controller.findFiles);\n  app.post(\"/api/files/search\", controller.searchInFile);\n  app.post(\"/api/files/replace\", controller.replaceInFile);\n  app.post(\"/api/files/upload\", controller.uploadFile);\n  app.get(\"/api/files/download\", controller.downloadFile);\n\n  app.post(\"/api/shell/exec\", controller.execCommand);\n}\n","import type { FastifyReply, FastifyRequest } from \"fastify\";\nimport fs from \"fs/promises\";\nimport os from \"os\";\nimport path from \"path\";\nimport { Volume } from \"microsandbox\";\nimport z from \"zod\";\nimport { HttpError } from \"../lib/errors\";\nimport { ok } from \"../lib/http\";\nimport {\n  volumeFsReadSchema,\n  volumeFsWriteSchema,\n  volumeFsListSchema,\n  volumeFsUploadSchema,\n  volumeFsDownloadSchema,\n} from \"../schemas/volume-fs\";\n\ninterface VolumeFsParams {\n  name: string;\n}\n\nconst MSB_DATA_DIR = path.join(os.homedir(), \".microsandbox\");\n\nasync function resolveVolumeHostPath(name: string): Promise<string> {\n  // Ensure volume exists and get its host path in one shot.\n  // Volume.create() returns a live Volume handle with .path; if the volume\n  // already exists the call may succeed (idempotent) or throw — in that case\n  // fall back to the standard data directory layout.\n  try {\n    const vol = await Volume.create({ name });\n    return vol.path;\n  } catch {\n    try {\n      await Volume.get(name);\n    } catch {\n      await Volume.create({ name });\n    }\n    // Retry after ensuring existence\n    try {\n      const vol = await Volume.create({ name });\n      return vol.path;\n    } catch {\n      return path.join(MSB_DATA_DIR, \"volumes\", name);\n    }\n  }\n}\n\nfunction resolveGuestPath(hostRoot: string, guestPath: string): string {\n  const normalized = guestPath === \"~\" ? \"\" : guestPath.replace(/^~\\//, \"\");\n  const resolved = path.join(hostRoot, path.normalize(normalized).replace(/^(\\.\\.(\\/|\\\\|$))+/, \"\"));\n  if (!resolved.startsWith(hostRoot + path.sep) && resolved !== hostRoot) {\n    throw new HttpError(403, \"PATH_TRAVERSAL\", \"Path traversal detected\");\n  }\n  return resolved;\n}\n\nexport function createVolumeFsController(): {\n  readFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  writeFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string; content: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  listPath(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  downloadFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Querystring: { path: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n  uploadFile(\n    request: FastifyRequest<{ Params: VolumeFsParams; Body: { path: string; contentBase64: string } }>,\n    reply: FastifyReply\n  ): Promise<FastifyReply>;\n} {\n  return {\n    readFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsReadSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const content = await fs.readFile(fullPath, \"utf-8\");\n        return reply.send(ok({ path: guestPath, content }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_READ_ERROR\", `Failed to read from volume '${name}': ${String(err)}`);\n      }\n    },\n\n    writeFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath, content } = volumeFsWriteSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        await fs.mkdir(path.dirname(fullPath), { recursive: true });\n        await fs.writeFile(fullPath, content, \"utf-8\");\n        return reply.send(ok({ path: guestPath }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(500, \"VOLUME_WRITE_ERROR\", `Failed to write to volume '${name}': ${String(err)}`);\n      }\n    },\n\n    listPath: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsListSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const dirents = await fs.readdir(fullPath, { withFileTypes: true });\n        const entries = dirents.map((d) => ({\n          path: guestPath ? `${guestPath}/${d.name}` : d.name,\n          kind: d.isDirectory() ? \"directory\" : d.isSymbolicLink() ? \"symlink\" : \"file\",\n          size: 0,\n          mode: 0,\n        }));\n        return reply.send(ok({ entries }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_LIST_ERROR\", `Failed to list volume '${name}': ${String(err)}`);\n      }\n    },\n\n    downloadFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath } = volumeFsDownloadSchema.parse(request.query ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        const buf = await fs.readFile(fullPath);\n        const contentBase64 = buf.toString(\"base64\");\n        return reply.send(ok({ path: guestPath, contentBase64 }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(404, \"VOLUME_DOWNLOAD_ERROR\", `Failed to download from volume '${name}': ${String(err)}`);\n      }\n    },\n\n    uploadFile: async (request, reply) => {\n      const { name } = request.params;\n\n      try {\n        const { path: guestPath, contentBase64 } = volumeFsUploadSchema.parse(request.body ?? {});\n        const hostRoot = await resolveVolumeHostPath(name);\n        const fullPath = resolveGuestPath(hostRoot, guestPath);\n        await fs.mkdir(path.dirname(fullPath), { recursive: true });\n        const data = Buffer.from(contentBase64, \"base64\");\n        await fs.writeFile(fullPath, data);\n        return reply.send(ok({ path: guestPath }));\n      } catch (err: unknown) {\n        if (err instanceof z.ZodError) {\n          throw new HttpError(400, \"VALIDATION_ERROR\", err.message);\n        }\n        if (err instanceof HttpError) throw err;\n        throw new HttpError(500, \"VOLUME_UPLOAD_ERROR\", `Failed to upload to volume '${name}': ${String(err)}`);\n      }\n    },\n  };\n}\n","import z from \"zod\";\n\nexport const volumeFsReadSchema = z.object({\n  path: z.string(),\n});\n\nexport const volumeFsWriteSchema = z.object({\n  path: z.string(),\n  content: z.string(),\n});\n\nexport const volumeFsListSchema = z.object({\n  path: z.string(),\n});\n\nexport const volumeFsUploadSchema = z.object({\n  path: z.string(),\n  contentBase64: z.string().min(1),\n});\n\nexport const volumeFsDownloadSchema = z.object({\n  path: z.string(),\n});\n","import type { FastifyInstance } from \"fastify\";\nimport { createVolumeFsController } from \"../controllers/volume-fs\";\n\nexport function registerVolumeFsRoutes(app: FastifyInstance): void {\n  const controller = createVolumeFsController();\n\n  app.post(\"/api/volumes/:name/fs/read\", controller.readFile);\n  app.post(\"/api/volumes/:name/fs/write\", controller.writeFile);\n  app.post(\"/api/volumes/:name/fs/list\", controller.listPath);\n  app.get(\"/api/volumes/:name/fs/download\", controller.downloadFile);\n  app.post(\"/api/volumes/:name/fs/upload\", controller.uploadFile);\n}\n","import { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { PullImageInput } from \"../schemas/images\";\nimport { getMsbPath } from \"../lib/msb\";\n\nconst execAsync = promisify(exec);\n\nexport type ImageRecord = {\n  ref: string;\n  sourceType: string;\n  cached: boolean;\n  size?: number;\n  createdAt?: string;\n  lastUsedAt?: string;\n};\n\ntype ImageBindings = {\n  list(): Promise<ImageRecord[]>;\n  pull(ref: string): Promise<ImageRecord>;\n  inspect(ref: string): Promise<ImageRecord>;\n  remove(ref: string): Promise<void>;\n};\n\ntype CliImageInfo = {\n  architecture: string;\n  created_at: string;\n  digest: string;\n  layer_count: number;\n  os: string;\n  reference: string;\n  size_bytes: number;\n};\n\nclass MicrosandboxImageBindings implements ImageBindings {\n  private get msb(): string {\n    return getMsbPath();\n  }\n\n  async list(): Promise<ImageRecord[]> {\n    const { stdout } = await execAsync(`${this.msb} image ls --format json`);\n    const images: CliImageInfo[] = JSON.parse(stdout);\n    return images.map((img) => ({\n      ref: img.reference,\n      sourceType: \"oci\",\n      cached: true,\n      size: img.size_bytes,\n      createdAt: img.created_at,\n    }));\n  }\n\n  async pull(ref: string): Promise<ImageRecord> {\n    await execAsync(`${this.msb} image pull ${ref}`);\n    return this.inspect(ref);\n  }\n\n  async inspect(ref: string): Promise<ImageRecord> {\n    const { stdout } = await execAsync(`${this.msb} image inspect ${ref} --format json`);\n    const img: CliImageInfo = JSON.parse(stdout);\n    return {\n      ref: img.reference,\n      sourceType: \"oci\",\n      cached: true,\n      size: img.size_bytes,\n      createdAt: img.created_at,\n    };\n  }\n\n  async remove(ref: string): Promise<void> {\n    await execAsync(`${this.msb} image rm ${ref}`);\n  }\n}\n\nexport class ImageService {\n  constructor(\n    private readonly deps: {\n      bindings?: ImageBindings;\n    } = {}\n  ) {}\n\n  private get bindings(): ImageBindings {\n    return this.deps.bindings ?? new MicrosandboxImageBindings();\n  }\n\n  async listImages(): Promise<{ items: ImageRecord[]; total: number }> {\n    const items = await this.bindings.list();\n    return { items, total: items.length };\n  }\n\n  async pullImage(input: PullImageInput): Promise<ImageRecord> {\n    return await this.bindings.pull(input.ref);\n  }\n\n  async getImage(ref: string): Promise<ImageRecord> {\n    return await this.bindings.inspect(ref);\n  }\n\n  async deleteImage(ref: string): Promise<{ ref: string }> {\n    await this.bindings.remove(ref);\n    return { ref };\n  }\n}\n","import type { FastifyInstance } from \"fastify\";\nimport swagger from \"@fastify/swagger\";\nimport swaggerUi from \"@fastify/swagger-ui\";\n\nexport const defaultSwaggerConfig = {\n  openapi: {\n    openapi: \"3.0.0\",\n    info: {\n      title: \"Microsandbox Service API\",\n      description:\n        \"Sandbox lifecycle management, file operations, shell execution, and image registry\",\n      version: \"1.0.0\",\n    },\n    servers: [\n      {\n        url: \"http://localhost:4002\",\n        description: \"Local development\",\n      },\n    ],\n    components: {\n      securitySchemes: {\n        bearerAuth: {\n          type: \"http\" as const,\n          scheme: \"bearer\" as const,\n          bearerFormat: \"API Key\",\n        },\n      },\n    },\n    tags: [\n      { name: \"Sandboxes\", description: \"Sandbox lifecycle (CRUD, start, stop, kill)\" },\n      { name: \"Files\", description: \"Read, write, list, search, upload, download files inside sandboxes\" },\n      { name: \"Shell\", description: \"Execute commands inside sandboxes\" },\n      { name: \"Images\", description: \"OCI image management (list, pull, inspect, delete)\" },\n      { name: \"Volumes\", description: \"Named volume filesystem operations\" },\n      { name: \"Health\", description: \"Service health check\" },\n    ],\n  },\n};\n\nexport const defaultSwaggerUiConfig = {\n  routePrefix: \"/api-docs\",\n  uiConfig: {\n    docExpansion: \"list\" as const,\n    deepLinking: true,\n  },\n  staticCSP: true,\n  transformStaticCSP: (header: string) => header,\n};\n\nexport async function configureSwagger(\n  app: FastifyInstance,\n  customSwaggerConfig?: Partial<typeof defaultSwaggerConfig>,\n  customSwaggerUiConfig?: Partial<typeof defaultSwaggerUiConfig>\n) {\n  const swaggerConfig = { ...defaultSwaggerConfig, ...customSwaggerConfig };\n  const swaggerUiConfig = {\n    ...defaultSwaggerUiConfig,\n    ...customSwaggerUiConfig,\n  };\n\n  await app.register(swagger, swaggerConfig);\n  await app.register(swaggerUi, swaggerUiConfig);\n}\n"],"mappings":";AAAA,SAAS,SAAS,aAAa;AAG/B,IAAM,gBAAgB,QAAQ,IAAI,sBAAsB;AAEjD,IAAM,kBAAN,MAAsB;AAAA,EAAtB;AACL,SAAQ,UAAU,oBAAI,IAAqB;AAC3C,SAAQ,WAAW,oBAAI,IAA8B;AAAA;AAAA,EAErD,MAAM,OAAO,MAAc,eAA2D;AACpF,UAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;AACpC,QAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,KAAK,SAAS,IAAI,IAAI;AACvC,QAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY;AAC5B,UAAI;AACJ,YAAM,QAAS,eAAe,SAAoB;AAClD,YAAM,OAAQ,eAAe,QAAmB;AAChD,YAAM,YAAa,eAAe,aAAwB;AAC1D,YAAM,MAAO,eAAe,OAAkC;AAE9D,UAAI;AACF,cAAM,SAAwB,MAAM,QAAQ,IAAI,IAAI;AAEpD,YAAI,OAAO,WAAW,WAAW;AAC/B,mBAAS,MAAM,OAAO,QAAQ;AAAA,QAChC,WAAW,OAAO,WAAW,WAAW;AACtC,mBAAS,MAAM,QAAQ,MAAM,IAAI;AAAA,QACnC,WAAW,OAAO,WAAW,aAAa,OAAO,WAAW,YAAY;AACtE,gBAAM,QAAQ,OAAO,IAAI;AAAA,QAC3B,OAAO;AACL,gBAAM,QAAQ,OAAO,IAAI;AAAA,QAC3B;AAAA,MACF,QAAQ;AACN,iBAAS;AAAA,MACX;AAEA,UAAI,CAAC,QAAQ;AACX,cAAM,aAAa,eAAe;AAClC,cAAM,UAAyD,CAAC;AAChE,YAAI,YAAY;AACd,qBAAW,CAAC,WAAW,GAAG,KAAK,OAAO,QAAQ,UAAU,GAAG;AACzD,kBAAM,YAAY,IAAI,WAAW,EAAE,UAAU,KAAK,IAAI;AACtD,gBAAI,IAAI,SAAS,UAAU,IAAI,QAAQ;AACrC,sBAAQ,SAAS,IAAI,MAAM,KAAK,IAAI,QAAQ,SAAS;AAAA,YACvD,WAAW,IAAI,SAAS,WAAW,IAAI,MAAM;AAC3C,sBAAQ,SAAS,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS;AAAA,YACtD,WAAW,IAAI,SAAS,SAAS;AAC/B,sBAAQ,SAAS,IAAI,MAAM,MAAM,IAAI,UAAU,EAAE,SAAS,IAAI,SAAS,GAAG,UAAU,IAAI,SAAS;AAAA,YACnG;AAAA,UACF;AAAA,QACF;AACA,YAAI;AACF,mBAAS,MAAM,QAAQ,eAAe;AAAA,YACpC;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,cAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,gBAAgB,GAAG;AAClE,kBAAM,QAAQ,OAAO,IAAI;AACzB,qBAAS,MAAM,QAAQ,eAAe;AAAA,cACpC;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YACF,CAAC;AAAA,UACH,OAAO;AACL,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,WAAK,QAAQ,IAAI,MAAM,MAAM;AAC7B,aAAO;AAAA,IACT,GAAG;AAEH,SAAK,SAAS,IAAI,MAAM,QAAQ;AAChC,SAAK,SAAS,QAAQ,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC;AAEtD,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,MAAuB;AACzB,UAAM,SAAS,KAAK,QAAQ,IAAI,IAAI;AAEpC,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,WAAW,IAAI,YAAY;AAAA,IAC7C;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,MAAoB;AACzB,SAAK,QAAQ,OAAO,IAAI;AAAA,EAC1B;AACF;;;AC3GA,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,WAAAA,UAAS,cAAc;;;ACFzB,SAAS,aAAqB;AACnC,SAAO,QAAQ,IAAI,yBAAyB,GAAG,QAAQ,IAAI,QAAQ,OAAO;AAC5E;;;ADOA,IAAM,YAAY,UAAU,IAAI;AA6BhC,SAAS,cAAc,KAAsC;AAC3D,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,QAAM,SAAiC,CAAC;AACxC,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,QAAI,KAAK,EAAG;AACZ,WAAO,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,YAAmC;AAC1D,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,WAAO;AAAA,MACL,MAAM,IAAI,QAAQ;AAAA,MAClB,OAAO,IAAI,SAAS;AAAA,MACpB,WAAW,IAAI,aAAa,IAAI;AAAA,MAChC,MAAM,IAAI;AAAA,MACV,KAAK,IAAI,OAAO,OAAO,cAAc,IAAI,GAAG,IAAI;AAAA,MAChD,SAAS,IAAI;AAAA,IACf;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,MAAM,IAAI,OAAO,GAAG;AAAA,EAC/B;AACF;AAEA,SAAS,cAAc,IAA8C;AACnE,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,cAAc,KAAM,QAAO,GAAG,YAAY;AAC9C,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAOA,SAAS,0BAA0B,QAAsC;AACvE,QAAM,OAAO,KAAK,MAAM,MAAM;AAC9B,QAAM,MAA8B,CAAC;AACrC,QAAM,SAAS,MAAM,QAAQ;AAC7B,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,eAAW,QAAQ,QAAQ;AACzB,UAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,UAAU,GAAG;AAC3C,YAAI,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAmC,CAAC;AAC1C,QAAM,YAAY,MAAM,QAAQ;AAChC,MAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,eAAW,SAAS,WAAW;AAC7B,UAAI,SAAS,OAAO,UAAU,YAAY,WAAW,OAAO;AAC1D,gBAAQ,OAAO,MAAM,KAAK,CAAC,IAAI;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,QAAQ;AACxB;AAEO,IAAM,6BAAN,MAAiC;AAAA,EACtC,YAAoB,OAAuC,CAAC,GAAG;AAA3C;AAAA,EAA4C;AAAA,EAEhE,IAAY,WAA4B;AACtC,WAAO,KAAK,KAAK,aAAa,KAAK,KAAK,WAAW,IAAI,gBAAgB;AAAA,EACzE;AAAA,EAEQ,YAAYC,OAAsB;AACxC,QAAIA,UAAS,OAAOA,UAAS,MAAM;AACjC,aAAO;AAAA,IACT;AACA,QAAIA,MAAK,WAAW,IAAI,GAAG;AACzB,aAAO,IAAIA,MAAK,MAAM,CAAC,CAAC;AAAA,IAC1B;AACA,WAAOA;AAAA,EACT;AAAA,EAEQ,WAAW,MAgBjB;AACA,UAAM,SAAS,gBAAgB,KAAK,UAAU;AAC9C,UAAM,MAAM,OAAO,OAAO,CAAC;AAC3B,UAAM,UAAU,OAAO,WAAW,CAAC;AAEnC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO,KAAK,GAAG,EAAE;AAAA,MAC3B,aAAa,OAAO,KAAK,OAAO,EAAE;AAAA,MAClC,WAAW,cAAc,KAAK,SAAS;AAAA,MACvC,WAAW,cAAc,KAAK,SAAS;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,MAAyD;AACpF,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM;AAAA,QACvB,GAAG,WAAW,CAAC,YAAY,IAAI;AAAA,QAC/B,EAAE,SAAS,IAAK;AAAA,MAClB;AACA,aAAO,0BAA0B,MAAM;AAAA,IACzC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAc,mBAAmB,SAAwD;AACvF,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,kBAAkB,OAAO,QAAQ,IAAI,iCAAiC,MAAM;AAElF,UAAM,eAAe,OAAO,OAAO,OAAO,EAAE;AAAA,MAC1C,CAAC,MAAqD,EAAE,SAAS;AAAA,IACnE;AAEA,UAAM,QAAQ;AAAA,MACZ,aAAa,IAAI,OAAO,eAAe;AACrC,YAAI;AACF,gBAAM,OAAO,IAAI,WAAW,IAAI;AAAA,QAClC,QAAQ;AACN,gBAAM,OAAO,OAAO,EAAE,MAAM,WAAW,MAAM,UAAU,gBAAgB,CAAC;AAAA,QAC1E;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,UAAU,MAA6B;AAC7C,WAAO,KAAK,SAAS,IAAI,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAc,kBAAkB,MAAsC;AACpE,QAAI;AACF,aAAO,KAAK,UAAU,IAAI;AAAA,IAC5B,QAAQ;AACN,aAAQ,MAAM,KAAK,SAAS,OAAO,IAAI;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,MACA,OAIC;AACD,UAAM,QAAQ,MAAM,SAAS,QAAQ,IAAI,sBAAsB;AAC/D,UAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,IAAI,qBAAqB,GAAG;AACtE,UAAM,YAAY,MAAM,aAAa,OAAO,QAAQ,IAAI,uBAAuB,KAAK;AAEpF,UAAM,KAAK,mBAAmB,MAAM,OAAO;AAE3C,UAAM,KAAK,SAAS,OAAO,MAAM;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK,MAAM;AAAA,MACX,SAAS,MAAM;AAAA,IACjB,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAyD;AAC1E,UAAMC,SAAQ,MAAM,IAAI;AACxB,SAAK,SAAS,OAAO,IAAI;AACzB,UAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,WAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,MAAM,YAAY,MAAyD;AACzE,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,kBAAkB,IAAI;AAChD,YAAM,OAAO,KAAK;AAClB,WAAK,SAAS,OAAO,IAAI;AACzB,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,aAAK,SAAS,OAAO,IAAI;AACzB,eAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,MAAyD;AACzE,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,kBAAkB,IAAI;AAChD,YAAM,OAAO,KAAK;AAClB,WAAK,SAAS,OAAO,IAAI;AACzB,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,GAAG;AACtE,aAAK,SAAS,OAAO,IAAI;AACzB,eAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,MAAyD;AAC3E,QAAI;AACF,YAAM,KAAK,UAAU,IAAI,EAAE,KAAK;AAAA,IAClC,QAAQ;AAAA,IAER;AAEA,SAAK,SAAS,OAAO,IAAI;AACzB,UAAMA,SAAQ,OAAO,IAAI;AAEzB,WAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,MAAM,cAAc,QAajB;AACD,UAAM,MAAqB,MAAMA,SAAQ,KAAK;AAE9C,UAAM,QAAQ,IACX;AAAA,MAAI,CAAC,SACJ,KAAK,WAAW;AAAA,QACd,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK;AAAA,QACb,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,MAClB,CAAC;AAAA,IACH,EACC,OAAO,CAAC,SAAS;AAChB,UAAI,OAAO,UAAU,KAAK,WAAW,OAAO,QAAQ;AAClD,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,SAAS,KAAK,UAAU,OAAO,OAAO;AAC/C,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,QAAQ;AACjB,cAAM,WAAW,CAAC,KAAK,MAAM,KAAK,KAAK,EACpC,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC,EACjD,KAAK,GAAG,EACR,YAAY;AAEf,YAAI,CAAC,SAAS,SAAS,OAAO,OAAO,YAAY,CAAC,GAAG;AACnD,iBAAO;AAAA,QACT;AAAA,MACF;AAEA,aAAO;AAAA,IACT,CAAC;AAEH,WAAO,EAAE,OAAO,OAAO,MAAM,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,WACJ,MAYa;AACb,QAAI;AACF,YAAM,SAAwB,MAAMA,SAAQ,IAAI,IAAI;AACpD,YAAM,SAAS,gBAAgB,OAAO,UAAU;AAEhD,YAAM,UAAU,MAAM,KAAK,eAAe,IAAI;AAC9C,YAAM,MAAM,SAAS,OAAO,OAAO,OAAO,CAAC;AAC3C,YAAM,UAAU,SAAS,WAAW,OAAO,WAAW,CAAC;AAEvD,UAAI;AAEJ,UAAI;AACF,cAAM,IAAI,MAAM,OAAO,QAAQ;AAC/B,kBAAU;AAAA,UACR,YAAY,EAAE;AAAA,UACd,aAAa,EAAE;AAAA,UACf,kBAAkB,EAAE;AAAA,UACpB,eAAe,EAAE;AAAA,UACjB,gBAAgB,EAAE;AAAA,UAClB,YAAY,EAAE;AAAA,UACd,YAAY,EAAE;AAAA,UACd,UAAU,EAAE;AAAA,UACZ,aAAa,EAAE;AAAA,QACjB;AAAA,MACF,QAAQ;AACN,kBAAU;AAAA,MACZ;AAEA,aAAO;AAAA,QACL,MAAM,OAAO;AAAA,QACb,QAAQ,OAAO;AAAA,QACf,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,WAAW,OAAO;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,cAAc,OAAO,SAAS;AAAA,QACzC,WAAW,cAAc,OAAO,SAAS;AAAA,MAC3C;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,MAAyD;AACvE,QAAI;AACF,YAAM,SAAwB,MAAMA,SAAQ,IAAI,IAAI;AACpD,aAAO,EAAE,MAAM,QAAQ,OAAO,OAAO;AAAA,IACvC,QAAQ;AACN,aAAO,EAAE,MAAM,QAAQ,UAAU;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,aAAqBD,OAA0D;AAC5F,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,UAAU,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,WAAW,YAAY;AAC9E,WAAO,EAAE,MAAM,cAAc,QAAQ;AAAA,EACvC;AAAA,EAEA,MAAM,UAAU,aAAqBA,OAAc,SAA4C;AAC7F,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,MAAM,cAAc,OAAO,KAAK,OAAO,CAAC;AAC/E,WAAO,EAAE,MAAM,aAAa;AAAA,EAC9B;AAAA,EAEA,MAAM,SACJ,aACAA,OACA,WAC6D;AAC7D,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,UAAU,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,KAAK,YAAY;AACxE,WAAO;AAAA,MACL,SAAS,QAAQ,IAAI,CAAC,WAAW;AAAA,QAC/B,MAAM,MAAM;AAAA,QACZ,MAAM,MAAM;AAAA,MACd,EAAE;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,aAAqBA,OAAc,SAA+C;AAChG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAE1C,UAAM,YAAY,QAAQ,SAAS,GAAG,IAAI,UAAU;AACpD,UAAM,SAAS,MAAM,KAAK,UAAU,WAAW,EAAE,eAAe;AAAA,MAC9D,KAAK;AAAA,MACL,MAAM,CAAC,cAAc,WAAW,SAAS,SAAS,GAAG;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,OAAO,OAAO,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEA,MAAM,aACJ,aACAA,OACA,OACgE;AAChE,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,QAAI;AAEJ,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,UAAU,WAAW,EAAE,eAAe;AAAA,QAC9D,KAAK;AAAA,QACL,MAAM,CAAC,MAAM,MAAM,OAAO,YAAY;AAAA,MACxC,CAAC;AACD,eAAS,OAAO,OAAO;AAAA,IACzB,SAAS,OAAO;AACd,UAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAS,MAAM,SAAS,GAAG;AACtF,eAAO,EAAE,SAAS,CAAC,EAAE;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,SAAS,OACN,MAAM,IAAI,EACV,OAAO,OAAO,EACd,IAAI,CAAC,SAAS;AACb,cAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,eAAO;AAAA,UACL,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;AAAA,UACrC,SAAS,KAAK,MAAM,YAAY,CAAC;AAAA,QACnC;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,aACA,OAC+B;AAC/B,UAAM,eAAe,KAAK,YAAY,MAAM,IAAI;AAChD,UAAME,MAAK,KAAK,UAAU,WAAW,EAAE,GAAG;AAC1C,UAAM,WAAW,MAAMA,IAAG,WAAW,YAAY;AAEjD,QAAI,CAAC,MAAM,QAAQ;AACjB,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,UAAM,cAAc,SAAS,MAAM,MAAM,MAAM,EAAE,SAAS;AAC1D,QAAI,gBAAgB,GAAG;AACrB,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,UAAM,UAAU,SAAS,MAAM,MAAM,MAAM,EAAE,KAAK,MAAM,OAAO;AAC/D,UAAMA,IAAG,MAAM,cAAc,OAAO,KAAK,OAAO,CAAC;AAEjD,WAAO,EAAE,UAAU,YAAY;AAAA,EACjC;AAAA,EAEA,MAAM,WAAW,aAAqBF,OAAc,eAAkD;AACpG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,MAAM,cAAc,OAAO,KAAK,eAAe,QAAQ,CAAC;AAC/F,WAAO,EAAE,MAAM,aAAa;AAAA,EAC9B;AAAA,EAEA,MAAM,aAAa,aAAqBA,OAAgE;AACtG,UAAM,eAAe,KAAK,YAAYA,KAAI;AAC1C,UAAM,OAAO,MAAM,KAAK,UAAU,WAAW,EAAE,GAAG,EAAE,KAAK,YAAY;AACrE,UAAM,SAAS,OAAO,SAAS,IAAI,IAAI,OAAO,OAAO,KAAK,IAAI;AAC9D,WAAO,EAAE,MAAM,cAAc,eAAe,OAAO,SAAS,QAAQ,EAAE;AAAA,EACxE;AAAA,EAEA,MAAM,YAAY,OAAsF;AACtG,UAAM,SAAS,MAAM,KAAK,UAAU,MAAM,WAAW,EAAE,eAAe;AAAA,MACpE,KAAK;AAAA,MACL,MAAM,CAAC,MAAM,MAAM,OAAO;AAAA,MAC1B,KAAK,MAAM;AAAA,MACX,WAAW,MAAM,UAAU,MAAM,UAAU,MAAO;AAAA,IACpD,CAAC;AAED,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO;AAAA,MACtB,QAAQ,OAAO,OAAO;AAAA,MACtB,UAAU,OAAO,QAAQ;AAAA,IAC3B;AAAA,EACF;AACF;;;AEvgBA,OAAO,UAAU;AACjB,OAAO,eAAe;AACtB,OAAO,cAAc;AACrB,OAAO,aAAuC;;;ACHvC,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACS,YACA,MACP,SACA;AACA,UAAM,OAAO;AAJN;AACA;AAAA,EAIT;AACF;AAEO,SAAS,gBAAgB,OAS9B;AACA,MAAI,iBAAiB,WAAW;AAC9B,WAAO;AAAA,MACL,YAAY,MAAM;AAAA,MAClB,MAAM;AAAA,QACJ,SAAS;AAAA,QACT,OAAO;AAAA,UACL,MAAM,MAAM;AAAA,UACZ,SAAS,MAAM;AAAA,QACjB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACF;;;ACtCO,SAAS,GAAM,MAA6B;AACjD,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,EACF;AACF;;;ACPO,SAAS,qBAAqB,KAA4B;AAC/D,MAAI,IAAI,WAAW,YAAY,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AACrD;;;ACJA,SAAS,gBAAgB;;;ACDzB,OAAO,OAAO;AAEP,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AACvB,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AACvB,CAAC;;;ADDD,SAAS,aAAgB,OAAmB;AAC1C,MAAI;AACF,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,QAAI,iBAAiB,UAAU;AAC7B,YAAM,IAAI,UAAU,KAAK,mBAAmB,MAAM,OAAO,CAAC,GAAG,WAAW,iBAAiB;AAAA,IAC3F;AAEA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,sBAAsB,cAA4B;AAChE,SAAO;AAAA,IACL,YAAY,OAAO,UAA0B,UAAwB;AACnE,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,WAAW,CAAC,CAAC;AAAA,IACvD;AAAA,IACA,WAAW,OAAO,SAA4C,UAAwB;AACpF,YAAM,OAAO,aAAa,MAAM,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC;AACzE,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,UAAU,IAAI,CAAC,CAAC;AAAA,IAC1D;AAAA,IACA,UAAU,OAAO,SAAmD,UAAwB;AAC1F,YAAM,QAAQ,aAAa,MAAM,oBAAoB,MAAM,QAAQ,SAAS,CAAC,CAAC,CAAC;AAC/E,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,IAC9D;AAAA,IACA,aAAa,OAAO,SAAmD,UAAwB;AAC7F,YAAM,QAAQ,aAAa,MAAM,oBAAoB,MAAM,QAAQ,SAAS,CAAC,CAAC,CAAC;AAC/E,aAAO,MAAM,KAAK,GAAG,MAAM,aAAa,YAAY,MAAM,GAAG,CAAC,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;AEjCO,SAAS,oBAAoB,KAAsB,cAAkC;AAC1F,QAAM,aAAa,sBAAsB,YAAY;AAErD,MAAI,IAAI,eAAe,WAAW,UAAU;AAC5C,MAAI,KAAK,oBAAoB,WAAW,SAAS;AACjD,MAAI,IAAI,sBAAsB,WAAW,QAAQ;AACjD,MAAI,OAAO,sBAAsB,WAAW,WAAW;AACzD;;;ACXA,OAAOG,QAAO;AAEd,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EAC/B,MAAMA,GAAE,QAAQ,MAAM;AAAA,EACtB,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,UAAUA,GAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAED,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EAChC,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,UAAUA,GAAE,QAAQ,EAAE,SAAS;AACjC,CAAC;AAED,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EAChC,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,SAASA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAChD,CAAC;AAEM,IAAM,eAAeA,GAAE,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAMA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,KAAKA,GAAE,OAAOA,GAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACnC,SAASA,GAAE,OAAO,YAAY,EAAE,SAAS;AAC3C,CAAC;AAEM,IAAM,0BAA0BA,GAAE,OAAO;AAAA,EAC9C,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,QAAQA,GAAE,KAAK,CAAC,WAAW,WAAW,WAAW,SAAS,CAAC,EAAE,SAAS;AAAA,EACtE,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAClC,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC;AAED,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EACpC,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,IAAM,iBAAiB;AAEvB,IAAM,kBAAkB,qBAAqB,OAAO;AAAA,EACzD,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,iBAAiB,qBAAqB,OAAO;AAAA,EACxD,WAAWA,GAAE,QAAQ,EAAE,SAAS;AAClC,CAAC;AAEM,IAAM,kBAAkB,qBAAqB,OAAO;AAAA,EACzD,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAEM,IAAM,qBAAqB,qBAAqB,OAAO;AAAA,EAC5D,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AACzB,CAAC;AAEM,IAAM,sBAAsB,qBAAqB,OAAO;AAAA,EAC7D,QAAQA,GAAE,OAAO;AAAA,EACjB,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,mBAAmB,qBAAqB;AAAA,EACnDA,GAAE,MAAM;AAAA,IACNA,GAAE,OAAO,EAAE,eAAeA,GAAE,OAAO,EAAE,CAAC;AAAA,IACtCA,GAAE,OAAO,EAAE,SAASA,GAAE,OAAO,EAAE,UAAU,CAAC,YAAY,OAAO,KAAK,OAAO,EAAE,SAAS,QAAQ,CAAC,EAAE,CAAC;AAAA,EAClG,CAAC;AACH;AAEO,IAAM,qBAAqB;AAE3B,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EACtC,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAASA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAChD,CAAC;;;AClEM,SAAS,wBAAwB,gBA6CtC;AACA,SAAO;AAAA,IACL,eAAe,OACb,SACA,UACG;AACH,YAAM,OAAO,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACzD,YAAM,SAAS,MAAM,eAAe,cAAc,QAAQ,OAAO,MAAM,IAAI;AAC3E,aAAO,MAAM,KAAK,GAAG,MAAM,CAAC;AAAA,IAC9B;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC9E;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC7E;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC7E;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,cAAc,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC/E;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,YAAM,QAAQ,yBAAyB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAChE,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,cAAc,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,SAAS,wBAAwB,MAAM,QAAQ,UAAU,CAAC,CAAC;AACjE,YAAM,UAAU,MAAM,eAAe,WAAW,OAAO,IAAI;AAE3D,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,UAAU,KAAK,qBAAqB,YAAY,OAAO,IAAI,aAAa;AAAA,MACpF;AAEA,aAAO,MAAM,KAAK,GAAG,OAAO,CAAC;AAAA,IAC/B;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,IAC3E;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,OAAO,eAAe,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACpD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,SAAS,KAAK,aAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IAClF;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,KAAK,aAAa,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IACjG;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,OAAO,eAAe,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACpD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,SAAS,KAAK,aAAa,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IAClG;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,UAAU,KAAK,aAAa,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IACjG;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,OAAO,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACxD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,KAAK,aAAa,KAAK,MAAM,KAAK,KAAK,CAAC,CAAC;AAAA,IAClG;AAAA,IAEA,eAAe,OAAO,SAAS,UAAU;AACvC,YAAM,OAAO,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACzD,aAAO,MAAM;AAAA,QACX;AAAA,UACE,MAAM,eAAe,cAAc,KAAK,aAAa;AAAA,YACnD,MAAM,KAAK;AAAA,YACX,QAAQ,KAAK;AAAA,YACb,SAAS,KAAK;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,OAAO,iBAAiB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACtD,YAAM,gBAAgB,mBAAmB,OAAO,KAAK,gBAAgB,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AAChH,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,WAAW,KAAK,aAAa,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,IACnG;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,QAAQ,mBAAmB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAC1D,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,aAAa,MAAM,aAAa,MAAM,IAAI,CAAC,CAAC;AAAA,IACxF;AAAA,IAEA,aAAa,OAAO,SAAS,UAAU;AACrC,YAAM,OAAO,gBAAgB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACrD,aAAO,MAAM,KAAK,GAAG,MAAM,eAAe,YAAY,IAAI,CAAC,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;;;ACjKO,SAAS,sBACd,KACA,gBACM;AACN,QAAM,aAAa,wBAAwB,cAAc;AAEzD,MAAI,IAAI,kBAAkB,WAAW,aAAa;AAClD,MAAI,IAAI,wBAAwB,WAAW,UAAU;AACrD,MAAI,IAAI,wBAAwB,WAAW,aAAa;AACxD,MAAI,KAAK,8BAA8B,WAAW,YAAY;AAC9D,MAAI,KAAK,6BAA6B,WAAW,WAAW;AAC5D,MAAI,KAAK,6BAA6B,WAAW,WAAW;AAC5D,MAAI,OAAO,wBAAwB,WAAW,aAAa;AAC3D,MAAI,IAAI,+BAA+B,WAAW,SAAS;AAE3D,MAAI,KAAK,mBAAmB,WAAW,QAAQ;AAC/C,MAAI,KAAK,oBAAoB,WAAW,SAAS;AACjD,MAAI,KAAK,mBAAmB,WAAW,QAAQ;AAC/C,MAAI,KAAK,mBAAmB,WAAW,SAAS;AAChD,MAAI,KAAK,qBAAqB,WAAW,YAAY;AACrD,MAAI,KAAK,sBAAsB,WAAW,aAAa;AACvD,MAAI,KAAK,qBAAqB,WAAW,UAAU;AACnD,MAAI,IAAI,uBAAuB,WAAW,YAAY;AAEtD,MAAI,KAAK,mBAAmB,WAAW,WAAW;AACpD;;;AC5BA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,UAAAC,eAAc;AACvB,OAAOC,QAAO;;;ACLd,OAAOC,QAAO;AAEP,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,MAAMA,GAAE,OAAO;AAAA,EACf,SAASA,GAAE,OAAO;AACpB,CAAC;AAEM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAMA,GAAE,OAAO;AAAA,EACf,eAAeA,GAAE,OAAO,EAAE,IAAI,CAAC;AACjC,CAAC;AAEM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,MAAMA,GAAE,OAAO;AACjB,CAAC;;;ADFD,IAAM,eAAe,KAAK,KAAK,GAAG,QAAQ,GAAG,eAAe;AAE5D,eAAe,sBAAsB,MAA+B;AAKlE,MAAI;AACF,UAAM,MAAM,MAAMC,QAAO,OAAO,EAAE,KAAK,CAAC;AACxC,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,QAAI;AACF,YAAMA,QAAO,IAAI,IAAI;AAAA,IACvB,QAAQ;AACN,YAAMA,QAAO,OAAO,EAAE,KAAK,CAAC;AAAA,IAC9B;AAEA,QAAI;AACF,YAAM,MAAM,MAAMA,QAAO,OAAO,EAAE,KAAK,CAAC;AACxC,aAAO,IAAI;AAAA,IACb,QAAQ;AACN,aAAO,KAAK,KAAK,cAAc,WAAW,IAAI;AAAA,IAChD;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,UAAkB,WAA2B;AACrE,QAAM,aAAa,cAAc,MAAM,KAAK,UAAU,QAAQ,QAAQ,EAAE;AACxE,QAAM,WAAW,KAAK,KAAK,UAAU,KAAK,UAAU,UAAU,EAAE,QAAQ,qBAAqB,EAAE,CAAC;AAChG,MAAI,CAAC,SAAS,WAAW,WAAW,KAAK,GAAG,KAAK,aAAa,UAAU;AACtE,UAAM,IAAI,UAAU,KAAK,kBAAkB,yBAAyB;AAAA,EACtE;AACA,SAAO;AACT;AAEO,SAAS,2BAqBd;AACA,SAAO;AAAA,IACL,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACvE,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,UAAU,MAAM,GAAG,SAAS,UAAU,OAAO;AACnD,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,WAAW,QAAQ,CAAC,CAAC;AAAA,MACpD,SAAS,KAAc;AACrB,YAAI,eAAeC,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,qBAAqB,+BAA+B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,IAEA,WAAW,OAAO,SAAS,UAAU;AACnC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,WAAW,QAAQ,IAAI,oBAAoB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACjF,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,cAAM,GAAG,UAAU,UAAU,SAAS,OAAO;AAC7C,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3C,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,sBAAsB,8BAA8B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,IAEA,UAAU,OAAO,SAAS,UAAU;AAClC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,mBAAmB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACvE,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,UAAU,MAAM,GAAG,QAAQ,UAAU,EAAE,eAAe,KAAK,CAAC;AAClE,cAAM,UAAU,QAAQ,IAAI,CAAC,OAAO;AAAA,UAClC,MAAM,YAAY,GAAG,SAAS,IAAI,EAAE,IAAI,KAAK,EAAE;AAAA,UAC/C,MAAM,EAAE,YAAY,IAAI,cAAc,EAAE,eAAe,IAAI,YAAY;AAAA,UACvE,MAAM;AAAA,UACN,MAAM;AAAA,QACR,EAAE;AACF,eAAO,MAAM,KAAK,GAAG,EAAE,QAAQ,CAAC,CAAC;AAAA,MACnC,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,qBAAqB,0BAA0B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACjG;AAAA,IACF;AAAA,IAEA,cAAc,OAAO,SAAS,UAAU;AACtC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,UAAU,IAAI,uBAAuB,MAAM,QAAQ,SAAS,CAAC,CAAC;AAC5E,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,MAAM,MAAM,GAAG,SAAS,QAAQ;AACtC,cAAM,gBAAgB,IAAI,SAAS,QAAQ;AAC3C,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,WAAW,cAAc,CAAC,CAAC;AAAA,MAC1D,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,yBAAyB,mCAAmC,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MAC9G;AAAA,IACF;AAAA,IAEA,YAAY,OAAO,SAAS,UAAU;AACpC,YAAM,EAAE,KAAK,IAAI,QAAQ;AAEzB,UAAI;AACF,cAAM,EAAE,MAAM,WAAW,cAAc,IAAI,qBAAqB,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACxF,cAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,cAAM,WAAW,iBAAiB,UAAU,SAAS;AACrD,cAAM,GAAG,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,cAAM,OAAO,OAAO,KAAK,eAAe,QAAQ;AAChD,cAAM,GAAG,UAAU,UAAU,IAAI;AACjC,eAAO,MAAM,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3C,SAAS,KAAc;AACrB,YAAI,eAAeA,GAAE,UAAU;AAC7B,gBAAM,IAAI,UAAU,KAAK,oBAAoB,IAAI,OAAO;AAAA,QAC1D;AACA,YAAI,eAAe,UAAW,OAAM;AACpC,cAAM,IAAI,UAAU,KAAK,uBAAuB,+BAA+B,IAAI,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;;;AE/KO,SAAS,uBAAuB,KAA4B;AACjE,QAAM,aAAa,yBAAyB;AAE5C,MAAI,KAAK,8BAA8B,WAAW,QAAQ;AAC1D,MAAI,KAAK,+BAA+B,WAAW,SAAS;AAC5D,MAAI,KAAK,8BAA8B,WAAW,QAAQ;AAC1D,MAAI,IAAI,kCAAkC,WAAW,YAAY;AACjE,MAAI,KAAK,gCAAgC,WAAW,UAAU;AAChE;;;ACXA,SAAS,QAAAC,aAAY;AACrB,SAAS,aAAAC,kBAAiB;AAI1B,IAAMC,aAAYC,WAAUC,KAAI;AA4BhC,IAAM,4BAAN,MAAyD;AAAA,EACvD,IAAY,MAAc;AACxB,WAAO,WAAW;AAAA,EACpB;AAAA,EAEA,MAAM,OAA+B;AACnC,UAAM,EAAE,OAAO,IAAI,MAAMF,WAAU,GAAG,KAAK,GAAG,yBAAyB;AACvE,UAAM,SAAyB,KAAK,MAAM,MAAM;AAChD,WAAO,OAAO,IAAI,CAAC,SAAS;AAAA,MAC1B,KAAK,IAAI;AAAA,MACT,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,MAAM,IAAI;AAAA,MACV,WAAW,IAAI;AAAA,IACjB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,UAAMA,WAAU,GAAG,KAAK,GAAG,eAAe,GAAG,EAAE;AAC/C,WAAO,KAAK,QAAQ,GAAG;AAAA,EACzB;AAAA,EAEA,MAAM,QAAQ,KAAmC;AAC/C,UAAM,EAAE,OAAO,IAAI,MAAMA,WAAU,GAAG,KAAK,GAAG,kBAAkB,GAAG,gBAAgB;AACnF,UAAM,MAAoB,KAAK,MAAM,MAAM;AAC3C,WAAO;AAAA,MACL,KAAK,IAAI;AAAA,MACT,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,MAAM,IAAI;AAAA,MACV,WAAW,IAAI;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAA4B;AACvC,UAAMA,WAAU,GAAG,KAAK,GAAG,aAAa,GAAG,EAAE;AAAA,EAC/C;AACF;AAEO,IAAM,eAAN,MAAmB;AAAA,EACxB,YACmB,OAEb,CAAC,GACL;AAHiB;AAAA,EAGhB;AAAA,EAEH,IAAY,WAA0B;AACpC,WAAO,KAAK,KAAK,YAAY,IAAI,0BAA0B;AAAA,EAC7D;AAAA,EAEA,MAAM,aAA+D;AACnE,UAAM,QAAQ,MAAM,KAAK,SAAS,KAAK;AACvC,WAAO,EAAE,OAAO,OAAO,MAAM,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,UAAU,OAA6C;AAC3D,WAAO,MAAM,KAAK,SAAS,KAAK,MAAM,GAAG;AAAA,EAC3C;AAAA,EAEA,MAAM,SAAS,KAAmC;AAChD,WAAO,MAAM,KAAK,SAAS,QAAQ,GAAG;AAAA,EACxC;AAAA,EAEA,MAAM,YAAY,KAAuC;AACvD,UAAM,KAAK,SAAS,OAAO,GAAG;AAC9B,WAAO,EAAE,IAAI;AAAA,EACf;AACF;;;ACnGA,OAAO,aAAa;AACpB,OAAO,eAAe;AAEf,IAAM,uBAAuB;AAAA,EAClC,SAAS;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,KAAK;AAAA,QACL,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,iBAAiB;AAAA,QACf,YAAY;AAAA,UACV,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,cAAc;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,EAAE,MAAM,aAAa,aAAa,8CAA8C;AAAA,MAChF,EAAE,MAAM,SAAS,aAAa,qEAAqE;AAAA,MACnG,EAAE,MAAM,SAAS,aAAa,oCAAoC;AAAA,MAClE,EAAE,MAAM,UAAU,aAAa,qDAAqD;AAAA,MACpF,EAAE,MAAM,WAAW,aAAa,qCAAqC;AAAA,MACrE,EAAE,MAAM,UAAU,aAAa,uBAAuB;AAAA,IACxD;AAAA,EACF;AACF;AAEO,IAAM,yBAAyB;AAAA,EACpC,aAAa;AAAA,EACb,UAAU;AAAA,IACR,cAAc;AAAA,IACd,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,EACX,oBAAoB,CAAC,WAAmB;AAC1C;AAEA,eAAsB,iBACpB,KACA,qBACA,uBACA;AACA,QAAM,gBAAgB,EAAE,GAAG,sBAAsB,GAAG,oBAAoB;AACxE,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH,GAAG;AAAA,EACL;AAEA,QAAM,IAAI,SAAS,SAAS,aAAa;AACzC,QAAM,IAAI,SAAS,WAAW,eAAe;AAC/C;;;AdhDA,eAAsB,SAAS;AAAA,EAC7B,iBAAiB,IAAI,2BAA2B;AAAA,EAChD,eAAe,IAAI,aAAa;AAAA,EAChC;AACF,IAII,CAAC,GAA6B;AAChC,QAAM,MAAM,QAAQ;AAAA,IAClB,QAAQ;AAAA,IACR,WAAW,OAAO,QAAQ,IAAI,UAAU,KAAK,MAAM,OAAO;AAAA,EAC5D,CAAC;AAED,MAAI,SAAS,MAAM;AAAA,IACjB,WAAW,CAAC,SAAS,aAAa;AAChC,eAAS,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS,QAAQ,QAAQ,+BAA+B,KAAK;AAAA,QAC7D,gBAAgB,QAAQ,QAAQ,gCAAgC;AAAA,MAClE,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,MAAI,SAAS,QAAQ;AACrB,MAAI,SAAS,SAAS;AAEtB,MAAI,QAAQ;AACV,QAAI,QAAQ,aAAa,OAAO,SAAS,UAAU;AACjD,UAAI,QAAQ,WAAW,aAAa,CAAC,QAAQ,IAAI,WAAW,OAAO,GAAG;AACpE;AAAA,MACF;AAEA,UAAI,QAAQ,QAAQ,kBAAkB,UAAU,MAAM,IAAI;AACxD,cAAM,MAAM,KAAK,GAAG,EAAE,KAAK;AAAA,UACzB,SAAS;AAAA,UACT,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH;AAEA,uBAAqB,GAAG;AACxB,wBAAsB,KAAK,cAAc;AACzC,sBAAoB,KAAK,YAAY;AACrC,yBAAuB,GAAG;AAE1B,MAAI,gBAAgB,CAAC,OAAO,UAAU,UAAU;AAC9C,UAAM,EAAE,YAAY,KAAK,IAAI,gBAAgB,KAAK;AAClD,UAAM,OAAO,UAAU,EAAE,KAAK,IAAI;AAAA,EACpC,CAAC;AAED,QAAM,iBAAiB,GAAG;AAE1B,SAAO;AACT;","names":["Sandbox","path","Sandbox","fs","z","Volume","z","z","Volume","z","exec","promisify","execAsync","promisify","exec"]}