@bunny-agent/sandbox-srt 0.9.52-beta.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/__tests__/srt-sandbox.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=srt-sandbox.test.d.ts.map

package/dist/__tests__/srt-sandbox.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"srt-sandbox.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/srt-sandbox.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/srt-sandbox.test.js

@@ -0,0 +1,264 @@
+import { execFileSync, execSync } from "node:child_process";
+import * as fs from "node:fs/promises";
+import * as os from "node:os";
+import * as path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { buildInstallHint, SrtSandbox } from "../srt-sandbox.js";
+/**
+ * These are real isolation tests: they execute commands through the actual
+ * srt wrapper (bubblewrap on Linux, Seatbelt on macOS). They are skipped on
+ * hosts where the platform sandboxing primitive is unavailable (e.g. Linux
+ * without bubblewrap installed, CI containers without user namespaces).
+ */
+const sandboxingAvailable = (() => {
+    if (process.platform === "darwin") {
+        return true; // sandbox-exec ships with macOS
+    }
+    if (process.platform === "linux") {
+        try {
+            // srt needs bwrap (with permission to create user namespaces — on
+            // Ubuntu 24.04+ that requires an AppArmor profile or
+            // kernel.apparmor_restrict_unprivileged_userns=0), socat for its
+            // network proxy bridge, and ripgrep.
+            execFileSync("bwrap", ["--ro-bind", "/", "/", "true"], {
+                stdio: "ignore",
+                timeout: 10000,
+            });
+            execFileSync("socat", ["-V"], { stdio: "ignore", timeout: 10000 });
+            execFileSync("rg", ["--version"], { stdio: "ignore", timeout: 10000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    return false;
+})();
+/** Run a shell script through the sandbox's primary exec() path. exec()
+ *  throws on non-zero exit, which is exactly the signal these tests assert. */
+async function run(handle, script) {
+    const chunks = [];
+    try {
+        for await (const chunk of handle.exec(["sh", "-c", script])) {
+            chunks.push(new TextDecoder().decode(chunk));
+        }
+        return { ok: true, output: chunks.join("") };
+    }
+    catch {
+        return { ok: false, output: chunks.join("") };
+    }
+}
+describe.skipIf(!sandboxingAvailable)("SrtSandbox (real isolation)", () => {
+    let workdir;
+    let outsideDir;
+    beforeEach(async () => {
+        workdir = await fs.mkdtemp(path.join(os.tmpdir(), "srt-sandbox-wd-"));
+        // A directory the policy does NOT allow writes to. It must live outside
+        // the OS temp dir (which SrtSandbox always allows) — and the repo itself
+        // can sit under the temp dir (e.g. a /tmp git worktree), so anchor to
+        // the user's home rather than process.cwd(). Removed in afterEach.
+        outsideDir = await fs.mkdtemp(path.join(os.homedir(), ".srt-test-outside-"));
+    });
+    afterEach(async () => {
+        await fs.rm(workdir, { recursive: true, force: true }).catch(() => { });
+        await fs.rm(outsideDir, { recursive: true, force: true }).catch(() => { });
+    });
+    it("runs commands and allows writes inside the workdir", async () => {
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        const result = await run(handle, "echo sandboxed-ok > inside.txt && cat inside.txt");
+        expect(result.ok).toBe(true);
+        expect(result.output).toContain("sandboxed-ok");
+        // The write really landed on the host filesystem.
+        const content = await fs.readFile(path.join(workdir, "inside.txt"), "utf8");
+        expect(content).toContain("sandboxed-ok");
+    }, 120000);
+    it("denies writes outside the allowed paths", async () => {
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        const target = path.join(outsideDir, "escape.txt");
+        const result = await run(handle, `touch ${target}`);
+        expect(result.ok).toBe(false);
+        await expect(fs.access(target)).rejects.toThrow();
+    }, 120000);
+    it("denies reads of paths listed in denyRead", async () => {
+        const secretDir = path.join(outsideDir, "secrets");
+        await fs.mkdir(secretDir, { recursive: true });
+        await fs.writeFile(path.join(secretDir, "key.txt"), "top-secret");
+        const sandbox = new SrtSandbox({
+            workdir,
+            isolation: { denyRead: [secretDir] },
+        });
+        const handle = await sandbox.attach();
+        const result = await run(handle, `cat ${secretDir}/key.txt`);
+        expect(result.ok).toBe(false);
+        expect(result.output).not.toContain("top-secret");
+    }, 120000);
+    it("blocks network access by default", async () => {
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        // 5s timeout so a (wrongly) reachable network still fails fast.
+        const result = await run(handle, "curl -sS --max-time 5 https://example.com");
+        expect(result.ok).toBe(false);
+    }, 120000);
+    it("sandboxed process cannot rewrite its own policy file", async () => {
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        // Locate the generated settings file via the wrapper command itself:
+        // it is passed as `--settings <path>` and lives under an srt-sandbox-*
+        // temp dir that the policy denies writes to.
+        const probe = await run(handle, "echo policy-probe");
+        expect(probe.ok).toBe(true);
+        const dirs = await fs.readdir(os.tmpdir());
+        const policyDirs = dirs.filter((d) => d.startsWith("srt-sandbox-"));
+        expect(policyDirs.length).toBeGreaterThan(0);
+        let deniedSomewhere = false;
+        for (const dir of policyDirs) {
+            const settingsPath = path.join(os.tmpdir(), dir, "srt-settings.json");
+            const result = await run(handle, `echo '{}' > ${settingsPath}`);
+            if (!result.ok) {
+                deniedSomewhere = true;
+            }
+        }
+        expect(deniedSomewhere).toBe(true);
+    }, 120000);
+    it("abort/timeout leaves no orphaned grandchild process (PID namespace)", async () => {
+        // LocalMachine (no isolation) needs its own process-group kill logic to
+        // catch backgrounded grandchildren on abort/timeout (see
+        // sandbox-local's local-machine.test.ts). SrtSandbox doesn't need that
+        // extra mechanism: srt passes bwrap `--unshare-pid`, so the kernel tears
+        // down every process in that PID namespace the moment its init process
+        // dies — this test locks that guarantee in so a future srt/bwrap flag
+        // change can't silently regress it.
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        const marker = `srt-orphan-test-${process.pid}-${Date.now()}`;
+        const controller = new AbortController();
+        const consume = (async () => {
+            try {
+                for await (const chunk of handle.exec([
+                    "bash",
+                    "-c",
+                    `(exec -a ${marker} sleep 60) & echo started; sleep 60`,
+                ], { signal: controller.signal })) {
+                    void chunk;
+                }
+            }
+            catch {
+                // Expected: exec() rejects once aborted.
+            }
+        })();
+        await new Promise((r) => setTimeout(r, 3000));
+        controller.abort();
+        await consume;
+        await new Promise((r) => setTimeout(r, 3000));
+        let survived = false;
+        try {
+            execSync(`pgrep -f -x "${marker} 60"`, { stdio: "ignore" });
+            survived = true;
+        }
+        catch {
+            survived = false; // pgrep exits non-zero when nothing matches
+        }
+        expect(survived).toBe(false);
+    }, 120000);
+    it("destroy() removes the generated srt-settings temp directory", async () => {
+        // Regression: ensureSettingsFile() mkdtemp's a `srt-sandbox-*` dir under
+        // the OS temp dir for the generated policy file, but nothing removed it
+        // — every SrtSandbox instance that ran a command leaked one directory
+        // for the life of the host. Confirmed for real: a debugging session
+        // running this suite repeatedly had accumulated 80+ leaked directories
+        // in /tmp before this fix.
+        const before = new Set((await fs.readdir(os.tmpdir())).filter((d) => d.startsWith("srt-sandbox-")));
+        const sandbox = new SrtSandbox({ workdir });
+        const handle = await sandbox.attach();
+        const result = await run(handle, "echo hi");
+        expect(result.ok).toBe(true);
+        const afterRun = new Set((await fs.readdir(os.tmpdir())).filter((d) => d.startsWith("srt-sandbox-")));
+        const created = [...afterRun].filter((d) => !before.has(d));
+        expect(created.length).toBeGreaterThan(0);
+        await handle.destroy();
+        const afterDestroy = new Set((await fs.readdir(os.tmpdir())).filter((d) => d.startsWith("srt-sandbox-")));
+        for (const dir of created) {
+            expect(afterDestroy.has(dir)).toBe(false);
+        }
+    }, 120000);
+});
+describe("buildInstallHint", () => {
+    it("suggests installing all dependencies named in srt's message", () => {
+        const hint = buildInstallHint("Sandbox dependencies not available: ripgrep (rg) not found, bubblewrap (bwrap) not installed, socat not installed");
+        expect(hint).toContain("apt-get install -y ripgrep bubblewrap socat");
+        expect(hint).toContain("brew install ripgrep socat");
+        expect(hint).toContain("userns");
+    });
+    it("only mentions what the message actually names as missing", () => {
+        const hint = buildInstallHint("Sandbox dependencies not available: socat not installed");
+        expect(hint).toContain("apt-get install -y socat");
+        expect(hint).not.toContain("ripgrep");
+        expect(hint).not.toContain("bubblewrap");
+    });
+    it("returns an empty string for a message naming no known dependency", () => {
+        expect(buildInstallHint("some unrelated failure")).toBe("");
+    });
+});
+/**
+ * Preflight-check tests use a fake `srtCommand` (a tiny throwaway script)
+ * instead of the real srt/bwrap wrapper, so they exercise attach()'s
+ * fail-fast behavior deterministically on any platform/CI environment —
+ * unlike the "real isolation" suite above, they don't need bubblewrap,
+ * socat, or ripgrep actually installed.
+ */
+describe("SrtSandbox preflight check (fake wrapper)", () => {
+    let workdir;
+    beforeEach(async () => {
+        workdir = await fs.mkdtemp(path.join(os.tmpdir(), "srt-preflight-wd-"));
+    });
+    afterEach(async () => {
+        await fs.rm(workdir, { recursive: true, force: true }).catch(() => { });
+    });
+    async function writeFakeSrt(script) {
+        const scriptPath = path.join(workdir, "fake-srt.cjs");
+        await fs.writeFile(scriptPath, script);
+        return [process.execPath, scriptPath];
+    }
+    it("attach() rejects immediately with an actionable message on a missing-dependency signature", async () => {
+        const srtCommand = await writeFakeSrt('console.error("Error: Sandbox dependencies not available: ripgrep (rg) not found, bubblewrap (bwrap) not installed, socat not installed"); process.exit(1);');
+        const sandbox = new SrtSandbox({ workdir, isolation: { srtCommand } });
+        await expect(sandbox.attach()).rejects.toThrow(/ripgrep/);
+    });
+    it("does not mislabel an unrelated startup failure as a missing dependency", async () => {
+        const srtCommand = await writeFakeSrt('console.error("Error: something else entirely broke"); process.exit(1);');
+        const sandbox = new SrtSandbox({ workdir, isolation: { srtCommand } });
+        await expect(sandbox.attach()).rejects.toThrow(/failed its startup preflight check/);
+        await expect(new SrtSandbox({ workdir, isolation: { srtCommand } }).attach()).rejects.not.toThrow(/apt-get install/);
+    });
+    it("attach() succeeds once the preflight probe passes", async () => {
+        const srtCommand = await writeFakeSrt("process.exit(0);");
+        const sandbox = new SrtSandbox({ workdir, isolation: { srtCommand } });
+        const handle = await sandbox.attach();
+        expect(handle).toBeDefined();
+    });
+    it("does not re-run the preflight probe on a second attach() (already attached)", async () => {
+        const scriptPath = path.join(workdir, "counting-srt.cjs");
+        const counterPath = path.join(workdir, "count.txt");
+        await fs.writeFile(counterPath, "0");
+        // Every invocation bumps a counter file — including the real payload
+        // args exec()/runCommand() would pass — but this test only calls
+        // attach() twice, so any increment beyond 1 means the probe re-ran.
+        await fs.writeFile(scriptPath, [
+            'const fs = require("fs");',
+            `const p = ${JSON.stringify(counterPath)};`,
+            "fs.writeFileSync(p, String(Number(fs.readFileSync(p, 'utf8')) + 1));",
+            "process.exit(0);",
+        ].join("\n"));
+        const sandbox = new SrtSandbox({
+            workdir,
+            isolation: { srtCommand: [process.execPath, scriptPath] },
+        });
+        await sandbox.attach();
+        expect(Number(await fs.readFile(counterPath, "utf8"))).toBe(1);
+        await sandbox.attach();
+        expect(Number(await fs.readFile(counterPath, "utf8"))).toBe(1);
+    });
+});
+//# sourceMappingURL=srt-sandbox.test.js.map

package/dist/__tests__/srt-sandbox.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"srt-sandbox.test.js","sourceRoot":"","sources":["../../src/__tests__/srt-sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC,gCAAgC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,kEAAkE;YAClE,qDAAqD;YACrD,iEAAiE;YACjE,qCAAqC;YACrC,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE;gBACrD,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,EAAE,CAAC;AAEL;+EAC+E;AAC/E,KAAK,UAAU,GAAG,CAChB,MAAqB,EACrB,MAAc;IAEd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACxE,IAAI,OAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,mEAAmE;QACnE,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,MAAM,EACN,kDAAkD,CACnD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAEhD,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;YAC7B,OAAO;YACP,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,OAAO,SAAS,UAAU,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAEtC,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,MAAM,EACN,2CAA2C,CAC5C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAEtC,qEAAqE;QACrE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE7C,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,eAAe,YAAY,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,wEAAwE;QACxE,yDAAyD;QACzD,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,mBAAmB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CACnC;oBACE,MAAM;oBACN,IAAI;oBACJ,YAAY,MAAM,qCAAqC;iBACxD,EACD,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAC9B,EAAE,CAAC;oBACF,KAAK,KAAK,CAAC;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC;QACd,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAE9C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,CAAC,gBAAgB,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,KAAK,CAAC,CAAC,4CAA4C;QAChE,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAC7B,CACF,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAC7B,CACF,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE1C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAEvB,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAC7B,CACF,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,gBAAgB,CAC3B,mHAAmH,CACpH,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,gBAAgB,CAC3B,yDAAyD,CAC1D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,UAAU,GAAG,MAAM,YAAY,CACnC,6JAA6J,CAC9J,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,UAAU,GAAG,MAAM,YAAY,CACnC,yEAAyE,CAC1E,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5C,oCAAoC,CACrC,CAAC;QACF,MAAM,MAAM,CACV,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAChE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACrC,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,EAAE,CAAC,SAAS,CAChB,UAAU,EACV;YACE,2BAA2B;YAC3B,aAAa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG;YAC3C,sEAAsE;YACtE,kBAAkB;SACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;YAC7B,OAAO;YACP,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;SAC1D,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE/D,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export type { SrtIsolationOptions, SrtSandboxOptions, } from "./srt-sandbox.js";
+export { SrtSandbox } from "./srt-sandbox.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { SrtSandbox } from "./srt-sandbox.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/srt-sandbox.d.ts

@@ -0,0 +1,126 @@
+import type { SandboxHandle } from "@bunny-agent/manager";
+import { LocalMachine, type LocalMachineOptions } from "@bunny-agent/sandbox-local";
+/**
+ * Builds an actionable "how to fix this" hint appended to srt's own missing-
+ * dependency message. Only mentions dependencies srt's message actually
+ * named (never asserts what's needed on a platform we haven't confirmed).
+ * Exported for direct unit testing — not part of the package's public API.
+ */
+export declare function buildInstallHint(srtMessage: string): string;
+/**
+ * Isolation policy for {@link SrtSandbox}, mapped onto
+ * `@anthropic-ai/sandbox-runtime` (srt) settings.
+ *
+ * Defaults are deny-by-default where srt is deny-by-default:
+ * - Network: fully blocked unless domains are listed in `allowedDomains`.
+ * - Filesystem writes: only the sandbox workdir and the OS temp dir are
+ *   writable unless more paths are listed in `allowWrite`.
+ * - Filesystem reads: allowed except paths listed in `denyRead`.
+ */
+export interface SrtIsolationOptions {
+    /** Domains the sandboxed process may reach (supports `*.example.com`).
+     *  Default: `[]` — no network access. */
+    allowedDomains?: string[];
+    /** Domains to always block (takes precedence over `allowedDomains`). */
+    deniedDomains?: string[];
+    /** Paths the sandboxed process may NOT read (e.g. `~/.ssh`). */
+    denyRead?: string[];
+    /** Extra writable paths, in addition to the workdir and the OS temp dir.
+     *  Runners that write to the home directory (npm cache, session stores)
+     *  need those paths listed here — e.g. `["~/.npm", "~/.bunny-agent"]`. */
+    allowWrite?: string[];
+    /** Paths to deny writes to even inside allowed paths. */
+    denyWrite?: string[];
+    /** Allow binding local ports (dev servers inside the sandbox). Default false. */
+    allowLocalBinding?: boolean;
+    /** Disable Unix-socket blocking (Linux: seccomp; macOS: Seatbelt). Default false. */
+    allowAllUnixSockets?: boolean;
+    /**
+     * Bring-your-own srt settings file. When set, it is passed to srt as-is and
+     * every other option in this object is ignored.
+     */
+    settingsPath?: string;
+    /**
+     * Override the wrapper invocation (argv prefix). Defaults to running the
+     * `srt` CLI bundled with `@anthropic-ai/sandbox-runtime` via the current
+     * Node executable.
+     */
+    srtCommand?: string[];
+}
+export interface SrtSandboxOptions extends LocalMachineOptions {
+    isolation?: SrtIsolationOptions;
+}
+/**
+ * A locally-isolated sandbox: same lifecycle and API as {@link LocalMachine},
+ * but every command is wrapped with Anthropic's sandbox runtime
+ * (`@anthropic-ai/sandbox-runtime`, the sandbox used by Claude Code), which
+ * enforces OS-level boundaries:
+ *
+ * - Linux: bubblewrap + network-namespace isolation (traffic must go through
+ *   srt's host-side proxies)
+ * - macOS: `sandbox-exec` with a generated Seatbelt profile
+ * - Windows (alpha): a dedicated `srt-sandbox` user account + WFP egress fence
+ *
+ * The policy is allow-only for network and writes: by default the process
+ * can read the filesystem (minus `denyRead`), write only to the workdir and
+ * the OS temp dir, and reach no network at all.
+ *
+ * @example
+ * ```typescript
+ * import { BunnyAgent } from "@bunny-agent/manager";
+ * import { SrtSandbox } from "@bunny-agent/sandbox-srt";
+ *
+ * const sandbox = new SrtSandbox({
+ *   workdir: "/tmp/my-sandbox",
+ *   isolation: {
+ *     allowedDomains: ["api.anthropic.com", "*.npmjs.org"],
+ *     denyRead: ["~/.ssh", "~/.aws"],
+ *     allowWrite: ["~/.npm"],
+ *   },
+ * });
+ *
+ * const handle = await sandbox.attach();
+ * // Runs inside the OS sandbox; writing outside the workdir fails.
+ * const result = await handle.runCommand("id && touch out.txt");
+ * ```
+ */
+export declare class SrtSandbox extends LocalMachine {
+    protected readonly label: string;
+    private readonly isolation;
+    /** Generated settings file path; created lazily, stable per instance. */
+    private settingsFilePromise;
+    /** The mkdtemp'd directory holding the generated settings file — tracked
+     *  separately so onDestroy() can remove it without re-deriving it from
+     *  the (possibly not-yet-created) settings path. */
+    private generatedSettingsDir;
+    constructor(options?: SrtSandboxOptions);
+    /**
+     * Runs a cheap srt-wrapped no-op before doing any real work, so a missing
+     * platform dependency (bubblewrap, socat, ripgrep, ...) or an otherwise
+     * unusable sandbox surfaces immediately with an actionable message —
+     * instead of being discovered deep inside the first real `exec()` call,
+     * where it previously arrived as a generic "Command failed (exit 1)"
+     * with srt's raw stderr buried in the trace.
+     */
+    attach(): Promise<SandboxHandle>;
+    private preflightCheck;
+    protected transformCommand(command: string[]): Promise<string[]>;
+    /**
+     * Write the srt settings file derived from {@link SrtIsolationOptions}.
+     * The file lives under the OS temp dir, which is inside the sandbox's
+     * writable paths — so the policy explicitly denies writes to its own
+     * directory (`denyWrite` takes precedence over `allowWrite` in srt): a
+     * sandboxed process cannot edit its own policy for the next run.
+     */
+    private ensureSettingsFile;
+    /**
+     * Removes the generated `srt-sandbox-*` settings directory, if one was
+     * created (bring-your-own `settingsPath` never triggers this). Without
+     * this, every SrtSandbox instance that actually ran a command leaked one
+     * temp directory under the OS temp dir for the lifetime of the host —
+     * across many agent runs (each gets its own SrtSandbox instance) these
+     * accumulate indefinitely.
+     */
+    protected onDestroy(): Promise<void>;
+}
+//# sourceMappingURL=srt-sandbox.d.ts.map

package/dist/srt-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"srt-sandbox.d.ts","sourceRoot":"","sources":["../src/srt-sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AA6BpC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAkC3D;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC;6CACyC;IACzC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;8EAE0E;IAC1E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC1C,mBAA4B,KAAK,EAAE,MAAM,CAAgB;IAEzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,yEAAyE;IACzE,OAAO,CAAC,mBAAmB,CAAgC;IAC3D;;wDAEoD;IACpD,OAAO,CAAC,oBAAoB,CAAuB;gBAEvC,OAAO,GAAE,iBAAsB;IAK3C;;;;;;;OAOG;IACY,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC;YAOjC,cAAc;cA6CH,gBAAgB,CACvC,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,MAAM,EAAE,CAAC;IAUpB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAgC1B;;;;;;;OAOG;cACsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CAKpD"}

package/dist/srt-sandbox.js

@@ -0,0 +1,216 @@
+import { execFile } from "node:child_process";
+import * as fs from "node:fs/promises";
+import { createRequire } from "node:module";
+import * as os from "node:os";
+import * as path from "node:path";
+import { LocalMachine, } from "@bunny-agent/sandbox-local";
+const require = createRequire(import.meta.url);
+/** The exact prefix srt uses when a required platform binary (bubblewrap,
+ *  socat, ripgrep, ...) is missing — confirmed against
+ *  `@anthropic-ai/sandbox-runtime@0.0.65` by a live repro with those
+ *  binaries hidden from PATH. Matching on this signature (rather than
+ *  guessing at srt's exact dependency list ourselves, which could drift out
+ *  of sync with a future srt version) lets SrtSandbox tell "you're missing
+ *  a dependency" apart from "the sandbox failed to start for some other
+ *  reason" without duplicating srt's own platform-requirements logic. */
+const MISSING_DEPS_SIGNATURE = "Sandbox dependencies not available";
+/** Package names to suggest installing, keyed by the dependency name
+ *  substring srt's own error message uses (see MISSING_DEPS_SIGNATURE's
+ *  doc comment — these are read out of srt's message, not asserted
+ *  independently, so an unlisted dependency just gets no extra hint
+ *  rather than a wrong one). `bubblewrap` has no `brew` entry: it's a
+ *  Linux-only sandboxing primitive, macOS uses Seatbelt instead. */
+const DEPENDENCY_PACKAGE_NAMES = {
+    ripgrep: { apt: "ripgrep", brew: "ripgrep" },
+    bubblewrap: { apt: "bubblewrap" },
+    socat: { apt: "socat", brew: "socat" },
+};
+/**
+ * Builds an actionable "how to fix this" hint appended to srt's own missing-
+ * dependency message. Only mentions dependencies srt's message actually
+ * named (never asserts what's needed on a platform we haven't confirmed).
+ * Exported for direct unit testing — not part of the package's public API.
+ */
+export function buildInstallHint(srtMessage) {
+    const lowerMessage = srtMessage.toLowerCase();
+    const missing = Object.keys(DEPENDENCY_PACKAGE_NAMES).filter((name) => lowerMessage.includes(name));
+    if (missing.length === 0) {
+        return "";
+    }
+    const aptPackages = missing
+        .map((name) => DEPENDENCY_PACKAGE_NAMES[name].apt)
+        .filter((pkg) => Boolean(pkg));
+    const brewPackages = missing
+        .map((name) => DEPENDENCY_PACKAGE_NAMES[name].brew)
+        .filter((pkg) => Boolean(pkg));
+    const lines = ["", "To fix:"];
+    if (aptPackages.length > 0) {
+        lines.push(`  Debian/Ubuntu: sudo apt-get install -y ${aptPackages.join(" ")}`);
+    }
+    if (brewPackages.length > 0) {
+        lines.push(`  macOS:         brew install ${brewPackages.join(" ")}`);
+    }
+    if (missing.includes("bubblewrap")) {
+        lines.push("  Ubuntu 24.04+ additionally restricts unprivileged user namespaces by " +
+            "default, which bubblewrap needs — either " +
+            "`sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0` or grant " +
+            "an AppArmor profile permitting bwrap's `userns` (see docs/SANDBOX_ADAPTERS.md).");
+    }
+    return lines.join("\n");
+}
+/**
+ * A locally-isolated sandbox: same lifecycle and API as {@link LocalMachine},
+ * but every command is wrapped with Anthropic's sandbox runtime
+ * (`@anthropic-ai/sandbox-runtime`, the sandbox used by Claude Code), which
+ * enforces OS-level boundaries:
+ *
+ * - Linux: bubblewrap + network-namespace isolation (traffic must go through
+ *   srt's host-side proxies)
+ * - macOS: `sandbox-exec` with a generated Seatbelt profile
+ * - Windows (alpha): a dedicated `srt-sandbox` user account + WFP egress fence
+ *
+ * The policy is allow-only for network and writes: by default the process
+ * can read the filesystem (minus `denyRead`), write only to the workdir and
+ * the OS temp dir, and reach no network at all.
+ *
+ * @example
+ * ```typescript
+ * import { BunnyAgent } from "@bunny-agent/manager";
+ * import { SrtSandbox } from "@bunny-agent/sandbox-srt";
+ *
+ * const sandbox = new SrtSandbox({
+ *   workdir: "/tmp/my-sandbox",
+ *   isolation: {
+ *     allowedDomains: ["api.anthropic.com", "*.npmjs.org"],
+ *     denyRead: ["~/.ssh", "~/.aws"],
+ *     allowWrite: ["~/.npm"],
+ *   },
+ * });
+ *
+ * const handle = await sandbox.attach();
+ * // Runs inside the OS sandbox; writing outside the workdir fails.
+ * const result = await handle.runCommand("id && touch out.txt");
+ * ```
+ */
+export class SrtSandbox extends LocalMachine {
+    label = "SrtSandbox";
+    isolation;
+    /** Generated settings file path; created lazily, stable per instance. */
+    settingsFilePromise = null;
+    /** The mkdtemp'd directory holding the generated settings file — tracked
+     *  separately so onDestroy() can remove it without re-deriving it from
+     *  the (possibly not-yet-created) settings path. */
+    generatedSettingsDir = null;
+    constructor(options = {}) {
+        super(options);
+        this.isolation = options.isolation ?? {};
+    }
+    /**
+     * Runs a cheap srt-wrapped no-op before doing any real work, so a missing
+     * platform dependency (bubblewrap, socat, ripgrep, ...) or an otherwise
+     * unusable sandbox surfaces immediately with an actionable message —
+     * instead of being discovered deep inside the first real `exec()` call,
+     * where it previously arrived as a generic "Command failed (exit 1)"
+     * with srt's raw stderr buried in the trace.
+     */
+    async attach() {
+        if (!this.getHandle()) {
+            await this.preflightCheck();
+        }
+        return super.attach();
+    }
+    async preflightCheck() {
+        const settingsPath = this.isolation.settingsPath ?? (await this.ensureSettingsFile());
+        const srtCommand = this.isolation.srtCommand ?? [
+            process.execPath,
+            require.resolve("@anthropic-ai/sandbox-runtime/dist/cli.js"),
+        ];
+        // A harmless payload: node itself is guaranteed present (we're running
+        // inside it right now), so the probe doesn't depend on `true`/`echo`
+        // existing, and it touches neither the filesystem nor the network.
+        const [cmd, ...args] = [
+            ...srtCommand,
+            "--settings",
+            settingsPath,
+            process.execPath,
+            "-e",
+            "process.exit(0)",
+        ];
+        await new Promise((resolve, reject) => {
+            execFile(cmd, args, { timeout: 15000 }, (error, _stdout, stderr) => {
+                if (!error) {
+                    resolve();
+                    return;
+                }
+                const message = (stderr || error.message).trim();
+                if (message.includes(MISSING_DEPS_SIGNATURE)) {
+                    reject(new Error(`SrtSandbox cannot start: ${message}${buildInstallHint(message)}`));
+                    return;
+                }
+                reject(new Error("SrtSandbox failed its startup preflight check (this usually means " +
+                    "the sandboxing runtime — bubblewrap on Linux, Seatbelt on macOS — " +
+                    `can't run in this environment): ${message}`));
+            });
+        });
+    }
+    async transformCommand(command) {
+        const settingsPath = this.isolation.settingsPath ?? (await this.ensureSettingsFile());
+        const srtCommand = this.isolation.srtCommand ?? [
+            process.execPath,
+            require.resolve("@anthropic-ai/sandbox-runtime/dist/cli.js"),
+        ];
+        return [...srtCommand, "--settings", settingsPath, ...command];
+    }
+    /**
+     * Write the srt settings file derived from {@link SrtIsolationOptions}.
+     * The file lives under the OS temp dir, which is inside the sandbox's
+     * writable paths — so the policy explicitly denies writes to its own
+     * directory (`denyWrite` takes precedence over `allowWrite` in srt): a
+     * sandboxed process cannot edit its own policy for the next run.
+     */
+    ensureSettingsFile() {
+        this.settingsFilePromise ??= (async () => {
+            const dir = await fs.mkdtemp(path.join(os.tmpdir(), "srt-sandbox-"));
+            this.generatedSettingsDir = dir;
+            const settingsPath = path.join(dir, "srt-settings.json");
+            const settings = {
+                network: {
+                    allowedDomains: this.isolation.allowedDomains ?? [],
+                    deniedDomains: this.isolation.deniedDomains ?? [],
+                    allowLocalBinding: this.isolation.allowLocalBinding ?? false,
+                    allowAllUnixSockets: this.isolation.allowAllUnixSockets ?? false,
+                },
+                filesystem: {
+                    denyRead: this.isolation.denyRead ?? [],
+                    allowWrite: [
+                        this.getWorkdir(),
+                        os.tmpdir(),
+                        ...(this.isolation.allowWrite ?? []),
+                    ],
+                    // The policy file itself (and its directory) must never be
+                    // writable from inside the sandbox, even though it lives under
+                    // the OS temp dir.
+                    denyWrite: [dir, ...(this.isolation.denyWrite ?? [])],
+                },
+            };
+            await fs.writeFile(settingsPath, JSON.stringify(settings, null, 2));
+            console.log(`[${this.label}] Wrote srt settings: ${settingsPath}`);
+            return settingsPath;
+        })();
+        return this.settingsFilePromise;
+    }
+    /**
+     * Removes the generated `srt-sandbox-*` settings directory, if one was
+     * created (bring-your-own `settingsPath` never triggers this). Without
+     * this, every SrtSandbox instance that actually ran a command leaked one
+     * temp directory under the OS temp dir for the lifetime of the host —
+     * across many agent runs (each gets its own SrtSandbox instance) these
+     * accumulate indefinitely.
+     */
+    async onDestroy() {
+        if (this.generatedSettingsDir) {
+            await fs.rm(this.generatedSettingsDir, { recursive: true, force: true });
+        }
+    }
+}
+//# sourceMappingURL=srt-sandbox.js.map

package/dist/srt-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"srt-sandbox.js","sourceRoot":"","sources":["../src/srt-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,YAAY,GAEb,MAAM,4BAA4B,CAAC;AAEpC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C;;;;;;;yEAOyE;AACzE,MAAM,sBAAsB,GAAG,oCAAoC,CAAC;AAEpE;;;;;oEAKoE;AACpE,MAAM,wBAAwB,GAG1B;IACF,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC5C,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;IACjC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;CACvC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACpE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC5B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO;SACxB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;SACjD,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO;SACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;SAClD,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,4CAA4C,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,iCAAiC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,yEAAyE;YACvE,2CAA2C;YAC3C,2EAA2E;YAC3E,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AA+CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,UAAW,SAAQ,YAAY;IACd,KAAK,GAAW,YAAY,CAAC;IAExC,SAAS,CAAsB;IAChD,yEAAyE;IACjE,mBAAmB,GAA2B,IAAI,CAAC;IAC3D;;wDAEoD;IAC5C,oBAAoB,GAAkB,IAAI,CAAC;IAEnD,YAAY,UAA6B,EAAE;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACM,KAAK,CAAC,MAAM;QACnB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,YAAY,GAChB,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI;YAC9C,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC;SAC7D,CAAC;QACF,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG;YACrB,GAAG,UAAU;YACb,YAAY;YACZ,YAAY;YACZ,OAAO,CAAC,QAAQ;YAChB,IAAI;YACJ,iBAAiB;SAClB,CAAC;QAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBACjE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAC7C,MAAM,CACJ,IAAI,KAAK,CACP,4BAA4B,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAClE,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CACJ,IAAI,KAAK,CACP,oEAAoE;oBAClE,oEAAoE;oBACpE,mCAAmC,OAAO,EAAE,CAC/C,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,gBAAgB,CACvC,OAAiB;QAEjB,MAAM,YAAY,GAChB,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI;YAC9C,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC;SAC7D,CAAC;QACF,OAAO,CAAC,GAAG,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB;QACxB,IAAI,CAAC,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE;oBACP,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE;oBACnD,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,EAAE;oBACjD,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,KAAK;oBAC5D,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,KAAK;iBACjE;gBACD,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE;oBACvC,UAAU,EAAE;wBACV,IAAI,CAAC,UAAU,EAAE;wBACjB,EAAE,CAAC,MAAM,EAAE;wBACX,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC;qBACrC;oBACD,2DAA2D;oBAC3D,+DAA+D;oBAC/D,mBAAmB;oBACnB,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;iBACtD;aACF,CAAC;YACF,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,yBAAyB,YAAY,EAAE,CAAC,CAAC;YACnE,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACgB,KAAK,CAAC,SAAS;QAChC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@bunny-agent/sandbox-srt",
+  "version": "0.9.52-beta.1",
+  "description": "Locally-isolated sandbox adapter for BunnyAgent — wraps commands with Anthropic's sandbox runtime (srt)",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vikadata/bunny-agent.git",
+    "directory": "packages/sandbox-srt"
+  },
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.11.0"
+  },
+  "keywords": [
+    "sandbox",
+    "srt",
+    "isolation",
+    "bubblewrap",
+    "seatbelt",
+    "bunny-agent",
+    "adapter"
+  ],
+  "dependencies": {
+    "@anthropic-ai/sandbox-runtime": "^0.0.65",
+    "@bunny-agent/manager": "0.9.52-beta.1",
+    "@bunny-agent/sandbox-local": "0.9.52-beta.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "typescript": "^5.3.0",
+    "vitest": "^1.6.1"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "lint": "echo 'no lint configured'",
+    "test": "vitest run --passWithNoTests"
+  }
+}