@coralai/sps-cli 0.65.10 → 0.65.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/openai-agent/sandbox/execution.d.ts +6 -0
- package/dist/openai-agent/sandbox/execution.d.ts.map +1 -1
- package/dist/openai-agent/sandbox/execution.js +47 -2
- package/dist/openai-agent/sandbox/execution.js.map +1 -1
- package/dist/openai-agent/sandbox/productionDocker.d.ts.map +1 -1
- package/dist/openai-agent/sandbox/productionDocker.js +5 -0
- package/dist/openai-agent/sandbox/productionDocker.js.map +1 -1
- package/package.json +1 -1
|
@@ -33,4 +33,10 @@ export declare class UnsupportedSandboxProviderError extends Error {
|
|
|
33
33
|
}
|
|
34
34
|
export declare function prepareOpenAISandboxExecution(start: AgentProcessStartCommandV1, providerPlan: ProviderCapabilityPlan, dependencies?: OpenAISandboxExecutionDependencies): Promise<OpenAISandboxExecution>;
|
|
35
35
|
export declare function assertNoEscapingSymlinks(workspaceRoot: string, maximumEntries?: number): Promise<void>;
|
|
36
|
+
/**
|
|
37
|
+
* docker localDir 的前置:把 cwd 复制成一份**软链解引用**的暂存快照(sessionRoot/workspace-stage)。
|
|
38
|
+
* 软链 → 实体内容(claude 技能投影/node_modules/.bin 照常可用);断链 → 跳过不阻塞。
|
|
39
|
+
* 每次启动重建(rm+cp),会话回收时随 sessionRoot 一并清理。
|
|
40
|
+
*/
|
|
41
|
+
export declare function stageDereferencedWorkspace(cwd: string, sessionRoot: string): Promise<string>;
|
|
36
42
|
//# sourceMappingURL=execution.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EASL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,SAAS,EACV,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC9D,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,2BAA2B;gBAE5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,0BAA0B,EACjC,YAAY,EAAE,sBAAsB,EACpC,YAAY,GAAE,kCAAuC,GACpD,OAAO,CAAC,sBAAsB,CAAC,
|
|
1
|
+
{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EASL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,SAAS,EACV,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC9D,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,2BAA2B;gBAE5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,0BAA0B,EACjC,YAAY,EAAE,sBAAsB,EACpC,YAAY,GAAE,kCAAuC,GACpD,OAAO,CAAC,sBAAsB,CAAC,CAsOjC;AAED,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,cAAc,SAAU,GACvB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAOD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { cp, lstat, mkdir, readdir, realpath, rm } from 'node:fs/promises';
|
|
1
|
+
import { cp, lstat, mkdir, readdir, realpath, rm, stat } from 'node:fs/promises';
|
|
2
2
|
import { homedir } from 'node:os';
|
|
3
3
|
import { dirname, relative, resolve, sep } from 'node:path';
|
|
4
4
|
import { SandboxAgent, compaction, filesystem, localBindMountStrategy, localDir, mount, shell, skills, } from '@openai/agents/sandbox';
|
|
@@ -80,13 +80,21 @@ export async function prepareOpenAISandboxExecution(start, providerPlan, depende
|
|
|
80
80
|
}),
|
|
81
81
|
...(providerPlan.compaction ? [compaction()] : []),
|
|
82
82
|
];
|
|
83
|
+
// 🔴 docker 路的 localDir 拒绝符号链接(SDK 硬抛 "local_dir entries do not support symbolic
|
|
84
|
+
// links"),而真实项目里软链无处不在(claude 技能投影 .claude/skills、node_modules/.bin)——
|
|
85
|
+
// 与 claude 路共享 cwd 时 openai 会话必炸(coral 实测)。喂给 localDir 前先做一份**解引用
|
|
86
|
+
// 暂存快照**(软链→实体内容,断链跳过);产物回写不受影响:serializeSessionState 定向回写
|
|
87
|
+
// 真实 cwd(见 productionDocker.ts)。unix_local 走 bind mount,原生支持软链,不需要。
|
|
88
|
+
const repoSrc = start.sandbox.provider === 'docker'
|
|
89
|
+
? await stageDereferencedWorkspace(start.cwd, start.sessionRoot)
|
|
90
|
+
: start.cwd;
|
|
83
91
|
const manifest = {
|
|
84
92
|
version: 1,
|
|
85
93
|
root: '/workspace',
|
|
86
94
|
entries: {
|
|
87
95
|
repo: start.sandbox.provider === 'docker'
|
|
88
96
|
? localDir({
|
|
89
|
-
src:
|
|
97
|
+
src: repoSrc,
|
|
90
98
|
description: 'SPS-authorized isolated project workspace copy',
|
|
91
99
|
})
|
|
92
100
|
: mount({
|
|
@@ -103,6 +111,16 @@ export async function prepareOpenAISandboxExecution(start, providerPlan, depende
|
|
|
103
111
|
readOnly: true,
|
|
104
112
|
description: 'Read-only SPS skill source',
|
|
105
113
|
},
|
|
114
|
+
// 解引用暂存快照在 sessionRoot(工作区外)——SDK 校验 localDir src 必须落在
|
|
115
|
+
// localSourceBaseDir(=工作区)或 extraPathGrants 内,不授权会拒
|
|
116
|
+
// ("local_dir source must stay within the local source base directory",coral 生产实测)。
|
|
117
|
+
...(repoSrc !== start.cwd
|
|
118
|
+
? [{
|
|
119
|
+
path: repoSrc,
|
|
120
|
+
readOnly: true,
|
|
121
|
+
description: 'Dereferenced workspace staging copy (docker localDir source)',
|
|
122
|
+
}]
|
|
123
|
+
: []),
|
|
106
124
|
],
|
|
107
125
|
};
|
|
108
126
|
const agent = new SandboxAgent({
|
|
@@ -236,4 +254,31 @@ function isWithin(root, candidate) {
|
|
|
236
254
|
const path = relative(root, candidate);
|
|
237
255
|
return path === '' || (!path.startsWith(`..${sep}`) && path !== '..');
|
|
238
256
|
}
|
|
257
|
+
/**
|
|
258
|
+
* docker localDir 的前置:把 cwd 复制成一份**软链解引用**的暂存快照(sessionRoot/workspace-stage)。
|
|
259
|
+
* 软链 → 实体内容(claude 技能投影/node_modules/.bin 照常可用);断链 → 跳过不阻塞。
|
|
260
|
+
* 每次启动重建(rm+cp),会话回收时随 sessionRoot 一并清理。
|
|
261
|
+
*/
|
|
262
|
+
export async function stageDereferencedWorkspace(cwd, sessionRoot) {
|
|
263
|
+
const stage = resolve(sessionRoot, 'workspace-stage');
|
|
264
|
+
await rm(stage, { recursive: true, force: true });
|
|
265
|
+
await mkdir(stage, { recursive: true });
|
|
266
|
+
await cp(cwd, stage, {
|
|
267
|
+
recursive: true,
|
|
268
|
+
dereference: true,
|
|
269
|
+
filter: async (src) => {
|
|
270
|
+
try {
|
|
271
|
+
const l = await lstat(src);
|
|
272
|
+
if (!l.isSymbolicLink())
|
|
273
|
+
return true;
|
|
274
|
+
await stat(src); // 断链 → 抛 → 过滤掉
|
|
275
|
+
return true;
|
|
276
|
+
}
|
|
277
|
+
catch {
|
|
278
|
+
return false;
|
|
279
|
+
}
|
|
280
|
+
},
|
|
281
|
+
});
|
|
282
|
+
return stage;
|
|
283
|
+
}
|
|
239
284
|
//# sourceMappingURL=execution.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,QAAQ,EACR,KAAK,EACL,KAAK,EACL,MAAM,GAGP,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,cAAc,EACd,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,iBAAiB,GAGlB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,eAAe,GAAG,MAAM,CAAC;AAsB/B,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,GAAG,uBAAuB,CAAC;IAExC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAiC,EACjC,YAAoC,EACpC,eAAmD,EAAE;IAErD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,YAAY;QACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,oBAAoB,KAAK,CAAC,OAAO,CAAC,QAAQ,wCAAwC,CACnF,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,YAAY;QACtC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvF,sFAAsF;IACtF,mEAAmE;IACnE,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;SACtD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,GAAG,aAAa,CAAC;IAC9B,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,SAAS,GAAG,OAAO,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GACP,YAAY,CAAC,SAAS;QACtB,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,YAAY,CAAC,YAAY;QACjD,CAAC,CAAC,IAAI,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,YAAY,CAAC;QACzD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,cAAc,GAAG,CAA6B,KAAU,EAAO,EAAE,CACrE,oBAAoB,CAClB,CACA,iBAAiB,EAAE,wBAAwB,CAAC,KAAgB,CAAC;QAC7D,KAAK,CACJ;QACD,oEAAoE;SACnE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;SAC9E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,CAAC,IAAI,KAAK,UAAU;QACtB,CAAC,CAAE;YACC,GAAG,IAAI;YACP,SAAS,EAAE,eAAe;YAC1B,eAAe,EAAE,iBAAiB;SAC7B;QACT,CAAC,CAAE,IAAU,CACL,EACZ,KAAK,EACL,YAAY,CAAC,MAAM,IAAI,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC3D,CAAC;IACX,MAAM,YAAY,GAAG;QACnB,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;QAC9B,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,CAAC;YACL,QAAQ,EAAE,uBAAuB,CAAC;gBAChC,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;aAC5B,CAAC;YACF,UAAU,EAAE,gBAAgB;SAC7B,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,iFAAiF;IACjF,uEAAuE;IACvE,kEAAkE;IAClE,2DAA2D;IAC3D,oEAAoE;IACpE,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,0BAA0B,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC;QAChE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAChB,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE;YACP,IAAI,EACF,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBACjC,CAAC,CAAC,QAAQ,CAAC;oBACP,GAAG,EAAE,OAAO;oBACZ,WAAW,EAAE,gDAAgD;iBAC9D,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC;oBACJ,MAAM,EAAE,KAAK,CAAC,GAAG;oBACjB,SAAS,EAAE,iBAAiB;oBAC5B,QAAQ,EAAE,KAAK;oBACf,aAAa,EAAE,sBAAsB,EAAE;oBACvC,WAAW,EAAE,kCAAkC;iBAChD,CAAC;SACT;QACD,eAAe,EAAE;YACf;gBACE,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,4BAA4B;aAC1C;YACD,uDAAuD;YACvD,oDAAoD;YACpD,oFAAoF;YACpF,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG;gBACvB,CAAC,CAAC,CAAC;wBACC,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,IAAI;wBACd,WAAW,EAAE,8DAA8D;qBAC5E,CAAC;gBACJ,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC;QAC7B,IAAI,EAAE,qBAAqB,KAAK,CAAC,kBAAkB,EAAE;QACrD,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,gBAAgB,EAAE,4BAA4B,CAAC,KAAK,CAAC;QACrD,YAAY,EACV,qFAAqF;QACvF,eAAe,EAAE,QAAQ;QACzB,YAAY;QACZ,KAAK,EAAE;YACL,GAAG,oBAAoB,CACrB,CAAC,cAAc,EAAE,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,EACxC,KAAK,EACL,YAAY,CAAC,MAAM,IAAI,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAClE;YACD,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACtC;QACD,UAAU,EAAE,EAAE;QACd,SAAS,EAAE;YACT,sBAAsB,EAAE,KAAK;YAC7B,wBAAwB,EAAE,IAAI;YAC9B,aAAa,EAAE,IAAI;SACpB;KACF,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,OAAO,CAC9B,KAAK,CAAC,WAAW,EACjB,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC/B,iBAAiB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QACpC,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,MAAM,MAAM,GACV,YAAY,CAAC,aAAa;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAClC,CAAC,CAAC,4BAA4B,CAAC;gBAC3B,gBAAgB;gBAChB,KAAK,EACH,OAAO,CAAC,GAAG,CAAC,wBAAwB;oBACpC,uBAAuB;gBACzB,aAAa;gBACb,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;oBACtB,aAAa,EAAE,OAAO;iBACvB;aACF,EAAE,KAAK,CAAC,GAAG,CAAC;YACf,CAAC,CAAC,IAAI,sBAAsB,CAAC;gBACzB,gBAAgB;gBAChB,aAAa;gBACb,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;oBACtB,aAAa,EAAE,OAAO;iBACvB;aACF,CAAC,CAAC,CAAC;IAEV,OAAO;QACL,KAAK;QACL,OAAO,EAAE,EAAE,MAAM,EAAE;QACnB,KAAK,EAAE;YACL,kBAAkB;YAClB,GAAG,CAAC,iBAAiB;gBACnB,CAAC,CAAC,CAAC,iBAAiB,EAAE,cAAc,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,cAAc;YACd,aAAa;YACb,YAAY;YACZ,GAAG,GAAG,CAAC,kBAAkB;SAC1B;QACD,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,QAAQ,EAAE;YACR,WAAW;YACX,uBAAuB;YACvB,cAAc;YACd,OAAO;YACP,SAAS;YACT,YAAY;YACZ,OAAO;YACP,QAAQ;YACR,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD;QACD,uBAAuB,CAAC,KAAK;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,QAAQ;oBACrB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC5C,CAAC,CAAC,IAAI;gBACR,QAAQ,EAAE;oBACR,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;iBACxC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE;aAC/C,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,cAAc,GAAG,OAAO;IAExB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;gBAC7B,MAAM,IAAI,+BAA+B,CACvC,yBAAyB,cAAc,4BAA4B,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,+BAA+B,CACvC,kDAAkD,SAAS,EAAE,CAC9D,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,4DAA4D;YAC5D,gEAAgE;YAChE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YAC9D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAW,EACX,WAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE;QACnB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACrC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"productionDocker.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,8BAA8B,CAAC;AAKtC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,gCAAgC,EAAE,sBAK9C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAChC,IAAI,EAAE,MAAM,EAAE,KACX,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,sBAAyD,EACjE,GAAG,GAAE,mBAA+B,GACnC,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"productionDocker.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,8BAA8B,CAAC;AAKtC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,gCAAgC,EAAE,sBAK9C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAChC,IAAI,EAAE,MAAM,EAAE,KACX,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,sBAAyD,EACjE,GAAG,GAAE,mBAA+B,GACnC,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,0BAA0B,EACnC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,sBAAyD,EACjE,GAAG,GAAE,mBAA+B,GACnC,aAAa,CAoDf"}
|
|
@@ -21,6 +21,11 @@ export async function hardenDockerContainer(containerId, limits = DEFAULT_PRODUC
|
|
|
21
21
|
String(limits.cpus),
|
|
22
22
|
'--memory',
|
|
23
23
|
`${limits.memoryMb}m`,
|
|
24
|
+
// 🔴 必须与 --memory 同行传:docker update 校验 memory < 已生效 memoryswap(默认可能更小),
|
|
25
|
+
// 缺它会被拒("Memory limit should be smaller than already set memoryswap limit")→ 生产
|
|
26
|
+
// openai 会话全灭(coral 实测)。等值 = 容器可用内存=memoryMb 且不许用 swap 超额。
|
|
27
|
+
'--memory-swap',
|
|
28
|
+
`${limits.memoryMb}m`,
|
|
24
29
|
'--pids-limit',
|
|
25
30
|
String(limits.processCount),
|
|
26
31
|
containerId,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"productionDocker.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC,OAAO,EACL,mBAAmB,GAIpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAS1C,MAAM,CAAC,MAAM,gCAAgC,GAA2B;IACtE,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,GAAG;IACjB,OAAO,EAAE,MAAM;CAChB,CAAC;AAMF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC;QACR,QAAQ;QACR,QAAQ;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,UAAU;QACV,GAAG,MAAM,CAAC,QAAQ,GAAG;QACrB,cAAc;QACd,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3B,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAmC,EACnC,eAAuB,EACvB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,EAClB,OAA6B,EACE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,+CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,sBAAsB,EAAE,IAAI;QAC5B,MAAM,EAAE,CAAC,KAAK,EACZ,IAAqE,EACrE,eAA4C,EAC5C,EAAE,CACF,MAAM,CACJ,IAAI,YAAY,QAAQ;YACtB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC;YAC9C,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAA4B;QAC/B,MAAM,EAAE,CACN,KAAgC,EAChC,aAA0C,EAC1C,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,KAAkC,CAAC;YACvD,oEAAoE;YACpE,yEAAyE;YACzE,mCAAmC;YACnC,MAAM,EAAE,CACN,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAC9C,eAAe,EACf;gBACE,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;gBACX,kBAAkB,EAAE,IAAI;aACzB,CACF,CAAC;YACF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC;KACzB,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;QAClC,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI,GAAG,IAAI;KACvB,CAAC,CAAC;AACL,CAAC"}
|
|
1
|
+
{"version":3,"file":"productionDocker.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC,OAAO,EACL,mBAAmB,GAIpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAS1C,MAAM,CAAC,MAAM,gCAAgC,GAA2B;IACtE,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,GAAG;IACjB,OAAO,EAAE,MAAM;CAChB,CAAC;AAMF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC;QACR,QAAQ;QACR,QAAQ;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,UAAU;QACV,GAAG,MAAM,CAAC,QAAQ,GAAG;QACrB,wEAAwE;QACxE,gFAAgF;QAChF,2DAA2D;QAC3D,eAAe;QACf,GAAG,MAAM,CAAC,QAAQ,GAAG;QACrB,cAAc;QACd,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3B,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAmC,EACnC,eAAuB,EACvB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,EAClB,OAA6B,EACE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,+CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,sBAAsB,EAAE,IAAI;QAC5B,MAAM,EAAE,CAAC,KAAK,EACZ,IAAqE,EACrE,eAA4C,EAC5C,EAAE,CACF,MAAM,CACJ,IAAI,YAAY,QAAQ;YACtB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC;YAC9C,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAA4B;QAC/B,MAAM,EAAE,CACN,KAAgC,EAChC,aAA0C,EAC1C,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,KAAkC,CAAC;YACvD,oEAAoE;YACpE,yEAAyE;YACzE,mCAAmC;YACnC,MAAM,EAAE,CACN,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAC9C,eAAe,EACf;gBACE,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;gBACX,kBAAkB,EAAE,IAAI;aACzB,CACF,CAAC;YACF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC;KACzB,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;QAClC,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI,GAAG,IAAI;KACvB,CAAC,CAAC;AACL,CAAC"}
|