@finalai/agent-provider 0.1.0

package/dist/modules/sandbox/mcp.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/sandbox/mcp.ts"],
+  "sourcesContent": ["import type { FetchLike } from '@modelcontextprotocol/client';\nimport {\n  createMcpHandler,\n  fromJsonSchema,\n  McpServer,\n  ResourceTemplate,\n  type CallToolResult,\n  type McpHttpHandler,\n  type ReadResourceResult,\n} from '@modelcontextprotocol/server';\nimport * as z from 'zod';\nimport type { JsonObject, JsonSchema, JsonValue } from \"../json.mjs\";\nimport { SandboxAccess, ToolApproval, type ToolDescriptorIface } from \"../manifest.mjs\";\nimport { bytesToBase64, utf8Decode } from \"./bytes.mjs\";\nimport {\n  createHostedMcpConnections,\n  EMPTY_MCP_CATALOG,\n  hostedTools,\n  SandboxHostedServerKind,\n  type HostedToolIface,\n  type SandboxHostedServer,\n} from \"./mcp-hosted.mjs\";\nimport { globFiles, grepFiles } from \"./mcp-search.mjs\";\nimport { createSandboxShell, SandboxShellMode } from \"./mcp-shell.mjs\";\nimport { resolvePosixPath } from \"./paths.mjs\";\nimport {\n  PortProtocol,\n  SandboxCapability,\n  SandboxEntryType,\n  type NetworkSandboxSessionIface,\n  type SandboxMcpCatalogIface,\n  type SandboxProcessIface,\n} from \"./types.mjs\";\n\nexport {\n  COMPUTER_USE_SERVER_NAME,\n  SandboxHostedServerKind,\n  withHostedMcpEndpoints,\n  type SandboxHostedServer,\n} from \"./mcp-hosted.mjs\";\nexport { SandboxShellMode } from \"./mcp-shell.mjs\";\n\n// The standard sandbox MCP projection, generated from a\n// handle for harnesses that do not speak the handle RPC. `tools/list` is\n// answered from static descriptors, so enumerating tools never starts a\n// sandbox; the handle is obtained on the first tool call.\n//\n// The sandbox's hosted MCP servers (computer use, local MCP) are projected as\n// their own tools. Their catalogs come from the provider when it knows them\n// before anything starts (`catalog`); otherwise the projection lists what it\n// knows, learns the rest from the servers once the sandbox is attached, and\n// announces it with `notifications/tools/list_changed`.\n\nexport enum SandboxMcpTool {\n  Run = 'run',\n  Spawn = 'spawn',\n  ProcessOutput = 'process_output',\n  ProcessInput = 'process_input',\n  ProcessTerminate = 'process_terminate',\n  ReadFile = 'read_file',\n  WriteFile = 'write_file',\n  EditFile = 'edit_file',\n  ListDir = 'list_dir',\n  Stat = 'stat',\n  Grep = 'grep',\n  Glob = 'glob',\n  GetHost = 'get_host',\n}\n\n// What one projection serves: everything, only the hosted servers (for\n// harnesses whose native tools use the handle RPC), the computer-use server,\n// or one local MCP server (the per-server addresses the handle RPC hands out).\nexport enum SandboxMcpScopeKind {\n  All = 'all',\n  Hosted = 'hosted',\n  ComputerUse = 'computerUse',\n  LocalServer = 'localServer',\n}\n\nexport type SandboxMcpScope =\n  | { kind: SandboxMcpScopeKind.All | SandboxMcpScopeKind.Hosted | SandboxMcpScopeKind.ComputerUse }\n  | { kind: SandboxMcpScopeKind.LocalServer; server: string };\n\nexport const SANDBOX_FILE_RESOURCE_SCHEME = 'sandbox-file';\n\nexport interface SandboxMcpDescriptorOptionsIface {\n  capabilities: readonly SandboxCapability[];\n  access?: SandboxAccess;\n  // The hosted servers' tools known so far (the provider's `mcpCatalog`, or\n  // learned on an earlier attach). Default: none known.\n  catalog?: SandboxMcpCatalogIface;\n  scope?: SandboxMcpScope;\n}\n\ninterface ToolSpecIface {\n  descriptor: ToolDescriptorIface;\n  capability: SandboxCapability;\n  write: boolean;\n  // toolPolicy keys after the tool name, most specific first.\n  policyKeys: string[];\n  // A tool of a hosted MCP server, proxied to it.\n  hosted?: HostedToolIface;\n}\n\nconst objectSchema = (properties: JsonObject, required: string[]): JsonSchema => ({\n  type: 'object',\n  properties,\n  required,\n  additionalProperties: false,\n});\n\nconst str = (description: string): JsonObject => ({ type: 'string', description });\nconst int = (description: string, minimum = 0): JsonObject => ({\n  type: 'integer',\n  minimum,\n  description,\n});\nconst envSchema: JsonObject = {\n  type: 'object',\n  additionalProperties: { type: 'string' },\n  description: 'Extra environment variables for this command only.',\n};\n\ntype ToolAnnotationsIface = NonNullable<ToolDescriptorIface['annotations']>;\n\nconst readOnly = {\n  readOnlyHint: true,\n  destructiveHint: false,\n  idempotentHint: true,\n  openWorldHint: false,\n};\nconst mutating = {\n  readOnlyHint: false,\n  destructiveHint: true,\n  idempotentHint: false,\n  openWorldHint: false,\n};\n\nconst tool = (args: {\n  name: string;\n  title: string;\n  description: string;\n  inputSchema: JsonSchema;\n  capability: SandboxCapability;\n  write: boolean;\n  policyKeys: string[];\n  idempotent?: boolean;\n  destructive?: boolean;\n}): ToolSpecIface => {\n  const annotations: ToolAnnotationsIface = {\n    title: args.title,\n    ...(args.write ? mutating : readOnly),\n  };\n  if (args.destructive != null) annotations.destructiveHint = args.destructive;\n  if (args.idempotent != null) annotations.idempotentHint = args.idempotent;\n  return {\n    descriptor: {\n      name: args.name,\n      description: args.description,\n      inputSchema: args.inputSchema,\n      annotations,\n    },\n    capability: args.capability,\n    write: args.write,\n    policyKeys: args.policyKeys,\n  };\n};\n\nconst BUILT_IN_TOOLS: readonly ToolSpecIface[] = [\n  tool({\n    name: SandboxMcpTool.Run,\n    title: 'Run command',\n    description:\n      'Run a shell command in the sandbox and wait for it. The shell persists between calls (cd and exported variables carry over). Returns exit_code, stdout and stderr.',\n    inputSchema: objectSchema(\n      {\n        command: str('The bash command to run.'),\n        cwd: str('Directory to run in (absolute, or relative to the working directory).'),\n        timeout_ms: int('Kill the command after this many milliseconds.', 1),\n        env: envSchema,\n      },\n      ['command'],\n    ),\n    capability: SandboxCapability.Process,\n    write: true,\n    policyKeys: ['shell', 'process'],\n  }),\n  tool({\n    name: SandboxMcpTool.Spawn,\n    title: 'Start background process',\n    description:\n      'Start a long-running command (a server, a watcher) without waiting. Returns process_id; read its output with process_output.',\n    inputSchema: objectSchema(\n      {\n        command: str('The bash command to start.'),\n        cwd: str('Directory to run in.'),\n        env: envSchema,\n      },\n      ['command'],\n    ),\n    capability: SandboxCapability.Process,\n    write: true,\n    policyKeys: ['shell', 'process'],\n  }),\n  tool({\n    name: SandboxMcpTool.ProcessOutput,\n    title: 'Read process output',\n    description:\n      'Read output of a process started with spawn, from byte offsets (pass the next_offset values from the previous call). Optionally waits for new output.',\n    inputSchema: objectSchema(\n      {\n        process_id: str('The id returned by spawn.'),\n        stdout_offset: int('Byte offset into stdout.'),\n        stderr_offset: int('Byte offset into stderr.'),\n        max_bytes: int('Maximum bytes per stream to return (default 65536).', 1),\n        wait_ms: int('Wait up to this long for new output or exit (max 30000).'),\n      },\n      ['process_id'],\n    ),\n    capability: SandboxCapability.Process,\n    write: false,\n    policyKeys: ['shell', 'process'],\n    idempotent: false,\n  }),\n  tool({\n    name: SandboxMcpTool.ProcessInput,\n    title: 'Write process input',\n    description: 'Write text to the stdin of a process started with spawn; set end to close stdin.',\n    inputSchema: objectSchema(\n      {\n        process_id: str('The id returned by spawn.'),\n        data: str('Text to write.'),\n        end: { type: 'boolean' },\n      },\n      ['process_id'],\n    ),\n    capability: SandboxCapability.Process,\n    write: true,\n    policyKeys: ['shell', 'process'],\n    destructive: false,\n  }),\n  tool({\n    name: SandboxMcpTool.ProcessTerminate,\n    title: 'Terminate process',\n    description: 'Stop a process started with spawn.',\n    inputSchema: objectSchema(\n      {\n        process_id: str('The id returned by spawn.'),\n        signal: str('Signal name (default SIGTERM).'),\n      },\n      ['process_id'],\n    ),\n    capability: SandboxCapability.Process,\n    write: true,\n    policyKeys: ['shell', 'process'],\n  }),\n  tool({\n    name: SandboxMcpTool.ReadFile,\n    title: 'Read file',\n    description:\n      'Read a text file. Use offset (1-based line) and limit (line count) for large files; large or binary files also come back as a resource link.',\n    inputSchema: objectSchema(\n      {\n        path: str('File path (absolute, or relative to the working directory).'),\n        offset: int('First line to read (1-based).', 1),\n        limit: int('Number of lines to read.', 1),\n      },\n      ['path'],\n    ),\n    capability: SandboxCapability.Files,\n    write: false,\n    policyKeys: ['files.read', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.WriteFile,\n    title: 'Write file',\n    description: 'Create or overwrite a text file. Parent directories are created.',\n    inputSchema: objectSchema({ path: str('File path.'), content: str('Full file content.') }, [\n      'path',\n      'content',\n    ]),\n    capability: SandboxCapability.Files,\n    write: true,\n    policyKeys: ['files.write', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.EditFile,\n    title: 'Edit file',\n    description:\n      'Replace an exact string in a file. old_string must occur exactly once unless replace_all is true; include surrounding lines to make it unique.',\n    inputSchema: objectSchema(\n      {\n        path: str('File path.'),\n        old_string: str('Exact text to replace.'),\n        new_string: str('Replacement text.'),\n        replace_all: { type: 'boolean', description: 'Replace every occurrence.' },\n      },\n      ['path', 'old_string', 'new_string'],\n    ),\n    capability: SandboxCapability.Files,\n    write: true,\n    policyKeys: ['files.write', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.ListDir,\n    title: 'List directory',\n    description: 'List the entries of a directory (name, type, size).',\n    inputSchema: objectSchema(\n      { path: str('Directory path (default: the working directory).') },\n      [],\n    ),\n    capability: SandboxCapability.Files,\n    write: false,\n    policyKeys: ['files.read', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.Stat,\n    title: 'Stat path',\n    description: 'Type, size, modification time and mode of a path, or exists: false.',\n    inputSchema: objectSchema({ path: str('Path to inspect.') }, ['path']),\n    capability: SandboxCapability.Files,\n    write: false,\n    policyKeys: ['files.read', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.Grep,\n    title: 'Search file contents',\n    description:\n      'Search files under a path for a regular expression. Returns path:line:text matches. Skips .git and node_modules.',\n    inputSchema: objectSchema(\n      {\n        pattern: str('JavaScript regular expression.'),\n        path: str('File or directory to search (default: the working directory).'),\n        glob: str('Only search files matching this glob (e.g. \"*.ts\").'),\n        ignore_case: { type: 'boolean' },\n        max_results: int('Maximum matches (default 200).', 1),\n      },\n      ['pattern'],\n    ),\n    capability: SandboxCapability.Files,\n    write: false,\n    policyKeys: ['files.read', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.Glob,\n    title: 'Find files',\n    description: 'Find files whose path (relative to path) matches a glob such as \"**/*.ts\".',\n    inputSchema: objectSchema(\n      {\n        pattern: str('Glob pattern.'),\n        path: str('Directory to search (default: the working directory).'),\n        max_results: int('Maximum paths (default 500).', 1),\n      },\n      ['pattern'],\n    ),\n    capability: SandboxCapability.Files,\n    write: false,\n    policyKeys: ['files.read', 'files'],\n  }),\n  tool({\n    name: SandboxMcpTool.GetHost,\n    title: 'Get port URL',\n    description:\n      'The URL (and any required headers) at which a port served inside the sandbox is reachable.',\n    inputSchema: objectSchema(\n      {\n        port: int('Port number.', 1),\n        protocol: {\n          type: 'string',\n          enum: Object.values(PortProtocol),\n          description: 'Default http.',\n        },\n      },\n      ['port'],\n    ),\n    capability: SandboxCapability.Ports,\n    write: false,\n    policyKeys: ['ports'],\n  }),\n];\n\nconst scopeOf = (options: SandboxMcpDescriptorOptionsIface): SandboxMcpScope =>\n  options.scope ?? { kind: SandboxMcpScopeKind.All };\n\ninterface HostedServersIface {\n  computerUse: boolean;\n  localMcp: boolean;\n  // Only this local server (a per-server address).\n  localServer?: string;\n}\n\n// Which hosted servers a projection serves, given its capabilities and scope.\n// Computer use and local MCP servers act on the machine: a reader gets neither.\nconst hostedServersOf = (options: SandboxMcpDescriptorOptionsIface): HostedServersIface => {\n  if (options.access === SandboxAccess.Read) return { computerUse: false, localMcp: false };\n  // Execute access acts on the machine but writes no files directly: hosted servers stay.\n  const capabilities = new Set(options.capabilities);\n  const scope = scopeOf(options);\n  const computerUse =\n    capabilities.has(SandboxCapability.ComputerUse) &&\n    scope.kind !== SandboxMcpScopeKind.LocalServer;\n  const localMcp =\n    capabilities.has(SandboxCapability.LocalMcp) && scope.kind !== SandboxMcpScopeKind.ComputerUse;\n  return scope.kind === SandboxMcpScopeKind.LocalServer\n    ? { computerUse, localMcp, localServer: scope.server }\n    : { computerUse, localMcp };\n};\n\nconst hostedSpec = (hosted: HostedToolIface): ToolSpecIface => {\n  const annotations: ToolAnnotationsIface = { ...mutating, ...hosted.tool.annotations };\n  return {\n    descriptor: { ...hosted.tool, name: hosted.name, annotations },\n    capability:\n      hosted.server.kind === SandboxHostedServerKind.ComputerUse\n        ? SandboxCapability.ComputerUse\n        : SandboxCapability.LocalMcp,\n    write: true,\n    policyKeys: hosted.policyKeys,\n    hosted,\n  };\n};\n\nconst toolSpecs = (options: SandboxMcpDescriptorOptionsIface): ToolSpecIface[] => {\n  const capabilities = new Set(options.capabilities);\n  // Shell-like capabilities imply processes for the projection.\n  const builtIn =\n    scopeOf(options).kind === SandboxMcpScopeKind.All\n      ? BUILT_IN_TOOLS.filter((spec) => capabilities.has(spec.capability))\n      : [];\n  // Read hides every mutating tool; execute hides only the file writes.\n  const visible =\n    options.access === SandboxAccess.Read\n      ? builtIn.filter((spec) => !spec.write)\n      : options.access === SandboxAccess.Execute\n        ? builtIn.filter((spec) => !spec.write || spec.capability !== SandboxCapability.Files)\n        : builtIn;\n  const hosted = hostedTools({\n    catalog: options.catalog ?? EMPTY_MCP_CATALOG,\n    ...hostedServersOf(options),\n    taken: new Set(builtIn.map((spec) => spec.descriptor.name)),\n  });\n  return [...visible, ...hosted.map(hostedSpec)];\n};\n\n// The projection's tools for a sandbox with these capabilities and the hosted\n// catalogs known so far, without a handle: what `tools/list` answers.\nexport const sandboxMcpToolDescriptors = (\n  options: SandboxMcpDescriptorOptionsIface,\n): ToolDescriptorIface[] => toolSpecs(options).map((spec) => spec.descriptor);\n\n// The toolPolicy keys a projection tool is decided by, most specific first\n// (its name, then capability keys such as `shell` or `files.write`), as the\n// projection checks them; null for a tool these options do not list. Lets the\n// MCP host raise an `ask` approval before it calls the projection.\nexport const sandboxMcpToolPolicyKeys = (\n  options: SandboxMcpDescriptorOptionsIface,\n  name: string,\n): string[] | null => {\n  const spec = toolSpecs(options).find((candidate) => candidate.descriptor.name === name);\n  return spec == null ? null : [name, ...spec.policyKeys];\n};\n\nexport interface CreateSandboxMcpServerArgsIface extends SandboxMcpDescriptorOptionsIface {\n  // Obtains (and on the first call starts) the sandbox. Called lazily.\n  getSandbox: () => Promise<NetworkSandboxSessionIface>;\n  // Keys are tool names or capability keys (`shell`, `files.write`, ...).\n  toolPolicy?: Record<string, ToolApproval>;\n  // Asked for tools whose policy is `ask`; no hook means deny.\n  approve?: (toolName: string, args: JsonObject) => Promise<boolean>;\n  shell?: SandboxShellMode;\n  name?: string;\n  version?: string;\n  // Fetch for sandbox-hosted MCP servers reached over HTTP (tests, service bindings).\n  fetch?: FetchLike;\n  limits?: Partial<SandboxMcpLimitsIface>;\n  onError?: (error: Error) => void;\n  // The sandbox when it is already attached (no start): a `tools/list` that\n  // finds a hosted catalog unknown reads it from the live sandbox before\n  // answering. Without a live sandbox the list answers at once and the catalog\n  // is learned in the background.\n  peekSandbox?: () => NetworkSandboxSessionIface | null;\n  // Called with the hosted catalogs whenever more of them become known.\n  onCatalog?: (catalog: SandboxMcpCatalogIface) => void;\n  // A background process started with `spawn` exited on its own and no client\n  // has read its exit (`process_output`) within `exitReportGraceMs`: the host\n  // reports it as a sandbox result. Never called for a process\n  // ended with `process_terminate` or by `close`.\n  onProcessExit?: (exit: SandboxProcessExitIface) => void;\n}\n\nexport interface SandboxProcessExitIface {\n  processId: string;\n  command: string;\n  // Null when the sandbox lost the process without an exit code.\n  exitCode: number | null;\n  // The end of each stream, at most `exitOutputChars`.\n  stdout: string;\n  stderr: string;\n}\n\nexport interface SandboxMcpLimitsIface {\n  // Characters of stdout/stderr returned per run (head and tail kept).\n  maxOutputChars: number;\n  // Files above this size are not inlined without a line range.\n  maxInlineBytes: number;\n  // Bytes of background-process output kept per stream.\n  processBufferBytes: number;\n  maxProcesses: number;\n  // How long an exit may go unread before onProcessExit reports it.\n  exitReportGraceMs: number;\n  // Characters of each stream's tail an exit report carries.\n  exitOutputChars: number;\n}\n\nconst DEFAULT_LIMITS: SandboxMcpLimitsIface = {\n  maxOutputChars: 64_000,\n  maxInlineBytes: 256 * 1024,\n  processBufferBytes: 4 * 1024 * 1024,\n  maxProcesses: 32,\n  exitReportGraceMs: 2_000,\n  exitOutputChars: 4_000,\n};\n\nexport interface SandboxMcpServerIface {\n  readonly descriptors: readonly ToolDescriptorIface[];\n  // Streamable HTTP MCP endpoint (2026-07-28 and stateless 2025 clients).\n  fetch(request: Request): Promise<Response>;\n  // Direct entry points for hosts that relay MCP themselves (MCP over ACP).\n  listTools(): ToolDescriptorIface[];\n  // `listTools` after what a `tools/list` does first (reading hosted catalogs\n  // from a live sandbox, or starting their discovery).\n  refreshTools(): Promise<ToolDescriptorIface[]>;\n  // Catalogs learned elsewhere (another projection of the same sandbox).\n  updateCatalog(catalog: SandboxMcpCatalogIface): void;\n  callTool(name: string, args: JsonObject, signal?: AbortSignal): Promise<CallToolResult>;\n  close(): Promise<void>;\n}\n\ninterface OutputBufferIface {\n  chunks: Uint8Array[];\n  // Absolute offset of chunks[0].\n  base: number;\n  size: number;\n}\n\ninterface BackgroundProcessIface {\n  process: SandboxProcessIface;\n  stdout: OutputBufferIface;\n  stderr: OutputBufferIface;\n  exitCode: number | null;\n  exited: boolean;\n  changed: Set<() => void>;\n  command: string;\n  // A client read the exit, or ended the process itself.\n  exitSeen: boolean;\n}\n\nconst textResult = (text: string): CallToolResult => ({ content: [{ type: 'text', text }] });\nconst jsonResult = (value: JsonValue): CallToolResult => textResult(JSON.stringify(value, null, 2));\nconst errorResult = (message: string): CallToolResult => ({\n  content: [{ type: 'text', text: message }],\n  isError: true,\n});\n\nconst truncateMiddle = (text: string, max: number): string => {\n  if (text.length <= max) return text;\n  const half = Math.floor(max / 2);\n  return `${text.slice(0, half)}\\n[... ${text.length - max} characters omitted ...]\\n${text.slice(text.length - half)}`;\n};\n\nconst listRequestSchema = z.object({ method: z.literal('tools/list') });\n\nconst runArgsSchema = z.object({\n  command: z.string().min(1),\n  cwd: z.string().optional(),\n  timeout_ms: z.number().int().positive().optional(),\n  env: z.record(z.string(), z.string()).optional(),\n});\nconst spawnArgsSchema = runArgsSchema.omit({ timeout_ms: true });\nconst processOutputArgsSchema = z.object({\n  process_id: z.string().min(1),\n  stdout_offset: z.number().int().nonnegative().optional(),\n  stderr_offset: z.number().int().nonnegative().optional(),\n  max_bytes: z.number().int().positive().optional(),\n  wait_ms: z.number().int().nonnegative().optional(),\n});\nconst processInputArgsSchema = z.object({\n  process_id: z.string().min(1),\n  data: z.string().optional(),\n  end: z.boolean().optional(),\n});\nconst processTerminateArgsSchema = z.object({\n  process_id: z.string().min(1),\n  signal: z.string().optional(),\n});\nconst readFileArgsSchema = z.object({\n  path: z.string().min(1),\n  offset: z.number().int().positive().optional(),\n  limit: z.number().int().positive().optional(),\n});\nconst writeFileArgsSchema = z.object({ path: z.string().min(1), content: z.string() });\nconst editFileArgsSchema = z.object({\n  path: z.string().min(1),\n  old_string: z.string().min(1),\n  new_string: z.string(),\n  replace_all: z.boolean().optional(),\n});\nconst pathArgsSchema = z.object({ path: z.string().min(1) });\nconst listDirArgsSchema = z.object({ path: z.string().optional() });\nconst grepArgsSchema = z.object({\n  pattern: z.string().min(1),\n  path: z.string().optional(),\n  glob: z.string().optional(),\n  ignore_case: z.boolean().optional(),\n  max_results: z.number().int().positive().optional(),\n});\nconst globArgsSchema = z.object({\n  pattern: z.string().min(1),\n  path: z.string().optional(),\n  max_results: z.number().int().positive().optional(),\n});\nconst getHostArgsSchema = z.object({\n  port: z.number().int().min(1).max(65535),\n  protocol: z.nativeEnum(PortProtocol).optional(),\n});\n\nconst appendOutput = (buffer: OutputBufferIface, chunk: Uint8Array, cap: number) => {\n  buffer.chunks.push(chunk);\n  buffer.size += chunk.byteLength;\n  while (buffer.size > cap && buffer.chunks.length > 1) {\n    const dropped = buffer.chunks.shift();\n    if (dropped == null) break;\n    buffer.size -= dropped.byteLength;\n    buffer.base += dropped.byteLength;\n  }\n};\n\nconst readOutput = (buffer: OutputBufferIface, offset: number, maxBytes: number) => {\n  const start = Math.max(offset, buffer.base);\n  const end = buffer.base + buffer.size;\n  const out = new Uint8Array(Math.max(0, Math.min(end - start, maxBytes)));\n  let position = buffer.base;\n  let written = 0;\n  for (const chunk of buffer.chunks) {\n    const chunkEnd = position + chunk.byteLength;\n    if (chunkEnd > start && written < out.byteLength) {\n      const from = Math.max(0, start - position);\n      const take = Math.min(chunk.byteLength - from, out.byteLength - written);\n      out.set(chunk.subarray(from, from + take), written);\n      written += take;\n    }\n    position = chunkEnd;\n  }\n  return {\n    data: utf8Decode(out),\n    offset: start,\n    next_offset: start + written,\n    skipped: start - offset,\n    available: end,\n  };\n};\n\nexport const createSandboxMcpServer = (\n  args: CreateSandboxMcpServerArgsIface,\n): SandboxMcpServerIface => {\n  const limits: SandboxMcpLimitsIface = { ...DEFAULT_LIMITS, ...args.limits };\n  let catalog: SandboxMcpCatalogIface = args.catalog ?? EMPTY_MCP_CATALOG;\n  let specs = toolSpecs({ ...args, catalog });\n  let byName = new Map(specs.map((spec) => [spec.descriptor.name, spec]));\n  const processes = new Map<string, BackgroundProcessIface>();\n  const served = hostedServersOf(args);\n  let handler: McpHttpHandler | null = null;\n  let learning: Promise<void> | null = null;\n  let discovering = false;\n  // Hosted servers whose known catalog was checked against the live server.\n  const checked = new Set<string>();\n\n  const asError = (cause: unknown): Error =>\n    cause instanceof Error ? cause : new Error(String(cause));\n  const reportError = (error: Error) => args.onError?.(error);\n\n  // Merges catalogs as they become known; a change relists the tools and tells\n  // `subscriptions/listen` clients (`notifications/tools/list_changed`).\n  const mergeCatalog = (next: Partial<SandboxMcpCatalogIface>): boolean => {\n    const merged: SandboxMcpCatalogIface = {\n      computerUse: next.computerUse ?? catalog.computerUse,\n      localMcp: next.localMcp ?? catalog.localMcp,\n    };\n    if (JSON.stringify(merged) === JSON.stringify(catalog)) return false;\n    catalog = merged;\n    specs = toolSpecs({ ...args, catalog });\n    byName = new Map(specs.map((spec) => [spec.descriptor.name, spec]));\n    handler?.notify.toolsChanged();\n    return true;\n  };\n\n  const unknownCatalogs = () => ({\n    computerUse: served.computerUse && catalog.computerUse == null,\n    localMcp: served.localMcp && catalog.localMcp == null,\n  });\n\n  const connections = createHostedMcpConnections({\n    getSandbox: () => sandboxFor(),\n    fetch: args.fetch,\n    name: args.name,\n    version: args.version,\n  });\n\n  // Reads the unknown hosted catalogs from an attached sandbox, once at a time.\n  const learnFrom = (sandbox: NetworkSandboxSessionIface): Promise<void> => {\n    const needed = unknownCatalogs();\n    if (!needed.computerUse && !needed.localMcp) return Promise.resolve();\n    learning ??= (async () => {\n      try {\n        if (mergeCatalog(await connections.learn(sandbox, needed))) args.onCatalog?.(catalog);\n      } finally {\n        learning = null;\n      }\n    })();\n    return learning;\n  };\n\n  // Every attach through this projection also learns what it does not know yet.\n  const sandboxFor = async (): Promise<NetworkSandboxSessionIface> => {\n    const sandbox = await args.getSandbox();\n    learnFrom(sandbox).catch((cause: unknown) => reportError(asError(cause)));\n    return sandbox;\n  };\n\n  // Before answering `tools/list`: a live sandbox is asked for the catalogs it\n  // can give now; without one, the first list attaches in the background (the\n  // only way to learn a catalog the provider cannot give) and the tools follow\n  // with `notifications/tools/list_changed`.\n  const beforeList = async (waitForDiscovery = false): Promise<void> => {\n    const needed = unknownCatalogs();\n    if (!needed.computerUse && !needed.localMcp) return;\n    const live = args.peekSandbox?.() ?? null;\n    if (live != null) {\n      // The combined projection stays responsive; dedicated endpoints need\n      // their live catalog before a harness can use them.\n      const discovered = learnFrom(live).catch((cause: unknown) => reportError(asError(cause)));\n      if (waitForDiscovery || scopeOf(args).kind !== SandboxMcpScopeKind.All) await discovered;\n      return;\n    }\n    if (discovering) return;\n    discovering = true;\n    sandboxFor()\n      .then((sandbox) => learnFrom(sandbox))\n      .catch((cause: unknown) => {\n        discovering = false;\n        reportError(asError(cause));\n      });\n  };\n\n  // A known catalog may be stale (the server changed since it was recorded).\n  // It is checked against the live server the first time a call opens that\n  // server, never by opening servers the session does not use; a change is\n  // announced like a new catalog.\n  const checkCatalog = (server: SandboxHostedServer): void => {\n    const key = server.kind === SandboxHostedServerKind.Local ? `local:${server.name}` : 'cu';\n    if (checked.has(key)) return;\n    checked.add(key);\n    void (async () => {\n      const tools = await connections.tools(server);\n      const next: Partial<SandboxMcpCatalogIface> =\n        server.kind === SandboxHostedServerKind.ComputerUse\n          ? { computerUse: tools }\n          : catalog.localMcp == null\n            ? {}\n            : { localMcp: { ...catalog.localMcp, [server.name]: tools } };\n      if (mergeCatalog(next)) args.onCatalog?.(catalog);\n    })().catch((cause: unknown) => {\n      checked.delete(key);\n      reportError(asError(cause));\n    });\n  };\n\n  const shell = createSandboxShell({ getSandbox: sandboxFor, mode: args.shell });\n  const isAllowed = async (\n    spec: ToolSpecIface,\n    name: string,\n    input: JsonObject,\n  ): Promise<boolean> => {\n    for (const key of [name, ...spec.policyKeys]) {\n      const decision = args.toolPolicy?.[key];\n      if (decision === ToolApproval.Allow) return true;\n      if (decision === ToolApproval.Ask)\n        return args.approve == null ? false : args.approve(name, input);\n    }\n    return true;\n  };\n\n  const backgroundProcess = (id: string): BackgroundProcessIface => {\n    const entry = processes.get(id);\n    if (entry == null) throw new Error(`no process ${id}; start one with spawn`);\n    return entry;\n  };\n\n  const notifyProcess = (entry: BackgroundProcessIface) => {\n    for (const listener of [...entry.changed]) listener();\n  };\n\n  // Up to four UTF-8 bytes per character are read back from the end.\n  const tailOf = (buffer: OutputBufferIface): string => {\n    const end = buffer.base + buffer.size;\n    const text = readOutput(\n      buffer,\n      end - limits.exitOutputChars * 4,\n      limits.exitOutputChars * 4,\n    ).data;\n    return text.length <= limits.exitOutputChars\n      ? text\n      : text.slice(text.length - limits.exitOutputChars);\n  };\n\n  let closed = false;\n  const reportExit = (id: string, entry: BackgroundProcessIface) => {\n    const report = args.onProcessExit;\n    if (report == null) return;\n    setTimeout(() => {\n      if (closed || entry.exitSeen) return;\n      entry.exitSeen = true;\n      report({\n        processId: id,\n        command: entry.command,\n        exitCode: entry.exitCode,\n        stdout: tailOf(entry.stdout),\n        stderr: tailOf(entry.stderr),\n      });\n    }, limits.exitReportGraceMs);\n  };\n\n  const pumpOutput = async (\n    entry: BackgroundProcessIface,\n    stream: ReadableStream<Uint8Array>,\n    buffer: OutputBufferIface,\n  ) => {\n    const reader = stream.getReader();\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        appendOutput(buffer, value, limits.processBufferBytes);\n        notifyProcess(entry);\n      }\n    } catch {\n      // Reported through `exited`.\n    }\n  };\n\n  const run = async (\n    name: string,\n    rawArgs: JsonObject,\n    signal: AbortSignal | undefined,\n  ): Promise<CallToolResult> => {\n    switch (name) {\n      case SandboxMcpTool.Run: {\n        const input = runArgsSchema.parse(rawArgs);\n        const result = await shell.run({\n          command: input.command,\n          cwd: input.cwd,\n          env: input.env,\n          timeoutMs: input.timeout_ms ?? 120_000,\n          signal,\n        });\n        return jsonResult({\n          exit_code: result.exitCode,\n          stdout: truncateMiddle(result.stdout, limits.maxOutputChars),\n          stderr: truncateMiddle(result.stderr, limits.maxOutputChars),\n        });\n      }\n      case SandboxMcpTool.Spawn: {\n        const input = spawnArgsSchema.parse(rawArgs);\n        if (processes.size >= limits.maxProcesses) {\n          for (const [id, entry] of processes)\n            if (entry.exited && entry.exitSeen) processes.delete(id);\n        }\n        if (processes.size >= limits.maxProcesses) {\n          return errorResult(\n            `too many background processes (${limits.maxProcesses}); terminate one first`,\n          );\n        }\n        const sandbox = await sandboxFor();\n        const child = await sandbox.spawn({\n          command: input.command,\n          shell: true,\n          cwd: input.cwd,\n          env: input.env,\n        });\n        const id = `p${crypto.randomUUID().slice(0, 8)}`;\n        const entry: BackgroundProcessIface = {\n          process: child,\n          stdout: { chunks: [], base: 0, size: 0 },\n          stderr: { chunks: [], base: 0, size: 0 },\n          exitCode: null,\n          exited: false,\n          changed: new Set(),\n          command: input.command,\n          exitSeen: false,\n        };\n        processes.set(id, entry);\n        void pumpOutput(entry, child.stdout, entry.stdout);\n        void pumpOutput(entry, child.stderr, entry.stderr);\n        child.wait().then(\n          (result) => {\n            entry.exited = true;\n            entry.exitCode = result.exitCode;\n            notifyProcess(entry);\n            reportExit(id, entry);\n          },\n          () => {\n            entry.exited = true;\n            notifyProcess(entry);\n            reportExit(id, entry);\n          },\n        );\n        return jsonResult({ process_id: id, pid: child.pid });\n      }\n      case SandboxMcpTool.ProcessOutput: {\n        const input = processOutputArgsSchema.parse(rawArgs);\n        const entry = backgroundProcess(input.process_id);\n        const stdoutOffset = input.stdout_offset ?? 0;\n        const stderrOffset = input.stderr_offset ?? 0;\n        const hasNews = () =>\n          entry.exited ||\n          entry.stdout.base + entry.stdout.size > stdoutOffset ||\n          entry.stderr.base + entry.stderr.size > stderrOffset;\n        const waitMs = Math.min(input.wait_ms ?? 0, 30_000);\n        if (waitMs > 0 && !hasNews()) {\n          await new Promise<void>((resolve) => {\n            const done = () => {\n              clearTimeout(timer);\n              entry.changed.delete(listener);\n              signal?.removeEventListener('abort', done);\n              resolve();\n            };\n            const listener = () => {\n              if (hasNews()) done();\n            };\n            const timer = setTimeout(done, waitMs);\n            entry.changed.add(listener);\n            signal?.addEventListener('abort', done, { once: true });\n          });\n        }\n        const maxBytes = input.max_bytes ?? 65_536;\n        if (entry.exited) entry.exitSeen = true;\n        return jsonResult({\n          stdout: readOutput(entry.stdout, stdoutOffset, maxBytes),\n          stderr: readOutput(entry.stderr, stderrOffset, maxBytes),\n          running: !entry.exited,\n          exit_code: entry.exitCode,\n        });\n      }\n      case SandboxMcpTool.ProcessInput: {\n        const input = processInputArgsSchema.parse(rawArgs);\n        const entry = backgroundProcess(input.process_id);\n        await entry.process.write(input.data ?? '', { end: input.end === true });\n        return jsonResult({ written: input.data?.length ?? 0, stdin_closed: input.end === true });\n      }\n      case SandboxMcpTool.ProcessTerminate: {\n        const input = processTerminateArgsSchema.parse(rawArgs);\n        const entry = backgroundProcess(input.process_id);\n        entry.exitSeen = true;\n        await entry.process.kill(input.signal);\n        const result = await entry.process.wait().catch(() => ({ exitCode: entry.exitCode ?? -1 }));\n        processes.delete(input.process_id);\n        return jsonResult({ process_id: input.process_id, exit_code: result.exitCode });\n      }\n      case SandboxMcpTool.ReadFile: {\n        const input = readFileArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const path = resolvePosixPath(sandbox.defaultWorkingDirectory, input.path);\n        const stat = await sandbox.stat({ path, abortSignal: signal });\n        if (stat == null) return errorResult(`${path}: no such file`);\n        if (stat.type === SandboxEntryType.Directory)\n          return errorResult(`${path} is a directory; use list_dir`);\n        const link = {\n          type: 'resource_link' as const,\n          uri: `${SANDBOX_FILE_RESOURCE_SCHEME}://${encodeURI(path)}`,\n          name: path.split('/').pop() ?? path,\n          size: stat.size,\n        };\n        const ranged = input.offset != null || input.limit != null;\n        const startLine = input.offset ?? 1;\n        const endLine = input.limit == null ? undefined : startLine + input.limit - 1;\n        if (!ranged && stat.size > limits.maxInlineBytes) {\n          const head =\n            (await sandbox.readTextFile({\n              path,\n              startLine: 1,\n              endLine: 200,\n              abortSignal: signal,\n            })) ?? '';\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `${path} is ${stat.size} bytes, too large to return whole. First 200 lines below; read more with offset and limit, or fetch the resource.\\n\\n${truncateMiddle(head, limits.maxOutputChars)}`,\n              },\n              link,\n            ],\n          };\n        }\n        const text = await sandbox.readTextFile({\n          path,\n          startLine: ranged ? startLine : undefined,\n          endLine,\n          abortSignal: signal,\n        });\n        if (text == null) return errorResult(`${path}: no such file`);\n        if (text.includes('\\u0000')) {\n          return {\n            content: [\n              { type: 'text', text: `${path} is a binary file (${stat.size} bytes).` },\n              link,\n            ],\n          };\n        }\n        return textResult(\n          truncateMiddle(text, Math.max(limits.maxOutputChars, limits.maxInlineBytes)),\n        );\n      }\n      case SandboxMcpTool.WriteFile: {\n        const input = writeFileArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const path = resolvePosixPath(sandbox.defaultWorkingDirectory, input.path);\n        await sandbox.writeTextFile({ path, content: input.content, abortSignal: signal });\n        return textResult(\n          `Wrote ${new TextEncoder().encode(input.content).byteLength} bytes to ${path}`,\n        );\n      }\n      case SandboxMcpTool.EditFile: {\n        const input = editFileArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const path = resolvePosixPath(sandbox.defaultWorkingDirectory, input.path);\n        const text = await sandbox.readTextFile({ path, abortSignal: signal });\n        if (text == null) return errorResult(`${path}: no such file`);\n        const count = text.split(input.old_string).length - 1;\n        if (count === 0) return errorResult(`old_string was not found in ${path}`);\n        if (count > 1 && input.replace_all !== true) {\n          return errorResult(\n            `old_string occurs ${count} times in ${path}; add surrounding context or set replace_all`,\n          );\n        }\n        const next =\n          input.replace_all === true\n            ? text.split(input.old_string).join(input.new_string)\n            : text.replace(input.old_string, () => input.new_string);\n        await sandbox.writeTextFile({ path, content: next, abortSignal: signal });\n        return textResult(\n          `Replaced ${input.replace_all === true ? count : 1} occurrence(s) in ${path}`,\n        );\n      }\n      case SandboxMcpTool.ListDir: {\n        const input = listDirArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const path = resolvePosixPath(sandbox.defaultWorkingDirectory, input.path ?? '.');\n        const entries = await sandbox.readDir({ path, abortSignal: signal });\n        return jsonResult({\n          path,\n          entries: entries.map((entry) => ({\n            name: entry.name,\n            type: entry.type,\n            size: entry.size,\n          })),\n        });\n      }\n      case SandboxMcpTool.Stat: {\n        const input = pathArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const path = resolvePosixPath(sandbox.defaultWorkingDirectory, input.path);\n        const stat = await sandbox.stat({ path, abortSignal: signal });\n        return jsonResult(stat == null ? { path, exists: false } : { exists: true, ...stat });\n      }\n      case SandboxMcpTool.Grep: {\n        const input = grepArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const result = await grepFiles({\n          sandbox,\n          cwd: sandbox.defaultWorkingDirectory,\n          pattern: input.pattern,\n          path: input.path,\n          glob: input.glob,\n          ignoreCase: input.ignore_case,\n          maxResults: input.max_results ?? 200,\n          signal,\n        });\n        const lines = result.matches.map((match) => `${match.path}:${match.line}:${match.text}`);\n        if (result.truncated) lines.push('[results truncated]');\n        return textResult(lines.length === 0 ? 'No matches.' : lines.join('\\n'));\n      }\n      case SandboxMcpTool.Glob: {\n        const input = globArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const result = await globFiles({\n          sandbox,\n          cwd: sandbox.defaultWorkingDirectory,\n          pattern: input.pattern,\n          path: input.path,\n          maxResults: input.max_results ?? 500,\n          signal,\n        });\n        const lines = [...result.paths];\n        if (result.truncated) lines.push('[results truncated]');\n        return textResult(lines.length === 0 ? 'No files matched.' : lines.join('\\n'));\n      }\n      case SandboxMcpTool.GetHost: {\n        const input = getHostArgsSchema.parse(rawArgs);\n        const sandbox = await sandboxFor();\n        const endpoint = await sandbox.getPortEndpoint({\n          port: input.port,\n          protocol: input.protocol,\n        });\n        return jsonResult({ url: endpoint.url, headers: endpoint.headers ?? {} });\n      }\n      default:\n        return errorResult(`unknown tool ${name}`);\n    }\n  };\n\n  const callTool = async (\n    name: string,\n    rawArgs: JsonObject,\n    signal?: AbortSignal,\n  ): Promise<CallToolResult> => {\n    const spec = byName.get(name);\n    if (spec == null) return errorResult(`unknown tool ${name}`);\n    if (!(await isAllowed(spec, name, rawArgs))) return errorResult(`${name} was not approved`);\n    try {\n      if (spec.hosted != null) {\n        try {\n          return await connections.call(spec.hosted.server, spec.hosted.tool.name, rawArgs);\n        } finally {\n          // Also after a failure: a stale tool name is how a changed catalog shows.\n          checkCatalog(spec.hosted.server);\n        }\n      }\n      return await run(name, rawArgs, signal);\n    } catch (error) {\n      if (error instanceof z.ZodError)\n        return errorResult(`invalid arguments: ${z.prettifyError(error)}`);\n      return errorResult(error instanceof Error ? error.message : String(error));\n    }\n  };\n\n  const readResource = async (uri: URL): Promise<ReadResourceResult> => {\n    const path = decodeURI(uri.pathname);\n    const spec = byName.get(SandboxMcpTool.ReadFile);\n    if (spec == null || !(await isAllowed(spec, SandboxMcpTool.ReadFile, { path })))\n      throw new Error(`${path}: file read was not approved`);\n    const sandbox = await sandboxFor();\n    const bytes = await sandbox.readBinaryFile({ path });\n    if (bytes == null) throw new Error(`${path}: no such file`);\n    const text = new TextDecoder('utf-8', { fatal: false }).decode(bytes);\n    if (!text.includes('\\u0000') && !text.includes('\uFFFD')) {\n      return { contents: [{ uri: uri.href, mimeType: 'text/plain', text }] };\n    }\n    return {\n      contents: [\n        { uri: uri.href, mimeType: 'application/octet-stream', blob: bytesToBase64(bytes) },\n      ],\n    };\n  };\n\n  const buildServer = (): McpServer => {\n    const server = new McpServer(\n      { name: args.name ?? 'final-sandbox', version: args.version ?? '1' },\n      // The hosted servers' tools can follow the first list (see beforeList).\n      {\n        capabilities: {\n          tools: { listChanged: served.computerUse || served.localMcp },\n          resources: {},\n        },\n      },\n    );\n    for (const spec of specs) {\n      server.registerTool(\n        spec.descriptor.name,\n        {\n          title: spec.descriptor.annotations?.title,\n          description: spec.descriptor.description,\n          inputSchema: fromJsonSchema<JsonObject>(spec.descriptor.inputSchema),\n          annotations: spec.descriptor.annotations,\n        },\n        (input, ctx) => callTool(spec.descriptor.name, input, ctx.mcpReq.signal),\n      );\n    }\n    if (args.capabilities.includes(SandboxCapability.Files)) {\n      server.registerResource(\n        'sandbox-file',\n        new ResourceTemplate(`${SANDBOX_FILE_RESOURCE_SCHEME}://{+path}`, { list: undefined }),\n        { description: 'A file in the sandbox, by absolute path.' },\n        (uri) => readResource(uri),\n      );\n    }\n    return server;\n  };\n\n  const isListRequest = async (request: Request): Promise<boolean> => {\n    if (request.method !== 'POST') return false;\n    try {\n      const body: unknown = await request.clone().json();\n      return (Array.isArray(body) ? body : [body]).some(\n        (message) => listRequestSchema.safeParse(message).success,\n      );\n    } catch {\n      return false;\n    }\n  };\n\n  const getHandler = () => {\n    handler ??= createMcpHandler(() => buildServer(), { onerror: args.onError });\n    return handler;\n  };\n\n  return {\n    get descriptors() {\n      return specs.map((spec) => spec.descriptor);\n    },\n    fetch: async (request) => {\n      if (await isListRequest(request)) await beforeList();\n      return getHandler().fetch(request);\n    },\n    listTools: () => specs.map((spec) => spec.descriptor),\n    refreshTools: async () => {\n      await beforeList(true);\n      return specs.map((spec) => spec.descriptor);\n    },\n    updateCatalog: (next) => {\n      mergeCatalog(next);\n    },\n    callTool,\n    close: async () => {\n      closed = true;\n      await shell.close();\n      for (const entry of processes.values()) await entry.process.kill().catch(() => undefined);\n      processes.clear();\n      await connections.close();\n      await handler?.close();\n    },\n  };\n};\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP,YAAY,OAAO;AAEnB,SAAS,eAAe,oBAA8C;AACtE,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,WAAW,iBAAiB;AACrC,SAAS,oBAAoB,wBAAwB;AACrD,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAEP;AAAA,EACE;AAAA,EACA,2BAAAA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,oBAAAC,yBAAwB;AAa1B,IAAK,iBAAL,kBAAKC,oBAAL;AACL,EAAAA,gBAAA,SAAM;AACN,EAAAA,gBAAA,WAAQ;AACR,EAAAA,gBAAA,mBAAgB;AAChB,EAAAA,gBAAA,kBAAe;AACf,EAAAA,gBAAA,sBAAmB;AACnB,EAAAA,gBAAA,cAAW;AACX,EAAAA,gBAAA,eAAY;AACZ,EAAAA,gBAAA,cAAW;AACX,EAAAA,gBAAA,aAAU;AACV,EAAAA,gBAAA,UAAO;AACP,EAAAA,gBAAA,UAAO;AACP,EAAAA,gBAAA,UAAO;AACP,EAAAA,gBAAA,aAAU;AAbA,SAAAA;AAAA,GAAA;AAmBL,IAAK,sBAAL,kBAAKC,yBAAL;AACL,EAAAA,qBAAA,SAAM;AACN,EAAAA,qBAAA,YAAS;AACT,EAAAA,qBAAA,iBAAc;AACd,EAAAA,qBAAA,iBAAc;AAJJ,SAAAA;AAAA,GAAA;AAWL,MAAM,+BAA+B;AAqB5C,MAAM,eAAe,CAAC,YAAwB,cAAoC;AAAA,EAChF,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA,sBAAsB;AACxB;AAEA,MAAM,MAAM,CAAC,iBAAqC,EAAE,MAAM,UAAU,YAAY;AAChF,MAAM,MAAM,CAAC,aAAqB,UAAU,OAAmB;AAAA,EAC7D,MAAM;AAAA,EACN;AAAA,EACA;AACF;AACA,MAAM,YAAwB;AAAA,EAC5B,MAAM;AAAA,EACN,sBAAsB,EAAE,MAAM,SAAS;AAAA,EACvC,aAAa;AACf;AAIA,MAAM,WAAW;AAAA,EACf,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,eAAe;AACjB;AACA,MAAM,WAAW;AAAA,EACf,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,eAAe;AACjB;AAEA,MAAM,OAAO,CAAC,SAUO;AACnB,QAAM,cAAoC;AAAA,IACxC,OAAO,KAAK;AAAA,IACZ,GAAI,KAAK,QAAQ,WAAW;AAAA,EAC9B;AACA,MAAI,KAAK,eAAe,KAAM,aAAY,kBAAkB,KAAK;AACjE,MAAI,KAAK,cAAc,KAAM,aAAY,iBAAiB,KAAK;AAC/D,SAAO;AAAA,IACL,YAAY;AAAA,MACV,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,aAAa,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,OAAO,KAAK;AAAA,IACZ,YAAY,KAAK;AAAA,EACnB;AACF;AAEA,MAAM,iBAA2C;AAAA,EAC/C,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,SAAS,IAAI,0BAA0B;AAAA,QACvC,KAAK,IAAI,uEAAuE;AAAA,QAChF,YAAY,IAAI,kDAAkD,CAAC;AAAA,QACnE,KAAK;AAAA,MACP;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,SAAS,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,SAAS,IAAI,4BAA4B;AAAA,QACzC,KAAK,IAAI,sBAAsB;AAAA,QAC/B,KAAK;AAAA,MACP;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,SAAS,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,YAAY,IAAI,2BAA2B;AAAA,QAC3C,eAAe,IAAI,0BAA0B;AAAA,QAC7C,eAAe,IAAI,0BAA0B;AAAA,QAC7C,WAAW,IAAI,uDAAuD,CAAC;AAAA,QACvE,SAAS,IAAI,0DAA0D;AAAA,MACzE;AAAA,MACA,CAAC,YAAY;AAAA,IACf;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,SAAS,SAAS;AAAA,IAC/B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,QACE,YAAY,IAAI,2BAA2B;AAAA,QAC3C,MAAM,IAAI,gBAAgB;AAAA,QAC1B,KAAK,EAAE,MAAM,UAAU;AAAA,MACzB;AAAA,MACA,CAAC,YAAY;AAAA,IACf;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,SAAS,SAAS;AAAA,IAC/B,aAAa;AAAA,EACf,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,QACE,YAAY,IAAI,2BAA2B;AAAA,QAC3C,QAAQ,IAAI,gCAAgC;AAAA,MAC9C;AAAA,MACA,CAAC,YAAY;AAAA,IACf;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,SAAS,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,MAAM,IAAI,6DAA6D;AAAA,QACvE,QAAQ,IAAI,iCAAiC,CAAC;AAAA,QAC9C,OAAO,IAAI,4BAA4B,CAAC;AAAA,MAC1C;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,cAAc,OAAO;AAAA,EACpC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,aAAa,EAAE,MAAM,IAAI,YAAY,GAAG,SAAS,IAAI,oBAAoB,EAAE,GAAG;AAAA,MACzF;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,eAAe,OAAO;AAAA,EACrC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,MAAM,IAAI,YAAY;AAAA,QACtB,YAAY,IAAI,wBAAwB;AAAA,QACxC,YAAY,IAAI,mBAAmB;AAAA,QACnC,aAAa,EAAE,MAAM,WAAW,aAAa,4BAA4B;AAAA,MAC3E;AAAA,MACA,CAAC,QAAQ,cAAc,YAAY;AAAA,IACrC;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,eAAe,OAAO;AAAA,EACrC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,MACX,EAAE,MAAM,IAAI,kDAAkD,EAAE;AAAA,MAChE,CAAC;AAAA,IACH;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,cAAc,OAAO;AAAA,EACpC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,aAAa,EAAE,MAAM,IAAI,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC;AAAA,IACrE,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,cAAc,OAAO;AAAA,EACpC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,SAAS,IAAI,gCAAgC;AAAA,QAC7C,MAAM,IAAI,+DAA+D;AAAA,QACzE,MAAM,IAAI,qDAAqD;AAAA,QAC/D,aAAa,EAAE,MAAM,UAAU;AAAA,QAC/B,aAAa,IAAI,kCAAkC,CAAC;AAAA,MACtD;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,cAAc,OAAO;AAAA,EACpC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,MACX;AAAA,QACE,SAAS,IAAI,eAAe;AAAA,QAC5B,MAAM,IAAI,uDAAuD;AAAA,QACjE,aAAa,IAAI,gCAAgC,CAAC;AAAA,MACpD;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,cAAc,OAAO;AAAA,EACpC,CAAC;AAAA,EACD,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,IACP,aACE;AAAA,IACF,aAAa;AAAA,MACX;AAAA,QACE,MAAM,IAAI,gBAAgB,CAAC;AAAA,QAC3B,UAAU;AAAA,UACR,MAAM;AAAA,UACN,MAAM,OAAO,OAAO,YAAY;AAAA,UAChC,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAAA,IACA,YAAY,kBAAkB;AAAA,IAC9B,OAAO;AAAA,IACP,YAAY,CAAC,OAAO;AAAA,EACtB,CAAC;AACH;AAEA,MAAM,UAAU,CAAC,YACf,QAAQ,SAAS,EAAE,MAAM,gBAAwB;AAWnD,MAAM,kBAAkB,CAAC,YAAkE;AACzF,MAAI,QAAQ,WAAW,cAAc,KAAM,QAAO,EAAE,aAAa,OAAO,UAAU,MAAM;AAExF,QAAM,eAAe,IAAI,IAAI,QAAQ,YAAY;AACjD,QAAM,QAAQ,QAAQ,OAAO;AAC7B,QAAM,cACJ,aAAa,IAAI,kBAAkB,WAAW,KAC9C,MAAM,SAAS;AACjB,QAAM,WACJ,aAAa,IAAI,kBAAkB,QAAQ,KAAK,MAAM,SAAS;AACjE,SAAO,MAAM,SAAS,kCAClB,EAAE,aAAa,UAAU,aAAa,MAAM,OAAO,IACnD,EAAE,aAAa,SAAS;AAC9B;AAEA,MAAM,aAAa,CAAC,WAA2C;AAC7D,QAAM,cAAoC,EAAE,GAAG,UAAU,GAAG,OAAO,KAAK,YAAY;AACpF,SAAO;AAAA,IACL,YAAY,EAAE,GAAG,OAAO,MAAM,MAAM,OAAO,MAAM,YAAY;AAAA,IAC7D,YACE,OAAO,OAAO,SAAS,wBAAwB,cAC3C,kBAAkB,cAClB,kBAAkB;AAAA,IACxB,OAAO;AAAA,IACP,YAAY,OAAO;AAAA,IACnB;AAAA,EACF;AACF;AAEA,MAAM,YAAY,CAAC,YAA+D;AAChF,QAAM,eAAe,IAAI,IAAI,QAAQ,YAAY;AAEjD,QAAM,UACJ,QAAQ,OAAO,EAAE,SAAS,kBACtB,eAAe,OAAO,CAAC,SAAS,aAAa,IAAI,KAAK,UAAU,CAAC,IACjE,CAAC;AAEP,QAAM,UACJ,QAAQ,WAAW,cAAc,OAC7B,QAAQ,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,IACpC,QAAQ,WAAW,cAAc,UAC/B,QAAQ,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,KAAK,eAAe,kBAAkB,KAAK,IACnF;AACR,QAAM,SAAS,YAAY;AAAA,IACzB,SAAS,QAAQ,WAAW;AAAA,IAC5B,GAAG,gBAAgB,OAAO;AAAA,IAC1B,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC;AAAA,EAC5D,CAAC;AACD,SAAO,CAAC,GAAG,SAAS,GAAG,OAAO,IAAI,UAAU,CAAC;AAC/C;AAIO,MAAM,4BAA4B,CACvC,YAC0B,UAAU,OAAO,EAAE,IAAI,CAAC,SAAS,KAAK,UAAU;AAMrE,MAAM,2BAA2B,CACtC,SACA,SACoB;AACpB,QAAM,OAAO,UAAU,OAAO,EAAE,KAAK,CAAC,cAAc,UAAU,WAAW,SAAS,IAAI;AACtF,SAAO,QAAQ,OAAO,OAAO,CAAC,MAAM,GAAG,KAAK,UAAU;AACxD;AAsDA,MAAM,iBAAwC;AAAA,EAC5C,gBAAgB;AAAA,EAChB,gBAAgB,MAAM;AAAA,EACtB,oBAAoB,IAAI,OAAO;AAAA,EAC/B,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,iBAAiB;AACnB;AAoCA,MAAM,aAAa,CAAC,UAAkC,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC,EAAE;AAC1F,MAAM,aAAa,CAAC,UAAqC,WAAW,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAClG,MAAM,cAAc,CAAC,aAAqC;AAAA,EACxD,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,EACzC,SAAS;AACX;AAEA,MAAM,iBAAiB,CAAC,MAAc,QAAwB;AAC5D,MAAI,KAAK,UAAU,IAAK,QAAO;AAC/B,QAAM,OAAO,KAAK,MAAM,MAAM,CAAC;AAC/B,SAAO,GAAG,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA,OAAU,KAAK,SAAS,GAAG;AAAA,EAA6B,KAAK,MAAM,KAAK,SAAS,IAAI,CAAC;AACrH;AAEA,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,YAAY,EAAE,CAAC;AAEtE,MAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AACjD,CAAC;AACD,MAAM,kBAAkB,cAAc,KAAK,EAAE,YAAY,KAAK,CAAC;AAC/D,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACvD,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACvD,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AACnD,CAAC;AACD,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,KAAK,EAAE,QAAQ,EAAE,SAAS;AAC5B,CAAC;AACD,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC;AACD,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC9C,CAAC;AACD,MAAM,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC;AACrF,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;AACD,MAAM,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAC3D,MAAM,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAClE,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC;AACD,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACpD,CAAC;AACD,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;AAAA,EACvC,UAAU,EAAE,WAAW,YAAY,EAAE,SAAS;AAChD,CAAC;AAED,MAAM,eAAe,CAAC,QAA2B,OAAmB,QAAgB;AAClF,SAAO,OAAO,KAAK,KAAK;AACxB,SAAO,QAAQ,MAAM;AACrB,SAAO,OAAO,OAAO,OAAO,OAAO,OAAO,SAAS,GAAG;AACpD,UAAM,UAAU,OAAO,OAAO,MAAM;AACpC,QAAI,WAAW,KAAM;AACrB,WAAO,QAAQ,QAAQ;AACvB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACF;AAEA,MAAM,aAAa,CAAC,QAA2B,QAAgB,aAAqB;AAClF,QAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,IAAI;AAC1C,QAAM,MAAM,OAAO,OAAO,OAAO;AACjC,QAAM,MAAM,IAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,MAAM,OAAO,QAAQ,CAAC,CAAC;AACvE,MAAI,WAAW,OAAO;AACtB,MAAI,UAAU;AACd,aAAW,SAAS,OAAO,QAAQ;AACjC,UAAM,WAAW,WAAW,MAAM;AAClC,QAAI,WAAW,SAAS,UAAU,IAAI,YAAY;AAChD,YAAM,OAAO,KAAK,IAAI,GAAG,QAAQ,QAAQ;AACzC,YAAM,OAAO,KAAK,IAAI,MAAM,aAAa,MAAM,IAAI,aAAa,OAAO;AACvE,UAAI,IAAI,MAAM,SAAS,MAAM,OAAO,IAAI,GAAG,OAAO;AAClD,iBAAW;AAAA,IACb;AACA,eAAW;AAAA,EACb;AACA,SAAO;AAAA,IACL,MAAM,WAAW,GAAG;AAAA,IACpB,QAAQ;AAAA,IACR,aAAa,QAAQ;AAAA,IACrB,SAAS,QAAQ;AAAA,IACjB,WAAW;AAAA,EACb;AACF;AAEO,MAAM,yBAAyB,CACpC,SAC0B;AAC1B,QAAM,SAAgC,EAAE,GAAG,gBAAgB,GAAG,KAAK,OAAO;AAC1E,MAAI,UAAkC,KAAK,WAAW;AACtD,MAAI,QAAQ,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAC1C,MAAI,SAAS,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,WAAW,MAAM,IAAI,CAAC,CAAC;AACtE,QAAM,YAAY,oBAAI,IAAoC;AAC1D,QAAM,SAAS,gBAAgB,IAAI;AACnC,MAAI,UAAiC;AACrC,MAAI,WAAiC;AACrC,MAAI,cAAc;AAElB,QAAM,UAAU,oBAAI,IAAY;AAEhC,QAAM,UAAU,CAAC,UACf,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,QAAM,cAAc,CAAC,UAAiB,KAAK,UAAU,KAAK;AAI1D,QAAM,eAAe,CAAC,SAAmD;AACvE,UAAM,SAAiC;AAAA,MACrC,aAAa,KAAK,eAAe,QAAQ;AAAA,MACzC,UAAU,KAAK,YAAY,QAAQ;AAAA,IACrC;AACA,QAAI,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,OAAO,EAAG,QAAO;AAC/D,cAAU;AACV,YAAQ,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AACtC,aAAS,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,WAAW,MAAM,IAAI,CAAC,CAAC;AAClE,aAAS,OAAO,aAAa;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,OAAO;AAAA,IAC7B,aAAa,OAAO,eAAe,QAAQ,eAAe;AAAA,IAC1D,UAAU,OAAO,YAAY,QAAQ,YAAY;AAAA,EACnD;AAEA,QAAM,cAAc,2BAA2B;AAAA,IAC7C,YAAY,MAAM,WAAW;AAAA,IAC7B,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,EAChB,CAAC;AAGD,QAAM,YAAY,CAAC,YAAuD;AACxE,UAAM,SAAS,gBAAgB;AAC/B,QAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAU,QAAO,QAAQ,QAAQ;AACpE,kBAAc,YAAY;AACxB,UAAI;AACF,YAAI,aAAa,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,EAAG,MAAK,YAAY,OAAO;AAAA,MACtF,UAAE;AACA,mBAAW;AAAA,MACb;AAAA,IACF,GAAG;AACH,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,YAAiD;AAClE,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,cAAU,OAAO,EAAE,MAAM,CAAC,UAAmB,YAAY,QAAQ,KAAK,CAAC,CAAC;AACxE,WAAO;AAAA,EACT;AAMA,QAAM,aAAa,OAAO,mBAAmB,UAAyB;AACpE,UAAM,SAAS,gBAAgB;AAC/B,QAAI,CAAC,OAAO,eAAe,CAAC,OAAO,SAAU;AAC7C,UAAM,OAAO,KAAK,cAAc,KAAK;AACrC,QAAI,QAAQ,MAAM;AAGhB,YAAM,aAAa,UAAU,IAAI,EAAE,MAAM,CAAC,UAAmB,YAAY,QAAQ,KAAK,CAAC,CAAC;AACxF,UAAI,oBAAoB,QAAQ,IAAI,EAAE,SAAS,gBAAyB,OAAM;AAC9E;AAAA,IACF;AACA,QAAI,YAAa;AACjB,kBAAc;AACd,eAAW,EACR,KAAK,CAAC,YAAY,UAAU,OAAO,CAAC,EACpC,MAAM,CAAC,UAAmB;AACzB,oBAAc;AACd,kBAAY,QAAQ,KAAK,CAAC;AAAA,IAC5B,CAAC;AAAA,EACL;AAMA,QAAM,eAAe,CAAC,WAAsC;AAC1D,UAAM,MAAM,OAAO,SAAS,wBAAwB,QAAQ,SAAS,OAAO,IAAI,KAAK;AACrF,QAAI,QAAQ,IAAI,GAAG,EAAG;AACtB,YAAQ,IAAI,GAAG;AACf,UAAM,YAAY;AAChB,YAAM,QAAQ,MAAM,YAAY,MAAM,MAAM;AAC5C,YAAM,OACJ,OAAO,SAAS,wBAAwB,cACpC,EAAE,aAAa,MAAM,IACrB,QAAQ,YAAY,OAClB,CAAC,IACD,EAAE,UAAU,EAAE,GAAG,QAAQ,UAAU,CAAC,OAAO,IAAI,GAAG,MAAM,EAAE;AAClE,UAAI,aAAa,IAAI,EAAG,MAAK,YAAY,OAAO;AAAA,IAClD,GAAG,EAAE,MAAM,CAAC,UAAmB;AAC7B,cAAQ,OAAO,GAAG;AAClB,kBAAY,QAAQ,KAAK,CAAC;AAAA,IAC5B,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,mBAAmB,EAAE,YAAY,YAAY,MAAM,KAAK,MAAM,CAAC;AAC7E,QAAM,YAAY,OAChB,MACA,MACA,UACqB;AACrB,eAAW,OAAO,CAAC,MAAM,GAAG,KAAK,UAAU,GAAG;AAC5C,YAAM,WAAW,KAAK,aAAa,GAAG;AACtC,UAAI,aAAa,aAAa,MAAO,QAAO;AAC5C,UAAI,aAAa,aAAa;AAC5B,eAAO,KAAK,WAAW,OAAO,QAAQ,KAAK,QAAQ,MAAM,KAAK;AAAA,IAClE;AACA,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,CAAC,OAAuC;AAChE,UAAM,QAAQ,UAAU,IAAI,EAAE;AAC9B,QAAI,SAAS,KAAM,OAAM,IAAI,MAAM,cAAc,EAAE,wBAAwB;AAC3E,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,CAAC,UAAkC;AACvD,eAAW,YAAY,CAAC,GAAG,MAAM,OAAO,EAAG,UAAS;AAAA,EACtD;AAGA,QAAM,SAAS,CAAC,WAAsC;AACpD,UAAM,MAAM,OAAO,OAAO,OAAO;AACjC,UAAM,OAAO;AAAA,MACX;AAAA,MACA,MAAM,OAAO,kBAAkB;AAAA,MAC/B,OAAO,kBAAkB;AAAA,IAC3B,EAAE;AACF,WAAO,KAAK,UAAU,OAAO,kBACzB,OACA,KAAK,MAAM,KAAK,SAAS,OAAO,eAAe;AAAA,EACrD;AAEA,MAAI,SAAS;AACb,QAAM,aAAa,CAAC,IAAY,UAAkC;AAChE,UAAM,SAAS,KAAK;AACpB,QAAI,UAAU,KAAM;AACpB,eAAW,MAAM;AACf,UAAI,UAAU,MAAM,SAAU;AAC9B,YAAM,WAAW;AACjB,aAAO;AAAA,QACL,WAAW;AAAA,QACX,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,QAAQ,OAAO,MAAM,MAAM;AAAA,QAC3B,QAAQ,OAAO,MAAM,MAAM;AAAA,MAC7B,CAAC;AAAA,IACH,GAAG,OAAO,iBAAiB;AAAA,EAC7B;AAEA,QAAM,aAAa,OACjB,OACA,QACA,WACG;AACH,UAAM,SAAS,OAAO,UAAU;AAChC,QAAI;AACF,iBAAS;AACP,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,YAAI,KAAM;AACV,qBAAa,QAAQ,OAAO,OAAO,kBAAkB;AACrD,sBAAc,KAAK;AAAA,MACrB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,MAAM,OACV,MACA,SACA,WAC4B;AAC5B,YAAQ,MAAM;AAAA,MACZ,KAAK,iBAAoB;AACvB,cAAM,QAAQ,cAAc,MAAM,OAAO;AACzC,cAAM,SAAS,MAAM,MAAM,IAAI;AAAA,UAC7B,SAAS,MAAM;AAAA,UACf,KAAK,MAAM;AAAA,UACX,KAAK,MAAM;AAAA,UACX,WAAW,MAAM,cAAc;AAAA,UAC/B;AAAA,QACF,CAAC;AACD,eAAO,WAAW;AAAA,UAChB,WAAW,OAAO;AAAA,UAClB,QAAQ,eAAe,OAAO,QAAQ,OAAO,cAAc;AAAA,UAC3D,QAAQ,eAAe,OAAO,QAAQ,OAAO,cAAc;AAAA,QAC7D,CAAC;AAAA,MACH;AAAA,MACA,KAAK,qBAAsB;AACzB,cAAM,QAAQ,gBAAgB,MAAM,OAAO;AAC3C,YAAI,UAAU,QAAQ,OAAO,cAAc;AACzC,qBAAW,CAACC,KAAIC,MAAK,KAAK;AACxB,gBAAIA,OAAM,UAAUA,OAAM,SAAU,WAAU,OAAOD,GAAE;AAAA,QAC3D;AACA,YAAI,UAAU,QAAQ,OAAO,cAAc;AACzC,iBAAO;AAAA,YACL,kCAAkC,OAAO,YAAY;AAAA,UACvD;AAAA,QACF;AACA,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,QAAQ,MAAM,QAAQ,MAAM;AAAA,UAChC,SAAS,MAAM;AAAA,UACf,OAAO;AAAA,UACP,KAAK,MAAM;AAAA,UACX,KAAK,MAAM;AAAA,QACb,CAAC;AACD,cAAM,KAAK,IAAI,OAAO,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAC9C,cAAM,QAAgC;AAAA,UACpC,SAAS;AAAA,UACT,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE;AAAA,UACvC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE;AAAA,UACvC,UAAU;AAAA,UACV,QAAQ;AAAA,UACR,SAAS,oBAAI,IAAI;AAAA,UACjB,SAAS,MAAM;AAAA,UACf,UAAU;AAAA,QACZ;AACA,kBAAU,IAAI,IAAI,KAAK;AACvB,aAAK,WAAW,OAAO,MAAM,QAAQ,MAAM,MAAM;AACjD,aAAK,WAAW,OAAO,MAAM,QAAQ,MAAM,MAAM;AACjD,cAAM,KAAK,EAAE;AAAA,UACX,CAAC,WAAW;AACV,kBAAM,SAAS;AACf,kBAAM,WAAW,OAAO;AACxB,0BAAc,KAAK;AACnB,uBAAW,IAAI,KAAK;AAAA,UACtB;AAAA,UACA,MAAM;AACJ,kBAAM,SAAS;AACf,0BAAc,KAAK;AACnB,uBAAW,IAAI,KAAK;AAAA,UACtB;AAAA,QACF;AACA,eAAO,WAAW,EAAE,YAAY,IAAI,KAAK,MAAM,IAAI,CAAC;AAAA,MACtD;AAAA,MACA,KAAK,sCAA8B;AACjC,cAAM,QAAQ,wBAAwB,MAAM,OAAO;AACnD,cAAM,QAAQ,kBAAkB,MAAM,UAAU;AAChD,cAAM,eAAe,MAAM,iBAAiB;AAC5C,cAAM,eAAe,MAAM,iBAAiB;AAC5C,cAAM,UAAU,MACd,MAAM,UACN,MAAM,OAAO,OAAO,MAAM,OAAO,OAAO,gBACxC,MAAM,OAAO,OAAO,MAAM,OAAO,OAAO;AAC1C,cAAM,SAAS,KAAK,IAAI,MAAM,WAAW,GAAG,GAAM;AAClD,YAAI,SAAS,KAAK,CAAC,QAAQ,GAAG;AAC5B,gBAAM,IAAI,QAAc,CAAC,YAAY;AACnC,kBAAM,OAAO,MAAM;AACjB,2BAAa,KAAK;AAClB,oBAAM,QAAQ,OAAO,QAAQ;AAC7B,sBAAQ,oBAAoB,SAAS,IAAI;AACzC,sBAAQ;AAAA,YACV;AACA,kBAAM,WAAW,MAAM;AACrB,kBAAI,QAAQ,EAAG,MAAK;AAAA,YACtB;AACA,kBAAM,QAAQ,WAAW,MAAM,MAAM;AACrC,kBAAM,QAAQ,IAAI,QAAQ;AAC1B,oBAAQ,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AAAA,UACxD,CAAC;AAAA,QACH;AACA,cAAM,WAAW,MAAM,aAAa;AACpC,YAAI,MAAM,OAAQ,OAAM,WAAW;AACnC,eAAO,WAAW;AAAA,UAChB,QAAQ,WAAW,MAAM,QAAQ,cAAc,QAAQ;AAAA,UACvD,QAAQ,WAAW,MAAM,QAAQ,cAAc,QAAQ;AAAA,UACvD,SAAS,CAAC,MAAM;AAAA,UAChB,WAAW,MAAM;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,MACA,KAAK,oCAA6B;AAChC,cAAM,QAAQ,uBAAuB,MAAM,OAAO;AAClD,cAAM,QAAQ,kBAAkB,MAAM,UAAU;AAChD,cAAM,MAAM,QAAQ,MAAM,MAAM,QAAQ,IAAI,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC;AACvE,eAAO,WAAW,EAAE,SAAS,MAAM,MAAM,UAAU,GAAG,cAAc,MAAM,QAAQ,KAAK,CAAC;AAAA,MAC1F;AAAA,MACA,KAAK,4CAAiC;AACpC,cAAM,QAAQ,2BAA2B,MAAM,OAAO;AACtD,cAAM,QAAQ,kBAAkB,MAAM,UAAU;AAChD,cAAM,WAAW;AACjB,cAAM,MAAM,QAAQ,KAAK,MAAM,MAAM;AACrC,cAAM,SAAS,MAAM,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,EAAE,UAAU,MAAM,YAAY,GAAG,EAAE;AAC1F,kBAAU,OAAO,MAAM,UAAU;AACjC,eAAO,WAAW,EAAE,YAAY,MAAM,YAAY,WAAW,OAAO,SAAS,CAAC;AAAA,MAChF;AAAA,MACA,KAAK,4BAAyB;AAC5B,cAAM,QAAQ,mBAAmB,MAAM,OAAO;AAC9C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,OAAO,iBAAiB,QAAQ,yBAAyB,MAAM,IAAI;AACzE,cAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,aAAa,OAAO,CAAC;AAC7D,YAAI,QAAQ,KAAM,QAAO,YAAY,GAAG,IAAI,gBAAgB;AAC5D,YAAI,KAAK,SAAS,iBAAiB;AACjC,iBAAO,YAAY,GAAG,IAAI,+BAA+B;AAC3D,cAAM,OAAO;AAAA,UACX,MAAM;AAAA,UACN,KAAK,GAAG,4BAA4B,MAAM,UAAU,IAAI,CAAC;AAAA,UACzD,MAAM,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK;AAAA,UAC/B,MAAM,KAAK;AAAA,QACb;AACA,cAAM,SAAS,MAAM,UAAU,QAAQ,MAAM,SAAS;AACtD,cAAM,YAAY,MAAM,UAAU;AAClC,cAAM,UAAU,MAAM,SAAS,OAAO,SAAY,YAAY,MAAM,QAAQ;AAC5E,YAAI,CAAC,UAAU,KAAK,OAAO,OAAO,gBAAgB;AAChD,gBAAM,OACH,MAAM,QAAQ,aAAa;AAAA,YAC1B;AAAA,YACA,WAAW;AAAA,YACX,SAAS;AAAA,YACT,aAAa;AAAA,UACf,CAAC,KAAM;AACT,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,GAAG,IAAI,OAAO,KAAK,IAAI;AAAA;AAAA,EAAwH,eAAe,MAAM,OAAO,cAAc,CAAC;AAAA,cAClM;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,cAAM,OAAO,MAAM,QAAQ,aAAa;AAAA,UACtC;AAAA,UACA,WAAW,SAAS,YAAY;AAAA,UAChC;AAAA,UACA,aAAa;AAAA,QACf,CAAC;AACD,YAAI,QAAQ,KAAM,QAAO,YAAY,GAAG,IAAI,gBAAgB;AAC5D,YAAI,KAAK,SAAS,IAAQ,GAAG;AAC3B,iBAAO;AAAA,YACL,SAAS;AAAA,cACP,EAAE,MAAM,QAAQ,MAAM,GAAG,IAAI,sBAAsB,KAAK,IAAI,WAAW;AAAA,cACvE;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,eAAO;AAAA,UACL,eAAe,MAAM,KAAK,IAAI,OAAO,gBAAgB,OAAO,cAAc,CAAC;AAAA,QAC7E;AAAA,MACF;AAAA,MACA,KAAK,8BAA0B;AAC7B,cAAM,QAAQ,oBAAoB,MAAM,OAAO;AAC/C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,OAAO,iBAAiB,QAAQ,yBAAyB,MAAM,IAAI;AACzE,cAAM,QAAQ,cAAc,EAAE,MAAM,SAAS,MAAM,SAAS,aAAa,OAAO,CAAC;AACjF,eAAO;AAAA,UACL,SAAS,IAAI,YAAY,EAAE,OAAO,MAAM,OAAO,EAAE,UAAU,aAAa,IAAI;AAAA,QAC9E;AAAA,MACF;AAAA,MACA,KAAK,4BAAyB;AAC5B,cAAM,QAAQ,mBAAmB,MAAM,OAAO;AAC9C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,OAAO,iBAAiB,QAAQ,yBAAyB,MAAM,IAAI;AACzE,cAAM,OAAO,MAAM,QAAQ,aAAa,EAAE,MAAM,aAAa,OAAO,CAAC;AACrE,YAAI,QAAQ,KAAM,QAAO,YAAY,GAAG,IAAI,gBAAgB;AAC5D,cAAM,QAAQ,KAAK,MAAM,MAAM,UAAU,EAAE,SAAS;AACpD,YAAI,UAAU,EAAG,QAAO,YAAY,+BAA+B,IAAI,EAAE;AACzE,YAAI,QAAQ,KAAK,MAAM,gBAAgB,MAAM;AAC3C,iBAAO;AAAA,YACL,qBAAqB,KAAK,aAAa,IAAI;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,OACJ,MAAM,gBAAgB,OAClB,KAAK,MAAM,MAAM,UAAU,EAAE,KAAK,MAAM,UAAU,IAClD,KAAK,QAAQ,MAAM,YAAY,MAAM,MAAM,UAAU;AAC3D,cAAM,QAAQ,cAAc,EAAE,MAAM,SAAS,MAAM,aAAa,OAAO,CAAC;AACxE,eAAO;AAAA,UACL,YAAY,MAAM,gBAAgB,OAAO,QAAQ,CAAC,qBAAqB,IAAI;AAAA,QAC7E;AAAA,MACF;AAAA,MACA,KAAK,0BAAwB;AAC3B,cAAM,QAAQ,kBAAkB,MAAM,OAAO;AAC7C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,OAAO,iBAAiB,QAAQ,yBAAyB,MAAM,QAAQ,GAAG;AAChF,cAAM,UAAU,MAAM,QAAQ,QAAQ,EAAE,MAAM,aAAa,OAAO,CAAC;AACnE,eAAO,WAAW;AAAA,UAChB;AAAA,UACA,SAAS,QAAQ,IAAI,CAAC,WAAW;AAAA,YAC/B,MAAM,MAAM;AAAA,YACZ,MAAM,MAAM;AAAA,YACZ,MAAM,MAAM;AAAA,UACd,EAAE;AAAA,QACJ,CAAC;AAAA,MACH;AAAA,MACA,KAAK,mBAAqB;AACxB,cAAM,QAAQ,eAAe,MAAM,OAAO;AAC1C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,OAAO,iBAAiB,QAAQ,yBAAyB,MAAM,IAAI;AACzE,cAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,aAAa,OAAO,CAAC;AAC7D,eAAO,WAAW,QAAQ,OAAO,EAAE,MAAM,QAAQ,MAAM,IAAI,EAAE,QAAQ,MAAM,GAAG,KAAK,CAAC;AAAA,MACtF;AAAA,MACA,KAAK,mBAAqB;AACxB,cAAM,QAAQ,eAAe,MAAM,OAAO;AAC1C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,SAAS,MAAM,UAAU;AAAA,UAC7B;AAAA,UACA,KAAK,QAAQ;AAAA,UACb,SAAS,MAAM;AAAA,UACf,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM;AAAA,UACZ,YAAY,MAAM;AAAA,UAClB,YAAY,MAAM,eAAe;AAAA,UACjC;AAAA,QACF,CAAC;AACD,cAAM,QAAQ,OAAO,QAAQ,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE;AACvF,YAAI,OAAO,UAAW,OAAM,KAAK,qBAAqB;AACtD,eAAO,WAAW,MAAM,WAAW,IAAI,gBAAgB,MAAM,KAAK,IAAI,CAAC;AAAA,MACzE;AAAA,MACA,KAAK,mBAAqB;AACxB,cAAM,QAAQ,eAAe,MAAM,OAAO;AAC1C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,SAAS,MAAM,UAAU;AAAA,UAC7B;AAAA,UACA,KAAK,QAAQ;AAAA,UACb,SAAS,MAAM;AAAA,UACf,MAAM,MAAM;AAAA,UACZ,YAAY,MAAM,eAAe;AAAA,UACjC;AAAA,QACF,CAAC;AACD,cAAM,QAAQ,CAAC,GAAG,OAAO,KAAK;AAC9B,YAAI,OAAO,UAAW,OAAM,KAAK,qBAAqB;AACtD,eAAO,WAAW,MAAM,WAAW,IAAI,sBAAsB,MAAM,KAAK,IAAI,CAAC;AAAA,MAC/E;AAAA,MACA,KAAK,0BAAwB;AAC3B,cAAM,QAAQ,kBAAkB,MAAM,OAAO;AAC7C,cAAM,UAAU,MAAM,WAAW;AACjC,cAAM,WAAW,MAAM,QAAQ,gBAAgB;AAAA,UAC7C,MAAM,MAAM;AAAA,UACZ,UAAU,MAAM;AAAA,QAClB,CAAC;AACD,eAAO,WAAW,EAAE,KAAK,SAAS,KAAK,SAAS,SAAS,WAAW,CAAC,EAAE,CAAC;AAAA,MAC1E;AAAA,MACA;AACE,eAAO,YAAY,gBAAgB,IAAI,EAAE;AAAA,IAC7C;AAAA,EACF;AAEA,QAAM,WAAW,OACf,MACA,SACA,WAC4B;AAC5B,UAAM,OAAO,OAAO,IAAI,IAAI;AAC5B,QAAI,QAAQ,KAAM,QAAO,YAAY,gBAAgB,IAAI,EAAE;AAC3D,QAAI,CAAE,MAAM,UAAU,MAAM,MAAM,OAAO,EAAI,QAAO,YAAY,GAAG,IAAI,mBAAmB;AAC1F,QAAI;AACF,UAAI,KAAK,UAAU,MAAM;AACvB,YAAI;AACF,iBAAO,MAAM,YAAY,KAAK,KAAK,OAAO,QAAQ,KAAK,OAAO,KAAK,MAAM,OAAO;AAAA,QAClF,UAAE;AAEA,uBAAa,KAAK,OAAO,MAAM;AAAA,QACjC;AAAA,MACF;AACA,aAAO,MAAM,IAAI,MAAM,SAAS,MAAM;AAAA,IACxC,SAAS,OAAO;AACd,UAAI,iBAAiB,EAAE;AACrB,eAAO,YAAY,sBAAsB,EAAE,cAAc,KAAK,CAAC,EAAE;AACnE,aAAO,YAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC3E;AAAA,EACF;AAEA,QAAM,eAAe,OAAO,QAA0C;AACpE,UAAM,OAAO,UAAU,IAAI,QAAQ;AACnC,UAAM,OAAO,OAAO,IAAI,0BAAuB;AAC/C,QAAI,QAAQ,QAAQ,CAAE,MAAM,UAAU,MAAM,4BAAyB,EAAE,KAAK,CAAC;AAC3E,YAAM,IAAI,MAAM,GAAG,IAAI,8BAA8B;AACvD,UAAM,UAAU,MAAM,WAAW;AACjC,UAAM,QAAQ,MAAM,QAAQ,eAAe,EAAE,KAAK,CAAC;AACnD,QAAI,SAAS,KAAM,OAAM,IAAI,MAAM,GAAG,IAAI,gBAAgB;AAC1D,UAAM,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,KAAK;AACpE,QAAI,CAAC,KAAK,SAAS,IAAQ,KAAK,CAAC,KAAK,SAAS,QAAG,GAAG;AACnD,aAAO,EAAE,UAAU,CAAC,EAAE,KAAK,IAAI,MAAM,UAAU,cAAc,KAAK,CAAC,EAAE;AAAA,IACvE;AACA,WAAO;AAAA,MACL,UAAU;AAAA,QACR,EAAE,KAAK,IAAI,MAAM,UAAU,4BAA4B,MAAM,cAAc,KAAK,EAAE;AAAA,MACpF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,MAAiB;AACnC,UAAM,SAAS,IAAI;AAAA,MACjB,EAAE,MAAM,KAAK,QAAQ,iBAAiB,SAAS,KAAK,WAAW,IAAI;AAAA;AAAA,MAEnE;AAAA,QACE,cAAc;AAAA,UACZ,OAAO,EAAE,aAAa,OAAO,eAAe,OAAO,SAAS;AAAA,UAC5D,WAAW,CAAC;AAAA,QACd;AAAA,MACF;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,aAAO;AAAA,QACL,KAAK,WAAW;AAAA,QAChB;AAAA,UACE,OAAO,KAAK,WAAW,aAAa;AAAA,UACpC,aAAa,KAAK,WAAW;AAAA,UAC7B,aAAa,eAA2B,KAAK,WAAW,WAAW;AAAA,UACnE,aAAa,KAAK,WAAW;AAAA,QAC/B;AAAA,QACA,CAAC,OAAO,QAAQ,SAAS,KAAK,WAAW,MAAM,OAAO,IAAI,OAAO,MAAM;AAAA,MACzE;AAAA,IACF;AACA,QAAI,KAAK,aAAa,SAAS,kBAAkB,KAAK,GAAG;AACvD,aAAO;AAAA,QACL;AAAA,QACA,IAAI,iBAAiB,GAAG,4BAA4B,cAAc,EAAE,MAAM,OAAU,CAAC;AAAA,QACrF,EAAE,aAAa,2CAA2C;AAAA,QAC1D,CAAC,QAAQ,aAAa,GAAG;AAAA,MAC3B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,OAAO,YAAuC;AAClE,QAAI,QAAQ,WAAW,OAAQ,QAAO;AACtC,QAAI;AACF,YAAM,OAAgB,MAAM,QAAQ,MAAM,EAAE,KAAK;AACjD,cAAQ,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,IAAI,GAAG;AAAA,QAC3C,CAAC,YAAY,kBAAkB,UAAU,OAAO,EAAE;AAAA,MACpD;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,aAAa,MAAM;AACvB,gBAAY,iBAAiB,MAAM,YAAY,GAAG,EAAE,SAAS,KAAK,QAAQ,CAAC;AAC3E,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,IAAI,cAAc;AAChB,aAAO,MAAM,IAAI,CAAC,SAAS,KAAK,UAAU;AAAA,IAC5C;AAAA,IACA,OAAO,OAAO,YAAY;AACxB,UAAI,MAAM,cAAc,OAAO,EAAG,OAAM,WAAW;AACnD,aAAO,WAAW,EAAE,MAAM,OAAO;AAAA,IACnC;AAAA,IACA,WAAW,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,UAAU;AAAA,IACpD,cAAc,YAAY;AACxB,YAAM,WAAW,IAAI;AACrB,aAAO,MAAM,IAAI,CAAC,SAAS,KAAK,UAAU;AAAA,IAC5C;AAAA,IACA,eAAe,CAAC,SAAS;AACvB,mBAAa,IAAI;AAAA,IACnB;AAAA,IACA;AAAA,IACA,OAAO,YAAY;AACjB,eAAS;AACT,YAAM,MAAM,MAAM;AAClB,iBAAW,SAAS,UAAU,OAAO,EAAG,OAAM,MAAM,QAAQ,KAAK,EAAE,MAAM,MAAM,MAAS;AACxF,gBAAU,MAAM;AAChB,YAAM,YAAY,MAAM;AACxB,YAAM,SAAS,MAAM;AAAA,IACvB;AAAA,EACF;AACF;",
+  "names": ["SandboxHostedServerKind", "SandboxShellMode", "SandboxMcpTool", "SandboxMcpScopeKind", "id", "entry"]
+}

package/dist/modules/sandbox/memory-sandbox.d.mts

@@ -0,0 +1,32 @@
+import type { JsonValue } from "../json.mjs";
+import { PortProtocol, type NetworkPolicyIface, type NetworkSandboxSessionIface, type SandboxMcpEndpoint } from "./types.mjs";
+export interface MemorySandboxIface extends NetworkSandboxSessionIface {
+    readonly networkPolicy: NetworkPolicyIface;
+    readonly stopped: boolean;
+}
+export interface CreateMemorySandboxArgsIface {
+    id?: string;
+    files?: Record<string, string | Uint8Array>;
+    cwd?: string;
+    ports?: number[];
+    portUrl?: (args: {
+        port: number;
+        protocol: PortProtocol;
+    }) => string;
+    computerUse?: () => Promise<SandboxMcpEndpoint>;
+    screen?: NetworkSandboxSessionIface['screen'];
+    localMcp?: () => Promise<SandboxMcpEndpoint[]>;
+    networkPolicy?: boolean;
+    now?: () => Date;
+}
+export declare const createMemorySandbox: (args?: CreateMemorySandboxArgsIface) => MemorySandboxIface;
+export declare const memorySandboxTextFiles: (sandbox: NetworkSandboxSessionIface, root?: string) => Promise<Record<string, string>>;
+export type MemorySandboxArtifact = {
+    files: Record<string, string>;
+    cwd: string;
+    ports: number[];
+};
+export type MemorySandboxState = {
+    id: string;
+};
+export declare const memorySandboxProvider: import("./types.mjs").SandboxProviderIface<JsonValue, JsonValue, MemorySandboxArtifact, MemorySandboxState, MemorySandboxIface>;

package/dist/modules/sandbox/memory-sandbox.mjs

@@ -0,0 +1,416 @@
+import * as z from "zod";
+import { encodeSandboxText, readAllBytes, utf8Encode } from "./bytes.mjs";
+import { readTextFileStream, runCollect } from "./convenience.mjs";
+import { runMemoryArgv, runMemoryScript } from "./memory-shell.mjs";
+import { normalizePosixPath, posixDirname, resolvePosixPath } from "./paths.mjs";
+import {
+  defineSandboxProvider,
+  NetworkPolicy,
+  PortProtocol,
+  SandboxEntryType
+} from "./types.mjs";
+const fsError = (code, message) => Object.assign(new Error(`${code}: ${message}`), { code });
+const abortableSleep = (ms, signal) => new Promise((resolve, reject) => {
+  if (signal.aborted) {
+    reject(signal.reason);
+    return;
+  }
+  const timer = setTimeout(() => {
+    signal.removeEventListener("abort", onAbort);
+    resolve();
+  }, ms);
+  const onAbort = () => {
+    clearTimeout(timer);
+    reject(signal.reason);
+  };
+  signal.addEventListener("abort", onAbort, { once: true });
+});
+const signalExitCode = (signal) => {
+  if (signal === "SIGKILL" || signal === "KILL" || signal === "9") return 137;
+  if (signal === "SIGINT" || signal === "INT") return 130;
+  return 143;
+};
+const createMemorySandbox = (args = {}) => {
+  const id = args.id ?? `memory-${crypto.randomUUID()}`;
+  const cwd = normalizePosixPath(args.cwd ?? "/workspace");
+  const now = args.now ?? (() => /* @__PURE__ */ new Date());
+  const entries = /* @__PURE__ */ new Map();
+  const processes = /* @__PURE__ */ new Set();
+  let networkPolicy = { mode: NetworkPolicy.AllowAll };
+  let stopped = false;
+  const resolve = (path) => resolvePosixPath(cwd, path);
+  const ensureDirectory = (path) => {
+    const normalized = normalizePosixPath(path);
+    const existing = entries.get(normalized);
+    if (existing?.type === "directory") return;
+    if (existing?.type === "file") throw fsError("ENOTDIR", `${normalized} is a file`);
+    if (normalized !== "/") ensureDirectory(posixDirname(normalized));
+    entries.set(normalized, { type: "directory", modifiedAt: now() });
+  };
+  const putFile = (path, data) => {
+    const normalized = normalizePosixPath(path);
+    if (entries.get(normalized)?.type === "directory")
+      throw fsError("EISDIR", `${normalized} is a directory`);
+    ensureDirectory(posixDirname(normalized));
+    entries.set(normalized, { type: "file", data, modifiedAt: now() });
+  };
+  const children = (path) => {
+    const prefix = path === "/" ? "/" : `${path}/`;
+    const names = [];
+    for (const key of entries.keys()) {
+      if (key !== path && key.startsWith(prefix) && !key.slice(prefix.length).includes("/")) {
+        names.push(key.slice(prefix.length));
+      }
+    }
+    return names.sort();
+  };
+  ensureDirectory("/");
+  ensureDirectory(cwd);
+  for (const [path, content] of Object.entries(args.files ?? {})) {
+    putFile(resolve(path), content instanceof Uint8Array ? content : utf8Encode(content));
+  }
+  const shellFs = {
+    readFile: (path) => {
+      const entry = entries.get(normalizePosixPath(path));
+      return entry?.type === "file" ? entry.data : null;
+    },
+    writeFile: (path, data, options) => {
+      const entry = entries.get(normalizePosixPath(path));
+      if (options.append && entry?.type === "file") {
+        const merged = new Uint8Array(entry.data.byteLength + data.byteLength);
+        merged.set(entry.data, 0);
+        merged.set(data, entry.data.byteLength);
+        putFile(path, merged);
+        return;
+      }
+      putFile(path, data);
+    },
+    kind: (path) => {
+      const entry = entries.get(normalizePosixPath(path));
+      return entry == null ? null : entry.type;
+    },
+    list: (path) => {
+      const normalized = normalizePosixPath(path);
+      return entries.get(normalized)?.type === "directory" ? children(normalized) : null;
+    },
+    mkdir: (path, options) => {
+      const normalized = normalizePosixPath(path);
+      if (!options.parents && entries.get(posixDirname(normalized))?.type !== "directory") {
+        throw fsError("ENOENT", "No such file or directory");
+      }
+      if (!options.parents && entries.has(normalized)) throw fsError("EEXIST", "File exists");
+      ensureDirectory(normalized);
+    }
+  };
+  const statOf = (path) => {
+    const entry = entries.get(path);
+    if (entry == null) return null;
+    return {
+      path,
+      type: entry.type === "file" ? SandboxEntryType.File : SandboxEntryType.Directory,
+      size: entry.type === "file" ? entry.data.byteLength : 0,
+      modifiedAt: entry.modifiedAt.toISOString(),
+      mode: entry.type === "file" ? 420 : 493
+    };
+  };
+  const spawn = async (options) => {
+    const controller = new AbortController();
+    let killedWith = null;
+    const outputs = { stdout: null, stderr: null };
+    const stdout = new ReadableStream({
+      start: (c) => {
+        outputs.stdout = c;
+      }
+    });
+    const stderr = new ReadableStream({
+      start: (c) => {
+        outputs.stderr = c;
+      }
+    });
+    let self = null;
+    let stdinWriter = null;
+    let stdinSource;
+    if (options.stdin == null) {
+      const pipe = new TransformStream();
+      stdinWriter = pipe.writable.getWriter();
+      stdinSource = pipe.readable;
+    } else if (options.stdin instanceof ReadableStream) {
+      stdinSource = options.stdin;
+    } else {
+      const bytes = utf8Encode(options.stdin);
+      stdinSource = new ReadableStream({
+        start: (c) => {
+          if (bytes.byteLength > 0) c.enqueue(bytes);
+          c.close();
+        }
+      });
+    }
+    const stdinReader = stdinSource.getReader();
+    const abortPromise = new Promise(
+      (resolveAbort) => controller.signal.addEventListener("abort", () => resolveAbort(null), { once: true })
+    );
+    const readStdin = async () => {
+      const result = await Promise.race([stdinReader.read(), abortPromise]);
+      if (result == null) throw controller.signal.reason;
+      return result.done ? null : result.value;
+    };
+    const emit = (target, bytes) => {
+      if (bytes.byteLength > 0) target?.enqueue(bytes.slice());
+    };
+    const context = {
+      fs: shellFs,
+      io: {
+        readStdin,
+        stdout: (bytes) => emit(outputs.stdout, bytes),
+        stderr: (bytes) => emit(outputs.stderr, bytes),
+        signal: controller.signal
+      },
+      cwd: options.cwd == null ? cwd : resolve(options.cwd),
+      sleep: abortableSleep
+    };
+    const timeout = options.timeoutMs == null ? null : setTimeout(() => {
+      killedWith = "timeout";
+      controller.abort(new Error("timed out"));
+    }, options.timeoutMs);
+    const onAbortSignal = () => {
+      killedWith ??= "SIGTERM";
+      controller.abort(new Error("aborted"));
+    };
+    options.abortSignal?.addEventListener("abort", onAbortSignal, { once: true });
+    const exited = (async () => {
+      let exitCode;
+      try {
+        if (context.fs.kind(context.cwd) !== "directory") {
+          context.io.stderr(utf8Encode(`cd: ${context.cwd}: No such file or directory
+`));
+          exitCode = 1;
+        } else if (options.shell === true) {
+          const script = [options.command, ...options.args ?? []].join(" ");
+          exitCode = await runMemoryScript({ ...context, script });
+        } else {
+          exitCode = await runMemoryArgv({
+            ...context,
+            argv: [options.command, ...options.args ?? []]
+          });
+        }
+      } catch (error) {
+        if (!controller.signal.aborted) {
+          context.io.stderr(
+            utf8Encode(`${error instanceof Error ? error.message : String(error)}
+`)
+          );
+          exitCode = 1;
+        } else {
+          exitCode = killedWith === "timeout" ? 124 : signalExitCode(killedWith ?? void 0);
+        }
+      }
+      if (timeout != null) clearTimeout(timeout);
+      options.abortSignal?.removeEventListener("abort", onAbortSignal);
+      stdinReader.cancel().catch(() => void 0);
+      outputs.stdout?.close();
+      outputs.stderr?.close();
+      if (self != null) processes.delete(self);
+      return { exitCode };
+    })();
+    const child = {
+      pid: null,
+      stdout,
+      stderr,
+      write: async (data, writeOptions) => {
+        if (stdinWriter == null) throw new Error("stdin was provided at spawn");
+        const bytes = data instanceof Uint8Array ? data : utf8Encode(data);
+        if (bytes.byteLength > 0) await stdinWriter.write(bytes);
+        if (writeOptions?.end === true) await stdinWriter.close();
+      },
+      wait: () => exited,
+      kill: async (signal) => {
+        killedWith ??= signal ?? "SIGTERM";
+        controller.abort(new Error(`killed (${signal ?? "SIGTERM"})`));
+        await exited;
+      }
+    };
+    self = child;
+    processes.add(child);
+    return child;
+  };
+  const sandbox = {
+    id,
+    defaultWorkingDirectory: cwd,
+    ports: args.ports ?? [],
+    get description() {
+      return `In-memory sandbox ${id}. Working directory ${cwd}. Commands: echo, cat, ls, pwd, cd, true, false, sleep, exit, mkdir, sh -c.`;
+    },
+    get networkPolicy() {
+      return networkPolicy;
+    },
+    get stopped() {
+      return stopped;
+    },
+    readFile: async (options) => {
+      const path = resolve(options.path);
+      const entry = entries.get(path);
+      if (entry == null) return null;
+      if (entry.type === "directory") throw fsError("EISDIR", `${path} is a directory`);
+      const data = entry.data;
+      const chunkBytes = 64 * 1024;
+      let offset = 0;
+      return new ReadableStream({
+        pull: (controller) => {
+          if (offset >= data.byteLength) {
+            controller.close();
+            return;
+          }
+          const end = Math.min(data.byteLength, offset + chunkBytes);
+          controller.enqueue(data.slice(offset, end));
+          offset = end;
+        }
+      });
+    },
+    readBinaryFile: async (options) => {
+      const stream = await sandbox.readFile(options);
+      return stream == null ? null : readAllBytes(stream);
+    },
+    readTextFile: async (options) => {
+      const stream = await sandbox.readFile(options);
+      return stream == null ? null : readTextFileStream(stream, options);
+    },
+    writeFile: async (options) => {
+      const data = await readAllBytes(options.content);
+      putFile(resolve(options.path), data);
+    },
+    writeBinaryFile: async (options) => {
+      putFile(resolve(options.path), options.content.slice());
+    },
+    writeTextFile: async (options) => {
+      putFile(resolve(options.path), encodeSandboxText(options.content, options.encoding));
+    },
+    spawn,
+    run: (options) => runCollect({ spawn }, options),
+    stat: async (options) => statOf(resolve(options.path)),
+    readDir: async (options) => {
+      const path = resolve(options.path);
+      const entry = entries.get(path);
+      if (entry == null) throw fsError("ENOENT", `${path}: No such file or directory`);
+      if (entry.type !== "directory") throw fsError("ENOTDIR", `${path} is not a directory`);
+      return children(path).map((name) => {
+        const childPath = path === "/" ? `/${name}` : `${path}/${name}`;
+        const child = entries.get(childPath);
+        return {
+          name,
+          path: childPath,
+          type: child?.type === "file" ? SandboxEntryType.File : SandboxEntryType.Directory,
+          size: child?.type === "file" ? child.data.byteLength : null
+        };
+      });
+    },
+    resolvePath: resolve,
+    removePath: async (options) => {
+      const path = resolve(options.path);
+      const entry = entries.get(path);
+      if (entry == null) {
+        if (options.force === true) return;
+        throw fsError("ENOENT", `${path}: No such file or directory`);
+      }
+      if (path === "/") throw fsError("EPERM", "refusing to remove /");
+      if (entry.type === "directory") {
+        const prefix = `${path}/`;
+        const nested = [...entries.keys()].filter((key) => key.startsWith(prefix));
+        if (nested.length > 0 && options.recursive !== true)
+          throw fsError("ENOTEMPTY", `${path}: Directory not empty`);
+        for (const key of nested) entries.delete(key);
+      }
+      entries.delete(path);
+    },
+    getPortEndpoint: async (options) => {
+      const protocol = options.protocol ?? PortProtocol.Http;
+      return {
+        url: args.portUrl?.({ port: options.port, protocol }) ?? `${protocol}://127.0.0.1:${options.port}`
+      };
+    },
+    getPortUrl: async (options) => (await sandbox.getPortEndpoint(options)).url,
+    stop: async () => {
+      stopped = true;
+      await Promise.all([...processes].map((child) => child.kill()));
+    },
+    destroy: async () => {
+      await sandbox.stop();
+      entries.clear();
+      ensureDirectory("/");
+    }
+  };
+  if (args.networkPolicy === true) {
+    sandbox.setNetworkPolicy = async (policy) => {
+      networkPolicy = policy;
+    };
+  }
+  if (args.computerUse != null) sandbox.computerUse = args.computerUse;
+  if (args.screen != null) sandbox.screen = args.screen;
+  if (args.localMcp != null) sandbox.localMcp = args.localMcp;
+  return sandbox;
+};
+const memorySandboxTextFiles = async (sandbox, root = "/") => {
+  const out = {};
+  const walk = async (path) => {
+    for (const entry of await sandbox.readDir({ path })) {
+      if (entry.type === SandboxEntryType.Directory) await walk(entry.path);
+      else {
+        const text = await sandbox.readTextFile({ path: entry.path });
+        if (text != null) out[entry.path] = text;
+      }
+    }
+  };
+  await walk(root);
+  return out;
+};
+const memoryEnvironmentSchema = z.object({
+  files: z.record(z.string(), z.string()).optional(),
+  cwd: z.string().optional(),
+  ports: z.array(z.number().int()).optional()
+}).nullable().optional();
+const fingerprint = (value) => {
+  let hash = 2166136261;
+  for (let i = 0; i < value.length; i += 1) {
+    hash ^= value.charCodeAt(i);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+};
+const memoryHandle = (sandbox) => ({
+  sandbox,
+  onSandboxStop: () => sandbox.stop(),
+  onSandboxDelete: () => sandbox.destroy(),
+  onRuntimeShutdown: () => sandbox.stop()
+});
+const memorySandboxProvider = defineSandboxProvider({
+  name: "memory",
+  environment: (rawOptions) => {
+    const options = memoryEnvironmentSchema.parse(rawOptions) ?? {};
+    const artifactFor = (files) => ({
+      files: { ...options.files, ...files },
+      cwd: options.cwd ?? "/workspace",
+      ports: options.ports ?? []
+    });
+    const open = (bindingId, artifact) => createMemorySandbox({
+      id: bindingId,
+      files: artifact.files,
+      cwd: artifact.cwd,
+      ports: artifact.ports
+    });
+    return {
+      artifactKey: async (ctx) => `memory:${fingerprint(JSON.stringify(artifactFor(ctx.files)))}`,
+      prepare: async (ctx) => artifactFor(ctx.files),
+      start: async (ctx, _openOptions, artifact) => ({
+        handle: memoryHandle(open(ctx.session.bindingId, artifact)),
+        state: { id: ctx.session.bindingId }
+      }),
+      resume: async (_ctx, artifact, state) => memoryHandle(open(state.id, artifact)),
+      park: async (_ctx, _artifact, state) => state
+    };
+  }
+});
+export {
+  createMemorySandbox,
+  memorySandboxProvider,
+  memorySandboxTextFiles
+};
+//# sourceMappingURL=memory-sandbox.mjs.map