@geminixiang/mikan 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/runtime/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,eAAe,EACf,SAAS,GAAG,cAAc,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,iBAAiB,CAC5F;IACC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,qEAAqE;IACrE,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,4EAA4E;IAC5E,uBAAuB,IAAI;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EACjB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,eAAe,EACf,SAAS,GAAG,cAAc,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,iBAAiB,CAC5F;IACC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,qEAAqE;IACrE,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,4EAA4E;IAC5E,uBAAuB,IAAI;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C"}

package/dist/runtime/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { PiAgentWrapper } from \"../agent.js\";\nimport type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ConversationKind,\n  PlatformNotifier,\n  PlatformReactor,\n  PlatformUploader,\n} from \"../adapter.js\";\nimport type {\n  AdminTokenStoreLike,\n  CommandHandler,\n  CommandServices,\n  LinkTokenStoreLike,\n  SessionViewTokenStoreLike,\n} from \"../commands/types.js\";\nimport type { MikanModels } from \"../harness/index.js\";\nimport type { PlatformToolPackFactory } from \"../tools/types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface SessionLifecycleOptions {\n  maxSessions?: number;\n  idleTimeoutMs?: number;\n  now?: () => number;\n}\n\nexport interface ConversationRuntimeState {\n  running: boolean;\n  runner: PiAgentWrapper;\n  stopRequested: boolean;\n  stopMessageTs?: string;\n  lastAccessedAt: number;\n  sessionFile: string;\n  /** Epoch ms when the current run started; 0 when idle. */\n  startedAt: number;\n  lastActivityAt?: number;\n}\n\nexport interface RunSessionOptions {\n  event: ConversationEvent;\n  bot: MessagingBot;\n  context: ConversationContext;\n}\n\n/** Conversation/session identity used to resolve per-session runner state. */\nexport interface SessionStateOptions {\n  conversationId: string;\n  sessionKey: string;\n  conversationKind?: ConversationKind;\n}\n\nexport interface ConversationRuntimeOptions extends Omit<\n  CommandServices,\n  \"runtime\" | \"vaultManager\" | \"linkTokenStore\" | \"sessionViewTokenStore\" | \"adminTokenStore\"\n> {\n  /**\n   * Credential vault for sandboxed conversations. Optional for embedders;\n   * when omitted the runtime uses an inert, disabled vault.\n   */\n  vaultManager?: VaultManager;\n  /** Login-portal token store; omit when no web portal is hosted. */\n  linkTokenStore?: LinkTokenStoreLike;\n  /** Session-viewer token store; omit when no web portal is hosted. */\n  sessionViewTokenStore?: SessionViewTokenStoreLike;\n  /** Admin-portal token store; omit when no web portal is hosted. */\n  adminTokenStore?: AdminTokenStoreLike;\n  /** Override the default command handlers (e.g., to add /help, /status). */\n  commandHandlers?: readonly CommandHandler[];\n  /** Model registry override; defaults to the process-wide models.json load. */\n  models?: MikanModels;\n  /** Proactive platform messaging for extensions (`api.notify`). */\n  platformNotifier?: PlatformNotifier;\n  /** Proactive emoji reactions for extensions (`api.react`). */\n  platformReactor?: PlatformReactor;\n  /** Proactive file uploads for extensions (`api.uploadFile`). */\n  platformUploader?: PlatformUploader;\n  /**\n   * Optional platform capability packs (extra tools + per-run bind), as\n   * factories — each runner instantiates its own pack because bind state is\n   * per-runner. Assembled at process start (e.g. GitHub PR/CI pack); core\n   * stays platform-neutral.\n   */\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n}\n\nexport interface ConversationRuntime extends MessagingEventHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  refreshConversationEnvironment(conversationId: string): boolean;\n  /** Clear every idle conversation's cached runners; report the busy ones. */\n  refreshAllConversations(): { busy: string[] };\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { PiAgentWrapper } from \"../agent.js\";\nimport type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ConversationKind,\n  PlatformNotifier,\n  PlatformReactor,\n  PlatformUploader,\n} from \"../adapter.js\";\nimport type {\n  AdminTokenStoreLike,\n  CommandHandler,\n  CommandServices,\n  LinkTokenStoreLike,\n  SessionViewTokenStoreLike,\n} from \"../commands/types.js\";\nimport type { MikanModels } from \"../harness/index.js\";\nimport type { PlatformToolPackFactory } from \"../tools/types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface SessionLifecycleOptions {\n  maxSessions?: number;\n  idleTimeoutMs?: number;\n  now?: () => number;\n}\n\nexport interface ConversationRuntimeState {\n  running: boolean;\n  /** Exact settlement of the current run, including post-run response handling. */\n  runSettlement?: Promise<void>;\n  runner: PiAgentWrapper;\n  stopRequested: boolean;\n  stopMessageTs?: string;\n  lastAccessedAt: number;\n  sessionFile: string;\n  /** Epoch ms when the current run started; 0 when idle. */\n  startedAt: number;\n  lastActivityAt?: number;\n}\n\nexport interface RunSessionOptions {\n  event: ConversationEvent;\n  bot: MessagingBot;\n  context: ConversationContext;\n}\n\n/** Conversation/session identity used to resolve per-session runner state. */\nexport interface SessionStateOptions {\n  conversationId: string;\n  sessionKey: string;\n  conversationKind?: ConversationKind;\n}\n\nexport interface ConversationRuntimeOptions extends Omit<\n  CommandServices,\n  \"runtime\" | \"vaultManager\" | \"linkTokenStore\" | \"sessionViewTokenStore\" | \"adminTokenStore\"\n> {\n  /**\n   * Credential vault for sandboxed conversations. Optional for embedders;\n   * when omitted the runtime uses an inert, disabled vault.\n   */\n  vaultManager?: VaultManager;\n  /** Login-portal token store; omit when no web portal is hosted. */\n  linkTokenStore?: LinkTokenStoreLike;\n  /** Session-viewer token store; omit when no web portal is hosted. */\n  sessionViewTokenStore?: SessionViewTokenStoreLike;\n  /** Admin-portal token store; omit when no web portal is hosted. */\n  adminTokenStore?: AdminTokenStoreLike;\n  /** Override the default command handlers (e.g., to add /help, /status). */\n  commandHandlers?: readonly CommandHandler[];\n  /** Model registry override; defaults to the process-wide models.json load. */\n  models?: MikanModels;\n  /** Proactive platform messaging for extensions (`api.notify`). */\n  platformNotifier?: PlatformNotifier;\n  /** Proactive emoji reactions for extensions (`api.react`). */\n  platformReactor?: PlatformReactor;\n  /** Proactive file uploads for extensions (`api.uploadFile`). */\n  platformUploader?: PlatformUploader;\n  /**\n   * Optional platform capability packs (extra tools + per-run bind), as\n   * factories — each runner instantiates its own pack because bind state is\n   * per-runner. Assembled at process start (e.g. GitHub PR/CI pack); core\n   * stays platform-neutral.\n   */\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n}\n\nexport interface ConversationRuntime extends MessagingEventHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  refreshConversationEnvironment(conversationId: string): boolean;\n  /** Clear every idle conversation's cached runners; report the busy ones. */\n  refreshAllConversations(): { busy: string[] };\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n"]}

package/dist/sandbox/gondolin-bootstrap.d.ts

@@ -1,26 +1,12 @@
-import type { GondolinRemoteSettings, ResourceLimits } from "../types.js";
+import type { ResourceLimits } from "../types.js";
 export interface GondolinBootstrapOptions {
-    /** Host-only state dir; inventory, placements, and gateway CA live under it. */
+    /** Host-only state dir; runtime inventory lives under it. */
     stateDir: string;
     /** Default per-runtime resource limits. */
     limits?: ResourceLimits;
     /** Boosted limits applied while a runtime holds a boost. */
     boostLimits?: ResourceLimits;
-    /** Remote fleet settings (workers, gateway); omit for local-only gondolin. */
-    remote?: GondolinRemoteSettings;
-    /**
-     * Fail loudly when the remote profile is requested but no worker source is
-     * configured, instead of discovering it on the first runtime ensure.
-     */
-    requireRemote?: boolean;
 }
-/**
- * Configure every gondolin runtime singleton for one process — resources,
- * inventory, placements, fleet, join, gateway — from one options object.
- * This is the managed-sandbox bootstrap seam: main.ts and embedders
- * (src/index.ts) call it before creating conversation runtimes with a
- * gondolin sandbox config; nothing else may call the individual configure()
- * methods outside tests.
- */
+/** Configure local Gondolin resources and detached-runtime inventory. */
 export declare function configureGondolinRuntime(options: GondolinBootstrapOptions): void;
 //# sourceMappingURL=gondolin-bootstrap.d.ts.map

package/dist/sandbox/gondolin-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-bootstrap.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ1E,MAAM,WAAW,wBAAwB;IACvC,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAUhF"}
+{"version":3,"file":"gondolin-bootstrap.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAGhF"}

package/dist/sandbox/gondolin-bootstrap.js

@@ -1,27 +1,9 @@
 import { join } from "node:path";
-import { assertRemoteConfigured, gondolinResources } from "./gondolin.js";
-import { gondolinFleet } from "./gondolin-fleet.js";
-import { gondolinGateway } from "./gondolin-gateway.js";
+import { gondolinResources } from "./gondolin.js";
 import { gondolinInventory } from "./gondolin-inventory.js";
-import { gondolinJoin } from "./gondolin-join.js";
-import { gondolinPlacements } from "./gondolin-placement.js";
-/**
- * Configure every gondolin runtime singleton for one process — resources,
- * inventory, placements, fleet, join, gateway — from one options object.
- * This is the managed-sandbox bootstrap seam: main.ts and embedders
- * (src/index.ts) call it before creating conversation runtimes with a
- * gondolin sandbox config; nothing else may call the individual configure()
- * methods outside tests.
- */
+/** Configure local Gondolin resources and detached-runtime inventory. */
 export function configureGondolinRuntime(options) {
     gondolinResources.configure(options.limits, options.boostLimits);
     gondolinInventory.configure(join(options.stateDir, "gondolin-runtimes"));
-    gondolinPlacements.configure(join(options.stateDir, "gondolin-placement.json"));
-    gondolinFleet.configure(options.remote);
-    gondolinJoin.configure(join(options.stateDir, "gondolin-gateway"));
-    gondolinGateway.configure(options.remote?.gateway);
-    if (options.requireRemote) {
-        assertRemoteConfigured();
-    }
 }
 //# sourceMappingURL=gondolin-bootstrap.js.map

package/dist/sandbox/gondolin-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-bootstrap.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAkB7D;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAiC;IACxE,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjE,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAChF,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACnE,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,sBAAsB,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { GondolinRemoteSettings, ResourceLimits } from \"../types.js\";\nimport { assertRemoteConfigured, gondolinResources } from \"./gondolin.js\";\nimport { gondolinFleet } from \"./gondolin-fleet.js\";\nimport { gondolinGateway } from \"./gondolin-gateway.js\";\nimport { gondolinInventory } from \"./gondolin-inventory.js\";\nimport { gondolinJoin } from \"./gondolin-join.js\";\nimport { gondolinPlacements } from \"./gondolin-placement.js\";\n\nexport interface GondolinBootstrapOptions {\n  /** Host-only state dir; inventory, placements, and gateway CA live under it. */\n  stateDir: string;\n  /** Default per-runtime resource limits. */\n  limits?: ResourceLimits;\n  /** Boosted limits applied while a runtime holds a boost. */\n  boostLimits?: ResourceLimits;\n  /** Remote fleet settings (workers, gateway); omit for local-only gondolin. */\n  remote?: GondolinRemoteSettings;\n  /**\n   * Fail loudly when the remote profile is requested but no worker source is\n   * configured, instead of discovering it on the first runtime ensure.\n   */\n  requireRemote?: boolean;\n}\n\n/**\n * Configure every gondolin runtime singleton for one process — resources,\n * inventory, placements, fleet, join, gateway — from one options object.\n * This is the managed-sandbox bootstrap seam: main.ts and embedders\n * (src/index.ts) call it before creating conversation runtimes with a\n * gondolin sandbox config; nothing else may call the individual configure()\n * methods outside tests.\n */\nexport function configureGondolinRuntime(options: GondolinBootstrapOptions): void {\n  gondolinResources.configure(options.limits, options.boostLimits);\n  gondolinInventory.configure(join(options.stateDir, \"gondolin-runtimes\"));\n  gondolinPlacements.configure(join(options.stateDir, \"gondolin-placement.json\"));\n  gondolinFleet.configure(options.remote);\n  gondolinJoin.configure(join(options.stateDir, \"gondolin-gateway\"));\n  gondolinGateway.configure(options.remote?.gateway);\n  if (options.requireRemote) {\n    assertRemoteConfigured();\n  }\n}\n"]}
+{"version":3,"file":"gondolin-bootstrap.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAW5D,yEAAyE;AACzE,MAAM,UAAU,wBAAwB,CAAC,OAAiC;IACxE,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjE,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { ResourceLimits } from \"../types.js\";\nimport { gondolinResources } from \"./gondolin.js\";\nimport { gondolinInventory } from \"./gondolin-inventory.js\";\n\nexport interface GondolinBootstrapOptions {\n  /** Host-only state dir; runtime inventory lives under it. */\n  stateDir: string;\n  /** Default per-runtime resource limits. */\n  limits?: ResourceLimits;\n  /** Boosted limits applied while a runtime holds a boost. */\n  boostLimits?: ResourceLimits;\n}\n\n/** Configure local Gondolin resources and detached-runtime inventory. */\nexport function configureGondolinRuntime(options: GondolinBootstrapOptions): void {\n  gondolinResources.configure(options.limits, options.boostLimits);\n  gondolinInventory.configure(join(options.stateDir, \"gondolin-runtimes\"));\n}\n"]}

package/dist/sandbox/gondolin-contract.d.ts

@@ -1,16 +1,14 @@
 import { type Static } from "@sinclair/typebox";
 /**
  * Everything a worker process needs to host one Gondolin VM. Serialized as a
- * single JSON argv entry by both spawners (the local TS worker client and
- * the Go daemon's supervisor).
+ * single JSON argv entry by the local TS worker client.
  */
 export declare const GondolinWorkerConfigSchema: import("@sinclair/typebox").TObject<{
     /** mikan session key the runtime belongs to. */
     instanceId: import("@sinclair/typebox").TString;
     /** Resolved guest image asset directory. */
     image: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    /** Image selector resolved inside the worker (remote workers, where the
-     * spawning host has no image store). Ignored when `image` is set. */
+    /** Optional image selector resolved inside the worker when no image path is supplied. */
     imageSelector: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     mounts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         source: import("@sinclair/typebox").TString;
@@ -38,7 +36,7 @@ export declare const GondolinWorkerHandshakeSchema: import("@sinclair/typebox").
 export type GondolinWorkerHandshake = Static<typeof GondolinWorkerHandshakeSchema>;
 /**
  * One `<sessionId>.json` inventory record, written by the worker process and
- * read back by the TS inventory and the Go daemon's rediscovery.
+ * read back by the TS inventory.
  */
 export declare const GondolinRuntimeRecordSchema: import("@sinclair/typebox").TObject<{
     /** Gondolin session id (`vm.id`); also names the record file. */
@@ -57,69 +55,4 @@ export declare const GondolinRuntimeRecordSchema: import("@sinclair/typebox").TO
 }>;
 export type GondolinRuntimeRecord = Static<typeof GondolinRuntimeRecordSchema>;
 export declare function isGondolinRuntimeRecord(value: unknown): value is GondolinRuntimeRecord;
-/** A vault credential shipped by content on the ensure request (never a shared-fs mount). */
-declare const GondolinCredentialFileSchema: import("@sinclair/typebox").TObject<{
-    target: import("@sinclair/typebox").TString;
-    contentBase64: import("@sinclair/typebox").TString;
-}>;
-export type GondolinCredentialFile = Static<typeof GondolinCredentialFileSchema>;
-/** POST /v1/runtimes body sent to the remote worker daemon. */
-export declare const GondolinEnsureRuntimeRequestSchema: import("@sinclair/typebox").TObject<{
-    instanceId: import("@sinclair/typebox").TString;
-    imageSelector: import("@sinclair/typebox").TString;
-    mounts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        source: import("@sinclair/typebox").TString;
-        target: import("@sinclair/typebox").TString;
-    }>>;
-    credentialFiles: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        target: import("@sinclair/typebox").TString;
-        contentBase64: import("@sinclair/typebox").TString;
-    }>>;
-    /** Fractional cgroup CPU limit as a string; "" when unset. */
-    cpus: import("@sinclair/typebox").TString;
-    memory: import("@sinclair/typebox").TString;
-    fingerprint: import("@sinclair/typebox").TString;
-    /** Accepted by the daemon; the TS client currently leaves it unset (0). */
-    heartbeatStaleMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
-}>;
-export type GondolinEnsureRuntimeRequest = Static<typeof GondolinEnsureRuntimeRequestSchema>;
-/**
- * One runtime as reported by the daemon (ensure response, GET, and the
- * elements of the list response). The daemon's socketPath never crosses the
- * wire — sessions reach the runtime through the tunnel, not the socket.
- */
-export declare const GondolinRemoteRuntimeSchema: import("@sinclair/typebox").TObject<{
-    sessionId: import("@sinclair/typebox").TString;
-    instanceId: import("@sinclair/typebox").TString;
-    fingerprint: import("@sinclair/typebox").TString;
-    workerPid: import("@sinclair/typebox").TNumber;
-    runnerPid: import("@sinclair/typebox").TNumber;
-    epoch: import("@sinclair/typebox").TNumber;
-    adopted: import("@sinclair/typebox").TBoolean;
-}>;
-export type GondolinRemoteRuntime = Static<typeof GondolinRemoteRuntimeSchema>;
-/** POST /v1/leases response: a fenced, epoch-monotonic per-instance lease. */
-export declare const GondolinLeaseGrantSchema: import("@sinclair/typebox").TObject<{
-    id: import("@sinclair/typebox").TString;
-    instanceId: import("@sinclair/typebox").TString;
-    epoch: import("@sinclair/typebox").TNumber;
-    /** RFC 3339 timestamp (Go time.Time marshalling). */
-    expiresAt: import("@sinclair/typebox").TString;
-}>;
-/** Structural shape of the JSON messages on the session protocol. */
-export interface SessionFrameCallbacks {
-    onJson: (message: {
-        type: string;
-        id?: number;
-        exit_code?: number | null;
-        code?: string;
-        message?: string;
-    }) => void;
-    onBinary: (frame: Buffer) => void;
-}
-/** Parses the daemon-to-client session framing: u8 type + u32be length + payload. */
-export declare function createSessionFrameParser(callbacks: SessionFrameCallbacks): (chunk: Buffer) => void;
-/** Encodes a client-to-daemon session message: u32be length + JSON. */
-export declare function encodeSessionMessage(message: object): Buffer;
-export {};
 //# sourceMappingURL=gondolin-contract.d.ts.map

package/dist/sandbox/gondolin-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-contract.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAuBtD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;IACrC,gDAAgD;;IAEhD,4CAA4C;;IAE5C;yEACqE;;;;;;;;IAKrE,gEAAgE;;IAEhE,oEAAoE;;IAEpE,8EAA8E;;EAE9E,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,gEAAgE;AAChE,eAAO,MAAM,6BAA6B;;;;;;;EAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,iEAAiE;;IAEjE,iEAAiE;;IAEjE,0DAA0D;;IAE1D,wEAAwE;;;IAGxE,4EAA4E;;IAE5E,2DAA2D;;EAE3D,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAYtF;AAED,6FAA6F;AAC7F,QAAA,MAAM,4BAA4B;;;EAGhC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,+DAA+D;AAC/D,eAAO,MAAM,kCAAkC;;;;;;;;;;;IAK7C,8DAA8D;;;;IAI9D,2EAA2E;;EAE3E,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;EAQtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB;;;;IAInC,qDAAqD;;EAErD,CAAC;AAOH,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,qBAAqB,GAC/B,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAqBzB;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK5D"}
+{"version":3,"file":"gondolin-contract.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAatD;;;GAGG;AACH,eAAO,MAAM,0BAA0B;IACrC,gDAAgD;;IAEhD,4CAA4C;;IAE5C,yFAAyF;;;;;;;;IAKzF,gEAAgE;;IAEhE,oEAAoE;;IAEpE,8EAA8E;;EAE9E,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,gEAAgE;AAChE,eAAO,MAAM,6BAA6B;;;;;;;EAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,iEAAiE;;IAEjE,iEAAiE;;IAEjE,0DAA0D;;IAE1D,wEAAwE;;;IAGxE,4EAA4E;;IAE5E,2DAA2D;;EAE3D,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAYtF"}

package/dist/sandbox/gondolin-contract.js

@@ -1,18 +1,8 @@
 import { Type } from "@sinclair/typebox";
 import { isRecord } from "../utils/file-guards.js";
 /**
- * Single home for every wire shape that crosses the mikan ⇄ gondolin-worker
- * boundary. The Go daemon mirrors these shapes by hand
- * (worker/internal/runtime/supervisor.go, worker/internal/api/server.go,
- * worker/internal/lease/lease.go); the shared fixtures under
- * `worker/contract-fixtures/` pin both sides — the TS test
- * (test/gondolin-contract.test.ts) checks each fixture against the schemas
- * here, and the Go contract tests round-trip the same files through the Go
- * structs. Add a field on one side only and one of those tests fails.
- *
- * Secrets never travel through these shapes: vault env rides per-exec over
- * the session IPC socket, and credential files are shipped by content only
- * on the authenticated ensure request.
+ * Single home for the wire shapes shared by mikan's local Gondolin client and
+ * detached worker process.
  */
 const GondolinMountSchema = Type.Object({
     source: Type.String(),
@@ -20,16 +10,14 @@ const GondolinMountSchema = Type.Object({
 });
 /**
  * Everything a worker process needs to host one Gondolin VM. Serialized as a
- * single JSON argv entry by both spawners (the local TS worker client and
- * the Go daemon's supervisor).
+ * single JSON argv entry by the local TS worker client.
  */
 export const GondolinWorkerConfigSchema = Type.Object({
     /** mikan session key the runtime belongs to. */
     instanceId: Type.String(),
     /** Resolved guest image asset directory. */
     image: Type.Optional(Type.String()),
-    /** Image selector resolved inside the worker (remote workers, where the
-     * spawning host has no image store). Ignored when `image` is set. */
+    /** Optional image selector resolved inside the worker when no image path is supplied. */
     imageSelector: Type.Optional(Type.String()),
     mounts: Type.Array(GondolinMountSchema),
     cpus: Type.Optional(Type.Number()),
@@ -52,7 +40,7 @@ export const GondolinWorkerHandshakeSchema = Type.Object({
 });
 /**
  * One `<sessionId>.json` inventory record, written by the worker process and
- * read back by the TS inventory and the Go daemon's rediscovery.
+ * read back by the TS inventory.
  */
 export const GondolinRuntimeRecordSchema = Type.Object({
     /** Gondolin session id (`vm.id`); also names the record file. */
@@ -80,76 +68,4 @@ export function isGondolinRuntimeRecord(value) {
         (value.socketPath === undefined || typeof value.socketPath === "string") &&
         (value.fingerprint === undefined || typeof value.fingerprint === "string"));
 }
-/** A vault credential shipped by content on the ensure request (never a shared-fs mount). */
-const GondolinCredentialFileSchema = Type.Object({
-    target: Type.String(),
-    contentBase64: Type.String(),
-});
-/** POST /v1/runtimes body sent to the remote worker daemon. */
-export const GondolinEnsureRuntimeRequestSchema = Type.Object({
-    instanceId: Type.String(),
-    imageSelector: Type.String(),
-    mounts: Type.Array(GondolinMountSchema),
-    credentialFiles: Type.Array(GondolinCredentialFileSchema),
-    /** Fractional cgroup CPU limit as a string; "" when unset. */
-    cpus: Type.String(),
-    memory: Type.String(),
-    fingerprint: Type.String(),
-    /** Accepted by the daemon; the TS client currently leaves it unset (0). */
-    heartbeatStaleMs: Type.Optional(Type.Number()),
-});
-/**
- * One runtime as reported by the daemon (ensure response, GET, and the
- * elements of the list response). The daemon's socketPath never crosses the
- * wire — sessions reach the runtime through the tunnel, not the socket.
- */
-export const GondolinRemoteRuntimeSchema = Type.Object({
-    sessionId: Type.String(),
-    instanceId: Type.String(),
-    fingerprint: Type.String(),
-    workerPid: Type.Number(),
-    runnerPid: Type.Number(),
-    epoch: Type.Number(),
-    adopted: Type.Boolean(),
-});
-/** POST /v1/leases response: a fenced, epoch-monotonic per-instance lease. */
-export const GondolinLeaseGrantSchema = Type.Object({
-    id: Type.String(),
-    instanceId: Type.String(),
-    epoch: Type.Number(),
-    /** RFC 3339 timestamp (Go time.Time marshalling). */
-    expiresAt: Type.String(),
-});
-/** Parses the daemon-to-client session framing: u8 type + u32be length + payload. */
-export function createSessionFrameParser(callbacks) {
-    let buffer = Buffer.alloc(0);
-    return (chunk) => {
-        buffer = Buffer.concat([buffer, chunk]);
-        while (buffer.length >= 5) {
-            const type = buffer.readUInt8(0);
-            const length = buffer.readUInt32BE(1);
-            if (buffer.length < 5 + length)
-                return;
-            const payload = buffer.subarray(5, 5 + length);
-            buffer = buffer.subarray(5 + length);
-            if (type === 1) {
-                callbacks.onBinary(Buffer.from(payload));
-                continue;
-            }
-            try {
-                callbacks.onJson(JSON.parse(payload.toString("utf8")));
-            }
-            catch {
-                // ignore malformed frames
-            }
-        }
-    };
-}
-/** Encodes a client-to-daemon session message: u32be length + JSON. */
-export function encodeSessionMessage(message) {
-    const payload = Buffer.from(JSON.stringify(message));
-    const header = Buffer.alloc(4);
-    header.writeUInt32BE(payload.length, 0);
-    return Buffer.concat([header, payload]);
-}
 //# sourceMappingURL=gondolin-contract.js.map

package/dist/sandbox/gondolin-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-contract.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD;;;;;;;;;;;;;GAaG;AAEH,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,gDAAgD;IAChD,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,4CAA4C;IAC5C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC;yEACqE;IACrE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACvC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACpC,gEAAgE;IAChE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,oEAAoE;IACpE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;IAC3B,8EAA8E;IAC9E,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE;CAChC,CAAC,CAAC;AAIH,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;IACrB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACxC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC;IACrD,iEAAiE;IACjE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,iEAAiE;IACjE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,wEAAwE;IACxE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,4EAA4E;IAC5E,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACxC,2DAA2D;IAC3D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC1B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,4BAA4B,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAIH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE;IAC5B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACzD,8DAA8D;IAC9D,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,2EAA2E;IAC3E,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC/C,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC;IACrD,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAIH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;IACpB,qDAAqD;IACrD,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAmBH,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CACtC,SAAgC;IAEhC,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAa,EAAE,EAAE;QACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM;gBAAE,OAAO;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;YAC/C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC","sourcesContent":["import { Type, type Static } from \"@sinclair/typebox\";\nimport { isRecord } from \"../utils/file-guards.js\";\n\n/**\n * Single home for every wire shape that crosses the mikan ⇄ gondolin-worker\n * boundary. The Go daemon mirrors these shapes by hand\n * (worker/internal/runtime/supervisor.go, worker/internal/api/server.go,\n * worker/internal/lease/lease.go); the shared fixtures under\n * `worker/contract-fixtures/` pin both sides — the TS test\n * (test/gondolin-contract.test.ts) checks each fixture against the schemas\n * here, and the Go contract tests round-trip the same files through the Go\n * structs. Add a field on one side only and one of those tests fails.\n *\n * Secrets never travel through these shapes: vault env rides per-exec over\n * the session IPC socket, and credential files are shipped by content only\n * on the authenticated ensure request.\n */\n\nconst GondolinMountSchema = Type.Object({\n  source: Type.String(),\n  target: Type.String(),\n});\n\n/**\n * Everything a worker process needs to host one Gondolin VM. Serialized as a\n * single JSON argv entry by both spawners (the local TS worker client and\n * the Go daemon's supervisor).\n */\nexport const GondolinWorkerConfigSchema = Type.Object({\n  /** mikan session key the runtime belongs to. */\n  instanceId: Type.String(),\n  /** Resolved guest image asset directory. */\n  image: Type.Optional(Type.String()),\n  /** Image selector resolved inside the worker (remote workers, where the\n   * spawning host has no image store). Ignored when `image` is set. */\n  imageSelector: Type.Optional(Type.String()),\n  mounts: Type.Array(GondolinMountSchema),\n  cpus: Type.Optional(Type.Number()),\n  memory: Type.Optional(Type.String()),\n  /** Desired-runtime fingerprint recorded for adoption checks. */\n  fingerprint: Type.String(),\n  /** Runtime inventory directory (shared with the spawning mikan). */\n  inventoryDir: Type.String(),\n  /** Self-stop when the mikan heartbeat file is older than this. 0 disables. */\n  heartbeatStaleMs: Type.Number(),\n});\n\nexport type GondolinWorkerConfig = Static<typeof GondolinWorkerConfigSchema>;\n\n/** First stdout line of a worker, consumed by both spawners. */\nexport const GondolinWorkerHandshakeSchema = Type.Object({\n  ready: Type.Boolean(),\n  error: Type.Optional(Type.String()),\n  sessionId: Type.Optional(Type.String()),\n  socketPath: Type.Optional(Type.String()),\n  workerPid: Type.Optional(Type.Number()),\n  runnerPid: Type.Optional(Type.Union([Type.Number(), Type.Null()])),\n});\n\nexport type GondolinWorkerHandshake = Static<typeof GondolinWorkerHandshakeSchema>;\n\n/**\n * One `<sessionId>.json` inventory record, written by the worker process and\n * read back by the TS inventory and the Go daemon's rediscovery.\n */\nexport const GondolinRuntimeRecordSchema = Type.Object({\n  /** Gondolin session id (`vm.id`); also names the record file. */\n  sessionId: Type.String(),\n  /** mikan session key (vault key) the runtime was created for. */\n  instanceId: Type.String(),\n  /** Process that owns the runtime (the worker process). */\n  ownerPid: Type.Number(),\n  /** Host pid of the active VM runner process (QEMU/krun), if started. */\n  runnerPid: Type.Union([Type.Number(), Type.Null()]),\n  createdAt: Type.String(),\n  /** Session IPC socket for adopting the runtime from a new mikan process. */\n  socketPath: Type.Optional(Type.String()),\n  /** Desired-runtime fingerprint the VM was created from. */\n  fingerprint: Type.Optional(Type.String()),\n});\n\nexport type GondolinRuntimeRecord = Static<typeof GondolinRuntimeRecordSchema>;\n\nexport function isGondolinRuntimeRecord(value: unknown): value is GondolinRuntimeRecord {\n  return (\n    isRecord(value) &&\n    typeof value.sessionId === \"string\" &&\n    value.sessionId.length > 0 &&\n    typeof value.instanceId === \"string\" &&\n    typeof value.ownerPid === \"number\" &&\n    (value.runnerPid === null || typeof value.runnerPid === \"number\") &&\n    typeof value.createdAt === \"string\" &&\n    (value.socketPath === undefined || typeof value.socketPath === \"string\") &&\n    (value.fingerprint === undefined || typeof value.fingerprint === \"string\")\n  );\n}\n\n/** A vault credential shipped by content on the ensure request (never a shared-fs mount). */\nconst GondolinCredentialFileSchema = Type.Object({\n  target: Type.String(),\n  contentBase64: Type.String(),\n});\n\nexport type GondolinCredentialFile = Static<typeof GondolinCredentialFileSchema>;\n\n/** POST /v1/runtimes body sent to the remote worker daemon. */\nexport const GondolinEnsureRuntimeRequestSchema = Type.Object({\n  instanceId: Type.String(),\n  imageSelector: Type.String(),\n  mounts: Type.Array(GondolinMountSchema),\n  credentialFiles: Type.Array(GondolinCredentialFileSchema),\n  /** Fractional cgroup CPU limit as a string; \"\" when unset. */\n  cpus: Type.String(),\n  memory: Type.String(),\n  fingerprint: Type.String(),\n  /** Accepted by the daemon; the TS client currently leaves it unset (0). */\n  heartbeatStaleMs: Type.Optional(Type.Number()),\n});\n\nexport type GondolinEnsureRuntimeRequest = Static<typeof GondolinEnsureRuntimeRequestSchema>;\n\n/**\n * One runtime as reported by the daemon (ensure response, GET, and the\n * elements of the list response). The daemon's socketPath never crosses the\n * wire — sessions reach the runtime through the tunnel, not the socket.\n */\nexport const GondolinRemoteRuntimeSchema = Type.Object({\n  sessionId: Type.String(),\n  instanceId: Type.String(),\n  fingerprint: Type.String(),\n  workerPid: Type.Number(),\n  runnerPid: Type.Number(),\n  epoch: Type.Number(),\n  adopted: Type.Boolean(),\n});\n\nexport type GondolinRemoteRuntime = Static<typeof GondolinRemoteRuntimeSchema>;\n\n/** POST /v1/leases response: a fenced, epoch-monotonic per-instance lease. */\nexport const GondolinLeaseGrantSchema = Type.Object({\n  id: Type.String(),\n  instanceId: Type.String(),\n  epoch: Type.Number(),\n  /** RFC 3339 timestamp (Go time.Time marshalling). */\n  expiresAt: Type.String(),\n});\n\n// ── session tunnel framing ────────────────────────────────────────────────────\n// The session protocol itself is TS⇄TS (worker session server ⇄ client); the\n// Go daemon splices it byte-for-byte through the upgraded tunnel. The framing\n// still lives here because it is part of the boundary a transport must carry.\n\n/** Structural shape of the JSON messages on the session protocol. */\nexport interface SessionFrameCallbacks {\n  onJson: (message: {\n    type: string;\n    id?: number;\n    exit_code?: number | null;\n    code?: string;\n    message?: string;\n  }) => void;\n  onBinary: (frame: Buffer) => void;\n}\n\n/** Parses the daemon-to-client session framing: u8 type + u32be length + payload. */\nexport function createSessionFrameParser(\n  callbacks: SessionFrameCallbacks,\n): (chunk: Buffer) => void {\n  let buffer = Buffer.alloc(0);\n  return (chunk: Buffer) => {\n    buffer = Buffer.concat([buffer, chunk]);\n    while (buffer.length >= 5) {\n      const type = buffer.readUInt8(0);\n      const length = buffer.readUInt32BE(1);\n      if (buffer.length < 5 + length) return;\n      const payload = buffer.subarray(5, 5 + length);\n      buffer = buffer.subarray(5 + length);\n      if (type === 1) {\n        callbacks.onBinary(Buffer.from(payload));\n        continue;\n      }\n      try {\n        callbacks.onJson(JSON.parse(payload.toString(\"utf8\")));\n      } catch {\n        // ignore malformed frames\n      }\n    }\n  };\n}\n\n/** Encodes a client-to-daemon session message: u32be length + JSON. */\nexport function encodeSessionMessage(message: object): Buffer {\n  const payload = Buffer.from(JSON.stringify(message));\n  const header = Buffer.alloc(4);\n  header.writeUInt32BE(payload.length, 0);\n  return Buffer.concat([header, payload]);\n}\n"]}
+{"version":3,"file":"gondolin-contract.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD;;;GAGG;AAEH,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,gDAAgD;IAChD,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,4CAA4C;IAC5C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,yFAAyF;IACzF,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACvC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACpC,gEAAgE;IAChE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;IAC1B,oEAAoE;IACpE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;IAC3B,8EAA8E;IAC9E,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE;CAChC,CAAC,CAAC;AAIH,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;IACrB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACxC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC;IACrD,iEAAiE;IACjE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,iEAAiE;IACjE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,wEAAwE;IACxE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,4EAA4E;IAC5E,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACxC,2DAA2D;IAC3D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC1B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC","sourcesContent":["import { Type, type Static } from \"@sinclair/typebox\";\nimport { isRecord } from \"../utils/file-guards.js\";\n\n/**\n * Single home for the wire shapes shared by mikan's local Gondolin client and\n * detached worker process.\n */\n\nconst GondolinMountSchema = Type.Object({\n  source: Type.String(),\n  target: Type.String(),\n});\n\n/**\n * Everything a worker process needs to host one Gondolin VM. Serialized as a\n * single JSON argv entry by the local TS worker client.\n */\nexport const GondolinWorkerConfigSchema = Type.Object({\n  /** mikan session key the runtime belongs to. */\n  instanceId: Type.String(),\n  /** Resolved guest image asset directory. */\n  image: Type.Optional(Type.String()),\n  /** Optional image selector resolved inside the worker when no image path is supplied. */\n  imageSelector: Type.Optional(Type.String()),\n  mounts: Type.Array(GondolinMountSchema),\n  cpus: Type.Optional(Type.Number()),\n  memory: Type.Optional(Type.String()),\n  /** Desired-runtime fingerprint recorded for adoption checks. */\n  fingerprint: Type.String(),\n  /** Runtime inventory directory (shared with the spawning mikan). */\n  inventoryDir: Type.String(),\n  /** Self-stop when the mikan heartbeat file is older than this. 0 disables. */\n  heartbeatStaleMs: Type.Number(),\n});\n\nexport type GondolinWorkerConfig = Static<typeof GondolinWorkerConfigSchema>;\n\n/** First stdout line of a worker, consumed by both spawners. */\nexport const GondolinWorkerHandshakeSchema = Type.Object({\n  ready: Type.Boolean(),\n  error: Type.Optional(Type.String()),\n  sessionId: Type.Optional(Type.String()),\n  socketPath: Type.Optional(Type.String()),\n  workerPid: Type.Optional(Type.Number()),\n  runnerPid: Type.Optional(Type.Union([Type.Number(), Type.Null()])),\n});\n\nexport type GondolinWorkerHandshake = Static<typeof GondolinWorkerHandshakeSchema>;\n\n/**\n * One `<sessionId>.json` inventory record, written by the worker process and\n * read back by the TS inventory.\n */\nexport const GondolinRuntimeRecordSchema = Type.Object({\n  /** Gondolin session id (`vm.id`); also names the record file. */\n  sessionId: Type.String(),\n  /** mikan session key (vault key) the runtime was created for. */\n  instanceId: Type.String(),\n  /** Process that owns the runtime (the worker process). */\n  ownerPid: Type.Number(),\n  /** Host pid of the active VM runner process (QEMU/krun), if started. */\n  runnerPid: Type.Union([Type.Number(), Type.Null()]),\n  createdAt: Type.String(),\n  /** Session IPC socket for adopting the runtime from a new mikan process. */\n  socketPath: Type.Optional(Type.String()),\n  /** Desired-runtime fingerprint the VM was created from. */\n  fingerprint: Type.Optional(Type.String()),\n});\n\nexport type GondolinRuntimeRecord = Static<typeof GondolinRuntimeRecordSchema>;\n\nexport function isGondolinRuntimeRecord(value: unknown): value is GondolinRuntimeRecord {\n  return (\n    isRecord(value) &&\n    typeof value.sessionId === \"string\" &&\n    value.sessionId.length > 0 &&\n    typeof value.instanceId === \"string\" &&\n    typeof value.ownerPid === \"number\" &&\n    (value.runnerPid === null || typeof value.runnerPid === \"number\") &&\n    typeof value.createdAt === \"string\" &&\n    (value.socketPath === undefined || typeof value.socketPath === \"string\") &&\n    (value.fingerprint === undefined || typeof value.fingerprint === \"string\")\n  );\n}\n"]}

package/dist/sandbox/gondolin-recovery.d.ts

@@ -1,21 +1,10 @@
 /**
- * The single home of gondolin's crash-recovery vocabulary. Every transport
- * classifies failures with these errors, and every policy site decides
- * through the named predicates — the story reads in one place:
+ * Crash-recovery vocabulary for a local detached Gondolin worker.
  *
- * - **Gone** (isRuntimeGone): the command never reached the runtime — the
- *   session socket refused, the lease lapsed, or the hosting worker vanished.
- *   Safe to recreate the runtime and retry; `withRuntime` (gondolin.ts)
- *   retries exactly once.
- * - **Interrupted** (isRuntimeInterrupted): the runtime died (or went silent
- *   past the idle deadline) with the command in flight. Side effects may have
- *   landed, so the failure must surface; the session is discarded only when
- *   the runtime is confirmed dead.
- * - **Lease-fenced** (isLeaseFencedStatus): the remote daemon rejected our
- *   lease — a newer epoch superseded it (409) or it expired (410). The cached
- *   lease is dropped and re-acquired once; the fleet's failover gate
- *   (assertFailoverAllowed) separately keeps a replacement placement fenced
- *   until the old lease's watermark passes.
+ * - **Gone**: the command never reached the runtime because its session socket
+ *   refused the connection. Recreating the runtime and retrying is safe.
+ * - **Interrupted**: the runtime died or went silent with a command in flight.
+ *   Side effects may have landed, so the failure must surface.
  */
 /**
  * The runtime is gone and the command never reached it (the session socket
@@ -28,6 +17,4 @@ export declare class GondolinRuntimeInterruptedError extends Error {
 }
 export declare function isRuntimeGone(error: unknown): error is GondolinRuntimeGoneError;
 export declare function isRuntimeInterrupted(error: unknown): error is GondolinRuntimeInterruptedError;
-/** 409 = a newer lease epoch superseded ours; 410 = our lease expired. */
-export declare function isLeaseFencedStatus(status: number | undefined): boolean;
 //# sourceMappingURL=gondolin-recovery.d.ts.map

package/dist/sandbox/gondolin-recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-recovery.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,+EAA+E;AAC/E,qBAAa,+BAAgC,SAAQ,KAAK;CAAG;AAE7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE/E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,+BAA+B,CAE7F;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEvE"}
+{"version":3,"file":"gondolin-recovery.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,+EAA+E;AAC/E,qBAAa,+BAAgC,SAAQ,KAAK;CAAG;AAE7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE/E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,+BAA+B,CAE7F"}

package/dist/sandbox/gondolin-recovery.js

@@ -1,21 +1,10 @@
 /**
- * The single home of gondolin's crash-recovery vocabulary. Every transport
- * classifies failures with these errors, and every policy site decides
- * through the named predicates — the story reads in one place:
+ * Crash-recovery vocabulary for a local detached Gondolin worker.
  *
- * - **Gone** (isRuntimeGone): the command never reached the runtime — the
- *   session socket refused, the lease lapsed, or the hosting worker vanished.
- *   Safe to recreate the runtime and retry; `withRuntime` (gondolin.ts)
- *   retries exactly once.
- * - **Interrupted** (isRuntimeInterrupted): the runtime died (or went silent
- *   past the idle deadline) with the command in flight. Side effects may have
- *   landed, so the failure must surface; the session is discarded only when
- *   the runtime is confirmed dead.
- * - **Lease-fenced** (isLeaseFencedStatus): the remote daemon rejected our
- *   lease — a newer epoch superseded it (409) or it expired (410). The cached
- *   lease is dropped and re-acquired once; the fleet's failover gate
- *   (assertFailoverAllowed) separately keeps a replacement placement fenced
- *   until the old lease's watermark passes.
+ * - **Gone**: the command never reached the runtime because its session socket
+ *   refused the connection. Recreating the runtime and retrying is safe.
+ * - **Interrupted**: the runtime died or went silent with a command in flight.
+ *   Side effects may have landed, so the failure must surface.
  */
 /**
  * The runtime is gone and the command never reached it (the session socket
@@ -32,8 +21,4 @@ export function isRuntimeGone(error) {
 export function isRuntimeInterrupted(error) {
     return error instanceof GondolinRuntimeInterruptedError;
 }
-/** 409 = a newer lease epoch superseded ours; 410 = our lease expired. */
-export function isLeaseFencedStatus(status) {
-    return status === 409 || status === 410;
-}
 //# sourceMappingURL=gondolin-recovery.js.map

package/dist/sandbox/gondolin-recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-recovery.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,+EAA+E;AAC/E,MAAM,OAAO,+BAAgC,SAAQ,KAAK;CAAG;AAE7D,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,wBAAwB,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,YAAY,+BAA+B,CAAC;AAC1D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC","sourcesContent":["/**\n * The single home of gondolin's crash-recovery vocabulary. Every transport\n * classifies failures with these errors, and every policy site decides\n * through the named predicates — the story reads in one place:\n *\n * - **Gone** (isRuntimeGone): the command never reached the runtime — the\n *   session socket refused, the lease lapsed, or the hosting worker vanished.\n *   Safe to recreate the runtime and retry; `withRuntime` (gondolin.ts)\n *   retries exactly once.\n * - **Interrupted** (isRuntimeInterrupted): the runtime died (or went silent\n *   past the idle deadline) with the command in flight. Side effects may have\n *   landed, so the failure must surface; the session is discarded only when\n *   the runtime is confirmed dead.\n * - **Lease-fenced** (isLeaseFencedStatus): the remote daemon rejected our\n *   lease — a newer epoch superseded it (409) or it expired (410). The cached\n *   lease is dropped and re-acquired once; the fleet's failover gate\n *   (assertFailoverAllowed) separately keeps a replacement placement fenced\n *   until the old lease's watermark passes.\n */\n\n/**\n * The runtime is gone and the command never reached it (the session socket\n * refused the connection) — safe to recreate the runtime and retry.\n */\nexport class GondolinRuntimeGoneError extends Error {}\n\n/** The runtime died with the command in flight — not safe to retry blindly. */\nexport class GondolinRuntimeInterruptedError extends Error {}\n\nexport function isRuntimeGone(error: unknown): error is GondolinRuntimeGoneError {\n  return error instanceof GondolinRuntimeGoneError;\n}\n\nexport function isRuntimeInterrupted(error: unknown): error is GondolinRuntimeInterruptedError {\n  return error instanceof GondolinRuntimeInterruptedError;\n}\n\n/** 409 = a newer lease epoch superseded ours; 410 = our lease expired. */\nexport function isLeaseFencedStatus(status: number | undefined): boolean {\n  return status === 409 || status === 410;\n}\n"]}
+{"version":3,"file":"gondolin-recovery.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,+EAA+E;AAC/E,MAAM,OAAO,+BAAgC,SAAQ,KAAK;CAAG;AAE7D,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,wBAAwB,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,YAAY,+BAA+B,CAAC;AAC1D,CAAC","sourcesContent":["/**\n * Crash-recovery vocabulary for a local detached Gondolin worker.\n *\n * - **Gone**: the command never reached the runtime because its session socket\n *   refused the connection. Recreating the runtime and retrying is safe.\n * - **Interrupted**: the runtime died or went silent with a command in flight.\n *   Side effects may have landed, so the failure must surface.\n */\n\n/**\n * The runtime is gone and the command never reached it (the session socket\n * refused the connection) — safe to recreate the runtime and retry.\n */\nexport class GondolinRuntimeGoneError extends Error {}\n\n/** The runtime died with the command in flight — not safe to retry blindly. */\nexport class GondolinRuntimeInterruptedError extends Error {}\n\nexport function isRuntimeGone(error: unknown): error is GondolinRuntimeGoneError {\n  return error instanceof GondolinRuntimeGoneError;\n}\n\nexport function isRuntimeInterrupted(error: unknown): error is GondolinRuntimeInterruptedError {\n  return error instanceof GondolinRuntimeInterruptedError;\n}\n"]}

package/dist/sandbox/gondolin-worker-client.d.ts

@@ -1,50 +1,26 @@
 import type { Readable } from "node:stream";
 import type { GondolinWorkerConfig } from "./gondolin-worker.js";
 import type { ExecResult } from "./types.js";
-/**
- * A live worker-hosted runtime as seen from mikan: identity plus fleet
- * routing only. Transport-private connection details (the local worker's
- * session socket, the remote worker's lease/tunnel) stay inside the owning
- * transport — a handle never carries another transport's address fields.
- */
+/** A live detached worker-hosted runtime as seen from mikan. */
 export interface GondolinRuntimeHandle {
     sessionId: string;
     instanceId: string;
     workerPid: number;
     fingerprint: string;
-    /** Fleet identity of the worker hosting the runtime (remote transport). */
-    workerName?: string;
 }
-/**
- * What a runtime should look like, resolved by the executor layer. `image` is
- * a local asset directory for the local transport and an image selector for
- * the remote one (resolved on the worker host).
- */
-export interface GondolinRuntimeSpec {
+/** Desired configuration for a local Gondolin runtime. */
+interface GondolinRuntimeSpec {
     image: string;
     mounts: Array<{
         source: string;
         target: string;
     }>;
-    /** Raw fractional CPU limit (cgroup enforcement on remote Linux workers). */
     cpus?: string;
-    /** Whole vCPUs given to the VM. */
     vmCpus?: number;
     memory?: string;
     fingerprint: string;
-    /** mikan-host workspace root, for remote mount prefix translation. */
     workspacePath?: string;
 }
-/** One way of running Gondolin runtimes: in local workers or on a remote fleet. */
-export interface GondolinRuntimeTransport {
-    ensure(instanceId: string, spec: GondolinRuntimeSpec): Promise<GondolinRuntimeHandle>;
-    stop(handle: Pick<GondolinRuntimeHandle, "workerPid" | "sessionId" | "instanceId" | "workerName">): Promise<void>;
-    exec(handle: GondolinRuntimeHandle, command: string, options?: {
-        env?: Record<string, string>;
-        signal?: AbortSignal;
-    }): Promise<ExecResult>;
-    isRuntimeAlive(handle: GondolinRuntimeHandle): Promise<boolean>;
-}
 interface WorkerProcessLike {
     pid?: number;
     stdout: Readable | null;
@@ -78,17 +54,17 @@ interface GondolinWorkerClientOverrides {
     stopPollIntervalMs?: number;
 }
 /**
- * Run one command through a fresh session connection — the shared state
- * machine for both transports. Closing the connection (abort, timeout, or the
- * far side dying) kills the in-flight guest process.
+ * Run one command through a fresh local worker session connection. Closing
+ * the connection (abort, timeout, or the far side dying) kills the in-flight
+ * guest process.
  */
 export declare function execOverSessionConnect(connect: (callbacks: SessionClientCallbacks) => SessionClient | Promise<SessionClient>, command: string, options?: {
     env?: Record<string, string>;
     signal?: AbortSignal;
     idleTimeoutMs?: number;
 }): Promise<ExecResult>;
-declare class GondolinWorkerClient implements GondolinRuntimeTransport {
-    /** Session IPC socket per runtime — transport-private, never on the handle. */
+declare class GondolinWorkerClient {
+    /** Session IPC socket per runtime, kept out of the public handle. */
     private readonly socketPaths;
     private spawnProcess;
     private connectImpl;
@@ -115,7 +91,6 @@ declare class GondolinWorkerClient implements GondolinRuntimeTransport {
      * SIGKILL and reap its leftovers if it will not die.
      */
     stop(handle: Pick<GondolinRuntimeHandle, "workerPid" | "sessionId">): Promise<void>;
-    /** Whether the worker process behind a handle is still alive. */
     /**
      * Run one command over a dedicated session IPC connection. Aborting (or the
      * caller's timeout signal firing) destroys the connection, which kills the

package/dist/sandbox/gondolin-worker-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gondolin-worker-client.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-worker-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAI5C,OAAO,KAAK,EAAE,oBAAoB,EAA2B,MAAM,sBAAsB,CAAC;AAC1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtF,IAAI,CACF,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC,GAC3F,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CACF,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC/D,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE;AAID,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,6BAA6B;IACrC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,iBAAiB,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,KAAK,aAAa,CAAC;IACnF,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AA0BD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,EACtF,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3F,OAAO,CAAC,UAAU,CAAC,CAsGrB;AAKD,cAAM,oBAAqB,YAAW,wBAAwB;IAC5D,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,WAAW,CAG0C;IAC7D,OAAO,CAAC,QAAQ,CACY;IAC5B,OAAO,CAAC,kBAAkB,CAAW;IACrC,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,kBAAkB,CAAO;IAEjC,SAAS,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAOzD;IAED,wEAAwE;IAClE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAa1F;IAED,2DAA2D;IACrD,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAEpE;IAED,+EAA+E;IACzE,KAAK,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBxE;IAED;;;;;OAKG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAsB/F;IAED;;;OAGG;IACG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxF;IAED,iEAAiE;IACjE;;;;OAIG;IACG,IAAI,CACR,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GACnE,OAAO,CAAC,UAAU,CAAC,CAYrB;IAED,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,UAAU;YASJ,WAAW;IASzB,OAAO,CAAC,aAAa;CA0DtB;AAED,eAAO,MAAM,eAAe,sBAA6B,CAAC"}
+{"version":3,"file":"gondolin-worker-client.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-worker-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAI5C,OAAO,KAAK,EAAE,oBAAoB,EAA2B,MAAM,sBAAsB,CAAC;AAC1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,0DAA0D;AAC1D,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,6BAA6B;IACrC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,iBAAiB,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,KAAK,aAAa,CAAC;IACnF,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AA0BD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,EACtF,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3F,OAAO,CAAC,UAAU,CAAC,CAsGrB;AAKD,cAAM,oBAAoB;IACxB,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,WAAW,CAG0C;IAC7D,OAAO,CAAC,QAAQ,CACY;IAC5B,OAAO,CAAC,kBAAkB,CAAW;IACrC,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,kBAAkB,CAAO;IAEjC,SAAS,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAOzD;IAED,wEAAwE;IAClE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAa1F;IAED,2DAA2D;IACrD,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAEpE;IAED,+EAA+E;IACzE,KAAK,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBxE;IAED;;;;;OAKG;IACG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAsB/F;IAED;;;OAGG;IACG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxF;IAED;;;;OAIG;IACG,IAAI,CACR,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GACnE,OAAO,CAAC,UAAU,CAAC,CAYrB;IAED,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,UAAU;YASJ,WAAW;IASzB,OAAO,CAAC,aAAa;CA0DtB;AAED,eAAO,MAAM,eAAe,sBAA6B,CAAC"}