@herdctl/core 1.3.0 → 2.0.0

package/dist/runner/runtime/cli-session-watcher.d.ts

@@ -0,0 +1,55 @@
+/**
+ * CLI session file watcher - monitors CLI session files for new messages
+ *
+ * Event-driven watcher that yields messages as they're written to the session file.
+ * No polling, no timeouts - just clean async/await.
+ */
+import type { SDKMessage } from "../types.js";
+/**
+ * Watches a CLI session file and yields new messages as they're written
+ */
+export declare class CLISessionWatcher {
+    private watcher;
+    private lastLineCount;
+    private sessionFilePath;
+    private messageQueue;
+    private pendingMessageResolve;
+    private stopped;
+    constructor(sessionFilePath: string);
+    /**
+     * Initialize watcher by reading existing file content
+     *
+     * When resuming a session, call this before watch() to skip existing
+     * messages and only process new content appended after this point.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Process file and queue any new messages
+     */
+    private processFile;
+    /**
+     * Watch session file and yield messages as they arrive
+     *
+     * This is event-driven - it waits (blocks) until messages are available.
+     * No polling, no timeouts.
+     */
+    watch(): AsyncIterable<SDKMessage>;
+    /**
+     * Process any remaining messages in the file
+     *
+     * Called when the CLI process exits to ensure we don't miss final messages
+     * that haven't triggered a chokidar event yet.
+     *
+     * @returns Array of any remaining messages found
+     */
+    flushRemainingMessages(): Promise<SDKMessage[]>;
+    /**
+     * Stop watching
+     */
+    stop(): void;
+}
+/**
+ * Convenience function to watch a session file
+ */
+export declare function watchSessionFile(sessionFilePath: string, signal?: AbortSignal): AsyncIterable<SDKMessage>;
+//# sourceMappingURL=cli-session-watcher.d.ts.map

package/dist/runner/runtime/cli-session-watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session-watcher.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/cli-session-watcher.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAkD;IACjE,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,qBAAqB,CAA6B;IAC1D,OAAO,CAAC,OAAO,CAAS;gBAEZ,eAAe,EAAE,MAAM;IAInC;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBjC;;OAEG;YACW,WAAW;IAwCzB;;;;;OAKG;IACI,KAAK,IAAI,aAAa,CAAC,UAAU,CAAC;IA0DzC;;;;;;;OAOG;IACG,sBAAsB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAYrD;;OAEG;IACH,IAAI,IAAI,IAAI;CAab;AAED;;GAEG;AACH,wBAAuB,gBAAgB,CACrC,eAAe,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,aAAa,CAAC,UAAU,CAAC,CAa3B"}

package/dist/runner/runtime/cli-session-watcher.js

@@ -0,0 +1,187 @@
+/**
+ * CLI session file watcher - monitors CLI session files for new messages
+ *
+ * Event-driven watcher that yields messages as they're written to the session file.
+ * No polling, no timeouts - just clean async/await.
+ */
+import chokidar from "chokidar";
+import { readFile } from "node:fs/promises";
+/**
+ * Watches a CLI session file and yields new messages as they're written
+ */
+export class CLISessionWatcher {
+    watcher = null;
+    lastLineCount = 0;
+    sessionFilePath;
+    messageQueue = [];
+    pendingMessageResolve = null;
+    stopped = false;
+    constructor(sessionFilePath) {
+        this.sessionFilePath = sessionFilePath;
+    }
+    /**
+     * Initialize watcher by reading existing file content
+     *
+     * When resuming a session, call this before watch() to skip existing
+     * messages and only process new content appended after this point.
+     */
+    async initialize() {
+        try {
+            const content = await readFile(this.sessionFilePath, "utf-8");
+            const lines = content.split("\n").filter((line) => line.trim() !== "");
+            this.lastLineCount = lines.length;
+            console.log(`[CLISessionWatcher] Initialized at line ${this.lastLineCount}, will skip existing content`);
+        }
+        catch (error) {
+            if (error.code === "ENOENT") {
+                // File doesn't exist yet - that's fine for new sessions
+                console.log(`[CLISessionWatcher] File doesn't exist yet, starting from line 0`);
+            }
+            else {
+                console.warn(`[CLISessionWatcher] Failed to initialize: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    /**
+     * Process file and queue any new messages
+     */
+    async processFile() {
+        try {
+            const content = await readFile(this.sessionFilePath, "utf-8");
+            const lines = content.split("\n").filter((line) => line.trim() !== "");
+            // Process only new lines since last read
+            const newLines = lines.slice(this.lastLineCount);
+            this.lastLineCount = lines.length;
+            console.log(`[CLISessionWatcher] Processing ${newLines.length} new lines`);
+            // Parse and queue valid messages
+            for (const line of newLines) {
+                try {
+                    const message = JSON.parse(line);
+                    console.log(`[CLISessionWatcher] Queued message type: ${message.type}`);
+                    this.messageQueue.push(message);
+                }
+                catch (error) {
+                    // Skip invalid JSON lines (CLI may output non-JSON)
+                    console.warn(`[CLISessionWatcher] Failed to parse line: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            // If someone is waiting for a message and we have one, wake them up
+            if (this.pendingMessageResolve && this.messageQueue.length > 0) {
+                console.log(`[CLISessionWatcher] Waking up waiting iterator`);
+                this.pendingMessageResolve();
+                this.pendingMessageResolve = null;
+            }
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                console.warn(`[CLISessionWatcher] Error reading session file: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    /**
+     * Watch session file and yield messages as they arrive
+     *
+     * This is event-driven - it waits (blocks) until messages are available.
+     * No polling, no timeouts.
+     */
+    async *watch() {
+        // Configure chokidar
+        this.watcher = chokidar.watch(this.sessionFilePath, {
+            awaitWriteFinish: {
+                stabilityThreshold: 500,
+                pollInterval: 100,
+            },
+            ignoreInitial: false,
+        });
+        this.watcher.on("add", async () => {
+            console.log("[CLISessionWatcher] File 'add' event");
+            await this.processFile();
+        });
+        this.watcher.on("change", async () => {
+            console.log("[CLISessionWatcher] File 'change' event");
+            await this.processFile();
+        });
+        this.watcher.on("error", (error) => {
+            console.error(`[CLISessionWatcher] Watcher error: ${error instanceof Error ? error.message : String(error)}`);
+        });
+        try {
+            while (!this.stopped) {
+                // If we have queued messages, yield them
+                while (this.messageQueue.length > 0) {
+                    const message = this.messageQueue.shift();
+                    console.log(`[CLISessionWatcher] Yielding message type: ${message.type}`);
+                    yield message;
+                }
+                // No messages - wait for chokidar to add one
+                console.log(`[CLISessionWatcher] No messages, waiting for chokidar event`);
+                await new Promise((resolve) => {
+                    this.pendingMessageResolve = resolve;
+                    // Also wake up if stopped
+                    if (this.stopped) {
+                        resolve();
+                    }
+                });
+                console.log(`[CLISessionWatcher] Woke up (stopped: ${this.stopped}, queue: ${this.messageQueue.length})`);
+                // Check if we should exit
+                if (this.stopped) {
+                    break;
+                }
+            }
+        }
+        finally {
+            console.log(`[CLISessionWatcher] Generator exiting`);
+            this.stop();
+        }
+    }
+    /**
+     * Process any remaining messages in the file
+     *
+     * Called when the CLI process exits to ensure we don't miss final messages
+     * that haven't triggered a chokidar event yet.
+     *
+     * @returns Array of any remaining messages found
+     */
+    async flushRemainingMessages() {
+        console.log(`[CLISessionWatcher] Flushing remaining messages from file`);
+        await this.processFile();
+        // Return all queued messages
+        const messages = [...this.messageQueue];
+        this.messageQueue = [];
+        console.log(`[CLISessionWatcher] Flushed ${messages.length} remaining message(s)`);
+        return messages;
+    }
+    /**
+     * Stop watching
+     */
+    stop() {
+        console.log(`[CLISessionWatcher] stop() called`);
+        this.stopped = true;
+        if (this.watcher) {
+            this.watcher.close();
+            this.watcher = null;
+        }
+        // Wake up any waiting iterator
+        if (this.pendingMessageResolve) {
+            this.pendingMessageResolve();
+            this.pendingMessageResolve = null;
+        }
+    }
+}
+/**
+ * Convenience function to watch a session file
+ */
+export async function* watchSessionFile(sessionFilePath, signal) {
+    const watcher = new CLISessionWatcher(sessionFilePath);
+    try {
+        for await (const message of watcher.watch()) {
+            if (signal?.aborted) {
+                break;
+            }
+            yield message;
+        }
+    }
+    finally {
+        watcher.stop();
+    }
+}
+//# sourceMappingURL=cli-session-watcher.js.map

package/dist/runner/runtime/cli-session-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session-watcher.js","sourceRoot":"","sources":["../../../src/runner/runtime/cli-session-watcher.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,OAAO,GAA6C,IAAI,CAAC;IACzD,aAAa,GAAG,CAAC,CAAC;IAClB,eAAe,CAAS;IACxB,YAAY,GAAiB,EAAE,CAAC;IAChC,qBAAqB,GAAwB,IAAI,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,eAAuB;QACjC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,CAAC,aAAa,8BAA8B,CAAC,CAAC;QAC3G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,wDAAwD;gBACxD,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAEvE,yCAAyC;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;YAElC,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC;YAE3E,iCAAiC;YACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,4CAA4C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBACxE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,oDAAoD;oBACpD,OAAO,CAAC,IAAI,CACV,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;gBAC9D,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC7B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CACV,mDAAmD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,CAAC,KAAK;QACV,qBAAqB;QACrB,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE;YAClD,gBAAgB,EAAE;gBAChB,kBAAkB,EAAE,GAAG;gBACvB,YAAY,EAAE,GAAG;aAClB;YACD,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YAChC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAc,EAAE,EAAE;YAC1C,OAAO,CAAC,KAAK,CACX,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrB,yCAAyC;gBACzC,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAG,CAAC;oBAC3C,OAAO,CAAC,GAAG,CAAC,8CAA8C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC1E,MAAM,OAAO,CAAC;gBAChB,CAAC;gBAED,6CAA6C;gBAC7C,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;gBAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC;oBAErC,0BAA0B;oBAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACjB,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,CAAC,OAAO,YAAY,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE1G,0BAA0B;gBAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,sBAAsB;QAC1B,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzB,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QAEvB,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC;QACnF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,+BAA+B;QAC/B,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,gBAAgB,CACrC,eAAuB,EACvB,MAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAEvD,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM;YACR,CAAC;YACD,MAAM,OAAO,CAAC;QAChB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/runner/runtime/container-manager.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Docker container lifecycle management
+ *
+ * Handles container creation, security configuration, and cleanup.
+ * Uses dockerode for Docker API communication.
+ */
+import type { Container, Exec } from "dockerode";
+import type { DockerConfig, PathMapping } from "./docker-config.js";
+import type { ResolvedAgent } from "../../config/index.js";
+/**
+ * Container manager for herdctl Docker execution
+ */
+export declare class ContainerManager {
+    private docker;
+    private runningContainers;
+    constructor(docker?: import("dockerode"));
+    /**
+     * Get or create a container for an agent
+     *
+     * For persistent containers (ephemeral: false), reuses existing running container.
+     * For ephemeral containers, always creates a new container with AutoRemove.
+     *
+     * @param agentName - Name of the agent
+     * @param config - Docker configuration
+     * @param mounts - Volume mounts
+     * @param env - Environment variables
+     * @returns Docker container
+     */
+    getOrCreateContainer(agentName: string, config: DockerConfig, mounts: PathMapping[], env: string[]): Promise<Container>;
+    /**
+     * Create a new Docker container with security hardening
+     */
+    private createContainer;
+    /**
+     * Execute a command inside a container
+     *
+     * @param container - Docker container
+     * @param command - Command and arguments
+     * @param workDir - Working directory inside container
+     * @returns Exec instance for stream access
+     */
+    execInContainer(container: Container, command: string[], workDir?: string): Promise<Exec>;
+    /**
+     * Clean up old containers for an agent
+     *
+     * Removes oldest containers when count exceeds maxContainers.
+     *
+     * @param agentName - Name of the agent
+     * @param maxContainers - Maximum containers to keep
+     */
+    cleanupOldContainers(agentName: string, maxContainers: number): Promise<void>;
+    /**
+     * Stop and remove a specific container
+     */
+    stopContainer(container: Container): Promise<void>;
+}
+/**
+ * Build volume mounts for container execution
+ *
+ * Creates mounts for working directory, auth files, and Docker sessions.
+ *
+ * @param agent - Resolved agent configuration
+ * @param dockerConfig - Docker configuration
+ * @param stateDir - herdctl state directory (.herdctl/)
+ * @returns Array of path mappings
+ */
+export declare function buildContainerMounts(agent: ResolvedAgent, dockerConfig: DockerConfig, stateDir: string): PathMapping[];
+/**
+ * Build environment variables for container
+ *
+ * @param agent - Resolved agent configuration
+ * @param config - Docker configuration (for custom env vars)
+ * @returns Array of "KEY=value" strings
+ */
+export declare function buildContainerEnv(agent: ResolvedAgent, config?: DockerConfig): string[];
+//# sourceMappingURL=container-manager.d.ts.map

package/dist/runner/runtime/container-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-manager.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/container-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAA0B,IAAI,EAAE,MAAM,WAAW,CAAC;AAIzE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,iBAAiB,CAAgC;gBAE7C,MAAM,CAAC,EAAE,OAAO,WAAW,CAAC;IAIxC;;;;;;;;;;;OAWG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,WAAW,EAAE,EACrB,GAAG,EAAE,MAAM,EAAE,GACZ,OAAO,CAAC,SAAS,CAAC;IA+BrB;;OAEG;YACW,eAAe;IAoD7B;;;;;;;OAOG;IACG,eAAe,CACnB,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,GAAE,MAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;;;OAOG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAwBhB;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,EACpB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,MAAM,GACf,WAAW,EAAE,CAiCf;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,aAAa,EACpB,MAAM,CAAC,EAAE,YAAY,GACpB,MAAM,EAAE,CA2BV"}

package/dist/runner/runtime/container-manager.js

@@ -0,0 +1,229 @@
+/**
+ * Docker container lifecycle management
+ *
+ * Handles container creation, security configuration, and cleanup.
+ * Uses dockerode for Docker API communication.
+ */
+import Dockerode from "dockerode";
+import * as path from "node:path";
+/**
+ * Container manager for herdctl Docker execution
+ */
+export class ContainerManager {
+    docker;
+    runningContainers = new Map();
+    constructor(docker) {
+        this.docker = docker ?? new Dockerode();
+    }
+    /**
+     * Get or create a container for an agent
+     *
+     * For persistent containers (ephemeral: false), reuses existing running container.
+     * For ephemeral containers, always creates a new container with AutoRemove.
+     *
+     * @param agentName - Name of the agent
+     * @param config - Docker configuration
+     * @param mounts - Volume mounts
+     * @param env - Environment variables
+     * @returns Docker container
+     */
+    async getOrCreateContainer(agentName, config, mounts, env) {
+        // For persistent containers, check if already running
+        if (!config.ephemeral) {
+            const existing = this.runningContainers.get(agentName);
+            if (existing) {
+                try {
+                    const info = await existing.inspect();
+                    if (info.State.Running) {
+                        return existing;
+                    }
+                }
+                catch {
+                    // Container no longer exists, remove from map
+                    this.runningContainers.delete(agentName);
+                }
+            }
+        }
+        // Create new container
+        const container = await this.createContainer(agentName, config, mounts, env);
+        // Start the container
+        await container.start();
+        // Track persistent containers
+        if (!config.ephemeral) {
+            this.runningContainers.set(agentName, container);
+        }
+        return container;
+    }
+    /**
+     * Create a new Docker container with security hardening
+     */
+    async createContainer(agentName, config, mounts, env) {
+        const containerName = `herdctl-${agentName}-${Date.now()}`;
+        const createOptions = {
+            Image: config.image,
+            name: containerName,
+            Tty: false,
+            OpenStdin: true,
+            StdinOnce: false,
+            // Keep container running for exec commands
+            Cmd: ["sleep", "infinity"],
+            WorkingDir: "/workspace",
+            Env: env,
+            HostConfig: {
+                // Resource limits
+                Memory: config.memoryBytes,
+                MemorySwap: config.memoryBytes, // Same as Memory = no swap
+                CpuShares: config.cpuShares, // undefined = no limit (full CPU access)
+                // Network isolation
+                NetworkMode: config.network,
+                // Volume mounts
+                Binds: mounts.map((m) => `${m.hostPath}:${m.containerPath}:${m.mode}`),
+                // Security hardening
+                SecurityOpt: ["no-new-privileges:true"],
+                CapDrop: ["ALL"],
+                ReadonlyRootfs: false, // Claude needs to write temp files
+                // Cleanup
+                AutoRemove: config.ephemeral,
+            },
+            // Non-root user
+            User: config.user,
+        };
+        return this.docker.createContainer(createOptions);
+    }
+    /**
+     * Execute a command inside a container
+     *
+     * @param container - Docker container
+     * @param command - Command and arguments
+     * @param workDir - Working directory inside container
+     * @returns Exec instance for stream access
+     */
+    async execInContainer(container, command, workDir = "/workspace") {
+        return container.exec({
+            Cmd: command,
+            AttachStdout: true,
+            AttachStderr: true,
+            AttachStdin: false,
+            Tty: false,
+            WorkingDir: workDir,
+        });
+    }
+    /**
+     * Clean up old containers for an agent
+     *
+     * Removes oldest containers when count exceeds maxContainers.
+     *
+     * @param agentName - Name of the agent
+     * @param maxContainers - Maximum containers to keep
+     */
+    async cleanupOldContainers(agentName, maxContainers) {
+        const containers = await this.docker.listContainers({
+            all: true,
+            filters: {
+                name: [`herdctl-${agentName}-`],
+            },
+        });
+        // Sort by creation time, oldest first
+        const sorted = containers.sort((a, b) => a.Created - b.Created);
+        // Remove oldest until under limit
+        const toRemove = sorted.slice(0, Math.max(0, sorted.length - maxContainers));
+        for (const info of toRemove) {
+            const container = this.docker.getContainer(info.Id);
+            try {
+                await container.remove({ force: true });
+            }
+            catch {
+                // Ignore errors for already-removed containers
+            }
+        }
+    }
+    /**
+     * Stop and remove a specific container
+     */
+    async stopContainer(container) {
+        try {
+            await container.stop({ t: 5 }); // 5 second timeout
+        }
+        catch {
+            // Container may already be stopped
+        }
+        try {
+            const info = await container.inspect();
+            if (!info.HostConfig?.AutoRemove) {
+                await container.remove({ force: true });
+            }
+        }
+        catch {
+            // Container may already be removed
+        }
+    }
+}
+/**
+ * Build volume mounts for container execution
+ *
+ * Creates mounts for working directory, auth files, and Docker sessions.
+ *
+ * @param agent - Resolved agent configuration
+ * @param dockerConfig - Docker configuration
+ * @param stateDir - herdctl state directory (.herdctl/)
+ * @returns Array of path mappings
+ */
+export function buildContainerMounts(agent, dockerConfig, stateDir) {
+    const mounts = [];
+    // Working directory mount
+    const working_directory = agent.working_directory;
+    if (working_directory) {
+        const working_directoryRoot = typeof working_directory === "string"
+            ? working_directory
+            : working_directory.root;
+        mounts.push({
+            hostPath: working_directoryRoot,
+            containerPath: "/workspace",
+            mode: dockerConfig.workspaceMode,
+        });
+    }
+    // Docker sessions directory (separate from host sessions)
+    // Claude CLI writes sessions to ~/.claude/projects/<encoded-workspace>/
+    // Inside container, working dir is /workspace → encoded as "-workspace"
+    // Mount docker-sessions to this location so we can watch files from host
+    // Note: Authentication uses ANTHROPIC_API_KEY env var, so no auth mount needed
+    const dockerSessionsDir = path.join(stateDir, "docker-sessions");
+    mounts.push({
+        hostPath: dockerSessionsDir,
+        containerPath: "/home/claude/.claude/projects/-workspace",
+        mode: "rw",
+    });
+    // Custom volumes from config
+    mounts.push(...dockerConfig.volumes);
+    return mounts;
+}
+/**
+ * Build environment variables for container
+ *
+ * @param agent - Resolved agent configuration
+ * @param config - Docker configuration (for custom env vars)
+ * @returns Array of "KEY=value" strings
+ */
+export function buildContainerEnv(agent, config) {
+    const env = [];
+    // Pass through API key if available (preferred over mounted auth)
+    if (process.env.ANTHROPIC_API_KEY) {
+        env.push(`ANTHROPIC_API_KEY=${process.env.ANTHROPIC_API_KEY}`);
+    }
+    // Pass through OAuth token if available (for Claude Max web authentication)
+    if (process.env.CLAUDE_CODE_OAUTH_TOKEN) {
+        env.push(`CLAUDE_CODE_OAUTH_TOKEN=${process.env.CLAUDE_CODE_OAUTH_TOKEN}`);
+    }
+    // Add custom environment variables from docker config
+    if (config?.env) {
+        for (const [key, value] of Object.entries(config.env)) {
+            env.push(`${key}=${value}`);
+        }
+    }
+    // Terminal support
+    env.push("TERM=xterm-256color");
+    // HOME directory for claude user
+    env.push("HOME=/home/claude");
+    return env;
+}
+//# sourceMappingURL=container-manager.js.map

package/dist/runner/runtime/container-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-manager.js","sourceRoot":"","sources":["../../../src/runner/runtime/container-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAKlC;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAsB;IAC5B,iBAAiB,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEzD,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,MAAoB,EACpB,MAAqB,EACrB,GAAa;QAEb,sDAAsD;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;wBACvB,OAAO,QAAQ,CAAC;oBAClB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;oBAC9C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAE7E,sBAAsB;QACtB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,8BAA8B;QAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,SAAiB,EACjB,MAAoB,EACpB,MAAqB,EACrB,GAAa;QAEb,MAAM,aAAa,GAAG,WAAW,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE3D,MAAM,aAAa,GAA2B;YAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,aAAa;YACnB,GAAG,EAAE,KAAK;YACV,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,KAAK;YAEhB,2CAA2C;YAC3C,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;YAE1B,UAAU,EAAE,YAAY;YAExB,GAAG,EAAE,GAAG;YAER,UAAU,EAAE;gBACV,kBAAkB;gBAClB,MAAM,EAAE,MAAM,CAAC,WAAW;gBAC1B,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,2BAA2B;gBAC3D,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,yCAAyC;gBAEtE,oBAAoB;gBACpB,WAAW,EAAE,MAAM,CAAC,OAAO;gBAE3B,gBAAgB;gBAChB,KAAK,EAAE,MAAM,CAAC,GAAG,CACf,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,EAAE,CACpD;gBAED,qBAAqB;gBACrB,WAAW,EAAE,CAAC,wBAAwB,CAAC;gBACvC,OAAO,EAAE,CAAC,KAAK,CAAC;gBAChB,cAAc,EAAE,KAAK,EAAE,mCAAmC;gBAE1D,UAAU;gBACV,UAAU,EAAE,MAAM,CAAC,SAAS;aAC7B;YAED,gBAAgB;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,SAAoB,EACpB,OAAiB,EACjB,UAAkB,YAAY;QAE9B,OAAO,SAAS,CAAC,IAAI,CAAC;YACpB,GAAG,EAAE,OAAO;YACZ,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,KAAK;YACV,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,aAAqB;QAErB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAClD,GAAG,EAAE,IAAI;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,WAAW,SAAS,GAAG,CAAC;aAChC;SACF,CAAC,CAAC;QAEH,sCAAsC;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAEhE,kCAAkC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC;QAE7E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAoB;QACtC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;gBACjC,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAoB,EACpB,YAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,0BAA0B;IAC1B,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,qBAAqB,GACzB,OAAO,iBAAiB,KAAK,QAAQ;YACnC,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,qBAAqB;YAC/B,aAAa,EAAE,YAAY;YAC3B,IAAI,EAAE,YAAY,CAAC,aAAa;SACjC,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CAAC;QACV,QAAQ,EAAE,iBAAiB;QAC3B,aAAa,EAAE,0CAA0C;QACzD,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAoB,EACpB,MAAqB;IAErB,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,kEAAkE;IAClE,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,4EAA4E;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,sDAAsD;IACtD,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAEhC,iCAAiC;IACjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE9B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runner/runtime/container-runner.d.ts

@@ -0,0 +1,62 @@
+/**
+ * ContainerRunner - Docker container decorator for RuntimeInterface
+ *
+ * Wraps any runtime (SDK or CLI) and transparently executes inside Docker containers.
+ * Handles path translation, mount configuration, and container lifecycle.
+ *
+ * @example
+ * ```typescript
+ * const baseRuntime = new CLIRuntime();
+ * const dockerRuntime = new ContainerRunner(baseRuntime, dockerConfig);
+ *
+ * // Execution happens inside Docker container
+ * for await (const message of dockerRuntime.execute(options)) {
+ *   console.log(message);
+ * }
+ * ```
+ */
+import type { RuntimeInterface, RuntimeExecuteOptions } from "./interface.js";
+import type { SDKMessage } from "../types.js";
+import type { DockerConfig } from "./docker-config.js";
+/**
+ * Container runtime decorator
+ *
+ * Decorates any RuntimeInterface to execute inside Docker containers.
+ * The wrapped runtime's execute logic runs via `docker exec` inside the container.
+ */
+export declare class ContainerRunner implements RuntimeInterface {
+    private wrapped;
+    private config;
+    private manager;
+    private stateDir;
+    /**
+     * Create a new ContainerRunner
+     *
+     * @param wrapped - The underlying runtime to execute inside containers
+     * @param config - Docker configuration
+     * @param stateDir - herdctl state directory (.herdctl/)
+     * @param docker - Optional Docker client for testing
+     */
+    constructor(wrapped: RuntimeInterface, config: DockerConfig, stateDir: string, docker?: import("dockerode"));
+    /**
+     * Execute agent inside Docker container
+     *
+     * Creates or reuses container, then executes based on runtime type:
+     * - CLI runtime: docker exec claude, watch session files on host
+     * - SDK runtime: docker exec wrapper script, stream JSONL from stdout
+     */
+    execute(options: RuntimeExecuteOptions): AsyncIterable<SDKMessage>;
+    /**
+     * Execute CLI runtime inside Docker container
+     *
+     * Spawns claude CLI via docker exec and watches session files on host.
+     */
+    private executeCLIRuntime;
+    /**
+     * Execute SDK runtime inside Docker container
+     *
+     * Runs docker-sdk-wrapper.js script which imports SDK and streams messages as JSONL.
+     */
+    private executeSDKRuntime;
+}
+//# sourceMappingURL=container-runner.d.ts.map

package/dist/runner/runtime/container-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-runner.d.ts","sourceRoot":"","sources":["../../../src/runner/runtime/container-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWvD;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,gBAAgB;IAapD,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,MAAM;IAbhB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;gBAEO,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,YAAY,EAC5B,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,OAAO,WAAW,CAAC;IAM9B;;;;;;OAMG;IACI,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,aAAa,CAAC,UAAU,CAAC;IAqEzE;;;;OAIG;YACY,iBAAiB;IAkChC;;;;OAIG;YACY,iBAAiB;CAgGjC"}