@hotcell/daemon 0.1.0

package/dist/applevz-check.js

@@ -0,0 +1,280 @@
+/**
+ * Apple VZ driver M1 end-to-end check. Drives the real `AppleVzDriver` (which
+ * boots a microVM via the signed sbx-vz helper and talks to the in-guest agent
+ * over the relayed vsock) through the full lifecycle, including the headline M1
+ * gate: a file written to /workspace survives stop→start. Run on a Mac with the
+ * helper + guest artifacts built: `npm run check:applevz`.
+ */
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { createServer as createHttpServer } from "node:http";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
+import { AppleVzDriver } from "./driver/applevz.js";
+async function main() {
+    const stateDir = mkdtempSync(join(tmpdir(), "sbx-vz-state-"));
+    // Mock egress gateway: guests reach it ONLY via the vsock relay (no NIC).
+    const EGRESS_PORT = 47522;
+    const gateway = createHttpServer((_req, res) => res.end("vz-egress-pong"));
+    await new Promise((r) => gateway.listen(EGRESS_PORT, "127.0.0.1", r));
+    const driver = new AppleVzDriver({
+        helperPath: "helpers/hotcell-vz/dist/hotcell-vz",
+        kernel: "helpers/hotcell-vz/guest/vmlinux-vz",
+        rootfs: "helpers/hotcell-vz/guest/rootfs.img",
+        stateDir,
+        diskGb: 2,
+        // Stable cache so converted images + the blank workspace survive across runs.
+        imageCacheDir: join(homedir(), ".sbx", "vz", "images"),
+        egressPort: EGRESS_PORT,
+        egressHost: "127.0.0.1",
+    });
+    const id = "vzcheck01";
+    let passed = 0;
+    const ok = (l) => {
+        passed++;
+        console.log(`  ✓ ${l}`);
+    };
+    try {
+        await driver.ping();
+        ok("ping — Virtualization.framework available");
+        console.error("[check] booting microVM (create)…");
+        await driver.create({ id, image: "base", env: { SBX_TEST: "vz-ok" }, persist: true });
+        ok("create — VM booted and agent reachable over vsock");
+        let out = "";
+        const code = await driver.exec(id, "echo hello-from-vm && uname -sm", {}, (e) => {
+            if (e.type === "stdout")
+                out += e.data;
+        });
+        assert.equal(code, 0, "exec exit code");
+        assert.match(out, /hello-from-vm/, "exec stdout");
+        assert.match(out, /Linux aarch64/, "running inside a real arm64 Linux VM");
+        ok(`exec inside the VM — ${out.trim().replace(/\n/g, " | ")}`);
+        let envOut = "";
+        await driver.exec(id, "echo $SBX_TEST", {}, (e) => {
+            if (e.type === "stdout")
+                envOut += e.data;
+        });
+        assert.match(envOut, /vz-ok/, "sandbox env applied to exec");
+        ok("sandbox env applied");
+        // Egress-over-vsock: the NIC-less guest reaches the (mock) gateway through
+        // its loopback relay — its only route out of the VM.
+        let egOut = "";
+        const egCode = await driver.exec(id, `wget -qO- http://127.0.0.1:${EGRESS_PORT}/ping`, {}, (e) => {
+            if (e.type === "stdout")
+                egOut += e.data;
+        });
+        assert.equal(egCode, 0, "in-guest wget via the egress relay");
+        assert.match(egOut, /vz-egress-pong/, "egress relay reached the gateway");
+        ok("★ egress-over-vsock: guest loopback → vsock → gateway (no NIC)");
+        await driver.writeFile(id, { path: "/workspace/persist.txt", content: "persist-me-123" });
+        assert.equal(await driver.readFile(id, { path: "/workspace/persist.txt" }), "persist-me-123");
+        ok("writeFile + readFile in /workspace");
+        const files = await driver.listFiles(id, { path: "/workspace" });
+        assert.ok(files.some((f) => f.name === "persist.txt"), "listFiles sees the file");
+        ok("listFiles /workspace");
+        // ★ The M1 gate: persistence across a stop/start cycle.
+        console.error("[check] stop → start (workspace persistence)…");
+        await driver.stop(id);
+        await driver.start({ id, image: "base", env: {}, persist: true });
+        assert.equal(await driver.readFile(id, { path: "/workspace/persist.txt" }), "persist-me-123", "file persisted across stop/start");
+        ok("★ workspace.img persists across stop/start");
+        // M4a: background processes (start → list running → logs → kill → list dead).
+        const proc = await driver.startProcess(id, "p1", "i=0; while true; do echo tick-$i; i=$((i+1)); sleep 0.2; done", {});
+        assert.ok(Number.isFinite(proc.pid), "startProcess returns a pid");
+        await sleep(700);
+        const live = await driver.listProcesses(id, [{ procId: "p1", pid: proc.pid }]);
+        assert.ok(live[0]?.running, "process is running");
+        let logs = "";
+        await driver.streamProcessLogs(id, proc.logPath, { follow: false, signal: new AbortController().signal }, (d) => {
+            logs += d;
+        });
+        assert.match(logs, /tick-/, "process logs captured");
+        await driver.killProcess(id, proc.pid);
+        await sleep(400);
+        const dead = await driver.listProcesses(id, [{ procId: "p1", pid: proc.pid }]);
+        assert.ok(!dead[0]?.running, "process killed");
+        ok("background process: start → running → logs → kill → dead");
+        // M4b: preview-URL TCP bridge — a busybox `nc` loop serves a fixed HTTP
+        // response; fetch it through the bridge.
+        await driver.startProcess(id, "srv", "while true; do printf 'HTTP/1.0 200 OK\\r\\n\\r\\nbridge-works' | nc -l -p 9100 2>/dev/null; done", {});
+        await sleep(900);
+        const bridge = await driver.openTcpBridge(id, 9100, "127.0.0.1");
+        const resp = await new Promise((resolve) => {
+            let buf = "";
+            bridge.stream.on("data", (d) => (buf += d.toString()));
+            bridge.stream.on("end", () => resolve(buf));
+            bridge.stream.on("error", () => resolve(buf));
+            setTimeout(() => resolve(buf), 2500);
+        });
+        bridge.close();
+        assert.match(resp, /bridge-works/, "HTTP response flows through the bridge");
+        ok("preview TCP bridge: HTTP round-trips through the guest");
+        // M4c: interactive PTY terminal — type a command into a real shell, read it back.
+        const term = await driver.openTerminal(id, { cols: 80, rows: 24 });
+        const termOut = await new Promise((resolve) => {
+            let buf = "";
+            term.stream.on("data", (d) => {
+                buf += d.toString();
+                if (/TERMINAL_OK_42/.test(buf))
+                    resolve(buf);
+            });
+            term.stream.on("error", () => resolve(buf));
+            setTimeout(() => term.stream.write("echo TERMINAL_OK_$((6*7))\n"), 500);
+            setTimeout(() => resolve(buf), 3500);
+        });
+        term.close();
+        assert.match(termOut, /TERMINAL_OK_42/, "PTY runs the command in a real shell");
+        ok("interactive PTY: command runs in a real shell");
+        // M5: stats from the guest /proc + cgroup (via the agent).
+        const stats = await driver.stats(id);
+        assert.ok(stats.onlineCpus >= 1, "stats reports online CPUs");
+        assert.ok(stats.memBytes > 0, "stats reports resident memory");
+        assert.ok(stats.pids > 0, "stats reports running pids");
+        ok(`stats: ${stats.onlineCpus} cpu / ${(stats.memBytes / 1e6).toFixed(0)}MB / ${stats.pids} pids`);
+        // M3: watch — open the stream, create a file, assert the event arrives.
+        const watchAbort = new AbortController();
+        const events = [];
+        const watching = driver.watchFiles(id, "/workspace", { intervalMs: 200, signal: watchAbort.signal }, (e) => events.push(`${e.type}:${e.path}`));
+        await sleep(400); // let the watcher take its baseline snapshot
+        await driver.writeFile(id, { path: "/workspace/watched.txt", content: "hi" });
+        for (let i = 0; i < 30 && !events.some((e) => /watched\.txt/.test(e)); i++)
+            await sleep(100);
+        watchAbort.abort();
+        await watching;
+        assert.ok(events.some((e) => /watched\.txt/.test(e)), "watch saw the new file");
+        ok(`watch: ${events.find((e) => /watched\.txt/.test(e))}`);
+        // M5: backup → mutate → restore → rollback round-trip.
+        const backupPath = join(stateDir, "backup.tar");
+        await driver.writeFile(id, { path: "/workspace/keep.txt", content: "in-backup" });
+        const { bytes } = await driver.createBackup(id, backupPath);
+        assert.ok(bytes > 0, "backup wrote bytes");
+        await driver.writeFile(id, { path: "/workspace/keep.txt", content: "MUTATED" });
+        await driver.writeFile(id, { path: "/workspace/extra.txt", content: "added-after-backup" });
+        await driver.restoreBackup(id, backupPath);
+        assert.equal(await driver.readFile(id, { path: "/workspace/keep.txt" }), "in-backup", "restore rolled the mutation back");
+        const filesAfter = await driver.listFiles(id, { path: "/workspace" });
+        assert.ok(!filesAfter.some((f) => f.name === "extra.txt"), "restore cleared files added after the backup");
+        ok("★ backup → mutate → restore → rollback");
+        await driver.destroy(id);
+        ok("destroy");
+        // M6b-1: two sandboxes booting the same read-only base rootfs concurrently,
+        // each writing to its own workspace — proves the shared base is safe.
+        const ca = "vzconcur-a";
+        const cb = "vzconcur-b";
+        try {
+            await Promise.all([
+                driver.create({ id: ca, image: "base", persist: true }),
+                driver.create({ id: cb, image: "base", persist: true }),
+            ]);
+            await Promise.all([
+                driver.writeFile(ca, { path: "/workspace/who.txt", content: "alpha" }),
+                driver.writeFile(cb, { path: "/workspace/who.txt", content: "beta" }),
+            ]);
+            const [ra, rb] = await Promise.all([
+                driver.readFile(ca, { path: "/workspace/who.txt" }),
+                driver.readFile(cb, { path: "/workspace/who.txt" }),
+            ]);
+            assert.equal(ra, "alpha", "sandbox A workspace isolated");
+            assert.equal(rb, "beta", "sandbox B workspace isolated");
+            ok("two concurrent VMs share the read-only base, isolated workspaces");
+        }
+        finally {
+            await Promise.all([driver.destroy(ca).catch(() => { }), driver.destroy(cb).catch(() => { })]);
+        }
+        // M6a: resource limits — a second VM capped at 256 MiB / 1 cpu / 64 pids.
+        // Memory + CPU are hard VM caps; pidsLimit is enforced by a guest cgroup.
+        const lid = "vzcheck02";
+        try {
+            await driver.create({
+                id: lid,
+                image: "base",
+                persist: true,
+                limits: { memoryMb: 256, cpus: 1, pidsLimit: 64 },
+            });
+            const read = async (cmd) => {
+                let o = "";
+                await driver.exec(lid, cmd, {}, (e) => {
+                    if (e.type === "stdout")
+                        o += e.data;
+                });
+                return o.trim();
+            };
+            const memKb = Number(await read("grep MemTotal /proc/meminfo | awk '{print $2}'"));
+            assert.ok(memKb > 0 && memKb <= 256 * 1024, `guest MemTotal ${memKb}KB within the 256 MiB cap`);
+            const nproc = Number(await read("nproc"));
+            assert.equal(nproc, 1, "guest sees exactly 1 online CPU");
+            const pidsMax = await read("cat /sys/fs/cgroup/sandbox/pids.max 2>/dev/null");
+            assert.equal(pidsMax, "64", "guest pids cgroup capped at 64");
+            ok(`resource limits: ${(memKb / 1024) | 0}MB mem / ${nproc} cpu / pids.max=${pidsMax}`);
+        }
+        finally {
+            await driver.destroy(lid).catch(() => { });
+        }
+        // M7a: snapshot/resume. VZ saveMachineStateTo saves the full VM state (RAM +
+        // devices); a later start() restores it (instant resume, no kernel boot),
+        // falling back to a cold boot if restore is unsupported. Disk state always
+        // survives; an in-RAM (tmpfs) marker survives only a true restore.
+        const snapId = "vzsnap01";
+        try {
+            await driver.create({ id: snapId, image: "base", persist: true });
+            await driver.writeFile(snapId, { path: "/workspace/disk.txt", content: "on-disk" });
+            await driver.exec(snapId, "echo SNAPSHOT_RAM_OK > /run/marker", {}, () => { }); // /run = tmpfs
+            await driver.snapshot(snapId); // pause + saveMachineStateTo + tear down
+            ok("snapshot saved (VZ saveMachineStateTo)");
+            const tResume = Date.now();
+            await driver.start({ id: snapId, image: "base", persist: true }); // restore (or cold-fallback)
+            const resumeMs = Date.now() - tResume;
+            assert.equal(await driver.readFile(snapId, { path: "/workspace/disk.txt" }), "on-disk", "workspace survives resume");
+            let ram = "";
+            await driver.exec(snapId, "cat /run/marker 2>/dev/null", {}, (e) => {
+                if (e.type === "stdout")
+                    ram += e.data;
+            });
+            assert.match(ram, /SNAPSHOT_RAM_OK/, "in-RAM tmpfs marker lost — restore silently fell back to a cold boot");
+            ok(`★ instant restore: in-RAM state resumed in ${resumeMs}ms (no cold boot)`);
+            // The egress relay must survive the snapshot→resume cycle: the in-guest
+            // listener lives in restored RAM; the host listener is re-installed by the
+            // fresh helper process.
+            let egResume = "";
+            await driver.exec(snapId, `wget -qO- http://127.0.0.1:${EGRESS_PORT}/after-resume`, {}, (e) => {
+                if (e.type === "stdout")
+                    egResume += e.data;
+            });
+            assert.match(egResume, /vz-egress-pong/, "egress relay must work after snapshot→resume");
+            ok("egress relay survives snapshot→resume");
+        }
+        finally {
+            await driver.destroy(snapId).catch(() => { });
+        }
+        // M6b-2: honor SBX_IMAGE — convert a real OCI image and run its own python.
+        const pyId = "vzpython01";
+        try {
+            console.error("[check] converting python:3.11-slim → VZ rootfs (first run pulls + builds)…");
+            await driver.create({ id: pyId, image: "python:3.11-slim", persist: true });
+            let pyOut = "";
+            const pc = await driver.exec(pyId, "python3 --version && echo IMG_OK", {}, (e) => {
+                if (e.type === "stdout")
+                    pyOut += e.data;
+            });
+            assert.equal(pc, 0, "python3 exec exit code");
+            assert.match(pyOut, /Python 3\.11/, "the converted image runs its own python3");
+            assert.match(pyOut, /IMG_OK/, "exec works in the converted image");
+            ok(`SBX_IMAGE honored: ${pyOut.trim().split("\n")[0]}`);
+        }
+        finally {
+            await driver.destroy(pyId).catch(() => { });
+        }
+        console.log(`\napplevz-check: ${passed} checks passed`);
+    }
+    finally {
+        await driver.stop(id).catch(() => { });
+        await new Promise((r) => gateway.close(() => r()));
+        rmSync(stateDir, { recursive: true, force: true });
+    }
+}
+main().then(() => process.exit(0), (err) => {
+    console.error("applevz-check FAILED:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=applevz-check.js.map

package/dist/applevz-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applevz-check.js","sourceRoot":"","sources":["../src/applevz-check.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,0EAA0E;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,UAAU,EAAE,oCAAoC;QAChD,MAAM,EAAE,qCAAqC;QAC7C,MAAM,EAAE,qCAAqC;QAC7C,QAAQ;QACR,MAAM,EAAE,CAAC;QACT,8EAA8E;QAC9E,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;QACtD,UAAU,EAAE,WAAW;QACvB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE;QACvB,MAAM,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,EAAE,CAAC,2CAA2C,CAAC,CAAC;QAEhD,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,EAAE,CAAC,mDAAmD,CAAC,CAAC;QAExD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,iCAAiC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC9E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,EAAE,sCAAsC,CAAC,CAAC;QAC3E,EAAE,CAAC,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/D,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAChD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAC7D,EAAE,CAAC,qBAAqB,CAAC,CAAC;QAE1B,2EAA2E;QAC3E,qDAAqD;QACrD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,EAAE,EACF,8BAA8B,WAAW,OAAO,EAChD,EAAE,EACF,CAAC,CAAC,EAAE,EAAE;YACJ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC,CACF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QAC1E,EAAE,CAAC,gEAAgE,CAAC,CAAC;QAErE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9F,EAAE,CAAC,oCAAoC,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAClF,EAAE,CAAC,sBAAsB,CAAC,CAAC;QAE3B,wDAAwD;QACxD,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAC7D,gBAAgB,EAChB,kCAAkC,CACnC,CAAC;QACF,EAAE,CAAC,4CAA4C,CAAC,CAAC;QAEjD,8EAA8E;QAC9E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CACpC,EAAE,EACF,IAAI,EACJ,+DAA+D,EAC/D,EAAE,CACH,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAClD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC9G,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/C,EAAE,CAAC,0DAA0D,CAAC,CAAC;QAE/D,wEAAwE;QACxE,yCAAyC;QACzC,MAAM,MAAM,CAAC,YAAY,CACvB,EAAE,EACF,KAAK,EACL,mGAAmG,EACnG,EAAE,CACH,CAAC;QACF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACjD,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,wCAAwC,CAAC,CAAC;QAC7E,EAAE,CAAC,wDAAwD,CAAC,CAAC;QAE7D,kFAAkF;QAClF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACpD,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACnC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACpB,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACxE,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;QAChF,EAAE,CAAC,+CAA+C,CAAC,CAAC;QAEpD,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACxD,EAAE,CACA,UAAU,KAAK,CAAC,UAAU,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAC/F,CAAC;QAEF,wEAAwE;QACxE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAChC,EAAE,EACF,YAAY,EACZ,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,6CAA6C;QAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7F,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,QAAQ,CAAC;QACf,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChF,EAAE,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE3D,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC5F,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAC1D,WAAW,EACX,kCAAkC,CACnC,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CACP,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAC/C,8CAA8C,CAC/C,CAAC;QACF,EAAE,CAAC,wCAAwC,CAAC,CAAC;QAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,CAAC;QAEd,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,EAAE,GAAG,YAAY,CAAC;QACxB,MAAM,EAAE,GAAG,YAAY,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBACtE,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aACtE,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;gBACnD,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,8BAA8B,CAAC,CAAC;YACzD,EAAE,CAAC,kEAAkE,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC;gBAClB,EAAE,EAAE,GAAG;gBACP,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;aAClD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAmB,EAAE;gBAClD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;oBACpC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;wBAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAClB,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,GAAG,GAAG,IAAI,EAAE,kBAAkB,KAAK,2BAA2B,CAAC,CAAC;YAChG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC9E,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;YAC9D,EAAE,CAAC,oBAAoB,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,oCAAoC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,eAAe;YAC9F,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC;YACxE,EAAE,CAAC,wCAAwC,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,6BAA6B;YAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAC9D,SAAS,EACT,2BAA2B,CAC5B,CAAC;YACF,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBACjE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CACV,GAAG,EACH,iBAAiB,EACjB,sEAAsE,CACvE,CAAC;YACF,EAAE,CAAC,8CAA8C,QAAQ,mBAAmB,CAAC,CAAC;YAC9E,wEAAwE;YACxE,2EAA2E;YAC3E,wBAAwB;YACxB,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,8BAA8B,WAAW,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC5F,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;YACzF,EAAE,CAAC,uCAAuC,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,GAAG,YAAY,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;YAC7F,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,kCAAkC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,0CAA0C,CAAC,CAAC;YAChF,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;YACnE,EAAE,CAAC,sBAAsB,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,gBAAgB,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EACrB,CAAC,GAAG,EAAE,EAAE;IACN,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/dist/backups.d.ts

@@ -0,0 +1,29 @@
+/** Metadata for a workspace backup, persisted as a JSON sidecar on the host. */
+export interface BackupInfo {
+    backupId: string;
+    /** Sandbox the backup was taken from (a backup may be restored elsewhere). */
+    sandboxId: string;
+    createdAt: string;
+    /** Size of the tarball in bytes. */
+    bytes: number;
+}
+/**
+ * On-disk registry of workspace backups. Unlike the in-memory `SandboxStore`,
+ * backups must survive daemon restarts, so each backup is a `<id>.tar` tarball
+ * plus a `<id>.json` metadata sidecar in `dir`; `list` rescans the directory.
+ */
+export declare class BackupRegistry {
+    private readonly dir;
+    constructor(dir: string);
+    /** Host path of a backup's tarball (managed by the driver). */
+    tarPath(backupId: string): string;
+    private metaPath;
+    ensureDir(): Promise<void>;
+    /** Persist a backup's metadata. The tarball is written separately. */
+    save(info: BackupInfo): Promise<void>;
+    get(backupId: string): Promise<BackupInfo | undefined>;
+    /** List all backups, newest first. */
+    list(): Promise<BackupInfo[]>;
+    /** Remove a backup's tarball and metadata. Returns false if unknown. */
+    remove(backupId: string): Promise<boolean>;
+}

package/dist/backups.js

@@ -0,0 +1,76 @@
+import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * On-disk registry of workspace backups. Unlike the in-memory `SandboxStore`,
+ * backups must survive daemon restarts, so each backup is a `<id>.tar` tarball
+ * plus a `<id>.json` metadata sidecar in `dir`; `list` rescans the directory.
+ */
+export class BackupRegistry {
+    dir;
+    constructor(dir) {
+        this.dir = dir;
+    }
+    /** Host path of a backup's tarball (managed by the driver). */
+    tarPath(backupId) {
+        return join(this.dir, `${backupId}.tar`);
+    }
+    metaPath(backupId) {
+        return join(this.dir, `${backupId}.json`);
+    }
+    async ensureDir() {
+        await mkdir(this.dir, { recursive: true });
+    }
+    /** Persist a backup's metadata. The tarball is written separately. */
+    async save(info) {
+        await this.ensureDir();
+        await writeFile(this.metaPath(info.backupId), JSON.stringify(info, null, 2));
+    }
+    async get(backupId) {
+        try {
+            const raw = await readFile(this.metaPath(backupId), "utf8");
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            if (isNotFound(err))
+                return undefined;
+            throw err;
+        }
+    }
+    /** List all backups, newest first. */
+    async list() {
+        let names;
+        try {
+            names = await readdir(this.dir);
+        }
+        catch (err) {
+            if (isNotFound(err))
+                return [];
+            throw err;
+        }
+        const infos = [];
+        for (const name of names) {
+            if (!name.endsWith(".json"))
+                continue;
+            const info = await this.get(name.slice(0, -".json".length));
+            if (info)
+                infos.push(info);
+        }
+        return infos.sort((a, b) => (a.createdAt < b.createdAt ? 1 : -1));
+    }
+    /** Remove a backup's tarball and metadata. Returns false if unknown. */
+    async remove(backupId) {
+        const info = await this.get(backupId);
+        if (!info)
+            return false;
+        await rm(this.tarPath(backupId), { force: true });
+        await rm(this.metaPath(backupId), { force: true });
+        return true;
+    }
+}
+function isNotFound(err) {
+    return (typeof err === "object" &&
+        err !== null &&
+        "code" in err &&
+        err.code === "ENOENT");
+}
+//# sourceMappingURL=backups.js.map

package/dist/backups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backups.js","sourceRoot":"","sources":["../src/backups.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYjC;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,+DAA+D;IAC/D,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEO,QAAQ,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,IAAI,CAAC,IAAgB;QACzB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QACvC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACtC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,IAAI;QACR,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC/B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,MAAM,IAAI,GAAG;QACZ,GAAyB,CAAC,IAAI,KAAK,QAAQ,CAC7C,CAAC;AACJ,CAAC"}

package/dist/capacity.d.ts

@@ -0,0 +1,63 @@
+import type { Config } from "./config.js";
+import type { HostInfo } from "./driver/types.js";
+import type { MetricsHistory } from "./metrics.js";
+import type { SandboxStore } from "./store.js";
+/** Host capacity + what's currently committed by running sandboxes. */
+export interface CapacitySnapshot {
+    /** Whether admission control is actively rejecting over-budget creates. */
+    enforced: boolean;
+    overcommit: number;
+    defaultReservationMb: number;
+    memory: {
+        budgetMb: number;
+        committedMb: number;
+        availableMb: number;
+    };
+    cpu: {
+        budget: number;
+        committed: number;
+        available: number;
+    };
+    running: number;
+    /** Approx. number of additional default-reservation sandboxes that still fit. */
+    fits: number;
+}
+/**
+ * Capacity meter + admission control — **usage-based**, so light and heavy
+ * sandboxes size themselves without anyone declaring a tier:
+ *   - a **capped** sandbox reserves its hard cap (exact, kernel-enforced ceiling);
+ *   - an **uncapped** sandbox reserves `max(its most-recent sampled RSS, floor)` —
+ *     measured, not guessed, so an idle box packs many while a busy box admits few.
+ * The `floor` (`SBX_DEFAULT_RESERVATION_MB`) covers a just-started sandbox that
+ * hasn't grown (or been sampled) yet. A new sandbox is admitted only if it fits
+ * within the host memory budget × overcommit. Memory is the hard gate (OOM kills);
+ * CPU is reported but not gated (throttled, not fatal). Without a metrics history
+ * (e.g. tests) it falls back to floor-only accounting.
+ */
+export declare class Capacity {
+    private readonly store;
+    private readonly config;
+    private readonly history?;
+    /** Effective memory budget (MiB) after overcommit; 0 = unknown → admission off. */
+    private readonly budgetMemMb;
+    private readonly budgetCpus;
+    constructor(store: SandboxStore, config: Config, host: HostInfo | null, history?: MetricsHistory | undefined);
+    /** Admission is active only when enabled AND the budget is known. */
+    get enforced(): boolean;
+    /** The floor counted for an uncapped/just-started sandbox. */
+    private get floorMb();
+    /**
+     * Memory an existing running sandbox is charged: its hard cap when set
+     * (the guaranteed ceiling), else `max(measured RSS, floor)`.
+     */
+    private reservationFor;
+    private committed;
+    /** Decide whether a new sandbox with `requestMemoryMb` can be admitted. */
+    admit(requestMemoryMb?: number): {
+        ok: true;
+    } | {
+        ok: false;
+        reason: string;
+    };
+    snapshot(): CapacitySnapshot;
+}

package/dist/capacity.js

@@ -0,0 +1,95 @@
+const MIB = 1024 * 1024;
+/**
+ * Capacity meter + admission control — **usage-based**, so light and heavy
+ * sandboxes size themselves without anyone declaring a tier:
+ *   - a **capped** sandbox reserves its hard cap (exact, kernel-enforced ceiling);
+ *   - an **uncapped** sandbox reserves `max(its most-recent sampled RSS, floor)` —
+ *     measured, not guessed, so an idle box packs many while a busy box admits few.
+ * The `floor` (`SBX_DEFAULT_RESERVATION_MB`) covers a just-started sandbox that
+ * hasn't grown (or been sampled) yet. A new sandbox is admitted only if it fits
+ * within the host memory budget × overcommit. Memory is the hard gate (OOM kills);
+ * CPU is reported but not gated (throttled, not fatal). Without a metrics history
+ * (e.g. tests) it falls back to floor-only accounting.
+ */
+export class Capacity {
+    store;
+    config;
+    history;
+    /** Effective memory budget (MiB) after overcommit; 0 = unknown → admission off. */
+    budgetMemMb;
+    budgetCpus;
+    constructor(store, config, host, history) {
+        this.store = store;
+        this.config = config;
+        this.history = history;
+        const baseMem = config.hostMemoryMb > 0 ? config.hostMemoryMb : (host?.memoryMb ?? 0);
+        this.budgetMemMb = Math.floor(baseMem * (config.overcommit || 1));
+        this.budgetCpus = config.hostCpus > 0 ? config.hostCpus : (host?.cpus ?? 0);
+    }
+    /** Admission is active only when enabled AND the budget is known. */
+    get enforced() {
+        return this.config.admission === "enforce" && this.budgetMemMb > 0;
+    }
+    /** The floor counted for an uncapped/just-started sandbox. */
+    get floorMb() {
+        return this.config.defaultReservationMb;
+    }
+    /**
+     * Memory an existing running sandbox is charged: its hard cap when set
+     * (the guaranteed ceiling), else `max(measured RSS, floor)`.
+     */
+    reservationFor(id, memoryCapMb) {
+        if (memoryCapMb && memoryCapMb > 0)
+            return memoryCapMb;
+        const rssBytes = this.history?.latestMemBytes(id) ?? 0;
+        return Math.max(Math.round(rssBytes / MIB), this.floorMb);
+    }
+    committed() {
+        let mem = 0;
+        let cpu = 0;
+        for (const r of this.store.list()) {
+            if (r.status !== "running")
+                continue; // paused/stopped free their compute
+            mem += this.reservationFor(r.id, r.limits.memoryMb);
+            cpu += r.limits.cpus && r.limits.cpus > 0 ? r.limits.cpus : 0;
+        }
+        return { mem, cpu };
+    }
+    /** Decide whether a new sandbox with `requestMemoryMb` can be admitted. */
+    admit(requestMemoryMb) {
+        if (!this.enforced)
+            return { ok: true };
+        const { mem } = this.committed();
+        // A new sandbox hasn't run yet: charge its cap if set, else the floor.
+        const req = requestMemoryMb && requestMemoryMb > 0 ? requestMemoryMb : this.floorMb;
+        if (mem + req > this.budgetMemMb) {
+            return {
+                ok: false,
+                reason: `host memory budget exhausted: ${mem}/${this.budgetMemMb} MiB committed, ` +
+                    `this sandbox needs ${req} MiB. Free a sandbox, set a smaller --memory, ` +
+                    `or raise SBX_OVERCOMMIT / SBX_HOST_MEMORY_MB.`,
+            };
+        }
+        return { ok: true };
+    }
+    snapshot() {
+        const { mem, cpu } = this.committed();
+        const availableMb = Math.max(0, this.budgetMemMb - mem);
+        return {
+            enforced: this.enforced,
+            overcommit: this.config.overcommit || 1,
+            defaultReservationMb: this.config.defaultReservationMb,
+            memory: { budgetMb: this.budgetMemMb, committedMb: mem, availableMb },
+            cpu: {
+                budget: this.budgetCpus,
+                committed: Math.round(cpu * 100) / 100,
+                available: Math.max(0, Math.round((this.budgetCpus - cpu) * 100) / 100),
+            },
+            running: this.store.list().filter((r) => r.status === "running").length,
+            fits: this.config.defaultReservationMb > 0
+                ? Math.floor(availableMb / this.config.defaultReservationMb)
+                : 0,
+        };
+    }
+}
+//# sourceMappingURL=capacity.js.map

package/dist/capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacity.js","sourceRoot":"","sources":["../src/capacity.ts"],"names":[],"mappings":"AAKA,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAexB;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,QAAQ;IAMA;IACA;IAEA;IARnB,mFAAmF;IAClE,WAAW,CAAS;IACpB,UAAU,CAAS;IAEpC,YACmB,KAAmB,EACnB,MAAc,EAC/B,IAAqB,EACJ,OAAwB;QAHxB,UAAK,GAAL,KAAK,CAAc;QACnB,WAAM,GAAN,MAAM,CAAQ;QAEd,YAAO,GAAP,OAAO,CAAiB;QAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,qEAAqE;IACrE,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,8DAA8D;IAC9D,IAAY,OAAO;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,EAAU,EAAE,WAAoB;QACrD,IAAI,WAAW,IAAI,WAAW,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAEO,SAAS;QACf,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,oCAAoC;YAC1E,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,eAAwB;QAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,uEAAuE;QACvE,MAAM,GAAG,GAAG,eAAe,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACpF,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,iCAAiC,GAAG,IAAI,IAAI,CAAC,WAAW,kBAAkB;oBAC1E,sBAAsB,GAAG,gDAAgD;oBACzE,+CAA+C;aAClD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC;YACvC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACtD,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE;YACrE,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;gBACtC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;aACxE;YACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACvE,IAAI,EACF,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBAC5D,CAAC,CAAC,CAAC;SACR,CAAC;IACJ,CAAC;CACF"}