@hotcell/daemon 0.1.0

package/dist/driver/agent-driver.js

@@ -0,0 +1,197 @@
+import { createReadStream, createWriteStream } from "node:fs";
+import { UnsupportedDriver } from "./unsupported.js";
+import { shellEscape } from "../util.js";
+/**
+ * Shared base for microVM drivers whose in-guest work is served by the `sbx-agent`
+ * over the A.4 wire protocol (`AgentConn`). Every agent-served `Driver` method —
+ * exec, files, watch, processes, preview bridge, terminal, stats, backup/restore —
+ * is implemented here **once**, in terms of a single abstract `openConn(id)` that
+ * each concrete driver provides for its transport (Apple VZ relays a unix socket
+ * to the guest vsock; Firecracker connects to a vsock UDS with a CONNECT
+ * handshake). Concrete drivers only implement lifecycle (`create`/`stop`/`start`/
+ * `destroy`), `openConn`, and the host probes (`ping`/`hostInfo`) — the whole
+ * point of the abstraction is that the surface above the driver is identical.
+ */
+export class AgentDriver extends UnsupportedDriver {
+    /** Open a connection, run `fn`, always close it. For one-shot request/response ops. */
+    async withConn(id, fn) {
+        const conn = await this.openConn(id);
+        try {
+            return await fn(conn);
+        }
+        finally {
+            conn.close();
+        }
+    }
+    // --- agent-served ops -----------------------------------------------------
+    async exec(id, command, opts, onEvent) {
+        return this.withConn(id, (c) => c.exec(command, { cwd: opts.cwd, env: opts.env }, onEvent));
+    }
+    async writeFile(id, opts) {
+        return this.withConn(id, (c) => c.writeFile(opts.path, opts.content, opts.mode));
+    }
+    async readFile(id, opts) {
+        return this.withConn(id, (c) => c.readFile(opts.path));
+    }
+    async mkdir(id, opts) {
+        return this.withConn(id, (c) => c.mkdir(opts.path, opts.parents ?? true));
+    }
+    async listFiles(id, opts) {
+        return this.withConn(id, (c) => c.listFiles(opts.path));
+    }
+    async waitForPort(id, port, opts) {
+        return this.withConn(id, (c) => c.waitForPort(port, { host: opts.host, timeoutMs: opts.timeoutMs, intervalMs: opts.intervalMs }));
+    }
+    /** Watch a path recursively for changes over the agent (poll-based mtime diff),
+     *  streaming events until `opts.signal` aborts. Holds a connection for its life. */
+    async watchFiles(id, path, opts, onEvent) {
+        return this.withConn(id, (c) => c.watch(path, opts.intervalMs ?? 1000, opts.signal, onEvent));
+    }
+    // --- background processes (via exec, same shell patterns as the container driver) -
+    async startProcess(id, procId, command, opts) {
+        const logPath = `/tmp/hotcell-proc-${procId}.log`;
+        // Background `sh -c CMD` and echo its real pid. No `setsid`: busybox setsid
+        // forks when the caller is a process-group leader, making `$!` the wrapper pid
+        // rather than the command's. The backgrounded process orphans to PID 1 (the
+        // agent) when the launching exec returns, so it survives without setsid; kill
+        // then targets the right pid.
+        const launch = `sh -c ${shellEscape(command)} > ${shellEscape(logPath)} 2>&1 & echo $!`;
+        const { stdout, stderr, exitCode } = await this.execCapture(id, launch, opts);
+        const pid = Number.parseInt(stdout.trim(), 10);
+        if (exitCode !== 0 || !Number.isFinite(pid)) {
+            throw new Error(stderr.trim() || `startProcess failed (exit ${exitCode})`);
+        }
+        return { procId, pid, logPath };
+    }
+    async listProcesses(id, procs) {
+        if (procs.length === 0)
+            return [];
+        const pids = procs.map((p) => p.pid).join(" ");
+        // A killed process orphaned to the agent (PID 1) lingers as a zombie since the
+        // agent doesn't reap, and `kill -0` succeeds on a zombie. So read the proc state
+        // and count only a present, non-`Z` (non-zombie) process as running.
+        const cmd = `for p in ${pids}; do s=$(sed 's/^.*) //;s/ .*//' /proc/$p/stat 2>/dev/null); ` +
+            `if [ -n "$s" ] && [ "$s" != "Z" ]; then echo "$p 1"; else echo "$p 0"; fi; done`;
+        const { stdout } = await this.execCapture(id, cmd);
+        const alive = new Map();
+        for (const line of stdout.split("\n")) {
+            const [p, state] = line.trim().split(" ");
+            if (p)
+                alive.set(Number(p), state === "1");
+        }
+        return procs.map((p) => ({ procId: p.procId, pid: p.pid, running: alive.get(p.pid) ?? false }));
+    }
+    async killProcess(id, pid, signal = "TERM") {
+        const stripped = signal.replace(/^SIG/, "");
+        const sig = /^[A-Z0-9]+$/.test(stripped) ? stripped : "TERM";
+        const cmd = `kill -${sig} -${pid} 2>/dev/null; kill -${sig} ${pid} 2>/dev/null; true`;
+        await this.execCapture(id, cmd);
+    }
+    async streamProcessLogs(id, logPath, opts, onData) {
+        const conn = await this.openConn(id);
+        const cmd = opts.follow ? `tail -n +1 -F ${shellEscape(logPath)}` : `cat ${shellEscape(logPath)}`;
+        const onAbort = () => conn.close();
+        opts.signal.addEventListener("abort", onAbort);
+        try {
+            await conn.exec(cmd, {}, (e) => {
+                if (e.type !== "exit")
+                    onData(e.data);
+            });
+        }
+        catch {
+            /* connection closed on abort */
+        }
+        finally {
+            opts.signal.removeEventListener("abort", onAbort);
+            conn.close();
+        }
+    }
+    /** Raw byte bridge to `host:port` inside the guest — backs the preview-URL proxy.
+     *  Each bridge holds its own connection (the duplex is long-lived). */
+    async openTcpBridge(id, port, host) {
+        const conn = await this.openConn(id);
+        const { stream } = conn.openStream({ method: "tcpConnect", host, port });
+        return {
+            stream,
+            close: () => {
+                stream.destroy();
+                conn.close();
+            },
+        };
+    }
+    /** Interactive PTY shell — backs the dashboard/CLI terminal. */
+    async openTerminal(id, opts) {
+        const conn = await this.openConn(id);
+        const { stream, streamId } = conn.openStream({
+            method: "openPty",
+            cols: opts.cols,
+            rows: opts.rows,
+            cwd: opts.cwd,
+            env: opts.env,
+        });
+        return {
+            stream,
+            resize: (cols, rows) => conn.controlStream(streamId, { method: "resize", cols, rows }),
+            close: () => {
+                stream.destroy();
+                conn.close();
+            },
+        };
+    }
+    // --- stats + backup/restore -----------------------------------------------
+    /** Live resource snapshot from the guest's /proc + cgroup files (via the agent).
+     *  cpuPercent is left 0 by the guest — the metrics sampler derives it from the
+     *  delta of successive cpuTotalUsageNs samples, exactly as for the container driver. */
+    async stats(id) {
+        const s = await this.withConn(id, (c) => c.stats());
+        return s;
+    }
+    /** Tar the guest's /workspace to `tarPath` on the host (over the agent). */
+    async createBackup(id, tarPath) {
+        const conn = await this.openConn(id);
+        try {
+            const out = createWriteStream(tarPath);
+            let bytes = 0;
+            await conn.readStream({ method: "tarWorkspace", path: "/workspace" }, (b) => {
+                bytes += b.length;
+                out.write(b);
+            });
+            await new Promise((resolve, reject) => out.end((err) => (err ? reject(err) : resolve())));
+            return { bytes };
+        }
+        finally {
+            conn.close();
+        }
+    }
+    /** Replace the guest's /workspace with the tar at `tarPath` (cleared first). */
+    async restoreBackup(id, tarPath) {
+        const conn = await this.openConn(id);
+        try {
+            const up = conn.writeStream({ method: "untarWorkspace", path: "/workspace" });
+            await new Promise((resolve, reject) => {
+                const rs = createReadStream(tarPath);
+                rs.on("data", (chunk) => up.write(chunk));
+                rs.on("end", resolve);
+                rs.on("error", reject);
+            });
+            up.end();
+            await up.done;
+        }
+        finally {
+            conn.close();
+        }
+    }
+    /** Run a command and collect its full stdout/stderr/exit (for the process shims). */
+    async execCapture(id, command, opts = {}) {
+        let stdout = "";
+        let stderr = "";
+        const exitCode = await this.exec(id, command, opts, (e) => {
+            if (e.type === "stdout")
+                stdout += e.data;
+            else if (e.type === "stderr")
+                stderr += e.data;
+        });
+        return { stdout, stderr, exitCode };
+    }
+}
+//# sourceMappingURL=agent-driver.js.map

package/dist/driver/agent-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-driver.js","sourceRoot":"","sources":["../../src/driver/agent-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAsBrD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,WAAY,SAAQ,iBAAiB;IAQzD,uFAAuF;IAC7E,KAAK,CAAC,QAAQ,CAAI,EAAU,EAAE,EAAgC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,OAAe,EAAE,IAAiB,EAAE,OAA+B;QACxF,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,IAAsB;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,IAAqB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,IAAkB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,IAAsB;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,IAAY,EAAE,IAAwB;QAClE,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CACjG,CAAC;IACJ,CAAC;IAED;wFACoF;IACpF,KAAK,CAAC,UAAU,CACd,EAAU,EACV,IAAY,EACZ,IAA4C,EAC5C,OAAqC;QAErC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,qFAAqF;IAErF,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,MAAc,EACd,OAAe,EACf,IAAyB;QAEzB,MAAM,OAAO,GAAG,qBAAqB,MAAM,MAAM,CAAC;QAClD,4EAA4E;QAC5E,+EAA+E;QAC/E,4EAA4E;QAC5E,8EAA8E;QAC9E,8BAA8B;QAC9B,MAAM,MAAM,GAAG,SAAS,WAAW,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACxF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,6BAA6B,QAAQ,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,EAAU,EACV,KAA6C;QAE7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,+EAA+E;QAC/E,iFAAiF;QACjF,qEAAqE;QACrE,MAAM,GAAG,GACP,YAAY,IAAI,+DAA+D;YAC/E,iFAAiF,CAAC;QACpF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,GAAW,EAAE,MAAM,GAAG,MAAM;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7D,MAAM,GAAG,GAAG,SAAS,GAAG,KAAK,GAAG,uBAAuB,GAAG,IAAI,GAAG,oBAAoB,CAAC;QACtF,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,EAAU,EACV,OAAe,EACf,IAA8C,EAC9C,MAA+B;QAE/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAClG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED;2EACuE;IACvE,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,MAAM;YACN,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;SACF,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,IAAqB;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3C,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,OAAO;YACL,MAAM;YACN,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACtF,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;SACF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAE7E;;4FAEwF;IACxF,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,CAAiB,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAAe;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1E,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;gBAClB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,GAAkB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACjE,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,OAAe;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACrC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC;gBACpD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACtB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,EAAE,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,EAAE,CAAC,IAAI,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,qFAAqF;IAC3E,KAAK,CAAC,WAAW,CACzB,EAAU,EACV,OAAe,EACf,OAAoB,EAAE;QAEtB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;YACxD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;iBACrC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/driver/agent.d.ts

@@ -0,0 +1,94 @@
+import { type Socket } from "node:net";
+import { Duplex } from "node:stream";
+import type { ExecEvent, FileChangeEvent, FileInfo } from "../types.js";
+export interface AgentHello {
+    event: string;
+    agent: string;
+    version: string;
+    proto: number;
+}
+export declare class AgentConn {
+    private socket;
+    private buf;
+    private nextStreamId;
+    private pending;
+    hello?: AgentHello;
+    private constructor();
+    /** Connect to the agent (via the helper's unix socket, or a test socket) and
+     *  resolve once the Hello greeting arrives. */
+    static connect(opts: {
+        path: string;
+        timeoutMs?: number;
+    }): Promise<AgentConn>;
+    /**
+     * Wrap an already-connected byte stream (e.g. a Firecracker vsock socket after
+     * its `CONNECT` handshake) and resolve once the agent's Hello arrives. `leftover`
+     * is any bytes that arrived with the handshake reply but belong to the agent
+     * stream (possibly the Hello itself), fed in before live data.
+     */
+    static attach(socket: Socket, leftover?: Buffer, timeoutMs?: number): Promise<AgentConn>;
+    private onHello?;
+    /** Accumulate bytes and dispatch whole frames. */
+    private feed;
+    private handleFrame;
+    private failAll;
+    private writeFrame;
+    /** Send a Control request on a fresh stream; resolve on its Result frame. */
+    private request;
+    /** Run a command, streaming stdout/stderr as ExecEvents; resolves with exit code. */
+    exec(command: string, opts: {
+        cwd?: string;
+        env?: Record<string, string>;
+    }, onEvent: (e: ExecEvent) => void): Promise<number>;
+    writeFile(path: string, content: string, mode?: string): Promise<void>;
+    readFile(path: string): Promise<string>;
+    mkdir(path: string, parents?: boolean): Promise<void>;
+    listFiles(path: string): Promise<FileInfo[]>;
+    waitForPort(port: number, opts?: {
+        host?: string;
+        timeoutMs?: number;
+        intervalMs?: number;
+    }): Promise<boolean>;
+    setEnv(env: Record<string, string>): Promise<void>;
+    /** Start the in-guest loopback→vsock egress relay (idempotent per port): the
+     *  agent listens on 127.0.0.1:`port` and forwards each connection over vsock
+     *  to the host, which relays it to the egress gateway. */
+    egressListen(port: number, vsockPort?: number): Promise<void>;
+    /**
+     * Watch `path` recursively, invoking `onEvent` per change until `signal`
+     * aborts (which sends a Close frame; the agent stops and replies Result).
+     * The agent streams `<type>\t<path>` lines as Stdout frames.
+     */
+    watch(path: string, intervalMs: number, signal: AbortSignal, onEvent: (e: FileChangeEvent) => void): Promise<void>;
+    /**
+     * Open a bidirectional stream for a method that bridges raw bytes (tcpConnect /
+     * pty): writes become Stdin frames host→guest, guest Stdout frames become
+     * readable data, the terminal Result frame ends the readable side, and
+     * destroying the Duplex sends a Close frame. Returns a Node Duplex the caller
+     * (preview proxy / terminal WS) pipes like any socket.
+     */
+    openStream(req: Record<string, unknown>): {
+        stream: Duplex;
+        streamId: number;
+    };
+    /**
+     * Receive a guest→host byte stream for `req` (e.g. tarWorkspace): each Stdout
+     * frame's raw bytes are handed to `onChunk` (binary-safe — Buffers, no UTF-8
+     * decode), and the promise resolves on the terminal Result (rejects on error).
+     */
+    readStream(req: Record<string, unknown>, onChunk: (b: Buffer) => void): Promise<void>;
+    /**
+     * Send a host→guest byte stream for `req` (e.g. untarWorkspace): write payload
+     * chunks with `write`, signal end-of-input with `end`, and await `done` for the
+     * terminal Result. Bytes go as raw Stdin frames; EOF as an EOF frame.
+     */
+    writeStream(req: Record<string, unknown>): {
+        write: (b: Buffer) => void;
+        end: () => void;
+        done: Promise<void>;
+    };
+    /** Send a control message (e.g. pty resize) on an existing stream. */
+    controlStream(streamId: number, msg: Record<string, unknown>): void;
+    stats(): Promise<unknown>;
+    close(): void;
+}

package/dist/driver/agent.js

@@ -0,0 +1,319 @@
+import { connect } from "node:net";
+import { Duplex } from "node:stream";
+/**
+ * Host-side client for the in-sandbox `sbx-agent` wire protocol (see `agent/proto`).
+ * One `AgentConn` wraps a single byte stream to the agent — a unix socket the VZ
+ * helper relays to the guest's vsock in production, or a direct unix/tcp socket
+ * in tests — and multiplexes concurrent requests over it by `streamId`, exactly
+ * as the Go server expects.
+ *
+ * Frame: `[u32 length BE][u8 type][u32 streamId BE][payload]`. The agent sends an
+ * unsolicited Hello (Control on stream 0) on connect; `connect()` resolves once
+ * it arrives, so the caller knows the guest is up and serving.
+ */
+const FRAME = {
+    Control: 1,
+    Stdin: 2,
+    Stdout: 3,
+    Stderr: 4,
+    EOF: 5,
+    Result: 6,
+    Close: 7,
+};
+const HEADER = 9;
+export class AgentConn {
+    socket;
+    buf = Buffer.alloc(0);
+    nextStreamId = 1; // 0 is reserved for the agent's Hello
+    pending = new Map();
+    hello;
+    constructor(socket) {
+        this.socket = socket;
+    }
+    /** Connect to the agent (via the helper's unix socket, or a test socket) and
+     *  resolve once the Hello greeting arrives. */
+    static connect(opts) {
+        return new Promise((resolve, reject) => {
+            const socket = connect(opts.path);
+            const conn = new AgentConn(socket);
+            const timer = setTimeout(() => {
+                socket.destroy();
+                reject(new Error(`agent connect timed out (${opts.path})`));
+            }, opts.timeoutMs ?? 10000);
+            conn.onHello = (hello) => {
+                clearTimeout(timer);
+                conn.hello = hello;
+                resolve(conn);
+            };
+            socket.on("data", (d) => conn.feed(d));
+            socket.on("error", (e) => {
+                clearTimeout(timer);
+                conn.failAll(e);
+                reject(e);
+            });
+            socket.on("close", () => conn.failAll(new Error("agent connection closed")));
+        });
+    }
+    /**
+     * Wrap an already-connected byte stream (e.g. a Firecracker vsock socket after
+     * its `CONNECT` handshake) and resolve once the agent's Hello arrives. `leftover`
+     * is any bytes that arrived with the handshake reply but belong to the agent
+     * stream (possibly the Hello itself), fed in before live data.
+     */
+    static attach(socket, leftover, timeoutMs = 10000) {
+        return new Promise((resolve, reject) => {
+            const conn = new AgentConn(socket);
+            const timer = setTimeout(() => {
+                socket.destroy();
+                reject(new Error("agent hello timed out"));
+            }, timeoutMs);
+            conn.onHello = (hello) => {
+                clearTimeout(timer);
+                conn.hello = hello;
+                resolve(conn);
+            };
+            socket.on("data", (d) => conn.feed(d));
+            socket.on("error", (e) => {
+                clearTimeout(timer);
+                conn.failAll(e);
+                reject(e);
+            });
+            socket.on("close", () => conn.failAll(new Error("agent connection closed")));
+            if (leftover && leftover.length)
+                conn.feed(leftover);
+        });
+    }
+    onHello;
+    /** Accumulate bytes and dispatch whole frames. */
+    feed(data) {
+        this.buf = this.buf.length ? Buffer.concat([this.buf, data]) : data;
+        while (this.buf.length >= HEADER) {
+            const length = this.buf.readUInt32BE(0);
+            if (this.buf.length < HEADER + length)
+                break;
+            const type = this.buf[4];
+            const streamId = this.buf.readUInt32BE(5);
+            const payload = this.buf.subarray(HEADER, HEADER + length);
+            this.handleFrame(type, streamId, payload);
+            this.buf = this.buf.subarray(HEADER + length);
+        }
+    }
+    handleFrame(type, streamId, payload) {
+        if (streamId === 0 && type === FRAME.Control) {
+            try {
+                this.onHello?.(JSON.parse(payload.toString("utf8")));
+            }
+            catch {
+                /* ignore a malformed hello */
+            }
+            return;
+        }
+        const p = this.pending.get(streamId);
+        if (!p)
+            return;
+        switch (type) {
+            case FRAME.Stdout:
+                p.onStdout?.(Buffer.from(payload));
+                break;
+            case FRAME.Stderr:
+                p.onStderr?.(Buffer.from(payload));
+                break;
+            case FRAME.Result: {
+                this.pending.delete(streamId);
+                let r;
+                try {
+                    r = JSON.parse(payload.toString("utf8"));
+                }
+                catch (e) {
+                    return p.reject(new Error(`bad result json: ${String(e)}`));
+                }
+                if (!r.ok)
+                    p.reject(new Error(r.error || "agent error"));
+                else
+                    p.resolve(r);
+                break;
+            }
+        }
+    }
+    failAll(err) {
+        for (const p of this.pending.values())
+            p.reject(err);
+        this.pending.clear();
+    }
+    writeFrame(type, streamId, payload) {
+        const hdr = Buffer.allocUnsafe(HEADER);
+        hdr.writeUInt32BE(payload.length, 0);
+        hdr[4] = type;
+        hdr.writeUInt32BE(streamId, 5);
+        this.socket.write(hdr);
+        if (payload.length)
+            this.socket.write(payload);
+    }
+    /** Send a Control request on a fresh stream; resolve on its Result frame. */
+    request(req, handlers) {
+        const streamId = this.nextStreamId++;
+        const done = new Promise((resolve, reject) => {
+            this.pending.set(streamId, { resolve, reject, ...handlers });
+        });
+        this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify(req), "utf8"));
+        return { streamId, done };
+    }
+    // --- Driver-surface RPCs --------------------------------------------------
+    /** Run a command, streaming stdout/stderr as ExecEvents; resolves with exit code. */
+    async exec(command, opts, onEvent) {
+        const { done } = this.request({ method: "exec", command, cwd: opts.cwd, env: opts.env }, {
+            onStdout: (b) => onEvent({ type: "stdout", data: b.toString("utf8") }),
+            onStderr: (b) => onEvent({ type: "stderr", data: b.toString("utf8") }),
+        });
+        const r = await done;
+        return r.exitCode ?? 0;
+    }
+    async writeFile(path, content, mode) {
+        await this.request({ method: "writeFile", path, content, mode }).done;
+    }
+    async readFile(path) {
+        const r = await this.request({ method: "readFile", path }).done;
+        return String(r.value ?? "");
+    }
+    async mkdir(path, parents = true) {
+        await this.request({ method: "mkdir", path, parents }).done;
+    }
+    async listFiles(path) {
+        const r = await this.request({ method: "listFiles", path }).done;
+        return r.value ?? [];
+    }
+    async waitForPort(port, opts = {}) {
+        const r = await this.request({
+            method: "waitForPort",
+            port,
+            host: opts.host,
+            timeoutMs: opts.timeoutMs,
+            intervalMs: opts.intervalMs,
+        }).done;
+        return Boolean(r.value);
+    }
+    async setEnv(env) {
+        await this.request({ method: "setEnv", env }).done;
+    }
+    /** Start the in-guest loopback→vsock egress relay (idempotent per port): the
+     *  agent listens on 127.0.0.1:`port` and forwards each connection over vsock
+     *  to the host, which relays it to the egress gateway. */
+    async egressListen(port, vsockPort) {
+        await this.request({ method: "egressListen", port, vsockPort }).done;
+    }
+    /**
+     * Watch `path` recursively, invoking `onEvent` per change until `signal`
+     * aborts (which sends a Close frame; the agent stops and replies Result).
+     * The agent streams `<type>\t<path>` lines as Stdout frames.
+     */
+    async watch(path, intervalMs, signal, onEvent) {
+        const streamId = this.nextStreamId++;
+        let lineBuf = "";
+        const parse = (b) => {
+            lineBuf += b.toString("utf8");
+            let idx;
+            while ((idx = lineBuf.indexOf("\n")) !== -1) {
+                const line = lineBuf.slice(0, idx);
+                lineBuf = lineBuf.slice(idx + 1);
+                const tab = line.indexOf("\t");
+                if (tab === -1)
+                    continue;
+                const type = line.slice(0, tab);
+                if (type === "created" || type === "modified" || type === "deleted") {
+                    onEvent({ type, path: line.slice(tab + 1) });
+                }
+            }
+        };
+        await new Promise((resolve, reject) => {
+            this.pending.set(streamId, { onStdout: parse, resolve: () => resolve(), reject });
+            // Open the watch stream first, then arm cancellation, so the Control frame
+            // always precedes any Close frame.
+            this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify({ method: "watch", path, intervalMs }), "utf8"));
+            const onAbort = () => {
+                if (this.pending.has(streamId))
+                    this.writeFrame(FRAME.Close, streamId, Buffer.alloc(0));
+            };
+            if (signal.aborted)
+                onAbort();
+            else
+                signal.addEventListener("abort", onAbort, { once: true });
+        });
+    }
+    /**
+     * Open a bidirectional stream for a method that bridges raw bytes (tcpConnect /
+     * pty): writes become Stdin frames host→guest, guest Stdout frames become
+     * readable data, the terminal Result frame ends the readable side, and
+     * destroying the Duplex sends a Close frame. Returns a Node Duplex the caller
+     * (preview proxy / terminal WS) pipes like any socket.
+     */
+    openStream(req) {
+        const streamId = this.nextStreamId++;
+        const writeFrame = this.writeFrame.bind(this);
+        const pending = this.pending;
+        const duplex = new Duplex({
+            write(chunk, _enc, cb) {
+                writeFrame(FRAME.Stdin, streamId, Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+                cb();
+            },
+            read() {
+                /* data is pushed as Stdout frames arrive */
+            },
+            destroy(err, cb) {
+                if (pending.has(streamId)) {
+                    writeFrame(FRAME.Close, streamId, Buffer.alloc(0));
+                    pending.delete(streamId);
+                }
+                cb(err);
+            },
+        });
+        this.pending.set(streamId, {
+            onStdout: (b) => duplex.push(b),
+            onStderr: (b) => duplex.push(b),
+            resolve: () => duplex.push(null), // Result frame → readable EOF
+            reject: (e) => duplex.destroy(e),
+        });
+        this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify(req), "utf8"));
+        return { stream: duplex, streamId };
+    }
+    /**
+     * Receive a guest→host byte stream for `req` (e.g. tarWorkspace): each Stdout
+     * frame's raw bytes are handed to `onChunk` (binary-safe — Buffers, no UTF-8
+     * decode), and the promise resolves on the terminal Result (rejects on error).
+     */
+    async readStream(req, onChunk) {
+        const streamId = this.nextStreamId++;
+        await new Promise((resolve, reject) => {
+            this.pending.set(streamId, { onStdout: onChunk, resolve: () => resolve(), reject });
+            this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify(req), "utf8"));
+        });
+    }
+    /**
+     * Send a host→guest byte stream for `req` (e.g. untarWorkspace): write payload
+     * chunks with `write`, signal end-of-input with `end`, and await `done` for the
+     * terminal Result. Bytes go as raw Stdin frames; EOF as an EOF frame.
+     */
+    writeStream(req) {
+        const streamId = this.nextStreamId++;
+        const done = new Promise((resolve, reject) => {
+            this.pending.set(streamId, { resolve: () => resolve(), reject });
+        });
+        this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify(req), "utf8"));
+        return {
+            write: (b) => this.writeFrame(FRAME.Stdin, streamId, b),
+            end: () => this.writeFrame(FRAME.EOF, streamId, Buffer.alloc(0)),
+            done,
+        };
+    }
+    /** Send a control message (e.g. pty resize) on an existing stream. */
+    controlStream(streamId, msg) {
+        this.writeFrame(FRAME.Control, streamId, Buffer.from(JSON.stringify(msg), "utf8"));
+    }
+    async stats() {
+        const r = await this.request({ method: "stats" }).done;
+        return r.value;
+    }
+    close() {
+        this.socket.destroy();
+    }
+}
+//# sourceMappingURL=agent.js.map

package/dist/driver/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/driver/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC;;;;;;;;;;GAUG;AAEH,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;CACA,CAAC;AAEX,MAAM,MAAM,GAAG,CAAC,CAAC;AAuBjB,MAAM,OAAO,SAAS;IACZ,MAAM,CAAS;IACf,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,YAAY,GAAG,CAAC,CAAC,CAAC,sCAAsC;IACxD,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,CAAc;IAEnB,YAAoB,MAAc;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;mDAC+C;IAC/C,MAAM,CAAC,OAAO,CAAC,IAA0C;QACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;YAE5B,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,MAAc,EAAE,QAAiB,EAAE,SAAS,GAAG,KAAK;QAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC7C,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAA2B;IAE1C,kDAAkD;IAC1C,IAAI,CAAC,IAAY;QACvB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM;gBAAE,MAAM;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe;QACjE,IAAI,QAAQ,KAAK,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK,CAAC,MAAM;gBACf,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK,CAAC,MAAM;gBACf,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAgB,CAAC;gBAC1D,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC;;oBACpD,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAClB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,6EAA6E;IACrE,OAAO,CACb,GAA4B,EAC5B,QAA6E;QAE7E,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,6EAA6E;IAE7E,qFAAqF;IACrF,KAAK,CAAC,IAAI,CACR,OAAe,EACf,IAAoD,EACpD,OAA+B;QAE/B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAC3B,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EACzD;YACE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;SACvE,CACF,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC;QACrB,OAAO,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,IAAa;QAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAChE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,OAAO,GAAG,IAAI;QACtC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACjE,OAAQ,CAAC,CAAC,KAAoB,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAAmE,EAAE;QACnG,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC3B,MAAM,EAAE,aAAa;YACrB,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC,IAAI,CAAC;QACR,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAA2B;QACtC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAED;;8DAE0D;IAC1D,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,SAAkB;QACjD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,UAAkB,EAClB,MAAmB,EACnB,OAAqC;QAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAQ,EAAE;YAChC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,GAAW,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,SAAS;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAChC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACpE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAClF,2EAA2E;YAC3E,mCAAmC;YACnC,IAAI,CAAC,UAAU,CACb,KAAK,CAAC,OAAO,EACb,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAC3E,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,CAAC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;;gBACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,GAA4B;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACnB,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvF,EAAE,EAAE,CAAC;YACP,CAAC;YACD,IAAI;gBACF,4CAA4C;YAC9C,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBACD,EAAE,CAAC,GAAG,CAAC,CAAC;YACV,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,8BAA8B;YAChE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,GAA4B,EAAE,OAA4B;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,GAA4B;QAKtC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI;SACL,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,aAAa,CAAC,QAAgB,EAAE,GAA4B;QAC1D,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;QACvD,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACF"}