@lumenflow/kernel 3.0.0

package/dist/runtime/kernel-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-runtime.js","sourceRoot":"","sources":["../../src/runtime/kernel-runtime.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,EAChC,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,kCAAkC,EAClC,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,UAAU,EACV,gBAAgB,GAGjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAWpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAyB,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EACL,eAAe,EACf,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAyB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAmB,MAAM,2BAA2B,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;AACzF,MAAM,6BAA6B,GAAG;IACpC,cAAc;IACd,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,CAAC;CACnE,CAAC;AACF,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACzE,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,MAAM,+BAA+B,GAAG,oCAAoC,CAAC;AAC7E,MAAM,uCAAuC,GAAG,4CAA4C,CAAC;AAC7F,MAAM,8BAA8B,GAAG,2DAA2D,CAAC;AACnG,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACjD,MAAM,+BAA+B,GACnC,oEAAoE,CAAC;AACvE,MAAM,uCAAuC,GAC3C,6DAA6D,CAAC;AA2IhE,SAAS,kBAAkB,CAAC,GAAe,EAAE,cAAuB;IAClE,OAAO,cAAc,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,aAAqB;IACvE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,OAAO,MAAM,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,WAAW,EAAE,CAAC;YAClD,KAAK,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,KAAK,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,YAAY,CAAC,SAAS;gBAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GACZ,QAAQ;YACR,SAAS,CAAC,KAAK,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,YAAY,CAAC,OAAO;gBAC5B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QAEL,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,UAAU,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,KAAK,CAAC;gBACd,GAAG,QAAQ;gBACX,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,UAAU,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,KAAK,CAAC;gBACd,GAAG,QAAQ;gBACX,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,KAAK,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,KAAK,CAAC;YACd,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY,CAAC,SAAS;YAC9B,YAAY,EAAE,KAAK,CAAC,SAAS;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,SAA2B;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkC;IAC/D,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO;YACL;gBACE,SAAS,EAAE,iBAAiB,CAAC,gBAAgB;gBAC7C,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,4DAA4D;aACrE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,GAAG,UAAU,CAAC,SAAS;gBACvB;oBACE,SAAS,EAAE,iBAAiB,CAAC,gBAAgB;oBAC7C,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,oCAAoC;iBAC7C;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,WAA+B;IACxD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,OAAO,CAAC,KAA+B,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IACjD,OAAO,GAAG,+BAA+B,KAAK,MAAM,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,mCAAmC,CAAC,QAAgB,EAAE,MAAc;IAC3E,OAAO,GAAG,uCAAuC,KAAK,QAAQ,cAAc,MAAM,GAAG,CAAC;AACxF,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,MAAc;IAChE,OAAO,aAAa,QAAQ,gBAAgB,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAyC;IAEzC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE5F,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACrB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QACpC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO;QAC1C,YAAY,EAAE,8BAA8B;QAC5C,aAAa,EAAE,+BAA+B;QAC9C,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe;QAC3C,OAAO,EAAE;YACP,IAAI,EAAE,kBAAkB,CAAC,UAAU;YACnC,KAAK,EAAE,aAAa;SACrB;QACD,WAAW,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,UAAkB;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,KAA8B,CAAC;QACjD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAuC;IACrE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,6BAA6B,EAAE,CAAC;QACtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACxC,OAAO,iBAAiB,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB,EAAE,MAAc;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,MAAc;IAEd,MAAM,YAAY,GAAG,mBAAmB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC7D,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,KAA8B,CAAC;QACjD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,YAAoB,EAAE,IAAc;IACxE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAEzB,OAAO,YAAY,CAAC;AACtB,CAAC;AAQD,KAAK,UAAU,oBAAoB,CACjC,OAAuC;IAEvC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CACpC,OAAO,CAAC,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,CAAC,CAC7E,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,mBAAmB,EAAE,iBAAiB;QACtC,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,cAAc,CAAC,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,WAA+B;IAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACL;YACE,KAAK,EAAE,WAAW;YAClB,gBAAgB,EAAE,OAAO;YACzB,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,EAAE;SACV;QACD;YACE,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,EAAE;SACV;QACD;YACE,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,SAAS;SACjB;QACD;YACE,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,YAA0B;IACzD,MAAM,iBAAiB,GAAG,uBAAuB,EAAE,CAAC;IAEpD,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YACtE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,OAAO,EAAE,eAAe,CAAC,eAAe;YACxC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YAChC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;SAC/B,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,gBAAgB,EAAE,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO;QACL,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAyB;IACzD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,aAAa,CAAgB;IAC7B,iBAAiB,CAAS;IAC1B,mBAAmB,CAAS;IAC5B,WAAW,CAAqB;IAChC,YAAY,CAAS;IACrB,UAAU,CAAa;IACvB,aAAa,CAAgB;IAC7B,QAAQ,CAAW;IACnB,YAAY,CAAe;IAC3B,YAAY,CAAmB;IAC/B,GAAG,CAAa;IAChB,YAAY,CAAoD;IAEjF,YAAY,OAA6B;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,cAAc,IAAI,mBAAmB,CAAC;IACpE,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,KAAc,EAAE,GAAqB;QACnE,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAE9C,IAAI,UAAkB,CAAC;QACvB,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAA8B,CAAC;YACjD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,oBAAoB,GAAG,IAAI,CAAC;YAC5B,UAAU,GAAG,cAAc,CAAC;gBAC1B,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,iBAAiB;aACpF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,aAAa,GAAsB;gBACvC,cAAc,EAAE,CAAC;gBACjB,IAAI,EAAE,kBAAkB,CAAC,aAAa;gBACtC,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE;gBACzB,aAAa,EAAE,YAAY;gBAC3B,WAAW,EAAE,UAAU;gBACvB,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;aACxC,CAAC;YACF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAE5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,oBAAoB;wBAC3B,CAAC,CAAC,uCAAuC;wBACzC,CAAC,CAAC,+BAA+B;oBACnC,OAAO,EAAE;wBACP,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE;wBACnC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;wBAC3C,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,EAAE,oBAAoB;wBACjF,aAAa,EAAE,YAAY;wBAC3B,WAAW,EAAE,UAAU;qBACxB;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC;YAClD,GAAG,OAAO;YACV,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,EAAE,UAAU;aAC5D;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAkB;QACjC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,aAAa,CAAC,EAAE,SAAS,UAAU,CAAC,YAAY,EAAE,CAC7F,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,CAAC,OAAO,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAA8B,CAAC;YACjD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,EAAE,oBAAoB,EAAE;oBACjF,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAqB;YACrC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,YAAY;YACrC,OAAO,EAAE,UAAU,CAAC,EAAE;YACtB,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC;SACtC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,UAAU,CAAC;QACnB,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,YAAY;YAC5B,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAqB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvD,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC9C,OAAO,EAAE,eAAe,CAAC,QAAQ;YACjC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,YAAY,GAAqB;YACrC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,YAAY;YACrC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,gBAAgB;YAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QAEF,MAAM,eAAe,GAAoB;YACvC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,WAAW;YACpC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,gBAAgB;YAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;gBACnB,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,YAAY,CAAC,SAAS;gBAC9B,UAAU,EAAE,eAAe,CAAC,SAAS;gBACrC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;YACF,MAAM,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;YACvC,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAqB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvD,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,YAAY,GAAqB;YACrC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,YAAY;YACrC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;YACxD,MAAM;SACP,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvD,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEzE,MAAM,cAAc,GAAuB;YACzC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,cAAc;YACvC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;SACzD,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvD,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC9C,OAAO,EAAE,eAAe,CAAC,aAAa;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEzE,MAAM,iBAAiB,GAAsB;YAC3C,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,aAAa;YACtC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;QAEF,MAAM,kBAAkB,GAAuB;YAC7C,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,kBAAkB,CAAC,cAAc;YACvC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE5C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;YAC/C,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAExD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACpD,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;gBACzD,OAAO,OAAO,CAAC,gBAAgB,CAAC;YAClC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,mBAAmB,GACvB,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAElF,OAAO;YACL,OAAO,EAAE,MAAM;YACf,IAAI;YACJ,KAAK;YACL,WAAW,EAAE,UAAU;YACvB,QAAQ;YACR,gBAAgB,EAAE,qBAAqB,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,mBAAmB,CAAC,CAAC;YACtF,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc;QAC1C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,OAAO,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,IAAc,EACd,KAAgB;QAEhB,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YAClD,OAAO,EAAE,eAAe,CAAC,aAAa;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC,SAAS,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,0BAA0B;QACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;YAClC,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuC;IAEvC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAC/B,OAAO,CAAC,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,EAAE,6BAA6B,CAAC,CAChF,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CACjC,OAAO,CAAC,cAAc;QACpB,IAAI,CAAC,IAAI,CACP,aAAa,EACb,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,CAChC,CACJ,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CACpC,OAAO,CAAC,iBAAiB;QACvB,IAAI,CAAC,IAAI,CACP,aAAa,EACb,oBAAoB,EACpB,8BAA8B,EAC9B,oCAAoC,CACrC,CACJ,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAC/B,OAAO,CAAC,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,EAAE,gCAAgC,CAAC,CACnF,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,MAAM,WAAW,GAAuB,EAAE,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACtC,IAAI,UAA4B,CAAC;QACjC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;gBACjC,aAAa;gBACb,MAAM,EAAE,GAAG,CAAC,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;QAC1C,+BAA+B,CAAC,QAAQ,EAAE;YACxC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,cAAc;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,IAAI,oCAAoC,CAAC;IACzE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,UAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,sBAAsB,CAAC;oBACxC,aAAa;oBACb,UAAU;oBACV,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;oBACjF,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC,WAAW,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAE1D,MAAM,iBAAiB,GAAsB;QAC3C,cAAc;QACd,YAAY,EAAE,iBAAiB;QAC/B,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC;KAC7E,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACrD,MAAM,qBAAqB,GAA0B;QACnD,cAAc,EAAE,CAAC;QACjB,IAAI,EAAE,kBAAkB,CAAC,iBAAiB;QAC1C,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAClC,WAAW,EAAE,iBAAiB,CAAC,qBAAqB;QACpD,eAAe,EAAE,8BAA8B;KAChD,CAAC;IACF,MAAM,UAAU,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;QAC5B,QAAQ;QACR,aAAa;QACb,oBAAoB,EAClB,OAAO,CAAC,oBAAoB;YAC5B,IAAI,2BAA2B,CAAC;gBAC9B,aAAa;gBACb,GAAG,OAAO,CAAC,kCAAkC;aAC9C,CAAC;QACJ,UAAU,EAAE,uBAAuB,CAAC,YAAY,CAAC;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;IAE3B,OAAO,IAAI,oBAAoB,CAAC;QAC9B,cAAc,EAAE,aAAa;QAC7B,mBAAmB,EAAE,iBAAiB,CAAC,mBAAmB;QAC1D,qBAAqB,EAAE,iBAAiB,CAAC,qBAAqB;QAC9D,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,YAAY;QAC5B,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,iBAAiB,CAAC,WAAW,CAAC;QAC7C,GAAG;QACH,cAAc,EAAE,OAAO,CAAC,YAAY;KACrC,CAAC,CAAC;AACL,CAAC"}

package/dist/sandbox/bwrap-invocation.d.ts

@@ -0,0 +1,13 @@
+import type { SandboxProfile } from './profile.js';
+export interface SandboxInvocation {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+}
+export interface BuildBwrapInvocationInput {
+    profile: SandboxProfile;
+    command: string[];
+    sandboxBinary?: string;
+}
+export declare function buildBwrapInvocation(input: BuildBwrapInvocationInput): SandboxInvocation;
+//# sourceMappingURL=bwrap-invocation.d.ts.map

package/dist/sandbox/bwrap-invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bwrap-invocation.d.ts","sourceRoot":"","sources":["../../src/sandbox/bwrap-invocation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAoB,cAAc,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAgGD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,iBAAiB,CAoCxF"}

package/dist/sandbox/bwrap-invocation.js

@@ -0,0 +1,105 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+import path from 'node:path';
+const SYSTEM_READONLY_ALLOWLIST = ['/usr', '/bin', '/sbin', '/lib', '/lib64', '/etc'];
+function assertCommand(command) {
+    if (command.length === 0) {
+        throw new Error('Sandbox command is required');
+    }
+}
+function dedupeMounts(mounts) {
+    const unique = new Map();
+    for (const mount of mounts) {
+        const key = `${mount.source}=>${mount.target}`;
+        if (!unique.has(key)) {
+            unique.set(key, mount);
+        }
+    }
+    return [...unique.values()];
+}
+function normalizePrefix(prefix) {
+    const resolved = path.resolve(prefix);
+    if (resolved === path.sep) {
+        return resolved;
+    }
+    return resolved.replace(/[/\\]+$/, '');
+}
+function isWithinPrefix(candidate, prefix) {
+    const normalizedCandidate = normalizePrefix(candidate);
+    const normalizedPrefix = normalizePrefix(prefix);
+    if (normalizedPrefix === path.sep) {
+        return true;
+    }
+    return (normalizedCandidate === normalizedPrefix ||
+        normalizedCandidate.startsWith(`${normalizedPrefix}${path.sep}`));
+}
+function collectCommandMountPrefixes(profile) {
+    const prefixes = [
+        ...profile.readonly_bind_mounts.map((mount) => mount.target),
+        ...profile.writable_bind_mounts.map((mount) => mount.target),
+    ];
+    return [...new Set(prefixes.map(normalizePrefix))];
+}
+function collectCommandReadonlyMounts(profile, command) {
+    const mountPrefixes = collectCommandMountPrefixes(profile);
+    const mounts = [];
+    for (const segment of command) {
+        if (!path.isAbsolute(segment)) {
+            continue;
+        }
+        const absolute = path.resolve(segment);
+        const parent = path.dirname(absolute);
+        const grandparent = path.dirname(parent);
+        if (parent !== '/' && mountPrefixes.some((prefix) => isWithinPrefix(parent, prefix))) {
+            mounts.push({ source: parent, target: parent });
+        }
+        if (grandparent !== '/' &&
+            mountPrefixes.some((prefix) => isWithinPrefix(grandparent, prefix))) {
+            mounts.push({ source: grandparent, target: grandparent });
+        }
+    }
+    return dedupeMounts(mounts);
+}
+function collectReadonlyAllowlistMounts(profile, command) {
+    const writableTargets = new Set(profile.writable_bind_mounts.map((mount) => mount.target));
+    const readonlyMounts = [
+        ...SYSTEM_READONLY_ALLOWLIST.map((mountPath) => ({
+            source: mountPath,
+            target: mountPath,
+        })),
+        ...collectCommandReadonlyMounts(profile, command),
+        ...profile.readonly_bind_mounts,
+    ];
+    return dedupeMounts(readonlyMounts).filter((mount) => !writableTargets.has(mount.target));
+}
+export function buildBwrapInvocation(input) {
+    assertCommand(input.command);
+    const args = ['--die-with-parent', '--new-session', '--tmpfs', '/'];
+    for (const mount of collectReadonlyAllowlistMounts(input.profile, input.command)) {
+        args.push('--ro-bind', mount.source, mount.target);
+    }
+    for (const mount of input.profile.writable_bind_mounts) {
+        args.push('--bind', mount.source, mount.target);
+    }
+    for (const overlay of input.profile.deny_overlays) {
+        if (overlay.kind === 'file') {
+            args.push('--bind', '/dev/null', overlay.path);
+        }
+        else {
+            args.push('--tmpfs', overlay.path);
+        }
+    }
+    if (input.profile.network_posture === 'off') {
+        args.push('--unshare-net');
+    }
+    for (const [key, value] of Object.entries(input.profile.env)) {
+        args.push('--setenv', key, value);
+    }
+    args.push('--proc', '/proc', '--dev', '/dev', '--', ...input.command);
+    return {
+        command: input.sandboxBinary || 'bwrap',
+        args,
+        env: input.profile.env,
+    };
+}
+//# sourceMappingURL=bwrap-invocation.js.map

package/dist/sandbox/bwrap-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bwrap-invocation.js","sourceRoot":"","sources":["../../src/sandbox/bwrap-invocation.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAe7B,MAAM,yBAAyB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAE/F,SAAS,aAAa,CAAC,OAAiB;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,MAAc;IACvD,MAAM,mBAAmB,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,gBAAgB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,mBAAmB,KAAK,gBAAgB;QACxC,mBAAmB,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAuB;IAC1D,MAAM,QAAQ,GAAG;QACf,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5D,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAC7D,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAuB,EACvB,OAAiB;IAEjB,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzC,IAAI,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IACE,WAAW,KAAK,GAAG;YACnB,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EACnE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B,CACrC,OAAuB,EACvB,OAAiB;IAEjB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3F,MAAM,cAAc,GAAG;QACrB,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,GAAG,4BAA4B,CAAC,OAAO,EAAE,OAAO,CAAC;QACjD,GAAG,OAAO,CAAC,oBAAoB;KAChC,CAAC;IAEF,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,IAAI,GAAa,CAAC,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAE9E,KAAK,MAAM,KAAK,IAAI,8BAA8B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAEtE,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;QACvC,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;KACvB,CAAC;AACJ,CAAC"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,5 @@
+export * from './bwrap-invocation.js';
+export * from './profile.js';
+export * from './subprocess-dispatcher.js';
+export * from './tool-runner-worker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAGA,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}

package/dist/sandbox/index.js

@@ -0,0 +1,7 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+export * from './bwrap-invocation.js';
+export * from './profile.js';
+export * from './subprocess-dispatcher.js';
+export * from './tool-runner-worker.js';
+//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}

package/dist/sandbox/profile.d.ts

@@ -0,0 +1,32 @@
+import type { ToolScope } from '../kernel.schemas.js';
+export type SandboxNetworkPosture = 'off' | 'full';
+export interface SandboxBindMount {
+    source: string;
+    target: string;
+}
+export interface SandboxDenyOverlay {
+    path: string;
+    kind: 'directory' | 'file';
+}
+export interface SandboxProfile {
+    readonly_bind_mounts: SandboxBindMount[];
+    writable_bind_mounts: SandboxBindMount[];
+    network_posture: SandboxNetworkPosture;
+    deny_overlays: SandboxDenyOverlay[];
+    env: Record<string, string>;
+}
+export interface CreateDefaultDenyOverlaysInput {
+    workspaceRoot: string;
+    homeDir?: string;
+}
+export interface BuildSandboxProfileFromScopesOptions {
+    workspaceRoot?: string;
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+    denyOverlays?: SandboxDenyOverlay[];
+}
+export declare const READ_CONFINEMENT_NOTE = "read confinement best-effort (v1)";
+export declare function createDefaultDenyOverlays(input: CreateDefaultDenyOverlaysInput): SandboxDenyOverlay[];
+export declare function resolveScopeEnforcementNote(scopes: ToolScope[]): string | undefined;
+export declare function buildSandboxProfileFromScopes(scopeEnforced: ToolScope[], options?: BuildSandboxProfileFromScopesOptions): SandboxProfile;
+//# sourceMappingURL=profile.d.ts.map

package/dist/sandbox/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/sandbox/profile.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,EAAE,gBAAgB,EAAE,CAAC;IACzC,oBAAoB,EAAE,gBAAgB,EAAE,CAAC;IACzC,eAAe,EAAE,qBAAqB,CAAC;IACvC,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oCAAoC;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACrC;AAED,eAAO,MAAM,qBAAqB,sCAAsC,CAAC;AAwDzE,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,kBAAkB,EAAE,CAStB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,SAAS,CAGnF;AAED,wBAAgB,6BAA6B,CAC3C,aAAa,EAAE,SAAS,EAAE,EAC1B,OAAO,GAAE,oCAAyC,GACjD,cAAc,CAsChB"}

package/dist/sandbox/profile.js

@@ -0,0 +1,101 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+import os from 'node:os';
+import path from 'node:path';
+export const READ_CONFINEMENT_NOTE = 'read confinement best-effort (v1)';
+function isGlobSegment(segment) {
+    return /[*?[{(]/.test(segment);
+}
+function resolveScopePatternToPath(pattern, workspaceRoot) {
+    const normalized = pattern.replaceAll('\\', '/');
+    const rawSegments = normalized.split('/').filter((segment) => segment.length > 0);
+    const staticSegments = [];
+    for (const segment of rawSegments) {
+        if (isGlobSegment(segment)) {
+            break;
+        }
+        staticSegments.push(segment);
+    }
+    if (normalized.startsWith('/')) {
+        const absolutePrefix = staticSegments.length === 0 ? '/' : `/${staticSegments.join('/')}`;
+        return path.resolve(absolutePrefix);
+    }
+    if (staticSegments.length === 0) {
+        return path.resolve(workspaceRoot);
+    }
+    return path.resolve(workspaceRoot, staticSegments.join('/'));
+}
+function dedupeMounts(mounts) {
+    const seen = new Set();
+    return mounts.filter((mount) => {
+        const key = `${mount.source}=>${mount.target}`;
+        if (seen.has(key)) {
+            return false;
+        }
+        seen.add(key);
+        return true;
+    });
+}
+function normalizeEnvironment(env) {
+    if (!env) {
+        return {};
+    }
+    const normalized = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (typeof value === 'string') {
+            normalized[key] = value;
+        }
+    }
+    return normalized;
+}
+export function createDefaultDenyOverlays(input) {
+    const workspaceRoot = path.resolve(input.workspaceRoot);
+    const homeDir = path.resolve(input.homeDir || os.homedir());
+    return [
+        { path: path.join(homeDir, '.ssh'), kind: 'directory' },
+        { path: path.join(homeDir, '.aws'), kind: 'directory' },
+        { path: path.join(homeDir, '.gnupg'), kind: 'directory' },
+        { path: path.join(workspaceRoot, '.env'), kind: 'file' },
+    ];
+}
+export function resolveScopeEnforcementNote(scopes) {
+    const hasReadPathScope = scopes.some((scope) => scope.type === 'path' && scope.access === 'read');
+    return hasReadPathScope ? READ_CONFINEMENT_NOTE : undefined;
+}
+export function buildSandboxProfileFromScopes(scopeEnforced, options = {}) {
+    const workspaceRoot = path.resolve(options.workspaceRoot || process.cwd());
+    const writable_bind_mounts = [];
+    const readonly_bind_mounts = [];
+    let network_posture = 'off';
+    for (const scope of scopeEnforced) {
+        if (scope.type === 'network') {
+            if (scope.posture === 'full') {
+                network_posture = 'full';
+            }
+            continue;
+        }
+        const resolvedPath = resolveScopePatternToPath(scope.pattern, workspaceRoot);
+        const mount = {
+            source: resolvedPath,
+            target: resolvedPath,
+        };
+        if (scope.access === 'write') {
+            writable_bind_mounts.push(mount);
+        }
+        else {
+            readonly_bind_mounts.push(mount);
+        }
+    }
+    return {
+        readonly_bind_mounts: dedupeMounts(readonly_bind_mounts),
+        writable_bind_mounts: dedupeMounts(writable_bind_mounts),
+        network_posture,
+        deny_overlays: options.denyOverlays ||
+            createDefaultDenyOverlays({
+                workspaceRoot,
+                homeDir: options.homeDir,
+            }),
+        env: normalizeEnvironment(options.env),
+    };
+}
+//# sourceMappingURL=profile.js.map

package/dist/sandbox/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/sandbox/profile.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmC7B,MAAM,CAAC,MAAM,qBAAqB,GAAG,mCAAmC,CAAC;AAEzE,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe,EAAE,aAAqB;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClF,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAkC;IAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAqC;IAErC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,OAAO;QACL,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;QACvD,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;QACvD,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;QACzD,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAmB;IAC7D,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAClG,OAAO,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,aAA0B,EAC1B,UAAgD,EAAE;IAElD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAuB,EAAE,CAAC;IACpD,MAAM,oBAAoB,GAAuB,EAAE,CAAC;IACpD,IAAI,eAAe,GAA0B,KAAK,CAAC;IAEnD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC7B,eAAe,GAAG,MAAM,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAqB;YAC9B,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7B,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,YAAY,CAAC,oBAAoB,CAAC;QACxD,oBAAoB,EAAE,YAAY,CAAC,oBAAoB,CAAC;QACxD,eAAe;QACf,aAAa,EACX,OAAO,CAAC,YAAY;YACpB,yBAAyB,CAAC;gBACxB,aAAa;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC;QACJ,GAAG,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/sandbox/subprocess-dispatcher.d.ts

@@ -0,0 +1,38 @@
+import type { ToolOutput } from '../kernel.schemas.js';
+import type { SubprocessDispatchRequest, SubprocessDispatcher } from '../tool-host/subprocess-dispatcher.js';
+export interface SubprocessTransportRequest {
+    command: string;
+    args: string[];
+    stdin: string;
+    env: Record<string, string>;
+}
+export interface SubprocessTransportResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export interface SubprocessTransport {
+    execute(request: SubprocessTransportRequest): Promise<SubprocessTransportResult>;
+}
+export interface SandboxSubprocessDispatcherOptions {
+    commandExists?: (binary: string) => boolean;
+    transport?: SubprocessTransport;
+    workspaceRoot?: string;
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+    workerEntry?: string;
+    nodeBinary?: string;
+}
+export declare class NodeSubprocessTransport implements SubprocessTransport {
+    execute(request: SubprocessTransportRequest): Promise<SubprocessTransportResult>;
+}
+export declare class SandboxSubprocessDispatcher implements SubprocessDispatcher {
+    private readonly commandExists;
+    private readonly transport;
+    private readonly profileOptions;
+    private readonly workerEntry;
+    private readonly nodeBinary;
+    constructor(options?: SandboxSubprocessDispatcherOptions);
+    dispatch(request: SubprocessDispatchRequest): Promise<ToolOutput>;
+}
+//# sourceMappingURL=subprocess-dispatcher.d.ts.map

package/dist/sandbox/subprocess-dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-dispatcher.d.ts","sourceRoot":"","sources":["../../src/sandbox/subprocess-dispatcher.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EACV,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAa/C,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAClF;AAED,MAAM,WAAW,kCAAkC;IACjD,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4CD,qBAAa,uBAAwB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAsCvF;AAED,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8B;IAC5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuC;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,OAAO,GAAE,kCAAuC;IAYtD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC;CA0ExE"}

package/dist/sandbox/subprocess-dispatcher.js

@@ -0,0 +1,145 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+import { spawn, spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { buildBwrapInvocation } from './bwrap-invocation.js';
+import { buildSandboxProfileFromScopes, resolveScopeEnforcementNote, } from './profile.js';
+import { UTF8_ENCODING } from '../shared-constants.js';
+import { parseToolRunnerWorkerResponse, } from './tool-runner-worker.js';
+function buildFailureOutput(code, message, details) {
+    return {
+        success: false,
+        error: {
+            code,
+            message,
+            ...(details ? { details } : {}),
+        },
+    };
+}
+function withScopeNote(output, scopes) {
+    const scopeEnforcementNote = resolveScopeEnforcementNote(scopes);
+    if (!scopeEnforcementNote) {
+        return output;
+    }
+    return {
+        ...output,
+        metadata: {
+            ...(output.metadata || {}),
+            scope_enforcement_note: scopeEnforcementNote,
+        },
+    };
+}
+function defaultCommandExists(binary) {
+    const probe = spawnSync(binary, ['--help'], { stdio: 'ignore' });
+    return !probe.error;
+}
+function resolveDefaultWorkerEntry() {
+    const jsPath = fileURLToPath(new URL('./tool-runner-worker.js', import.meta.url));
+    if (fs.existsSync(jsPath)) {
+        return jsPath;
+    }
+    return fileURLToPath(new URL('./tool-runner-worker.ts', import.meta.url));
+}
+export class NodeSubprocessTransport {
+    async execute(request) {
+        return new Promise((resolve, reject) => {
+            const child = spawn(request.command, request.args, {
+                stdio: 'pipe',
+                env: {
+                    ...process.env,
+                    ...request.env,
+                },
+            });
+            let stdout = '';
+            let stderr = '';
+            child.stdout.setEncoding(UTF8_ENCODING);
+            child.stderr.setEncoding(UTF8_ENCODING);
+            child.stdout.on('data', (chunk) => {
+                stdout += chunk;
+            });
+            child.stderr.on('data', (chunk) => {
+                stderr += chunk;
+            });
+            child.on('error', (error) => {
+                reject(error);
+            });
+            child.on('close', (code) => {
+                resolve({
+                    code: code ?? 1,
+                    stdout,
+                    stderr,
+                });
+            });
+            child.stdin.end(request.stdin);
+        });
+    }
+}
+export class SandboxSubprocessDispatcher {
+    commandExists;
+    transport;
+    profileOptions;
+    workerEntry;
+    nodeBinary;
+    constructor(options = {}) {
+        this.commandExists = options.commandExists || defaultCommandExists;
+        this.transport = options.transport || new NodeSubprocessTransport();
+        this.profileOptions = {
+            workspaceRoot: options.workspaceRoot,
+            homeDir: options.homeDir,
+            env: options.env,
+        };
+        this.workerEntry = options.workerEntry || resolveDefaultWorkerEntry();
+        this.nodeBinary = options.nodeBinary || process.execPath;
+    }
+    async dispatch(request) {
+        if (request.capability.handler.kind !== 'subprocess') {
+            return buildFailureOutput('INVALID_HANDLER_KIND', 'Subprocess dispatcher requires subprocess handlers.');
+        }
+        if (!this.commandExists('bwrap')) {
+            return withScopeNote(buildFailureOutput('SUBPROCESS_SANDBOX_UNAVAILABLE', 'Subprocess execution unavailable: required binary "bwrap" was not found.'), request.scopeEnforced);
+        }
+        const invocationPayload = {
+            tool_name: request.capability.name,
+            handler_entry: request.capability.handler.entry,
+            input: request.input,
+            scope_enforced: request.scopeEnforced,
+            receipt_id: randomUUID(),
+        };
+        const profile = buildSandboxProfileFromScopes(request.scopeEnforced, this.profileOptions);
+        const sandboxInvocation = buildBwrapInvocation({
+            profile,
+            command: [this.nodeBinary, this.workerEntry],
+        });
+        let transportResult;
+        try {
+            transportResult = await this.transport.execute({
+                command: sandboxInvocation.command,
+                args: sandboxInvocation.args,
+                stdin: JSON.stringify(invocationPayload),
+                env: sandboxInvocation.env,
+            });
+        }
+        catch (error) {
+            return withScopeNote(buildFailureOutput('SUBPROCESS_TRANSPORT_FAILED', error.message), request.scopeEnforced);
+        }
+        if (transportResult.code !== 0) {
+            return withScopeNote(buildFailureOutput('SUBPROCESS_EXIT_NONZERO', 'Subprocess worker exited with non-zero code.', {
+                exit_code: transportResult.code,
+                stderr: transportResult.stderr,
+            }), request.scopeEnforced);
+        }
+        try {
+            const response = parseToolRunnerWorkerResponse(transportResult.stdout);
+            return withScopeNote(response.output, request.scopeEnforced);
+        }
+        catch (error) {
+            return withScopeNote(buildFailureOutput('SUBPROCESS_PROTOCOL_ERROR', error.message, {
+                stdout: transportResult.stdout,
+                stderr: transportResult.stderr,
+            }), request.scopeEnforced);
+        }
+    }
+}
+//# sourceMappingURL=subprocess-dispatcher.js.map

package/dist/sandbox/subprocess-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-dispatcher.js","sourceRoot":"","sources":["../../src/sandbox/subprocess-dispatcher.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAMzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAE5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,6BAA6B,GAE9B,MAAM,yBAAyB,CAAC;AA6BjC,SAAS,kBAAkB,CACzB,IAAY,EACZ,OAAe,EACf,OAAiC;IAEjC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAkB,EAAE,MAAmB;IAC5D,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE;YACR,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC1B,sBAAsB,EAAE,oBAAoB;SAC7C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,yBAAyB;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,uBAAuB;IAClC,KAAK,CAAC,OAAO,CAAC,OAAmC;QAC/C,OAAO,IAAI,OAAO,CAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACjD,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,OAAO,CAAC,GAAG;iBACf;aACF,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACxC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YAExC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,IAAI,CAAC;oBACf,MAAM;oBACN,MAAM;iBACP,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,2BAA2B;IACrB,aAAa,CAA8B;IAC3C,SAAS,CAAsB;IAC/B,cAAc,CAAuC;IACrD,WAAW,CAAS;IACpB,UAAU,CAAS;IAEpC,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,uBAAuB,EAAE,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,yBAAyB,EAAE,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAkC;QAC/C,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACrD,OAAO,kBAAkB,CACvB,sBAAsB,EACtB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,aAAa,CAClB,kBAAkB,CAChB,gCAAgC,EAChC,0EAA0E,CAC3E,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAA+B;YACpD,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;YAClC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK;YAC/C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,UAAU,EAAE,UAAU,EAAE;SACzB,CAAC;QAEF,MAAM,OAAO,GAAG,6BAA6B,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1F,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;YAC7C,OAAO;YACP,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,eAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7C,OAAO,EAAE,iBAAiB,CAAC,OAAO;gBAClC,IAAI,EAAE,iBAAiB,CAAC,IAAI;gBAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACxC,GAAG,EAAE,iBAAiB,CAAC,GAAG;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,kBAAkB,CAAC,6BAA6B,EAAG,KAAe,CAAC,OAAO,CAAC,EAC3E,OAAO,CAAC,aAAa,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,aAAa,CAClB,kBAAkB,CAChB,yBAAyB,EACzB,8CAA8C,EAC9C;gBACE,SAAS,EAAE,eAAe,CAAC,IAAI;gBAC/B,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CACF,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,6BAA6B,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,kBAAkB,CAAC,2BAA2B,EAAG,KAAe,CAAC,OAAO,EAAE;gBACxE,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CAAC,EACF,OAAO,CAAC,aAAa,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/sandbox/tool-runner-worker.d.ts

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+import { type ToolOutput, type ToolScope } from '../kernel.schemas.js';
+export interface ToolRunnerWorkerContext {
+    tool_name: string;
+    receipt_id: string;
+    scope_enforced: ToolScope[];
+}
+export declare const ToolRunnerWorkerInvocationSchema: z.ZodObject<{
+    tool_name: z.ZodString;
+    handler_entry: z.ZodString;
+    input: z.ZodUnknown;
+    scope_enforced: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"path">;
+        pattern: z.ZodString;
+        access: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"network">;
+        posture: z.ZodEnum<{
+            off: "off";
+            full: "full";
+        }>;
+    }, z.core.$strip>], "type">>;
+    receipt_id: z.ZodString;
+}, z.core.$strip>;
+export type ToolRunnerWorkerInvocation = z.infer<typeof ToolRunnerWorkerInvocationSchema>;
+export declare const ToolRunnerWorkerResponseSchema: z.ZodObject<{
+    output: z.ZodObject<{
+        success: z.ZodBoolean;
+        data: z.ZodOptional<z.ZodUnknown>;
+        error: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ToolRunnerWorkerResponse = z.infer<typeof ToolRunnerWorkerResponseSchema>;
+export interface ToolRunnerWorkerExecutionOptions {
+    importModule?: (specifier: string) => Promise<unknown>;
+}
+export interface ToolRunnerWorkerStreams {
+    stdin: NodeJS.ReadableStream;
+    stdout: NodeJS.WritableStream;
+    stderr: NodeJS.WritableStream;
+}
+export declare function parseToolRunnerWorkerResponse(raw: string): ToolRunnerWorkerResponse;
+export declare function executeToolRunnerInvocation(invocationInput: unknown, options?: ToolRunnerWorkerExecutionOptions): Promise<ToolOutput>;
+export declare function runToolRunnerWorkerFromStreams(streams: ToolRunnerWorkerStreams, options?: ToolRunnerWorkerExecutionOptions): Promise<void>;
+export declare function runToolRunnerWorkerProcess(): Promise<void>;
+//# sourceMappingURL=tool-runner-worker.d.ts.map

package/dist/sandbox/tool-runner-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-runner-worker.d.ts","sourceRoot":"","sources":["../../src/sandbox/tool-runner-worker.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,sBAAsB,CAAC;AAI9B,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;iBAM3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,eAAO,MAAM,8BAA8B;;;;;;;;;;;iBAEzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,WAAW,gCAAgC;IAC/C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AA0FD,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAGnF;AAED,wBAAsB,2BAA2B,CAC/C,eAAe,EAAE,OAAO,EACxB,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,UAAU,CAAC,CA2DrB;AAED,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,uBAAuB,EAChC,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMhE"}