@multiplayer-app/sandbox 0.0.37 → 2.0.0-wip-yjs-state-changes.0

package/dist/executor/docker-sandbox-executor.d.ts

@@ -0,0 +1,67 @@
+import type { ProxyRequestDescriptor, ProxyResponseDescriptor, VmExecRequest, VmExecResult, VmFileWrite, VmRecord, VmWriteFilesResult } from '@multiplayer-app/builder-types';
+import type { DockerSandboxWorkerConfig } from '../config';
+import type { Executor, VmHandle, VmSpec } from './types';
+/**
+ * Runs VMs as Docker Sandboxes (`sbx`, docker.com/products/docker-sandboxes) — Docker's own
+ * microVM-per-sandbox product, originally built for safely running AI coding agents. Reuses
+ * the exact same per-stack images `docker` (DockerExecutor) already builds via
+ * scripts/setup-docker-images.sh, bridged into sbx's own image store with `docker save` +
+ * `sbx template load`.
+ *
+ * Two things `sbx` does differently from plain `docker run`, driven by its "isolated agent
+ * sandbox" design rather than "run this image" design:
+ *   - `sbx create` doesn't execute the image's own Dockerfile CMD (confirmed via `ps aux`:
+ *     PID 1 is a `sleep infinity` placeholder) — the guest agent is launched explicitly via
+ *     `sbx exec -d` right after creation.
+ *   - `sbx create`/`run` require a real host directory to mount as the sandbox's workspace;
+ *     unrelated to the image's own internal /workspace (used by the guest agent for release
+ *     deploys) — just a disposable per-VM directory to satisfy the CLI.
+ *
+ * No `docker pause`-equivalent primitive exists here, so pause/resume alias stop/restore,
+ * same precedent QemuExecutor already sets for engines without a distinct freeze primitive.
+ */
+export declare class DockerSandboxExecutor implements Executor {
+    private readonly config;
+    private readonly vms;
+    private readonly usedPorts;
+    private readonly loadedTemplates;
+    private readonly bin;
+    constructor(config: DockerSandboxWorkerConfig);
+    private allocatePort;
+    private resolveAgentCommand;
+    /** Local `docker` image tag for a stack, same resolution order as DockerExecutor.resolveImage. */
+    private localImageFor;
+    /** Bridges the local docker image into sbx's own image store once per process; returns its ref. */
+    private ensureTemplateLoaded;
+    create(spec: VmSpec): Promise<VmHandle>;
+    /**
+     * `sbx create shell` doesn't run the image's own CMD — launch the guest agent explicitly.
+     *
+     * Fire-and-forget: `sbx exec -d` (detach) launches the background command correctly but its
+     * own CLI process then hangs indefinitely instead of returning — confirmed live (the agent
+     * was already answering on its port while the CLI call itself sat stuck for 14+ minutes,
+     * needing a kill -9). `waitForAgent`'s port poll is the real readiness signal here, not this
+     * process exiting, so it's spawned detached and never awaited.
+     */
+    private launchAgent;
+    pause(vmId: string): Promise<VmHandle>;
+    resume(vmId: string): Promise<VmHandle>;
+    stop(vmId: string): Promise<VmHandle>;
+    restore(vmId: string): Promise<VmHandle>;
+    destroy(vmId: string): Promise<void>;
+    get(vmId: string): VmHandle | undefined;
+    list(): VmHandle[];
+    /**
+     * Recover a sandbox after a worker restart: it's owned by the independent `sandboxd`
+     * daemon, so a liveness probe against its name is enough to confirm it's still there.
+     */
+    reattach(record: VmRecord): Promise<VmHandle | undefined>;
+    proxyHttp(vmId: string, request: ProxyRequestDescriptor): Promise<ProxyResponseDescriptor>;
+    exec(vmId: string, request: VmExecRequest): Promise<VmExecResult>;
+    writeFiles(vmId: string, files: VmFileWrite[]): Promise<VmWriteFilesResult>;
+    private mustGet;
+    private setRunning;
+    private probeAgent;
+    private waitForAgent;
+}
+//# sourceMappingURL=docker-sandbox-executor.d.ts.map

package/dist/executor/docker-sandbox-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-executor.d.ts","sourceRoot":"","sources":["../../src/executor/docker-sandbox-executor.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,kBAAkB,EACnB,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAiCzD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,qBAAsB,YAAW,QAAQ;IAMxC,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA+B;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoB;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;gBAEC,MAAM,EAAE,yBAAyB;IAI9D,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,mBAAmB;IAI3B,kGAAkG;IAClG,OAAO,CAAC,aAAa;IAKrB,mGAAmG;YACrF,oBAAoB;IAsB5B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+C7C;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAQb,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAItC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIvC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IASxC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa1C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,IAAI,IAAI,QAAQ,EAAE;IAIlB;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAwCzD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA2B1F,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IA4BjE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+BjF,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,UAAU;YAMJ,UAAU;YAWV,YAAY;CAQ3B"}

package/dist/executor/docker-sandbox-executor.js

@@ -0,0 +1,343 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerSandboxExecutor = void 0;
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const promises_1 = __importDefault(require("fs/promises"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const http_1 = __importDefault(require("http"));
+const logger_1 = __importDefault(require("@multiplayer-app/logger"));
+const DEFAULT_EXEC_TIMEOUT_MS = 60000;
+const MAX_EXEC_TIMEOUT_MS = 300000;
+const MAX_OUTPUT_BYTES = 1024 * 1024;
+const MAX_FILE_BYTES = 5 * 1024 * 1024;
+const WORKSPACE_DIR = '/workspace';
+const AGENT_DIR = '/app';
+const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+/** Reject "../" and absolute paths, same rule MockExecutor/DockerExecutor apply to their workspace. */
+function assertSafeWorkspacePath(relativePath) {
+    const normalized = relativePath.replace(/^([/\\])+/, '');
+    if (normalized.split(/[/\\]/).includes('..')) {
+        throw new Error(`Path escapes the VM workspace: ${relativePath}`);
+    }
+    return normalized;
+}
+/** sbx sandbox names: letters/digits/hyphens/periods only, starting with a letter or digit. */
+function sandboxNameFor(vmId) {
+    return `mp-${vmId.replace(/[^a-zA-Z0-9.-]/g, '-')}`;
+}
+/**
+ * Runs VMs as Docker Sandboxes (`sbx`, docker.com/products/docker-sandboxes) — Docker's own
+ * microVM-per-sandbox product, originally built for safely running AI coding agents. Reuses
+ * the exact same per-stack images `docker` (DockerExecutor) already builds via
+ * scripts/setup-docker-images.sh, bridged into sbx's own image store with `docker save` +
+ * `sbx template load`.
+ *
+ * Two things `sbx` does differently from plain `docker run`, driven by its "isolated agent
+ * sandbox" design rather than "run this image" design:
+ *   - `sbx create` doesn't execute the image's own Dockerfile CMD (confirmed via `ps aux`:
+ *     PID 1 is a `sleep infinity` placeholder) — the guest agent is launched explicitly via
+ *     `sbx exec -d` right after creation.
+ *   - `sbx create`/`run` require a real host directory to mount as the sandbox's workspace;
+ *     unrelated to the image's own internal /workspace (used by the guest agent for release
+ *     deploys) — just a disposable per-VM directory to satisfy the CLI.
+ *
+ * No `docker pause`-equivalent primitive exists here, so pause/resume alias stop/restore,
+ * same precedent QemuExecutor already sets for engines without a distinct freeze primitive.
+ */
+class DockerSandboxExecutor {
+    constructor(config) {
+        this.config = config;
+        this.vms = new Map();
+        this.usedPorts = new Set();
+        this.loadedTemplates = new Set();
+        this.bin = config.bin;
+    }
+    allocatePort() {
+        for (let p = this.config.portRangeStart; p <= this.config.portRangeEnd; p++) {
+            if (!this.usedPorts.has(p)) {
+                this.usedPorts.add(p);
+                return p;
+            }
+        }
+        throw new Error('no free ports in docker-sandbox port range');
+    }
+    resolveAgentCommand(stack) {
+        var _a, _b;
+        return (_b = (_a = this.config.stackAgentCommands[stack]) !== null && _a !== void 0 ? _a : this.config.stackAgentCommands.generic) !== null && _b !== void 0 ? _b : 'node app.js';
+    }
+    /** Local `docker` image tag for a stack, same resolution order as DockerExecutor.resolveImage. */
+    localImageFor(stack) {
+        const { imagePrefix, imageTag } = this.config;
+        return `${imagePrefix}-${stack}:${imageTag}`;
+    }
+    /** Bridges the local docker image into sbx's own image store once per process; returns its ref. */
+    async ensureTemplateLoaded(stack) {
+        const explicit = this.config.stackTemplates[stack];
+        if (explicit)
+            return explicit;
+        const localImage = this.localImageFor(stack);
+        const templateRef = `docker.io/library/${localImage}`;
+        if (this.loadedTemplates.has(templateRef))
+            return templateRef;
+        const tmpFile = path_1.default.join(os_1.default.tmpdir(), `sbx-template-${stack}-${Date.now()}.tar`);
+        try {
+            await execFileAsync('docker', ['save', localImage, '-o', tmpFile]);
+            await execFileAsync(this.bin, ['template', 'load', tmpFile]);
+        }
+        catch (error) {
+            throw new Error(`failed to bridge local image "${localImage}" into sbx — run scripts/setup-docker-images.sh: ${error}`);
+        }
+        finally {
+            await promises_1.default.rm(tmpFile, { force: true });
+        }
+        this.loadedTemplates.add(templateRef);
+        return templateRef;
+    }
+    async create(spec) {
+        const templateRef = await this.ensureTemplateLoaded(spec.stack);
+        const agentCommand = this.resolveAgentCommand(spec.stack);
+        const sandboxName = sandboxNameFor(spec.vmId);
+        const hostPort = this.allocatePort();
+        const vmDir = path_1.default.join(this.config.workspaceRoot, spec.vmId);
+        await promises_1.default.mkdir(vmDir, { recursive: true });
+        const memMib = Math.max(spec.resources.memMib, this.config.minMemoryMib);
+        const createArgs = [
+            'create', 'shell', vmDir,
+            '--template', templateRef,
+            '--name', sandboxName,
+            '-p', `127.0.0.1:${hostPort}:${this.config.guestPort}`,
+            '-m', `${memMib}m`,
+            '--cpus', String(spec.resources.vcpuCount),
+            '-e', `VM_ID=${spec.vmId}`,
+            '-e', `STACK=${spec.stack}`,
+            ...(spec.sessionId ? ['-e', `SESSION_ID=${spec.sessionId}`] : []),
+            ...(spec.appUrl ? ['-e', `APP_URL=${spec.appUrl}`] : []),
+        ];
+        logger_1.default.info({ vmId: spec.vmId, bin: this.bin, args: createArgs }, 'creating docker sandbox');
+        try {
+            await execFileAsync(this.bin, createArgs);
+            this.launchAgent(sandboxName, agentCommand);
+        }
+        catch (error) {
+            this.usedPorts.delete(hostPort);
+            await promises_1.default.rm(vmDir, { recursive: true, force: true }).catch(() => { });
+            throw error;
+        }
+        const handle = {
+            vmId: spec.vmId,
+            sessionId: spec.sessionId,
+            stack: spec.stack,
+            resources: { ...spec.resources, memMib },
+            running: true,
+            metadata: { sandboxName, hostPort, vmDir, agentCommand },
+        };
+        this.vms.set(spec.vmId, { handle, sandboxName, vmDir, hostPort, agentCommand });
+        await this.waitForAgent(hostPort);
+        logger_1.default.info({ vmId: spec.vmId, sandboxName, hostPort }, 'docker sandbox ready');
+        return handle;
+    }
+    /**
+     * `sbx create shell` doesn't run the image's own CMD — launch the guest agent explicitly.
+     *
+     * Fire-and-forget: `sbx exec -d` (detach) launches the background command correctly but its
+     * own CLI process then hangs indefinitely instead of returning — confirmed live (the agent
+     * was already answering on its port while the CLI call itself sat stuck for 14+ minutes,
+     * needing a kill -9). `waitForAgent`'s port poll is the real readiness signal here, not this
+     * process exiting, so it's spawned detached and never awaited.
+     */
+    launchAgent(sandboxName, agentCommand) {
+        const proc = (0, child_process_1.spawn)(this.bin, ['exec', '-d', '-w', AGENT_DIR, sandboxName, '/bin/sh', '-c', agentCommand], {
+            stdio: 'ignore',
+        });
+        proc.on('error', (error) => logger_1.default.warn({ sandboxName, err: error }, 'sbx exec -d failed to spawn'));
+        proc.unref();
+    }
+    async pause(vmId) {
+        return this.stop(vmId);
+    }
+    async resume(vmId) {
+        return this.restore(vmId);
+    }
+    async stop(vmId) {
+        const vm = this.mustGet(vmId);
+        await execFileAsync(this.bin, ['stop', vm.sandboxName]);
+        return this.setRunning(vmId, false);
+    }
+    async restore(vmId) {
+        const vm = this.mustGet(vmId);
+        await execFileAsync(this.bin, ['run', '--name', vm.sandboxName, '--detached']);
+        const alreadyUp = await this.probeAgent(vm.hostPort);
+        if (!alreadyUp)
+            this.launchAgent(vm.sandboxName, vm.agentCommand);
+        await this.waitForAgent(vm.hostPort);
+        return this.setRunning(vmId, true);
+    }
+    async destroy(vmId) {
+        const vm = this.vms.get(vmId);
+        if (!vm)
+            return;
+        await execFileAsync(this.bin, ['rm', '-f', vm.sandboxName]).catch((error) => logger_1.default.warn({ vmId, err: error }, 'sbx rm on destroy failed'));
+        await promises_1.default.rm(vm.vmDir, { recursive: true, force: true }).catch(() => { });
+        this.usedPorts.delete(vm.hostPort);
+        this.vms.delete(vmId);
+        logger_1.default.info({ vmId }, 'docker sandbox destroyed');
+    }
+    get(vmId) {
+        var _a;
+        return (_a = this.vms.get(vmId)) === null || _a === void 0 ? void 0 : _a.handle;
+    }
+    list() {
+        return [...this.vms.values()].map((v) => v.handle);
+    }
+    /**
+     * Recover a sandbox after a worker restart: it's owned by the independent `sandboxd`
+     * daemon, so a liveness probe against its name is enough to confirm it's still there.
+     */
+    async reattach(record) {
+        const meta = record.runtimeMetadata;
+        if (!(meta === null || meta === void 0 ? void 0 : meta.sandboxName) || meta.hostPort === undefined || !meta.vmDir || !meta.agentCommand)
+            return undefined;
+        let running;
+        try {
+            await execFileAsync(this.bin, ['exec', meta.sandboxName, 'true']);
+            running = true;
+        }
+        catch (_a) {
+            try {
+                await execFileAsync(this.bin, ['ls', '--json']);
+                running = false; // ran but the sandbox isn't reachable — treat as stopped, not gone
+            }
+            catch (_b) {
+                return undefined;
+            }
+        }
+        const handle = {
+            vmId: record.vmId,
+            sessionId: record.sessionId,
+            stack: record.stack,
+            resources: record.resources,
+            running,
+            metadata: meta,
+        };
+        this.usedPorts.add(meta.hostPort);
+        this.vms.set(record.vmId, {
+            handle,
+            sandboxName: meta.sandboxName,
+            vmDir: meta.vmDir,
+            hostPort: meta.hostPort,
+            agentCommand: meta.agentCommand,
+        });
+        logger_1.default.info({ vmId: record.vmId, sandboxName: meta.sandboxName }, 'docker sandbox reattached');
+        return handle;
+    }
+    async proxyHttp(vmId, request) {
+        const vm = this.mustGet(vmId);
+        if (!vm.handle.running)
+            throw new Error(`vm ${vmId} is not running`);
+        return new Promise((resolve, reject) => {
+            const req = http_1.default.request({ host: '127.0.0.1', port: vm.hostPort, method: request.method, path: request.path, headers: request.headers }, (res) => {
+                const chunks = [];
+                res.on('data', (c) => chunks.push(c));
+                res.on('end', () => {
+                    var _a;
+                    return resolve({
+                        statusCode: (_a = res.statusCode) !== null && _a !== void 0 ? _a : 502,
+                        headers: Object.fromEntries(Object.entries(res.headers).map(([k, v]) => [k, Array.isArray(v) ? v.join(', ') : (v !== null && v !== void 0 ? v : '')])),
+                        body: Buffer.concat(chunks),
+                    });
+                });
+            });
+            req.on('error', reject);
+            if (request.body)
+                req.write(request.body);
+            req.end();
+        });
+    }
+    async exec(vmId, request) {
+        var _a;
+        const vm = this.mustGet(vmId);
+        const cwd = request.cwd ? `${WORKSPACE_DIR}/${assertSafeWorkspacePath(request.cwd)}` : WORKSPACE_DIR;
+        const timeoutMs = Math.min((_a = request.timeoutMs) !== null && _a !== void 0 ? _a : DEFAULT_EXEC_TIMEOUT_MS, MAX_EXEC_TIMEOUT_MS);
+        const startedAt = Date.now();
+        return new Promise((resolve) => {
+            (0, child_process_1.execFile)(this.bin, ['exec', '-w', cwd, vm.sandboxName, '/bin/sh', '-c', request.command], { timeout: timeoutMs, maxBuffer: MAX_OUTPUT_BYTES }, (error, stdout, stderr) => {
+                const failed = error;
+                const timedOut = Boolean(failed === null || failed === void 0 ? void 0 : failed.killed);
+                const truncated = (failed === null || failed === void 0 ? void 0 : failed.code) === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER';
+                resolve({
+                    exitCode: typeof (failed === null || failed === void 0 ? void 0 : failed.code) === 'number' ? failed.code : failed ? 1 : 0,
+                    stdout: stdout.slice(0, MAX_OUTPUT_BYTES),
+                    stderr: stderr.slice(0, MAX_OUTPUT_BYTES),
+                    durationMs: Date.now() - startedAt,
+                    truncated: Boolean(truncated),
+                    timedOut,
+                });
+            });
+        });
+    }
+    async writeFiles(vmId, files) {
+        const vm = this.mustGet(vmId);
+        const written = [];
+        for (const file of files) {
+            const relativePath = assertSafeWorkspacePath(file.path);
+            const buffer = Buffer.from(file.content, file.encoding === 'base64' ? 'base64' : 'utf8');
+            if (buffer.byteLength > MAX_FILE_BYTES) {
+                throw new Error(`File too large (${buffer.byteLength} bytes, max ${MAX_FILE_BYTES}): ${file.path}`);
+            }
+            const dir = relativePath.includes('/') ? relativePath.slice(0, relativePath.lastIndexOf('/')) : '';
+            if (dir) {
+                await execFileAsync(this.bin, ['exec', vm.sandboxName, 'mkdir', '-p', `${WORKSPACE_DIR}/${dir}`]);
+            }
+            // sbx cp takes a real host path on one side — simpler than DockerExecutor's tar-over-stdin hack.
+            const tmpFile = path_1.default.join(os_1.default.tmpdir(), `sbx-write-${vmId}-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+            await promises_1.default.writeFile(tmpFile, buffer);
+            try {
+                await execFileAsync(this.bin, ['cp', tmpFile, `${vm.sandboxName}:${WORKSPACE_DIR}/${relativePath}`]);
+            }
+            finally {
+                await promises_1.default.rm(tmpFile, { force: true });
+            }
+            written.push({ path: relativePath, bytes: buffer.byteLength });
+        }
+        logger_1.default.info({ vmId, files: written.length }, 'docker sandbox files written');
+        return { written };
+    }
+    mustGet(vmId) {
+        const vm = this.vms.get(vmId);
+        if (!vm)
+            throw new Error(`vm ${vmId} not found`);
+        return vm;
+    }
+    setRunning(vmId, running) {
+        const vm = this.mustGet(vmId);
+        vm.handle = { ...vm.handle, running };
+        return vm.handle;
+    }
+    async probeAgent(port) {
+        return new Promise((resolve) => {
+            const req = http_1.default.get({ host: '127.0.0.1', port, path: '/', timeout: 2000 }, (res) => {
+                res.resume();
+                resolve(true);
+            });
+            req.on('error', () => resolve(false));
+            req.on('timeout', () => { req.destroy(); resolve(false); });
+        });
+    }
+    async waitForAgent(port, timeoutMs = 30000) {
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            if (await this.probeAgent(port))
+                return;
+            if (Date.now() > deadline)
+                throw new Error(`timed out waiting for docker sandbox agent on port ${port}`);
+            await new Promise((resolve) => setTimeout(resolve, 500));
+        }
+    }
+}
+exports.DockerSandboxExecutor = DockerSandboxExecutor;
+//# sourceMappingURL=docker-sandbox-executor.js.map

package/dist/executor/docker-sandbox-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-executor.js","sourceRoot":"","sources":["../../src/executor/docker-sandbox-executor.ts"],"names":[],"mappings":";;;;;;AAAA,iDAA+C;AAC/C,+BAAgC;AAChC,2DAA4B;AAC5B,4CAAmB;AACnB,gDAAuB;AACvB,gDAAuB;AACvB,qEAA4C;AAa5C,MAAM,uBAAuB,GAAG,KAAM,CAAA;AACtC,MAAM,mBAAmB,GAAG,MAAO,CAAA;AACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAA;AACpC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACtC,MAAM,aAAa,GAAG,YAAY,CAAA;AAClC,MAAM,SAAS,GAAG,MAAM,CAAA;AAExB,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAA;AAUzC,uGAAuG;AACvG,SAAS,uBAAuB,CAAC,YAAoB;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACxD,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,+FAA+F;AAC/F,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,qBAAqB;IAMhC,YAA6B,MAAiC;QAAjC,WAAM,GAAN,MAAM,CAA2B;QAL7C,QAAG,GAAG,IAAI,GAAG,EAAqB,CAAA;QAClC,cAAS,GAAG,IAAI,GAAG,EAAU,CAAA;QAC7B,oBAAe,GAAG,IAAI,GAAG,EAAU,CAAA;QAIlD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IACvB,CAAC;IAEO,YAAY;QAClB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAA;YAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAEO,mBAAmB,CAAC,KAAa;;QACvC,OAAO,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,mCAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,mCAAI,aAAa,CAAA;IACzG,CAAC;IAED,kGAAkG;IAC1F,aAAa,CAAC,KAAa;QACjC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7C,OAAO,GAAG,WAAW,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAA;IAC9C,CAAC;IAED,mGAAmG;IAC3F,KAAK,CAAC,oBAAoB,CAAC,KAAa;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,WAAW,GAAG,qBAAqB,UAAU,EAAE,CAAA;QACrD,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,WAAW,CAAA;QAE7D,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACjF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;YAClE,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,oDAAoD,KAAK,EAAE,CAAC,CAAA;QACzH,CAAC;gBAAS,CAAC;YACT,MAAM,kBAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvC,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACrC,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACpC,MAAM,KAAK,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAExE,MAAM,UAAU,GAAG;YACjB,QAAQ,EAAE,OAAO,EAAE,KAAK;YACxB,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,aAAa,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YACtD,IAAI,EAAE,GAAG,MAAM,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAC1C,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE;YAC1B,IAAI,EAAE,SAAS,IAAI,CAAC,KAAK,EAAE;YAC3B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAA;QAED,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,yBAAyB,CAAC,CAAA;QAC5F,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YACzC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC/B,MAAM,kBAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpE,MAAM,KAAK,CAAA;QACb,CAAC;QAED,MAAM,MAAM,GAAa;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE;YACxC,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE;SACzD,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;QAE/E,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;QACjC,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,sBAAsB,CAAC,CAAA;QAC/E,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;;OAQG;IACK,WAAW,CAAC,WAAmB,EAAE,YAAoB;QAC3D,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE;YACxG,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAA;QACpG,IAAI,CAAC,KAAK,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;QACvD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,YAAY,CAAC,CAAA;QACjE,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;QACpC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,EAAE;YAAE,OAAM;QAEf,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CACjF,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAC9D,CAAA;QACD,MAAM,kBAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrB,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAA;IACnD,CAAC;IAED,GAAG,CAAC,IAAY;;QACd,OAAO,MAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAE,MAAM,CAAA;IACnC,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAgB;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,eAEP,CAAA;QACb,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,CAAA,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAA;QAE5G,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;YACjE,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAAC,WAAM,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAC/C,OAAO,GAAG,KAAK,CAAA,CAAC,mEAAmE;YACrF,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,SAAS,CAAA;YAClB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAa;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO;YACP,QAAQ,EAAE,IAAI;SACf,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACxB,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAA;QAEF,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,2BAA2B,CAAC,CAAA;QAC9F,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAA+B;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAA;QAEpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CACtB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC9G,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAA;gBAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC7C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;;oBACjB,OAAA,OAAO,CAAC;wBACN,UAAU,EAAE,MAAA,GAAG,CAAC,UAAU,mCAAI,GAAG;wBACjC,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,CAAC,CAAC,CAC9F;wBACD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;qBAC5B,CAAC,CAAA;iBAAA,CACH,CAAA;YACH,CAAC,CACF,CAAA;YACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvB,IAAI,OAAO,CAAC,IAAI;gBAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACzC,GAAG,CAAC,GAAG,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAsB;;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAA;QACpG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAA,OAAO,CAAC,SAAS,mCAAI,uBAAuB,EAAE,mBAAmB,CAAC,CAAA;QAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAA,wBAAQ,EACN,IAAI,CAAC,GAAG,EACR,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EACrE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,EACnD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,KAAsF,CAAA;gBACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,CAAC,CAAA;gBACxC,MAAM,SAAS,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,MAAK,mCAAmC,CAAA;gBACtE,OAAO,CAAC;oBACN,QAAQ,EAAE,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;oBACzC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;oBACzC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;oBAC7B,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC,CACF,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAoB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,OAAO,GAA2C,EAAE,CAAA;QAE1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YACxF,IAAI,MAAM,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,UAAU,eAAe,cAAc,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACrG,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAClG,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,aAAa,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;YACnG,CAAC;YAED,iGAAiG;YACjG,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,aAAa,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAChH,MAAM,kBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACnC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC,CAAC,CAAA;YACtG,CAAC;oBAAS,CAAC;gBACT,MAAM,kBAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;QAChE,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAA;QAC5E,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,CAAA;QAChD,OAAO,EAAE,CAAA;IACX,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,OAAgB;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,EAAE,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;QACrC,OAAO,EAAE,CAAC,MAAM,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,cAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnF,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;YACrC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,SAAS,GAAG,KAAM;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACvC,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAM;YACvC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,CAAC,CAAA;YACxG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;CACF;AA/TD,sDA+TC"}

package/dist/executor/fargate-executor.d.ts

@@ -0,0 +1,62 @@
+import type { ProxyRequestDescriptor, ProxyResponseDescriptor, VmRecord, VmStack } from '@multiplayer-app/builder-types';
+import type { Executor, VmHandle, VmSpec } from './types';
+export interface FargateConfig {
+    region?: string;
+    /** ECS cluster name or ARN. */
+    cluster: string;
+    /** Default task definition (family[:revision] or ARN), used for stacks without an override. */
+    taskDefinition?: string;
+    /** Per-stack task definition overrides, e.g. { node: 'builder-node:3' }. */
+    stackTaskDefinitions?: Partial<Record<VmStack, string>>;
+    /** VPC subnets for awsvpc networking. */
+    subnets: string[];
+    securityGroups?: string[];
+    /**
+     * ENABLED: task gets a public IP and the worker proxies to it (worker outside the VPC).
+     * DISABLED (default): the worker proxies to the task's private IP (worker inside the VPC).
+     */
+    assignPublicIp?: boolean;
+    /** Guest HTTP port the app/agent listens on. */
+    guestPort?: number;
+    /** How long to wait for the task to reach RUNNING (image pulls can be slow). */
+    startTimeoutMs?: number;
+}
+/** Snap requested VM resources to a valid Fargate cpu/memory combination. */
+export declare function fargateResources(vcpuCount: number, memMib: number): {
+    cpu: string;
+    memory: string;
+};
+/**
+ * Runs VMs as AWS Fargate tasks (one task per VM). No VNC or serial console and no
+ * pause/resume — HTTP(S) into the container only, via the task's IP on the guest port.
+ * Slower to start than Lambda MicroVMs (image pull + task provisioning), but supports
+ * arbitrary container images via standard ECS task definitions.
+ */
+export declare class FargateExecutor implements Executor {
+    private readonly config;
+    private readonly client;
+    private readonly vms;
+    private readonly containerNames;
+    constructor(config: FargateConfig);
+    /** First container of the task definition — the target for env overrides. Cached per definition. */
+    private resolveContainerName;
+    private waitForRunning;
+    private resolvePublicIp;
+    create(spec: VmSpec): Promise<VmHandle>;
+    pause(vmId: string): Promise<VmHandle>;
+    resume(vmId: string): Promise<VmHandle>;
+    restore(vmId: string): Promise<VmHandle>;
+    stop(vmId: string): Promise<VmHandle>;
+    destroy(vmId: string): Promise<void>;
+    get(vmId: string): VmHandle | undefined;
+    list(): VmHandle[];
+    proxyHttp(vmId: string, request: ProxyRequestDescriptor): Promise<ProxyResponseDescriptor>;
+    /**
+     * Recover a Fargate task after a worker restart. The task is an independent AWS resource
+     * that outlives this process — just re-describe it by ARN and, if it's still RUNNING,
+     * rebuild the local handle.
+     */
+    reattach(record: VmRecord): Promise<VmHandle | undefined>;
+    private mustGet;
+}
+//# sourceMappingURL=fargate-executor.d.ts.map

package/dist/executor/fargate-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fargate-executor.d.ts","sourceRoot":"","sources":["../../src/executor/fargate-executor.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAA;AACxH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEzD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,+FAA+F;IAC/F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACvD,yCAAyC;IACzC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAiBD,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOnG;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,QAAQ;IAKlC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;gBAE9B,MAAM,EAAE,aAAa;IAIlD,oGAAoG;YACtF,oBAAoB;YAWpB,cAAc;YA4Bd,eAAe;IAYvB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwEvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAItC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IASrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,IAAI,IAAI,QAAQ,EAAE;IAIZ,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAiChG;;;;OAIG;IACG,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IA4B/D,OAAO,CAAC,OAAO;CAKhB"}