@mxf-dev/core 1.0.0

package/dist/services/ContainerExecutionManager.js

@@ -0,0 +1,594 @@
+/**
+ * Copyright 2024 Brad Anderson
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * @author Brad Anderson <BradA1878@pm.me>
+ * @repository https://github.com/mxf-dev/mxf
+ * @documentation https://mxf-dev.github.io/mxf/
+ */
+/**
+ * ContainerExecutionManager.ts
+ *
+ * Manages Docker containers for sandboxed code execution.
+ * Creates fresh containers per execution with strict security constraints.
+ *
+ * Security Model:
+ * - Container isolation is the PRIMARY security barrier
+ * - Pre-validation catches obvious dangerous patterns early
+ * - Each execution runs in a fresh, isolated container
+ */
+import { v4 as uuidv4 } from 'uuid';
+import Docker from 'dockerode';
+import { Logger } from '../utils/Logger.js';
+import { Writable } from 'stream';
+import * as path from 'path';
+import * as fs from 'fs';
+// The code-executor build context ships at <repo>/docker/code-executor and the
+// server always runs from the repo root (bun dev, Docker WORKDIR). Resolved
+// once from cwd — missing directory fails fast at the use sites.
+const CODE_EXECUTOR_DIR = path.join(process.cwd(), 'docker', 'code-executor');
+/**
+ * Default configuration values
+ */
+const DEFAULT_CONFIG = {
+    defaultTimeout: parseInt(process.env.CODE_EXEC_TIMEOUT_DEFAULT || '5000'),
+    maxTimeout: parseInt(process.env.CODE_EXEC_TIMEOUT_MAX || '30000'),
+    timeoutBuffer: parseInt(process.env.CODE_EXEC_TIMEOUT_BUFFER || '1000'),
+    memoryLimit: parseInt(process.env.CODE_EXEC_MEMORY_LIMIT || '128'),
+    cpuLimit: parseFloat(process.env.CODE_EXEC_CPU_LIMIT || '0.5'),
+    maxOutputSize: parseInt(process.env.CODE_EXEC_MAX_OUTPUT || '10240'), // 10KB default
+    imageName: process.env.CODE_EXEC_IMAGE?.split(':')[0] || 'mxf/code-executor',
+    imageTag: process.env.CODE_EXEC_IMAGE?.split(':')[1] || 'latest'
+};
+/**
+ * Container Execution Manager
+ *
+ * Manages Docker containers for code execution with:
+ * - Fresh container per execution (no pooling)
+ * - Security constraints (no network, read-only, cgroups)
+ * - Resource limits (memory, CPU)
+ * - Automatic cleanup after execution
+ */
+export class ContainerExecutionManager {
+    static instance;
+    logger;
+    docker;
+    config;
+    initialized = false;
+    dockerAvailable = false;
+    constructor(config) {
+        this.logger = new Logger('info', 'ContainerExecutionManager', 'server');
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.docker = new Docker();
+    }
+    /**
+     * Get singleton instance
+     */
+    static getInstance(config) {
+        if (!ContainerExecutionManager.instance) {
+            ContainerExecutionManager.instance = new ContainerExecutionManager(config);
+        }
+        return ContainerExecutionManager.instance;
+    }
+    /**
+     * Initialize the container execution manager
+     * Checks Docker availability and builds image if needed
+     * Auto-rebuilds image if source files are newer than the image
+     */
+    async initialize() {
+        if (this.initialized) {
+            return this.dockerAvailable;
+        }
+        try {
+            // Check Docker daemon is running
+            await this.docker.ping();
+            this.dockerAvailable = true;
+            this.logger.info('Docker daemon is available');
+            // Check for force rebuild environment variable
+            if (process.env.FORCE_REBUILD_CODE_EXECUTOR === 'true') {
+                this.logger.info('FORCE_REBUILD_CODE_EXECUTOR=true - forcing image rebuild');
+                const buildSuccess = await this.buildImage();
+                if (!buildSuccess) {
+                    this.logger.warn('Failed to force rebuild code executor image. Code execution will not be available.');
+                    this.dockerAvailable = false;
+                }
+                else {
+                    this.logger.info('Code executor image force rebuilt successfully');
+                }
+                this.initialized = true;
+                return this.dockerAvailable;
+            }
+            // Check if image exists
+            const imageExists = await this.checkImageExists();
+            if (imageExists) {
+                // Check if source files are newer than image
+                const sourceModTime = this.getSourceFilesModTime();
+                const imageCreatedTime = await this.getImageCreatedTime();
+                if (sourceModTime > 0 && sourceModTime > imageCreatedTime) {
+                    this.logger.info('Code executor source files modified after image build. Rebuilding...');
+                    this.logger.info(`  Source modified: ${new Date(sourceModTime).toISOString()}`);
+                    this.logger.info(`  Image built: ${new Date(imageCreatedTime).toISOString()}`);
+                    const buildSuccess = await this.buildImage();
+                    if (!buildSuccess) {
+                        this.logger.warn('Failed to rebuild code executor image. Using existing image.');
+                    }
+                    else {
+                        this.logger.info('Code executor image rebuilt successfully');
+                    }
+                }
+                else {
+                    this.logger.info(`Code executor image ${this.getImageName()} is up to date`);
+                }
+            }
+            else {
+                // Build image from scratch
+                this.logger.info(`Code executor image ${this.getImageName()} not found, attempting to build...`);
+                const buildSuccess = await this.buildImage();
+                if (!buildSuccess) {
+                    this.logger.warn('Failed to build code executor image. Code execution will not be available.');
+                    this.dockerAvailable = false;
+                }
+            }
+            this.initialized = true;
+            return this.dockerAvailable;
+        }
+        catch (error) {
+            this.logger.error(`Docker initialization failed: ${error.message}`);
+            this.dockerAvailable = false;
+            this.initialized = true; // Mark as initialized even on failure
+            return false;
+        }
+    }
+    /**
+     * Build the code executor Docker image from ./docker/code-executor
+     */
+    async buildImage() {
+        try {
+            const dockerfilePath = CODE_EXECUTOR_DIR;
+            if (!fs.existsSync(path.join(dockerfilePath, 'Dockerfile'))) {
+                this.logger.error(`Code executor build context not found at ${dockerfilePath} — expected docker/code-executor relative to the working directory`);
+                return false;
+            }
+            this.logger.info(`Building Docker image from ${dockerfilePath}...`);
+            // Build image using Docker API with no-cache to ensure source changes
+            // are always picked up. Without nocache, Docker may reuse cached layers
+            // even when the executor.ts content has changed.
+            const stream = await this.docker.buildImage({
+                context: dockerfilePath,
+                src: ['Dockerfile', 'executor.ts']
+            }, {
+                t: this.getImageName(),
+                dockerfile: 'Dockerfile',
+                nocache: true
+            });
+            // Wait for build to complete and log output
+            await new Promise((resolve, reject) => {
+                this.docker.modem.followProgress(stream, (err, result) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve();
+                    }
+                }, (event) => {
+                    if (event.stream) {
+                        const line = event.stream.trim();
+                        if (line) {
+                            this.logger.debug(`Docker build: ${line}`);
+                        }
+                    }
+                    if (event.error) {
+                        this.logger.error(`Docker build error: ${event.error}`);
+                    }
+                });
+            });
+            this.logger.info(`Successfully built Docker image ${this.getImageName()}`);
+            return true;
+        }
+        catch (error) {
+            this.logger.error(`Failed to build Docker image: ${error.message}`);
+            return false;
+        }
+    }
+    /**
+     * Execute code in a container
+     * Creates a new container, executes code, and removes container
+     */
+    async execute(request) {
+        if (!this.dockerAvailable) {
+            return {
+                success: false,
+                output: null,
+                logs: [],
+                executionTime: 0,
+                error: 'Docker is not available',
+                timeout: false
+            };
+        }
+        const startTime = Date.now();
+        const containerId = `mxf-exec-${uuidv4()}`;
+        // Validate and cap timeout
+        const timeout = Math.min(request.timeout || this.config.defaultTimeout, this.config.maxTimeout);
+        try {
+            // Create container with the execution request baked in as an env var
+            const executionRequest = { ...request, timeout };
+            const container = await this.createSecureContainer(containerId, executionRequest);
+            // Start container — executor reads MXF_REQUEST env var and runs immediately
+            await container.start();
+            // Read stdout/stderr and wait for container exit
+            const result = await this.executeInContainer(container, executionRequest);
+            // Cleanup container
+            await this.destroyContainer(container, request.context?.requestId);
+            return result;
+        }
+        catch (error) {
+            this.logger.error(`Container execution failed: ${error.message}`, {
+                containerId,
+                requestId: request.context?.requestId
+            });
+            // Attempt cleanup with logging
+            await this.cleanupFailedContainer(containerId, request.context?.requestId);
+            return {
+                success: false,
+                output: null,
+                logs: [],
+                executionTime: Date.now() - startTime,
+                error: error.message || String(error),
+                timeout: error.message?.includes('timeout')
+            };
+        }
+    }
+    /**
+     * Cleanup a failed container with proper logging
+     */
+    async cleanupFailedContainer(containerId, requestId) {
+        try {
+            const container = this.docker.getContainer(containerId);
+            await container.stop({ t: 0 }).catch(() => { });
+            await container.remove({ force: true }).catch(() => { });
+        }
+        catch (cleanupError) {
+            this.logger.warn(`Container cleanup failed for ${containerId}`, {
+                error: cleanupError.message,
+                requestId
+            });
+        }
+    }
+    /**
+     * Create a secure container with all security constraints.
+     *
+     * The execution request is passed via the MXF_REQUEST environment variable
+     * (base64-encoded JSON) instead of stdin. Dockerode's hijacked stream does
+     * not reliably deliver stdin data to the container process, but environment
+     * variables are available immediately at process start.
+     */
+    async createSecureContainer(name, request) {
+        // Pass the execution request as a base64-encoded env var so the executor
+        // can read it without depending on stdin pipe delivery through Docker's
+        // hijacked stream (which is unreliable with dockerode).
+        const env = [];
+        if (request) {
+            const requestJson = JSON.stringify(request);
+            const encoded = Buffer.from(requestJson).toString('base64');
+            env.push(`MXF_REQUEST=${encoded}`);
+        }
+        const container = await this.docker.createContainer({
+            name,
+            Image: this.getImageName(),
+            Env: env,
+            AttachStdout: true,
+            AttachStderr: true,
+            Tty: false,
+            HostConfig: {
+                // Network: Disabled - no network access
+                NetworkMode: 'none',
+                // Filesystem: Read-only root, tmpfs for /tmp
+                ReadonlyRootfs: true,
+                Tmpfs: {
+                    '/tmp': 'rw,noexec,nosuid,size=64m'
+                },
+                // Capabilities: Drop all
+                CapDrop: ['ALL'],
+                // Privileged: No
+                Privileged: false,
+                // Security: No new privileges
+                SecurityOpt: ['no-new-privileges:true'],
+                // Resource limits
+                Memory: this.config.memoryLimit * 1024 * 1024, // Convert MB to bytes
+                MemorySwap: this.config.memoryLimit * 1024 * 1024, // No swap
+                NanoCpus: Math.floor(this.config.cpuLimit * 1e9), // Convert to nanocpus
+                // PID limit
+                PidsLimit: 64,
+                // Ulimits
+                Ulimits: [
+                    { Name: 'nofile', Soft: 64, Hard: 64 },
+                    { Name: 'nproc', Soft: 32, Hard: 32 }
+                ],
+                // Auto remove after exit
+                AutoRemove: false // We handle removal manually
+            },
+            // User: Non-root
+            User: '1000:1000'
+        });
+        return container;
+    }
+    /**
+     * Execute code inside a running container
+     *
+     * CRITICAL: This method waits for BOTH container exit AND stream demultiplexing
+     * to complete before reading output. The demuxStream() call is asynchronous and
+     * sets up listeners that may still be processing data when container.wait() resolves.
+     * Without waiting for streams to finish, stdout may be empty or incomplete.
+     */
+    async executeInContainer(container, request) {
+        return new Promise(async (resolve) => {
+            // Prevent double-resolution from timeout vs success race
+            let resolved = false;
+            const resolveOnce = (result) => {
+                if (!resolved) {
+                    resolved = true;
+                    clearTimeout(timeoutId);
+                    resolve(result);
+                }
+            };
+            // Use configurable timeout buffer
+            const timeoutId = setTimeout(() => {
+                resolveOnce({
+                    success: false,
+                    output: null,
+                    logs: [],
+                    executionTime: request.timeout,
+                    error: 'Execution timeout',
+                    timeout: true
+                });
+            }, request.timeout + this.config.timeoutBuffer);
+            try {
+                // Attach to container stdout/stderr streams (no stdin needed —
+                // the execution request is passed via MXF_REQUEST env var)
+                const stream = await container.attach({
+                    stream: true,
+                    stdout: true,
+                    stderr: true
+                });
+                // Collect output
+                let stdout = '';
+                let stderr = '';
+                // Demux the stream - these Writable streams receive demultiplexed data
+                const stdoutStream = new Writable({
+                    write(chunk, encoding, callback) {
+                        stdout += chunk.toString();
+                        callback();
+                    }
+                });
+                const stderrStream = new Writable({
+                    write(chunk, encoding, callback) {
+                        stderr += chunk.toString();
+                        callback();
+                    }
+                });
+                // Create a promise that resolves when all streams are fully processed
+                // This is CRITICAL: demuxStream() is async and container.wait() may resolve
+                // before the demux pipeline finishes writing to our Writable streams
+                const streamEndPromise = new Promise((resolveStream, rejectStream) => {
+                    let sourceEnded = false;
+                    let stdoutFinished = false;
+                    let stderrFinished = false;
+                    const checkCompletion = () => {
+                        if (sourceEnded && stdoutFinished && stderrFinished) {
+                            resolveStream();
+                        }
+                    };
+                    // Source stream 'end' event - triggered when container closes stdout
+                    stream.on('end', () => {
+                        sourceEnded = true;
+                        // Signal EOF to our writable streams so they emit 'finish'
+                        stdoutStream.end();
+                        stderrStream.end();
+                        checkCompletion();
+                    });
+                    // Handle unexpected close (e.g., container killed)
+                    stream.on('close', () => {
+                        if (!sourceEnded) {
+                            sourceEnded = true;
+                            stdoutStream.end();
+                            stderrStream.end();
+                            checkCompletion();
+                        }
+                    });
+                    // Stream error - reject the promise
+                    stream.on('error', (err) => {
+                        rejectStream(err);
+                    });
+                    // Writable 'finish' events - triggered after end() and all writes complete
+                    stdoutStream.on('finish', () => {
+                        stdoutFinished = true;
+                        checkCompletion();
+                    });
+                    stderrStream.on('finish', () => {
+                        stderrFinished = true;
+                        checkCompletion();
+                    });
+                    // Handle writable stream errors
+                    stdoutStream.on('error', (err) => {
+                        rejectStream(err);
+                    });
+                    stderrStream.on('error', (err) => {
+                        rejectStream(err);
+                    });
+                });
+                // Docker multiplexes stdout/stderr - use demuxStream to split them
+                // NOTE: demuxStream() sets up 'data' listeners and returns immediately (async!)
+                container.modem.demuxStream(stream, stdoutStream, stderrStream);
+                // Wait for BOTH container exit AND stream processing to complete
+                // This prevents the race condition where container exits but demux hasn't finished
+                await Promise.all([
+                    container.wait(),
+                    streamEndPromise
+                ]);
+                this.logger.debug(`[ContainerExecution] Container exited and streams finished. stdout=${stdout.length} chars, stderr=${stderr.length} chars`);
+                // Check for empty output - indicates container produced nothing
+                if (!stdout.trim()) {
+                    resolveOnce({
+                        success: false,
+                        output: null,
+                        logs: stderr ? [stderr] : [],
+                        executionTime: request.timeout,
+                        error: 'Container produced no output',
+                        timeout: false
+                    });
+                    return;
+                }
+                // Parse result from stdout
+                try {
+                    // Truncate stdout before parsing if too large (performance optimization)
+                    let outputToParse = stdout;
+                    if (stdout.length > this.config.maxOutputSize) {
+                        this.logger.warn(`Container output truncated from ${stdout.length} to ${this.config.maxOutputSize} bytes`);
+                        outputToParse = stdout.substring(0, this.config.maxOutputSize);
+                    }
+                    // Clean stdout - may have header bytes from docker multiplexing
+                    const cleanStdout = outputToParse.replace(/^[\x00-\x1f]+/, '').trim();
+                    const result = JSON.parse(cleanStdout);
+                    resolveOnce(result);
+                }
+                catch (parseError) {
+                    // Failed to parse result - return raw output (truncated)
+                    const truncatedOutput = stdout.substring(0, 200);
+                    this.logger.error(`[ContainerExecution] Failed to parse JSON: ${parseError.message}. Raw output: ${truncatedOutput}`);
+                    resolveOnce({
+                        success: false,
+                        output: truncatedOutput,
+                        logs: stderr ? [stderr] : [],
+                        executionTime: request.timeout,
+                        error: `Failed to parse execution result: ${parseError.message}`,
+                        timeout: false
+                    });
+                }
+            }
+            catch (error) {
+                this.logger.error(`[ContainerExecution] Execution error: ${error.message}`);
+                resolveOnce({
+                    success: false,
+                    output: null,
+                    logs: [],
+                    executionTime: 0,
+                    error: error.message || String(error),
+                    timeout: false
+                });
+            }
+        });
+    }
+    /**
+     * Destroy a container with logging
+     */
+    async destroyContainer(container, requestId) {
+        try {
+            // Stop if running
+            try {
+                await container.stop({ t: 0 });
+            }
+            catch {
+                // May already be stopped
+            }
+            // Remove
+            await container.remove({ force: true });
+        }
+        catch (error) {
+            this.logger.warn(`Failed to destroy container`, {
+                error: error.message,
+                requestId
+            });
+        }
+    }
+    /**
+     * Check if the code executor image exists
+     */
+    async checkImageExists() {
+        try {
+            const image = this.docker.getImage(this.getImageName());
+            await image.inspect();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get full image name with tag
+     */
+    getImageName() {
+        return `${this.config.imageName}:${this.config.imageTag}`;
+    }
+    /**
+     * Get the latest modification time of source files (Dockerfile and executor.ts)
+     * Returns 0 if source files cannot be found
+     */
+    getSourceFilesModTime() {
+        const possiblePaths = [CODE_EXECUTOR_DIR];
+        for (const basePath of possiblePaths) {
+            const dockerfilePath = path.join(basePath, 'Dockerfile');
+            const executorPath = path.join(basePath, 'executor.ts');
+            if (fs.existsSync(dockerfilePath) && fs.existsSync(executorPath)) {
+                const dockerfileMtime = fs.statSync(dockerfilePath).mtimeMs;
+                const executorMtime = fs.statSync(executorPath).mtimeMs;
+                return Math.max(dockerfileMtime, executorMtime);
+            }
+        }
+        return 0; // Can't find source files
+    }
+    /**
+     * Get the Docker image creation timestamp
+     * Returns 0 if image doesn't exist or can't be inspected
+     */
+    async getImageCreatedTime() {
+        try {
+            const image = this.docker.getImage(this.getImageName());
+            const inspectData = await image.inspect();
+            const createdStr = inspectData.Created; // ISO 8601 timestamp
+            return new Date(createdStr).getTime();
+        }
+        catch {
+            return 0; // Image doesn't exist
+        }
+    }
+    /**
+     * Check if Docker is available
+     */
+    isDockerAvailable() {
+        return this.dockerAvailable;
+    }
+    /**
+     * Check if the service is initialized
+     */
+    isInitialized() {
+        return this.initialized;
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Shutdown the execution manager
+     */
+    async shutdown() {
+        this.logger.info('Shutting down container execution manager');
+        this.initialized = false;
+        this.dockerAvailable = false;
+    }
+}
+// Export alias for backwards compatibility during migration
+export { ContainerExecutionManager as ContainerPoolManager };
+//# sourceMappingURL=ContainerExecutionManager.js.map

package/dist/services/ContainerExecutionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerExecutionManager.js","sourceRoot":"","sources":["../../src/services/ContainerExecutionManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,+EAA+E;AAC/E,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAqD9E;;GAEG;AACH,MAAM,cAAc,GAA6B;IAC7C,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC;IACzE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAC;IAClE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC;IACvE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,KAAK,CAAC;IAClE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,KAAK,CAAC;IAC9D,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,EAAE,eAAe;IACrF,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB;IAC5E,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ;CACnE,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAC1B,MAAM,CAAC,QAAQ,CAA4B;IAC3C,MAAM,CAAS;IACf,MAAM,CAAS;IACf,MAAM,CAA2B;IACjC,WAAW,GAAY,KAAK,CAAC;IAC7B,eAAe,GAAY,KAAK,CAAC;IAEzC,YAAoB,MAA0C;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,2BAA2B,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,MAA0C;QAChE,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,CAAC;YACtC,yBAAyB,CAAC,QAAQ,GAAG,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,yBAAyB,CAAC,QAAQ,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,UAAU;QACnB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,eAAe,CAAC;QAChC,CAAC;QAED,IAAI,CAAC;YACD,iCAAiC;YACjC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAE/C,+CAA+C;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,MAAM,EAAE,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;oBACvG,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,OAAO,IAAI,CAAC,eAAe,CAAC;YAChC,CAAC;YAED,wBAAwB;YACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAElD,IAAI,WAAW,EAAE,CAAC;gBACd,6CAA6C;gBAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACnD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAE1D,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;oBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;oBACzF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBAChF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBAE/E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;wBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;oBACrF,CAAC;yBAAM,CAAC;wBACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBACjF,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,2BAA2B;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;gBACjG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;oBAC/F,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBACjC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC,eAAe,CAAC;QAEhC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,sCAAsC;YAC/D,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG,iBAAiB,CAAC;YACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,cAAc,oEAAoE,CAAC,CAAC;gBAClJ,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,cAAc,KAAK,CAAC,CAAC;YAEpE,sEAAsE;YACtE,wEAAwE;YACxE,iDAAiD;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CACvC;gBACI,OAAO,EAAE,cAAc;gBACvB,GAAG,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;aACrC,EACD;gBACI,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE;gBACtB,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,IAAI;aAChB,CACJ,CAAC;YAEF,4CAA4C;YAC5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAC5B,MAAM,EACN,CAAC,GAAiB,EAAE,MAAW,EAAE,EAAE;oBAC/B,IAAI,GAAG,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACJ,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC,EACD,CAAC,KAAU,EAAE,EAAE;oBACX,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACf,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBACjC,IAAI,IAAI,EAAE,CAAC;4BACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;wBAC/C,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;wBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5D,CAAC;gBACL,CAAC,CACJ,CAAC;YACN,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QAEhB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAAC,OAAkC;QACnD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACxB,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,EAAE;gBACR,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,KAAK;aACjB,CAAC;QACN,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,YAAY,MAAM,EAAE,EAAE,CAAC;QAE3C,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACpB,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAC7C,IAAI,CAAC,MAAM,CAAC,UAAU,CACzB,CAAC;QAEF,IAAI,CAAC;YACD,qEAAqE;YACrE,MAAM,gBAAgB,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAElF,4EAA4E;YAC5E,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAExB,iDAAiD;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAE1E,oBAAoB;YACpB,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEnE,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,EAAE;gBAC9D,WAAW;gBACX,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS;aACxC,CAAC,CAAC;YAEH,+BAA+B;YAC/B,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAE3E,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,EAAE;gBACR,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACrC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;gBACrC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;aAC9C,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,WAAmB,EAAE,SAAkB;QACxE,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,YAAiB,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,WAAW,EAAE,EAAE;gBAC5D,KAAK,EAAE,YAAY,CAAC,OAAO;gBAC3B,SAAS;aACZ,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,qBAAqB,CAC/B,IAAY,EACZ,OAAmC;QAEnC,yEAAyE;QACzE,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAChD,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE;YAC1B,GAAG,EAAE,GAAG;YACR,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,GAAG,EAAE,KAAK;YACV,UAAU,EAAE;gBACR,wCAAwC;gBACxC,WAAW,EAAE,MAAM;gBAEnB,6CAA6C;gBAC7C,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE;oBACH,MAAM,EAAE,2BAA2B;iBACtC;gBAED,yBAAyB;gBACzB,OAAO,EAAE,CAAC,KAAK,CAAC;gBAEhB,iBAAiB;gBACjB,UAAU,EAAE,KAAK;gBAEjB,8BAA8B;gBAC9B,WAAW,EAAE,CAAC,wBAAwB,CAAC;gBAEvC,kBAAkB;gBAClB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,sBAAsB;gBACrE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU;gBAC7D,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,sBAAsB;gBAExE,YAAY;gBACZ,SAAS,EAAE,EAAE;gBAEb,UAAU;gBACV,OAAO,EAAE;oBACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;oBACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;iBACxC;gBAED,yBAAyB;gBACzB,UAAU,EAAE,KAAK,CAAC,6BAA6B;aAClD;YACD,iBAAiB;YACjB,IAAI,EAAE,WAAW;SACpB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,kBAAkB,CAC5B,SAA2B,EAC3B,OAAkC;QAElC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjC,yDAAyD;YACzD,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,WAAW,GAAG,CAAC,MAAgC,EAAE,EAAE;gBACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,QAAQ,GAAG,IAAI,CAAC;oBAChB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;YACL,CAAC,CAAC;YAEF,kCAAkC;YAClC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,WAAW,CAAC;oBACR,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,EAAE;oBACR,aAAa,EAAE,OAAO,CAAC,OAAO;oBAC9B,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,IAAI;iBAChB,CAAC,CAAC;YACP,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAEhD,IAAI,CAAC;gBACD,+DAA+D;gBAC/D,2DAA2D;gBAC3D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;oBAClC,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;iBACf,CAAC,CAAC;gBAEH,iBAAiB;gBACjB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAEhB,uEAAuE;gBACvE,MAAM,YAAY,GAAG,IAAI,QAAQ,CAAC;oBAC9B,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ;wBAC3B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBAC3B,QAAQ,EAAE,CAAC;oBACf,CAAC;iBACJ,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,IAAI,QAAQ,CAAC;oBAC9B,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ;wBAC3B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBAC3B,QAAQ,EAAE,CAAC;oBACf,CAAC;iBACJ,CAAC,CAAC;gBAEH,sEAAsE;gBACtE,4EAA4E;gBAC5E,qEAAqE;gBACrE,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;oBACvE,IAAI,WAAW,GAAG,KAAK,CAAC;oBACxB,IAAI,cAAc,GAAG,KAAK,CAAC;oBAC3B,IAAI,cAAc,GAAG,KAAK,CAAC;oBAE3B,MAAM,eAAe,GAAG,GAAG,EAAE;wBACzB,IAAI,WAAW,IAAI,cAAc,IAAI,cAAc,EAAE,CAAC;4BAClD,aAAa,EAAE,CAAC;wBACpB,CAAC;oBACL,CAAC,CAAC;oBAEF,qEAAqE;oBACrE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBAClB,WAAW,GAAG,IAAI,CAAC;wBACnB,2DAA2D;wBAC3D,YAAY,CAAC,GAAG,EAAE,CAAC;wBACnB,YAAY,CAAC,GAAG,EAAE,CAAC;wBACnB,eAAe,EAAE,CAAC;oBACtB,CAAC,CAAC,CAAC;oBAEH,mDAAmD;oBACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpB,IAAI,CAAC,WAAW,EAAE,CAAC;4BACf,WAAW,GAAG,IAAI,CAAC;4BACnB,YAAY,CAAC,GAAG,EAAE,CAAC;4BACnB,YAAY,CAAC,GAAG,EAAE,CAAC;4BACnB,eAAe,EAAE,CAAC;wBACtB,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,oCAAoC;oBACpC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACvB,YAAY,CAAC,GAAG,CAAC,CAAC;oBACtB,CAAC,CAAC,CAAC;oBAEH,2EAA2E;oBAC3E,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;wBAC3B,cAAc,GAAG,IAAI,CAAC;wBACtB,eAAe,EAAE,CAAC;oBACtB,CAAC,CAAC,CAAC;oBAEH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;wBAC3B,cAAc,GAAG,IAAI,CAAC;wBACtB,eAAe,EAAE,CAAC;oBACtB,CAAC,CAAC,CAAC;oBAEH,gCAAgC;oBAChC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC7B,YAAY,CAAC,GAAG,CAAC,CAAC;oBACtB,CAAC,CAAC,CAAC;oBAEH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC7B,YAAY,CAAC,GAAG,CAAC,CAAC;oBACtB,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;gBAEH,mEAAmE;gBACnE,gFAAgF;gBAChF,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;gBAEhE,iEAAiE;gBACjE,mFAAmF;gBACnF,MAAM,OAAO,CAAC,GAAG,CAAC;oBACd,SAAS,CAAC,IAAI,EAAE;oBAChB,gBAAgB;iBACnB,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC;gBAE9I,gEAAgE;gBAChE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBACjB,WAAW,CAAC;wBACR,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;wBAC5B,aAAa,EAAE,OAAO,CAAC,OAAO;wBAC9B,KAAK,EAAE,8BAA8B;wBACrC,OAAO,EAAE,KAAK;qBACjB,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,CAAC;oBACD,yEAAyE;oBACzE,IAAI,aAAa,GAAG,MAAM,CAAC;oBAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;wBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,MAAM,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,QAAQ,CAAC,CAAC;wBAC3G,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBACnE,CAAC;oBAED,gEAAgE;oBAChE,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBACtE,MAAM,MAAM,GAA6B,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBACjE,WAAW,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,UAAe,EAAE,CAAC;oBACvB,yDAAyD;oBACzD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,UAAU,CAAC,OAAO,iBAAiB,eAAe,EAAE,CAAC,CAAC;oBACtH,WAAW,CAAC;wBACR,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,eAAe;wBACvB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;wBAC5B,aAAa,EAAE,OAAO,CAAC,OAAO;wBAC9B,KAAK,EAAE,qCAAqC,UAAU,CAAC,OAAO,EAAE;wBAChE,OAAO,EAAE,KAAK;qBACjB,CAAC,CAAC;gBACP,CAAC;YAEL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC5E,WAAW,CAAC;oBACR,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,EAAE;oBACR,aAAa,EAAE,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;oBACrC,OAAO,EAAE,KAAK;iBACjB,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,SAA2B,EAAE,SAAkB;QAC1E,IAAI,CAAC;YACD,kBAAkB;YAClB,IAAI,CAAC;gBACD,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACL,yBAAyB;YAC7B,CAAC;YAED,SAAS;YACT,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,SAAS;aACZ,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC1B,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY;QAChB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACK,qBAAqB;QACzB,MAAM,aAAa,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE1C,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAExD,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/D,MAAM,eAAe,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;gBAC5D,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;gBACxD,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC,CAAC,0BAA0B;IACxC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,mBAAmB;QAC7B,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,qBAAqB;YAC7D,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,CAAC,CAAC,sBAAsB;QACpC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,iBAAiB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,SAAS;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IACjC,CAAC;CACJ;AAED,4DAA4D;AAC5D,OAAO,EAAE,yBAAyB,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/services/ContainerPoolManager.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ContainerPoolManager.ts
+ *
+ * @deprecated Use ContainerExecutionManager instead.
+ * This file is kept for backwards compatibility.
+ */
+export { ContainerExecutionManager as ContainerPoolManager } from './ContainerExecutionManager.js';
+export type { ContainerExecutionConfig as ContainerPoolConfig, ContainerExecutionRequest, ContainerExecutionResult } from './ContainerExecutionManager.js';
+//# sourceMappingURL=ContainerPoolManager.d.ts.map

package/dist/services/ContainerPoolManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerPoolManager.d.ts","sourceRoot":"","sources":["../../src/services/ContainerPoolManager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,yBAAyB,IAAI,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACnG,YAAY,EACR,wBAAwB,IAAI,mBAAmB,EAC/C,yBAAyB,EACzB,wBAAwB,EAC3B,MAAM,gCAAgC,CAAC"}

package/dist/services/ContainerPoolManager.js

@@ -0,0 +1,8 @@
+/**
+ * ContainerPoolManager.ts
+ *
+ * @deprecated Use ContainerExecutionManager instead.
+ * This file is kept for backwards compatibility.
+ */
+export { ContainerExecutionManager as ContainerPoolManager } from './ContainerExecutionManager.js';
+//# sourceMappingURL=ContainerPoolManager.js.map

package/dist/services/ContainerPoolManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerPoolManager.js","sourceRoot":"","sources":["../../src/services/ContainerPoolManager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,yBAAyB,IAAI,oBAAoB,EAAE,MAAM,gCAAgC,CAAC"}