@namzu/sandbox 23.0.1 → 25.0.0

package/dist/local-virtual-computer/client.js

@@ -0,0 +1,503 @@
+import { generateSandboxId, walkFilesViaExec } from '@namzu/sdk';
+import { HttpWorkerClient, workerAuthorization } from '../backends/http-worker-client.js';
+import { RemoteCancellationUnknownError } from '../backends/remote-execution-controller.js';
+import { startDetachedGuestProcess } from './detached-process.js';
+import { openGuestStdio } from './guest-stdio.js';
+export function localComputerClients(options) {
+    let active = true;
+    let busy = 0;
+    let mode = 'pal';
+    let uncertain = false;
+    let screenEpoch = 0;
+    let needsFreshScreen = false;
+    let stopping;
+    const detached = new Set();
+    const stdio = new Set();
+    const heldKeyboards = new Map();
+    const assertActive = () => {
+        if (!active)
+            throw new Error('This Pal computer lease has ended');
+    };
+    const assertCertain = () => {
+        if (uncertain)
+            throw new Error('The Pal computer operation outcome is unknown. Stop this computer before retrying.');
+    };
+    const assertPal = () => {
+        assertActive();
+        assertCertain();
+        if (mode !== 'pal')
+            throw new Error('The operator has control of this Pal computer');
+    };
+    const stop = (destroyOptions) => {
+        active = false;
+        if (stopping)
+            return stopping;
+        stopping = options
+            .stop(destroyOptions?.signal)
+            .then(async () => {
+            for (const channel of stdio)
+                channel.allocationEnded();
+            stdio.clear();
+            // Guest removal is confirmed first. These pipes may now end without
+            // being mistaken for proof that a guest process was stopped.
+            for (const process of detached)
+                process.child.kill('SIGKILL');
+            await Promise.all([...detached].map((process) => process.closed));
+        })
+            .catch((error) => {
+            stopping = undefined;
+            throw error;
+        });
+        return stopping;
+    };
+    const headers = {
+        'content-type': 'application/json',
+        ...workerAuthorization(options.token),
+    };
+    // A successfully completed foreground launcher may leave applications owned
+    // by this exclusive computer. Detached jobs use their own strict client.
+    const worker = new HttpWorkerClient(options.executionUrl, options.token, options.normalExitPolicy ?? 'computer-lifetime');
+    const request = async (route, body, signal) => {
+        assertPal();
+        busy += 1;
+        try {
+            const response = await fetch(`${options.executionUrl}${route}`, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(body),
+                signal,
+            });
+            if (!response.ok) {
+                if (route === '/write-file' && response.status >= 500)
+                    uncertain = true;
+                throw Object.assign(new Error(`The Pal file worker refused the operation (${response.status})`), { refused: true });
+            }
+            const result = (await response.json());
+            if (route === '/write-file' && result.ok !== true)
+                uncertain = true;
+            return result;
+        }
+        catch (error) {
+            if (route === '/write-file' && !(error && typeof error === 'object' && 'refused' in error))
+                uncertain = true;
+            throw error;
+        }
+        finally {
+            busy -= 1;
+        }
+    };
+    let rangeLimit;
+    const requireRangeSupport = async (signal) => {
+        if (rangeLimit !== undefined)
+            return rangeLimit;
+        let result;
+        try {
+            result = await request('/read-file', { capabilitiesOnly: true }, signal);
+        }
+        catch (error) {
+            signal?.throwIfAborted();
+            throw new Error('This Pal computer worker did not confirm bounded file reads. Rebuild the local Pal image from the same Namzu release before inspecting artifact images.', { cause: error });
+        }
+        const capability = result.readFileRanges;
+        if (result.ok !== true ||
+            !capability ||
+            typeof capability !== 'object' ||
+            !('version' in capability) ||
+            capability.version !== 1 ||
+            !('maxBytes' in capability) ||
+            typeof capability.maxBytes !== 'number' ||
+            !Number.isSafeInteger(capability.maxBytes) ||
+            capability.maxBytes < 1 ||
+            capability.maxBytes > 32 * 1024 * 1024)
+            throw new Error('This Pal computer worker does not acknowledge bounded file reads.');
+        rangeLimit = capability.maxBytes;
+        return rangeLimit;
+    };
+    const sandbox = {
+        id: generateSandboxId(),
+        environment: 'linux-namespace',
+        rootDir: '/home/namzu/workspace',
+        get status() {
+            return !active ? 'destroyed' : busy > 0 || uncertain ? 'busy' : 'ready';
+        },
+        async openStdio(command, args = [], spawnOptions) {
+            const acquire = async (signal) => {
+                signal?.throwIfAborted();
+                assertPal();
+                busy += 1;
+                let released = false;
+                const release = () => {
+                    if (!released) {
+                        released = true;
+                        busy -= 1;
+                    }
+                };
+                try {
+                    await spawnOptions?.assertExecutionAllowed?.();
+                    signal?.throwIfAborted();
+                    assertPal();
+                    return release;
+                }
+                catch (error) {
+                    release();
+                    throw error;
+                }
+            };
+            const release = await acquire(spawnOptions?.signal);
+            try {
+                const channel = await openGuestStdio({
+                    executionUrl: options.executionUrl,
+                    token: options.token,
+                    acquire,
+                    uncertain: () => {
+                        uncertain = true;
+                    },
+                }, command, args, {
+                    ...spawnOptions,
+                    assertExecutionAllowed: async () => {
+                        await spawnOptions?.assertExecutionAllowed?.();
+                        assertPal();
+                    },
+                });
+                stdio.add(channel);
+                void channel.closed.then(() => stdio.delete(channel), () => stdio.delete(channel));
+                return channel;
+            }
+            finally {
+                release();
+            }
+        },
+        spawnDetached(command, args, spawnOptions) {
+            assertPal();
+            const process = startDetachedGuestProcess({
+                executionUrl: options.executionUrl,
+                token: options.token,
+                retire: stop,
+                workerPath: options.detachedWorkerPath,
+            }, command, args, spawnOptions);
+            detached.add(process);
+            void process.closed.then(() => detached.delete(process));
+            return process;
+        },
+        async exec(command, args, opts) {
+            assertPal();
+            busy += 1;
+            try {
+                return await worker.exec(command, args, opts);
+            }
+            catch (error) {
+                if (error instanceof RemoteCancellationUnknownError) {
+                    try {
+                        await stop();
+                        error.retirement = { accepted: true };
+                    }
+                    catch (retirementError) {
+                        error.retirement = {
+                            accepted: false,
+                            error: retirementError instanceof Error
+                                ? retirementError
+                                : new Error('Computer retirement failed'),
+                        };
+                    }
+                }
+                throw error;
+            }
+            finally {
+                busy -= 1;
+            }
+        },
+        async writeFile(path, content) {
+            const bytes = Buffer.isBuffer(content) ? content : Buffer.from(content);
+            const result = await request('/write-file', {
+                path,
+                content: bytes.toString('base64'),
+                encoding: 'base64',
+            });
+            if (result.ok !== true)
+                throw new Error('The Pal file worker did not confirm the write');
+        },
+        async readFile(path, readOptions) {
+            readOptions?.signal?.throwIfAborted();
+            assertPal();
+            const ranged = readOptions?.offset !== undefined || readOptions?.length !== undefined;
+            const offset = readOptions?.offset ?? 0;
+            const length = readOptions?.length;
+            if (ranged &&
+                (!Number.isSafeInteger(offset) ||
+                    offset < 0 ||
+                    (length !== undefined &&
+                        (!Number.isSafeInteger(length) || length < 0 || length > 32 * 1024 * 1024))))
+                throw new Error('Invalid or oversized Pal file read range');
+            const limit = ranged ? await requireRangeSupport(readOptions?.signal) : undefined;
+            if (length !== undefined && limit !== undefined && length > limit)
+                throw new Error('The requested file range exceeds this Pal worker’s acknowledged limit');
+            const range = {
+                version: 1,
+                offset,
+                ...(length === undefined ? {} : { length }),
+            };
+            const result = await request('/read-file', { path, encoding: 'base64', ...(ranged ? { range } : {}) }, readOptions?.signal);
+            if (result.ok !== true || typeof result.content !== 'string')
+                throw new Error('The Pal file worker did not return a file');
+            if (ranged) {
+                const received = result.range;
+                if (!received ||
+                    typeof received !== 'object' ||
+                    !('version' in received) ||
+                    received.version !== 1 ||
+                    !('offset' in received) ||
+                    received.offset !== offset ||
+                    !('length' in received) ||
+                    received.length !== (length ?? null))
+                    throw new Error('The Pal file worker did not confirm the requested byte range');
+                const maximum = length ?? limit ?? 0;
+                if (result.content.length > Math.ceil(maximum / 3) * 4)
+                    throw new Error('The Pal file worker exceeded the requested byte range');
+            }
+            const bytes = Buffer.from(result.content, 'base64');
+            if (ranged &&
+                (bytes.length > (length ?? limit ?? 0) ||
+                    result.sizeBytes !== bytes.length ||
+                    bytes.toString('base64') !== result.content))
+                throw new Error('The Pal file worker returned invalid bounded file bytes');
+            return bytes;
+        },
+        async listFiles(rootPath) {
+            assertPal();
+            const entries = [];
+            for await (const entry of walkFilesViaExec((...args) => sandbox.exec(...args), rootPath, {
+                maxEntries: 100_000,
+            }))
+                entries.push(entry);
+            return entries;
+        },
+        walkFiles(rootPath, walkOptions) {
+            assertPal();
+            return walkFilesViaExec((...args) => sandbox.exec(...args), rootPath, walkOptions);
+        },
+        destroy: stop,
+    };
+    const executeDesktop = async (action, operator, transitionRelease = false) => {
+        assertActive();
+        const held = action.type === 'key_down' || action.type === 'key_up' || action.type === 'release_keys';
+        if (held && (!operator || !options.heldKeyboard))
+            throw new Error('This Pal computer does not support operator held keyboard input');
+        const mutation = action.type !== 'screenshot' && action.type !== 'cursor_position';
+        const epoch = screenEpoch;
+        if (mutation) {
+            assertCertain();
+            if (operator) {
+                if (mode !== 'operator' &&
+                    !(transitionRelease && mode === 'transitioning' && action.type === 'release_keys'))
+                    throw new Error('The operator does not have control of this Pal computer');
+            }
+            else {
+                assertPal();
+                if (needsFreshScreen)
+                    throw new Error('Capture a fresh Pal desktop screenshot before sending input');
+            }
+        }
+        busy += 1;
+        try {
+            let response;
+            let result;
+            try {
+                response = await fetch(`${options.desktopUrl}/action`, {
+                    method: 'POST',
+                    headers,
+                    body: JSON.stringify(action),
+                    signal: AbortSignal.timeout(30_000),
+                });
+                if (response.status >= 500)
+                    throw new Error('Desktop outcome was not confirmed');
+                if (!response.ok)
+                    throw Object.assign(new Error(`The Pal desktop refused the action (${response.status})`), { refused: true });
+                const raw = await response.json();
+                if (!raw || typeof raw !== 'object')
+                    throw new Error('Invalid desktop confirmation');
+                result = raw;
+                if (action.type !== 'screenshot' &&
+                    action.type !== 'cursor_position' &&
+                    result.type !== 'ok' &&
+                    result.outcome !== 'unknown')
+                    throw new Error('Desktop mutation was not confirmed');
+            }
+            catch (error) {
+                if (error && typeof error === 'object' && 'refused' in error)
+                    throw error;
+                if (mutation) {
+                    uncertain = true;
+                    throw Object.assign(new Error('The Pal desktop action may have run; do not automatically replay it'), {
+                        code: 'computer_use_outcome_unknown',
+                        action: action.type,
+                        outcome: 'unknown',
+                        retrySafety: 'unsafe',
+                    });
+                }
+                throw new Error('The Pal desktop is not responding');
+            }
+            if (result.outcome === 'unknown') {
+                uncertain = true;
+                throw Object.assign(new Error('The Pal desktop action has an unknown outcome'), {
+                    code: 'computer_use_outcome_unknown',
+                    action: action.type,
+                    outcome: 'unknown',
+                    retrySafety: 'unsafe',
+                });
+            }
+            if (held && result.type === 'ok') {
+                if (action.type === 'key_down') {
+                    const keys = heldKeyboards.get(action.keyboardId) ?? new Set();
+                    keys.add(action.key);
+                    heldKeyboards.set(action.keyboardId, keys);
+                }
+                else if (action.type === 'key_up') {
+                    const keys = heldKeyboards.get(action.keyboardId);
+                    keys?.delete(action.key);
+                    if (!keys?.size)
+                        heldKeyboards.delete(action.keyboardId);
+                }
+                else if (action.type === 'release_keys')
+                    heldKeyboards.delete(action.keyboardId);
+            }
+            if (action.type === 'screenshot' &&
+                result.type === 'screenshot' &&
+                typeof result.data === 'string') {
+                const data = Buffer.from(result.data, 'base64');
+                if (data.length < 24 || data.toString('hex', 0, 8) !== '89504e470d0a1a0a')
+                    throw new Error('The Pal desktop returned an invalid PNG');
+                const width = data.readUInt32BE(16);
+                const height = data.readUInt32BE(20);
+                if (mode === 'pal' && epoch === screenEpoch)
+                    needsFreshScreen = false;
+                return {
+                    type: 'screenshot',
+                    result: {
+                        data,
+                        mimeType: 'image/png',
+                        width,
+                        height,
+                        display: {
+                            id: 'pal-display',
+                            x: 0,
+                            y: 0,
+                            width,
+                            height,
+                            scaleFactor: 1,
+                            primary: true,
+                        },
+                    },
+                };
+            }
+            if (action.type === 'cursor_position' &&
+                result.type === 'cursor_position' &&
+                result.point &&
+                Number.isFinite(result.point.x) &&
+                Number.isFinite(result.point.y))
+                return { type: 'cursor_position', point: result.point };
+            if (action.type !== 'screenshot' && action.type !== 'cursor_position' && result.type === 'ok')
+                return { type: 'ok' };
+            throw new Error('The Pal desktop returned an invalid action result');
+        }
+        finally {
+            busy -= 1;
+        }
+    };
+    const computerUseHost = {
+        id: 'pal-local-container-desktop',
+        capabilities: {
+            displayServer: 'x11',
+            screenshot: true,
+            mouse: true,
+            keyboard: true,
+            cursorPosition: true,
+            clipboard: false,
+            supportedActions: [
+                'screenshot',
+                'cursor_position',
+                'mouse_move',
+                'mouse_click',
+                'mouse_drag',
+                'scroll',
+                'type_text',
+                'key',
+            ],
+            mouseClickButtons: ['left', 'middle', 'right'],
+            mouseDragButtons: ['left', 'middle', 'right'],
+        },
+        async getDisplayGeometry() {
+            assertActive();
+            return options.geometry;
+        },
+        execute: (action) => executeDesktop(action, false),
+    };
+    const transfer = async (from, to) => {
+        assertActive();
+        assertCertain();
+        if (mode !== from)
+            throw new Error(`This Pal computer is not controlled by ${from}`);
+        // This synchronous reservation excludes new guest work before the idle check.
+        mode = 'transitioning';
+        if (busy > 0 || detached.size > 0) {
+            mode = from;
+            throw new Error('Wait for all Pal computer work and background jobs to stop before changing control');
+        }
+        try {
+            if (to === 'pal')
+                for (const keyboardId of heldKeyboards.keys())
+                    await executeDesktop({ type: 'release_keys', keyboardId }, true, true);
+            screenEpoch += 1;
+            needsFreshScreen = to === 'pal';
+            mode = to;
+        }
+        catch (error) {
+            mode = from;
+            throw error;
+        }
+    };
+    const operatorControl = {
+        ...(options.heldKeyboard ? { heldKeyboard: true } : {}),
+        get mode() {
+            return mode;
+        },
+        async takeOver() {
+            await transfer('pal', 'operator');
+        },
+        async returnControl() {
+            await transfer('operator', 'pal');
+        },
+        executeInput(input) {
+            if (![
+                'mouse_move',
+                'mouse_click',
+                'mouse_drag',
+                'scroll',
+                'type_text',
+                'key',
+                'key_down',
+                'key_up',
+                'release_keys',
+            ].includes(input.type))
+                throw new Error('Only desktop input is supported for operator control');
+            return executeDesktop(input, true);
+        },
+    };
+    const screenStream = options.screenStream
+        ? (() => {
+            const url = new URL('/stream', options.desktopUrl);
+            if (url.protocol !== 'http:' ||
+                url.hostname !== '127.0.0.1' ||
+                url.username ||
+                url.password)
+                throw new Error('The Pal screen stream must use the owned guest loopback transport');
+            url.protocol = 'ws:';
+            return Object.freeze({
+                protocol: 'rfb',
+                url: url.href,
+                authorization: `Bearer ${options.token}`,
+            });
+        })()
+        : undefined;
+    return { sandbox, computerUseHost, operatorControl, ...(screenStream ? { screenStream } : {}) };
+}
+//# sourceMappingURL=client.js.map

package/dist/local-virtual-computer/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/local-virtual-computer/client.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAA6B,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAC5F,OAAO,EAA+B,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAgB9E,MAAM,UAAU,oBAAoB,CAAC,OAAmC;IAMvE,IAAI,MAAM,GAAG,IAAI,CAAA;IACjB,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,IAAI,GAA+B,KAAK,CAAA;IAC5C,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,QAAmC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAA;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC/C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,YAAY,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,MAAM,aAAa,GAAG,GAAG,EAAE;QAC1B,IAAI,SAAS;YACZ,MAAM,IAAI,KAAK,CACd,oFAAoF,CACpF,CAAA;IACH,CAAC,CAAA;IACD,MAAM,SAAS,GAAG,GAAG,EAAE;QACtB,YAAY,EAAE,CAAA;QACd,aAAa,EAAE,CAAA;QACf,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACrF,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,CAAC,cAAsC,EAAiB,EAAE;QACtE,MAAM,GAAG,KAAK,CAAA;QACd,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,QAAQ,GAAG,OAAO;aAChB,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;aAC5B,IAAI,CAAC,KAAK,IAAI,EAAE;YAChB,KAAK,MAAM,OAAO,IAAI,KAAK;gBAAE,OAAO,CAAC,eAAe,EAAE,CAAA;YACtD,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,oEAAoE;YACpE,6DAA6D;YAC7D,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7D,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAClE,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,QAAQ,GAAG,SAAS,CAAA;YACpB,MAAM,KAAK,CAAA;QACZ,CAAC,CAAC,CAAA;QACH,OAAO,QAAQ,CAAA;IAChB,CAAC,CAAA;IACD,MAAM,OAAO,GAAG;QACf,cAAc,EAAE,kBAAkB;QAClC,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAA;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAClC,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,gBAAgB,IAAI,mBAAmB,CAC/C,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAE,IAAa,EAAE,MAAoB,EAAE,EAAE;QAC5E,SAAS,EAAE,CAAA;QACX,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM;aACN,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,IAAI,KAAK,KAAK,aAAa,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAAE,SAAS,GAAG,IAAI,CAAA;gBACvE,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC3E,EAAE,OAAO,EAAE,IAAI,EAAE,CACjB,CAAA;YACF,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;YACjE,IAAI,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;gBAAE,SAAS,GAAG,IAAI,CAAA;YACnE,OAAO,MAAM,CAAA;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,KAAK,aAAa,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,CAAC;gBACzF,SAAS,GAAG,IAAI,CAAA;YACjB,MAAM,KAAK,CAAA;QACZ,CAAC;gBAAS,CAAC;YACV,IAAI,IAAI,CAAC,CAAA;QACV,CAAC;IACF,CAAC,CAAA;IACD,IAAI,UAA8B,CAAA;IAClC,MAAM,mBAAmB,GAAG,KAAK,EAAE,MAAoB,EAAE,EAAE;QAC1D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAA;QAC/C,IAAI,MAA+B,CAAA;QACnC,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,MAAM,IAAI,KAAK,CACd,yJAAyJ,EACzJ,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAA;QACF,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAA;QACxC,IACC,MAAM,CAAC,EAAE,KAAK,IAAI;YAClB,CAAC,UAAU;YACX,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;YAC1B,UAAU,CAAC,OAAO,KAAK,CAAC;YACxB,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC;YAC3B,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;YACvC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC1C,UAAU,CAAC,QAAQ,GAAG,CAAC;YACvB,UAAU,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAEtC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;QACrF,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAA;QAChC,OAAO,UAAU,CAAA;IAClB,CAAC,CAAA;IACD,MAAM,OAAO,GAAY;QACxB,EAAE,EAAE,iBAAiB,EAAE;QACvB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,uBAAuB;QAChC,IAAI,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACxE,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,YAAkC;YACrE,MAAM,OAAO,GAAG,KAAK,EAAE,MAAoB,EAAE,EAAE;gBAC9C,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,SAAS,EAAE,CAAA;gBACX,IAAI,IAAI,CAAC,CAAA;gBACT,IAAI,QAAQ,GAAG,KAAK,CAAA;gBACpB,MAAM,OAAO,GAAG,GAAG,EAAE;oBACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACf,QAAQ,GAAG,IAAI,CAAA;wBACf,IAAI,IAAI,CAAC,CAAA;oBACV,CAAC;gBACF,CAAC,CAAA;gBACD,IAAI,CAAC;oBACJ,MAAM,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAA;oBAC9C,MAAM,EAAE,cAAc,EAAE,CAAA;oBACxB,SAAS,EAAE,CAAA;oBACX,OAAO,OAAO,CAAA;gBACf,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAA;oBACT,MAAM,KAAK,CAAA;gBACZ,CAAC;YACF,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;YACnD,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,cAAc,CACnC;oBACC,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO;oBACP,SAAS,EAAE,GAAG,EAAE;wBACf,SAAS,GAAG,IAAI,CAAA;oBACjB,CAAC;iBACD,EACD,OAAO,EACP,IAAI,EACJ;oBACC,GAAG,YAAY;oBACf,sBAAsB,EAAE,KAAK,IAAI,EAAE;wBAClC,MAAM,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAA;wBAC9C,SAAS,EAAE,CAAA;oBACZ,CAAC;iBACD,CACD,CAAA;gBACD,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAClB,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CACvB,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAC3B,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAC3B,CAAA;gBACD,OAAO,OAAO,CAAA;YACf,CAAC;oBAAS,CAAC;gBACV,OAAO,EAAE,CAAA;YACV,CAAC;QACF,CAAC;QACD,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY;YACxC,SAAS,EAAE,CAAA;YACX,MAAM,OAAO,GAAG,yBAAyB,CACxC;gBACC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,OAAO,CAAC,kBAAkB;aACtC,EACD,OAAO,EACP,IAAI,EACJ,YAAY,CACZ,CAAA;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrB,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YACxD,OAAO,OAAO,CAAA;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI;YAC7B,SAAS,EAAE,CAAA;YACX,IAAI,IAAI,CAAC,CAAA;YACT,IAAI,CAAC;gBACJ,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACrD,IAAI,CAAC;wBACJ,MAAM,IAAI,EAAE,CAAA;wBACZ,KAAK,CAAC,UAAU,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;oBACtC,CAAC;oBAAC,OAAO,eAAe,EAAE,CAAC;wBAC1B,KAAK,CAAC,UAAU,GAAG;4BAClB,QAAQ,EAAE,KAAK;4BACf,KAAK,EACJ,eAAe,YAAY,KAAK;gCAC/B,CAAC,CAAC,eAAe;gCACjB,CAAC,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC;yBAC3C,CAAA;oBACF,CAAC;gBACF,CAAC;gBACD,MAAM,KAAK,CAAA;YACZ,CAAC;oBAAS,CAAC;gBACV,IAAI,IAAI,CAAC,CAAA;YACV,CAAC;QACF,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;gBAC3C,IAAI;gBACJ,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjC,QAAQ,EAAE,QAAQ;aAClB,CAAC,CAAA;YACF,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACzF,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAoC;YACxD,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;YACrC,SAAS,EAAE,CAAA;YACX,MAAM,MAAM,GAAG,WAAW,EAAE,MAAM,KAAK,SAAS,IAAI,WAAW,EAAE,MAAM,KAAK,SAAS,CAAA;YACrF,MAAM,MAAM,GAAG,WAAW,EAAE,MAAM,IAAI,CAAC,CAAA;YACvC,MAAM,MAAM,GAAG,WAAW,EAAE,MAAM,CAAA;YAClC,IACC,MAAM;gBACN,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;oBAC7B,MAAM,GAAG,CAAC;oBACV,CAAC,MAAM,KAAK,SAAS;wBACpB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;gBAE9E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACjF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,GAAG,KAAK;gBAChE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YACzF,MAAM,KAAK,GAAG;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM;gBACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAC3B,YAAY,EACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1D,WAAW,EAAE,MAAM,CACnB,CAAA;YACD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAC3D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAC7D,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAA;gBAC7B,IACC,CAAC,QAAQ;oBACT,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;oBACxB,QAAQ,CAAC,OAAO,KAAK,CAAC;oBACtB,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;oBACvB,QAAQ,CAAC,MAAM,KAAK,MAAM;oBAC1B,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;oBACvB,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;oBAEpC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;gBAChF,MAAM,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,CAAC,CAAA;gBACpC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;YAC1E,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACnD,IACC,MAAM;gBACN,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC;oBACrC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM;oBACjC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC;gBAE7C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;YAC3E,OAAO,KAAK,CAAA;QACb,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,QAAQ;YACvB,SAAS,EAAE,CAAA;YACX,MAAM,OAAO,GAAG,EAAE,CAAA;YAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE;gBACxF,UAAU,EAAE,OAAO;aACnB,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,OAAO,OAAO,CAAA;QACf,CAAC;QACD,SAAS,CAAC,QAAQ,EAAE,WAAW;YAC9B,SAAS,EAAE,CAAA;YACX,OAAO,gBAAgB,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,EAAE,IAAI;KACb,CAAA;IACD,MAAM,cAAc,GAAG,KAAK,EAC3B,MAA4C,EAC5C,QAAiB,EACjB,iBAAiB,GAAG,KAAK,EACI,EAAE;QAC/B,YAAY,EAAE,CAAA;QACd,MAAM,IAAI,GACT,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,CAAA;QACzF,IAAI,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;QACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAA;QAClF,MAAM,KAAK,GAAG,WAAW,CAAA;QACzB,IAAI,QAAQ,EAAE,CAAC;YACd,aAAa,EAAE,CAAA;YACf,IAAI,QAAQ,EAAE,CAAC;gBACd,IACC,IAAI,KAAK,UAAU;oBACnB,CAAC,CAAC,iBAAiB,IAAI,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC;oBAElF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;YAC5E,CAAC;iBAAM,CAAC;gBACP,SAAS,EAAE,CAAA;gBACX,IAAI,gBAAgB;oBACnB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;YAChF,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,CAAC;YACJ,IAAI,QAAkB,CAAA;YACtB,IAAI,MAKH,CAAA;YACD,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,SAAS,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACnC,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBAChF,IAAI,CAAC,QAAQ,CAAC,EAAE;oBACf,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,GAAG,CAAC,EACpE,EAAE,OAAO,EAAE,IAAI,EAAE,CACjB,CAAA;gBACF,MAAM,GAAG,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBAC1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBACpF,MAAM,GAAG,GAAoB,CAAA;gBAC7B,IACC,MAAM,CAAC,IAAI,KAAK,YAAY;oBAC5B,MAAM,CAAC,IAAI,KAAK,iBAAiB;oBACjC,MAAM,CAAC,IAAI,KAAK,IAAI;oBACpB,MAAM,CAAC,OAAO,KAAK,SAAS;oBAE5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK;oBAAE,MAAM,KAAK,CAAA;gBACzE,IAAI,QAAQ,EAAE,CAAC;oBACd,SAAS,GAAG,IAAI,CAAA;oBAChB,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,qEAAqE,CAAC,EAChF;wBACC,IAAI,EAAE,8BAA8B;wBACpC,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,OAAO,EAAE,SAAS;wBAClB,WAAW,EAAE,QAAQ;qBACrB,CACD,CAAA;gBACF,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,SAAS,GAAG,IAAI,CAAA;gBAChB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,EAAE;oBAC/E,IAAI,EAAE,8BAA8B;oBACpC,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,OAAO,EAAE,SAAS;oBAClB,WAAW,EAAE,QAAQ;iBACrB,CAAC,CAAA;YACH,CAAC;YACD,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;oBACtE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBACpB,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBAC3C,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;oBACjD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBACxB,IAAI,CAAC,IAAI,EAAE,IAAI;wBAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;gBACzD,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;oBAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACnF,CAAC;YACD,IACC,MAAM,CAAC,IAAI,KAAK,YAAY;gBAC5B,MAAM,CAAC,IAAI,KAAK,YAAY;gBAC5B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,kBAAkB;oBACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;gBACpC,IAAI,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW;oBAAE,gBAAgB,GAAG,KAAK,CAAA;gBACrE,OAAO;oBACN,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE;wBACP,IAAI;wBACJ,QAAQ,EAAE,WAAW;wBACrB,KAAK;wBACL,MAAM;wBACN,OAAO,EAAE;4BACR,EAAE,EAAE,aAAa;4BACjB,CAAC,EAAE,CAAC;4BACJ,CAAC,EAAE,CAAC;4BACJ,KAAK;4BACL,MAAM;4BACN,WAAW,EAAE,CAAC;4BACd,OAAO,EAAE,IAAI;yBACb;qBACD;iBACD,CAAA;YACF,CAAC;YACD,IACC,MAAM,CAAC,IAAI,KAAK,iBAAiB;gBACjC,MAAM,CAAC,IAAI,KAAK,iBAAiB;gBACjC,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAE/B,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;YACxD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAC5F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACrE,CAAC;gBAAS,CAAC;YACV,IAAI,IAAI,CAAC,CAAA;QACV,CAAC;IACF,CAAC,CAAA;IACD,MAAM,eAAe,GAAoB;QACxC,EAAE,EAAE,6BAA6B;QACjC,YAAY,EAAE;YACb,aAAa,EAAE,KAAK;YACpB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE;gBACjB,YAAY;gBACZ,iBAAiB;gBACjB,YAAY;gBACZ,aAAa;gBACb,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,KAAK;aACL;YACD,iBAAiB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;YAC9C,gBAAgB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;SAC7C;QACD,KAAK,CAAC,kBAAkB;YACvB,YAAY,EAAE,CAAA;YACd,OAAO,OAAO,CAAC,QAAQ,CAAA;QACxB,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;KAClD,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAwB,EAAE,EAAsB,EAAE,EAAE;QAC3E,YAAY,EAAE,CAAA;QACd,aAAa,EAAE,CAAA;QACf,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAA;QACpF,8EAA8E;QAC9E,IAAI,GAAG,eAAe,CAAA;QACtB,IAAI,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,GAAG,IAAI,CAAA;YACX,MAAM,IAAI,KAAK,CACd,oFAAoF,CACpF,CAAA;QACF,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,EAAE,KAAK,KAAK;gBACf,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,IAAI,EAAE;oBAC5C,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YACxE,WAAW,IAAI,CAAC,CAAA;YAChB,gBAAgB,GAAG,EAAE,KAAK,KAAK,CAAA;YAC/B,IAAI,GAAG,EAAE,CAAA;QACV,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,GAAG,IAAI,CAAA;YACX,MAAM,KAAK,CAAA;QACZ,CAAC;IACF,CAAC,CAAA;IACD,MAAM,eAAe,GAAuB;QAC3C,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI;YACP,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,QAAQ;YACb,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,aAAa;YAClB,MAAM,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QACD,YAAY,CAAC,KAAuB;YACnC,IACC,CAAC;gBACA,YAAY;gBACZ,aAAa;gBACb,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,KAAK;gBACL,UAAU;gBACV,QAAQ;gBACR,cAAc;aACd,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAEtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACxE,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACnC,CAAC;KACD,CAAA;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;QACxC,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;YAClD,IACC,GAAG,CAAC,QAAQ,KAAK,OAAO;gBACxB,GAAG,CAAC,QAAQ,KAAK,WAAW;gBAC5B,GAAG,CAAC,QAAQ;gBACZ,GAAG,CAAC,QAAQ;gBAEZ,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;YACrF,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAA;YACpB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,QAAQ,EAAE,KAAc;gBACxB,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;aACxC,CAAC,CAAA;QACH,CAAC,CAAC,EAAE;QACL,CAAC,CAAC,SAAS,CAAA;IACZ,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAChG,CAAC"}

package/dist/local-virtual-computer/detached-process.d.ts

@@ -0,0 +1,15 @@
+import type { SandboxDetachedProcess, SandboxSpawnOptions } from '@namzu/sdk';
+export interface DetachedProcessOptions {
+    readonly executionUrl: string;
+    readonly token: string;
+    readonly retire: () => Promise<void>;
+    /** Tests using source modules select the already built worker entry. */
+    readonly workerPath?: string;
+}
+export interface OwnedDetachedProcess extends SandboxDetachedProcess {
+    readonly closed: Promise<void>;
+    terminate(signal?: NodeJS.Signals): Promise<void>;
+}
+/** Credentials and command payload travel over private IPC, never argv. */
+export declare function startDetachedGuestProcess(options: DetachedProcessOptions, command: string, args?: readonly string[], spawnOptions?: SandboxSpawnOptions): OwnedDetachedProcess;
+//# sourceMappingURL=detached-process.d.ts.map

package/dist/local-virtual-computer/detached-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detached-process.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/detached-process.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAG7E,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjD;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,SAAS,MAAM,EAAO,EAC5B,YAAY,CAAC,EAAE,mBAAmB,GAChC,oBAAoB,CA4GtB"}

package/dist/local-virtual-computer/detached-process.js

@@ -0,0 +1,111 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+/** Credentials and command payload travel over private IPC, never argv. */
+export function startDetachedGuestProcess(options, command, args = [], spawnOptions) {
+    const child = spawn(process.execPath, [options.workerPath ?? fileURLToPath(new URL('./detached-worker.js', import.meta.url))], {
+        windowsHide: true,
+        stdio: ['ignore', 'pipe', 'pipe', 'ipc'],
+        env: { ...process.env, ELECTRON_RUN_AS_NODE: '1' },
+    });
+    let physicallyClosed = false;
+    let confirmed = false;
+    let recoveryRequired = false;
+    let retirement;
+    const waiters = new Set();
+    const closed = new Promise((resolve) => child.once('close', () => {
+        physicallyClosed = true;
+        resolve();
+        if (!confirmed)
+            void retire().catch(() => { });
+    }));
+    const acceptConfirmation = () => {
+        confirmed = true;
+        recoveryRequired = false;
+        void closed.then(() => {
+            for (const waiter of waiters)
+                waiter.resolve();
+            waiters.clear();
+        });
+    };
+    const retire = () => {
+        if (retirement)
+            return retirement;
+        const attempt = Promise.resolve()
+            .then(() => options.retire())
+            .then(() => {
+            acceptConfirmation();
+            if (child.connected)
+                child.send({ type: 'retired', confirmed: true }, () => { });
+        }, () => {
+            recoveryRequired = true;
+            const error = new Error('Guest termination and computer retirement could not be confirmed; operator recovery or a termination retry is required');
+            for (const waiter of waiters)
+                waiter.reject(error);
+            waiters.clear();
+            if (child.connected)
+                child.send({ type: 'retired', confirmed: false }, () => { });
+            throw error;
+        })
+            .finally(() => {
+            retirement = undefined;
+        });
+        retirement = attempt;
+        return attempt;
+    };
+    const requestCancellation = (signal) => {
+        if (confirmed)
+            return;
+        if (recoveryRequired || physicallyClosed) {
+            void retire().catch(() => { });
+            return;
+        }
+        if (child.connected)
+            child.send({ type: 'cancel', signal }, (error) => {
+                if (error)
+                    void retire().catch(() => { });
+            });
+    };
+    child.once('spawn', () => {
+        const config = {
+            type: 'start',
+            executionUrl: options.executionUrl,
+            token: options.token,
+            command,
+            args: [...args],
+            ...(spawnOptions?.cwd ? { cwd: spawnOptions.cwd } : {}),
+            ...(spawnOptions?.env ? { env: spawnOptions.env } : {}),
+        };
+        if (child.connected)
+            child.send(config, (error) => {
+                if (error)
+                    child.emit('error', new Error('The guest background bridge could not be initialized'));
+            });
+    });
+    child.on('message', (raw) => {
+        if (!raw || typeof raw !== 'object' || !('type' in raw))
+            return;
+        if (raw.type === 'terminal-confirmed')
+            acceptConfirmation();
+        if (raw.type === 'retire-computer')
+            void retire().catch(() => { });
+    });
+    return {
+        child,
+        closed,
+        kill(signal) {
+            // Both TERM and escalation request confirmed guest cancellation.
+            // SIGKILL must never merely kill this host bridge and leave its
+            // remote shell running after the registry believes the job stopped.
+            requestCancellation(signal);
+        },
+        terminate(signal = 'SIGTERM') {
+            if (confirmed)
+                return closed;
+            return new Promise((resolve, reject) => {
+                waiters.add({ resolve, reject });
+                requestCancellation(signal);
+            });
+        },
+    };
+}
+//# sourceMappingURL=detached-process.js.map