@namzu/sandbox 6.1.0 → 7.1.0

package/dist/backends/http-worker-client.js

@@ -0,0 +1,173 @@
+import { withHint } from '@namzu/sdk';
+import { RemoteCancellationUnsupportedError, RemoteCommandError, RemoteExecutionController, RemoteProtocolError, } from './remote-execution-controller.js';
+function parseWorkerEvent(line) {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch (error) {
+        throw new RemoteProtocolError(`worker emitted malformed NDJSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!parsed || typeof parsed !== 'object') {
+        throw new RemoteProtocolError('worker emitted an event without an object body');
+    }
+    const event = parsed;
+    if ((event.type === 'stdout_delta' || event.type === 'stderr_delta') &&
+        typeof event.data === 'string') {
+        return event;
+    }
+    if (event.type === 'error' && typeof event.error === 'string')
+        return event;
+    if (event.type === 'result' &&
+        Number.isFinite(event.exitCode) &&
+        typeof event.timedOut === 'boolean' &&
+        Number.isFinite(event.durationMs) &&
+        (event.signal === undefined || typeof event.signal === 'string') &&
+        (event.stdoutTruncated === undefined || typeof event.stdoutTruncated === 'boolean') &&
+        (event.stderrTruncated === undefined || typeof event.stderrTruncated === 'boolean')) {
+        return event;
+    }
+    throw new RemoteProtocolError(`worker emitted an invalid ${String(event.type)} event`);
+}
+async function readExecution(baseUrl, executionId, command, argv, opts, transportSignal) {
+    let response;
+    try {
+        response = await fetch(`${baseUrl}/execute`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            signal: transportSignal,
+            body: JSON.stringify({
+                ...(executionId ? { executionId } : {}),
+                command,
+                args: argv ?? [],
+                cwd: opts?.cwd,
+                env: opts?.env,
+                timeoutMs: opts?.timeout,
+            }),
+        });
+    }
+    catch (error) {
+        const cause = error instanceof Error ? error.cause : undefined;
+        const causeMessage = cause instanceof Error
+            ? `${cause.message}${cause.code ? ` (${cause.code})` : ''}`
+            : cause
+                ? String(cause)
+                : 'unknown';
+        throw withHint(new Error(`namzu-sandbox /execute fetch failed (baseUrl=${baseUrl}): ${error instanceof Error ? error.message : String(error)} — cause: ${causeMessage}`, { cause: error }), 'The worker was reachable when the sandbox started, so it has most likely exited, been killed, or become unreachable since. Check the container logs and runtime exit state.');
+    }
+    if (!response.ok || !response.body) {
+        throw new Error(`execute failed: HTTP ${response.status} ${await response.text()}`);
+    }
+    const decoder = new TextDecoder();
+    const reader = response.body.getReader();
+    let buffered = '';
+    let stdout = '';
+    let stderr = '';
+    let terminal;
+    let terminalCount = 0;
+    const consume = (rawLine) => {
+        if (!rawLine.trim())
+            return;
+        const event = parseWorkerEvent(rawLine);
+        if (terminalCount > 0) {
+            throw new RemoteProtocolError('worker emitted data after its terminal event');
+        }
+        if (event.type === 'stdout_delta') {
+            stdout += event.data;
+            opts?.onOutput?.({ stream: 'stdout', data: event.data });
+            return;
+        }
+        if (event.type === 'stderr_delta') {
+            stderr += event.data;
+            opts?.onOutput?.({ stream: 'stderr', data: event.data });
+            return;
+        }
+        terminalCount += 1;
+        if (event.type === 'error')
+            throw new RemoteCommandError(event.error);
+        terminal = event;
+    };
+    for (;;) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        buffered += decoder.decode(value, { stream: true });
+        let newline = buffered.indexOf('\n');
+        while (newline !== -1) {
+            consume(buffered.slice(0, newline));
+            buffered = buffered.slice(newline + 1);
+            newline = buffered.indexOf('\n');
+        }
+    }
+    buffered += decoder.decode();
+    if (buffered.trim())
+        consume(buffered);
+    if (terminalCount !== 1 || !terminal) {
+        throw new RemoteProtocolError('worker response ended without exactly one result event');
+    }
+    return {
+        exitCode: terminal.exitCode,
+        stdout,
+        stderr,
+        ...(terminal.signal ? { signal: terminal.signal } : {}),
+        timedOut: terminal.timedOut,
+        durationMs: terminal.durationMs,
+        ...(terminal.stdoutTruncated !== undefined
+            ? { stdoutTruncated: terminal.stdoutTruncated }
+            : {}),
+        ...(terminal.stderrTruncated !== undefined
+            ? { stderrTruncated: terminal.stderrTruncated }
+            : {}),
+    };
+}
+/**
+ * A per-sandbox HTTP worker client. The controller caches protocol support for
+ * that worker and gives every v2 command an identity before it can be admitted.
+ */
+export class HttpWorkerClient {
+    controller;
+    constructor(baseUrl) {
+        const adapter = {
+            label: 'HTTP worker',
+            reserve: async (signal) => {
+                const response = await fetch(`${baseUrl}/executions/reserve`, {
+                    method: 'POST',
+                    signal,
+                });
+                if (response.status === 404) {
+                    throw new RemoteCancellationUnsupportedError('This sandbox worker does not support the execution-cancellation lease protocol. Rebuild the worker image or standby-pool profile before passing SandboxExecOptions.signal; refusing rather than pretending cancellation is active.');
+                }
+                if (!response.ok) {
+                    throw new Error(`execution reservation failed: HTTP ${response.status} ${await response.text()}`);
+                }
+                return await response.json();
+            },
+            cancel: async (executionId, signal) => {
+                const response = await fetch(`${baseUrl}/cancel`, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify({ executionId }),
+                    signal,
+                });
+                if (!response.ok) {
+                    throw new Error(`cancel failed: HTTP ${response.status} ${await response.text()}`);
+                }
+                return await response.json();
+            },
+            execute: async (executionId, command, argv, opts, signal) => await readExecution(baseUrl, executionId, command, argv, opts, signal),
+        };
+        this.controller = new RemoteExecutionController(adapter);
+    }
+    async exec(command, argv, opts) {
+        return await this.controller.exec(command, argv, opts);
+    }
+}
+/**
+ * Compatibility entry point for focused consumers. Sandbox backends keep one
+ * {@link HttpWorkerClient} per remote sandbox so capability state is not shared
+ * across peers and is not re-probed for every command.
+ */
+export async function execViaHttpWorker(baseUrl, command, argv, opts) {
+    return await new HttpWorkerClient(baseUrl).exec(command, argv, opts);
+}
+//# sourceMappingURL=http-worker-client.js.map

package/dist/backends/http-worker-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-worker-client.js","sourceRoot":"","sources":["../../src/backends/http-worker-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmD,QAAQ,EAAE,MAAM,YAAY,CAAA;AAEtF,OAAO,EACN,kCAAkC,EAClC,kBAAkB,EAElB,yBAAyB,EACzB,mBAAmB,GACnB,MAAM,kCAAkC,CAAA;AAgBzC,SAAS,gBAAgB,CAAC,IAAY;IACrC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,mBAAmB,CAC5B,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAA;IACF,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,mBAAmB,CAAC,gDAAgD,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,MAAiC,CAAA;IAC/C,IACC,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;QAChE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC7B,CAAC;QACF,OAAO,KAAoB,CAAA;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAoB,CAAA;IAC1F,IACC,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/B,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACjC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;QAChE,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC;QACnF,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,EAClF,CAAC;QACF,OAAO,KAAoB,CAAA;IAC5B,CAAC;IACD,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACvF,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,OAAe,EACf,WAA+B,EAC/B,OAAe,EACf,IAA0B,EAC1B,IAAoC,EACpC,eAA4B;IAE5B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,OAAO;gBACP,IAAI,EAAE,IAAI,IAAI,EAAE;gBAChB,GAAG,EAAE,IAAI,EAAE,GAAG;gBACd,GAAG,EAAE,IAAI,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI,EAAE,OAAO;aACxB,CAAC;SACF,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9D,MAAM,YAAY,GACjB,KAAK,YAAY,KAAK;YACrB,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,GAAI,KAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAM,KAAmC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACzH,CAAC,CAAC,KAAK;gBACN,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACf,CAAC,CAAC,SAAS,CAAA;QACd,MAAM,QAAQ,CACb,IAAI,KAAK,CACR,gDAAgD,OAAO,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,YAAY,EAAE,EAC9I,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,EACD,6KAA6K,CAC7K,CAAA;IACF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACxC,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,QAA8D,CAAA;IAClE,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAM;QAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,CAAC,CAAA;QAC9E,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAA;YACpB,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YACxD,OAAM;QACP,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAA;YACpB,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YACxD,OAAM;QACP,CAAC;QACD,aAAa,IAAI,CAAC,CAAA;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACrE,QAAQ,GAAG,KAAK,CAAA;IACjB,CAAC,CAAA;IAED,SAAS,CAAC;QACT,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;YACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YACtC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,CAAC;IACF,CAAC;IACD,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAA;IAC5B,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,mBAAmB,CAAC,wDAAwD,CAAC,CAAA;IACxF,CAAC;IAED,OAAO;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM;QACN,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;KACN,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACX,UAAU,CAA2B;IAEtD,YAAY,OAAe;QAC1B,MAAM,OAAO,GAA2B;YACvC,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,qBAAqB,EAAE;oBAC7D,MAAM,EAAE,MAAM;oBACd,MAAM;iBACN,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC7B,MAAM,IAAI,kCAAkC,CAC3C,oOAAoO,CACpO,CAAA;gBACF,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACd,sCAAsC,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAChF,CAAA;gBACF,CAAC;gBACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,SAAS,EAAE;oBACjD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;oBACrC,MAAM;iBACN,CAAC,CAAA;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBACnF,CAAC;gBACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC3D,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;SACvE,CAAA;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAA;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CACT,OAAe,EACf,IAA0B,EAC1B,IAAoC;QAEpC,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAe,EACf,OAAe,EACf,IAA0B,EAC1B,IAAoC;IAEpC,OAAO,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACrE,CAAC"}

package/dist/backends/readiness.d.ts

@@ -0,0 +1,43 @@
+/**
+ * One owner for backend readiness clocks.
+ *
+ * A timestamp checked between retries is not a deadline when the thing inside
+ * a retry can remain pending. This owner races every foreign promise against
+ * the remaining operation budget and supplies a private signal so cooperative
+ * transports can release their sockets too.
+ */
+/**
+ * Readiness failure teardown is deliberately a second, short budget. The
+ * health deadline has already expired, so pretending cleanup fits inside it
+ * either skips cleanup entirely or keeps `create()` pending without a bound.
+ */
+export declare const FAILURE_CLEANUP_GRACE_MS = 1000;
+export interface ReadinessOptions {
+    readonly timeoutMs: number;
+    readonly pollIntervalMs: number;
+}
+export declare class OperationDeadlineExpired extends Error {
+    readonly label: string;
+    constructor(label: string);
+}
+export declare function resolveReadinessOptions(owner: string, timeoutMs: number | undefined, pollIntervalMs: number | undefined, defaults: ReadinessOptions): ReadinessOptions;
+export declare class OperationDeadline {
+    readonly label: string;
+    private readonly callerSignal?;
+    private readonly expiresAt;
+    constructor(timeoutMs: number, label: string, callerSignal?: AbortSignal | undefined);
+    remainingMs(): number;
+    run<T>(operation: (signal: AbortSignal) => Promise<T>): Promise<T>;
+    delay(maximumMs: number): Promise<void>;
+}
+export declare function probeHttpHealth(url: string, signal: AbortSignal): Promise<{
+    readonly ok: boolean;
+    readonly status: number;
+}>;
+/**
+ * Failure cleanup must never replace or indefinitely delay the primary
+ * readiness error. Cooperative cleanup observes the signal; an implementation
+ * that ignores it is still detached from the caller by the independent race.
+ */
+export declare function runFailureCleanup(cleanup: (signal: AbortSignal) => Promise<void>, graceMs?: number): Promise<void>;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/backends/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../src/backends/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,OAAQ,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAC/B;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAIlC;AAUD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,QAAQ,EAAE,gBAAgB,GACxB,gBAAgB,CAQlB;AAED,qBAAa,iBAAiB;IAK5B,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAL/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;gBAGjC,SAAS,EAAE,MAAM,EACR,KAAK,EAAE,MAAM,EACL,YAAY,CAAC,EAAE,WAAW,YAAA;IAM5C,WAAW,IAAI,MAAM;IAIf,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA6ClE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAsB7C;AAED,wBAAsB,eAAe,CACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GACjB,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAY5D;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAC/C,OAAO,SAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/backends/readiness.js

@@ -0,0 +1,150 @@
+/**
+ * One owner for backend readiness clocks.
+ *
+ * A timestamp checked between retries is not a deadline when the thing inside
+ * a retry can remain pending. This owner races every foreign promise against
+ * the remaining operation budget and supplies a private signal so cooperative
+ * transports can release their sockets too.
+ */
+const MAX_NODE_TIMER_MS = 2_147_483_647;
+/**
+ * Readiness failure teardown is deliberately a second, short budget. The
+ * health deadline has already expired, so pretending cleanup fits inside it
+ * either skips cleanup entirely or keeps `create()` pending without a bound.
+ */
+export const FAILURE_CLEANUP_GRACE_MS = 1_000;
+export class OperationDeadlineExpired extends Error {
+    label;
+    constructor(label) {
+        super(`${label} deadline expired`);
+        this.label = label;
+        this.name = 'OperationDeadlineExpired';
+    }
+}
+function assertTimerValue(field, value) {
+    if (!Number.isSafeInteger(value) || value <= 0 || value > MAX_NODE_TIMER_MS) {
+        throw new RangeError(`${field} must be a positive safe integer no greater than ${MAX_NODE_TIMER_MS}; received ${String(value)}`);
+    }
+}
+export function resolveReadinessOptions(owner, timeoutMs, pollIntervalMs, defaults) {
+    const resolved = {
+        timeoutMs: timeoutMs ?? defaults.timeoutMs,
+        pollIntervalMs: pollIntervalMs ?? defaults.pollIntervalMs,
+    };
+    assertTimerValue(`${owner}.readyTimeoutMs`, resolved.timeoutMs);
+    assertTimerValue(`${owner}.readyPollIntervalMs`, resolved.pollIntervalMs);
+    return resolved;
+}
+export class OperationDeadline {
+    label;
+    callerSignal;
+    expiresAt;
+    constructor(timeoutMs, label, callerSignal) {
+        this.label = label;
+        this.callerSignal = callerSignal;
+        assertTimerValue(`${label} timeout`, timeoutMs);
+        this.expiresAt = performance.now() + timeoutMs;
+    }
+    remainingMs() {
+        return Math.max(0, this.expiresAt - performance.now());
+    }
+    async run(operation) {
+        this.callerSignal?.throwIfAborted();
+        const remaining = this.remainingMs();
+        if (remaining <= 0)
+            throw new OperationDeadlineExpired(this.label);
+        const controller = new AbortController();
+        const expired = new OperationDeadlineExpired(this.label);
+        let timer;
+        let onCallerAbort;
+        const cancelled = this.callerSignal
+            ? new Promise((_resolve, reject) => {
+                onCallerAbort = () => {
+                    const reason = this.callerSignal?.reason;
+                    controller.abort(reason);
+                    reject(reason);
+                };
+                this.callerSignal?.addEventListener('abort', onCallerAbort, {
+                    once: true,
+                });
+            })
+            : undefined;
+        const expiry = new Promise((_resolve, reject) => {
+            timer = setTimeout(() => {
+                controller.abort(expired);
+                reject(expired);
+            }, remaining);
+        });
+        const pending = Promise.resolve().then(() => operation(controller.signal));
+        try {
+            const value = await Promise.race(cancelled ? [pending, expiry, cancelled] : [pending, expiry]);
+            // Publication fence: a foreign promise that settles at the boundary
+            // does not get to turn an already-expired attempt into readiness.
+            if (this.callerSignal?.aborted)
+                throw this.callerSignal.reason;
+            if (controller.signal.aborted || this.remainingMs() <= 0) {
+                controller.abort(expired);
+                throw expired;
+            }
+            return value;
+        }
+        finally {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            if (onCallerAbort)
+                this.callerSignal?.removeEventListener('abort', onCallerAbort);
+        }
+    }
+    async delay(maximumMs) {
+        await this.run((signal) => new Promise((resolve, reject) => {
+            if (signal.aborted) {
+                reject(signal.reason);
+                return;
+            }
+            const finish = (err) => {
+                clearTimeout(timer);
+                signal.removeEventListener('abort', abort);
+                if (err === undefined)
+                    resolve();
+                else
+                    reject(err);
+            };
+            const abort = () => {
+                finish(signal.reason);
+            };
+            const timer = setTimeout(() => finish(), maximumMs);
+            signal.addEventListener('abort', abort, { once: true });
+        }));
+    }
+}
+export async function probeHttpHealth(url, signal) {
+    signal.throwIfAborted();
+    const response = await fetch(url, { signal });
+    const result = { ok: response.ok, status: response.status };
+    try {
+        await response.body?.cancel();
+    }
+    catch {
+        // The status is already known. A body cancellation failure must not
+        // hide it; the owning deadline still aborts the transport if needed.
+    }
+    signal.throwIfAborted();
+    return result;
+}
+/**
+ * Failure cleanup must never replace or indefinitely delay the primary
+ * readiness error. Cooperative cleanup observes the signal; an implementation
+ * that ignores it is still detached from the caller by the independent race.
+ */
+export async function runFailureCleanup(cleanup, graceMs = FAILURE_CLEANUP_GRACE_MS) {
+    const deadline = new OperationDeadline(graceMs, 'sandbox failure cleanup');
+    try {
+        await deadline.run(cleanup);
+    }
+    catch {
+        // The readiness failure remains primary. Promise.race installed a
+        // rejection observer on the losing cleanup promise, so a late failure
+        // cannot become an unhandled rejection.
+    }
+}
+//# sourceMappingURL=readiness.js.map

package/dist/backends/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/backends/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,iBAAiB,GAAG,aAAa,CAAA;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAO7C,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC7B;IAArB,YAAqB,KAAa;QACjC,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAA;QADd,UAAK,GAAL,KAAK,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACvC,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAC7E,MAAM,IAAI,UAAU,CACnB,GAAG,KAAK,oDAAoD,iBAAiB,cAAc,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1G,CAAA;IACF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,KAAa,EACb,SAA6B,EAC7B,cAAkC,EAClC,QAA0B;IAE1B,MAAM,QAAQ,GAAG;QAChB,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;QAC1C,cAAc,EAAE,cAAc,IAAI,QAAQ,CAAC,cAAc;KACzD,CAAA;IACD,gBAAgB,CAAC,GAAG,KAAK,iBAAiB,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IAC/D,gBAAgB,CAAC,GAAG,KAAK,sBAAsB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IACzE,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,MAAM,OAAO,iBAAiB;IAKnB;IACQ;IALD,SAAS,CAAQ;IAElC,YACC,SAAiB,EACR,KAAa,EACL,YAA0B;QADlC,UAAK,GAAL,KAAK,CAAQ;QACL,iBAAY,GAAZ,YAAY,CAAc;QAE3C,gBAAgB,CAAC,GAAG,KAAK,UAAU,EAAE,SAAS,CAAC,CAAA;QAC/C,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAC/C,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,SAA8C;QAC1D,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,CAAA;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAElE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,IAAI,KAAgD,CAAA;QACpD,IAAI,aAAuC,CAAA;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY;YAClC,CAAC,CAAC,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACxC,aAAa,GAAG,GAAG,EAAE;oBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAA;oBACxC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;oBACxB,MAAM,CAAC,MAAM,CAAC,CAAA;gBACf,CAAC,CAAA;gBACD,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE;oBAC3D,IAAI,EAAE,IAAI;iBACV,CAAC,CAAA;YACH,CAAC,CAAC;YACH,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACvB,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACzB,MAAM,CAAC,OAAO,CAAC,CAAA;YAChB,CAAC,EAAE,SAAS,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;QAE1E,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;YAC9F,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,IAAI,CAAC,YAAY,EAAE,OAAO;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAA;YAC9D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC1D,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACzB,MAAM,OAAO,CAAA;YACd,CAAC;YACD,OAAO,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACV,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,aAAa;gBAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAClF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC5B,MAAM,IAAI,CAAC,GAAG,CACb,CAAC,MAAM,EAAE,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBACrB,OAAM;YACP,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAa,EAAE,EAAE;gBAChC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAC1C,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAA;;oBAC3B,MAAM,CAAC,GAAG,CAAC,CAAA;YACjB,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,GAAG,EAAE;gBAClB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtB,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAA;YACnD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,CAAC,CAAC,CACH,CAAA;IACF,CAAC;CACD;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,GAAW,EACX,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IAC3D,IAAI,CAAC;QACJ,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,oEAAoE;QACpE,qEAAqE;IACtE,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAA+C,EAC/C,OAAO,GAAG,wBAAwB;IAElC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAA;IAC1E,IAAI,CAAC;QACJ,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,kEAAkE;QAClE,sEAAsE;QACtE,wCAAwC;IACzC,CAAC;AACF,CAAC"}

package/dist/backends/remote-execution-controller.d.ts

@@ -0,0 +1,76 @@
+import type { SandboxExecOptions, SandboxExecResult } from '@namzu/sdk';
+export interface RemoteReservation {
+    readonly ok: true;
+    readonly protocolVersion: 2;
+    readonly executionId: string;
+    readonly leaseExpiresAt: number;
+}
+export interface RemoteTerminalMetadata {
+    readonly exitCode: number;
+    readonly timedOut: boolean;
+    readonly durationMs: number;
+    readonly signal?: string;
+    readonly stdoutTruncated?: boolean;
+    readonly stderrTruncated?: boolean;
+}
+export interface RemoteCancellationAcknowledgement {
+    readonly ok: true;
+    readonly state: 'cancelled' | 'completed' | 'failed';
+    readonly started: boolean;
+    readonly result?: RemoteTerminalMetadata;
+    readonly error?: string;
+}
+export declare class RemoteCommandError extends Error {
+}
+export declare class RemoteProtocolError extends Error {
+}
+export declare class RemoteCancellationUnsupportedError extends Error {
+}
+export interface SandboxRetirementObservation {
+    readonly accepted: boolean;
+    readonly error?: Error;
+}
+export declare class RemoteCancellationUnknownError extends Error {
+    retirement?: SandboxRetirementObservation;
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare class RemoteResultIncompleteError extends Error {
+    readonly acknowledgement: RemoteCancellationAcknowledgement;
+    constructor(message: string, acknowledgement: RemoteCancellationAcknowledgement, options?: ErrorOptions);
+}
+export interface RemoteExecutionAdapter<Context = undefined> {
+    readonly label: string;
+    reserve(signal: AbortSignal): Promise<unknown>;
+    cancel(executionId: string, signal: AbortSignal): Promise<unknown>;
+    execute(executionId: string | undefined, command: string, argv: string[] | undefined, opts: SandboxExecOptions | undefined, transportSignal: AbortSignal, context: Context | undefined): Promise<SandboxExecResult>;
+}
+export interface RemoteExecutionControllerOptions {
+    readonly controlRequestTimeoutMs?: number;
+    readonly cancelConfirmTimeoutMs?: number;
+    readonly resultDrainTimeoutMs?: number;
+    readonly executionObservationGraceMs?: number;
+    readonly defaultExecutionTimeoutMs?: number;
+}
+/**
+ * One state machine for remote command ownership. A v2 peer reserves every
+ * command, even when the caller supplied no signal, so transport loss can be
+ * reconciled by identity. Legacy execution is entered only after an explicit
+ * unsupported response from the peer and is fenced as unknown on any failure.
+ */
+export declare class RemoteExecutionController<Context = undefined> {
+    private readonly adapter;
+    private capability;
+    private unsupportedError;
+    private readonly controlRequestTimeoutMs;
+    private readonly cancelConfirmTimeoutMs;
+    private readonly resultDrainTimeoutMs;
+    private readonly executionObservationGraceMs;
+    private readonly defaultExecutionTimeoutMs;
+    constructor(adapter: RemoteExecutionAdapter<Context>, options?: RemoteExecutionControllerOptions);
+    exec(command: string, argv: string[] | undefined, opts: SandboxExecOptions | undefined, context?: Context): Promise<SandboxExecResult>;
+    private executeLegacy;
+    private requestCancellation;
+    private drainConfirmedExecution;
+    private executeReserved;
+}
+//# sourceMappingURL=remote-execution-controller.d.ts.map

package/dist/backends/remote-execution-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-execution-controller.d.ts","sourceRoot":"","sources":["../../src/backends/remote-execution-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAWvE,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAClC;AAED,MAAM,WAAW,iCAAiC;IACjD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAA;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAA;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,qBAAa,kCAAmC,SAAQ,KAAK;CAAG;AAEhE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CACtB;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACxD,UAAU,CAAC,EAAE,4BAA4B,CAAA;gBAE7B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAInD;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IAGpD,QAAQ,CAAC,eAAe,EAAE,iCAAiC;gBAD3D,OAAO,EAAE,MAAM,EACN,eAAe,EAAE,iCAAiC,EAC3D,OAAO,CAAC,EAAE,YAAY;CAKvB;AAED,MAAM,WAAW,sBAAsB,CAAC,OAAO,GAAG,SAAS;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,OAAO,CACN,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAC1B,IAAI,EAAE,kBAAkB,GAAG,SAAS,EACpC,eAAe,EAAE,WAAW,EAC5B,OAAO,EAAE,OAAO,GAAG,SAAS,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IACxC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAC7C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAA;CAC3C;AA6ID;;;;;GAKG;AACH,qBAAa,yBAAyB,CAAC,OAAO,GAAG,SAAS;IAUxD,OAAO,CAAC,QAAQ,CAAC,OAAO;IATzB,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,gBAAgB,CAAgD;IACxE,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAChD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAQ;IAC/C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAQ;IACpD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAQ;gBAGhC,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,EACzD,OAAO,GAAE,gCAAqC;IAWzC,IAAI,CACT,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAC1B,IAAI,EAAE,kBAAkB,GAAG,SAAS,EACpC,OAAO,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC;YAwCf,aAAa;YAyBb,mBAAmB;YAwBnB,uBAAuB;YAkBvB,eAAe;CA8F7B"}