@namzu/sdk 14.0.6 → 15.0.0

package/dist/runtime/query/replay/__tests__/prepare.test.js

@@ -1,171 +0,0 @@
-import { mkdir, mkdtemp, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { prepareReplayState } from '../prepare.js';
-const RUN_ID = 'run_source';
-function makeCheckpoint(overrides) {
-    return {
-        id: 'cp_default',
-        runId: RUN_ID,
-        iteration: 1,
-        messages: [{ role: 'user', content: 'hi' }],
-        tokenUsage: {
-            promptTokens: 0,
-            completionTokens: 0,
-            totalTokens: 0,
-            cachedTokens: 0,
-            cacheWriteTokens: 0,
-        },
-        costInfo: { inputCostPer1M: 0, outputCostPer1M: 0, totalCost: 0, cacheDiscount: 0 },
-        guardState: { iterationCount: 1, elapsedMs: 0 },
-        createdAt: Date.now(),
-        ...overrides,
-    };
-}
-async function seedCheckpoint(baseDir, cp) {
-    const cpDir = join(baseDir, cp.runId, 'checkpoints');
-    await mkdir(cpDir, { recursive: true });
-    await writeFile(join(cpDir, `${cp.id}.json`), JSON.stringify(cp), 'utf-8');
-}
-async function seedEmergency(emergencyDir, dump) {
-    await mkdir(emergencyDir, { recursive: true });
-    await writeFile(join(emergencyDir, `${dump.runId}.json`), JSON.stringify(dump), 'utf-8');
-}
-describe('prepareReplayState', () => {
-    let baseDir;
-    let emergencyDir;
-    beforeEach(async () => {
-        const wrapper = await mkdtemp(join(tmpdir(), 'namzu-prepare-replay-'));
-        baseDir = join(wrapper, 'runs');
-        emergencyDir = join(wrapper, 'emergency');
-        await mkdir(baseDir, { recursive: true });
-    });
-    afterEach(async () => {
-        // Per-test tmpdir isolation; vitest cleans tmpdir between runs.
-    });
-    it('resolves a specific CheckpointId and returns the checkpoint messages', async () => {
-        const cp = makeCheckpoint({
-            id: 'cp_one',
-            iteration: 3,
-            messages: [
-                { role: 'user', content: 'start' },
-                { role: 'assistant', content: 'ok' },
-            ],
-        });
-        await seedCheckpoint(baseDir, cp);
-        const prepared = await prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'cp_one',
-        });
-        expect(prepared.sourceCheckpoint.id).toBe('cp_one');
-        expect(prepared.messages).toEqual(cp.messages);
-        expect(prepared.attribution.sourceRunId).toBe(RUN_ID);
-        expect(prepared.attribution.fromCheckpointId).toBe('cp_one');
-        expect(prepared.attribution.mutations).toEqual([]);
-        expect(prepared.attribution.replayedAt).toBeGreaterThan(0);
-    });
-    it("resolves 'latest' to the checkpoint with the highest iteration", async () => {
-        await seedCheckpoint(baseDir, makeCheckpoint({ id: 'cp_a', iteration: 1 }));
-        await seedCheckpoint(baseDir, makeCheckpoint({ id: 'cp_b', iteration: 5 }));
-        await seedCheckpoint(baseDir, makeCheckpoint({ id: 'cp_c', iteration: 3 }));
-        const prepared = await prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'latest',
-        });
-        expect(prepared.sourceCheckpoint.id).toBe('cp_b');
-        expect(prepared.sourceCheckpoint.iteration).toBe(5);
-    });
-    it("throws when 'latest' is requested but no checkpoints exist", async () => {
-        await expect(prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'latest',
-        })).rejects.toThrow(/No checkpoints found/);
-    });
-    it('throws when a specific CheckpointId does not resolve', async () => {
-        await expect(prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'cp_missing',
-        })).rejects.toThrow(/not found/);
-    });
-    it('applies injectToolResponse mutations at the fork point', async () => {
-        const assistantMsg = {
-            role: 'assistant',
-            content: null,
-            toolCalls: [{ id: 'call_a', type: 'function', function: { name: 'noop', arguments: '{}' } }],
-        };
-        const cp = makeCheckpoint({
-            id: 'cp_with_tool',
-            messages: [{ role: 'user', content: 'run tool' }, assistantMsg],
-        });
-        await seedCheckpoint(baseDir, cp);
-        const mutations = [
-            {
-                type: 'injectToolResponse',
-                toolCallId: 'call_a',
-                response: { success: true, output: 'mocked-a' },
-            },
-        ];
-        const prepared = await prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'cp_with_tool',
-            mutate: mutations,
-        });
-        expect(prepared.messages).toHaveLength(3);
-        const appended = prepared.messages[2];
-        expect(appended.role).toBe('tool');
-        expect(appended.toolCallId).toBe('call_a');
-        expect(appended.content).toBe('mocked-a');
-        expect(prepared.attribution.mutations).toEqual(mutations);
-    });
-    it("resolves 'emergency' via the emergency dump and projects it to a checkpoint", async () => {
-        const dump = {
-            id: 'esave_xyz',
-            runId: RUN_ID,
-            messages: [{ role: 'user', content: 'before crash' }],
-            tokenUsage: {
-                promptTokens: 4,
-                completionTokens: 2,
-                totalTokens: 6,
-                cachedTokens: 0,
-                cacheWriteTokens: 0,
-            },
-            currentIteration: 9,
-            startedAt: 1_000,
-            savedAt: 2_000,
-            processSignal: 'SIGTERM',
-        };
-        await seedEmergency(emergencyDir, dump);
-        const prepared = await prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'emergency',
-            emergencyDir,
-        });
-        expect(prepared.sourceCheckpoint.id).toBe('cp_emergency_xyz');
-        expect(prepared.sourceCheckpoint.iteration).toBe(9);
-        expect(prepared.messages).toEqual(dump.messages);
-        expect(prepared.attribution.fromCheckpointId).toBe('cp_emergency_xyz');
-    });
-    it("throws when 'emergency' is requested without emergencyDir", async () => {
-        await expect(prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'emergency',
-        })).rejects.toThrow(/emergencyDir/);
-    });
-    it("throws when 'emergency' dump file is missing", async () => {
-        await expect(prepareReplayState({
-            baseDir,
-            runId: RUN_ID,
-            fromCheckpoint: 'emergency',
-            emergencyDir,
-        })).rejects.toThrow(/No emergency dump/);
-    });
-});
-//# sourceMappingURL=prepare.test.js.map

package/dist/runtime/query/replay/__tests__/prepare.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prepare.test.js","sourceRoot":"","sources":["../../../../../src/runtime/query/replay/__tests__/prepare.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAMpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAElD,MAAM,MAAM,GAAG,YAAqB,CAAA;AAEpC,SAAS,cAAc,CAAC,SAAuC;IAC9D,OAAO;QACN,EAAE,EAAE,YAA4B;QAChC,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3C,UAAU,EAAE;YACX,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;SACnB;QACD,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;QACnF,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,SAAS;KACZ,CAAA;AACF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,EAAuB;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IACpD,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;AAC3E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB,EAAE,IAAuB;IACzE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,MAAM,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;AACzF,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,IAAI,OAAe,CAAA;IACnB,IAAI,YAAoB,CAAA;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;QACtE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/B,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QACzC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,gEAAgE;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,GAAG,cAAc,CAAC;YACzB,EAAE,EAAE,QAAwB;YAC5B,SAAS,EAAE,CAAC;YACZ,QAAQ,EAAE;gBACT,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;gBAClC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;aACpC;SACD,CAAC,CAAA;QACF,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAEjC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACzC,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,QAAwB;SACxC,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,MAAsB,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3F,MAAM,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,MAAsB,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3F,MAAM,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,MAAsB,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3F,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACzC,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,QAAQ;SACxB,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,CACX,kBAAkB,CAAC;YAClB,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,QAAQ;SACxB,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,CACX,kBAAkB,CAAC;YAClB,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,YAA4B;SAC5C,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,YAAY,GAAqB;YACtC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;SAC5F,CAAA;QACD,MAAM,EAAE,GAAG,cAAc,CAAC;YACzB,EAAE,EAAE,cAA8B;YAClC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,YAAY,CAAC;SAC/D,CAAC,CAAA;QACF,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAEjC,MAAM,SAAS,GAAe;YAC7B;gBACC,IAAI,EAAE,oBAAoB;gBAC1B,UAAU,EAAE,QAAsB;gBAClC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;aAC/C;SACD,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACzC,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,cAA8B;YAC9C,MAAM,EAAE,SAAS;SACjB,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAgB,CAAA;QACpD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,IAAI,GAAsB;YAC/B,EAAE,EAAE,WAA8B;YAClC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YACrD,UAAU,EAAE;gBACX,YAAY,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;gBACnB,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;aACnB;YACD,gBAAgB,EAAE,CAAC;YACnB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,SAAS;SACxB,CAAA;QACD,MAAM,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAEvC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACzC,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,WAAW;YAC3B,YAAY;SACZ,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC7D,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,CACX,kBAAkB,CAAC;YAClB,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,WAAW;SAC3B,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,CACX,kBAAkB,CAAC;YAClB,OAAO;YACP,KAAK,EAAE,MAAM;YACb,cAAc,EAAE,WAAW;YAC3B,YAAY;SACZ,CAAC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/sandbox/__tests__/exec-cancellation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=exec-cancellation.test.d.ts.map

package/dist/sandbox/__tests__/exec-cancellation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-cancellation.test.d.ts","sourceRoot":"","sources":["../../../src/sandbox/__tests__/exec-cancellation.test.ts"],"names":[],"mappings":""}

package/dist/sandbox/__tests__/exec-cancellation.test.js

@@ -1,59 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { getRootLogger } from '../../utils/logger.js';
-import { LocalSandboxProvider } from '../provider/local.js';
-/**
- * `SandboxExecOptions.signal` was declared, documented, exported — and
- * dropped by every backend. The local one built a fresh `AbortController`
- * from the call's own timeout and never linked the caller's signal to it, so
- * cancelling a run abandoned the *wait* while the sandboxed process kept
- * running. That is verbatim the failure the option's docstring says it exists
- * to prevent.
- *
- * These drive the real provider rather than a stub, because the defect was
- * precisely in the wiring between the option and `spawn` — a stub asserting
- * "the signal was passed along" would have passed against the broken code.
- */
-describe('a sandboxed command honours the caller cancellation', () => {
-    it('kills a long-running process when the caller aborts', async () => {
-        const provider = new LocalSandboxProvider(getRootLogger());
-        const sandbox = await provider.create();
-        const controller = new AbortController();
-        // Long enough that only the abort can end it: the deadline is 60s and
-        // the sleep is 30s, so a pass cannot come from either firing.
-        const running = sandbox.exec('node', ['-e', 'setTimeout(() => {}, 30000)'], {
-            timeout: 60_000,
-            signal: controller.signal,
-        });
-        setTimeout(() => controller.abort(), 50);
-        const result = await running;
-        expect(result.exitCode).not.toBe(0);
-        // Cancelled is not late. Reporting a timeout here would tell the model
-        // to retry with a longer budget for something a human just stopped.
-        expect(result.timedOut).toBe(false);
-        expect(result.durationMs).toBeLessThan(20_000);
-        await sandbox.destroy();
-    }, 30_000);
-    it('still reports a deadline as a timeout when no caller signal is passed', async () => {
-        const provider = new LocalSandboxProvider(getRootLogger());
-        const sandbox = await provider.create();
-        const result = await sandbox.exec('node', ['-e', 'setTimeout(() => {}, 30000)'], {
-            timeout: 300,
-        });
-        expect(result.timedOut).toBe(true);
-        await sandbox.destroy();
-    }, 30_000);
-    it('leaves an uncancelled command alone', async () => {
-        const provider = new LocalSandboxProvider(getRootLogger());
-        const sandbox = await provider.create();
-        const controller = new AbortController();
-        const result = await sandbox.exec('node', ['-e', 'console.log("done")'], {
-            timeout: 30_000,
-            signal: controller.signal,
-        });
-        expect(result.exitCode).toBe(0);
-        expect(result.stdout).toContain('done');
-        expect(result.timedOut).toBe(false);
-        await sandbox.destroy();
-    }, 30_000);
-});
-//# sourceMappingURL=exec-cancellation.test.js.map

package/dist/sandbox/__tests__/exec-cancellation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-cancellation.test.js","sourceRoot":"","sources":["../../../src/sandbox/__tests__/exec-cancellation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QAExC,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE;YAC3E,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAA;QACF,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAExC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAA;QAE5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAE9C,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE;YAChF,OAAO,EAAE,GAAG;SACZ,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAElC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QAExC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE;YACxE,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEnC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC,EAAE,MAAM,CAAC,CAAA;AACX,CAAC,CAAC,CAAA"}

package/dist/sandbox/__tests__/isolation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=isolation.test.d.ts.map

package/dist/sandbox/__tests__/isolation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"isolation.test.d.ts","sourceRoot":"","sources":["../../../src/sandbox/__tests__/isolation.test.ts"],"names":[],"mappings":""}

package/dist/sandbox/__tests__/isolation.test.js

@@ -1,139 +0,0 @@
-import { afterAll, describe, expect, it, vi } from 'vitest';
-import { SANDBOX_ISOLATION_CONTROLS } from '../../types/sandbox/index.js';
-import { assertIsolation, describeIsolation, isolationOf, missingIsolation } from '../isolation.js';
-/**
- * The provider reported `id = 'local'` / `name = 'Local Sandbox'` at every
- * tier, and construction logged at `info` regardless. A host that turned
- * isolation on deliberately got a tier-dependent amount of it under one
- * undifferentiated name, with no signal saying which controls were live.
- *
- * These tests pin the honest table and the refusal. What must NOT hold is
- * as important as what must: the tier that unshares a mount namespace
- * without remounting anything does not confine the filesystem, and saying
- * it does here would reintroduce exactly the defect being fixed.
- */
-describe('what each tier actually enforces', () => {
-    it('reports full enforcement only where a deny-default profile is installed', () => {
-        expect(isolationOf('macos-seatbelt')).toEqual({
-            filesystem: true,
-            network: true,
-            process: true,
-        });
-    });
-    it('does not claim filesystem confinement from an unshared mount namespace', () => {
-        // A private mount table is not confinement: nothing is remounted, so
-        // the child still sees the whole host filesystem.
-        expect(isolationOf('linux-namespace').filesystem).toBe(false);
-        expect(isolationOf('linux-namespace').process).toBe(true);
-    });
-    it('claims nothing at all for the unconfined tier', () => {
-        const report = isolationOf('basic');
-        expect(Object.values(report)).toEqual([false, false, false]);
-    });
-    it('covers every environment the type admits', () => {
-        const environments = ['linux-namespace', 'macos-seatbelt', 'basic'];
-        for (const environment of environments) {
-            const report = isolationOf(environment);
-            for (const control of SANDBOX_ISOLATION_CONTROLS) {
-                expect(typeof report[control]).toBe('boolean');
-            }
-        }
-    });
-});
-describe('requiring a control', () => {
-    it('lets through what the tier can enforce', () => {
-        expect(() => assertIsolation('macos-seatbelt', ['filesystem', 'network'])).not.toThrow();
-        expect(() => assertIsolation('linux-namespace', ['network', 'process'])).not.toThrow();
-    });
-    it('refuses rather than downgrading', () => {
-        expect(() => assertIsolation('linux-namespace', ['filesystem'])).toThrow(/cannot enforce filesystem/);
-        expect(() => assertIsolation('basic', ['network'])).toThrow(/cannot enforce network/);
-    });
-    it('says what it does enforce, so the refusal is actionable', () => {
-        expect(() => assertIsolation('linux-namespace', ['filesystem'])).toThrow(/Enforced here: network, process/);
-        expect(() => assertIsolation('basic', ['process'])).toThrow(/Enforced here: nothing/);
-    });
-    it('names every missing control, not just the first', () => {
-        expect(missingIsolation('basic', ['filesystem', 'network', 'process'])).toEqual([
-            'filesystem',
-            'network',
-            'process',
-        ]);
-    });
-    it('requires nothing by default, so best-effort callers are unaffected', () => {
-        expect(() => assertIsolation('basic', [])).not.toThrow();
-    });
-});
-describe('describing a tier', () => {
-    it.each([
-        ['macos-seatbelt', 'filesystem, network, process'],
-        ['linux-namespace', 'network, process'],
-        ['basic', 'nothing'],
-    ])('%s enforces %s', (environment, expected) => {
-        expect(describeIsolation(environment)).toBe(expected);
-    });
-});
-describe('the provider', () => {
-    // `process.platform` is a per-worker global, and vitest reuses workers
-    // across files — leaving it patched would make an unrelated file's
-    // platform check answer for this one.
-    const realPlatform = Object.getOwnPropertyDescriptor(process, 'platform');
-    afterAll(() => {
-        if (realPlatform)
-            Object.defineProperty(process, 'platform', realPlatform);
-        vi.doUnmock('node:child_process');
-        vi.resetModules();
-    });
-    async function providerWith(environment) {
-        vi.resetModules();
-        vi.doMock('node:child_process', async () => {
-            const actual = await vi.importActual('node:child_process');
-            return {
-                ...actual,
-                execSync: (command) => {
-                    const wanted = environment === 'linux-namespace' ? 'unshare' : 'sandbox-exec';
-                    if (environment !== 'basic' && command.startsWith(wanted))
-                        return Buffer.alloc(0);
-                    throw new Error('not available');
-                },
-            };
-        });
-        Object.defineProperty(process, 'platform', {
-            value: environment === 'macos-seatbelt' ? 'darwin' : 'linux',
-            configurable: true,
-        });
-        return await import('../provider/local.js');
-    }
-    const logger = () => {
-        const calls = [];
-        const log = {
-            calls,
-            child: () => log,
-            debug: () => { },
-            info: (message) => calls.push({ level: 'info', message }),
-            warn: (message) => calls.push({ level: 'warn', message }),
-            error: () => { },
-        };
-        return log;
-    };
-    it('warns, not informs, when it confines nothing', async () => {
-        const { LocalSandboxProvider } = await providerWith('basic');
-        const log = logger();
-        new LocalSandboxProvider(log);
-        // `info` here reads as "sandbox created" to anyone scanning a log.
-        expect(log.calls.some((c) => c.level === 'warn' && /unconfined/.test(c.message))).toBe(true);
-        expect(log.calls.some((c) => c.level === 'info')).toBe(false);
-    });
-    it('throws at construction when a required control is unavailable', async () => {
-        const { LocalSandboxProvider } = await providerWith('basic');
-        expect(() => new LocalSandboxProvider(logger(), { requireIsolation: ['filesystem'] })).toThrow(/cannot enforce filesystem/);
-    });
-    it('constructs when the tier supplies what was asked for', async () => {
-        const { LocalSandboxProvider } = await providerWith('macos-seatbelt');
-        const provider = new LocalSandboxProvider(logger(), {
-            requireIsolation: ['filesystem', 'network'],
-        });
-        expect(provider.environment).toBe('macos-seatbelt');
-    });
-});
-//# sourceMappingURL=isolation.test.js.map

package/dist/sandbox/__tests__/isolation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isolation.test.js","sourceRoot":"","sources":["../../../src/sandbox/__tests__/isolation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAG3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEnG;;;;;;;;;;GAUG;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACb,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QACjF,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,YAAY,GAAyB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACzF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;YACvC,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;gBAClD,MAAM,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC/C,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACxF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CACvE,2BAA2B,CAC3B,CAAA;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CACvE,iCAAiC,CACjC,CAAA;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/E,YAAY;YACZ,SAAS;YACT,SAAS;SACT,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACzD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;QAClD,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QACvC,CAAC,OAAO,EAAE,SAAS,CAAC;KACX,CAAC,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC7B,uEAAuE;IACvE,mEAAmE;IACnE,sCAAsC;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAEzE,QAAQ,CAAC,GAAG,EAAE;QACb,IAAI,YAAY;YAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;QAC1E,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;QACjC,EAAE,CAAC,YAAY,EAAE,CAAA;IAClB,CAAC,CAAC,CAAA;IAEF,KAAK,UAAU,YAAY,CAAC,WAA+B;QAC1D,EAAE,CAAC,YAAY,EAAE,CAAA;QACjB,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,MAAM,GACX,MAAM,EAAE,CAAC,YAAY,CAAsC,oBAAoB,CAAC,CAAA;YACjF,OAAO;gBACN,GAAG,MAAM;gBACT,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;oBAC7B,MAAM,MAAM,GAAG,WAAW,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAA;oBAC7E,IAAI,WAAW,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;wBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;oBACjF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;gBACjC,CAAC;aACD,CAAA;QACF,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;YAC1C,KAAK,EAAE,WAAW,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAC5D,YAAY,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,OAAO,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,EAAE;QACnB,MAAM,KAAK,GAA8C,EAAE,CAAA;QAC3D,MAAM,GAAG,GAAG;YACX,KAAK;YACL,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG;YAChB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACjE,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACjE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;SACf,CAAA;QACD,OAAO,GAAG,CAAA;IACX,CAAC,CAAA;IAED,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,IAAI,oBAAoB,CAAC,GAAY,CAAC,CAAA;QAEtC,mEAAmE;QACnE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,CACL,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,MAAM,EAAW,EAAE,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CACvF,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAA;QACrE,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAW,EAAE;YAC5D,gBAAgB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/sandbox/__tests__/output-truncation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=output-truncation.test.d.ts.map

package/dist/sandbox/__tests__/output-truncation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-truncation.test.d.ts","sourceRoot":"","sources":["../../../src/sandbox/__tests__/output-truncation.test.ts"],"names":[],"mappings":""}

package/dist/sandbox/__tests__/output-truncation.test.js

@@ -1,88 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { CappedStream } from '../provider/local.js';
-/**
- * `SandboxExecResult` carries `stdoutTruncated` / `stderrTruncated`, added
- * when the other backend needed to report a clipped stream. The local
- * backend clipped at the same cap and never set them, so the model read a
- * complete-looking result whose tail was gone — against the contract's own
- * note that the kernel does not truncate silently. The tool layer already
- * renders the flag; nothing ever raised it.
- */
-function push(stream, text) {
-    stream.push(Buffer.from(text, 'utf-8'));
-}
-describe('a clipped stream says it was clipped', () => {
-    it('reports nothing truncated while under the cap', () => {
-        const stream = new CappedStream(10);
-        push(stream, 'abc');
-        expect(stream.text).toBe('abc');
-        expect(stream.truncated).toBe(false);
-    });
-    it('reports nothing truncated at exactly the cap', () => {
-        const stream = new CappedStream(4);
-        push(stream, 'abcd');
-        expect(stream.text).toBe('abcd');
-        // Everything arrived and everything was kept. A boundary that
-        // reported truncation here would cry wolf on every exact fit.
-        expect(stream.truncated).toBe(false);
-    });
-    it('reports truncated on the first byte past the cap', () => {
-        const stream = new CappedStream(4);
-        push(stream, 'abcde');
-        expect(stream.text).toBe('abcd');
-        expect(stream.truncated).toBe(true);
-    });
-    it('keeps the head across chunks and clips the rest', () => {
-        const stream = new CappedStream(5);
-        push(stream, 'abc');
-        push(stream, 'def');
-        push(stream, 'ghi');
-        expect(stream.text).toBe('abcde');
-        expect(stream.truncated).toBe(true);
-    });
-    it('stays truncated once it has been, however quiet the stream goes', () => {
-        const stream = new CappedStream(2);
-        push(stream, 'abcdef');
-        push(stream, '');
-        expect(stream.truncated).toBe(true);
-    });
-    it('is empty and untruncated before anything arrives', () => {
-        const stream = new CappedStream(8);
-        expect(stream.text).toBe('');
-        expect(stream.truncated).toBe(false);
-    });
-});
-describe('the sandbox hands the flag to its caller', () => {
-    it('marks a real over-cap run as truncated', async () => {
-        const { LocalSandboxProvider } = await import('../provider/local.js');
-        const { getRootLogger } = await import('../../utils/logger.js');
-        const { SANDBOX_MAX_OUTPUT_BYTES } = await import('../../constants/sandbox/index.js');
-        const sandbox = await new LocalSandboxProvider(getRootLogger()).create();
-        try {
-            const over = SANDBOX_MAX_OUTPUT_BYTES + 1024;
-            const result = await sandbox.exec('node', ['-e', `process.stdout.write('a'.repeat(${over}))`]);
-            expect(result.stdoutTruncated).toBe(true);
-            expect(result.stdout.length).toBe(SANDBOX_MAX_OUTPUT_BYTES);
-            // The other stream is untouched, so a clip on one must not be
-            // reported on both.
-            expect(result.stderrTruncated).toBe(false);
-        }
-        finally {
-            await sandbox.destroy();
-        }
-    }, 30_000);
-    it('leaves an under-cap run unflagged', async () => {
-        const { LocalSandboxProvider } = await import('../provider/local.js');
-        const { getRootLogger } = await import('../../utils/logger.js');
-        const sandbox = await new LocalSandboxProvider(getRootLogger()).create();
-        try {
-            const result = await sandbox.exec('node', ['-e', "process.stdout.write('small')"]);
-            expect(result.stdout).toBe('small');
-            expect(result.stdoutTruncated).toBe(false);
-        }
-        finally {
-            await sandbox.destroy();
-        }
-    }, 30_000);
-});
-//# sourceMappingURL=output-truncation.test.js.map

package/dist/sandbox/__tests__/output-truncation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-truncation.test.js","sourceRoot":"","sources":["../../../src/sandbox/__tests__/output-truncation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnD;;;;;;;GAOG;AAEH,SAAS,IAAI,CAAC,MAAoB,EAAE,IAAY;IAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAEnB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAEpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChC,8DAA8D;QAC9D,8DAA8D;QAC9D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAErB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAEnB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAEhB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAA;QAElC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;QACrE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QAC/D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAA;QAErF,MAAM,OAAO,GAAG,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QACxE,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,wBAAwB,GAAG,IAAI,CAAA;YAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,mCAAmC,IAAI,IAAI,CAAC,CAAC,CAAA;YAE9F,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;YAC3D,8DAA8D;YAC9D,oBAAoB;YACpB,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;gBAAS,CAAC;YACV,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACxB,CAAC;IACF,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;QACrE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QAE/D,MAAM,OAAO,GAAG,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QACxE,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC,CAAA;YAElF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;gBAAS,CAAC;YACV,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACxB,CAAC;IACF,CAAC,EAAE,MAAM,CAAC,CAAA;AACX,CAAC,CAAC,CAAA"}

package/dist/sandbox/__tests__/resource-limits.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=resource-limits.test.d.ts.map

package/dist/sandbox/__tests__/resource-limits.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-limits.test.d.ts","sourceRoot":"","sources":["../../../src/sandbox/__tests__/resource-limits.test.ts"],"names":[],"mappings":""}

package/dist/sandbox/__tests__/resource-limits.test.js

@@ -1,86 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { buildLimitedSpawn } from '../provider/local.js';
-/**
- * `memoryLimitMb` and `maxProcesses` were applied on one tier and dropped on
- * the other two — and the two that dropped them are the STRONGER ones. A
- * host that asked for isolation got its blast-radius caps silently removed
- * by choosing better isolation, which is the worst direction for a control
- * to fail in.
- *
- * The sibling backend in the sandbox package already treats this as an
- * error rather than a default: unenforceable per-sandbox controls are
- * refused there, not ignored. Here they are enforceable on every tier —
- * the mechanism is a shell builtin, and each tier already spawns through
- * a wrapper it can sit inside — so they are enforced.
- */
-const TIERS = ['basic', 'linux-namespace', 'macos-seatbelt'];
-function spawnFor(environment, limits) {
-    return buildLimitedSpawn({
-        environment,
-        command: 'node',
-        args: ['-e', "console.log('hi')"],
-        rootDir: '/tmp/sandbox-root',
-        ...limits,
-    });
-}
-describe('a resource cap survives the choice of tier', () => {
-    for (const environment of TIERS) {
-        it(`applies a memory cap under ${environment}`, () => {
-            const spawn = spawnFor(environment, { memoryLimitMb: 256 });
-            const rendered = [spawn.spawnCommand, ...spawn.spawnArgs].join(' ');
-            expect(rendered).toContain('ulimit -v 262144');
-        });
-        it(`applies a process cap under ${environment}`, () => {
-            const spawn = spawnFor(environment, { maxProcesses: 32 });
-            const rendered = [spawn.spawnCommand, ...spawn.spawnArgs].join(' ');
-            expect(rendered).toContain('ulimit -u 32');
-        });
-        it(`applies both together under ${environment}`, () => {
-            const spawn = spawnFor(environment, { memoryLimitMb: 128, maxProcesses: 8 });
-            const rendered = [spawn.spawnCommand, ...spawn.spawnArgs].join(' ');
-            expect(rendered).toContain('ulimit -v 131072');
-            expect(rendered).toContain('ulimit -u 8');
-        });
-    }
-});
-describe('the tier keeps doing its own job', () => {
-    it('still unshares the namespaces when a cap is set', () => {
-        const spawn = spawnFor('linux-namespace', { maxProcesses: 4 });
-        expect(spawn.spawnCommand).toBe('unshare');
-        expect(spawn.spawnArgs.join(' ')).toContain('--pid');
-    });
-    it('still installs the confinement profile when a cap is set', () => {
-        const spawn = spawnFor('macos-seatbelt', { maxProcesses: 4 });
-        expect(spawn.spawnCommand).toBe('sandbox-exec');
-        expect(spawn.spawnArgs).toContain('-p');
-    });
-});
-describe('nothing is wrapped when nothing was capped', () => {
-    it('spawns the command directly under the unconfined tier', () => {
-        const spawn = spawnFor('basic', {});
-        expect(spawn.spawnCommand).toBe('node');
-        expect(spawn.spawnArgs).toEqual(['-e', "console.log('hi')"]);
-    });
-    it('leaves the wrapper alone under the stronger tiers', () => {
-        const spawn = spawnFor('linux-namespace', {});
-        expect(spawn.spawnArgs).toContain('node');
-        expect(spawn.spawnArgs.join(' ')).not.toContain('ulimit');
-    });
-});
-describe('an argument cannot break out of the shell that applies the cap', () => {
-    it('quotes a single quote in an argument', () => {
-        const spawn = buildLimitedSpawn({
-            environment: 'basic',
-            command: 'echo',
-            args: ["it's; rm -rf /"],
-            rootDir: '/tmp/sandbox-root',
-            maxProcesses: 4,
-        });
-        const rendered = spawn.spawnArgs.join(' ');
-        // The payload survives as ONE argument rather than becoming a second
-        // command: the `;` stays inside the quoting.
-        expect(rendered).not.toContain("; rm -rf / '");
-        expect(rendered).toContain("'\\''");
-    });
-});
-//# sourceMappingURL=resource-limits.test.js.map

package/dist/sandbox/__tests__/resource-limits.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-limits.test.js","sourceRoot":"","sources":["../../../src/sandbox/__tests__/resource-limits.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAG7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD;;;;;;;;;;;;GAYG;AAEH,MAAM,KAAK,GAAyB,CAAC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;AAElF,SAAS,QAAQ,CAAC,WAA+B,EAAE,MAA8B;IAChF,OAAO,iBAAiB,CAAC;QACxB,WAAW;QACX,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC;QACjC,OAAO,EAAE,mBAAmB;QAC5B,GAAG,MAAM;KACT,CAAC,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,KAAK,MAAM,WAAW,IAAI,KAAK,EAAE,CAAC;QACjC,EAAE,CAAC,8BAA8B,WAAW,EAAE,EAAE,GAAG,EAAE;YACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAEnE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,WAAW,EAAE,EAAE,GAAG,EAAE;YACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;YACzD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAEnE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,WAAW,EAAE,EAAE,GAAG,EAAE;YACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAEnE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;YAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACH,CAAC;AACF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAA;QAE9D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAA;QAE7D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAEnC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;QAE7C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC/E,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC/B,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,mBAAmB;YAC5B,YAAY,EAAE,CAAC;SACf,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE1C,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}