@namzu/sdk 30.2.0 → 31.1.0

package/dist/sandbox/isolation.js.map

@@ -1 +1 @@
-{"version":3,"file":"isolation.js","sourceRoot":"","sources":["../../src/sandbox/isolation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAEtE;;;;;;;;;;;;;;GAcG;AACH,MAAM,wBAAwB,GAAiE;IAC9F,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACpE,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACtE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;CAC5D,CAAA;AAED,MAAM,UAAU,WAAW,CAAC,WAA+B;IAC1D,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAA;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC/B,WAA+B,EAC/B,QAA4C;IAE5C,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACvC,OAAO,0BAA0B,CAAC,MAAM,CACvC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAC3D,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,WAA+B,EAC/B,QAA4C;IAE5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEhC,MAAM,IAAI,KAAK,CACd,wBAAwB,WAAW,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD,iBAAiB,CAAC,WAAW,CAAC,4GAA4G,CAC1Q,CAAA;AACF,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,WAA+B;IAChE,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAChF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,CAAC"}
+{"version":3,"file":"isolation.js","sourceRoot":"","sources":["../../src/sandbox/isolation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAEtE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,wBAAwB,GAAiE;IAC9F,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACjE,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACpE,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACtE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;CAC5D,CAAA;AAED,MAAM,UAAU,WAAW,CAAC,WAA+B;IAC1D,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAA;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC/B,WAA+B,EAC/B,QAA4C;IAE5C,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACvC,OAAO,0BAA0B,CAAC,MAAM,CACvC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAC3D,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,WAA+B,EAC/B,QAA4C;IAE5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEhC,MAAM,IAAI,KAAK,CACd,wBAAwB,WAAW,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD,iBAAiB,CAAC,WAAW,CAAC,4GAA4G,CAC1Q,CAAA;AACF,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,WAA+B;IAChE,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAChF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/D,CAAC"}

package/dist/sandbox/provider/local.d.ts

@@ -1,6 +1,23 @@
 import type { Sandbox, SandboxCreateConfig, SandboxEnvironment, SandboxIsolationControl, SandboxProvider } from '../../types/sandbox/index.js';
 import type { Logger } from '../../utils/logger.js';
-import { type PtyLoader } from '../terminal.js';
+import type { PtyLoader } from '../terminal.js';
+interface SpawnProbeObservation {
+    readonly error?: unknown;
+    readonly status: number | null;
+    readonly signal: NodeJS.Signals | null;
+    readonly stdout: string | null;
+}
+/**
+ * A wrapper is usable only when the same direct-spawn shape as a real command
+ * can execute and carry its output back through a pipe.
+ *
+ * Checking only the exit status is insufficient: a host policy can let a
+ * shell launch a namespace helper while refusing or partially virtualising a
+ * direct `spawn()` of that helper. In that state the old shell-string probe
+ * selected the tier, but production commands returned exit zero with empty
+ * output. Treat a spawn error, signal, or damaged pipe as an unavailable tier.
+ */
+export declare function acceptsSandboxSpawnProbe(observation: SpawnProbeObservation): boolean;
 /**
  * One output stream, accumulated under a byte cap that it reports hitting.
  *
@@ -22,6 +39,8 @@ export declare class CappedStream {
 }
 export interface LimitedSpawnRequest {
     readonly environment: SandboxEnvironment;
+    /** Canonical outer wrapper selected and probed by the provider. */
+    readonly wrapperCommand?: string;
     readonly command: string;
     readonly args: readonly string[];
     readonly rootDir: string;
@@ -42,6 +61,34 @@ export declare function buildLimitedSpawn(request: LimitedSpawnRequest): {
     spawnCommand: string;
     spawnArgs: string[];
 };
+/**
+ * Build a macOS seatbelt (SBPL) profile for sandbox isolation.
+ *
+ * Key principle: (deny default) + explicit allows. Network always denied.
+ */
+/**
+ * A mount table containing the sandbox and the system paths a binary needs,
+ * and nothing else.
+ *
+ * The difference from the namespace tier is the whole point: that one unshares
+ * a mount table and keeps the host's contents in it, so the child sees
+ * everything and this file reports `filesystem: false` for it. Here each path
+ * is bound in deliberately, so a path nobody listed is not unreadable — it is
+ * absent. `ls /home` fails with ENOENT rather than EACCES, which is the
+ * behaviour a caller relying on `filesystem` isolation is entitled to.
+ *
+ * `--unshare-all` covers the network and process controls in the same call, so
+ * all three rows of this tier's isolation report come from one spawn rather
+ * than from three mechanisms that could drift apart.
+ *
+ * The system paths are bound READ-ONLY and only when present: a distribution
+ * with a merged `/usr` has no real `/lib`, and binding a path that does not
+ * exist is a hard failure rather than a no-op. `/proc` and `/dev` get their
+ * own fresh instances instead of a bind, so the child cannot read the host's
+ * process table through them — a bound `/proc` would hand back the process
+ * isolation the same flag just removed.
+ */
+export declare function buildBwrapArgs(sandboxRoot: string): string[];
 export interface LocalSandboxProviderOptions {
     /**
      * Controls this run relies on. Construction throws when the detected
@@ -50,11 +97,13 @@ export interface LocalSandboxProviderOptions {
      */
     readonly requireIsolation?: readonly SandboxIsolationControl[];
     /**
-     * How a sandbox loads the pty binding for {@link Sandbox.openTerminal}.
+     * Legacy test injection for the local backend's former terminal method.
      *
-     * Injectable so a test needs no native build. Absent means the real
-     * `import`, which is what a host gets — and what refuses, by name, when
-     * the binding is not installed.
+     * @deprecated The local backend cannot preserve its selected isolation
+     * tier or own the complete terminal process tree, so it no longer exposes
+     * `Sandbox.openTerminal`. Supplying this option now throws. Use the
+     * host-scoped terminal helpers directly only when unconfined execution is
+     * intentional, or provide a backend that owns confinement and teardown.
      */
     readonly ptyLoader?: PtyLoader;
 }
@@ -63,8 +112,9 @@ export declare class LocalSandboxProvider implements SandboxProvider {
     readonly name = "Local Sandbox";
     readonly environment: SandboxEnvironment;
     private readonly log;
-    private readonly ptyLoader;
+    private readonly wrapperCommand;
     constructor(log: Logger, options?: LocalSandboxProviderOptions);
     create(config?: SandboxCreateConfig): Promise<Sandbox>;
 }
+export {};
 //# sourceMappingURL=local.d.ts.map

package/dist/sandbox/provider/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACX,OAAO,EACP,mBAAmB,EACnB,kBAAkB,EAIlB,uBAAuB,EACvB,eAAe,EAEf,MAAM,8BAA8B,CAAA;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAEN,KAAK,SAAS,EAId,MAAM,gBAAgB,CAAA;AAyBvB;;;;;;;;GAQG;AACH,qBAAa,YAAY;IAIZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAI;gBAEY,QAAQ,EAAE,MAAM;IAE7C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,4CAA4C;IAC5C,IAAI,SAAS,IAAI,OAAO,CAEvB;CACD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC9B;AAOD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAChE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACnB,CA6CA;AA+cD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC9D;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC9B;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC3D,QAAQ,CAAC,EAAE,WAAU;IACrB,QAAQ,CAAC,IAAI,mBAAkB;IAC/B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAE5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;gBAErC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC;IA4B5D,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CAc5D"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACX,OAAO,EACP,mBAAmB,EAEnB,kBAAkB,EAIlB,uBAAuB,EACvB,eAAe,EAEf,MAAM,8BAA8B,CAAA;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAOnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AA2B/C,UAAU,qBAAqB;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAOpF;AAuCD;;;;;;;;GAQG;AACH,qBAAa,YAAY;IAIZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAI;gBAEY,QAAQ,EAAE,MAAM;IAE7C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,4CAA4C;IAC5C,IAAI,SAAS,IAAI,OAAO,CAEvB;CACD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC9B;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAChE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACnB,CAmDA;AA6DD;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAwD5D;AA+XD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC9D;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC9B;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC3D,QAAQ,CAAC,EAAE,WAAU;IACrB,QAAQ,CAAC,IAAI,mBAAkB;IAC/B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;gBAEvC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC;IAkC5D,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CA0B5D"}

package/dist/sandbox/provider/local.js

@@ -1,5 +1,5 @@
-import { execSync, spawn } from 'node:child_process';
-import { realpathSync } from 'node:fs';
+import { spawn, spawnSync } from 'node:child_process';
+import { constants, accessSync, existsSync, realpathSync } from 'node:fs';
 import { readFile as fsReadFile, writeFile as fsWriteFile, mkdir, readdir, rename, rm, stat, } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
@@ -11,8 +11,8 @@ import { SANDBOX_DEFAULT_TIMEOUT_MS, SANDBOX_KILL_GRACE_MS, SANDBOX_MAX_OUTPUT_B
 // every bug the original's comment was written to record.
 import { killTree } from '../../process/kill-tree.js';
 import { generateSandboxId } from '../../utils/id.js';
+import { WINDOWS_CORE_ENV_KEYS, applyEnvironmentOverrides, pickEnvironmentEntries, } from '../../utils/process-environment.js';
 import { assertIsolation, describeIsolation } from '../isolation.js';
-import { loadPty, openTerminalWith, } from '../terminal.js';
 // ---------------------------------------------------------------------------
 // Path safety
 // ---------------------------------------------------------------------------
@@ -32,6 +32,54 @@ function assertInsideSandbox(sandboxRoot, targetPath) {
  * tests the isolation that will actually be applied, not a weaker subset.
  */
 const LINUX_UNSHARE_FLAGS = ['--mount', '--pid', '--fork', '--map-root-user', '--net'];
+const SPAWN_PROBE_SENTINEL = 'namzu-sandbox-spawn-probe';
+/**
+ * A wrapper is usable only when the same direct-spawn shape as a real command
+ * can execute and carry its output back through a pipe.
+ *
+ * Checking only the exit status is insufficient: a host policy can let a
+ * shell launch a namespace helper while refusing or partially virtualising a
+ * direct `spawn()` of that helper. In that state the old shell-string probe
+ * selected the tier, but production commands returned exit zero with empty
+ * output. Treat a spawn error, signal, or damaged pipe as an unavailable tier.
+ */
+export function acceptsSandboxSpawnProbe(observation) {
+    return (observation.error === undefined &&
+        observation.status === 0 &&
+        observation.signal === null &&
+        observation.stdout === SPAWN_PROBE_SENTINEL);
+}
+function probeSandboxSpawn(command, wrapperArgs) {
+    const observation = spawnSync(command, [
+        ...wrapperArgs,
+        '--',
+        process.execPath,
+        '-e',
+        `process.stdout.write(${JSON.stringify(SPAWN_PROBE_SENTINEL)})`,
+    ], {
+        encoding: 'utf8',
+        timeout: 5_000,
+    });
+    return acceptsSandboxSpawnProbe(observation);
+}
+const TRUSTED_WRAPPER_CANDIDATES = {
+    bwrap: ['/usr/bin/bwrap', '/bin/bwrap', '/usr/sbin/bwrap'],
+    unshare: ['/usr/bin/unshare', '/bin/unshare', '/usr/sbin/unshare'],
+    'sandbox-exec': ['/usr/bin/sandbox-exec'],
+};
+function resolveTrustedWrapper(name) {
+    for (const candidate of TRUSTED_WRAPPER_CANDIDATES[name]) {
+        try {
+            accessSync(candidate, constants.X_OK);
+            return realpathSync(candidate);
+        }
+        catch {
+            // Try the next fixed system location. Caller-controlled PATH is not
+            // part of wrapper discovery because it is also configurable per run.
+        }
+    }
+    return undefined;
+}
 /**
  * One output stream, accumulated under a byte cap that it reports hitting.
  *
@@ -62,6 +110,12 @@ export class CappedStream {
         return this.bytes > this.capBytes;
     }
 }
+function requiredWrapper(request) {
+    if (request.wrapperCommand === undefined || !isAbsolute(request.wrapperCommand)) {
+        throw new Error(`Sandbox environment ${request.environment} requires the absolute wrapper path that was probed`);
+    }
+    return request.wrapperCommand;
+}
 /** Single-quote for a shell, escaping any quote already inside. */
 function shellQuote(value) {
     return `'${value.replace(/'/g, "'\\''")}'`;
@@ -95,14 +149,19 @@ export function buildLimitedSpawn(request) {
         ]
         : [command, ...args];
     switch (environment) {
+        case 'linux-bwrap':
+            return {
+                spawnCommand: requiredWrapper(request),
+                spawnArgs: [...buildBwrapArgs(rootDir), '--', ...inner],
+            };
         case 'linux-namespace':
             return {
-                spawnCommand: 'unshare',
+                spawnCommand: requiredWrapper(request),
                 spawnArgs: [...LINUX_UNSHARE_FLAGS, '--', ...inner],
             };
         case 'macos-seatbelt':
             return {
-                spawnCommand: 'sandbox-exec',
+                spawnCommand: requiredWrapper(request),
                 spawnArgs: ['-p', buildSeatbeltProfile(rootDir), '--', ...inner],
             };
         case 'basic': {
@@ -118,31 +177,27 @@ export function buildLimitedSpawn(request) {
 function detectEnvironment() {
     const { platform } = process;
     if (platform === 'linux') {
-        try {
-            // Probe the real flags, not just the binary. `unshare --version`
-            // succeeds on a host where unprivileged user namespaces are
-            // disabled by sysctl and every actual spawn would fail — the tier
-            // would be claimed and never delivered. The other platform's probe
-            // already runs its sandbox for real; this one now does too.
-            execSync(`unshare ${LINUX_UNSHARE_FLAGS.join(' ')} -- /bin/true`, {
-                stdio: 'ignore',
-            });
-            return 'linux-namespace';
+        // Probe the direct child-process boundary used in production, including
+        // its stdout pipe. A shell-string probe is a different capability on
+        // hosts that mediate namespace helpers and can claim a tier production
+        // cannot actually drive.
+        const bwrap = resolveTrustedWrapper('bwrap');
+        if (bwrap !== undefined && probeSandboxSpawn(bwrap, buildBwrapArgs(tmpdir()))) {
+            return { environment: 'linux-bwrap', wrapperCommand: bwrap };
         }
-        catch {
-            // unshare missing, or the host refuses the namespaces we need
+        const unshare = resolveTrustedWrapper('unshare');
+        if (unshare !== undefined && probeSandboxSpawn(unshare, LINUX_UNSHARE_FLAGS)) {
+            return { environment: 'linux-namespace', wrapperCommand: unshare };
         }
     }
     if (platform === 'darwin') {
-        try {
-            execSync('sandbox-exec -n no-network /usr/bin/true', { stdio: 'ignore' });
-            return 'macos-seatbelt';
-        }
-        catch {
-            // sandbox-exec not available
+        const seatbelt = resolveTrustedWrapper('sandbox-exec');
+        if (seatbelt !== undefined &&
+            probeSandboxSpawn(seatbelt, ['-p', buildSeatbeltProfile(tmpdir())])) {
+            return { environment: 'macos-seatbelt', wrapperCommand: seatbelt };
         }
     }
-    return 'basic';
+    return { environment: 'basic' };
 }
 // ---------------------------------------------------------------------------
 // Seatbelt profile
@@ -170,6 +225,84 @@ function canonicalizePath(p) {
  *
  * Key principle: (deny default) + explicit allows. Network always denied.
  */
+/**
+ * A mount table containing the sandbox and the system paths a binary needs,
+ * and nothing else.
+ *
+ * The difference from the namespace tier is the whole point: that one unshares
+ * a mount table and keeps the host's contents in it, so the child sees
+ * everything and this file reports `filesystem: false` for it. Here each path
+ * is bound in deliberately, so a path nobody listed is not unreadable — it is
+ * absent. `ls /home` fails with ENOENT rather than EACCES, which is the
+ * behaviour a caller relying on `filesystem` isolation is entitled to.
+ *
+ * `--unshare-all` covers the network and process controls in the same call, so
+ * all three rows of this tier's isolation report come from one spawn rather
+ * than from three mechanisms that could drift apart.
+ *
+ * The system paths are bound READ-ONLY and only when present: a distribution
+ * with a merged `/usr` has no real `/lib`, and binding a path that does not
+ * exist is a hard failure rather than a no-op. `/proc` and `/dev` get their
+ * own fresh instances instead of a bind, so the child cannot read the host's
+ * process table through them — a bound `/proc` would hand back the process
+ * isolation the same flag just removed.
+ */
+export function buildBwrapArgs(sandboxRoot) {
+    const root = canonicalizePath(sandboxRoot);
+    const args = [
+        '--unshare-all',
+        // The child dies with the parent rather than outliving a killed run.
+        // Without it an escaped grandchild keeps the mount namespace alive and
+        // the sandbox's temporary root cannot be removed.
+        '--die-with-parent',
+        '--new-session',
+    ];
+    for (const path of BWRAP_SYSTEM_PATHS) {
+        if (existsSync(path))
+            args.push('--ro-bind', path, path);
+    }
+    // The runtime this process is running under, when it lives outside those.
+    //
+    // Found by the tier breaking four existing tests the moment it worked: they
+    // spawn `node` inside the sandbox, and a Node installed under a home
+    // directory — a tarball, a version manager, anything but the distribution's
+    // package — is simply not there once the host filesystem is gone. The
+    // failure reads as `execvp: No such file or directory`, which sounds like a
+    // broken test rather than a sandbox doing its job.
+    //
+    // The PREFIX rather than the `bin` directory: `bin` alone is enough to run
+    // `node`, but `npm` and `npx` resolve their own code through `../lib`, and a
+    // model that runs one of those is not doing anything unusual.
+    //
+    // Read-only, and skipped when a system path already covers it, so a
+    // distribution-packaged runtime adds no second bind.
+    const interpreterPrefix = dirname(dirname(canonicalizePath(process.execPath)));
+    const alreadyCovered = BWRAP_SYSTEM_PATHS.some((path) => interpreterPrefix === path || interpreterPrefix.startsWith(`${path}/`));
+    if (!alreadyCovered && existsSync(interpreterPrefix)) {
+        args.push('--ro-bind', interpreterPrefix, interpreterPrefix);
+    }
+    args.push('--proc', '/proc', '--dev', '/dev', 
+    // A private /tmp, because the sandbox root is where writes belong and a
+    // shared /tmp is a channel between runs.
+    '--tmpfs', '/tmp', '--bind', root, root, '--chdir', root);
+    return args;
+}
+/**
+ * Read-only host paths a spawned binary needs to run at all.
+ *
+ * Bound rather than assumed: `/etc` carries the resolver and user database a
+ * shell reads on startup, and omitting it produces failures that look like the
+ * command is broken rather than like the sandbox is doing its job.
+ */
+const BWRAP_SYSTEM_PATHS = [
+    '/usr',
+    '/bin',
+    '/sbin',
+    '/lib',
+    '/lib64',
+    '/etc',
+    '/opt',
+];
 function buildSeatbeltProfile(sandboxRoot) {
     const root = canonicalizePath(sandboxRoot);
     return [
@@ -242,25 +375,19 @@ function buildSeatbeltProfile(sandboxRoot) {
 // Environment building
 // ---------------------------------------------------------------------------
 function buildSafeEnv(configEnv, optsEnv) {
-    const env = {};
-    for (const key of SANDBOX_SAFE_ENV_KEYS) {
-        const value = process.env[key];
-        if (value !== undefined) {
-            env[key] = value;
-        }
-    }
-    if (configEnv) {
-        Object.assign(env, configEnv);
-    }
-    if (optsEnv) {
-        Object.assign(env, optsEnv);
-    }
+    const allowed = process.platform === 'win32'
+        ? [...SANDBOX_SAFE_ENV_KEYS, ...WINDOWS_CORE_ENV_KEYS]
+        : SANDBOX_SAFE_ENV_KEYS;
+    const env = pickEnvironmentEntries(allowed);
+    applyEnvironmentOverrides(env, configEnv);
+    applyEnvironmentOverrides(env, optsEnv);
     return env;
 }
 // ---------------------------------------------------------------------------
 // LocalSandbox
 // ---------------------------------------------------------------------------
 class LocalSandbox {
+    wrapperCommand;
     id;
     rootDir;
     environment;
@@ -270,14 +397,8 @@ class LocalSandbox {
     get status() {
         return this._status;
     }
-    /**
-     * How the pty binding is loaded. Injectable so a test needs no native
-     * build — the refusal path and the session wiring are both worth
-     * covering, and neither should require compiling C++ on CI.
-     */
-    ptyLoader;
-    constructor(id, rootDir, environment, config, log, ptyLoader) {
-        this.ptyLoader = ptyLoader;
+    constructor(id, rootDir, environment, wrapperCommand, config, log) {
+        this.wrapperCommand = wrapperCommand;
         this.id = id;
         this.rootDir = rootDir;
         this.environment = environment;
@@ -330,32 +451,6 @@ class LocalSandbox {
             }
         }
     }
-    /**
-     * A real pseudo-terminal, or a refusal that says what to install.
-     *
-     * Deliberately NOT confined the way `exec` is. `exec` wraps every
-     * command in this class's isolation tiers (`unshare …`,
-     * `sandbox-exec …`); a terminal is an interactive session a human is
-     * driving, and wrapping it would put the tier's own shell between the
-     * operator's keystrokes and the program. So this runs inside the
-     * sandbox's ROOT DIRECTORY and nothing more — which is stated here
-     * because a caller reading "sandbox" would otherwise assume the tier
-     * applies, and it is exactly the assumption that makes a boundary
-     * imaginary.
-     *
-     * A host that needs the tier runs its interactive program through
-     * `exec` and accepts that it is not a terminal, or supplies a backend
-     * whose terminals are confined by construction — a container's `exec`,
-     * for instance, where the confinement is the container and not a
-     * wrapper.
-     */
-    async openTerminal(options) {
-        if (this._status === 'destroyed') {
-            throw new Error(`Sandbox ${this.id} is destroyed`);
-        }
-        const pty = await loadPty(this.ptyLoader);
-        return openTerminalWith(pty, options, { shell: '/bin/sh', cwd: this.rootDir });
-    }
     async writeFile(path, content) {
         if (this._status === 'destroyed') {
             throw new Error(`Sandbox ${this.id} is destroyed`);
@@ -406,7 +501,7 @@ class LocalSandbox {
         }
         return entries;
     }
-    async destroy() {
+    async destroy(_options) {
         if (this._status === 'destroyed') {
             return;
         }
@@ -420,6 +515,7 @@ class LocalSandbox {
     buildSpawnArgs(command, args) {
         return buildLimitedSpawn({
             environment: this.environment,
+            ...(this.wrapperCommand !== undefined ? { wrapperCommand: this.wrapperCommand } : {}),
             command,
             args,
             rootDir: this.rootDir,
@@ -504,10 +600,14 @@ export class LocalSandboxProvider {
     name = 'Local Sandbox';
     environment;
     log;
-    ptyLoader;
+    wrapperCommand;
     constructor(log, options = {}) {
-        this.ptyLoader = options.ptyLoader;
-        this.environment = detectEnvironment();
+        if (options.ptyLoader !== undefined) {
+            throw new Error('LocalSandboxProvider no longer accepts ptyLoader because its terminal could not preserve the selected isolation tier or sandbox teardown ownership. Use the host-scoped terminal helpers only for intentional host execution, or provide a confined terminal backend.');
+        }
+        const detected = detectEnvironment();
+        this.environment = detected.environment;
+        this.wrapperCommand = 'wrapperCommand' in detected ? detected.wrapperCommand : undefined;
         this.log = log.child({ [SCOPE_ATTRIBUTE]: 'sandbox/provider/local' });
         assertIsolation(this.environment, options.requireIsolation ?? []);
         const enforced = describeIsolation(this.environment);
@@ -532,15 +632,20 @@ export class LocalSandboxProvider {
         }
     }
     async create(config) {
+        config?.signal?.throwIfAborted();
         const id = generateSandboxId();
         // mkdtemp is in node:fs/promises but requires an async import-style usage.
         // We use the same pattern: create a unique dir under os.tmpdir().
         const { mkdtemp } = await import('node:fs/promises');
         const rawDir = await mkdtemp(join(tmpdir(), SANDBOX_TEMP_DIR_PREFIX));
+        if (config?.signal?.aborted) {
+            await rm(rawDir, { recursive: true, force: true });
+            throw config.signal.reason;
+        }
         // Canonicalize — macOS symlinks like /var → /private/var must be resolved
         const rootDir = canonicalizePath(rawDir);
         this.log.info('Creating sandbox', { 'namzu.sandbox.id': id, 'namzu.sandbox.root_dir': rootDir });
-        return new LocalSandbox(id, rootDir, this.environment, config ?? {}, this.log, this.ptyLoader);
+        return new LocalSandbox(id, rootDir, this.environment, this.wrapperCommand, config ?? {}, this.log);
     }
 }
 //# sourceMappingURL=local.js.map

package/dist/sandbox/provider/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EACN,QAAQ,IAAI,UAAU,EACtB,SAAS,IAAI,WAAW,EACxB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,IAAI,GACJ,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,oCAAoC,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE1D,OAAO,EACN,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,GACvB,MAAM,kCAAkC,CAAA;AACzC,sEAAsE;AACtE,2EAA2E;AAC3E,0DAA0D;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAarD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAIN,OAAO,EACP,gBAAgB,GAChB,MAAM,gBAAgB,CAAA;AAEvB,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,SAAS,mBAAmB,CAAC,WAAmB,EAAE,UAAkB;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;AAEtF;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IAIK;IAHrB,MAAM,GAAG,EAAE,CAAA;IACX,KAAK,GAAG,CAAC,CAAA;IAEjB,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,IAAI,CAAC,KAAa;QACjB,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACnB,CAAC;IAED,4CAA4C;IAC5C,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAA;IAClC,CAAC;CACD;AAWD,mEAAmE;AACnE,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAA;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAI7D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAEvD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,aAAa,GAAG,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,KAAK,GACV,MAAM,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC;YACA,SAAS;YACT,IAAI;YACJ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3E;QACF,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAEtB,QAAQ,WAAW,EAAE,CAAC;QACrB,KAAK,iBAAiB;YACrB,OAAO;gBACN,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,CAAC,GAAG,mBAAmB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;aACnD,CAAA;QAEF,KAAK,gBAAgB;YACpB,OAAO;gBACN,YAAY,EAAE,cAAc;gBAC5B,SAAS,EAAE,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;aAChE,CAAA;QAEF,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAA;YAC7B,OAAO,EAAE,YAAY,EAAE,IAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACzD,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACT,MAAM,WAAW,GAAU,WAAW,CAAA;YACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAA;QAC/D,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB;IACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAE5B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACJ,iEAAiE;YACjE,4DAA4D;YAC5D,kEAAkE;YAClE,mEAAmE;YACnE,4DAA4D;YAC5D,QAAQ,CAAC,WAAW,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;gBACjE,KAAK,EAAE,QAAQ;aACf,CAAC,CAAA;YACF,OAAO,iBAAiB,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,8DAA8D;QAC/D,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,QAAQ,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACzE,OAAO,gBAAgB,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,6BAA6B;QAC9B,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAA;AACf,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,CAAS;IAClC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;QACrE,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC,EAAE,CAAA;QAChD,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC,EAAE,CAAA;QAChD,OAAO,CAAC,CAAA;IACT,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,WAAmB;IAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAE1C,OAAO;QACN,aAAa;QACb,gBAAgB;QAEhB,4BAA4B;QAC5B,sBAAsB;QACtB,sBAAsB;QACtB,6CAA6C;QAC7C,sCAAsC;QAEtC,8CAA8C;QAC9C,+BAA+B,IAAI,KAAK;QACxC,gCAAgC,IAAI,KAAK;QAEzC,kEAAkE;QAClE,kCAAkC;QAElC,oDAAoD;QACpD,yCAAyC;QACzC,yCAAyC;QACzC,qCAAqC;QACrC,sCAAsC;QACtC,0CAA0C;QAC1C,2CAA2C;QAC3C,2CAA2C;QAE3C,wDAAwD;QACxD,wCAAwC;QACxC,oDAAoD;QACpD,qDAAqD;QACrD,oDAAoD;QAEpD,uBAAuB;QACvB,qCAAqC;QACrC,2CAA2C;QAC3C,0CAA0C;QAC1C,0CAA0C;QAC1C,4CAA4C;QAC5C,6CAA6C;QAC7C,yCAAyC;QAEzC,6CAA6C;QAC7C,6CAA6C;QAC7C,iDAAiD;QACjD,8CAA8C;QAC9C,kDAAkD;QAElD,0DAA0D;QAC1D,4BAA4B;QAE5B,sBAAsB;QACtB,qBAAqB;QACrB,8BAA8B;QAE9B,6CAA6C;QAC7C,oBAAoB;QACpB,kCAAkC;QAClC,2CAA2C;QAC3C,wDAAwD;QACxD,2DAA2D;QAC3D,8DAA8D;QAC9D,2CAA2C;QAC3C,4CAA4C;QAC5C,2CAA2C;QAC3C,0DAA0D;QAC1D,mCAAmC;QACnC,+CAA+C;QAC/C,uCAAuC;QACvC,GAAG;QAEH,oBAAoB;QACpB,uBAAuB;QACvB,uBAAuB;QAEvB,6BAA6B;QAC7B,iBAAiB;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,YAAY,CACpB,SAAkC,EAClC,OAAgC;IAEhC,MAAM,GAAG,GAA2B,EAAE,CAAA;IAEtC,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACjB,CAAC;IACF,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC5B,CAAC;IAED,OAAO,GAAG,CAAA;AACX,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,YAAY;IACR,EAAE,CAAW;IACb,OAAO,CAAQ;IACf,WAAW,CAAoB;IAEhC,OAAO,CAAe;IACb,MAAM,CAAqB;IAC3B,GAAG,CAAQ;IAE5B,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACc,SAAS,CAAuB;IAEjD,YACC,EAAa,EACb,OAAe,EACf,WAA+B,EAC/B,MAA2B,EAC3B,GAAW,EACX,SAAqB;QAErB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE7F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAChC,wBAAwB,EAAE,OAAO;YACjC,6BAA6B,EAAE,WAAW;SAC1C,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACT,OAAe,EACf,OAAiB,EAAE,EACnB,IAAyB;QAEzB,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACpD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,0BAA0B,CAAA;QAEpF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;QAElF,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAEtE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACnC,uBAAuB,EAAE,OAAO;YAChC,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,OAAO;YAChC,6BAA6B,EAAE,IAAI,CAAC,WAAW;SAC/C,CAAC,CAAA;QAEF,sEAAsE;QACtE,uDAAuD;QACvD,EAAE;QACF,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,kCAAkC;QAClC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAA;QAExF,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;YAC1F,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAA;QACzD,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,IAAK,IAAI,CAAC,OAAyB,KAAK,WAAW,EAAE,CAAC;gBACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACvB,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACzC,OAAO,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAwB;QACrD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAEnD,gDAAgD;QAChD,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QAC/C,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnC,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACnD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,CAAA;QAE3C,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAA;QAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;YACvB,IAAI,CAAC,GAAG;gBAAE,MAAK;YACf,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAChB,SAAQ;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;oBAAE,SAAQ;gBAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,CAAC,IAAI;oBAAE,SAAQ;gBACnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9C,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,OAAM;QACP,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,WAAW,CAAA;QAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAExD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAElE,cAAc,CACrB,OAAe,EACf,IAAc;QAEd,OAAO,iBAAiB,CAAC;YACxB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO;YACP,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC,CAAA;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CACnB,OAAe,EACf,IAAc,EACd,GAAW,EACX,GAA2B,EAC3B,EAAmB,EACnB,SAAsB,EAAE,CAAC,MAAM;QAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACpD,IAAI,KAA+B,CAAA;YACnC,IAAI,CAAC;gBACJ,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;oBAC5B,GAAG;oBACH,GAAG;oBACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;oBAC/B,MAAM;oBACN,4DAA4D;oBAC5D,uDAAuD;oBACvD,4DAA4D;oBAC5D,6DAA6D;oBAC7D,sCAAsC;oBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;iBACtC,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAa,CAAC,GAAG,CAAC,CAAA;gBAClB,OAAM;YACP,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;YACzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;YACzD,IAAI,QAAQ,GAAG,KAAK,CAAA;YAEpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAC/D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAE/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAChD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChD,0DAA0D;oBAC1D,qDAAqD;oBACrD,sDAAsD;oBACtD,6CAA6C;oBAC7C,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAA;oBAC5B,8DAA8D;oBAC9D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,uCAAuC;oBACvC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;oBAC1B,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,qBAAqB,CAAC,CAAA;oBACnE,OAAM;gBACP,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,CAAA;YACnB,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAClC,cAAc,CAAC;oBACd,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtC,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,QAAQ;oBACR,yDAAyD;oBACzD,0DAA0D;oBAC1D,0DAA0D;oBAC1D,iDAAiD;oBACjD,eAAe,EAAE,MAAM,CAAC,SAAS;oBACjC,eAAe,EAAE,MAAM,CAAC,SAAS;iBACjC,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;CACD;AAuBD,MAAM,OAAO,oBAAoB;IACvB,EAAE,GAAG,OAAO,CAAA;IACZ,IAAI,GAAG,eAAe,CAAA;IACtB,WAAW,CAAoB;IAEvB,GAAG,CAAQ;IAEX,SAAS,CAAuB;IAEjD,YAAY,GAAW,EAAE,UAAuC,EAAE;QACjE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAA;QACtC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAA;QAErE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;QAEjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YAClC,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,+DAA+D;YAC/D,8DAA8D;YAC9D,qBAAqB;YACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBAC7E,6BAA6B,EAAE,IAAI,CAAC,WAAW;gBAC/C,wBAAwB,EAAE,QAAQ;aAClC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;gBAC5B,6BAA6B,EAAE,IAAI,CAAC,WAAW;gBAC/C,wBAAwB,EAAE,QAAQ;aAClC,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACxC,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAA;QAE9B,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;QACrE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAExC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAA;QAEhG,OAAO,IAAI,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/F,CAAC;CACD"}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EACN,QAAQ,IAAI,UAAU,EACtB,SAAS,IAAI,WAAW,EACxB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,IAAI,GACJ,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,oCAAoC,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE1D,OAAO,EACN,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,GACvB,MAAM,kCAAkC,CAAA;AACzC,sEAAsE;AACtE,2EAA2E;AAC3E,0DAA0D;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAcrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,OAAO,EACN,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,GACtB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAGpE,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,SAAS,mBAAmB,CAAC,WAAmB,EAAE,UAAkB;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;AAEtF,MAAM,oBAAoB,GAAG,2BAA2B,CAAA;AASxD;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAkC;IAC1E,OAAO,CACN,WAAW,CAAC,KAAK,KAAK,SAAS;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,CAAC,MAAM,KAAK,IAAI;QAC3B,WAAW,CAAC,MAAM,KAAK,oBAAoB,CAC3C,CAAA;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,WAA8B;IACzE,MAAM,WAAW,GAAG,SAAS,CAC5B,OAAO,EACP;QACC,GAAG,WAAW;QACd,IAAI;QACJ,OAAO,CAAC,QAAQ;QAChB,IAAI;QACJ,wBAAwB,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG;KAC/D,EACD;QACC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,KAAK;KACd,CACD,CAAA;IACD,OAAO,wBAAwB,CAAC,WAAW,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,0BAA0B,GAAG;IAClC,KAAK,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,CAAC;IAC1D,OAAO,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,CAAC;IAClE,cAAc,EAAE,CAAC,uBAAuB,CAAC;CAChC,CAAA;AAEV,SAAS,qBAAqB,CAAC,IAA6C;IAC3E,KAAK,MAAM,SAAS,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,YAAY,CAAC,SAAS,CAAC,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,oEAAoE;YACpE,qEAAqE;QACtE,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IAIK;IAHrB,MAAM,GAAG,EAAE,CAAA;IACX,KAAK,GAAG,CAAC,CAAA;IAEjB,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,IAAI,CAAC,KAAa;QACjB,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;IAC3B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACnB,CAAC;IAED,4CAA4C;IAC5C,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAA;IAClC,CAAC;CACD;AAaD,SAAS,eAAe,CAAC,OAA4B;IACpD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,WAAW,qDAAqD,CAC/F,CAAA;IACF,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAA;AAC9B,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAA;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAI7D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAEvD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,aAAa,GAAG,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,KAAK,GACV,MAAM,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC;YACA,SAAS;YACT,IAAI;YACJ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3E;QACF,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAEtB,QAAQ,WAAW,EAAE,CAAC;QACrB,KAAK,aAAa;YACjB,OAAO;gBACN,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC;gBACtC,SAAS,EAAE,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;aACvD,CAAA;QAEF,KAAK,iBAAiB;YACrB,OAAO;gBACN,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC;gBACtC,SAAS,EAAE,CAAC,GAAG,mBAAmB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;aACnD,CAAA;QAEF,KAAK,gBAAgB;YACpB,OAAO;gBACN,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC;gBACtC,SAAS,EAAE,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;aAChE,CAAA;QAEF,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAA;YAC7B,OAAO,EAAE,YAAY,EAAE,IAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACzD,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACT,MAAM,WAAW,GAAU,WAAW,CAAA;YACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAA;QAC/D,CAAC;IACF,CAAC;AACF,CAAC;AASD,SAAS,iBAAiB;IACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAE5B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,yBAAyB;QACzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAA;QAChD,IAAI,OAAO,KAAK,SAAS,IAAI,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,CAAA;QACnE,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAA;QACtD,IACC,QAAQ,KAAK,SAAS;YACtB,iBAAiB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAClE,CAAC;YACF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAA;QACnE,CAAC;IACF,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,CAAS;IAClC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;QACrE,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC,EAAE,CAAA;QAChD,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC,EAAE,CAAA;QAChD,OAAO,CAAC,CAAA;IACT,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAE1C,MAAM,IAAI,GAAG;QACZ,eAAe;QACf,qEAAqE;QACrE,uEAAuE;QACvE,kDAAkD;QAClD,mBAAmB;QACnB,eAAe;KACf,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IAED,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,qEAAqE;IACrE,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,mDAAmD;IACnD,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,8DAA8D;IAC9D,EAAE;IACF,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC9E,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAC7C,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,KAAK,IAAI,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAChF,CAAA;IACD,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,CAAC,IAAI,CACR,QAAQ,EACR,OAAO,EACP,OAAO,EACP,MAAM;IACN,wEAAwE;IACxE,yCAAyC;IACzC,SAAS,EACT,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,IAAI,CACJ,CAAA;IAED,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAsB;IAC7C,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;CACN,CAAA;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAE1C,OAAO;QACN,aAAa;QACb,gBAAgB;QAEhB,4BAA4B;QAC5B,sBAAsB;QACtB,sBAAsB;QACtB,6CAA6C;QAC7C,sCAAsC;QAEtC,8CAA8C;QAC9C,+BAA+B,IAAI,KAAK;QACxC,gCAAgC,IAAI,KAAK;QAEzC,kEAAkE;QAClE,kCAAkC;QAElC,oDAAoD;QACpD,yCAAyC;QACzC,yCAAyC;QACzC,qCAAqC;QACrC,sCAAsC;QACtC,0CAA0C;QAC1C,2CAA2C;QAC3C,2CAA2C;QAE3C,wDAAwD;QACxD,wCAAwC;QACxC,oDAAoD;QACpD,qDAAqD;QACrD,oDAAoD;QAEpD,uBAAuB;QACvB,qCAAqC;QACrC,2CAA2C;QAC3C,0CAA0C;QAC1C,0CAA0C;QAC1C,4CAA4C;QAC5C,6CAA6C;QAC7C,yCAAyC;QAEzC,6CAA6C;QAC7C,6CAA6C;QAC7C,iDAAiD;QACjD,8CAA8C;QAC9C,kDAAkD;QAElD,0DAA0D;QAC1D,4BAA4B;QAE5B,sBAAsB;QACtB,qBAAqB;QACrB,8BAA8B;QAE9B,6CAA6C;QAC7C,oBAAoB;QACpB,kCAAkC;QAClC,2CAA2C;QAC3C,wDAAwD;QACxD,2DAA2D;QAC3D,8DAA8D;QAC9D,2CAA2C;QAC3C,4CAA4C;QAC5C,2CAA2C;QAC3C,0DAA0D;QAC1D,mCAAmC;QACnC,+CAA+C;QAC/C,uCAAuC;QACvC,GAAG;QAEH,oBAAoB;QACpB,uBAAuB;QACvB,uBAAuB;QAEvB,6BAA6B;QAC7B,iBAAiB;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,YAAY,CACpB,SAAkC,EAClC,OAAgC;IAEhC,MAAM,OAAO,GACZ,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC3B,CAAC,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,qBAAqB,CAAC;QACtD,CAAC,CAAC,qBAAqB,CAAA;IACzB,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAE3C,yBAAyB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACzC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAEvC,OAAO,GAAG,CAAA;AACX,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,YAAY;IAiBC;IAhBT,EAAE,CAAW;IACb,OAAO,CAAQ;IACf,WAAW,CAAoB;IAEhC,OAAO,CAAe;IACb,MAAM,CAAqB;IAC3B,GAAG,CAAQ;IAE5B,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAA;IACpB,CAAC;IAED,YACC,EAAa,EACb,OAAe,EACf,WAA+B,EACd,cAAkC,EACnD,MAA2B,EAC3B,GAAW;QAFM,mBAAc,GAAd,cAAc,CAAoB;QAInD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE7F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAChC,wBAAwB,EAAE,OAAO;YACjC,6BAA6B,EAAE,WAAW;SAC1C,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACT,OAAe,EACf,OAAiB,EAAE,EACnB,IAAyB;QAEzB,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACpD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,0BAA0B,CAAA;QAEpF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;QAElF,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAEtE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACnC,uBAAuB,EAAE,OAAO;YAChC,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,OAAO;YAChC,6BAA6B,EAAE,IAAI,CAAC,WAAW;SAC/C,CAAC,CAAA;QAEF,sEAAsE;QACtE,uDAAuD;QACvD,EAAE;QACF,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,kCAAkC;QAClC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAA;QAExF,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;YAC1F,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAA;QACzD,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,IAAK,IAAI,CAAC,OAAyB,KAAK,WAAW,EAAE,CAAC;gBACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACvB,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAwB;QACrD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAEnD,gDAAgD;QAChD,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QAC/C,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnC,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACnD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,CAAA;QAE3C,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAA;QAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;YACvB,IAAI,CAAC,GAAG;gBAAE,MAAK;YACf,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAChB,SAAQ;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;oBAAE,SAAQ;gBAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,CAAC,IAAI;oBAAE,SAAQ;gBACnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9C,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgC;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,OAAM;QACP,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,WAAW,CAAA;QAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAExD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAElE,cAAc,CACrB,OAAe,EACf,IAAc;QAEd,OAAO,iBAAiB,CAAC;YACxB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO;YACP,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC,CAAA;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CACnB,OAAe,EACf,IAAc,EACd,GAAW,EACX,GAA2B,EAC3B,EAAmB,EACnB,SAAsB,EAAE,CAAC,MAAM;QAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACpD,IAAI,KAA+B,CAAA;YACnC,IAAI,CAAC;gBACJ,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;oBAC5B,GAAG;oBACH,GAAG;oBACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;oBAC/B,MAAM;oBACN,4DAA4D;oBAC5D,uDAAuD;oBACvD,4DAA4D;oBAC5D,6DAA6D;oBAC7D,sCAAsC;oBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;iBACtC,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,aAAa,CAAC,GAAG,CAAC,CAAA;gBAClB,OAAM;YACP,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;YACzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;YACzD,IAAI,QAAQ,GAAG,KAAK,CAAA;YAEpB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAC/D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAE/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAChD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChD,0DAA0D;oBAC1D,qDAAqD;oBACrD,sDAAsD;oBACtD,6CAA6C;oBAC7C,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAA;oBAC5B,8DAA8D;oBAC9D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,uCAAuC;oBACvC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;oBAC1B,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,qBAAqB,CAAC,CAAA;oBACnE,OAAM;gBACP,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,CAAA;YACnB,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAClC,cAAc,CAAC;oBACd,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtC,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM,IAAI,SAAS;oBAC3B,QAAQ;oBACR,yDAAyD;oBACzD,0DAA0D;oBAC1D,0DAA0D;oBAC1D,iDAAiD;oBACjD,eAAe,EAAE,MAAM,CAAC,SAAS;oBACjC,eAAe,EAAE,MAAM,CAAC,SAAS;iBACjC,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;CACD;AAyBD,MAAM,OAAO,oBAAoB;IACvB,EAAE,GAAG,OAAO,CAAA;IACZ,IAAI,GAAG,eAAe,CAAA;IACtB,WAAW,CAAoB;IAEvB,GAAG,CAAQ;IACX,cAAc,CAAoB;IAEnD,YAAY,GAAW,EAAE,UAAuC,EAAE;QACjE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACd,uQAAuQ,CACvQ,CAAA;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;QACpC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;QACvC,IAAI,CAAC,cAAc,GAAG,gBAAgB,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACxF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAA;QAErE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;QAEjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YAClC,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,+DAA+D;YAC/D,8DAA8D;YAC9D,qBAAqB;YACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBAC7E,6BAA6B,EAAE,IAAI,CAAC,WAAW;gBAC/C,wBAAwB,EAAE,QAAQ;aAClC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;gBAC5B,6BAA6B,EAAE,IAAI,CAAC,WAAW;gBAC/C,wBAAwB,EAAE,QAAQ;aAClC,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACxC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAA;QAE9B,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;QACrE,IAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA;QAC3B,CAAC;QACD,0EAA0E;QAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAExC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAA;QAEhG,OAAO,IAAI,YAAY,CACtB,EAAE,EACF,OAAO,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,cAAc,EACnB,MAAM,IAAI,EAAE,EACZ,IAAI,CAAC,GAAG,CACR,CAAA;IACF,CAAC;CACD"}

package/dist/sandbox/terminal.d.ts

@@ -1,5 +1,5 @@
 /**
- * A real terminal inside the sandbox, or nothing.
+ * A real host pseudo-terminal, or nothing.
  *
  * `exec` runs a command and hands back what it printed. That is the whole
  * shape of it, and a large class of work does not fit: an interactive
@@ -18,13 +18,19 @@
  * why. That is the same rule `Sandbox.setNetworkPolicy` states for itself:
  * a capability accepted and not applied is worse than one never offered,
  * because the caller stops looking.
+ *
+ * Nothing in this module creates a sandbox or owns a complete descendant
+ * process tree. `openTerminalWith` starts exactly the program, arguments and
+ * working directory it is handed through the supplied binding. A sandbox or
+ * durable terminal backend must wrap that argv under its own confinement and
+ * make teardown await every process it owns before using this primitive.
  */
 export interface TerminalSize {
     readonly cols: number;
     readonly rows: number;
 }
 export interface OpenTerminalOptions {
-    /** The program to run. Defaults to the sandbox's own shell. */
+    /** The program to run. Defaults to the caller-supplied shell. */
     readonly command?: string;
     readonly args?: readonly string[];
     readonly cwd?: string;
@@ -57,7 +63,7 @@ export interface TerminalSession {
         exitCode: number;
         signal?: number;
     }>;
-    /** Stop it. */
+    /** Ask the backing binding to stop its top-level terminal process. */
     kill(signal?: string): void;
 }
 /** A terminal asked for where none can be provided. */
@@ -117,11 +123,13 @@ export type PtyLoader = () => Promise<PtyModule>;
  */
 export declare function loadPty(loader?: PtyLoader): Promise<PtyModule>;
 /**
- * Open a terminal, given a loaded binding.
+ * Open a host terminal, given a loaded binding.
  *
  * Separated from `loadPty` so the refusal and the session are testable
  * apart: one is about a missing dependency, the other about wiring a
- * process that exists.
+ * process that exists. This helper does not add confinement or descendant
+ * cleanup; those belong to the backend that supplies its argv and owns the
+ * returned session.
  */
 export declare function openTerminalWith(pty: PtyModule, options: OpenTerminalOptions, defaults: {
     readonly shell: string;

package/dist/sandbox/terminal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/sandbox/terminal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,eAAe;IAC/B,8EAA8E;IAC9E,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;IAChC,6EAA6E;IAC7E,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IACrD,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/D,eAAe;IACf,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,uDAAuD;AACvD,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,QAAQ,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;gBAExE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CASvF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,aAAa,CAAA;AAEvC,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACzB,KAAK,CACJ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAC5B,GACC,UAAU,CAAA;CACb;AAED,MAAM,WAAW,UAAU;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAA;IAC7D,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAA;IAC7F,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;AAEhD;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAoBpE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxD,eAAe,CA0CjB"}
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/sandbox/terminal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IACnC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,eAAe;IAC/B,8EAA8E;IAC9E,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;IAChC,6EAA6E;IAC7E,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IACrD,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/D,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,uDAAuD;AACvD,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,QAAQ,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;gBAExE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CASvF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,aAAa,CAAA;AAEvC,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACzB,KAAK,CACJ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAC5B,GACC,UAAU,CAAA;CACb;AAED,MAAM,WAAW,UAAU;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAA;IAC7D,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAA;IAC7F,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;AAEhD;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAoBpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxD,eAAe,CA0CjB"}