@namzu/sdk 34.2.0 → 36.0.0

package/dist/sandbox/file-walk.js

@@ -0,0 +1,429 @@
+import { isAbsolute, posix } from 'node:path';
+import braceExpansion from 'brace-expansion';
+import { GLOBSTAR, Minimatch } from 'minimatch';
+import { subscribeToAbort } from '../utils/abort.js';
+import { FILE_WALK_PROGRAM } from './file-walk-program.js';
+// brace-expansion 2.1.4 implements these bounds; its older DefinitelyTyped
+// declaration only describes the first argument.
+const expandBraces = braceExpansion;
+function positiveInteger(value, name) {
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new RangeError(`${name} must be a positive safe integer`);
+    }
+    return value;
+}
+function planWalk(root, options) {
+    if (!isAbsolute(root) && !posix.isAbsolute(root)) {
+        throw new Error('File walk root must be an absolute path');
+    }
+    let pattern = options.pattern ?? '**/*';
+    while (pattern.startsWith('./'))
+        pattern = pattern.slice(2);
+    if (!pattern ||
+        pattern.startsWith('/') ||
+        /^[a-z]:/i.test(pattern) ||
+        pattern.split('/').includes('..')) {
+        throw new Error('File walk pattern must be relative to its root and cannot contain ..');
+    }
+    if (pattern.length > 4096)
+        throw new RangeError('File walk pattern exceeds 4096 characters');
+    // Expansion cannot lengthen a branch beyond its source. Bound both source
+    // length and branch count, then disable the library's separate character cap:
+    // that cap can silently truncate before our extra branch proves incompleteness.
+    const branches = expandBraces(pattern, { max: 257, maxLength: Number.POSITIVE_INFINITY });
+    if (branches.length > 256)
+        throw new RangeError('File walk pattern exceeds 256 brace expansions');
+    const matchers = branches.map((branch) => {
+        if (branch.startsWith('/') || /^[a-z]:/i.test(branch) || branch.split('/').includes('..')) {
+            throw new Error('Expanded file walk pattern escapes its root');
+        }
+        return new Minimatch(branch, {
+            nobrace: true,
+            nonegate: true,
+            nocomment: true,
+            dot: options.includeHidden ?? false,
+            platform: 'linux',
+        });
+    });
+    const sets = matchers.flatMap((matcher) => matcher.set);
+    if (sets.some((set) => set.some((segment) => segment === '..'))) {
+        throw new Error('Expanded file walk pattern escapes its root');
+    }
+    const patternDepth = Math.max(1, ...sets.map((set) => (set.includes(GLOBSTAR) ? Number.POSITIVE_INFINITY : set.length)));
+    const maxDepth = Math.min(patternDepth, options.maxDepth === undefined
+        ? Number.POSITIVE_INFINITY
+        : positiveInteger(options.maxDepth, 'maxDepth'));
+    const prefix = [];
+    for (let index = 0; sets.length > 0; index += 1) {
+        const segment = sets[0]?.[index];
+        if (typeof segment !== 'string' ||
+            !segment ||
+            segment === '.' ||
+            sets.some((set) => index >= set.length - 1 || set[index] !== segment))
+            break;
+        prefix.push(segment);
+    }
+    const expressions = matchers.flatMap((matcher) => {
+        const expression = matcher.makeRe();
+        return expression ? [{ source: expression.source, flags: expression.flags }] : [];
+    });
+    return {
+        root,
+        prefix,
+        expressions,
+        maxDepth: Number.isFinite(maxDepth) ? maxDepth : null,
+        maxEntries: positiveInteger(options.maxEntries, 'maxEntries'),
+        maxVisitedEntries: positiveInteger(options.maxVisitedEntries ?? 20_000, 'maxVisitedEntries'),
+        includeHidden: options.includeHidden ?? false,
+        patterns: sets.map((set) => set.map((segment) => segment === GLOBSTAR
+            ? null
+            : typeof segment === 'string'
+                ? segment
+                : { source: segment.source, flags: segment.flags })),
+    };
+}
+/** Whether at least one parsed pattern can match a file below this directory. */
+function directoryMatcher(plan) {
+    const patterns = plan.patterns.map((set) => set.map((part) => typeof part === 'object' && part !== null ? new RegExp(part.source, `${part.flags}s`) : part));
+    return (relative) => patterns.some((pattern) => {
+        const closure = (states) => {
+            for (const index of states)
+                if (pattern[index] === null)
+                    states.add(index + 1);
+            return states;
+        };
+        let states = closure(new Set([0]));
+        for (const name of relative.split('/')) {
+            const next = new Set();
+            for (const index of states) {
+                const segment = pattern[index];
+                if (segment === null) {
+                    if (plan.includeHidden || !name.startsWith('.'))
+                        next.add(index);
+                }
+                else if (typeof segment === 'string' ? segment === name : segment?.test(name))
+                    next.add(index + 1);
+            }
+            states = closure(next);
+            if (states.size === 0)
+                return false;
+        }
+        return [...states].some((index) => index < pattern.length);
+    });
+}
+/** Local traversal uses the same compiled matching/pruning plan as the guest. */
+async function* executeWalk(plan, signal) {
+    const fs = await import('node:fs/promises');
+    const path = await import('node:path');
+    const { EventEmitter } = await import('node:events');
+    const open = [];
+    let visited = 0;
+    let emitted = 0;
+    const matchers = plan.expressions.map(({ source, flags }) => new RegExp(source, `${flags}s`));
+    const canDescend = directoryMatcher(plan);
+    const maxDepth = plan.maxDepth ?? Number.POSITIVE_INFINITY;
+    const missing = (error) => ['ENOENT', 'ENOTDIR'].includes(error.code ?? '');
+    const close = async (dir) => {
+        try {
+            await dir.close();
+        }
+        catch (error) {
+            if (error.code !== 'ERR_DIR_CLOSED')
+                throw error;
+        }
+    };
+    const check = () => signal?.throwIfAborted();
+    async function wait(pending, late) {
+        if (!signal)
+            return await pending;
+        let abandoned = signal.aborted;
+        let dispose;
+        const observed = pending.then((value) => {
+            if (abandoned)
+                late?.(value);
+            return value;
+        });
+        try {
+            return await Promise.race([
+                observed,
+                new Promise((_, reject) => {
+                    const abort = () => {
+                        abandoned = true;
+                        reject(signal.reason);
+                    };
+                    if (signal.aborted) {
+                        abort();
+                        return;
+                    }
+                    if (typeof EventEmitter.addAbortListener === 'function') {
+                        const subscription = EventEmitter.addAbortListener(signal, abort);
+                        dispose = () => subscription[Symbol.dispose]();
+                    }
+                    else {
+                        signal.addEventListener('abort', abort, { once: true });
+                        dispose = () => signal.removeEventListener('abort', abort);
+                    }
+                }),
+            ]);
+        }
+        finally {
+            dispose?.();
+        }
+    }
+    const noteVisit = () => {
+        visited += 1;
+        if (visited > plan.maxVisitedEntries) {
+            throw Object.assign(new Error(`File search stopped after examining ${plan.maxVisitedEntries} entries; narrow its root or pattern.`), { code: 'ERR_FILE_WALK_LIMIT' });
+        }
+    };
+    try {
+        check();
+        if (plan.patterns.length === 0)
+            return;
+        let canonicalRoot;
+        try {
+            canonicalRoot = await wait(fs.realpath(plan.root));
+        }
+        catch (error) {
+            if (missing(error))
+                return;
+            throw error;
+        }
+        if (canonicalRoot !== path.resolve(plan.root))
+            throw new Error('File walk root follows a symbolic link; use its authorized real directory');
+        let start = plan.root;
+        // Never follow a static-prefix symlink to speed up a pattern: traversal
+        // and its optimized starting point must have the same link policy.
+        for (const part of plan.prefix) {
+            check();
+            start = path.join(start, part);
+            let info;
+            try {
+                info = await wait(fs.lstat(start));
+            }
+            catch (error) {
+                if (missing(error))
+                    return;
+                throw error;
+            }
+            noteVisit();
+            if (!info.isDirectory())
+                return;
+        }
+        if (plan.prefix.length >= maxDepth)
+            return;
+        const openDirectory = async (absolute, relative, depth) => {
+            check();
+            try {
+                const dir = await wait(fs.opendir(absolute), (late) => {
+                    void close(late).catch(() => { });
+                });
+                open.push({ dir, relative, depth });
+            }
+            catch (error) {
+                if (!missing(error))
+                    throw error;
+            }
+        };
+        await openDirectory(start, plan.prefix.join('/'), plan.prefix.length);
+        while (open.length > 0) {
+            check();
+            const frame = open[open.length - 1];
+            const entry = await wait(frame.dir.read());
+            check();
+            if (!entry) {
+                open.pop();
+                await close(frame.dir);
+                continue;
+            }
+            noteVisit();
+            const relative = frame.relative ? `${frame.relative}/${entry.name}` : entry.name;
+            const absolute = path.join(plan.root, relative);
+            const depth = frame.depth + 1;
+            if (entry.isDirectory()) {
+                if (depth < maxDepth && canDescend(relative))
+                    await openDirectory(absolute, relative, depth);
+                continue;
+            }
+            if (!entry.isFile() || !matchers.some((matcher) => matcher.test(relative)))
+                continue;
+            let info;
+            try {
+                info = await wait(fs.lstat(absolute));
+            }
+            catch (error) {
+                if (missing(error))
+                    continue;
+                throw error;
+            }
+            check();
+            if (!info.isFile())
+                continue;
+            emitted += 1;
+            yield { path: absolute, size: info.size };
+            if (emitted >= plan.maxEntries)
+                return;
+        }
+    }
+    finally {
+        for (const { dir } of open.reverse()) {
+            if (signal?.aborted) {
+                void close(dir).catch(() => { });
+            }
+            else
+                await close(dir);
+        }
+    }
+}
+/** Internal host path; the caller first resolves its authorized filesystem root. */
+export async function* walkFilesLocally(rootPath, options) {
+    options.signal?.throwIfAborted();
+    yield* executeWalk(planWalk(rootPath, options), options.signal);
+}
+/**
+ * Lazy, bounded JSONL enumeration inside the execution boundary owned by exec.
+ * The adapter must implement SandboxExecOptions.signal: iterator cleanup waits
+ * for cancellation settlement and preserves failures to confirm remote shutdown.
+ */
+export async function* walkFilesViaExec(exec, rootPath, options) {
+    options.signal?.throwIfAborted();
+    const plan = planWalk(rootPath, options);
+    const controller = new AbortController();
+    const dispose = options.signal
+        ? subscribeToAbort(options.signal, () => controller.abort(options.signal?.reason))
+        : undefined;
+    const queue = [];
+    let wake;
+    let buffered = '';
+    let observedOutput = false;
+    let settled = false;
+    let terminal = false;
+    let received = 0;
+    let failure;
+    const reject = (error) => {
+        failure ??= error instanceof Error ? error : new Error(String(error));
+        controller.abort(error);
+        wake?.();
+    };
+    const consume = (line) => {
+        if (line.length > 65_536)
+            throw new Error('File walk record exceeded its output bound');
+        const value = JSON.parse(line);
+        if (!value || typeof value !== 'object' || terminal)
+            throw new Error('Invalid file walk record');
+        const record = value;
+        if (record.type === 'done') {
+            terminal = true;
+            return;
+        }
+        if (record.type === 'error' && typeof record.message === 'string') {
+            terminal = true;
+            throw Object.assign(new Error(record.message), {
+                code: typeof record.code === 'string' ? record.code : undefined,
+            });
+        }
+        if (record.type !== 'entry' ||
+            typeof record.path !== 'string' ||
+            typeof record.size !== 'number' ||
+            !Number.isSafeInteger(record.size) ||
+            record.size < 0) {
+            throw new Error('Invalid file walk entry');
+        }
+        const relative = posix.relative(rootPath, record.path);
+        if (!posix.isAbsolute(record.path) ||
+            relative === '..' ||
+            relative.startsWith('../') ||
+            posix.isAbsolute(relative)) {
+            throw new Error('File walk entry escaped its requested root');
+        }
+        if (++received > plan.maxEntries)
+            throw new Error('File walk exceeded its entry bound');
+        queue.push({ path: record.path, size: record.size });
+    };
+    const ingest = (data) => {
+        try {
+            let start = 0;
+            for (;;) {
+                const newline = data.indexOf('\n', start);
+                const end = newline < 0 ? data.length : newline;
+                if (buffered.length + end - start > 65_536)
+                    throw new Error('File walk record exceeded its output bound');
+                buffered += data.slice(start, end);
+                if (newline < 0)
+                    break;
+                consume(buffered);
+                buffered = '';
+                start = newline + 1;
+            }
+        }
+        catch (error) {
+            reject(error);
+        }
+        wake?.();
+    };
+    const pending = Promise.resolve()
+        .then(() => {
+        controller.signal.throwIfAborted();
+        return exec('node', ['-e', FILE_WALK_PROGRAM, JSON.stringify(plan)], {
+            signal: controller.signal,
+            onOutput: ({ stream, data }) => {
+                if (stream === 'stdout') {
+                    observedOutput = true;
+                    ingest(data);
+                }
+            },
+        });
+    })
+        .then((result) => {
+        if (controller.signal.aborted)
+            return;
+        if (!observedOutput && result.stdout)
+            ingest(result.stdout);
+        if (buffered)
+            reject(new Error('File walk ended with an incomplete record'));
+        if (result.stdoutTruncated || result.stderrTruncated)
+            reject(new Error('File walk transport truncated its output'));
+        if (result.timedOut || result.exitCode !== 0)
+            reject(new Error(result.timedOut
+                ? 'File walk timed out'
+                : `File walk failed with exit code ${result.exitCode}: ${result.stderr}`));
+        if (!terminal && !controller.signal.aborted)
+            reject(new Error('File walk ended without its completion record'));
+    }, (error) => {
+        reject(error);
+    })
+        .finally(() => {
+        settled = true;
+        wake?.();
+    });
+    try {
+        for (;;) {
+            options.signal?.throwIfAborted();
+            const entry = queue.shift();
+            if (entry) {
+                yield entry;
+                continue;
+            }
+            if (failure)
+                throw failure;
+            if (settled)
+                break;
+            await new Promise((resolve) => {
+                wake = resolve;
+            });
+            wake = undefined;
+        }
+    }
+    finally {
+        dispose?.();
+        if (!settled)
+            controller.abort(new Error('File walk consumer stopped'));
+        await pending;
+        // A rejected cancellation can mean remote work is still alive. Preserve
+        // that error so the owning backend can retire the uncertain handle.
+        // biome-ignore lint/correctness/noUnsafeFinally: a failed remote cleanup must also reject iterator.return().
+        if (failure)
+            throw failure;
+    }
+}
+//# sourceMappingURL=file-walk.js.map

package/dist/sandbox/file-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-walk.js","sourceRoot":"","sources":["../../src/sandbox/file-walk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,cAAc,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAO/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAa1D,2EAA2E;AAC3E,iDAAiD;AACjD,MAAM,YAAY,GAAG,cAGR,CAAA;AAEb,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAgC;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAA;IACvC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3D,IACC,CAAC,OAAO;QACR,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAA;IAC5F,0EAA0E;IAC1E,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAA;IACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAA;IACjG,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACxC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE;YAC5B,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;YACnC,QAAQ,EAAE,OAAO;SACjB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC5B,CAAC,EACD,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CACtF,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACxB,YAAY,EACZ,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,iBAAiB;QAC1B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAChD,CAAA;IACD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QAChC,IACC,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,OAAO;YACR,OAAO,KAAK,GAAG;YACf,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;YAErE,MAAK;QACN,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;QACnC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,CAAC,CAAC,CAAA;IACF,OAAO;QACN,IAAI;QACJ,MAAM;QACN,WAAW;QACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACrD,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;QAC7D,iBAAiB,EAAE,eAAe,CAAC,OAAO,CAAC,iBAAiB,IAAI,MAAM,EAAE,mBAAmB,CAAC;QAC5F,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;QAC7C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACnB,OAAO,KAAK,QAAQ;YACnB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;gBAC5B,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACpD,CACD;KACD,CAAA;AACF,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAc;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5F,CACD,CAAA;IACD,OAAO,CAAC,QAAQ,EAAE,EAAE,CACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAE,EAAE;YACvC,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI;oBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YAC9E,OAAO,MAAM,CAAA;QACd,CAAC,CAAA;QACD,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACtB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACjE,CAAC;qBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;oBAC9E,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACrB,CAAC;YACD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YACtB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;QACpC,CAAC;QACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,iFAAiF;AACjF,KAAK,SAAS,CAAC,CAAC,WAAW,CAC1B,IAAc,EACd,MAAoB;IAEpB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;IACpD,MAAM,IAAI,GAAsE,EAAE,CAAA;IAClF,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAA;IAC7F,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAA;IAC1D,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAClC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC5E,MAAM,KAAK,GAAG,KAAK,EAAE,GAA0B,EAAE,EAAE;QAClD,IAAI,CAAC;YACJ,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,KAAK,CAAA;QAC5E,CAAC;IACF,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC5C,KAAK,UAAU,IAAI,CAAI,OAAmB,EAAE,IAAyB;QACpE,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,OAAO,CAAA;QACjC,IAAI,SAAS,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9B,IAAI,OAAiC,CAAA;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACvC,IAAI,SAAS;gBAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;gBACzB,QAAQ;gBACR,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAChC,MAAM,KAAK,GAAG,GAAG,EAAE;wBAClB,SAAS,GAAG,IAAI,CAAA;wBAChB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtB,CAAC,CAAA;oBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,KAAK,EAAE,CAAA;wBACP,OAAM;oBACP,CAAC;oBACD,IAAI,OAAO,YAAY,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;wBACzD,MAAM,YAAY,GAAG,YAAY,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;wBACjE,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;oBAC/C,CAAC;yBAAM,CAAC;wBACP,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;wBACvD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;oBAC3D,CAAC;gBACF,CAAC,CAAC;aACF,CAAC,CAAA;QACH,CAAC;gBAAS,CAAC;YACV,OAAO,EAAE,EAAE,CAAA;QACZ,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE;QACtB,OAAO,IAAI,CAAC,CAAA;QACZ,IAAI,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACR,uCAAuC,IAAI,CAAC,iBAAiB,uCAAuC,CACpG,EACD,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAC/B,CAAA;QACF,CAAC;IACF,CAAC,CAAA;IACD,IAAI,CAAC;QACJ,KAAK,EAAE,CAAA;QACP,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QACtC,IAAI,aAAqB,CAAA;QACzB,IAAI,CAAC;YACJ,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAM;YAC1B,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;QAC7F,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;QACrB,wEAAwE;QACxE,mEAAmE;QACnE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,EAAE,CAAA;YACP,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAC9B,IAAI,IAA6B,CAAA;YACjC,IAAI,CAAC;gBACJ,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAM;gBAC1B,MAAM,KAAK,CAAA;YACZ,CAAC;YACD,SAAS,EAAE,CAAA;YACX,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAM;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ;YAAE,OAAM;QAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa,EAAE,EAAE;YACjF,KAAK,EAAE,CAAA;YACP,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;oBACrD,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACjC,CAAC,CAAC,CAAA;gBACF,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAA;YACjC,CAAC;QACF,CAAC,CAAA;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,EAAE,CAAA;YACP,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAA0B,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1C,KAAK,EAAE,CAAA;YACP,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,IAAI,CAAC,GAAG,EAAE,CAAA;gBACV,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBACtB,SAAQ;YACT,CAAC;YACD,SAAS,EAAE,CAAA;YACX,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAA;YAC7B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,IAAI,KAAK,GAAG,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC;oBAAE,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAC5F,SAAQ;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAE,SAAQ;YACpF,IAAI,IAA6B,CAAA;YACjC,IAAI,CAAC;gBACJ,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,SAAQ;gBAC5B,MAAM,KAAK,CAAA;YACZ,CAAC;YACD,KAAK,EAAE,CAAA;YACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAC5B,OAAO,IAAI,CAAC,CAAA;YACZ,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;YACzC,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAM;QACvC,CAAC;IACF,CAAC;YAAS,CAAC;QACV,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACrB,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChC,CAAC;;gBAAM,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;IACF,CAAC;AACF,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,gBAAgB,CACtC,QAAgB,EAChB,OAAgC;IAEhC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;AAChE,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,gBAAgB,CACtC,IAAyB,EACzB,QAAgB,EAChB,OAAgC;IAEhC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;QAC7B,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClF,CAAC,CAAC,SAAS,CAAA;IACZ,MAAM,KAAK,GAAuB,EAAE,CAAA;IACpC,IAAI,IAA8B,CAAA;IAClC,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAgB,CAAA;IACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;QACjC,OAAO,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACrE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,IAAI,EAAE,EAAE,CAAA;IACT,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACvF,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAChG,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,QAAQ,GAAG,IAAI,CAAA;YACf,OAAM;QACP,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;gBAC9C,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC/D,CAAC,CAAA;QACH,CAAC;QACD,IACC,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,MAAM,CAAC,IAAI,GAAG,CAAC,EACd,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACtD,IACC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,QAAQ,KAAK,IAAI;YACjB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1B,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EACzB,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACvF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC/B,IAAI,CAAC;YACJ,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,SAAS,CAAC;gBACT,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBACzC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;gBAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,MAAM;oBACzC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;gBAC9D,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAClC,IAAI,OAAO,GAAG,CAAC;oBAAE,MAAK;gBACtB,OAAO,CAAC,QAAQ,CAAC,CAAA;gBACjB,QAAQ,GAAG,EAAE,CAAA;gBACb,KAAK,GAAG,OAAO,GAAG,CAAC,CAAA;YACpB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAA;QACd,CAAC;QACD,IAAI,EAAE,EAAE,CAAA;IACT,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;SAC/B,IAAI,CAAC,GAAG,EAAE;QACV,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;QAClC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE;YACpE,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC9B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzB,cAAc,GAAG,IAAI,CAAA;oBACrB,MAAM,CAAC,IAAI,CAAC,CAAA;gBACb,CAAC;YACF,CAAC;SACD,CAAC,CAAA;IACH,CAAC,CAAC;SACD,IAAI,CACJ,CAAC,MAAM,EAAE,EAAE;QACV,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QACrC,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3D,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe;YACnD,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA;QAC9D,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAC3C,MAAM,CACL,IAAI,KAAK,CACR,MAAM,CAAC,QAAQ;gBACd,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,mCAAmC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,CACzE,CACD,CAAA;QACF,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAA;IACpE,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;QACT,MAAM,CAAC,KAAK,CAAC,CAAA;IACd,CAAC,CACD;SACA,OAAO,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,IAAI,CAAA;QACd,IAAI,EAAE,EAAE,CAAA;IACT,CAAC,CAAC,CAAA;IACH,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;YAC3B,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,KAAK,CAAA;gBACX,SAAQ;YACT,CAAC;YACD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAA;YAC1B,IAAI,OAAO;gBAAE,MAAK;YAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,IAAI,GAAG,OAAO,CAAA;YACf,CAAC,CAAC,CAAA;YACF,IAAI,GAAG,SAAS,CAAA;QACjB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,OAAO,EAAE,EAAE,CAAA;QACX,IAAI,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;QACvE,MAAM,OAAO,CAAA;QACb,wEAAwE;QACxE,oEAAoE;QACpE,6GAA6G;QAC7G,IAAI,OAAO;YAAE,MAAM,OAAO,CAAA;IAC3B,CAAC;AACF,CAAC"}

package/dist/sandbox/index.d.ts

@@ -2,4 +2,6 @@ export { LocalSandboxProvider } from './provider/local.js';
 export type { LocalSandboxProviderOptions } from './provider/local.js';
 export { SandboxProviderFactory } from './factory.js';
 export { assertIsolation, describeIsolation, isolationOf, missingIsolation } from './isolation.js';
+export { walkFilesViaExec } from './file-walk.js';
+export type { SandboxFileWalkExec } from './file-walk.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/sandbox/index.js

@@ -1,4 +1,5 @@
 export { LocalSandboxProvider } from './provider/local.js';
 export { SandboxProviderFactory } from './factory.js';
 export { assertIsolation, describeIsolation, isolationOf, missingIsolation } from './isolation.js';
+export { walkFilesViaExec } from './file-walk.js';
 //# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/sandbox/provider/local.d.ts

@@ -44,6 +44,8 @@ export interface LimitedSpawnRequest {
     readonly command: string;
     readonly args: readonly string[];
     readonly rootDir: string;
+    /** Bound read-write beside the root; see `SandboxCreateConfig.additionalDirectories`. */
+    readonly additionalDirectories?: readonly string[];
     readonly memoryLimitMb?: number;
     readonly maxProcesses?: number;
 }
@@ -88,7 +90,7 @@ export declare function buildLimitedSpawn(request: LimitedSpawnRequest): {
  * process table through them — a bound `/proc` would hand back the process
  * isolation the same flag just removed.
  */
-export declare function buildBwrapArgs(sandboxRoot: string): string[];
+export declare function buildBwrapArgs(sandboxRoot: string, additionalDirectories?: readonly string[]): string[];
 export interface LocalSandboxProviderOptions {
     /**
      * Controls this run relies on. Construction throws when the detected

package/dist/sandbox/provider/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EACX,OAAO,EACP,mBAAmB,EAEnB,kBAAkB,EAIlB,uBAAuB,EACvB,eAAe,EAEf,MAAM,8BAA8B,CAAA;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAOnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgB/C,UAAU,qBAAqB;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAOpF;AAiFD;;;;;;;;GAQG;AACH,qBAAa,YAAY;IAIZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAI;gBAEY,QAAQ,EAAE,MAAM;IAE7C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,4CAA4C;IAC5C,IAAI,SAAS,IAAI,OAAO,CAEvB;CACD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC9B;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAChE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACnB,CAmDA;AA0DD;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAwD5D;AA6gBD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC9D;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC9B;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC3D,QAAQ,CAAC,EAAE,WAAU;IACrB,QAAQ,CAAC,IAAI,mBAAkB;IAC/B,QAAQ,CAAC,cAAc,8CAA8C;IACrE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;gBAEvC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC;IAkC5D,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CA4D5D"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/sandbox/provider/local.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EACX,OAAO,EACP,mBAAmB,EAGnB,kBAAkB,EAIlB,uBAAuB,EACvB,eAAe,EAIf,MAAM,8BAA8B,CAAA;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAQnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgB/C,UAAU,qBAAqB;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAOpF;AAiFD;;;;;;;;GAQG;AACH,qBAAa,YAAY;IAIZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAI;gBAEY,QAAQ,EAAE,MAAM;IAE7C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,4CAA4C;IAC5C,IAAI,SAAS,IAAI,OAAO,CAEvB;CACD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC9B;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAChE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACnB,CAmDA;AA0DD;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAC7B,WAAW,EAAE,MAAM,EACnB,qBAAqB,GAAE,SAAS,MAAM,EAAO,GAC3C,MAAM,EAAE,CA8DV;AAmnBD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IAC9D;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAC9B;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC3D,QAAQ,CAAC,EAAE,WAAU;IACrB,QAAQ,CAAC,IAAI,mBAAkB;IAC/B,QAAQ,CAAC,cAAc,8CAA8C;IACrE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;gBAEvC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC;IAkC5D,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CAkE5D"}