@nocobase/app-plugin-agents 1.0.0-beta.16 → 1.0.0-beta.17

package/dist/server/online/sandbox/cli-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-command.js","sourceRoot":"","sources":["../../../../server/online/sandbox/cli-command.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,UAAU,EACV,aAAa,GAEd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,aAAa,EACb,YAAY,EACZ,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAGhB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,aAAa,GAId,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,KAAK,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9D,MAAM,OAAQ,SAAQ,KAAK;IAEP;IACA;IAFlB,YACkB,KAAuB,EACvB,IAAc;QAE9B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHL,UAAK,GAAL,KAAK,CAAkB;QACvB,SAAI,GAAJ,IAAI,CAAU;IAGhC,CAAC;CACF;AAED,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,IAAI,GAAG,eAAe,EAAW,EAAE,CACjE,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;AAEzE,kDAAkD;AAClD,MAAM,WAAW,GAA2C;IAC1D,CAAC,QAAQ,EAAE,wCAAwC,CAAC;CACrD,CAAC;AAEF,SAAS,WAAW,CAClB,GAAW,EACX,QAA+B,EAC/B,MAAyB;IAEzB,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,GAAG,KAAK,aAAa,GAAG,8DAA8D,GAAG,0EAA0E,CAAC;AAC7K,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,OAAmB;IACnD,OAAO,iBAAiB,CAAC,OAAO,EAAE;QAChC,GAAG;QACH,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,OAAmB;IACnD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;QAC5B,CAAC,CAAC,8EAA8E;QAChF,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YAC/B,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+CAA+C,CAAC;IACxD,OAAO;QACL,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;QACzB,EAAE;QACF,QAAQ;QACR,KAAK,MAAM,EAAE;QACb,EAAE;QACF,SAAS;QACT,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE;QACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;YAC1B,CAAC,CAAC;gBACE,EAAE;gBACF,MAAM;gBACN,qFAAqF;aACtF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,SAAS,KAAK,CAAC,GAAW,EAAE,QAA+B;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,KAAK,GAAG,oDAAoD,GAAG,4CAA4C;QAC3G,EAAE;QACF,OAAO;QACP,GAAG,WAAW,CACZ,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CACb,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,CAAC,IAAI,EAAE,GAAG,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAU,CAC/D,CACF;KACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAS,OAAO,CACd,QAA+B,EAC/B,IAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM;QAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qHAAqH;AACrH,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,IAAuB;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YACvD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,MAAc;IAC3C,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9D,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAC3C,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;AAE3E,oGAAoG;AACpG,SAAS,MAAM,CACb,OAAmB,EACnB,IAAa,EACb,IAAmD;IAEnD,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAY,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM;YACzC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAC7B,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;qBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;qBACtC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;qBACnB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,EAAE,CACrC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CACnE,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAwB,EAAE,EAAE,CACxC,KAAK;aACF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC;aACV,OAAO,EAAE,CAAC;QACf,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,KAAK,CAAC;YACf,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClE,IAAI,CACL,CAAC;QACR,MAAM,IAAI,GACR,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ;YACrC,CAAC,CAAC,yBAAyB,IAAI,CAAC,aAAa,GAAG;YAChD,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC;aACnD,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,GAAG,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACvE;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,oHAAoH;AACpH,SAAS,MAAM,CACb,OAAmB,EACnB,MAAyC;IAEzC,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,qBAAqB;QAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,OAAuB,EACvB,OAAmB,EACnB,MAAe,EACf,MAAmB;IAEnB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;YACpE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACnC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,CACvE,CAAC;YACF,OAAO,CAAC,EAAE,EAAE,EAAE,MAAe,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAU,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,OAAO,EACP;YACE,GAAG,OAAO;YACV,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,SAAS;SACvB,EACD,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EACrD,MAAM,CACP,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YACvD,MAAM,KAAK,CACT,0EAA0E,EAC1E,sBAAsB,CACvB,CAAC;QACJ,MAAM,GAAG;YACP,GAAG,MAAM;YACT,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CACjC;QACE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,EACD,MAAM,CACP,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,kCAAkC,EAAE,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,OAAO,CACf;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EACL,CAAC,KAAK,EAAE,OAAO;gBACb,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC9E,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAChD,CAAC,CAAC,2GAA2G;oBAC7G,CAAC,CAAC,EAAE,CAAC;YACT,WAAW,EAAE,EAAE;YACf,OAAO,EAAE;gBACP,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aAClC;SACF,EACD,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClC,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;QACzB,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAChD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAA+B,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC,EAAc,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IACtD,MAAM,EAAE,EAAE;IACV,QAAQ;CACT,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,UAAU,UAAU,CACxB,OAAuB,EACvB,MAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAClC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM;YAC9B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAc,EAAE,CAC1D,IAAI;YACF,CAAC,CAAC;gBACE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI;gBAC1E,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,OAAO,CAAC,IAAI;aACvB;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,UAAU,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW;qBAC1F,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,UAAU,CAAC,OAAO,IAAI,CAAC;qBAChD,IAAI,CAAC,EAAE,CAAC,EAAE;gBACb,QAAQ,EAAE,OAAO,CAAC,IAAI;aACvB,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAClE,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAE,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAClC,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,IAAI;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CACT,MAAM,EACN,IAAI,OAAO,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBACnD,WAAW,EAAE;oBACX;wBACE,OAAO,EAAE,oBAAoB;wBAC7B,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;qBACxC;iBACF;aACF,EACD,UAAU,CAAC,QAAQ,CACpB,CACF,CAAC;QACJ,CAAC;QACD,mHAAmH;QACnH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,IAAI;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CACT,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAChB,IAAI,OAAO,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,GAAG,qCAAqC;gBAC3G,WAAW,EAAE;oBACX;wBACE,OAAO,EAAE,oBAAoB;wBAC7B,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;qBACxC;iBACF;aACF,EACD,UAAU,CAAC,QAAQ,CACpB,CACF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC7C,MAAM,KAAK,CACT,GAAG,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,uDAAuD,EACtF,mBAAmB,CACpB,CAAC;YACJ,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpC,MAAM,KAAK,CACT,OAAO,CAAC,OAAO,GAAG,kDAAkD,EACpE,uBAAuB,CACxB,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,OAAO,EACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,EAC7D,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAC1B,CAAC;YACF,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO;gBACtE,MAAM,KAAK,CACT,+CAA+C,EAC/C,mBAAmB,CACpB,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,IAAI;gBAChB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,KAAK,YAAY,OAAO;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,KAAK,YAAY,aAAa;gBAChC,OAAO,IAAI,CACT,IAAI,EACJ,IAAI,OAAO,CACT;oBACE,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;oBACnC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;wBAC7B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;iBAChC,EACD,KAAK,CAAC,IAAI,CACX,CACF,CAAC;YACJ,OAAO,IAAI,CACT,IAAI,EACJ,IAAI,OAAO,CACT;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/D,WAAW,EAAE,EAAE;aAChB,EACD,UAAU,CAAC,OAAO,CACnB,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/online/sandbox/execution.d.ts

@@ -0,0 +1,25 @@
+import type { OnlineAgentToolExecution } from '../agent/types.js';
+import type { OnlineAgentSandbox, OnlineAgentSandboxInput, OnlineAgentSandboxProvider } from './types.js';
+/** Execution-local capabilities; only the first shell call allocates a Sandbox. */
+export declare class NativeToolExecution implements OnlineAgentToolExecution {
+    readonly id: string;
+    private readonly owner;
+    private readonly input;
+    private readonly provider;
+    private prepared;
+    private closed;
+    private cleanup;
+    constructor(id: string, owner: {
+        sandbox?: Promise<OnlineAgentSandbox>;
+    }, input: OnlineAgentSandboxInput, provider: OnlineAgentSandboxProvider | undefined);
+    private available;
+    private preparation;
+    instructions(tools: readonly string[]): Promise<string>;
+    getSandbox(): Promise<OnlineAgentSandbox>;
+    readSkill(name: string): Promise<{
+        ok: boolean;
+        output: string;
+    }>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=execution.d.ts.map

package/dist/server/online/sandbox/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../../server/online/sandbox/execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EAEvB,0BAA0B,EAC3B,MAAM,YAAY,CAAC;AAEpB,mFAAmF;AACnF,qBAAa,mBAAoB,YAAW,wBAAwB;IAMhE,QAAQ,CAAC,EAAE,EAAE,MAAM;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAR3B,OAAO,CAAC,QAAQ,CAAqD;IACrE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAA4B;gBAGhC,EAAE,EAAE,MAAM,EACF,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;KAAE,EAChD,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,0BAA0B,GAAG,SAAS;IAGnE,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,WAAW;IAMb,YAAY,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvD,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAYzC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAezB"}

package/dist/server/online/sandbox/execution.js

@@ -0,0 +1,63 @@
+/** Execution-local capabilities; only the first shell call allocates a Sandbox. */
+export class NativeToolExecution {
+    id;
+    owner;
+    input;
+    provider;
+    prepared;
+    closed = false;
+    cleanup;
+    constructor(id, owner, input, provider) {
+        this.id = id;
+        this.owner = owner;
+        this.input = input;
+        this.provider = provider;
+    }
+    available() {
+        if (this.closed)
+            throw new Error('Execution is closed.');
+        this.input.context.signal.throwIfAborted();
+    }
+    preparation() {
+        this.available();
+        if (!this.provider)
+            throw new Error('Sandbox provider is unavailable.');
+        return (this.prepared ??= this.provider.prepare(this.input));
+    }
+    async instructions(tools) {
+        if (!tools.some((name) => name === 'bash' || name === 'skill'))
+            return '';
+        return (await this.preparation()).instructions;
+    }
+    async getSandbox() {
+        this.available();
+        const sandbox = await (this.owner.sandbox ??= this.preparation().then((prepared) => {
+            this.available();
+            return prepared.create();
+        }));
+        this.available();
+        return sandbox;
+    }
+    async readSkill(name) {
+        const prepared = await this.preparation();
+        this.available();
+        return prepared.readSkill(name);
+    }
+    dispose() {
+        if (this.cleanup)
+            return this.cleanup;
+        this.closed = true;
+        this.cleanup = (async () => {
+            // Creation failures release partial resources in the provider, not here.
+            const sandbox = await this.owner.sandbox?.catch(() => undefined);
+            await sandbox?.dispose();
+            const prepared = await this.prepared?.catch(() => undefined);
+            prepared?.dispose();
+        })().catch((error) => {
+            this.cleanup = undefined;
+            throw error;
+        });
+        return this.cleanup;
+    }
+}
+//# sourceMappingURL=execution.js.map

package/dist/server/online/sandbox/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../../server/online/sandbox/execution.ts"],"names":[],"mappings":"AAQA,mFAAmF;AACnF,MAAM,OAAO,mBAAmB;IAMnB;IACQ;IACA;IACA;IARX,QAAQ,CAAqD;IAC7D,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,CAA4B;IAE3C,YACW,EAAU,EACF,KAAgD,EAChD,KAA8B,EAC9B,QAAgD;QAHxD,OAAE,GAAF,EAAE,CAAQ;QACF,UAAK,GAAL,KAAK,CAA2C;QAChD,UAAK,GAAL,KAAK,CAAyB;QAC9B,aAAQ,GAAR,QAAQ,CAAwC;IAChE,CAAC;IAEI,SAAS;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAC7C,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1E,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CACnE,CAAC,QAAQ,EAAE,EAAE;YACX,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,CAAC,CACF,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,yEAAyE;YACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,OAAO,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,QAAQ,EAAE,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/server/online/sandbox/filesystem.d.ts

@@ -0,0 +1,8 @@
+import { type IFileSystem } from '../../vendor/just-bash.js';
+/** The historical read-only guard over just-bash's filesystem; storage and quotas belong to InMemoryFs. */
+export declare function createSandboxFilesystem(files: Record<string, string>, maxTotalBytes?: number, unreadable?: ReadonlyMap<string, string>): {
+    fs: IFileSystem;
+    lock(): void;
+    dispose(): Promise<void>;
+};
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/server/online/sandbox/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../../../server/online/sandbox/filesystem.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA2BzE,2GAA2G;AAC3G,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,aAAa,GAAE,MAAsC,EACrD,UAAU,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GAClD;IAAE,EAAE,EAAE,WAAW,CAAC;IAAC,IAAI,IAAI,IAAI,CAAC;IAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA8C7D"}

package/dist/server/online/sandbox/filesystem.js

@@ -0,0 +1,72 @@
+import { posix } from 'node:path';
+import { InMemoryFs } from '../../vendor/just-bash.js';
+import { sandboxLimits } from './limits.js';
+const MUTATORS = new Set([
+    'writeFile',
+    'appendFile',
+    'mkdir',
+    'mkdirSync',
+    'rm',
+    'cp',
+    'mv',
+    'chmod',
+    'utimes',
+    'createExclusive',
+    'writeFileSync',
+    'writeFileLazy',
+]);
+class FsError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+/** The historical read-only guard over just-bash's filesystem; storage and quotas belong to InMemoryFs. */
+export function createSandboxFilesystem(files, maxTotalBytes = sandboxLimits.filesystemBytes, unreadable = new Map()) {
+    const inner = new InMemoryFs(files, { maxTotalBytes });
+    inner.writeFileSync('/tmp/.keep', '');
+    let locked = false;
+    const writable = (path) => {
+        if (typeof path !== 'string' || path.includes('\0'))
+            return false;
+        const normalized = posix.resolve('/', path);
+        return normalized === '/tmp' || normalized.startsWith('/tmp/');
+    };
+    const fs = new Proxy(inner, {
+        get(target, property, receiver) {
+            const value = Reflect.get(target, property, receiver);
+            if (typeof value !== 'function')
+                return value;
+            const name = String(property);
+            return (...args) => {
+                if (['readFile', 'readFileBytes', 'readFileBuffer', 'cp'].includes(name) &&
+                    typeof args[0] === 'string') {
+                    const reason = unreadable.get(posix.resolve('/', args[0]));
+                    if (reason)
+                        throw new FsError('EACCES', reason);
+                }
+                // Skills contain no links; refusing new links keeps the guard's normalized paths authoritative.
+                if (locked && (name === 'symlink' || name === 'link'))
+                    throw new FsError('EPERM', 'EPERM: links are unavailable.');
+                if (locked && MUTATORS.has(name)) {
+                    const written = name === 'cp' || name === 'mv' ? args[1] : args[0];
+                    const touched = name === 'mv' ? [args[0], args[1]] : [written];
+                    if (!touched.every(writable))
+                        throw new FsError('EROFS', 'EROFS: only /tmp is writable.');
+                }
+                return value.apply(target, args);
+            };
+        },
+    });
+    return {
+        fs,
+        lock() {
+            locked = true;
+        },
+        async dispose() {
+            await inner.rm('/', { recursive: true, force: true });
+        },
+    };
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/server/online/sandbox/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../../server/online/sandbox/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAoB,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,WAAW;IACX,YAAY;IACZ,OAAO;IACP,WAAW;IACX,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,iBAAiB;IACjB,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,OAAQ,SAAQ,KAAK;IAEP;IADlB,YACkB,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;IAI9B,CAAC;CACF;AAED,2GAA2G;AAC3G,MAAM,UAAU,uBAAuB,CACrC,KAA6B,EAC7B,gBAAwB,aAAa,CAAC,eAAe,EACrD,aAA0C,IAAI,GAAG,EAAE;IAEnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACvD,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAW,EAAE;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE;QAC1B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,IACE,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,QAAQ,CAC5D,IAAI,CACL;oBACD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC3B,CAAC;oBACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3D,IAAI,MAAM;wBAAE,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,gGAAgG;gBAChG,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;oBACnD,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;gBAC9D,IAAI,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAC1B,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAQ,KAAyC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,CAAC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,IAAI;YACF,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/online/sandbox/limits.d.ts

@@ -0,0 +1,4 @@
+export declare const sandboxLimits: Readonly<Record<'skillBytes' | 'filesystemBytes' | 'durationMs' | 'shellOutput' | 'modelOutput', number>>;
+export declare function clip(value: string): string;
+export declare function responseText(response: Response, signal?: AbortSignal): Promise<string>;
+//# sourceMappingURL=limits.d.ts.map

package/dist/server/online/sandbox/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../../../server/online/sandbox/limits.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC,MAAM,CACF,YAAY,GACZ,iBAAiB,GACjB,YAAY,GACZ,aAAa,GACb,aAAa,EACf,MAAM,CACP,CAQD,CAAC;AACH,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI1C;AACD,wBAAsB,YAAY,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CA2BjB"}

package/dist/server/online/sandbox/limits.js

@@ -0,0 +1,46 @@
+export const sandboxLimits = Object.freeze({
+    skillBytes: 5 * 1024 * 1024,
+    // Historical aggregate budget: 5 MiB Skill mount + 1 MiB nominal scratch + 1 MiB overhead.
+    filesystemBytes: 7 * 1024 * 1024,
+    durationMs: 10000,
+    shellOutput: 1024 * 1024,
+    modelOutput: 24000,
+});
+export function clip(value) {
+    return value.length > sandboxLimits.modelOutput
+        ? value.slice(0, sandboxLimits.modelOutput) + '\n[Output truncated]'
+        : value;
+}
+export async function responseText(response, signal) {
+    if (!response.body)
+        return '';
+    const reader = response.body.getReader();
+    const chunks = [];
+    let cancellation;
+    const cancel = () => (cancellation ??= reader.cancel(signal?.reason));
+    const onAbort = () => {
+        void cancel().catch(() => { });
+    };
+    signal?.addEventListener('abort', onAbort, { once: true });
+    try {
+        signal?.throwIfAborted();
+        for (;;) {
+            const part = await reader.read();
+            signal?.throwIfAborted();
+            if (part.done)
+                break;
+            chunks.push(part.value);
+        }
+        return Buffer.concat(chunks).toString('utf8');
+    }
+    finally {
+        signal?.removeEventListener('abort', onAbort);
+        try {
+            await cancel();
+        }
+        finally {
+            reader.releaseLock();
+        }
+    }
+}
+//# sourceMappingURL=limits.js.map

package/dist/server/online/sandbox/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../../server/online/sandbox/limits.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAStB,MAAM,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC3B,2FAA2F;IAC3F,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAChC,UAAU,EAAE,KAAK;IACjB,WAAW,EAAE,IAAI,GAAG,IAAI;IACxB,WAAW,EAAE,KAAK;CACnB,CAAC,CAAC;AACH,MAAM,UAAU,IAAI,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW;QAC7C,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,sBAAsB;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAkB,EAClB,MAAoB;IAEpB,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,YAAuC,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/online/sandbox/provider.d.ts

@@ -0,0 +1,9 @@
+import type { SkillService } from '../../core/skills/skill.service.js';
+import type { OnlineAgentSandboxProvider, OnlineAgentSandboxOptions } from './types.js';
+type SandboxDependencies = OnlineAgentSandboxOptions & {
+    skills: SkillService;
+};
+/** Prepare Skills without credentials; own the CLI lease only while a Sandbox exists. */
+export declare function createSandboxProvider(deps: SandboxDependencies): OnlineAgentSandboxProvider;
+export {};
+//# sourceMappingURL=provider.d.ts.map

package/dist/server/online/sandbox/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../../server/online/sandbox/provider.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EACV,0BAA0B,EAK1B,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAMpB,KAAK,mBAAmB,GAAG,yBAAyB,GAAG;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAMhF,yFAAyF;AACzF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,mBAAmB,GACxB,0BAA0B,CAI5B"}

package/dist/server/online/sandbox/provider.js

@@ -0,0 +1,237 @@
+import { randomUUID } from 'node:crypto';
+import { HEADERS } from '@nocobase/agent-protocol';
+import { callerIdentityOf } from '../../cli/run-credential.js';
+import { Bash, getCommandNames, } from '../../vendor/just-bash.js';
+import { createSandboxFilesystem } from './filesystem.js';
+import { loadSkills } from './skills.js';
+import { cliCommand } from './cli-command.js';
+import { sandboxLimits, clip } from './limits.js';
+/** Prepare Skills without credentials; own the CLI lease only while a Sandbox exists. */
+export function createSandboxProvider(deps) {
+    return {
+        prepare: (input) => prepareSandbox(deps, input),
+    };
+}
+async function prepareSandbox(deps, input) {
+    input.context.signal.throwIfAborted();
+    const loaded = await loadSkills(deps.skills, input.skill, deps.builtinSkills);
+    return new PreparedSandbox(deps, input, loaded);
+}
+/** The selected Skill snapshot exists before any filesystem, CLI or credential is allocated. */
+class PreparedSandbox {
+    deps;
+    input;
+    loaded;
+    instructions;
+    released = false;
+    constructor(deps, input, loaded) {
+        this.deps = deps;
+        this.input = input;
+        this.loaded = loaded;
+        this.instructions = this.sandboxInstructions(deps.bin?.());
+    }
+    sandboxInstructions(bin) {
+        return [
+            'Virtual shell: /tmp is the only writable directory; /skills is read-only. No host files, environment, network or external runtimes.',
+            bin
+                ? 'Application CLI: ' +
+                    bin +
+                    '. Use --help to discover current commands. Authorization and business rules apply; never retry an uncertain write without checking its result.'
+                : 'No application CLI is configured.',
+            'Selected skills (read with skill or cat only when needed):',
+            ...[...this.loaded.skills].map(([slug, skill]) => slug + ': ' + skill.description + ' (/skills/' + slug + '/SKILL.md)'),
+        ].join('\n');
+    }
+    readSkill(name) {
+        if (this.released)
+            return Promise.reject(new Error('Execution is closed.'));
+        this.input.context.signal.throwIfAborted();
+        const skill = this.loaded.skills.get(name);
+        return Promise.resolve({
+            ok: !!skill,
+            output: skill
+                ? clip([skill.markdown, 'Support files:', ...skill.listing].join('\n'))
+                : 'Unknown selected skill.',
+        });
+    }
+    async create() {
+        if (this.released)
+            throw new Error('Execution is closed.');
+        this.input.context.signal.throwIfAborted();
+        const filesystem = createSandboxFilesystem(this.loaded.files, undefined, this.loaded.unreadable);
+        // InMemoryFs owns the mounted storage; do not retain a second file map.
+        this.clearFiles();
+        return createSandbox(this, this.deps, this.input, filesystem);
+    }
+    close() {
+        this.released = true;
+    }
+    dispose() {
+        this.close();
+        this.loaded.skills.clear();
+        this.clearFiles();
+    }
+    clearFiles() {
+        for (const path of Object.keys(this.loaded.files))
+            delete this.loaded.files[path];
+    }
+}
+/** Creation owns partial-resource cleanup, including failures before a shell is returned. */
+async function createSandbox(preparation, deps, input, filesystem) {
+    let lease;
+    try {
+        const application = deps.cli?.();
+        let surface;
+        if (application) {
+            lease = application.credentials.issue(input.context.user.id, input.executionId ?? randomUUID());
+            surface = await loadCommandSurface(application, lease.token);
+        }
+        return new SandboxExecution(preparation, input, filesystem, surface, lease);
+    }
+    catch (error) {
+        try {
+            await filesystem.dispose();
+        }
+        finally {
+            lease?.release();
+        }
+        throw error;
+    }
+}
+async function loadCommandSurface(application, token) {
+    const session = await application.auth.getSession(new Headers({ [HEADERS.runToken]: token }));
+    const identity = callerIdentityOf(session ?? undefined);
+    if (!identity)
+        throw new Error('OnlineAgent caller is unavailable.');
+    const surface = await application.commandsOf(identity, token);
+    if (surface && !/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/u.test(surface.bin))
+        throw new Error('Invalid application CLI brand.');
+    return surface;
+}
+function createBash(filesystem, command) {
+    return new Bash({
+        fs: filesystem.fs,
+        cwd: '/tmp',
+        env: { HOME: '/tmp' },
+        executionLimitProfile: 'hardened',
+        commands: getCommandNames().filter((name) => name !== 'sqlite3'),
+        python: false,
+        javascript: false,
+        customCommands: command ? [command] : [],
+        executionLimits: {
+            maxOutputSize: sandboxLimits.shellOutput,
+            maxExecutionTimeMs: sandboxLimits.durationMs,
+        },
+    });
+}
+function shellResult(result) {
+    return {
+        ok: result.exitCode === 0,
+        output: clip([
+            'exit code ' + result.exitCode,
+            result.stdout ? result.stdout.replace(/\n$/u, '') : '',
+            result.stderr ? '[stderr]\n' + result.stderr.replace(/\n$/u, '') : '',
+        ]
+            .filter(Boolean)
+            .join('\n')),
+        exitCode: result.exitCode,
+    };
+}
+/** Own serialized shell calls, real CLI work and retryable cleanup for one execution. */
+class SandboxExecution {
+    preparation;
+    input;
+    filesystem;
+    lease;
+    instructions;
+    bash;
+    abort = new AbortController();
+    work = new Set();
+    queue = Promise.resolve();
+    cleanup;
+    closed = false;
+    constructor(preparation, input, filesystem, surface, lease) {
+        this.preparation = preparation;
+        this.input = input;
+        this.filesystem = filesystem;
+        this.lease = lease;
+        const cli = surface ? cliCommand(surface, input.context.signal) : undefined;
+        this.bash = createBash(filesystem, cli ? this.trackCommand(cli) : undefined);
+        filesystem.lock();
+        this.instructions = preparation.sandboxInstructions(surface?.bin);
+    }
+    trackCommand(command) {
+        return {
+            ...command,
+            execute: (args, ctx) => {
+                // Bash can detach a cancelled command; keep owning its actual application work.
+                const task = command.execute(args, ctx);
+                this.work.add(task);
+                void task.finally(() => this.work.delete(task)).catch(() => { });
+                return task;
+            },
+        };
+    }
+    exec(command, options) {
+        if (this.closed)
+            return Promise.reject(new Error('Sandbox is closed.'));
+        // The deadline includes time spent waiting in the queue.
+        const deadline = AbortSignal.timeout(sandboxLimits.durationMs);
+        const signal = AbortSignal.any([
+            this.input.context.signal,
+            this.abort.signal,
+            deadline,
+            ...(options.abortSignal ? [options.abortSignal] : []),
+        ]);
+        const task = this.queue
+            .catch(() => { })
+            .then(() => this.run(command, signal));
+        this.queue = task;
+        return task;
+    }
+    async run(command, signal) {
+        signal.throwIfAborted();
+        try {
+            return shellResult(await this.bash.exec(command, { signal }));
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            return {
+                ok: false,
+                output: clip(error instanceof Error ? error.message : 'Virtual shell failed.'),
+                exitCode: 1,
+            };
+        }
+        finally {
+            // Cancellation must not release the execution gate before real CLI work exits.
+            await Promise.allSettled([...this.work]);
+            signal.throwIfAborted();
+        }
+    }
+    readSkill(name) {
+        if (this.closed)
+            return Promise.reject(new Error('Sandbox is closed.'));
+        return this.preparation.readSkill(name);
+    }
+    dispose() {
+        if (this.cleanup)
+            return this.cleanup;
+        this.closed = true;
+        this.preparation.close();
+        this.abort.abort();
+        this.cleanup = this.releaseResources().catch((error) => {
+            // A failed cleanup is retryable, but never reopens this execution.
+            this.cleanup = undefined;
+            throw error;
+        });
+        return this.cleanup;
+    }
+    async releaseResources() {
+        await this.queue.catch(() => { });
+        await Promise.allSettled([...this.work]);
+        await this.filesystem.dispose();
+        this.preparation.dispose();
+        this.lease?.release();
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/server/online/sandbox/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../server/online/sandbox/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACL,IAAI,EACJ,eAAe,GAIhB,MAAM,2BAA2B,CAAC;AAUnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAQlD,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CACnC,IAAyB;IAEzB,OAAO;QACL,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAyB,EACzB,KAA8B;IAE9B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9E,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,gGAAgG;AAChG,MAAM,eAAe;IAKA;IACA;IACA;IANV,YAAY,CAAS;IACtB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACmB,IAAyB,EACzB,KAA8B,EAC9B,MAAsB;QAFtB,SAAI,GAAJ,IAAI,CAAqB;QACzB,UAAK,GAAL,KAAK,CAAyB;QAC9B,WAAM,GAAN,MAAM,CAAgB;QAEvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,mBAAmB,CAAC,GAAY;QAC9B,OAAO;YACL,qIAAqI;YACrI,GAAG;gBACD,CAAC,CAAC,mBAAmB;oBACnB,GAAG;oBACH,gJAAgJ;gBAClJ,CAAC,CAAC,mCAAmC;YACvC,4DAA4D;YAC5D,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAC5B,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC,WAAW,GAAG,YAAY,GAAG,IAAI,GAAG,YAAY,CACvE;SACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,EAAE,EAAE,CAAC,CAAC,KAAK;YACX,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,CAAC,CAAC,yBAAyB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,uBAAuB,CACxC,IAAI,CAAC,MAAM,CAAC,KAAK,EACjB,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,UAAU,CACvB,CAAC;QACF,wEAAwE;QACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,UAAU;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AAED,6FAA6F;AAC7F,KAAK,UAAU,aAAa,CAC1B,WAA4B,EAC5B,IAAyB,EACzB,KAA8B,EAC9B,UAA6B;IAE7B,IAAI,KAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjC,IAAI,OAAmC,CAAC;QACxC,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EACrB,KAAK,CAAC,WAAW,IAAI,UAAU,EAAE,CAClC,CAAC;YACF,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAAsE,EACtE,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,CAC/C,IAAI,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAC3C,CAAC;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,OAAO,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,UAA6B,EAAE,OAAiB;IAClE,OAAO,IAAI,IAAI,CAAC;QACd,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACrB,qBAAqB,EAAE,UAAU;QACjC,QAAQ,EAAE,eAAe,EAAE,CAAC,MAAM,CAChC,CAAC,IAAI,EAAuB,EAAE,CAAC,IAAI,KAAK,SAAS,CAClD;QACD,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;QACxC,eAAe,EAAE;YACf,aAAa,EAAE,aAAa,CAAC,WAAW;YACxC,kBAAkB,EAAE,aAAa,CAAC,UAAU;SAC7C;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;QACzB,MAAM,EAAE,IAAI,CACV;YACE,YAAY,GAAG,MAAM,CAAC,QAAQ;YAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YACtD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;SACtE;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CACd;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,gBAAgB;IAUD;IACA;IACA;IAEA;IAbV,YAAY,CAAS;IACb,IAAI,CAAO;IACX,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9B,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5C,OAAO,CAA4B;IACnC,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,WAA4B,EAC5B,KAA8B,EAC9B,UAA6B,EAC9C,OAAwB,EACP,KAAuB;QAJvB,gBAAW,GAAX,WAAW,CAAiB;QAC5B,UAAK,GAAL,KAAK,CAAyB;QAC9B,eAAU,GAAV,UAAU,CAAmB;QAE7B,UAAK,GAAL,KAAK,CAAkB;QAExC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,UAAU,CACpB,UAAU,EACV,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CACzC,CAAC;QACF,UAAU,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAEO,YAAY,CAAC,OAAgB;QACnC,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBACrB,gFAAgF;gBAChF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CACF,OAAe,EACf,OAAkD;QAElD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;YACzB,IAAI,CAAC,KAAK,CAAC,MAAM;YACjB,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK;aACpB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,OAAe,EACf,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI,CACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CACjE;gBACD,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,+EAA+E;YAC/E,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9D,mEAAmE;YACnE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/server/online/sandbox/skills.d.ts

@@ -0,0 +1,14 @@
+import type { SkillService } from '../../core/skills/skill.service.js';
+import type { OnlineAgentSandboxSkillCatalog } from './types.js';
+/** Read current resources once per SDK segment; no resource versions survive preparation. */
+export declare function loadSkills(service: SkillService, ids: readonly string[], builtinSkills?: OnlineAgentSandboxSkillCatalog): Promise<{
+    skills: Map<string, {
+        name: string;
+        description: string;
+        markdown: string;
+        listing: string[];
+    }>;
+    files: Record<string, string>;
+    unreadable: Map<string, string>;
+}>;
+//# sourceMappingURL=skills.d.ts.map

package/dist/server/online/sandbox/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../../../server/online/sandbox/skills.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAGjE,6FAA6F;AAC7F,wBAAsB,UAAU,CAC9B,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,aAAa,CAAC,EAAE,8BAA8B,GAC7C,OAAO,CAAC;IACT,MAAM,EAAE,GAAG,CACT,MAAM,EACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAC3E,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC,CA4DD"}

package/dist/server/online/sandbox/skills.js

@@ -0,0 +1,56 @@
+import { skillFilePathProblem } from '../../../shared/skills.js';
+import { sandboxLimits } from './limits.js';
+/** Read current resources once per SDK segment; no resource versions survive preparation. */
+export async function loadSkills(service, ids, builtinSkills) {
+    const skills = new Map();
+    const files = {};
+    const unreadable = new Map();
+    let bytes = 0;
+    const selected = [];
+    for (const id of ids) {
+        // Selection is a trusted server scope. SkillService has no per-user read/enable policy.
+        const builtin = builtinSkills?.get(id);
+        const current = builtin ? await builtin() : await service.get(id);
+        if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(current.slug) ||
+            skills.has(current.slug))
+            throw new Error('Invalid or duplicate selected skill slug.');
+        bytes += Buffer.byteLength(current.content);
+        if (bytes > sandboxLimits.skillBytes)
+            throw new Error('Selected skill entry exceeds mount budget.');
+        skills.set(current.slug, {
+            name: current.name,
+            description: current.description,
+            markdown: current.content,
+            listing: [],
+        });
+        files['/skills/' + current.slug + '/SKILL.md'] = current.content;
+        selected.push(current);
+    }
+    // Reserve all entry documents before admitting supporting text in stable path order.
+    for (const current of selected) {
+        const paths = new Set();
+        for (const file of [...current.files].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0)) {
+            if (skillFilePathProblem(file.path) || paths.has(file.path))
+                throw new Error('Invalid or duplicate skill support path.');
+            paths.add(file.path);
+            const path = '/skills/' + current.slug + '/' + file.path;
+            const size = file.content === null ? 0 : Buffer.byteLength(file.content);
+            const reason = file.content === null
+                ? 'Binary skill file is not readable.'
+                : bytes + size > sandboxLimits.skillBytes
+                    ? 'Skill file exceeds mount budget.'
+                    : undefined;
+            skills
+                .get(current.slug)
+                .listing.push(file.path + (reason ? ' [unreadable: ' + reason + ']' : ''));
+            if (reason)
+                unreadable.set(path, reason);
+            else {
+                files[path] = file.content;
+                bytes += size;
+            }
+        }
+    }
+    return { skills, files, unreadable };
+}
+//# sourceMappingURL=skills.js.map

package/dist/server/online/sandbox/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../../server/online/sandbox/skills.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAqB,EACrB,GAAsB,EACtB,aAA8C;IAS9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;IACJ,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,wFAAwF;QACxF,MAAM,OAAO,GAAG,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,IACE,CAAC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAExB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,aAAa,CAAC,UAAU;YAClC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,OAAO;YACzB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,qFAAqF;IACrF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,EAAE,CAAC;YACF,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzE,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK,IAAI;gBACnB,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,aAAa,CAAC,UAAU;oBACvC,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,SAAS,CAAC;YAClB,MAAM;iBACH,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE;iBAClB,OAAO,CAAC,IAAI,CACX,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,GAAG,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;YACJ,IAAI,MAAM;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBACpC,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAQ,CAAC;gBAC5B,KAAK,IAAI,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC"}