@nodetool-ai/sandbox-runtime 0.0.0-stage → 0.8.9-beta.1

package/README.md

@@ -1,3 +1,25 @@
-# Temporary Holding Version
+# Sandbox runtime
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The shared QuickJS interpreter and worker isolation used by the full agent host
+and the optional minimal Code feature. The lean host accepts workspace, secret,
+asset and reporting callbacks. It never executes user JavaScript in Node.
+
+Host and WASM imports require separately installed capability adapters. The lean
+host can execute explicitly resolved guest JavaScript modules without a compiler.
+
+The runtime ships the JavaScript-only ESM build of
+`@sebastianwessel/quickjs@3.0.1` in `vendor/quickjs`, including its MIT license.
+Upstream exposes only an aggregate entry whose optional TypeScript helper leaks
+compiler types into declarations. This copy removes that helper, its exports
+and compiler options, and uses identity transpilation in both loaders. The
+engine, bridges, lifecycle and cancellation retain the upstream implementation.
+TypeScript compilation belongs to the separately installed sandbox compiler.
+
+Regenerate with `node scripts/vendor-quickjs-javascript.mjs` from the pinned dev
+dependency, or pass the path to an unpacked upstream npm artifact. The generator
+fails when its version, ESM/license hash or expected patch text changes.
+`vendor/quickjs/PROVENANCE.json` records the pinned npm integrity and source hash.
+The sandbox profile in
+`scripts/minimal-packed-consumer.mjs` exercises Code, audits JavaScript and
+declarations, checks compiler absence, then injects forbidden manifest,
+JavaScript and declaration edges and verifies rejection before restoring them.

package/dist/.nodetool-build-stamp

@@ -0,0 +1 @@
+2026-10-31T09:10:58.153Z

package/dist/host-access-gate.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Availability gate for the escape hatches that reach the server machine past
+ * a run's own workspace.
+ *
+ * - The sandbox's `filesystemAccess: "host"` and `allowPrivateNetwork` limits,
+ *   which the Code node exposes as its "Allow Host Filesystem" and "Allow
+ *   Local Network" properties. Whoever authors the graph sets them, so on a
+ *   managed server any tenant could read the container's disk or reach its
+ *   internal network.
+ * - `take_screenshot` without an operator `BROWSER_URL`, which launches a
+ *   headless Chrome on the server and only checks the first URL, not where it
+ *   redirects.
+ *
+ * Same switch that prunes the node catalog: `NODETOOL_NODE_PROFILE=cloud`, or
+ * `NODETOOL_ENV=production` with the profile unset. Under it the sandbox
+ * limits fall back to the workspace and the SSRF guard, and the screenshot
+ * refuses. A self-hosted install sets `NODETOOL_NODE_PROFILE=full` and keeps
+ * both, as does every local install.
+ */
+/** Whether this deployment lets a run reach the server past its workspace. */
+export declare function isHostAccessEnabled(): boolean;
+/** What `take_screenshot` answers where it would launch a local browser. */
+export declare const LOCAL_SCREENSHOT_DISABLED_ERROR: string;
+//# sourceMappingURL=host-access-gate.d.ts.map

package/dist/host-access-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-access-gate.d.ts","sourceRoot":"","sources":["../src/host-access-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,8EAA8E;AAC9E,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C;AAED,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,QAG4B,CAAC"}

package/dist/host-access-gate.js

@@ -0,0 +1,31 @@
+/**
+ * Availability gate for the escape hatches that reach the server machine past
+ * a run's own workspace.
+ *
+ * - The sandbox's `filesystemAccess: "host"` and `allowPrivateNetwork` limits,
+ *   which the Code node exposes as its "Allow Host Filesystem" and "Allow
+ *   Local Network" properties. Whoever authors the graph sets them, so on a
+ *   managed server any tenant could read the container's disk or reach its
+ *   internal network.
+ * - `take_screenshot` without an operator `BROWSER_URL`, which launches a
+ *   headless Chrome on the server and only checks the first URL, not where it
+ *   redirects.
+ *
+ * Same switch that prunes the node catalog: `NODETOOL_NODE_PROFILE=cloud`, or
+ * `NODETOOL_ENV=production` with the profile unset. Under it the sandbox
+ * limits fall back to the workspace and the SSRF guard, and the screenshot
+ * refuses. A self-hosted install sets `NODETOOL_NODE_PROFILE=full` and keeps
+ * both, as does every local install.
+ */
+import { CLOUD_PROFILE_ENV, NODE_ENV_VAR, isCloudProfileActive } from "@nodetool-ai/protocol";
+/** Whether this deployment lets a run reach the server past its workspace. */
+export function isHostAccessEnabled() {
+    if (typeof process === "undefined")
+        return true;
+    return !isCloudProfileActive(process.env[CLOUD_PROFILE_ENV], process.env[NODE_ENV_VAR]);
+}
+/** What `take_screenshot` answers where it would launch a local browser. */
+export const LOCAL_SCREENSHOT_DISABLED_ERROR = "Screenshots are not available on this deployment. Taking one launches a " +
+    "browser on the server, so it is offered only where the machine belongs to " +
+    "its user: the desktop app, a local server, or a self-hosted install.";
+//# sourceMappingURL=host-access-gate.js.map

package/dist/host-access-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-access-gate.js","sourceRoot":"","sources":["../src/host-access-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,CAAC,oBAAoB,CAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAC9B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAC1C,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+import type { Workspace } from "@nodetool-ai/runtime-core";
+import type { SandboxModuleResolution } from "@nodetool-ai/protocol";
+import { type SandboxLimits } from "./limits.js";
+export { resolveSandboxLimits, type SandboxLimits } from "./limits.js";
+export interface SandboxOptions {
+    readonly code: string;
+    readonly globals?: Record<string, unknown>;
+    readonly signal?: AbortSignal;
+    readonly timeoutMs?: number;
+    readonly limits?: SandboxLimits;
+    readonly workspace?: Workspace;
+    readonly getSecret?: (name: string) => Promise<string | undefined>;
+    readonly readAsset?: (reference: unknown) => Promise<Uint8Array>;
+    readonly onLog?: (level: string, text: string) => void;
+    readonly onProgress?: (percent: number, text?: string) => void;
+    /** Already-resolved guest JavaScript only. Host/WASM capabilities require explicit adapters. */
+    readonly modules?: SandboxModuleResolution;
+}
+export interface SandboxResult {
+    readonly success: boolean;
+    readonly result?: unknown;
+    readonly error?: string;
+    readonly logs: readonly string[];
+    readonly outputs?: Record<string, unknown>;
+    readonly emitted?: readonly {
+        name: string;
+        value: unknown;
+    }[];
+}
+/** Execute on the canonical isolated QuickJS worker, with explicitly supplied bridges. */
+export declare function runInSandbox(options: SandboxOptions): Promise<SandboxResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAQrE,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/D,gGAAgG;IAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChE;AAiBD,0FAA0F;AAC1F,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC,CAqUxB"}

package/dist/index.js

@@ -0,0 +1,318 @@
+import { safeFetch } from "@nodetool-ai/runtime-core/safe-url";
+import { runInWorker } from "./js-sandbox-worker/host.js";
+import { deriveBridgeShape } from "./js-sandbox-worker/protocol.js";
+import { SANDBOX_INPUT_TAKE_BINDING, SANDBOX_STREAM_OPEN_BINDING, NO_INPUT_STREAM_MESSAGE } from "./js-sandbox-worker/interpreter.js";
+import { resolveSandboxLimits, DEFAULT_TIMEOUT_MS, MAX_LOOP_ITERATIONS } from "./limits.js";
+import { toGuestBytes, SANDBOX_BYTES_MARKER } from "./sandbox-bytes.js";
+export { resolveSandboxLimits } from "./limits.js";
+function nativeBytes(value) {
+    if (value instanceof Uint8Array) {
+        return value;
+    }
+    if (value &&
+        typeof value === "object" &&
+        SANDBOX_BYTES_MARKER in value &&
+        typeof value[SANDBOX_BYTES_MARKER] === "string") {
+        return new Uint8Array(Buffer.from(value[SANDBOX_BYTES_MARKER], "base64"));
+    }
+    throw new Error("Expected binary bytes");
+}
+/** Execute on the canonical isolated QuickJS worker, with explicitly supplied bridges. */
+export async function runInSandbox(options) {
+    const limits = resolveSandboxLimits(options.limits);
+    const timeoutMs = Math.min(Math.max(Math.floor(options.timeoutMs ?? DEFAULT_TIMEOUT_MS), 1), 10 * 60 * 1000);
+    if (!Number.isFinite(timeoutMs)) {
+        throw new Error("Sandbox timeout must be finite");
+    }
+    if (options.modules?.modules.some((module) => module.kind !== "js")) {
+        throw new Error("Sandbox host and WASM modules require an explicitly installed capability adapter");
+    }
+    const logs = [];
+    const outputs = {};
+    const emitted = [];
+    let logBytes = 0;
+    let outputBytes = 0;
+    let fetchCalls = 0;
+    let progressCalls = 0;
+    let lastProgress = 0;
+    const assertOutput = (name, value) => {
+        if (typeof name !== "string" || !name) {
+            throw new Error("Output names must be nonempty strings");
+        }
+        const serialized = JSON.stringify(value);
+        outputBytes += Buffer.byteLength(serialized ?? "null");
+        if (outputBytes > limits.maxOutputSize) {
+            throw new Error("Sandbox output size limit exceeded");
+        }
+        return name;
+    };
+    const unavailable = async () => {
+        throw new Error("This capability is not installed in the sandbox host");
+    };
+    const requiredWorkspace = () => {
+        if (!options.workspace) {
+            throw new Error("Workspace is unavailable for this run");
+        }
+        return options.workspace;
+    };
+    const console = Object.fromEntries(["log", "info", "warn", "error"].map((level) => [
+        level,
+        (...args) => {
+            if (logs.length >= 5000 || logBytes >= 1_000_000) {
+                return;
+            }
+            const text = args
+                .map((value) => typeof value === "string" ? value : JSON.stringify(value))
+                .join(" ")
+                .slice(0, 4000);
+            logBytes += text.length;
+            logs.push(text);
+            try {
+                options.onLog?.(level, text);
+            }
+            catch {
+                /* Reporting cannot break execution. */
+            }
+        }
+    ]));
+    const bridges = {
+        console,
+        __maxIter: MAX_LOOP_ITERATIONS,
+        __secretScope: limits.secretScope,
+        [SANDBOX_INPUT_TAKE_BINDING]: async () => {
+            throw new Error(NO_INPUT_STREAM_MESSAGE);
+        },
+        [SANDBOX_STREAM_OPEN_BINDING]: () => false,
+        crypto: {
+            randomUUID: () => globalThis.crypto.randomUUID(),
+            getRandomValues: (length) => toGuestBytes(globalThis.crypto.getRandomValues(new Uint8Array(Math.min(Math.max(Math.floor(length), 0), 65536)))),
+            digest: async (algorithm, data) => toGuestBytes(new Uint8Array(await globalThis.crypto.subtle.digest(algorithm, new Uint8Array(nativeBytes(data))))),
+            hmac: unavailable
+        },
+        sleep: async (milliseconds) => {
+            const delay = Math.min(Math.max(Number(milliseconds), 0), timeoutMs);
+            await new Promise((resolve, reject) => {
+                const abort = () => {
+                    clearTimeout(timer);
+                    options.signal?.removeEventListener("abort", abort);
+                    reject(new DOMException("Cancelled", "AbortError"));
+                };
+                const timer = setTimeout(() => {
+                    options.signal?.removeEventListener("abort", abort);
+                    resolve();
+                }, delay);
+                if (options.signal?.aborted) {
+                    abort();
+                }
+                else {
+                    options.signal?.addEventListener("abort", abort, { once: true });
+                }
+            });
+        },
+        getSecret: async (name) => {
+            if (limits.secretScope !== null && !limits.secretScope.includes(name)) {
+                throw new Error(`Secret ${name} is outside this run's scope`);
+            }
+            if (!options.getSecret) {
+                throw new Error("Secret access is unavailable for this run");
+            }
+            return options.getSecret(name);
+        },
+        workspace: {
+            read: async (path) => {
+                const text = await requiredWorkspace().readText(path);
+                if (text === null) {
+                    throw new Error("File not found");
+                }
+                return text;
+            },
+            write: (path, text) => requiredWorkspace().write(path, text),
+            readBytes: async (path) => {
+                const bytes = await requiredWorkspace().read(path);
+                if (!bytes) {
+                    throw new Error("File not found");
+                }
+                return toGuestBytes(bytes);
+            },
+            writeBytes: (path, value) => requiredWorkspace().write(path, nativeBytes(value)),
+            list: async (path) => (await requiredWorkspace().list(path)).map((entry) => entry.name),
+            stat: async (path) => {
+                const stat = await requiredWorkspace().stat(path);
+                return stat
+                    ? {
+                        exists: true,
+                        size: stat.size,
+                        isDirectory: stat.isDirectory,
+                        isFile: !stat.isDirectory,
+                        isSymlink: false,
+                        modifiedMs: stat.modifiedAt
+                    }
+                    : { exists: false };
+            },
+            mkdir: (path) => requiredWorkspace().mkdir(path),
+            remove: (path) => requiredWorkspace().delete(path),
+            copy: (from, to) => requiredWorkspace().copy(from, to),
+            move: (from, to) => requiredWorkspace().move(from, to),
+            root: async () => "/workspace"
+        },
+        progress: (percent, message) => {
+            const now = Date.now();
+            if (progressCalls >= 1000 ||
+                (progressCalls > 0 && now - lastProgress < 100)) {
+                return;
+            }
+            progressCalls++;
+            lastProgress = now;
+            try {
+                options.onProgress?.(Math.min(Math.max(Number(percent) || 0, 0), 100), message?.slice(0, 500));
+            }
+            catch {
+                /* Reporting cannot break execution. */
+            }
+        },
+        emit: async (name, value) => {
+            if (emitted.length >= 10000) {
+                throw new Error("Sandbox emit limit exceeded");
+            }
+            emitted.push({ name: assertOutput(name, value), value });
+        },
+        output: async (name, value) => {
+            const handle = assertOutput(name, value);
+            if (Object.hasOwn(outputs, handle)) {
+                throw new Error(`Output ${handle} was already set`);
+            }
+            Object.defineProperty(outputs, handle, { value, enumerable: true });
+        },
+        fetch: async (url, init) => {
+            if (++fetchCalls > limits.maxFetchCalls) {
+                throw new Error("Sandbox fetch call limit exceeded");
+            }
+            const signal = options.signal
+                ? AbortSignal.any([
+                    options.signal,
+                    AbortSignal.timeout(limits.fetchTimeoutMs)
+                ])
+                : AbortSignal.timeout(limits.fetchTimeoutMs);
+            const response = await safeFetch(url, { ...init, signal });
+            const reader = response.body?.getReader();
+            const chunks = [];
+            let size = 0;
+            if (reader) {
+                try {
+                    for (;;) {
+                        const next = await reader.read();
+                        if (next.done) {
+                            break;
+                        }
+                        size += next.value.byteLength;
+                        if (size > limits.maxResponseBodyBytes) {
+                            throw new Error("Sandbox response size limit exceeded");
+                        }
+                        chunks.push(next.value);
+                    }
+                }
+                finally {
+                    await reader.cancel();
+                }
+            }
+            const bytes = Buffer.concat(chunks);
+            const body = bytes.toString("utf8");
+            let json = null;
+            try {
+                json = JSON.parse(body);
+            }
+            catch {
+                /* A non-JSON response remains text. */
+            }
+            return {
+                ok: response.ok,
+                status: response.status,
+                statusText: response.statusText,
+                headers: Object.fromEntries(response.headers),
+                body,
+                json,
+                bodyBytes: toGuestBytes(bytes)
+            };
+        },
+        assetToSandbox: unavailable,
+        sandboxToAsset: unavailable,
+        image: {},
+        audio: {},
+        video: {},
+        canvas: {},
+        format: {},
+        media: {
+            bytes: async (reference) => {
+                if (!options.readAsset) {
+                    throw new Error("Asset access is unavailable for this run");
+                }
+                return toGuestBytes(await options.readAsset(reference));
+            },
+            text: async (reference) => {
+                if (!options.readAsset) {
+                    throw new Error("Asset access is unavailable for this run");
+                }
+                return new TextDecoder().decode(await options.readAsset(reference));
+            }
+        }
+    };
+    const globals = {};
+    for (const [name, value] of Object.entries(options.globals ?? {})) {
+        if (!Object.hasOwn(bridges, name) && /^[A-Za-z_$][\w$]*$/.test(name)) {
+            globals[name] = value;
+        }
+    }
+    const message = await runInWorker({
+        run: {
+            runId: globalThis.crypto.randomUUID(),
+            code: options.code,
+            timeoutMs,
+            limits,
+            suspendAllowanceMs: 0,
+            hasClock: false,
+            engineTimeoutMs: timeoutMs,
+            streamOpenSeed: null,
+            bridgeShape: deriveBridgeShape({ bridges, dispatchers: [], globals }),
+            modules: options.modules
+        },
+        dispatch: bridges,
+        signal: options.signal,
+        onLog: () => { },
+        onProgress: () => { }
+    });
+    if (!message) {
+        return { success: false, error: "QuickJS worker is unavailable", logs };
+    }
+    for (const [name, value] of Object.entries(message.syncedGlobals ?? {})) {
+        const target = options.globals?.[name];
+        if (target &&
+            typeof target === "object" &&
+            value &&
+            typeof value === "object") {
+            for (const key of Object.keys(target)) {
+                Reflect.deleteProperty(target, key);
+            }
+            Object.assign(target, value);
+        }
+    }
+    if (options.signal?.aborted || message.failure === "cancelled") {
+        return { success: false, error: "Execution cancelled", logs };
+    }
+    if (!message.evalOk) {
+        return {
+            success: false,
+            error: message.errorMessage ?? "Sandbox execution failed",
+            logs
+        };
+    }
+    if (Buffer.byteLength(JSON.stringify(message.data) ?? "null") >
+        limits.maxOutputSize) {
+        return {
+            success: false,
+            error: "Sandbox output size limit exceeded",
+            logs
+        };
+    }
+    return { success: true, result: message.data, logs, outputs, emitted };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAsB,MAAM,aAAa,CAAC;AAyBvE,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,oBAAoB,IAAI,KAAK;QAC7B,OAAO,KAAK,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAC/C,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAuB;IAEvB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAChE,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,YAAY,GAAG,CAAC,IAAa,EAAE,KAAc,EAAU,EAAE;QAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;QACvD,IAAI,WAAW,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,IAAoB,EAAE;QAC7C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,MAAM,iBAAiB,GAAG,GAAc,EAAE;QACxC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,KAAK;QACL,CAAC,GAAG,IAAe,EAAE,EAAE;YACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAC1D;iBACA,IAAI,CAAC,GAAG,CAAC;iBACT,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClB,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;KACF,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAA4B;QACvC,OAAO;QACP,SAAS,EAAE,mBAAmB;QAC9B,aAAa,EAAE,MAAM,CAAC,WAAW;QACjC,CAAC,0BAA0B,CAAC,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK;QAC1C,MAAM,EAAE;YACN,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;YAChD,eAAe,EAAE,CAAC,MAAc,EAAE,EAAE,CAClC,YAAY,CACV,UAAU,CAAC,MAAM,CAAC,eAAe,CAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CACjE,CACF;YACH,MAAM,EAAE,KAAK,EAAE,SAAiB,EAAE,IAAa,EAAE,EAAE,CACjD,YAAY,CACV,IAAI,UAAU,CACZ,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,SAAS,EACT,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAClC,CACF,CACF;YACH,IAAI,EAAE,WAAW;SAClB;QACD,KAAK,EAAE,KAAK,EAAE,YAAoB,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,KAAK,GAAG,GAAS,EAAE;oBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACpD,MAAM,CAAC,IAAI,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACpD,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,KAAK,CAAC,CAAC;gBACV,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC5B,KAAK,EAAE,CAAC;gBACV,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YAChC,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,8BAA8B,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,SAAS,EAAE;YACT,IAAI,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CACpC,iBAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YACvC,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBAChC,MAAM,KAAK,GAAG,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,UAAU,EAAE,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE,CAC3C,iBAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,CAC3B,CAAC,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACnE,IAAI,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClD,OAAO,IAAI;oBACT,CAAC,CAAC;wBACE,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW;wBACzB,SAAS,EAAE,KAAK;wBAChB,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B;oBACH,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACxD,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAC1D,IAAI,EAAE,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtE,IAAI,EAAE,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY;SAC/B;QACD,QAAQ,EAAE,CAAC,OAAe,EAAE,OAAgB,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IACE,aAAa,IAAI,IAAI;gBACrB,CAAC,aAAa,GAAG,CAAC,IAAI,GAAG,GAAG,YAAY,GAAG,GAAG,CAAC,EAC/C,CAAC;gBACD,OAAO;YACT,CAAC;YACD,aAAa,EAAE,CAAC;YAChB,YAAY,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC;gBACH,OAAO,CAAC,UAAU,EAAE,CAClB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAChD,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACvB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAa,EAAE,KAAc,EAAE,EAAE;YAC5C,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAa,EAAE,KAAc,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,kBAAkB,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,GAAW,EAAE,IAAkB,EAAE,EAAE;YAC/C,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;gBAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;oBACd,OAAO,CAAC,MAAM;oBACd,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;iBAC3C,CAAC;gBACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,SAAS,CAAC;wBACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBACjC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;4BACd,MAAM;wBACR,CAAC;wBACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;wBAC9B,IAAI,IAAI,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;4BACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;wBAC1D,CAAC;wBACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,GAAY,IAAI,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC7C,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC;aAC/B,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,WAAW;QAC3B,cAAc,EAAE,WAAW;QAC3B,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,KAAK,EAAE;YACL,KAAK,EAAE,KAAK,EAAE,SAAkB,EAAE,EAAE;gBAClC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,SAAkB,EAAE,EAAE;gBACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,CAAC;SACF;KACF,CAAC;IACF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;QAChC,GAAG,EAAE;YACH,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS;YACT,MAAM;YACN,kBAAkB,EAAE,CAAC;YACrB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YACrE,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB;QACD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;QACf,UAAU,EAAE,GAAG,EAAE,GAAE,CAAC;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,0BAA0B;YACzD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QACzD,MAAM,CAAC,aAAa,EACpB,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,oCAAoC;YAC3C,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/js-sandbox-worker/engine.d.ts

@@ -0,0 +1,4 @@
+import { loadQuickJs } from "../../vendor/quickjs/index.js";
+/** Load an engine with property-handle ownership fixes for quickjs@3.0.1. */
+export declare function loadSandboxEngine(variant: Parameters<typeof loadQuickJs>[0]): ReturnType<typeof loadQuickJs>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/js-sandbox-worker/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/js-sandbox-worker/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAG5D,6EAA6E;AAC7E,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,GACzC,UAAU,CAAC,OAAO,WAAW,CAAC,CA0ChC"}

package/dist/js-sandbox-worker/engine.js

@@ -0,0 +1,82 @@
+import { loadQuickJs } from "../../vendor/quickjs/index.js";
+import { Scope } from "quickjs-emscripten-core";
+/** Load an engine with property-handle ownership fixes for quickjs@3.0.1. */
+export async function loadSandboxEngine(variant) {
+    const engine = await loadQuickJs(variant);
+    const newContext = engine.module.newContext.bind(engine.module);
+    engine.module.newContext = (...args) => {
+        const context = newContext(...args);
+        refreshPointerViews(context.runtime);
+        const getProp = context.getProp.bind(context);
+        const symbolDescriptions = new Scope();
+        const dispose = context.dispose.bind(context);
+        context.dispose = () => {
+            symbolDescriptions.dispose();
+            dispose();
+        };
+        // quickjs@3.0.1's handleToNative.setProperties returns early for missing
+        // descriptor fields and boolean flags without disposing their handles.
+        // Release those allocations here and return the equivalent static handles.
+        // StaticLifetime.dispose is a no-op, so callers that do dispose still work.
+        // Install before the wrapper bootstraps the context, on both execution paths.
+        context.getProp = (object, key) => {
+            const handle = getProp(object, key);
+            const type = context.typeof(handle);
+            if (type === "undefined" || type === "boolean") {
+                const value = type === "undefined"
+                    ? context.undefined
+                    : context.dump(handle) === true
+                        ? context.true
+                        : context.false;
+                handle.dispose();
+                return value;
+            }
+            // handleToNative also reads Symbol.description without disposing it.
+            // Scope skips handles already disposed by a caller and frees the rest
+            // while the context is still alive.
+            if (key === "description" && context.typeof(object) === "symbol") {
+                symbolDescriptions.manage(handle);
+            }
+            return handle;
+        };
+        return context;
+    };
+    return engine;
+}
+const REFRESHED = Symbol("nodetool.refreshedPointerViews");
+/**
+ * quickjs-emscripten-core@0.31 reads output pointers through a typed-array
+ * view made before the C call. When the call grows the WASM heap, the view's
+ * buffer is detached and reads `undefined`. `executePendingJobs` then takes
+ * `undefined` for the job's context pointer and builds a brand-new context,
+ * which nothing frees, so the runtime aborts on free with
+ * `list_empty(&rt->gc_obj_list)`. Any guest that allocated a few megabytes
+ * after its first `await` hit it. The view is rebuilt over the current heap
+ * whenever the old one went stale.
+ */
+function refreshPointerViews(runtime) {
+    const memory = runtime.memory;
+    if (!memory)
+        return;
+    const proto = Object.getPrototypeOf(memory);
+    if (proto[REFRESHED])
+        return;
+    const newTypedArray = proto.newTypedArray;
+    proto.newTypedArray = function (kind, length) {
+        const lifetime = newTypedArray.call(this, kind, length);
+        const holder = lifetime.value;
+        const heap = this.module;
+        let view = holder.typedArray;
+        Object.defineProperty(holder, "typedArray", {
+            get: () => {
+                if (view.buffer !== heap.HEAPU8.buffer) {
+                    view = new kind(heap.HEAPU8.buffer, holder.ptr, length);
+                }
+                return view;
+            }
+        });
+        return lifetime;
+    };
+    proto[REFRESHED] = true;
+}
+//# sourceMappingURL=engine.js.map

package/dist/js-sandbox-worker/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/js-sandbox-worker/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACpC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,kBAAkB,GAAG,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE;YACrB,kBAAkB,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,8EAA8E;QAC9E,OAAO,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,KAAK,GACT,IAAI,KAAK,WAAW;oBAClB,CAAC,CAAC,OAAO,CAAC,SAAS;oBACnB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;wBAC7B,CAAC,CAAC,OAAO,CAAC,IAAI;wBACd,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,qEAAqE;YACrE,sEAAsE;YACtE,oCAAoC;YACpC,IAAI,GAAG,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,SAAS,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAW3D;;;;;;;;;GASG;AACH,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAI,OAA2C,CAAC,MAAM,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAuB,CAAC;IAClE,IAAI,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO;IAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,KAAK,CAAC,aAAa,GAAG,UAAU,IAAI,EAAE,MAAM;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE;YAC1C,GAAG,EAAE,GAAG,EAAE;gBACR,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACvC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;AAC1B,CAAC"}