@nodetool-ai/sandbox-runtime 0.0.0-stage → 0.8.9-beta.1

package/dist/js-sandbox-worker/host.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Main-thread side of the off-thread QuickJS sandbox.
+ *
+ * It resolves the worker entry for whichever environment the process is in,
+ * keeps a small warm pool, and serves every bridge call the guest makes as an
+ * RPC over the port. Cancellation is `worker.terminate()`, immediately: it is
+ * equally instant for a spinning guest and a parked one, and the logs and
+ * emitted values already live in the main-thread accumulators — port FIFO
+ * delivered every RPC the guest made before the abort. The deadline backstop
+ * terminates a worker that answers nothing at all.
+ *
+ * This is the one module in `js-sandbox-worker/` that reaches for Node, and it
+ * does so through `importNodeBuiltin`, so importing it off Node resolves
+ * nothing and the caller falls back in-process.
+ */
+import { SANDBOX_DISPATCHER_BINDINGS, type HostToWorkerMessage, type ResultMessage, type RunMessage, type WorkerToHostMessage } from "./protocol.js";
+/** Workers alive at once. A fifth concurrent run waits for a free one. */
+export declare const MAX_SANDBOX_WORKERS = 4;
+/** Slack on top of the run's own budget before the backstop fires. */
+export declare const DEADLINE_MARGIN_MS = 5000;
+export type WorkerEntry = {
+    /** A compiled entry: hand the file URL straight to `new Worker()`. */
+    readonly kind: "file";
+    readonly href: string;
+} | {
+    /**
+     * A TypeScript entry (tsx dev, vitest). The worker starts from an eval'd
+     * bootstrap that registers tsx's transform and then imports the entry —
+     * tsx's own `--import` hook deliberately skips worker threads, and
+     * Node's built-in strip-only loader rejects the syntax the workspace
+     * packages use, so the explicit `tsx/esm/api` registration is the one
+     * path that works.
+     */
+    readonly kind: "bootstrap";
+    readonly href: string;
+    /** File URL of `tsx/esm/api`, resolved from this package. */
+    readonly tsxApiHref: string;
+    readonly execArgv: readonly string[];
+};
+/**
+ * The worker entry for this environment, or `null` when there is none.
+ *
+ * Three shapes, decided by where this module itself was loaded from:
+ *
+ * | `import.meta.url` ends in | Entry | Mechanism |
+ * |---|---|---|
+ * | `.ts` (tsx, vitest) | sibling `worker-entry.ts` | explicit `execArgv` loading tsx |
+ * | `.js` (compiled `dist/`) | sibling `worker-entry.js` | plain `new Worker(url)` |
+ * | `server.mjs` (esbuild bundle) | `js-sandbox-worker/worker-entry.js` next to it | plain `new Worker(url)` |
+ *
+ * The `.ts` entry wins whenever this module is a `.ts` file, which is what
+ * keeps a stale `dist/` from being loaded under tsx. `execArgv` is passed
+ * explicitly rather than inherited: a vitest worker does not necessarily carry
+ * the loader flags its parent was started with.
+ */
+export declare function resolveWorkerEntry(): Promise<WorkerEntry | null>;
+/** The slice of a worker this module uses, so a test can supply a stub. */
+export interface SandboxWorkerHandle {
+    postMessage(message: HostToWorkerMessage): void;
+    /** Route one message to the active run. Replaces any previous sink. */
+    onMessage(handler: (message: WorkerToHostMessage) => void): void;
+    /** Called when the thread dies — an `error` event or an unexpected `exit`. */
+    onDeath(handler: (error: Error) => void): void;
+    terminate(): void;
+    /**
+     * Hold and release the process for this worker. A leased worker refs, so a
+     * run in flight cannot be cut short by the event loop draining; an idle
+     * pooled worker unrefs, so a warm pool never keeps the process alive on its
+     * own. Optional: a handle with no thread behind it has nothing to manage.
+     */
+    ref?(): void;
+    unref?(): void;
+}
+export type SandboxWorkerFactory = () => Promise<SandboxWorkerHandle | null>;
+/** Spawn a real `worker_threads` worker at the resolved entry. */
+export declare const defaultSandboxWorkerFactory: SandboxWorkerFactory;
+type Lease = {
+    readonly handle: SandboxWorkerHandle;
+    /** Return the worker to the pool, or drop it when the thread is gone. */
+    release(discard: boolean): void;
+};
+/**
+ * Warm workers, one run in flight each.
+ *
+ * Workers are spawned lazily up to the cap and reused after every run: a fresh
+ * QuickJS engine costs a WASM instantiation, so the pool is what keeps a short
+ * run short. A worker that was terminated is dropped rather than reused, and
+ * the next acquire spawns its replacement.
+ */
+export declare class SandboxWorkerPool {
+    private readonly factory;
+    private readonly max;
+    private readonly idle;
+    private readonly waiting;
+    private live;
+    constructor(factory?: SandboxWorkerFactory, max?: number);
+    acquire(): Promise<Lease | null>;
+    /** Terminate every idle worker. In-flight runs keep the ones they hold. */
+    destroy(): void;
+    private take;
+    private spawnChain;
+    private give;
+}
+/** The process-wide pool. A test passes its own instead. */
+export declare function defaultSandboxWorkerPool(): SandboxWorkerPool;
+export interface RunInWorkerOptions {
+    /** The run payload, minus its `type` tag. */
+    readonly run: Omit<RunMessage, "type">;
+    /**
+     * The main-side bridge table an RPC path is looked up in: the same record
+     * `deriveBridgeShape` was given, plus the dispatchers and function globals.
+     * A path resolves member by member and must land on a function.
+     */
+    readonly dispatch: Readonly<Record<string, unknown>>;
+    readonly onLog: (line: string) => void;
+    readonly onProgress: (percent: number, message?: string) => void;
+    readonly signal?: AbortSignal;
+    /** Suspended-time credit; pushed to the worker whenever it moves. */
+    readonly suspendedMs?: () => number;
+    /** Synchronous `stream.open` answer, re-read after every bridge call. */
+    readonly isStreamOpen?: (handle: string) => boolean;
+    readonly pool?: SandboxWorkerPool;
+}
+/**
+ * Run one guest program on a pooled worker and return how it settled.
+ *
+ * The result is always a `ResultMessage`: the guest's own outcome, a cancelled
+ * result synthesized when the abort terminated the thread, or a failed result carrying
+ * whatever killed the thread. The caller maps a `failure: "worker"` message
+ * through `describeEngineFailure`. Returns `null` when no worker could be
+ * acquired at all, which is the caller's signal to run in-process.
+ */
+export declare function runInWorker(options: RunInWorkerOptions): Promise<ResultMessage | null>;
+/** Guest binding names for the dispatchers, re-exported for the caller. */
+export { SANDBOX_DISPATCHER_BINDINGS };
+//# sourceMappingURL=host.d.ts.map

package/dist/js-sandbox-worker/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/js-sandbox-worker/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAEL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAGvB,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAUxC,MAAM,MAAM,WAAW,GACnB;IACE,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AAMN;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAuCtE;AAmCD,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAChD,uEAAuE;IACvE,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,8EAA8E;IAC9E,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IAC/C,SAAS,IAAI,IAAI,CAAC;IAClB;;;;;OAKG;IACH,GAAG,CAAC,IAAI,IAAI,CAAC;IACb,KAAK,CAAC,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;AAiB7E,kEAAkE;AAClE,eAAO,MAAM,2BAA2B,EAAE,oBAyDzC,CAAC;AAEF,KAAK,KAAK,GAAG;IACX,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2D;IACnF,OAAO,CAAC,IAAI,CAAK;IAEjB,YACmB,OAAO,GAAE,oBAAkD,EAC3D,GAAG,GAAE,MAA4B,EAChD;IAEE,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CASrC;IAED,2EAA2E;IAC3E,OAAO,IAAI,IAAI,CAMd;YAEa,IAAI;IA2BlB,OAAO,CAAC,UAAU,CACM;IAExB,OAAO,CAAC,IAAI;CA+Bb;AAID,4DAA4D;AAC5D,wBAAgB,wBAAwB,IAAI,iBAAiB,CAG5D;AAMD,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC,yEAAyE;IACzE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAgDD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAgK/B;AAED,2EAA2E;AAC3E,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/js-sandbox-worker/host.js

@@ -0,0 +1,482 @@
+/**
+ * Main-thread side of the off-thread QuickJS sandbox.
+ *
+ * It resolves the worker entry for whichever environment the process is in,
+ * keeps a small warm pool, and serves every bridge call the guest makes as an
+ * RPC over the port. Cancellation is `worker.terminate()`, immediately: it is
+ * equally instant for a spinning guest and a parked one, and the logs and
+ * emitted values already live in the main-thread accumulators — port FIFO
+ * delivered every RPC the guest made before the abort. The deadline backstop
+ * terminates a worker that answers nothing at all.
+ *
+ * This is the one module in `js-sandbox-worker/` that reaches for Node, and it
+ * does so through `importNodeBuiltin`, so importing it off Node resolves
+ * nothing and the caller falls back in-process.
+ */
+import { createLogger, importNodeBuiltin } from "@nodetool-ai/config";
+import { isWorkerToHostMessage, SANDBOX_DISPATCHER_BINDINGS } from "./protocol.js";
+import { isFunction, isObjectLike } from "../utils/type-guards.js";
+/** Workers alive at once. A fifth concurrent run waits for a free one. */
+export const MAX_SANDBOX_WORKERS = 4;
+/** Slack on top of the run's own budget before the backstop fires. */
+export const DEADLINE_MARGIN_MS = 5_000;
+const log = createLogger("nodetool.agents.sandbox-host");
+const SLOW_WORKER_ACQUIRE_MS = 1_000;
+const SLOW_WORKER_ROUND_TRIP_MS = 1_000;
+/**
+ * The worker entry for this environment, or `null` when there is none.
+ *
+ * Three shapes, decided by where this module itself was loaded from:
+ *
+ * | `import.meta.url` ends in | Entry | Mechanism |
+ * |---|---|---|
+ * | `.ts` (tsx, vitest) | sibling `worker-entry.ts` | explicit `execArgv` loading tsx |
+ * | `.js` (compiled `dist/`) | sibling `worker-entry.js` | plain `new Worker(url)` |
+ * | `server.mjs` (esbuild bundle) | `js-sandbox-worker/worker-entry.js` next to it | plain `new Worker(url)` |
+ *
+ * The `.ts` entry wins whenever this module is a `.ts` file, which is what
+ * keeps a stale `dist/` from being loaded under tsx. `execArgv` is passed
+ * explicitly rather than inherited: a vitest worker does not necessarily carry
+ * the loader flags its parent was started with.
+ */
+export async function resolveWorkerEntry() {
+    const fs = await importNodeBuiltin("node:fs");
+    if (fs === null)
+        return null;
+    const url = await importNodeBuiltin("node:url");
+    if (url === null)
+        return null;
+    const self = import.meta.url;
+    const exists = (candidate) => {
+        try {
+            return fs.existsSync(url.fileURLToPath(candidate));
+        }
+        catch {
+            return false;
+        }
+    };
+    if (self.endsWith("server.mjs")) {
+        const bundled = new URL("js-sandbox-worker/worker-entry.js", self);
+        return exists(bundled) ? { kind: "file", href: bundled.href } : null;
+    }
+    if (self.endsWith(".ts")) {
+        const source = new URL("worker-entry.ts", self);
+        if (!exists(source))
+            return null;
+        const tsxApiHref = await resolveTsxApi(url);
+        if (tsxApiHref === null)
+            return null;
+        return {
+            kind: "bootstrap",
+            href: source.href,
+            tsxApiHref,
+            // `nodetool-dev` is what makes the workspace `exports` maps resolve to
+            // source instead of `dist/`, the same condition the dev server runs
+            // under. Passed explicitly: a vitest worker does not carry the flags its
+            // parent was started with.
+            execArgv: ["--conditions=nodetool-dev"]
+        };
+    }
+    const compiled = new URL("worker-entry.js", self);
+    return exists(compiled) ? { kind: "file", href: compiled.href } : null;
+}
+/**
+ * Where `tsx/esm/api` lives, as a file URL.
+ *
+ * tsx is resolved from this package rather than assumed on the path, and a
+ * resolution failure returns `null` so the caller falls back in-process
+ * instead of spawning a worker that cannot parse its own entry.
+ */
+async function resolveTsxApi(url) {
+    const nodeModule = await importNodeBuiltin("node:module");
+    if (nodeModule === null)
+        return null;
+    try {
+        const api = nodeModule.createRequire(import.meta.url).resolve("tsx/esm/api");
+        return url.pathToFileURL(api).href;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The eval'd bootstrap for a TypeScript entry. CJS on purpose: an eval worker
+ * is CJS, and the two dynamic imports are what carry it into ESM.
+ */
+const TS_BOOTSTRAP = `
+const { workerData } = require("node:worker_threads");
+import(workerData.tsxApiHref)
+  .then((tsx) => { tsx.register(); return import(workerData.entryHref); })
+  .catch((error) => { throw error; });
+`;
+/** Spawn a real `worker_threads` worker at the resolved entry. */
+export const defaultSandboxWorkerFactory = async () => {
+    const threads = await importNodeBuiltin("node:worker_threads");
+    if (threads === null)
+        return null;
+    const entry = await resolveWorkerEntry();
+    if (entry === null)
+        return null;
+    const worker = entry.kind === "file"
+        ? new threads.Worker(new URL(entry.href), {})
+        : new threads.Worker(TS_BOOTSTRAP, {
+            eval: true,
+            workerData: { tsxApiHref: entry.tsxApiHref, entryHref: entry.href },
+            execArgv: [...entry.execArgv]
+        });
+    let sink;
+    let death;
+    let dead = false;
+    const die = (error) => {
+        if (dead)
+            return;
+        dead = true;
+        death?.(error);
+    };
+    worker.on("message", (raw) => {
+        if (isWorkerToHostMessage(raw))
+            sink?.(raw);
+    });
+    worker.on("error", (raw) => {
+        const error = raw;
+        die(error instanceof Error ? error : new Error(String(error)));
+    });
+    worker.on("exit", (code) => {
+        die(new Error(`the sandbox worker exited with code ${String(code)}`));
+    });
+    // A pooled worker must never hold the process open on its own — and this has
+    // to come *after* the listeners above. Attaching a `message` listener starts
+    // the worker's public port, which re-refs it, so unreffing first is silently
+    // undone: a CLI run that left a worker pooled then hung until its 45-minute
+    // CI job timeout instead of exiting.
+    worker.unref();
+    return {
+        postMessage: (message) => worker.postMessage(message),
+        onMessage: (handler) => {
+            sink = handler;
+        },
+        onDeath: (handler) => {
+            death = handler;
+            if (dead)
+                handler(new Error("the sandbox worker is already dead"));
+        },
+        terminate: () => {
+            dead = true;
+            void worker.terminate();
+        },
+        ref: () => worker.ref(),
+        unref: () => worker.unref()
+    };
+};
+/**
+ * Warm workers, one run in flight each.
+ *
+ * Workers are spawned lazily up to the cap and reused after every run: a fresh
+ * QuickJS engine costs a WASM instantiation, so the pool is what keeps a short
+ * run short. A worker that was terminated is dropped rather than reused, and
+ * the next acquire spawns its replacement.
+ */
+export class SandboxWorkerPool {
+    factory;
+    max;
+    idle = [];
+    waiting = [];
+    live = 0;
+    constructor(factory = defaultSandboxWorkerFactory, max = MAX_SANDBOX_WORKERS) {
+        this.factory = factory;
+        this.max = max;
+    }
+    async acquire() {
+        const handle = await this.take();
+        if (handle === null)
+            return null;
+        // Leased: hold the process until the run gives it back.
+        handle.ref?.();
+        return {
+            handle,
+            release: (discard) => this.give(handle, discard)
+        };
+    }
+    /** Terminate every idle worker. In-flight runs keep the ones they hold. */
+    destroy() {
+        while (this.idle.length > 0) {
+            const handle = this.idle.pop();
+            this.live--;
+            handle?.terminate();
+        }
+    }
+    async take() {
+        const idle = this.idle.pop();
+        if (idle !== undefined)
+            return idle;
+        if (this.live < this.max) {
+            this.live++;
+            let handle;
+            try {
+                // One spawn at a time. A burst of runs would otherwise start several
+                // workers in parallel, and under tsx each spawn recompiles the whole
+                // sandbox graph — four contending compiles turn a 500 ms warm-up into
+                // several seconds. Serialized, the first worker comes up while the
+                // rest of the burst queues behind it, then drains at per-run cost.
+                this.spawnChain = this.spawnChain
+                    .catch(() => undefined)
+                    .then(() => this.factory());
+                handle = await this.spawnChain;
+            }
+            catch {
+                handle = null;
+            }
+            if (handle === null)
+                this.live--;
+            return handle;
+        }
+        return new Promise((resolve) => {
+            this.waiting.push(resolve);
+        });
+    }
+    spawnChain = Promise.resolve(null);
+    give(handle, discard) {
+        if (discard) {
+            this.live--;
+            handle.terminate();
+            // A waiter must not be stranded behind a worker that no longer exists;
+            // wake it so it spawns the replacement itself.
+            const waiter = this.waiting.shift();
+            if (waiter !== undefined) {
+                this.live++;
+                void this.factory()
+                    .then((replacement) => {
+                    if (replacement === null)
+                        this.live--;
+                    waiter(replacement);
+                })
+                    .catch(() => {
+                    this.live--;
+                    waiter(null);
+                });
+            }
+            return;
+        }
+        const waiter = this.waiting.shift();
+        if (waiter !== undefined) {
+            // Straight into the next run, so it stays leased and stays ref'd.
+            waiter(handle);
+            return;
+        }
+        // Idle again: stop holding the process open.
+        handle.unref?.();
+        this.idle.push(handle);
+    }
+}
+let sharedPool;
+/** The process-wide pool. A test passes its own instead. */
+export function defaultSandboxWorkerPool() {
+    if (sharedPool === undefined)
+        sharedPool = new SandboxWorkerPool();
+    return sharedPool;
+}
+function failure(runId, error) {
+    return {
+        type: "result",
+        runId,
+        evalOk: false,
+        errorName: error instanceof Error ? error.name : "Error",
+        errorMessage: error instanceof Error ? error.message : String(error),
+        failure: "worker"
+    };
+}
+function cancelled(runId) {
+    return {
+        type: "result",
+        runId,
+        evalOk: false,
+        errorName: "ExecutionCancelled",
+        errorMessage: "Execution cancelled",
+        failure: "cancelled"
+    };
+}
+/**
+ * Resolve an RPC path against the dispatch table and call it.
+ *
+ * The path is data from the worker, so every hop is checked: a path that does
+ * not land on a function is an error the guest sees, not a host crash.
+ */
+async function dispatchRpc(table, path, args) {
+    let current = table;
+    for (const segment of path) {
+        if (!isObjectLike(current)) {
+            throw new Error(`no sandbox bridge at ${path.join(".")}`);
+        }
+        current = current[segment];
+    }
+    if (!isFunction(current)) {
+        throw new Error(`no sandbox bridge at ${path.join(".")}`);
+    }
+    return current(...args);
+}
+/**
+ * Run one guest program on a pooled worker and return how it settled.
+ *
+ * The result is always a `ResultMessage`: the guest's own outcome, a cancelled
+ * result synthesized when the abort terminated the thread, or a failed result carrying
+ * whatever killed the thread. The caller maps a `failure: "worker"` message
+ * through `describeEngineFailure`. Returns `null` when no worker could be
+ * acquired at all, which is the caller's signal to run in-process.
+ */
+export async function runInWorker(options) {
+    const runStartedAt = performance.now();
+    const pool = options.pool ?? defaultSandboxWorkerPool();
+    const acquireStartedAt = performance.now();
+    const lease = await pool.acquire();
+    const acquireMs = performance.now() - acquireStartedAt;
+    if (acquireMs >= SLOW_WORKER_ACQUIRE_MS) {
+        log.warn("Slow sandbox worker acquisition", {
+            runId: options.run.runId,
+            acquireMs
+        });
+    }
+    if (lease === null)
+        return null;
+    const { handle } = lease;
+    const runId = options.run.runId;
+    const openHandles = Object.keys(options.run.streamOpenSeed ?? {});
+    let closed = new Set(openHandles.filter((name) => options.run.streamOpenSeed?.[name] !== true));
+    let lastSuspendedMs = 0;
+    let settled = false;
+    let discard = false;
+    let deadlineTimer;
+    let abortListener;
+    const result = await new Promise((resolve) => {
+        const settle = (result, dropWorker) => {
+            if (settled)
+                return;
+            settled = true;
+            discard = discard || dropWorker;
+            if (deadlineTimer !== undefined)
+                clearTimeout(deadlineTimer);
+            if (abortListener !== undefined) {
+                options.signal?.removeEventListener("abort", abortListener);
+            }
+            handle.onMessage(() => { });
+            handle.onDeath(() => { });
+            lease.release(discard);
+            resolve(result);
+        };
+        // Pushes that ride along with every reply: a suspend credit the interrupt
+        // handler reads, and the close-only stream mirror. Both land while the
+        // guest is parked on the RPC it just made.
+        const pushSideChannels = () => {
+            if (settled)
+                return;
+            if (options.suspendedMs !== undefined) {
+                const suspendedMs = options.suspendedMs();
+                if (suspendedMs !== lastSuspendedMs) {
+                    lastSuspendedMs = suspendedMs;
+                    handle.postMessage({ type: "suspend-update", runId, suspendedMs });
+                }
+            }
+            if (options.isStreamOpen !== undefined) {
+                for (const name of openHandles) {
+                    if (closed.has(name) || options.isStreamOpen(name))
+                        continue;
+                    closed = new Set([...closed, name]);
+                    handle.postMessage({ type: "stream-closed", runId, handle: name });
+                }
+            }
+        };
+        handle.onDeath((error) => settle(failure(runId, error), true));
+        handle.onMessage((message) => {
+            if (settled)
+                return;
+            switch (message.type) {
+                case "log":
+                    options.onLog(message.line);
+                    return;
+                case "progress":
+                    options.onProgress(message.percent, message.message);
+                    return;
+                case "result":
+                    settle(message, message.failure === "worker");
+                    return;
+                case "rpc": {
+                    const { id, path, args } = message;
+                    void (async () => {
+                        try {
+                            const value = await dispatchRpc(options.dispatch, path, args);
+                            if (settled)
+                                return;
+                            handle.postMessage({ type: "rpc-reply", id, ok: true, value });
+                        }
+                        catch (error) {
+                            if (settled)
+                                return;
+                            handle.postMessage({
+                                type: "rpc-reply",
+                                id,
+                                ok: false,
+                                name: error instanceof Error ? error.name : "Error",
+                                message: error instanceof Error ? error.message : String(error)
+                            });
+                        }
+                        pushSideChannels();
+                    })();
+                }
+            }
+        });
+        if (options.signal !== undefined) {
+            abortListener = () => {
+                if (settled)
+                    return;
+                // Kill the thread. Nothing gentler is worth having: the logs and
+                // emitted values already live in the main-thread accumulators (port
+                // FIFO delivered every RPC the guest made before this), a cancelled
+                // action leaving no partial `state` mutation is the cleaner contract,
+                // and `terminate()` is equally instant for a guest that spins and one
+                // that awaits. The pool replaces the worker lazily.
+                settle(cancelled(runId), true);
+            };
+            if (options.signal.aborted) {
+                abortListener();
+            }
+            else {
+                options.signal.addEventListener("abort", abortListener, { once: true });
+            }
+        }
+        // Backstop for a worker that answers nothing at all — a wedged thread never
+        // reaches its own deadline, so the main thread keeps one of its own.
+        //
+        // The suspend allowance only widens it when the run can actually suspend,
+        // the way the engine's own abort is sized in `js-sandbox.ts` and
+        // `interpreter.ts`. Adding it unconditionally put a ~30 minute floor
+        // (`DEFAULT_SUSPEND_ALLOWANCE_MS`) under every run, so a wedged worker —
+        // a guest that OOMs marshaling a host value, say — outlived its
+        // `timeoutMs` by half an hour instead of failing.
+        const backstop = options.run.timeoutMs +
+            (options.run.hasClock ? Math.max(0, options.run.suspendAllowanceMs) : 0) +
+            DEADLINE_MARGIN_MS;
+        deadlineTimer = setTimeout(() => {
+            settle(failure(runId, new Error(`the sandbox worker did not answer within ${backstop} ms and was terminated`)), true);
+        }, backstop);
+        try {
+            handle.postMessage({ type: "run", ...options.run });
+        }
+        catch (error) {
+            // A `DataCloneError` here is the pre-scan having missed something; the
+            // worker never started, so the thread is still reusable.
+            settle(failure(runId, error), false);
+        }
+    });
+    const totalMs = performance.now() - runStartedAt;
+    if (totalMs >= SLOW_WORKER_ROUND_TRIP_MS) {
+        log.warn("Slow sandbox worker round trip", {
+            runId,
+            acquireMs,
+            workerRoundTripMs: Math.max(0, totalMs - acquireMs),
+            totalMs
+        });
+    }
+    return result;
+}
+/** Guest binding names for the dispatchers, re-exported for the caller. */
+export { SANDBOX_DISPATCHER_BINDINGS };
+//# sourceMappingURL=host.js.map

package/dist/js-sandbox-worker/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/js-sandbox-worker/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAK5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEnE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,sEAAsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AACzD,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAgCxC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAS,SAAS,CAAC,CAAC;IACtD,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAU,UAAU,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,SAAc,EAAW,EAAE;QACzC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU;YACV,uEAAuE;YACvE,oEAAoE;YACpE,yEAAyE;YACzE,2BAA2B;YAC3B,QAAQ,EAAE,CAAC,2BAA2B,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,GAAY;IACvC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAa,aAAa,CAAC,CAAC;IACtE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,YAAY,GAAG;;;;;CAKpB,CAAC;AAyCF,kEAAkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAyB,KAAK,IAAI,EAAE;IAC1E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAoB,qBAAqB,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,MAAM;QACnB,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC7C,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE;YAC/B,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;YACnE,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;SAC9B,CAAC,CAAC;IACT,IAAI,IAA0D,CAAC;IAC/D,IAAI,KAA2C,CAAC;IAChD,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,GAAG,GAAG,CAAC,KAAY,EAAQ,EAAE;QACjC,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,GAAG,IAAI,CAAC;QACZ,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAU,EAAE,EAAE;QAClC,IAAI,qBAAqB,CAAC,GAAG,CAAC;YAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QAChC,MAAM,KAAK,GAAY,GAAG,CAAC;QAC3B,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAW,EAAE,EAAE;QAChC,GAAG,CAAC,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,OAAO;QACL,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QACrD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACnB,KAAK,GAAG,OAAO,CAAC;YAChB,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1B,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC,CAAC;AAQF;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAMT,OAAO;IACP,GAAG;IANL,IAAI,GAA0B,EAAE,CAAC;IACjC,OAAO,GAAwD,EAAE,CAAC;IAC3E,IAAI,GAAG,CAAC,CAAC;IAEjB,YACmB,OAAO,GAAyB,2BAA2B,EAC3D,GAAG,GAAW,mBAAmB;uBADjC,OAAO;mBACP,GAAG;IACnB,CAAC;IAEJ,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,wDAAwD;QACxD,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QACf,OAAO;YACL,MAAM;YACN,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,SAAS,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,MAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,qEAAqE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,mEAAmE;gBACnE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;qBAC9B,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;qBACtB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9B,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,KAAK,IAAI;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,OAAO,CAA6B,CAAC,OAAO,EAAE,EAAE;YACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,GAChB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhB,IAAI,CAAC,MAA2B,EAAE,OAAgB;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,uEAAuE;YACvE,+CAA+C;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,KAAK,IAAI,CAAC,OAAO,EAAE;qBAChB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;oBACpB,IAAI,WAAW,KAAK,IAAI;wBAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACtB,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACV,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC,CAAC,CAAC;YACP,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,kEAAkE;YAClE,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,6CAA6C;QAC7C,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;CACF;AAED,IAAI,UAAyC,CAAC;AAE9C,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB;IACtC,IAAI,UAAU,KAAK,SAAS;QAAE,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACnE,OAAO,UAAU,CAAC;AACpB,CAAC;AAyBD,SAAS,OAAO,CAAC,KAAa,EAAE,KAAc;IAC5C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;QACxD,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACpE,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,oBAAoB;QAC/B,YAAY,EAAE,qBAAqB;QACnC,OAAO,EAAE,WAAW;KACrB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,KAAwC,EACxC,IAAuB,EACvB,IAAwB;IAExB,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAQ,OAAwC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B;IAE3B,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IACvD,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC1C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;YACxB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;IAChC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,IAAI,GAAG,CAClB,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAC1E,CAAC;IACF,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,aAAwD,CAAC;IAC7D,IAAI,aAAuC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,UAAmB,EAAQ,EAAE;YAClE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC;YAChC,IAAI,aAAa,KAAK,SAAS;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC7D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,0EAA0E;QAC1E,uEAAuE;QACvE,2CAA2C;QAC3C,MAAM,gBAAgB,GAAG,GAAS,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;oBACpC,eAAe,GAAG,WAAW,CAAC;oBAC9B,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC7D,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;oBACpC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAE/D,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,KAAK;oBACR,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5B,OAAO;gBACT,KAAK,UAAU;oBACb,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBACrD,OAAO;gBACT,KAAK,QAAQ;oBACX,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;oBAC9C,OAAO;gBACT,KAAK,KAAK,EAAE,CAAC;oBACX,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;oBACnC,KAAK,CAAC,KAAK,IAAI,EAAE;wBACf,IAAI,CAAC;4BACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;4BAC9D,IAAI,OAAO;gCAAE,OAAO;4BACpB,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACjE,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,OAAO;gCAAE,OAAO;4BACpB,MAAM,CAAC,WAAW,CAAC;gCACjB,IAAI,EAAE,WAAW;gCACjB,EAAE;gCACF,EAAE,EAAE,KAAK;gCACT,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;gCACnD,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;6BAChE,CAAC,CAAC;wBACL,CAAC;wBACD,gBAAgB,EAAE,CAAC;oBACrB,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,aAAa,GAAG,GAAG,EAAE;gBACnB,IAAI,OAAO;oBAAE,OAAO;gBACpB,iEAAiE;gBACjE,oEAAoE;gBACpE,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,oDAAoD;gBACpD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,aAAa,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,qEAAqE;QACrE,EAAE;QACF,0EAA0E;QAC1E,iEAAiE;QACjE,qEAAqE;QACrE,yEAAyE;QACzE,gEAAgE;QAChE,kDAAkD;QAClD,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,SAAS;YACrB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,kBAAkB,CAAC;QACrB,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CACJ,OAAO,CACL,KAAK,EACL,IAAI,KAAK,CACP,4CAA4C,QAAQ,wBAAwB,CAC7E,CACF,EACD,IAAI,CACL,CAAC;QACJ,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IACjD,IAAI,OAAO,IAAI,yBAAyB,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACzC,KAAK;YACL,SAAS;YACT,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YACnD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,OAAO,EAAE,2BAA2B,EAAE,CAAC"}