@nookplot/runtime 0.5.131 → 0.5.132

package/dist/sandbox.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Sandbox — abstract base for agent-local code execution.
+ *
+ * `LocalSandbox` runs commands directly on the host (no isolation, dev only).
+ * `DockerSandbox` spawns a long-lived container and shells out to `docker exec`
+ * for each call. Both share the same surface so callers can swap them via:
+ *
+ *   const sandbox = process.env.NODE_ENV === "production"
+ *     ? await DockerSandbox.create({ image: "python:3.12.7-slim" })
+ *     : await LocalSandbox.create();
+ *
+ * Sandboxes are AGENT-LOCAL — they are never registered in `ACTION_CATALOG`
+ * and never reachable over the network. `asTools()` returns local tool specs
+ * an agent can hand to its LLM, but the dispatch happens entirely in-process.
+ *
+ * Adversarial defaults (DockerSandbox):
+ *   - `--network none` unless `allowNetwork: true`.
+ *   - `--cpus 1 --memory 512m` unless overridden.
+ *   - Mounts only under the caller's cwd unless `allowAnyMount: true`.
+ *   - Mounts are read-only unless `readonly: false` is set per-mount.
+ *   - Default image is `python:3.12.7-slim` — pinned minor to resist tag
+ *     re-publish; callers running untrusted code at scale should override to
+ *     a digest (`python@sha256:…`) for true immutability.
+ *   - `close()` is idempotent and actually removes the container.
+ *
+ * @module sandbox
+ */
+export interface SandboxMount {
+    host: string;
+    container: string;
+    /**
+     * Default: read-only. Pass `readonly: false` to enable writes. Read-only is
+     * the safer default because untrusted code inside the sandbox cannot use a
+     * writable mount to persist changes back to the host filesystem.
+     */
+    readonly?: boolean;
+}
+/**
+ * Default Docker image. Pinned to a specific patch version + `slim` variant:
+ *   - `slim` reduces attack surface (no build toolchain, no compilers).
+ *   - Pinning to `3.12.7` resists the "tag re-publish" supply-chain vector
+ *     where a fresh push to `python:3.12` replaces the content behind the tag.
+ *
+ * Callers running untrusted code at scale SHOULD override with a digest pin:
+ *   new DockerSandbox({ image: "python@sha256:<digest>" })
+ *
+ * Bump this default when Python ships a meaningful security release; the
+ * argv-injection regex for `image` still requires leading alphanumeric.
+ */
+export declare const DEFAULT_SANDBOX_IMAGE = "python:3.12.7-slim";
+export interface SandboxOptions {
+    /** Container image. Default {@link DEFAULT_SANDBOX_IMAGE}. Ignored by `LocalSandbox`. */
+    image?: string;
+    /** Container port → host port (null = random). */
+    ports?: Record<number, number | null>;
+    /** Env vars passed into the container / child env. */
+    env?: Record<string, string>;
+    /** Bind mounts. By default rejected if outside cwd; `allowAnyMount` opts out. */
+    mounts?: SandboxMount[];
+    /** Allow mount paths outside the caller's cwd. Audit your callers. */
+    allowAnyMount?: boolean;
+    /** Allow container network access. Off by default for Docker. */
+    allowNetwork?: boolean;
+    /** CPU limit (cores). Default 1. Docker only. */
+    cpus?: number;
+    /** Memory limit (e.g. `"512m"`, `"2g"`). Default `"512m"`. Docker only. */
+    memory?: string;
+    /** Override `docker` binary path. Default `"docker"`. Docker only. */
+    dockerBin?: string;
+}
+export interface ExecOptions {
+    /** Stdin to pipe into the process. */
+    input?: string;
+    /** Working directory inside the sandbox. */
+    cwd?: string;
+    /** Per-call env additions (merged on top of sandbox env). */
+    env?: Record<string, string>;
+}
+/** Local tool definition the sandbox exposes via `asTools()`.
+ *
+ *  Distinct from `ToolDefinition` in `tools.ts` (which mirrors the gateway
+ *  action registry). This shape is for in-process LLM tool-calling — the
+ *  invoke fn dispatches inside this runtime, never over the wire. */
+export interface SandboxToolDefinition {
+    name: string;
+    description: string;
+    /** JSON Schema of the tool input. */
+    parameters: Record<string, unknown>;
+    invoke: (args: Record<string, unknown>) => Promise<string>;
+}
+export declare abstract class Sandbox {
+    /** Run a command. Returns stdout. Throws with stderr on non-zero exit. */
+    abstract exec(cmd: string[], opts?: ExecOptions): Promise<string>;
+    /** Copy a local file into the sandbox. */
+    abstract put(localPath: string, sandboxPath: string): Promise<void>;
+    /** Copy a sandbox file out to a local path. Returns the local path written. */
+    abstract get(sandboxPath: string, localPath: string): Promise<string>;
+    /** Map a container port to a reachable host endpoint string. */
+    abstract endpoint(port: number): string;
+    /** Idempotent. Safe to call multiple times. Tests verify the resource is freed. */
+    abstract close(): Promise<void>;
+    /** Run a Python script via stdin. */
+    python(script: string): Promise<string>;
+    /** Run a shell command. */
+    sh(command: string): Promise<string>;
+    /** Returns local tool specs callers can pass to their LLM tool list. */
+    asTools(): SandboxToolDefinition[];
+}
+export declare class LocalSandbox extends Sandbox {
+    private readonly env;
+    private readonly cwd;
+    private closed;
+    private constructor();
+    static create(opts?: SandboxOptions): Promise<LocalSandbox>;
+    exec(cmd: string[], opts?: ExecOptions): Promise<string>;
+    put(localPath: string, sandboxPath: string): Promise<void>;
+    get(sandboxPath: string, localPath: string): Promise<string>;
+    endpoint(_port: number): string;
+    close(): Promise<void>;
+}
+export declare class DockerSandbox extends Sandbox {
+    private readonly opts;
+    private readonly internal;
+    private constructor();
+    /** Spin up a long-lived container. Throws if Docker is unreachable. */
+    static create(opts?: SandboxOptions): Promise<DockerSandbox>;
+    /** Reattach to an existing container by id. */
+    static connect(containerId: string, opts?: SandboxOptions): Promise<DockerSandbox>;
+    /** Visible for tests — does NOT execute docker. */
+    static buildRunArgs(opts: {
+        image: string;
+        cpus: number;
+        memory: string;
+        ports?: Record<number, number | null>;
+        env?: Record<string, string>;
+        mounts?: SandboxMount[];
+        allowNetwork: boolean;
+    }): string[];
+    private static validateMounts;
+    private static discoverPorts;
+    exec(cmd: string[], opts?: ExecOptions): Promise<string>;
+    put(localPath: string, sandboxPath: string): Promise<void>;
+    get(sandboxPath: string, localPath: string): Promise<string>;
+    endpoint(port: number): string;
+    /** Idempotent. Force-removes the container and marks closed. */
+    close(): Promise<void>;
+    /** Test inspection — container id assigned at create. */
+    get containerId(): string;
+}
+/** Sentinel for downstream code that wants to detect a sandbox at the type
+ *  level without importing the abstract class directly. */
+export declare function isSandbox(value: unknown): value is Sandbox;
+/** Returns true if `docker version` succeeds. Useful for callers that want
+ *  to fall back to `LocalSandbox` when Docker is unavailable. */
+export declare function isDockerAvailable(dockerBin?: string): Promise<boolean>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA6CH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACtC,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,iFAAiF;IACjF,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,sEAAsE;IACtE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;qEAIqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D;AAID,8BAAsB,OAAO;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjE,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEnE,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAErE,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAEvC,mFAAmF;IACnF,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE/B,qCAAqC;IAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7C,2BAA2B;IACrB,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1C,wEAAwE;IACxE,OAAO,IAAI,qBAAqB,EAAE;CA4BnC;AAwBD,qBAAa,YAAa,SAAQ,OAAO;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO;WAMM,MAAM,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,CAAC;IAK/D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAW5D,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1D,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOlE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAWD,qBAAa,aAAc,SAAQ,OAAO;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+E;IACpG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C,OAAO;IAWP,uEAAuE;WAC1D,MAAM,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAsCtE,+CAA+C;WAClC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAmB5F,mDAAmD;IACnD,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;QACxB,YAAY,EAAE,OAAO,CAAC;KACvB,GAAG,MAAM,EAAE;IAqCZ,OAAO,CAAC,MAAM,CAAC,cAAc;mBA6BR,aAAa;IAuB5B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa5D,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWlE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAQ9B,gEAAgE;IAC1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B,yDAAyD;IACzD,IAAI,WAAW,IAAI,MAAM,CAExB;CACF;AA6CD;2DAC2D;AAC3D,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAE1D;AAED;iEACiE;AACjE,wBAAsB,iBAAiB,CAAC,SAAS,SAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9E"}

package/dist/sandbox.js

@@ -0,0 +1,425 @@
+/**
+ * Sandbox — abstract base for agent-local code execution.
+ *
+ * `LocalSandbox` runs commands directly on the host (no isolation, dev only).
+ * `DockerSandbox` spawns a long-lived container and shells out to `docker exec`
+ * for each call. Both share the same surface so callers can swap them via:
+ *
+ *   const sandbox = process.env.NODE_ENV === "production"
+ *     ? await DockerSandbox.create({ image: "python:3.12.7-slim" })
+ *     : await LocalSandbox.create();
+ *
+ * Sandboxes are AGENT-LOCAL — they are never registered in `ACTION_CATALOG`
+ * and never reachable over the network. `asTools()` returns local tool specs
+ * an agent can hand to its LLM, but the dispatch happens entirely in-process.
+ *
+ * Adversarial defaults (DockerSandbox):
+ *   - `--network none` unless `allowNetwork: true`.
+ *   - `--cpus 1 --memory 512m` unless overridden.
+ *   - Mounts only under the caller's cwd unless `allowAnyMount: true`.
+ *   - Mounts are read-only unless `readonly: false` is set per-mount.
+ *   - Default image is `python:3.12.7-slim` — pinned minor to resist tag
+ *     re-publish; callers running untrusted code at scale should override to
+ *     a digest (`python@sha256:…`) for true immutability.
+ *   - `close()` is idempotent and actually removes the container.
+ *
+ * @module sandbox
+ */
+import { spawn } from "node:child_process";
+import { promises as fs, realpathSync } from "node:fs";
+import path from "node:path";
+// ── Argv-injection guards ────────────────────────────────────
+//
+// These validators exist because `SandboxOptions` flows into a `docker run`
+// argv. Even though we use array-form spawn (no shell), Docker itself parses
+// flags, and some fields (env values, image names) can be weaponized if
+// callers ever pipe untrusted input through. All are defense-in-depth — the
+// sandbox is agent-local and caller-constructed today.
+/** POSIX env var name: `[A-Za-z_][A-Za-z0-9_]*`. Rejects anything that could
+ *  confuse shells or POSIX env-parsers in the container. */
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** Docker image reference: letters/digits/`._/:@-`, must start with an
+ *  alphanumeric so it never looks like a flag to `docker run`. */
+const DOCKER_IMAGE_RE = /^[A-Za-z0-9][A-Za-z0-9._/:@-]*$/;
+function assertEnvPair(key, value) {
+    if (!ENV_KEY_RE.test(key)) {
+        throw new Error(`DockerSandbox: invalid env key '${key}' (must match ${ENV_KEY_RE.source})`);
+    }
+    if (value.includes("\n") || value.includes("\0")) {
+        throw new Error(`DockerSandbox: env value for '${key}' contains newline or NUL`);
+    }
+}
+function assertImage(image) {
+    if (!DOCKER_IMAGE_RE.test(image)) {
+        throw new Error(`DockerSandbox: invalid image '${image}' (must match ${DOCKER_IMAGE_RE.source})`);
+    }
+}
+/**
+ * Default Docker image. Pinned to a specific patch version + `slim` variant:
+ *   - `slim` reduces attack surface (no build toolchain, no compilers).
+ *   - Pinning to `3.12.7` resists the "tag re-publish" supply-chain vector
+ *     where a fresh push to `python:3.12` replaces the content behind the tag.
+ *
+ * Callers running untrusted code at scale SHOULD override with a digest pin:
+ *   new DockerSandbox({ image: "python@sha256:<digest>" })
+ *
+ * Bump this default when Python ships a meaningful security release; the
+ * argv-injection regex for `image` still requires leading alphanumeric.
+ */
+export const DEFAULT_SANDBOX_IMAGE = "python:3.12.7-slim";
+// ── Base ─────────────────────────────────────────────────────
+export class Sandbox {
+    /** Run a Python script via stdin. */
+    async python(script) {
+        return this.exec(["python3", "-"], { input: script });
+    }
+    /** Run a shell command. */
+    async sh(command) {
+        return this.exec(["sh", "-c", command]);
+    }
+    /** Returns local tool specs callers can pass to their LLM tool list. */
+    asTools() {
+        return [
+            {
+                name: "python",
+                description: "Run a Python 3 script in the sandbox. Returns stdout.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        script: { type: "string", description: "Python source to execute." },
+                    },
+                    required: ["script"],
+                },
+                invoke: async (args) => this.python(String(args.script ?? "")),
+            },
+            {
+                name: "sh",
+                description: "Run a shell command in the sandbox. Returns stdout.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        command: { type: "string", description: "Shell command line." },
+                    },
+                    required: ["command"],
+                },
+                invoke: async (args) => this.sh(String(args.command ?? "")),
+            },
+        ];
+    }
+}
+// ── LocalSandbox (no isolation; dev / tests only) ────────────
+/**
+ * Silence the dev-only warning when set truthy. Escape hatch for test harnesses
+ * or intentionally-unsafe prototypes that don't want log noise. Production
+ * agents should never set this — use {@link DockerSandbox} instead.
+ */
+const LOCAL_SANDBOX_SILENCE_ENV = "NOOKPLOT_LOCAL_SANDBOX_SILENCE";
+function emitLocalSandboxWarning() {
+    const env = process.env;
+    if (env.NODE_ENV === "test")
+        return;
+    if (env[LOCAL_SANDBOX_SILENCE_ENV])
+        return;
+    // Keep the message terse — it prints on every `create()` and that's fine:
+    // a production agent creating many LocalSandboxes is itself a bug signal.
+    console.warn("[LocalSandbox] No process isolation — commands run directly on the host. " +
+        "Use DockerSandbox for untrusted code in production. " +
+        `Silence with ${LOCAL_SANDBOX_SILENCE_ENV}=1.`);
+}
+export class LocalSandbox extends Sandbox {
+    env;
+    cwd;
+    closed = false;
+    constructor(opts = {}) {
+        super();
+        this.env = { ...opts.env };
+        this.cwd = process.cwd();
+    }
+    static async create(opts = {}) {
+        emitLocalSandboxWarning();
+        return new LocalSandbox(opts);
+    }
+    async exec(cmd, opts = {}) {
+        if (this.closed)
+            throw new Error("LocalSandbox: closed");
+        if (cmd.length === 0)
+            throw new Error("LocalSandbox: empty command");
+        const [bin, ...args] = cmd;
+        return runProcess(bin, args, {
+            input: opts.input,
+            cwd: opts.cwd ?? this.cwd,
+            env: { ...process.env, ...this.env, ...(opts.env ?? {}) },
+        });
+    }
+    async put(localPath, sandboxPath) {
+        if (this.closed)
+            throw new Error("LocalSandbox: closed");
+        await fs.mkdir(path.dirname(sandboxPath), { recursive: true });
+        await fs.copyFile(localPath, sandboxPath);
+    }
+    async get(sandboxPath, localPath) {
+        if (this.closed)
+            throw new Error("LocalSandbox: closed");
+        await fs.mkdir(path.dirname(localPath), { recursive: true });
+        await fs.copyFile(sandboxPath, localPath);
+        return localPath;
+    }
+    endpoint(_port) {
+        throw new Error("LocalSandbox: endpoint() unsupported (no port mapping)");
+    }
+    async close() {
+        this.closed = true;
+    }
+}
+export class DockerSandbox extends Sandbox {
+    opts;
+    internal;
+    constructor(opts, internal) {
+        super();
+        this.opts = {
+            ...opts,
+            image: opts.image ?? DEFAULT_SANDBOX_IMAGE,
+            cpus: opts.cpus ?? 1,
+            memory: opts.memory ?? "512m",
+        };
+        this.internal = internal;
+    }
+    /** Spin up a long-lived container. Throws if Docker is unreachable. */
+    static async create(opts = {}) {
+        const dockerBin = opts.dockerBin ?? "docker";
+        const image = opts.image ?? DEFAULT_SANDBOX_IMAGE;
+        const cpus = opts.cpus ?? 1;
+        const memory = opts.memory ?? "512m";
+        DockerSandbox.validateMounts(opts.mounts ?? [], opts.allowAnyMount === true);
+        const args = DockerSandbox.buildRunArgs({
+            image,
+            cpus,
+            memory,
+            ports: opts.ports,
+            env: opts.env,
+            mounts: opts.mounts,
+            allowNetwork: opts.allowNetwork === true,
+        });
+        const containerIdRaw = await runProcess(dockerBin, args, {});
+        const containerId = containerIdRaw.trim();
+        if (!containerId) {
+            throw new Error("DockerSandbox: docker run returned empty container id");
+        }
+        const hostPortByContainer = await DockerSandbox.discoverPorts(dockerBin, containerId, Object.keys(opts.ports ?? {}).map((p) => Number(p)));
+        return new DockerSandbox(opts, {
+            containerId,
+            hostPortByContainer,
+            dockerBin,
+            closed: false,
+        });
+    }
+    /** Reattach to an existing container by id. */
+    static async connect(containerId, opts = {}) {
+        const dockerBin = opts.dockerBin ?? "docker";
+        const inspect = await runProcess(dockerBin, ["inspect", "--format", "{{.State.Running}}", containerId], {});
+        if (inspect.trim() !== "true") {
+            throw new Error(`DockerSandbox: container ${containerId} is not running`);
+        }
+        const hostPortByContainer = await DockerSandbox.discoverPorts(dockerBin, containerId, Object.keys(opts.ports ?? {}).map((p) => Number(p)));
+        return new DockerSandbox(opts, {
+            containerId,
+            hostPortByContainer,
+            dockerBin,
+            closed: false,
+        });
+    }
+    /** Visible for tests — does NOT execute docker. */
+    static buildRunArgs(opts) {
+        assertImage(opts.image);
+        const args = [
+            "run",
+            "-d",
+            "--rm",
+            "--cpus",
+            String(opts.cpus),
+            "--memory",
+            opts.memory,
+        ];
+        if (!opts.allowNetwork)
+            args.push("--network", "none");
+        for (const [containerPortStr, hostPort] of Object.entries(opts.ports ?? {})) {
+            const containerPort = Number(containerPortStr);
+            if (hostPort === null || hostPort === undefined) {
+                args.push("-p", `${containerPort}`);
+            }
+            else {
+                args.push("-p", `${hostPort}:${containerPort}`);
+            }
+        }
+        for (const [key, value] of Object.entries(opts.env ?? {})) {
+            assertEnvPair(key, value);
+            args.push("-e", `${key}=${value}`);
+        }
+        for (const mount of opts.mounts ?? []) {
+            // Default to read-only. Writes require explicit `readonly: false`.
+            // Undefined/true/missing → ro; only `false` opts into rw. This closes
+            // the "untrusted code writes back to the host" path by default.
+            const flag = mount.readonly === false ? "rw" : "ro";
+            args.push("-v", `${path.resolve(mount.host)}:${mount.container}:${flag}`);
+        }
+        // `assertImage` above rejects leading-dash image names, so positional
+        // placement of `image` cannot be mis-parsed as a docker-run flag.
+        args.push(opts.image, "sleep", "infinity");
+        return args;
+    }
+    static validateMounts(mounts, allowAny) {
+        if (allowAny)
+            return;
+        // Use realpath on BOTH sides so a symlink inside cwd pointing outside it
+        // cannot slip past the check. Matches the Python side's behavior.
+        let cwd;
+        try {
+            cwd = realpathSync(process.cwd());
+        }
+        catch {
+            cwd = path.resolve(process.cwd());
+        }
+        for (const mount of mounts) {
+            const abs = path.resolve(mount.host);
+            let resolved;
+            try {
+                resolved = realpathSync(abs);
+            }
+            catch {
+                // Path doesn't exist yet — fall back to the lexical resolution.
+                resolved = abs;
+            }
+            const rel = path.relative(cwd, resolved);
+            const escapes = rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel);
+            if (escapes) {
+                throw new Error(`DockerSandbox: mount '${mount.host}' resolves outside cwd; pass allowAnyMount: true to override`);
+            }
+        }
+    }
+    static async discoverPorts(dockerBin, containerId, requestedContainerPorts) {
+        const out = new Map();
+        for (const containerPort of requestedContainerPorts) {
+            try {
+                const raw = await runProcess(dockerBin, ["port", containerId, String(containerPort)], {});
+                // Format: "0.0.0.0:54321\n" — take the first line and the port after the colon.
+                const first = raw.split(/\r?\n/)[0]?.trim() ?? "";
+                const colon = first.lastIndexOf(":");
+                if (colon >= 0) {
+                    const hostPort = Number(first.slice(colon + 1));
+                    if (Number.isFinite(hostPort))
+                        out.set(containerPort, hostPort);
+                }
+            }
+            catch {
+                // Port not exposed — skip; endpoint() will throw with a clear message.
+            }
+        }
+        return out;
+    }
+    async exec(cmd, opts = {}) {
+        if (this.internal.closed)
+            throw new Error("DockerSandbox: closed");
+        if (cmd.length === 0)
+            throw new Error("DockerSandbox: empty command");
+        const args = ["exec"];
+        if (opts.input !== undefined)
+            args.push("-i");
+        if (opts.cwd)
+            args.push("-w", opts.cwd);
+        for (const [k, v] of Object.entries(opts.env ?? {})) {
+            args.push("-e", `${k}=${v}`);
+        }
+        args.push(this.internal.containerId, ...cmd);
+        return runProcess(this.internal.dockerBin, args, { input: opts.input });
+    }
+    async put(localPath, sandboxPath) {
+        if (this.internal.closed)
+            throw new Error("DockerSandbox: closed");
+        await runProcess(this.internal.dockerBin, ["cp", localPath, `${this.internal.containerId}:${sandboxPath}`], {});
+    }
+    async get(sandboxPath, localPath) {
+        if (this.internal.closed)
+            throw new Error("DockerSandbox: closed");
+        await fs.mkdir(path.dirname(localPath), { recursive: true });
+        await runProcess(this.internal.dockerBin, ["cp", `${this.internal.containerId}:${sandboxPath}`, localPath], {});
+        return localPath;
+    }
+    endpoint(port) {
+        const hostPort = this.internal.hostPortByContainer.get(port);
+        if (hostPort === undefined) {
+            throw new Error(`DockerSandbox: port ${port} not mapped`);
+        }
+        return `localhost:${hostPort}`;
+    }
+    /** Idempotent. Force-removes the container and marks closed. */
+    async close() {
+        if (this.internal.closed)
+            return;
+        this.internal.closed = true;
+        try {
+            await runProcess(this.internal.dockerBin, ["rm", "-f", this.internal.containerId], {});
+        }
+        catch {
+            // Container may already be gone (e.g. --rm fired). Closed flag still
+            // flipped, so subsequent calls short-circuit. Leaving a leaked container
+            // would be a security bug — but `rm -f` is the strongest guarantee
+            // available from this side; failures here mean Docker itself is wedged.
+        }
+    }
+    /** Test inspection — container id assigned at create. */
+    get containerId() {
+        return this.internal.containerId;
+    }
+}
+/** Spawn a process, capture stdout. Throws on non-zero exit. */
+function runProcess(bin, args, opts) {
+    return new Promise((resolve, reject) => {
+        const spawnOpts = {
+            stdio: ["pipe", "pipe", "pipe"],
+        };
+        if (opts.cwd)
+            spawnOpts.cwd = opts.cwd;
+        if (opts.env)
+            spawnOpts.env = opts.env;
+        const child = spawn(bin, args, spawnOpts);
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        child.stdout?.on("data", (chunk) => stdoutChunks.push(chunk));
+        child.stderr?.on("data", (chunk) => stderrChunks.push(chunk));
+        child.on("error", reject);
+        child.on("close", (code) => {
+            const stdout = Buffer.concat(stdoutChunks).toString("utf8");
+            const stderr = Buffer.concat(stderrChunks).toString("utf8");
+            if (code === 0) {
+                resolve(stdout);
+            }
+            else {
+                const detail = stderr.trim() || stdout.trim() || "(no output)";
+                reject(new Error(`${bin} exited ${code}: ${detail}`));
+            }
+        });
+        if (opts.input !== undefined && child.stdin) {
+            child.stdin.end(opts.input);
+        }
+        else if (child.stdin) {
+            child.stdin.end();
+        }
+    });
+}
+/** Sentinel for downstream code that wants to detect a sandbox at the type
+ *  level without importing the abstract class directly. */
+export function isSandbox(value) {
+    return value instanceof Sandbox;
+}
+/** Returns true if `docker version` succeeds. Useful for callers that want
+ *  to fall back to `LocalSandbox` when Docker is unavailable. */
+export async function isDockerAvailable(dockerBin = "docker") {
+    try {
+        await runProcess(dockerBin, ["version", "--format", "{{.Server.Version}}"], {});
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,uDAAuD;AAEvD;4DAC4D;AAC5D,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C;kEACkE;AAClE,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAE1D,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,iBAAiB,UAAU,CAAC,MAAM,GAAG,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,2BAA2B,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,iBAAiB,eAAe,CAAC,MAAM,GAAG,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAeD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AA6C1D,gEAAgE;AAEhE,MAAM,OAAgB,OAAO;IAgB3B,qCAAqC;IACrC,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,EAAE,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,OAAO;QACL,OAAO;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uDAAuD;gBACpE,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;qBACrE;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;gBACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC/D;YACD;gBACE,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,qDAAqD;gBAClE,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;qBAChE;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC5D;SACF,CAAC;IACJ,CAAC;CACF;AAED,gEAAgE;AAEhE;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAEnE,SAAS,uBAAuB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO;IACpC,IAAI,GAAG,CAAC,yBAAyB,CAAC;QAAE,OAAO;IAC3C,0EAA0E;IAC1E,0EAA0E;IAC1E,OAAO,CAAC,IAAI,CACV,2EAA2E;QACzE,sDAAsD;QACtD,gBAAgB,yBAAyB,KAAK,CACjD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,OAAO;IACtB,GAAG,CAAyB;IAC5B,GAAG,CAAS;IACrB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,OAAuB,EAAE;QAC3C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAuB,EAAE;QAC3C,uBAAuB,EAAE,CAAC;QAC1B,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAa,EAAE,OAAoB,EAAE;QAC9C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QAC3B,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;YACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,WAAmB;QAC9C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,SAAiB;QAC9C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;CACF;AAWD,MAAM,OAAO,aAAc,SAAQ,OAAO;IACvB,IAAI,CAA+E;IACnF,QAAQ,CAAiB;IAE1C,YAAoB,IAAoB,EAAE,QAAwB;QAChE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,IAAI;YACP,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,qBAAqB;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;SAC9B,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAuB,EAAE;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;QAErC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC;QAE7E,MAAM,IAAI,GAAG,aAAa,CAAC,YAAY,CAAC;YACtC,KAAK;YACL,IAAI;YACJ,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,IAAI;SACzC,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,aAAa,CAC3D,SAAS,EACT,WAAW,EACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;QAEF,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE;YAC7B,WAAW;YACX,mBAAmB;YACnB,SAAS;YACT,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAAuB,EAAE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,iBAAiB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,mBAAmB,GAAG,MAAM,aAAa,CAAC,aAAa,CAC3D,SAAS,EACT,WAAW,EACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;QACF,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE;YAC7B,WAAW;YACX,mBAAmB;YACnB,SAAS;YACT,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,YAAY,CAAC,IAQnB;QACC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,IAAI,GAAa;YACrB,KAAK;YACL,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACjB,UAAU;YACV,IAAI,CAAC,MAAM;SACZ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACtC,mEAAmE;YACnE,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,cAAc,CAAC,MAAsB,EAAE,QAAiB;QACrE,IAAI,QAAQ;YAAE,OAAO;QACrB,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACxF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,yBAAyB,KAAK,CAAC,IAAI,8DAA8D,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,aAAa,CAChC,SAAiB,EACjB,WAAmB,EACnB,uBAAiC;QAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,aAAa,IAAI,uBAAuB,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1F,gFAAgF;gBAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;oBAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAa,EAAE,OAAoB,EAAE;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtE,MAAM,IAAI,GAAa,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC;QAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,WAAmB;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnE,MAAM,UAAU,CACd,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC,EAChE,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,SAAiB;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,CACd,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,WAAW,EAAE,EAAE,SAAS,CAAC,EAChE,EAAE,CACH,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,aAAa,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,aAAa,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,yEAAyE;YACzE,mEAAmE;YACnE,wEAAwE;QAC1E,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IACnC,CAAC;CACF;AAUD,gEAAgE;AAChE,SAAS,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,IAAa;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAiB;YAC9B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC;QACF,IAAI,IAAI,CAAC,GAAG;YAAE,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG;YAAE,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC;gBAC/D,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,WAAW,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,OAAO,CAAC;AAClC,CAAC;AAED;iEACiE;AACjE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAS,GAAG,QAAQ;IAC1D,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}