@openai/agents-extensions 0.8.4 → 0.9.0

package/dist/sandbox/blaxel/mounts.js

@@ -0,0 +1,542 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BlaxelDriveMount = exports.BlaxelDriveMountStrategy = exports.BlaxelCloudBucketMountStrategy = void 0;
+exports.isBlaxelCloudBucketMountEntry = isBlaxelCloudBucketMountEntry;
+exports.isBlaxelDriveMountEntry = isBlaxelDriveMountEntry;
+exports.mountBlaxelCloudBucket = mountBlaxelCloudBucket;
+exports.unmountBlaxelFuseMount = unmountBlaxelFuseMount;
+exports.mountBlaxelDrive = mountBlaxelDrive;
+exports.unmountBlaxelDrive = unmountBlaxelDrive;
+exports.buildBlaxelCloudBucketMountConfig = buildBlaxelCloudBucketMountConfig;
+const sandbox_1 = require("@openai/agents-core/sandbox");
+const node_crypto_1 = require("node:crypto");
+const inContainerMounts_1 = require("../shared/inContainerMounts.js");
+const shared_1 = require("../shared/index.js");
+const GCSFUSE_VERSION = '3.4.4';
+const GCSFUSE_AMD64_DEB_SHA256 = '406945ecc736e8cf0eee92a617fd4a038d138c9c31e48980b99862a5f1f55bb5';
+const GCSFUSE_ARM64_DEB_SHA256 = '8587fe2ee274075d8ec5a363e32761bc523a72c531922a69dd35035a371fdf3a';
+class BlaxelCloudBucketMountStrategy {
+    type = 'blaxel_cloud_bucket';
+}
+exports.BlaxelCloudBucketMountStrategy = BlaxelCloudBucketMountStrategy;
+class BlaxelDriveMountStrategy {
+    type = 'blaxel_drive';
+}
+exports.BlaxelDriveMountStrategy = BlaxelDriveMountStrategy;
+class BlaxelDriveMount {
+    type = 'mount';
+    driveName;
+    driveMountPath;
+    drivePath;
+    driveReadOnly;
+    mountStrategy;
+    source;
+    mountPath;
+    readOnly;
+    provider;
+    config;
+    description;
+    ephemeral;
+    group;
+    permissions;
+    constructor(init) {
+        this.driveName = init.driveName;
+        this.driveMountPath = init.driveMountPath;
+        this.drivePath = init.drivePath ?? '/';
+        this.driveReadOnly = init.driveReadOnly ?? init.readOnly ?? false;
+        this.mountStrategy = init.mountStrategy ?? new BlaxelDriveMountStrategy();
+        this.source = init.source;
+        this.mountPath = init.mountPath ?? init.driveMountPath;
+        this.readOnly = this.driveReadOnly;
+        this.provider = init.provider;
+        this.config = init.config;
+        this.description = init.description;
+        this.ephemeral = init.ephemeral;
+        this.group = init.group;
+        this.permissions = init.permissions;
+    }
+}
+exports.BlaxelDriveMount = BlaxelDriveMount;
+function isBlaxelCloudBucketMountEntry(entry) {
+    return (isBlaxelBucketMount(entry) &&
+        entry.mountStrategy?.type === 'blaxel_cloud_bucket');
+}
+function isBlaxelDriveMountEntry(entry) {
+    const value = entry;
+    return ((value.type === 'mount' || value.type === 'blaxel_drive_mount') &&
+        value.mountStrategy?.type === 'blaxel_drive');
+}
+async function mountBlaxelCloudBucket(args) {
+    if (!isBlaxelCloudBucketMountEntry(args.entry)) {
+        throw new sandbox_1.SandboxUnsupportedFeatureError('BlaxelSandboxClient only supports BlaxelCloudBucketMountStrategy cloud bucket mount entries.', {
+            provider: 'blaxel',
+            feature: 'entry.mountStrategy',
+            mountType: args.entry.type,
+            strategyType: mountStrategyType(args.entry),
+        });
+    }
+    const config = buildBlaxelCloudBucketMountConfig(args.entry, args.mountPath, args.artifactScope);
+    try {
+        await materializeBlaxelCloudBucketSecrets(config, args.writeSecretFile);
+        if (config.provider === 'gcs') {
+            await runBlaxelMountScript(args.runCommand, buildGcsFuseMountScript(config));
+            return;
+        }
+        await runBlaxelMountScript(args.runCommand, buildS3FuseMountScript(config));
+    }
+    catch (error) {
+        await cleanupBlaxelCloudBucketSecrets(config, args.runCommand);
+        throw error;
+    }
+}
+async function unmountBlaxelFuseMount(args) {
+    const { pidPath: tokenPidPath, socketPath: tokenSocketPath, serverPath: tokenServerPath, payloadPath: tokenPayloadPath, } = gcsAccessTokenArtifactPaths(args.mountPath, args.artifactScope);
+    const tokenServerCleanup = [
+        (0, inContainerMounts_1.safePidFileKillFunctionCommand)(),
+        `if [ -e ${(0, shared_1.shellQuote)(tokenPidPath)} ]; then ${(0, inContainerMounts_1.safeKillPidFileCommand)({
+            pidFile: (0, shared_1.shellQuote)(tokenPidPath),
+            expectedCmdlineFragments: [tokenServerPath, tokenSocketPath],
+        })}; rm -f -- ${[
+            tokenPidPath,
+            tokenSocketPath,
+            tokenServerPath,
+            tokenPayloadPath,
+        ]
+            .map(shared_1.shellQuote)
+            .join(' ')}; fi`,
+    ].join('; ');
+    const result = await args.runCommand(`${[
+        `fusermount -u ${(0, shared_1.shellQuote)(args.mountPath)} >/dev/null 2>&1`,
+        `fusermount3 -u ${(0, shared_1.shellQuote)(args.mountPath)} >/dev/null 2>&1`,
+        `umount ${(0, shared_1.shellQuote)(args.mountPath)} >/dev/null 2>&1`,
+        `umount -l ${(0, shared_1.shellQuote)(args.mountPath)} >/dev/null 2>&1`,
+    ].join(' || ')}; status=$?; ${tokenServerCleanup}; exit $status`, { timeoutMs: 30_000 });
+    if (result.status !== 0) {
+        throw new sandbox_1.SandboxMountError('Blaxel cloud bucket unmount failed.', {
+            provider: 'blaxel',
+            status: result.status,
+            stderr: result.stderr,
+            stdout: result.stdout,
+        });
+    }
+}
+async function mountBlaxelDrive(args) {
+    if (!isBlaxelDriveMountEntry(args.entry)) {
+        throw new sandbox_1.SandboxUnsupportedFeatureError('BlaxelDriveMountStrategy requires a BlaxelDriveMount entry.', {
+            provider: 'blaxel',
+            feature: 'entry.mountStrategy',
+            mountType: args.entry.type,
+            strategyType: mountStrategyType(args.entry),
+        });
+    }
+    if (!args.drives?.mount) {
+        throw new sandbox_1.SandboxMountError('Blaxel drive mounts require the sandbox drives API.', {
+            provider: 'blaxel',
+            mountType: args.entry.type,
+        });
+    }
+    const config = buildBlaxelDriveMountConfig(args.entry, args.mountPath);
+    await args.drives.mount(config.driveName, config.mountPath, config.drivePath, config.readOnly);
+    return config;
+}
+async function unmountBlaxelDrive(args) {
+    if (args.drives?.unmount) {
+        await args.drives.unmount(args.mountPath);
+    }
+}
+function buildBlaxelCloudBucketMountConfig(entry, mountPath, artifactScope) {
+    if (entry.type === 's3_mount') {
+        const accessKeyId = (0, shared_1.readOptionalString)(entry, 'accessKeyId');
+        const secretAccessKey = (0, shared_1.readOptionalString)(entry, 'secretAccessKey');
+        validateCredentialPair({
+            accessKeyId,
+            secretAccessKey,
+            mountType: entry.type,
+        });
+        return {
+            provider: 's3',
+            bucket: entry.bucket,
+            mountPath,
+            artifactScope,
+            readOnly: entry.readOnly ?? true,
+            accessKeyId,
+            secretAccessKey,
+            sessionToken: (0, shared_1.readOptionalString)(entry, 'sessionToken'),
+            region: entry.region,
+            endpointUrl: entry.endpointUrl,
+            prefix: entry.prefix,
+        };
+    }
+    if (entry.type === 'r2_mount') {
+        validateCredentialPair({
+            accessKeyId: (0, shared_1.readOptionalString)(entry, 'accessKeyId'),
+            secretAccessKey: (0, shared_1.readOptionalString)(entry, 'secretAccessKey'),
+            mountType: entry.type,
+        });
+        const customDomain = (0, shared_1.readOptionalString)(entry, 'customDomain');
+        if (!customDomain && !entry.accountId) {
+            throw new sandbox_1.SandboxMountError('Blaxel R2 bucket mounts require accountId or customDomain.', {
+                provider: 'blaxel',
+                mountType: entry.type,
+            });
+        }
+        return {
+            provider: 'r2',
+            bucket: entry.bucket,
+            mountPath,
+            artifactScope,
+            readOnly: entry.readOnly ?? true,
+            accessKeyId: (0, shared_1.readOptionalString)(entry, 'accessKeyId'),
+            secretAccessKey: (0, shared_1.readOptionalString)(entry, 'secretAccessKey'),
+            endpointUrl: customDomain ?? `https://${entry.accountId}.r2.cloudflarestorage.com`,
+            prefix: entry.prefix,
+        };
+    }
+    const accessId = (0, shared_1.readOptionalString)(entry, 'accessId');
+    const secretAccessKey = (0, shared_1.readOptionalString)(entry, 'secretAccessKey');
+    validateCredentialPair({
+        accessKeyId: accessId,
+        secretAccessKey,
+        mountType: entry.type,
+    });
+    if (accessId && secretAccessKey) {
+        return {
+            provider: 's3',
+            bucket: entry.bucket,
+            mountPath,
+            artifactScope,
+            readOnly: entry.readOnly ?? true,
+            accessKeyId: accessId,
+            secretAccessKey,
+            region: entry.region,
+            endpointUrl: entry.endpointUrl ?? 'https://storage.googleapis.com',
+            prefix: entry.prefix,
+        };
+    }
+    return {
+        provider: 'gcs',
+        bucket: entry.bucket,
+        mountPath,
+        artifactScope,
+        readOnly: entry.readOnly ?? true,
+        serviceAccountCredentials: (0, shared_1.readOptionalString)(entry, 'serviceAccountCredentials'),
+        serviceAccountFile: (0, shared_1.readOptionalString)(entry, 'serviceAccountFile'),
+        accessToken: (0, shared_1.readOptionalString)(entry, 'accessToken'),
+        prefix: entry.prefix,
+    };
+}
+function buildBlaxelDriveMountConfig(entry, mountPath) {
+    return {
+        driveName: entry.driveName,
+        mountPath,
+        drivePath: entry.drivePath ?? '/',
+        readOnly: entry.driveReadOnly ?? entry.readOnly ?? false,
+    };
+}
+function buildS3FuseMountScript(config) {
+    const credentialPath = s3fsCredentialPath(config.mountPath, config.artifactScope);
+    const credentials = config.accessKeyId && config.secretAccessKey
+        ? `${config.accessKeyId}:${config.secretAccessKey}${config.sessionToken ? `:${config.sessionToken}` : ''}`
+        : undefined;
+    const bucket = config.prefix
+        ? `${config.bucket}:/${config.prefix.replace(/^\/+|\/+$/gu, '')}`
+        : config.bucket;
+    const options = [
+        'allow_other',
+        'nonempty',
+        credentials ? `passwd_file=${credentialPath}` : 'public_bucket=1',
+        ...(config.endpointUrl ? [`url=${config.endpointUrl}`] : []),
+        ...(!config.endpointUrl && config.region
+            ? [
+                `url=https://s3.${config.region}.amazonaws.com`,
+                `endpoint=${config.region}`,
+            ]
+            : []),
+        ...(config.provider === 'r2' ? ['sigv4'] : []),
+        ...(config.readOnly ? ['ro'] : []),
+    ];
+    const command = [
+        ensureBlaxelToolCommand('s3fs'),
+        `mkdir -p -- ${(0, shared_1.shellQuote)(config.mountPath)}`,
+        ...(credentials ? [`chmod 600 ${(0, shared_1.shellQuote)(credentialPath)}`] : []),
+        [
+            's3fs',
+            (0, shared_1.shellQuote)(bucket),
+            (0, shared_1.shellQuote)(config.mountPath),
+            '-o',
+            (0, shared_1.shellQuote)(options.join(',')),
+        ].join(' '),
+    ].join(' && ');
+    if (!credentials) {
+        return command;
+    }
+    return `${command}; status=$?; rm -f -- ${(0, shared_1.shellQuote)(credentialPath)}; exit $status`;
+}
+function buildGcsFuseMountScript(config) {
+    const keyPath = gcsCredentialPath(config.mountPath, config.artifactScope);
+    const { serverPath: tokenServerPath, socketPath: tokenSocketPath, pidPath: tokenPidPath, payloadPath: tokenPayloadPath, } = gcsAccessTokenArtifactPaths(config.mountPath, config.artifactScope);
+    const tokenUrl = `unix://${tokenSocketPath}`;
+    const hasAuth = hasGcsAuth(config);
+    const usesAccessToken = usesGcsAccessTokenSecret(config);
+    const options = [
+        ...(config.serviceAccountCredentials
+            ? [`--key-file=${keyPath}`]
+            : config.serviceAccountFile
+                ? [`--key-file=${config.serviceAccountFile}`]
+                : usesAccessToken
+                    ? [`--token-url=${tokenUrl}`]
+                    : ['--anonymous-access']),
+        ...(config.readOnly ? ['-o', 'ro'] : []),
+        ...(config.prefix
+            ? [`--only-dir=${config.prefix.replace(/^\/+|\/+$/gu, '')}`]
+            : []),
+    ];
+    const command = [
+        ensureBlaxelToolCommand('gcsfuse'),
+        `mkdir -p -- ${(0, shared_1.shellQuote)(config.mountPath)}`,
+        ...(config.serviceAccountCredentials
+            ? [`chmod 600 ${(0, shared_1.shellQuote)(keyPath)}`]
+            : []),
+        ...(usesAccessToken
+            ? buildGcsAccessTokenServerCommands({
+                serverPath: tokenServerPath,
+                socketPath: tokenSocketPath,
+                pidPath: tokenPidPath,
+                payloadPath: tokenPayloadPath,
+            })
+            : []),
+        [
+            'gcsfuse',
+            ...options.map(shared_1.shellQuote),
+            (0, shared_1.shellQuote)(config.bucket),
+            (0, shared_1.shellQuote)(config.mountPath),
+        ].join(' '),
+    ].join(' && ');
+    if (!hasAuth || (!config.serviceAccountCredentials && !usesAccessToken)) {
+        return command;
+    }
+    const cleanupCommands = [
+        ...(config.serviceAccountCredentials
+            ? [`rm -f -- ${(0, shared_1.shellQuote)(keyPath)}`]
+            : []),
+        ...(usesAccessToken
+            ? [
+                (0, inContainerMounts_1.safePidFileKillFunctionCommand)(),
+                `if [ "$status" -ne 0 ]; then ${(0, inContainerMounts_1.safeKillPidFileCommand)({
+                    pidFile: (0, shared_1.shellQuote)(tokenPidPath),
+                    expectedCmdlineFragments: [tokenServerPath, tokenSocketPath],
+                })}; rm -f -- ${[tokenPidPath, tokenSocketPath, tokenServerPath, tokenPayloadPath].map(shared_1.shellQuote).join(' ')}; fi`,
+            ]
+            : []),
+    ];
+    return `${command}; status=$?; ${cleanupCommands.join('; ')}; exit $status`;
+}
+function buildGcsAccessTokenServerCommands(args) {
+    const serverScript = String.raw `import http.server
+import os
+import socketserver
+import sys
+
+socket_path = sys.argv[1]
+token_payload_path = sys.argv[2]
+
+with open(token_payload_path, "rb") as handle:
+    token_payload = handle.read().rstrip(b"\n")
+
+try:
+    os.unlink(socket_path)
+except FileNotFoundError:
+    pass
+
+class Handler(http.server.BaseHTTPRequestHandler):
+    def do_GET(self):
+        self.send_response(200)
+        self.send_header("Content-Type", "application/json")
+        self.send_header("Content-Length", str(len(token_payload)))
+        self.end_headers()
+        self.wfile.write(token_payload)
+
+    def log_message(self, format, *args):
+        pass
+
+with socketserver.UnixStreamServer(socket_path, Handler) as server:
+    os.chmod(socket_path, 0o600)
+    server.serve_forever()
+`;
+    const serverSetupAndStart = [
+        `{ cat > ${(0, shared_1.shellQuote)(args.serverPath)} <<'OPENAI_AGENTS_GCS_TOKEN_SERVER'\n${serverScript}OPENAI_AGENTS_GCS_TOKEN_SERVER\n}`,
+        `chmod 600 ${(0, shared_1.shellQuote)(args.payloadPath)}`,
+        `python3 ${(0, shared_1.shellQuote)(args.serverPath)} ${(0, shared_1.shellQuote)(args.socketPath)} ${(0, shared_1.shellQuote)(args.payloadPath)} >/dev/null 2>&1 & printf %s "$!" > ${(0, shared_1.shellQuote)(args.pidPath)}`,
+    ].join(' && ');
+    return [
+        ensurePythonCommand(),
+        serverSetupAndStart,
+        `for i in 1 2 3 4 5 6 7 8 9 10; do [ -S ${(0, shared_1.shellQuote)(args.socketPath)} ] && break; sleep 0.1; done`,
+        `[ -S ${(0, shared_1.shellQuote)(args.socketPath)} ]`,
+        `rm -f -- ${(0, shared_1.shellQuote)(args.payloadPath)}`,
+    ];
+}
+async function materializeBlaxelCloudBucketSecrets(config, writeSecretFile) {
+    if (config.provider !== 'gcs') {
+        if (config.accessKeyId && config.secretAccessKey) {
+            await writeSecretFile(s3fsCredentialPath(config.mountPath, config.artifactScope), `${config.accessKeyId}:${config.secretAccessKey}${config.sessionToken ? `:${config.sessionToken}` : ''}`);
+        }
+        return;
+    }
+    if (config.serviceAccountCredentials) {
+        await writeSecretFile(gcsCredentialPath(config.mountPath, config.artifactScope), config.serviceAccountCredentials);
+    }
+    if (usesGcsAccessTokenSecret(config)) {
+        await writeSecretFile(gcsAccessTokenArtifactPaths(config.mountPath, config.artifactScope)
+            .payloadPath, JSON.stringify({
+            access_token: config.accessToken,
+            token_type: 'Bearer',
+        }));
+    }
+}
+async function cleanupBlaxelCloudBucketSecrets(config, runCommand) {
+    const command = buildBlaxelCloudBucketSecretCleanupCommand(config);
+    if (!command) {
+        return;
+    }
+    await runCommand(command, { timeoutMs: 30_000 }).catch(() => { });
+}
+function buildBlaxelCloudBucketSecretCleanupCommand(config) {
+    if (config.provider !== 'gcs') {
+        if (!config.accessKeyId || !config.secretAccessKey) {
+            return undefined;
+        }
+        return `rm -f -- ${(0, shared_1.shellQuote)(s3fsCredentialPath(config.mountPath, config.artifactScope))}`;
+    }
+    const files = [];
+    const commands = [];
+    if (config.serviceAccountCredentials) {
+        files.push(gcsCredentialPath(config.mountPath, config.artifactScope));
+    }
+    if (usesGcsAccessTokenSecret(config)) {
+        const tokenPaths = gcsAccessTokenArtifactPaths(config.mountPath, config.artifactScope);
+        commands.push((0, inContainerMounts_1.safePidFileKillFunctionCommand)(), `if [ -e ${(0, shared_1.shellQuote)(tokenPaths.pidPath)} ]; then ${(0, inContainerMounts_1.safeKillPidFileCommand)({
+            pidFile: (0, shared_1.shellQuote)(tokenPaths.pidPath),
+            expectedCmdlineFragments: [
+                tokenPaths.serverPath,
+                tokenPaths.socketPath,
+            ],
+        })}; fi`);
+        files.push(tokenPaths.pidPath, tokenPaths.socketPath, tokenPaths.serverPath, tokenPaths.payloadPath);
+    }
+    if (files.length > 0) {
+        commands.push(`rm -f -- ${files.map(shared_1.shellQuote).join(' ')}`);
+    }
+    return commands.length > 0 ? commands.join('; ') : undefined;
+}
+function s3fsCredentialPath(mountPath, artifactScope) {
+    return `/tmp/s3fs-passwd-${safeId(`${artifactScope}:${mountPath}`)}`;
+}
+function gcsCredentialPath(mountPath, artifactScope) {
+    return `/tmp/gcs-creds-${safeId(`${artifactScope}:${mountPath}`)}.json`;
+}
+function gcsAccessTokenArtifactPaths(mountPath, artifactScope) {
+    const prefix = `/tmp/gcs-access-token-${safeId(`${artifactScope}:${mountPath}`)}`;
+    return {
+        serverPath: `${prefix}.py`,
+        socketPath: `${prefix}.sock`,
+        pidPath: `${prefix}.pid`,
+        payloadPath: `${prefix}.json`,
+    };
+}
+function usesGcsAccessTokenSecret(config) {
+    return Boolean(config.provider === 'gcs' &&
+        config.accessToken &&
+        !config.serviceAccountCredentials &&
+        !config.serviceAccountFile);
+}
+function ensurePythonCommand() {
+    return [
+        'command -v python3 >/dev/null 2>&1',
+        'if command -v apk >/dev/null 2>&1; then apk add --no-cache python3; else apt-get update -qq && DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3; fi',
+    ].join(' || ');
+}
+function hasGcsAuth(config) {
+    return Boolean(config.serviceAccountCredentials ||
+        config.serviceAccountFile ||
+        config.accessToken);
+}
+function ensureBlaxelToolCommand(tool) {
+    if (tool === 's3fs') {
+        return [
+            'command -v s3fs >/dev/null 2>&1',
+            'if command -v apk >/dev/null 2>&1; then apk add --no-cache s3fs-fuse; else apt-get update -qq && DEBIAN_FRONTEND=noninteractive apt-get install -y -qq s3fs; fi',
+        ].join(' || ');
+    }
+    return [
+        'command -v gcsfuse >/dev/null 2>&1',
+        buildPinnedGcsFuseInstallCommand(),
+    ].join(' || ');
+}
+function buildPinnedGcsFuseInstallCommand() {
+    const debPath = '/tmp/gcsfuse.deb';
+    const debUrlPrefix = `https://github.com/GoogleCloudPlatform/gcsfuse/releases/download/v${GCSFUSE_VERSION}/gcsfuse_${GCSFUSE_VERSION}_`;
+    const selectArch = [
+        'case "$(uname -m)" in',
+        `x86_64|amd64) GCSFUSE_DEB_ARCH=amd64; GCSFUSE_DEB_SHA256=${(0, shared_1.shellQuote)(GCSFUSE_AMD64_DEB_SHA256)} ;;`,
+        `aarch64|arm64) GCSFUSE_DEB_ARCH=arm64; GCSFUSE_DEB_SHA256=${(0, shared_1.shellQuote)(GCSFUSE_ARM64_DEB_SHA256)} ;;`,
+        '*) printf "Unsupported gcsfuse architecture: %s\\n" "$(uname -m)" >&2; exit 1 ;;',
+        'esac',
+    ].join(' ');
+    const setUrl = `GCSFUSE_DEB_URL=${(0, shared_1.shellQuote)(debUrlPrefix)}$GCSFUSE_DEB_ARCH.deb`;
+    const download = `curl -fsSL "$GCSFUSE_DEB_URL" -o ${(0, shared_1.shellQuote)(debPath)}`;
+    const verify = `printf '%s  %s\\n' "$GCSFUSE_DEB_SHA256" ${(0, shared_1.shellQuote)(debPath)} | sha256sum -c -`;
+    const cleanup = 'rm -f /tmp/gcsfuse.deb /tmp/control.tar* /tmp/data.tar* /tmp/debian-binary';
+    const alpineInstall = [
+        selectArch,
+        setUrl,
+        'apk add --no-cache fuse curl binutils tar ca-certificates',
+        download,
+        verify,
+        `cd /tmp && ar x ${(0, shared_1.shellQuote)(debPath)} && tar -xf data.tar* -C /`,
+        cleanup,
+    ].join(' && ');
+    const debianInstall = [
+        selectArch,
+        setUrl,
+        'apt-get update -qq',
+        'DEBIAN_FRONTEND=noninteractive apt-get install -y -qq curl ca-certificates',
+        download,
+        verify,
+        `DEBIAN_FRONTEND=noninteractive apt-get install -y -qq ${(0, shared_1.shellQuote)(debPath)}`,
+        cleanup,
+    ].join(' && ');
+    return `if command -v apk >/dev/null 2>&1; then ${alpineInstall}; else ${debianInstall}; fi`;
+}
+async function runBlaxelMountScript(runCommand, command) {
+    const result = await runCommand(command, { timeoutMs: 300_000 });
+    if (result.status !== 0) {
+        throw new sandbox_1.SandboxMountError('Blaxel cloud bucket mount failed.', {
+            provider: 'blaxel',
+            status: result.status,
+            stderr: result.stderr,
+            stdout: result.stdout,
+        });
+    }
+    return result;
+}
+function isBlaxelBucketMount(entry) {
+    return (entry.type === 's3_mount' ||
+        entry.type === 'r2_mount' ||
+        entry.type === 'gcs_mount');
+}
+function validateCredentialPair(args) {
+    if (Boolean(args.accessKeyId) !== Boolean(args.secretAccessKey)) {
+        throw new sandbox_1.SandboxMountError('Blaxel cloud bucket mounts require both accessKeyId and secretAccessKey when either is provided.', {
+            provider: 'blaxel',
+            mountType: args.mountType,
+        });
+    }
+}
+function mountStrategyType(entry) {
+    return entry.mountStrategy?.type;
+}
+function safeId(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value).digest('hex');
+}
+//# sourceMappingURL=mounts.js.map

package/dist/sandbox/blaxel/mounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mounts.js","sourceRoot":"","sources":["../../../src/sandbox/blaxel/mounts.ts"],"names":[],"mappings":";;;AAgIA,sEAOC;AAED,0DAWC;AAED,wDAsCC;AAED,wDA0CC;AAED,4CAkCC;AAED,gDAOC;AAED,8EA8FC;AArXD,yDAQqC;AACrC,6CAAyC;AACzC,sEAKqC;AACrC,+CAA2D;AAE3D,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC,MAAM,wBAAwB,GAC5B,kEAAkE,CAAC;AACrE,MAAM,wBAAwB,GAC5B,kEAAkE,CAAC;AAqBrE,MAAa,8BAA8B;IAEhC,IAAI,GAAG,qBAAqB,CAAC;CACvC;AAHD,wEAGC;AA+BD,MAAa,wBAAwB;IAE1B,IAAI,GAAG,cAAc,CAAC;CAChC;AAHD,4DAGC;AAED,MAAa,gBAAgB;IAElB,IAAI,GAAG,OAAO,CAAC;IACf,SAAS,CAAS;IAClB,cAAc,CAAU;IACxB,SAAS,CAAS;IAClB,aAAa,CAAU;IACvB,aAAa,CAAsD;IACnE,MAAM,CAAU;IAChB,SAAS,CAAU;IACnB,QAAQ,CAAU;IAClB,QAAQ,CAAqB;IAC7B,MAAM,CAA2B;IACjC,WAAW,CAAU;IACrB,SAAS,CAAW;IACpB,KAAK,CAAkB;IACvB,WAAW,CAAwB;IAE5C,YAAY,IAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;CACF;AAlCD,4CAkCC;AAYD,SAAgB,6BAA6B,CAC3C,KAAY;IAEZ,OAAO,CACL,mBAAmB,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,aAAa,EAAE,IAAI,KAAK,qBAAqB,CACpD,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CACrC,KAAY;IAEZ,MAAM,KAAK,GAAG,KAGb,CAAC;IACF,OAAO,CACL,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC;QAC/D,KAAK,CAAC,aAAa,EAAE,IAAI,KAAK,cAAc,CAC7C,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,IAM5C;IACC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,wCAA8B,CACtC,8FAA8F,EAC9F;YACE,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,qBAAqB;YAC9B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC1B,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;SAC5C,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,iCAAiC,CAC9C,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,aAAa,CACnB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,mCAAmC,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,oBAAoB,CACxB,IAAI,CAAC,UAAU,EACf,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,IAI5C;IACC,MAAM,EACJ,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,eAAe,EAC3B,UAAU,EAAE,eAAe,EAC3B,WAAW,EAAE,gBAAgB,GAC9B,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACpE,MAAM,kBAAkB,GAAG;QACzB,IAAA,kDAA8B,GAAE;QAChC,WAAW,IAAA,mBAAU,EAAC,YAAY,CAAC,YAAY,IAAA,0CAAsB,EAAC;YACpE,OAAO,EAAE,IAAA,mBAAU,EAAC,YAAY,CAAC;YACjC,wBAAwB,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;SAC7D,CAAC,cAAc;YACd,YAAY;YACZ,eAAe;YACf,eAAe;YACf,gBAAgB;SACjB;aACE,GAAG,CAAC,mBAAU,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,MAAM;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,GAAG;QACD,iBAAiB,IAAA,mBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;QAC7D,kBAAkB,IAAA,mBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;QAC9D,UAAU,IAAA,mBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;QACtD,aAAa,IAAA,mBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB;KAC1D,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,gBAAgB,EAChE,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,2BAAiB,CAAC,qCAAqC,EAAE;YACjE,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,wCAA8B,CACtC,6DAA6D,EAC7D;YACE,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,qBAAqB;YAC9B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC1B,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;SAC5C,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,2BAAiB,CACzB,qDAAqD,EACrD;YACE,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC3B,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACrB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,CAChB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,IAGxC;IACC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAmC,EACnC,SAAiB,EACjB,aAAqB;IAErB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAA,2BAAkB,EAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,IAAA,2BAAkB,EAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACrE,sBAAsB,CAAC;YACrB,WAAW;YACX,eAAe;YACf,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,aAAa;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW;YACX,eAAe;YACf,YAAY,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,cAAc,CAAC;YACvD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,sBAAsB,CAAC;YACrB,WAAW,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,aAAa,CAAC;YACrD,eAAe,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,iBAAiB,CAAC;YAC7D,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,2BAAkB,EAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,2BAAiB,CACzB,4DAA4D,EAC5D;gBACE,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,KAAK,CAAC,IAAI;aACtB,CACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,aAAa;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,aAAa,CAAC;YACrD,eAAe,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,iBAAiB,CAAC;YAC7D,WAAW,EACT,YAAY,IAAI,WAAW,KAAK,CAAC,SAAS,2BAA2B;YACvE,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,2BAAkB,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAA,2BAAkB,EAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACrE,sBAAsB,CAAC;QACrB,WAAW,EAAE,QAAQ;QACrB,eAAe;QACf,SAAS,EAAE,KAAK,CAAC,IAAI;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,IAAI,eAAe,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,aAAa;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,QAAQ;YACrB,eAAe;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gCAAgC;YAClE,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,aAAa;QACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,yBAAyB,EAAE,IAAA,2BAAkB,EAC3C,KAAK,EACL,2BAA2B,CAC5B;QACD,kBAAkB,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,oBAAoB,CAAC;QACnE,WAAW,EAAE,IAAA,2BAAkB,EAAC,KAAK,EAAE,aAAa,CAAC;QACrD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAuB,EACvB,SAAiB;IAEjB,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,GAAG;QACjC,QAAQ,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAoC;IAClE,MAAM,cAAc,GAAG,kBAAkB,CACvC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,aAAa,CACrB,CAAC;IACF,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe;QAC1C,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe,GAC7C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EACpD,EAAE;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;QAC1B,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE;QACjE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAClB,MAAM,OAAO,GAAG;QACd,aAAa;QACb,UAAU;QACV,WAAW,CAAC,CAAC,CAAC,eAAe,cAAc,EAAE,CAAC,CAAC,CAAC,iBAAiB;QACjE,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM;YACtC,CAAC,CAAC;gBACE,kBAAkB,MAAM,CAAC,MAAM,gBAAgB;gBAC/C,YAAY,MAAM,CAAC,MAAM,EAAE;aAC5B;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,uBAAuB,CAAC,MAAM,CAAC;QAC/B,eAAe,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,IAAA,mBAAU,EAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE;YACE,MAAM;YACN,IAAA,mBAAU,EAAC,MAAM,CAAC;YAClB,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,CAAC;YAC5B,IAAI;YACJ,IAAA,mBAAU,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,OAAO,yBAAyB,IAAA,mBAAU,EAAC,cAAc,CAAC,gBAAgB,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAoC;IACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,EACJ,UAAU,EAAE,eAAe,EAC3B,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,gBAAgB,GAC9B,GAAG,2BAA2B,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,eAAe,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,MAAM,CAAC,yBAAyB;YAClC,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,kBAAkB;gBACzB,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC7C,CAAC,CAAC,eAAe;oBACf,CAAC,CAAC,CAAC,eAAe,QAAQ,EAAE,CAAC;oBAC7B,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,OAAO,GAAG;QACd,uBAAuB,CAAC,SAAS,CAAC;QAClC,eAAe,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC7C,GAAG,CAAC,MAAM,CAAC,yBAAyB;YAClC,CAAC,CAAC,CAAC,aAAa,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACtC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC,iCAAiC,CAAC;gBAChC,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;gBAC3B,OAAO,EAAE,YAAY;gBACrB,WAAW,EAAE,gBAAgB;aAC9B,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP;YACE,SAAS;YACT,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAU,CAAC;YAC1B,IAAA,mBAAU,EAAC,MAAM,CAAC,MAAM,CAAC;YACzB,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,CAAC;SAC7B,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,eAAe,GAAG;QACtB,GAAG,CAAC,MAAM,CAAC,yBAAyB;YAClC,CAAC,CAAC,CAAC,YAAY,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,IAAA,kDAA8B,GAAE;gBAChC,gCAAgC,IAAA,0CAAsB,EAAC;oBACrD,OAAO,EAAE,IAAA,mBAAU,EAAC,YAAY,CAAC;oBACjC,wBAAwB,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;iBAC7D,CAAC,cAAc,CAAC,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,mBAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;aACnH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,GAAG,OAAO,gBAAgB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAC9E,CAAC;AAED,SAAS,iCAAiC,CAAC,IAK1C;IACC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BhC,CAAC;IACA,MAAM,mBAAmB,GAAG;QAC1B,WAAW,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,wCAAwC,YAAY,mCAAmC;QAC7H,aAAa,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;QAC3C,WAAW,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,uCAAuC,IAAA,mBAAU,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE;KACvK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,OAAO;QACL,mBAAmB,EAAE;QACrB,mBAAmB;QACnB,0CAA0C,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,8BAA8B;QACnG,QAAQ,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,IAAI;QACvC,YAAY,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,MAAoC,EACpC,eAAwC;IAExC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,eAAe,CACnB,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,EAC1D,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe,GAC7C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EACpD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACrC,MAAM,eAAe,CACnB,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,EACzD,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,eAAe,CACnB,2BAA2B,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;aAChE,WAAW,EACd,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,UAAU,EAAE,QAAQ;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,MAAoC,EACpC,UAA8B;IAE9B,MAAM,OAAO,GAAG,0CAA0C,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,0CAA0C,CACjD,MAAoC;IAEpC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,YAAY,IAAA,mBAAU,EAC3B,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAC3D,EAAE,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,2BAA2B,CAC5C,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,aAAa,CACrB,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,IAAA,kDAA8B,GAAE,EAChC,WAAW,IAAA,mBAAU,EAAC,UAAU,CAAC,OAAO,CAAC,YAAY,IAAA,0CAAsB,EACzE;YACE,OAAO,EAAE,IAAA,mBAAU,EAAC,UAAU,CAAC,OAAO,CAAC;YACvC,wBAAwB,EAAE;gBACxB,UAAU,CAAC,UAAU;gBACrB,UAAU,CAAC,UAAU;aACtB;SACF,CACF,MAAM,CACR,CAAC;QACF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,WAAW,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,GAAG,CAAC,mBAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,aAAqB;IAClE,OAAO,oBAAoB,MAAM,CAAC,GAAG,aAAa,IAAI,SAAS,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,aAAqB;IACjE,OAAO,kBAAkB,MAAM,CAAC,GAAG,aAAa,IAAI,SAAS,EAAE,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAiB,EACjB,aAAqB;IAOrB,MAAM,MAAM,GAAG,yBAAyB,MAAM,CAC5C,GAAG,aAAa,IAAI,SAAS,EAAE,CAChC,EAAE,CAAC;IACJ,OAAO;QACL,UAAU,EAAE,GAAG,MAAM,KAAK;QAC1B,UAAU,EAAE,GAAG,MAAM,OAAO;QAC5B,OAAO,EAAE,GAAG,MAAM,MAAM;QACxB,WAAW,EAAE,GAAG,MAAM,OAAO;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAoC;IAEpC,OAAO,OAAO,CACZ,MAAM,CAAC,QAAQ,KAAK,KAAK;QACzB,MAAM,CAAC,WAAW;QAClB,CAAC,MAAM,CAAC,yBAAyB;QACjC,CAAC,MAAM,CAAC,kBAAkB,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;QACL,oCAAoC;QACpC,kKAAkK;KACnK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,MAAoC;IACtD,OAAO,OAAO,CACZ,MAAM,CAAC,yBAAyB;QAChC,MAAM,CAAC,kBAAkB;QACzB,MAAM,CAAC,WAAW,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAwB;IACvD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,iCAAiC;YACjC,iKAAiK;SAClK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,OAAO;QACL,oCAAoC;QACpC,gCAAgC,EAAE;KACnC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,gCAAgC;IACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC;IACnC,MAAM,YAAY,GAAG,qEAAqE,eAAe,YAAY,eAAe,GAAG,CAAC;IACxI,MAAM,UAAU,GAAG;QACjB,uBAAuB;QACvB,4DAA4D,IAAA,mBAAU,EAAC,wBAAwB,CAAC,KAAK;QACrG,6DAA6D,IAAA,mBAAU,EAAC,wBAAwB,CAAC,KAAK;QACtG,kFAAkF;QAClF,MAAM;KACP,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,mBAAmB,IAAA,mBAAU,EAAC,YAAY,CAAC,uBAAuB,CAAC;IAClF,MAAM,QAAQ,GAAG,oCAAoC,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,4CAA4C,IAAA,mBAAU,EAAC,OAAO,CAAC,mBAAmB,CAAC;IAClG,MAAM,OAAO,GACX,4EAA4E,CAAC;IAC/E,MAAM,aAAa,GAAG;QACpB,UAAU;QACV,MAAM;QACN,2DAA2D;QAC3D,QAAQ;QACR,MAAM;QACN,mBAAmB,IAAA,mBAAU,EAAC,OAAO,CAAC,4BAA4B;QAClE,OAAO;KACR,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,MAAM,aAAa,GAAG;QACpB,UAAU;QACV,MAAM;QACN,oBAAoB;QACpB,4EAA4E;QAC5E,QAAQ;QACR,MAAM;QACN,yDAAyD,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE;QAC9E,OAAO;KACR,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,OAAO,2CAA2C,aAAa,UAAU,aAAa,MAAM,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,UAA8B,EAC9B,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,2BAAiB,CAAC,mCAAmC,EAAE;YAC/D,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAY;IAEZ,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,WAAW,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAI/B;IACC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,2BAAiB,CACzB,kGAAkG,EAClG;YACE,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAY;IACrC,OAAQ,KAAgD,CAAC,aAAa,EAAE,IAAI,CAAC;AAC/E,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}