@opengeni/contracts 3.1.0-canary.1 → 3.1.2

package/dist/{chunk-WYBDERIY.js → chunk-LZ2LAHIX.js}

@@ -1,49 +1,55 @@
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
 // src/connector-destinations.ts
 import { z } from "zod";
-var ConnectorDocumentDestinationAuthority = z.enum([
-  "organization",
-  "workspace",
-  "personal"
-]);
-var ConnectorDocumentDestinationSelection = z.object({
-  authorityKind: ConnectorDocumentDestinationAuthority,
-  collectionId: z.string().uuid().nullable().default(null)
-});
-var ConnectorDocumentDestination = z.object({
-  authorityKind: ConnectorDocumentDestinationAuthority,
-  authorityAccountId: z.string().uuid(),
-  authorityWorkspaceId: z.string().uuid().nullable(),
-  authoritySubjectId: z.string().trim().min(1).max(1024).nullable(),
-  collectionId: z.string().uuid().nullable().default(null)
-}).superRefine((destination, context) => {
-  if (destination.authorityKind === "organization") {
-    if (destination.authorityWorkspaceId !== null || destination.authoritySubjectId !== null) {
+var ConnectorDocumentDestinationAuthority = /* @__PURE__ */ defineSchema(
+  () => z.enum(["organization", "workspace", "personal"])
+);
+var ConnectorDocumentDestinationSelection = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    authorityKind: ConnectorDocumentDestinationAuthority,
+    collectionId: z.string().uuid().nullable().default(null)
+  })
+);
+var ConnectorDocumentDestination = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    authorityKind: ConnectorDocumentDestinationAuthority,
+    authorityAccountId: z.string().uuid(),
+    authorityWorkspaceId: z.string().uuid().nullable(),
+    authoritySubjectId: z.string().trim().min(1).max(1024).nullable(),
+    collectionId: z.string().uuid().nullable().default(null)
+  }).superRefine((destination, context) => {
+    if (destination.authorityKind === "organization") {
+      if (destination.authorityWorkspaceId !== null || destination.authoritySubjectId !== null) {
+        context.addIssue({
+          code: "custom",
+          message: "organization connector destinations cannot bind workspace or subject authority"
+        });
+      }
+      return;
+    }
+    if (destination.authorityWorkspaceId === null) {
       context.addIssue({
         code: "custom",
-        message: "organization connector destinations cannot bind workspace or subject authority"
+        message: "workspace and personal connector destinations require workspace authority"
       });
     }
-    return;
-  }
-  if (destination.authorityWorkspaceId === null) {
-    context.addIssue({
-      code: "custom",
-      message: "workspace and personal connector destinations require workspace authority"
-    });
-  }
-  if (destination.authorityKind === "workspace" && destination.authoritySubjectId !== null) {
-    context.addIssue({
-      code: "custom",
-      message: "workspace connector destinations cannot bind subject authority"
-    });
-  }
-  if (destination.authorityKind === "personal" && destination.authoritySubjectId === null) {
-    context.addIssue({
-      code: "custom",
-      message: "personal connector destinations require immutable subject authority"
-    });
-  }
-});
+    if (destination.authorityKind === "workspace" && destination.authoritySubjectId !== null) {
+      context.addIssue({
+        code: "custom",
+        message: "workspace connector destinations cannot bind subject authority"
+      });
+    }
+    if (destination.authorityKind === "personal" && destination.authoritySubjectId === null) {
+      context.addIssue({
+        code: "custom",
+        message: "personal connector destinations require immutable subject authority"
+      });
+    }
+  })
+);
 function bindConnectorDocumentDestination(selection, context) {
   return ConnectorDocumentDestination.parse({
     authorityKind: selection.authorityKind,
@@ -99,4 +105,4 @@ export {
   connectorDestinationDocumentAuthority,
   connectorDocumentDestinationCollectionId
 };
-//# sourceMappingURL=chunk-WYBDERIY.js.map
+//# sourceMappingURL=chunk-LZ2LAHIX.js.map

package/dist/chunk-LZ2LAHIX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connector-destinations.ts"],"sourcesContent":["import { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nexport const ConnectorDocumentDestinationAuthority = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"organization\", \"workspace\", \"personal\"]),\n);\nexport type ConnectorDocumentDestinationAuthority = z.infer<\n  typeof ConnectorDocumentDestinationAuthority\n>;\n\nexport const ConnectorDocumentDestinationSelection = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    authorityKind: ConnectorDocumentDestinationAuthority,\n    collectionId: z.string().uuid().nullable().default(null),\n  }),\n);\nexport type ConnectorDocumentDestinationSelection = z.infer<\n  typeof ConnectorDocumentDestinationSelection\n>;\n\nexport const ConnectorDocumentDestination = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      authorityKind: ConnectorDocumentDestinationAuthority,\n      authorityAccountId: z.string().uuid(),\n      authorityWorkspaceId: z.string().uuid().nullable(),\n      authoritySubjectId: z.string().trim().min(1).max(1024).nullable(),\n      collectionId: z.string().uuid().nullable().default(null),\n    })\n    .superRefine((destination, context) => {\n      if (destination.authorityKind === \"organization\") {\n        if (destination.authorityWorkspaceId !== null || destination.authoritySubjectId !== null) {\n          context.addIssue({\n            code: \"custom\",\n            message:\n              \"organization connector destinations cannot bind workspace or subject authority\",\n          });\n        }\n        return;\n      }\n      if (destination.authorityWorkspaceId === null) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"workspace and personal connector destinations require workspace authority\",\n        });\n      }\n      if (destination.authorityKind === \"workspace\" && destination.authoritySubjectId !== null) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"workspace connector destinations cannot bind subject authority\",\n        });\n      }\n      if (destination.authorityKind === \"personal\" && destination.authoritySubjectId === null) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"personal connector destinations require immutable subject authority\",\n        });\n      }\n    }),\n);\nexport type ConnectorDocumentDestination = z.infer<typeof ConnectorDocumentDestination>;\n\nexport function bindConnectorDocumentDestination(\n  selection: ConnectorDocumentDestinationSelection,\n  context: { accountId: string; workspaceId: string; initiatingSubjectId: string },\n): ConnectorDocumentDestination {\n  return ConnectorDocumentDestination.parse({\n    authorityKind: selection.authorityKind,\n    authorityAccountId: context.accountId,\n    authorityWorkspaceId: selection.authorityKind === \"organization\" ? null : context.workspaceId,\n    authoritySubjectId: selection.authorityKind === \"personal\" ? context.initiatingSubjectId : null,\n    collectionId: selection.collectionId,\n  });\n}\n\nexport function legacyWorkspaceConnectorDocumentDestination(context: {\n  accountId: string;\n  workspaceId: string;\n}): ConnectorDocumentDestination {\n  return ConnectorDocumentDestination.parse({\n    authorityKind: \"workspace\",\n    authorityAccountId: context.accountId,\n    authorityWorkspaceId: context.workspaceId,\n    authoritySubjectId: null,\n    collectionId: null,\n  });\n}\n\nexport function resolveConnectorDocumentDestination(\n  value: unknown,\n  context: {\n    accountId: string;\n    workspaceId: string;\n    connectionSubjectId?: string | null | undefined;\n  },\n): ConnectorDocumentDestination {\n  if (value === undefined || value === null) {\n    return legacyWorkspaceConnectorDocumentDestination(context);\n  }\n  const destination = ConnectorDocumentDestination.parse(value);\n  if (destination.authorityAccountId !== context.accountId) {\n    throw new Error(\"connector destination organization authority mismatch\");\n  }\n  if (\n    destination.authorityKind !== \"organization\" &&\n    destination.authorityWorkspaceId !== context.workspaceId\n  ) {\n    throw new Error(\"connector destination workspace authority mismatch\");\n  }\n  if (\n    destination.authorityKind === \"personal\" &&\n    destination.authoritySubjectId !== context.connectionSubjectId\n  ) {\n    throw new Error(\"connector destination personal authority mismatch\");\n  }\n  return destination;\n}\n\nexport function connectorDestinationDocumentAuthority(destination: ConnectorDocumentDestination): {\n  authorityKind: ConnectorDocumentDestinationAuthority;\n  authorityWorkspaceId: string | null;\n  authoritySubjectId: string | null;\n} {\n  return {\n    authorityKind: destination.authorityKind,\n    authorityWorkspaceId: destination.authorityWorkspaceId,\n    authoritySubjectId: destination.authoritySubjectId,\n  };\n}\n\nexport function connectorDocumentDestinationCollectionId(\n  destination: ConnectorDocumentDestination,\n  defaultCollectionId: string,\n): string {\n  return destination.collectionId ?? z.string().uuid().parse(defaultCollectionId);\n}\n"],"mappings":";;;;;AACA,SAAS,SAAS;AAEX,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,KAAK,CAAC,gBAAgB,aAAa,UAAU,CAAC;AAClD;AAKO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,OAAO;AAAA,IACP,eAAe;AAAA,IACf,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACzD,CAAC;AACH;AAKO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EACG,OAAO;AAAA,IACN,eAAe;AAAA,IACf,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,IACpC,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACjD,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAChE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACzD,CAAC,EACA,YAAY,CAAC,aAAa,YAAY;AACrC,QAAI,YAAY,kBAAkB,gBAAgB;AAChD,UAAI,YAAY,yBAAyB,QAAQ,YAAY,uBAAuB,MAAM;AACxF,gBAAQ,SAAS;AAAA,UACf,MAAM;AAAA,UACN,SACE;AAAA,QACJ,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,QAAI,YAAY,yBAAyB,MAAM;AAC7C,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,YAAY,kBAAkB,eAAe,YAAY,uBAAuB,MAAM;AACxF,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,YAAY,kBAAkB,cAAc,YAAY,uBAAuB,MAAM;AACvF,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAGO,SAAS,iCACd,WACA,SAC8B;AAC9B,SAAO,6BAA6B,MAAM;AAAA,IACxC,eAAe,UAAU;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,sBAAsB,UAAU,kBAAkB,iBAAiB,OAAO,QAAQ;AAAA,IAClF,oBAAoB,UAAU,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,IAC3F,cAAc,UAAU;AAAA,EAC1B,CAAC;AACH;AAEO,SAAS,4CAA4C,SAG3B;AAC/B,SAAO,6BAA6B,MAAM;AAAA,IACxC,eAAe;AAAA,IACf,oBAAoB,QAAQ;AAAA,IAC5B,sBAAsB,QAAQ;AAAA,IAC9B,oBAAoB;AAAA,IACpB,cAAc;AAAA,EAChB,CAAC;AACH;AAEO,SAAS,oCACd,OACA,SAK8B;AAC9B,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO,4CAA4C,OAAO;AAAA,EAC5D;AACA,QAAM,cAAc,6BAA6B,MAAM,KAAK;AAC5D,MAAI,YAAY,uBAAuB,QAAQ,WAAW;AACxD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,MACE,YAAY,kBAAkB,kBAC9B,YAAY,yBAAyB,QAAQ,aAC7C;AACA,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,MACE,YAAY,kBAAkB,cAC9B,YAAY,uBAAuB,QAAQ,qBAC3C;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AACT;AAEO,SAAS,sCAAsC,aAIpD;AACA,SAAO;AAAA,IACL,eAAe,YAAY;AAAA,IAC3B,sBAAsB,YAAY;AAAA,IAClC,oBAAoB,YAAY;AAAA,EAClC;AACF;AAEO,SAAS,yCACd,aACA,qBACQ;AACR,SAAO,YAAY,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB;AAChF;","names":[]}

package/dist/chunk-NDZHPTCL.js

@@ -0,0 +1,400 @@
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/modal-native-proof-v2.ts
+import { z as z2 } from "zod";
+
+// src/sandbox-provider-command.ts
+import { z } from "zod";
+var ModalOutputCursor = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    batchIndex: z.number().int().nonnegative().safe(),
+    utf8Remainder: z.string().max(8).regex(/^[A-Za-z0-9+/]*={0,2}$/u),
+    exitCode: z.number().int().nullable()
+  }).strict()
+);
+var ModalLegacyProviderCommand = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    kind: z.literal("modal-control-v1"),
+    sandboxId: z.string().min(1).max(200),
+    taskId: z.string().min(1).max(200),
+    execId: z.string().min(1).max(200),
+    pty: z.boolean().optional(),
+    streams: z.object({ stdout: ModalOutputCursor, stderr: ModalOutputCursor }).strict()
+  }).strict()
+);
+var ModalByteCursor = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    byteOffset: z.number().int().nonnegative().safe(),
+    utf8Remainder: z.string().max(8).regex(/^[A-Za-z0-9+/]*={0,2}$/u),
+    eof: z.boolean(),
+    exitCode: z.number().int().nullable()
+  }).strict().refine((cursor) => cursor.exitCode === null || cursor.eof, {
+    message: "A terminal output cursor must have reached EOF"
+  })
+);
+var CommandSupervisionDescriptor = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    protocol: z.literal("native-subreaper-v1"),
+    invocationId: z.string().uuid(),
+    nonce: z.string().regex(/^[a-f0-9]{64}$/u),
+    controlPath: z.string().regex(/^\/tmp\/opengeni-supervision\/[a-f0-9-]{36}\.sock$/u)
+  }).strict()
+);
+var CommandSupervisionReceipt = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    protocol: z.literal("native-subreaper-v1"),
+    invocationId: z.string().uuid(),
+    receiptId: z.string().uuid(),
+    leaderExitCode: z.number().int()
+  }).strict()
+);
+var ModalRouterProviderCommand = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    kind: z.literal("modal-router-v1"),
+    sandboxId: z.string().min(1).max(200),
+    taskId: z.string().min(1).max(200),
+    execId: z.string().uuid(),
+    pty: z.boolean().optional(),
+    supervision: CommandSupervisionDescriptor.optional(),
+    streams: z.object({ stdout: ModalByteCursor, stderr: ModalByteCursor }).strict()
+  }).strict()
+);
+var SandboxProviderCommand = /* @__PURE__ */ defineSchema(
+  () => z.discriminatedUnion("kind", [ModalLegacyProviderCommand, ModalRouterProviderCommand])
+);
+
+// src/modal-native-proof-v2.ts
+var MODAL_NATIVE_PROOF_PROTOCOL_VERSION = 2;
+var MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT = "db6d33c8a1142e5ffe3d1a130d8b9f9d819e46832ad0417d41d5606b7fe25ab1";
+var uuid = /* @__PURE__ */ defineSchema(
+  () => z2.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u)
+);
+var commandExecId = /* @__PURE__ */ defineSchema(
+  () => uuid.pipe(ModalRouterProviderCommand.shape.execId)
+);
+var positive = /* @__PURE__ */ defineSchema(() => z2.number().int().positive().safe());
+var nonnegative = /* @__PURE__ */ defineSchema(() => z2.number().int().nonnegative().safe());
+var digest = /* @__PURE__ */ defineSchema(() => z2.string().regex(/^[a-f0-9]{64}$/u));
+var empty = /* @__PURE__ */ defineSchema(() => z2.object({}).strict());
+var noItems = /* @__PURE__ */ defineSchema(() => z2.tuple([]));
+var entrypoint = /* @__PURE__ */ defineSchema(
+  () => z2.tuple([z2.literal("sleep"), z2.literal("infinity")])
+);
+var sourceSha = "bb830ded1925e1d927d1fc221b2329d961f9a57eafdd9a85bf13fb7cfc982599";
+var ModalNativeFreshNormalizationV1 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    recipeId: z2.literal("modal-native-fresh-v1"),
+    recipeRevision: z2.literal(1),
+    schema: z2.literal("modal.client.ModalClient/SandboxCreate"),
+    encoding: z2.literal("modal-create-json-v1"),
+    sdkVersion: z2.literal("0.9.0"),
+    sdkSourceSha256: z2.literal(sourceSha),
+    entrypoint,
+    createWorkdir: z2.literal("/tmp"),
+    env: empty,
+    mounts: noItems,
+    restore: z2.null(),
+    idleTimeout: z2.literal("unset"),
+    gpu: z2.literal("unset"),
+    gpuProto: z2.object({ type: z2.literal(0), count: z2.literal(0), gpuType: z2.literal("") }).strict(),
+    cpuLimit: z2.literal("unset"),
+    memoryLimit: z2.literal("unset"),
+    pty: z2.literal("unset"),
+    regions: z2.literal("unset"),
+    proxy: z2.literal("unset"),
+    readinessProbe: z2.literal("unset"),
+    environmentVariables: z2.literal("unset"),
+    network: z2.object({
+      access: z2.literal("OPEN"),
+      outboundCidrs: noItems,
+      outboundDomains: noItems,
+      inboundCidrs: noItems,
+      i6pn: z2.literal(false)
+    }).strict(),
+    volumes: noItems,
+    cloudBucketMounts: noItems,
+    secrets: noItems,
+    ports: noItems,
+    cloud: z2.literal(""),
+    verbose: z2.literal(false),
+    includeOidcIdentityToken: z2.literal(false),
+    experimentalOptions: empty,
+    experimentalOptionsV2: empty,
+    customDomain: z2.literal("")
+  }).strict()
+);
+function freezeLiteral(value) {
+  if (value !== null && typeof value === "object") {
+    for (const child of Object.values(value)) freezeLiteral(child);
+    Object.freeze(value);
+  }
+  return value;
+}
+var MODAL_NATIVE_FRESH_NORMALIZATION_V1 = freezeLiteral(
+  ModalNativeFreshNormalizationV1.parse({
+    recipeId: "modal-native-fresh-v1",
+    recipeRevision: 1,
+    schema: "modal.client.ModalClient/SandboxCreate",
+    encoding: "modal-create-json-v1",
+    sdkVersion: "0.9.0",
+    sdkSourceSha256: sourceSha,
+    entrypoint: ["sleep", "infinity"],
+    createWorkdir: "/tmp",
+    env: {},
+    mounts: [],
+    restore: null,
+    idleTimeout: "unset",
+    gpu: "unset",
+    gpuProto: { type: 0, count: 0, gpuType: "" },
+    cpuLimit: "unset",
+    memoryLimit: "unset",
+    pty: "unset",
+    regions: "unset",
+    proxy: "unset",
+    readinessProbe: "unset",
+    environmentVariables: "unset",
+    network: {
+      access: "OPEN",
+      outboundCidrs: [],
+      outboundDomains: [],
+      inboundCidrs: [],
+      i6pn: false
+    },
+    volumes: [],
+    cloudBucketMounts: [],
+    secrets: [],
+    ports: [],
+    cloud: "",
+    verbose: false,
+    includeOidcIdentityToken: false,
+    experimentalOptions: {},
+    experimentalOptionsV2: {},
+    customDomain: ""
+  })
+);
+var ModalNativePreparationRecipeV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    version: z2.literal(1),
+    recipeId: z2.literal("modal-native-fresh-v1"),
+    recipeRevision: z2.literal(1),
+    createWorkdir: z2.literal("/tmp"),
+    entrypoint,
+    normalization: ModalNativeFreshNormalizationV1,
+    compilerFingerprint: z2.literal(MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT)
+  }).strict()
+);
+var MODAL_NATIVE_PREPARATION_RECIPE_V2 = freezeLiteral(
+  ModalNativePreparationRecipeV2.parse({
+    version: 1,
+    recipeId: "modal-native-fresh-v1",
+    recipeRevision: 1,
+    createWorkdir: "/tmp",
+    entrypoint: ["sleep", "infinity"],
+    normalization: MODAL_NATIVE_FRESH_NORMALIZATION_V1,
+    compilerFingerprint: MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT
+  })
+);
+var ModalNativeFreshBlueprintV1 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    version: z2.literal(1),
+    adapterId: z2.literal("modal-native-fresh-creator-reservation-v1"),
+    create: z2.object({
+      operationId: uuid,
+      appId: z2.string().regex(/^ap-[A-Za-z0-9_-]{1,200}$/u),
+      imageId: z2.string().regex(/^im-[A-Za-z0-9_-]{1,200}$/u),
+      cpu: z2.number().positive().max(128).refine(
+        (v) => Number.isSafeInteger(Math.trunc(v * 1e3)) && Math.trunc(v * 1e3) >= 1 && Math.trunc(v * 1e3) / 1e3 === v
+      ),
+      memoryMiB: z2.number().int().min(128).max(1048576).safe(),
+      timeoutSeconds: z2.number().int().min(1).max(86400).safe(),
+      env: empty,
+      mounts: noItems
+    }).strict(),
+    restore: z2.null(),
+    readiness: z2.object({
+      operationId: uuid,
+      execId: commandExecId,
+      commandArgs: z2.tuple([z2.literal("/bin/true")]),
+      workdir: z2.literal("/tmp"),
+      env: empty
+    }).strict(),
+    publishOperationId: uuid,
+    cleanup: z2.object({ operationId: uuid, requires: z2.literal("physical-terminal-proof") }).strict()
+  }).strict()
+);
+var ModalNativeOriginalScopeV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    version: z2.literal(2),
+    declarationId: uuid,
+    planId: uuid,
+    creatorId: uuid,
+    accountId: uuid,
+    workspaceId: uuid,
+    sessionId: uuid,
+    turnId: uuid,
+    attemptId: uuid,
+    executionGeneration: positive,
+    triggerEventId: uuid,
+    sandboxGroupId: uuid,
+    routeKind: z2.literal("home"),
+    routeTargetId: z2.null(),
+    routeEpoch: nonnegative
+  }).strict().refine((v) => v.creatorId !== v.attemptId && v.creatorId !== v.planId, {
+    message: "A declared creator is distinct from the accepted attempt and plan"
+  })
+);
+var ModalNativeConfigurationCaptureRefV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({ id: uuid, revision: positive }).strict()
+);
+var ModalNativeProofGrantRefV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({ id: uuid, epoch: positive }).strict()
+);
+var ModalNativeReservedLeaseRefV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({ id: uuid, epoch: nonnegative }).strict()
+);
+var ModalNativePreparationDeclarationV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    version: z2.literal(2),
+    scope: ModalNativeOriginalScopeV2,
+    blueprint: ModalNativeFreshBlueprintV1,
+    preparationRecipe: ModalNativePreparationRecipeV2,
+    configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+    proofGrantRef: ModalNativeProofGrantRefV2,
+    providerRecoveryCount: z2.union([
+      z2.literal(0),
+      z2.literal(1),
+      z2.literal(2),
+      z2.literal(3),
+      z2.literal(4),
+      z2.literal(5)
+    ]),
+    namespaceState: z2.literal("unbound")
+  }).strict().superRefine((v, ctx) => {
+    const ids = [
+      v.scope.planId,
+      v.scope.creatorId,
+      v.blueprint.create.operationId,
+      v.blueprint.readiness.operationId,
+      v.blueprint.readiness.execId,
+      v.blueprint.publishOperationId,
+      v.blueprint.cleanup.operationId
+    ];
+    if (new Set(ids).size !== 7)
+      ctx.addIssue({
+        code: "custom",
+        message: "All seven supplied operation identities must be distinct"
+      });
+  })
+);
+var safeEndpoint = /* @__PURE__ */ defineSchema(
+  () => z2.string().url().max(1024).refine(
+    (v) => {
+      try {
+        const url = new URL(v);
+        return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+      } catch {
+        return false;
+      }
+    },
+    { message: "Only a credential-free captured HTTPS endpoint is supported" }
+  )
+);
+var ModalNativeNamespaceEvidenceV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    version: z2.literal(2),
+    scope: ModalNativeOriginalScopeV2,
+    configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+    proofGrantRef: ModalNativeProofGrantRefV2,
+    claimId: uuid,
+    nonce: uuid,
+    claimRevision: positive,
+    recordRevision: positive,
+    captureId: uuid,
+    purpose: z2.literal("original-namespace-read"),
+    reservation: ModalNativeReservedLeaseRefV2,
+    source: z2.literal("modal-client-workspace-name-lookup-v1"),
+    responseField: z2.enum(["workspaceName", "username"]),
+    binding: z2.object({
+      version: z2.literal(1),
+      serverUrl: safeEndpoint,
+      workspaceName: z2.string().min(1).max(200),
+      environment: z2.string().max(200)
+    }).strict()
+  }).strict()
+);
+var claimFields = {
+  version: z2.literal(2),
+  scope: ModalNativeOriginalScopeV2,
+  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,
+  proofGrantRef: ModalNativeProofGrantRefV2,
+  claimId: uuid,
+  nonce: uuid,
+  claimRevision: positive,
+  recordRevision: positive,
+  captureId: uuid,
+  expiresAt: z2.string().datetime()
+};
+var ModalNativeNamespaceReadClaimV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    ...claimFields,
+    purpose: z2.literal("original-namespace-read"),
+    reservation: ModalNativeReservedLeaseRefV2
+  }).strict()
+);
+var ModalNativeOriginalCommandReadClaimV2 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    ...claimFields,
+    purpose: z2.literal("original-readiness-read"),
+    reservation: ModalNativeReservedLeaseRefV2,
+    physicalOwnerGeneration: positive,
+    operationId: uuid,
+    providerBindingKey: z2.string().min(1).max(1024),
+    command: ModalRouterProviderCommand.refine((v) => v.pty !== true)
+  }).strict()
+);
+var ModalNativePreparedStartDescriptionV1 = /* @__PURE__ */ defineSchema(
+  () => z2.object({
+    taskId: z2.string().min(1).max(200),
+    execId: commandExecId,
+    descriptorProtocol: z2.literal("modal-prepared-start-descriptor"),
+    descriptorVersion: z2.literal(1),
+    readinessRecipe: z2.literal("modal-exec-readiness-bin-true-v1"),
+    readinessRecipeVersion: z2.literal(1),
+    startMessage: z2.literal("Start"),
+    rpcMethod: z2.literal("/modal.task_command_router.TaskCommandRouter/TaskExecStart"),
+    encoderVersion: z2.literal("protobufjs@7.6.5"),
+    preflight: z2.object({
+      encoding: z2.literal("modal-start-protobuf-preflight-v1"),
+      sha256: digest,
+      byteLength: positive.max(1024 * 1024),
+      encoderFingerprint: z2.string().regex(/^sha256:[a-f0-9]{64}$/u)
+    }).strict()
+  }).strict()
+);
+
+export {
+  ModalLegacyProviderCommand,
+  CommandSupervisionDescriptor,
+  CommandSupervisionReceipt,
+  ModalRouterProviderCommand,
+  SandboxProviderCommand,
+  MODAL_NATIVE_PROOF_PROTOCOL_VERSION,
+  MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT,
+  ModalNativeFreshNormalizationV1,
+  MODAL_NATIVE_FRESH_NORMALIZATION_V1,
+  ModalNativePreparationRecipeV2,
+  MODAL_NATIVE_PREPARATION_RECIPE_V2,
+  ModalNativeFreshBlueprintV1,
+  ModalNativeOriginalScopeV2,
+  ModalNativeConfigurationCaptureRefV2,
+  ModalNativeProofGrantRefV2,
+  ModalNativeReservedLeaseRefV2,
+  ModalNativePreparationDeclarationV2,
+  ModalNativeNamespaceEvidenceV2,
+  ModalNativeNamespaceReadClaimV2,
+  ModalNativeOriginalCommandReadClaimV2,
+  ModalNativePreparedStartDescriptionV1
+};
+//# sourceMappingURL=chunk-NDZHPTCL.js.map

package/dist/chunk-NDZHPTCL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/modal-native-proof-v2.ts","../src/sandbox-provider-command.ts"],"sourcesContent":["import { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\nimport { ModalRouterProviderCommand } from \"./sandbox-provider-command\";\n\n/** Secret-free descriptions for the NEW native proof protocol. Parsing any\n * value below establishes correlation ONLY. It does not authenticate a host,\n * native response, grant, election, capture, Start, or semantic continuation.\n * Frozen reservation/journal v1 values are never adopted into this protocol. */\nexport const MODAL_NATIVE_PROOF_PROTOCOL_VERSION = 2 as const;\nexport const MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT =\n  \"db6d33c8a1142e5ffe3d1a130d8b9f9d819e46832ad0417d41d5606b7fe25ab1\" as const;\n\nconst uuid = /* @__PURE__ */ defineSchema(() =>\n  z.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/u),\n);\n// Fresh readiness must round-trip through the retained original-command schema.\n// Reuse its exact UUID domain; do not widen it or change the frozen compiler.\nconst commandExecId = /* @__PURE__ */ defineSchema(() =>\n  uuid.pipe(ModalRouterProviderCommand.shape.execId),\n);\nconst positive = /* @__PURE__ */ defineSchema(() => z.number().int().positive().safe());\nconst nonnegative = /* @__PURE__ */ defineSchema(() => z.number().int().nonnegative().safe());\nconst digest = /* @__PURE__ */ defineSchema(() => z.string().regex(/^[a-f0-9]{64}$/u));\nconst empty = /* @__PURE__ */ defineSchema(() => z.object({}).strict());\nconst noItems = /* @__PURE__ */ defineSchema(() => z.tuple([]));\nconst entrypoint = /* @__PURE__ */ defineSchema(() =>\n  z.tuple([z.literal(\"sleep\"), z.literal(\"infinity\")]),\n);\nconst sourceSha = \"bb830ded1925e1d927d1fc221b2329d961f9a57eafdd9a85bf13fb7cfc982599\";\n\n/** This entire profile is declared BEFORE even namespace lookup. It is a\n * reviewed literal, not caller-selected defaults or an arbitrary self-hash. */\nexport const ModalNativeFreshNormalizationV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      recipeId: z.literal(\"modal-native-fresh-v1\"),\n      recipeRevision: z.literal(1),\n      schema: z.literal(\"modal.client.ModalClient/SandboxCreate\"),\n      encoding: z.literal(\"modal-create-json-v1\"),\n      sdkVersion: z.literal(\"0.9.0\"),\n      sdkSourceSha256: z.literal(sourceSha),\n      entrypoint,\n      createWorkdir: z.literal(\"/tmp\"),\n      env: empty,\n      mounts: noItems,\n      restore: z.null(),\n      idleTimeout: z.literal(\"unset\"),\n      gpu: z.literal(\"unset\"),\n      gpuProto: z\n        .object({ type: z.literal(0), count: z.literal(0), gpuType: z.literal(\"\") })\n        .strict(),\n      cpuLimit: z.literal(\"unset\"),\n      memoryLimit: z.literal(\"unset\"),\n      pty: z.literal(\"unset\"),\n      regions: z.literal(\"unset\"),\n      proxy: z.literal(\"unset\"),\n      readinessProbe: z.literal(\"unset\"),\n      environmentVariables: z.literal(\"unset\"),\n      network: z\n        .object({\n          access: z.literal(\"OPEN\"),\n          outboundCidrs: noItems,\n          outboundDomains: noItems,\n          inboundCidrs: noItems,\n          i6pn: z.literal(false),\n        })\n        .strict(),\n      volumes: noItems,\n      cloudBucketMounts: noItems,\n      secrets: noItems,\n      ports: noItems,\n      cloud: z.literal(\"\"),\n      verbose: z.literal(false),\n      includeOidcIdentityToken: z.literal(false),\n      experimentalOptions: empty,\n      experimentalOptionsV2: empty,\n      customDomain: z.literal(\"\"),\n    })\n    .strict(),\n);\nexport type ModalNativeFreshNormalizationV1 = z.infer<typeof ModalNativeFreshNormalizationV1>;\n\nfunction freezeLiteral<T>(value: T): T {\n  if (value !== null && typeof value === \"object\") {\n    for (const child of Object.values(value)) freezeLiteral(child);\n    Object.freeze(value);\n  }\n  return value;\n}\n\n/** Public, credential-free recipe data. The host must normatively select this\n * literal before I/O; possessing a copy supplies no issuance provenance. */\nexport const MODAL_NATIVE_FRESH_NORMALIZATION_V1 = freezeLiteral(\n  ModalNativeFreshNormalizationV1.parse({\n    recipeId: \"modal-native-fresh-v1\",\n    recipeRevision: 1,\n    schema: \"modal.client.ModalClient/SandboxCreate\",\n    encoding: \"modal-create-json-v1\",\n    sdkVersion: \"0.9.0\",\n    sdkSourceSha256: sourceSha,\n    entrypoint: [\"sleep\", \"infinity\"],\n    createWorkdir: \"/tmp\",\n    env: {},\n    mounts: [],\n    restore: null,\n    idleTimeout: \"unset\",\n    gpu: \"unset\",\n    gpuProto: { type: 0, count: 0, gpuType: \"\" },\n    cpuLimit: \"unset\",\n    memoryLimit: \"unset\",\n    pty: \"unset\",\n    regions: \"unset\",\n    proxy: \"unset\",\n    readinessProbe: \"unset\",\n    environmentVariables: \"unset\",\n    network: {\n      access: \"OPEN\",\n      outboundCidrs: [],\n      outboundDomains: [],\n      inboundCidrs: [],\n      i6pn: false,\n    },\n    volumes: [],\n    cloudBucketMounts: [],\n    secrets: [],\n    ports: [],\n    cloud: \"\",\n    verbose: false,\n    includeOidcIdentityToken: false,\n    experimentalOptions: {},\n    experimentalOptionsV2: {},\n    customDomain: \"\",\n  }),\n);\n\nexport const ModalNativePreparationRecipeV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      version: z.literal(1),\n      recipeId: z.literal(\"modal-native-fresh-v1\"),\n      recipeRevision: z.literal(1),\n      createWorkdir: z.literal(\"/tmp\"),\n      entrypoint,\n      normalization: ModalNativeFreshNormalizationV1,\n      compilerFingerprint: z.literal(MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT),\n    })\n    .strict(),\n);\nexport type ModalNativePreparationRecipeV2 = z.infer<typeof ModalNativePreparationRecipeV2>;\n\nexport const MODAL_NATIVE_PREPARATION_RECIPE_V2 = freezeLiteral(\n  ModalNativePreparationRecipeV2.parse({\n    version: 1,\n    recipeId: \"modal-native-fresh-v1\",\n    recipeRevision: 1,\n    createWorkdir: \"/tmp\",\n    entrypoint: [\"sleep\", \"infinity\"],\n    normalization: MODAL_NATIVE_FRESH_NORMALIZATION_V1,\n    compilerFingerprint: MODAL_NATIVE_FRESH_COMPILER_FINGERPRINT,\n  }),\n);\n\n/** Exactly the old reservation vocabulary, NOT an extension to its keys. */\nexport const ModalNativeFreshBlueprintV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      version: z.literal(1),\n      adapterId: z.literal(\"modal-native-fresh-creator-reservation-v1\"),\n      create: z\n        .object({\n          operationId: uuid,\n          appId: z.string().regex(/^ap-[A-Za-z0-9_-]{1,200}$/u),\n          imageId: z.string().regex(/^im-[A-Za-z0-9_-]{1,200}$/u),\n          cpu: z\n            .number()\n            .positive()\n            .max(128)\n            .refine(\n              (v) =>\n                Number.isSafeInteger(Math.trunc(v * 1000)) &&\n                Math.trunc(v * 1000) >= 1 &&\n                Math.trunc(v * 1000) / 1000 === v,\n            ),\n          memoryMiB: z.number().int().min(128).max(1048576).safe(),\n          timeoutSeconds: z.number().int().min(1).max(86400).safe(),\n          env: empty,\n          mounts: noItems,\n        })\n        .strict(),\n      restore: z.null(),\n      readiness: z\n        .object({\n          operationId: uuid,\n          execId: commandExecId,\n          commandArgs: z.tuple([z.literal(\"/bin/true\")]),\n          workdir: z.literal(\"/tmp\"),\n          env: empty,\n        })\n        .strict(),\n      publishOperationId: uuid,\n      cleanup: z\n        .object({ operationId: uuid, requires: z.literal(\"physical-terminal-proof\") })\n        .strict(),\n    })\n    .strict(),\n);\nexport type ModalNativeFreshBlueprintV1 = z.infer<typeof ModalNativeFreshBlueprintV1>;\n\n/** Full pre-election identity. routeEpoch is NOT the physical lease epoch;\n * creatorId is NOT an elected owner or a replacement accepted attempt. */\nexport const ModalNativeOriginalScopeV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      version: z.literal(2),\n      declarationId: uuid,\n      planId: uuid,\n      creatorId: uuid,\n      accountId: uuid,\n      workspaceId: uuid,\n      sessionId: uuid,\n      turnId: uuid,\n      attemptId: uuid,\n      executionGeneration: positive,\n      triggerEventId: uuid,\n      sandboxGroupId: uuid,\n      routeKind: z.literal(\"home\"),\n      routeTargetId: z.null(),\n      routeEpoch: nonnegative,\n    })\n    .strict()\n    .refine((v) => v.creatorId !== v.attemptId && v.creatorId !== v.planId, {\n      message: \"A declared creator is distinct from the accepted attempt and plan\",\n    }),\n);\nexport type ModalNativeOriginalScopeV2 = z.infer<typeof ModalNativeOriginalScopeV2>;\n\n/** References must resolve through the complete protected scope/config join.\n * They are neither credentials nor canonical/native authentication receipts. */\nexport const ModalNativeConfigurationCaptureRefV2 = /* @__PURE__ */ defineSchema(() =>\n  z.object({ id: uuid, revision: positive }).strict(),\n);\nexport type ModalNativeConfigurationCaptureRefV2 = z.infer<\n  typeof ModalNativeConfigurationCaptureRefV2\n>;\nexport const ModalNativeProofGrantRefV2 = /* @__PURE__ */ defineSchema(() =>\n  z.object({ id: uuid, epoch: positive }).strict(),\n);\nexport type ModalNativeProofGrantRefV2 = z.infer<typeof ModalNativeProofGrantRefV2>;\nexport const ModalNativeReservedLeaseRefV2 = /* @__PURE__ */ defineSchema(() =>\n  z.object({ id: uuid, epoch: nonnegative }).strict(),\n);\nexport type ModalNativeReservedLeaseRefV2 = z.infer<typeof ModalNativeReservedLeaseRefV2>;\n\nexport const ModalNativePreparationDeclarationV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      version: z.literal(2),\n      scope: ModalNativeOriginalScopeV2,\n      blueprint: ModalNativeFreshBlueprintV1,\n      preparationRecipe: ModalNativePreparationRecipeV2,\n      configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n      proofGrantRef: ModalNativeProofGrantRefV2,\n      providerRecoveryCount: z.union([\n        z.literal(0),\n        z.literal(1),\n        z.literal(2),\n        z.literal(3),\n        z.literal(4),\n        z.literal(5),\n      ]),\n      namespaceState: z.literal(\"unbound\"),\n    })\n    .strict()\n    .superRefine((v, ctx) => {\n      const ids = [\n        v.scope.planId,\n        v.scope.creatorId,\n        v.blueprint.create.operationId,\n        v.blueprint.readiness.operationId,\n        v.blueprint.readiness.execId,\n        v.blueprint.publishOperationId,\n        v.blueprint.cleanup.operationId,\n      ];\n      if (new Set(ids).size !== 7)\n        ctx.addIssue({\n          code: \"custom\",\n          message: \"All seven supplied operation identities must be distinct\",\n        });\n    }),\n);\nexport type ModalNativePreparationDeclarationV2 = z.infer<\n  typeof ModalNativePreparationDeclarationV2\n>;\n\nconst safeEndpoint = /* @__PURE__ */ defineSchema(() =>\n  z\n    .string()\n    .url()\n    .max(1024)\n    .refine(\n      (v) => {\n        try {\n          const url = new URL(v);\n          return (\n            url.protocol === \"https:\" && !url.username && !url.password && !url.search && !url.hash\n          );\n        } catch {\n          return false;\n        }\n      },\n      { message: \"Only a credential-free captured HTTPS endpoint is supported\" },\n    ),\n);\n\n/** Separate bind-once append, linked to the SAME captured configuration and\n * claim. This deliberately has no invented immutable provider-principal ID.\n * Only a trusted native issuer + authenticated host ingress can attest it. */\nexport const ModalNativeNamespaceEvidenceV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      version: z.literal(2),\n      scope: ModalNativeOriginalScopeV2,\n      configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n      proofGrantRef: ModalNativeProofGrantRefV2,\n      claimId: uuid,\n      nonce: uuid,\n      claimRevision: positive,\n      recordRevision: positive,\n      captureId: uuid,\n      purpose: z.literal(\"original-namespace-read\"),\n      reservation: ModalNativeReservedLeaseRefV2,\n      source: z.literal(\"modal-client-workspace-name-lookup-v1\"),\n      responseField: z.enum([\"workspaceName\", \"username\"]),\n      binding: z\n        .object({\n          version: z.literal(1),\n          serverUrl: safeEndpoint,\n          workspaceName: z.string().min(1).max(200),\n          environment: z.string().max(200),\n        })\n        .strict(),\n    })\n    .strict(),\n);\nexport type ModalNativeNamespaceEvidenceV2 = z.infer<typeof ModalNativeNamespaceEvidenceV2>;\n\nconst claimFields = {\n  version: z.literal(2),\n  scope: ModalNativeOriginalScopeV2,\n  configurationCaptureRef: ModalNativeConfigurationCaptureRefV2,\n  proofGrantRef: ModalNativeProofGrantRefV2,\n  claimId: uuid,\n  nonce: uuid,\n  claimRevision: positive,\n  recordRevision: positive,\n  captureId: uuid,\n  expiresAt: z.string().datetime(),\n};\n\n/** Scheduling custody ONLY. No lease/task grant is fabricated to authorize\n * this prerequisite lookup. A reserved lease supplies exclusion, not effects. */\nexport const ModalNativeNamespaceReadClaimV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      ...claimFields,\n      purpose: z.literal(\"original-namespace-read\"),\n      reservation: ModalNativeReservedLeaseRefV2,\n    })\n    .strict(),\n);\nexport type ModalNativeNamespaceReadClaimV2 = z.infer<typeof ModalNativeNamespaceReadClaimV2>;\n\n/** Exact original router command and authoritative prior cursors; no retarget,\n * new TaskGet adoption, legacy locator, PTY, Start, stdin or process-cancel API. */\nexport const ModalNativeOriginalCommandReadClaimV2 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      ...claimFields,\n      purpose: z.literal(\"original-readiness-read\"),\n      reservation: ModalNativeReservedLeaseRefV2,\n      physicalOwnerGeneration: positive,\n      operationId: uuid,\n      providerBindingKey: z.string().min(1).max(1024),\n      command: ModalRouterProviderCommand.refine((v) => v.pty !== true),\n    })\n    .strict(),\n);\nexport type ModalNativeOriginalCommandReadClaimV2 = z.infer<\n  typeof ModalNativeOriginalCommandReadClaimV2\n>;\n\n/** Preserve the actual runtime descriptor's encoding/fingerprint domain. This\n * is passive protobuf PREFLIGHT, not the RPC's transmitted bytes or permission. */\nexport const ModalNativePreparedStartDescriptionV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      taskId: z.string().min(1).max(200),\n      execId: commandExecId,\n      descriptorProtocol: z.literal(\"modal-prepared-start-descriptor\"),\n      descriptorVersion: z.literal(1),\n      readinessRecipe: z.literal(\"modal-exec-readiness-bin-true-v1\"),\n      readinessRecipeVersion: z.literal(1),\n      startMessage: z.literal(\"Start\"),\n      rpcMethod: z.literal(\"/modal.task_command_router.TaskCommandRouter/TaskExecStart\"),\n      encoderVersion: z.literal(\"protobufjs@7.6.5\"),\n      preflight: z\n        .object({\n          encoding: z.literal(\"modal-start-protobuf-preflight-v1\"),\n          sha256: digest,\n          byteLength: positive.max(1024 * 1024),\n          encoderFingerprint: z.string().regex(/^sha256:[a-f0-9]{64}$/u),\n        })\n        .strict(),\n    })\n    .strict(),\n);\nexport type ModalNativePreparedStartDescriptionV1 = z.infer<\n  typeof ModalNativePreparedStartDescriptionV1\n>;\n\n/** Host/native acquisition objects are intentionally NOT constructed here.\n * Raw DTOs, copied refs and any schema-success result cannot mint those objects.\n * Capture needs issuer-authenticated OWN bytes, the exact original claim and a\n * durable capture key; unknown ACK reconciles that same key/acquisition. */\nexport type ModalNativeProofCaptureStatusV2 =\n  | { status: \"committed\"; captureId: string; receiptId: string; recordRevision: number }\n  | { status: \"absent_fenced\"; captureId: string }\n  | { status: \"conflict\"; captureId: string }\n  | { status: \"unresolved\"; captureId: string };\n","import { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nconst ModalOutputCursor = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      batchIndex: z.number().int().nonnegative().safe(),\n      utf8Remainder: z\n        .string()\n        .max(8)\n        .regex(/^[A-Za-z0-9+/]*={0,2}$/u),\n      exitCode: z.number().int().nullable(),\n    })\n    .strict(),\n);\n\n/** Provider-owned execution identity and acknowledged output cursors. These\n * values are retained by the control plane, never recovered from sandbox files. */\nexport const ModalLegacyProviderCommand = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      kind: z.literal(\"modal-control-v1\"),\n      sandboxId: z.string().min(1).max(200),\n      taskId: z.string().min(1).max(200),\n      execId: z.string().min(1).max(200),\n      pty: z.boolean().optional(),\n      streams: z.object({ stdout: ModalOutputCursor, stderr: ModalOutputCursor }).strict(),\n    })\n    .strict(),\n);\nexport type ModalLegacyProviderCommand = z.infer<typeof ModalLegacyProviderCommand>;\n\nconst ModalByteCursor = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      byteOffset: z.number().int().nonnegative().safe(),\n      utf8Remainder: z\n        .string()\n        .max(8)\n        .regex(/^[A-Za-z0-9+/]*={0,2}$/u),\n      eof: z.boolean(),\n      exitCode: z.number().int().nullable(),\n    })\n    .strict()\n    .refine((cursor) => cursor.exitCode === null || cursor.eof, {\n      message: \"A terminal output cursor must have reached EOF\",\n    }),\n);\n\nexport const CommandSupervisionDescriptor = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      protocol: z.literal(\"native-subreaper-v1\"),\n      invocationId: z.string().uuid(),\n      nonce: z.string().regex(/^[a-f0-9]{64}$/u),\n      controlPath: z.string().regex(/^\\/tmp\\/opengeni-supervision\\/[a-f0-9-]{36}\\.sock$/u),\n    })\n    .strict(),\n);\nexport type CommandSupervisionDescriptor = z.infer<typeof CommandSupervisionDescriptor>;\n\nexport const CommandSupervisionReceipt = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      protocol: z.literal(\"native-subreaper-v1\"),\n      invocationId: z.string().uuid(),\n      receiptId: z.string().uuid(),\n      leaderExitCode: z.number().int(),\n    })\n    .strict(),\n);\nexport type CommandSupervisionReceipt = z.infer<typeof CommandSupervisionReceipt>;\n\nexport const ModalRouterProviderCommand = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      kind: z.literal(\"modal-router-v1\"),\n      sandboxId: z.string().min(1).max(200),\n      taskId: z.string().min(1).max(200),\n      execId: z.string().uuid(),\n      pty: z.boolean().optional(),\n      supervision: CommandSupervisionDescriptor.optional(),\n      streams: z.object({ stdout: ModalByteCursor, stderr: ModalByteCursor }).strict(),\n    })\n    .strict(),\n);\nexport type ModalRouterProviderCommand = z.infer<typeof ModalRouterProviderCommand>;\n\n/** Legacy locators are read-only compatibility for already launched commands;\n * new starts use authenticated task-router byte offsets, never batch indices. */\nexport const SandboxProviderCommand = /* @__PURE__ */ defineSchema(() =>\n  z.discriminatedUnion(\"kind\", [ModalLegacyProviderCommand, ModalRouterProviderCommand]),\n);\nexport type SandboxProviderCommand = z.infer<typeof SandboxProviderCommand>;\n"],"mappings":";;;;;AACA,SAAS,KAAAA,UAAS;;;ACAlB,SAAS,SAAS;AAElB,IAAM,oBAAoC;AAAA,EAAa,MACrD,EACG,OAAO;AAAA,IACN,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;AAAA,IAChD,eAAe,EACZ,OAAO,EACP,IAAI,CAAC,EACL,MAAM,yBAAyB;AAAA,IAClC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,OAAO;AACZ;AAIO,IAAM,6BAA6C;AAAA,EAAa,MACrE,EACG,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,IAClC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACjC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACjC,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC1B,SAAS,EAAE,OAAO,EAAE,QAAQ,mBAAmB,QAAQ,kBAAkB,CAAC,EAAE,OAAO;AAAA,EACrF,CAAC,EACA,OAAO;AACZ;AAGA,IAAM,kBAAkC;AAAA,EAAa,MACnD,EACG,OAAO;AAAA,IACN,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;AAAA,IAChD,eAAe,EACZ,OAAO,EACP,IAAI,CAAC,EACL,MAAM,yBAAyB;AAAA,IAClC,KAAK,EAAE,QAAQ;AAAA,IACf,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,OAAO,EACP,OAAO,CAAC,WAAW,OAAO,aAAa,QAAQ,OAAO,KAAK;AAAA,IAC1D,SAAS;AAAA,EACX,CAAC;AACL;AAEO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EACG,OAAO;AAAA,IACN,UAAU,EAAE,QAAQ,qBAAqB;AAAA,IACzC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IACzC,aAAa,EAAE,OAAO,EAAE,MAAM,qDAAqD;AAAA,EACrF,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,4BAA4C;AAAA,EAAa,MACpE,EACG,OAAO;AAAA,IACN,UAAU,EAAE,QAAQ,qBAAqB;AAAA,IACzC,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,gBAAgB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,6BAA6C;AAAA,EAAa,MACrE,EACG,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,IACjC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACjC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,KAAK,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC1B,aAAa,6BAA6B,SAAS;AAAA,IACnD,SAAS,EAAE,OAAO,EAAE,QAAQ,iBAAiB,QAAQ,gBAAgB,CAAC,EAAE,OAAO;AAAA,EACjF,CAAC,EACA,OAAO;AACZ;AAKO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,mBAAmB,QAAQ,CAAC,4BAA4B,0BAA0B,CAAC;AACvF;;;ADpFO,IAAM,sCAAsC;AAC5C,IAAM,0CACX;AAEF,IAAM,OAAuB;AAAA,EAAa,MACxCC,GAAE,OAAO,EAAE,MAAM,iEAAiE;AACpF;AAGA,IAAM,gBAAgC;AAAA,EAAa,MACjD,KAAK,KAAK,2BAA2B,MAAM,MAAM;AACnD;AACA,IAAM,WAA2B,6BAAa,MAAMA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;AACtF,IAAM,cAA8B,6BAAa,MAAMA,GAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC;AAC5F,IAAM,SAAyB,6BAAa,MAAMA,GAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACrF,IAAM,QAAwB,6BAAa,MAAMA,GAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC;AACtE,IAAM,UAA0B,6BAAa,MAAMA,GAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,IAAM,aAA6B;AAAA,EAAa,MAC9CA,GAAE,MAAM,CAACA,GAAE,QAAQ,OAAO,GAAGA,GAAE,QAAQ,UAAU,CAAC,CAAC;AACrD;AACA,IAAM,YAAY;AAIX,IAAM,kCAAkD;AAAA,EAAa,MAC1EA,GACG,OAAO;AAAA,IACN,UAAUA,GAAE,QAAQ,uBAAuB;AAAA,IAC3C,gBAAgBA,GAAE,QAAQ,CAAC;AAAA,IAC3B,QAAQA,GAAE,QAAQ,wCAAwC;AAAA,IAC1D,UAAUA,GAAE,QAAQ,sBAAsB;AAAA,IAC1C,YAAYA,GAAE,QAAQ,OAAO;AAAA,IAC7B,iBAAiBA,GAAE,QAAQ,SAAS;AAAA,IACpC;AAAA,IACA,eAAeA,GAAE,QAAQ,MAAM;AAAA,IAC/B,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAASA,GAAE,KAAK;AAAA,IAChB,aAAaA,GAAE,QAAQ,OAAO;AAAA,IAC9B,KAAKA,GAAE,QAAQ,OAAO;AAAA,IACtB,UAAUA,GACP,OAAO,EAAE,MAAMA,GAAE,QAAQ,CAAC,GAAG,OAAOA,GAAE,QAAQ,CAAC,GAAG,SAASA,GAAE,QAAQ,EAAE,EAAE,CAAC,EAC1E,OAAO;AAAA,IACV,UAAUA,GAAE,QAAQ,OAAO;AAAA,IAC3B,aAAaA,GAAE,QAAQ,OAAO;AAAA,IAC9B,KAAKA,GAAE,QAAQ,OAAO;AAAA,IACtB,SAASA,GAAE,QAAQ,OAAO;AAAA,IAC1B,OAAOA,GAAE,QAAQ,OAAO;AAAA,IACxB,gBAAgBA,GAAE,QAAQ,OAAO;AAAA,IACjC,sBAAsBA,GAAE,QAAQ,OAAO;AAAA,IACvC,SAASA,GACN,OAAO;AAAA,MACN,QAAQA,GAAE,QAAQ,MAAM;AAAA,MACxB,eAAe;AAAA,MACf,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,MAAMA,GAAE,QAAQ,KAAK;AAAA,IACvB,CAAC,EACA,OAAO;AAAA,IACV,SAAS;AAAA,IACT,mBAAmB;AAAA,IACnB,SAAS;AAAA,IACT,OAAO;AAAA,IACP,OAAOA,GAAE,QAAQ,EAAE;AAAA,IACnB,SAASA,GAAE,QAAQ,KAAK;AAAA,IACxB,0BAA0BA,GAAE,QAAQ,KAAK;AAAA,IACzC,qBAAqB;AAAA,IACrB,uBAAuB;AAAA,IACvB,cAAcA,GAAE,QAAQ,EAAE;AAAA,EAC5B,CAAC,EACA,OAAO;AACZ;AAGA,SAAS,cAAiB,OAAa;AACrC,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,eAAW,SAAS,OAAO,OAAO,KAAK,EAAG,eAAc,KAAK;AAC7D,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,SAAO;AACT;AAIO,IAAM,sCAAsC;AAAA,EACjD,gCAAgC,MAAM;AAAA,IACpC,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,iBAAiB;AAAA,IACjB,YAAY,CAAC,SAAS,UAAU;AAAA,IAChC,eAAe;AAAA,IACf,KAAK,CAAC;AAAA,IACN,QAAQ,CAAC;AAAA,IACT,SAAS;AAAA,IACT,aAAa;AAAA,IACb,KAAK;AAAA,IACL,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG;AAAA,IAC3C,UAAU;AAAA,IACV,aAAa;AAAA,IACb,KAAK;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,IACtB,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,eAAe,CAAC;AAAA,MAChB,iBAAiB,CAAC;AAAA,MAClB,cAAc,CAAC;AAAA,MACf,MAAM;AAAA,IACR;AAAA,IACA,SAAS,CAAC;AAAA,IACV,mBAAmB,CAAC;AAAA,IACpB,SAAS,CAAC;AAAA,IACV,OAAO,CAAC;AAAA,IACR,OAAO;AAAA,IACP,SAAS;AAAA,IACT,0BAA0B;AAAA,IAC1B,qBAAqB,CAAC;AAAA,IACtB,uBAAuB,CAAC;AAAA,IACxB,cAAc;AAAA,EAChB,CAAC;AACH;AAEO,IAAM,iCAAiD;AAAA,EAAa,MACzEA,GACG,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,UAAUA,GAAE,QAAQ,uBAAuB;AAAA,IAC3C,gBAAgBA,GAAE,QAAQ,CAAC;AAAA,IAC3B,eAAeA,GAAE,QAAQ,MAAM;AAAA,IAC/B;AAAA,IACA,eAAe;AAAA,IACf,qBAAqBA,GAAE,QAAQ,uCAAuC;AAAA,EACxE,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,qCAAqC;AAAA,EAChD,+BAA+B,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,YAAY,CAAC,SAAS,UAAU;AAAA,IAChC,eAAe;AAAA,IACf,qBAAqB;AAAA,EACvB,CAAC;AACH;AAGO,IAAM,8BAA8C;AAAA,EAAa,MACtEA,GACG,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,WAAWA,GAAE,QAAQ,2CAA2C;AAAA,IAChE,QAAQA,GACL,OAAO;AAAA,MACN,aAAa;AAAA,MACb,OAAOA,GAAE,OAAO,EAAE,MAAM,4BAA4B;AAAA,MACpD,SAASA,GAAE,OAAO,EAAE,MAAM,4BAA4B;AAAA,MACtD,KAAKA,GACF,OAAO,EACP,SAAS,EACT,IAAI,GAAG,EACP;AAAA,QACC,CAAC,MACC,OAAO,cAAc,KAAK,MAAM,IAAI,GAAI,CAAC,KACzC,KAAK,MAAM,IAAI,GAAI,KAAK,KACxB,KAAK,MAAM,IAAI,GAAI,IAAI,QAAS;AAAA,MACpC;AAAA,MACF,WAAWA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,OAAO,EAAE,KAAK;AAAA,MACvD,gBAAgBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,EAAE,KAAK;AAAA,MACxD,KAAK;AAAA,MACL,QAAQ;AAAA,IACV,CAAC,EACA,OAAO;AAAA,IACV,SAASA,GAAE,KAAK;AAAA,IAChB,WAAWA,GACR,OAAO;AAAA,MACN,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,aAAaA,GAAE,MAAM,CAACA,GAAE,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC7C,SAASA,GAAE,QAAQ,MAAM;AAAA,MACzB,KAAK;AAAA,IACP,CAAC,EACA,OAAO;AAAA,IACV,oBAAoB;AAAA,IACpB,SAASA,GACN,OAAO,EAAE,aAAa,MAAM,UAAUA,GAAE,QAAQ,yBAAyB,EAAE,CAAC,EAC5E,OAAO;AAAA,EACZ,CAAC,EACA,OAAO;AACZ;AAKO,IAAM,6BAA6C;AAAA,EAAa,MACrEA,GACG,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,eAAe;AAAA,IACf,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,WAAW;AAAA,IACX,aAAa;AAAA,IACb,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,qBAAqB;AAAA,IACrB,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,WAAWA,GAAE,QAAQ,MAAM;AAAA,IAC3B,eAAeA,GAAE,KAAK;AAAA,IACtB,YAAY;AAAA,EACd,CAAC,EACA,OAAO,EACP,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ;AAAA,IACtE,SAAS;AAAA,EACX,CAAC;AACL;AAKO,IAAM,uCAAuD;AAAA,EAAa,MAC/EA,GAAE,OAAO,EAAE,IAAI,MAAM,UAAU,SAAS,CAAC,EAAE,OAAO;AACpD;AAIO,IAAM,6BAA6C;AAAA,EAAa,MACrEA,GAAE,OAAO,EAAE,IAAI,MAAM,OAAO,SAAS,CAAC,EAAE,OAAO;AACjD;AAEO,IAAM,gCAAgD;AAAA,EAAa,MACxEA,GAAE,OAAO,EAAE,IAAI,MAAM,OAAO,YAAY,CAAC,EAAE,OAAO;AACpD;AAGO,IAAM,sCAAsD;AAAA,EAAa,MAC9EA,GACG,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,OAAO;AAAA,IACP,WAAW;AAAA,IACX,mBAAmB;AAAA,IACnB,yBAAyB;AAAA,IACzB,eAAe;AAAA,IACf,uBAAuBA,GAAE,MAAM;AAAA,MAC7BA,GAAE,QAAQ,CAAC;AAAA,MACXA,GAAE,QAAQ,CAAC;AAAA,MACXA,GAAE,QAAQ,CAAC;AAAA,MACXA,GAAE,QAAQ,CAAC;AAAA,MACXA,GAAE,QAAQ,CAAC;AAAA,MACXA,GAAE,QAAQ,CAAC;AAAA,IACb,CAAC;AAAA,IACD,gBAAgBA,GAAE,QAAQ,SAAS;AAAA,EACrC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,GAAG,QAAQ;AACvB,UAAM,MAAM;AAAA,MACV,EAAE,MAAM;AAAA,MACR,EAAE,MAAM;AAAA,MACR,EAAE,UAAU,OAAO;AAAA,MACnB,EAAE,UAAU,UAAU;AAAA,MACtB,EAAE,UAAU,UAAU;AAAA,MACtB,EAAE,UAAU;AAAA,MACZ,EAAE,UAAU,QAAQ;AAAA,IACtB;AACA,QAAI,IAAI,IAAI,GAAG,EAAE,SAAS;AACxB,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,EACL,CAAC;AACL;AAKA,IAAM,eAA+B;AAAA,EAAa,MAChDA,GACG,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR;AAAA,IACC,CAAC,MAAM;AACL,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,CAAC;AACrB,eACE,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,UAAU,CAAC,IAAI;AAAA,MAEvF,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,EAAE,SAAS,8DAA8D;AAAA,EAC3E;AACJ;AAKO,IAAM,iCAAiD;AAAA,EAAa,MACzEA,GACG,OAAO;AAAA,IACN,SAASA,GAAE,QAAQ,CAAC;AAAA,IACpB,OAAO;AAAA,IACP,yBAAyB;AAAA,IACzB,eAAe;AAAA,IACf,SAAS;AAAA,IACT,OAAO;AAAA,IACP,eAAe;AAAA,IACf,gBAAgB;AAAA,IAChB,WAAW;AAAA,IACX,SAASA,GAAE,QAAQ,yBAAyB;AAAA,IAC5C,aAAa;AAAA,IACb,QAAQA,GAAE,QAAQ,uCAAuC;AAAA,IACzD,eAAeA,GAAE,KAAK,CAAC,iBAAiB,UAAU,CAAC;AAAA,IACnD,SAASA,GACN,OAAO;AAAA,MACN,SAASA,GAAE,QAAQ,CAAC;AAAA,MACpB,WAAW;AAAA,MACX,eAAeA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MACxC,aAAaA,GAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IACjC,CAAC,EACA,OAAO;AAAA,EACZ,CAAC,EACA,OAAO;AACZ;AAGA,IAAM,cAAc;AAAA,EAClB,SAASA,GAAE,QAAQ,CAAC;AAAA,EACpB,OAAO;AAAA,EACP,yBAAyB;AAAA,EACzB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,OAAO;AAAA,EACP,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,WAAWA,GAAE,OAAO,EAAE,SAAS;AACjC;AAIO,IAAM,kCAAkD;AAAA,EAAa,MAC1EA,GACG,OAAO;AAAA,IACN,GAAG;AAAA,IACH,SAASA,GAAE,QAAQ,yBAAyB;AAAA,IAC5C,aAAa;AAAA,EACf,CAAC,EACA,OAAO;AACZ;AAKO,IAAM,wCAAwD;AAAA,EAAa,MAChFA,GACG,OAAO;AAAA,IACN,GAAG;AAAA,IACH,SAASA,GAAE,QAAQ,yBAAyB;AAAA,IAC5C,aAAa;AAAA,IACb,yBAAyB;AAAA,IACzB,aAAa;AAAA,IACb,oBAAoBA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAC9C,SAAS,2BAA2B,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI;AAAA,EAClE,CAAC,EACA,OAAO;AACZ;AAOO,IAAM,wCAAwD;AAAA,EAAa,MAChFA,GACG,OAAO;AAAA,IACN,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACjC,QAAQ;AAAA,IACR,oBAAoBA,GAAE,QAAQ,iCAAiC;AAAA,IAC/D,mBAAmBA,GAAE,QAAQ,CAAC;AAAA,IAC9B,iBAAiBA,GAAE,QAAQ,kCAAkC;AAAA,IAC7D,wBAAwBA,GAAE,QAAQ,CAAC;AAAA,IACnC,cAAcA,GAAE,QAAQ,OAAO;AAAA,IAC/B,WAAWA,GAAE,QAAQ,4DAA4D;AAAA,IACjF,gBAAgBA,GAAE,QAAQ,kBAAkB;AAAA,IAC5C,WAAWA,GACR,OAAO;AAAA,MACN,UAAUA,GAAE,QAAQ,mCAAmC;AAAA,MACvD,QAAQ;AAAA,MACR,YAAY,SAAS,IAAI,OAAO,IAAI;AAAA,MACpC,oBAAoBA,GAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,IAC/D,CAAC,EACA,OAAO;AAAA,EACZ,CAAC,EACA,OAAO;AACZ;","names":["z","z"]}