@shravansunder/agent-vm 0.0.1

package/dist/controller/controller-runtime.js

@@ -0,0 +1,135 @@
+import { createOpCliSecretResolver } from '@shravansunder/agent-vm-gondolin-core';
+import { startGatewayZone } from '../gateway/gateway-zone-orchestrator.js';
+import { runTaskWithResult } from '../shared/run-task.js';
+import { cleanToolVmWorkspace, createToolVm, resolveToolVmWorkspaceDirectory, } from '../tool-vm/tool-vm-lifecycle.js';
+import { createControllerRuntimeOperations, createStopControllerOperation, } from './controller-runtime-operations.js';
+import { createSecretResolverFromSystemConfig, findConfiguredZone, } from './controller-runtime-support.js';
+import { createControllerService } from './http/controller-http-routes.js';
+import { startControllerHttpServer } from './http/controller-http-server.js';
+import { createIdleReaper } from './leases/idle-reaper.js';
+import { createLeaseManager } from './leases/lease-manager.js';
+import { createTcpPool } from './leases/tcp-pool.js';
+export async function startControllerRuntime(options, dependencies) {
+    const now = dependencies.now ?? Date.now;
+    const runTaskStep = dependencies.runTask ?? (async (_title, fn) => await fn());
+    const secretResolver = await runTaskWithResult(runTaskStep, 'Resolving 1Password secrets', async () => await createSecretResolverFromSystemConfig(options.systemConfig, dependencies.createSecretResolver ?? createOpCliSecretResolver));
+    const createManagedToolVm = dependencies.createManagedToolVm ??
+        (async (toolVmOptions) => await createToolVm({
+            cacheDir: options.systemConfig.cacheDir,
+            profile: toolVmOptions.profile,
+            systemConfig: options.systemConfig,
+            tcpSlot: toolVmOptions.tcpSlot,
+            workspaceDir: toolVmOptions.workspaceDir,
+            zoneId: toolVmOptions.zoneId,
+        }));
+    const tcpPool = createTcpPool(options.systemConfig.tcpPool);
+    const leaseManager = createLeaseManager({
+        cleanWorkspace: async ({ profile, tcpSlot, zoneId }) => {
+            await cleanToolVmWorkspace(resolveToolVmWorkspaceDirectory({
+                profile,
+                tcpSlot,
+                zoneId,
+            }));
+        },
+        createManagedVm: async (leaseOptions) => await createManagedToolVm({
+            profile: leaseOptions.profile,
+            tcpSlot: leaseOptions.tcpSlot,
+            workspaceDir: leaseOptions.workspaceDir,
+            zoneId: leaseOptions.zoneId,
+        }),
+        now,
+        tcpPool,
+    });
+    const idleReaper = createIdleReaper({
+        getLeases: () => leaseManager.listLeases(),
+        now,
+        releaseLease: async (leaseId) => {
+            await leaseManager.releaseLease(leaseId);
+        },
+        ttlMs: 30 * 60 * 1000,
+    });
+    const reaperTimer = (dependencies.setIntervalImpl ?? setInterval)(() => void idleReaper.reapExpiredLeases(), 60_000);
+    const clearReaperTimer = () => (dependencies.clearIntervalImpl ?? clearInterval)(reaperTimer);
+    const releaseAllLeases = async () => {
+        for (const lease of leaseManager.listLeases()) {
+            // oxlint-disable-next-line eslint/no-await-in-loop -- sequential release avoids TCP slot races
+            await leaseManager.releaseLease(lease.id);
+        }
+    };
+    const startGateway = async () => await (dependencies.startGatewayZone ?? startGatewayZone)({
+        runTask: runTaskStep,
+        secretResolver,
+        systemConfig: options.systemConfig,
+        zoneId: options.zoneId,
+    });
+    let gateway;
+    const requireGateway = () => {
+        if (!gateway) {
+            throw new Error('Gateway runtime is unavailable because the last restart did not complete.');
+        }
+        return gateway;
+    };
+    await runTaskStep('Starting gateway zone', async () => {
+        gateway = await startGateway();
+    });
+    const stopGatewayZone = async () => {
+        if (!gateway) {
+            return;
+        }
+        await gateway.vm.close();
+    };
+    const restartGatewayZone = async () => {
+        gateway = undefined;
+        gateway = await startGateway();
+    };
+    const serverRef = {};
+    const controllerApp = createControllerService({
+        leaseManager,
+        operations: {
+            ...createControllerRuntimeOperations({
+                activeZoneId: options.zoneId,
+                getGateway: () => requireGateway(),
+                getZone: (zoneId) => findConfiguredZone(options.systemConfig, zoneId),
+                leaseManager,
+                restartGatewayZone,
+                secretResolver,
+                stopGatewayZone,
+                systemConfig: options.systemConfig,
+            }),
+            stopController: createStopControllerOperation({
+                clearReaperTimer,
+                closeControllerServer: () => setTimeout(() => void serverRef.current?.close(), 100),
+                getLeases: () => leaseManager.listLeases(),
+                releaseLease: async (leaseId) => await leaseManager.releaseLease(leaseId),
+                stopGatewayZone,
+            }),
+        },
+        systemConfig: options.systemConfig,
+    });
+    await runTaskStep(`Controller API on :${options.systemConfig.host.controllerPort}`, async () => {
+        serverRef.current = await (dependencies.startHttpServer ?? startControllerHttpServer)({
+            app: controllerApp,
+            port: options.systemConfig.host.controllerPort,
+        });
+    });
+    await idleReaper.reapExpiredLeases();
+    return {
+        async close() {
+            clearReaperTimer();
+            await releaseAllLeases();
+            try {
+                await stopGatewayZone();
+            }
+            finally {
+                await serverRef.current?.close();
+            }
+        },
+        controllerPort: options.systemConfig.host.controllerPort,
+        gateway: {
+            ingress: requireGateway().ingress,
+            processSpec: requireGateway().processSpec,
+            vm: requireGateway().vm,
+        },
+    };
+}
+//# sourceMappingURL=controller-runtime.js.map

package/dist/controller/controller-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-runtime.js","sourceRoot":"","sources":["../../src/controller/controller-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAkB,MAAM,uCAAuC,CAAC;AAElG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACN,oBAAoB,EACpB,YAAY,EACZ,+BAA+B,GAC/B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,iCAAiC,EACjC,6BAA6B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,oCAAoC,EACpC,kBAAkB,GAClB,MAAM,iCAAiC,CAAC;AAMzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAsC,EACtC,YAA2C;IAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACzC,MAAM,WAAW,GAChB,YAAY,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAc,EAAE,EAAuB,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAC7C,WAAW,EACX,6BAA6B,EAC7B,KAAK,IAAI,EAAE,CACV,MAAM,oCAAoC,CACzC,OAAO,CAAC,YAAY,EACpB,YAAY,CAAC,oBAAoB,IAAI,yBAAyB,CAC9D,CACF,CAAC;IACF,MAAM,mBAAmB,GACxB,YAAY,CAAC,mBAAmB;QAChC,CAAC,KAAK,EAAE,aAAa,EAAsB,EAAE,CAC5C,MAAM,YAAY,CAAC;YAClB,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;YACvC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,MAAM,EAAE,aAAa,CAAC,MAAM;SAC5B,CAAC,CAAC,CAAC;IACN,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACvC,cAAc,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACtD,MAAM,oBAAoB,CACzB,+BAA+B,CAAC;gBAC/B,OAAO;gBACP,OAAO;gBACP,MAAM;aACN,CAAC,CACF,CAAC;QACH,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CACvC,MAAM,mBAAmB,CAAC;YACzB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,MAAM,EAAE,YAAY,CAAC,MAAM;SAC3B,CAAC;QACH,GAAG;QACH,OAAO;KACP,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,gBAAgB,CAAC;QACnC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE;QAC1C,GAAG;QACH,YAAY,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE;YACvC,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KACrB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,eAAe,IAAI,WAAW,CAAC,CAChE,GAAG,EAAE,CAAC,KAAK,UAAU,CAAC,iBAAiB,EAAE,EACzC,MAAM,CACN,CAAC;IACF,MAAM,gBAAgB,GAAG,GAAS,EAAE,CACnC,CAAC,YAAY,CAAC,iBAAiB,IAAI,aAAa,CAAC,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QAClD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;YAC/C,+FAA+F;YAC/F,MAAM,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACF,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,IAA2D,EAAE,CACtF,MAAM,CAAC,YAAY,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC;QACzD,OAAO,EAAE,WAAW;QACpB,cAAc;QACd,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,CAAC;IACJ,IAAI,OAAiE,CAAC;IACtE,MAAM,cAAc,GAAG,GAAiD,EAAE;QACzE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,WAAW,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QACD,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,KAAK,IAAmB,EAAE;QACpD,OAAO,GAAG,SAAS,CAAC;QACpB,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,SAAS,GAA6C,EAAE,CAAC;IAC/D,MAAM,aAAa,GAAG,uBAAuB,CAAC;QAC7C,YAAY;QACZ,UAAU,EAAE;YACX,GAAG,iCAAiC,CAAC;gBACpC,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE;gBAClC,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;gBAC7E,YAAY;gBACZ,kBAAkB;gBAClB,cAAc;gBACd,eAAe;gBACf,YAAY,EAAE,OAAO,CAAC,YAAY;aAClC,CAAC;YACF,cAAc,EAAE,6BAA6B,CAAC;gBAC7C,gBAAgB;gBAChB,qBAAqB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC;gBACnF,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE;gBAC1C,YAAY,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC;gBACjF,eAAe;aACf,CAAC;SACF;QACD,YAAY,EAAE,OAAO,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,sBAAsB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9F,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,eAAe,IAAI,yBAAyB,CAAC,CAAC;YACrF,GAAG,EAAE,aAAa;YAClB,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc;SAC9C,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC;IAErC,OAAO;QACN,KAAK,CAAC,KAAK;YACV,gBAAgB,EAAE,CAAC;YACnB,MAAM,gBAAgB,EAAE,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,eAAe,EAAE,CAAC;YACzB,CAAC;oBAAS,CAAC;gBACV,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC;QACF,CAAC;QACD,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc;QACxD,OAAO,EAAE;YACR,OAAO,EAAE,cAAc,EAAE,CAAC,OAAO;YACjC,WAAW,EAAE,cAAc,EAAE,CAAC,WAAW;YACzC,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;SACvB;KACD,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-client.d.ts

@@ -0,0 +1,17 @@
+export interface ControllerClient {
+    destroyZone(zoneId: string, purge: boolean): Promise<unknown>;
+    enableZoneSsh(zoneId: string): Promise<unknown>;
+    execInZone?(zoneId: string, command: string): Promise<unknown>;
+    getControllerStatus(): Promise<unknown>;
+    getZoneLogs(zoneId: string): Promise<unknown>;
+    listLeases(): Promise<unknown>;
+    refreshZoneCredentials(zoneId: string): Promise<unknown>;
+    releaseLease(leaseId: string): Promise<void>;
+    stopController(): Promise<unknown>;
+    upgradeZone(zoneId: string): Promise<unknown>;
+}
+export declare function createControllerClient(options: {
+    readonly baseUrl: string;
+    readonly fetchImpl?: (input: string | URL, init?: RequestInit) => Promise<Response>;
+}): ControllerClient;
+//# sourceMappingURL=controller-client.d.ts.map

package/dist/controller/http/controller-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-client.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C;AAkBD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACpF,GAAG,gBAAgB,CA+DnB"}

package/dist/controller/http/controller-client.js

@@ -0,0 +1,76 @@
+async function readJsonResponse(response, context) {
+    const responseBody = await response.text().catch(() => '(unreadable)');
+    if (!response.ok) {
+        throw new Error(`${context} failed with HTTP ${response.status}: ${responseBody}`);
+    }
+    try {
+        return JSON.parse(responseBody);
+    }
+    catch (error) {
+        throw new Error(`${context} returned invalid JSON: ${error instanceof Error ? error.message : String(error)}. Body: ${responseBody}`, { cause: error });
+    }
+}
+export function createControllerClient(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const baseUrl = options.baseUrl.replace(/\/$/u, '');
+    return {
+        enableZoneSsh: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/enable-ssh`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Enable SSH for zone '${zoneId}'`);
+        },
+        execInZone: async (zoneId, command) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/execute-command`, {
+                body: JSON.stringify({ command }),
+                headers: {
+                    'content-type': 'application/json',
+                },
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Execute command in zone '${zoneId}'`);
+        },
+        destroyZone: async (zoneId, purge) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/destroy`, {
+                body: JSON.stringify({ purge }),
+                headers: {
+                    'content-type': 'application/json',
+                },
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Destroy zone '${zoneId}'`);
+        },
+        getControllerStatus: async () => {
+            const response = await fetchImpl(`${baseUrl}/controller-status`);
+            return await readJsonResponse(response, 'Get controller status');
+        },
+        getZoneLogs: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/logs`);
+            return await readJsonResponse(response, `Get logs for zone '${zoneId}'`);
+        },
+        refreshZoneCredentials: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/credentials/refresh`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Refresh credentials for zone '${zoneId}'`);
+        },
+        listLeases: async () => {
+            const response = await fetchImpl(`${baseUrl}/leases`);
+            return await readJsonResponse(response, 'List leases');
+        },
+        releaseLease: async (leaseId) => {
+            await fetchImpl(`${baseUrl}/lease/${leaseId}`, { method: 'DELETE' });
+        },
+        stopController: async () => {
+            const response = await fetchImpl(`${baseUrl}/stop-controller`, { method: 'POST' });
+            return await readJsonResponse(response, 'Stop controller');
+        },
+        upgradeZone: async (zoneId) => {
+            const response = await fetchImpl(`${baseUrl}/zones/${zoneId}/upgrade`, {
+                method: 'POST',
+            });
+            return await readJsonResponse(response, `Upgrade zone '${zoneId}'`);
+        },
+    };
+}
+//# sourceMappingURL=controller-client.js.map

package/dist/controller/http/controller-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-client.js","sourceRoot":"","sources":["../../../src/controller/http/controller-client.ts"],"names":[],"mappings":"AAaA,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,OAAe;IAClE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,YAAY,EAAE,EACpH,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACA,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpD,OAAO;QACN,aAAa,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,aAAa,EAAE;gBACzE,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,kBAAkB,EAAE;gBAC9E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;gBACjC,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;iBAClC;gBACD,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,MAAM,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAE,KAAc,EAAoB,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,UAAU,EAAE;gBACtE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC/B,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;iBAClC;gBACD,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,mBAAmB,EAAE,KAAK,IAAsB,EAAE;YACjD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,oBAAoB,CAAC,CAAC;YACjE,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAClE,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC;YACpE,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,sBAAsB,MAAM,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,sBAAsB,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YAClE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,sBAAsB,EAAE;gBAClF,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iCAAiC,MAAM,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,UAAU,EAAE,KAAK,IAAsB,EAAE;YACxC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;YACtD,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,OAAe,EAAiB,EAAE;YACtD,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,cAAc,EAAE,KAAK,IAAsB,EAAE;YAC5C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAC5D,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAc,EAAoB,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,MAAM,UAAU,EAAE;gBACtE,MAAM,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-http-route-support.d.ts

@@ -0,0 +1,26 @@
+import type { Lease, LeaseManager } from '../leases/lease-manager.js';
+export interface ControllerRouteOperations {
+    readonly destroyZone: (zoneId: string, purge: boolean) => Promise<unknown>;
+    readonly enableSshForZone?: (zoneId: string) => Promise<unknown>;
+    readonly execInZone?: (zoneId: string, command: string) => Promise<unknown>;
+    readonly getStatus: () => Promise<unknown>;
+    readonly getZoneLogs: (zoneId: string) => Promise<unknown>;
+    readonly refreshZoneCredentials: (zoneId: string) => Promise<unknown>;
+    readonly stopController?: () => Promise<unknown>;
+    readonly upgradeZone: (zoneId: string) => Promise<unknown>;
+}
+export type ControllerLeaseManager = Pick<LeaseManager, 'createLease' | 'getLease' | 'listLeases' | 'releaseLease'>;
+export declare function readIdentityPemFromFile(identityFilePath: string): Promise<string>;
+export declare function serializeLeaseForResponse(lease: Lease, readIdentityPem: (identityFilePath: string) => Promise<string>): Promise<{
+    readonly leaseId: string;
+    readonly ssh: {
+        readonly host: string;
+        readonly identityPem: string;
+        readonly knownHostsLine: string;
+        readonly port: number;
+        readonly user: string;
+    };
+    readonly tcpSlot: number;
+    readonly workdir: '/workspace';
+}>;
+//# sourceMappingURL=controller-http-route-support.d.ts.map

package/dist/controller/http/controller-http-route-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-route-support.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-http-route-support.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,QAAQ,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACxC,YAAY,EACZ,aAAa,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAC1D,CAAC;AAEF,wBAAsB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEvF;AAED,wBAAsB,yBAAyB,CAC9C,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAC5D,OAAO,CAAC;IACV,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAC/B,CAAC,CAeD"}

package/dist/controller/http/controller-http-route-support.js

@@ -0,0 +1,21 @@
+import fs from 'node:fs/promises';
+export async function readIdentityPemFromFile(identityFilePath) {
+    return await fs.readFile(identityFilePath, 'utf8');
+}
+export async function serializeLeaseForResponse(lease, readIdentityPem) {
+    return {
+        leaseId: lease.id,
+        ssh: {
+            host: `tool-${lease.tcpSlot}.vm.host`,
+            identityPem: lease.sshAccess.identityFile
+                ? await readIdentityPem(lease.sshAccess.identityFile)
+                : '',
+            knownHostsLine: '',
+            port: 22,
+            user: lease.sshAccess.user ?? 'root',
+        },
+        tcpSlot: lease.tcpSlot,
+        workdir: '/workspace',
+    };
+}
+//# sourceMappingURL=controller-http-route-support.js.map

package/dist/controller/http/controller-http-route-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-route-support.js","sourceRoot":"","sources":["../../../src/controller/http/controller-http-route-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAoBlC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,gBAAwB;IACrE,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAY,EACZ,eAA8D;IAa9D,OAAO;QACN,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,GAAG,EAAE;YACJ,IAAI,EAAE,QAAQ,KAAK,CAAC,OAAO,UAAU;YACrC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY;gBACxC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;gBACrD,CAAC,CAAC,EAAE;YACL,cAAc,EAAE,EAAE;YAClB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM;SACpC;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,YAAY;KACrB,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-http-routes.d.ts

@@ -0,0 +1,20 @@
+import { Hono } from 'hono';
+import type { SystemConfig } from '../../config/system-config.js';
+import { type ControllerLeaseManager, type ControllerRouteOperations } from './controller-http-route-support.js';
+export declare function createControllerApp(options: {
+    readonly leaseManager: ControllerLeaseManager;
+    readonly readIdentityPem?: (identityFilePath: string) => Promise<string>;
+    readonly toolProfiles?: Record<string, {
+        readonly cpus: number;
+        readonly memory: string;
+        readonly workspaceRoot: string;
+    }>;
+    readonly zoneToolProfiles?: Record<string, string>;
+    readonly operations?: ControllerRouteOperations;
+}): Hono;
+export declare function createControllerService(options: {
+    readonly leaseManager: ControllerLeaseManager;
+    readonly operations?: ControllerRouteOperations;
+    readonly systemConfig: SystemConfig;
+}): Hono;
+//# sourceMappingURL=controller-http-routes.d.ts.map

package/dist/controller/http/controller-http-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-routes.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-http-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACN,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAG9B,MAAM,oCAAoC,CAAC;AAI5C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC5C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAC7B,MAAM,EACN;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAClF,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC;CAChD,GAAG,IAAI,CA2EP;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAChD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC,GAAG,IAAI,CAkBP"}

package/dist/controller/http/controller-http-routes.js

@@ -0,0 +1,83 @@
+import { Hono } from 'hono';
+import { readIdentityPemFromFile, serializeLeaseForResponse, } from './controller-http-route-support.js';
+import { controllerLeaseCreateRequestSchema } from './controller-request-schemas.js';
+import { registerControllerZoneOperationRoutes } from './controller-zone-operation-routes.js';
+export function createControllerApp(options) {
+    const app = new Hono();
+    const readIdentityPem = options.readIdentityPem ?? readIdentityPemFromFile;
+    app.post('/lease', async (context) => {
+        try {
+            const parsedPayload = controllerLeaseCreateRequestSchema.safeParse(await context.req.json());
+            if (!parsedPayload.success) {
+                return context.json({
+                    error: 'invalid-lease-request',
+                    issues: parsedPayload.error.issues,
+                }, 400);
+            }
+            const payload = parsedPayload.data;
+            if (options.zoneToolProfiles && !(payload.zoneId in options.zoneToolProfiles)) {
+                return context.json({ error: `Unknown zone '${payload.zoneId}'` }, 400);
+            }
+            const resolvedProfileId = options.zoneToolProfiles?.[payload.zoneId] ?? payload.profileId;
+            const toolProfile = options.toolProfiles?.[resolvedProfileId];
+            if (!toolProfile) {
+                return context.json({ error: `Unknown tool profile '${resolvedProfileId}'` }, 400);
+            }
+            const lease = await options.leaseManager.createLease({
+                agentWorkspaceDir: payload.agentWorkspaceDir,
+                profile: toolProfile,
+                profileId: resolvedProfileId,
+                scopeKey: payload.scopeKey,
+                workspaceDir: payload.workspaceDir,
+                zoneId: payload.zoneId,
+            });
+            return context.json(await serializeLeaseForResponse(lease, readIdentityPem));
+        }
+        catch (error) {
+            return context.json({
+                error: error instanceof Error ? error.message : 'lease-creation-failed',
+            }, 503);
+        }
+    });
+    app.get('/lease/:leaseId', async (context) => {
+        const lease = options.leaseManager.getLease(context.req.param('leaseId'));
+        if (!lease) {
+            return context.json({ error: 'Lease not found' }, 404);
+        }
+        return context.json(await serializeLeaseForResponse(lease, readIdentityPem));
+    });
+    app.get('/leases', (context) => {
+        const leases = options.leaseManager.listLeases().map((lease) => ({
+            createdAt: lease.createdAt,
+            id: lease.id,
+            lastUsedAt: lease.lastUsedAt,
+            profileId: lease.profileId,
+            scopeKey: lease.scopeKey,
+            tcpSlot: lease.tcpSlot,
+            zoneId: lease.zoneId,
+        }));
+        return context.json(leases);
+    });
+    app.delete('/lease/:leaseId', async (context) => {
+        await options.leaseManager.releaseLease(context.req.param('leaseId'));
+        return context.body(null, 204);
+    });
+    if (options.operations) {
+        registerControllerZoneOperationRoutes(app, options.operations);
+    }
+    return app;
+}
+export function createControllerService(options) {
+    const app = createControllerApp({
+        leaseManager: options.leaseManager,
+        toolProfiles: options.systemConfig.toolProfiles,
+        zoneToolProfiles: Object.fromEntries(options.systemConfig.zones.map((zone) => [zone.id, zone.toolProfile])),
+        ...(options.operations ? { operations: options.operations } : {}),
+    });
+    app.get('/health', (context) => context.json({
+        ok: true,
+        port: options.systemConfig.host.controllerPort,
+    }));
+    return app;
+}
+//# sourceMappingURL=controller-http-routes.js.map

package/dist/controller/http/controller-http-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-routes.js","sourceRoot":"","sources":["../../../src/controller/http/controller-http-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAGN,uBAAuB,EACvB,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,qCAAqC,EAAE,MAAM,uCAAuC,CAAC;AAE9F,MAAM,UAAU,mBAAmB,CAAC,OASnC;IACA,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,uBAAuB,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpC,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,kCAAkC,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC5B,OAAO,OAAO,CAAC,IAAI,CAClB;oBACC,KAAK,EAAE,uBAAuB;oBAC9B,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;iBAClC,EACD,GAAG,CACH,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC;YACnC,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/E,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC;YAC1F,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,iBAAiB,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;gBACpD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,yBAAyB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,IAAI,CAClB;gBACC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;aACvE,EACD,GAAG,CACH,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,yBAAyB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC,CAAC;QACJ,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,qCAAqC,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAIvC;IACA,MAAM,GAAG,GAAG,mBAAmB,CAAC;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,YAAY;QAC/C,gBAAgB,EAAE,MAAM,CAAC,WAAW,CACnC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CACrE;QACD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc;KAC9C,CAAC,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/controller/http/controller-http-server.d.ts

@@ -0,0 +1,8 @@
+import type { Hono } from 'hono';
+export declare function startControllerHttpServer(options: {
+    readonly app: Hono;
+    readonly port: number;
+}): Promise<{
+    close(): Promise<void>;
+}>;
+//# sourceMappingURL=controller-http-server.d.ts.map

package/dist/controller/http/controller-http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-server.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-http-server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACxD,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IACX,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB,CAAC,CAmBD"}

package/dist/controller/http/controller-http-server.js

@@ -0,0 +1,21 @@
+import { serve } from '@hono/node-server';
+export async function startControllerHttpServer(options) {
+    const server = serve({
+        fetch: options.app.fetch,
+        port: options.port,
+    });
+    return {
+        async close() {
+            await new Promise((resolve, reject) => {
+                server.close((error) => {
+                    if (error) {
+                        reject(error);
+                        return;
+                    }
+                    resolve();
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=controller-http-server.js.map

package/dist/controller/http/controller-http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-http-server.js","sourceRoot":"","sources":["../../../src/controller/http/controller-http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG1C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAG/C;IAGA,MAAM,MAAM,GAAG,KAAK,CAAC;QACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO;QACN,KAAK,CAAC,KAAK;YACV,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;oBAC9B,IAAI,KAAK,EAAE,CAAC;wBACX,MAAM,CAAC,KAAK,CAAC,CAAC;wBACd,OAAO;oBACR,CAAC;oBACD,OAAO,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/controller/http/controller-request-schemas.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+export declare const controllerLeaseCreateRequestSchema: z.ZodObject<{
+    agentWorkspaceDir: z.ZodString;
+    profileId: z.ZodString;
+    scopeKey: z.ZodString;
+    workspaceDir: z.ZodString;
+    zoneId: z.ZodString;
+}, z.core.$strip>;
+export declare const controllerDestroyZoneRequestSchema: z.ZodObject<{
+    purge: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const controllerExecuteCommandRequestSchema: z.ZodObject<{
+    command: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=controller-request-schemas.d.ts.map

package/dist/controller/http/controller-request-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-request-schemas.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-request-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kCAAkC;;;;;;iBAM7C,CAAC;AAEH,eAAO,MAAM,kCAAkC;;iBAE7C,CAAC;AAEH,eAAO,MAAM,qCAAqC;;iBAEhD,CAAC"}

package/dist/controller/http/controller-request-schemas.js

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+export const controllerLeaseCreateRequestSchema = z.object({
+    agentWorkspaceDir: z.string().min(1),
+    profileId: z.string().min(1),
+    scopeKey: z.string().min(1),
+    workspaceDir: z.string().min(1),
+    zoneId: z.string().min(1),
+});
+export const controllerDestroyZoneRequestSchema = z.object({
+    purge: z.boolean().optional(),
+});
+export const controllerExecuteCommandRequestSchema = z.object({
+    command: z.string().min(1),
+});
+//# sourceMappingURL=controller-request-schemas.js.map

package/dist/controller/http/controller-request-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-request-schemas.js","sourceRoot":"","sources":["../../../src/controller/http/controller-request-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC"}

package/dist/controller/http/controller-zone-operation-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { ControllerRouteOperations } from './controller-http-route-support.js';
+export declare function registerControllerZoneOperationRoutes(app: Hono, operations: ControllerRouteOperations): void;
+//# sourceMappingURL=controller-zone-operation-routes.d.ts.map

package/dist/controller/http/controller-zone-operation-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-zone-operation-routes.d.ts","sourceRoot":"","sources":["../../../src/controller/http/controller-zone-operation-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAMpF,wBAAgB,qCAAqC,CACpD,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,yBAAyB,GACnC,IAAI,CA8EN"}

package/dist/controller/http/controller-zone-operation-routes.js

@@ -0,0 +1,54 @@
+import { controllerDestroyZoneRequestSchema, controllerExecuteCommandRequestSchema, } from './controller-request-schemas.js';
+export function registerControllerZoneOperationRoutes(app, operations) {
+    app.get('/controller-status', async (context) => context.json(await operations.getStatus()));
+    app.get('/zones/:zoneId/logs', async (context) => context.json(await operations.getZoneLogs(context.req.param('zoneId'))));
+    app.post('/zones/:zoneId/credentials/refresh', async (context) => context.json(await operations.refreshZoneCredentials(context.req.param('zoneId'))));
+    app.post('/zones/:zoneId/destroy', async (context) => {
+        const parsedPayload = controllerDestroyZoneRequestSchema.safeParse(await context.req.json());
+        if (!parsedPayload.success) {
+            return context.json({
+                error: 'invalid-destroy-request',
+                issues: parsedPayload.error.issues,
+            }, 400);
+        }
+        const payload = parsedPayload.data;
+        return context.json(await operations.destroyZone(context.req.param('zoneId'), payload.purge === true));
+    });
+    app.post('/zones/:zoneId/upgrade', async (context) => context.json(await operations.upgradeZone(context.req.param('zoneId'))));
+    if (operations.enableSshForZone) {
+        app.post('/zones/:zoneId/enable-ssh', async (context) => {
+            try {
+                return context.json(await operations.enableSshForZone?.(context.req.param('zoneId')));
+            }
+            catch (error) {
+                return context.json({
+                    error: error instanceof Error ? error.message : 'zone-ssh-enable-failed',
+                }, 500);
+            }
+        });
+    }
+    if (operations.execInZone) {
+        app.post('/zones/:zoneId/execute-command', async (context) => {
+            const parsedPayload = controllerExecuteCommandRequestSchema.safeParse(await context.req.json());
+            if (!parsedPayload.success) {
+                return context.json({
+                    error: 'invalid-execute-command-request',
+                    issues: parsedPayload.error.issues,
+                }, 400);
+            }
+            const payload = parsedPayload.data;
+            try {
+                return context.json(await operations.execInZone?.(context.req.param('zoneId'), payload.command));
+            }
+            catch (error) {
+                return context.json({
+                    error: error instanceof Error ? error.message : 'zone-command-execution-failed',
+                }, 500);
+            }
+        });
+    }
+    if (operations.stopController) {
+        app.post('/stop-controller', async (context) => context.json(await operations.stopController?.()));
+    }
+}
+//# sourceMappingURL=controller-zone-operation-routes.js.map

package/dist/controller/http/controller-zone-operation-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-zone-operation-routes.js","sourceRoot":"","sources":["../../../src/controller/http/controller-zone-operation-routes.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,kCAAkC,EAClC,qCAAqC,GACrC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,UAAU,qCAAqC,CACpD,GAAS,EACT,UAAqC;IAErC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7F,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAChD,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CACvE,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAChE,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAClF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,aAAa,GAAG,kCAAkC,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,IAAI,CAClB;gBACC,KAAK,EAAE,yBAAyB;gBAChC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;aAClC,EACD,GAAG,CACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAClB,MAAM,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CACjF,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CACpD,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CACvE,CAAC;IAEF,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvD,IAAI,CAAC;gBACJ,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,OAAO,CAAC,IAAI,CAClB;oBACC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;iBACxE,EACD,GAAG,CACH,CAAC;YACH,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC5D,MAAM,aAAa,GAAG,qCAAqC,CAAC,SAAS,CACpE,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CACxB,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC5B,OAAO,OAAO,CAAC,IAAI,CAClB;oBACC,KAAK,EAAE,iCAAiC;oBACxC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;iBAClC,EACD,GAAG,CACH,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC;gBACJ,OAAO,OAAO,CAAC,IAAI,CAClB,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAC3E,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,OAAO,CAAC,IAAI,CAClB;oBACC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;iBAC/E,EACD,GAAG,CACH,CAAC;YACH,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CACjD,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/controller/leases/idle-reaper.d.ts

@@ -0,0 +1,12 @@
+export declare function createIdleReaper(options: {
+    readonly getLeases: () => {
+        readonly id: string;
+        readonly lastUsedAt: number;
+    }[];
+    readonly now: () => number;
+    readonly releaseLease: (leaseId: string) => Promise<void>;
+    readonly ttlMs: number;
+}): {
+    reapExpiredLeases(): Promise<void>;
+};
+//# sourceMappingURL=idle-reaper.d.ts.map

package/dist/controller/leases/idle-reaper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-reaper.d.ts","sourceRoot":"","sources":["../../../src/controller/leases/idle-reaper.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM;QACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,GAAG;IACH,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC,CAaA"}

package/dist/controller/leases/idle-reaper.js

@@ -0,0 +1,15 @@
+export function createIdleReaper(options) {
+    return {
+        async reapExpiredLeases() {
+            const expiredLeaseIds = options
+                .getLeases()
+                .filter((lease) => options.now() - lease.lastUsedAt > options.ttlMs)
+                .map((lease) => lease.id);
+            for (const leaseId of expiredLeaseIds) {
+                // oxlint-disable-next-line eslint/no-await-in-loop -- release must stay sequential to avoid TCP pool races
+                await options.releaseLease(leaseId);
+            }
+        },
+    };
+}
+//# sourceMappingURL=idle-reaper.js.map

package/dist/controller/leases/idle-reaper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-reaper.js","sourceRoot":"","sources":["../../../src/controller/leases/idle-reaper.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB,CAAC,OAQhC;IAGA,OAAO;QACN,KAAK,CAAC,iBAAiB;YACtB,MAAM,eAAe,GAAG,OAAO;iBAC7B,SAAS,EAAE;iBACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;iBACnE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACvC,2GAA2G;gBAC3G,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}