@struktoai/mirage-dsh 0.0.7-alpha.2 → 0.0.7

package/dist/chunk-T4BSJAGN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/spill-store.ts"],"sourcesContent":["// ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n// ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========\n\nimport { Buffer } from 'node:buffer'\nimport { createHash, randomBytes } from 'node:crypto'\nimport { posix } from 'node:path'\nimport type { Context } from '@deepseek-ai/cordis'\nimport { SpillLocator, SpillStore } from '@deepseek-ai/dsh-spill'\nimport type { SaveTextSpill, SpillRef } from '@deepseek-ai/dsh-spill'\nimport { ensureDirPath } from './spill.ts'\n\n/** The workspace directory spill artifacts land under when none is configured. */\nconst DEFAULT_SPILL_DIR = '/tmp/dsh-spill'\n\n/** Bytes of randomness prefixed to a spill file name; 12 hex characters. */\nconst NAME_PREFIX_BYTES = 6\n\n/** Hex characters of the session-id digest that names a session's directory. */\nconst SESSION_DIGEST_CHARS = 12\n\n/** Configuration for the mirage spill store. */\nexport interface MirageSpillConfig {\n  /**\n   * Workspace directory the artifacts are written under, one\n   * subdirectory per session. Absolute, and normalized before use; must\n   * fall inside a mount this world can write, and the default sits on\n   * the `/tmp` ram mount the bundle patch provides.\n   */\n  dir?: string\n}\n\n/**\n * Encode one caller-supplied string as a single safe path segment.\n *\n * `suggestedName` is a hint from a tool, never a path: it may be empty,\n * may spell `..`, and may carry separators or control characters. Only\n * the portable filename characters survive as themselves; everything\n * else, `~` included, becomes `~XXXX` so the encoding stays reversible\n * and cannot collide with a name that was already safe.\n *\n * @param raw the caller's suggested name.\n * @returns one path segment containing no separator and no traversal.\n */\nexport function encodeSegment(raw: string): string {\n  if (raw.length === 0) return '~'\n  // `.` is a portable filename character, so the loop below would pass\n  // both of these through unchanged and hand a traversal to the join.\n  if (raw === '.') return '~002E'\n  if (raw === '..') return '~002E~002E'\n  let out = ''\n  for (const ch of raw) {\n    const code = ch.codePointAt(0) ?? 0\n    out +=\n      ch !== '~' && /^[A-Za-z0-9._-]$/.test(ch)\n        ? ch\n        : `~${code.toString(16).toUpperCase().padStart(4, '0')}`\n  }\n  return out\n}\n\n/**\n * The directory name one session's artifacts share.\n *\n * The id is digested rather than spelled out: a session id is an\n * identifier the host chose, and a directory listing an agent can read\n * is no place to republish it.\n *\n * @param sessionId the owning session's id.\n * @returns a single path segment naming that session's directory.\n */\nexport function sessionDirName(sessionId: string): string {\n  const digest = createHash('sha256').update(sessionId).digest('hex')\n  return `session-${digest.slice(0, SESSION_DIGEST_CHARS)}`\n}\n\n/**\n * Mirage-backed implementation of `ctx.spillStore`.\n *\n * The spill policy replaces an oversized tool result with a preview and\n * a locator, telling the model to read or grep it for the rest. That\n * only works if the locator names a file the model can reach, and in a\n * mirage world the model reaches the workspace, not the host: a spill\n * written to the harness's own disk hands it a path its next `grep`\n * cannot open, which reads as output the harness lost. So the artifact\n * is written through the same dispatcher every other effect in this world\n * passes, and the locator is an ordinary workspace path.\n *\n * The seam asks for a private location. mirage has no permission bits\n * to offer: the workspace is the boundary, and a deployment that needs\n * the artifacts out of the agent's reach puts `dir` on a mount the\n * session has no grant for.\n */\nexport class MirageSpillStore extends SpillStore {\n  static readonly inject = ['mirage']\n\n  private readonly dir: string\n\n  constructor(ctx: Context, config: MirageSpillConfig = {}) {\n    super(ctx)\n    const dir = config.dir ?? DEFAULT_SPILL_DIR\n    if (!posix.isAbsolute(dir)) {\n      throw new Error(`mirage: spill dir must be an absolute workspace path, got ${dir}`)\n    }\n    // Canonical once, here, rather than per save: a `.` or `..` left in\n    // the path is written literally by the dispatcher and normalized away\n    // by everything that reads a locator back, so the artifact lands on\n    // a key neither the shell nor the fs seam can address. That is the\n    // dead locator this store exists to prevent.\n    this.dir = posix.resolve('/', dir)\n  }\n\n  async saveText(input: SaveTextSpill): Promise<SpillRef> {\n    const workspace = await this.ctx.mirage.ready\n    const dir = posix.join(this.dir, sessionDirName(input.owner.sessionId))\n    // Derived from the suggested name, never equal to it: the random\n    // prefix is what keeps two results with one suggested name apart.\n    const name = `${randomBytes(NAME_PREFIX_BYTES).toString('hex')}-${encodeSegment(input.suggestedName)}`\n    const path = posix.join(dir, name)\n    try {\n      await ensureDirPath(\n        { exists: (p) => workspace.vfs.exists(p), mkdir: (p) => workspace.vfs.mkdir(p) },\n        dir,\n      )\n      await workspace.vfs.write(path, input.content)\n    } catch (err) {\n      // Rejecting is the contract: the spill policy keeps the inline\n      // result on a failure, which is a bounded answer, where a locator\n      // pointing at a file that was never written is a dead end the\n      // model cannot tell from a real one.\n      throw new Error(`mirage: cannot write spill artifact to ${path}`, { cause: err })\n    }\n    return {\n      locator: SpillLocator(path),\n      bytes: Buffer.byteLength(input.content, 'utf8'),\n      retrievalHint: 'Use read with offset/limit, or grep this workspace path to search within it.',\n    }\n  }\n}\n"],"mappings":";;;;;AAcA,SAAS,cAAc;AACvB,SAAS,YAAY,mBAAmB;AACxC,SAAS,aAAa;AAEtB,SAAS,cAAc,kBAAkB;AAKzC,IAAM,oBAAoB;AAG1B,IAAM,oBAAoB;AAG1B,IAAM,uBAAuB;AAyBtB,SAAS,cAAc,KAAqB;AACjD,MAAI,IAAI,WAAW,EAAG,QAAO;AAG7B,MAAI,QAAQ,IAAK,QAAO;AACxB,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,MAAM;AACV,aAAW,MAAM,KAAK;AACpB,UAAM,OAAO,GAAG,YAAY,CAAC,KAAK;AAClC,WACE,OAAO,OAAO,mBAAmB,KAAK,EAAE,IACpC,KACA,IAAI,KAAK,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EAC5D;AACA,SAAO;AACT;AAYO,SAAS,eAAe,WAA2B;AACxD,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAClE,SAAO,WAAW,OAAO,MAAM,GAAG,oBAAoB,CAAC;AACzD;AAmBO,IAAM,mBAAN,cAA+B,WAAW;AAAA,EAC/C,OAAgB,SAAS,CAAC,QAAQ;AAAA,EAEjB;AAAA,EAEjB,YAAY,KAAc,SAA4B,CAAC,GAAG;AACxD,UAAM,GAAG;AACT,UAAM,MAAM,OAAO,OAAO;AAC1B,QAAI,CAAC,MAAM,WAAW,GAAG,GAAG;AAC1B,YAAM,IAAI,MAAM,6DAA6D,GAAG,EAAE;AAAA,IACpF;AAMA,SAAK,MAAM,MAAM,QAAQ,KAAK,GAAG;AAAA,EACnC;AAAA,EAEA,MAAM,SAAS,OAAyC;AACtD,UAAM,YAAY,MAAM,KAAK,IAAI,OAAO;AACxC,UAAM,MAAM,MAAM,KAAK,KAAK,KAAK,eAAe,MAAM,MAAM,SAAS,CAAC;AAGtE,UAAM,OAAO,GAAG,YAAY,iBAAiB,EAAE,SAAS,KAAK,CAAC,IAAI,cAAc,MAAM,aAAa,CAAC;AACpG,UAAM,OAAO,MAAM,KAAK,KAAK,IAAI;AACjC,QAAI;AACF,YAAM;AAAA,QACJ,EAAE,QAAQ,CAAC,MAAM,UAAU,IAAI,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,UAAU,IAAI,MAAM,CAAC,EAAE;AAAA,QAC/E;AAAA,MACF;AACA,YAAM,UAAU,IAAI,MAAM,MAAM,MAAM,OAAO;AAAA,IAC/C,SAAS,KAAK;AAKZ,YAAM,IAAI,MAAM,0CAA0C,IAAI,IAAI,EAAE,OAAO,IAAI,CAAC;AAAA,IAClF;AACA,WAAO;AAAA,MACL,SAAS,aAAa,IAAI;AAAA,MAC1B,OAAO,OAAO,WAAW,MAAM,SAAS,MAAM;AAAA,MAC9C,eAAe;AAAA,IACjB;AAAA,EACF;AACF;","names":[]}

package/dist/{fs-B3Zi9oo6.d.ts → fs-BNOIFi9o.d.ts}

@@ -6,18 +6,24 @@ type SandboxPolicy = Parameters<FileSystem['writeText']>[4];
 interface MirageFsConfig {
     /** Virtual base directory for relative paths. Defaults to `/`. */
     cwd?: string;
+    /**
+     * Read and write as this named workspace session, so the profile
+     * that confines the session's shell confines its file tools too. The
+     * workspace's default session otherwise.
+     */
+    sessionId?: string;
     /** Exclusive byte limit on each overwrite-diff side. Defaults to 10 MiB. */
     diffBasisMaxBytes?: number;
 }
 /**
  * Mirage-backed implementation of `ctx.fs`. Targets are canonical virtual
  * paths (namespace symlinks followed), every operation walks the workspace
- * op door — session grants, admission policies, cache read-through and
+ * dispatcher — session grants, admission policies, cache read-through and
  * post-write invalidation all fire exactly as they do for a shell command —
  * and `processPath` answers in the same virtual path space the mirage shell
  * executes in, so the two providers share one execution world.
  *
- * One limit worth stating: mirage's op facade takes no `AbortSignal`, so
+ * One limit worth stating: mirage's `ws.vfs` takes no `AbortSignal`, so
  * cancellation is honored at this adapter's own boundaries (before a
  * dispatch, between listing entries) and not inside a single op. A long
  * read from a remote backend therefore runs to completion after the
@@ -27,11 +33,18 @@ declare class MirageFileSystem extends FileSystem {
     static readonly inject: string[];
     private fsOps;
     private readonly cwd;
+    private readonly sessionId;
     private readonly diffBasisMaxBytes;
     private readonly locks;
     constructor(ctx: Context, config?: MirageFsConfig);
-    private ops;
-    private get links();
+    private files;
+    /**
+     * The namespace as the session this adapter's ops run as sees it: the
+     * dispatcher's reader, so a link the session cannot see is never followed
+     * (the typed path reaches the dispatcher and is refused as absent, not
+     * resolved to the visible target it points at), and never listed.
+     */
+    private get reader();
     /**
      * The same confinement claim `MirageShellExecutor` makes, off the same
      * fact and for the same reason: with every runtime reaching only the
@@ -82,6 +95,22 @@ declare class MirageFileSystem extends FileSystem {
         signal?: AbortSignal;
     }): Promise<FsTarget>;
     processPath(target: FsTarget): string;
+    /**
+     * The workspace path naming the same file as `hostPath`, when a mount
+     * puts one there.
+     *
+     * Most of this world has no host spelling at all: an S3 key, a Slack
+     * message and a Notion row are not files the harness could open, and
+     * claiming otherwise would hand the caller a path that reads as the
+     * wrong bytes. A disk mount is the one place the two worlds hold the
+     * same file, so it is the one place a host path is answerable; every
+     * other mount declines, and so does a workspace still building.
+     *
+     * @param hostPath absolute path in the harness host filesystem.
+     * @returns the virtual path for the same file, or undefined when no
+     *   mount maps it.
+     */
+    processPathFromHostPath(hostPath: string): string | undefined;
     fileUrl(target: FsTarget): string;
     contains(parent: FsTarget, child: FsTarget): boolean;
     stat(target: FsTarget, signal?: AbortSignal): Promise<FsInfo | undefined>;
@@ -90,7 +119,22 @@ declare class MirageFileSystem extends FileSystem {
     }, signal?: AbortSignal): Promise<FsPathInfo | undefined>;
     readText(target: FsTarget, signal?: AbortSignal): Promise<string>;
     streamText(target: FsTarget, signal?: AbortSignal): Promise<AsyncIterable<string>>;
+    /**
+     * Stat a read target and refuse anything that is not a regular file.
+     *
+     * A backend read of a directory key surfaces as a missing path, which
+     * would report a path that plainly exists as absent.
+     *
+     * @param target the resolved target about to be read.
+     * @param signal aborts the stat.
+     * @returns the stat row, or undefined when the mount reports none.
+     */
+    private statRegularFile;
     readBytes(target: FsTarget, signal: AbortSignal | undefined, maxBytes: number): Promise<Uint8Array>;
+    readByteRange(target: FsTarget, range: {
+        offset: number;
+        length: number;
+    }, signal?: AbortSignal): Promise<Uint8Array>;
     listDir(target: FsTarget, signal?: AbortSignal): Promise<FsDirEntry[]>;
     private dirEntry;
     writeText(target: FsTarget, content: string, expected?: FsWriteIntent, signal?: AbortSignal, sandboxPolicy?: SandboxPolicy): Promise<FsWriteOutcome>;

package/dist/index.d.ts

@@ -1,13 +1,18 @@
-export { M as MirageConfig, a as MirageMount, b as MirageMountBlock, c as MirageRuntimeBlock, d as MirageService } from './service-BK6NR_RX.js';
-export { M as MirageFileSystem, a as MirageFsConfig } from './fs-B3Zi9oo6.js';
-export { M as MirageShellConfig, a as MirageShellExecutor } from './shell-BTf2wsDy.js';
+export { M as MirageConfig, a as MirageMount, b as MirageMountBlock, c as MirageRuntimeBlock, d as MirageService } from './service-vCjLPYMI.js';
+export { M as MirageFileSystem, a as MirageFsConfig } from './fs-BNOIFi9o.js';
+export { M as MirageSubprocess, a as MirageSubprocessConfig } from './subprocess-CInesMpR.js';
+export { M as MirageShellConfig, a as MirageShellExecutor } from './shell-BAyBocjm.js';
+export { M as MirageSpillConfig, a as MirageSpillStore } from './spill-store-BfljgRi0.js';
 import { Context } from '@deepseek-ai/cordis';
 import { AskHandler } from '@struktoai/mirage-core/policy/decisions';
 import { Decision } from '@struktoai/mirage-core/policy/types';
+import '@struktoai/mirage-core/workspace/mount/spec';
 import '@struktoai/mirage-core/workspace/workspace/workspace';
 import '@struktoai/mirage-node';
 import '@deepseek-ai/dsh-fs';
+import '@deepseek-ai/dsh-subprocess';
 import '@deepseek-ai/dsh-shell';
+import '@deepseek-ai/dsh-spill';
 
 /**
  * The tool an approval request is attributed to. A mirage ask is raised

package/dist/index.js

@@ -1,22 +1,31 @@
 import {
   MirageFileSystem
-} from "./chunk-M4JOF35U.js";
+} from "./chunk-FRF6WPLN.js";
+import {
+  MirageShellExecutor
+} from "./chunk-KUIV2Z3M.js";
+import {
+  MirageSpillStore
+} from "./chunk-T4BSJAGN.js";
+import "./chunk-QH5H3VND.js";
+import {
+  MirageSubprocess
+} from "./chunk-G2GHA2F6.js";
 import {
   APPROVAL_TOOL_NAME,
   MirageService,
   approvalReason,
   approverOf,
   askThroughApproval
-} from "./chunk-4CZV24HW.js";
-import {
-  MirageShellExecutor
-} from "./chunk-QTBMLMKT.js";
-import "./chunk-2F2PJ7D7.js";
+} from "./chunk-OHZACFWO.js";
+import "./chunk-OZ2F4R6T.js";
 export {
   APPROVAL_TOOL_NAME,
   MirageFileSystem,
   MirageService,
   MirageShellExecutor,
+  MirageSpillStore,
+  MirageSubprocess,
   approvalReason,
   approverOf,
   askThroughApproval

package/dist/plugin/fs.d.ts

@@ -1,3 +1,3 @@
-export { M as default } from '../fs-B3Zi9oo6.js';
+export { M as default } from '../fs-BNOIFi9o.js';
 import '@deepseek-ai/cordis';
 import '@deepseek-ai/dsh-fs';

package/dist/plugin/fs.js

@@ -1,7 +1,7 @@
 import {
   MirageFileSystem
-} from "../chunk-M4JOF35U.js";
-import "../chunk-2F2PJ7D7.js";
+} from "../chunk-FRF6WPLN.js";
+import "../chunk-OZ2F4R6T.js";
 export {
   MirageFileSystem as default
 };

package/dist/plugin/service.d.ts

@@ -1,5 +1,6 @@
-export { d as default } from '../service-BK6NR_RX.js';
+export { d as default } from '../service-vCjLPYMI.js';
 import '@deepseek-ai/cordis';
 import '@struktoai/mirage-core/policy/types';
+import '@struktoai/mirage-core/workspace/mount/spec';
 import '@struktoai/mirage-core/workspace/workspace/workspace';
 import '@struktoai/mirage-node';

package/dist/plugin/service.js

@@ -1,6 +1,6 @@
 import {
   MirageService
-} from "../chunk-4CZV24HW.js";
+} from "../chunk-OHZACFWO.js";
 export {
   MirageService as default
 };

package/dist/plugin/shell.d.ts

@@ -1,3 +1,3 @@
-export { a as default } from '../shell-BTf2wsDy.js';
+export { a as default } from '../shell-BAyBocjm.js';
 import '@deepseek-ai/cordis';
 import '@deepseek-ai/dsh-shell';

package/dist/plugin/shell.js

@@ -1,7 +1,8 @@
 import {
   MirageShellExecutor
-} from "../chunk-QTBMLMKT.js";
-import "../chunk-2F2PJ7D7.js";
+} from "../chunk-KUIV2Z3M.js";
+import "../chunk-QH5H3VND.js";
+import "../chunk-OZ2F4R6T.js";
 export {
   MirageShellExecutor as default
 };

package/dist/plugin/spill-store.d.ts

@@ -0,0 +1,3 @@
+export { a as default } from '../spill-store-BfljgRi0.js';
+import '@deepseek-ai/cordis';
+import '@deepseek-ai/dsh-spill';

package/dist/plugin/spill-store.js

@@ -0,0 +1,8 @@
+import {
+  MirageSpillStore
+} from "../chunk-T4BSJAGN.js";
+import "../chunk-QH5H3VND.js";
+export {
+  MirageSpillStore as default
+};
+//# sourceMappingURL=spill-store.js.map

package/dist/plugin/spill-store.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/plugin/subprocess.d.ts

@@ -0,0 +1,8 @@
+export { M as default } from '../subprocess-CInesMpR.js';
+import '@deepseek-ai/cordis';
+import '@deepseek-ai/dsh-subprocess';
+import '../service-vCjLPYMI.js';
+import '@struktoai/mirage-core/policy/types';
+import '@struktoai/mirage-core/workspace/mount/spec';
+import '@struktoai/mirage-core/workspace/workspace/workspace';
+import '@struktoai/mirage-node';

package/dist/plugin/subprocess.js

@@ -0,0 +1,9 @@
+import {
+  MirageSubprocess
+} from "../chunk-G2GHA2F6.js";
+import "../chunk-OHZACFWO.js";
+import "../chunk-OZ2F4R6T.js";
+export {
+  MirageSubprocess as default
+};
+//# sourceMappingURL=subprocess.js.map

package/dist/plugin/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{service-BK6NR_RX.d.ts → service-vCjLPYMI.d.ts}

@@ -1,7 +1,8 @@
 import { Service, Context } from '@deepseek-ai/cordis';
-import { Explanation } from '@struktoai/mirage-core/policy/types';
+import { ShellExplanation } from '@struktoai/mirage-core/policy/types';
+import { Mount } from '@struktoai/mirage-core/workspace/mount/spec';
 import { MountSpec } from '@struktoai/mirage-core/workspace/workspace/workspace';
-import { Workspace, Mount, NodeWorkspaceOptions } from '@struktoai/mirage-node';
+import { Workspace, NodeWorkspaceOptions } from '@struktoai/mirage-node';
 
 declare module '@deepseek-ai/cordis' {
     interface Context {
@@ -9,28 +10,30 @@ declare module '@deepseek-ai/cordis' {
     }
 }
 /**
- * A declarative mount, YAML-friendly: the resource is named by its
- * registry type and built through `buildResource`, so a dsh bundle
+ * A declarative mount, YAML-friendly: the VFS is named by its
+ * registry type and built through `buildVfs`, so a dsh bundle
  * patch can mount anything without holding a live instance. Told apart
- * from a live `Mount` by the type of `resource`: a string names a
+ * from a live `Mount` by the type of `vfs`: a string names a
  * registry entry, an object is the instance itself.
  */
 interface MirageMountBlock {
-    /** Resource registry name (`ram`, `s3`, `slack`, `redis`, ...). */
-    resource: string;
+    /** VFS registry name (`ram`, `s3`, `slack`, `redis`, ...). */
+    vfs: string;
     /** Mount mode: `read`, `write`, or `exec`. Omitted = the workspace default. */
     mode?: string;
-    /** Resource constructor config, passed to the registry factory. */
+    /** VFS constructor config, passed to the registry factory. */
     config?: Record<string, unknown>;
 }
 /** One mount entry: a live spec or instance, or a declarative block. */
 type MirageMount = MountSpec | Mount | MirageMountBlock;
-/** A runtime entry, YAML-friendly: a name, or a name with captures. */
+/** A runtime entry, YAML-friendly: a name, or a name with its options. */
 interface MirageRuntimeBlock {
     /** Runtime registry name (`monty`, `pyodide`, `quickjs`, ...). */
     name: string;
     /** Command words this runtime captures (e.g. `['python', 'python3']`). */
     captures?: string[];
+    /** The runtime's own config block; a key it does not have is refused. */
+    config?: Record<string, unknown>;
 }
 /**
  * Configuration for the shared mirage execution world. Exactly one of
@@ -80,8 +83,8 @@ interface MirageConfig {
  * which is what keeps `ctx.fs` targets and `ctx.shell` commands in one
  * execution world: a `processPath` handed to the shell resolves there.
  *
- * Construction with live resources is synchronous; a declarative mount
- * block defers to `buildResource`, so consumers await `ready` (the
+ * Construction with live mounts is synchronous; a declarative mount
+ * block defers to `buildVfs`, so consumers await `ready` (the
  * adapters do) and `workspace` throws until it resolves, mirroring how
  * the E2B service owner exposes its sandbox.
  */
@@ -94,6 +97,15 @@ declare class MirageService extends Service {
     constructor(ctx: Context, config?: MirageConfig);
     /** The live workspace; throws until `ready` resolves. */
     get workspace(): Workspace;
+    /**
+     * The live workspace, or null while it is still building.
+     *
+     * The non-throwing twin of {@link workspace}, for a synchronous seam
+     * method whose honest answer before `ready` is "this world cannot tell
+     * you" rather than an exception. Reads `built` directly, as
+     * {@link vfsOnly} does.
+     */
+    get workspaceIfReady(): Workspace | null;
     /**
      * The decision ledger: every ask this world has raised and every
      * answer given, questions still waiting included.
@@ -106,9 +118,9 @@ declare class MirageService extends Service {
      */
     get decisions(): Workspace['decisions'];
     /**
-     * What a line would do here, without doing it: one `Explanation` per
-     * command, carrying the outcome, the rule that spoke and the exact
-     * exit code and stderr the agent would get.
+     * What a line would do here, without doing it: the line's verdict, with
+     * the exact exit code and stderr the agent would get, and its parse tree,
+     * every command carrying its own outcome and the policies that spoke.
      *
      * A dry run through the same gate the dispatcher uses, so a host
      * reading this and an agent typing the line cannot be told different
@@ -119,9 +131,9 @@ declare class MirageService extends Service {
      *
      * @param line the command line to judge.
      * @param sessionId the session to judge it in; the default when empty.
-     * @returns one explanation per command of the line.
+     * @returns the line's explanation.
      */
-    explain(line: string, sessionId?: string): Promise<Explanation[]>;
+    explain(line: string, sessionId?: string): Promise<ShellExplanation>;
     /**
      * True while every runtime in the world reaches only the vfs
      * (`Runtime.reach`), meaning the workspace dispatch is the single
@@ -132,7 +144,7 @@ declare class MirageService extends Service {
      * sandbox can act around the gate. Answers before `ready` from the
      * constructor-resolved entries (mounts resolve asynchronously,
      * runtimes never do) and from the live workspace afterwards, so a
-     * later `addRuntime` is seen.
+     * later `addRuntime` or `removeRuntime` is seen.
      */
     get vfsOnly(): boolean;
     private open;

package/dist/{shell-BTf2wsDy.d.ts → shell-BAyBocjm.d.ts}

@@ -1,5 +1,5 @@
 import { Context } from '@deepseek-ai/cordis';
-import { ShellExecutor, ShellExecRequest, ShellExecSpec, ShellRunResult, ShellProcess } from '@deepseek-ai/dsh-shell';
+import { ShellExecutor, ShellExecRequest, ShellExecSpec, ShellExecution } from '@deepseek-ai/dsh-shell';
 
 /** Configuration for the mirage shell executor. */
 interface MirageShellConfig {
@@ -75,6 +75,9 @@ declare class MirageShellExecutor extends ShellExecutor {
     private readonly spillDir;
     private sessionReady;
     private readOnlyReady;
+    private readonly seeding;
+    private issued;
+    private readonly seeded;
     constructor(ctx: Context, config?: MirageShellConfig);
     private workspace;
     /**
@@ -101,7 +104,7 @@ declare class MirageShellExecutor extends ShellExecutor {
      * workspace-write sandbox: reads and writes land only where mounts
      * (and their modes) allow. Declaring it lets sandbox-aware plugins
      * (dsh's permission presets) compose over this executor. A world
-     * holding a runtime with doors around the gate (the host `local`
+     * holding a runtime with entry points around the gate (the host `local`
      * python, a remote sandbox) voids that claim, so this answers
      * undefined then (the base contract's "does not sandbox") and those
      * plugins refuse to compose instead of trusting a lie.
@@ -145,36 +148,6 @@ declare class MirageShellExecutor extends ShellExecutor {
      * @returns the facts to stamp, or undefined when nothing is claimed.
      */
     private sandboxInfo;
-    /**
-     * The retention budget of a background command's console.
-     *
-     * Only the background path caps retention: there a follow loop drains
-     * the console while the command still runs, so the budget bounds what
-     * the loop has not reached yet, and a chunk lost to it is reported as
-     * a gap in the sequence. A foreground console is read once, after the
-     * fact, with nothing to bound.
-     *
-     * @param spec the resolved spec carrying the stdout budget.
-     * @returns the retention budget in bytes.
-     */
-    private retentionFor;
-    /**
-     * Take a finished run's two streams off its console, capped, and spill
-     * whichever one lost bytes.
-     *
-     * A foreground run streams into a console rather than returning its
-     * output whole, because mirage throws on abort: bytes a killed command
-     * had already printed are recoverable from a sink and nowhere else.
-     * Only a truncated stream spills, since an untruncated one is already
-     * whole in `text` and writing a file for it would put a copy of every
-     * command's output on a mount. The console this reads is untrimmed, so
-     * a spill is the whole stream rather than the tail of one.
-     *
-     * @param console_ the console this run streamed into.
-     * @param spec the resolved spec carrying the stdout budget.
-     * @returns the capped streams, each with a spill path when it lost bytes.
-     */
-    private collectFrom;
     /**
      * Whether this run was refused, by the session's permission document
      * or by the read-only narrowing.
@@ -214,7 +187,7 @@ declare class MirageShellExecutor extends ShellExecutor {
      *
      * @param ws the live workspace holding the session.
      * @param sessionId the session this call runs in.
-     * @param spec the resolved spec carrying the snapshot.
+     * @param managed the call's managed snapshot.
      */
     private applyManagedEnv;
     private readOnlySession;
@@ -251,8 +224,25 @@ declare class MirageShellExecutor extends ShellExecutor {
      */
     private provisionReadOnly;
     private provisionSession;
-    run(spec: ShellExecSpec): Promise<ShellRunResult>;
-    start(spec: ShellExecSpec): ShellProcess;
+    /**
+     * Where and as whom one command runs, settled before it starts: the
+     * session binding, the workdir in this world, and its managed env.
+     *
+     * Seeding the env is the one step that writes, so it comes last and
+     * waits for any seed already running on the same session (the bound
+     * one and its read-only twin queue apart). Calls are numbered as they
+     * arrive, and a seed is skipped once a later call has seeded the same
+     * session, so the newest snapshot wins: a slow or abandoned preparation
+     * never lands an old one over it, and a stall before the seed holds up
+     * no other call. A call carrying no snapshot seeds nothing, so it
+     * never counts as the newest, but it still waits for the seeds already
+     * running, so its command never sees one half applied.
+     *
+     * @param spec the resolved spec being prepared.
+     * @returns the workspace, session and workdir the command runs under.
+     */
+    private prepare;
+    execute(spec: ShellExecSpec): Promise<ShellExecution>;
 }
 
 export { type MirageShellConfig as M, MirageShellExecutor as a };

package/dist/spill-store-BfljgRi0.d.ts

@@ -0,0 +1,38 @@
+import { Context } from '@deepseek-ai/cordis';
+import { SpillStore, SaveTextSpill, SpillRef } from '@deepseek-ai/dsh-spill';
+
+/** Configuration for the mirage spill store. */
+interface MirageSpillConfig {
+    /**
+     * Workspace directory the artifacts are written under, one
+     * subdirectory per session. Absolute, and normalized before use; must
+     * fall inside a mount this world can write, and the default sits on
+     * the `/tmp` ram mount the bundle patch provides.
+     */
+    dir?: string;
+}
+/**
+ * Mirage-backed implementation of `ctx.spillStore`.
+ *
+ * The spill policy replaces an oversized tool result with a preview and
+ * a locator, telling the model to read or grep it for the rest. That
+ * only works if the locator names a file the model can reach, and in a
+ * mirage world the model reaches the workspace, not the host: a spill
+ * written to the harness's own disk hands it a path its next `grep`
+ * cannot open, which reads as output the harness lost. So the artifact
+ * is written through the same dispatcher every other effect in this world
+ * passes, and the locator is an ordinary workspace path.
+ *
+ * The seam asks for a private location. mirage has no permission bits
+ * to offer: the workspace is the boundary, and a deployment that needs
+ * the artifacts out of the agent's reach puts `dir` on a mount the
+ * session has no grant for.
+ */
+declare class MirageSpillStore extends SpillStore {
+    static readonly inject: string[];
+    private readonly dir;
+    constructor(ctx: Context, config?: MirageSpillConfig);
+    saveText(input: SaveTextSpill): Promise<SpillRef>;
+}
+
+export { type MirageSpillConfig as M, MirageSpillStore as a };

package/dist/subprocess-CInesMpR.d.ts

@@ -0,0 +1,23 @@
+import { Context } from '@deepseek-ai/cordis';
+import { SubprocessRuntime, SubprocessSpawnSpec, SubprocessHandle, SubprocessTerminalEnvironment, SubprocessTerminalSpawnSpec, SubprocessTerminalHandle } from '@deepseek-ai/dsh-subprocess';
+import './service-vCjLPYMI.js';
+
+interface MirageSubprocessConfig {
+    /** Existing workspace session; omitted selects the default session. */
+    sessionId?: string;
+}
+/** One workspace execution world. No host PATH, native descendants, or PTY claims. */
+declare class MirageSubprocess extends SubprocessRuntime {
+    private readonly config;
+    static readonly inject: string[];
+    private readonly handles;
+    private closed;
+    constructor(ctx: Context, config?: MirageSubprocessConfig);
+    resolveExecutable(command: string, env?: Readonly<Record<string, string>>, signal?: AbortSignal): Promise<string>;
+    spawn(spec: SubprocessSpawnSpec): SubprocessHandle;
+    terminalEnvironment(signal?: AbortSignal): Promise<SubprocessTerminalEnvironment>;
+    spawnTerminal(_spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle>;
+    private checkWorld;
+}
+
+export { MirageSubprocess as M, type MirageSubprocessConfig as a };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@struktoai/mirage-dsh",
-  "version": "0.0.7-alpha.2",
-  "description": "DeepSeek Harness (dsh) providers backed by a mirage workspace: ctx.fs and ctx.shell over mounted resources",
+  "version": "0.0.7",
+  "description": "DeepSeek Harness (dsh) providers backed by a mirage workspace: ctx.fs and ctx.shell over mounts",
   "homepage": "https://github.com/strukto-ai/mirage#readme",
   "bugs": {
     "url": "https://github.com/strukto-ai/mirage/issues"
@@ -18,7 +18,7 @@
   },
   "type": "module",
   "engines": {
-    "node": ">=20.10.0"
+    "node": "^22.20 || ^24.12 || >=25"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -38,6 +38,14 @@
     "./shell": {
       "types": "./dist/plugin/shell.d.ts",
       "import": "./dist/plugin/shell.js"
+    },
+    "./spill-store": {
+      "types": "./dist/plugin/spill-store.d.ts",
+      "import": "./dist/plugin/spill-store.js"
+    },
+    "./subprocess": {
+      "types": "./dist/plugin/subprocess.d.ts",
+      "import": "./dist/plugin/subprocess.js"
     }
   },
   "dsh": {
@@ -50,21 +58,25 @@
     "cordis.patch.yml"
   ],
   "dependencies": {
-    "@struktoai/mirage-node": "0.0.7-alpha.2",
-    "@struktoai/mirage-core": "0.0.7-alpha.2"
+    "@struktoai/mirage-core": "0.0.7",
+    "@struktoai/mirage-node": "0.0.7"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.1.1-rc.2"
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-spill": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.0-rc.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-spill": "0.2.0-rc.2",
     "tsup": "^8.5.0",
     "typescript": "^6.0.0",
-    "vitest": "^3.2.6"
+    "vitest": "^4.1.11",
+    "@deepseek-ai/dsh-subprocess": "0.2.0-rc.2"
   },
   "scripts": {
     "build": "tsup",

package/dist/chunk-2F2PJ7D7.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/text.ts"],"sourcesContent":["// ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n// ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========\n\nimport { FsError } from '@deepseek-ai/dsh-fs'\n\nconst BINARY_SAMPLE_BYTES = 8192\n\n// dsh text semantics: a NUL in the leading sample or invalid UTF-8 is a\n// binary file, refused as FS_NOT_TEXT rather than decoded lossily (the\n// mirage facade's readFileText decodes with fatal: false, which the dsh\n// seam contract forbids).\nexport function decodeStrictText(bytes: Uint8Array, displayPath: string): string {\n  if (bytes.subarray(0, BINARY_SAMPLE_BYTES).includes(0)) {\n    throw new FsError(`cannot read \"${displayPath}\": binary file`, 'FS_NOT_TEXT')\n  }\n  try {\n    return new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n  } catch (error: unknown) {\n    throw new FsError(`cannot read \"${displayPath}\": invalid UTF-8 text`, 'FS_NOT_TEXT', {\n      cause: error,\n    })\n  }\n}\n\nexport function normalizeLineEndings(value: string): string {\n  return value.replaceAll('\\r\\n', '\\n')\n}\n\n// CRLF-majority sniff over a bounded sample, the same heuristic dsh's own\n// backends use to keep a rewritten file in its original line-ending style.\nexport function detectsCrlf(value: string): boolean {\n  const sample = value.slice(0, 4096)\n  const crlf = sample.split('\\r\\n').length - 1\n  const lf = sample.split('\\n').length - 1 - crlf\n  return crlf > lf\n}\n\nexport function restoreLineEndings(value: string, crlf: boolean): string {\n  return crlf ? normalizeLineEndings(value).replaceAll('\\n', '\\r\\n') : value\n}\n\nfunction countOccurrences(haystack: string, needle: string): number {\n  if (needle.length === 0) return 0\n  let count = 0\n  let index = haystack.indexOf(needle)\n  while (index !== -1) {\n    count++\n    index = haystack.indexOf(needle, index + needle.length)\n  }\n  return count\n}\n\n// Literal replacement with dsh's edit taxonomy: zero matches and an empty\n// oldString are FS_EDIT_NOT_FOUND, several matches without replaceAll is\n// FS_AMBIGUOUS_EDIT.\nexport function applyLiteralEdit(\n  content: string,\n  oldString: string,\n  newString: string,\n  replaceAll: boolean,\n  displayPath: string,\n): string {\n  const matches = countOccurrences(content, oldString)\n  if (matches === 0) {\n    throw new FsError(`cannot edit \"${displayPath}\": oldString not found`, 'FS_EDIT_NOT_FOUND')\n  }\n  if (matches > 1 && !replaceAll) {\n    throw new FsError(\n      `cannot edit \"${displayPath}\": oldString matches ${String(matches)} locations; pass replaceAll or a longer unique string`,\n      'FS_AMBIGUOUS_EDIT',\n    )\n  }\n  return replaceAll\n    ? content.replaceAll(oldString, newString)\n    : content.replace(oldString, newString)\n}\n\n// The first index at or after `from` that starts a UTF-8 sequence, so a tail\n// taken from there decodes as characters rather than as replacement marks.\nfunction charBoundary(bytes: Uint8Array, from: number): number {\n  let start = from\n  while (start < bytes.byteLength && ((bytes[start] ?? 0) & 0xc0) === 0x80) start++\n  return start\n}\n\n// Byte-accurate tail cap: keep the LAST maxBytes bytes of the encoded text,\n// re-aligned to a UTF-8 sequence boundary so the kept tail still decodes.\nexport function tailCap(text: string, maxBytes: number): { text: string; truncated: boolean } {\n  const bytes = new TextEncoder().encode(text)\n  if (bytes.byteLength <= maxBytes) return { text, truncated: false }\n  const start = charBoundary(bytes, bytes.byteLength - maxBytes)\n  return {\n    text: new TextDecoder('utf-8', { fatal: false }).decode(bytes.subarray(start)),\n    truncated: true,\n  }\n}\n\n/**\n * A bounded backlog of output bytes: the newest `budget` bytes, with the\n * oldest dropped as they overflow.\n *\n * Held as bytes rather than as a string because the string form had to\n * re-encode everything already buffered on every append to measure it,\n * which is quadratic in a command's output and lands on the same event\n * loop that serves the workspace. Appending here costs the chunk, not\n * the backlog.\n */\nexport class TailBuffer {\n  private readonly budget: number\n  private parts: Uint8Array[] = []\n  private bytes = 0\n\n  constructor(budget: number) {\n    this.budget = budget\n  }\n\n  /**\n   * Append a chunk, dropping the oldest bytes that no longer fit.\n   *\n   * @param data the bytes to append.\n   * @returns true when bytes were dropped to make room.\n   */\n  append(data: Uint8Array): boolean {\n    this.parts.push(data)\n    this.bytes += data.byteLength\n    if (this.bytes <= this.budget) return false\n    let excess = this.bytes - this.budget\n    while (excess > 0) {\n      const head = this.parts[0]\n      if (head === undefined) break\n      if (head.byteLength <= excess) {\n        this.parts.shift()\n        excess -= head.byteLength\n        this.bytes -= head.byteLength\n      } else {\n        this.parts[0] = head.subarray(excess)\n        this.bytes -= excess\n        excess = 0\n      }\n    }\n    return true\n  }\n\n  /**\n   * Drain everything held, decoded as text.\n   *\n   * The head may sit mid-character, since dropping is byte-exact, so it\n   * is re-aligned before decoding rather than rendered as a replacement\n   * mark.\n   *\n   * @returns the buffered text; the buffer is left empty.\n   */\n  take(): string {\n    if (this.parts.length === 0) return ''\n    const joined = new Uint8Array(this.bytes)\n    let at = 0\n    for (const part of this.parts) {\n      joined.set(part, at)\n      at += part.byteLength\n    }\n    this.parts = []\n    this.bytes = 0\n    return new TextDecoder('utf-8', { fatal: false }).decode(\n      joined.subarray(charBoundary(joined, 0)),\n    )\n  }\n}\n"],"mappings":";AAcA,SAAS,eAAe;AAExB,IAAM,sBAAsB;AAMrB,SAAS,iBAAiB,OAAmB,aAA6B;AAC/E,MAAI,MAAM,SAAS,GAAG,mBAAmB,EAAE,SAAS,CAAC,GAAG;AACtD,UAAM,IAAI,QAAQ,gBAAgB,WAAW,kBAAkB,aAAa;AAAA,EAC9E;AACA,MAAI;AACF,WAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AAAA,EAC/D,SAAS,OAAgB;AACvB,UAAM,IAAI,QAAQ,gBAAgB,WAAW,yBAAyB,eAAe;AAAA,MACnF,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAEO,SAAS,qBAAqB,OAAuB;AAC1D,SAAO,MAAM,WAAW,QAAQ,IAAI;AACtC;AAIO,SAAS,YAAY,OAAwB;AAClD,QAAM,SAAS,MAAM,MAAM,GAAG,IAAI;AAClC,QAAM,OAAO,OAAO,MAAM,MAAM,EAAE,SAAS;AAC3C,QAAM,KAAK,OAAO,MAAM,IAAI,EAAE,SAAS,IAAI;AAC3C,SAAO,OAAO;AAChB;AAEO,SAAS,mBAAmB,OAAe,MAAuB;AACvE,SAAO,OAAO,qBAAqB,KAAK,EAAE,WAAW,MAAM,MAAM,IAAI;AACvE;AAEA,SAAS,iBAAiB,UAAkB,QAAwB;AAClE,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,QAAQ;AACZ,MAAI,QAAQ,SAAS,QAAQ,MAAM;AACnC,SAAO,UAAU,IAAI;AACnB;AACA,YAAQ,SAAS,QAAQ,QAAQ,QAAQ,OAAO,MAAM;AAAA,EACxD;AACA,SAAO;AACT;AAKO,SAAS,iBACd,SACA,WACA,WACA,YACA,aACQ;AACR,QAAM,UAAU,iBAAiB,SAAS,SAAS;AACnD,MAAI,YAAY,GAAG;AACjB,UAAM,IAAI,QAAQ,gBAAgB,WAAW,0BAA0B,mBAAmB;AAAA,EAC5F;AACA,MAAI,UAAU,KAAK,CAAC,YAAY;AAC9B,UAAM,IAAI;AAAA,MACR,gBAAgB,WAAW,wBAAwB,OAAO,OAAO,CAAC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACA,SAAO,aACH,QAAQ,WAAW,WAAW,SAAS,IACvC,QAAQ,QAAQ,WAAW,SAAS;AAC1C;AAIA,SAAS,aAAa,OAAmB,MAAsB;AAC7D,MAAI,QAAQ;AACZ,SAAO,QAAQ,MAAM,gBAAgB,MAAM,KAAK,KAAK,KAAK,SAAU,IAAM;AAC1E,SAAO;AACT;AAIO,SAAS,QAAQ,MAAc,UAAwD;AAC5F,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,IAAI;AAC3C,MAAI,MAAM,cAAc,SAAU,QAAO,EAAE,MAAM,WAAW,MAAM;AAClE,QAAM,QAAQ,aAAa,OAAO,MAAM,aAAa,QAAQ;AAC7D,SAAO;AAAA,IACL,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,MAAM,SAAS,KAAK,CAAC;AAAA,IAC7E,WAAW;AAAA,EACb;AACF;AAYO,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACT,QAAsB,CAAC;AAAA,EACvB,QAAQ;AAAA,EAEhB,YAAY,QAAgB;AAC1B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,MAA2B;AAChC,SAAK,MAAM,KAAK,IAAI;AACpB,SAAK,SAAS,KAAK;AACnB,QAAI,KAAK,SAAS,KAAK,OAAQ,QAAO;AACtC,QAAI,SAAS,KAAK,QAAQ,KAAK;AAC/B,WAAO,SAAS,GAAG;AACjB,YAAM,OAAO,KAAK,MAAM,CAAC;AACzB,UAAI,SAAS,OAAW;AACxB,UAAI,KAAK,cAAc,QAAQ;AAC7B,aAAK,MAAM,MAAM;AACjB,kBAAU,KAAK;AACf,aAAK,SAAS,KAAK;AAAA,MACrB,OAAO;AACL,aAAK,MAAM,CAAC,IAAI,KAAK,SAAS,MAAM;AACpC,aAAK,SAAS;AACd,iBAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAe;AACb,QAAI,KAAK,MAAM,WAAW,EAAG,QAAO;AACpC,UAAM,SAAS,IAAI,WAAW,KAAK,KAAK;AACxC,QAAI,KAAK;AACT,eAAW,QAAQ,KAAK,OAAO;AAC7B,aAAO,IAAI,MAAM,EAAE;AACnB,YAAM,KAAK;AAAA,IACb;AACA,SAAK,QAAQ,CAAC;AACd,SAAK,QAAQ;AACb,WAAO,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE;AAAA,MAChD,OAAO,SAAS,aAAa,QAAQ,CAAC,CAAC;AAAA,IACzC;AAAA,EACF;AACF;","names":[]}