@tickernelz/paperclip-pro-plugin-modal 2026.925.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2025 Paperclip AI
+Copyright (c) 2026 Zhafron Adani Kautsar (paperclip-pro fork modifications)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,75 @@
+# `@tickernelz/paperclip-pro-plugin-modal`
+
+First-party Modal sandbox provider plugin for Paperclip.
+
+Like the other sandbox-provider packages in this repo, it lives inside the Paperclip monorepo but is intentionally excluded from the root `pnpm` workspace and shaped to publish and install like a standalone npm package. That lets operators install it from the Plugins page by package name without introducing root lockfile churn for Modal's SDK dependencies.
+
+## Install
+
+From a Paperclip instance, install:
+
+```text
+@tickernelz/paperclip-pro-plugin-modal
+```
+
+The host plugin installer runs `npm install` into the managed plugin directory, so the `modal` SDK dependency is pulled in during installation.
+
+## Runtime support note
+
+Paperclip and this plugin require **Node 24 or later**. The plugin logs a startup warning when it detects an older host runtime.
+
+## Configuration
+
+Configure Modal from `Instance Settings -> Environments`, not from the plugin's plugin page.
+
+| Field | Required | Description |
+| --- | --- | --- |
+| `appName` | yes | Modal App name. The plugin calls `modal.apps.fromName(appName, { createIfMissing: true })`, so the App is created on first acquire if it does not already exist. |
+| `image` | yes | Container image passed to `modal.images.fromRegistry()`, e.g. `python:3.13` or `node:24`. |
+| `tokenId` / `tokenSecret` | yes | Modal auth tokens. Both must be provided together. Paperclip stores pasted values as company secrets. The plugin worker runs in a child process that does not inherit host env vars, so `MODAL_TOKEN_ID` / `MODAL_TOKEN_SECRET` set on the Paperclip server are **not** read by the plugin — provide the tokens in this form. |
+| `environment` | no | Optional Modal environment name. Falls back to the SDK profile default. |
+| `workdir` | no | Remote working directory inside the sandbox. Defaults to `/workspace/paperclip`. |
+| `sandboxTimeoutMs` | no | Maximum sandbox lifetime in milliseconds. Must be a positive multiple of `1000` between `1000` and `86_400_000` (24 hours). Defaults to `3_600_000` (1 hour). |
+| `idleTimeoutMs` | no | Optional idle timeout in milliseconds. Modal terminates the sandbox if no exec is active for this duration. Must be a positive multiple of `1000`. |
+| `execTimeoutMs` | no | Default per-exec timeout in milliseconds when the caller does not pass one. Must be a positive multiple of `1000`. Defaults to `300_000` (5 minutes). |
+| `blockNetwork` | no | Block all egress network access. |
+| `cidrAllowlist` | no | List of CIDRs the sandbox may reach. Cannot be combined with `blockNetwork`. |
+| `reuseLease` | no | When `true`, the sandbox is detached (not terminated) on release and reattached by id later. Defaults to `false`. |
+
+### Reuse semantics
+
+Modal does **not** expose a separate pause/resume primitive for sandboxes — there is no equivalent to e2b's `pause()`. The plugin implements `reuseLease` as follows:
+
+- **`reuseLease: false` (default)**: On release the sandbox is `terminate()`d. Subsequent runs create a new sandbox.
+- **`reuseLease: true`**: On release the plugin calls `sandbox.detach()`. The sandbox keeps running on Modal until its configured `sandboxTimeoutMs` or `idleTimeoutMs` elapses. The next acquire/resume reconnects via `modal.sandboxes.fromId(providerLeaseId)`. If the sandbox has expired, `fromId` raises `NotFoundError` and the plugin reports the lease as expired so Paperclip reacquires.
+
+Because there is no real pause, **`reuseLease: true` keeps billing running** until the sandbox or idle timeout cuts it off. Tune `idleTimeoutMs` to a value that matches your reuse window.
+
+## Local development
+
+```bash
+cd packages/plugins/sandbox-providers/modal
+pnpm install --ignore-workspace --no-lockfile
+pnpm build
+pnpm test
+pnpm typecheck
+```
+
+These commands assume the repo root has already been installed once so the local `@tickernelz/paperclip-pro-plugin-sdk` workspace package is available to the compiler during development.
+
+## Operator verification
+
+1. Provision Modal credentials in your Modal account (`modal token new`) or use a service account.
+2. Install the plugin from the Paperclip Plugins page.
+3. In `Instance Settings -> Environments`, add a new Modal sandbox environment with at least `appName`, `image`, `tokenId`, and `tokenSecret`.
+4. Run the environment **Probe** action. A success result confirms auth, app creation, image pull, and `exec` round-trip.
+5. Run at least one Paperclip task with a remote-managed adapter (for example `claude_local`) bound to that environment. The adapter should provision the sandbox, run commands in it, and clean it up.
+
+Full end-to-end manual QA is tracked separately in [PAPA-354](/PAPA/issues/PAPA-354).
+
+## Package layout
+
+- `src/manifest.ts` declares the sandbox-provider driver metadata
+- `src/plugin.ts` implements the environment lifecycle hooks
+- `src/worker.ts` boots the plugin under the host worker runtime
+- `paperclipPlugin.manifest` and `paperclipPlugin.worker` point the host at the built plugin entrypoints in `dist/`

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { default as manifest } from "./manifest.js";
+export { default as plugin } from "./plugin.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { default as manifest } from "./manifest.js";
+export { default as plugin } from "./plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,4 @@
+import type { PaperclipPluginManifestV1 } from "@tickernelz/paperclip-pro-plugin-sdk";
+declare const manifest: PaperclipPluginManifestV1;
+export default manifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAKtF,QAAA,MAAM,QAAQ,EAAE,yBA+Ff,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,89 @@
+const PLUGIN_ID = "paperclip.modal-sandbox-provider";
+const PLUGIN_VERSION = "0.1.1";
+const manifest = {
+    id: PLUGIN_ID,
+    apiVersion: 1,
+    version: PLUGIN_VERSION,
+    displayName: "Modal Sandbox Provider",
+    description: "First-party sandbox provider plugin that provisions Modal sandboxes as Paperclip execution environments.",
+    author: "Paperclip",
+    categories: ["automation"],
+    capabilities: ["environment.drivers.register"],
+    entrypoints: {
+        worker: "./dist/worker.js",
+    },
+    environmentDrivers: [
+        {
+            driverKey: "modal",
+            kind: "sandbox_provider",
+            displayName: "Modal Sandbox",
+            description: "Provisions Modal sandboxes with configurable image, app, auth, timeouts, and network controls.",
+            configSchema: {
+                type: "object",
+                required: ["appName", "image"],
+                properties: {
+                    appName: {
+                        type: "string",
+                        description: "Modal App name used as the parent for sandboxes. The plugin calls `modal.apps.fromName(appName, { createIfMissing: true })`, so the App is created on first acquire if it does not already exist.",
+                        default: "paperclip",
+                    },
+                    image: {
+                        type: "string",
+                        description: "Container image reference passed to `modal.images.fromRegistry()`, e.g. `python:3.13` or `node:24`. The default `node:24` satisfies the sandbox runtime contract (node, sh, and tar on PATH).",
+                        default: "node:24",
+                    },
+                    tokenId: {
+                        type: "string",
+                        format: "secret-ref",
+                        description: "Modal token ID. Paste a token or an existing Paperclip secret reference; saved environments store pasted values as company secrets. Required.",
+                    },
+                    tokenSecret: {
+                        type: "string",
+                        format: "secret-ref",
+                        description: "Modal token secret paired with tokenId. Required.",
+                    },
+                    environment: {
+                        type: "string",
+                        description: "Optional Modal environment name. Falls back to the SDK profile default.",
+                    },
+                    workdir: {
+                        type: "string",
+                        description: "Remote working directory inside the sandbox.",
+                        default: "/workspace/paperclip",
+                    },
+                    sandboxTimeoutMs: {
+                        type: "number",
+                        description: "Maximum sandbox lifetime in milliseconds. Must be a positive multiple of 1000 between 1000 and 86400000 (24 hours).",
+                        default: 3_600_000,
+                    },
+                    idleTimeoutMs: {
+                        type: "number",
+                        description: "Optional idle timeout in milliseconds. When set, Modal terminates the sandbox if no exec is active for this duration. Must be a positive multiple of 1000.",
+                    },
+                    execTimeoutMs: {
+                        type: "number",
+                        description: "Default per-exec timeout in milliseconds when the caller does not provide one. Must be a positive multiple of 1000.",
+                        default: 300_000,
+                    },
+                    blockNetwork: {
+                        type: "boolean",
+                        description: "Whether to block all egress network access from the sandbox.",
+                        default: false,
+                    },
+                    cidrAllowlist: {
+                        type: "array",
+                        items: { type: "string" },
+                        description: "Optional list of CIDRs the sandbox is allowed to reach. Cannot be combined with blockNetwork.",
+                    },
+                    reuseLease: {
+                        type: "boolean",
+                        description: "When true, the sandbox is detached (not terminated) on release and resumed by id later. Reuse relies on Modal's sandbox lifetime and idle timeout because Modal has no separate pause primitive.",
+                        default: false,
+                    },
+                },
+            },
+        },
+    ],
+};
+export default manifest;
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,QAAQ,GAA8B;IAC1C,EAAE,EAAE,SAAS;IACb,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,wBAAwB;IACrC,WAAW,EACT,0GAA0G;IAC5G,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,YAAY,EAAE,CAAC,8BAA8B,CAAC;IAC9C,WAAW,EAAE;QACX,MAAM,EAAE,kBAAkB;KAC3B;IACD,kBAAkB,EAAE;QAClB;YACE,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,eAAe;YAC5B,WAAW,EACT,gGAAgG;YAClG,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;gBAC9B,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,mMAAmM;wBACrM,OAAO,EAAE,WAAW;qBACrB;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,+LAA+L;wBACjM,OAAO,EAAE,SAAS;qBACnB;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,YAAY;wBACpB,WAAW,EACT,+IAA+I;qBAClJ;oBACD,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,YAAY;wBACpB,WAAW,EAAE,mDAAmD;qBACjE;oBACD,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yEAAyE;qBAC5E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,8CAA8C;wBAC3D,OAAO,EAAE,sBAAsB;qBAChC;oBACD,gBAAgB,EAAE;wBAChB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,qHAAqH;wBACvH,OAAO,EAAE,SAAS;qBACnB;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4JAA4J;qBAC/J;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,qHAAqH;wBACvH,OAAO,EAAE,OAAO;qBACjB;oBACD,YAAY,EAAE;wBACZ,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,8DAA8D;wBAC3E,OAAO,EAAE,KAAK;qBACf;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EACT,+FAA+F;qBAClG;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,kMAAkM;wBACpM,OAAO,EAAE,KAAK;qBACf;iBACF;aACF;SACF;KACF;CACF,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,18 @@
+interface ModalDriverConfig {
+    appName: string;
+    image: string;
+    tokenId: string | null;
+    tokenSecret: string | null;
+    environment: string | null;
+    workdir: string;
+    sandboxTimeoutMs: number;
+    idleTimeoutMs: number | null;
+    execTimeoutMs: number;
+    blockNetwork: boolean;
+    cidrAllowlist: string[] | null;
+    reuseLease: boolean;
+}
+export declare function parseDriverConfig(raw: Record<string, unknown>): ModalDriverConfig;
+declare const plugin: import("@tickernelz/paperclip-pro-plugin-sdk").PaperclipPlugin;
+export default plugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAgCA,UAAU,iBAAiB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;CACrB;AAqBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAoBjF;AAuPD,QAAA,MAAM,MAAM,gEAoUV,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/plugin.js

@@ -0,0 +1,552 @@
+import { ModalClient, NotFoundError, SandboxTimeoutError, TimeoutError, } from "modal";
+import { definePlugin } from "@tickernelz/paperclip-pro-plugin-sdk";
+const DEFAULT_WORKDIR = "/workspace/paperclip";
+const DEFAULT_SANDBOX_TIMEOUT_MS = 3_600_000;
+const DEFAULT_EXEC_TIMEOUT_MS = 300_000;
+const MAX_SANDBOX_TIMEOUT_MS = 86_400_000;
+function parseOptionalString(value) {
+    return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function parseOptionalNumber(value) {
+    if (value == null || value === "")
+        return null;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+function parseStringArray(value) {
+    if (!Array.isArray(value))
+        return null;
+    const trimmed = value
+        .filter((entry) => typeof entry === "string")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    return trimmed.length > 0 ? trimmed : null;
+}
+export function parseDriverConfig(raw) {
+    const sandboxTimeoutMsRaw = parseOptionalNumber(raw.sandboxTimeoutMs);
+    const execTimeoutMsRaw = parseOptionalNumber(raw.execTimeoutMs);
+    const idleTimeoutMsRaw = parseOptionalNumber(raw.idleTimeoutMs);
+    return {
+        appName: parseOptionalString(raw.appName) ?? "",
+        image: parseOptionalString(raw.image) ?? "",
+        tokenId: parseOptionalString(raw.tokenId),
+        tokenSecret: parseOptionalString(raw.tokenSecret),
+        environment: parseOptionalString(raw.environment),
+        workdir: parseOptionalString(raw.workdir) ?? DEFAULT_WORKDIR,
+        sandboxTimeoutMs: sandboxTimeoutMsRaw != null ? Math.trunc(sandboxTimeoutMsRaw) : DEFAULT_SANDBOX_TIMEOUT_MS,
+        idleTimeoutMs: idleTimeoutMsRaw != null ? Math.trunc(idleTimeoutMsRaw) : null,
+        execTimeoutMs: execTimeoutMsRaw != null ? Math.trunc(execTimeoutMsRaw) : DEFAULT_EXEC_TIMEOUT_MS,
+        blockNetwork: raw.blockNetwork === true,
+        cidrAllowlist: parseStringArray(raw.cidrAllowlist),
+        reuseLease: raw.reuseLease === true,
+    };
+}
+function isMultipleOf1000(value) {
+    return value > 0 && value % 1000 === 0;
+}
+function resolveAuth(config) {
+    // The plugin worker runs in a child process that does not inherit host env
+    // vars (see PluginWorkerManager.spawnProcess), so MODAL_TOKEN_ID /
+    // MODAL_TOKEN_SECRET cannot be read here. Credentials must come from the
+    // environment config, which Paperclip stores as company secrets.
+    const tokenId = config.tokenId ?? "";
+    const tokenSecret = config.tokenSecret ?? "";
+    if (!tokenId && !tokenSecret)
+        return null;
+    if (!tokenId || !tokenSecret) {
+        throw new Error("Modal sandbox environments require both tokenId and tokenSecret to be configured.");
+    }
+    return { tokenId, tokenSecret };
+}
+function createModalClient(config) {
+    const auth = resolveAuth(config);
+    const params = {};
+    if (auth) {
+        params.tokenId = auth.tokenId;
+        params.tokenSecret = auth.tokenSecret;
+    }
+    if (config.environment) {
+        params.environment = config.environment;
+    }
+    return new ModalClient(params);
+}
+async function resolveApp(client, config) {
+    return await client.apps.fromName(config.appName, {
+        createIfMissing: true,
+        environment: config.environment ?? undefined,
+    });
+}
+function buildSandboxCreateParams(input) {
+    const params = {
+        workdir: input.config.workdir,
+        timeoutMs: input.config.sandboxTimeoutMs,
+        blockNetwork: input.config.blockNetwork,
+    };
+    if (input.config.idleTimeoutMs != null) {
+        params.idleTimeoutMs = input.config.idleTimeoutMs;
+    }
+    if (input.config.cidrAllowlist && input.config.cidrAllowlist.length > 0) {
+        params.cidrAllowlist = input.config.cidrAllowlist;
+    }
+    // Modal sandboxes accept tag metadata via setTags after creation; the create
+    // RPC does not take tags directly. We pass them through input so the caller
+    // can apply them after `create` resolves.
+    void input.tags;
+    return params;
+}
+function buildSandboxTags(input) {
+    return {
+        "paperclip-provider": "modal",
+        "paperclip-company-id": input.companyId,
+        "paperclip-environment-id": input.environmentId,
+        "paperclip-reuse-lease": input.reuseLease ? "true" : "false",
+        ...(input.runId ? { "paperclip-run-id": input.runId } : {}),
+    };
+}
+async function createSandboxFor(client, app, config, tags) {
+    const image = client.images.fromRegistry(config.image);
+    const params = buildSandboxCreateParams({ config, tags });
+    const sandbox = await client.sandboxes.create(app, image, params);
+    try {
+        await sandbox.setTags(tags);
+    }
+    catch (error) {
+        // setTags is best-effort metadata; surface but do not block lease creation.
+        console.warn(`Failed to set tags on Modal sandbox ${sandbox.sandboxId}: ${formatErrorMessage(error)}`);
+    }
+    return sandbox;
+}
+function leaseMetadata(input) {
+    return {
+        provider: "modal",
+        shellCommand: "sh",
+        sandboxId: input.sandbox.sandboxId,
+        appName: input.config.appName,
+        image: input.config.image,
+        sandboxTimeoutMs: input.config.sandboxTimeoutMs,
+        idleTimeoutMs: input.config.idleTimeoutMs,
+        reuseLease: input.config.reuseLease,
+        remoteCwd: input.remoteCwd,
+        resumedLease: input.resumedLease,
+    };
+}
+function formatErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+function isValidShellEnvKey(value) {
+    return /^[A-Za-z_][A-Za-z0-9_]*$/.test(value);
+}
+// Modal's `sandbox.exec` takes an argv array and bypasses the shell entirely,
+// so adapter probes that rely on PATH mutations from /etc/profile or ~/.bashrc
+// do not work without an explicit profile source. Wrap the user command in a
+// `sh -c` script that sources the common login profiles before it runs. The
+// script sources no `nvm.sh`; the sandbox image supplies node on the PATH. The
+// script sources the profiles itself, so a non-login shell (`sh -c`) is enough.
+// Env is set after profile sourcing so caller env wins; stdin is staged to a
+// temp file and shell-redirected so fast-failing commands do not race a
+// streaming stdin writer.
+function buildLoginShellScript(input) {
+    const env = input.env ?? {};
+    for (const key of Object.keys(env)) {
+        if (!isValidShellEnvKey(key)) {
+            throw new Error(`Invalid sandbox environment variable key: ${key}`);
+        }
+    }
+    const envArgs = Object.entries(env)
+        .filter((entry) => typeof entry[1] === "string")
+        .map(([key, value]) => `${key}=${shellQuote(value)}`);
+    const commandParts = [shellQuote(input.command), ...input.args.map(shellQuote)].join(" ");
+    const redirected = input.stdinPath
+        ? `${commandParts} < ${shellQuote(input.stdinPath)}`
+        : commandParts;
+    const finalLine = envArgs.length > 0 ? `exec env ${envArgs.join(" ")} ${redirected}` : `exec ${redirected}`;
+    const lines = [
+        'if [ -f /etc/profile ]; then . /etc/profile >/dev/null 2>&1 || true; fi',
+        'if [ -f "$HOME/.profile" ]; then . "$HOME/.profile" >/dev/null 2>&1 || true; fi',
+        'if [ -f "$HOME/.bash_profile" ]; then . "$HOME/.bash_profile" >/dev/null 2>&1 || true; elif [ -f "$HOME/.bashrc" ]; then . "$HOME/.bashrc" >/dev/null 2>&1 || true; fi',
+        'if [ -f "$HOME/.zprofile" ]; then . "$HOME/.zprofile" >/dev/null 2>&1 || true; fi',
+    ];
+    if (input.cwd) {
+        lines.push(`cd ${shellQuote(input.cwd)}`);
+    }
+    lines.push(finalLine);
+    return lines.join(" && ");
+}
+async function ensureRemoteWorkspace(sandbox, remoteCwd) {
+    // Use a one-shot exec to mkdir -p; Modal does not expose a direct
+    // filesystem mkdir helper and creating a file via `open()` does not create
+    // intermediate directories.
+    const proc = await sandbox.exec(["sh", "-lc", `mkdir -p ${shellQuote(remoteCwd)}`]);
+    const exitCode = await proc.wait();
+    if (exitCode !== 0) {
+        throw new Error(`Failed to create remote workspace directory '${remoteCwd}': mkdir exited with code ${exitCode}`);
+    }
+}
+async function stageStdin(sandbox, stdin, remotePath) {
+    const file = await sandbox.open(remotePath, "w");
+    try {
+        await file.write(new TextEncoder().encode(stdin));
+        await file.flush();
+    }
+    finally {
+        await file.close().catch(() => undefined);
+    }
+}
+async function deleteStdinPath(sandbox, remotePath) {
+    // Best-effort cleanup of the staged stdin file. We swallow errors because
+    // it is fine for the file to outlive the sandbox if it is going to be
+    // terminated, and a missing rm tool would otherwise mask the real result.
+    try {
+        const proc = await sandbox.exec(["sh", "-lc", `rm -f ${shellQuote(remotePath)}`]);
+        await proc.wait();
+    }
+    catch {
+        // ignore
+    }
+}
+async function readProcessStreams(proc) {
+    const [stdout, stderr, exitCode] = await Promise.all([
+        proc.stdout.readText(),
+        proc.stderr.readText(),
+        proc.wait(),
+    ]);
+    return { stdout, stderr, exitCode };
+}
+function isModalNotFound(error) {
+    return error instanceof NotFoundError;
+}
+async function getSandboxOrNull(client, providerLeaseId) {
+    try {
+        return await client.sandboxes.fromId(providerLeaseId);
+    }
+    catch (error) {
+        if (isModalNotFound(error))
+            return null;
+        throw error;
+    }
+}
+function warnIfUnsupportedNode(logger) {
+    const major = Number.parseInt(process.versions.node.split(".")[0] ?? "0", 10);
+    if (Number.isFinite(major) && major < 24) {
+        const message = `Modal sandbox provider is running on Node ${process.versions.node}; Paperclip requires Node 24+. Upgrade the host runtime before using this plugin.`;
+        logger?.warn(message);
+    }
+}
+function leaseRemoteCwd(metadata, fallback) {
+    if (metadata && typeof metadata.remoteCwd === "string" && metadata.remoteCwd.trim().length > 0) {
+        return metadata.remoteCwd.trim();
+    }
+    return fallback;
+}
+const plugin = definePlugin({
+    async setup(ctx) {
+        warnIfUnsupportedNode(ctx.logger);
+        ctx.logger.info("Modal sandbox provider plugin ready");
+    },
+    async onHealth() {
+        return { status: "ok", message: "Modal sandbox provider plugin healthy" };
+    },
+    async onEnvironmentValidateConfig(params) {
+        const config = parseDriverConfig(params.config);
+        const errors = [];
+        if (!config.appName) {
+            errors.push("Modal sandbox environments require an appName.");
+        }
+        if (!config.image) {
+            errors.push("Modal sandbox environments require an image reference.");
+        }
+        if (config.sandboxTimeoutMs < 1000 ||
+            config.sandboxTimeoutMs > MAX_SANDBOX_TIMEOUT_MS ||
+            !isMultipleOf1000(config.sandboxTimeoutMs)) {
+            errors.push("sandboxTimeoutMs must be a positive multiple of 1000 between 1000 and 86400000.");
+        }
+        if (config.idleTimeoutMs != null &&
+            (config.idleTimeoutMs < 1000 || !isMultipleOf1000(config.idleTimeoutMs))) {
+            errors.push("idleTimeoutMs must be a positive multiple of 1000 when provided.");
+        }
+        if (config.execTimeoutMs < 1000 || !isMultipleOf1000(config.execTimeoutMs)) {
+            errors.push("execTimeoutMs must be a positive multiple of 1000.");
+        }
+        if (config.blockNetwork && config.cidrAllowlist && config.cidrAllowlist.length > 0) {
+            errors.push("cidrAllowlist cannot be combined with blockNetwork.");
+        }
+        const hasTokenId = Boolean(config.tokenId);
+        const hasTokenSecret = Boolean(config.tokenSecret);
+        if (hasTokenId !== hasTokenSecret) {
+            errors.push("tokenId and tokenSecret must both be provided when either is set.");
+        }
+        else if (!hasTokenId) {
+            errors.push("Modal sandbox environments require tokenId and tokenSecret.");
+        }
+        if (errors.length > 0) {
+            return { ok: false, errors };
+        }
+        return { ok: true, normalizedConfig: { ...config } };
+    },
+    async onEnvironmentProbe(params) {
+        const config = parseDriverConfig(params.config);
+        const tags = buildSandboxTags({
+            companyId: params.companyId,
+            environmentId: params.environmentId,
+            reuseLease: false,
+        });
+        const client = createModalClient(config);
+        try {
+            const app = await resolveApp(client, config);
+            const sandbox = await createSandboxFor(client, app, config, tags);
+            try {
+                await ensureRemoteWorkspace(sandbox, config.workdir);
+                const proc = await sandbox.exec(["sh", "-lc", "printf paperclip-probe"]);
+                const { stdout, exitCode } = await readProcessStreams(proc);
+                if (exitCode !== 0 || stdout.trim() !== "paperclip-probe") {
+                    return {
+                        ok: false,
+                        summary: `Modal sandbox probe failed: exit ${exitCode}, stdout=${JSON.stringify(stdout)}`,
+                        metadata: {
+                            provider: "modal",
+                            sandboxId: sandbox.sandboxId,
+                            appName: config.appName,
+                            image: config.image,
+                        },
+                    };
+                }
+                return {
+                    ok: true,
+                    summary: `Connected to Modal sandbox in app ${config.appName}.`,
+                    metadata: {
+                        provider: "modal",
+                        sandboxId: sandbox.sandboxId,
+                        appName: config.appName,
+                        image: config.image,
+                        workdir: config.workdir,
+                        sandboxTimeoutMs: config.sandboxTimeoutMs,
+                        idleTimeoutMs: config.idleTimeoutMs,
+                        reuseLease: config.reuseLease,
+                        remoteCwd: config.workdir,
+                    },
+                };
+            }
+            finally {
+                await sandbox.terminate().catch(() => undefined);
+            }
+        }
+        catch (error) {
+            return {
+                ok: false,
+                summary: "Modal sandbox probe failed.",
+                metadata: {
+                    provider: "modal",
+                    appName: config.appName,
+                    image: config.image,
+                    reuseLease: config.reuseLease,
+                    error: formatErrorMessage(error),
+                },
+            };
+        }
+        finally {
+            client.close();
+        }
+    },
+    async onEnvironmentAcquireLease(params) {
+        const config = parseDriverConfig(params.config);
+        const client = createModalClient(config);
+        try {
+            const app = await resolveApp(client, config);
+            const tags = buildSandboxTags({
+                companyId: params.companyId,
+                environmentId: params.environmentId,
+                runId: params.runId,
+                reuseLease: config.reuseLease,
+            });
+            const sandbox = await createSandboxFor(client, app, config, tags);
+            try {
+                await ensureRemoteWorkspace(sandbox, config.workdir);
+                return {
+                    providerLeaseId: sandbox.sandboxId,
+                    metadata: leaseMetadata({
+                        config,
+                        sandbox,
+                        remoteCwd: config.workdir,
+                        resumedLease: false,
+                    }),
+                };
+            }
+            catch (error) {
+                await sandbox.terminate().catch(() => undefined);
+                throw error;
+            }
+        }
+        finally {
+            // Keep the client open for the lease lifetime is unnecessary; subsequent
+            // calls construct their own client. Close the local handle to free
+            // grpc resources.
+            client.close();
+        }
+    },
+    async onEnvironmentResumeLease(params) {
+        const config = parseDriverConfig(params.config);
+        const client = createModalClient(config);
+        try {
+            const sandbox = await getSandboxOrNull(client, params.providerLeaseId);
+            if (!sandbox) {
+                return { providerLeaseId: null, metadata: { expired: true } };
+            }
+            try {
+                await ensureRemoteWorkspace(sandbox, config.workdir);
+                return {
+                    providerLeaseId: sandbox.sandboxId,
+                    metadata: leaseMetadata({ config, sandbox, remoteCwd: config.workdir, resumedLease: true }),
+                };
+            }
+            catch (error) {
+                // If we just resumed and workspace setup blew up, treat as a lease
+                // failure rather than silently terminating the user's reusable
+                // sandbox. Detach so the sandbox is not killed for a transient setup
+                // error.
+                void sandbox.detach();
+                throw error;
+            }
+        }
+        finally {
+            client.close();
+        }
+    },
+    async onEnvironmentReleaseLease(params) {
+        if (!params.providerLeaseId)
+            return;
+        const config = parseDriverConfig(params.config);
+        const client = createModalClient(config);
+        try {
+            const sandbox = await getSandboxOrNull(client, params.providerLeaseId);
+            if (!sandbox)
+                return;
+            if (config.reuseLease) {
+                // Modal has no separate pause primitive. Detaching releases the local
+                // grpc connection but leaves the sandbox running on Modal until its
+                // configured sandboxTimeoutMs or idleTimeoutMs expires. The next
+                // acquire/resume reconnects via sandboxes.fromId(providerLeaseId).
+                void sandbox.detach();
+                return;
+            }
+            await sandbox.terminate();
+        }
+        finally {
+            client.close();
+        }
+    },
+    async onEnvironmentDestroyLease(params) {
+        if (!params.providerLeaseId)
+            return;
+        const config = parseDriverConfig(params.config);
+        const client = createModalClient(config);
+        try {
+            const sandbox = await getSandboxOrNull(client, params.providerLeaseId);
+            if (!sandbox)
+                return;
+            await sandbox.terminate();
+        }
+        finally {
+            client.close();
+        }
+    },
+    async onEnvironmentRealizeWorkspace(params) {
+        const config = parseDriverConfig(params.config);
+        const fallback = params.workspace.remotePath ??
+            params.workspace.localPath ??
+            config.workdir;
+        const remoteCwd = leaseRemoteCwd(params.lease.metadata, fallback);
+        if (params.lease.providerLeaseId) {
+            const client = createModalClient(config);
+            try {
+                const sandbox = await getSandboxOrNull(client, params.lease.providerLeaseId);
+                if (sandbox) {
+                    await ensureRemoteWorkspace(sandbox, remoteCwd);
+                }
+            }
+            finally {
+                client.close();
+            }
+        }
+        return {
+            cwd: remoteCwd,
+            metadata: { provider: "modal", remoteCwd },
+        };
+    },
+    async onEnvironmentExecute(params) {
+        if (!params.lease.providerLeaseId) {
+            return {
+                exitCode: 1,
+                timedOut: false,
+                stdout: "",
+                stderr: "No provider lease ID available for execution.",
+            };
+        }
+        const config = parseDriverConfig(params.config);
+        const client = createModalClient(config);
+        const callerTimeoutMs = params.timeoutMs != null && Number.isFinite(params.timeoutMs) && params.timeoutMs > 0
+            ? Math.max(1000, Math.trunc(params.timeoutMs / 1000) * 1000)
+            : config.execTimeoutMs;
+        try {
+            const sandbox = await getSandboxOrNull(client, params.lease.providerLeaseId);
+            if (!sandbox) {
+                return {
+                    exitCode: 1,
+                    timedOut: false,
+                    stdout: "",
+                    stderr: "Modal sandbox lease is no longer available.\n",
+                };
+            }
+            const stdinPath = params.stdin != null
+                ? `/tmp/paperclip-stdin-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`
+                : null;
+            try {
+                if (stdinPath && params.stdin != null) {
+                    await stageStdin(sandbox, params.stdin, stdinPath);
+                }
+                const script = buildLoginShellScript({
+                    command: params.command,
+                    args: params.args ?? [],
+                    cwd: params.cwd ?? config.workdir,
+                    env: params.env,
+                    stdinPath: stdinPath ?? undefined,
+                });
+                const proc = await sandbox.exec(["sh", "-c", script], {
+                    timeoutMs: callerTimeoutMs,
+                    stdout: "pipe",
+                    stderr: "pipe",
+                });
+                const { stdout, stderr, exitCode } = await readProcessStreams(proc);
+                return {
+                    exitCode,
+                    timedOut: false,
+                    stdout,
+                    stderr,
+                };
+            }
+            catch (error) {
+                if (error instanceof TimeoutError || error instanceof SandboxTimeoutError) {
+                    return {
+                        exitCode: null,
+                        timedOut: true,
+                        stdout: "",
+                        stderr: `${formatErrorMessage(error)}\n`,
+                    };
+                }
+                throw error;
+            }
+            finally {
+                if (stdinPath) {
+                    await deleteStdinPath(sandbox, stdinPath);
+                }
+            }
+        }
+        finally {
+            client.close();
+        }
+    },
+});
+export default plugin;
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,YAAY,GAKb,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAiBpE,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAC7C,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAiB1C,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK;SAClB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAA4B;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;QAC/C,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3C,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QACzC,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QACjD,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QACjD,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe;QAC5D,gBAAgB,EACd,mBAAmB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAC5F,aAAa,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7E,aAAa,EACX,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,uBAAuB;QACnF,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI;QACvC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC;QAClD,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,2EAA2E;IAC3E,mEAAmE;IACnE,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAyB;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAiD,EAAE,CAAC;IAChE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAmB,EAAE,MAAyB;IACtE,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QAChD,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,KAGjC;IACC,MAAM,MAAM,GAAwB;QAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;QACxC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;KACxC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;IACpD,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,0CAA0C;IAC1C,KAAK,KAAK,CAAC,IAAI,CAAC;IAChB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAKzB;IACC,OAAO;QACL,oBAAoB,EAAE,OAAO;QAC7B,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,0BAA0B,EAAE,KAAK,CAAC,aAAa;QAC/C,uBAAuB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAmB,EACnB,GAAQ,EACR,MAAyB,EACzB,IAA4B;IAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,OAAO,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,SAAS,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAKtB;IACC,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QACzB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;QAC/C,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;QACzC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,wEAAwE;AACxE,0BAA0B;AAC1B,SAAS,qBAAqB,CAAC,KAM9B;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;SAC1E,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS;QAChC,CAAC,CAAC,GAAG,YAAY,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACpD,CAAC,CAAC,YAAY,CAAC;IACjB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,UAAU,EAAE,CAAC;IAC5G,MAAM,KAAK,GAAG;QACZ,yEAAyE;QACzE,iFAAiF;QACjF,wKAAwK;QACxK,mFAAmF;KACpF,CAAC;IACF,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAAgB,EAAE,SAAiB;IACtE,kEAAkE;IAClE,2EAA2E;IAC3E,4BAA4B;IAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,6BAA6B,QAAQ,EAAE,CACjG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,KAAa,EAAE,UAAkB;IAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,UAAkB;IACjE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAA8B;IAE9B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QACtB,IAAI,CAAC,IAAI,EAAE;KACZ,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,YAAY,aAAa,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAmB,EACnB,eAAuB;IAEvB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmD;IAChF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,6CAA6C,OAAO,CAAC,QAAQ,CAAC,IAAI,mFAAmF,CAAC;QACtK,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAA6C,EAAE,QAAgB;IACrF,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,CAAC;IAC1B,KAAK,CAAC,KAAK,CAAC,GAAG;QACb,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,MAA6C;QAE7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACxE,CAAC;QACD,IACE,MAAM,CAAC,gBAAgB,GAAG,IAAI;YAC9B,MAAM,CAAC,gBAAgB,GAAG,sBAAsB;YAChD,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CACT,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC5B,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EACxE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACnF,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,MAAoC;QAEpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBACzE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,iBAAiB,EAAE,CAAC;oBAC1D,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,oCAAoC,QAAQ,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;wBACzF,QAAQ,EAAE;4BACR,QAAQ,EAAE,OAAO;4BACjB,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,KAAK,EAAE,MAAM,CAAC,KAAK;yBACpB;qBACF,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,qCAAqC,MAAM,CAAC,OAAO,GAAG;oBAC/D,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,SAAS,EAAE,MAAM,CAAC,OAAO;qBAC1B;iBACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,6BAA6B;gBACtC,QAAQ,EAAE;oBACR,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC;iBACjC;aACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAA2C;QAE3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC;gBAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrD,OAAO;oBACL,eAAe,EAAE,OAAO,CAAC,SAAS;oBAClC,QAAQ,EAAE,aAAa,CAAC;wBACtB,MAAM;wBACN,OAAO;wBACP,SAAS,EAAE,MAAM,CAAC,OAAO;wBACzB,YAAY,EAAE,KAAK;qBACpB,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,mEAAmE;YACnE,kBAAkB;YAClB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,MAA0C;QAE1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrD,OAAO;oBACL,eAAe,EAAE,OAAO,CAAC,SAAS;oBAClC,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;iBAC5F,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mEAAmE;gBACnE,+DAA+D;gBAC/D,qEAAqE;gBACrE,SAAS;gBACT,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAA2C;QAE3C,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,mEAAmE;gBACnE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAA2C;QAE3C,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,MAA+C;QAE/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,QAAQ,GACZ,MAAM,CAAC,SAAS,CAAC,UAAU;YAC3B,MAAM,CAAC,SAAS,CAAC,SAAS;YAC1B,MAAM,CAAC,OAAO,CAAC;QACjB,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC7E,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO;YACL,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAsC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAClC,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,+CAA+C;aACxD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,eAAe,GACnB,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;YACnF,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC7E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,+CAA+C;iBACxD,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI;gBACpC,CAAC,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACjF,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;oBACtC,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,MAAM,GAAG,qBAAqB,CAAC;oBACnC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;oBACvB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO;oBACjC,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,SAAS,EAAE,SAAS,IAAI,SAAS;iBAClC,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;oBACpD,SAAS,EAAE,eAAe;oBAC1B,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACpE,OAAO;oBACL,QAAQ;oBACR,QAAQ,EAAE,KAAK;oBACf,MAAM;oBACN,MAAM;iBACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;oBAC1E,OAAO;wBACL,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI;qBACzC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,3 @@
+import plugin from "./plugin.js";
+export default plugin;
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,eAAe,MAAM,CAAC"}

package/dist/worker.js

@@ -0,0 +1,5 @@
+import { runWorker } from "@tickernelz/paperclip-pro-plugin-sdk";
+import plugin from "./plugin.js";
+export default plugin;
+runWorker(plugin, import.meta.url);
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,eAAe,MAAM,CAAC;AACtB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@tickernelz/paperclip-pro-plugin-modal",
+  "version": "2026.925.0",
+  "description": "Modal sandbox provider plugin for Paperclip environments",
+  "license": "MIT",
+  "homepage": "https://github.com/tickernelz/paperclip-pro",
+  "bugs": {
+    "url": "https://github.com/tickernelz/paperclip-pro/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tickernelz/paperclip-pro",
+    "directory": "packages/plugins/sandbox-providers/modal"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "paperclipPlugin": {
+    "manifest": "./dist/manifest.js",
+    "worker": "./dist/worker.js"
+  },
+  "keywords": [
+    "paperclip",
+    "plugin",
+    "sandbox",
+    "modal"
+  ],
+  "dependencies": {
+    "modal": "^0.7.4",
+    "@tickernelz/paperclip-pro-plugin-sdk": "2026.925.0"
+  }
+}