@zhivex-ai/sandbox-docker 0.0.1 → 0.2.0

package/dist/stores.js

@@ -0,0 +1,396 @@
+import { createHash, randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { link, lstat, mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { ConflictError } from "@zhivex-ai/core";
+import { SandboxError } from "./errors.js";
+const leaseKey = (runId, scopeKey) => `${scopeKey}\0${runId}`;
+const assertLeaseIdentity = (lease, runId, scopeKey) => {
+    if (lease.runId !== runId || lease.scopeKey !== scopeKey) {
+        throw new SandboxError("STORE_INVALID", "Sandbox lease identity does not match the requested run.");
+    }
+};
+const assertSnapshotIdentity = (snapshot, runId, scopeKey) => {
+    if (snapshot.runId !== runId || snapshot.scopeKey !== scopeKey) {
+        throw new SandboxError("SNAPSHOT_INVALID", "Sandbox snapshot identity does not match the requested run.");
+    }
+};
+export const createMemorySandboxLeaseStore = () => {
+    const records = new Map();
+    return {
+        async load(runId, scopeKey) {
+            assertStoreRunId(runId);
+            assertScopeKey(scopeKey);
+            const record = records.get(leaseKey(runId, scopeKey));
+            if (!record)
+                return undefined;
+            assertLeaseIdentity(record, runId, scopeKey);
+            return structuredClone(record);
+        },
+        async compareAndSwap(lease, expectedRevision) {
+            assertStoreRunId(lease.runId);
+            assertScopeKey(lease.scopeKey);
+            assertLeaseIdentity(lease, lease.runId, lease.scopeKey);
+            const key = leaseKey(lease.runId, lease.scopeKey);
+            const current = records.get(key);
+            if (current?.revision !== expectedRevision) {
+                throw new ConflictError(`Sandbox lease for run "${lease.runId}" changed before it could be saved.`);
+            }
+            records.set(key, structuredClone(lease));
+            return structuredClone(lease);
+        },
+        async list() {
+            return [...records.values()].map(record => structuredClone(record));
+        }
+    };
+};
+export const createMemorySandboxSnapshotStore = () => {
+    const records = new Map();
+    return {
+        async load(runId, scopeKey) {
+            assertStoreRunId(runId);
+            assertScopeKey(scopeKey);
+            const record = records.get(leaseKey(runId, scopeKey));
+            if (!record)
+                return undefined;
+            assertSnapshotIdentity(record, runId, scopeKey);
+            return {
+                ...record,
+                workspaceTar: new Uint8Array(record.workspaceTar),
+                ...(record.pendingImageIds ? { pendingImageIds: [...record.pendingImageIds] } : {})
+            };
+        },
+        async save(snapshot) {
+            assertStoreRunId(snapshot.runId);
+            assertScopeKey(snapshot.scopeKey);
+            assertSnapshotIdentity(snapshot, snapshot.runId, snapshot.scopeKey);
+            records.set(leaseKey(snapshot.runId, snapshot.scopeKey), {
+                ...snapshot,
+                workspaceTar: new Uint8Array(snapshot.workspaceTar),
+                ...(snapshot.pendingImageIds ? { pendingImageIds: [...snapshot.pendingImageIds] } : {})
+            });
+        },
+        async remove(runId, scopeKey) {
+            assertStoreRunId(runId);
+            assertScopeKey(scopeKey);
+            records.delete(leaseKey(runId, scopeKey));
+        }
+    };
+};
+const scopeDirectory = (scopeKey) => createHash("sha256").update(scopeKey).digest("hex");
+/** Reject dot segments before they reach path.join. encodeURIComponent leaves "." and ".." unchanged. */
+const assertStoreRunId = (runId) => {
+    if (typeof runId !== "string" || runId.length === 0 || runId.length > 512 || runId.includes("\0")) {
+        throw new SandboxError("STORE_ID", "Sandbox run id must be a non-empty string.");
+    }
+    if (runId === "." || runId === "..") {
+        throw new SandboxError("STORE_ID", "Sandbox run id cannot be '.' or '..'.");
+    }
+    const encoded = encodeURIComponent(runId);
+    if (encoded === "." || encoded === ".." || encoded.includes("/") || encoded.includes("\\")) {
+        throw new SandboxError("STORE_ID", "Sandbox run id cannot escape its scope directory.");
+    }
+    return encoded;
+};
+const assertScopeKey = (scopeKey) => {
+    if (typeof scopeKey !== "string" || scopeKey.length === 0 || scopeKey.length > 4096 || scopeKey.includes("\0")) {
+        throw new SandboxError("STORE_ID", "Sandbox scope key must be a non-empty string.");
+    }
+};
+/** Join a scope file and refuse a path whose segments leave the scope directory. */
+const scopeFile = (directory, scopeKey, name) => {
+    assertScopeKey(scopeKey);
+    const scopeDir = path.resolve(directory, scopeDirectory(scopeKey));
+    const resolved = path.resolve(scopeDir, name);
+    const relative = path.relative(scopeDir, resolved);
+    if (path.isAbsolute(relative) || relative.split(path.sep).includes("..")) {
+        throw new SandboxError("STORE_ID", "Sandbox store path escapes its scope directory.");
+    }
+    return resolved;
+};
+const assertPrivateFile = async (file) => {
+    const info = await stat(file);
+    if ((info.mode & 0o777) !== 0o600) {
+        throw new SandboxError("STORE_PERMISSIONS", `Sandbox state file ${file} must be mode 0600.`);
+    }
+};
+const writePrivate = async (file, bytes) => {
+    await mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    await writeFile(temporary, bytes, { mode: 0o600 });
+    await rename(temporary, file);
+    await assertPrivateFile(file);
+};
+const LOCK_WAIT_MS = 5_000;
+const MALFORMED_LOCK_MS = 30_000;
+const chains = new Map();
+const withInProcessLock = async (key, operation) => {
+    const previous = chains.get(key) ?? Promise.resolve();
+    let release;
+    const gate = new Promise(resolve => {
+        release = resolve;
+    });
+    const tail = previous.then(() => gate);
+    chains.set(key, tail);
+    try {
+        await previous;
+        return await operation();
+    }
+    finally {
+        release();
+        if (chains.get(key) === tail)
+            chains.delete(key);
+    }
+};
+const processAlive = (pid) => {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== "ESRCH";
+    }
+};
+const readLock = async (lockPath) => {
+    let handle;
+    try {
+        handle = await open(lockPath, constants.O_RDONLY | constants.O_NOFOLLOW);
+        const info = await handle.stat();
+        const body = await handle.readFile({ encoding: "utf8" });
+        let record;
+        try {
+            const parsed = JSON.parse(body);
+            if (typeof parsed.ownerId === "string" &&
+                parsed.ownerId.length > 0 &&
+                typeof parsed.pid === "number" &&
+                Number.isInteger(parsed.pid) &&
+                typeof parsed.createdAt === "number") {
+                record = { ownerId: parsed.ownerId, pid: parsed.pid, createdAt: parsed.createdAt };
+            }
+        }
+        catch {
+            record = undefined;
+        }
+        return { record, modifiedAt: info.mtimeMs };
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    finally {
+        await handle?.close();
+    }
+};
+const stealLock = async (lockPath, current) => {
+    const recovery = `${lockPath}.${randomUUID()}.recovery`;
+    try {
+        await link(lockPath, recovery);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT")
+            return true;
+        if (code === "EEXIST")
+            return false;
+        throw error;
+    }
+    try {
+        const [lockInfo, recoveryInfo] = await Promise.all([lstat(lockPath), lstat(recovery)]);
+        if (lockInfo.dev !== recoveryInfo.dev || lockInfo.ino !== recoveryInfo.ino)
+            return false;
+        const verified = await readLock(lockPath);
+        if (current.record?.ownerId !== verified?.record?.ownerId)
+            return false;
+        if (!current.record && verified?.record)
+            return false;
+        await unlink(lockPath);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return true;
+        throw error;
+    }
+    finally {
+        await unlink(recovery).catch((error) => {
+            if (error.code !== "ENOENT")
+                throw error;
+        });
+    }
+};
+const acquireFileLock = async (lockPath) => {
+    const ownerId = randomUUID();
+    const startedAt = Date.now();
+    const body = JSON.stringify({ ownerId, pid: process.pid, createdAt: startedAt });
+    await mkdir(path.dirname(lockPath), { recursive: true, mode: 0o700 });
+    while (Date.now() - startedAt <= LOCK_WAIT_MS) {
+        let handle;
+        try {
+            handle = await open(lockPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+            await handle.writeFile(body);
+            await handle.close();
+            handle = undefined;
+            return async () => {
+                const current = await readLock(lockPath);
+                if (current?.record?.ownerId !== ownerId)
+                    return;
+                await unlink(lockPath).catch((error) => {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                });
+            };
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        finally {
+            await handle?.close();
+        }
+        const current = await readLock(lockPath);
+        if (!current)
+            continue;
+        const deadOwner = current.record ? !processAlive(current.record.pid) : false;
+        const malformedStale = !current.record && Date.now() - current.modifiedAt >= MALFORMED_LOCK_MS;
+        if ((deadOwner || malformedStale) && await stealLock(lockPath, current))
+            continue;
+        if (Date.now() - startedAt >= LOCK_WAIT_MS)
+            break;
+        await new Promise(resolve => setTimeout(resolve, 25));
+    }
+    throw new ConflictError("Timed out acquiring the sandbox file lock.");
+};
+const withFileLock = (lockPath, operation) => withInProcessLock(lockPath, async () => {
+    const release = await acquireFileLock(lockPath);
+    try {
+        return await operation();
+    }
+    finally {
+        await release();
+    }
+});
+const readLeaseFile = async (file) => {
+    try {
+        await assertPrivateFile(file);
+        return JSON.parse(await readFile(file, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+};
+export const createFileSandboxLeaseStore = (directory) => {
+    const fileFor = (runId, scopeKey) => scopeFile(directory, scopeKey, `${assertStoreRunId(runId)}.json`);
+    return {
+        async load(runId, scopeKey) {
+            try {
+                const file = fileFor(runId, scopeKey);
+                await assertPrivateFile(file);
+                const lease = JSON.parse(await readFile(file, "utf8"));
+                assertLeaseIdentity(lease, runId, scopeKey);
+                return lease;
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    return undefined;
+                throw error;
+            }
+        },
+        async compareAndSwap(lease, expectedRevision) {
+            const file = fileFor(lease.runId, lease.scopeKey);
+            return withFileLock(`${file}.lock`, async () => {
+                const current = await readLeaseFile(file);
+                if (current && (current.runId !== lease.runId || current.scopeKey !== lease.scopeKey)) {
+                    throw new SandboxError("STORE_INVALID", "Sandbox lease identity does not match the requested run.");
+                }
+                if (current?.revision !== expectedRevision) {
+                    throw new ConflictError(`Sandbox lease for run "${lease.runId}" changed before it could be saved.`);
+                }
+                assertLeaseIdentity(lease, lease.runId, lease.scopeKey);
+                await writePrivate(file, JSON.stringify(lease));
+                return lease;
+            });
+        },
+        async list() {
+            const { readdir } = await import("node:fs/promises");
+            const leases = [];
+            let scopes = [];
+            try {
+                scopes = await readdir(directory);
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    return [];
+                throw error;
+            }
+            for (const scope of scopes) {
+                const files = await readdir(path.join(directory, scope));
+                for (const file of files) {
+                    if (!file.endsWith(".json"))
+                        continue;
+                    const full = path.join(directory, scope, file);
+                    await assertPrivateFile(full);
+                    const lease = JSON.parse(await readFile(full, "utf8"));
+                    if (`${encodeURIComponent(lease.runId)}.json` !== file) {
+                        throw new SandboxError("STORE_INVALID", "Sandbox lease file name does not match the stored run id.");
+                    }
+                    leases.push(lease);
+                }
+            }
+            return leases;
+        }
+    };
+};
+export const createFileSandboxSnapshotStore = (directory) => {
+    const base = (runId, scopeKey) => scopeFile(directory, scopeKey, assertStoreRunId(runId));
+    const readSnapshot = async (stem, runId, scopeKey) => {
+        try {
+            await assertPrivateFile(`${stem}.json`);
+            await assertPrivateFile(`${stem}.tar`);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return undefined;
+            throw error;
+        }
+        const meta = JSON.parse(await readFile(`${stem}.json`, "utf8"));
+        const workspaceTar = new Uint8Array(await readFile(`${stem}.tar`));
+        if (meta.tarSha256) {
+            const actual = createHash("sha256").update(workspaceTar).digest("hex");
+            if (actual !== meta.tarSha256) {
+                throw new SandboxError("SNAPSHOT_INVALID", "Sandbox snapshot bytes do not match the stored hash.");
+            }
+        }
+        const { tarSha256: _hash, ...snapshot } = meta;
+        assertSnapshotIdentity(snapshot, runId, scopeKey);
+        return { ...snapshot, workspaceTar };
+    };
+    return {
+        async load(runId, scopeKey) {
+            const stem = base(runId, scopeKey);
+            return withFileLock(`${stem}.lock`, () => readSnapshot(stem, runId, scopeKey));
+        },
+        async save(snapshot) {
+            assertSnapshotIdentity(snapshot, snapshot.runId, snapshot.scopeKey);
+            const stem = base(snapshot.runId, snapshot.scopeKey);
+            await withFileLock(`${stem}.lock`, async () => {
+                const { workspaceTar, ...meta } = snapshot;
+                const tarSha256 = createHash("sha256").update(workspaceTar).digest("hex");
+                await writePrivate(`${stem}.tar`, workspaceTar);
+                await writePrivate(`${stem}.json`, JSON.stringify({ ...meta, tarSha256 }));
+            });
+        },
+        async remove(runId, scopeKey) {
+            const stem = base(runId, scopeKey);
+            await withFileLock(`${stem}.lock`, async () => {
+                await rm(`${stem}.json`, { force: true });
+                await rm(`${stem}.tar`, { force: true });
+            });
+        }
+    };
+};
+//# sourceMappingURL=stores.js.map

package/dist/stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.js","sourceRoot":"","sources":["../src/stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA2C3C,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,KAAK,EAAE,CAAC;AAE9E,MAAM,mBAAmB,GAAG,CAAC,KAAmB,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;IACnF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,QAA6C,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;IAChH,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,6DAA6D,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAsB,EAAE;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB;YAC1C,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9B,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,OAAO,EAAE,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CAAC,0BAA0B,KAAK,CAAC,KAAK,qCAAqC,CAAC,CAAC;YACtG,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAyB,EAAE;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAChD,OAAO;gBACL,GAAG,MAAM;gBACT,YAAY,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;gBACjD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ;YACjB,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACvD,GAAG,QAAQ;gBACX,YAAY,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACnD,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxF,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ;YAC1B,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjG,yGAAyG;AACzG,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,mDAAmD,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,EAAE;IAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;IACtE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,iDAAiD,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,sBAAsB,IAAI,qBAAqB,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,KAA0B,EAAE,EAAE;IACtE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;AAQhD,MAAM,iBAAiB,GAAG,KAAK,EAAK,GAAW,EAAE,SAA2B,EAAc,EAAE;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACtD,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;QACvC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC;QACf,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;QACV,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE;IACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAgB,EAAwE,EAAE;IAChH,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,MAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACzB,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC5B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;gBACD,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,OAAoC,EAAE,EAAE;IACjF,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,WAAW,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,EAAE,MAAM,EAAE,OAAO;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,MAAM;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,EAAE,QAAgB,EAAgC,EAAE;IAC/E,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9C,IAAI,MAAoD,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACvH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,SAAS,CAAC;YACnB,OAAO,KAAK,IAAI,EAAE;gBAChB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO;oBAAE,OAAO;gBACjD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;oBAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBAC3C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAC/F,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,IAAI,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,SAAS;QAClF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,YAAY;YAAE,MAAM;QAClD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAI,QAAgB,EAAE,SAA2B,EAAE,EAAE,CACxE,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IACrC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAqC,EAAE;IAC9E,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAAiB,EAAqB,EAAE;IAClF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,EAAE,CAClD,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACtC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;gBACvE,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC5C,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBACzE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtF,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;gBACtG,CAAC;gBACD,IAAI,OAAO,EAAE,QAAQ,KAAK,gBAAgB,EAAE,CAAC;oBAC3C,MAAM,IAAI,aAAa,CAAC,0BAA0B,KAAK,CAAC,KAAK,qCAAqC,CAAC,CAAC;gBACtG,CAAC;gBACD,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAmB,EAAE,CAAC;YAClC,IAAI,MAAM,GAAa,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAClE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAAE,SAAS;oBACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC/C,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;oBACvE,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;wBACvD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAC;oBACvG,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,SAAiB,EAAwB,EAAE;IACxF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1G,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,KAAa,EAAE,QAAgB,EAAwC,EAAE;QACjH,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;YACxC,MAAM,iBAAiB,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,MAAM,CAAC,CAAmE,CAAC;QAClI,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,sDAAsD,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QAC/C,sBAAsB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnC,OAAO,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ;YACjB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC5C,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;gBAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1E,MAAM,YAAY,CAAC,GAAG,IAAI,MAAM,EAAE,YAAY,CAAC,CAAC;gBAChD,MAAM,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnC,MAAM,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC5C,MAAM,EAAE,CAAC,GAAG,IAAI,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,MAAM,EAAE,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/stream.d.ts

@@ -0,0 +1,11 @@
+export declare const encodeDockerStreamFrame: (type: 1 | 2, payload: Uint8Array) => Uint8Array;
+export declare const readMultiplexedStream: (chunks: AsyncIterable<Uint8Array>, maxBytes: number) => Promise<{
+    stdout: Uint8Array;
+    stderr: Uint8Array;
+    truncated: boolean;
+}>;
+export declare const decodeCappedText: (bytes: Uint8Array, maxBytes: number) => {
+    text: string;
+    truncated: boolean;
+};
+//# sourceMappingURL=stream.d.ts.map

package/dist/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,uBAAuB,SAAU,CAAC,GAAG,CAAC,WAAW,UAAU,KAAG,UAM1E,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACxB,aAAa,CAAC,UAAU,CAAC,YACvB,MAAM,KACf,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CA+CxE,CAAC;AAEF,eAAO,MAAM,gBAAgB,UAAW,UAAU,YAAY,MAAM;IAGhE,IAAI;IACJ,SAAS;CAEZ,CAAC"}

package/dist/stream.js

@@ -0,0 +1,75 @@
+const concat = (left, right) => {
+    const out = new Uint8Array(left.length + right.length);
+    out.set(left);
+    out.set(right, left.length);
+    return out;
+};
+export const encodeDockerStreamFrame = (type, payload) => {
+    const frame = new Uint8Array(8 + payload.length);
+    frame[0] = type;
+    new DataView(frame.buffer).setUint32(4, payload.byteLength);
+    frame.set(payload, 8);
+    return frame;
+};
+export const readMultiplexedStream = async (chunks, maxBytes) => {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+        throw new Error("Docker output cap must be a positive safe integer.");
+    }
+    const stdout = [];
+    const stderr = [];
+    let stdoutLen = 0;
+    let stderrLen = 0;
+    let pending = new Uint8Array();
+    let truncated = false;
+    const append = (target, used, payload) => {
+        const room = maxBytes - used;
+        if (room <= 0) {
+            truncated = true;
+            return 0;
+        }
+        const slice = payload.length > room ? payload.subarray(0, room) : payload;
+        if (slice.length < payload.length)
+            truncated = true;
+        if (slice.length)
+            target.push(slice);
+        return slice.length;
+    };
+    for await (const chunk of chunks) {
+        pending = concat(pending, chunk);
+        while (pending.length >= 8) {
+            const size = new DataView(pending.buffer, pending.byteOffset, pending.byteLength).getUint32(4);
+            if (!Number.isSafeInteger(size) || pending.length < 8 + size)
+                break;
+            const type = pending[0];
+            const payload = pending.subarray(8, 8 + size);
+            pending = pending.subarray(8 + size);
+            if (type === 1) {
+                if (stdoutLen >= maxBytes)
+                    truncated = true;
+                else
+                    stdoutLen += append(stdout, stdoutLen, payload);
+            }
+            else if (type === 2) {
+                if (stderrLen >= maxBytes)
+                    truncated = true;
+                else
+                    stderrLen += append(stderr, stderrLen, payload);
+            }
+        }
+        if (stdoutLen >= maxBytes && stderrLen >= maxBytes)
+            break;
+    }
+    return {
+        stdout: stdout.reduce(concat, new Uint8Array()),
+        stderr: stderr.reduce(concat, new Uint8Array()),
+        truncated
+    };
+};
+export const decodeCappedText = (bytes, maxBytes) => {
+    const slice = bytes.length > maxBytes ? bytes.subarray(0, maxBytes) : bytes;
+    return {
+        text: new TextDecoder("utf-8", { fatal: false }).decode(slice),
+        truncated: bytes.length > maxBytes
+    };
+};
+//# sourceMappingURL=stream.js.map

package/dist/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,CAAC,IAAiC,EAAE,KAAkC,EAAE,EAAE;IACvF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAW,EAAE,OAAmB,EAAc,EAAE;IACtF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,MAAiC,EACjC,QAAgB,EACyD,EAAE;IAC3E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,IAAY,EAAE,OAAmB,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,SAAS,GAAG,IAAI,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC,CAAC;IAEF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI;gBAAE,MAAM;YACpE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9C,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,IAAI,SAAS,IAAI,QAAQ;oBAAE,SAAS,GAAG,IAAI,CAAC;;oBACvC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,SAAS,IAAI,QAAQ;oBAAE,SAAS,GAAG,IAAI,CAAC;;oBACvC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,SAAS,IAAI,QAAQ,IAAI,SAAS,IAAI,QAAQ;YAAE,MAAM;IAC5D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC/C,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAE,QAAgB,EAAE,EAAE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5E,OAAO;QACL,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9D,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ;KACnC,CAAC;AACJ,CAAC,CAAC"}

package/dist/tar.d.ts

@@ -0,0 +1,13 @@
+export interface TarEntry {
+    path: string;
+    type: "file" | "directory" | "symlink";
+    content?: Uint8Array;
+    linkTarget?: string;
+    mode?: number;
+    uid?: number;
+    gid?: number;
+}
+export declare const packTar: (entries: readonly TarEntry[]) => Uint8Array;
+export declare const unpackTar: (bytes: Uint8Array) => TarEntry[];
+export declare const stripTarRoot: (entries: readonly TarEntry[], rootName: string) => TarEntry[];
+//# sourceMappingURL=tar.d.ts.map

package/dist/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACvC,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+FD,eAAO,MAAM,OAAO,YAAa,SAAS,QAAQ,EAAE,KAAG,UAoCtD,CAAC;AAiDF,eAAO,MAAM,SAAS,UAAW,UAAU,KAAG,QAAQ,EA2CrD,CAAC;AAEF,eAAO,MAAM,YAAY,YAAa,SAAS,QAAQ,EAAE,YAAY,MAAM,KAAG,QAAQ,EAMlF,CAAC"}