buildhive-agent 1.0.0-beta.1

package/dist/docker.js

@@ -0,0 +1,411 @@
+/**
+ * Docker Manager - Container management for job execution
+ *
+ * Handles Docker container lifecycle, security configuration,
+ * and resource management for isolated job execution.
+ *
+ * Enhanced with comprehensive security measures and monitoring.
+ *
+ * Requirements: 4.1, 4.2, 4.3, 4.4, 4.5
+ */
+import { createLogger } from './utils/logger.js';
+import { SecurityManager } from './security.js';
+import { spawn } from 'child_process';
+import { promises as fs } from 'fs';
+import { join } from 'path';
+const logger = createLogger('docker');
+export class DockerManager {
+    config;
+    securityManager;
+    activeContainers = new Set();
+    containerTempDirs = new Map();
+    constructor(config, securityConfig) {
+        this.config = config;
+        this.securityManager = new SecurityManager(securityConfig);
+        logger.info('Docker manager initialized with enhanced security');
+    }
+    /**
+     * Clean up orphaned BuildHive containers from previous agent crashes.
+     * Should be called on startup before accepting new jobs.
+     */
+    async cleanupOrphanedContainers() {
+        try {
+            const result = await this.executeDockerCommand([
+                'ps', '-a', '--filter', 'name=buildhive-', '--format', '{{.ID}} {{.Names}} {{.Status}}'
+            ]);
+            if (result.exitCode !== 0 || !result.output.trim()) {
+                return 0;
+            }
+            const lines = result.output.trim().split('\n').filter(Boolean);
+            let cleaned = 0;
+            for (const line of lines) {
+                const [containerId, name] = line.split(' ');
+                logger.warn(`Removing orphaned container: ${name} (${containerId})`);
+                try {
+                    await this.executeDockerCommand(['rm', '--force', containerId]);
+                    cleaned++;
+                }
+                catch {
+                    logger.error(`Failed to remove orphaned container ${containerId}`);
+                }
+            }
+            if (cleaned > 0) {
+                logger.info(`Cleaned up ${cleaned} orphaned container(s)`);
+            }
+            return cleaned;
+        }
+        catch (error) {
+            logger.error('Failed to clean up orphaned containers:', error);
+            return 0;
+        }
+    }
+    /**
+     * Check if Docker is available and running
+     */
+    async checkDockerAvailability() {
+        try {
+            const result = await this.executeDockerCommand(['version', '--format', 'json']);
+            return result.exitCode === 0;
+        }
+        catch (error) {
+            logger.error('Docker is not available:', error);
+            return false;
+        }
+    }
+    /**
+     * Pull Docker image
+     */
+    async pullImage(image) {
+        // Check if image exists locally first
+        try {
+            const inspectResult = await this.executeDockerCommand(['image', 'inspect', image]);
+            if (inspectResult.exitCode === 0) {
+                logger.info(`Image already cached locally: ${image}`);
+                return; // Skip pull
+            }
+        }
+        catch {
+            // Image not found locally, proceed to pull
+        }
+        logger.info(`Pulling Docker image: ${image}`);
+        try {
+            const result = await this.executeDockerCommand(['pull', image]);
+            if (result.exitCode !== 0) {
+                throw new Error(`Failed to pull image ${image}: ${result.error}`);
+            }
+            logger.info(`Successfully pulled image: ${image}`);
+        }
+        catch (error) {
+            logger.error(`Failed to pull image ${image}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Create a Docker container with enhanced security configuration
+     */
+    async createContainer(containerConfig) {
+        const containerId = `buildhive-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+        logger.info(`Creating secure container: ${containerId}`);
+        try {
+            // Validate image security first
+            const imageViolations = await this.securityManager.validateImageSecurity(containerConfig.image);
+            if (imageViolations.some(v => v.severity === 'critical')) {
+                logger.warn(`Image security violations:`, imageViolations.filter(v => v.severity === 'critical').map(v => v.message));
+                throw new Error(`Image failed security validation: ${imageViolations.filter(v => v.severity === 'critical').map(v => v.message).join(', ')}`);
+            }
+            // Validate container configuration
+            const configViolations = await this.securityManager.validateContainerConfig({
+                ...containerConfig,
+                containerId,
+                memoryLimit: this.config.memoryLimit,
+                cpuLimit: this.config.cpuLimit,
+                networkMode: this.config.networkMode
+            });
+            const criticalViolations = configViolations.filter(v => v.severity === 'critical');
+            if (criticalViolations.length > 0) {
+                logger.warn(`Container security violations:`, criticalViolations.map(v => v.message));
+                throw new Error(`Container configuration failed security validation: ${criticalViolations.map(v => v.message).join(', ')}`);
+            }
+            // Create secure temporary directory
+            const tempDir = await this.securityManager.createSecureTempDir(containerId);
+            this.containerTempDirs.set(containerId, tempDir);
+            const dockerArgs = [
+                'create',
+                '--name', containerId,
+                // No --rm: we handle cleanup explicitly via stopContainer/removeContainer
+            ];
+            // Add enhanced security arguments, filtering out tmpfs mounts that
+            // conflict with explicit volume mounts (e.g. /workspace is both a
+            // volume mount from the job and a tmpfs from allowedWritePaths)
+            const mountedPaths = new Set(containerConfig.volumeMounts.map(m => m.containerPath));
+            const securityArgs = this.securityManager.generateSecureDockerArgs(containerId)
+                .filter((arg, i, arr) => {
+                // Remove --tmpfs entries whose path conflicts with an explicit volume mount
+                if (arg === '--tmpfs' && i + 1 < arr.length) {
+                    const tmpfsPath = arr[i + 1].split(':')[0];
+                    return !mountedPaths.has(tmpfsPath);
+                }
+                // Also remove the value after a filtered --tmpfs
+                if (i > 0 && arr[i - 1] === '--tmpfs') {
+                    const tmpfsPath = arg.split(':')[0];
+                    return !mountedPaths.has(tmpfsPath);
+                }
+                return true;
+            });
+            dockerArgs.push(...securityArgs);
+            // Add basic configuration
+            dockerArgs.push('--workdir', containerConfig.workDir);
+            // Add volume mounts with security validation
+            for (const mount of containerConfig.volumeMounts) {
+                // Use secure temp directory for writable mounts
+                const hostPath = mount.hostPath;
+                const mountStr = `${hostPath}:${mount.containerPath}${mount.readOnly ? ':ro' : ''}`;
+                dockerArgs.push('--volume', mountStr);
+            }
+            // Add environment variables
+            for (const [key, value] of Object.entries(containerConfig.environment)) {
+                dockerArgs.push('--env', `${key}=${value}`);
+            }
+            // Add the image and a keep-alive command so the container stays running
+            dockerArgs.push(containerConfig.image);
+            dockerArgs.push('tail', '-f', '/dev/null');
+            // Execute docker create command
+            const result = await this.executeDockerCommand(dockerArgs);
+            if (result.exitCode !== 0) {
+                throw new Error(`Failed to create container: ${result.error}`);
+            }
+            this.activeContainers.add(containerId);
+            logger.info(`Secure container created successfully: ${containerId}`);
+            return containerId;
+        }
+        catch (error) {
+            logger.error(`Failed to create secure container ${containerId}:`, error);
+            // Cleanup temp directory on failure
+            const tempDir = this.containerTempDirs.get(containerId);
+            if (tempDir) {
+                await this.securityManager.cleanupSecureTempDir(tempDir);
+                this.containerTempDirs.delete(containerId);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Start a Docker container with security monitoring
+     */
+    async startContainer(containerId) {
+        logger.info(`Starting secure container: ${containerId}`);
+        try {
+            const result = await this.executeDockerCommand(['start', containerId]);
+            if (result.exitCode !== 0) {
+                throw new Error(`Failed to start container ${containerId}: ${result.error}`);
+            }
+            // Start security monitoring
+            await this.securityManager.startResourceMonitoring(containerId);
+            logger.info(`Secure container started successfully: ${containerId}`);
+        }
+        catch (error) {
+            logger.error(`Failed to start secure container ${containerId}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Execute a command in a running container
+     */
+    async executeCommand(containerId, command, options = {}) {
+        logger.info(`Executing command in container ${containerId}: ${command}`);
+        try {
+            const dockerArgs = [
+                'exec',
+                '--interactive',
+                containerId,
+                'sh', '-c', command
+            ];
+            const result = await this.executeDockerCommand(dockerArgs, {
+                timeout: options.timeout,
+                onOutput: options.onOutput
+            });
+            logger.info(`Command execution completed in container ${containerId} (exit code: ${result.exitCode})`);
+            return result;
+        }
+        catch (error) {
+            logger.error(`Failed to execute command in container ${containerId}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Stop a running container
+     */
+    async stopContainer(containerId, timeout = 10) {
+        logger.info(`Stopping container: ${containerId}`);
+        try {
+            const result = await this.executeDockerCommand(['stop', '--time', timeout.toString(), containerId]);
+            if (result.exitCode !== 0) {
+                logger.warn(`Failed to stop container gracefully, forcing: ${containerId}`);
+                await this.executeDockerCommand(['kill', containerId]);
+            }
+            logger.info(`Container stopped: ${containerId}`);
+        }
+        catch (error) {
+            logger.error(`Failed to stop container ${containerId}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Remove a container with security cleanup
+     */
+    async removeContainer(containerId) {
+        logger.info(`Removing secure container: ${containerId}`);
+        try {
+            // Stop security monitoring
+            this.securityManager.stopResourceMonitoring(containerId);
+            // First try to stop the container if it's running
+            await this.stopContainer(containerId);
+            // Remove the container
+            const result = await this.executeDockerCommand(['rm', '--force', containerId]);
+            if (result.exitCode !== 0) {
+                logger.warn(`Failed to remove container ${containerId}: ${result.error}`);
+            }
+            else {
+                logger.info(`Container removed: ${containerId}`);
+            }
+            // Cleanup secure temp directory
+            const tempDir = this.containerTempDirs.get(containerId);
+            if (tempDir) {
+                await this.securityManager.cleanupSecureTempDir(tempDir);
+                this.containerTempDirs.delete(containerId);
+            }
+            this.activeContainers.delete(containerId);
+        }
+        catch (error) {
+            logger.error(`Failed to remove secure container ${containerId}:`, error);
+            // Don't throw here, as this is cleanup
+        }
+    }
+    /**
+     * Copy file from container to host
+     */
+    async copyFromContainer(containerId, containerPath, hostPath) {
+        logger.info(`Copying from container ${containerId}: ${containerPath} -> ${hostPath}`);
+        try {
+            // Ensure host directory exists
+            const hostDir = join(hostPath, '..');
+            await fs.mkdir(hostDir, { recursive: true });
+            const result = await this.executeDockerCommand([
+                'cp',
+                `${containerId}:${containerPath}`,
+                hostPath
+            ]);
+            if (result.exitCode !== 0) {
+                throw new Error(`Failed to copy from container: ${result.error}`);
+            }
+            logger.info(`Successfully copied from container: ${containerPath}`);
+        }
+        catch (error) {
+            logger.error(`Failed to copy from container ${containerId}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Get container logs
+     */
+    async getContainerLogs(containerId) {
+        try {
+            const result = await this.executeDockerCommand(['logs', containerId]);
+            return result.output;
+        }
+        catch (error) {
+            logger.error(`Failed to get logs for container ${containerId}:`, error);
+            return '';
+        }
+    }
+    /**
+     * Get security violations for monitoring
+     */
+    getSecurityViolations() {
+        return this.securityManager.getViolations();
+    }
+    /**
+     * Get resource usage for a container
+     */
+    async getResourceUsage(containerId) {
+        return await this.securityManager.getResourceUsage(containerId);
+    }
+    /**
+     * Clean up all active containers with security cleanup
+     */
+    async cleanup() {
+        logger.info('Cleaning up secure Docker manager...');
+        const containerIds = Array.from(this.activeContainers);
+        for (const containerId of containerIds) {
+            await this.removeContainer(containerId);
+        }
+        // Cleanup security manager
+        this.securityManager.cleanup();
+        this.activeContainers.clear();
+        this.containerTempDirs.clear();
+        logger.info('Secure Docker manager cleanup completed');
+    }
+    /**
+     * Execute a Docker command
+     */
+    async executeDockerCommand(args, options = {}) {
+        return new Promise((resolve, reject) => {
+            const child = spawn('docker', args, {
+                stdio: ['pipe', 'pipe', 'pipe']
+            });
+            let output = '';
+            let error = '';
+            let outputTruncated = false;
+            const MAX_OUTPUT_SIZE = 10 * 1024 * 1024; // 10MB
+            let timeoutId = null;
+            // Set up timeout if specified
+            if (options.timeout) {
+                timeoutId = setTimeout(() => {
+                    child.kill('SIGKILL');
+                    reject(new Error(`Command timed out after ${options.timeout}ms`));
+                }, options.timeout);
+            }
+            // Collect stdout
+            child.stdout.on('data', (data) => {
+                const chunk = data.toString();
+                if (output.length < MAX_OUTPUT_SIZE) {
+                    output += chunk;
+                }
+                else if (!outputTruncated) {
+                    output += '\n[OUTPUT TRUNCATED - exceeded 10MB limit]';
+                    outputTruncated = true;
+                }
+                if (options.onOutput) {
+                    options.onOutput(chunk);
+                }
+            });
+            // Collect stderr
+            child.stderr.on('data', (data) => {
+                const chunk = data.toString();
+                error += chunk;
+                if (options.onOutput) {
+                    options.onOutput(chunk);
+                }
+            });
+            // Handle process completion
+            child.on('close', (code) => {
+                if (timeoutId) {
+                    clearTimeout(timeoutId);
+                }
+                resolve({
+                    exitCode: code || 0,
+                    output: output.trim(),
+                    error: error.trim()
+                });
+            });
+            // Handle process errors
+            child.on('error', (err) => {
+                if (timeoutId) {
+                    clearTimeout(timeoutId);
+                }
+                reject(err);
+            });
+        });
+    }
+}
+//# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAqC,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAwBtC,MAAM,OAAO,aAAa;IAChB,MAAM,CAAe;IACrB,eAAe,CAAkB;IACjC,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEtD,YAAY,MAAoB,EAAE,cAA8B;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;gBAC7C,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,gCAAgC;aACxF,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnD,OAAO,CAAC,CAAC;YACX,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC;gBACrE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;oBAChE,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,KAAK,CAAC,uCAAuC,WAAW,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,wBAAwB,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YACnF,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,YAAY;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAEhE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;QAErD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,eAAgC;QACpD,MAAM,WAAW,GAAG,aAAa,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEzF,MAAM,CAAC,IAAI,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAChG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtH,MAAM,IAAI,KAAK,CAAC,qCAAqC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChJ,CAAC;YAED,mCAAmC;YACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC;gBAC1E,GAAG,eAAe;gBAClB,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACpC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACrC,CAAC,CAAC;YAEH,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;YACnF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtF,MAAM,IAAI,KAAK,CAAC,uDAAuD,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9H,CAAC;YAED,oCAAoC;YACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAC5E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,UAAU,GAAG;gBACjB,QAAQ;gBACR,QAAQ,EAAE,WAAW;gBACrB,0EAA0E;aAC3E,CAAC;YAEF,mEAAmE;YACnE,kEAAkE;YAClE,gEAAgE;YAChE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACrF,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,WAAW,CAAC;iBAC5E,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;gBACtB,4EAA4E;gBAC5E,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtC,CAAC;gBACD,iDAAiD;gBACjD,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACpC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACL,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAEjC,0BAA0B;YAC1B,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAEtD,6CAA6C;YAC7C,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,YAAY,EAAE,CAAC;gBACjD,gDAAgD;gBAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAChC,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpF,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;YAED,4BAA4B;YAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YAC9C,CAAC;YAED,wEAAwE;YACxE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAE3C,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAE3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,0CAA0C,WAAW,EAAE,CAAC,CAAC;YAErE,OAAO,WAAW,CAAC;QAErB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YAEzE,oCAAoC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,CAAC,IAAI,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAEvE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,4BAA4B;YAC5B,MAAM,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;YAEhE,MAAM,CAAC,IAAI,CAAC,0CAA0C,WAAW,EAAE,CAAC,CAAC;QAEvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,OAAe,EACf,UAA4B,EAAE;QAE9B,MAAM,CAAC,IAAI,CAAC,kCAAkC,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;gBACjB,MAAM;gBACN,eAAe;gBACf,WAAW;gBACX,IAAI,EAAE,IAAI,EAAE,OAAO;aACpB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE;gBACzD,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,4CAA4C,WAAW,gBAAgB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;YAEvG,OAAO,MAAM,CAAC;QAEhB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,UAAkB,EAAE;QAC3D,MAAM,CAAC,IAAI,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;YAEpG,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,iDAAiD,WAAW,EAAE,CAAC,CAAC;gBAC5E,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;QAEnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,CAAC,IAAI,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,2BAA2B;YAC3B,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAEzD,kDAAkD;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YAEtC,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;YAE/E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,8BAA8B,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YAED,gCAAgC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YACzE,uCAAuC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,aAAqB,EAAE,QAAgB;QAClF,MAAM,CAAC,IAAI,CAAC,0BAA0B,WAAW,KAAK,aAAa,OAAO,QAAQ,EAAE,CAAC,CAAC;QAEtF,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;gBAC7C,IAAI;gBACJ,GAAG,WAAW,IAAI,aAAa,EAAE;gBACjC,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uCAAuC,aAAa,EAAE,CAAC,CAAC;QAEtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YACxE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAEpD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEvD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAE/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,IAAc,EACd,UAA4B,EAAE;QAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;YACjD,IAAI,SAAS,GAA0B,IAAI,CAAC;YAE5C,8BAA8B;YAC9B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;gBACpE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAED,iBAAiB;YACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC;gBAClB,CAAC;qBAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC5B,MAAM,IAAI,4CAA4C,CAAC;oBACvD,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;gBAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,iBAAiB;YACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,KAAK,IAAI,KAAK,CAAC;gBAEf,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,4BAA4B;YAC5B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;gBACxC,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBAED,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;oBACrB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,wBAAwB;YACxB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC/B,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBAED,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/enhancedJobExecutor.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Enhanced Job Executor
+ *
+ * Orchestrates the full enhanced pipeline with recipe awareness:
+ *   1. Acceptance check (should we accept this job?)
+ *   2. Resource governance check (do we have resources?)
+ *   3. Recipe detection (what kind of project is this?)
+ *   4. Recipe application (merge recipe config into job)
+ *   5. Executor selection (Docker vs Native)
+ *   6. Cache setup (mount cache volumes)
+ *   7. Lifecycle execution (setup -> build -> teardown)
+ *   8. Cache save (update metadata)
+ *   9. Result reporting
+ *
+ * This module does NOT modify the existing JobExecutor. It wraps
+ * the new subsystems (RecipeRegistry, CacheManager, AcceptanceChecker,
+ * ResourceGovernor, ExecutorFactory, LifecycleExecutor) into a single
+ * cohesive pipeline.
+ */
+import { RecipeRegistry } from './recipes/recipeRegistry.js';
+import { CacheManager } from './cacheManager.js';
+import { AcceptanceChecker } from './acceptanceChecker.js';
+import { ResourceGovernor, ResourceSnapshot } from './resourceGovernor.js';
+export interface EnhancedJobRequest {
+    id: string;
+    repository: string;
+    buildCommand: string;
+    dockerImage?: string;
+    environment?: Record<string, string>;
+    workDir: string;
+    artifacts?: string[];
+    /** Optional recipe name override (skip auto-detection). */
+    recipe?: string;
+    /** Per-job execution mode override. */
+    executionMode?: 'docker' | 'native' | 'auto';
+}
+export interface EnhancedJobCallbacks {
+    onProgress?: (percent: number, stage: string) => void;
+    onLog?: (log: string) => void;
+}
+export interface EnhancedExecutionResult {
+    success: boolean;
+    exitCode: number;
+    logs: string;
+    artifacts: string[];
+    durationMs: number;
+    /** Name of the recipe that was applied (if any). */
+    recipe?: string;
+    cacheHit: boolean;
+    executionMode: 'docker' | 'native';
+    lifecycleResults?: {
+        setupResults: any[];
+        teardownResults: any[];
+    };
+    /** Present when the job was rejected before execution. */
+    rejection?: {
+        reason: string;
+    };
+}
+export interface EnhancedJobExecutorConfig {
+    executionMode: 'docker' | 'native' | 'auto';
+    dockerAvailable: boolean;
+}
+/**
+ * Collect resource snapshot. Callers may provide an override (e.g. in tests).
+ * The default produces a "healthy" snapshot.
+ */
+export type ResourceSnapshotProvider = () => ResourceSnapshot;
+export declare class EnhancedJobExecutor {
+    private recipeRegistry;
+    private cacheManager;
+    private acceptanceChecker;
+    private resourceGovernor;
+    private config;
+    private lifecycleExecutor;
+    private snapshotProvider;
+    constructor(recipeRegistry: RecipeRegistry, cacheManager: CacheManager, acceptanceChecker: AcceptanceChecker, resourceGovernor: ResourceGovernor, config: EnhancedJobExecutorConfig, snapshotProvider?: ResourceSnapshotProvider);
+    executeJob(job: EnhancedJobRequest, callbacks?: EnhancedJobCallbacks): Promise<EnhancedExecutionResult>;
+    private rejectionResult;
+}
+//# sourceMappingURL=enhancedJobExecutor.d.ts.map

package/dist/enhancedJobExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhancedJobExecutor.d.ts","sourceRoot":"","sources":["../src/enhancedJobExecutor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAgB,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAQ3E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACnC,gBAAgB,CAAC,EAAE;QACjB,YAAY,EAAE,GAAG,EAAE,CAAC;QACpB,eAAe,EAAE,GAAG,EAAE,CAAC;KACxB,CAAC;IACF,0DAA0D;IAC1D,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5C,eAAe,EAAE,OAAO,CAAC;CAC1B;AAMD;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,gBAAgB,CAAC;AAa9D,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,gBAAgB;IACxB,OAAO,CAAC,MAAM;IARhB,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,gBAAgB,CAA2B;gBAGzC,cAAc,EAAE,cAAc,EAC9B,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,iBAAiB,EACpC,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,yBAAyB,EACzC,gBAAgB,CAAC,EAAE,wBAAwB;IAUvC,UAAU,CACd,GAAG,EAAE,kBAAkB,EACvB,SAAS,CAAC,EAAE,oBAAoB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAwLnC,OAAO,CAAC,eAAe;CAgBxB"}