daycare-cli 2026.2.27 → 2026.2.28

package/dist/sandbox/docker/dockerContainerExec.js

@@ -0,0 +1,109 @@
+import { PassThrough } from "node:stream";
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_BUFFER_BYTES = 1_000_000;
+/**
+ * Executes a command inside a running sandbox container via docker exec.
+ * Expects: container is running and command is already tokenized as argv.
+ */
+export async function dockerContainerExec(docker, container, args) {
+    const exec = await container.exec({
+        Cmd: args.command,
+        AttachStdout: true,
+        AttachStderr: true,
+        WorkingDir: args.cwd,
+        Env: dockerEnvBuild(args.env)
+    });
+    const stdoutChunks = [];
+    const stderrChunks = [];
+    const maxBufferBytes = args.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES;
+    const stdoutStream = new PassThrough();
+    const stderrStream = new PassThrough();
+    let streamError = null;
+    let outputStream = null;
+    stdoutStream.on("data", (chunk) => {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        stdoutChunks.push(buffer);
+        if (totalBytes(stdoutChunks) <= maxBufferBytes) {
+            return;
+        }
+        streamError = new Error(`stdout exceeded maxBufferBytes (${maxBufferBytes})`);
+        outputStream?.destroy(streamError);
+    });
+    stderrStream.on("data", (chunk) => {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        stderrChunks.push(buffer);
+        if (totalBytes(stderrChunks) <= maxBufferBytes) {
+            return;
+        }
+        streamError = new Error(`stderr exceeded maxBufferBytes (${maxBufferBytes})`);
+        outputStream?.destroy(streamError);
+    });
+    outputStream = (await exec.start({
+        hijack: true,
+        stdin: false
+    }));
+    docker.modem.demuxStream(outputStream, stdoutStream, stderrStream);
+    if (typeof outputStream.resume === "function") {
+        outputStream.resume();
+    }
+    await streamWait(outputStream, args.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    stdoutStream.end();
+    stderrStream.end();
+    if (streamError) {
+        throw streamError;
+    }
+    const details = await exec.inspect();
+    return {
+        stdout: Buffer.concat(stdoutChunks).toString("utf8"),
+        stderr: Buffer.concat(stderrChunks).toString("utf8"),
+        exitCode: typeof details.ExitCode === "number" ? details.ExitCode : null
+    };
+}
+function dockerEnvBuild(env) {
+    if (!env) {
+        return undefined;
+    }
+    const entries = Object.entries(env)
+        .filter(([, value]) => value !== undefined)
+        .map(([key, value]) => `${key}=${value}`);
+    if (entries.length === 0) {
+        return undefined;
+    }
+    return entries;
+}
+function totalBytes(chunks) {
+    return chunks.reduce((acc, chunk) => acc + chunk.length, 0);
+}
+async function streamWait(stream, timeoutMs) {
+    await new Promise((resolve, reject) => {
+        let settled = false;
+        const timer = setTimeout(() => {
+            const timeoutError = new Error(`docker exec timed out after ${timeoutMs}ms`);
+            stream.destroy(timeoutError);
+        }, timeoutMs);
+        const cleanup = () => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timer);
+            stream.removeListener("end", onDone);
+            stream.removeListener("close", onDone);
+            stream.removeListener("finish", onDone);
+            stream.removeListener("error", onError);
+        };
+        const onDone = () => {
+            cleanup();
+            resolve();
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error);
+        };
+        stream.on("end", onDone);
+        stream.on("close", onDone);
+        stream.on("finish", onDone);
+        stream.on("error", onError);
+    });
+}
+//# sourceMappingURL=dockerContainerExec.js.map

package/dist/sandbox/docker/dockerContainerExec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerExec.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerExec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAc,EACd,SAA2B,EAC3B,IAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;QAC9B,GAAG,EAAE,IAAI,CAAC,OAAO;QACjB,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;KAChC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;IACvC,IAAI,WAAW,GAAiB,IAAI,CAAC;IACrC,IAAI,YAAY,GAAoB,IAAI,CAAC;IAEzC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO;QACX,CAAC;QACD,WAAW,GAAG,IAAI,KAAK,CAAC,mCAAmC,cAAc,GAAG,CAAC,CAAC;QAC9E,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO;QACX,CAAC;QACD,WAAW,GAAG,IAAI,KAAK,CAAC,mCAAmC,cAAc,GAAG,CAAC,CAAC;QAC9E,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;KACf,CAAC,CAAa,CAAC;IAChB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,OAAO,YAAY,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC5C,YAAY,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAErE,YAAY,CAAC,GAAG,EAAE,CAAC;IACnB,YAAY,CAAC,GAAG,EAAE,CAAC;IAEnB,IAAI,WAAW,EAAE,CAAC;QACd,MAAM,WAAW,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACrC,OAAO;QACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,QAAQ,EAAE,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KAC3E,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,MAAgB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAgB,EAAE,SAAiB;IACzD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,+BAA+B,SAAS,IAAI,CAAC,CAAC;YAC7E,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,GAAG,EAAE;YAChB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC7B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/sandbox/docker/dockerContainerExec.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dockerContainerExec.spec.d.ts.map

package/dist/sandbox/docker/dockerContainerExec.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerExec.spec.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerExec.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/docker/dockerContainerExec.spec.js

@@ -0,0 +1,75 @@
+import { PassThrough } from "node:stream";
+import { describe, expect, it, vi } from "vitest";
+import { dockerContainerExec } from "./dockerContainerExec.js";
+describe("dockerContainerExec", () => {
+    it("executes command and returns stdout/stderr with exit code", async () => {
+        const stream = new PassThrough();
+        const execHandle = {
+            start: vi.fn().mockImplementation(async () => {
+                setTimeout(() => {
+                    stream.end();
+                }, 0);
+                return stream;
+            }),
+            inspect: vi.fn().mockResolvedValue({ ExitCode: 7 })
+        };
+        const container = {
+            exec: vi.fn().mockResolvedValue(execHandle)
+        };
+        const docker = {
+            modem: {
+                demuxStream: vi.fn((_stream, stdout, stderr) => {
+                    stdout.write("hello");
+                    stderr.write("warn");
+                })
+            }
+        };
+        const result = await dockerContainerExec(docker, container, {
+            command: ["echo", "ok"],
+            cwd: "/home",
+            env: {
+                HOME: "/home",
+                DEBUG: "1"
+            }
+        });
+        expect(container.exec).toHaveBeenCalledWith({
+            Cmd: ["echo", "ok"],
+            AttachStdout: true,
+            AttachStderr: true,
+            WorkingDir: "/home",
+            Env: ["HOME=/home", "DEBUG=1"]
+        });
+        expect(result).toEqual({
+            stdout: "hello",
+            stderr: "warn",
+            exitCode: 7
+        });
+    });
+    it("fails when output exceeds max buffer", async () => {
+        const stream = new PassThrough();
+        const execHandle = {
+            start: vi.fn().mockImplementation(async () => {
+                setTimeout(() => {
+                    stream.end();
+                }, 0);
+                return stream;
+            }),
+            inspect: vi.fn().mockResolvedValue({ ExitCode: 0 })
+        };
+        const container = {
+            exec: vi.fn().mockResolvedValue(execHandle)
+        };
+        const docker = {
+            modem: {
+                demuxStream: vi.fn((_stream, stdout) => {
+                    stdout.write("12345");
+                })
+            }
+        };
+        await expect(dockerContainerExec(docker, container, {
+            command: ["echo", "ok"],
+            maxBufferBytes: 3
+        })).rejects.toThrow("maxBufferBytes");
+    });
+});
+//# sourceMappingURL=dockerContainerExec.spec.js.map

package/dist/sandbox/docker/dockerContainerExec.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerExec.spec.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerExec.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG;YACf,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;gBACzC,UAAU,CAAC,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,EAAE,CAAC;gBACjB,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,OAAO,MAAM,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,SAAS,GAAG;YACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;SACf,CAAC;QAEjC,MAAM,MAAM,GAAG;YACX,KAAK,EAAE;gBACH,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAA8B,EAAE,MAA6B,EAAE,MAAM,EAAE,EAAE;oBACzF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC,CAAC;aACL;SACiB,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE;YACxD,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE;gBACD,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,GAAG;aACb;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACxC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;YACnB,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,OAAO;YACnB,GAAG,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,CAAC;SACd,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG;YACf,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;gBACzC,UAAU,CAAC,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,EAAE,CAAC;gBACjB,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,OAAO,MAAM,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,SAAS,GAAG;YACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;SACf,CAAC;QAEjC,MAAM,MAAM,GAAG;YACX,KAAK,EAAE;gBACH,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAA8B,EAAE,MAA6B,EAAE,EAAE;oBACjF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC,CAAC;aACL;SACiB,CAAC;QAEvB,MAAM,MAAM,CACR,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE;YACnC,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;YACvB,cAAc,EAAE,CAAC;SACpB,CAAC,CACL,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/sandbox/docker/dockerContainerNameBuild.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Builds a stable Docker container name for a sandbox user.
+ * Expects: userId is stable across the user's agent sessions.
+ */
+export declare function dockerContainerNameBuild(userId: string): string;
+//# sourceMappingURL=dockerContainerNameBuild.d.ts.map

package/dist/sandbox/docker/dockerContainerNameBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerNameBuild.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerNameBuild.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAS/D"}

package/dist/sandbox/docker/dockerContainerNameBuild.js

@@ -0,0 +1,15 @@
+const DEFAULT_CONTAINER_SUFFIX = "user";
+/**
+ * Builds a stable Docker container name for a sandbox user.
+ * Expects: userId is stable across the user's agent sessions.
+ */
+export function dockerContainerNameBuild(userId) {
+    const suffix = userId
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+/, "")
+        .replace(/-+$/, "");
+    const safeSuffix = suffix.length > 0 ? suffix : DEFAULT_CONTAINER_SUFFIX;
+    return `daycare-sandbox-${safeSuffix}`;
+}
+//# sourceMappingURL=dockerContainerNameBuild.js.map

package/dist/sandbox/docker/dockerContainerNameBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerNameBuild.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerNameBuild.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACnD,MAAM,MAAM,GAAG,MAAM;SAChB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAExB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACzE,OAAO,mBAAmB,UAAU,EAAE,CAAC;AAC3C,CAAC"}

package/dist/sandbox/docker/dockerContainerNameBuild.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dockerContainerNameBuild.spec.d.ts.map

package/dist/sandbox/docker/dockerContainerNameBuild.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerNameBuild.spec.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerNameBuild.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/docker/dockerContainerNameBuild.spec.js

@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { dockerContainerNameBuild } from "./dockerContainerNameBuild.js";
+describe("dockerContainerNameBuild", () => {
+    it("creates a docker-safe container name from user id", () => {
+        const name = dockerContainerNameBuild("User_42");
+        expect(name).toBe("daycare-sandbox-user-42");
+    });
+    it("trims non-alphanumeric boundaries", () => {
+        const name = dockerContainerNameBuild("---user---");
+        expect(name).toBe("daycare-sandbox-user");
+    });
+    it("falls back when user id has no safe characters", () => {
+        const name = dockerContainerNameBuild("---");
+        expect(name).toBe("daycare-sandbox-user");
+    });
+});
+//# sourceMappingURL=dockerContainerNameBuild.spec.js.map

package/dist/sandbox/docker/dockerContainerNameBuild.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainerNameBuild.spec.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainerNameBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACzC,MAAM,IAAI,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/sandbox/docker/dockerContainers.d.ts

@@ -0,0 +1,13 @@
+import type { DockerContainerConfig, DockerContainerExecArgs, DockerContainerExecResult } from "./dockerTypes.js";
+/**
+ * Facade for per-user long-lived Docker sandbox containers.
+ * Expects: callers pass stable userId + hostHomeDir for each execution.
+ */
+export declare class DockerContainers {
+    private readonly clientsBySocket;
+    private readonly ensureInFlight;
+    exec(config: DockerContainerConfig, args: DockerContainerExecArgs): Promise<DockerContainerExecResult>;
+    private dockerClientResolve;
+    private containerEnsure;
+}
+//# sourceMappingURL=dockerContainers.d.ts.map

package/dist/sandbox/docker/dockerContainers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainers.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAER,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B;;;GAGG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAExE,IAAI,CAAC,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAM5G,OAAO,CAAC,mBAAmB;YAYb,eAAe;CAgBhC"}

package/dist/sandbox/docker/dockerContainers.js

@@ -0,0 +1,42 @@
+import Docker from "dockerode";
+import { dockerContainerEnsure } from "./dockerContainerEnsure.js";
+import { dockerContainerExec } from "./dockerContainerExec.js";
+/**
+ * Facade for per-user long-lived Docker sandbox containers.
+ * Expects: callers pass stable userId + hostHomeDir for each execution.
+ */
+export class DockerContainers {
+    clientsBySocket = new Map();
+    ensureInFlight = new Map();
+    async exec(config, args) {
+        const docker = this.dockerClientResolve(config.socketPath);
+        const container = await this.containerEnsure(docker, config);
+        return dockerContainerExec(docker, container, args);
+    }
+    dockerClientResolve(socketPath) {
+        const key = socketPath ?? "default";
+        const cached = this.clientsBySocket.get(key);
+        if (cached) {
+            return cached;
+        }
+        const docker = socketPath ? new Docker({ socketPath }) : new Docker();
+        this.clientsBySocket.set(key, docker);
+        return docker;
+    }
+    async containerEnsure(docker, config) {
+        const key = `${config.socketPath ?? "default"}:${config.userId}`;
+        const pending = this.ensureInFlight.get(key);
+        if (pending) {
+            return pending;
+        }
+        const operation = dockerContainerEnsure(docker, config);
+        this.ensureInFlight.set(key, operation);
+        try {
+            return await operation;
+        }
+        finally {
+            this.ensureInFlight.delete(key);
+        }
+    }
+}
+//# sourceMappingURL=dockerContainers.js.map

package/dist/sandbox/docker/dockerContainers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainers.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAQ/D;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACR,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE9E,KAAK,CAAC,IAAI,CAAC,MAA6B,EAAE,IAA6B;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,mBAAmB,CAAC,UAAmB;QAC3C,MAAM,GAAG,GAAG,UAAU,IAAI,SAAS,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QACtE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAA6B;QACvE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAExC,IAAI,CAAC;YACD,OAAO,MAAM,SAAS,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;CACJ"}

package/dist/sandbox/docker/dockerContainersShared.d.ts

@@ -0,0 +1,3 @@
+import { DockerContainers } from "./dockerContainers.js";
+export declare const dockerContainersShared: DockerContainers;
+//# sourceMappingURL=dockerContainersShared.d.ts.map

package/dist/sandbox/docker/dockerContainersShared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainersShared.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainersShared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,eAAO,MAAM,sBAAsB,kBAAyB,CAAC"}

package/dist/sandbox/docker/dockerContainersShared.js

@@ -0,0 +1,3 @@
+import { DockerContainers } from "./dockerContainers.js";
+export const dockerContainersShared = new DockerContainers();
+//# sourceMappingURL=dockerContainersShared.js.map

package/dist/sandbox/docker/dockerContainersShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerContainersShared.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerContainersShared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/sandbox/docker/dockerRunInSandbox.d.ts

@@ -0,0 +1,19 @@
+import type { SandboxRuntimeConfig } from "@anthropic-ai/sandbox-runtime";
+import type { DockerContainerConfig } from "./dockerTypes.js";
+export type DockerRunInSandboxOptions = {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    home: string;
+    timeoutMs?: number;
+    maxBufferBytes?: number;
+    docker: Omit<DockerContainerConfig, "hostHomeDir">;
+};
+/**
+ * Runs sandbox-runtime inside a per-user Docker container.
+ * Expects: docker image is local and options.home is mounted to /home/<userId>.
+ */
+export declare function dockerRunInSandbox(command: string, config: SandboxRuntimeConfig, options: DockerRunInSandboxOptions): Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+//# sourceMappingURL=dockerRunInSandbox.d.ts.map

package/dist/sandbox/docker/dockerRunInSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerRunInSandbox.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerRunInSandbox.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,kBAAkB,CAAC;AAMzF,MAAM,MAAM,yBAAyB,GAAG;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;CACtD,CAAC;AAEF;;;GAGG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,yBAAyB,GACnC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmE7C"}

package/dist/sandbox/docker/dockerRunInSandbox.integration.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dockerRunInSandbox.integration.spec.d.ts.map

package/dist/sandbox/docker/dockerRunInSandbox.integration.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerRunInSandbox.integration.spec.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerRunInSandbox.integration.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/docker/dockerRunInSandbox.integration.spec.js

@@ -0,0 +1,143 @@
+import { execSync } from "node:child_process";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { DockerContainers } from "./dockerContainers.js";
+const IMAGE = "daycare-runtime";
+const TAG = "latest";
+/** Returns true when Docker is reachable and daycare-runtime:latest exists locally. */
+function dockerAvailable() {
+    try {
+        const output = execSync(`docker image inspect ${IMAGE}:${TAG}`, {
+            stdio: ["pipe", "pipe", "pipe"],
+            timeout: 5000
+        });
+        return output.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+const describeIfDocker = process.env.CI || !dockerAvailable() ? describe.skip : describe;
+describeIfDocker("dockerRunInSandbox integration (live Docker)", () => {
+    const userId = `test-${process.pid}`;
+    let rootDir;
+    let homeDir;
+    let containers;
+    let config;
+    beforeEach(async () => {
+        rootDir = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-docker-integration-"));
+        homeDir = path.join(rootDir, "home");
+        await fs.mkdir(homeDir, { recursive: true });
+        containers = new DockerContainers();
+        config = {
+            image: IMAGE,
+            tag: TAG,
+            userId,
+            hostHomeDir: homeDir
+        };
+    });
+    afterEach(async () => {
+        // Stop and remove the test container
+        try {
+            execSync(`docker rm -f daycare-sandbox-${userId}`, {
+                stdio: ["pipe", "pipe", "pipe"],
+                timeout: 10_000
+            });
+        }
+        catch {
+            // Container may not exist
+        }
+        await fs.rm(rootDir, { recursive: true, force: true });
+    });
+    it("runs a simple command and returns stdout", async () => {
+        const result = await containers.exec(config, {
+            command: ["echo", "hello from docker"],
+            timeoutMs: 30_000
+        });
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe("hello from docker");
+    });
+    it("returns non-zero exit code for failing commands", async () => {
+        const result = await containers.exec(config, {
+            command: ["sh", "-c", "exit 42"],
+            timeoutMs: 10_000
+        });
+        expect(result.exitCode).toBe(42);
+    });
+    it("captures stderr from commands", async () => {
+        const result = await containers.exec(config, {
+            command: ["sh", "-c", "echo err >&2"],
+            timeoutMs: 10_000
+        });
+        expect(result.stderr.trim()).toBe("err");
+    });
+    // nvm is sourced via /etc/profile — use login shell for node commands
+    it("runs node inside the container", async () => {
+        const result = await containers.exec(config, {
+            command: ["bash", "-lc", "node -e \"console.log(JSON.stringify({v: process.version, ok: true}))\""],
+            timeoutMs: 30_000
+        });
+        expect(result.exitCode).toBe(0);
+        const parsed = JSON.parse(result.stdout.trim());
+        expect(parsed.ok).toBe(true);
+        expect(parsed.v).toMatch(/^v\d+/);
+    });
+    it("can resolve sandbox-runtime CLI path", async () => {
+        // sandbox-runtime is installed globally — resolve from nvm's global node_modules
+        const result = await containers.exec(config, {
+            command: [
+                "bash",
+                "-lc",
+                "node -e \"console.log(require.resolve('@anthropic-ai/sandbox-runtime/dist/cli.js'))\""
+            ],
+            timeoutMs: 30_000
+        });
+        if (result.exitCode !== 0) {
+            // May fail if sandbox-runtime isn't globally installed in this image build
+            expect(result.stderr).toContain("MODULE_NOT_FOUND");
+            return;
+        }
+        expect(result.stdout.trim()).toMatch(/cli\.js$/);
+    });
+    it("mounts host home directory into container", async () => {
+        const marker = `marker-${Date.now()}`;
+        await fs.writeFile(path.join(homeDir, "test.txt"), marker, "utf8");
+        const result = await containers.exec(config, {
+            command: ["cat", "/home/test.txt"],
+            timeoutMs: 10_000
+        });
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe(marker);
+    });
+    it("writes from container are visible on host", async () => {
+        await containers.exec(config, {
+            command: ["sh", "-c", "echo written-by-container > /home/output.txt"],
+            timeoutMs: 10_000
+        });
+        const content = await fs.readFile(path.join(homeDir, "output.txt"), "utf8");
+        expect(content.trim()).toBe("written-by-container");
+    });
+    it("respects cwd option", async () => {
+        const subDir = path.join(homeDir, "subdir");
+        await fs.mkdir(subDir, { recursive: true });
+        const result = await containers.exec(config, {
+            command: ["pwd"],
+            cwd: "/home/subdir",
+            timeoutMs: 10_000
+        });
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe("/home/subdir");
+    });
+    it("passes environment variables to the container", async () => {
+        const result = await containers.exec(config, {
+            command: ["sh", "-c", "echo $DAYCARE_TEST_VAR"],
+            env: { DAYCARE_TEST_VAR: "hello-env" },
+            timeoutMs: 10_000
+        });
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe("hello-env");
+    });
+});
+//# sourceMappingURL=dockerRunInSandbox.integration.spec.js.map

package/dist/sandbox/docker/dockerRunInSandbox.integration.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerRunInSandbox.integration.spec.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerRunInSandbox.integration.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAChC,MAAM,GAAG,GAAG,QAAQ,CAAC;AAErB,uFAAuF;AACvF,SAAS,eAAe;IACpB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,wBAAwB,KAAK,IAAI,GAAG,EAAE,EAAE;YAC5D,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAEzF,gBAAgB,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAClE,MAAM,MAAM,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,OAAe,CAAC;IACpB,IAAI,UAA4B,CAAC;IACjC,IAAI,MAA6B,CAAC;IAElC,UAAU,CAAC,KAAK,IAAI,EAAE;QAClB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAClF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,GAAG;YACL,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,GAAG;YACR,MAAM;YACN,WAAW,EAAE,OAAO;SACvB,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACjB,qCAAqC;QACrC,IAAI,CAAC;YACD,QAAQ,CAAC,gCAAgC,MAAM,EAAE,EAAE;gBAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,OAAO,EAAE,MAAM;aAClB,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,0BAA0B;QAC9B,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC;YACtC,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;YAChC,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YACrC,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,yEAAyE,CAAC;YACnG,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QAClD,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE;gBACL,MAAM;gBACN,KAAK;gBACL,uFAAuF;aAC1F;YACD,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxB,2EAA2E;YAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO;QACX,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YAClC,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,8CAA8C,CAAC;YACrE,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,GAAG,EAAE,cAAc;YACnB,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,wBAAwB,CAAC;YAC/C,GAAG,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE;YACtC,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}