nawabari 0.2.0 → 0.4.1

package/dist/domain/sandbox-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-launcher.js","sourceRoot":"","sources":["../../src/domain/sandbox-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAsC,MAAM,aAAa,CAAC;AAGhG,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,YAAY,UAAU,CAAC;AACtD,MAAM,kBAAkB,GAAG,GAAG,YAAY,SAAS,CAAC;AACpD,MAAM,kBAAkB,GAAG,GAAG,YAAY,SAAS,CAAC;AACpD,MAAM,mBAAmB,GAAG,GAAG,YAAY,YAAY,CAAC;AACxD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC1C,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,CAAC;AAyC/C,SAAS,aAAa,CAAC,OAAe,EAAE,OAAmB;IACzD,OAAO,OAAO,CAAC,IAAI,WAAW,CAAC,0BAA0B,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,KAAa;IACrD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,GAAG,KAAK,8CAA8C,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,aAAa,CAAC,GAAG,KAAK,gDAAgD,EAAE;gBAC7E,KAAK;gBACL,IAAI,EAAE,SAAS;gBACf,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,GAAG,KAAK,6CAA6C,EAAE;YAC1E,KAAK;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB,EAAE,UAAkB,EAAE,KAAa;IACnF,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC,GAAG,KAAK,kEAAkE,EAAE;YAC/F,KAAK;YACL,IAAI,EAAE,SAAS;YACf,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IACD,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,OAAO,aAAa,CAAC,GAAG,KAAK,iCAAiC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC5C,OAAO,aAAa,CAAC,GAAG,KAAK,uDAAuD,EAAE;gBACpF,KAAK;gBACL,IAAI,EAAE,SAAS;gBACf,iBAAiB,EAAE,gBAAgB;gBACnC,iBAAiB,EAAE,gBAAgB;gBACnC,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,GAAG,KAAK,8BAA8B,EAAE;YAC3D,KAAK;YACL,IAAI,EAAE,SAAS;YACf,iBAAiB,EAAE,gBAAgB;YACnC,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,GAAG,KAAK,yBAAyB,EAAE;YACtD,KAAK;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC;IACxD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC,iFAAiF,EAAE;YACtG,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,iBAAiB,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc;SACrD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAChG,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,cAAc,GAAG,uBAAuB,CAC5C,OAAO,CAAC,UAAU,CAAC,eAAe,EAClC,UAAU,CAAC,KAAK,EAChB,4BAA4B,CAC7B,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAC9C,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/G,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACxF,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,aAAa,CAAC,+DAA+D,EAAE;YACpF,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,WAAW,EAAE,UAAU,CAAC,KAAK;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO,aAAa,CAAC,6DAA6D,EAAE;YAClF,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;QACb,UAAU,EAAE,UAAU,CAAC,KAAK;QAC5B,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,IAAI,EAAE,IAAI,CAAC,KAAK;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,cAAc,CAAC,KAAK;QACrC,YAAY,EAAE,WAAW,CAAC,KAAK;QAC/B,WAAW,EAAE,UAAU,CAAC,KAAK;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG;QACZ,MAAM;QACN,MAAM;QACN,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,qBAAqB;QACrB,eAAe;QACf,sBAAsB;QACtB,qBAAqB;QACrB,UAAU;QACV,eAAe;QACf,mBAAmB;QACnB,UAAU;QACV,UAAU;QACV,sBAAsB;KACvB,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,CACL,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,MAAM;QACrB,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC;QACrC,WAAW,CAAC,UAAU,EAAE,qBAAqB,CAAC;QAC9C,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC;QACxC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAiB,EACjB,WAAsC,OAAO,CAAC,GAAG,CAAC,IAAI;IAEtD,MAAM,IAAI,GAAG,QAAQ,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACxE,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACxE,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,KAAa;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,OAAO,aAAa,CAAC,GAAG,KAAK,sCAAsC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,GAAG,KAAK,kBAAkB,EAAE;YAC/C,KAAK;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,IAAc,EAAE,WAAmB,EAAE,IAAiB;IAC1E,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAc,EAAE,MAAc,EAAE,WAAmB,EAAE,eAA4B;IACxG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc,EAAE,MAAc,EAAE,WAAmB,EAAE,eAA4B;IACzG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAgC;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACvE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,MAAM,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,aAAa,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgC;IAC1D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,CACZ,IAAI,WAAW,CACb,gCAAgC,EAChC,sFAAsF,EACtF,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CACnD,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxF,OAAO,OAAO,CACZ,IAAI,WAAW,CACb,gCAAgC,EAChC,kEAAkE,EAClE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CACnC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,gCAAgC,EAAE,iDAAiD,EAAE;gBACnG,IAAI,EAAE,OAAO,CAAC,kBAAkB;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IACE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAC5B,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI;YACzE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAC7B,CAAC;YACD,OAAO,aAAa,CAAC,wDAAwD,EAAE;gBAC7E,IAAI,EAAE,OAAO,CAAC,kBAAkB;gBAChC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,gCAAgC,EAAE,uDAAuD,EAAE;YACzG,IAAI,EAAE,OAAO,CAAC,kBAAkB;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgC;IAC5D,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACtD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,aAAa,CAAC,oDAAoD,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAC3E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,aAAa,CAAC,kEAAkE,EAAE;oBACvF,IAAI,EAAE,MAAM;oBACZ,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACrD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,aAAa,CAAC,mDAAmD,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAAC,iEAAiE,EAAE;oBACtF,IAAI,EAAE,MAAM;oBACZ,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QACxD,IAAI,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5E,OAAO,aAAa,CAAC,gEAAgE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9E,OAAO,aAAa,CAAC,mEAAmE,EAAE;oBACxF,IAAI,EAAE,MAAM;oBACZ,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,WAAmB;IACxD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgC,EAAE,QAA2B;IACvF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,EAC1C,yDAAyD,EACzD,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YAClF,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YACpF,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,SAAS,GAAG,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACvE,OAAO,aAAa,CAAC,yDAAyD,EAAE;wBAC9E,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBAChE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1E,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3D,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC7D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,qDAAqD,EAAE;YAC1E,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgC,EAChC,OAAuB;IAEvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,aAAa,CAAC,iEAAiE,EAAE;YACtF,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,qDAAqD,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IAC1C,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAa;QACrB,mBAAmB;QACnB,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,eAAe;QACf,eAAe;QACf,kBAAkB;QAClB,OAAO;QACP,GAAG;QACH,OAAO;QACP,GAAG;QACH,YAAY;QACZ,KAAK;QACL,YAAY;QACZ,UAAU;QACV,MAAM;QACN,YAAY;QACZ,UAAU;QACV,QAAQ;QACR,MAAM;QACN,UAAU;QACV,iBAAiB;QACjB,mBAAmB;QACnB,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,UAAU;QACV,eAAe;QACf,GAAG,kBAAkB,QAAQ;QAC7B,UAAU;QACV,MAAM;QACN,UAAU;QACV,UAAU;QACV,SAAS;QACT,UAAU;QACV,UAAU;QACV,qBAAqB;QACrB,OAAO,CAAC,UAAU;QAClB,UAAU;QACV,MAAM;QACN,SAAS;QACT,UAAU;QACV,SAAS;QACT,eAAe;QACf,UAAU;QACV,eAAe;QACf,QAAQ,CAAC,KAAK,CAAC,QAAQ;QACvB,UAAU;QACV,qBAAqB;QACrB,GAAG;QACH,UAAU;QACV,mBAAmB;QACnB,WAAW;QACX,SAAS;QACT,GAAG;QACH,OAAO;QACP,MAAM;QACN,QAAQ;QACR,OAAO;QACP,SAAS;QACT,MAAM;KACP,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACpD,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;IACtF,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC3E,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAClF,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAC7F,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACtF,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,uBAAuB,EAAE,eAAe,CAAC,CAAC;IAE5F,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,WAAW;YAAE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,MAAM,EAAE,eAAe,CAAC,CAAC;QACtG,IAAI,IAAI,KAAK,WAAW;YAAE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,MAAM,EAAE,eAAe,CAAC,CAAC;QACtG,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,aAAa,EAAE,eAAe,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACtD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAC3E,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY;QAAE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAE7G,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC7D,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1C,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC;IAEjF,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM;QACd,eAAe,EAAE,mBAAmB;QACpC,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,GAAG,kBAAkB,QAAQ;QAC5C,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,UAAU;QACnB,mBAAmB,EAAE,OAAO,CAAC,UAAU;KACxC,CAAC;IACF,OAAO,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CACpB,MAAgB,EAChB,KAAa,EACb,QAAgB,EAChB,KAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;IACnC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC;IAC9D,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CACjC,OAAgC,EAChC,OAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,wBAAwB,CAAC;IAC5E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAChC,SAAS,GAAG,CAAC;QACb,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;QACrC,cAAc,GAAG,CAAC,EAClB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CACpB,OAAO,CACL,IAAI,WAAW,CAAC,kBAAkB,EAAE,0DAA0D,EAAE;YAC9F,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,cAAc;SACjC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YACrE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG;YACzB,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,CACpB,OAAO,CACL,IAAI,WAAW,CAAC,0BAA0B,EAAE,kCAAkC,EAAE;YAC9E,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,UAAU,GAAiB,IAAI,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;YAC1E,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,CACL,OAAO,CACL,IAAI,WAAW,CAAC,0BAA0B,EAAE,iDAAiD,EAAE;oBAC7F,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACzC,CAAC,CACH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CACL,OAAO,CACL,IAAI,WAAW,CAAC,2BAA2B,EAAE,uDAAuD,EAAE;oBACpG,UAAU,EAAE,SAAS;iBACtB,CAAC,CACH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CACL,OAAO,CACL,IAAI,WAAW,CAAC,sBAAsB,EAAE,kDAAkD,EAAE;oBAC1F,gBAAgB,EAAE,cAAc;iBACjC,CAAC,CACH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CACL,OAAO,CAAC;gBACN,SAAS,EAAE,IAAI;gBACf,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aAClC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YAC5E,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC;YAC9B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,cAAc,GAAG,IAAI,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YAC5E,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC;YAC9B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,cAAc,GAAG,IAAI,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACjC,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/sandbox.d.ts

@@ -0,0 +1,190 @@
+import { type DomainResult, type ErrorCode, type JsonObject } from "./errors.js";
+import type { SessionBackend, SessionContext } from "./session.js";
+/**
+ * Versioned identity for the Linux sandbox execution contract (Issue #81).
+ * This contract binds exactly one existing Nawabari session to an execution
+ * request; it does not create a parallel session identity. It defines
+ * capability/doctor state and one typed execution request/result. It does
+ * not implement bubblewrap mounts; that is the next, downstream child.
+ */
+export declare const SANDBOX_CONTRACT_ID: "nawabari.sandbox-execution.v1";
+export declare const SANDBOX_CONTRACT_SCHEMA_VERSION: 1;
+/** Nawabari's only supported sandbox execution platform. */
+export declare const SANDBOX_SUPPORTED_PLATFORM: "linux";
+export type SandboxCapabilityId = "bubblewrap" | "user_namespaces" | "mount_namespaces" | "pid_namespace" | "ipc_namespace" | "uts_namespace" | "cgroups_v2" | "landlock" | "seccomp" | "capabilities";
+/**
+ * Capabilities without which protected execution cannot be established at
+ * all: the bwrap binary plus the namespace classes bwrap unshares by
+ * default. Missing any of these fails resolution closed.
+ */
+export declare const SANDBOX_REQUIRED_CAPABILITIES: readonly SandboxCapabilityId[];
+/** Defense-in-depth capabilities that strengthen but do not gate readiness. */
+export declare const SANDBOX_OPTIONAL_CAPABILITIES: readonly SandboxCapabilityId[];
+export type SandboxCapabilityRequirement = "required" | "optional";
+export type SandboxCapabilityStatus = "available" | "unavailable" | "not_applicable";
+export type SandboxCapabilityCheck = {
+    id: SandboxCapabilityId;
+    requirement: SandboxCapabilityRequirement;
+    status: SandboxCapabilityStatus;
+    code: ErrorCode | null;
+    message: string;
+    details: JsonObject;
+};
+/**
+ * Network isolation is a non-goal of this first contract. `inherited` is the
+ * only honest value: the sandbox process shares the host network namespace.
+ */
+export type SandboxNetworkMode = "inherited";
+export type SandboxDoctorReport = {
+    schema_version: number;
+    contract_id: string;
+    platform: string;
+    platform_supported: boolean;
+    network_mode: SandboxNetworkMode;
+    capabilities: SandboxCapabilityCheck[];
+    ready: boolean;
+    missing_required: SandboxCapabilityId[];
+};
+/**
+ * The real repository UID/GID is never equated with the namespace-local
+ * identity a sandboxed process observes; the two are represented separately.
+ */
+export type SandboxIdentity = {
+    real_uid: number | null;
+    real_gid: number | null;
+    namespace_uid: number;
+    namespace_gid: number;
+};
+/**
+ * Typed filesystem topology inputs. These are derived from authoritative
+ * session/runtime configuration only; there is no caller-supplied mount
+ * string policy language.
+ */
+export type SandboxFilesystemTopology = {
+    owned_worktree: string;
+    home: string;
+    cache: string;
+    /** Repository-owned state shared by sessions; only this selected subtree is mounted. */
+    persistent_home: string;
+    /** Session-private Git admin view; the host worktree admin directory is never mounted. */
+    git_metadata: string;
+    /** Repository object database, exposed read-only for Git inspection. */
+    git_objects: string;
+    /** Host user-tool directories selected by the canonical profile and mounted read-only. */
+    user_tool_paths: string[];
+    /** Host HOME used to derive the selected user-tool paths; never mounted itself. */
+    user_tool_home?: string | null;
+    runtime_paths: string[];
+    system_paths: string[];
+};
+export type SandboxExecutionRequest = {
+    schema_version: number;
+    contract_id: string;
+    /**
+     * Mirrors `SandboxExecutionOptions.enforce`. `true` means capability
+     * resolution already proved readiness and a downstream executor must
+     * establish protected execution. `false` means readiness was not required
+     * to reach this request, so a downstream executor may still need to fall
+     * back to the legacy unsandboxed path.
+     */
+    enforce: boolean;
+    session_id: string;
+    repository: string;
+    worktree: string;
+    branch: string;
+    network_mode: SandboxNetworkMode;
+    /** Resolved host path to bubblewrap; null is valid only for advisory requests. */
+    sandbox_executable: string | null;
+    identity: SandboxIdentity;
+    filesystem: SandboxFilesystemTopology;
+    required_capabilities: SandboxCapabilityId[];
+};
+export type SandboxExecutionOptions = {
+    session_id: string | null;
+    /** When true, resolution fails closed instead of returning an unsandboxed request. */
+    enforce: boolean;
+};
+/** Injectable capability probe so doctor/resolution logic stays host-independent and testable. */
+export type SandboxProbe = {
+    platform(): string;
+    uid(): number | null;
+    gid(): number | null;
+    hasBubblewrap(): boolean;
+    /**
+     * Proves user, mount, PID, IPC, and UTS namespace creation together by
+     * actually asking bubblewrap to unshare all of them, not by inferring
+     * support from `/proc/self/ns/*` existence. Those files describe the
+     * calling process's own current namespace membership — present on any
+     * modern kernel — and prove nothing about whether this host or its
+     * container/seccomp/AppArmor policy permits `clone(CLONE_NEWUSER)` and
+     * friends. False-positive readiness here would let `enforce: true`
+     * resolve successfully even though bwrap cannot actually sandbox.
+     */
+    hasNamespaceSupport(): boolean;
+    hasCgroupsV2(): boolean;
+    hasLandlock(): boolean;
+    hasSeccomp(): boolean;
+    hasCapabilities(): boolean;
+};
+/**
+ * Explicit runtime inputs consumed by the canonical profile. The shape is
+ * intentionally fixed: callers can select a supported runtime layout, but
+ * cannot supply an arbitrary list of mount source/destination pairs.
+ */
+export type SandboxRuntimeLayout = {
+    bubblewrap: string | null;
+    /** Host HOME used only to resolve the selected read-only tool directories. */
+    user_home?: string | null;
+    user_local_bin: string | null;
+    user_local_lib: string | null;
+    user_pnpm_bin: string | null;
+    nix_store: string | null;
+    nix_current_system: string | null;
+    nix_wrappers: string | null;
+    nix_user_profile: string | null;
+    usr: string | null;
+    bin: string | null;
+    lib: string | null;
+    lib64: string | null;
+    passwd: string | null;
+    group: string | null;
+    nsswitch: string | null;
+    hosts: string | null;
+    resolv_conf: string | null;
+    alternatives: string | null;
+    ssl_certs: string | null;
+    pki_certs: string | null;
+    ca_certificates: string | null;
+};
+/**
+ * Local kernel/runtime capability probes. Required namespace support is
+ * verified by an actual bubblewrap execution probe; optional capabilities
+ * remain best-effort static filesystem evidence since they never gate
+ * `ready`.
+ */
+export declare const defaultSandboxProbe: SandboxProbe;
+/**
+ * Pure, side-effect-free capability/doctor inspection. Always returns a
+ * report; it never throws and never selects an unsandboxed path itself.
+ */
+export declare function sandboxDoctorReport(probe?: SandboxProbe): SandboxDoctorReport;
+/**
+ * Discover only paths from the fixed standalone-Linux and NixOS layouts.
+ * `/usr` is a conditional standalone input, never the assumed root of the
+ * runtime; NixOS paths are selected when they actually exist.
+ */
+export declare function discoverSandboxRuntimeLayout(environment?: NodeJS.ProcessEnv): SandboxRuntimeLayout;
+/**
+ * Resolve one typed sandbox execution request for a single, already
+ * authoritative Nawabari session. Repository/worktree/branch/session
+ * identity is derived exclusively from `backend.guard`, the same
+ * registry/guard authority every other governed operation uses; this
+ * function does not re-verify Git or registry state on its own.
+ *
+ * When `options.enforce` is true and required sandbox capabilities are
+ * unavailable (including an unsupported platform), resolution fails closed:
+ * it never returns a request that silently downgrades to the legacy
+ * unsandboxed path.
+ */
+export declare function resolveSandboxExecutionRequest(backend: SessionBackend, context: SessionContext, options: SandboxExecutionOptions, probe?: SandboxProbe, runtimeLayout?: SandboxRuntimeLayout): Promise<DomainResult<SandboxExecutionRequest>>;
+export { compileSandboxInvocation, runSandboxedCommand, type SandboxCommand, type SandboxExecutionResult, type SandboxInvocation, type SandboxLauncherOptions, } from "./sandbox-launcher.js";

package/dist/domain/sandbox.js

@@ -0,0 +1,363 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import process from "node:process";
+import { DomainError, failure, success } from "./errors.js";
+/**
+ * Versioned identity for the Linux sandbox execution contract (Issue #81).
+ * This contract binds exactly one existing Nawabari session to an execution
+ * request; it does not create a parallel session identity. It defines
+ * capability/doctor state and one typed execution request/result. It does
+ * not implement bubblewrap mounts; that is the next, downstream child.
+ */
+export const SANDBOX_CONTRACT_ID = "nawabari.sandbox-execution.v1";
+export const SANDBOX_CONTRACT_SCHEMA_VERSION = 1;
+/** Nawabari's only supported sandbox execution platform. */
+export const SANDBOX_SUPPORTED_PLATFORM = "linux";
+/**
+ * Capabilities without which protected execution cannot be established at
+ * all: the bwrap binary plus the namespace classes bwrap unshares by
+ * default. Missing any of these fails resolution closed.
+ */
+export const SANDBOX_REQUIRED_CAPABILITIES = Object.freeze([
+    "bubblewrap",
+    "user_namespaces",
+    "mount_namespaces",
+    "pid_namespace",
+    "ipc_namespace",
+    "uts_namespace",
+]);
+/** Defense-in-depth capabilities that strengthen but do not gate readiness. */
+export const SANDBOX_OPTIONAL_CAPABILITIES = Object.freeze([
+    "cgroups_v2",
+    "landlock",
+    "seccomp",
+    "capabilities",
+]);
+function pathExists(candidate) {
+    try {
+        return existsSync(candidate);
+    }
+    catch {
+        return false;
+    }
+}
+function existingPath(candidate) {
+    return pathExists(candidate) ? candidate : null;
+}
+function commandExistsOnPath(command, environment = process.env) {
+    return executableOnPath(command, environment) !== null;
+}
+function executableOnPath(command, environment = process.env) {
+    const pathEnvironment = environment.PATH ?? "";
+    const separator = process.platform === "win32" ? ";" : ":";
+    for (const directory of pathEnvironment.split(separator)) {
+        if (directory.length === 0)
+            continue;
+        const candidate = path.join(directory, command);
+        if (pathExists(candidate))
+            return candidate;
+    }
+    return null;
+}
+function kernelSupportsLandlockAbi() {
+    const [majorText, minorText] = os.release().split(".");
+    const major = Number(majorText);
+    const minor = Number(minorText);
+    if (!Number.isFinite(major) || !Number.isFinite(minor))
+        return false;
+    return major > 5 || (major === 5 && minor >= 13);
+}
+const BUBBLEWRAP_NAMESPACE_PROBE_TIMEOUT_MS = 5_000;
+/**
+ * Execution-level evidence: actually unshare every required namespace class
+ * through bwrap itself instead of trusting static filesystem evidence. A
+ * process that already has its own namespace handles (every process does)
+ * says nothing about whether creating *new* ones is permitted here.
+ */
+function probeBubblewrapNamespaceSupport(hasBwrap) {
+    if (!hasBwrap)
+        return false;
+    const bwrap = executableOnPath("bwrap");
+    if (bwrap === null)
+        return false;
+    try {
+        execFileSync(bwrap, ["--unshare-user", "--unshare-pid", "--unshare-ipc", "--unshare-uts", "--ro-bind", "/", "/", "true"], { stdio: ["ignore", "ignore", "ignore"], timeout: BUBBLEWRAP_NAMESPACE_PROBE_TIMEOUT_MS });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Local kernel/runtime capability probes. Required namespace support is
+ * verified by an actual bubblewrap execution probe; optional capabilities
+ * remain best-effort static filesystem evidence since they never gate
+ * `ready`.
+ */
+export const defaultSandboxProbe = Object.freeze({
+    platform: () => process.platform,
+    uid: () => (typeof process.getuid === "function" ? process.getuid() : null),
+    gid: () => (typeof process.getgid === "function" ? process.getgid() : null),
+    hasBubblewrap: () => commandExistsOnPath("bwrap"),
+    hasNamespaceSupport: () => probeBubblewrapNamespaceSupport(commandExistsOnPath("bwrap")),
+    hasCgroupsV2: () => pathExists("/sys/fs/cgroup/cgroup.controllers"),
+    hasLandlock: () => pathExists("/sys/kernel/security/landlock") || kernelSupportsLandlockAbi(),
+    hasSeccomp: () => pathExists("/proc/sys/kernel/seccomp"),
+    hasCapabilities: () => pathExists("/proc/self/status"),
+});
+/**
+ * user_namespaces/mount_namespaces/pid_namespace/ipc_namespace/uts_namespace
+ * are reported as distinct capability ids for machine-readability, but all
+ * five share one execution-level probe: bwrap needs every one of them
+ * together to sandbox anything, so proving them together is what the
+ * doctor's `ready` signal actually needs.
+ */
+const CAPABILITY_PROBE = Object.freeze({
+    bubblewrap: (probe) => probe.hasBubblewrap(),
+    user_namespaces: (probe) => probe.hasNamespaceSupport(),
+    mount_namespaces: (probe) => probe.hasNamespaceSupport(),
+    pid_namespace: (probe) => probe.hasNamespaceSupport(),
+    ipc_namespace: (probe) => probe.hasNamespaceSupport(),
+    uts_namespace: (probe) => probe.hasNamespaceSupport(),
+    cgroups_v2: (probe) => probe.hasCgroupsV2(),
+    landlock: (probe) => probe.hasLandlock(),
+    seccomp: (probe) => probe.hasSeccomp(),
+    capabilities: (probe) => probe.hasCapabilities(),
+});
+const NAMESPACE_CAPABILITIES = new Set([
+    "user_namespaces",
+    "mount_namespaces",
+    "pid_namespace",
+    "ipc_namespace",
+    "uts_namespace",
+]);
+const CAPABILITY_LABEL = Object.freeze({
+    bubblewrap: "The bwrap executable",
+    user_namespaces: "Linux user namespaces",
+    mount_namespaces: "Linux mount namespaces",
+    pid_namespace: "Linux PID namespace isolation",
+    ipc_namespace: "Linux IPC namespace isolation",
+    uts_namespace: "Linux UTS namespace isolation",
+    cgroups_v2: "The unified cgroups v2 hierarchy",
+    landlock: "The Landlock LSM ABI",
+    seccomp: "seccomp filtering",
+    capabilities: "Linux capability-set inspection",
+});
+function capabilityCheck(id, requirement, platformSupported, probe, namespaceSupport) {
+    const label = CAPABILITY_LABEL[id];
+    if (!platformSupported) {
+        return {
+            id,
+            requirement,
+            status: "not_applicable",
+            code: "SANDBOX_UNSUPPORTED_PLATFORM",
+            message: `${label} was not evaluated because the platform does not support Nawabari sandbox execution.`,
+            details: {},
+        };
+    }
+    const available = NAMESPACE_CAPABILITIES.has(id) ? namespaceSupport : CAPABILITY_PROBE[id](probe);
+    return {
+        id,
+        requirement,
+        status: available ? "available" : "unavailable",
+        code: available ? null : "SANDBOX_CAPABILITY_UNAVAILABLE",
+        message: available ? `${label} is available.` : `${label} is not available.`,
+        details: {},
+    };
+}
+/**
+ * Pure, side-effect-free capability/doctor inspection. Always returns a
+ * report; it never throws and never selects an unsandboxed path itself.
+ */
+export function sandboxDoctorReport(probe = defaultSandboxProbe) {
+    const platform = probe.platform();
+    const platformSupported = platform === SANDBOX_SUPPORTED_PLATFORM;
+    const namespaceSupport = platformSupported && probe.hasNamespaceSupport();
+    const capabilities = [
+        ...SANDBOX_REQUIRED_CAPABILITIES.map((id) => capabilityCheck(id, "required", platformSupported, probe, namespaceSupport)),
+        ...SANDBOX_OPTIONAL_CAPABILITIES.map((id) => capabilityCheck(id, "optional", platformSupported, probe, namespaceSupport)),
+    ];
+    const missingRequired = capabilities
+        .filter((entry) => entry.requirement === "required" && entry.status !== "available")
+        .map((entry) => entry.id);
+    return {
+        schema_version: SANDBOX_CONTRACT_SCHEMA_VERSION,
+        contract_id: SANDBOX_CONTRACT_ID,
+        platform,
+        platform_supported: platformSupported,
+        network_mode: "inherited",
+        capabilities,
+        ready: platformSupported && missingRequired.length === 0,
+        missing_required: missingRequired,
+    };
+}
+/**
+ * Discover only paths from the fixed standalone-Linux and NixOS layouts.
+ * `/usr` is a conditional standalone input, never the assumed root of the
+ * runtime; NixOS paths are selected when they actually exist.
+ */
+export function discoverSandboxRuntimeLayout(environment = process.env) {
+    const candidateHome = environment.HOME ?? null;
+    const home = candidateHome !== null && path.isAbsolute(candidateHome) && !candidateHome.includes("\0") ? candidateHome : null;
+    const user = environment.USER ?? environment.LOGNAME ?? null;
+    const perUserProfile = user === null ? null : `/etc/profiles/per-user/${user}`;
+    return {
+        bubblewrap: executableOnPath("bwrap", environment),
+        user_home: home,
+        user_local_bin: home === null ? null : existingPath(path.join(home, ".local", "bin")),
+        user_local_lib: home === null ? null : existingPath(path.join(home, ".local", "lib")),
+        user_pnpm_bin: home === null ? null : existingPath(path.join(home, ".local", "share", "pnpm")),
+        nix_store: existingPath("/nix/store"),
+        nix_current_system: existingPath("/run/current-system"),
+        nix_wrappers: existingPath("/run/wrappers"),
+        nix_user_profile: perUserProfile === null ? null : existingPath(perUserProfile),
+        usr: existingPath("/usr"),
+        bin: existingPath("/bin"),
+        lib: existingPath("/lib"),
+        lib64: existingPath("/lib64"),
+        passwd: existingPath("/etc/passwd"),
+        group: existingPath("/etc/group"),
+        nsswitch: existingPath("/etc/nsswitch.conf"),
+        hosts: existingPath("/etc/hosts"),
+        resolv_conf: existingPath("/etc/resolv.conf"),
+        alternatives: existingPath("/etc/alternatives"),
+        ssl_certs: existingPath("/etc/ssl"),
+        pki_certs: existingPath("/etc/pki"),
+        ca_certificates: existingPath("/etc/ca-certificates"),
+    };
+}
+function nonNullPaths(paths) {
+    return paths.filter((candidate) => candidate !== null);
+}
+function sandboxRuntimePaths(layout) {
+    return [
+        "/dev",
+        "/proc",
+        "/tmp",
+        ...nonNullPaths([layout.nix_store, layout.nix_current_system, layout.nix_wrappers, layout.nix_user_profile]),
+    ];
+}
+function sandboxSystemPaths(layout) {
+    return nonNullPaths([
+        layout.usr,
+        layout.bin,
+        layout.lib,
+        layout.lib64,
+        layout.passwd,
+        layout.group,
+        layout.nsswitch,
+        layout.hosts,
+        layout.resolv_conf,
+        layout.alternatives,
+        layout.ssl_certs,
+        layout.pki_certs,
+        layout.ca_certificates,
+    ]);
+}
+function deriveGitObjectsPath(repository, worktree) {
+    try {
+        const worktreeGitPath = path.join(worktree, ".git");
+        const gitEntry = readFileSync(worktreeGitPath, "utf8").trim();
+        const gitDirectory = gitEntry.startsWith("gitdir:")
+            ? path.resolve(worktree, gitEntry.slice("gitdir:".length).trim())
+            : worktreeGitPath;
+        const commonDirFile = path.join(gitDirectory, "commondir");
+        const commonDirectory = existsSync(commonDirFile)
+            ? path.resolve(gitDirectory, readFileSync(commonDirFile, "utf8").trim())
+            : gitDirectory;
+        const objects = path.join(commonDirectory, "objects");
+        if (existsSync(objects))
+            return objects;
+    }
+    catch {
+        // The guard has already established the session's physical authority;
+        // retain a deterministic fallback for unusual non-linked Git layouts.
+    }
+    return path.join(repository, ".git", "objects");
+}
+/**
+ * Typed filesystem topology derived from the authoritative repository common
+ * Git directory and the resolved session identity only; callers cannot
+ * inject arbitrary mount paths through this contract.
+ */
+function deriveFilesystemTopology(repository, worktree, sessionId, runtimeLayout) {
+    const sandboxStateRoot = path.join(repository, "nawabari", "sandbox", sessionId);
+    return {
+        owned_worktree: worktree,
+        home: path.join(sandboxStateRoot, "home"),
+        cache: path.join(sandboxStateRoot, "cache"),
+        persistent_home: path.join(repository, "nawabari", "sandbox", "shared-home"),
+        git_metadata: path.join(sandboxStateRoot, "git"),
+        git_objects: deriveGitObjectsPath(repository, worktree),
+        user_tool_paths: nonNullPaths([
+            runtimeLayout.user_local_bin,
+            runtimeLayout.user_local_lib,
+            runtimeLayout.user_pnpm_bin,
+        ]),
+        user_tool_home: runtimeLayout.user_home,
+        runtime_paths: sandboxRuntimePaths(runtimeLayout),
+        system_paths: sandboxSystemPaths(runtimeLayout),
+    };
+}
+function resolveIdentity(probe) {
+    return {
+        real_uid: probe.uid(),
+        real_gid: probe.gid(),
+        namespace_uid: 0,
+        namespace_gid: 0,
+    };
+}
+/**
+ * Resolve one typed sandbox execution request for a single, already
+ * authoritative Nawabari session. Repository/worktree/branch/session
+ * identity is derived exclusively from `backend.guard`, the same
+ * registry/guard authority every other governed operation uses; this
+ * function does not re-verify Git or registry state on its own.
+ *
+ * When `options.enforce` is true and required sandbox capabilities are
+ * unavailable (including an unsupported platform), resolution fails closed:
+ * it never returns a request that silently downgrades to the legacy
+ * unsandboxed path.
+ */
+export async function resolveSandboxExecutionRequest(backend, context, options, probe = defaultSandboxProbe, runtimeLayout = discoverSandboxRuntimeLayout()) {
+    const guardResult = await backend.guard(context, { session_id: options.session_id });
+    if (!guardResult.ok)
+        return failure(guardResult.error);
+    const decision = guardResult.value;
+    if (!decision.allowed || decision.session_id === null || decision.branch === null) {
+        const code = decision.code === "ALLOWED" ? "OPERATION_REJECTED" : decision.code;
+        return failure(new DomainError(code, `Sandbox execution request was denied by the Nawabari session guard: ${code}.`, {
+            guard: decision,
+        }));
+    }
+    const doctor = sandboxDoctorReport(probe);
+    if (options.enforce && !doctor.ready) {
+        const code = doctor.platform_supported
+            ? "SANDBOX_CAPABILITY_UNAVAILABLE"
+            : "SANDBOX_UNSUPPORTED_PLATFORM";
+        return failure(new DomainError(code, "Sandbox execution was required but could not be established; the legacy unsandboxed path was not selected.", {
+            session_id: decision.session_id,
+            platform: doctor.platform,
+            platform_supported: doctor.platform_supported,
+            missing_required: doctor.missing_required,
+        }));
+    }
+    return success({
+        schema_version: SANDBOX_CONTRACT_SCHEMA_VERSION,
+        contract_id: SANDBOX_CONTRACT_ID,
+        enforce: options.enforce,
+        session_id: decision.session_id,
+        repository: decision.repository,
+        worktree: decision.worktree,
+        branch: decision.branch,
+        network_mode: doctor.network_mode,
+        sandbox_executable: runtimeLayout.bubblewrap,
+        identity: resolveIdentity(probe),
+        filesystem: deriveFilesystemTopology(decision.repository, decision.worktree, decision.session_id, runtimeLayout),
+        required_capabilities: [...SANDBOX_REQUIRED_CAPABILITIES],
+    });
+}
+export { compileSandboxInvocation, runSandboxedCommand, } from "./sandbox-launcher.js";
+//# sourceMappingURL=sandbox.js.map

package/dist/domain/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/domain/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAsD,MAAM,aAAa,CAAC;AAGhH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAAwC,CAAC;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAU,CAAC;AAE1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAgB,CAAC;AAc3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAmC,MAAM,CAAC,MAAM,CAAC;IACzF,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAmC,MAAM,CAAC,MAAM,CAAC;IACzF,YAAY;IACZ,UAAU;IACV,SAAS;IACT,cAAc;CACf,CAAC,CAAC;AAoJH,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,cAAiC,OAAO,CAAC,GAAG;IACxF,OAAO,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,IAAI,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,cAAiC,OAAO,CAAC,GAAG;IACrF,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB;IAChC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,qCAAqC,GAAG,KAAK,CAAC;AAEpD;;;;;GAKG;AACH,SAAS,+BAA+B,CAAC,QAAiB;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,YAAY,CACV,KAAK,EACL,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EACpG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAC1F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB,MAAM,CAAC,MAAM,CAAC;IAC7D,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ;IAChC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;IACjD,mBAAmB,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACxF,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mCAAmC,CAAC;IACnE,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,+BAA+B,CAAC,IAAI,yBAAyB,EAAE;IAC7F,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC;IACxD,eAAe,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC;CACvD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,gBAAgB,GAA4E,MAAM,CAAC,MAAM,CAAC;IAC9G,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE;IAC5C,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;IACvD,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;IACxD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;IACrD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;IACrD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;IACrD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE;IAC3C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE;IACtC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAqC,IAAI,GAAG,CAAC;IACvE,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAkD,MAAM,CAAC,MAAM,CAAC;IACpF,UAAU,EAAE,sBAAsB;IAClC,eAAe,EAAE,uBAAuB;IACxC,gBAAgB,EAAE,wBAAwB;IAC1C,aAAa,EAAE,+BAA+B;IAC9C,aAAa,EAAE,+BAA+B;IAC9C,aAAa,EAAE,+BAA+B;IAC9C,UAAU,EAAE,kCAAkC;IAC9C,QAAQ,EAAE,sBAAsB;IAChC,OAAO,EAAE,mBAAmB;IAC5B,YAAY,EAAE,iCAAiC;CAChD,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,EAAuB,EACvB,WAAyC,EACzC,iBAA0B,EAC1B,KAAmB,EACnB,gBAAyB;IAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;YACL,EAAE;YACF,WAAW;YACX,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,KAAK,sFAAsF;YACvG,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAClG,OAAO;QACL,EAAE;QACF,WAAW;QACX,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;QAC/C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gCAAgC;QACzD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,GAAG,KAAK,oBAAoB;QAC5E,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsB,mBAAmB;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClC,MAAM,iBAAiB,GAAG,QAAQ,KAAK,0BAA0B,CAAC;IAClE,MAAM,gBAAgB,GAAG,iBAAiB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;IAC1E,MAAM,YAAY,GAAG;QACnB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAC5E;QACD,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAC5E;KACF,CAAC;IACF,MAAM,eAAe,GAAG,YAAY;SACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;SACnF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE5B,OAAO;QACL,cAAc,EAAE,+BAA+B;QAC/C,WAAW,EAAE,mBAAmB;QAChC,QAAQ;QACR,kBAAkB,EAAE,iBAAiB;QACrC,YAAY,EAAE,WAAW;QACzB,YAAY;QACZ,KAAK,EAAE,iBAAiB,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QACxD,gBAAgB,EAAE,eAAe;KAClC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAiC,OAAO,CAAC,GAAG;IACvF,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/C,MAAM,IAAI,GACR,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,OAAO,IAAI,IAAI,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAC/E,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC;QAClD,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrF,cAAc,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrF,aAAa,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9F,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC;QACrC,kBAAkB,EAAE,YAAY,CAAC,qBAAqB,CAAC;QACvD,YAAY,EAAE,YAAY,CAAC,eAAe,CAAC;QAC3C,gBAAgB,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC;QAC/E,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;QACzB,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;QACzB,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC7B,MAAM,EAAE,YAAY,CAAC,aAAa,CAAC;QACnC,KAAK,EAAE,YAAY,CAAC,YAAY,CAAC;QACjC,QAAQ,EAAE,YAAY,CAAC,oBAAoB,CAAC;QAC5C,KAAK,EAAE,YAAY,CAAC,YAAY,CAAC;QACjC,WAAW,EAAE,YAAY,CAAC,kBAAkB,CAAC;QAC7C,YAAY,EAAE,YAAY,CAAC,mBAAmB,CAAC;QAC/C,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC;QACnC,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC;QACnC,eAAe,EAAE,YAAY,CAAC,sBAAsB,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAiC;IACrD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4B;IACvD,OAAO;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;KAC7G,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA4B;IACtD,OAAO,YAAY,CAAC;QAClB,MAAM,CAAC,GAAG;QACV,MAAM,CAAC,GAAG;QACV,MAAM,CAAC,GAAG;QACV,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,eAAe;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,QAAgB;IAChE,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,CAAC,CAAC,eAAe,CAAC;QACpB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,CAAC,CAAC,YAAY,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;IACxE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,QAAgB,EAChB,SAAiB,EACjB,aAAmC;IAEnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjF,OAAO;QACL,cAAc,EAAE,QAAQ;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC;QACzC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5E,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC;QAChD,WAAW,EAAE,oBAAoB,CAAC,UAAU,EAAE,QAAQ,CAAC;QACvD,eAAe,EAAE,YAAY,CAAC;YAC5B,aAAa,CAAC,cAAc;YAC5B,aAAa,CAAC,cAAc;YAC5B,aAAa,CAAC,aAAa;SAC5B,CAAC;QACF,cAAc,EAAE,aAAa,CAAC,SAAS;QACvC,aAAa,EAAE,mBAAmB,CAAC,aAAa,CAAC;QACjD,YAAY,EAAE,kBAAkB,CAAC,aAAa,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAmB;IAC1C,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE;QACrB,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE;QACrB,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAuB,EACvB,OAAuB,EACvB,OAAgC,EAChC,QAAsB,mBAAmB,EACzC,gBAAsC,4BAA4B,EAAE;IAEpE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClF,MAAM,IAAI,GAAc,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3F,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,IAAI,EAAE,uEAAuE,IAAI,GAAG,EAAE;YACpG,KAAK,EAAE,QAAiC;SACzC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAc,MAAM,CAAC,kBAAkB;YAC/C,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,8BAA8B,CAAC;QACnC,OAAO,OAAO,CACZ,IAAI,WAAW,CACb,IAAI,EACJ,4GAA4G,EAC5G;YACE,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CACF,CACF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;QACb,cAAc,EAAE,+BAA+B;QAC/C,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,kBAAkB,EAAE,aAAa,CAAC,UAAU;QAC5C,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC;QAChC,UAAU,EAAE,wBAAwB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QAChH,qBAAqB,EAAE,CAAC,GAAG,6BAA6B,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GAKpB,MAAM,uBAAuB,CAAC"}

package/dist/domain/session-backend.d.ts

@@ -1,6 +1,6 @@
 import { type SessionRegistryOptions } from "../session-registry.js";
 import { type DomainResult } from "./errors.js";
-import { type BackendCapabilities, type CheckpointEvidence, type CheckpointOptions, type CommitOptions, type CommitResult, type ClaimResourcesOptions, type ClaimResourcesResult, type GarbageCollectOptions, type GarbageCollectResult, type GuardDecision, type GuardOptions, type OperationAuthorizationDecision, type OperationAuthorizationOptions, type PushOptions, type PushResult, type SessionBackend, type SessionCloseOptions, type SessionCloseResult, type SessionContext, type SessionCreateOptions, type SessionListResult, type SessionRecord, type ReleaseClaimsOptions, type ReleaseClaimsResult, type ResourceClaim, type StatusResult, type UpdateClaimsOptions } from "./session.js";
+import { type BackendCapabilities, type CheckpointEvidence, type CheckpointOptions, type RepositoryDiffEvidence, type RepositoryDiffOptions, type RepositoryEvidence, type RepositoryEvidenceOptions, type CommitOptions, type CommitResult, type ClaimResourcesOptions, type ClaimResourcesResult, type GarbageCollectOptions, type GarbageCollectResult, type GuardDecision, type GuardOptions, type OperationAuthorizationDecision, type OperationAuthorizationOptions, type PushOptions, type PushResult, type SessionBackend, type SessionCloseOptions, type SessionCloseResult, type SessionContext, type SessionCreateOptions, type SessionListResult, type SessionListOptions, type SessionRecord, type ReleaseClaimsOptions, type ReleaseClaimsResult, type ResourceClaim, type StatusResult, type UpdateClaimsOptions } from "./session.js";
 export interface LocalSessionBackendOptions {
     readonly git?: SessionRegistryOptions["git"];
     readonly registry?: Omit<SessionRegistryOptions, "cwd" | "git">;
@@ -17,10 +17,12 @@ export declare class LocalSessionBackend implements SessionBackend {
     guard(context: SessionContext, options: GuardOptions): Promise<DomainResult<GuardDecision>>;
     authorizeOperation(context: SessionContext, options: OperationAuthorizationOptions): Promise<DomainResult<OperationAuthorizationDecision>>;
     checkpoint(context: SessionContext, options: CheckpointOptions): Promise<DomainResult<CheckpointEvidence>>;
+    repositoryEvidence(context: SessionContext, options: RepositoryEvidenceOptions): Promise<DomainResult<RepositoryEvidence>>;
+    repositoryDiff(context: SessionContext, options: RepositoryDiffOptions): Promise<DomainResult<RepositoryDiffEvidence>>;
     commit(context: SessionContext, options: CommitOptions): Promise<DomainResult<CommitResult>>;
     push(context: SessionContext, options: PushOptions): Promise<DomainResult<PushResult>>;
-    listSessions(context: SessionContext): Promise<DomainResult<SessionListResult>>;
-    status(context: SessionContext): Promise<DomainResult<StatusResult>>;
+    listSessions(context: SessionContext, options?: SessionListOptions): Promise<DomainResult<SessionListResult>>;
+    status(context: SessionContext, options?: SessionListOptions): Promise<DomainResult<StatusResult>>;
     closeSession(context: SessionContext, options: SessionCloseOptions): Promise<DomainResult<SessionCloseResult>>;
     garbageCollect(context: SessionContext, options: GarbageCollectOptions): Promise<DomainResult<GarbageCollectResult>>;
     claimResources(context: SessionContext, options: ClaimResourcesOptions): Promise<DomainResult<ClaimResourcesResult>>;