niceeval 0.13.2 → 0.13.3

package/dist/sandbox/local.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["local.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,iFAAiF;AACjF,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,gEAAgE;AAChE,gDAAgD;AAChD,wDAAwD;AACxD,wEAAwE;AACxE,4DAA4D;AAC5D,2DAAqD;AACrD,yCAAsC;AACtC,+CAAsH;AACtH,qCAAmD;AACnD,qCAAiC;AACjC,yCAAkE;AAClE,6CAAyC;AAEzC,yCAAkE;AAClE,+CAAyE;AACzE,qDAA8E;AAC9E,mEAAkE;AAClE,mDAA0D;AAC1D,6CAAsH;AACtH,uDAA+E;AAC/E,+CAAqC;AACrC,MAAM,aAAa,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAC;AAoB1C,6CAA6C;AAC7C,KAAK,UAAU,cAAc,CAAC,GAAW;IACrC,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,gBAAgB,CAAC,CAAC,CAAC;IACzC,CAAC;AACL,CAAC;AACD,2CAA2C;AAC3C,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAW;IACtD,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC;QACD,MAAM,IAAA,iBAAM,EAAC,GAAG,EAAE,mBAAW,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAA0B,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QACnB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACf,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,GAAuB,EAAE,GAAW;IAC9D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAWD,uDAAuD;AACvD,SAAS,UAAU,CAAC,OAAe,EAAE,IAAc,EAAE,IAAe;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC1C,sDAAsD;QACtD,sDAAsD;QACtD,mBAAmB;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;YACxB,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;iBACI,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC,CAAC;QACF,IAAI,WAA4C,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACnE,WAAW,GAAG,SAAS,CAAC;YACxB,QAAQ,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,WAAW,GAAG,OAAO,CAAC;YACtB,QAAQ,EAAE,CAAC;QACf,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC/B,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,aAAa;iBACR,IAAI,CAAC,GAAG,EAAE;gBACX,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC,CAAC;oBACzF,OAAO;gBACX,CAAC;gBACD,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACnG,MAAM,CAAC,IAAI,wCAA0B,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC;oBAC5I,OAAO;gBACX,CAAC;gBACD,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC;iBACG,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;GAIG;AACH,MAAa,YAAY;IACZ,OAAO,CAAS;IAChB,QAAQ,GAAG,WAAW,CAAC;IACvB,SAAS,CAAS;IACV,OAAO,CAAU;IAC1B,UAAU,CAAU;IACX,UAAU,CAAS;IACpC,sDAAsD;IACrC,WAAW,CAAoB;IACvC,YAAY,GAAG;QACpB,YAAY,EAAE,yCAA4B;QAC1C,SAAS,EAAE,yCAA4B;QACvC,OAAO,EAAE,yCAA4B;QACrC,cAAc,EAAE,yCAA4B;QAC5C,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,CAAC,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;KAC/G,CAAC;IACF,YAAoB,OAAe,EAAE,UAAkB,EAAE,WAA8B,EAAE,OAAgB,EAAE,UAAmB;QAC1H,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,sEAAsE;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAA+B,EAAE;QACjD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtH,8DAA8D;QAC9D,sCAAsC;QACtC,IAAA,qCAAmB,EAAC,OAAO,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC;YACtC,SAAS,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,QAAQ,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,2DAA2D;IAC3D,kBAAkB,CAAC,UAAmB;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,kFAAkF;IAC1E,OAAO,CAAC,IAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACjF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC9B,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAAuB,EAAE;QACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACtC,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACxF,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,OAAuB,EAAE;QAC3D,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,IAAY;QACvB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,IAAI,CAAC;YACD,MAAM,IAAA,iBAAM,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACO,KAAK,CAAC,mBAAmB,CAAC,KAAoC,EAAE,SAAkB;QACtF,MAAM,MAAM,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY;QACxB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAmB;QAC9C,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,MAAoB,EAAE,UAAkB;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAA,mBAAU,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,SAAuB,EAAE,SAAkB,EAAE,OAE/D,EAAE;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAiB,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAAoB;QACvD,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAA,oBAAW,EAAC,WAAW,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,SAAuB,EAAE,OAEhE,EAAE;QACF,MAAM,SAAS,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,IAAA,+CAAuB,EAAC;YAC1B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD;;;OAGG;IACH,KAAK,CAAC,IAAI;QACN,IAAA,uCAAqB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,IAAA,aAAE,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,CAAC;CACJ;AAvJD,oCAuJC","sourcesContent":["// Local 沙箱 provider:宿主机本地目录直接当 workdir 跑,零隔离、零仪式\n// (契约见 docs/feature/sandbox/local.md)。runCommand 按 argv 直接 spawn 宿主进程(不经 shell);\n// runShell 交给宿主 bash(与其它 provider 的 runShell 语义一致);文件 IO 走本地 fs——\n// 「沙箱」就是宿主文件系统本身,没有远端控制面、没有预制环境、没有留存。\n//\n// 变更分类账的 GIT_DIR 不能像其它 provider 那样固定在同一个宿主路径:多数 provider 每次创建都是\n// 全新隔离文件系统,固定路径天然不冲突;本地档的\"沙箱\"是宿主机本身,同机先后或并发跑的多个\n// attempt 共享同一个 /tmp,固定路径会在多次运行之间互相踩踏用户看不到的 git 索引。这里改用\n// mkdtemp 出的每实例私有目录,经 sandbox/ledger-paths.ts 登记给 runner/ledger.ts 消费——\n// ledger.ts 不需要认识\"local\"这个名字,只需要知道\"这个 sandboxId 有没有登记覆盖路径\"。\nimport { spawn, execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { mkdtemp, mkdir, rm, readFile as fsReadFile, writeFile as fsWriteFile, access, stat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join, resolve as resolvePath } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport type { CommandOptions, CommandResult, SuccessfulCommandResult } from \"../types.ts\";\nimport { resolveLocalPath, resolveSandboxPath } from \"./paths.ts\";\nimport { commandLimit, SandboxCommandTimeoutError } from \"./deadline.ts\";\nimport { collectLocalFiles, type CollectedLocalFile } from \"./local-files.ts\";\nimport { downloadDirectoryByList } from \"./download-directory.ts\";\nimport { successfulCommandResult } from \"./operations.ts\";\nimport { supportedBackendCapability, unsupportedBackendCapability, type SandboxProviderBackend, } from \"./backend.ts\";\nimport { registerLedgerPaths, unregisterLedgerPaths } from \"./ledger-paths.ts\";\nimport { t } from \"../i18n/index.ts\";\nconst execFileAsync = promisify(execFile);\nexport interface LocalSandboxOptions {\n    /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */\n    dir?: string;\n    /** attempt 的超时上限(毫秒),单条命令未显式传 `timeout` 时的上限来源;省略 = 没有上限。 */\n    timeout?: number;\n    /** attempt deadline 的截止时刻(epoch ms);单条命令按剩余量取上限(见 deadline.ts)。 */\n    deadlineAt?: number;\n    /**\n     * 按序前置到宿主 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md\n     * 「PATH:受管变量与 pathPrepend」)。\n     */\n    pathPrepend?: readonly string[];\n    /**\n     * 内部测试用:覆盖「当前目录」的解析起点(省略 `dir` 时向上找 git 根、显式 `dir` 时的相对路径\n     * 基准都从它算)。生产路径(runtime.ts 的 provider materializer)从不传这个字段,恒用\n     * `process.cwd()`——不是公开 spec 的一部分,`localSandbox()` 工厂不暴露它。\n     */\n    cwd?: string;\n}\n/** 从给定目录向上解析 git 仓库根;不在任何 git 仓库内时给出两条出路。 */\nasync function resolveGitRoot(cwd: string): Promise<string> {\n    try {\n        const { stdout } = await execFileAsync(\"git\", [\"rev-parse\", \"--show-toplevel\"], { cwd });\n        return stdout.trim();\n    }\n    catch {\n        throw new Error(t(\"local.notARepo\"));\n    }\n}\n/** 显式 dir:相对路径按 cwd 解析;必须已存在且可写(不自动创建)。 */\nasync function resolveExplicitDir(dir: string, cwd: string): Promise<string> {\n    const abs = resolvePath(cwd, dir);\n    try {\n        await access(abs, fsConstants.W_OK);\n    }\n    catch (e) {\n        const err = e as NodeJS.ErrnoException;\n        if (err.code === \"ENOENT\")\n            throw new Error(t(\"local.dirMissing\", { dir: abs }));\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: err.message }));\n    }\n    const info = await stat(abs);\n    if (!info.isDirectory())\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: \"not a directory\" }));\n    return abs;\n}\nasync function resolveWorkdir(dir: string | undefined, cwd: string): Promise<string> {\n    return dir !== undefined ? resolveExplicitDir(dir, cwd) : resolveGitRoot(cwd);\n}\ninterface SpawnOpts {\n    cwd: string;\n    env: NodeJS.ProcessEnv;\n    /** 缺席 = 这条命令没有上限(四层解析链一个都没声明)。 */\n    timeout?: number;\n    explicitTimeout?: boolean;\n    onStdout?: CommandOptions[\"onStdout\"];\n    onStderr?: CommandOptions[\"onStderr\"];\n    signal?: AbortSignal;\n}\n/** argv 直接 spawn(不经 shell)与「bash -c script」共用的执行核心。 */\nfunction runSpawned(command: string, args: string[], opts: SpawnOpts): Promise<CommandResult> {\n    return new Promise((resolvePromise, reject) => {\n        // detached(POSIX):超时时能杀掉整个进程组,不只是直接子进程——agent 命令常常自己再\n        // 起子进程(npm 脚本、shell 管道),只杀顶层容易留下孤儿。Windows 没有进程组这个概念,\n        // 退化成直接 kill 顶层进程。\n        const posix = process.platform !== \"win32\";\n        const child = spawn(command, args, { cwd: opts.cwd, env: opts.env, detached: posix });\n        let stdout = \"\";\n        let stderr = \"\";\n        let callbackChain = Promise.resolve();\n        let settled = false;\n        const killTree = (): void => {\n            if (posix && child.pid !== undefined) {\n                try {\n                    process.kill(-child.pid, \"SIGKILL\");\n                }\n                catch {\n                    child.kill(\"SIGKILL\");\n                }\n            }\n            else {\n                child.kill(\"SIGKILL\");\n            }\n        };\n        let termination: \"timeout\" | \"abort\" | undefined;\n        const timer = opts.timeout === undefined ? undefined : setTimeout(() => {\n            termination = \"timeout\";\n            killTree();\n        }, opts.timeout);\n        const onAbort = (): void => {\n            termination = \"abort\";\n            killTree();\n        };\n        opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n        if (opts.signal?.aborted)\n            onAbort();\n        child.stdout?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stdout += text;\n            const onStdout = opts.onStdout;\n            if (onStdout !== undefined)\n                callbackChain = callbackChain.then(() => onStdout(text));\n        });\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stderr += text;\n            const onStderr = opts.onStderr;\n            if (onStderr !== undefined)\n                callbackChain = callbackChain.then(() => onStderr(text));\n        });\n        child.on(\"error\", (err) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            reject(err);\n        });\n        child.on(\"close\", (code, signal) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            callbackChain\n                .then(() => {\n                if (termination === \"abort\") {\n                    reject(opts.signal?.reason ?? new DOMException(\"sandbox command aborted\", \"AbortError\"));\n                    return;\n                }\n                if (termination === \"timeout\" && signal === \"SIGKILL\" && code === null && opts.timeout !== undefined) {\n                    reject(new SandboxCommandTimeoutError(t(\"local.commandTimeout\", { timeoutMs: opts.timeout }), opts.timeout, opts.explicitTimeout === true));\n                    return;\n                }\n                resolvePromise({ stdout, stderr, exitCode: code ?? 0 });\n            })\n                .catch(reject);\n        });\n    });\n}\n/**\n * Local 沙箱:宿主机的一个本地目录。实现 ../types.ts 的 Sandbox 接口。\n * 契约见 docs/feature/sandbox/local.md;实现要点见 docs/feature/sandbox/architecture.md\n * 「Local provider(宿主机,零隔离)」。\n */\nexport class LocalSandbox implements SandboxProviderBackend {\n    readonly workdir: string;\n    readonly otlpHost = \"localhost\";\n    readonly sandboxId: string;\n    private readonly timeout?: number;\n    private deadlineAt?: number;\n    private readonly ledgerBase: string;\n    /** factory `pathPrepend`;按声明顺序前置到宿主 PATH,省略 = 空数组。 */\n    private readonly pathPrepend: readonly string[];\n    readonly capabilities = {\n        rootCommands: unsupportedBackendCapability,\n        appendLog: unsupportedBackendCapability,\n        suspend: unsupportedBackendCapability,\n        ensureLifetime: unsupportedBackendCapability,\n        setCommandDeadline: supportedBackendCapability((deadlineAt?: number) => this.setCommandDeadline(deadlineAt)),\n    };\n    private constructor(workdir: string, ledgerBase: string, pathPrepend: readonly string[], timeout?: number, deadlineAt?: number) {\n        this.workdir = workdir;\n        this.ledgerBase = ledgerBase;\n        this.pathPrepend = pathPrepend;\n        this.timeout = timeout;\n        this.deadlineAt = deadlineAt;\n        this.sandboxId = `local-${randomUUID().slice(0, 8)}`;\n    }\n    /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */\n    static async create(options: LocalSandboxOptions = {}): Promise<LocalSandbox> {\n        const workdir = await resolveWorkdir(options.dir, options.cwd ?? process.cwd());\n        const ledgerBase = await mkdtemp(join(tmpdir(), \"niceeval-local-ledger-\"));\n        const sandbox = new LocalSandbox(workdir, ledgerBase, options.pathPrepend ?? [], options.timeout, options.deadlineAt);\n        // runner/ledger.ts 按 sandboxId 读取这份登记——本地档的\"沙箱\"是宿主机本身,固定的宿主路径\n        // 会在同机多次运行之间互相踩踏,每实例必须有自己的一份(见文件头注释)。\n        registerLedgerPaths(sandbox.sandboxId, {\n            gitDir: join(ledgerBase, \"ledger.git\"),\n            exportDir: join(ledgerBase, \"export\"),\n        });\n        return sandbox;\n    }\n    /** 复用下由池在每次借出时换成承接者自己的 deadline(见 sandbox/deadline.ts)。 */\n    setCommandDeadline(deadlineAt?: number): void {\n        this.deadlineAt = deadlineAt;\n    }\n    /** 宿主 env:`process.env` 叠加 `pathPrepend` 前置后的 PATH,`opts.env` 仍可覆盖任意键(含 PATH)。 */\n    private hostEnv(opts: CommandOptions): NodeJS.ProcessEnv {\n        const pathBase = this.pathPrepend.length > 0\n            ? { PATH: [...this.pathPrepend, ...(process.env.PATH ?? \"\").split(\":\")].join(\":\") }\n            : {};\n        return { ...process.env, ...pathBase, ...opts.env };\n    }\n    async runCommand(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(cmd, [...args], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runShell(script: string, opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(\"bash\", [\"-c\", script], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runCommandOrThrow(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runCommand(cmd, args, opts), opts.sensitiveValues);\n    }\n    async runShellOrThrow(script: string, opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runShell(script, opts), opts.sensitiveValues);\n    }\n    async readText(path: string): Promise<string> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path), \"utf-8\");\n    }\n    async pathExists(path: string): Promise<boolean> {\n        try {\n            await access(resolveSandboxPath(this.workdir, path));\n            return true;\n        }\n        catch {\n            return false;\n        }\n    }\n    async writeText(path: string, content: string): Promise<void> {\n        await this.writeBytes(path, Buffer.from(content, \"utf-8\"));\n    }\n    private async writeCollectedFiles(files: readonly CollectedLocalFile[], targetDir?: string): Promise<void> {\n        const target = resolveSandboxPath(this.workdir, targetDir);\n        for (const file of files) {\n            const dest = resolveSandboxPath(target, file.path);\n            await mkdir(dirname(dest), { recursive: true });\n            await fsWriteFile(dest, file.content);\n        }\n    }\n    async readBytes(path: string): Promise<Uint8Array> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path));\n    }\n    async writeBytes(path: string, content: Uint8Array): Promise<void> {\n        const dest = resolveSandboxPath(this.workdir, path);\n        await mkdir(dirname(dest), { recursive: true });\n        await fsWriteFile(dest, content);\n    }\n    async uploadFile(source: string | URL, targetPath: string): Promise<void> {\n        await this.writeBytes(targetPath, await fsReadFile(resolveLocalPath(undefined, source)));\n    }\n    async uploadDirectory(sourceDir: string | URL, targetDir?: string, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const files = await collectLocalFiles(resolveLocalPath(undefined, sourceDir), opts.ignore);\n        await this.writeCollectedFiles(files, targetDir);\n    }\n    async downloadFile(sourcePath: string, target: string | URL): Promise<void> {\n        const destination = resolveLocalPath(undefined, target);\n        await mkdir(dirname(destination), { recursive: true });\n        await fsWriteFile(destination, await this.readBytes(sourcePath));\n    }\n    /**\n     * 与 vercel/e2b 共用同一套「find 列路径 + 逐文件读取」模板(见 download-directory.ts):\n     * 复用是为了让 ignore 的 basename 剪除语义与落盘行为在三个 provider 间保持逐字节一致,\n     * 不是本地档做不了更直接的 fs 递归拷贝——用同一份实现,行为差异这个物种直接不存在。\n     */\n    async downloadDirectory(sourceDir: string, targetDir: string | URL, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const remoteDir = resolveSandboxPath(this.workdir, sourceDir);\n        await downloadDirectoryByList({\n            localDir: resolveLocalPath(undefined, targetDir),\n            ignore: opts.ignore ?? [],\n            runShell: (script) => this.runShell(script, { cwd: remoteDir }),\n            readOne: (relPath) => this.readBytes(`${remoteDir}/${relPath}`),\n        });\n    }\n    /**\n     * 只清 runner 私有资源(分类账的私有 GIT_DIR 临时目录),不动工作树任何文件——本地档从不\n     * 销毁\"沙箱\",因为宿主机本身不是可销毁的资源(见 docs/feature/sandbox/local.md「只观察,不还原」)。\n     */\n    async stop(): Promise<void> {\n        unregisterLedgerPaths(this.sandboxId);\n        await rm(this.ledgerBase, { recursive: true, force: true }).catch(() => { });\n    }\n}\n"]}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["local.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,iFAAiF;AACjF,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,gEAAgE;AAChE,gDAAgD;AAChD,wDAAwD;AACxD,wEAAwE;AACxE,4DAA4D;AAC5D,2DAAqD;AACrD,yCAAsC;AACtC,+CAAsH;AACtH,qCAAmD;AACnD,qCAAiC;AACjC,yCAAkE;AAClE,6CAAyC;AAEzC,yCAAkE;AAClE,+CAAyE;AACzE,qDAA8E;AAC9E,mEAAkE;AAClE,mDAA0D;AAC1D,6CAAsH;AACtH,uDAA+E;AAC/E,+CAAqC;AACrC,6DAA4D;AAC5D,MAAM,aAAa,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAC;AAoB1C,6CAA6C;AAC7C,KAAK,UAAU,cAAc,CAAC,GAAW;IACrC,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,gBAAgB,CAAC,CAAC,CAAC;IACzC,CAAC;AACL,CAAC;AACD,2CAA2C;AAC3C,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAW;IACtD,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC;QACD,MAAM,IAAA,iBAAM,EAAC,GAAG,EAAE,mBAAW,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAA0B,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QACnB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACf,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,GAAuB,EAAE,GAAW;IAC9D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAWD,uDAAuD;AACvD,SAAS,UAAU,CAAC,OAAe,EAAE,IAAc,EAAE,IAAe;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC1C,sDAAsD;QACtD,sDAAsD;QACtD,mBAAmB;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;YACxB,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;iBACI,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC,CAAC;QACF,IAAI,WAA4C,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACnE,WAAW,GAAG,SAAS,CAAC;YACxB,QAAQ,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,WAAW,GAAG,OAAO,CAAC;YACtB,QAAQ,EAAE,CAAC;QACf,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC/B,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,aAAa;iBACR,IAAI,CAAC,GAAG,EAAE;gBACX,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC,CAAC;oBACzF,OAAO;gBACX,CAAC;gBACD,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACnG,MAAM,CAAC,IAAI,wCAA0B,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC;oBAC5I,OAAO;gBACX,CAAC;gBACD,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC;iBACG,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;GAIG;AACH,MAAa,YAAY;IACZ,OAAO,CAAS;IAChB,QAAQ,GAAG,WAAW,CAAC;IACvB,SAAS,CAAS;IACV,OAAO,CAAU;IAC1B,UAAU,CAAU;IACX,UAAU,CAAS;IACpC,sDAAsD;IACrC,WAAW,CAAoB;IACvC,YAAY,GAAG;QACpB,YAAY,EAAE,yCAA4B;QAC1C,SAAS,EAAE,yCAA4B;QACvC,OAAO,EAAE,yCAA4B;QACrC,cAAc,EAAE,yCAA4B;QAC5C,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,CAAC,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5G,cAAc,EAAE,IAAA,uCAA0B,EAAC,CAAC,KAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;KAC9G,CAAC;IACM,KAAK,CAAC,mBAAmB,CAAC,KAA0B;QACxD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,yCAAoB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAsB;YAC3B,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,KAAK,CAAC,GAAG;YACZ,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC;YAChD,GAAG;YACH,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,OAAO,CAA2C,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;YACxC,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBACpD,OAAO;YACX,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;;gBAEG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,IAAI,UAAU,GAAkC,MAAM,CAAC;QACvD,IAAI,YAAuC,CAAC;QAC5C,IAAI,gBAA2C,CAAC;QAChD,OAAO;YACH,MAAM;YACN,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACzD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACrD,OAAO;gBACX,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC;YACF,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC7D,UAAU,GAAG,SAAS,CAAC;gBACvB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC;YACF,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;YAChB,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE;SACpD,CAAC;IACN,CAAC;IACD,YAAoB,OAAe,EAAE,UAAkB,EAAE,WAA8B,EAAE,OAAgB,EAAE,UAAmB;QAC1H,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,sEAAsE;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAA+B,EAAE;QACjD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtH,8DAA8D;QAC9D,sCAAsC;QACtC,IAAA,qCAAmB,EAAC,OAAO,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC;YACtC,SAAS,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,QAAQ,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,2DAA2D;IAC3D,kBAAkB,CAAC,UAAmB;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,kFAAkF;IAC1E,OAAO,CAAC,IAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACjF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC9B,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAAuB,EAAE;QACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACtC,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACxF,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,OAAuB,EAAE;QAC3D,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,IAAY;QACvB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,IAAI,CAAC;YACD,MAAM,IAAA,iBAAM,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACO,KAAK,CAAC,mBAAmB,CAAC,KAAoC,EAAE,SAAkB;QACtF,MAAM,MAAM,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY;QACxB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAmB;QAC9C,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,MAAoB,EAAE,UAAkB;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAA,mBAAU,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,SAAuB,EAAE,SAAkB,EAAE,OAE/D,EAAE;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAiB,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAAoB;QACvD,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAA,oBAAW,EAAC,WAAW,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,SAAuB,EAAE,OAEhE,EAAE;QACF,MAAM,SAAS,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,IAAA,+CAAuB,EAAC;YAC1B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD;;;OAGG;IACH,KAAK,CAAC,IAAI;QACN,IAAA,uCAAqB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,IAAA,aAAE,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,CAAC;CACJ;AAtND,oCAsNC","sourcesContent":["// Local 沙箱 provider:宿主机本地目录直接当 workdir 跑,零隔离、零仪式\n// (契约见 docs/feature/sandbox/local.md)。runCommand 按 argv 直接 spawn 宿主进程(不经 shell);\n// runShell 交给宿主 bash(与其它 provider 的 runShell 语义一致);文件 IO 走本地 fs——\n// 「沙箱」就是宿主文件系统本身,没有远端控制面、没有预制环境、没有留存。\n//\n// 变更分类账的 GIT_DIR 不能像其它 provider 那样固定在同一个宿主路径:多数 provider 每次创建都是\n// 全新隔离文件系统,固定路径天然不冲突;本地档的\"沙箱\"是宿主机本身,同机先后或并发跑的多个\n// attempt 共享同一个 /tmp,固定路径会在多次运行之间互相踩踏用户看不到的 git 索引。这里改用\n// mkdtemp 出的每实例私有目录,经 sandbox/ledger-paths.ts 登记给 runner/ledger.ts 消费——\n// ledger.ts 不需要认识\"local\"这个名字,只需要知道\"这个 sandboxId 有没有登记覆盖路径\"。\nimport { spawn, execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { mkdtemp, mkdir, rm, readFile as fsReadFile, writeFile as fsWriteFile, access, stat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join, resolve as resolvePath } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport type { CommandOptions, CommandResult, ManagedProcess, ManagedProcessStart, SuccessfulCommandResult } from \"../types.ts\";\nimport { resolveLocalPath, resolveSandboxPath } from \"./paths.ts\";\nimport { commandLimit, SandboxCommandTimeoutError } from \"./deadline.ts\";\nimport { collectLocalFiles, type CollectedLocalFile } from \"./local-files.ts\";\nimport { downloadDirectoryByList } from \"./download-directory.ts\";\nimport { successfulCommandResult } from \"./operations.ts\";\nimport { supportedBackendCapability, unsupportedBackendCapability, type SandboxProviderBackend, } from \"./backend.ts\";\nimport { registerLedgerPaths, unregisterLedgerPaths } from \"./ledger-paths.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { ManagedProcessOutput } from \"./managed-process.ts\";\nconst execFileAsync = promisify(execFile);\nexport interface LocalSandboxOptions {\n    /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */\n    dir?: string;\n    /** attempt 的超时上限(毫秒),单条命令未显式传 `timeout` 时的上限来源;省略 = 没有上限。 */\n    timeout?: number;\n    /** attempt deadline 的截止时刻(epoch ms);单条命令按剩余量取上限(见 deadline.ts)。 */\n    deadlineAt?: number;\n    /**\n     * 按序前置到宿主 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md\n     * 「PATH:受管变量与 pathPrepend」)。\n     */\n    pathPrepend?: readonly string[];\n    /**\n     * 内部测试用:覆盖「当前目录」的解析起点(省略 `dir` 时向上找 git 根、显式 `dir` 时的相对路径\n     * 基准都从它算)。生产路径(runtime.ts 的 provider materializer)从不传这个字段,恒用\n     * `process.cwd()`——不是公开 spec 的一部分,`localSandbox()` 工厂不暴露它。\n     */\n    cwd?: string;\n}\n/** 从给定目录向上解析 git 仓库根;不在任何 git 仓库内时给出两条出路。 */\nasync function resolveGitRoot(cwd: string): Promise<string> {\n    try {\n        const { stdout } = await execFileAsync(\"git\", [\"rev-parse\", \"--show-toplevel\"], { cwd });\n        return stdout.trim();\n    }\n    catch {\n        throw new Error(t(\"local.notARepo\"));\n    }\n}\n/** 显式 dir:相对路径按 cwd 解析;必须已存在且可写(不自动创建)。 */\nasync function resolveExplicitDir(dir: string, cwd: string): Promise<string> {\n    const abs = resolvePath(cwd, dir);\n    try {\n        await access(abs, fsConstants.W_OK);\n    }\n    catch (e) {\n        const err = e as NodeJS.ErrnoException;\n        if (err.code === \"ENOENT\")\n            throw new Error(t(\"local.dirMissing\", { dir: abs }));\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: err.message }));\n    }\n    const info = await stat(abs);\n    if (!info.isDirectory())\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: \"not a directory\" }));\n    return abs;\n}\nasync function resolveWorkdir(dir: string | undefined, cwd: string): Promise<string> {\n    return dir !== undefined ? resolveExplicitDir(dir, cwd) : resolveGitRoot(cwd);\n}\ninterface SpawnOpts {\n    cwd: string;\n    env: NodeJS.ProcessEnv;\n    /** 缺席 = 这条命令没有上限(四层解析链一个都没声明)。 */\n    timeout?: number;\n    explicitTimeout?: boolean;\n    onStdout?: CommandOptions[\"onStdout\"];\n    onStderr?: CommandOptions[\"onStderr\"];\n    signal?: AbortSignal;\n}\n/** argv 直接 spawn(不经 shell)与「bash -c script」共用的执行核心。 */\nfunction runSpawned(command: string, args: string[], opts: SpawnOpts): Promise<CommandResult> {\n    return new Promise((resolvePromise, reject) => {\n        // detached(POSIX):超时时能杀掉整个进程组,不只是直接子进程——agent 命令常常自己再\n        // 起子进程(npm 脚本、shell 管道),只杀顶层容易留下孤儿。Windows 没有进程组这个概念,\n        // 退化成直接 kill 顶层进程。\n        const posix = process.platform !== \"win32\";\n        const child = spawn(command, args, { cwd: opts.cwd, env: opts.env, detached: posix });\n        let stdout = \"\";\n        let stderr = \"\";\n        let callbackChain = Promise.resolve();\n        let settled = false;\n        const killTree = (): void => {\n            if (posix && child.pid !== undefined) {\n                try {\n                    process.kill(-child.pid, \"SIGKILL\");\n                }\n                catch {\n                    child.kill(\"SIGKILL\");\n                }\n            }\n            else {\n                child.kill(\"SIGKILL\");\n            }\n        };\n        let termination: \"timeout\" | \"abort\" | undefined;\n        const timer = opts.timeout === undefined ? undefined : setTimeout(() => {\n            termination = \"timeout\";\n            killTree();\n        }, opts.timeout);\n        const onAbort = (): void => {\n            termination = \"abort\";\n            killTree();\n        };\n        opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n        if (opts.signal?.aborted)\n            onAbort();\n        child.stdout?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stdout += text;\n            const onStdout = opts.onStdout;\n            if (onStdout !== undefined)\n                callbackChain = callbackChain.then(() => onStdout(text));\n        });\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stderr += text;\n            const onStderr = opts.onStderr;\n            if (onStderr !== undefined)\n                callbackChain = callbackChain.then(() => onStderr(text));\n        });\n        child.on(\"error\", (err) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            reject(err);\n        });\n        child.on(\"close\", (code, signal) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            callbackChain\n                .then(() => {\n                if (termination === \"abort\") {\n                    reject(opts.signal?.reason ?? new DOMException(\"sandbox command aborted\", \"AbortError\"));\n                    return;\n                }\n                if (termination === \"timeout\" && signal === \"SIGKILL\" && code === null && opts.timeout !== undefined) {\n                    reject(new SandboxCommandTimeoutError(t(\"local.commandTimeout\", { timeoutMs: opts.timeout }), opts.timeout, opts.explicitTimeout === true));\n                    return;\n                }\n                resolvePromise({ stdout, stderr, exitCode: code ?? 0 });\n            })\n                .catch(reject);\n        });\n    });\n}\n/**\n * Local 沙箱:宿主机的一个本地目录。实现 ../types.ts 的 Sandbox 接口。\n * 契约见 docs/feature/sandbox/local.md;实现要点见 docs/feature/sandbox/architecture.md\n * 「Local provider(宿主机,零隔离)」。\n */\nexport class LocalSandbox implements SandboxProviderBackend {\n    readonly workdir: string;\n    readonly otlpHost = \"localhost\";\n    readonly sandboxId: string;\n    private readonly timeout?: number;\n    private deadlineAt?: number;\n    private readonly ledgerBase: string;\n    /** factory `pathPrepend`;按声明顺序前置到宿主 PATH,省略 = 空数组。 */\n    private readonly pathPrepend: readonly string[];\n    readonly capabilities = {\n        rootCommands: unsupportedBackendCapability,\n        appendLog: unsupportedBackendCapability,\n        suspend: unsupportedBackendCapability,\n        ensureLifetime: unsupportedBackendCapability,\n        setCommandDeadline: supportedBackendCapability((deadlineAt?: number) => this.setCommandDeadline(deadlineAt)),\n        managedProcess: supportedBackendCapability((input: ManagedProcessStart) => this.startManagedProcess(input)),\n    };\n    private async startManagedProcess(input: ManagedProcessStart): Promise<ManagedProcess> {\n        const [command, ...args] = input.argv;\n        const output = new ManagedProcessOutput();\n        const env: NodeJS.ProcessEnv = {\n            ...process.env,\n            ...input.env,\n            ...(this.pathPrepend.length === 0\n                ? {}\n                : { PATH: `${this.pathPrepend.join(\":\")}:${process.env.PATH ?? \"\"}` }),\n        };\n        const posix = process.platform !== \"win32\";\n        const child = spawn(command, args, {\n            cwd: resolveSandboxPath(this.workdir, input.cwd),\n            env,\n            detached: posix,\n            stdio: [\"pipe\", \"pipe\", \"pipe\"],\n        });\n        child.stdout.on(\"data\", (bytes: Buffer) => output.push({ _tag: \"Stdout\", bytes: new Uint8Array(bytes) }));\n        child.stderr.on(\"data\", (bytes: Buffer) => output.push({ _tag: \"Stderr\", bytes: new Uint8Array(bytes) }));\n        const exit = new Promise<import(\"../types.ts\").ManagedProcessExit>((resolve, reject) => {\n            child.once(\"error\", (error) => { output.end(); reject(error); });\n            child.once(\"close\", (exitCode, signal) => {\n                output.end();\n                resolve({ exitCode, ...(signal === null ? {} : { signal }) });\n            });\n        });\n        const terminate = async (): Promise<void> => {\n            stdinState = \"closing\";\n            if (child.exitCode !== null || child.signalCode !== null)\n                return;\n            if (posix && child.pid !== undefined) {\n                try {\n                    process.kill(-child.pid, \"SIGKILL\");\n                }\n                catch {\n                    child.kill(\"SIGKILL\");\n                }\n            }\n            else\n                child.kill(\"SIGKILL\");\n            await exit.catch(() => undefined);\n        };\n        let stdinState: \"open\" | \"closing\" | \"closed\" = \"open\";\n        let closeReceipt: Promise<void> | undefined;\n        let terminateReceipt: Promise<void> | undefined;\n        return {\n            output,\n            writeStdin: (bytes) => new Promise<void>((resolve, reject) => {\n                if (stdinState !== \"open\") {\n                    reject(new Error(\"managed process stdin is closed\"));\n                    return;\n                }\n                child.stdin.write(bytes, (error) => error ? reject(error) : resolve());\n            }),\n            closeStdin: () => closeReceipt ??= new Promise<void>((resolve) => {\n                stdinState = \"closing\";\n                child.stdin.end(() => { stdinState = \"closed\"; resolve(); });\n            }),\n            wait: () => exit,\n            terminate: () => terminateReceipt ??= terminate(),\n        };\n    }\n    private constructor(workdir: string, ledgerBase: string, pathPrepend: readonly string[], timeout?: number, deadlineAt?: number) {\n        this.workdir = workdir;\n        this.ledgerBase = ledgerBase;\n        this.pathPrepend = pathPrepend;\n        this.timeout = timeout;\n        this.deadlineAt = deadlineAt;\n        this.sandboxId = `local-${randomUUID().slice(0, 8)}`;\n    }\n    /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */\n    static async create(options: LocalSandboxOptions = {}): Promise<LocalSandbox> {\n        const workdir = await resolveWorkdir(options.dir, options.cwd ?? process.cwd());\n        const ledgerBase = await mkdtemp(join(tmpdir(), \"niceeval-local-ledger-\"));\n        const sandbox = new LocalSandbox(workdir, ledgerBase, options.pathPrepend ?? [], options.timeout, options.deadlineAt);\n        // runner/ledger.ts 按 sandboxId 读取这份登记——本地档的\"沙箱\"是宿主机本身,固定的宿主路径\n        // 会在同机多次运行之间互相踩踏,每实例必须有自己的一份(见文件头注释)。\n        registerLedgerPaths(sandbox.sandboxId, {\n            gitDir: join(ledgerBase, \"ledger.git\"),\n            exportDir: join(ledgerBase, \"export\"),\n        });\n        return sandbox;\n    }\n    /** 复用下由池在每次借出时换成承接者自己的 deadline(见 sandbox/deadline.ts)。 */\n    setCommandDeadline(deadlineAt?: number): void {\n        this.deadlineAt = deadlineAt;\n    }\n    /** 宿主 env:`process.env` 叠加 `pathPrepend` 前置后的 PATH,`opts.env` 仍可覆盖任意键(含 PATH)。 */\n    private hostEnv(opts: CommandOptions): NodeJS.ProcessEnv {\n        const pathBase = this.pathPrepend.length > 0\n            ? { PATH: [...this.pathPrepend, ...(process.env.PATH ?? \"\").split(\":\")].join(\":\") }\n            : {};\n        return { ...process.env, ...pathBase, ...opts.env };\n    }\n    async runCommand(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(cmd, [...args], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runShell(script: string, opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(\"bash\", [\"-c\", script], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runCommandOrThrow(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runCommand(cmd, args, opts), opts.sensitiveValues);\n    }\n    async runShellOrThrow(script: string, opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runShell(script, opts), opts.sensitiveValues);\n    }\n    async readText(path: string): Promise<string> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path), \"utf-8\");\n    }\n    async pathExists(path: string): Promise<boolean> {\n        try {\n            await access(resolveSandboxPath(this.workdir, path));\n            return true;\n        }\n        catch {\n            return false;\n        }\n    }\n    async writeText(path: string, content: string): Promise<void> {\n        await this.writeBytes(path, Buffer.from(content, \"utf-8\"));\n    }\n    private async writeCollectedFiles(files: readonly CollectedLocalFile[], targetDir?: string): Promise<void> {\n        const target = resolveSandboxPath(this.workdir, targetDir);\n        for (const file of files) {\n            const dest = resolveSandboxPath(target, file.path);\n            await mkdir(dirname(dest), { recursive: true });\n            await fsWriteFile(dest, file.content);\n        }\n    }\n    async readBytes(path: string): Promise<Uint8Array> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path));\n    }\n    async writeBytes(path: string, content: Uint8Array): Promise<void> {\n        const dest = resolveSandboxPath(this.workdir, path);\n        await mkdir(dirname(dest), { recursive: true });\n        await fsWriteFile(dest, content);\n    }\n    async uploadFile(source: string | URL, targetPath: string): Promise<void> {\n        await this.writeBytes(targetPath, await fsReadFile(resolveLocalPath(undefined, source)));\n    }\n    async uploadDirectory(sourceDir: string | URL, targetDir?: string, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const files = await collectLocalFiles(resolveLocalPath(undefined, sourceDir), opts.ignore);\n        await this.writeCollectedFiles(files, targetDir);\n    }\n    async downloadFile(sourcePath: string, target: string | URL): Promise<void> {\n        const destination = resolveLocalPath(undefined, target);\n        await mkdir(dirname(destination), { recursive: true });\n        await fsWriteFile(destination, await this.readBytes(sourcePath));\n    }\n    /**\n     * 与 vercel/e2b 共用同一套「find 列路径 + 逐文件读取」模板(见 download-directory.ts):\n     * 复用是为了让 ignore 的 basename 剪除语义与落盘行为在三个 provider 间保持逐字节一致,\n     * 不是本地档做不了更直接的 fs 递归拷贝——用同一份实现,行为差异这个物种直接不存在。\n     */\n    async downloadDirectory(sourceDir: string, targetDir: string | URL, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const remoteDir = resolveSandboxPath(this.workdir, sourceDir);\n        await downloadDirectoryByList({\n            localDir: resolveLocalPath(undefined, targetDir),\n            ignore: opts.ignore ?? [],\n            runShell: (script) => this.runShell(script, { cwd: remoteDir }),\n            readOne: (relPath) => this.readBytes(`${remoteDir}/${relPath}`),\n        });\n    }\n    /**\n     * 只清 runner 私有资源(分类账的私有 GIT_DIR 临时目录),不动工作树任何文件——本地档从不\n     * 销毁\"沙箱\",因为宿主机本身不是可销毁的资源(见 docs/feature/sandbox/local.md「只观察,不还原」)。\n     */\n    async stop(): Promise<void> {\n        unregisterLedgerPaths(this.sandboxId);\n        await rm(this.ledgerBase, { recursive: true, force: true }).catch(() => { });\n    }\n}\n"]}

package/dist/sandbox/local.d.cts

@@ -1,4 +1,4 @@
-import type { CommandOptions, CommandResult, SuccessfulCommandResult } from "../types.cjs";
+import type { CommandOptions, CommandResult, ManagedProcess, ManagedProcessStart, SuccessfulCommandResult } from "../types.cjs";
 import { type SandboxProviderBackend } from "./backend.cjs";
 export interface LocalSandboxOptions {
     /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */
@@ -39,7 +39,9 @@ export declare class LocalSandbox implements SandboxProviderBackend {
         suspend: import("./backend.cjs").SandboxBackendSupport<never>;
         ensureLifetime: import("./backend.cjs").SandboxBackendSupport<never>;
         setCommandDeadline: import("./backend.cjs").SandboxBackendSupport<(deadlineAt?: number) => void>;
+        managedProcess: import("./backend.cjs").SandboxBackendSupport<(input: ManagedProcessStart) => Promise<ManagedProcess>>;
     };
+    private startManagedProcess;
     private constructor();
     /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */
     static create(options?: LocalSandboxOptions): Promise<LocalSandbox>;

package/dist/sandbox/local.d.mts

@@ -1,4 +1,4 @@
-import type { CommandOptions, CommandResult, SuccessfulCommandResult } from "../types.mjs";
+import type { CommandOptions, CommandResult, ManagedProcess, ManagedProcessStart, SuccessfulCommandResult } from "../types.mjs";
 import { type SandboxProviderBackend } from "./backend.mjs";
 export interface LocalSandboxOptions {
     /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */
@@ -39,7 +39,9 @@ export declare class LocalSandbox implements SandboxProviderBackend {
         suspend: import("./backend.mjs").SandboxBackendSupport<never>;
         ensureLifetime: import("./backend.mjs").SandboxBackendSupport<never>;
         setCommandDeadline: import("./backend.mjs").SandboxBackendSupport<(deadlineAt?: number) => void>;
+        managedProcess: import("./backend.mjs").SandboxBackendSupport<(input: ManagedProcessStart) => Promise<ManagedProcess>>;
     };
+    private startManagedProcess;
     private constructor();
     /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */
     static create(options?: LocalSandboxOptions): Promise<LocalSandbox>;

package/dist/sandbox/local.d.ts

@@ -1,4 +1,4 @@
-import type { CommandOptions, CommandResult, SuccessfulCommandResult } from "../types.js";
+import type { CommandOptions, CommandResult, ManagedProcess, ManagedProcessStart, SuccessfulCommandResult } from "../types.js";
 import { type SandboxProviderBackend } from "./backend.js";
 export interface LocalSandboxOptions {
     /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */
@@ -39,7 +39,9 @@ export declare class LocalSandbox implements SandboxProviderBackend {
         suspend: import("./backend.js").SandboxBackendSupport<never>;
         ensureLifetime: import("./backend.js").SandboxBackendSupport<never>;
         setCommandDeadline: import("./backend.js").SandboxBackendSupport<(deadlineAt?: number) => void>;
+        managedProcess: import("./backend.js").SandboxBackendSupport<(input: ManagedProcessStart) => Promise<ManagedProcess>>;
     };
+    private startManagedProcess;
     private constructor();
     /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */
     static create(options?: LocalSandboxOptions): Promise<LocalSandbox>;

package/dist/sandbox/managed-process.cjs

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedProcessOutput = void 0;
+/** Small single-consumer async queue used by provider-native process streams. */
+class ManagedProcessOutput {
+    queued = [];
+    waiter;
+    ended = false;
+    consumed = false;
+    push(chunk) {
+        if (this.ended)
+            return;
+        const waiter = this.waiter;
+        if (waiter !== undefined) {
+            this.waiter = undefined;
+            waiter({ done: false, value: chunk });
+        }
+        else {
+            this.queued.push(chunk);
+        }
+    }
+    end() {
+        if (this.ended)
+            return;
+        this.ended = true;
+        const waiter = this.waiter;
+        if (waiter !== undefined) {
+            this.waiter = undefined;
+            waiter({ done: true, value: undefined });
+        }
+    }
+    [Symbol.asyncIterator]() {
+        if (this.consumed)
+            throw new Error("managed process output already has a consumer");
+        this.consumed = true;
+        return {
+            next: () => {
+                const value = this.queued.shift();
+                if (value !== undefined)
+                    return Promise.resolve({ done: false, value });
+                if (this.ended)
+                    return Promise.resolve({ done: true, value: undefined });
+                return new Promise((resolve) => { this.waiter = resolve; });
+            },
+        };
+    }
+}
+exports.ManagedProcessOutput = ManagedProcessOutput;
+//# sourceMappingURL=managed-process.cjs.map

package/dist/sandbox/managed-process.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-process.js","sourceRoot":"","sources":["managed-process.ts"],"names":[],"mappings":";;;AACA,iFAAiF;AACjF,MAAa,oBAAoB;IACZ,MAAM,GAA0B,EAAE,CAAC;IAC5C,MAAM,CAAwD;IAC9D,KAAK,GAAG,KAAK,CAAC;IACd,QAAQ,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC,KAA0B;QAC3B,IAAI,IAAI,CAAC,KAAK;YACV,OAAO;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;aACI,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,GAAG;QACC,IAAI,IAAI,CAAC,KAAK;YACV,OAAO;QACX,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IACD,CAAC,MAAM,CAAC,aAAa,CAAC;QAClB,IAAI,IAAI,CAAC,QAAQ;YACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,OAAO;YACH,IAAI,EAAE,GAAG,EAAE;gBACP,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClC,IAAI,KAAK,KAAK,SAAS;oBACnB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,IAAI,IAAI,CAAC,KAAK;oBACV,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;SACJ,CAAC;IACN,CAAC;CACJ;AA1CD,oDA0CC","sourcesContent":["import type { ManagedProcessChunk } from \"./types.ts\";\n/** Small single-consumer async queue used by provider-native process streams. */\nexport class ManagedProcessOutput implements AsyncIterable<ManagedProcessChunk> {\n    private readonly queued: ManagedProcessChunk[] = [];\n    private waiter?: (value: IteratorResult<ManagedProcessChunk>) => void;\n    private ended = false;\n    private consumed = false;\n    push(chunk: ManagedProcessChunk): void {\n        if (this.ended)\n            return;\n        const waiter = this.waiter;\n        if (waiter !== undefined) {\n            this.waiter = undefined;\n            waiter({ done: false, value: chunk });\n        }\n        else {\n            this.queued.push(chunk);\n        }\n    }\n    end(): void {\n        if (this.ended)\n            return;\n        this.ended = true;\n        const waiter = this.waiter;\n        if (waiter !== undefined) {\n            this.waiter = undefined;\n            waiter({ done: true, value: undefined });\n        }\n    }\n    [Symbol.asyncIterator](): AsyncIterator<ManagedProcessChunk> {\n        if (this.consumed)\n            throw new Error(\"managed process output already has a consumer\");\n        this.consumed = true;\n        return {\n            next: () => {\n                const value = this.queued.shift();\n                if (value !== undefined)\n                    return Promise.resolve({ done: false, value });\n                if (this.ended)\n                    return Promise.resolve({ done: true, value: undefined });\n                return new Promise((resolve) => { this.waiter = resolve; });\n            },\n        };\n    }\n}\n"]}

package/dist/sandbox/managed-process.d.cts

@@ -0,0 +1,11 @@
+import type { ManagedProcessChunk } from "./types.cjs";
+/** Small single-consumer async queue used by provider-native process streams. */
+export declare class ManagedProcessOutput implements AsyncIterable<ManagedProcessChunk> {
+    private readonly queued;
+    private waiter?;
+    private ended;
+    private consumed;
+    push(chunk: ManagedProcessChunk): void;
+    end(): void;
+    [Symbol.asyncIterator](): AsyncIterator<ManagedProcessChunk>;
+}

package/dist/sandbox/managed-process.d.mts

@@ -0,0 +1,11 @@
+import type { ManagedProcessChunk } from "./types.mjs";
+/** Small single-consumer async queue used by provider-native process streams. */
+export declare class ManagedProcessOutput implements AsyncIterable<ManagedProcessChunk> {
+    private readonly queued;
+    private waiter?;
+    private ended;
+    private consumed;
+    push(chunk: ManagedProcessChunk): void;
+    end(): void;
+    [Symbol.asyncIterator](): AsyncIterator<ManagedProcessChunk>;
+}

package/dist/sandbox/managed-process.d.ts

@@ -0,0 +1,11 @@
+import type { ManagedProcessChunk } from "./types.js";
+/** Small single-consumer async queue used by provider-native process streams. */
+export declare class ManagedProcessOutput implements AsyncIterable<ManagedProcessChunk> {
+    private readonly queued;
+    private waiter?;
+    private ended;
+    private consumed;
+    push(chunk: ManagedProcessChunk): void;
+    end(): void;
+    [Symbol.asyncIterator](): AsyncIterator<ManagedProcessChunk>;
+}

package/dist/sandbox/managed-process.js

@@ -0,0 +1,6 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./managed-process.cjs");
+const __niceevalExport0 = __niceevalCanonical["ManagedProcessOutput"];
+export { __niceevalExport0 as ManagedProcessOutput };
+//# sourceMappingURL=managed-process.js.map

package/dist/sandbox/managed-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-process.js","sources":[],"names":[],"mappings":""}

package/dist/sandbox/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["// sandbox 域类型:运行中 Sandbox、生命周期 hook、命令与文件 IO 的形状。\n// 作者声明使用 layer.ts 的闭合 SandboxLayer；本文件不再保留旧 provider spec。\nimport type { ScopedFeedback } from \"../shared/types.ts\";\nexport interface CommandResult {\n    stdout: string;\n    stderr: string;\n    exitCode: number;\n    /**\n     * 这次执行的命令摘要(有界、已脱敏,与时间树 command 节点同一份文案)。由执行面在最外层\n     * 公开调用处附加;直接从 provider 拿到的裸结果可能没有。断言失败时用作 evidence\n     * (`commandSucceeded()` 的「命令行本身」),消费方按可选字段读。\n     */\n    command?: string;\n}\n/** 内置 provider 名；ProviderModule 的完成态计划使用普通 string 兼容自定义 provider。 */\nexport type SandboxProvider = \"docker\" | \"vercel\" | \"e2b\" | \"local\";\n/** 镜像/模板里的 Node 运行时版本。 */\nexport type SandboxRuntime = \"node20\" | \"node24\";\n/**\n * Sandbox hook 的窄上下文:只有 `experimentId`、`signal` 与作用域绑定的 `progress/diagnostic`,\n * 不借用包含 session / model / telemetry 的完整 `AgentContext`\n * (见 docs/feature/sandbox/library.md「环境层生命周期钩子」)。\n */\nexport interface SandboxHookContext extends ScopedFeedback {\n    /** 运行计划中已解析的实验 id；生命周期 hook 不在脱离 Experiment 的上下文执行。 */\n    readonly experimentId: string;\n    /** 当前物理 Sandbox 归属的 Eval Group；未分组 Sandbox 省略。 */\n    readonly evalGroup?: {\n        readonly id: string;\n        readonly definitionHash: string;\n    };\n    /** 当前 Invocation 的中止信号；物理 Sandbox 生命周期不从某条 Attempt 借用信号。 */\n    readonly signal: AbortSignal;\n}\n/** 沙箱级生命周期钩子(`SandboxLayer.setup()` / `.teardown()` 链式挂载)。 */\nexport type SandboxHook = (sandbox: Sandbox, ctx: SandboxHookContext) => void | Promise<void>;\nexport interface CommandOptions {\n    /**\n     * 这条命令已知会处理的敏感明文（例如 API key、token、HTTP header value）。Runner 仍把\n     * 原值交给 provider 执行，但在任何 timing / commands / execution / error 证据落盘前按\n     * 这些值做精确替换；本数组本身不落盘、不进指纹。空字符串被忽略。\n     *\n     * 这是显式 provenance，不是 secret 扫描器：没有登记的自由文本无法被可靠识别；值若先被\n     * 调用方编码或拆分，应把实际会出现在命令/输出里的编码形态一并登记。\n     */\n    readonly sensitiveValues?: readonly string[];\n    /**\n     * 追加/覆盖本命令的环境变量(与 Sandbox 默认环境叠加,不清空默认值)。`PATH` 是 Sandbox\n     * 受管变量,各 provider 保留自己算出的 `PATH`,不保证能被这里覆盖;需要扩展 PATH 用\n     * Sandbox factory 的 `pathPrepend`(见 docs/feature/sandbox/library.md「PATH:受管变量与\n     * pathPrepend」)。\n     */\n    readonly env?: Readonly<globalThis.Record<string, string>>;\n    /** 本命令的工作目录;省略时落到 `Sandbox.workdir`。相对路径按 workdir 解析,绝对路径原样使用。 */\n    readonly cwd?: string;\n    /**\n     * 把本命令的输出也送进 Sandbox 的「原生日志流」(于是 `docker logs` / Docker UI 的 Logs\n     * 标签页能实时看到它)。给 agent 命令(codex exec / bub run / claude)开它,就能在容器\n     * 日志里看到 agent 的【原始输出】。provider 各自实现(docker:tee 到 PID1 tail 的文件;\n     * 不支持的 provider 忽略)—— 日志怎么浮现是 provider 的事,adapter 只声明意图。\n     */\n    readonly stream?: boolean;\n    /**\n     * 命令 stdout 每到一块就调用一次。回调只用于运行中的短命反馈；完整 stdout 仍会原样\n     * 出现在返回的 `CommandResult` 里。provider 不支持真流时，至少会在命令结束后按完整\n     * stdout 调用一次，不能静默丢掉。\n     */\n    readonly onStdout?: (chunk: string) => void | Promise<void>;\n    /** `onStdout` 的 stderr 对应物；完整 stderr 仍保留在 `CommandResult`。 */\n    readonly onStderr?: (chunk: string) => void | Promise<void>;\n    /**\n     * 覆盖本条命令的执行身份;省略 = Sandbox 默认身份(沿用环境自己声明的身份——Docker 镜像 `USER`、\n     * Compose service `user:`、E2B template 默认用户、宿主当前用户,见\n     * docs/feature/sandbox/library.md「执行身份」)。\n     *\n     * 语义跨 provider 一致,各 provider 映射到自己的原生机制(docker:`exec --user`;E2B:\n     * `{ user }`;Vercel:只认 `\"root\"`,映射 `{ sudo: true }`,其它值报错;local:任何值都报错)。\n     * 本就全程 root 的 provider 视作 no-op；完全无法换身份的 provider 可不支持（抛错）——但**省略与\n     * 显式值的语义保持一致**,不因 provider 而变。\n     */\n    readonly user?: string;\n    /**\n     * 这条命令自己的上限(毫秒)。**省略才是常态**:省略时上限 = attempt deadline 的剩余量\n     * (见 docs/feature/sandbox/architecture.md「时限归属」),provider 层没有独立默认。\n     * 显式传一个更短的值是有意声明,照常生效;撞线时归属记成「命令显式 timeout」。\n     */\n    readonly timeoutMs?: number;\n    /**\n     * 取消本次受管命令树。Provider 必须在 Promise settle 前确认命令树已经终止；无法精确\n     * 终止时应退休整个 Sandbox，不能只关闭 transport 后把进程留在后台。\n     */\n    readonly signal?: AbortSignal;\n}\nexport interface SuccessfulCommandResult extends CommandResult {\n    readonly exitCode: 0;\n}\n/** 三个运行中 Sandbox 视图共用的操作词汇；同名成员在不同视图中不得改变语义。 */\nexport interface SandboxOperations {\n    /** Sandbox 内项目/工作区根目录的绝对路径(agent 命令的默认 cwd,也是 git baseline 提交的位置)。各方法的相对路径都以此为基准解析,省略 `cwd`/`targetDir` 时也落到这里。 */\n    readonly workdir: string;\n    /**\n     * 执行单个命令,`args` 作为独立 argv 传递、不经 shell 解释(无 `&&`、管道、通配符展开)。\n     * 只想跑一个可执行文件、参数来自外部输入、担心注入时优先用它。\n     */\n    runCommand(cmd: string, args?: readonly string[], opts?: CommandOptions): Promise<CommandResult>;\n    /**\n     * 执行一整段脚本,经 shell(bash)解释,支持 `&&`、管道、`$()`、重定向等。\n     * 需要拼多条命令或做条件判断时用它。\n     */\n    runShell(script: string, opts?: CommandOptions): Promise<CommandResult>;\n    /**\n     * 像 `runCommand` 一样执行单个命令，但非零退出时抛出 `SandboxCommandExitError`。错误消息附带\n     * 有界、已清理和脱敏的 stderr 尾部；stderr 为空时回退 stdout。完整输出保留在异常的\n     * `result` 字段中。成功结果的 `exitCode` 在类型上固定为 `0`。\n     */\n    runCommandOrThrow(cmd: string, args?: readonly string[], opts?: CommandOptions): Promise<SuccessfulCommandResult>;\n    /**\n     * 像 `runShell` 一样执行 shell 脚本，但非零退出时抛出 `SandboxCommandExitError`。错误摘要、\n     * 完整输出和成功结果的语义与 `runCommandOrThrow` 相同。\n     */\n    runShellOrThrow(script: string, opts?: CommandOptions): Promise<SuccessfulCommandResult>;\n    /** 读取 Sandbox 内文件的文本内容(UTF-8)。文件不存在时抛错。 */\n    readText(path: string): Promise<string>;\n    /** 写入 Sandbox 内一个 UTF-8 文本文件；父目录不存在时自动创建。 */\n    writeText(path: string, content: string): Promise<void>;\n    /** 精确读取 Sandbox 内文件字节；公共契约不绑定 Node Buffer。 */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** 精确写入 Sandbox 内文件字节；父目录不存在时自动创建。 */\n    writeBytes(path: string, content: Uint8Array): Promise<void>;\n    /** 检查 Sandbox 内文件或目录路径是否存在。 */\n    pathExists(path: string): Promise<boolean>;\n}\n/** 只用于宿主机与 Sandbox 之间真实传输；内存内容读写使用 read/writeText/Bytes。 */\nexport interface SandboxTransferOperations {\n    uploadFile(source: string | URL, targetPath: string): Promise<void>;\n    uploadDirectory(sourceDir: string | URL, targetDir?: string, options?: {\n        readonly ignore?: readonly string[];\n    }): Promise<void>;\n    downloadFile(sourcePath: string, target: string | URL): Promise<void>;\n    downloadDirectory(sourceDir: string, targetDir: string | URL, options?: {\n        readonly ignore?: readonly string[];\n    }): Promise<void>;\n}\nexport interface Sandbox extends SandboxOperations, SandboxTransferOperations {\n    /** 销毁 Sandbox 占用的计算资源(容器/microVM)。调用后 Sandbox 不可再用;是否可安全重复调用因 provider 而异,不要依赖这一点。 */\n    stop(): Promise<void>;\n    /** 本 Sandbox 的稳定标识(各 provider 原生 ID,如 Docker 容器 ID 前缀);用于跨调用关联同一 Sandbox 的会话状态,也用于日志展示。 */\n    readonly sandboxId: string;\n    /**\n     * OTLP receiver 的放置能力。\n     * - `string`:Sandbox 内可通过该 hostname 访问宿主 receiver。\n     * - `null`:provider 不承诺宿主回连；runner 尝试在 Sandbox 内启动 attempt-scope receiver。\n     *   这不保证 tracing 成功；镜像缺少 receiver 所需运行时时只记录 supplemental diagnostic。\n     * `defineConfig({ telemetry: { host } })` 可在作者已经提供受控 tunnel 时显式覆盖。\n     */\n    readonly otlpHost: string | null;\n    /**\n     * 可选:把一行写进容器的「主日志」(PID1 在 tail 它)——于是 `docker logs` /\n     * Docker UI 的 Logs 标签页能实时看到 agent 逐轮活动。docker provider 实现,其它可省略。\n     */\n    appendLog?(line: string): Promise<void>;\n}\n/** 复用调度需要的中立寿命确认能力。 */\nexport interface SandboxReuseCapability {\n    ensureLifetime(minRemainingMs: number): Promise<{\n        ready: true;\n        expiresAt?: string;\n    } | {\n        ready: false;\n        reason: string;\n    }>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["// sandbox 域类型:运行中 Sandbox、生命周期 hook、命令与文件 IO 的形状。\n// 作者声明使用 layer.ts 的闭合 SandboxLayer；本文件不再保留旧 provider spec。\nimport type { ScopedFeedback } from \"../shared/types.ts\";\nexport interface CommandResult {\n    stdout: string;\n    stderr: string;\n    exitCode: number;\n    /**\n     * 这次执行的命令摘要(有界、已脱敏,与时间树 command 节点同一份文案)。由执行面在最外层\n     * 公开调用处附加;直接从 provider 拿到的裸结果可能没有。断言失败时用作 evidence\n     * (`commandSucceeded()` 的「命令行本身」),消费方按可选字段读。\n     */\n    command?: string;\n}\n/** 内置 provider 名；ProviderModule 的完成态计划使用普通 string 兼容自定义 provider。 */\nexport type SandboxProvider = \"docker\" | \"vercel\" | \"e2b\" | \"local\";\n/** 镜像/模板里的 Node 运行时版本。 */\nexport type SandboxRuntime = \"node20\" | \"node24\";\n/**\n * Sandbox hook 的窄上下文:只有 `experimentId`、`signal` 与作用域绑定的 `progress/diagnostic`,\n * 不借用包含 session / model / telemetry 的完整 `AgentContext`\n * (见 docs/feature/sandbox/library.md「环境层生命周期钩子」)。\n */\nexport interface SandboxHookContext extends ScopedFeedback {\n    /** 运行计划中已解析的实验 id；生命周期 hook 不在脱离 Experiment 的上下文执行。 */\n    readonly experimentId: string;\n    /** 当前物理 Sandbox 归属的 Eval Group；未分组 Sandbox 省略。 */\n    readonly evalGroup?: {\n        readonly id: string;\n        readonly definitionHash: string;\n    };\n    /** 当前 Invocation 的中止信号；物理 Sandbox 生命周期不从某条 Attempt 借用信号。 */\n    readonly signal: AbortSignal;\n}\n/** 沙箱级生命周期钩子(`SandboxLayer.setup()` / `.teardown()` 链式挂载)。 */\nexport type SandboxHook = (sandbox: Sandbox, ctx: SandboxHookContext) => void | Promise<void>;\nexport interface CommandOptions {\n    /**\n     * 这条命令已知会处理的敏感明文（例如 API key、token、HTTP header value）。Runner 仍把\n     * 原值交给 provider 执行，但在任何 timing / commands / execution / error 证据落盘前按\n     * 这些值做精确替换；本数组本身不落盘、不进指纹。空字符串被忽略。\n     *\n     * 这是显式 provenance，不是 secret 扫描器：没有登记的自由文本无法被可靠识别；值若先被\n     * 调用方编码或拆分，应把实际会出现在命令/输出里的编码形态一并登记。\n     */\n    readonly sensitiveValues?: readonly string[];\n    /**\n     * 追加/覆盖本命令的环境变量(与 Sandbox 默认环境叠加,不清空默认值)。`PATH` 是 Sandbox\n     * 受管变量,各 provider 保留自己算出的 `PATH`,不保证能被这里覆盖;需要扩展 PATH 用\n     * Sandbox factory 的 `pathPrepend`(见 docs/feature/sandbox/library.md「PATH:受管变量与\n     * pathPrepend」)。\n     */\n    readonly env?: Readonly<globalThis.Record<string, string>>;\n    /** 本命令的工作目录;省略时落到 `Sandbox.workdir`。相对路径按 workdir 解析,绝对路径原样使用。 */\n    readonly cwd?: string;\n    /**\n     * 把本命令的输出也送进 Sandbox 的「原生日志流」(于是 `docker logs` / Docker UI 的 Logs\n     * 标签页能实时看到它)。给 agent 命令(codex exec / bub run / claude)开它,就能在容器\n     * 日志里看到 agent 的【原始输出】。provider 各自实现(docker:tee 到 PID1 tail 的文件;\n     * 不支持的 provider 忽略)—— 日志怎么浮现是 provider 的事,adapter 只声明意图。\n     */\n    readonly stream?: boolean;\n    /**\n     * 命令 stdout 每到一块就调用一次。回调只用于运行中的短命反馈；完整 stdout 仍会原样\n     * 出现在返回的 `CommandResult` 里。provider 不支持真流时，至少会在命令结束后按完整\n     * stdout 调用一次，不能静默丢掉。\n     */\n    readonly onStdout?: (chunk: string) => void | Promise<void>;\n    /** `onStdout` 的 stderr 对应物；完整 stderr 仍保留在 `CommandResult`。 */\n    readonly onStderr?: (chunk: string) => void | Promise<void>;\n    /**\n     * 覆盖本条命令的执行身份;省略 = Sandbox 默认身份(沿用环境自己声明的身份——Docker 镜像 `USER`、\n     * Compose service `user:`、E2B template 默认用户、宿主当前用户,见\n     * docs/feature/sandbox/library.md「执行身份」)。\n     *\n     * 语义跨 provider 一致,各 provider 映射到自己的原生机制(docker:`exec --user`;E2B:\n     * `{ user }`;Vercel:只认 `\"root\"`,映射 `{ sudo: true }`,其它值报错;local:任何值都报错)。\n     * 本就全程 root 的 provider 视作 no-op；完全无法换身份的 provider 可不支持（抛错）——但**省略与\n     * 显式值的语义保持一致**,不因 provider 而变。\n     */\n    readonly user?: string;\n    /**\n     * 这条命令自己的上限(毫秒)。**省略才是常态**:省略时上限 = attempt deadline 的剩余量\n     * (见 docs/feature/sandbox/architecture.md「时限归属」),provider 层没有独立默认。\n     * 显式传一个更短的值是有意声明,照常生效;撞线时归属记成「命令显式 timeout」。\n     */\n    readonly timeoutMs?: number;\n    /**\n     * 取消本次受管命令树。Provider 必须在 Promise settle 前确认命令树已经终止；无法精确\n     * 终止时应退休整个 Sandbox，不能只关闭 transport 后把进程留在后台。\n     */\n    readonly signal?: AbortSignal;\n}\nexport interface SuccessfulCommandResult extends CommandResult {\n    readonly exitCode: 0;\n}\nexport interface ManagedProcessStart {\n    readonly argv: readonly [\n        string,\n        ...string[]\n    ];\n    readonly cwd?: string;\n    readonly env?: Readonly<globalThis.Record<string, string>>;\n}\nexport type ManagedProcessChunk = {\n    readonly _tag: \"Stdout\";\n    readonly bytes: Uint8Array;\n} | {\n    readonly _tag: \"Stderr\";\n    readonly bytes: Uint8Array;\n};\nexport interface ManagedProcessExit {\n    readonly exitCode: number | null;\n    readonly signal?: string;\n}\n/** Attempt-owned bidirectional process. `output` has exactly one consumer. */\nexport interface ManagedProcess {\n    readonly output: AsyncIterable<ManagedProcessChunk>;\n    writeStdin(bytes: Uint8Array): Promise<void>;\n    closeStdin(): Promise<void>;\n    wait(): Promise<ManagedProcessExit>;\n    terminate(): Promise<void>;\n}\n/** 三个运行中 Sandbox 视图共用的操作词汇；同名成员在不同视图中不得改变语义。 */\nexport interface SandboxOperations {\n    /** Sandbox 内项目/工作区根目录的绝对路径(agent 命令的默认 cwd,也是 git baseline 提交的位置)。各方法的相对路径都以此为基准解析,省略 `cwd`/`targetDir` 时也落到这里。 */\n    readonly workdir: string;\n    /**\n     * 执行单个命令,`args` 作为独立 argv 传递、不经 shell 解释(无 `&&`、管道、通配符展开)。\n     * 只想跑一个可执行文件、参数来自外部输入、担心注入时优先用它。\n     */\n    runCommand(cmd: string, args?: readonly string[], opts?: CommandOptions): Promise<CommandResult>;\n    /**\n     * 执行一整段脚本,经 shell(bash)解释,支持 `&&`、管道、`$()`、重定向等。\n     * 需要拼多条命令或做条件判断时用它。\n     */\n    runShell(script: string, opts?: CommandOptions): Promise<CommandResult>;\n    /**\n     * 像 `runCommand` 一样执行单个命令，但非零退出时抛出 `SandboxCommandExitError`。错误消息附带\n     * 有界、已清理和脱敏的 stderr 尾部；stderr 为空时回退 stdout。完整输出保留在异常的\n     * `result` 字段中。成功结果的 `exitCode` 在类型上固定为 `0`。\n     */\n    runCommandOrThrow(cmd: string, args?: readonly string[], opts?: CommandOptions): Promise<SuccessfulCommandResult>;\n    /**\n     * 像 `runShell` 一样执行 shell 脚本，但非零退出时抛出 `SandboxCommandExitError`。错误摘要、\n     * 完整输出和成功结果的语义与 `runCommandOrThrow` 相同。\n     */\n    runShellOrThrow(script: string, opts?: CommandOptions): Promise<SuccessfulCommandResult>;\n    /** 读取 Sandbox 内文件的文本内容(UTF-8)。文件不存在时抛错。 */\n    readText(path: string): Promise<string>;\n    /** 写入 Sandbox 内一个 UTF-8 文本文件；父目录不存在时自动创建。 */\n    writeText(path: string, content: string): Promise<void>;\n    /** 精确读取 Sandbox 内文件字节；公共契约不绑定 Node Buffer。 */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** 精确写入 Sandbox 内文件字节；父目录不存在时自动创建。 */\n    writeBytes(path: string, content: Uint8Array): Promise<void>;\n    /** 检查 Sandbox 内文件或目录路径是否存在。 */\n    pathExists(path: string): Promise<boolean>;\n}\n/** 只用于宿主机与 Sandbox 之间真实传输；内存内容读写使用 read/writeText/Bytes。 */\nexport interface SandboxTransferOperations {\n    uploadFile(source: string | URL, targetPath: string): Promise<void>;\n    uploadDirectory(sourceDir: string | URL, targetDir?: string, options?: {\n        readonly ignore?: readonly string[];\n    }): Promise<void>;\n    downloadFile(sourcePath: string, target: string | URL): Promise<void>;\n    downloadDirectory(sourceDir: string, targetDir: string | URL, options?: {\n        readonly ignore?: readonly string[];\n    }): Promise<void>;\n}\nexport interface Sandbox extends SandboxOperations, SandboxTransferOperations {\n    /** 销毁 Sandbox 占用的计算资源(容器/microVM)。调用后 Sandbox 不可再用;是否可安全重复调用因 provider 而异,不要依赖这一点。 */\n    stop(): Promise<void>;\n    /** 本 Sandbox 的稳定标识(各 provider 原生 ID,如 Docker 容器 ID 前缀);用于跨调用关联同一 Sandbox 的会话状态,也用于日志展示。 */\n    readonly sandboxId: string;\n    /**\n     * OTLP receiver 的放置能力。\n     * - `string`:Sandbox 内可通过该 hostname 访问宿主 receiver。\n     * - `null`:provider 不承诺宿主回连；runner 尝试在 Sandbox 内启动 attempt-scope receiver。\n     *   这不保证 tracing 成功；镜像缺少 receiver 所需运行时时只记录 supplemental diagnostic。\n     * `defineConfig({ telemetry: { host } })` 可在作者已经提供受控 tunnel 时显式覆盖。\n     */\n    readonly otlpHost: string | null;\n    /**\n     * 可选:把一行写进容器的「主日志」(PID1 在 tail 它)——于是 `docker logs` /\n     * Docker UI 的 Logs 标签页能实时看到 agent 逐轮活动。docker provider 实现,其它可省略。\n     */\n    appendLog?(line: string): Promise<void>;\n}\n/** 复用调度需要的中立寿命确认能力。 */\nexport interface SandboxReuseCapability {\n    ensureLifetime(minRemainingMs: number): Promise<{\n        ready: true;\n        expiresAt?: string;\n    } | {\n        ready: false;\n        reason: string;\n    }>;\n}\n"]}

package/dist/sandbox/types.d.cts

@@ -92,6 +92,30 @@ export interface CommandOptions {
 export interface SuccessfulCommandResult extends CommandResult {
     readonly exitCode: 0;
 }
+export interface ManagedProcessStart {
+    readonly argv: readonly [string, ...string[]];
+    readonly cwd?: string;
+    readonly env?: Readonly<globalThis.Record<string, string>>;
+}
+export type ManagedProcessChunk = {
+    readonly _tag: "Stdout";
+    readonly bytes: Uint8Array;
+} | {
+    readonly _tag: "Stderr";
+    readonly bytes: Uint8Array;
+};
+export interface ManagedProcessExit {
+    readonly exitCode: number | null;
+    readonly signal?: string;
+}
+/** Attempt-owned bidirectional process. `output` has exactly one consumer. */
+export interface ManagedProcess {
+    readonly output: AsyncIterable<ManagedProcessChunk>;
+    writeStdin(bytes: Uint8Array): Promise<void>;
+    closeStdin(): Promise<void>;
+    wait(): Promise<ManagedProcessExit>;
+    terminate(): Promise<void>;
+}
 /** 三个运行中 Sandbox 视图共用的操作词汇；同名成员在不同视图中不得改变语义。 */
 export interface SandboxOperations {
     /** Sandbox 内项目/工作区根目录的绝对路径(agent 命令的默认 cwd,也是 git baseline 提交的位置)。各方法的相对路径都以此为基准解析,省略 `cwd`/`targetDir` 时也落到这里。 */

package/dist/sandbox/types.d.mts

@@ -92,6 +92,30 @@ export interface CommandOptions {
 export interface SuccessfulCommandResult extends CommandResult {
     readonly exitCode: 0;
 }
+export interface ManagedProcessStart {
+    readonly argv: readonly [string, ...string[]];
+    readonly cwd?: string;
+    readonly env?: Readonly<globalThis.Record<string, string>>;
+}
+export type ManagedProcessChunk = {
+    readonly _tag: "Stdout";
+    readonly bytes: Uint8Array;
+} | {
+    readonly _tag: "Stderr";
+    readonly bytes: Uint8Array;
+};
+export interface ManagedProcessExit {
+    readonly exitCode: number | null;
+    readonly signal?: string;
+}
+/** Attempt-owned bidirectional process. `output` has exactly one consumer. */
+export interface ManagedProcess {
+    readonly output: AsyncIterable<ManagedProcessChunk>;
+    writeStdin(bytes: Uint8Array): Promise<void>;
+    closeStdin(): Promise<void>;
+    wait(): Promise<ManagedProcessExit>;
+    terminate(): Promise<void>;
+}
 /** 三个运行中 Sandbox 视图共用的操作词汇；同名成员在不同视图中不得改变语义。 */
 export interface SandboxOperations {
     /** Sandbox 内项目/工作区根目录的绝对路径(agent 命令的默认 cwd,也是 git baseline 提交的位置)。各方法的相对路径都以此为基准解析,省略 `cwd`/`targetDir` 时也落到这里。 */

package/dist/sandbox/types.d.ts

@@ -92,6 +92,30 @@ export interface CommandOptions {
 export interface SuccessfulCommandResult extends CommandResult {
     readonly exitCode: 0;
 }
+export interface ManagedProcessStart {
+    readonly argv: readonly [string, ...string[]];
+    readonly cwd?: string;
+    readonly env?: Readonly<globalThis.Record<string, string>>;
+}
+export type ManagedProcessChunk = {
+    readonly _tag: "Stdout";
+    readonly bytes: Uint8Array;
+} | {
+    readonly _tag: "Stderr";
+    readonly bytes: Uint8Array;
+};
+export interface ManagedProcessExit {
+    readonly exitCode: number | null;
+    readonly signal?: string;
+}
+/** Attempt-owned bidirectional process. `output` has exactly one consumer. */
+export interface ManagedProcess {
+    readonly output: AsyncIterable<ManagedProcessChunk>;
+    writeStdin(bytes: Uint8Array): Promise<void>;
+    closeStdin(): Promise<void>;
+    wait(): Promise<ManagedProcessExit>;
+    terminate(): Promise<void>;
+}
 /** 三个运行中 Sandbox 视图共用的操作词汇；同名成员在不同视图中不得改变语义。 */
 export interface SandboxOperations {
     /** Sandbox 内项目/工作区根目录的绝对路径(agent 命令的默认 cwd,也是 git baseline 提交的位置)。各方法的相对路径都以此为基准解析,省略 `cwd`/`targetDir` 时也落到这里。 */

package/dist/sandbox/vercel.cjs

@@ -61,6 +61,7 @@ class VercelSandbox {
         suspend: (0, backend_ts_1.supportedBackendCapability)(() => this.suspend()),
         ensureLifetime: (0, backend_ts_1.supportedBackendCapability)((minRemainingMs) => this.ensureLifetime(minRemainingMs)),
         setCommandDeadline: (0, backend_ts_1.supportedBackendCapability)((deadlineAt) => this.setCommandDeadline(deadlineAt)),
+        managedProcess: (0, backend_ts_1.unsupportedBackendCapabilityBecause)("@vercel/sandbox 2.2.1 does not expose bidirectional stdin or raw output chunks"),
     };
     constructor(vsb, id, commandTimeoutMs, runtime, pathPrepend = [], lifetimeMs, deadlineAt) {
         this.vsb = vsb;