niceeval 0.13.3 → 0.13.4-canary.39

package/dist/sandbox/docker.d.cts

@@ -79,6 +79,19 @@ export interface DockerSandboxOptions {
      */
     pathPrepend?: readonly string[];
 }
+export interface DockerControlCreateSpec {
+    readonly image: string;
+    readonly command: readonly string[];
+    readonly entrypoint?: string;
+    readonly environment: readonly string[];
+    readonly workingDir: string;
+    readonly user?: string;
+    readonly tmpfs: Readonly<Record<string, string>>;
+}
+export interface DockerControlCreateResult {
+    readonly containerId: string;
+    readonly networkId: string;
+}
 export declare function assertRootlessPrivilegedDaemon(info: {
     readonly ID?: string;
     readonly SecurityOptions?: readonly string[];
@@ -184,6 +197,8 @@ export declare class DockerSandbox implements SandboxProviderBackend, SandboxReu
     }>;
     /** 创建并启动一个 Docker 沙箱。 */
     static create(options?: DockerSandboxOptions): Promise<DockerSandbox>;
+    /** Control service owns create/remove; this handle only starts, initializes and detaches. */
+    static createControlled(options: DockerSandboxOptions, create: (spec: DockerControlCreateSpec) => Promise<DockerControlCreateResult>): Promise<DockerSandbox>;
     /** DinD 容器 kill-on-failure 前收集有界诊断，普通 Docker 保持原错误形状。 */
     private withInitializationDiagnostics;
     /** 拉镜像、起容器、装基础工具、备好工作区与 npm 前缀。 */

package/dist/sandbox/docker.d.mts

@@ -79,6 +79,19 @@ export interface DockerSandboxOptions {
      */
     pathPrepend?: readonly string[];
 }
+export interface DockerControlCreateSpec {
+    readonly image: string;
+    readonly command: readonly string[];
+    readonly entrypoint?: string;
+    readonly environment: readonly string[];
+    readonly workingDir: string;
+    readonly user?: string;
+    readonly tmpfs: Readonly<Record<string, string>>;
+}
+export interface DockerControlCreateResult {
+    readonly containerId: string;
+    readonly networkId: string;
+}
 export declare function assertRootlessPrivilegedDaemon(info: {
     readonly ID?: string;
     readonly SecurityOptions?: readonly string[];
@@ -184,6 +197,8 @@ export declare class DockerSandbox implements SandboxProviderBackend, SandboxReu
     }>;
     /** 创建并启动一个 Docker 沙箱。 */
     static create(options?: DockerSandboxOptions): Promise<DockerSandbox>;
+    /** Control service owns create/remove; this handle only starts, initializes and detaches. */
+    static createControlled(options: DockerSandboxOptions, create: (spec: DockerControlCreateSpec) => Promise<DockerControlCreateResult>): Promise<DockerSandbox>;
     /** DinD 容器 kill-on-failure 前收集有界诊断，普通 Docker 保持原错误形状。 */
     private withInitializationDiagnostics;
     /** 拉镜像、起容器、装基础工具、备好工作区与 npm 前缀。 */

package/dist/sandbox/docker.d.ts

@@ -79,6 +79,19 @@ export interface DockerSandboxOptions {
      */
     pathPrepend?: readonly string[];
 }
+export interface DockerControlCreateSpec {
+    readonly image: string;
+    readonly command: readonly string[];
+    readonly entrypoint?: string;
+    readonly environment: readonly string[];
+    readonly workingDir: string;
+    readonly user?: string;
+    readonly tmpfs: Readonly<Record<string, string>>;
+}
+export interface DockerControlCreateResult {
+    readonly containerId: string;
+    readonly networkId: string;
+}
 export declare function assertRootlessPrivilegedDaemon(info: {
     readonly ID?: string;
     readonly SecurityOptions?: readonly string[];
@@ -184,6 +197,8 @@ export declare class DockerSandbox implements SandboxProviderBackend, SandboxReu
     }>;
     /** 创建并启动一个 Docker 沙箱。 */
     static create(options?: DockerSandboxOptions): Promise<DockerSandbox>;
+    /** Control service owns create/remove; this handle only starts, initializes and detaches. */
+    static createControlled(options: DockerSandboxOptions, create: (spec: DockerControlCreateSpec) => Promise<DockerControlCreateResult>): Promise<DockerSandbox>;
     /** DinD 容器 kill-on-failure 前收集有界诊断，普通 Docker 保持原错误形状。 */
     private withInitializationDiagnostics;
     /** 拉镜像、起容器、装基础工具、备好工作区与 npm 前缀。 */

package/dist/sandbox/dockerfile-build.cjs

@@ -10,10 +10,13 @@ exports.runBuildCommand = runBuildCommand;
 // 内容寻址 template alias。构建只发生在 build coordinator；attempt 只消费 locator。
 // 契约单源：docs/feature/sandbox/case.md「按需构建单 Sandbox」「Run 级构建协调」。
 const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
 const node_path_1 = require("node:path");
 const effect_1 = require("effect");
+const build_coordinator_ts_1 = require("./build-coordinator.cjs");
 const identity_ts_1 = require("./identity.cjs");
+const docker_task_build_cache_ts_1 = require("./docker-task-build-cache.cjs");
 const dockerfile_identity_ts_1 = require("./dockerfile-identity.cjs");
 var dockerfile_identity_ts_2 = require("./dockerfile-identity.cjs");
 Object.defineProperty(exports, "DOCKERFILE_MATERIALIZER_REVISION", { enumerable: true, get: function () { return dockerfile_identity_ts_2.DOCKERFILE_MATERIALIZER_REVISION; } });
@@ -38,6 +41,12 @@ function collectDockerfileBuildFromIdentity(input) {
                 message: "Dockerfile build inputs changed after physical planning. Restart the Run to plan the new inputs.",
             }));
         }
+        const authorityFingerprint = input.provider === "docker" && input.dockerSocketPath === undefined
+            ? yield* effect_1.Effect.tryPromise({
+                try: () => (0, docker_task_build_cache_ts_1.dockerTaskBuildAuthorityFingerprint)(),
+                catch: (cause) => new DockerfileBuildCollectionError({ message: cause instanceof Error ? cause.message : String(cause) }),
+            })
+            : JSON.stringify(identity.providerIdentityMarker ?? [input.provider, input.dockerSocketPath ?? "default"]);
         return yield* effect_1.Effect.try({
             try: () => {
                 const caseKey = (0, identity_ts_1.computeCaseKey)({
@@ -56,12 +65,19 @@ function collectDockerfileBuildFromIdentity(input) {
                     platform: input.platform,
                     ...(input.dockerSocketPath === undefined ? {} : { dockerSocketPath: input.dockerSocketPath }),
                 };
+                const scopeId = (0, build_coordinator_ts_1.materializationScopeId)({
+                    providerFamily: input.provider,
+                    authorityFingerprint,
+                    materializationProtocolVersion: 1,
+                });
                 return Object.freeze({
                     buildKey: identity.buildKey,
                     caseKey,
                     details,
                     ...(identity.providerIdentityMarker === undefined ? {} : { providerIdentityMarker: identity.providerIdentityMarker }),
                     work: Object.freeze({
+                        ref: (0, build_coordinator_ts_1.sandboxBuildRef)(scopeId, identity.buildKey),
+                        scopeId,
                         buildKey: identity.buildKey,
                         provider: input.provider,
                         label: `${input.provider}:dockerfile:${input.profile}`,
@@ -90,6 +106,21 @@ function dockerfileBuildProvider(collections, hooks = {}) {
     const runDockerBuild = hooks.runDockerBuild ?? defaultRunDockerBuild;
     const templateExists = hooks.e2bTemplateExists ?? defaultE2BTemplateExists;
     const buildE2BTemplate = hooks.buildE2BTemplate ?? defaultBuildE2BTemplate;
+    const managedDockerCache = hooks.dockerImageExists === undefined && hooks.runDockerBuild === undefined &&
+        collections.every((collection) => collection.details.dockerSocketPath === undefined)
+        ? (0, docker_task_build_cache_ts_1.makeTaskBuildCacheService)()
+        : undefined;
+    const source = (work, locator, origin, detail) => ({
+        locator,
+        source: origin,
+        acquireUse: async () => {
+            const lease = detail.provider === "docker" && managedDockerCache !== undefined
+                ? await managedDockerCache.acquireUse(work.buildKey, locator, buildManifestDigest(work), detail.dockerSocketPath)
+                : { release() { } };
+            return { locator, release: () => lease.release() };
+        },
+        release() { },
+    });
     const detailFor = (work) => {
         const detail = details.get(work.buildKey);
         if (detail === undefined) {
@@ -102,27 +133,46 @@ function dockerfileBuildProvider(collections, hooks = {}) {
             const detail = detailFor(work);
             if (detail.provider === "docker") {
                 const tag = dockerBuildTag(work.buildKey);
-                return (await imageExists(tag, detail.dockerSocketPath)) ? tag : undefined;
+                if (managedDockerCache !== undefined) {
+                    return await managedDockerCache.lookup(work.buildKey, tag, buildManifestDigest(work), detail.dockerSocketPath)
+                        ? { _tag: "Hit", source: source(work, tag, "cache", detail) }
+                        : { _tag: "Miss" };
+                }
+                return (await imageExists(tag, detail.dockerSocketPath))
+                    ? { _tag: "Hit", source: source(work, tag, "cache", detail) }
+                    : { _tag: "Miss" };
             }
             const name = e2bBuildName(work.buildKey);
-            return (await templateExists(name, signal)) ? name : undefined;
+            return (await templateExists(name, signal))
+                ? { _tag: "Hit", source: source(work, name, "cache", detail) }
+                : { _tag: "Miss" };
         },
         async build(work, ctx) {
             const detail = detailFor(work);
             if (detail.provider === "docker") {
                 const tag = dockerBuildTag(work.buildKey);
                 await runDockerBuild(detail, tag, ctx);
-                return tag;
+                await managedDockerCache?.publish(work.buildKey, tag, buildManifestDigest(work), ctx.operationId, detail.dockerSocketPath);
+                return source(work, tag, "build", detail);
             }
             const name = e2bBuildName(work.buildKey);
             await buildE2BTemplate(detail, name, ctx);
-            return name;
+            return source(work, name, "build", detail);
         },
     };
 }
+function buildManifestDigest(work) {
+    return (0, node_crypto_1.createHash)("sha256").update(JSON.stringify({
+        schemaVersion: 1,
+        scopeId: work.scopeId,
+        buildKey: work.buildKey,
+        provider: work.provider,
+        inputs: work.inputs,
+    })).digest("hex");
+}
 function routeBuildProviders(routes) {
     const providerFor = (work) => {
-        const provider = routes.get(work.buildKey);
+        const provider = routes.get(work.ref);
         if (provider === undefined)
             throw new Error(`no sandbox build provider for BuildKey ${work.buildKey.slice(0, 12)}…`);
         return provider;

package/dist/sandbox/dockerfile-build.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"dockerfile-build.js","sourceRoot":"","sources":["dockerfile-build.ts"],"names":[],"mappings":";;;AAqCA,gFAuEC;AAQD,0DAmCC;AACD,kDAcC;AAoGD,0CAkBC;AA5RD,+DAA+D;AAC/D,oEAAoE;AACpE,+DAA+D;AAC/D,2DAA2C;AAC3C,+CAA4C;AAC5C,yCAA+D;AAC/D,mCAAsC;AAGtC,+CAA4E;AAC5E,qEAA2I;AAE3I,mEAA4E;AAAnE,0IAAA,gCAAgC,OAAA;AAoBzC,MAAa,8BAA+B,SAAQ,aAAI,CAAC,WAAW,CAAC,gCAAgC,CAEnG;CACD;AAHD,wEAGC;AACD,2DAA2D;AAC3D,SAAgB,kCAAkC,CAAC,KAUlD;IACG,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAA,uDAA8B,EAAC;YACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,mBAAmB,KAAK,CAAC,OAAO,EAAE;SAC5C,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC;gBACzD,OAAO,EAAE,kGAAkG;aAC9G,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC;YACrB,GAAG,EAAE,GAAG,EAAE;gBACN,MAAM,OAAO,GAAG,IAAA,4BAAc,EAAC;oBAC3B,QAAQ,EAAE,iBAAiB;oBAC3B,oBAAoB,EAAE,yDAAgC;oBACtD,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC9B,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;iBAChG,CAAC,CAAC;gBACH,MAAM,OAAO,GAA2B;oBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;iBAChG,CAAC;gBACF,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,OAAO;oBACP,OAAO;oBACP,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,CAAC;oBACrH,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;wBAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,GAAG,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,OAAO,EAAE;wBACtD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;4BAClB,IAAI,EAAE,YAAY;4BAClB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,OAAO,EAAE,QAAQ,CAAC,UAAU;4BAC5B,UAAU,EAAE,QAAQ,CAAC,cAAc;4BACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;4BAC/C,IAAI,EAAE,KAAK,CAAC,SAAS;yBACxB,CAAC;qBACL,CAAC;iBACL,CAAC,CAAC;YACP,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC;gBACjD,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAClE,CAAC;SACL,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAOD,oEAAoE;AACpE,SAAgB,uBAAuB,CAAC,WAAiD,EAAE,QAAiC,EAAE;IAC1H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IACxE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACrE,MAAM,cAAc,GAAG,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC3E,MAAM,SAAS,GAAG,CAAC,IAAsB,EAA0B,EAAE;QACjE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM;YACrB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG;YACjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;AACN,CAAC;AACD,SAAgB,mBAAmB,CAAC,MAAmD;IACnF,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAwB,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,OAAO;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAChE,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,IAAI;YACb,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;KACJ,CAAC;AACN,CAAC;AACD,SAAS,cAAc,CAAC,QAAkB;IACtC,OAAO,kBAAkB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,SAAS,YAAY,CAAC,QAAkB;IACpC,OAAO,kBAAkB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,KAAK,UAAU,wBAAwB,CAAC,GAAW,EAAE,gBAAyB;IAC1E,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE;QACpC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,gBAAgB,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,SAAS,EAAE,GAAG;KAC1B,CAAC,CAAC;AACP,CAAC;AACD,KAAK,UAAU,qBAAqB,CAAC,OAA+B,EAAE,GAAW,EAAE,GAAiC;IAChH,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG;QACd,YAAY;QACZ,OAAO,CAAC,QAAQ;QAChB,QAAQ;QACR,OAAO,CAAC,cAAc;QACtB,OAAO;QACP,GAAG;QACH,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACxG,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,UAAU;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpF,OAAO;IACX,CAAC;IACD,6DAA6D;IAC7D,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,WAAW,GAAG,YAAY,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,MAAM,eAAe,CAAC,QAAQ,EAAE;QAC5B,GAAG,UAAU;QACb,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,kBAAkB;QAC9B,cAAc,EAAE,WAAW,OAAO,CAAC,iBAAiB,EAAE;QACtD,QAAQ,EAAE,WAAW;KACxB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,QAAQ,EAAE;YAC5B,GAAG,UAAU;YACb,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,WAAW;YACxB,QAAQ;YACR,GAAG,SAAS;SACf,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;YACO,CAAC;QACL,MAAM,eAAe,CAAC,QAAQ,EAAE;YAC5B,GAAG,UAAU;YACb,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW;SACzC,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;AACL,CAAC;AACD,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAmB;IACrE,+CAA+C;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACnD,CAAC;AACD,KAAK,UAAU,uBAAuB,CAAC,OAA+B,EAAE,IAAY,EAAE,GAAiC;IACnH,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IACnH,CAAC;IACD,+CAA+C;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC,UAAU;QACnC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AACD,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,mBAAW,EAAC,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,GAAG;SACL,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAuB;IACpE,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AACD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAAe,EAAE,IAAuB,EAAE,MAAmB;IACzF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;gBAClC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC;gBACV,OAAO,EAAE,CAAC;;gBAEV,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["// 单 Dockerfile case 的 Run 级按需构建：Docker 产出内容寻址 image tag，E2B 产出\n// 内容寻址 template alias。构建只发生在 build coordinator；attempt 只消费 locator。\n// 契约单源：docs/feature/sandbox/case.md「按需构建单 Sandbox」「Run 级构建协调」。\nimport { spawn } from \"node:child_process\";\nimport { readFile } from \"node:fs/promises\";\nimport { isAbsolute, resolve as resolvePath } from \"node:path\";\nimport { Data, Effect } from \"effect\";\nimport type { SandboxBuildExecutionContext, SandboxBuildProvider, SandboxBuildWork } from \"./build-coordinator.ts\";\nimport { detectDockerBuildPlatform, normalizeBuildPlatform } from \"./compose.ts\";\nimport { computeCaseKey, type BuildKey, type CaseKey } from \"./identity.ts\";\nimport { DOCKERFILE_MATERIALIZER_REVISION, resolveDockerfileBuildIdentity, type DockerfileBuildIdentity, } from \"./dockerfile-identity.ts\";\nimport type { SandboxLocation } from \"./layer.ts\";\nexport { DOCKERFILE_MATERIALIZER_REVISION } from \"./dockerfile-identity.ts\";\ninterface DockerfileBuildDetails {\n    readonly provider: \"docker\" | \"e2b\";\n    readonly contextDir: string;\n    readonly dockerfilePath: string;\n    readonly dockerfile: string;\n    readonly buildArgs?: Readonly<globalThis.Record<string, string>>;\n    readonly target?: string;\n    readonly platform: string;\n    readonly dockerSocketPath?: string;\n    /** managed profile 在 daemon bridge=none 时为本次 build 创建的独占 bridge。 */\n    readonly dockerNetworkMode?: string;\n}\nexport interface DockerfileBuildCollection {\n    readonly buildKey: BuildKey;\n    readonly caseKey: CaseKey;\n    readonly work: SandboxBuildWork;\n    readonly details: DockerfileBuildDetails;\n    readonly providerIdentityMarker?: import(\"../shared/types.ts\").JsonValue;\n}\nexport class DockerfileBuildCollectionError extends Data.TaggedError(\"DockerfileBuildCollectionError\")<{\n    readonly message: string;\n}> {\n}\n/** ProviderModule 的 typed Dockerfile 收集入口；不从作者输入逆向重建计划。 */\nexport function collectDockerfileBuildFromIdentity(input: {\n    readonly provider: \"docker\" | \"e2b\";\n    readonly profile: string;\n    readonly context: SandboxLocation;\n    readonly dockerfile: string;\n    readonly buildArgs: Readonly<Record<string, string>>;\n    readonly target?: string;\n    readonly platform: string;\n    readonly expected: DockerfileBuildIdentity;\n    readonly dockerSocketPath?: string;\n}): Effect.Effect<DockerfileBuildCollection, DockerfileBuildCollectionError> {\n    return Effect.gen(function* () {\n        const context = input.context._tag === \"Url\" ? new URL(input.context.value) : input.context.value;\n        const identity = yield* resolveDockerfileBuildIdentity({\n            provider: input.provider,\n            context,\n            dockerfile: input.dockerfile,\n            buildArgs: input.buildArgs,\n            ...(input.target === undefined ? {} : { target: input.target }),\n            platform: input.platform,\n            label: `sandbox profile ${input.profile}`,\n        }).pipe(Effect.mapError((cause) => new DockerfileBuildCollectionError({ message: cause.message })));\n        if (identity.buildKey !== input.expected.buildKey) {\n            return yield* Effect.fail(new DockerfileBuildCollectionError({\n                message: \"Dockerfile build inputs changed after physical planning. Restart the Run to plan the new inputs.\",\n            }));\n        }\n        return yield* Effect.try({\n            try: () => {\n                const caseKey = computeCaseKey({\n                    caseKind: \"on-demand-build\",\n                    materializerRevision: DOCKERFILE_MATERIALIZER_REVISION,\n                    buildKeys: [identity.buildKey],\n                    caseParams: { provider: input.provider, profile: input.profile, buildKey: identity.buildKey },\n                });\n                const details: DockerfileBuildDetails = {\n                    provider: input.provider,\n                    contextDir: identity.contextDir,\n                    dockerfilePath: identity.dockerfilePath,\n                    dockerfile: identity.dockerfile,\n                    buildArgs: input.buildArgs,\n                    ...(input.target === undefined ? {} : { target: input.target }),\n                    platform: input.platform,\n                    ...(input.dockerSocketPath === undefined ? {} : { dockerSocketPath: input.dockerSocketPath }),\n                };\n                return Object.freeze({\n                    buildKey: identity.buildKey,\n                    caseKey,\n                    details,\n                    ...(identity.providerIdentityMarker === undefined ? {} : { providerIdentityMarker: identity.providerIdentityMarker }),\n                    work: Object.freeze({\n                        buildKey: identity.buildKey,\n                        provider: input.provider,\n                        label: `${input.provider}:dockerfile:${input.profile}`,\n                        inputs: Object.freeze({\n                            kind: \"dockerfile\",\n                            profile: input.profile,\n                            platform: input.platform,\n                            context: identity.contextDir,\n                            dockerfile: identity.dockerfilePath,\n                            contextFilterRules: identity.contextFilterRules,\n                            args: input.buildArgs,\n                        }),\n                    }),\n                });\n            },\n            catch: (cause) => new DockerfileBuildCollectionError({\n                message: cause instanceof Error ? cause.message : String(cause),\n            }),\n        });\n    });\n}\ninterface DockerfileProviderHooks {\n    readonly dockerImageExists?: (tag: string, dockerSocketPath?: string) => Promise<boolean>;\n    readonly runDockerBuild?: (details: DockerfileBuildDetails, tag: string, ctx: SandboxBuildExecutionContext) => Promise<void>;\n    readonly e2bTemplateExists?: (name: string, signal: AbortSignal) => Promise<boolean>;\n    readonly buildE2BTemplate?: (details: DockerfileBuildDetails, name: string, ctx: SandboxBuildExecutionContext) => Promise<void>;\n}\n/** collection 同批创建 provider，避免从公开 JsonValue provenance 反解本地绝对路径。 */\nexport function dockerfileBuildProvider(collections: readonly DockerfileBuildCollection[], hooks: DockerfileProviderHooks = {}): SandboxBuildProvider {\n    const details = new Map(collections.map((collection) => [collection.buildKey, collection.details]));\n    const imageExists = hooks.dockerImageExists ?? defaultDockerImageExists;\n    const runDockerBuild = hooks.runDockerBuild ?? defaultRunDockerBuild;\n    const templateExists = hooks.e2bTemplateExists ?? defaultE2BTemplateExists;\n    const buildE2BTemplate = hooks.buildE2BTemplate ?? defaultBuildE2BTemplate;\n    const detailFor = (work: SandboxBuildWork): DockerfileBuildDetails => {\n        const detail = details.get(work.buildKey);\n        if (detail === undefined) {\n            throw new Error(`unknown Dockerfile BuildKey ${work.buildKey.slice(0, 12)}…`);\n        }\n        return detail;\n    };\n    return {\n        async lookup(work, signal) {\n            const detail = detailFor(work);\n            if (detail.provider === \"docker\") {\n                const tag = dockerBuildTag(work.buildKey);\n                return (await imageExists(tag, detail.dockerSocketPath)) ? tag : undefined;\n            }\n            const name = e2bBuildName(work.buildKey);\n            return (await templateExists(name, signal)) ? name : undefined;\n        },\n        async build(work, ctx) {\n            const detail = detailFor(work);\n            if (detail.provider === \"docker\") {\n                const tag = dockerBuildTag(work.buildKey);\n                await runDockerBuild(detail, tag, ctx);\n                return tag;\n            }\n            const name = e2bBuildName(work.buildKey);\n            await buildE2BTemplate(detail, name, ctx);\n            return name;\n        },\n    };\n}\nexport function routeBuildProviders(routes: ReadonlyMap<BuildKey, SandboxBuildProvider>): SandboxBuildProvider {\n    const providerFor = (work: SandboxBuildWork): SandboxBuildProvider => {\n        const provider = routes.get(work.buildKey);\n        if (provider === undefined)\n            throw new Error(`no sandbox build provider for BuildKey ${work.buildKey.slice(0, 12)}…`);\n        return provider;\n    };\n    return {\n        lookup: (work, signal) => providerFor(work).lookup(work, signal),\n        build: (work, ctx) => providerFor(work).build(work, ctx),\n        async cancel(work) {\n            await providerFor(work).cancel?.(work);\n        },\n    };\n}\nfunction dockerBuildTag(buildKey: BuildKey): string {\n    return `niceeval-build:${buildKey.slice(0, 32)}`;\n}\nfunction e2bBuildName(buildKey: BuildKey): string {\n    return `niceeval-build-${buildKey.slice(0, 40)}`;\n}\nasync function defaultDockerImageExists(tag: string, dockerSocketPath?: string): Promise<boolean> {\n    return await commandSucceeded(\"docker\", [\n        ...(dockerSocketPath === undefined ? [] : [\"--host\", `unix://${dockerSocketPath}`]),\n        \"image\", \"inspect\", tag,\n    ]);\n}\nasync function defaultRunDockerBuild(details: DockerfileBuildDetails, tag: string, ctx: SandboxBuildExecutionContext): Promise<void> {\n    const connection = details.dockerSocketPath === undefined ? [] : [\"--host\", `unix://${details.dockerSocketPath}`];\n    const buildArgs = [\n        \"--platform\",\n        details.platform,\n        \"--file\",\n        details.dockerfilePath,\n        \"--tag\",\n        tag,\n        ...Object.entries(details.buildArgs ?? {}).flatMap(([key, value]) => [\"--build-arg\", `${key}=${value}`]),\n        ...(details.target !== undefined ? [\"--target\", details.target] : []),\n        details.contextDir,\n    ];\n    if (details.dockerNetworkMode === undefined) {\n        await runBuildCommand(\"docker\", [...connection, \"build\", ...buildArgs], ctx.signal);\n        return;\n    }\n    // managed daemon 关闭默认 bridge。现代 BuildKit 不接受任意 network ID 作为\n    // `docker build --network`，所以为 reservation 建短生命周期 docker-container builder，\n    // 把 builder 自身绑定到 watchdog 所有的独占网络，并将结果显式 load 回 profile daemon。\n    const builderName = `niceeval-${details.dockerNetworkMode.slice(0, 24)}`;\n    await runBuildCommand(\"docker\", [\n        ...connection,\n        \"buildx\", \"create\",\n        \"--driver\", \"docker-container\",\n        \"--driver-opt\", `network=${details.dockerNetworkMode}`,\n        \"--name\", builderName,\n    ], ctx.signal);\n    try {\n        await runBuildCommand(\"docker\", [\n            ...connection,\n            \"buildx\", \"build\",\n            \"--builder\", builderName,\n            \"--load\",\n            ...buildArgs,\n        ], ctx.signal);\n    }\n    finally {\n        await runBuildCommand(\"docker\", [\n            ...connection,\n            \"buildx\", \"rm\", \"--force\", builderName,\n        ], new AbortController().signal).catch(() => undefined);\n    }\n}\nasync function defaultE2BTemplateExists(name: string, signal: AbortSignal): Promise<boolean> {\n    // e2b 是 optional peer；仅 E2B Dockerfile 构建路径加载。\n    const { Template } = await __niceevalDynamicImport(\"e2b\");\n    return await Template.exists(name, { signal });\n}\nasync function defaultBuildE2BTemplate(details: DockerfileBuildDetails, name: string, ctx: SandboxBuildExecutionContext): Promise<void> {\n    if (details.buildArgs !== undefined && Object.keys(details.buildArgs).length > 0) {\n        throw new Error(\"E2B Dockerfile builds do not support build args; bake stable values into the Dockerfile\");\n    }\n    if (details.target !== undefined) {\n        throw new Error(\"E2B Dockerfile builds do not support a target stage; make the desired stage the final stage\");\n    }\n    // e2b 是 optional peer；仅 E2B Dockerfile 构建路径加载。\n    const { Template } = await __niceevalDynamicImport(\"e2b\");\n    const ignore = await dockerIgnorePatterns(details.contextDir);\n    const template = Template({\n        fileContextPath: details.contextDir,\n        ...(ignore.length > 0 ? { fileIgnorePatterns: ignore } : {}),\n    }).fromDockerfile(details.dockerfile);\n    await Template.build(template, name, { signal: ctx.signal });\n}\nasync function dockerIgnorePatterns(contextDir: string): Promise<string[]> {\n    const raw = await readFile(resolvePath(contextDir, \".dockerignore\"), \"utf8\").catch(() => \"\");\n    return raw\n        .split(/\\r?\\n/)\n        .map((line) => line.trim())\n        .filter((line) => line.length > 0 && !line.startsWith(\"#\"));\n}\nasync function commandSucceeded(command: string, args: readonly string[]): Promise<boolean> {\n    try {\n        await runBuildCommand(command, args, new AbortController().signal);\n        return true;\n    }\n    catch {\n        return false;\n    }\n}\nconst BUILD_STDERR_LIMIT = 64 * 1024;\n/**\n * 运行会持续输出进度的 builder CLI。stdout 必须主动 drain：若只创建 pipe 却无人读取，\n * Docker/BuildKit 写满 OS pipe buffer 后会永久阻塞，看起来像一个无 CPU 的超长构建。\n * stderr 只保留尾部用于失败诊断，避免长构建把进度输出无限堆进内存。\n */\nexport function runBuildCommand(command: string, args: readonly string[], signal: AbortSignal): Promise<void> {\n    return new Promise<void>((resolve, reject) => {\n        const child = spawn(command, args, { stdio: [\"ignore\", \"pipe\", \"pipe\"], signal });\n        let stderr = \"\";\n        child.stdout?.resume();\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n            stderr += chunk.toString();\n            if (stderr.length > BUILD_STDERR_LIMIT)\n                stderr = stderr.slice(-BUILD_STDERR_LIMIT);\n        });\n        child.on(\"error\", reject);\n        child.on(\"close\", (code) => {\n            if (code === 0)\n                resolve();\n            else\n                reject(new Error(`${command} ${args.join(\" \")} failed (${code ?? \"signal\"}): ${stderr.trim()}`));\n        });\n    });\n}\n"]}
+{"version":3,"file":"dockerfile-build.js","sourceRoot":"","sources":["dockerfile-build.ts"],"names":[],"mappings":";;;AAuCA,gFAoFC;AAQD,0DA4DC;AAUD,kDAcC;AAoGD,0CAkBC;AA7UD,+DAA+D;AAC/D,oEAAoE;AACpE,+DAA+D;AAC/D,2DAA2C;AAC3C,6CAAyC;AACzC,+CAA4C;AAC5C,yCAA+D;AAC/D,mCAAsC;AACtC,iEAAwM;AAExM,+CAA4E;AAC5E,6EAA8G;AAC9G,qEAA2I;AAE3I,mEAA4E;AAAnE,0IAAA,gCAAgC,OAAA;AAoBzC,MAAa,8BAA+B,SAAQ,aAAI,CAAC,WAAW,CAAC,gCAAgC,CAEnG;CACD;AAHD,wEAGC;AACD,2DAA2D;AAC3D,SAAgB,kCAAkC,CAAC,KAUlD;IACG,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAA,uDAA8B,EAAC;YACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,mBAAmB,KAAK,CAAC,OAAO,EAAE;SAC5C,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC;gBACzD,OAAO,EAAE,kGAAkG;aAC9G,CAAC,CAAC,CAAC;QACR,CAAC;QACD,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;YAC5F,CAAC,CAAC,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;gBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,gEAAmC,GAAE;gBAChD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;aAC5H,CAAC;YACF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,IAAI,SAAS,CAAC,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC;YACrB,GAAG,EAAE,GAAG,EAAE;gBACN,MAAM,OAAO,GAAG,IAAA,4BAAc,EAAC;oBAC3B,QAAQ,EAAE,iBAAiB;oBAC3B,oBAAoB,EAAE,yDAAgC;oBACtD,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC9B,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;iBAChG,CAAC,CAAC;gBACH,MAAM,OAAO,GAA2B;oBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;iBAChG,CAAC;gBACF,MAAM,OAAO,GAAG,IAAA,6CAAsB,EAAC;oBACnC,cAAc,EAAE,KAAK,CAAC,QAAQ;oBAC9B,oBAAoB;oBACpB,8BAA8B,EAAE,CAAC;iBACpC,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,OAAO;oBACP,OAAO;oBACP,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,CAAC;oBACrH,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;wBAChB,GAAG,EAAE,IAAA,sCAAe,EAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;wBAChD,OAAO;wBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,GAAG,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,OAAO,EAAE;wBACtD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;4BAClB,IAAI,EAAE,YAAY;4BAClB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,OAAO,EAAE,QAAQ,CAAC,UAAU;4BAC5B,UAAU,EAAE,QAAQ,CAAC,cAAc;4BACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;4BAC/C,IAAI,EAAE,KAAK,CAAC,SAAS;yBACxB,CAAC;qBACL,CAAC;iBACL,CAAC,CAAC;YACP,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC;gBACjD,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAClE,CAAC;SACL,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAOD,oEAAoE;AACpE,SAAgB,uBAAuB,CAAC,WAAiD,EAAE,QAAiC,EAAE;IAC1H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IACxE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACrE,MAAM,cAAc,GAAG,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC3E,MAAM,kBAAkB,GAAG,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAClG,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;QACpF,CAAC,CAAC,IAAA,sDAAyB,GAAE;QAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GAAG,CAAC,IAAsB,EAAE,OAAe,EAAE,MAAyB,EAAE,MAA8B,EAA8B,EAAE,CAAC,CAAC;QAChJ,OAAO;QACP,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,KAAK,SAAS;gBAC1E,CAAC,CAAC,MAAM,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBACjH,CAAC,CAAC,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,KAAK,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,IAAsB,EAA0B,EAAE;QACjE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM;YACrB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACnC,OAAO,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC;wBAC1G,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE;wBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC3B,CAAC;gBACD,OAAO,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACpD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE;oBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACvC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG;YACjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,MAAM,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC3H,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;KACJ,CAAC;AACN,CAAC;AACD,SAAS,mBAAmB,CAAC,IAAsB;IAC/C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACtB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AACD,SAAgB,mBAAmB,CAAC,MAA2F;IAC3H,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAwB,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS;YACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,OAAO;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAChE,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,IAAI;YACb,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;KACJ,CAAC;AACN,CAAC;AACD,SAAS,cAAc,CAAC,QAAkB;IACtC,OAAO,kBAAkB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,SAAS,YAAY,CAAC,QAAkB;IACpC,OAAO,kBAAkB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,KAAK,UAAU,wBAAwB,CAAC,GAAW,EAAE,gBAAyB;IAC1E,OAAO,MAAM,gBAAgB,CAAC,QAAQ,EAAE;QACpC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,gBAAgB,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,SAAS,EAAE,GAAG;KAC1B,CAAC,CAAC;AACP,CAAC;AACD,KAAK,UAAU,qBAAqB,CAAC,OAA+B,EAAE,GAAW,EAAE,GAAiC;IAChH,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG;QACd,YAAY;QACZ,OAAO,CAAC,QAAQ;QAChB,QAAQ;QACR,OAAO,CAAC,cAAc;QACtB,OAAO;QACP,GAAG;QACH,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACxG,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,UAAU;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpF,OAAO;IACX,CAAC;IACD,6DAA6D;IAC7D,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,WAAW,GAAG,YAAY,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,MAAM,eAAe,CAAC,QAAQ,EAAE;QAC5B,GAAG,UAAU;QACb,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,kBAAkB;QAC9B,cAAc,EAAE,WAAW,OAAO,CAAC,iBAAiB,EAAE;QACtD,QAAQ,EAAE,WAAW;KACxB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,QAAQ,EAAE;YAC5B,GAAG,UAAU;YACb,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,WAAW;YACxB,QAAQ;YACR,GAAG,SAAS;SACf,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;YACO,CAAC;QACL,MAAM,eAAe,CAAC,QAAQ,EAAE;YAC5B,GAAG,UAAU;YACb,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW;SACzC,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;AACL,CAAC;AACD,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAmB;IACrE,+CAA+C;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACnD,CAAC;AACD,KAAK,UAAU,uBAAuB,CAAC,OAA+B,EAAE,IAAY,EAAE,GAAiC;IACnH,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IACnH,CAAC;IACD,+CAA+C;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC,UAAU;QACnC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AACD,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,mBAAW,EAAC,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,GAAG;SACL,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AACD,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAuB;IACpE,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AACD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAAe,EAAE,IAAuB,EAAE,MAAmB;IACzF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;gBAClC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC;gBACV,OAAO,EAAE,CAAC;;gBAEV,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["// 单 Dockerfile case 的 Run 级按需构建：Docker 产出内容寻址 image tag，E2B 产出\n// 内容寻址 template alias。构建只发生在 build coordinator；attempt 只消费 locator。\n// 契约单源：docs/feature/sandbox/case.md「按需构建单 Sandbox」「Run 级构建协调」。\nimport { spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { readFile } from \"node:fs/promises\";\nimport { isAbsolute, resolve as resolvePath } from \"node:path\";\nimport { Data, Effect } from \"effect\";\nimport { materializationScopeId, sandboxBuildRef, type SandboxBuildArtifactSource, type SandboxBuildExecutionContext, type SandboxBuildProvider, type SandboxBuildWork, } from \"./build-coordinator.ts\";\nimport { detectDockerBuildPlatform, normalizeBuildPlatform } from \"./compose.ts\";\nimport { computeCaseKey, type BuildKey, type CaseKey } from \"./identity.ts\";\nimport { dockerTaskBuildAuthorityFingerprint, makeTaskBuildCacheService } from \"./docker-task-build-cache.ts\";\nimport { DOCKERFILE_MATERIALIZER_REVISION, resolveDockerfileBuildIdentity, type DockerfileBuildIdentity, } from \"./dockerfile-identity.ts\";\nimport type { SandboxLocation } from \"./layer.ts\";\nexport { DOCKERFILE_MATERIALIZER_REVISION } from \"./dockerfile-identity.ts\";\ninterface DockerfileBuildDetails {\n    readonly provider: \"docker\" | \"e2b\";\n    readonly contextDir: string;\n    readonly dockerfilePath: string;\n    readonly dockerfile: string;\n    readonly buildArgs?: Readonly<globalThis.Record<string, string>>;\n    readonly target?: string;\n    readonly platform: string;\n    readonly dockerSocketPath?: string;\n    /** managed profile 在 daemon bridge=none 时为本次 build 创建的独占 bridge。 */\n    readonly dockerNetworkMode?: string;\n}\nexport interface DockerfileBuildCollection {\n    readonly buildKey: BuildKey;\n    readonly caseKey: CaseKey;\n    readonly work: SandboxBuildWork;\n    readonly details: DockerfileBuildDetails;\n    readonly providerIdentityMarker?: import(\"../shared/types.ts\").JsonValue;\n}\nexport class DockerfileBuildCollectionError extends Data.TaggedError(\"DockerfileBuildCollectionError\")<{\n    readonly message: string;\n}> {\n}\n/** ProviderModule 的 typed Dockerfile 收集入口；不从作者输入逆向重建计划。 */\nexport function collectDockerfileBuildFromIdentity(input: {\n    readonly provider: \"docker\" | \"e2b\";\n    readonly profile: string;\n    readonly context: SandboxLocation;\n    readonly dockerfile: string;\n    readonly buildArgs: Readonly<Record<string, string>>;\n    readonly target?: string;\n    readonly platform: string;\n    readonly expected: DockerfileBuildIdentity;\n    readonly dockerSocketPath?: string;\n}): Effect.Effect<DockerfileBuildCollection, DockerfileBuildCollectionError> {\n    return Effect.gen(function* () {\n        const context = input.context._tag === \"Url\" ? new URL(input.context.value) : input.context.value;\n        const identity = yield* resolveDockerfileBuildIdentity({\n            provider: input.provider,\n            context,\n            dockerfile: input.dockerfile,\n            buildArgs: input.buildArgs,\n            ...(input.target === undefined ? {} : { target: input.target }),\n            platform: input.platform,\n            label: `sandbox profile ${input.profile}`,\n        }).pipe(Effect.mapError((cause) => new DockerfileBuildCollectionError({ message: cause.message })));\n        if (identity.buildKey !== input.expected.buildKey) {\n            return yield* Effect.fail(new DockerfileBuildCollectionError({\n                message: \"Dockerfile build inputs changed after physical planning. Restart the Run to plan the new inputs.\",\n            }));\n        }\n        const authorityFingerprint = input.provider === \"docker\" && input.dockerSocketPath === undefined\n            ? yield* Effect.tryPromise({\n                try: () => dockerTaskBuildAuthorityFingerprint(),\n                catch: (cause) => new DockerfileBuildCollectionError({ message: cause instanceof Error ? cause.message : String(cause) }),\n            })\n            : JSON.stringify(identity.providerIdentityMarker ?? [input.provider, input.dockerSocketPath ?? \"default\"]);\n        return yield* Effect.try({\n            try: () => {\n                const caseKey = computeCaseKey({\n                    caseKind: \"on-demand-build\",\n                    materializerRevision: DOCKERFILE_MATERIALIZER_REVISION,\n                    buildKeys: [identity.buildKey],\n                    caseParams: { provider: input.provider, profile: input.profile, buildKey: identity.buildKey },\n                });\n                const details: DockerfileBuildDetails = {\n                    provider: input.provider,\n                    contextDir: identity.contextDir,\n                    dockerfilePath: identity.dockerfilePath,\n                    dockerfile: identity.dockerfile,\n                    buildArgs: input.buildArgs,\n                    ...(input.target === undefined ? {} : { target: input.target }),\n                    platform: input.platform,\n                    ...(input.dockerSocketPath === undefined ? {} : { dockerSocketPath: input.dockerSocketPath }),\n                };\n                const scopeId = materializationScopeId({\n                    providerFamily: input.provider,\n                    authorityFingerprint,\n                    materializationProtocolVersion: 1,\n                });\n                return Object.freeze({\n                    buildKey: identity.buildKey,\n                    caseKey,\n                    details,\n                    ...(identity.providerIdentityMarker === undefined ? {} : { providerIdentityMarker: identity.providerIdentityMarker }),\n                    work: Object.freeze({\n                        ref: sandboxBuildRef(scopeId, identity.buildKey),\n                        scopeId,\n                        buildKey: identity.buildKey,\n                        provider: input.provider,\n                        label: `${input.provider}:dockerfile:${input.profile}`,\n                        inputs: Object.freeze({\n                            kind: \"dockerfile\",\n                            profile: input.profile,\n                            platform: input.platform,\n                            context: identity.contextDir,\n                            dockerfile: identity.dockerfilePath,\n                            contextFilterRules: identity.contextFilterRules,\n                            args: input.buildArgs,\n                        }),\n                    }),\n                });\n            },\n            catch: (cause) => new DockerfileBuildCollectionError({\n                message: cause instanceof Error ? cause.message : String(cause),\n            }),\n        });\n    });\n}\ninterface DockerfileProviderHooks {\n    readonly dockerImageExists?: (tag: string, dockerSocketPath?: string) => Promise<boolean>;\n    readonly runDockerBuild?: (details: DockerfileBuildDetails, tag: string, ctx: SandboxBuildExecutionContext) => Promise<void>;\n    readonly e2bTemplateExists?: (name: string, signal: AbortSignal) => Promise<boolean>;\n    readonly buildE2BTemplate?: (details: DockerfileBuildDetails, name: string, ctx: SandboxBuildExecutionContext) => Promise<void>;\n}\n/** collection 同批创建 provider，避免从公开 JsonValue provenance 反解本地绝对路径。 */\nexport function dockerfileBuildProvider(collections: readonly DockerfileBuildCollection[], hooks: DockerfileProviderHooks = {}): SandboxBuildProvider {\n    const details = new Map(collections.map((collection) => [collection.buildKey, collection.details]));\n    const imageExists = hooks.dockerImageExists ?? defaultDockerImageExists;\n    const runDockerBuild = hooks.runDockerBuild ?? defaultRunDockerBuild;\n    const templateExists = hooks.e2bTemplateExists ?? defaultE2BTemplateExists;\n    const buildE2BTemplate = hooks.buildE2BTemplate ?? defaultBuildE2BTemplate;\n    const managedDockerCache = hooks.dockerImageExists === undefined && hooks.runDockerBuild === undefined &&\n        collections.every((collection) => collection.details.dockerSocketPath === undefined)\n        ? makeTaskBuildCacheService()\n        : undefined;\n    const source = (work: SandboxBuildWork, locator: string, origin: \"cache\" | \"build\", detail: DockerfileBuildDetails): SandboxBuildArtifactSource => ({\n        locator,\n        source: origin,\n        acquireUse: async () => {\n            const lease = detail.provider === \"docker\" && managedDockerCache !== undefined\n                ? await managedDockerCache.acquireUse(work.buildKey, locator, buildManifestDigest(work), detail.dockerSocketPath)\n                : { release() { } };\n            return { locator, release: () => lease.release() };\n        },\n        release() { },\n    });\n    const detailFor = (work: SandboxBuildWork): DockerfileBuildDetails => {\n        const detail = details.get(work.buildKey);\n        if (detail === undefined) {\n            throw new Error(`unknown Dockerfile BuildKey ${work.buildKey.slice(0, 12)}…`);\n        }\n        return detail;\n    };\n    return {\n        async lookup(work, signal) {\n            const detail = detailFor(work);\n            if (detail.provider === \"docker\") {\n                const tag = dockerBuildTag(work.buildKey);\n                if (managedDockerCache !== undefined) {\n                    return await managedDockerCache.lookup(work.buildKey, tag, buildManifestDigest(work), detail.dockerSocketPath)\n                        ? { _tag: \"Hit\", source: source(work, tag, \"cache\", detail) }\n                        : { _tag: \"Miss\" };\n                }\n                return (await imageExists(tag, detail.dockerSocketPath))\n                    ? { _tag: \"Hit\", source: source(work, tag, \"cache\", detail) }\n                    : { _tag: \"Miss\" };\n            }\n            const name = e2bBuildName(work.buildKey);\n            return (await templateExists(name, signal))\n                ? { _tag: \"Hit\", source: source(work, name, \"cache\", detail) }\n                : { _tag: \"Miss\" };\n        },\n        async build(work, ctx) {\n            const detail = detailFor(work);\n            if (detail.provider === \"docker\") {\n                const tag = dockerBuildTag(work.buildKey);\n                await runDockerBuild(detail, tag, ctx);\n                await managedDockerCache?.publish(work.buildKey, tag, buildManifestDigest(work), ctx.operationId, detail.dockerSocketPath);\n                return source(work, tag, \"build\", detail);\n            }\n            const name = e2bBuildName(work.buildKey);\n            await buildE2BTemplate(detail, name, ctx);\n            return source(work, name, \"build\", detail);\n        },\n    };\n}\nfunction buildManifestDigest(work: SandboxBuildWork): string {\n    return createHash(\"sha256\").update(JSON.stringify({\n        schemaVersion: 1,\n        scopeId: work.scopeId,\n        buildKey: work.buildKey,\n        provider: work.provider,\n        inputs: work.inputs,\n    })).digest(\"hex\");\n}\nexport function routeBuildProviders(routes: ReadonlyMap<import(\"./build-coordinator.ts\").SandboxBuildRef, SandboxBuildProvider>): SandboxBuildProvider {\n    const providerFor = (work: SandboxBuildWork): SandboxBuildProvider => {\n        const provider = routes.get(work.ref);\n        if (provider === undefined)\n            throw new Error(`no sandbox build provider for BuildKey ${work.buildKey.slice(0, 12)}…`);\n        return provider;\n    };\n    return {\n        lookup: (work, signal) => providerFor(work).lookup(work, signal),\n        build: (work, ctx) => providerFor(work).build(work, ctx),\n        async cancel(work) {\n            await providerFor(work).cancel?.(work);\n        },\n    };\n}\nfunction dockerBuildTag(buildKey: BuildKey): string {\n    return `niceeval-build:${buildKey.slice(0, 32)}`;\n}\nfunction e2bBuildName(buildKey: BuildKey): string {\n    return `niceeval-build-${buildKey.slice(0, 40)}`;\n}\nasync function defaultDockerImageExists(tag: string, dockerSocketPath?: string): Promise<boolean> {\n    return await commandSucceeded(\"docker\", [\n        ...(dockerSocketPath === undefined ? [] : [\"--host\", `unix://${dockerSocketPath}`]),\n        \"image\", \"inspect\", tag,\n    ]);\n}\nasync function defaultRunDockerBuild(details: DockerfileBuildDetails, tag: string, ctx: SandboxBuildExecutionContext): Promise<void> {\n    const connection = details.dockerSocketPath === undefined ? [] : [\"--host\", `unix://${details.dockerSocketPath}`];\n    const buildArgs = [\n        \"--platform\",\n        details.platform,\n        \"--file\",\n        details.dockerfilePath,\n        \"--tag\",\n        tag,\n        ...Object.entries(details.buildArgs ?? {}).flatMap(([key, value]) => [\"--build-arg\", `${key}=${value}`]),\n        ...(details.target !== undefined ? [\"--target\", details.target] : []),\n        details.contextDir,\n    ];\n    if (details.dockerNetworkMode === undefined) {\n        await runBuildCommand(\"docker\", [...connection, \"build\", ...buildArgs], ctx.signal);\n        return;\n    }\n    // managed daemon 关闭默认 bridge。现代 BuildKit 不接受任意 network ID 作为\n    // `docker build --network`，所以为 reservation 建短生命周期 docker-container builder，\n    // 把 builder 自身绑定到 watchdog 所有的独占网络，并将结果显式 load 回 profile daemon。\n    const builderName = `niceeval-${details.dockerNetworkMode.slice(0, 24)}`;\n    await runBuildCommand(\"docker\", [\n        ...connection,\n        \"buildx\", \"create\",\n        \"--driver\", \"docker-container\",\n        \"--driver-opt\", `network=${details.dockerNetworkMode}`,\n        \"--name\", builderName,\n    ], ctx.signal);\n    try {\n        await runBuildCommand(\"docker\", [\n            ...connection,\n            \"buildx\", \"build\",\n            \"--builder\", builderName,\n            \"--load\",\n            ...buildArgs,\n        ], ctx.signal);\n    }\n    finally {\n        await runBuildCommand(\"docker\", [\n            ...connection,\n            \"buildx\", \"rm\", \"--force\", builderName,\n        ], new AbortController().signal).catch(() => undefined);\n    }\n}\nasync function defaultE2BTemplateExists(name: string, signal: AbortSignal): Promise<boolean> {\n    // e2b 是 optional peer；仅 E2B Dockerfile 构建路径加载。\n    const { Template } = await __niceevalDynamicImport(\"e2b\");\n    return await Template.exists(name, { signal });\n}\nasync function defaultBuildE2BTemplate(details: DockerfileBuildDetails, name: string, ctx: SandboxBuildExecutionContext): Promise<void> {\n    if (details.buildArgs !== undefined && Object.keys(details.buildArgs).length > 0) {\n        throw new Error(\"E2B Dockerfile builds do not support build args; bake stable values into the Dockerfile\");\n    }\n    if (details.target !== undefined) {\n        throw new Error(\"E2B Dockerfile builds do not support a target stage; make the desired stage the final stage\");\n    }\n    // e2b 是 optional peer；仅 E2B Dockerfile 构建路径加载。\n    const { Template } = await __niceevalDynamicImport(\"e2b\");\n    const ignore = await dockerIgnorePatterns(details.contextDir);\n    const template = Template({\n        fileContextPath: details.contextDir,\n        ...(ignore.length > 0 ? { fileIgnorePatterns: ignore } : {}),\n    }).fromDockerfile(details.dockerfile);\n    await Template.build(template, name, { signal: ctx.signal });\n}\nasync function dockerIgnorePatterns(contextDir: string): Promise<string[]> {\n    const raw = await readFile(resolvePath(contextDir, \".dockerignore\"), \"utf8\").catch(() => \"\");\n    return raw\n        .split(/\\r?\\n/)\n        .map((line) => line.trim())\n        .filter((line) => line.length > 0 && !line.startsWith(\"#\"));\n}\nasync function commandSucceeded(command: string, args: readonly string[]): Promise<boolean> {\n    try {\n        await runBuildCommand(command, args, new AbortController().signal);\n        return true;\n    }\n    catch {\n        return false;\n    }\n}\nconst BUILD_STDERR_LIMIT = 64 * 1024;\n/**\n * 运行会持续输出进度的 builder CLI。stdout 必须主动 drain：若只创建 pipe 却无人读取，\n * Docker/BuildKit 写满 OS pipe buffer 后会永久阻塞，看起来像一个无 CPU 的超长构建。\n * stderr 只保留尾部用于失败诊断，避免长构建把进度输出无限堆进内存。\n */\nexport function runBuildCommand(command: string, args: readonly string[], signal: AbortSignal): Promise<void> {\n    return new Promise<void>((resolve, reject) => {\n        const child = spawn(command, args, { stdio: [\"ignore\", \"pipe\", \"pipe\"], signal });\n        let stderr = \"\";\n        child.stdout?.resume();\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n            stderr += chunk.toString();\n            if (stderr.length > BUILD_STDERR_LIMIT)\n                stderr = stderr.slice(-BUILD_STDERR_LIMIT);\n        });\n        child.on(\"error\", reject);\n        child.on(\"close\", (code) => {\n            if (code === 0)\n                resolve();\n            else\n                reject(new Error(`${command} ${args.join(\" \")} failed (${code ?? \"signal\"}): ${stderr.trim()}`));\n        });\n    });\n}\n"]}

package/dist/sandbox/dockerfile-build.d.cts

@@ -1,5 +1,5 @@
 import { Effect } from "effect";
-import type { SandboxBuildExecutionContext, SandboxBuildProvider, SandboxBuildWork } from "./build-coordinator.cjs";
+import { type SandboxBuildExecutionContext, type SandboxBuildProvider, type SandboxBuildWork } from "./build-coordinator.cjs";
 import { type BuildKey, type CaseKey } from "./identity.cjs";
 import { type DockerfileBuildIdentity } from "./dockerfile-identity.cjs";
 import type { SandboxLocation } from "./layer.cjs";
@@ -50,7 +50,7 @@ interface DockerfileProviderHooks {
 }
 /** collection 同批创建 provider，避免从公开 JsonValue provenance 反解本地绝对路径。 */
 export declare function dockerfileBuildProvider(collections: readonly DockerfileBuildCollection[], hooks?: DockerfileProviderHooks): SandboxBuildProvider;
-export declare function routeBuildProviders(routes: ReadonlyMap<BuildKey, SandboxBuildProvider>): SandboxBuildProvider;
+export declare function routeBuildProviders(routes: ReadonlyMap<import("./build-coordinator.cjs").SandboxBuildRef, SandboxBuildProvider>): SandboxBuildProvider;
 /**
  * 运行会持续输出进度的 builder CLI。stdout 必须主动 drain：若只创建 pipe 却无人读取，
  * Docker/BuildKit 写满 OS pipe buffer 后会永久阻塞，看起来像一个无 CPU 的超长构建。

package/dist/sandbox/dockerfile-build.d.mts

@@ -1,5 +1,5 @@
 import { Effect } from "effect";
-import type { SandboxBuildExecutionContext, SandboxBuildProvider, SandboxBuildWork } from "./build-coordinator.mjs";
+import { type SandboxBuildExecutionContext, type SandboxBuildProvider, type SandboxBuildWork } from "./build-coordinator.mjs";
 import { type BuildKey, type CaseKey } from "./identity.mjs";
 import { type DockerfileBuildIdentity } from "./dockerfile-identity.mjs";
 import type { SandboxLocation } from "./layer.mjs";
@@ -50,7 +50,7 @@ interface DockerfileProviderHooks {
 }
 /** collection 同批创建 provider，避免从公开 JsonValue provenance 反解本地绝对路径。 */
 export declare function dockerfileBuildProvider(collections: readonly DockerfileBuildCollection[], hooks?: DockerfileProviderHooks): SandboxBuildProvider;
-export declare function routeBuildProviders(routes: ReadonlyMap<BuildKey, SandboxBuildProvider>): SandboxBuildProvider;
+export declare function routeBuildProviders(routes: ReadonlyMap<import("./build-coordinator.mjs").SandboxBuildRef, SandboxBuildProvider>): SandboxBuildProvider;
 /**
  * 运行会持续输出进度的 builder CLI。stdout 必须主动 drain：若只创建 pipe 却无人读取，
  * Docker/BuildKit 写满 OS pipe buffer 后会永久阻塞，看起来像一个无 CPU 的超长构建。

package/dist/sandbox/dockerfile-build.d.ts

@@ -1,5 +1,5 @@
 import { Effect } from "effect";
-import type { SandboxBuildExecutionContext, SandboxBuildProvider, SandboxBuildWork } from "./build-coordinator.js";
+import { type SandboxBuildExecutionContext, type SandboxBuildProvider, type SandboxBuildWork } from "./build-coordinator.js";
 import { type BuildKey, type CaseKey } from "./identity.js";
 import { type DockerfileBuildIdentity } from "./dockerfile-identity.js";
 import type { SandboxLocation } from "./layer.js";
@@ -50,7 +50,7 @@ interface DockerfileProviderHooks {
 }
 /** collection 同批创建 provider，避免从公开 JsonValue provenance 反解本地绝对路径。 */
 export declare function dockerfileBuildProvider(collections: readonly DockerfileBuildCollection[], hooks?: DockerfileProviderHooks): SandboxBuildProvider;
-export declare function routeBuildProviders(routes: ReadonlyMap<BuildKey, SandboxBuildProvider>): SandboxBuildProvider;
+export declare function routeBuildProviders(routes: ReadonlyMap<import("./build-coordinator.js").SandboxBuildRef, SandboxBuildProvider>): SandboxBuildProvider;
 /**
  * 运行会持续输出进度的 builder CLI。stdout 必须主动 drain：若只创建 pipe 却无人读取，
  * Docker/BuildKit 写满 OS pipe buffer 后会永久阻塞，看起来像一个无 CPU 的超长构建。

package/dist/sandbox/index.cjs

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DOCKER_PROFILE_SCHEMA_VERSION = exports.DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION = exports.dockerProfileError = exports.DockerProfileError = exports.NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE = exports.NICEEVAL_OMP_DOCKER_IMAGE = exports.NICEEVAL_OPENCODE_DOCKER_IMAGE = exports.NICEEVAL_OPENCLAW_DOCKER_IMAGE = exports.NICEEVAL_HERMES_DOCKER_IMAGE = exports.NICEEVAL_CODEX_DOCKER_IMAGE = exports.NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE = exports.NICEEVAL_BUB_DOCKER_IMAGE = exports.normalizeSandboxCapture = exports.restoreCheckpoint = exports.createCheckpoint = exports.buildFailureOrigin = exports.startSandboxBuilds = exports.prepareSandboxBuilds = exports.SANDBOX_BUILD_ACTIVITY = exports.looksLikeDigestRef = exports.assertPureDataIdentity = exports.credentialIdentityContribution = exports.resolveFloatingImageTag = exports.computeCaseKey = exports.computeBuildKey = exports.materializeDockerComposeProviderCase = exports.buildComposeOverlay = exports.findComposeBlacklistViolations = exports.assertComposeBlacklist = exports.inspectComposeYaml = exports.leakGateHintsFromComposeFile = exports.collectComposeBuilds = exports.dockerComposeBuildProvider = exports.COMPOSE_MATERIALIZER_REVISION = exports.registerSandboxContent = exports.SandboxCommandExitError = exports.installTool = exports.checkout = exports.defineSandboxCommand = exports.shell = exports.command = exports.defineSandboxCase = exports.localSandbox = exports.vercelSandbox = exports.e2bSandbox = exports.dockerComposeSandbox = exports.dockerSandbox = exports.sandboxLayer = exports.CustomSandboxMaterializationError = exports.defineSandbox = void 0;
-exports.resolveDockerProfileSelector = exports.resolveDockerProfileAlias = exports.resolveDockerProfile = exports.resolveDockerExecutionProfile = exports.parseDockerProfileRegistry = exports.indexDockerProfiles = exports.createDockerProfileRegistry = exports.parseDockerExecutionProfileV1 = exports.parseDockerExecutionProfile = exports.makeDockerExecutionProfileV1 = exports.isDockerExecutionProfileV1 = exports.dockerProfilePublicSummaryOf = exports.dockerProfileDigestOf = exports.dockerExecutionProfileV1Digest = exports.dockerProfileSemanticPolicyRevisionOf = exports.dockerExecutionProfileSemanticPolicyRevisionOf = exports.decodeDockerExecutionProfileV1 = exports.createDockerExecutionProfileV1 = exports.DockerExecutionProfileSchema = exports.DockerExecutionProfileV1Schema = exports.DOCKER_PROFILE_NETWORK_DENY_CIDRS = exports.DOCKER_PROFILE_NETWORK_POLICY_VERSION = void 0;
+exports.DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION = exports.dockerProfileError = exports.DockerProfileError = exports.sandboxBuildRef = exports.materializationScopeId = exports.NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE = exports.NICEEVAL_OMP_DOCKER_IMAGE = exports.NICEEVAL_OPENCODE_DOCKER_IMAGE = exports.NICEEVAL_OPENCLAW_DOCKER_IMAGE = exports.NICEEVAL_HERMES_DOCKER_IMAGE = exports.NICEEVAL_CODEX_DOCKER_IMAGE = exports.NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE = exports.NICEEVAL_BUB_DOCKER_IMAGE = exports.normalizeSandboxCapture = exports.restoreCheckpoint = exports.createCheckpoint = exports.buildFailureOrigin = exports.startSandboxBuilds = exports.prepareSandboxBuilds = exports.SANDBOX_BUILD_ACTIVITY = exports.looksLikeDigestRef = exports.assertPureDataIdentity = exports.credentialIdentityContribution = exports.resolveFloatingImageTag = exports.computeCaseKey = exports.computeBuildKey = exports.materializeDockerComposeProviderCase = exports.buildComposeOverlay = exports.findComposeBlacklistViolations = exports.assertComposeBlacklist = exports.inspectComposeYaml = exports.leakGateHintsFromComposeFile = exports.collectComposeBuilds = exports.dockerComposeBuildProvider = exports.COMPOSE_MATERIALIZER_REVISION = exports.registerSandboxContent = exports.SandboxCommandExitError = exports.installTool = exports.checkout = exports.defineSandboxCommand = exports.shell = exports.command = exports.defineSandboxCase = exports.vercelSandbox = exports.e2bSandbox = exports.dockerComposeSandbox = exports.dockerSandbox = exports.sandboxLayer = exports.CustomSandboxMaterializationError = exports.defineSandbox = void 0;
+exports.resolveDockerProfileSelector = exports.resolveDockerProfileAlias = exports.resolveDockerProfile = exports.resolveDockerExecutionProfile = exports.parseDockerProfileRegistry = exports.indexDockerProfiles = exports.createDockerProfileRegistry = exports.parseDockerExecutionProfileV1 = exports.parseDockerExecutionProfile = exports.makeDockerExecutionProfileV1 = exports.isDockerExecutionProfileV1 = exports.dockerProfilePublicSummaryOf = exports.dockerProfileDigestOf = exports.dockerExecutionProfileV1Digest = exports.dockerProfileSemanticPolicyRevisionOf = exports.dockerExecutionProfileSemanticPolicyRevisionOf = exports.decodeDockerExecutionProfileV1 = exports.createDockerExecutionProfileV1 = exports.DockerExecutionProfileSchema = exports.DockerExecutionProfileV1Schema = exports.DOCKER_PROFILE_NETWORK_DENY_CIDRS = exports.DOCKER_PROFILE_NETWORK_POLICY_VERSION = exports.DOCKER_PROFILE_SCHEMA_VERSION = void 0;
 // niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。
 // 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——
 // 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。
@@ -14,7 +14,6 @@ Object.defineProperty(exports, "dockerSandbox", { enumerable: true, get: functio
 Object.defineProperty(exports, "dockerComposeSandbox", { enumerable: true, get: function () { return layer_ts_1.dockerComposeSandbox; } });
 Object.defineProperty(exports, "e2bSandbox", { enumerable: true, get: function () { return layer_ts_1.e2bSandbox; } });
 Object.defineProperty(exports, "vercelSandbox", { enumerable: true, get: function () { return layer_ts_1.vercelSandbox; } });
-Object.defineProperty(exports, "localSandbox", { enumerable: true, get: function () { return layer_ts_1.localSandbox; } });
 Object.defineProperty(exports, "defineSandboxCase", { enumerable: true, get: function () { return layer_ts_1.defineSandboxCase; } });
 var commands_ts_1 = require("./commands.cjs");
 Object.defineProperty(exports, "command", { enumerable: true, get: function () { return commands_ts_1.command; } });
@@ -63,6 +62,9 @@ Object.defineProperty(exports, "NICEEVAL_OPENCLAW_DOCKER_IMAGE", { enumerable: t
 Object.defineProperty(exports, "NICEEVAL_OPENCODE_DOCKER_IMAGE", { enumerable: true, get: function () { return docker_agent_image_ts_1.NICEEVAL_OPENCODE_DOCKER_IMAGE; } });
 Object.defineProperty(exports, "NICEEVAL_OMP_DOCKER_IMAGE", { enumerable: true, get: function () { return docker_agent_image_ts_1.NICEEVAL_OMP_DOCKER_IMAGE; } });
 Object.defineProperty(exports, "NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE", { enumerable: true, get: function () { return docker_agent_image_ts_1.NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE; } });
+var build_coordinator_ts_2 = require("./build-coordinator.cjs");
+Object.defineProperty(exports, "materializationScopeId", { enumerable: true, get: function () { return build_coordinator_ts_2.materializationScopeId; } });
+Object.defineProperty(exports, "sandboxBuildRef", { enumerable: true, get: function () { return build_coordinator_ts_2.sandboxBuildRef; } });
 var errors_ts_1 = require("./docker-profile/errors.cjs");
 Object.defineProperty(exports, "DockerProfileError", { enumerable: true, get: function () { return errors_ts_1.DockerProfileError; } });
 Object.defineProperty(exports, "dockerProfileError", { enumerable: true, get: function () { return errors_ts_1.dockerProfileError; } });

package/dist/sandbox/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;;AAAA,gDAAgD;AAChD,6EAA6E;AAC7E,qDAAqD;AACrD,0CAA6C;AAApC,0GAAA,aAAa,OAAA;AACtB,uCAA+K;AAAtK,6HAAA,iCAAiC,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AACzJ,6CAAqE;AAA5D,sGAAA,OAAO,OAAA;AAAE,oGAAA,KAAK,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC7C,6DAA8D;AAArD,+GAAA,QAAQ,OAAA;AAAE,kHAAA,WAAW,OAAA;AAC9B,iDAA0D;AAAjD,wHAAA,uBAAuB,OAAA;AAChC,2CAAsD;AAA7C,oHAAA,sBAAsB,OAAA;AAC/B,2CAAqR;AAA5Q,2HAAA,6BAA6B,OAAA;AAAE,wHAAA,0BAA0B,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,0HAAA,4BAA4B,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,4HAAA,8BAA8B,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAAE,kIAAA,oCAAoC,OAAA;AAC7P,6CAAsK;AAA7J,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AAAE,sHAAA,uBAAuB,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAAE,qHAAA,sBAAsB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC7I,+DAA+H;AAAtH,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC7F,iDAAsE;AAA7D,iHAAA,gBAAgB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAC5C,wDAAkE;AAAzD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAsS;AAA7R,kIAAA,yBAAyB,OAAA;AAAE,0IAAA,iCAAiC,OAAA;AAAE,oIAAA,2BAA2B,OAAA;AAAE,qIAAA,4BAA4B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,kIAAA,yBAAyB,OAAA;AAAE,+IAAA,sCAAsC,OAAA;AAUnQ,wDAAqF;AAA5E,+GAAA,kBAAkB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAE/C,wDAA+lB;AAAtlB,oIAAA,uCAAuC,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,8HAAA,iCAAiC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2IAAA,8CAA8C,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,uHAAA,0BAA0B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,wHAAA,2BAA2B,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAEzjB,4DAA2O;AAAlO,0HAAA,2BAA2B,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,yHAAA,0BAA0B,OAAA;AAAE,4HAAA,6BAA6B,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAAE,2HAAA,4BAA4B,OAAA","sourcesContent":["// niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。\n// 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——\n// 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。\nexport { defineSandbox } from \"../define.ts\";\nexport { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, localSandbox, defineSandboxCase, } from \"./layer.ts\";\nexport { command, shell, defineSandboxCommand } from \"./commands.ts\";\nexport { checkout, installTool } from \"./prepare-commands.ts\";\nexport { SandboxCommandExitError } from \"./operations.ts\";\nexport { registerSandboxContent } from \"./content.ts\";\nexport { COMPOSE_MATERIALIZER_REVISION, dockerComposeBuildProvider, collectComposeBuilds, leakGateHintsFromComposeFile, inspectComposeYaml, assertComposeBlacklist, findComposeBlacklistViolations, buildComposeOverlay, materializeDockerComposeProviderCase, } from \"./compose.ts\";\nexport { computeBuildKey, computeCaseKey, resolveFloatingImageTag, credentialIdentityContribution, assertPureDataIdentity, looksLikeDigestRef, } from \"./identity.ts\";\nexport { SANDBOX_BUILD_ACTIVITY, prepareSandboxBuilds, startSandboxBuilds, buildFailureOrigin, } from \"./build-coordinator.ts\";\nexport { createCheckpoint, restoreCheckpoint } from \"./checkpoint.ts\";\nexport { normalizeSandboxCapture, } from \"./record/attachment.ts\";\nexport type { SandboxCaptureInput, SandboxCaptureInputError, } from \"./record/attachment.ts\";\nexport { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from \"./docker-agent-image.ts\";\nexport type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, LocalSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from \"./layer.ts\";\nexport type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandIdentityValue, SandboxCommandOptions, StableSandboxCommand, AttemptRef, } from \"./commands.ts\";\nexport type { CheckoutOptions, InstallToolOptions } from \"./prepare-commands.ts\";\nexport type { RegisteredSandboxContent } from \"./content.ts\";\nexport type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProvider, SandboxRuntime, SandboxHook, SandboxHookContext, CommandResult, CommandOptions, SuccessfulCommandResult, } from \"../types.ts\";\nexport type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from \"./case-types.ts\";\nexport type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from \"./identity.ts\";\nexport type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from \"./compose.ts\";\nexport type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from \"./build-coordinator.ts\";\nexport { DockerProfileError, dockerProfileError, } from \"./docker-profile/errors.ts\";\nexport type { DockerProfileErrorCode, DockerProfileErrorOptions, } from \"./docker-profile/errors.ts\";\nexport { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from \"./docker-profile/schema.ts\";\nexport type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from \"./docker-profile/schema.ts\";\nexport { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileAlias, resolveDockerProfileSelector, } from \"./docker-profile/registry.ts\";\nexport type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from \"./docker-profile/registry.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;;AAAA,gDAAgD;AAChD,6EAA6E;AAC7E,qDAAqD;AACrD,0CAA6C;AAApC,0GAAA,aAAa,OAAA;AACtB,uCAAiK;AAAxJ,6HAAA,iCAAiC,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAC3I,6CAAqE;AAA5D,sGAAA,OAAO,OAAA;AAAE,oGAAA,KAAK,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC7C,6DAA8D;AAArD,+GAAA,QAAQ,OAAA;AAAE,kHAAA,WAAW,OAAA;AAC9B,iDAA0D;AAAjD,wHAAA,uBAAuB,OAAA;AAChC,2CAAsD;AAA7C,oHAAA,sBAAsB,OAAA;AAC/B,2CAAqR;AAA5Q,2HAAA,6BAA6B,OAAA;AAAE,wHAAA,0BAA0B,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,0HAAA,4BAA4B,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,4HAAA,8BAA8B,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAAE,kIAAA,oCAAoC,OAAA;AAC7P,6CAAsK;AAA7J,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AAAE,sHAAA,uBAAuB,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAAE,qHAAA,sBAAsB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC7I,+DAA+H;AAAtH,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC7F,iDAAsE;AAA7D,iHAAA,gBAAgB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAC5C,wDAAkE;AAAzD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAsS;AAA7R,kIAAA,yBAAyB,OAAA;AAAE,0IAAA,iCAAiC,OAAA;AAAE,oIAAA,2BAA2B,OAAA;AAAE,qIAAA,4BAA4B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,kIAAA,yBAAyB,OAAA;AAAE,+IAAA,sCAAsC,OAAA;AAUnQ,+DAAiF;AAAxE,8HAAA,sBAAsB,OAAA;AAAE,uHAAA,eAAe,OAAA;AAChD,wDAAqF;AAA5E,+GAAA,kBAAkB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAE/C,wDAA+lB;AAAtlB,oIAAA,uCAAuC,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,8HAAA,iCAAiC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2IAAA,8CAA8C,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,uHAAA,0BAA0B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,wHAAA,2BAA2B,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAEzjB,4DAA2O;AAAlO,0HAAA,2BAA2B,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,yHAAA,0BAA0B,OAAA;AAAE,4HAAA,6BAA6B,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAAE,2HAAA,4BAA4B,OAAA","sourcesContent":["// niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。\n// 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——\n// 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。\nexport { defineSandbox } from \"../define.ts\";\nexport { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from \"./layer.ts\";\nexport { command, shell, defineSandboxCommand } from \"./commands.ts\";\nexport { checkout, installTool } from \"./prepare-commands.ts\";\nexport { SandboxCommandExitError } from \"./operations.ts\";\nexport { registerSandboxContent } from \"./content.ts\";\nexport { COMPOSE_MATERIALIZER_REVISION, dockerComposeBuildProvider, collectComposeBuilds, leakGateHintsFromComposeFile, inspectComposeYaml, assertComposeBlacklist, findComposeBlacklistViolations, buildComposeOverlay, materializeDockerComposeProviderCase, } from \"./compose.ts\";\nexport { computeBuildKey, computeCaseKey, resolveFloatingImageTag, credentialIdentityContribution, assertPureDataIdentity, looksLikeDigestRef, } from \"./identity.ts\";\nexport { SANDBOX_BUILD_ACTIVITY, prepareSandboxBuilds, startSandboxBuilds, buildFailureOrigin, } from \"./build-coordinator.ts\";\nexport { createCheckpoint, restoreCheckpoint } from \"./checkpoint.ts\";\nexport { normalizeSandboxCapture, } from \"./record/attachment.ts\";\nexport type { SandboxCaptureInput, SandboxCaptureInputError, } from \"./record/attachment.ts\";\nexport { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from \"./docker-agent-image.ts\";\nexport type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from \"./layer.ts\";\nexport type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandIdentityValue, SandboxCommandOptions, StableSandboxCommand, AttemptRef, } from \"./commands.ts\";\nexport type { CheckoutOptions, InstallToolOptions } from \"./prepare-commands.ts\";\nexport type { RegisteredSandboxContent } from \"./content.ts\";\nexport type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProvider, SandboxRuntime, SandboxHook, SandboxHookContext, CommandResult, CommandOptions, SuccessfulCommandResult, } from \"../types.ts\";\nexport type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from \"./case-types.ts\";\nexport type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from \"./identity.ts\";\nexport type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from \"./compose.ts\";\nexport type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from \"./build-coordinator.ts\";\nexport { materializationScopeId, sandboxBuildRef } from \"./build-coordinator.ts\";\nexport { DockerProfileError, dockerProfileError, } from \"./docker-profile/errors.ts\";\nexport type { DockerProfileErrorCode, DockerProfileErrorOptions, } from \"./docker-profile/errors.ts\";\nexport { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from \"./docker-profile/schema.ts\";\nexport type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from \"./docker-profile/schema.ts\";\nexport { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileAlias, resolveDockerProfileSelector, } from \"./docker-profile/registry.ts\";\nexport type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from \"./docker-profile/registry.ts\";\n"]}

package/dist/sandbox/index.d.cts

@@ -1,5 +1,5 @@
 export { defineSandbox } from "../define.cjs";
-export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, localSandbox, defineSandboxCase, } from "./layer.cjs";
+export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from "./layer.cjs";
 export { command, shell, defineSandboxCommand } from "./commands.cjs";
 export { checkout, installTool } from "./prepare-commands.cjs";
 export { SandboxCommandExitError } from "./operations.cjs";
@@ -11,7 +11,7 @@ export { createCheckpoint, restoreCheckpoint } from "./checkpoint.cjs";
 export { normalizeSandboxCapture, } from "./record/attachment.cjs";
 export type { SandboxCaptureInput, SandboxCaptureInputError, } from "./record/attachment.cjs";
 export { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from "./docker-agent-image.cjs";
-export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, LocalSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.cjs";
+export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.cjs";
 export type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandIdentityValue, SandboxCommandOptions, StableSandboxCommand, AttemptRef, } from "./commands.cjs";
 export type { CheckoutOptions, InstallToolOptions } from "./prepare-commands.cjs";
 export type { RegisteredSandboxContent } from "./content.cjs";
@@ -19,7 +19,8 @@ export type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProv
 export type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from "./case-types.cjs";
 export type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from "./identity.cjs";
 export type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from "./compose.cjs";
-export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.cjs";
+export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.cjs";
+export { materializationScopeId, sandboxBuildRef } from "./build-coordinator.cjs";
 export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors.cjs";
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.cjs";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.cjs";

package/dist/sandbox/index.d.mts

@@ -1,5 +1,5 @@
 export { defineSandbox } from "../define.mjs";
-export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, localSandbox, defineSandboxCase, } from "./layer.mjs";
+export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from "./layer.mjs";
 export { command, shell, defineSandboxCommand } from "./commands.mjs";
 export { checkout, installTool } from "./prepare-commands.mjs";
 export { SandboxCommandExitError } from "./operations.mjs";
@@ -11,7 +11,7 @@ export { createCheckpoint, restoreCheckpoint } from "./checkpoint.mjs";
 export { normalizeSandboxCapture, } from "./record/attachment.mjs";
 export type { SandboxCaptureInput, SandboxCaptureInputError, } from "./record/attachment.mjs";
 export { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from "./docker-agent-image.mjs";
-export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, LocalSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.mjs";
+export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.mjs";
 export type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandIdentityValue, SandboxCommandOptions, StableSandboxCommand, AttemptRef, } from "./commands.mjs";
 export type { CheckoutOptions, InstallToolOptions } from "./prepare-commands.mjs";
 export type { RegisteredSandboxContent } from "./content.mjs";
@@ -19,7 +19,8 @@ export type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProv
 export type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from "./case-types.mjs";
 export type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from "./identity.mjs";
 export type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from "./compose.mjs";
-export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.mjs";
+export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.mjs";
+export { materializationScopeId, sandboxBuildRef } from "./build-coordinator.mjs";
 export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors.mjs";
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.mjs";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.mjs";

package/dist/sandbox/index.d.ts

@@ -1,5 +1,5 @@
 export { defineSandbox } from "../define.js";
-export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, localSandbox, defineSandboxCase, } from "./layer.js";
+export { CustomSandboxMaterializationError, sandboxLayer, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from "./layer.js";
 export { command, shell, defineSandboxCommand } from "./commands.js";
 export { checkout, installTool } from "./prepare-commands.js";
 export { SandboxCommandExitError } from "./operations.js";
@@ -11,7 +11,7 @@ export { createCheckpoint, restoreCheckpoint } from "./checkpoint.js";
 export { normalizeSandboxCapture, } from "./record/attachment.js";
 export type { SandboxCaptureInput, SandboxCaptureInputError, } from "./record/attachment.js";
 export { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from "./docker-agent-image.js";
-export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, LocalSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.js";
+export type { SandboxLayer, SandboxLayerKind, SandboxLayerLifecycle, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from "./layer.js";
 export type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandIdentityValue, SandboxCommandOptions, StableSandboxCommand, AttemptRef, } from "./commands.js";
 export type { CheckoutOptions, InstallToolOptions } from "./prepare-commands.js";
 export type { RegisteredSandboxContent } from "./content.js";
@@ -19,7 +19,8 @@ export type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProv
 export type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from "./case-types.js";
 export type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from "./identity.js";
 export type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from "./compose.js";
-export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.js";
+export type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from "./build-coordinator.js";
+export { materializationScopeId, sandboxBuildRef } from "./build-coordinator.js";
 export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors.js";
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.js";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.js";

package/dist/sandbox/index.js

@@ -105,12 +105,12 @@ const __niceevalExport50 = __niceevalCanonical["isDockerExecutionProfileV1"];
 export { __niceevalExport50 as isDockerExecutionProfileV1 };
 const __niceevalExport51 = __niceevalCanonical["leakGateHintsFromComposeFile"];
 export { __niceevalExport51 as leakGateHintsFromComposeFile };
-const __niceevalExport52 = __niceevalCanonical["localSandbox"];
-export { __niceevalExport52 as localSandbox };
-const __niceevalExport53 = __niceevalCanonical["looksLikeDigestRef"];
-export { __niceevalExport53 as looksLikeDigestRef };
-const __niceevalExport54 = __niceevalCanonical["makeDockerExecutionProfileV1"];
-export { __niceevalExport54 as makeDockerExecutionProfileV1 };
+const __niceevalExport52 = __niceevalCanonical["looksLikeDigestRef"];
+export { __niceevalExport52 as looksLikeDigestRef };
+const __niceevalExport53 = __niceevalCanonical["makeDockerExecutionProfileV1"];
+export { __niceevalExport53 as makeDockerExecutionProfileV1 };
+const __niceevalExport54 = __niceevalCanonical["materializationScopeId"];
+export { __niceevalExport54 as materializationScopeId };
 const __niceevalExport55 = __niceevalCanonical["materializeDockerComposeProviderCase"];
 export { __niceevalExport55 as materializeDockerComposeProviderCase };
 const __niceevalExport56 = __niceevalCanonical["normalizeSandboxCapture"];
@@ -137,12 +137,14 @@ const __niceevalExport66 = __niceevalCanonical["resolveFloatingImageTag"];
 export { __niceevalExport66 as resolveFloatingImageTag };
 const __niceevalExport67 = __niceevalCanonical["restoreCheckpoint"];
 export { __niceevalExport67 as restoreCheckpoint };
-const __niceevalExport68 = __niceevalCanonical["sandboxLayer"];
-export { __niceevalExport68 as sandboxLayer };
-const __niceevalExport69 = __niceevalCanonical["shell"];
-export { __niceevalExport69 as shell };
-const __niceevalExport70 = __niceevalCanonical["startSandboxBuilds"];
-export { __niceevalExport70 as startSandboxBuilds };
-const __niceevalExport71 = __niceevalCanonical["vercelSandbox"];
-export { __niceevalExport71 as vercelSandbox };
+const __niceevalExport68 = __niceevalCanonical["sandboxBuildRef"];
+export { __niceevalExport68 as sandboxBuildRef };
+const __niceevalExport69 = __niceevalCanonical["sandboxLayer"];
+export { __niceevalExport69 as sandboxLayer };
+const __niceevalExport70 = __niceevalCanonical["shell"];
+export { __niceevalExport70 as shell };
+const __niceevalExport71 = __niceevalCanonical["startSandboxBuilds"];
+export { __niceevalExport71 as startSandboxBuilds };
+const __niceevalExport72 = __niceevalCanonical["vercelSandbox"];
+export { __niceevalExport72 as vercelSandbox };
 //# sourceMappingURL=index.js.map