rightsize 0.1.2 → 0.2.0

package/dist/core/backends.js.map

@@ -1 +1 @@
-{"version":3,"file":"backends.js","sourceRoot":"","sources":["../../src/core/backends.ts"],"names":[],"mappings":"AAEA,sEAAsE;AACtE,wEAAwE;AACxE,oEAAoE;AACpE,kDAAkD;AAClD,MAAM,UAAU,GAAsB,EAAE,CAAC;AAEzC,yHAAyH;AACzH,MAAM,UAAU,eAAe,CAAC,QAAyB;IACvD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB;IACpC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,SAAqC,EAAE,SAA6B;IAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,SAAS,sBAAsB,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,8CAA8C,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9G,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,IAAI,aAAyC,CAAC;AAC9C,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,SAAS,MAAM;IACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,aAAa,GAAG,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,iEAAiE;YACjE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,iEAAiE;YACjE,+DAA+D;YAC/D,mEAAmE;YACnE,4CAA4C;YAC5C,EAAE;YACF,qEAAqE;YACrE,gEAAgE;YAChE,oEAAoE;YACpE,kEAAkE;YAClE,sEAAsE;YACtE,iEAAiE;YACjE,8DAA8D;YAC9D,qEAAqE;YACrE,gEAAgE;YAChE,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;gBAC5B,IAAI,YAAY,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,YAAY,GAAG,IAAI,CAAC;gBACpB,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,CAAC;oBACH,aAAa,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB;IAC3B,aAAa,GAAG,SAAS,CAAC;IAC1B,iBAAiB,GAAG,KAAK,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,+EAA+E;IAC/E,OAAO;IACP,+GAA+G;IAC/G,MAAM;IACN,8FAA8F;IAC9F,oBAAoB;CACrB,CAAC"}
+{"version":3,"file":"backends.js","sourceRoot":"","sources":["../../src/core/backends.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAEtG,sEAAsE;AACtE,wEAAwE;AACxE,oEAAoE;AACpE,kDAAkD;AAClD,MAAM,UAAU,GAAsB,EAAE,CAAC;AAEzC,yHAAyH;AACzH,MAAM,UAAU,eAAe,CAAC,QAAyB;IACvD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB;IACpC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,SAAqC,EAAE,SAA6B;IAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,SAAS,sBAAsB,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,8CAA8C,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9G,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,IAAI,aAAyC,CAAC;AAC9C,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,SAAS,MAAM;IACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,aAAa,GAAG,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,iEAAiE;YACjE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,iEAAiE;YACjE,+DAA+D;YAC/D,4DAA4D;YAC5D,yEAAyE;YACzE,EAAE;YACF,qEAAqE;YACrE,gEAAgE;YAChE,oEAAoE;YACpE,kEAAkE;YAClE,sEAAsE;YACtE,iEAAiE;YACjE,8DAA8D;YAC9D,qEAAqE;YACrE,gEAAgE;YAChE,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;gBAC5B,IAAI,YAAY,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,YAAY,GAAG,IAAI,CAAC;gBACpB,oEAAoE;gBACpE,gEAAgE;gBAChE,+DAA+D;gBAC/D,mEAAmE;gBACnE,mEAAmE;gBACnE,8CAA8C;gBAC9C,MAAM,UAAU,GAAG,GAAS,EAAE;oBAC5B,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC;gBACF,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,CAAC;oBACH,aAAa,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;oBACvD,UAAU,EAAE,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,IAAI,kBAA6C,CAAC;AAElD;;;;;;;;;;GAUG;AACH,SAAS,WAAW;IAClB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;IACzB,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,kBAAkB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,0IAA0I;AAC1I,SAAS,oBAAoB;IAC3B,aAAa,GAAG,SAAS,CAAC;IAC1B,iBAAiB,GAAG,KAAK,CAAC;IAC1B,kBAAkB,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,CAAC;AACzB,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,+EAA+E;IAC/E,OAAO;IACP,+GAA+G;IAC/G,MAAM;IACN,4FAA4F;IAC5F,WAAW;IACX,4HAA4H;IAC5H,oBAAoB;CACrB,CAAC"}

package/dist/core/cache-dir.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The one rightsize runtime cache directory, shared by every part of the
+ * library that needs a place on disk: the msb toolchain provisioner
+ * (`<cacheDir>/msb/<version>/...`), the reaping ledger (`<cacheDir>/runs/...`),
+ * and the watchdog scripts (`<cacheDir>/reaper/...`). Lives in core rather
+ * than the msb provisioner because the ledger needs it even in a
+ * docker-only process, which never touches `backend-msb` at all.
+ *
+ * `%LOCALAPPDATA%` is the Windows-idiomatic location for a machine-local,
+ * non-roaming native toolchain cache (as opposed to `%USERPROFILE%`, which a
+ * roaming-profile setup can sync, or a Unix-style dotfile under the home
+ * dir). Falls back to `%USERPROFILE%\AppData\Local` if the env var is unset,
+ * matching what `os.homedir()` resolves to on a normal Windows install when
+ * `LOCALAPPDATA` isn't populated (rare, but seen on some minimal/CI images).
+ */
+export declare function cacheDir(): string;
+//# sourceMappingURL=cache-dir.d.ts.map

package/dist/core/cache-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-dir.d.ts","sourceRoot":"","sources":["../../src/core/cache-dir.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAUjC"}

package/dist/core/cache-dir.js

@@ -0,0 +1,29 @@
+import * as path from "node:path";
+import * as os from "node:os";
+/**
+ * The one rightsize runtime cache directory, shared by every part of the
+ * library that needs a place on disk: the msb toolchain provisioner
+ * (`<cacheDir>/msb/<version>/...`), the reaping ledger (`<cacheDir>/runs/...`),
+ * and the watchdog scripts (`<cacheDir>/reaper/...`). Lives in core rather
+ * than the msb provisioner because the ledger needs it even in a
+ * docker-only process, which never touches `backend-msb` at all.
+ *
+ * `%LOCALAPPDATA%` is the Windows-idiomatic location for a machine-local,
+ * non-roaming native toolchain cache (as opposed to `%USERPROFILE%`, which a
+ * roaming-profile setup can sync, or a Unix-style dotfile under the home
+ * dir). Falls back to `%USERPROFILE%\AppData\Local` if the env var is unset,
+ * matching what `os.homedir()` resolves to on a normal Windows install when
+ * `LOCALAPPDATA` isn't populated (rare, but seen on some minimal/CI images).
+ */
+export function cacheDir() {
+    const override = process.env["RIGHTSIZE_CACHE_DIR"];
+    if (override !== undefined) {
+        return override;
+    }
+    if (process.platform === "win32") {
+        const localAppData = process.env["LOCALAPPDATA"] ?? path.join(os.homedir(), "AppData", "Local");
+        return path.join(localAppData, "rightsize");
+    }
+    return path.join(os.homedir(), ".cache", "rightsize");
+}
+//# sourceMappingURL=cache-dir.js.map

package/dist/core/cache-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-dir.js","sourceRoot":"","sources":["../../src/core/cache-dir.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC"}

package/dist/core/cleanup.d.ts

@@ -1,7 +1,12 @@
 /**
  * Best-effort exit-path cleanup — the JVM-shutdown-hook / Rust-cleanup-
  * thread analog for a process that dies (or is asked to die) before its
- * `await using` scopes unwind normally.
+ * `await using` scopes unwind normally. Doubles as the process-local
+ * registry of currently running containers the failure-diagnostics report
+ * (`diagnostics.ts`) reads from — one live-container registry, not two: a
+ * container is registered here the instant `GenericContainer.start()`
+ * confirms it booted, and deregistered the instant `stop()` tears it down,
+ * which is exactly the "currently running" window diagnostics needs too.
  *
  * Node's `process.on("exit", ...)` handler runs SYNCHRONOUSLY and cannot
  * `await` — by the time it fires, the event loop is already being torn
@@ -19,11 +24,21 @@
  * case, sweeping up `rz-<other-runid>-*` leftovers from a crashed prior
  * run.
  */
+import type { SandboxBackend, SandboxHandle } from "./backend.js";
 export type SyncCleanup = () => void;
-/** Registers a synchronous teardown for a live container, keyed by handle id. */
-export declare function registerSyncCleanup(handleId: string, cleanupFn: SyncCleanup): void;
-/** Unregisters a container's teardown once it has been stopped/removed normally. */
+/** Registers a synchronous teardown for a live container, keyed by handle id — and, by the same call, adds it to the live-container registry `liveContainers()` exposes. */
+export declare function registerSyncCleanup(handle: SandboxHandle, backend: SandboxBackend, cleanupFn: SyncCleanup): void;
+/** Unregisters a container's teardown once it has been stopped/removed normally — and removes it from the live-container registry. */
 export declare function unregisterSyncCleanup(handleId: string): void;
+/**
+ * The process-local registry of currently running containers — every
+ * container `registerSyncCleanup` currently holds, in start order. This is
+ * `diagnostics.ts`'s data source; nothing else needs a second registry.
+ */
+export declare function liveContainers(): ReadonlyArray<{
+    readonly handle: SandboxHandle;
+    readonly backend: SandboxBackend;
+}>;
 /** Test seam: clears registered cleanups without running them. */
 export declare function _resetForTests(): void;
 /**

package/dist/core/cleanup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AA+CrC,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,CAGlF;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAqDrC,4KAA4K;AAC5K,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,CAGhH;AAED,sIAAsI;AACtI,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAEpH;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/core/cleanup.js

@@ -1,30 +1,9 @@
-/**
- * Best-effort exit-path cleanup — the JVM-shutdown-hook / Rust-cleanup-
- * thread analog for a process that dies (or is asked to die) before its
- * `await using` scopes unwind normally.
- *
- * Node's `process.on("exit", ...)` handler runs SYNCHRONOUSLY and cannot
- * `await` — by the time it fires, the event loop is already being torn
- * down, so a backend's real async `stop()`/`remove()` cannot run there.
- * Each backend therefore registers a synchronous, blocking teardown
- * function per live container (`child_process.spawnSync` for msb, a
- * blocking unix-socket DELETE for docker) instead of its normal async
- * path. This module only owns the REGISTRY and the process hooks; it has
- * no opinion on how any one backend tears a container down.
- *
- * This is a last-resort backstop, not the primary cleanup path — the
- * primary path is `GenericContainer.stop()` / `[Symbol.asyncDispose]`.
- * SIGKILL bypasses even this (no handler runs at all); the orphan reaper
- * each backend runs at startup (`sweepOrphans`) is the backstop for that
- * case, sweeping up `rz-<other-runid>-*` leftovers from a crashed prior
- * run.
- */
 const registered = new Map();
 let hooksInstalled = false;
 function runAll() {
-    for (const cleanupFn of registered.values()) {
+    for (const entry of registered.values()) {
         try {
-            cleanupFn();
+            entry.cleanup();
         }
         catch {
             // Best-effort: a failure to clean up one container must not block
@@ -60,15 +39,23 @@ function installHooksOnce() {
         });
     }
 }
-/** Registers a synchronous teardown for a live container, keyed by handle id. */
-export function registerSyncCleanup(handleId, cleanupFn) {
+/** Registers a synchronous teardown for a live container, keyed by handle id — and, by the same call, adds it to the live-container registry `liveContainers()` exposes. */
+export function registerSyncCleanup(handle, backend, cleanupFn) {
     installHooksOnce();
-    registered.set(handleId, cleanupFn);
+    registered.set(handle.id, { handle, backend, cleanup: cleanupFn });
 }
-/** Unregisters a container's teardown once it has been stopped/removed normally. */
+/** Unregisters a container's teardown once it has been stopped/removed normally — and removes it from the live-container registry. */
 export function unregisterSyncCleanup(handleId) {
     registered.delete(handleId);
 }
+/**
+ * The process-local registry of currently running containers — every
+ * container `registerSyncCleanup` currently holds, in start order. This is
+ * `diagnostics.ts`'s data source; nothing else needs a second registry.
+ */
+export function liveContainers() {
+    return Array.from(registered.values(), ({ handle, backend }) => ({ handle, backend }));
+}
 /** Test seam: clears registered cleanups without running them. */
 export function _resetForTests() {
     registered.clear();

package/dist/core/cleanup.js.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;AAClD,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,SAAS,MAAM;IACb,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IACD,cAAc,GAAG,IAAI,CAAC;IAEtB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,sEAAsE;IACtE,uEAAuE;IACvE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,SAAsB;IAC1E,gBAAgB,EAAE,CAAC;IACnB,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,CAAC;AACX,CAAC"}
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAoCA,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;AAC1D,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,SAAS,MAAM;IACb,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IACD,cAAc,GAAG,IAAI,CAAC;IAEtB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,sEAAsE;IACtE,uEAAuE;IACvE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,4KAA4K;AAC5K,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,OAAuB,EAAE,SAAsB;IACxG,gBAAgB,EAAE,CAAC;IACnB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,sIAAsI;AACtI,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,CAAC;AACX,CAAC"}

package/dist/core/diagnostics.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The failure-diagnostics report: every container this process currently has
+ * running (`cleanup.ts`'s live-container registry — populated on a
+ * successful `start()`, cleared on `stop()`), in start order — its image,
+ * state, host, mapped ports, and a bounded tail of its logs. Identical
+ * FORMAT to the Kotlin and Rust implementations (contract-tested against a
+ * golden fixture). A failing `logs()` call degrades to a one-line
+ * `logs: unavailable (<reason>)` instead of throwing, so one broken
+ * container's log fetch never hides the rest of the report. Every
+ * container's `logs()` call runs concurrently.
+ *
+ * A `keepAlive` (reuse) container is never in this registry — see
+ * `cleanup.ts`'s `registerSyncCleanup` call site — so it never appears in
+ * this report; it isn't torn down by this process anyway.
+ */
+export declare function diagnostics(): Promise<string>;
+/**
+ * The shape of a test framework's own failure-registration function —
+ * matches vitest's `onTestFailed` closely enough that passing the real
+ * thing typechecks (a callback accepting fewer parameters than the
+ * framework's own handler type is always assignable to it). No dependency
+ * on any particular test framework.
+ */
+export type FailureHook = (callback: () => void | Promise<void>) => void;
+/**
+ * Framework-neutral wiring for "print the full diagnostics report, once, to
+ * stderr, when a test fails." Pass a test framework's own failure-
+ * registration function — e.g. vitest's `onTestFailed` — and this registers
+ * a callback with it that runs `diagnostics()` and writes the result. See
+ * the [diagnostics guide](/guide/diagnostics) for the vitest wiring example.
+ */
+export declare function registerDiagnostics(onTestFailed: FailureHook, write?: (text: string) => void): void;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/core/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/core/diagnostics.ts"],"names":[],"mappings":"AA8CA;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAOnD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,WAAW,EACzB,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,GACA,IAAI,CAEN"}

package/dist/core/diagnostics.js

@@ -0,0 +1,76 @@
+import { liveContainers } from "./cleanup.js";
+/** Bounded log tail: matches the cross-language contract (Kotlin/Rust `diagnostics` report the same tail length). */
+const LOG_TAIL_LINES = 50;
+function formatPorts(spec) {
+    if (spec.ports.length === 0) {
+        return "(none)";
+    }
+    return spec.ports.map((p) => `${p.guestPort}->${p.hostPort}`).join(", ");
+}
+/** The last `n` lines of `raw`, dropping one trailing empty element from a final newline (never a real blank log line otherwise). */
+function tailLines(raw, n) {
+    const lines = raw.split("\n");
+    if (lines.length > 0 && lines[lines.length - 1] === "") {
+        lines.pop();
+    }
+    return lines.slice(-n);
+}
+function reasonOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Every entry in the live-container registry is, by construction, currently
+ * running (see `cleanup.ts`'s doc) — `state:` is therefore always
+ * `running`, never queried from the backend. `host` is always `127.0.0.1`
+ * per `GenericContainer.host`'s own invariant.
+ */
+async function renderContainer(handle, backend) {
+    const lines = [`-- ${handle.spec.name} (${handle.spec.image}) --`, `state: running   host: 127.0.0.1   ports: ${formatPorts(handle.spec)}`];
+    try {
+        const raw = await backend.logs(handle);
+        lines.push(`last ${LOG_TAIL_LINES} log lines:`);
+        for (const line of tailLines(raw, LOG_TAIL_LINES)) {
+            lines.push(`  ${line}`);
+        }
+    }
+    catch (err) {
+        lines.push(`logs: unavailable (${reasonOf(err)})`);
+    }
+    return lines.join("\n");
+}
+/**
+ * The failure-diagnostics report: every container this process currently has
+ * running (`cleanup.ts`'s live-container registry — populated on a
+ * successful `start()`, cleared on `stop()`), in start order — its image,
+ * state, host, mapped ports, and a bounded tail of its logs. Identical
+ * FORMAT to the Kotlin and Rust implementations (contract-tested against a
+ * golden fixture). A failing `logs()` call degrades to a one-line
+ * `logs: unavailable (<reason>)` instead of throwing, so one broken
+ * container's log fetch never hides the rest of the report. Every
+ * container's `logs()` call runs concurrently.
+ *
+ * A `keepAlive` (reuse) container is never in this registry — see
+ * `cleanup.ts`'s `registerSyncCleanup` call site — so it never appears in
+ * this report; it isn't torn down by this process anyway.
+ */
+export async function diagnostics() {
+    const entries = liveContainers();
+    if (entries.length === 0) {
+        return "== rightsize diagnostics: no running containers ==";
+    }
+    const blocks = await Promise.all(entries.map(({ handle, backend }) => renderContainer(handle, backend)));
+    return `== rightsize diagnostics: ${entries.length} running container(s) ==\n${blocks.join("\n")}`;
+}
+/**
+ * Framework-neutral wiring for "print the full diagnostics report, once, to
+ * stderr, when a test fails." Pass a test framework's own failure-
+ * registration function — e.g. vitest's `onTestFailed` — and this registers
+ * a callback with it that runs `diagnostics()` and writes the result. See
+ * the [diagnostics guide](/guide/diagnostics) for the vitest wiring example.
+ */
+export function registerDiagnostics(onTestFailed, write = (text) => {
+    process.stderr.write(text);
+}) {
+    onTestFailed(() => diagnostics().then((text) => write(`${text}\n`)));
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/core/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/core/diagnostics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,qHAAqH;AACrH,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,SAAS,WAAW,CAAC,IAA2B;IAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,qIAAqI;AACrI,SAAS,SAAS,CAAC,GAAW,EAAE,CAAS;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACvD,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,MAAqB,EAAE,OAAuB;IAC3E,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,6CAA6C,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,cAAc,aAAa,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,6BAA6B,OAAO,CAAC,MAAM,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACrG,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAyB,EACzB,QAAgC,CAAC,IAAY,EAAE,EAAE;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/core/errors.d.ts

@@ -48,4 +48,45 @@ export declare class BackendError extends Error {
 export declare class ProvisionError extends Error {
     constructor(message: string);
 }
+/**
+ * Thrown at `start()` when a container is both marked `withReuse()` and
+ * joined to a `Network` via `withNetwork()` — reuse's identity hash covers
+ * only the container's own spec, never cross-container network topology, so
+ * an adopted sandbox from an earlier process could never be correctly
+ * re-linked to today's siblings. Thrown only once reuse is actually double
+ * opt-in active (API marker AND `RIGHTSIZE_REUSE`); an API-marked-but-env-
+ * disabled container never reaches this check; the whole start() attempt is
+ * still aborted before any port allocation, ledger tracking, or backend call.
+ */
+export declare class ReuseWithNetworkError extends Error {
+    constructor();
+}
+/**
+ * Thrown at `start()` when a container is marked `withRequireIsolation()`
+ * but the active backend's `capabilities.hardwareIsolated` is `false` — the
+ * docker fallback shares the host kernel and cannot provide the
+ * hardware-virtualized isolation the caller demanded. Thrown before any
+ * create/network work: no sandbox is created.
+ */
+export declare class IsolationRequiredError extends Error {
+    /** The active backend's name (e.g. `"docker"`). */
+    readonly backend: string;
+    constructor(
+    /** The active backend's name (e.g. `"docker"`). */
+    backend: string);
+}
+/**
+ * Thrown by `checkpoint()` when the active backend's
+ * `capabilities.checkpoint` is `false` — microsandbox has no upstream
+ * microVM snapshot support today. Thrown before any backend call: the
+ * generic layer gates on the capability itself rather than letting the
+ * backend's own `commitToImage` reject.
+ */
+export declare class CheckpointUnsupportedError extends Error {
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    readonly backend: string;
+    constructor(
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    backend: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAEhD,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;;IALxB,uDAAuD;IAC9C,OAAO,EAAE,MAAM;IACxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;IACxB,qFAAqF;IAC5E,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAFxB,OAAO,EAAE,MAAM;IACf,4FAA4F;IACnF,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,8EAA8E;AAC9E,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,kIAAkI;AAClI,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAEhD,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;;IALxB,uDAAuD;IAC9C,OAAO,EAAE,MAAM;IACxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;IACxB,qFAAqF;IAC5E,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAFxB,OAAO,EAAE,MAAM;IACf,4FAA4F;IACnF,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,8EAA8E;AAC9E,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,kIAAkI;AAClI,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;;CAS/C;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM;;IADxB,mDAAmD;IAC1C,OAAO,EAAE,MAAM;CAS3B;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;;IADxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;CAS3B"}

package/dist/core/errors.js

@@ -63,4 +63,60 @@ export class ProvisionError extends Error {
         this.name = "ProvisionError";
     }
 }
+/**
+ * Thrown at `start()` when a container is both marked `withReuse()` and
+ * joined to a `Network` via `withNetwork()` — reuse's identity hash covers
+ * only the container's own spec, never cross-container network topology, so
+ * an adopted sandbox from an earlier process could never be correctly
+ * re-linked to today's siblings. Thrown only once reuse is actually double
+ * opt-in active (API marker AND `RIGHTSIZE_REUSE`); an API-marked-but-env-
+ * disabled container never reaches this check; the whole start() attempt is
+ * still aborted before any port allocation, ledger tracking, or backend call.
+ */
+export class ReuseWithNetworkError extends Error {
+    constructor() {
+        super("withReuse() cannot be combined with withNetwork() — reuse's identity hash does not cover network " +
+            "topology, so an adopted sandbox could not be correctly re-linked to today's siblings. Drop either " +
+            "withReuse() or withNetwork() on this container.");
+        this.name = "ReuseWithNetworkError";
+    }
+}
+/**
+ * Thrown at `start()` when a container is marked `withRequireIsolation()`
+ * but the active backend's `capabilities.hardwareIsolated` is `false` — the
+ * docker fallback shares the host kernel and cannot provide the
+ * hardware-virtualized isolation the caller demanded. Thrown before any
+ * create/network work: no sandbox is created.
+ */
+export class IsolationRequiredError extends Error {
+    backend;
+    constructor(
+    /** The active backend's name (e.g. `"docker"`). */
+    backend) {
+        super(`withRequireIsolation() demands hardware-virtualized isolation, but the active backend ('${backend}') ` +
+            "does not provide it — set RIGHTSIZE_BACKEND=microsandbox to use the microsandbox backend, or drop " +
+            "withRequireIsolation() to accept the docker fallback's shared-kernel isolation.");
+        this.backend = backend;
+        this.name = "IsolationRequiredError";
+    }
+}
+/**
+ * Thrown by `checkpoint()` when the active backend's
+ * `capabilities.checkpoint` is `false` — microsandbox has no upstream
+ * microVM snapshot support today. Thrown before any backend call: the
+ * generic layer gates on the capability itself rather than letting the
+ * backend's own `commitToImage` reject.
+ */
+export class CheckpointUnsupportedError extends Error {
+    backend;
+    constructor(
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    backend) {
+        super(`checkpoint() is not supported by the '${backend}' backend — checkpoint/restore is implemented via image ` +
+            "commit on the docker backend today; native microVM memory snapshots for microsandbox are on the " +
+            "roadmap. Set RIGHTSIZE_BACKEND=docker to use checkpoint/restore.");
+        this.backend = backend;
+        this.name = "CheckpointUnsupportedError";
+    }
+}
 //# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGvC;IAEA;IAEA;IANX;IACE,uDAAuD;IAC9C,OAAe;IACxB,yDAAyD;IAChD,OAAe;IACxB,qFAAqF;IAC5E,MAAe;QAExB,KAAK,CAAC,YAAY,OAAO,8BAA8B,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QANjG,YAAO,GAAP,OAAO,CAAQ;QAEf,YAAO,GAAP,OAAO,CAAQ;QAEf,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAInC;IAHX,YACE,OAAe;IACf,4FAA4F;IACnF,KAAe;QAExB,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAFnD,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,kIAAkI;AAClI,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGvC;IAEA;IAEA;IANX;IACE,uDAAuD;IAC9C,OAAe;IACxB,yDAAyD;IAChD,OAAe;IACxB,qFAAqF;IAC5E,MAAe;QAExB,KAAK,CAAC,YAAY,OAAO,8BAA8B,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QANjG,YAAO,GAAP,OAAO,CAAQ;QAEf,YAAO,GAAP,OAAO,CAAQ;QAEf,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAInC;IAHX,YACE,OAAe;IACf,4FAA4F;IACnF,KAAe;QAExB,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAFnD,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,kIAAkI;AAClI,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CACH,mGAAmG;YACjG,oGAAoG;YACpG,iDAAiD,CACpD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGpC;IAFX;IACE,mDAAmD;IAC1C,OAAe;QAExB,KAAK,CACH,2FAA2F,OAAO,KAAK;YACrG,oGAAoG;YACpG,iFAAiF,CACpF,CAAC;QANO,YAAO,GAAP,OAAO,CAAQ;QAOxB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGxC;IAFX;IACE,yDAAyD;IAChD,OAAe;QAExB,KAAK,CACH,yCAAyC,OAAO,0DAA0D;YACxG,kGAAkG;YAClG,kEAAkE,CACrE,CAAC;QANO,YAAO,GAAP,OAAO,CAAQ;QAOxB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF"}

package/dist/core/generic-container.d.ts

@@ -2,7 +2,7 @@ import { Network } from "./network.js";
 import type { NetworkMember } from "./network.js";
 import type { WaitStrategy } from "./wait.js";
 import type { SandboxBackend, FollowHandle } from "./backend.js";
-import type { ContainerSpec, ExecResult } from "./model.js";
+import type { ContainerSpec, ExecResult, Checkpoint } from "./model.js";
 import type { MountableFile } from "./mountable-file.js";
 /**
  * The builder, launcher, and lifecycle guard for a single container — the
@@ -33,6 +33,8 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     private waitStrategy;
     private memoryLimitMb;
     private backendOverride;
+    private reuseRequested;
+    private requireIsolationRequested;
     private handle;
     private backend;
     private mappedPorts;
@@ -41,6 +43,19 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     constructor(image: string);
     /** Convenience: `new GenericContainer(image).start()`. */
     static start(image: string): Promise<GenericContainer>;
+    /**
+     * Builds a normal, ephemeral `GenericContainer` from a `Checkpoint`
+     * (`checkpoint()`'s return value): image is `cp.imageRef`, and
+     * env/command/exposed ports/memory limit default to `cp.spec` — chain
+     * further builder calls (a different `waitingFor`, `withBackend`, …)
+     * before `start()`, the same as any other container. Never carries over
+     * `cp.spec`'s network/aliases/mounts — the committed image already has
+     * the filesystem baked in, and (as with `withReuse()`'s own network
+     * restriction) network topology is never part of what a checkpoint
+     * captures. Once started, a restored container is ordinary in every
+     * respect: fresh host ports, normal reaping-ledger tracking, normal stop.
+     */
+    static fromCheckpoint(cp: Checkpoint): GenericContainer;
     /** Sets an environment variable visible to the workload. Last-write-wins if called again with the same key; insertion order is otherwise preserved. */
     withEnv(key: string, value: string): this;
     /** Publishes these guest ports to pre-allocated host ports (see `FreePorts`); read back with `getMappedPort`. */
@@ -59,6 +74,26 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     withMemoryLimit(megabytes: number): this;
     /** Test/advanced seam: pin the backend instead of resolving `Backends.active()`. */
     withBackend(backend: SandboxBackend): this;
+    /**
+     * Marks this container for reuse: survive process exit and be ADOPTED —
+     * not re-created — by the next equivalent container's `start()`, in this
+     * process or a later one. Double opt-in: this API marker alone does
+     * nothing unless `RIGHTSIZE_REUSE` is also `"true"` or `"1"` at `start()`
+     * time. Marked-but-not-enabled starts as an ordinary ephemeral container
+     * (Testcontainers semantics), with a one-time stderr note. See the
+     * [reuse guide](/guide/reuse) for identity rules, the network
+     * restriction, and manual cleanup.
+     */
+    withReuse(): this;
+    /**
+     * Demands hardware-virtualized isolation: `start()` throws
+     * `IsolationRequiredError` before any create/network work if the active
+     * backend's `capabilities.hardwareIsolated` is `false` (the docker
+     * fallback, which shares the host kernel), instead of silently degrading.
+     * Use for tests that run untrusted code. See the
+     * [isolation guide](/guide/isolation).
+     */
+    withRequireIsolation(): this;
     /** Module hook: override to adjust the spec once mapped host ports are known (e.g. advertised listeners). */
     protected customizeSpec(spec: ContainerSpec, _mapped: (guest: number) => number): ContainerSpec;
     /** Module hook: runs after the container is ready (e.g. `rs.initiate` for a Mongo replica set). */
@@ -84,6 +119,10 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     protected currentBackend(): SandboxBackend;
     private resolveBackend;
     private buildSpec;
+    /** The reuse-active counterpart of `buildSpec`: always `keepAlive: true`, named `rz-reuse-<hash12>` rather than the run-scoped `rz-<runId>-<seq>`, and never joined to a `Network` (rejected earlier in `start()`). */
+    private buildReuseSpec;
+    /** This container's reuse identity hash — the reuse-relevant subset of its builder state, hashed per `reuseHash`'s canonical form. Reads every `withCopyFileToContainer` source file's CURRENT content, so a mutated source file between two `start()` calls changes identity. */
+    private computeReuseHash;
     private allocatePorts;
     private releasePorts;
     /**
@@ -101,6 +140,59 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
      * allocate-then-bind race to an unrelated process.
      */
     start(): Promise<this>;
+    /**
+     * The reuse-active start path — an entirely separate flow from the
+     * ephemeral one above, never joining `MAX_START_ATTEMPTS`'s port-conflict
+     * retry loop, the ledger, or the sync-cleanup registry (all deliberate:
+     * see `withReuse()`'s own doc and the reaping addendum). Computes this
+     * container's identity hash, then adopts an existing sandbox or creates a
+     * fresh one under the deterministic `rz-reuse-<hash12>` name.
+     */
+    private startReuse;
+    /**
+     * Reads the registry once and either adopts (registry hit, running,
+     * wait ok) or falls through to a fresh create — see the reuse spec's own
+     * "Start flow when reuse is active" for the full state table this
+     * implements. `isRetry` caps the name-collision recursion at one retry
+     * (`adoptOrCreate` re-enters itself exactly once, from the create/start
+     * failure branch below): "another process won the race" is expected to
+     * resolve within one retry (by then its own registry write has very
+     * likely landed); anything still colliding after that is a genuine
+     * failure, not a race, and propagates.
+     */
+    private adoptOrCreate;
+    /**
+     * Registry hit → verify: confirm the name is actually running (backend
+     * query, never trusted from the file alone), then re-run this
+     * container's OWN wait strategy against the recorded ports — a running
+     * sandbox that never became ready for THIS workload is exactly as
+     * unadoptable as one that isn't running at all. `undefined` means adopt
+     * failed for any reason (not running, or the wait failed); the caller's
+     * best-effort cleanup already ran by the time this returns.
+     */
+    private tryAdopt;
+    /** Best-effort: remove whatever's running under `name` (by name — this call never held a handle for it) and delete the registry file. Never throws. */
+    private cleanupStaleReuse;
+    /**
+     * The crash-mid-boot-orphan guard for the "no registry entry at all"
+     * fresh-create path: confirms with the backend whether `name` is actually
+     * running BEFORE this container's own create() attempt, and only then
+     * best-effort-removes it — never a blind `removeByName` the way
+     * `cleanupStaleReuse` above does for the corrupt/failed-verification
+     * cases, where a registry entry (however stale) already proved something
+     * about this identity once existed. Here nothing has ever proved that, so
+     * the common empty-cache case (nothing running) pays no removal call at
+     * all, and a concurrent creator that's already past ITS OWN create()-and-
+     * register cycle by the time this runs is instead caught by the
+     * name-collision-retry-into-adopt path below (a registry entry appearing
+     * for it means that process won the race — adopt, don't remove). The spec
+     * handed to `findRunning` here is a throwaway: any exposed ports serve
+     * only to satisfy `ContainerSpec`'s shape, since every backend's
+     * `findRunning` matches on `spec.name` alone.
+     */
+    private removeOrphanedRunningReuse;
+    /** The `WaitTarget` for a specific (backend, handle, ports) triple, independent of this instance's own `this.handle`/`this.backend`/`this.mappedPorts` — needed because reuse's adopt-verification wait runs BEFORE those fields are ever assigned. */
+    private waitTargetFor;
     /**
      * Stops and removes the backend-native resource, releases its host ports,
      * and clears the port map. Idempotent — stopping a container that never
@@ -129,6 +221,20 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     /** Alias for `getMappedPort`, satisfying the `NetworkMember`/`WaitTarget` shape (which name this method `mappedPort`). */
     mappedPort(guestPort: number): number;
     private requireHandle;
+    /**
+     * Commits this running container's filesystem to a new image and returns
+     * a `Checkpoint` — a FILESYSTEM capture, not a memory snapshot:
+     * `fromCheckpoint()` boots a fresh container from the committed image
+     * with processes restarting from scratch, not resuming. Requires the
+     * active backend's `capabilities.checkpoint` (docker: `true`, via image
+     * commit; microsandbox: `false`, no upstream microVM snapshot support
+     * yet) — checked BEFORE any backend call, so an unsupported backend never
+     * attempts one. Throws a state error (same shape as `exec`/`logs`) if
+     * this container isn't currently running. Checkpoint images are never
+     * auto-reaped (they're images, not containers) — see the checkpoints
+     * guide for the manual cleanup one-liner.
+     */
+    checkpoint(): Promise<Checkpoint>;
     /** Runs a one-shot command inside the running container and waits for it to exit. Throws if the container is not running. */
     exec(...cmd: string[]): Promise<ExecResult>;
     /** Fetches the workload's logs so far (a bounded tail), as a single string. Throws if the container is not running. */

package/dist/core/generic-container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic-container.d.ts","sourceRoot":"","sources":["../../src/core/generic-container.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,WAAW,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAiB,YAAY,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAa,UAAU,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAyCzD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,YAAW,eAAe,EAAE,aAAa;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,eAAe,CAA6B;IAEpD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,OAAO,CAAS;IAExB,0FAA0F;gBAC9E,KAAK,EAAE,MAAM;IAIzB,0DAA0D;WAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D,uJAAuJ;IACvJ,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASzC,iHAAiH;IACjH,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK1C,yGAAyG;IACzG,WAAW,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI;IAKnC,sGAAsG;IACtG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAK/B,qHAAqH;IACrH,kBAAkB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK5C,uMAAuM;IACvM,uBAAuB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrE,2GAA2G;IAC3G,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAKxC,8JAA8J;IAC9J,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxC,oFAAoF;IACpF,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAK1C,6GAA6G;IAC7G,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,aAAa;IAI/F,mGAAmG;IACnG,SAAS,CAAC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;;;;OAQG;IACH,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,cAAc;IAI1C,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,SAAS;YA2BH,aAAa;IAQ3B,OAAO,CAAC,YAAY;IAMpB;;;;;;;;;;;;;OAaG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgF5B;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,oHAAoH;IAC9G,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,oEAAoE;IACpE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4FAA4F;IAC5F,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,2JAA2J;IAC3J,IAAI,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAEnC;IAED,oJAAoJ;IACpJ,IAAI,iBAAiB,IAAI,aAAa,CAAC,MAAM,CAAC,CAE7C;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAWxC,0HAA0H;IAC1H,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIrC,OAAO,CAAC,aAAa;IAOrB,6HAA6H;IACvH,IAAI,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAKjD,uHAAuH;IACjH,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3E,OAAO,CAAC,YAAY;CASrB"}
+{"version":3,"file":"generic-container.d.ts","sourceRoot":"","sources":["../../src/core/generic-container.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,WAAW,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAiB,YAAY,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAa,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAiEzD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,YAAW,eAAe,EAAE,aAAa;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,yBAAyB,CAAS;IAE1C,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,OAAO,CAAS;IAExB,0FAA0F;gBAC9E,KAAK,EAAE,MAAM;IAIzB,0DAA0D;WAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB;IAiBvD,uJAAuJ;IACvJ,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASzC,iHAAiH;IACjH,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK1C,yGAAyG;IACzG,WAAW,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI;IAKnC,sGAAsG;IACtG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAK/B,qHAAqH;IACrH,kBAAkB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK5C,uMAAuM;IACvM,uBAAuB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrE,2GAA2G;IAC3G,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAKxC,8JAA8J;IAC9J,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxC,oFAAoF;IACpF,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAK1C;;;;;;;;;OASG;IACH,SAAS,IAAI,IAAI;IAKjB;;;;;;;OAOG;IACH,oBAAoB,IAAI,IAAI;IAK5B,6GAA6G;IAC7G,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,aAAa;IAI/F,mGAAmG;IACnG,SAAS,CAAC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;;;;OAQG;IACH,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,cAAc;IAI1C,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,SAAS;IAgCjB,uNAAuN;IACvN,OAAO,CAAC,cAAc;IA4BtB,kRAAkR;YACpQ,gBAAgB;YAWhB,aAAa;IAQ3B,OAAO,CAAC,YAAY;IAMpB;;;;;;;;;;;;;OAaG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqI5B;;;;;;;OAOG;YACW,UAAU;IAoBxB;;;;;;;;;;OAUG;YACW,aAAa;IA6G3B;;;;;;;;OAQG;YACW,QAAQ;IA0BtB,uJAAuJ;YACzI,iBAAiB;IAK/B;;;;;;;;;;;;;;;;OAgBG;YACW,0BAA0B;IASxC,uPAAuP;IACvP,OAAO,CAAC,aAAa;IAgBrB;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B,oHAAoH;IAC9G,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,oEAAoE;IACpE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4FAA4F;IAC5F,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,2JAA2J;IAC3J,IAAI,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAEnC;IAED,oJAAoJ;IACpJ,IAAI,iBAAiB,IAAI,aAAa,CAAC,MAAM,CAAC,CAE7C;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAWxC,0HAA0H;IAC1H,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIrC,OAAO,CAAC,aAAa;IAOrB;;;;;;;;;;;;OAYG;IACG,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;IAUvC,6HAA6H;IACvH,IAAI,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAKjD,uHAAuH;IACjH,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3E,OAAO,CAAC,YAAY;CASrB"}