rightsize 0.1.2 → 0.3.0

package/dist/core/cleanup.d.ts

@@ -1,7 +1,12 @@
 /**
  * Best-effort exit-path cleanup — the JVM-shutdown-hook / Rust-cleanup-
  * thread analog for a process that dies (or is asked to die) before its
- * `await using` scopes unwind normally.
+ * `await using` scopes unwind normally. Doubles as the process-local
+ * registry of currently running containers the failure-diagnostics report
+ * (`diagnostics.ts`) reads from — one live-container registry, not two: a
+ * container is registered here the instant `GenericContainer.start()`
+ * confirms it booted, and deregistered the instant `stop()` tears it down,
+ * which is exactly the "currently running" window diagnostics needs too.
  *
  * Node's `process.on("exit", ...)` handler runs SYNCHRONOUSLY and cannot
  * `await` — by the time it fires, the event loop is already being torn
@@ -19,11 +24,21 @@
  * case, sweeping up `rz-<other-runid>-*` leftovers from a crashed prior
  * run.
  */
+import type { SandboxBackend, SandboxHandle } from "./backend.js";
 export type SyncCleanup = () => void;
-/** Registers a synchronous teardown for a live container, keyed by handle id. */
-export declare function registerSyncCleanup(handleId: string, cleanupFn: SyncCleanup): void;
-/** Unregisters a container's teardown once it has been stopped/removed normally. */
+/** Registers a synchronous teardown for a live container, keyed by handle id — and, by the same call, adds it to the live-container registry `liveContainers()` exposes. */
+export declare function registerSyncCleanup(handle: SandboxHandle, backend: SandboxBackend, cleanupFn: SyncCleanup): void;
+/** Unregisters a container's teardown once it has been stopped/removed normally — and removes it from the live-container registry. */
 export declare function unregisterSyncCleanup(handleId: string): void;
+/**
+ * The process-local registry of currently running containers — every
+ * container `registerSyncCleanup` currently holds, in start order. This is
+ * `diagnostics.ts`'s data source; nothing else needs a second registry.
+ */
+export declare function liveContainers(): ReadonlyArray<{
+    readonly handle: SandboxHandle;
+    readonly backend: SandboxBackend;
+}>;
 /** Test seam: clears registered cleanups without running them. */
 export declare function _resetForTests(): void;
 /**

package/dist/core/cleanup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AA+CrC,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,CAGlF;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAqDrC,4KAA4K;AAC5K,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,CAGhH;AAED,sIAAsI;AACtI,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAEpH;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/core/cleanup.js

@@ -1,30 +1,9 @@
-/**
- * Best-effort exit-path cleanup — the JVM-shutdown-hook / Rust-cleanup-
- * thread analog for a process that dies (or is asked to die) before its
- * `await using` scopes unwind normally.
- *
- * Node's `process.on("exit", ...)` handler runs SYNCHRONOUSLY and cannot
- * `await` — by the time it fires, the event loop is already being torn
- * down, so a backend's real async `stop()`/`remove()` cannot run there.
- * Each backend therefore registers a synchronous, blocking teardown
- * function per live container (`child_process.spawnSync` for msb, a
- * blocking unix-socket DELETE for docker) instead of its normal async
- * path. This module only owns the REGISTRY and the process hooks; it has
- * no opinion on how any one backend tears a container down.
- *
- * This is a last-resort backstop, not the primary cleanup path — the
- * primary path is `GenericContainer.stop()` / `[Symbol.asyncDispose]`.
- * SIGKILL bypasses even this (no handler runs at all); the orphan reaper
- * each backend runs at startup (`sweepOrphans`) is the backstop for that
- * case, sweeping up `rz-<other-runid>-*` leftovers from a crashed prior
- * run.
- */
 const registered = new Map();
 let hooksInstalled = false;
 function runAll() {
-    for (const cleanupFn of registered.values()) {
+    for (const entry of registered.values()) {
         try {
-            cleanupFn();
+            entry.cleanup();
         }
         catch {
             // Best-effort: a failure to clean up one container must not block
@@ -60,15 +39,23 @@ function installHooksOnce() {
         });
     }
 }
-/** Registers a synchronous teardown for a live container, keyed by handle id. */
-export function registerSyncCleanup(handleId, cleanupFn) {
+/** Registers a synchronous teardown for a live container, keyed by handle id — and, by the same call, adds it to the live-container registry `liveContainers()` exposes. */
+export function registerSyncCleanup(handle, backend, cleanupFn) {
     installHooksOnce();
-    registered.set(handleId, cleanupFn);
+    registered.set(handle.id, { handle, backend, cleanup: cleanupFn });
 }
-/** Unregisters a container's teardown once it has been stopped/removed normally. */
+/** Unregisters a container's teardown once it has been stopped/removed normally — and removes it from the live-container registry. */
 export function unregisterSyncCleanup(handleId) {
     registered.delete(handleId);
 }
+/**
+ * The process-local registry of currently running containers — every
+ * container `registerSyncCleanup` currently holds, in start order. This is
+ * `diagnostics.ts`'s data source; nothing else needs a second registry.
+ */
+export function liveContainers() {
+    return Array.from(registered.values(), ({ handle, backend }) => ({ handle, backend }));
+}
 /** Test seam: clears registered cleanups without running them. */
 export function _resetForTests() {
     registered.clear();

package/dist/core/cleanup.js.map

@@ -1 +1 @@
-{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;AAClD,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,SAAS,MAAM;IACb,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IACD,cAAc,GAAG,IAAI,CAAC;IAEtB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,sEAAsE;IACtE,uEAAuE;IACvE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,SAAsB;IAC1E,gBAAgB,EAAE,CAAC;IACnB,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,CAAC;AACX,CAAC"}
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/core/cleanup.ts"],"names":[],"mappings":"AAoCA,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;AAC1D,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,SAAS,MAAM;IACb,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IACD,cAAc,GAAG,IAAI,CAAC;IAEtB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,sEAAsE;IACtE,uEAAuE;IACvE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,4KAA4K;AAC5K,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,OAAuB,EAAE,SAAsB;IACxG,gBAAgB,EAAE,CAAC;IACnB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,sIAAsI;AACtI,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,CAAC;AACX,CAAC"}

package/dist/core/diagnostics.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The failure-diagnostics report: every container this process currently has
+ * running (`cleanup.ts`'s live-container registry — populated on a
+ * successful `start()`, cleared on `stop()`), in start order — its image,
+ * state, host, mapped ports, and a bounded tail of its logs. Identical
+ * FORMAT to the Kotlin and Rust implementations (contract-tested against a
+ * golden fixture). A failing `logs()` call degrades to a one-line
+ * `logs: unavailable (<reason>)` instead of throwing, so one broken
+ * container's log fetch never hides the rest of the report. Every
+ * container's `logs()` call runs concurrently.
+ *
+ * A `keepAlive` (reuse) container is never in this registry — see
+ * `cleanup.ts`'s `registerSyncCleanup` call site — so it never appears in
+ * this report; it isn't torn down by this process anyway.
+ */
+export declare function diagnostics(): Promise<string>;
+/**
+ * The shape of a test framework's own failure-registration function —
+ * matches vitest's `onTestFailed` closely enough that passing the real
+ * thing typechecks (a callback accepting fewer parameters than the
+ * framework's own handler type is always assignable to it). No dependency
+ * on any particular test framework.
+ */
+export type FailureHook = (callback: () => void | Promise<void>) => void;
+/**
+ * Framework-neutral wiring for "print the full diagnostics report, once, to
+ * stderr, when a test fails." Pass a test framework's own failure-
+ * registration function — e.g. vitest's `onTestFailed` — and this registers
+ * a callback with it that runs `diagnostics()` and writes the result. See
+ * the [diagnostics guide](/guide/diagnostics) for the vitest wiring example.
+ */
+export declare function registerDiagnostics(onTestFailed: FailureHook, write?: (text: string) => void): void;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/core/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/core/diagnostics.ts"],"names":[],"mappings":"AA8CA;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAOnD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,WAAW,EACzB,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAExB,GACA,IAAI,CAEN"}

package/dist/core/diagnostics.js

@@ -0,0 +1,76 @@
+import { liveContainers } from "./cleanup.js";
+/** Bounded log tail: matches the cross-language contract (Kotlin/Rust `diagnostics` report the same tail length). */
+const LOG_TAIL_LINES = 50;
+function formatPorts(spec) {
+    if (spec.ports.length === 0) {
+        return "(none)";
+    }
+    return spec.ports.map((p) => `${p.guestPort}->${p.hostPort}`).join(", ");
+}
+/** The last `n` lines of `raw`, dropping one trailing empty element from a final newline (never a real blank log line otherwise). */
+function tailLines(raw, n) {
+    const lines = raw.split("\n");
+    if (lines.length > 0 && lines[lines.length - 1] === "") {
+        lines.pop();
+    }
+    return lines.slice(-n);
+}
+function reasonOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Every entry in the live-container registry is, by construction, currently
+ * running (see `cleanup.ts`'s doc) — `state:` is therefore always
+ * `running`, never queried from the backend. `host` is always `127.0.0.1`
+ * per `GenericContainer.host`'s own invariant.
+ */
+async function renderContainer(handle, backend) {
+    const lines = [`-- ${handle.spec.name} (${handle.spec.image}) --`, `state: running   host: 127.0.0.1   ports: ${formatPorts(handle.spec)}`];
+    try {
+        const raw = await backend.logs(handle);
+        lines.push(`last ${LOG_TAIL_LINES} log lines:`);
+        for (const line of tailLines(raw, LOG_TAIL_LINES)) {
+            lines.push(`  ${line}`);
+        }
+    }
+    catch (err) {
+        lines.push(`logs: unavailable (${reasonOf(err)})`);
+    }
+    return lines.join("\n");
+}
+/**
+ * The failure-diagnostics report: every container this process currently has
+ * running (`cleanup.ts`'s live-container registry — populated on a
+ * successful `start()`, cleared on `stop()`), in start order — its image,
+ * state, host, mapped ports, and a bounded tail of its logs. Identical
+ * FORMAT to the Kotlin and Rust implementations (contract-tested against a
+ * golden fixture). A failing `logs()` call degrades to a one-line
+ * `logs: unavailable (<reason>)` instead of throwing, so one broken
+ * container's log fetch never hides the rest of the report. Every
+ * container's `logs()` call runs concurrently.
+ *
+ * A `keepAlive` (reuse) container is never in this registry — see
+ * `cleanup.ts`'s `registerSyncCleanup` call site — so it never appears in
+ * this report; it isn't torn down by this process anyway.
+ */
+export async function diagnostics() {
+    const entries = liveContainers();
+    if (entries.length === 0) {
+        return "== rightsize diagnostics: no running containers ==";
+    }
+    const blocks = await Promise.all(entries.map(({ handle, backend }) => renderContainer(handle, backend)));
+    return `== rightsize diagnostics: ${entries.length} running container(s) ==\n${blocks.join("\n")}`;
+}
+/**
+ * Framework-neutral wiring for "print the full diagnostics report, once, to
+ * stderr, when a test fails." Pass a test framework's own failure-
+ * registration function — e.g. vitest's `onTestFailed` — and this registers
+ * a callback with it that runs `diagnostics()` and writes the result. See
+ * the [diagnostics guide](/guide/diagnostics) for the vitest wiring example.
+ */
+export function registerDiagnostics(onTestFailed, write = (text) => {
+    process.stderr.write(text);
+}) {
+    onTestFailed(() => diagnostics().then((text) => write(`${text}\n`)));
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/core/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/core/diagnostics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,qHAAqH;AACrH,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,SAAS,WAAW,CAAC,IAA2B;IAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,qIAAqI;AACrI,SAAS,SAAS,CAAC,GAAW,EAAE,CAAS;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACvD,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,MAAqB,EAAE,OAAuB;IAC3E,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,6CAA6C,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,cAAc,aAAa,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,6BAA6B,OAAO,CAAC,MAAM,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACrG,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAyB,EACzB,QAAgC,CAAC,IAAY,EAAE,EAAE;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/core/errors.d.ts

@@ -48,4 +48,101 @@ export declare class BackendError extends Error {
 export declare class ProvisionError extends Error {
     constructor(message: string);
 }
+/**
+ * Thrown at `start()` when a container is both marked `withReuse()` and
+ * joined to a `Network` via `withNetwork()` — reuse's identity hash covers
+ * only the container's own spec, never cross-container network topology, so
+ * an adopted sandbox from an earlier process could never be correctly
+ * re-linked to today's siblings. Thrown only once reuse is actually double
+ * opt-in active (API marker AND `RIGHTSIZE_REUSE`); an API-marked-but-env-
+ * disabled container never reaches this check; the whole start() attempt is
+ * still aborted before any port allocation, ledger tracking, or backend call.
+ */
+export declare class ReuseWithNetworkError extends Error {
+    constructor();
+}
+/**
+ * Thrown at `start()` when a container is marked `withRequireIsolation()`
+ * but the active backend's `capabilities.hardwareIsolated` is `false` — the
+ * docker fallback shares the host kernel and cannot provide the
+ * hardware-virtualized isolation the caller demanded. Thrown before any
+ * create/network work: no sandbox is created.
+ */
+export declare class IsolationRequiredError extends Error {
+    /** The active backend's name (e.g. `"docker"`). */
+    readonly backend: string;
+    constructor(
+    /** The active backend's name (e.g. `"docker"`). */
+    backend: string);
+}
+/**
+ * Thrown by `checkpoint()` when the active backend's
+ * `capabilities.checkpoint` is `false` — both real backends (docker, image
+ * commit; microsandbox, disk snapshot) support it today, so this only fires
+ * against a backend that genuinely lacks the capability (a test double).
+ * Thrown before any backend call: the generic layer gates on the capability
+ * itself rather than letting the backend's own `createCheckpoint` reject.
+ */
+export declare class CheckpointUnsupportedError extends Error {
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    readonly backend: string;
+    constructor(
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    backend: string);
+}
+/**
+ * Thrown by `GenericContainer.fromCheckpoint(cp).start()` when the active
+ * backend's name doesn't match the backend that created `cp` — a checkpoint
+ * ref is only meaningful to the backend that minted it (a docker image tag
+ * means nothing to `msb`, and a msb snapshot name means nothing to docker).
+ * Thrown before any backend call.
+ */
+export declare class CheckpointBackendMismatchError extends Error {
+    /** The backend that created the checkpoint. */
+    readonly createdOnBackend: string;
+    /** The backend `start()` actually resolved. */
+    readonly activeBackend: string;
+    constructor(
+    /** The backend that created the checkpoint. */
+    createdOnBackend: string, 
+    /** The backend `start()` actually resolved. */
+    activeBackend: string);
+}
+/**
+ * Thrown at `start()` when a container built via `GenericContainer.fromCheckpoint()`
+ * is also marked `withReuse()` — reuse's identity hash never covers
+ * `checkpointRef`, so an adopted sandbox from an earlier process could never
+ * be verified against the checkpoint this container was meant to restore.
+ * Thrown only once reuse is actually double opt-in active, the same
+ * placement as `ReuseWithNetworkError`.
+ */
+export declare class ReuseFromCheckpointError extends Error {
+    constructor();
+}
+/**
+ * Thrown by `copyFileToContainer`/`copyContentToContainer`/
+ * `copyFileFromContainer` when `containerPath` is not absolute — both
+ * backends require an absolute `NAME:/path` shape, so a relative path can
+ * never reach either CLI. Thrown before any backend call.
+ */
+export declare class RelativeContainerPathError extends Error {
+    /** The rejected path, exactly as passed in. */
+    readonly containerPath: string;
+    constructor(
+    /** The rejected path, exactly as passed in. */
+    containerPath: string);
+}
+/**
+ * Thrown by `checkpoint(name)` when `name` doesn't match
+ * `^[a-z0-9][a-z0-9-]{0,40}$` — the same pattern pinned across every
+ * rightsize language implementation. Thrown before any backend or
+ * filesystem call, so a bad name never mints a ref or touches the registry.
+ */
+export declare class InvalidCheckpointNameError extends Error {
+    /** The rejected name, exactly as passed in. */
+    readonly checkpointName: string;
+    constructor(
+    /** The rejected name, exactly as passed in. */
+    checkpointName: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAEhD,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;;IALxB,uDAAuD;IAC9C,OAAO,EAAE,MAAM;IACxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;IACxB,qFAAqF;IAC5E,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAFxB,OAAO,EAAE,MAAM;IACf,4FAA4F;IACnF,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,8EAA8E;AAC9E,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,kIAAkI;AAClI,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAEhD,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;;IALxB,uDAAuD;IAC9C,OAAO,EAAE,MAAM;IACxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;IACxB,qFAAqF;IAC5E,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAFxB,OAAO,EAAE,MAAM;IACf,4FAA4F;IACnF,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,8EAA8E;AAC9E,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,kIAAkI;AAClI,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;;CAS/C;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM;;IADxB,mDAAmD;IAC1C,OAAO,EAAE,MAAM;CAS3B;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,MAAM;;IADxB,yDAAyD;IAChD,OAAO,EAAE,MAAM;CAQ3B;AAED;;;;;;GAMG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IAErD,+CAA+C;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM;;IAH9B,+CAA+C;IACtC,gBAAgB,EAAE,MAAM;IACjC,+CAA+C;IACtC,aAAa,EAAE,MAAM;CASjC;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;;CASlD;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM;;IAD9B,+CAA+C;IACtC,aAAa,EAAE,MAAM;CAKjC;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM;;IAD/B,+CAA+C;IACtC,cAAc,EAAE,MAAM;CASlC"}

package/dist/core/errors.js

@@ -63,4 +63,133 @@ export class ProvisionError extends Error {
         this.name = "ProvisionError";
     }
 }
+/**
+ * Thrown at `start()` when a container is both marked `withReuse()` and
+ * joined to a `Network` via `withNetwork()` — reuse's identity hash covers
+ * only the container's own spec, never cross-container network topology, so
+ * an adopted sandbox from an earlier process could never be correctly
+ * re-linked to today's siblings. Thrown only once reuse is actually double
+ * opt-in active (API marker AND `RIGHTSIZE_REUSE`); an API-marked-but-env-
+ * disabled container never reaches this check; the whole start() attempt is
+ * still aborted before any port allocation, ledger tracking, or backend call.
+ */
+export class ReuseWithNetworkError extends Error {
+    constructor() {
+        super("withReuse() cannot be combined with withNetwork() — reuse's identity hash does not cover network " +
+            "topology, so an adopted sandbox could not be correctly re-linked to today's siblings. Drop either " +
+            "withReuse() or withNetwork() on this container.");
+        this.name = "ReuseWithNetworkError";
+    }
+}
+/**
+ * Thrown at `start()` when a container is marked `withRequireIsolation()`
+ * but the active backend's `capabilities.hardwareIsolated` is `false` — the
+ * docker fallback shares the host kernel and cannot provide the
+ * hardware-virtualized isolation the caller demanded. Thrown before any
+ * create/network work: no sandbox is created.
+ */
+export class IsolationRequiredError extends Error {
+    backend;
+    constructor(
+    /** The active backend's name (e.g. `"docker"`). */
+    backend) {
+        super(`withRequireIsolation() demands hardware-virtualized isolation, but the active backend ('${backend}') ` +
+            "does not provide it — set RIGHTSIZE_BACKEND=microsandbox to use the microsandbox backend, or drop " +
+            "withRequireIsolation() to accept the docker fallback's shared-kernel isolation.");
+        this.backend = backend;
+        this.name = "IsolationRequiredError";
+    }
+}
+/**
+ * Thrown by `checkpoint()` when the active backend's
+ * `capabilities.checkpoint` is `false` — both real backends (docker, image
+ * commit; microsandbox, disk snapshot) support it today, so this only fires
+ * against a backend that genuinely lacks the capability (a test double).
+ * Thrown before any backend call: the generic layer gates on the capability
+ * itself rather than letting the backend's own `createCheckpoint` reject.
+ */
+export class CheckpointUnsupportedError extends Error {
+    backend;
+    constructor(
+    /** The active backend's name (e.g. `"microsandbox"`). */
+    backend) {
+        super(`checkpoint() is not supported by the '${backend}' backend — checkpointing needs a backend whose ` +
+            "capabilities.checkpoint is true.");
+        this.backend = backend;
+        this.name = "CheckpointUnsupportedError";
+    }
+}
+/**
+ * Thrown by `GenericContainer.fromCheckpoint(cp).start()` when the active
+ * backend's name doesn't match the backend that created `cp` — a checkpoint
+ * ref is only meaningful to the backend that minted it (a docker image tag
+ * means nothing to `msb`, and a msb snapshot name means nothing to docker).
+ * Thrown before any backend call.
+ */
+export class CheckpointBackendMismatchError extends Error {
+    createdOnBackend;
+    activeBackend;
+    constructor(
+    /** The backend that created the checkpoint. */
+    createdOnBackend, 
+    /** The backend `start()` actually resolved. */
+    activeBackend) {
+        super(`this checkpoint was created on the '${createdOnBackend}' backend but the active backend is ` +
+            `'${activeBackend}' — set RIGHTSIZE_BACKEND=${createdOnBackend} to restore it there, or create a fresh ` +
+            `checkpoint under the '${activeBackend}' backend instead.`);
+        this.createdOnBackend = createdOnBackend;
+        this.activeBackend = activeBackend;
+        this.name = "CheckpointBackendMismatchError";
+    }
+}
+/**
+ * Thrown at `start()` when a container built via `GenericContainer.fromCheckpoint()`
+ * is also marked `withReuse()` — reuse's identity hash never covers
+ * `checkpointRef`, so an adopted sandbox from an earlier process could never
+ * be verified against the checkpoint this container was meant to restore.
+ * Thrown only once reuse is actually double opt-in active, the same
+ * placement as `ReuseWithNetworkError`.
+ */
+export class ReuseFromCheckpointError extends Error {
+    constructor() {
+        super("withReuse() cannot be combined with fromCheckpoint() — reuse's identity hash does not cover " +
+            "checkpointRef, so an adopted sandbox could never be verified against the checkpoint it was meant to " +
+            "restore. Drop either withReuse() or fromCheckpoint().");
+        this.name = "ReuseFromCheckpointError";
+    }
+}
+/**
+ * Thrown by `copyFileToContainer`/`copyContentToContainer`/
+ * `copyFileFromContainer` when `containerPath` is not absolute — both
+ * backends require an absolute `NAME:/path` shape, so a relative path can
+ * never reach either CLI. Thrown before any backend call.
+ */
+export class RelativeContainerPathError extends Error {
+    containerPath;
+    constructor(
+    /** The rejected path, exactly as passed in. */
+    containerPath) {
+        super(`containerPath must be an absolute path (got '${containerPath}') — both backends require an absolute guest path.`);
+        this.containerPath = containerPath;
+        this.name = "RelativeContainerPathError";
+    }
+}
+/**
+ * Thrown by `checkpoint(name)` when `name` doesn't match
+ * `^[a-z0-9][a-z0-9-]{0,40}$` — the same pattern pinned across every
+ * rightsize language implementation. Thrown before any backend or
+ * filesystem call, so a bad name never mints a ref or touches the registry.
+ */
+export class InvalidCheckpointNameError extends Error {
+    checkpointName;
+    constructor(
+    /** The rejected name, exactly as passed in. */
+    checkpointName) {
+        super(`checkpoint name '${checkpointName}' is invalid — a checkpoint name must match ^[a-z0-9][a-z0-9-]{0,40}$ ` +
+            "(start with a lowercase letter or digit, contain only lowercase letters, digits, and hyphens after " +
+            "that, and be at most 41 characters long).");
+        this.checkpointName = checkpointName;
+        this.name = "InvalidCheckpointNameError";
+    }
+}
 //# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGvC;IAEA;IAEA;IANX;IACE,uDAAuD;IAC9C,OAAe;IACxB,yDAAyD;IAChD,OAAe;IACxB,qFAAqF;IAC5E,MAAe;QAExB,KAAK,CAAC,YAAY,OAAO,8BAA8B,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QANjG,YAAO,GAAP,OAAO,CAAQ;QAEf,YAAO,GAAP,OAAO,CAAQ;QAEf,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAInC;IAHX,YACE,OAAe;IACf,4FAA4F;IACnF,KAAe;QAExB,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAFnD,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,kIAAkI;AAClI,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGvC;IAEA;IAEA;IANX;IACE,uDAAuD;IAC9C,OAAe;IACxB,yDAAyD;IAChD,OAAe;IACxB,qFAAqF;IAC5E,MAAe;QAExB,KAAK,CAAC,YAAY,OAAO,8BAA8B,OAAO,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QANjG,YAAO,GAAP,OAAO,CAAQ;QAEf,YAAO,GAAP,OAAO,CAAQ;QAEf,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAInC;IAHX,YACE,OAAe;IACf,4FAA4F;IACnF,KAAe;QAExB,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAFnD,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,kIAAkI;AAClI,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CACH,mGAAmG;YACjG,oGAAoG;YACpG,iDAAiD,CACpD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGpC;IAFX;IACE,mDAAmD;IAC1C,OAAe;QAExB,KAAK,CACH,2FAA2F,OAAO,KAAK;YACrG,oGAAoG;YACpG,iFAAiF,CACpF,CAAC;QANO,YAAO,GAAP,OAAO,CAAQ;QAOxB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGxC;IAFX;IACE,yDAAyD;IAChD,OAAe;QAExB,KAAK,CACH,yCAAyC,OAAO,kDAAkD;YAChG,kCAAkC,CACrC,CAAC;QALO,YAAO,GAAP,OAAO,CAAQ;QAMxB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAG5C;IAEA;IAJX;IACE,+CAA+C;IACtC,gBAAwB;IACjC,+CAA+C;IACtC,aAAqB;QAE9B,KAAK,CACH,uCAAuC,gBAAgB,sCAAsC;YAC3F,IAAI,aAAa,6BAA6B,gBAAgB,0CAA0C;YACxG,yBAAyB,aAAa,oBAAoB,CAC7D,CAAC;QARO,qBAAgB,GAAhB,gBAAgB,CAAQ;QAExB,kBAAa,GAAb,aAAa,CAAQ;QAO9B,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CACH,8FAA8F;YAC5F,sGAAsG;YACtG,uDAAuD,CAC1D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGxC;IAFX;IACE,+CAA+C;IACtC,aAAqB;QAE9B,KAAK,CAAC,gDAAgD,aAAa,oDAAoD,CAAC,CAAC;QAFhH,kBAAa,GAAb,aAAa,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGxC;IAFX;IACE,+CAA+C;IACtC,cAAsB;QAE/B,KAAK,CACH,oBAAoB,cAAc,wEAAwE;YACxG,qGAAqG;YACrG,2CAA2C,CAC9C,CAAC;QANO,mBAAc,GAAd,cAAc,CAAQ;QAO/B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF"}