rightsize 0.1.2 → 0.3.0

package/dist/core/generic-container.d.ts

@@ -2,7 +2,7 @@ import { Network } from "./network.js";
 import type { NetworkMember } from "./network.js";
 import type { WaitStrategy } from "./wait.js";
 import type { SandboxBackend, FollowHandle } from "./backend.js";
-import type { ContainerSpec, ExecResult } from "./model.js";
+import type { ContainerSpec, ExecResult, Checkpoint } from "./model.js";
 import type { MountableFile } from "./mountable-file.js";
 /**
  * The builder, launcher, and lifecycle guard for a single container — the
@@ -33,14 +33,36 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     private waitStrategy;
     private memoryLimitMb;
     private backendOverride;
+    private reuseRequested;
+    private requireIsolationRequested;
+    private checkpointRef;
+    private checkpointSourceBackend;
     private handle;
     private backend;
     private mappedPorts;
     private running;
+    private installedNetworkLinks;
     /** Builds against `image` (e.g. `"redis:8.6-alpine"`); no I/O happens until `start()`. */
     constructor(image: string);
     /** Convenience: `new GenericContainer(image).start()`. */
     static start(image: string): Promise<GenericContainer>;
+    /**
+     * Builds a normal, ephemeral `GenericContainer` from a `Checkpoint`
+     * (`checkpoint()`'s return value): image is `cp.ref`, and
+     * env/command/exposed ports/memory limit default to `cp.spec` — chain
+     * further builder calls (a different `waitingFor`, `withBackend`, …)
+     * before `start()`, the same as any other container. Never carries over
+     * `cp.spec`'s network/aliases/mounts — the captured state already has the
+     * filesystem baked in, and (as with `withReuse()`'s own network
+     * restriction) network topology is never part of what a checkpoint
+     * captures. `start()` throws `CheckpointBackendMismatchError` before any
+     * backend call if the active backend isn't the one that created `cp`, and
+     * `ReuseFromCheckpointError` if this container is also marked
+     * `withReuse()` — reuse's identity hash never covers a checkpoint ref.
+     * Once started, a restored container is ordinary in every other respect:
+     * fresh host ports, normal reaping-ledger tracking, normal stop.
+     */
+    static fromCheckpoint(cp: Checkpoint): GenericContainer;
     /** Sets an environment variable visible to the workload. Last-write-wins if called again with the same key; insertion order is otherwise preserved. */
     withEnv(key: string, value: string): this;
     /** Publishes these guest ports to pre-allocated host ports (see `FreePorts`); read back with `getMappedPort`. */
@@ -59,6 +81,26 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     withMemoryLimit(megabytes: number): this;
     /** Test/advanced seam: pin the backend instead of resolving `Backends.active()`. */
     withBackend(backend: SandboxBackend): this;
+    /**
+     * Marks this container for reuse: survive process exit and be ADOPTED —
+     * not re-created — by the next equivalent container's `start()`, in this
+     * process or a later one. Double opt-in: this API marker alone does
+     * nothing unless `RIGHTSIZE_REUSE` is also `"true"` or `"1"` at `start()`
+     * time. Marked-but-not-enabled starts as an ordinary ephemeral container
+     * (Testcontainers semantics), with a one-time stderr note. See the
+     * [reuse guide](/guide/reuse) for identity rules, the network
+     * restriction, and manual cleanup.
+     */
+    withReuse(): this;
+    /**
+     * Demands hardware-virtualized isolation: `start()` throws
+     * `IsolationRequiredError` before any create/network work if the active
+     * backend's `capabilities.hardwareIsolated` is `false` (the docker
+     * fallback, which shares the host kernel), instead of silently degrading.
+     * Use for tests that run untrusted code. See the
+     * [isolation guide](/guide/isolation).
+     */
+    withRequireIsolation(): this;
     /** Module hook: override to adjust the spec once mapped host ports are known (e.g. advertised listeners). */
     protected customizeSpec(spec: ContainerSpec, _mapped: (guest: number) => number): ContainerSpec;
     /** Module hook: runs after the container is ready (e.g. `rs.initiate` for a Mongo replica set). */
@@ -84,6 +126,10 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     protected currentBackend(): SandboxBackend;
     private resolveBackend;
     private buildSpec;
+    /** The reuse-active counterpart of `buildSpec`: always `keepAlive: true`, named `rz-reuse-<hash12>` rather than the run-scoped `rz-<runId>-<seq>`, and never joined to a `Network` (rejected earlier in `start()`). */
+    private buildReuseSpec;
+    /** This container's reuse identity hash — the reuse-relevant subset of its builder state, hashed per `reuseHash`'s canonical form. Reads every `withCopyFileToContainer` source file's CURRENT content, so a mutated source file between two `start()` calls changes identity. */
+    private computeReuseHash;
     private allocatePorts;
     private releasePorts;
     /**
@@ -101,6 +147,59 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
      * allocate-then-bind race to an unrelated process.
      */
     start(): Promise<this>;
+    /**
+     * The reuse-active start path — an entirely separate flow from the
+     * ephemeral one above, never joining `MAX_START_ATTEMPTS`'s port-conflict
+     * retry loop, the ledger, or the sync-cleanup registry (all deliberate:
+     * see `withReuse()`'s own doc and the reaping addendum). Computes this
+     * container's identity hash, then adopts an existing sandbox or creates a
+     * fresh one under the deterministic `rz-reuse-<hash12>` name.
+     */
+    private startReuse;
+    /**
+     * Reads the registry once and either adopts (registry hit, running,
+     * wait ok) or falls through to a fresh create — see the reuse spec's own
+     * "Start flow when reuse is active" for the full state table this
+     * implements. `isRetry` caps the name-collision recursion at one retry
+     * (`adoptOrCreate` re-enters itself exactly once, from the create/start
+     * failure branch below): "another process won the race" is expected to
+     * resolve within one retry (by then its own registry write has very
+     * likely landed); anything still colliding after that is a genuine
+     * failure, not a race, and propagates.
+     */
+    private adoptOrCreate;
+    /**
+     * Registry hit → verify: confirm the name is actually running (backend
+     * query, never trusted from the file alone), then re-run this
+     * container's OWN wait strategy against the recorded ports — a running
+     * sandbox that never became ready for THIS workload is exactly as
+     * unadoptable as one that isn't running at all. `undefined` means adopt
+     * failed for any reason (not running, or the wait failed); the caller's
+     * best-effort cleanup already ran by the time this returns.
+     */
+    private tryAdopt;
+    /** Best-effort: remove whatever's running under `name` (by name — this call never held a handle for it) and delete the registry file. Never throws. */
+    private cleanupStaleReuse;
+    /**
+     * The crash-mid-boot-orphan guard for the "no registry entry at all"
+     * fresh-create path: confirms with the backend whether `name` is actually
+     * running BEFORE this container's own create() attempt, and only then
+     * best-effort-removes it — never a blind `removeByName` the way
+     * `cleanupStaleReuse` above does for the corrupt/failed-verification
+     * cases, where a registry entry (however stale) already proved something
+     * about this identity once existed. Here nothing has ever proved that, so
+     * the common empty-cache case (nothing running) pays no removal call at
+     * all, and a concurrent creator that's already past ITS OWN create()-and-
+     * register cycle by the time this runs is instead caught by the
+     * name-collision-retry-into-adopt path below (a registry entry appearing
+     * for it means that process won the race — adopt, don't remove). The spec
+     * handed to `findRunning` here is a throwaway: any exposed ports serve
+     * only to satisfy `ContainerSpec`'s shape, since every backend's
+     * `findRunning` matches on `spec.name` alone.
+     */
+    private removeOrphanedRunningReuse;
+    /** The `WaitTarget` for a specific (backend, handle, ports) triple, independent of this instance's own `this.handle`/`this.backend`/`this.mappedPorts` — needed because reuse's adopt-verification wait runs BEFORE those fields are ever assigned. */
+    private waitTargetFor;
     /**
      * Stops and removes the backend-native resource, releases its host ports,
      * and clears the port map. Idempotent — stopping a container that never
@@ -129,6 +228,82 @@ export declare class GenericContainer implements AsyncDisposable, NetworkMember
     /** Alias for `getMappedPort`, satisfying the `NetworkMember`/`WaitTarget` shape (which name this method `mappedPort`). */
     mappedPort(guestPort: number): number;
     private requireHandle;
+    /**
+     * Captures this running container's state and returns a `Checkpoint` — a
+     * FILESYSTEM capture, not a memory snapshot: `fromCheckpoint()` boots a
+     * container from the captured state with processes restarting from
+     * scratch, not resuming. Requires the active backend's
+     * `capabilities.checkpoint` (`true` on both real backends today: docker
+     * via image commit, microsandbox via disk snapshot) — checked BEFORE any
+     * backend call, so an unsupported backend never attempts one. Throws a
+     * state error (same shape as `exec`/`logs`) if this container isn't
+     * currently running.
+     *
+     * Passing `name` makes this checkpoint NAMED and durable: the ref becomes
+     * deterministic (`rz-ckpt-<name>` / `rightsize/checkpoint:<name>` instead
+     * of a random 12-hex suffix), and — only once the backend call below has
+     * actually succeeded — a registry entry is written under
+     * `<cacheDir>/checkpoints/<name>.json` that `Checkpoints.find`/`list`/
+     * `remove` can rediscover later, in this process or a different one. `name`
+     * must match `^[a-z0-9][a-z0-9-]{0,40}$`; an invalid name throws
+     * `InvalidCheckpointNameError` before any backend call. Checkpointing under
+     * a name that already has a registry entry REPLACES it: the ref is the
+     * same deterministic value either way, so this best-effort clears the old
+     * artifact under that ref before creating the new one, then overwrites the
+     * registry entry — the latest checkpoint under a name always wins.
+     * Omitting `name` keeps the original behavior byte-for-byte: a random ref,
+     * no registry entry, ephemeral.
+     *
+     * On a backend whose `capabilities.checkpointRestartsWorkload` is `true`
+     * (microsandbox: the stop/snapshot/reboot cycle boots a fresh microVM),
+     * this re-runs the container's own wait strategy before returning — a bare
+     * return right after the backend call would hand back a false-ready
+     * container. docker's commit-to-image never disturbs the running
+     * container, so no re-wait happens there.
+     *
+     * That same reboot also kills any network links this container had
+     * installed toward already-running siblings (msb emulates them with
+     * exec-tunnels, which the workload restart tears down along with
+     * everything else on the sandbox), so when links were installed in the
+     * first place, this re-runs `installNetworkLinks` with those same links
+     * BEFORE the wait-strategy re-run — the wait must gate a container that is
+     * fully re-linked, not just booted.
+     *
+     * Checkpoints are never auto-reaped (a committed image or a disk snapshot
+     * is not a container) — see the checkpoints guide for the manual cleanup
+     * one-liners and the `Checkpoints.remove` cleanup affordance.
+     */
+    checkpoint(name?: string): Promise<Checkpoint>;
+    /**
+     * Copies a host file or directory into this running container at
+     * `containerPath`, creating the destination's parent directory first
+     * (`exec: mkdir -p <parent>`) — callers never pre-create directories on
+     * either side. `containerPath` must be absolute (both backends' own copy
+     * tools require `NAME:/abs/path`); `hostPath` may be a file or a
+     * directory, `cp -r`-style: copying a directory to an absent destination
+     * produces that destination as a copy of the source's CONTENTS, not the
+     * source nested one level down. Requires a running container — throws the
+     * same state error `exec()`/`logs()` do, before any backend call. Works on
+     * a reuse container too, but the copy mutates shared state that is NOT
+     * part of the reuse identity hash — see the reuse guide's caveat.
+     */
+    copyFileToContainer(hostPath: string, containerPath: string): Promise<void>;
+    /**
+     * Convenience over `copyFileToContainer()`: writes `content` to a private
+     * (mode `0600`) temp file and copies THAT file in, removing the temp file
+     * afterward regardless of outcome. No streaming protocol — content is
+     * always fully materialized on host disk before the copy.
+     */
+    copyContentToContainer(content: string | Uint8Array, containerPath: string): Promise<void>;
+    /**
+     * Copies a file or directory OUT of this running container at
+     * `containerPath` to `hostPath`, creating the destination's host parent
+     * directory first via the standard library — the mirror image of
+     * `copyFileToContainer`'s guest-side `mkdir -p`. `containerPath` must be
+     * absolute; `cp -r`-style destination naming applies here too. Requires a
+     * running container, like `copyFileToContainer`.
+     */
+    copyFileFromContainer(containerPath: string, hostPath: string): Promise<void>;
     /** Runs a one-shot command inside the running container and waits for it to exit. Throws if the container is not running. */
     exec(...cmd: string[]): Promise<ExecResult>;
     /** Fetches the workload's logs so far (a bounded tail), as a single string. Throws if the container is not running. */

package/dist/core/generic-container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic-container.d.ts","sourceRoot":"","sources":["../../src/core/generic-container.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,WAAW,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAiB,YAAY,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAa,UAAU,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAyCzD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,YAAW,eAAe,EAAE,aAAa;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,eAAe,CAA6B;IAEpD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,OAAO,CAAS;IAExB,0FAA0F;gBAC9E,KAAK,EAAE,MAAM;IAIzB,0DAA0D;WAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D,uJAAuJ;IACvJ,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASzC,iHAAiH;IACjH,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK1C,yGAAyG;IACzG,WAAW,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI;IAKnC,sGAAsG;IACtG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAK/B,qHAAqH;IACrH,kBAAkB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK5C,uMAAuM;IACvM,uBAAuB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrE,2GAA2G;IAC3G,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAKxC,8JAA8J;IAC9J,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxC,oFAAoF;IACpF,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAK1C,6GAA6G;IAC7G,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,aAAa;IAI/F,mGAAmG;IACnG,SAAS,CAAC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;;;;OAQG;IACH,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,cAAc;IAI1C,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,SAAS;YA2BH,aAAa;IAQ3B,OAAO,CAAC,YAAY;IAMpB;;;;;;;;;;;;;OAaG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgF5B;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,oHAAoH;IAC9G,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,oEAAoE;IACpE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4FAA4F;IAC5F,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,2JAA2J;IAC3J,IAAI,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAEnC;IAED,oJAAoJ;IACpJ,IAAI,iBAAiB,IAAI,aAAa,CAAC,MAAM,CAAC,CAE7C;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAWxC,0HAA0H;IAC1H,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIrC,OAAO,CAAC,aAAa;IAOrB,6HAA6H;IACvH,IAAI,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAKjD,uHAAuH;IACjH,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3E,OAAO,CAAC,YAAY;CASrB"}
+{"version":3,"file":"generic-container.d.ts","sourceRoot":"","sources":["../../src/core/generic-container.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAelD,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,WAAW,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAiB,YAAY,EAAe,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,aAAa,EAAa,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwEzD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAiB,YAAW,eAAe,EAAE,aAAa;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,YAAY,CAAyC;IAC7D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,uBAAuB,CAAqB;IAEpD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,qBAAqB,CAAkC;IAE/D,0FAA0F;gBAC9E,KAAK,EAAE,MAAM;IAIzB,0DAA0D;WAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB;IAmBvD,uJAAuJ;IACvJ,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASzC,iHAAiH;IACjH,gBAAgB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK1C,yGAAyG;IACzG,WAAW,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI;IAKnC,sGAAsG;IACtG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAK/B,qHAAqH;IACrH,kBAAkB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK5C,uMAAuM;IACvM,uBAAuB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrE,2GAA2G;IAC3G,UAAU,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAKxC,8JAA8J;IAC9J,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxC,oFAAoF;IACpF,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAK1C;;;;;;;;;OASG;IACH,SAAS,IAAI,IAAI;IAKjB;;;;;;;OAOG;IACH,oBAAoB,IAAI,IAAI;IAK5B,6GAA6G;IAC7G,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,aAAa;IAI/F,mGAAmG;IACnG,SAAS,CAAC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;;;;OAQG;IACH,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;;;;;OAOG;IACH,SAAS,CAAC,cAAc,IAAI,cAAc;IAI1C,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,SAAS;IAiCjB,uNAAuN;IACvN,OAAO,CAAC,cAAc;IAgCtB,kRAAkR;YACpQ,gBAAgB;YAWhB,aAAa;IAQ3B,OAAO,CAAC,YAAY;IAMpB;;;;;;;;;;;;;OAaG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+I5B;;;;;;;OAOG;YACW,UAAU;IAoBxB;;;;;;;;;;OAUG;YACW,aAAa;IA6G3B;;;;;;;;OAQG;YACW,QAAQ;IA0BtB,uJAAuJ;YACzI,iBAAiB;IAK/B;;;;;;;;;;;;;;;;OAgBG;YACW,0BAA0B;IASxC,uPAAuP;IACvP,OAAO,CAAC,aAAa;IAgBrB;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B,oHAAoH;IAC9G,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,oEAAoE;IACpE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4FAA4F;IAC5F,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,2JAA2J;IAC3J,IAAI,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAEnC;IAED,oJAAoJ;IACpJ,IAAI,iBAAiB,IAAI,aAAa,CAAC,MAAM,CAAC,CAE7C;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAWxC,0HAA0H;IAC1H,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIrC,OAAO,CAAC,aAAa;IAOrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACG,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAsCpD;;;;;;;;;;;;OAYG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAajF;;;;;OAKG;IACG,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhG;;;;;;;OAOG;IACG,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnF,6HAA6H;IACvH,IAAI,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAKjD,uHAAuH;IACjH,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3E,OAAO,CAAC,YAAY;CASrB"}