run402-mcp 4.96.0 → 4.98.0

package/dist/sandbox-proxy.js

@@ -0,0 +1,504 @@
+/**
+ * The chain proxy: how a `run` snippet reaches the SDK without the SDK ever
+ * running inside the sandbox.
+ *
+ * Inside the sandbox, `r` is a recorder. A property access appends a `get`
+ * segment and a call appends a `call` segment with its arguments; nothing
+ * happens until the chain is awaited (its `then`, `catch`, or `finally` is
+ * read), at which point the chain crosses to the host as JSON. The host
+ * ({@link ChainHost}) replays it against the real client, built with
+ * `surface: "sandbox"`, awaiting every intermediate that is a promise:
+ *
+ *     r.project("prj_1").functions.list()
+ *       → get project → call ("prj_1") → get functions → get list → call ()
+ *
+ * The terminal value crosses back as JSON when it is JSON data. Anything else
+ * (a `ScopedRun402` from `await r.project()`, a deploy operation) crosses as an
+ * opaque handle that the recorder wraps again, so the snippet keeps chaining
+ * from it; handles die with the run.
+ *
+ * Arguments cross into the host only when they are structured-cloneable data
+ * (JSON values, `undefined`, `Date`, bytes, `Map`, `Set`, `BigInt`) or a handle.
+ * A function, a symbol, a class instance, a cyclic structure, or an un-awaited
+ * `r` chain is refused in the sandbox before anything is sent
+ * (`RUN_ARGUMENT_NOT_CLONEABLE`), which is also why a filesystem source such as
+ * a `LocalDirRef` cannot be expressed: `dir()` does not exist inside.
+ *
+ * The replay walks only the SDK's public surface. A property the SDK declares
+ * `private` or `protected` (read from the SDK's own declaration files), a name
+ * that starts with `_`, `constructor` / `prototype` / `__proto__`, and anything
+ * that resolves on a JavaScript intrinsic (`Object.prototype`,
+ * `Function.prototype`, `Array.prototype`, …) is refused, so a chain can reach
+ * neither the host's `Function` constructor nor the kernel client and its
+ * credential provider. Plain data returned by a call is navigable by its own
+ * properties only.
+ *
+ * Every dispatched chain is one entry in `calls[]` with its dotted path, its
+ * duration, and its outcome. An SDK error thrown during the replay crosses
+ * back with its own `code`, `message`, and `next_actions`, plus an
+ * `error_ref` that lets the `run` tool report the original error unchanged.
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { isRun402Error } from "../sdk/dist/index.js";
+/** `calls[]` entries retained per run. */
+export const CHAIN_MAX_CALLS = 200;
+/** The largest intermediate value one chain may carry back into the sandbox. */
+export const CHAIN_MAX_TRANSFER_BYTES = 16 * 1024 * 1024;
+/**
+ * The in-sandbox half: defines `r` and keeps the host's `dispatch` in its
+ * closure. Evaluated once per run by `runInSandbox`.
+ */
+const PROXY_INSTALL = String.raw `(function (host) {
+  "use strict";
+  const stringify = JSON.stringify;
+  const parse = JSON.parse;
+  const chains = new WeakMap();
+  const TAG = "__r402";
+
+  const label = (base, segments) => {
+    let out = base.path;
+    for (const s of segments) {
+      if (s.op === "get") out = out ? out + "." + s.key : s.key;
+      else out += "()";
+    }
+    return out || "r";
+  };
+
+  const notCloneable = (where, what) => {
+    const e = new TypeError(
+      "Argument " + where + " cannot cross into the host: " + what +
+      ". Pass structured-cloneable data to r (JSON values, undefined, Date, Uint8Array, Map, Set, BigInt) or a handle.",
+    );
+    e.code = "RUN_ARGUMENT_NOT_CLONEABLE";
+    return e;
+  };
+
+  const encode = (v, where, seen) => {
+    if (v === null || typeof v === "string" || typeof v === "boolean") return v;
+    if (typeof v === "number") return Number.isFinite(v) ? v : { [TAG]: { t: "number", v: String(v) } };
+    if (v === undefined) return { [TAG]: { t: "undefined" } };
+    if (typeof v === "bigint") return { [TAG]: { t: "bigint", v: String(v) } };
+    if (typeof v === "symbol") throw notCloneable(where, "a symbol");
+    if (typeof v === "function") {
+      const chain = chains.get(v);
+      if (!chain) throw notCloneable(where, "a function");
+      if (chain.segments.length > 0) throw notCloneable(where, "an r call that was not awaited (" + label(chain.base, chain.segments) + ")");
+      if (chain.base.id === "root") throw notCloneable(where, "r itself");
+      return { [TAG]: { t: "handle", v: chain.base.id } };
+    }
+    if (seen.has(v)) throw notCloneable(where, "a cyclic structure");
+    seen.add(v);
+    try {
+      if (Array.isArray(v)) return v.map((x, i) => encode(x, where + "[" + i + "]", seen));
+      if (v instanceof Date) return { [TAG]: { t: "date", v: v.getTime() } };
+      if (v instanceof ArrayBuffer) return { [TAG]: { t: "bytes", v: Array.from(new Uint8Array(v)) } };
+      if (ArrayBuffer.isView(v)) return { [TAG]: { t: "bytes", v: Array.from(new Uint8Array(v.buffer, v.byteOffset, v.byteLength)) } };
+      if (v instanceof Map) return { [TAG]: { t: "map", v: Array.from(v, ([k, x], i) => [encode(k, where + ".key" + i, seen), encode(x, where + ".get(" + i + ")", seen)]) } };
+      if (v instanceof Set) return { [TAG]: { t: "set", v: Array.from(v, (x, i) => encode(x, where + ".item" + i, seen)) } };
+      const proto = Object.getPrototypeOf(v);
+      if (proto !== Object.prototype && proto !== null) {
+        const name = proto && proto.constructor && typeof proto.constructor.name === "string" ? proto.constructor.name : "an object";
+        throw notCloneable(where, "an instance of " + name);
+      }
+      const out = {};
+      for (const k of Object.keys(v)) out[k] = encode(v[k], where + "." + k, seen);
+      return out;
+    } finally {
+      seen.delete(v);
+    }
+  };
+
+  const decode = (v) => {
+    if (Array.isArray(v)) return v.map(decode);
+    if (v && typeof v === "object") {
+      const keys = Object.keys(v);
+      if (keys.length === 1 && keys[0] === TAG) {
+        const t = v[TAG];
+        if (t.t === "bytes") return new Uint8Array(t.v);
+        if (t.t === "handle") return makeChain({ id: t.v, path: t.path }, []);
+        return undefined;
+      }
+      const out = {};
+      for (const k of keys) out[k] = decode(v[k]);
+      return out;
+    }
+    return v;
+  };
+
+  const makeError = (e) => {
+    const err = new Error(String(e.message));
+    err.name = String(e.name || "Error");
+    for (const k of ["code", "kind", "status", "next_actions", "details", "retryable", "error_ref"]) {
+      if (e[k] !== undefined && e[k] !== null) err[k] = e[k];
+    }
+    return err;
+  };
+
+  const send = (base, segments) =>
+    host.dispatch(stringify({ base: base.id, segments })).then((raw) => {
+      const res = parse(raw);
+      if (res.ok) return decode(res.value);
+      throw makeError(res.error);
+    });
+
+  const makeChain = (base, segments) => {
+    let sent = null;
+    const proxy = new Proxy(function () {}, {
+      get(_target, key) {
+        if (typeof key === "symbol") {
+          if (key === Symbol.toPrimitive) return () => "[r " + label(base, segments) + "]";
+          return undefined;
+        }
+        if (key === "then" || key === "catch" || key === "finally") {
+          // A bare handle is a value, not a promise.
+          if (segments.length === 0) return undefined;
+          if (!sent) sent = send(base, segments);
+          return (...a) => sent[key](...a);
+        }
+        if (key === "toJSON") return undefined;
+        return makeChain(base, [...segments, { op: "get", key }]);
+      },
+      apply(_target, _receiver, args) {
+        const where = label(base, segments);
+        const seen = new Set();
+        const encoded = args.map((a, i) => encode(a, where + " argument " + (i + 1), seen));
+        return makeChain(base, [...segments, { op: "call", args: encoded }]);
+      },
+      set() { return false; },
+      defineProperty() { return false; },
+      deleteProperty() { return false; },
+    });
+    chains.set(proxy, { base, segments });
+    return proxy;
+  };
+
+  Object.defineProperty(globalThis, "r", {
+    value: makeChain({ id: "root", path: "" }, []),
+    writable: false,
+    configurable: false,
+    enumerable: false,
+  });
+})`;
+// ─── what the replay may touch ───────────────────────────────────────────────
+const ALWAYS_REFUSED = new Set(["constructor", "prototype", "__proto__", "__defineGetter__", "__defineSetter__", "__lookupGetter__", "__lookupSetter__", "caller", "callee", "arguments"]);
+/** JavaScript's own prototypes: a property that resolves on one of these is never reachable. */
+const INTRINSIC_PROTOTYPES = new Set([
+    Object.prototype, Function.prototype, Array.prototype, String.prototype, Number.prototype, Boolean.prototype,
+    Symbol.prototype, BigInt.prototype, Date.prototype, RegExp.prototype, Error.prototype, Promise.prototype,
+    Map.prototype, Set.prototype, WeakMap.prototype, WeakSet.prototype, ArrayBuffer.prototype,
+    Object.getPrototypeOf(Uint8Array.prototype), Uint8Array.prototype, DataView.prototype,
+    Object.getPrototypeOf(async function () { }), Object.getPrototypeOf(function* () { }),
+    Object.getPrototypeOf(async function* () { }),
+    Object.getPrototypeOf(Object.getPrototypeOf((function* () { })())),
+    Object.getPrototypeOf(Object.getPrototypeOf((async function* () { })())),
+    Object.getPrototypeOf((async function* () { })()),
+    Object.getPrototypeOf(Object.getPrototypeOf([][Symbol.iterator]())),
+]);
+let privateMembers = null;
+/**
+ * Every `private` / `protected` member name the SDK declares, by class name,
+ * read once from the SDK's declaration files (TypeScript's `private` is not
+ * enforced at runtime, so the declaration is the only record of it).
+ */
+export function sdkPrivateMembers() {
+    if (privateMembers)
+        return privateMembers;
+    const map = new Map();
+    const root = join(dirname(fileURLToPath(import.meta.url)), "..", "sdk", "dist");
+    const visit = (dir) => {
+        for (const name of readdirSync(dir)) {
+            const full = join(dir, name);
+            if (statSync(full).isDirectory())
+                visit(full);
+            else if (name.endsWith(".d.ts")) {
+                let current = null;
+                for (const line of readFileSync(full, "utf8").split("\n")) {
+                    const cls = /^(?:export )?declare (?:abstract )?class (\w+)/.exec(line);
+                    if (cls) {
+                        current = cls[1];
+                        continue;
+                    }
+                    if (line === "}") {
+                        current = null;
+                        continue;
+                    }
+                    if (!current)
+                        continue;
+                    const member = /^ {4}(?:private|protected)(?: static)?(?: readonly)?(?: async)?(?: get| set)? (\w+)/.exec(line);
+                    if (member) {
+                        const set = map.get(current) ?? new Set();
+                        set.add(member[1]);
+                        map.set(current, set);
+                    }
+                }
+            }
+        }
+    };
+    visit(root);
+    privateMembers = map;
+    return map;
+}
+function isPlainData(value) {
+    if (Array.isArray(value))
+        return true;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+class RefusedProperty extends TypeError {
+}
+/** Read `key` from `holder` if the SDK's public surface allows it; throw otherwise. */
+function readAllowed(holder, key, path) {
+    if (holder === null || holder === undefined) {
+        throw new TypeError(`cannot read property '${key}' of ${String(holder)} (${path})`);
+    }
+    if (typeof holder !== "object" && typeof holder !== "function") {
+        throw new RefusedProperty(`${path}.${key} is not part of the SDK surface (a ${typeof holder} has no SDK members)`);
+    }
+    if (ALWAYS_REFUSED.has(key) || key.startsWith("_") || key.startsWith("#")) {
+        throw new RefusedProperty(`${path ? `${path}.` : ""}${key} is not part of the SDK surface`);
+    }
+    const obj = holder;
+    // Plain data (what a call returned): its own properties only.
+    if (typeof holder === "object" && isPlainData(holder)) {
+        return Object.prototype.hasOwnProperty.call(obj, key) ? obj[key] : undefined;
+    }
+    // An SDK object or function: find where the property lives.
+    let owner = holder;
+    while (owner && !Object.prototype.hasOwnProperty.call(owner, key))
+        owner = Object.getPrototypeOf(owner);
+    if (!owner)
+        return undefined;
+    if (INTRINSIC_PROTOTYPES.has(owner)) {
+        throw new RefusedProperty(`${path ? `${path}.` : ""}${key} is not part of the SDK surface`);
+    }
+    const privates = sdkPrivateMembers();
+    for (let p = typeof holder === "function" ? null : Object.getPrototypeOf(holder); p && !INTRINSIC_PROTOTYPES.has(p); p = Object.getPrototypeOf(p)) {
+        const className = p.constructor?.name;
+        if (typeof className === "string" && privates.get(className)?.has(key)) {
+            throw new RefusedProperty(`${path ? `${path}.` : ""}${key} is private to the SDK`);
+        }
+    }
+    return obj[key];
+}
+function isThenable(v) {
+    return (typeof v === "object" || typeof v === "function") && v !== null && typeof v.then === "function";
+}
+/** JSON data all the way down (the terminal-value test): no functions, no class instances. */
+function isJsonData(v, depth = 0) {
+    if (v === null || typeof v === "string" || typeof v === "boolean")
+        return true;
+    if (typeof v === "number")
+        return true;
+    if (v === undefined)
+        return true;
+    if (typeof v !== "object" || depth > 200)
+        return false;
+    if (Array.isArray(v))
+        return v.every((x) => isJsonData(x, depth + 1));
+    const proto = Object.getPrototypeOf(v);
+    if (proto !== Object.prototype && proto !== null)
+        return false;
+    return Object.values(v).every((x) => isJsonData(x, depth + 1));
+}
+function describeError(err) {
+    if (isRun402Error(err)) {
+        const e = err;
+        return {
+            name: e.name,
+            message: e.message,
+            ...(e.code ? { code: e.code } : {}),
+            ...(e.kind ? { kind: e.kind } : {}),
+            status: e.status,
+            ...(e.nextActions !== undefined ? { next_actions: e.nextActions } : {}),
+            ...(e.details !== undefined ? { details: e.details } : {}),
+            ...(e.retryable !== undefined ? { retryable: e.retryable } : {}),
+        };
+    }
+    if (err instanceof Error)
+        return { name: err.name, message: err.message };
+    return { name: "Error", message: String(err) };
+}
+// ─── the host half ───────────────────────────────────────────────────────────
+/**
+ * Replays recorded chains against `root` (the real SDK client) for one run.
+ * Holds that run's handles, its `calls[]` trace, and the original errors, and
+ * forgets all of them at {@link dispose}.
+ */
+export class ChainHost {
+    calls = [];
+    callsDropped = 0;
+    #root;
+    #handles = new Map();
+    #errors = new Map();
+    #nextHandle = 1;
+    #nextError = 1;
+    #inflight = 0;
+    constructor(root) {
+        this.#root = root;
+    }
+    /** The sandbox extension that installs `r` and routes its chains here. */
+    extension() {
+        return { install: PROXY_INSTALL, async: { dispatch: (raw) => this.dispatch(raw ?? "{}") } };
+    }
+    /** The original error behind an `error_ref` the sandbox reported, if it came from a replay. */
+    errorFor(ref) {
+        return ref ? this.#errors.get(ref) : undefined;
+    }
+    /** How many chains are replaying right now. */
+    get inflight() {
+        return this.#inflight;
+    }
+    dispose() {
+        this.#handles.clear();
+        this.#errors.clear();
+    }
+    async dispatch(raw) {
+        const started = Date.now();
+        let req;
+        try {
+            req = JSON.parse(raw);
+        }
+        catch {
+            return JSON.stringify({ ok: false, error: { name: "TypeError", message: "malformed chain" } });
+        }
+        let value;
+        let receiver;
+        let path;
+        if (req.base === "root") {
+            value = this.#root;
+            receiver = undefined;
+            path = "";
+        }
+        else {
+            const handle = this.#handles.get(req.base);
+            if (!handle) {
+                return JSON.stringify({ ok: false, error: { name: "TypeError", message: "that handle belongs to another run" } });
+            }
+            value = handle.value;
+            receiver = handle.receiver;
+            path = handle.path;
+        }
+        for (const s of req.segments)
+            if (s.op === "get")
+                path = path ? `${path}.${s.key}` : s.key;
+        const callPath = path || "r";
+        this.#inflight++;
+        try {
+            let walked = req.base === "root" ? "" : (this.#handles.get(req.base)?.path ?? "");
+            for (const segment of req.segments) {
+                if (segment.op === "get") {
+                    if (typeof segment.key !== "string")
+                        throw new RefusedProperty("only string property names cross into the host");
+                    const next = readAllowed(value, segment.key, walked);
+                    receiver = value;
+                    value = next;
+                    walked = walked ? `${walked}.${segment.key}` : segment.key;
+                }
+                else {
+                    if (typeof value !== "function")
+                        throw new TypeError(`${walked || "r"} is not a function`);
+                    const args = (segment.args ?? []).map((a) => this.#decodeArg(a));
+                    value = Reflect.apply(value, receiver, args);
+                    receiver = undefined;
+                }
+                if (isThenable(value))
+                    value = await value;
+            }
+        }
+        catch (err) {
+            const ref = `err_${this.#nextError++}`;
+            this.#errors.set(ref, err);
+            const described = describeError(err);
+            const attempt = err?.paymentAttemptId;
+            this.#record({
+                path: callPath,
+                duration_ms: Date.now() - started,
+                ok: false,
+                code: described.code ?? described.name,
+                ...(typeof attempt === "string" ? { payment_attempt_id: attempt } : {}),
+            });
+            return JSON.stringify({ ok: false, error: { ...described, error_ref: ref } });
+        }
+        finally {
+            this.#inflight--;
+        }
+        this.#record({ path: callPath, duration_ms: Date.now() - started, ok: true });
+        return this.#encodeResult(value, receiver, callPath);
+    }
+    #encodeResult(value, receiver, path) {
+        if (value instanceof Uint8Array || value instanceof ArrayBuffer) {
+            const bytes = value instanceof ArrayBuffer ? new Uint8Array(value) : value;
+            if (bytes.byteLength > CHAIN_MAX_TRANSFER_BYTES / 4)
+                return this.#tooLarge(path, bytes.byteLength);
+            return JSON.stringify({ ok: true, value: { __r402: { t: "bytes", v: Array.from(bytes) } } });
+        }
+        if (isJsonData(value)) {
+            const json = value === undefined ? undefined : JSON.stringify(value);
+            if (json !== undefined && json.length > CHAIN_MAX_TRANSFER_BYTES)
+                return this.#tooLarge(path, json.length);
+            return json === undefined ? JSON.stringify({ ok: true }) : `{"ok":true,"value":${json}}`;
+        }
+        const id = `h${this.#nextHandle++}`;
+        this.#handles.set(id, { value, receiver, path });
+        return JSON.stringify({ ok: true, value: { __r402: { t: "handle", v: id, path } } });
+    }
+    #tooLarge(path, bytes) {
+        return JSON.stringify({
+            ok: false,
+            error: {
+                name: "RangeError",
+                code: "RUN_VALUE_TOO_LARGE",
+                message: `${path} returned ${bytes} bytes, over the ${CHAIN_MAX_TRANSFER_BYTES}-byte transfer cap. Ask the SDK for less (a filter, a limit, a page).`,
+            },
+        });
+    }
+    #record(call) {
+        if (this.calls.length >= CHAIN_MAX_CALLS) {
+            this.callsDropped++;
+            return;
+        }
+        this.calls.push(call);
+    }
+    #decodeArg(v) {
+        if (Array.isArray(v))
+            return v.map((x) => this.#decodeArg(x));
+        if (v && typeof v === "object") {
+            const keys = Object.keys(v);
+            if (keys.length === 1 && keys[0] === "__r402") {
+                const tag = v.__r402;
+                switch (tag.t) {
+                    case "undefined":
+                        return undefined;
+                    case "number":
+                        return Number(tag.v);
+                    case "bigint":
+                        return BigInt(String(tag.v));
+                    case "date":
+                        return new Date(Number(tag.v));
+                    case "bytes":
+                        return Uint8Array.from(tag.v);
+                    case "map":
+                        return new Map(tag.v.map(([k, x]) => [this.#decodeArg(k), this.#decodeArg(x)]));
+                    case "set":
+                        return new Set(tag.v.map((x) => this.#decodeArg(x)));
+                    case "handle": {
+                        const entry = this.#handles.get(String(tag.v));
+                        if (!entry)
+                            throw new TypeError("that handle belongs to another run");
+                        return entry.value;
+                    }
+                    default:
+                        throw new TypeError(`unknown argument tag ${String(tag.t)}`);
+                }
+            }
+            const out = {};
+            for (const k of keys)
+                out[k] = this.#decodeArg(v[k]);
+            return out;
+        }
+        return v;
+    }
+}
+//# sourceMappingURL=sandbox-proxy.js.map

package/dist/sandbox-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-proxy.js","sourceRoot":"","sources":["../src/sandbox-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAuBzD;;;GAGG;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkI7B,CAAC;AAEJ,gFAAgF;AAEhF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3L,gGAAgG;AAChG,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAS;IAChE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5G,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS;IACxG,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS;IACzF,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS;IACrF,MAAM,CAAC,cAAc,CAAC,KAAK,eAAc,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC;IACnF,MAAM,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;CACpE,CAAC,CAAC;AAEH,IAAI,cAAc,GAAoC,IAAI,CAAC;AAE3D;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;iBACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,IAAI,OAAO,GAAkB,IAAI,CAAC;gBAClC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1D,MAAM,GAAG,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxE,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;wBACjB,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;wBACjB,OAAO,GAAG,IAAI,CAAC;wBACf,SAAS;oBACX,CAAC;oBACD,IAAI,CAAC,OAAO;wBAAE,SAAS;oBACvB,MAAM,MAAM,GAAG,qFAAqF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChH,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;wBAClD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,cAAc,GAAG,GAAG,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,eAAgB,SAAQ,SAAS;CAAG;AAE1C,uFAAuF;AACvF,SAAS,WAAW,CAAC,MAAe,EAAE,GAAW,EAAE,IAAY;IAC7D,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,yBAAyB,GAAG,QAAQ,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,IAAI,GAAG,sCAAsC,OAAO,MAAM,sBAAsB,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,iCAAiC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,8DAA8D;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,4DAA4D;IAC5D,IAAI,KAAK,GAAkB,MAAgB,CAAC;IAC5C,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxG,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,iCAAiC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,KAAK,IAAI,CAAC,GAAkB,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACjK,MAAM,SAAS,GAAI,CAA0C,CAAC,WAAW,EAAE,IAAI,CAAC;QAChF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,wBAAwB,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,UAAU,CAAC;AAClI,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IACvC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,CAA4B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAuK,CAAC;QAClL,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,OAAO,SAAS;IACX,KAAK,GAAgB,EAAE,CAAC;IACjC,YAAY,GAAG,CAAC,CAAC;IACR,KAAK,CAAU;IACf,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,WAAW,GAAG,CAAC,CAAC;IAChB,UAAU,GAAG,CAAC,CAAC;IACf,SAAS,GAAG,CAAC,CAAC;IAEd,YAAY,IAAa;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,0EAA0E;IAC1E,SAAS;QACP,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,+FAA+F;IAC/F,QAAQ,CAAC,GAAuB;QAC9B,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAED,+CAA+C;IAC/C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,GAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,QAAiB,CAAC;QACtB,IAAI,IAAY,CAAC;QACjB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACnB,QAAQ,GAAG,SAAS,CAAC;YACrB,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACrB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;YAAE,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;gBAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,IAAI,GAAG,CAAC;QAE7B,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAClF,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;oBACzB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;wBAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;oBACjH,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBACrD,QAAQ,GAAG,KAAK,CAAC;oBACjB,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,IAAI,OAAO,KAAK,KAAK,UAAU;wBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC;oBAC3F,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAqC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAC7E,QAAQ,GAAG,SAAS,CAAC;gBACvB,CAAC;gBACD,IAAI,UAAU,CAAC,KAAK,CAAC;oBAAE,KAAK,GAAG,MAAM,KAAK,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,OAAO,GAAI,GAAsC,EAAE,gBAAgB,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBACjC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI;gBACtC,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,KAAc,EAAE,QAAiB,EAAE,IAAY;QAC3D,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,IAAI,KAAK,CAAC,UAAU,GAAG,wBAAwB,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACnG,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3G,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC;QAC3F,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAa;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,GAAG,IAAI,aAAa,KAAK,oBAAoB,wBAAwB,uEAAuE;aACtJ;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAe;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,CAAU;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAI,CAA4C,CAAC,MAAM,CAAC;gBACjE,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;oBACd,KAAK,WAAW;wBACd,OAAO,SAAS,CAAC;oBACnB,KAAK,QAAQ;wBACX,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACvB,KAAK,QAAQ;wBACX,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/B,KAAK,MAAM;wBACT,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjC,KAAK,OAAO;wBACV,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAa,CAAC,CAAC;oBAC5C,KAAK,KAAK;wBACR,OAAO,IAAI,GAAG,CAAE,GAAG,CAAC,CAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjH,KAAK,KAAK;wBACR,OAAO,IAAI,GAAG,CAAE,GAAG,CAAC,CAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtE,KAAK,QAAQ,CAAC,CAAC,CAAC;wBACd,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC/C,IAAI,CAAC,KAAK;4BAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;wBACtE,OAAO,KAAK,CAAC,KAAK,CAAC;oBACrB,CAAC;oBACD;wBACE,MAAM,IAAI,SAAS,CAAC,wBAAwB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/sandbox.d.ts

@@ -0,0 +1,119 @@
+/**
+ * The `run` sandbox: a TypeScript snippet executes inside QuickJS compiled to
+ * WebAssembly (the asyncify build of `quickjs-emscripten`), never inside Node.
+ *
+ * A QuickJS runtime can touch the host only through functions the host binds
+ * into it, so `require`, `process`, `fetch`, `import()`, timers, and every Node
+ * builtin are absent by construction: there is nothing to deny. What the
+ * snippet does see is the global inventory below (`SANDBOX_GLOBALS`, pinned by
+ * `sandbox.test.ts`): the ECMAScript builtins QuickJS ships, the web builtins
+ * this module adds in plain JavaScript (`URL`, `TextEncoder`, `TextDecoder`,
+ * `structuredClone`, `crypto.randomUUID`), a captured `console`, and whatever
+ * an extension installs (the `r` recorder from `./sandbox-proxy.ts`).
+ *
+ * Each run gets its own WebAssembly module instance, runtime, and context, so
+ * nothing survives from one run to the next and a run that ends badly cannot
+ * poison another. Bounds: a memory limit on the runtime, a stack limit, and a
+ * deadline enforced two ways — the interrupt handler stops JavaScript that is
+ * running past it, and the event loop stops waiting on the host past it. An
+ * async host call already in flight at the deadline is allowed to settle
+ * before the run returns, because its side effect is real either way.
+ *
+ * The source is TypeScript or JavaScript. It is wrapped as the body of an
+ * async function (so top-level `await` and `return` both work), types are
+ * stripped on the host with `node:module`'s `stripTypeScriptTypes` (strip-only:
+ * `enum` and parameter properties are syntax errors, as in Node), the result is
+ * parsed, and when the body ends in an expression statement that statement is
+ * rewritten into a `return` from the parse tree, never by string search.
+ */
+/** 64 MB: the runtime's allocation ceiling. */
+export declare const SANDBOX_MEMORY_LIMIT_BYTES: number;
+/** The interpreter's own stack ceiling, well inside the WebAssembly stack. */
+export declare const SANDBOX_STACK_LIMIT_BYTES: number;
+/** The serialized (compact JSON) value a run may return. */
+export declare const SANDBOX_MAX_VALUE_BYTES: number;
+/** Console lines retained per run. */
+export declare const SANDBOX_MAX_LOG_LINES = 500;
+/** Characters retained per console line. */
+export declare const SANDBOX_MAX_LOG_LINE_CHARS = 2048;
+/**
+ * The snippet's global inventory, sorted. `r` is present when the chain proxy
+ * is installed (always, in the `run` tool). A new global is a deliberate diff
+ * of this list and of the snapshot test.
+ */
+export declare const SANDBOX_GLOBALS: readonly ["AggregateError", "Array", "ArrayBuffer", "BigInt", "BigInt64Array", "BigUint64Array", "Boolean", "DataView", "Date", "Error", "EvalError", "FinalizationRegistry", "Float16Array", "Float32Array", "Float64Array", "Function", "Infinity", "Int16Array", "Int32Array", "Int8Array", "InternalError", "Iterator", "JSON", "Map", "Math", "NaN", "Number", "Object", "Promise", "Proxy", "RangeError", "ReferenceError", "Reflect", "RegExp", "Set", "SharedArrayBuffer", "String", "Symbol", "SyntaxError", "TextDecoder", "TextEncoder", "TypeError", "URIError", "URL", "Uint16Array", "Uint32Array", "Uint8Array", "Uint8ClampedArray", "WeakMap", "WeakRef", "WeakSet", "console", "crypto", "decodeURI", "decodeURIComponent", "encodeURI", "encodeURIComponent", "escape", "eval", "globalThis", "isFinite", "isNaN", "parseFloat", "parseInt", "r", "structuredClone", "undefined", "unescape"];
+export type SandboxErrorCode = "RUN_SYNTAX_ERROR" | "RUN_TIMEOUT" | "RUN_MEMORY_EXCEEDED" | "RUN_VALUE_NOT_SERIALIZABLE" | "RUN_VALUE_TOO_LARGE" | "RUN_EXCEPTION";
+export interface SandboxLogLine {
+    level: "log" | "info" | "warn" | "error";
+    line: string;
+}
+/** What the snippet threw, as far as the sandbox can describe it without trusting it. */
+export interface SandboxThrown {
+    name: string;
+    message: string;
+    /** A string `code` property on the thrown value, when it had one. */
+    code?: string;
+    /** A string `error_ref` property on the thrown value (set by the chain proxy on host errors). */
+    error_ref?: string;
+}
+export interface SandboxError {
+    code: SandboxErrorCode;
+    message: string;
+    line?: number;
+    column?: number;
+    thrown?: SandboxThrown;
+}
+export interface SandboxOutcome {
+    status: "ok" | "error";
+    /** Compact JSON of the value, when `status` is `ok` and the value was not `undefined`. */
+    value_json?: string;
+    /** `"undefined"` when the snippet produced `undefined` (reported as `null` data). */
+    value_kind?: "undefined";
+    error?: SandboxError;
+    logs: SandboxLogLine[];
+    /** Console lines past {@link SANDBOX_MAX_LOG_LINES} that were not retained. */
+    logs_dropped: number;
+    /** True when the deadline passed (the run was stopped or stopped waiting). */
+    timed_out: boolean;
+    duration_ms: number;
+}
+/**
+ * Something the host installs into the sandbox before the snippet runs.
+ * `install` is the source of a function expression `(host) => { … }` evaluated
+ * inside the sandbox and called once with an object carrying the bound host
+ * functions; it may define globals and keeps the host functions in its closure,
+ * so no host function is ever a global.
+ */
+export interface SandboxExtension {
+    install: string;
+    /** Synchronous host functions: string (or undefined) arguments, string (or undefined) result. */
+    sync?: Record<string, (...args: Array<string | undefined>) => string | undefined>;
+    /**
+     * Asynchronous host functions: string arguments, resolve to a string. They
+     * should not reject; encode failures in the string. A rejection becomes a
+     * plain `Error` inside the sandbox.
+     */
+    async?: Record<string, (...args: Array<string | undefined>) => Promise<string>>;
+}
+export interface SandboxRunOptions {
+    code: string;
+    timeoutMs: number;
+    memoryLimitBytes?: number;
+    maxValueBytes?: number;
+    extensions?: SandboxExtension[];
+}
+export type PreparedSnippet = {
+    ok: true;
+    source: string;
+} | {
+    ok: false;
+    error: SandboxError;
+};
+/**
+ * Wrap, strip types, parse, and rewrite the final expression statement into a
+ * `return`. The result is the source of one async function expression.
+ */
+export declare function prepareSnippet(code: string): PreparedSnippet;
+/** Run one snippet to completion (or to its bound) and describe how it ended. */
+export declare function runInSandbox(opts: SandboxRunOptions): Promise<SandboxOutcome>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAWH,+CAA+C;AAC/C,eAAO,MAAM,0BAA0B,QAAmB,CAAC;AAC3D,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,QAAa,CAAC;AACpD,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,QAAkB,CAAC;AACvD,sCAAsC;AACtC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAQ/C;;;;GAIG;AACH,eAAO,MAAM,eAAe,k3BAUlB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,aAAa,GACb,qBAAqB,GACrB,4BAA4B,GAC5B,qBAAqB,GACrB,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC;IAClF;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACjC;AAID,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAEvC;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAsC5D;AAiQD,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CA4OnF"}