veryfront 0.1.74 → 0.1.76

package/esm/src/security/sandbox/worker-types.js

@@ -0,0 +1,19 @@
+/**
+ * Worker Isolation Types
+ *
+ * Shared type definitions for the worker isolation system.
+ * Used by both the main process and worker script.
+ *
+ * @module security/sandbox/worker-types
+ */
+/** Maximum request body size for worker isolation (10 MB) */
+export const MAX_WORKER_BODY_BYTES = 10 * 1024 * 1024;
+export const DEFAULT_WORKER_POOL_CONFIG = {
+    maxPoolSize: 20,
+    idleTimeoutMs: 300_000,
+    requestTimeoutMs: 30_000,
+    healthCheckIntervalMs: 30_000,
+    maxRequestsPerWorker: 1_000,
+    maxWorkerAgeMs: 600_000,
+    memoryBudgetMb: 64,
+};

package/esm/src/server/handlers/request/internal-tasks-list.handler.d.ts

@@ -0,0 +1,11 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import { type RuntimeTaskDiscoveryDeps } from "../../../task/control-plane.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerResult } from "../types.js";
+export declare class InternalTasksListHandler extends BaseHandler {
+    private readonly deps;
+    metadata: HandlerMetadata;
+    constructor(deps?: RuntimeTaskDiscoveryDeps);
+    handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult>;
+}
+//# sourceMappingURL=internal-tasks-list.handler.d.ts.map

package/esm/src/server/handlers/request/internal-tasks-list.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-tasks-list.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/internal-tasks-list.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AAGrD,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,gCAAgC,CAAC;AAUxC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEnG,qBAAa,wBAAyB,SAAQ,WAAW;IAQrD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPvB,QAAQ,EAAE,eAAe,CAIvB;gBAGiB,IAAI,GAAE,wBAA0D;IAK7E,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAmEhF"}

package/esm/src/server/handlers/request/internal-tasks-list.handler.js

@@ -0,0 +1,72 @@
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+import { ZodError } from "zod";
+import { ControlPlaneTasksListRequestSchema, defaultRuntimeTaskDiscoveryDeps, listRuntimeTasks, } from "../../../task/control-plane.js";
+import { ControlPlaneRequestError, verifyControlPlaneRequest, } from "../../../internal-agents/control-plane-auth.js";
+import { INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES, InternalAgentRequestBodyTooLargeError, readInternalAgentRequestBody, } from "../../../internal-agents/request-body.js";
+import { BaseHandler } from "../response/base.js";
+export class InternalTasksListHandler extends BaseHandler {
+    deps;
+    metadata = {
+        name: "InternalTasksListHandler",
+        priority: PRIORITY_MEDIUM_API,
+        patterns: [{ pattern: "/internal/tasks/list", exact: true, method: "POST" }],
+    };
+    constructor(deps = defaultRuntimeTaskDiscoveryDeps) {
+        super();
+        this.deps = deps;
+    }
+    async handle(req, ctx) {
+        if (!this.shouldHandle(req, ctx)) {
+            return this.continue();
+        }
+        return this.withProxyContext(ctx, async () => {
+            const builder = this.createResponseBuilder(ctx)
+                .withCORS(req, ctx.securityConfig?.cors)
+                .withSecurity(ctx.securityConfig ?? undefined, req);
+            try {
+                const rawBody = await readInternalAgentRequestBody(req, INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES);
+                const payload = ControlPlaneTasksListRequestSchema.parse(JSON.parse(rawBody));
+                const claims = await verifyControlPlaneRequest(req, ctx, rawBody, {
+                    expectedSubject: payload.requestId,
+                    expectedSurface: payload.surface,
+                });
+                if (payload.projectId !== claims.project_id ||
+                    (ctx.projectId !== undefined && payload.projectId !== ctx.projectId)) {
+                    this.logWarn("Internal tasks list request body did not match signed claims", {
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                        requestId: payload.requestId,
+                        signedRequestId: claims.sub,
+                        surface: payload.surface,
+                        signedSurface: claims.surface,
+                    });
+                    return this.respond(builder.json({ error: "Invalid control-plane signature" }, 401));
+                }
+                const response = await listRuntimeTasks(ctx, this.deps);
+                return this.respond(builder.json(response, 200));
+            }
+            catch (error) {
+                if (error instanceof InternalAgentRequestBodyTooLargeError) {
+                    return this.respond(builder.json({ error: error.message }, error.status));
+                }
+                if (error instanceof ControlPlaneRequestError) {
+                    this.logWarn("Internal tasks list signature verification failed", {
+                        error: error.message,
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                    });
+                    return this.respond(builder.json({ error: error.message }, error.status));
+                }
+                if (error instanceof SyntaxError || error instanceof ZodError) {
+                    this.logWarn("Internal tasks list request validation failed", {
+                        error: error instanceof Error ? error.message : String(error),
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                    });
+                    return this.respond(builder.json({ error: "Invalid internal tasks request" }, 400));
+                }
+                throw error;
+            }
+        });
+    }
+}

package/esm/src/server/project-env/storage.d.ts

@@ -14,4 +14,10 @@ export declare function getProjectEnv(key: string): string | undefined;
  * to prevent remote projects from reading host-level secrets.
  */
 export declare function isProjectEnvActive(): boolean;
+/**
+ * Get a snapshot of the current project env overlay.
+ * Returns undefined if no overlay is active.
+ * Used to forward env vars to isolated workers in proxy mode.
+ */
+export declare function getProjectEnvSnapshot(): Record<string, string> | undefined;
 //# sourceMappingURL=storage.d.ts.map

package/esm/src/server/project-env/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/storage.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEjF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/storage.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEjF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAE1E"}

package/esm/src/server/project-env/storage.js

@@ -31,6 +31,14 @@ export function getProjectEnv(key) {
 export function isProjectEnvActive() {
     return projectEnvStorage.getStore() !== undefined;
 }
+/**
+ * Get a snapshot of the current project env overlay.
+ * Returns undefined if no overlay is active.
+ * Used to forward env vars to isolated workers in proxy mode.
+ */
+export function getProjectEnvSnapshot() {
+    return projectEnvStorage.getStore();
+}
 // Register on globalThis so process.ts can access without circular imports.
 // process.ts is low-level (platform/compat), project-env is high-level (server/).
 dntShim.dntGlobalThis.__vfProjectEnvGetter = getProjectEnv;

package/esm/src/server/runtime-handler/index.d.ts

@@ -14,7 +14,7 @@ import type { Handler } from "../../types/index.js";
 import { ApiHandlerWrapper } from "../handlers/request/api/index.js";
 export { parseProxyEnvironment, type ProxyEnvironment } from "./proxy-environment.js";
 /** Handler names in registration order. */
-export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
+export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "InternalTasksListHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
 /** Union of all registered handler names. */
 export type HandlerName = (typeof HANDLER_NAMES)[number];
 /**

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AA0BpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA8DrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,yoBAiChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAyCD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAsYnF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AA0BpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA+DrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,qqBAkChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAsYnF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -43,6 +43,7 @@ import { MarkdownPreviewHandler } from "../handlers/preview/markdown-preview.han
 import { OpenAPIHandler } from "../handlers/request/openapi.handler.js";
 import { OpenAPIDocsHandler } from "../handlers/request/openapi-docs.handler.js";
 import { InternalAgentsListHandler } from "../handlers/request/internal-agents-list.handler.js";
+import { InternalTasksListHandler } from "../handlers/request/internal-tasks-list.handler.js";
 import { AgentStreamHandler } from "../handlers/request/agent-stream.handler.js";
 import { AgentRunResumeHandler } from "../handlers/request/agent-run-resume.handler.js";
 import { AgentRunCancelHandler } from "../handlers/request/agent-run-cancel.handler.js";
@@ -83,6 +84,7 @@ export const HANDLER_NAMES = [
     "OpenAPIHandler",
     "OpenAPIDocsHandler",
     "InternalAgentsListHandler",
+    "InternalTasksListHandler",
     "AgentStreamHandler",
     "AgentRunResumeHandler",
     "AgentRunCancelHandler",
@@ -118,6 +120,7 @@ const handlerFactories = {
     OpenAPIHandler: () => new OpenAPIHandler(),
     OpenAPIDocsHandler: () => new OpenAPIDocsHandler(),
     InternalAgentsListHandler: () => new InternalAgentsListHandler(),
+    InternalTasksListHandler: () => new InternalTasksListHandler(),
     AgentStreamHandler: () => new AgentStreamHandler(),
     AgentRunResumeHandler: () => new AgentRunResumeHandler(),
     AgentRunCancelHandler: () => new AgentRunCancelHandler(),

package/esm/src/server/runtime-handler/project-isolation.d.ts

@@ -19,6 +19,11 @@ export declare class ProjectIsolationManager {
     checkRequest(projectSlug: string | undefined): IsolationCheckResult;
     startRequest(projectSlug: string | undefined): void;
     completeRequest(projectSlug: string | undefined, timedOut: boolean): void;
+    /**
+     * Record a worker crash for a project. This counts as a failure
+     * toward the circuit breaker threshold and evicts the worker.
+     */
+    recordWorkerCrash(projectSlug: string | undefined): void;
     getStats(): Record<string, {
         inFlight: number;
         recentFailures: number;

package/esm/src/server/runtime-handler/project-isolation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-isolation.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/project-isolation.ts"],"names":[],"mappings":"AAMA,UAAU,sBAAsB;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAUD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,eAAe,CAAqD;gBAEhE,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAKxD,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,gBAAgB;IAgBxB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB;IAsCnE,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAQnD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI;IA4BzE,QAAQ,IAAI,MAAM,CAChB,MAAM,EACN;QACE,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACvB,CACF;IAyBD,QAAQ,IAAI,IAAI;CAIjB;AAED,eAAO,MAAM,gBAAgB,yBAI3B,CAAC"}
+{"version":3,"file":"project-isolation.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/project-isolation.ts"],"names":[],"mappings":"AAUA,UAAU,sBAAsB;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAUD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,eAAe,CAAqD;gBAEhE,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAKxD,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,gBAAgB;IAgBxB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB;IAsCnE,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAQnD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI;IA4BzE;;;OAGG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAoCxD,QAAQ,IAAI,MAAM,CAChB,MAAM,EACN;QACE,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACvB,CACF;IAyBD,QAAQ,IAAI,IAAI;CAajB;AAED,eAAO,MAAM,gBAAgB,yBAI3B,CAAC"}

package/esm/src/server/runtime-handler/project-isolation.js

@@ -1,6 +1,7 @@
 import * as dntShim from "../../../_dnt.shims.js";
 import { serverLogger } from "../../utils/index.js";
 import { getEnvNumber, unrefTimer } from "../../platform/compat/process.js";
+import { getWorkerPool, isWorkerIsolationEnabled, } from "../../security/sandbox/worker-pool.js";
 const logger = serverLogger.component("project-isolation");
 const DEFAULT_CONFIG = {
     maxConcurrentPerProject: 20,
@@ -106,6 +107,40 @@ export class ProjectIsolationManager {
             resetAfterMs: this.config.circuitResetTimeMs,
         });
     }
+    /**
+     * Record a worker crash for a project. This counts as a failure
+     * toward the circuit breaker threshold and evicts the worker.
+     */
+    recordWorkerCrash(projectSlug) {
+        if (!projectSlug)
+            return;
+        const state = this.getOrCreateState(projectSlug);
+        const now = Date.now();
+        state.failures.push(now);
+        state.failures = state.failures.filter((t) => now - t < this.config.failureWindowMs);
+        logger.warn("Worker crash recorded", {
+            projectSlug,
+            recentFailures: state.failures.length,
+        });
+        // Evict the crashed worker from the pool
+        if (isWorkerIsolationEnabled()) {
+            try {
+                getWorkerPool().evictWorker(projectSlug);
+            }
+            catch {
+                // Pool may not be initialized
+            }
+        }
+        if (state.failures.length < this.config.circuitBreakerThreshold)
+            return;
+        state.circuitOpenedAt = now;
+        logger.error("Circuit opened due to worker crashes", {
+            projectSlug,
+            recentFailures: state.failures.length,
+            threshold: this.config.circuitBreakerThreshold,
+            resetAfterMs: this.config.circuitResetTimeMs,
+        });
+    }
     getStats() {
         const stats = {};
         for (const [slug, state] of this.projects.entries()) {
@@ -123,6 +158,15 @@ export class ProjectIsolationManager {
         if (this.cleanupInterval)
             clearInterval(this.cleanupInterval);
         this.projects.clear();
+        // Shut down the worker pool if isolation is enabled
+        if (isWorkerIsolationEnabled()) {
+            try {
+                getWorkerPool().shutdown();
+            }
+            catch {
+                // Pool may not be initialized
+            }
+        }
     }
 }
 export const projectIsolation = new ProjectIsolationManager({

package/esm/src/server/shared/renderer/memory/pressure.d.ts

@@ -13,5 +13,12 @@
  *
  * @module server/shared/renderer/memory/pressure
  */
+type MemoryPressureLevel = "normal" | "warning" | "high" | "critical";
 export declare function shouldRejectDueToMemory(): boolean;
+/**
+ * Get current memory pressure level for use by the worker pool
+ * to decide whether to evict idle workers.
+ */
+export declare function getMemoryPressureLevel(): MemoryPressureLevel;
+export {};
 //# sourceMappingURL=pressure.d.ts.map

package/esm/src/server/shared/renderer/memory/pressure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pressure.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/shared/renderer/memory/pressure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwCH,wBAAgB,uBAAuB,IAAI,OAAO,CAMjD"}
+{"version":3,"file":"pressure.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/shared/renderer/memory/pressure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,KAAK,mBAAmB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;AA+BtE,wBAAgB,uBAAuB,IAAI,OAAO,CAMjD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,mBAAmB,CAE5D"}

package/esm/src/server/shared/renderer/memory/pressure.js

@@ -51,3 +51,10 @@ export function shouldRejectDueToMemory() {
     rendererLog.warn("Rejecting request - memory critical", { heapUsedPercent });
     return true;
 }
+/**
+ * Get current memory pressure level for use by the worker pool
+ * to decide whether to evict idle workers.
+ */
+export function getMemoryPressureLevel() {
+    return getMemoryPressure().level;
+}

package/esm/src/task/control-plane.d.ts

@@ -0,0 +1,105 @@
+import type { HandlerContext } from "../types/index.js";
+import { z } from "zod";
+import { discoverTasks, type TaskDiscoveryOptions } from "./discovery.js";
+export declare const ControlPlaneTasksListRequestSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    projectId: z.ZodString;
+    surface: z.ZodEnum<["studio", "channels", "a2a", "mcp"]>;
+}, "strip", z.ZodTypeAny, {
+    requestId: string;
+    projectId: string;
+    surface: "mcp" | "studio" | "channels" | "a2a";
+}, {
+    requestId: string;
+    projectId: string;
+    surface: "mcp" | "studio" | "channels" | "a2a";
+}>;
+export declare const RuntimeTaskSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    target: z.ZodString;
+    sourcePath: z.ZodString;
+    inputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    outputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    schedulable: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    description: string | null;
+    name: string;
+    id: string;
+    target: string;
+    sourcePath: string;
+    outputSchema: Record<string, unknown> | null;
+    inputSchema: Record<string, unknown> | null;
+    schedulable: boolean;
+}, {
+    description: string | null;
+    name: string;
+    id: string;
+    target: string;
+    sourcePath: string;
+    outputSchema: Record<string, unknown> | null;
+    inputSchema: Record<string, unknown> | null;
+    schedulable: boolean;
+}>;
+export declare const RuntimeTaskListResponseSchema: z.ZodObject<{
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        target: z.ZodString;
+        sourcePath: z.ZodString;
+        inputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        outputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        schedulable: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }, {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    tasks: {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }[];
+}, {
+    tasks: {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }[];
+}>;
+export type ControlPlaneTasksListRequest = z.infer<typeof ControlPlaneTasksListRequestSchema>;
+export type RuntimeTask = z.infer<typeof RuntimeTaskSchema>;
+export type RuntimeTaskListResponse = z.infer<typeof RuntimeTaskListResponseSchema>;
+export interface RuntimeTaskDiscoveryDeps {
+    discoverTasks: (options: TaskDiscoveryOptions) => ReturnType<typeof discoverTasks>;
+}
+export declare const defaultRuntimeTaskDiscoveryDeps: RuntimeTaskDiscoveryDeps;
+export declare function listRuntimeTasks(ctx: HandlerContext, deps?: RuntimeTaskDiscoveryDeps): Promise<RuntimeTaskListResponse>;
+//# sourceMappingURL=control-plane.d.ts.map

package/esm/src/task/control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../../src/src/task/control-plane.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,eAAO,MAAM,kCAAkC;;;;;;;;;;;;EAI7C,CAAC;AAIH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAExC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;CACpF;AAED,eAAO,MAAM,+BAA+B,EAAE,wBAE7C,CAAC;AAUF,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,cAAc,EACnB,IAAI,GAAE,wBAA0D,GAC/D,OAAO,CAAC,uBAAuB,CAAC,CAwBlC"}

package/esm/src/task/control-plane.js

@@ -0,0 +1,52 @@
+import { ControlPlaneSurfaceSchema } from "../channels/control-plane.js";
+import { z } from "zod";
+import { discoverTasks } from "./discovery.js";
+export const ControlPlaneTasksListRequestSchema = z.object({
+    requestId: z.string().min(1),
+    projectId: z.string().min(1),
+    surface: ControlPlaneSurfaceSchema,
+});
+const JsonSchemaRecordSchema = z.record(z.unknown());
+export const RuntimeTaskSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().nullable(),
+    target: z.string().min(1),
+    sourcePath: z.string().min(1),
+    inputSchema: JsonSchemaRecordSchema.nullable(),
+    outputSchema: JsonSchemaRecordSchema.nullable(),
+    schedulable: z.boolean(),
+});
+export const RuntimeTaskListResponseSchema = z.object({
+    tasks: z.array(RuntimeTaskSchema),
+});
+export const defaultRuntimeTaskDiscoveryDeps = {
+    discoverTasks,
+};
+function normalizeJsonSchema(value) {
+    if (value == null || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+export async function listRuntimeTasks(ctx, deps = defaultRuntimeTaskDiscoveryDeps) {
+    const discovery = await deps.discoverTasks({
+        projectDir: ctx.projectDir,
+        adapter: ctx.adapter,
+        config: ctx.config,
+        debug: ctx.debug ?? false,
+    });
+    const tasks = discovery.tasks
+        .map((task) => RuntimeTaskSchema.parse({
+        id: task.id,
+        name: task.name,
+        description: task.definition.description ?? null,
+        target: `task:${task.id}`,
+        sourcePath: task.filePath,
+        inputSchema: normalizeJsonSchema(task.definition.inputSchema),
+        outputSchema: normalizeJsonSchema(task.definition.outputSchema),
+        schedulable: task.definition.schedulable ?? true,
+    }))
+        .sort((left, right) => left.name.localeCompare(right.name));
+    return RuntimeTaskListResponseSchema.parse({ tasks });
+}

package/esm/src/task/types.d.ts

@@ -24,6 +24,12 @@ export interface TaskDefinition {
     name?: string;
     /** Task description */
     description?: string;
+    /** Optional JSON-schema-like input contract surfaced in APIs/UIs */
+    inputSchema?: Record<string, unknown>;
+    /** Optional JSON-schema-like output contract surfaced in APIs/UIs */
+    outputSchema?: Record<string, unknown>;
+    /** Whether this task can be scheduled via cron jobs */
+    schedulable?: boolean;
     /** The function to execute */
     run: (ctx: TaskContext) => Promise<unknown> | unknown;
 }

package/esm/src/task/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,uDAAuD;IACvD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE"}

package/esm/src/transforms/pipeline/stages/ssr-vf-modules/path-resolver.d.ts

@@ -5,14 +5,14 @@
  * framework source files on disk.
  */
 import { createFileSystem } from "../../../../platform/compat/fs.js";
-export declare function tryReadWithExtensions(fs: ReturnType<typeof createFileSystem>, basePath: string): Promise<{
+export declare function tryReadWithExtensions(fs: ReturnType<typeof createFileSystem>, basePath: string, existsFn?: (path: string) => Promise<boolean>): Promise<{
     sourcePath: string;
     content: string;
 } | null>;
 /**
  * Resolve a /_vf_modules/ path to the actual framework source file.
  */
-export declare function resolveFrameworkFile(vfModulePath: string, fs: ReturnType<typeof createFileSystem>): Promise<{
+export declare function resolveFrameworkFile(vfModulePath: string, fs: ReturnType<typeof createFileSystem>, existsFn?: (path: string) => Promise<boolean>): Promise<{
     sourcePath: string;
     content: string;
 } | null>;
@@ -24,7 +24,7 @@ export declare function resolveFrameworkFile(vfModulePath: string, fs: ReturnTyp
  * then falls back to regular src/. This matches resolveFrameworkFile's behavior
  * and ensures consistent path resolution for cycle detection.
  */
-export declare function resolveVeryfrontSourcePath(specifier: string): Promise<string | null>;
+export declare function resolveVeryfrontSourcePath(specifier: string, existsFn?: (path: string) => Promise<boolean>): Promise<string | null>;
 /**
  * Resolve a relative import path to an absolute framework source path.
  * Given sourcePath=/foo/bar/index.ts and specifier=./Head.tsx, returns /foo/bar/Head.tsx
@@ -32,5 +32,5 @@ export declare function resolveVeryfrontSourcePath(specifier: string): Promise<s
  * Handles both regular source files (.tsx, .ts) and embedded sources (.tsx.src, .ts.src)
  * for compiled binaries.
  */
-export declare function resolveRelativeFrameworkImport(specifier: string, fromSourcePath: string, _fs: ReturnType<typeof createFileSystem>): Promise<string | null>;
+export declare function resolveRelativeFrameworkImport(specifier: string, fromSourcePath: string, _fs: ReturnType<typeof createFileSystem>, existsFn?: (path: string) => Promise<boolean>): Promise<string | null>;
 //# sourceMappingURL=path-resolver.d.ts.map

package/esm/src/transforms/pipeline/stages/ssr-vf-modules/path-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/src/transforms/pipeline/stages/ssr-vf-modules/path-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAU,MAAM,mCAAmC,CAAC;AAY7E,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmBzD;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,EAAE,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,GACtC,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA6DzD;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkE1F;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,GACvC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiExB"}
+{"version":3,"file":"path-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/src/transforms/pipeline/stages/ssr-vf-modules/path-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAU,MAAM,mCAAmC,CAAC;AAY7E,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAU,GACpD,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmBzD;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,EAAE,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACvC,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAU,GACpD,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA6DzD;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAU,GACpD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkExB;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,EACxC,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAU,GACpD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiExB"}