zeitlich 0.2.24 → 0.2.26

package/dist/adapters/sandbox/bedrock/index.js

@@ -53,8 +53,31 @@ var BedrockSandboxFileSystem = class {
     this.workspaceBase = posix.resolve("/", workspaceBase);
   }
   workspaceBase;
+  /**
+   * Resolve a caller-supplied path to an absolute path within the workspace.
+   * Used for shell commands that need full paths.
+   */
   normalisePath(path) {
-    return posix.resolve(this.workspaceBase, path);
+    if (posix.isAbsolute(path) && !path.startsWith(this.workspaceBase + "/") && path !== this.workspaceBase) {
+      path = path.replace(/^\/+/, "");
+    }
+    const resolved = posix.resolve(this.workspaceBase, path);
+    if (!resolved.startsWith(this.workspaceBase + "/") && resolved !== this.workspaceBase) {
+      throw new Error(
+        `Invalid file path: "${resolved}" escapes workspace "${this.workspaceBase}"`
+      );
+    }
+    return resolved;
+  }
+  /**
+   * Return a workspace-relative path for Bedrock tool invocations
+   * (`writeFiles`, `readFiles`, `listFiles`, `removeFiles`), which
+   * reject absolute paths as "path traversal".
+   */
+  toToolPath(path) {
+    const abs = this.normalisePath(path);
+    const prefix = this.workspaceBase + "/";
+    return abs.startsWith(prefix) ? abs.slice(prefix.length) : abs;
   }
   async invoke(name, args) {
     const resp = await this.client.send(
@@ -79,9 +102,9 @@ var BedrockSandboxFileSystem = class {
     };
   }
   async readFile(path) {
-    const norm = this.normalisePath(path);
+    const rel = this.toToolPath(path);
     const result = await this.invoke("readFiles", {
-      paths: [norm]
+      paths: [rel]
     });
     for (const block of result.content ?? []) {
       if (block.resource?.text != null) return block.resource.text;
@@ -90,9 +113,9 @@ var BedrockSandboxFileSystem = class {
     return "";
   }
   async readFileBuffer(path) {
-    const norm = this.normalisePath(path);
+    const rel = this.toToolPath(path);
     const result = await this.invoke("readFiles", {
-      paths: [norm]
+      paths: [rel]
     });
     for (const block of result.content ?? []) {
       if (block.resource?.blob) return block.resource.blob;
@@ -104,12 +127,12 @@ var BedrockSandboxFileSystem = class {
     return new Uint8Array(0);
   }
   async writeFile(path, content) {
-    const norm = this.normalisePath(path);
+    const rel = this.toToolPath(path);
     const isText = typeof content === "string";
     const result = await this.invoke("writeFiles", {
       content: [
         {
-          path: norm,
+          path: rel,
           ...isText ? { text: content } : { blob: content }
         }
       ]
@@ -162,15 +185,16 @@ var BedrockSandboxFileSystem = class {
     if (exitCode !== 0) throw new Error(`mkdir failed: ${stderr}`);
   }
   async readdir(path) {
-    const norm = this.normalisePath(path);
+    const rel = this.toToolPath(path);
     const result = await this.invoke("listFiles", {
-      directoryPath: norm
+      directoryPath: rel
     });
     const names = [];
     for (const block of result.content ?? []) {
       if (block.name) names.push(block.name);
     }
     if (names.length > 0) return names;
+    const norm = this.normalisePath(path);
     const { stdout, exitCode, stderr } = await this.execShell(
       `ls -1A "${norm}"`
     );
@@ -206,8 +230,9 @@ var BedrockSandboxFileSystem = class {
         throw new Error(`rm failed: ${stderr}`);
       return;
     }
+    const rel = this.toToolPath(path);
     const result = await this.invoke("removeFiles", {
-      paths: [norm]
+      paths: [rel]
     });
     if (result.isError) {
       const msg = result.content?.map((b) => b.text).join("") ?? "rm failed";

package/dist/adapters/sandbox/bedrock/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/bedrock/filesystem.ts","../../../../src/adapters/sandbox/bedrock/index.ts"],"names":["exports","InvokeCodeInterpreterCommand"],"mappings":";;;;;AAkLO,IAAM,wBAAA,GAAN,cAAuC,kBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmC,kBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AChLA,eAAe,cACb,MAAA,EACgC;AAChC,EAAA,WAAA,MAAiB,SAAS,MAAA,EAAQ;AAChC,IAAA,IAAI,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,SAAe,KAAA,CAAM,MAAA;AACpD,IAAA,IAAI,uBAAA,IAA2B,SAAS,KAAA,CAAM,qBAAA;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,qBAAA,CAAsB,WAAW,eAAe,CAAA;AACxE,IAAA,IAAI,2BAAA,IAA+B,SAAS,KAAA,CAAM,yBAAA;AAChD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,0BAA0B,OAAA,IAAW;AAAA,OAC7C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,oBAAoB,OAAA,IAAW;AAAA,OACvC;AACF,IAAA,IAAI,yBAAA,IAA6B,SAAS,KAAA,CAAM,uBAAA;AAC9C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,wBAAwB,OAAA,IAAW;AAAA,OAC3C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,mBAAA,CAAoB,WAAW,WAAW,CAAA;AAClE,IAAA,IACE,+BAAA,IAAmC,SACnC,KAAA,CAAM,6BAAA;AAEN,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,8BAA8B,OAAA,IAAW;AAAA,OACjD;AACF,IAAA,IAAI,mBAAA,IAAuB,SAAS,KAAA,CAAM,iBAAA;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,iBAAA,CAAkB,WAAW,UAAU,CAAA;AAAA,EACjE;AACA,EAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AACnE;AASO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,MAAA,EACA,yBAAA,EACA,SAAA,EACR,gBAAgB,YAAA,EAChB;AAJQ,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,yBAAA,GAAA,yBAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EATS,aAAA;AAAA,EAWD,cAAc,IAAA,EAAsB;AAC1C,IAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAe,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAc,MAAA,CACZ,IAAA,EACA,IAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAI,4BAAA,CAA6B;AAAA,QAC/B,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,IAAA;AAAA,QACA,SAAA,EAAW;AAAA,OACZ;AAAA,KACH;AACA,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAC1E,IAAA,OAAO,aAAA,CAAc,KAAK,MAAM,CAAA;AAAA,EAClC;AAAA,EAEA,MAAc,UAAU,OAAA,EAIrB;AACD,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,gBAAA,EAAkC;AAAA,MACjE;AAAA,KACD,CAAA;AACD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,MAAA,IAAU,EAAA;AAAA,MAC5C,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,MAAA,IAAU,EAAA;AAAA,MAC5C,QAAA,EAAU,MAAA,CAAO,iBAAA,EAAmB,QAAA,IAAY;AAAA,KAClD;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,KAAA,EAAO,CAAC,IAAI;AAAA,KACb,CAAA;AAED,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,MAAM,QAAA,EAAU,IAAA,IAAQ,IAAA,EAAM,OAAO,MAAM,QAAA,CAAS,IAAA;AACxD,MAAA,IAAI,KAAA,CAAM,IAAA,IAAQ,IAAA,EAAM,OAAO,KAAA,CAAM,IAAA;AAAA,IACvC;AACA,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,KAAA,EAAO,CAAC,IAAI;AAAA,KACb,CAAA;AAED,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM,OAAO,MAAM,QAAA,CAAS,IAAA;AAChD,MAAA,IAAI,KAAA,CAAM,IAAA,EAAM,OAAO,KAAA,CAAM,IAAA;AAC7B,MAAA,IAAI,KAAA,CAAM,UAAU,IAAA,IAAQ,IAAA;AAC1B,QAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AACrD,MAAA,IAAI,KAAA,CAAM,QAAQ,IAAA,EAAM,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,IAAI,WAAW,CAAC,CAAA;AAAA,EACzB;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAA,GAAS,OAAO,OAAA,KAAY,QAAA;AAClC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,YAAA,EAA8B;AAAA,MAC7D,OAAA,EAAS;AAAA,QACP;AAAA,UACE,IAAA,EAAM,IAAA;AAAA,UACN,GAAI,SACA,EAAE,IAAA,EAAM,SAAkB,GAC1B,EAAE,MAAM,OAAA;AAAsB;AACpC;AACF,KACD,CAAA;AACD,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,MAAM,GAAA,GACJ,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA,IAAK,kBAAA;AACjD,MAAA,MAAM,IAAI,MAAM,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,UACA,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA;AACtC,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,aAAA,EAAgB,OAAO,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA;AAAA,KACtC;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAAA,EACpE;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,UAAS,GAAI,MAAM,KAAK,SAAA,CAAU,CAAA,SAAA,EAAY,IAAI,CAAA,CAAA,CAAG,CAAA;AAC7D,IAAA,OAAO,QAAA,KAAa,CAAA;AAAA,EACtB;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,uBAAuB,IAAI,CAAA,MAAA;AAAA,KAC7B;AACA,IAAA,IAAI,QAAA,KAAa,GAAG,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,MAAA,IAAU,MAAM,CAAA,CAAE,CAAA;AAEtE,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AACrC,IAAA,MAAM,WAAW,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAA,CAAE,KAAK,GAAG,CAAA;AAC5C,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,IAAK,GAAA;AAC3C,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,IAAK,GAAA;AAC5C,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA;AACjC,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,QAAA,EAAU,EAAE,CAAA;AAExC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,QAAA,KAAa,cAAA,IAAkB,QAAA,KAAa,oBAAA;AAAA,MACpD,aAAa,QAAA,KAAa,WAAA;AAAA,MAC1B,gBAAgB,QAAA,KAAa,eAAA;AAAA,MAC7B,IAAA,EAAM,KAAA,CAAM,IAAI,CAAA,GAAI,CAAA,GAAI,IAAA;AAAA,MACxB,KAAA,EAAO,IAAI,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA,GAAI,CAAA,GAAI,aAAa,GAAI;AAAA,KAC3D;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,OAAA,EAAkD;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,OAAA,EAAS,SAAA,GAAY,KAAA,GAAQ,EAAA;AAC1C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,KACvB;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/D;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,aAAA,EAAe;AAAA,KAChB,CAAA;AAED,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACvC;AAEA,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,OAAO,KAAA;AAE7B,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,WAAW,IAAI,CAAA,CAAA;AAAA,KACjB;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAE,CAAA;AAC/D,IAAA,OAAO,MAAA,CACJ,IAAA,EAAK,CACL,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,SAAS,IAAI,CAAA,4CAAA;AAAA,KACf;AACA,IAAA,IAAI,QAAA,KAAa,CAAA;AACf,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAM,CAAA,CAAE,CAAA;AAE1D,IAAA,OAAO,MAAA,CACJ,IAAA,EAAK,CACL,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,EAAE,MAAA,GAAS,CAAC,CAAA,CAC1B,GAAA,CAAI,CAAC,IAAA,KAAS;AACb,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA;AAC1B,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACzB,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,QAAQ,IAAA,KAAS,GAAA;AAAA,QACjB,aAAa,IAAA,KAAS,GAAA;AAAA,QACtB,gBAAgB,IAAA,KAAS;AAAA,OAC3B;AAAA,IACF,CAAC,CAAA;AAAA,EACL;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,OAAA,EAAS,SAAA,IAAa,OAAA,EAAS,KAAA,EAAO;AACxC,MAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,OAAA,EAAS,SAAA,GAAY,IAAA,GAAO,EAAE,CAAA,CAAA,EAAI,OAAA,EAAS,KAAA,GAAQ,IAAA,GAAO,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK;AACrF,MAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,QACtC,CAAA,GAAA,EAAM,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA;AAAA,OACtB;AACA,MAAA,IAAI,QAAA,KAAa,CAAA,IAAK,CAAC,OAAA,EAAS,KAAA;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AACxC,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,aAAA,EAA+B;AAAA,MAC9D,KAAA,EAAO,CAAC,IAAI;AAAA,KACb,CAAA;AACD,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,MAAM,GAAA,GACJ,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA,IAAK,WAAA;AACjD,MAAA,MAAM,IAAI,MAAM,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,GAAO,OAAA,EAAS,SAAA,GAAY,KAAA,GAAQ,EAAA;AAC1C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,GAAA,EAAM,IAAI,CAAA,CAAA,EAAI,OAAO,MAAM,QAAQ,CAAA,CAAA;AAAA,KACrC;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,KAC9B;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,aAAa,IAAI,CAAA,CAAA;AAAA,KACnB;AACA,IAAA,IAAI,QAAA,KAAa,CAAA;AACf,MAAA,MAAM,IAAI,wBAAA,CAAyB,CAAA,UAAA,EAAa,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,OAAO,OAAO,IAAA,EAAK;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,MAAc,IAAA,EAAsB;AAC9C,IAAA,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,IAAI,CAAA;AAAA,EACrD;AACF;;;ACxRA,eAAe,kBACb,MAAA,EACqB;AACrB,EAAA,WAAA,MAAiB,SAAS,MAAA,EAAQ;AAChC,IAAA,IAAI,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AACrC,MAAA,MAAM,EAAA,GAAK,MAAM,MAAA,CAAO,iBAAA;AACxB,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,IAAI,QAAA,IAAY,CAAA;AAAA,QAC1B,MAAA,EAAQ,IAAI,MAAA,IAAU,EAAA;AAAA,QACtB,MAAA,EAAQ,IAAI,MAAA,IAAU;AAAA,OACxB;AAAA,IACF;AACA,IAAA,IAAI,uBAAA,IAA2B,SAAS,KAAA,CAAM,qBAAA;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,qBAAA,CAAsB,WAAW,eAAe,CAAA;AACxE,IAAA,IAAI,2BAAA,IAA+B,SAAS,KAAA,CAAM,yBAAA;AAChD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,0BAA0B,OAAA,IAAW;AAAA,OAC7C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,oBAAoB,OAAA,IAAW;AAAA,OACvC;AACF,IAAA,IAAI,yBAAA,IAA6B,SAAS,KAAA,CAAM,uBAAA;AAC9C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,wBAAwB,OAAA,IAAW;AAAA,OAC3C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,mBAAA,CAAoB,WAAW,WAAW,CAAA;AAClE,IAAA,IACE,+BAAA,IAAmC,SACnC,KAAA,CAAM,6BAAA;AAEN,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,8BAA8B,OAAA,IAAW;AAAA,OACjD;AACF,IAAA,IAAI,mBAAA,IAAuB,SAAS,KAAA,CAAM,iBAAA;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,iBAAA,CAAkB,WAAW,UAAU,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,EAAA,EAAI,QAAQ,EAAA,EAAG;AAC/C;AAMA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,YACW,EAAA,EACD,MAAA,EACA,yBAAA,EACA,SAAA,EACR,gBAAgB,YAAA,EAChB;AALS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,yBAAA,GAAA,yBAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAGR,IAAA,IAAA,CAAK,KAAK,IAAI,wBAAA;AAAA,MACZ,MAAA;AAAA,MACA,yBAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EArBS,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAiBT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,IAAI,GAAA,GAAM,OAAA;AACV,IAAA,IAAI,SAAS,GAAA,EAAK,GAAA,GAAM,OAAO,OAAA,CAAQ,GAAG,QAAQ,GAAG,CAAA,CAAA;AACrD,IAAA,IAAI,SAAS,GAAA,EAAK;AAChB,MAAA,MAAMA,SAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,CACvC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAA,OAAA,EAAU,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA,CACzD,IAAA,CAAK,MAAM,CAAA;AACd,MAAA,GAAA,GAAM,CAAA,EAAGA,SAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA;AAAA,IAC5B;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAIC,4BAAAA,CAA6B;AAAA,QAC/B,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,IAAA,EAAM,gBAAA;AAAA,QACN,SAAA,EAAW,EAAE,OAAA,EAAS,GAAA;AAAI,OAC3B;AAAA,KACH;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA;AACR,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAC1D,IAAA,OAAO,iBAAA,CAAkB,KAAK,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,MAChB,IAAI,iCAAA,CAAkC;AAAA,QACpC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK;AAAA,OACjB;AAAA,KACH;AAAA,EACF;AACF,CAAA;AAMO,IAAM,yBAAN,MAEP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAEQ,MAAA;AAAA,EACS,yBAAA;AAAA,EACA,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA8B;AACxC,IAAA,IAAA,CAAK,SAAS,IAAI,sBAAA,CAAuB,MAAA,CAAO,YAAA,IAAgB,EAAE,CAAA;AAClE,IAAA,IAAA,CAAK,4BAA4B,MAAA,CAAO,yBAAA;AACxC,IAAA,IAAA,CAAK,oBAAA,GAAuB,OAAO,aAAA,IAAiB,YAAA;AAAA,EACtD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAI,kCAAA,CAAmC;AAAA,QACrC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,MAAM,OAAA,EAAS,IAAA;AAAA,QACf,uBAAuB,OAAA,EAAS;AAAA,OACjC;AAAA,KACH;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,EAAA;AACpC,IAAA,IAAI,CAAC,SAAA,EAAW,MAAM,IAAI,MAAM,oCAAoC,CAAA;AACpE,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,SAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,IAAA,CAAK,yBAAA;AAAA,MACL,SAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,KAAA,MAAW,CAAC,MAAM,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,EAAG;AAClE,QAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC1C;AAAA,IACF;AAEA,IAAA,IAAI,SAAS,GAAA,EAAK;AAChB,MAAA,MAAMD,SAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,CACvC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAA,EAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA,CAClD,IAAA,CAAK,GAAG,CAAA;AACX,MAAA,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,EAASA,SAAO,CAAA,cAAA,CAAgB,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QAC7B,IAAI,gCAAA,CAAiC;AAAA,UACnC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,UAChC,SAAA,EAAW;AAAA,SACZ;AAAA,OACH;AAEA,MAAA,IAAI,IAAA,CAAK,WAAW,YAAA,EAAc;AAChC,QAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,MAC1C;AAEA,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,SAAA;AAAA,QACA,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,yBAAA;AAAA,QACL,SAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,sBAAsB,MAAM,GAAA;AAC/C,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAI,iCAAA,CAAkC;AAAA,UACpC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,UAChC,SAAA,EAAW;AAAA,SACZ;AAAA,OACH;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,UAAA,EAAoB,WAAA,EAAqC;AACnE,IAAA,MAAM,IAAI,yBAAyB,OAAO,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,SAAS,UAAA,EAA8C;AAC3D,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,QAAQ,SAAA,EAA4C;AACxD,IAAA,MAAM,IAAI,yBAAyB,SAAS,CAAA;AAAA,EAC9C;AAAA,EAEA,MAAM,KAAK,UAAA,EAAsC;AAC/C,IAAA,MAAM,IAAI,yBAAyB,MAAM,CAAA;AAAA,EAC3C;AACF","file":"index.js","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n  /** Optional state to merge into the workflow's `AgentState` via the session. */\n  stateUpdate?: Record<string, unknown>;\n}\n\nexport interface SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n  pause(sandboxId: string, ttlSeconds?: number): Promise<void>;\n  snapshot(sandboxId: string): Promise<SandboxSnapshot>;\n  restore(snapshot: SandboxSnapshot): Promise<Sandbox>;\n  fork(sandboxId: string): Promise<Sandbox>;\n}\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\nexport interface SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> {\n  createSandbox(\n    options?: TOptions\n  ): Promise<{ sandboxId: string; stateUpdate?: Record<string, unknown> }>;\n  destroySandbox(sandboxId: string): Promise<void>;\n  pauseSandbox(sandboxId: string): Promise<void>;\n  snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;\n  forkSandbox(sandboxId: string): Promise<string>;\n}\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> = {\n  [K in keyof SandboxOps<TOptions> as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<TOptions>[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type {\n  BedrockAgentCoreClient,\n  CodeInterpreterStreamOutput,\n  CodeInterpreterResult,\n  ToolName as ToolNameType,\n  ToolArguments,\n} from \"@aws-sdk/client-bedrock-agentcore\";\nimport { InvokeCodeInterpreterCommand } from \"@aws-sdk/client-bedrock-agentcore\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\nasync function consumeStream(\n  stream: AsyncIterable<CodeInterpreterStreamOutput>\n): Promise<CodeInterpreterResult> {\n  for await (const event of stream) {\n    if (\"result\" in event && event.result) return event.result;\n    if (\"accessDeniedException\" in event && event.accessDeniedException)\n      throw new Error(event.accessDeniedException.message ?? \"Access denied\");\n    if (\"resourceNotFoundException\" in event && event.resourceNotFoundException)\n      throw new Error(\n        event.resourceNotFoundException.message ?? \"Resource not found\"\n      );\n    if (\"validationException\" in event && event.validationException)\n      throw new Error(\n        event.validationException.message ?? \"Validation error\"\n      );\n    if (\"internalServerException\" in event && event.internalServerException)\n      throw new Error(\n        event.internalServerException.message ?? \"Internal server error\"\n      );\n    if (\"throttlingException\" in event && event.throttlingException)\n      throw new Error(event.throttlingException.message ?? \"Throttled\");\n    if (\n      \"serviceQuotaExceededException\" in event &&\n      event.serviceQuotaExceededException\n    )\n      throw new Error(\n        event.serviceQuotaExceededException.message ?? \"Quota exceeded\"\n      );\n    if (\"conflictException\" in event && event.conflictException)\n      throw new Error(event.conflictException.message ?? \"Conflict\");\n  }\n  throw new Error(\"No result received from code interpreter stream\");\n}\n\n/**\n * {@link SandboxFileSystem} backed by AWS Bedrock AgentCore Code Interpreter.\n *\n * Maps zeitlich's filesystem interface to Code Interpreter's\n * `readFiles` / `writeFiles` / `listFiles` / `removeFiles` / `executeCommand`\n * tool invocations.\n */\nexport class BedrockSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private client: BedrockAgentCoreClient,\n    private codeInterpreterIdentifier: string,\n    private sessionId: string,\n    workspaceBase = \"/home/user\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  private normalisePath(path: string): string {\n    return posix.resolve(this.workspaceBase, path);\n  }\n\n  private async invoke(\n    name: ToolNameType,\n    args: ToolArguments\n  ): Promise<CodeInterpreterResult> {\n    const resp = await this.client.send(\n      new InvokeCodeInterpreterCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n        name,\n        arguments: args,\n      })\n    );\n    if (!resp.stream) throw new Error(\"No stream in code interpreter response\");\n    return consumeStream(resp.stream);\n  }\n\n  private async execShell(command: string): Promise<{\n    stdout: string;\n    stderr: string;\n    exitCode: number;\n  }> {\n    const result = await this.invoke(\"executeCommand\" as ToolNameType, {\n      command,\n    });\n    return {\n      stdout: result.structuredContent?.stdout ?? \"\",\n      stderr: result.structuredContent?.stderr ?? \"\",\n      exitCode: result.structuredContent?.exitCode ?? 0,\n    };\n  }\n\n  async readFile(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const result = await this.invoke(\"readFiles\" as ToolNameType, {\n      paths: [norm],\n    });\n\n    for (const block of result.content ?? []) {\n      if (block.resource?.text != null) return block.resource.text;\n      if (block.text != null) return block.text;\n    }\n    return \"\";\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = this.normalisePath(path);\n    const result = await this.invoke(\"readFiles\" as ToolNameType, {\n      paths: [norm],\n    });\n\n    for (const block of result.content ?? []) {\n      if (block.resource?.blob) return block.resource.blob;\n      if (block.data) return block.data;\n      if (block.resource?.text != null)\n        return new TextEncoder().encode(block.resource.text);\n      if (block.text != null) return new TextEncoder().encode(block.text);\n    }\n    return new Uint8Array(0);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const isText = typeof content === \"string\";\n    const result = await this.invoke(\"writeFiles\" as ToolNameType, {\n      content: [\n        {\n          path: norm,\n          ...(isText\n            ? { text: content as string }\n            : { blob: content as Uint8Array }),\n        },\n      ],\n    });\n    if (result.isError) {\n      const msg =\n        result.content?.map((b) => b.text).join(\"\") ?? \"writeFile failed\";\n      throw new Error(msg);\n    }\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const addition =\n      typeof content === \"string\"\n        ? content\n        : new TextDecoder().decode(content);\n    const escaped = addition.replace(/'/g, \"'\\\\''\");\n    const { exitCode, stderr } = await this.execShell(\n      `printf '%s' '${escaped}' >> \"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`appendFile failed: ${stderr}`);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    const { exitCode } = await this.execShell(`test -e \"${norm}\"`);\n    return exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `stat -c '%F %s %Y' \"${norm}\" 2>&1`\n    );\n    if (exitCode !== 0) throw new Error(`stat failed: ${stderr || stdout}`);\n\n    const parts = stdout.trim().split(\" \");\n    const fileType = parts.slice(0, -2).join(\" \");\n    const sizeStr = parts[parts.length - 2] ?? \"0\";\n    const mtimeStr = parts[parts.length - 1] ?? \"0\";\n    const size = parseInt(sizeStr, 10);\n    const mtimeEpoch = parseInt(mtimeStr, 10);\n\n    return {\n      isFile: fileType === \"regular file\" || fileType === \"regular empty file\",\n      isDirectory: fileType === \"directory\",\n      isSymbolicLink: fileType === \"symbolic link\",\n      size: isNaN(size) ? 0 : size,\n      mtime: new Date(isNaN(mtimeEpoch) ? 0 : mtimeEpoch * 1000),\n    };\n  }\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    const flag = options?.recursive ? \"-p \" : \"\";\n    const { exitCode, stderr } = await this.execShell(\n      `mkdir ${flag}\"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`mkdir failed: ${stderr}`);\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = this.normalisePath(path);\n    const result = await this.invoke(\"listFiles\" as ToolNameType, {\n      directoryPath: norm,\n    });\n\n    const names: string[] = [];\n    for (const block of result.content ?? []) {\n      if (block.name) names.push(block.name);\n    }\n\n    if (names.length > 0) return names;\n\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `ls -1A \"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`readdir failed: ${stderr}`);\n    return stdout\n      .trim()\n      .split(\"\\n\")\n      .filter((l) => l.length > 0);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `find \"${norm}\" -maxdepth 1 -mindepth 1 -printf '%y %f\\\\n'`\n    );\n    if (exitCode !== 0)\n      throw new Error(`readdirWithFileTypes failed: ${stderr}`);\n\n    return stdout\n      .trim()\n      .split(\"\\n\")\n      .filter((l) => l.length > 0)\n      .map((line) => {\n        const type = line.charAt(0);\n        const name = line.slice(2);\n        return {\n          name,\n          isFile: type === \"f\",\n          isDirectory: type === \"d\",\n          isSymbolicLink: type === \"l\",\n        };\n      });\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    if (options?.recursive || options?.force) {\n      const flags = `${options?.recursive ? \"-r\" : \"\"} ${options?.force ? \"-f\" : \"\"}`.trim();\n      const { exitCode, stderr } = await this.execShell(\n        `rm ${flags} \"${norm}\"`\n      );\n      if (exitCode !== 0 && !options?.force)\n        throw new Error(`rm failed: ${stderr}`);\n      return;\n    }\n\n    const result = await this.invoke(\"removeFiles\" as ToolNameType, {\n      paths: [norm],\n    });\n    if (result.isError) {\n      const msg =\n        result.content?.map((b) => b.text).join(\"\") ?? \"rm failed\";\n      throw new Error(msg);\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const flag = options?.recursive ? \"-r \" : \"\";\n    const { exitCode, stderr } = await this.execShell(\n      `cp ${flag}\"${normSrc}\" \"${normDest}\"`\n    );\n    if (exitCode !== 0) throw new Error(`cp failed: ${stderr}`);\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const { exitCode, stderr } = await this.execShell(\n      `mv \"${normSrc}\" \"${normDest}\"`\n    );\n    if (exitCode !== 0) throw new Error(`mv failed: ${stderr}`);\n  }\n\n  async readlink(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `readlink \"${norm}\"`\n    );\n    if (exitCode !== 0)\n      throw new SandboxNotSupportedError(`readlink: ${stderr}`);\n    return stdout.trim();\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import {\n  BedrockAgentCoreClient,\n  StartCodeInterpreterSessionCommand,\n  GetCodeInterpreterSessionCommand,\n  StopCodeInterpreterSessionCommand,\n  InvokeCodeInterpreterCommand,\n} from \"@aws-sdk/client-bedrock-agentcore\";\nimport type { CodeInterpreterStreamOutput } from \"@aws-sdk/client-bedrock-agentcore\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCreateResult,\n  SandboxProvider,\n  SandboxSnapshot,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport {\n  SandboxNotFoundError,\n  SandboxNotSupportedError,\n} from \"../../../lib/sandbox/types\";\nimport { BedrockSandboxFileSystem } from \"./filesystem\";\nimport type {\n  BedrockSandbox,\n  BedrockSandboxConfig,\n  BedrockSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// Stream helpers\n// ============================================================================\n\nasync function consumeExecStream(\n  stream: AsyncIterable<CodeInterpreterStreamOutput>\n): Promise<ExecResult> {\n  for await (const event of stream) {\n    if (\"result\" in event && event.result) {\n      const sc = event.result.structuredContent;\n      return {\n        exitCode: sc?.exitCode ?? 0,\n        stdout: sc?.stdout ?? \"\",\n        stderr: sc?.stderr ?? \"\",\n      };\n    }\n    if (\"accessDeniedException\" in event && event.accessDeniedException)\n      throw new Error(event.accessDeniedException.message ?? \"Access denied\");\n    if (\"resourceNotFoundException\" in event && event.resourceNotFoundException)\n      throw new Error(\n        event.resourceNotFoundException.message ?? \"Resource not found\"\n      );\n    if (\"validationException\" in event && event.validationException)\n      throw new Error(\n        event.validationException.message ?? \"Validation error\"\n      );\n    if (\"internalServerException\" in event && event.internalServerException)\n      throw new Error(\n        event.internalServerException.message ?? \"Internal server error\"\n      );\n    if (\"throttlingException\" in event && event.throttlingException)\n      throw new Error(event.throttlingException.message ?? \"Throttled\");\n    if (\n      \"serviceQuotaExceededException\" in event &&\n      event.serviceQuotaExceededException\n    )\n      throw new Error(\n        event.serviceQuotaExceededException.message ?? \"Quota exceeded\"\n      );\n    if (\"conflictException\" in event && event.conflictException)\n      throw new Error(event.conflictException.message ?? \"Conflict\");\n  }\n  return { exitCode: 0, stdout: \"\", stderr: \"\" };\n}\n\n// ============================================================================\n// BedrockSandboxImpl\n// ============================================================================\n\nclass BedrockSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: BedrockSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private client: BedrockAgentCoreClient,\n    private codeInterpreterIdentifier: string,\n    private sessionId: string,\n    workspaceBase = \"/home/user\"\n  ) {\n    this.fs = new BedrockSandboxFileSystem(\n      client,\n      codeInterpreterIdentifier,\n      sessionId,\n      workspaceBase\n    );\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    let cmd = command;\n    if (options?.cwd) cmd = `cd \"${options.cwd}\" && ${cmd}`;\n    if (options?.env) {\n      const exports = Object.entries(options.env)\n        .map(([k, v]) => `export ${k}=\"${v.replace(/\"/g, '\\\\\"')}\"`)\n        .join(\" && \");\n      cmd = `${exports} && ${cmd}`;\n    }\n\n    const resp = await this.client.send(\n      new InvokeCodeInterpreterCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n        name: \"executeCommand\",\n        arguments: { command: cmd },\n      })\n    );\n\n    if (!resp.stream)\n      throw new Error(\"No stream in code interpreter response\");\n    return consumeExecStream(resp.stream);\n  }\n\n  async destroy(): Promise<void> {\n    await this.client.send(\n      new StopCodeInterpreterSessionCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n      })\n    );\n  }\n}\n\n// ============================================================================\n// BedrockSandboxProvider\n// ============================================================================\n\nexport class BedrockSandboxProvider\n  implements SandboxProvider<BedrockSandboxCreateOptions, BedrockSandbox>\n{\n  readonly id = \"bedrock\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  private client: BedrockAgentCoreClient;\n  private readonly codeInterpreterIdentifier: string;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config: BedrockSandboxConfig) {\n    this.client = new BedrockAgentCoreClient(config.clientConfig ?? {});\n    this.codeInterpreterIdentifier = config.codeInterpreterIdentifier;\n    this.defaultWorkspaceBase = config.workspaceBase ?? \"/home/user\";\n  }\n\n  async create(\n    options?: BedrockSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const resp = await this.client.send(\n      new StartCodeInterpreterSessionCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        name: options?.name,\n        sessionTimeoutSeconds: options?.sessionTimeoutSeconds,\n      })\n    );\n\n    const sessionId = resp.sessionId ?? \"\";\n    if (!sessionId) throw new Error(\"No sessionId returned from Bedrock\");\n    const sandbox = new BedrockSandboxImpl(\n      sessionId,\n      this.client,\n      this.codeInterpreterIdentifier,\n      sessionId,\n      this.defaultWorkspaceBase\n    );\n\n    if (options?.initialFiles) {\n      for (const [path, content] of Object.entries(options.initialFiles)) {\n        await sandbox.fs.writeFile(path, content);\n      }\n    }\n\n    if (options?.env) {\n      const exports = Object.entries(options.env)\n        .map(([k, v]) => `${k}=\"${v.replace(/\"/g, '\\\\\"')}\"`)\n        .join(\" \");\n      await sandbox.exec(`echo '${exports}' >> ~/.bashrc`);\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<BedrockSandbox> {\n    try {\n      const resp = await this.client.send(\n        new GetCodeInterpreterSessionCommand({\n          codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n          sessionId: sandboxId,\n        })\n      );\n\n      if (resp.status === \"TERMINATED\") {\n        throw new SandboxNotFoundError(sandboxId);\n      }\n\n      return new BedrockSandboxImpl(\n        sandboxId,\n        this.client,\n        this.codeInterpreterIdentifier,\n        sandboxId,\n        this.defaultWorkspaceBase\n      );\n    } catch (err) {\n      if (err instanceof SandboxNotFoundError) throw err;\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      await this.client.send(\n        new StopCodeInterpreterSessionCommand({\n          codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n          sessionId: sandboxId,\n        })\n      );\n    } catch {\n      // Already stopped or not found\n    }\n  }\n\n  async pause(_sandboxId: string, _ttlSeconds?: number): Promise<void> {\n    throw new SandboxNotSupportedError(\"pause\");\n  }\n\n  async snapshot(_sandboxId: string): Promise<SandboxSnapshot> {\n    throw new SandboxNotSupportedError(\"snapshot\");\n  }\n\n  async restore(_snapshot: SandboxSnapshot): Promise<never> {\n    throw new SandboxNotSupportedError(\"restore\");\n  }\n\n  async fork(_sandboxId: string): Promise<Sandbox> {\n    throw new SandboxNotSupportedError(\"fork\");\n  }\n}\n\n// Re-exports\nexport { BedrockSandboxFileSystem } from \"./filesystem\";\nexport type {\n  BedrockSandbox,\n  BedrockSandboxConfig,\n  BedrockSandboxCreateOptions,\n} from \"./types\";\n"]}
+{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/bedrock/filesystem.ts","../../../../src/adapters/sandbox/bedrock/index.ts"],"names":["exports","InvokeCodeInterpreterCommand"],"mappings":";;;;;AAkLO,IAAM,wBAAA,GAAN,cAAuC,kBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmC,kBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AChLA,eAAe,cACb,MAAA,EACgC;AAChC,EAAA,WAAA,MAAiB,SAAS,MAAA,EAAQ;AAChC,IAAA,IAAI,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,SAAe,KAAA,CAAM,MAAA;AACpD,IAAA,IAAI,uBAAA,IAA2B,SAAS,KAAA,CAAM,qBAAA;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,qBAAA,CAAsB,WAAW,eAAe,CAAA;AACxE,IAAA,IAAI,2BAAA,IAA+B,SAAS,KAAA,CAAM,yBAAA;AAChD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,0BAA0B,OAAA,IAAW;AAAA,OAC7C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,oBAAoB,OAAA,IAAW;AAAA,OACvC;AACF,IAAA,IAAI,yBAAA,IAA6B,SAAS,KAAA,CAAM,uBAAA;AAC9C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,wBAAwB,OAAA,IAAW;AAAA,OAC3C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,mBAAA,CAAoB,WAAW,WAAW,CAAA;AAClE,IAAA,IACE,+BAAA,IAAmC,SACnC,KAAA,CAAM,6BAAA;AAEN,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,8BAA8B,OAAA,IAAW;AAAA,OACjD;AACF,IAAA,IAAI,mBAAA,IAAuB,SAAS,KAAA,CAAM,iBAAA;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,iBAAA,CAAkB,WAAW,UAAU,CAAA;AAAA,EACjE;AACA,EAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AACnE;AASO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,MAAA,EACA,yBAAA,EACA,SAAA,EACR,gBAAgB,YAAA,EAChB;AAJQ,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,yBAAA,GAAA,yBAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EATS,aAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeD,cAAc,IAAA,EAAsB;AAC1C,IAAA,IACE,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,IACrB,CAAC,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,aAAA,GAAgB,GAAG,CAAA,IACzC,IAAA,KAAS,KAAK,aAAA,EACd;AACA,MAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,IAChC;AACA,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,eAAe,IAAI,CAAA;AACvD,IAAA,IACE,CAAC,SAAS,UAAA,CAAW,IAAA,CAAK,gBAAgB,GAAG,CAAA,IAC7C,QAAA,KAAa,IAAA,CAAK,aAAA,EAClB;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,QAAQ,CAAA,qBAAA,EAAwB,IAAA,CAAK,aAAa,CAAA,CAAA;AAAA,OAC3E;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,WAAW,IAAA,EAAsB;AACvC,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,KAAK,aAAA,GAAgB,GAAA;AACpC,IAAA,OAAO,GAAA,CAAI,WAAW,MAAM,CAAA,GAAI,IAAI,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,GAAA;AAAA,EAC7D;AAAA,EAEA,MAAc,MAAA,CACZ,IAAA,EACA,IAAA,EACgC;AAChC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAI,4BAAA,CAA6B;AAAA,QAC/B,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,IAAA;AAAA,QACA,SAAA,EAAW;AAAA,OACZ;AAAA,KACH;AACA,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAC1E,IAAA,OAAO,aAAA,CAAc,KAAK,MAAM,CAAA;AAAA,EAClC;AAAA,EAEA,MAAc,UAAU,OAAA,EAIrB;AACD,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,gBAAA,EAAkC;AAAA,MACjE;AAAA,KACD,CAAA;AACD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,MAAA,IAAU,EAAA;AAAA,MAC5C,MAAA,EAAQ,MAAA,CAAO,iBAAA,EAAmB,MAAA,IAAU,EAAA;AAAA,MAC5C,QAAA,EAAU,MAAA,CAAO,iBAAA,EAAmB,QAAA,IAAY;AAAA,KAClD;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,KAAA,EAAO,CAAC,GAAG;AAAA,KACZ,CAAA;AAED,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,MAAM,QAAA,EAAU,IAAA,IAAQ,IAAA,EAAM,OAAO,MAAM,QAAA,CAAS,IAAA;AACxD,MAAA,IAAI,KAAA,CAAM,IAAA,IAAQ,IAAA,EAAM,OAAO,KAAA,CAAM,IAAA;AAAA,IACvC;AACA,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,KAAA,EAAO,CAAC,GAAG;AAAA,KACZ,CAAA;AAED,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM,OAAO,MAAM,QAAA,CAAS,IAAA;AAChD,MAAA,IAAI,KAAA,CAAM,IAAA,EAAM,OAAO,KAAA,CAAM,IAAA;AAC7B,MAAA,IAAI,KAAA,CAAM,UAAU,IAAA,IAAQ,IAAA;AAC1B,QAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAA,CAAM,SAAS,IAAI,CAAA;AACrD,MAAA,IAAI,KAAA,CAAM,QAAQ,IAAA,EAAM,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,IAAI,WAAW,CAAC,CAAA;AAAA,EACzB;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AAChC,IAAA,MAAM,MAAA,GAAS,OAAO,OAAA,KAAY,QAAA;AAClC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,YAAA,EAA8B;AAAA,MAC7D,OAAA,EAAS;AAAA,QACP;AAAA,UACE,IAAA,EAAM,GAAA;AAAA,UACN,GAAI,SACA,EAAE,IAAA,EAAM,SAAkB,GAC1B,EAAE,MAAM,OAAA;AAAsB;AACpC;AACF,KACD,CAAA;AACD,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,MAAM,GAAA,GACJ,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA,IAAK,kBAAA;AACjD,MAAA,MAAM,IAAI,MAAM,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,UACA,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA;AACtC,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,aAAA,EAAgB,OAAO,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA;AAAA,KACtC;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAAA,EACpE;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,UAAS,GAAI,MAAM,KAAK,SAAA,CAAU,CAAA,SAAA,EAAY,IAAI,CAAA,CAAA,CAAG,CAAA;AAC7D,IAAA,OAAO,QAAA,KAAa,CAAA;AAAA,EACtB;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,uBAAuB,IAAI,CAAA,MAAA;AAAA,KAC7B;AACA,IAAA,IAAI,QAAA,KAAa,GAAG,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,MAAA,IAAU,MAAM,CAAA,CAAE,CAAA;AAEtE,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,EAAK,CAAE,MAAM,GAAG,CAAA;AACrC,IAAA,MAAM,WAAW,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAA,CAAE,KAAK,GAAG,CAAA;AAC5C,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,IAAK,GAAA;AAC3C,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,IAAK,GAAA;AAC5C,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA;AACjC,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,QAAA,EAAU,EAAE,CAAA;AAExC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,QAAA,KAAa,cAAA,IAAkB,QAAA,KAAa,oBAAA;AAAA,MACpD,aAAa,QAAA,KAAa,WAAA;AAAA,MAC1B,gBAAgB,QAAA,KAAa,eAAA;AAAA,MAC7B,IAAA,EAAM,KAAA,CAAM,IAAI,CAAA,GAAI,CAAA,GAAI,IAAA;AAAA,MACxB,KAAA,EAAO,IAAI,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA,GAAI,CAAA,GAAI,aAAa,GAAI;AAAA,KAC3D;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,OAAA,EAAkD;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,OAAA,EAAS,SAAA,GAAY,KAAA,GAAQ,EAAA;AAC1C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,KACvB;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/D;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,WAAA,EAA6B;AAAA,MAC5D,aAAA,EAAe;AAAA,KAChB,CAAA;AAED,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG;AACxC,MAAA,IAAI,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACvC;AAEA,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,OAAO,KAAA;AAE7B,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,WAAW,IAAI,CAAA,CAAA;AAAA,KACjB;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAE,CAAA;AAC/D,IAAA,OAAO,MAAA,CACJ,IAAA,EAAK,CACL,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,SAAS,IAAI,CAAA,4CAAA;AAAA,KACf;AACA,IAAA,IAAI,QAAA,KAAa,CAAA;AACf,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAM,CAAA,CAAE,CAAA;AAE1D,IAAA,OAAO,MAAA,CACJ,IAAA,EAAK,CACL,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,EAAE,MAAA,GAAS,CAAC,CAAA,CAC1B,GAAA,CAAI,CAAC,IAAA,KAAS;AACb,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA;AAC1B,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACzB,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,QAAQ,IAAA,KAAS,GAAA;AAAA,QACjB,aAAa,IAAA,KAAS,GAAA;AAAA,QACtB,gBAAgB,IAAA,KAAS;AAAA,OAC3B;AAAA,IACF,CAAC,CAAA;AAAA,EACL;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,OAAA,EAAS,SAAA,IAAa,OAAA,EAAS,KAAA,EAAO;AACxC,MAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,OAAA,EAAS,SAAA,GAAY,IAAA,GAAO,EAAE,CAAA,CAAA,EAAI,OAAA,EAAS,KAAA,GAAQ,IAAA,GAAO,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK;AACrF,MAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,QACtC,CAAA,GAAA,EAAM,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA;AAAA,OACtB;AACA,MAAA,IAAI,QAAA,KAAa,CAAA,IAAK,CAAC,OAAA,EAAS,KAAA;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AACxC,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,aAAA,EAA+B;AAAA,MAC9D,KAAA,EAAO,CAAC,GAAG;AAAA,KACZ,CAAA;AACD,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,MAAM,GAAA,GACJ,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA,IAAK,WAAA;AACjD,MAAA,MAAM,IAAI,MAAM,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,GAAO,OAAA,EAAS,SAAA,GAAY,KAAA,GAAQ,EAAA;AAC1C,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,GAAA,EAAM,IAAI,CAAA,CAAA,EAAI,OAAO,MAAM,QAAQ,CAAA,CAAA;AAAA,KACrC;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MACtC,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,KAC9B;AACA,IAAA,IAAI,aAAa,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,SAAA;AAAA,MAC9C,aAAa,IAAI,CAAA,CAAA;AAAA,KACnB;AACA,IAAA,IAAI,QAAA,KAAa,CAAA;AACf,MAAA,MAAM,IAAI,wBAAA,CAAyB,CAAA,UAAA,EAAa,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,OAAO,OAAO,IAAA,EAAK;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,MAAc,IAAA,EAAsB;AAC9C,IAAA,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,IAAI,CAAA;AAAA,EACrD;AACF;;;ACzTA,eAAe,kBACb,MAAA,EACqB;AACrB,EAAA,WAAA,MAAiB,SAAS,MAAA,EAAQ;AAChC,IAAA,IAAI,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AACrC,MAAA,MAAM,EAAA,GAAK,MAAM,MAAA,CAAO,iBAAA;AACxB,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,IAAI,QAAA,IAAY,CAAA;AAAA,QAC1B,MAAA,EAAQ,IAAI,MAAA,IAAU,EAAA;AAAA,QACtB,MAAA,EAAQ,IAAI,MAAA,IAAU;AAAA,OACxB;AAAA,IACF;AACA,IAAA,IAAI,uBAAA,IAA2B,SAAS,KAAA,CAAM,qBAAA;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,qBAAA,CAAsB,WAAW,eAAe,CAAA;AACxE,IAAA,IAAI,2BAAA,IAA+B,SAAS,KAAA,CAAM,yBAAA;AAChD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,0BAA0B,OAAA,IAAW;AAAA,OAC7C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,oBAAoB,OAAA,IAAW;AAAA,OACvC;AACF,IAAA,IAAI,yBAAA,IAA6B,SAAS,KAAA,CAAM,uBAAA;AAC9C,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,wBAAwB,OAAA,IAAW;AAAA,OAC3C;AACF,IAAA,IAAI,qBAAA,IAAyB,SAAS,KAAA,CAAM,mBAAA;AAC1C,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,mBAAA,CAAoB,WAAW,WAAW,CAAA;AAClE,IAAA,IACE,+BAAA,IAAmC,SACnC,KAAA,CAAM,6BAAA;AAEN,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,KAAA,CAAM,8BAA8B,OAAA,IAAW;AAAA,OACjD;AACF,IAAA,IAAI,mBAAA,IAAuB,SAAS,KAAA,CAAM,iBAAA;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,iBAAA,CAAkB,WAAW,UAAU,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,EAAA,EAAI,QAAQ,EAAA,EAAG;AAC/C;AAMA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,YACW,EAAA,EACD,MAAA,EACA,yBAAA,EACA,SAAA,EACR,gBAAgB,YAAA,EAChB;AALS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,yBAAA,GAAA,yBAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAGR,IAAA,IAAA,CAAK,KAAK,IAAI,wBAAA;AAAA,MACZ,MAAA;AAAA,MACA,yBAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EArBS,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAiBT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,IAAI,GAAA,GAAM,OAAA;AACV,IAAA,IAAI,SAAS,GAAA,EAAK,GAAA,GAAM,OAAO,OAAA,CAAQ,GAAG,QAAQ,GAAG,CAAA,CAAA;AACrD,IAAA,IAAI,SAAS,GAAA,EAAK;AAChB,MAAA,MAAMA,SAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,CACvC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAA,OAAA,EAAU,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA,CACzD,IAAA,CAAK,MAAM,CAAA;AACd,MAAA,GAAA,GAAM,CAAA,EAAGA,SAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA;AAAA,IAC5B;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAIC,4BAAAA,CAA6B;AAAA,QAC/B,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,IAAA,EAAM,gBAAA;AAAA,QACN,SAAA,EAAW,EAAE,OAAA,EAAS,GAAA;AAAI,OAC3B;AAAA,KACH;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA;AACR,MAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAC1D,IAAA,OAAO,iBAAA,CAAkB,KAAK,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,MAChB,IAAI,iCAAA,CAAkC;AAAA,QACpC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,WAAW,IAAA,CAAK;AAAA,OACjB;AAAA,KACH;AAAA,EACF;AACF,CAAA;AAMO,IAAM,yBAAN,MAEP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAEQ,MAAA;AAAA,EACS,yBAAA;AAAA,EACA,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA8B;AACxC,IAAA,IAAA,CAAK,SAAS,IAAI,sBAAA,CAAuB,MAAA,CAAO,YAAA,IAAgB,EAAE,CAAA;AAClE,IAAA,IAAA,CAAK,4BAA4B,MAAA,CAAO,yBAAA;AACxC,IAAA,IAAA,CAAK,oBAAA,GAAuB,OAAO,aAAA,IAAiB,YAAA;AAAA,EACtD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,MAC7B,IAAI,kCAAA,CAAmC;AAAA,QACrC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,MAAM,OAAA,EAAS,IAAA;AAAA,QACf,uBAAuB,OAAA,EAAS;AAAA,OACjC;AAAA,KACH;AAEA,IAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,EAAA;AACpC,IAAA,IAAI,CAAC,SAAA,EAAW,MAAM,IAAI,MAAM,oCAAoC,CAAA;AACpE,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,SAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,IAAA,CAAK,yBAAA;AAAA,MACL,SAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,KAAA,MAAW,CAAC,MAAM,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,EAAG;AAClE,QAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC1C;AAAA,IACF;AAEA,IAAA,IAAI,SAAS,GAAA,EAAK;AAChB,MAAA,MAAMD,SAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,CACvC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAA,EAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA,CAClD,IAAA,CAAK,GAAG,CAAA;AACX,MAAA,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,EAASA,SAAO,CAAA,cAAA,CAAgB,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QAC7B,IAAI,gCAAA,CAAiC;AAAA,UACnC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,UAChC,SAAA,EAAW;AAAA,SACZ;AAAA,OACH;AAEA,MAAA,IAAI,IAAA,CAAK,WAAW,YAAA,EAAc;AAChC,QAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,MAC1C;AAEA,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,SAAA;AAAA,QACA,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,yBAAA;AAAA,QACL,SAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,sBAAsB,MAAM,GAAA;AAC/C,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,MAAA,CAAO,IAAA;AAAA,QAChB,IAAI,iCAAA,CAAkC;AAAA,UACpC,2BAA2B,IAAA,CAAK,yBAAA;AAAA,UAChC,SAAA,EAAW;AAAA,SACZ;AAAA,OACH;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,UAAA,EAAoB,WAAA,EAAqC;AACnE,IAAA,MAAM,IAAI,yBAAyB,OAAO,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,SAAS,UAAA,EAA8C;AAC3D,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,QAAQ,SAAA,EAA4C;AACxD,IAAA,MAAM,IAAI,yBAAyB,SAAS,CAAA;AAAA,EAC9C;AAAA,EAEA,MAAM,KAAK,UAAA,EAAsC;AAC/C,IAAA,MAAM,IAAI,yBAAyB,MAAM,CAAA;AAAA,EAC3C;AACF","file":"index.js","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n  /** Optional state to merge into the workflow's `AgentState` via the session. */\n  stateUpdate?: Record<string, unknown>;\n}\n\nexport interface SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n  pause(sandboxId: string, ttlSeconds?: number): Promise<void>;\n  snapshot(sandboxId: string): Promise<SandboxSnapshot>;\n  restore(snapshot: SandboxSnapshot): Promise<Sandbox>;\n  fork(sandboxId: string): Promise<Sandbox>;\n}\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\nexport interface SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> {\n  createSandbox(\n    options?: TOptions\n  ): Promise<{ sandboxId: string; stateUpdate?: Record<string, unknown> }>;\n  destroySandbox(sandboxId: string): Promise<void>;\n  pauseSandbox(sandboxId: string): Promise<void>;\n  snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;\n  forkSandbox(sandboxId: string): Promise<string>;\n}\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> = {\n  [K in keyof SandboxOps<TOptions> as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<TOptions>[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type {\n  BedrockAgentCoreClient,\n  CodeInterpreterStreamOutput,\n  CodeInterpreterResult,\n  ToolName as ToolNameType,\n  ToolArguments,\n} from \"@aws-sdk/client-bedrock-agentcore\";\nimport { InvokeCodeInterpreterCommand } from \"@aws-sdk/client-bedrock-agentcore\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\nasync function consumeStream(\n  stream: AsyncIterable<CodeInterpreterStreamOutput>\n): Promise<CodeInterpreterResult> {\n  for await (const event of stream) {\n    if (\"result\" in event && event.result) return event.result;\n    if (\"accessDeniedException\" in event && event.accessDeniedException)\n      throw new Error(event.accessDeniedException.message ?? \"Access denied\");\n    if (\"resourceNotFoundException\" in event && event.resourceNotFoundException)\n      throw new Error(\n        event.resourceNotFoundException.message ?? \"Resource not found\"\n      );\n    if (\"validationException\" in event && event.validationException)\n      throw new Error(\n        event.validationException.message ?? \"Validation error\"\n      );\n    if (\"internalServerException\" in event && event.internalServerException)\n      throw new Error(\n        event.internalServerException.message ?? \"Internal server error\"\n      );\n    if (\"throttlingException\" in event && event.throttlingException)\n      throw new Error(event.throttlingException.message ?? \"Throttled\");\n    if (\n      \"serviceQuotaExceededException\" in event &&\n      event.serviceQuotaExceededException\n    )\n      throw new Error(\n        event.serviceQuotaExceededException.message ?? \"Quota exceeded\"\n      );\n    if (\"conflictException\" in event && event.conflictException)\n      throw new Error(event.conflictException.message ?? \"Conflict\");\n  }\n  throw new Error(\"No result received from code interpreter stream\");\n}\n\n/**\n * {@link SandboxFileSystem} backed by AWS Bedrock AgentCore Code Interpreter.\n *\n * Maps zeitlich's filesystem interface to Code Interpreter's\n * `readFiles` / `writeFiles` / `listFiles` / `removeFiles` / `executeCommand`\n * tool invocations.\n */\nexport class BedrockSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private client: BedrockAgentCoreClient,\n    private codeInterpreterIdentifier: string,\n    private sessionId: string,\n    workspaceBase = \"/home/user\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  /**\n   * Resolve a caller-supplied path to an absolute path within the workspace.\n   * Used for shell commands that need full paths.\n   */\n  private normalisePath(path: string): string {\n    if (\n      posix.isAbsolute(path) &&\n      !path.startsWith(this.workspaceBase + \"/\") &&\n      path !== this.workspaceBase\n    ) {\n      path = path.replace(/^\\/+/, \"\");\n    }\n    const resolved = posix.resolve(this.workspaceBase, path);\n    if (\n      !resolved.startsWith(this.workspaceBase + \"/\") &&\n      resolved !== this.workspaceBase\n    ) {\n      throw new Error(\n        `Invalid file path: \"${resolved}\" escapes workspace \"${this.workspaceBase}\"`\n      );\n    }\n    return resolved;\n  }\n\n  /**\n   * Return a workspace-relative path for Bedrock tool invocations\n   * (`writeFiles`, `readFiles`, `listFiles`, `removeFiles`), which\n   * reject absolute paths as \"path traversal\".\n   */\n  private toToolPath(path: string): string {\n    const abs = this.normalisePath(path);\n    const prefix = this.workspaceBase + \"/\";\n    return abs.startsWith(prefix) ? abs.slice(prefix.length) : abs;\n  }\n\n  private async invoke(\n    name: ToolNameType,\n    args: ToolArguments\n  ): Promise<CodeInterpreterResult> {\n    const resp = await this.client.send(\n      new InvokeCodeInterpreterCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n        name,\n        arguments: args,\n      })\n    );\n    if (!resp.stream) throw new Error(\"No stream in code interpreter response\");\n    return consumeStream(resp.stream);\n  }\n\n  private async execShell(command: string): Promise<{\n    stdout: string;\n    stderr: string;\n    exitCode: number;\n  }> {\n    const result = await this.invoke(\"executeCommand\" as ToolNameType, {\n      command,\n    });\n    return {\n      stdout: result.structuredContent?.stdout ?? \"\",\n      stderr: result.structuredContent?.stderr ?? \"\",\n      exitCode: result.structuredContent?.exitCode ?? 0,\n    };\n  }\n\n  async readFile(path: string): Promise<string> {\n    const rel = this.toToolPath(path);\n    const result = await this.invoke(\"readFiles\" as ToolNameType, {\n      paths: [rel],\n    });\n\n    for (const block of result.content ?? []) {\n      if (block.resource?.text != null) return block.resource.text;\n      if (block.text != null) return block.text;\n    }\n    return \"\";\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const rel = this.toToolPath(path);\n    const result = await this.invoke(\"readFiles\" as ToolNameType, {\n      paths: [rel],\n    });\n\n    for (const block of result.content ?? []) {\n      if (block.resource?.blob) return block.resource.blob;\n      if (block.data) return block.data;\n      if (block.resource?.text != null)\n        return new TextEncoder().encode(block.resource.text);\n      if (block.text != null) return new TextEncoder().encode(block.text);\n    }\n    return new Uint8Array(0);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const rel = this.toToolPath(path);\n    const isText = typeof content === \"string\";\n    const result = await this.invoke(\"writeFiles\" as ToolNameType, {\n      content: [\n        {\n          path: rel,\n          ...(isText\n            ? { text: content as string }\n            : { blob: content as Uint8Array }),\n        },\n      ],\n    });\n    if (result.isError) {\n      const msg =\n        result.content?.map((b) => b.text).join(\"\") ?? \"writeFile failed\";\n      throw new Error(msg);\n    }\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const addition =\n      typeof content === \"string\"\n        ? content\n        : new TextDecoder().decode(content);\n    const escaped = addition.replace(/'/g, \"'\\\\''\");\n    const { exitCode, stderr } = await this.execShell(\n      `printf '%s' '${escaped}' >> \"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`appendFile failed: ${stderr}`);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    const { exitCode } = await this.execShell(`test -e \"${norm}\"`);\n    return exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `stat -c '%F %s %Y' \"${norm}\" 2>&1`\n    );\n    if (exitCode !== 0) throw new Error(`stat failed: ${stderr || stdout}`);\n\n    const parts = stdout.trim().split(\" \");\n    const fileType = parts.slice(0, -2).join(\" \");\n    const sizeStr = parts[parts.length - 2] ?? \"0\";\n    const mtimeStr = parts[parts.length - 1] ?? \"0\";\n    const size = parseInt(sizeStr, 10);\n    const mtimeEpoch = parseInt(mtimeStr, 10);\n\n    return {\n      isFile: fileType === \"regular file\" || fileType === \"regular empty file\",\n      isDirectory: fileType === \"directory\",\n      isSymbolicLink: fileType === \"symbolic link\",\n      size: isNaN(size) ? 0 : size,\n      mtime: new Date(isNaN(mtimeEpoch) ? 0 : mtimeEpoch * 1000),\n    };\n  }\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    const flag = options?.recursive ? \"-p \" : \"\";\n    const { exitCode, stderr } = await this.execShell(\n      `mkdir ${flag}\"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`mkdir failed: ${stderr}`);\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const rel = this.toToolPath(path);\n    const result = await this.invoke(\"listFiles\" as ToolNameType, {\n      directoryPath: rel,\n    });\n\n    const names: string[] = [];\n    for (const block of result.content ?? []) {\n      if (block.name) names.push(block.name);\n    }\n\n    if (names.length > 0) return names;\n\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `ls -1A \"${norm}\"`\n    );\n    if (exitCode !== 0) throw new Error(`readdir failed: ${stderr}`);\n    return stdout\n      .trim()\n      .split(\"\\n\")\n      .filter((l) => l.length > 0);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `find \"${norm}\" -maxdepth 1 -mindepth 1 -printf '%y %f\\\\n'`\n    );\n    if (exitCode !== 0)\n      throw new Error(`readdirWithFileTypes failed: ${stderr}`);\n\n    return stdout\n      .trim()\n      .split(\"\\n\")\n      .filter((l) => l.length > 0)\n      .map((line) => {\n        const type = line.charAt(0);\n        const name = line.slice(2);\n        return {\n          name,\n          isFile: type === \"f\",\n          isDirectory: type === \"d\",\n          isSymbolicLink: type === \"l\",\n        };\n      });\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    if (options?.recursive || options?.force) {\n      const flags = `${options?.recursive ? \"-r\" : \"\"} ${options?.force ? \"-f\" : \"\"}`.trim();\n      const { exitCode, stderr } = await this.execShell(\n        `rm ${flags} \"${norm}\"`\n      );\n      if (exitCode !== 0 && !options?.force)\n        throw new Error(`rm failed: ${stderr}`);\n      return;\n    }\n\n    const rel = this.toToolPath(path);\n    const result = await this.invoke(\"removeFiles\" as ToolNameType, {\n      paths: [rel],\n    });\n    if (result.isError) {\n      const msg =\n        result.content?.map((b) => b.text).join(\"\") ?? \"rm failed\";\n      throw new Error(msg);\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const flag = options?.recursive ? \"-r \" : \"\";\n    const { exitCode, stderr } = await this.execShell(\n      `cp ${flag}\"${normSrc}\" \"${normDest}\"`\n    );\n    if (exitCode !== 0) throw new Error(`cp failed: ${stderr}`);\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const { exitCode, stderr } = await this.execShell(\n      `mv \"${normSrc}\" \"${normDest}\"`\n    );\n    if (exitCode !== 0) throw new Error(`mv failed: ${stderr}`);\n  }\n\n  async readlink(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const { stdout, exitCode, stderr } = await this.execShell(\n      `readlink \"${norm}\"`\n    );\n    if (exitCode !== 0)\n      throw new SandboxNotSupportedError(`readlink: ${stderr}`);\n    return stdout.trim();\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import {\n  BedrockAgentCoreClient,\n  StartCodeInterpreterSessionCommand,\n  GetCodeInterpreterSessionCommand,\n  StopCodeInterpreterSessionCommand,\n  InvokeCodeInterpreterCommand,\n} from \"@aws-sdk/client-bedrock-agentcore\";\nimport type { CodeInterpreterStreamOutput } from \"@aws-sdk/client-bedrock-agentcore\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCreateResult,\n  SandboxProvider,\n  SandboxSnapshot,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport {\n  SandboxNotFoundError,\n  SandboxNotSupportedError,\n} from \"../../../lib/sandbox/types\";\nimport { BedrockSandboxFileSystem } from \"./filesystem\";\nimport type {\n  BedrockSandbox,\n  BedrockSandboxConfig,\n  BedrockSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// Stream helpers\n// ============================================================================\n\nasync function consumeExecStream(\n  stream: AsyncIterable<CodeInterpreterStreamOutput>\n): Promise<ExecResult> {\n  for await (const event of stream) {\n    if (\"result\" in event && event.result) {\n      const sc = event.result.structuredContent;\n      return {\n        exitCode: sc?.exitCode ?? 0,\n        stdout: sc?.stdout ?? \"\",\n        stderr: sc?.stderr ?? \"\",\n      };\n    }\n    if (\"accessDeniedException\" in event && event.accessDeniedException)\n      throw new Error(event.accessDeniedException.message ?? \"Access denied\");\n    if (\"resourceNotFoundException\" in event && event.resourceNotFoundException)\n      throw new Error(\n        event.resourceNotFoundException.message ?? \"Resource not found\"\n      );\n    if (\"validationException\" in event && event.validationException)\n      throw new Error(\n        event.validationException.message ?? \"Validation error\"\n      );\n    if (\"internalServerException\" in event && event.internalServerException)\n      throw new Error(\n        event.internalServerException.message ?? \"Internal server error\"\n      );\n    if (\"throttlingException\" in event && event.throttlingException)\n      throw new Error(event.throttlingException.message ?? \"Throttled\");\n    if (\n      \"serviceQuotaExceededException\" in event &&\n      event.serviceQuotaExceededException\n    )\n      throw new Error(\n        event.serviceQuotaExceededException.message ?? \"Quota exceeded\"\n      );\n    if (\"conflictException\" in event && event.conflictException)\n      throw new Error(event.conflictException.message ?? \"Conflict\");\n  }\n  return { exitCode: 0, stdout: \"\", stderr: \"\" };\n}\n\n// ============================================================================\n// BedrockSandboxImpl\n// ============================================================================\n\nclass BedrockSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: BedrockSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private client: BedrockAgentCoreClient,\n    private codeInterpreterIdentifier: string,\n    private sessionId: string,\n    workspaceBase = \"/home/user\"\n  ) {\n    this.fs = new BedrockSandboxFileSystem(\n      client,\n      codeInterpreterIdentifier,\n      sessionId,\n      workspaceBase\n    );\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    let cmd = command;\n    if (options?.cwd) cmd = `cd \"${options.cwd}\" && ${cmd}`;\n    if (options?.env) {\n      const exports = Object.entries(options.env)\n        .map(([k, v]) => `export ${k}=\"${v.replace(/\"/g, '\\\\\"')}\"`)\n        .join(\" && \");\n      cmd = `${exports} && ${cmd}`;\n    }\n\n    const resp = await this.client.send(\n      new InvokeCodeInterpreterCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n        name: \"executeCommand\",\n        arguments: { command: cmd },\n      })\n    );\n\n    if (!resp.stream)\n      throw new Error(\"No stream in code interpreter response\");\n    return consumeExecStream(resp.stream);\n  }\n\n  async destroy(): Promise<void> {\n    await this.client.send(\n      new StopCodeInterpreterSessionCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        sessionId: this.sessionId,\n      })\n    );\n  }\n}\n\n// ============================================================================\n// BedrockSandboxProvider\n// ============================================================================\n\nexport class BedrockSandboxProvider\n  implements SandboxProvider<BedrockSandboxCreateOptions, BedrockSandbox>\n{\n  readonly id = \"bedrock\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  private client: BedrockAgentCoreClient;\n  private readonly codeInterpreterIdentifier: string;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config: BedrockSandboxConfig) {\n    this.client = new BedrockAgentCoreClient(config.clientConfig ?? {});\n    this.codeInterpreterIdentifier = config.codeInterpreterIdentifier;\n    this.defaultWorkspaceBase = config.workspaceBase ?? \"/home/user\";\n  }\n\n  async create(\n    options?: BedrockSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const resp = await this.client.send(\n      new StartCodeInterpreterSessionCommand({\n        codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n        name: options?.name,\n        sessionTimeoutSeconds: options?.sessionTimeoutSeconds,\n      })\n    );\n\n    const sessionId = resp.sessionId ?? \"\";\n    if (!sessionId) throw new Error(\"No sessionId returned from Bedrock\");\n    const sandbox = new BedrockSandboxImpl(\n      sessionId,\n      this.client,\n      this.codeInterpreterIdentifier,\n      sessionId,\n      this.defaultWorkspaceBase\n    );\n\n    if (options?.initialFiles) {\n      for (const [path, content] of Object.entries(options.initialFiles)) {\n        await sandbox.fs.writeFile(path, content);\n      }\n    }\n\n    if (options?.env) {\n      const exports = Object.entries(options.env)\n        .map(([k, v]) => `${k}=\"${v.replace(/\"/g, '\\\\\"')}\"`)\n        .join(\" \");\n      await sandbox.exec(`echo '${exports}' >> ~/.bashrc`);\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<BedrockSandbox> {\n    try {\n      const resp = await this.client.send(\n        new GetCodeInterpreterSessionCommand({\n          codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n          sessionId: sandboxId,\n        })\n      );\n\n      if (resp.status === \"TERMINATED\") {\n        throw new SandboxNotFoundError(sandboxId);\n      }\n\n      return new BedrockSandboxImpl(\n        sandboxId,\n        this.client,\n        this.codeInterpreterIdentifier,\n        sandboxId,\n        this.defaultWorkspaceBase\n      );\n    } catch (err) {\n      if (err instanceof SandboxNotFoundError) throw err;\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      await this.client.send(\n        new StopCodeInterpreterSessionCommand({\n          codeInterpreterIdentifier: this.codeInterpreterIdentifier,\n          sessionId: sandboxId,\n        })\n      );\n    } catch {\n      // Already stopped or not found\n    }\n  }\n\n  async pause(_sandboxId: string, _ttlSeconds?: number): Promise<void> {\n    throw new SandboxNotSupportedError(\"pause\");\n  }\n\n  async snapshot(_sandboxId: string): Promise<SandboxSnapshot> {\n    throw new SandboxNotSupportedError(\"snapshot\");\n  }\n\n  async restore(_snapshot: SandboxSnapshot): Promise<never> {\n    throw new SandboxNotSupportedError(\"restore\");\n  }\n\n  async fork(_sandboxId: string): Promise<Sandbox> {\n    throw new SandboxNotSupportedError(\"fork\");\n  }\n}\n\n// Re-exports\nexport { BedrockSandboxFileSystem } from \"./filesystem\";\nexport type {\n  BedrockSandbox,\n  BedrockSandboxConfig,\n  BedrockSandboxCreateOptions,\n} from \"./types\";\n"]}

package/dist/adapters/sandbox/bedrock/workflow.d.cts

@@ -1,6 +1,6 @@
 import { proxyActivities } from '@temporalio/workflow';
 import { g as SandboxOps } from '../../../types-ChAMwU3q.cjs';
-import { B as BedrockSandboxCreateOptions } from '../../../types-DhTCEMhr.cjs';
+import { B as BedrockSandboxCreateOptions } from '../../../types-ZHs2v9Ap.cjs';
 import '@temporalio/common';
 import '@aws-sdk/client-bedrock-agentcore';
 

package/dist/adapters/sandbox/bedrock/workflow.d.ts

@@ -1,6 +1,6 @@
 import { proxyActivities } from '@temporalio/workflow';
 import { g as SandboxOps } from '../../../types-ChAMwU3q.js';
-import { B as BedrockSandboxCreateOptions } from '../../../types-d9NznUqd.js';
+import { B as BedrockSandboxCreateOptions } from '../../../types-BdCdR41N.js';
 import '@temporalio/common';
 import '@aws-sdk/client-bedrock-agentcore';
 

package/dist/adapters/sandbox/virtual/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/virtual/filesystem.ts","../../../../src/lib/thread/id.ts","../../../../src/adapters/sandbox/virtual/provider.ts","../../../../src/lib/activity.ts","../../../../src/adapters/sandbox/virtual/with-virtual-sandbox.ts","../../../../src/adapters/sandbox/virtual/queries.ts","../../../../src/adapters/sandbox/virtual/index.ts"],"names":["ApplicationFailure","posix","path","uuid4","Context"],"mappings":";;;;;;;;AAkLO,IAAM,wBAAA,GAAN,cAAuCA,yBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AC3KA,SAAS,aAAA,CAAc,CAAA,EAAW,aAAA,GAAgB,GAAA,EAAa;AAC7D,EAAA,OAAOC,UAAA,CAAM,OAAA,CAAQ,aAAA,EAAe,CAAC,CAAA;AACvC;AAGA,SAAS,UAAU,CAAA,EAAmB;AACpC,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,WAAA,CAAY,GAAG,CAAA;AAC7B,EAAA,OAAO,OAAO,CAAA,GAAI,GAAA,GAAM,CAAA,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AACxC;AAMA,SAAS,gBAAA,CACP,SACA,aAAA,EACa;AACb,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,MAAM,SAAA,CAAU,aAAA,CAAc,KAAA,CAAM,IAAA,EAAM,aAAa,CAAC,CAAA;AAC5D,IAAA,OAAO,QAAQ,GAAA,IAAO,CAAC,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACpC,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,MAAA,GAAA,GAAM,UAAU,GAAG,CAAA;AAAA,IACrB;AACA,IAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AAAA,EACd;AACA,EAAA,OAAO,IAAA;AACT;AASO,IAAM,2BAAN,MAGwB;AAAA,EAM7B,WAAA,CACE,IAAA,EACQ,QAAA,EACA,GAAA,EACR,gBAAgB,GAAA,EAChB;AAHQ,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,cAAc,aAAa,CAAA;AAChD,IAAA,IAAA,CAAK,UAAU,IAAI,GAAA;AAAA,MACjB,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA,EAAG,CAAC,CAAC;AAAA,KAChE;AACA,IAAA,IAAA,CAAK,WAAA,GAAc,gBAAA,CAAiB,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AAAA,EAC9D;AAAA,EAhBS,aAAA;AAAA,EACD,OAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAmC,EAAC;AAAA;AAAA,EAgB5C,YAAA,GAAsC;AACpC,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA,EAGA,SAAS,IAAA,EAA4C;AACnD,IAAA,OAAO,KAAK,OAAA,CAAQ,GAAA,CAAI,cAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAC,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,SAAS,QAAA,CAAS,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,SAAS,cAAA,CAAe,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,OAAO,IAAA,CAAK,QAAQ,GAAA,CAAI,IAAI,KAAK,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,IAAA;AAAA,QACR,WAAA,EAAa,KAAA;AAAA,QACb,cAAA,EAAgB,KAAA;AAAA,QAChB,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,KAAA,EAAO,IAAI,IAAA,CAAK,KAAA,CAAM,KAAK;AAAA,OAC7B;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,KAAA;AAAA,QACR,WAAA,EAAa,IAAA;AAAA,QACb,cAAA,EAAgB,KAAA;AAAA,QAChB,IAAA,EAAM,CAAA;AAAA,QACN,KAAA,sBAAW,IAAA;AAAK,OAClB;AAAA,IACF;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,IAAI,CAAA,CAAE,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAE,CAAA;AAAA,IACtD;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAC3C,IAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAE9B,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAK,EAAG;AACnC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,QAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAClC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,QAAA,IAAI,GAAA,EAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAAA,MACxB;AAAA,IACF;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,IAAK,MAAM,IAAA,EAAM;AACtC,QAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAClC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,QAAA,IAAI,GAAA,EAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAAA,MACxB;AAAA,IACF;AACA,IAAA,OAAO,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,EAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAE3C,IAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AACzB,MAAA,MAAM,OAAO,MAAA,GAAS,IAAA;AACtB,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACpC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA;AAC7C,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,WAAA,EAAa,gBAAgB,KAAA,EAAM;AAAA,IAC5D,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEtC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,KAAK,QAAA,CAAS,SAAA;AAAA,QAClB,QAAA,CAAS,EAAA;AAAA,QACT,OAAA;AAAA,QACA,IAAA,CAAK,GAAA;AAAA,QACL,QAAA,CAAS;AAAA,OACX;AACA,MAAA,MAAM,IAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,UAAA,GAClC,OAAA,CAAQ,UAAA;AACd,MAAA,MAAM,OAAA,GAA4B;AAAA,QAChC,GAAG,QAAA;AAAA,QACH,IAAA;AAAA,QACA,KAAA,EAAA,iBAAO,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAChC;AACA,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAC9B,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,EAAE,IAAA,EAAM,UAAU,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,IACpE,CAAA,MAAO;AACL,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,WAAW,IAAA,EAAM,OAAA,EAAS,KAAK,GAAG,CAAA;AACpE,MAAA,MAAM,UAAA,GAAa,EAAE,GAAG,KAAA,EAAO,MAAM,IAAA,EAAK;AAC1C,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,UAAU,CAAA;AACjC,MAAA,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAC9B,MAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,KAAA,EAAO,YAAY,CAAA;AAAA,IACxD;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEtC,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,MAClC,QAAA,CAAS,EAAA;AAAA,MACT,IAAA,CAAK,GAAA;AAAA,MACL,QAAA,CAAS;AAAA,KACX;AACA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,OAAA,GAAU,OAAA,GACV,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA;AAChD,IAAA,MAAM,KAAK,QAAA,CAAS,SAAA;AAAA,MAClB,QAAA,CAAS,EAAA;AAAA,MACT,QAAA;AAAA,MACA,IAAA,CAAK,GAAA;AAAA,MACL,QAAA,CAAS;AAAA,KACX;AAEA,IAAA,MAAM,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,QAAQ,CAAA,CAAE,UAAA;AAChD,IAAA,MAAM,OAAA,GAA4B;AAAA,MAChC,GAAG,QAAA;AAAA,MACH,IAAA;AAAA,MACA,KAAA,EAAA,iBAAO,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KAChC;AACA,IAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAC9B,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,EAAE,IAAA,EAAM,UAAU,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EACpE;AAAA,EAEA,MAAM,KAAA,CACJ,KAAA,EACA,QAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,IAAA,CAAK,aAAa,CAAA;AACpD,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAEhC,IAAA,IAAI,UAAU,SAAA,EAAW;AACvB,MAAA,IAAA,CAAK,oBAAA,CAAqB,OAAO,cAAc,CAAA;AAC/C,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,IAC3B,CAAA,MAAO;AACL,MAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,MAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG;AACjC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,MAAM,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEnC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,IAAA,CAAK,SAAS,UAAA,CAAW,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AACjE,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,IAAI,CAAA;AACxB,MAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,IAAA,EAAM,MAAM,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,IAAI,CAAA,CAAE,CAAA;AAAA,MACnE;AACA,MAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAC3C,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AACjC,QAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,UAAA,MAAM,IAAA,CAAK,SAAS,UAAA,CAAW,CAAA,CAAE,IAAI,IAAA,CAAK,GAAA,EAAK,EAAE,QAAQ,CAAA;AACzD,UAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrB,UAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,IAAA,EAAM,GAAG,CAAA;AAAA,QACjD;AAAA,MACF;AACA,MAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,QAAA,IAAI,EAAE,UAAA,CAAW,MAAM,GAAG,IAAA,CAAK,WAAA,CAAY,OAAO,CAAC,CAAA;AAAA,MACrD;AACA,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,IAAI,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,IAAI,CAAA,CAAE,CAAA;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,QAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,GAAA,EAAK,IAAA,CAAK,aAAa,CAAA;AACrD,IAAA,MAAM,QAAA,GAAW,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AAEvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACtC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,QAClC,KAAA,CAAM,EAAA;AAAA,QACN,IAAA,CAAK,GAAA;AAAA,QACL,KAAA,CAAM;AAAA,OACR;AACA,MAAA,MAAM,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,OAAO,CAAA;AACtC,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA,EAAG;AAClC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,GAAG,CAAA,CAAE,CAAA;AAAA,IAC7D;AACA,IAAA,IAAI,CAAC,UAAU,SAAA,EAAW;AACxB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,IAClE;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,KAAY,GAAA,GAAM,GAAA,GAAM,OAAA,GAAU,GAAA;AACjD,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AACjC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,QAAA,MAAM,QAAA,GAAW,CAAA,CAAE,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA;AACvC,QAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,UAClC,CAAA,CAAE,EAAA;AAAA,UACF,IAAA,CAAK,GAAA;AAAA,UACL,CAAA,CAAE;AAAA,SACJ;AACA,QAAA,MAAM,IAAA,CAAK,SAAA,CAAU,QAAA,GAAW,QAAA,EAAU,OAAO,CAAA;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,EAAK,MAAM,EAAE,SAAA,EAAW,MAAM,CAAA;AAC5C,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAcC,MAAA,EAAsB;AAC9C,IAAA,OAAOD,WAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,IAAA,CAAK,aAAa,GAAGC,MAAI,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAMQ,qBAAqB,QAAA,EAAwB;AACnD,IAAA,IAAI,MAAM,SAAA,CAAU,aAAA,CAAc,QAAA,EAAU,IAAA,CAAK,aAAa,CAAC,CAAA;AAC/D,IAAA,OAAO,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA,EAAG;AACjC,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,GAAG,CAAA;AACxB,MAAA,GAAA,GAAM,UAAU,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACF;AC9WA,IAAM,MAAA,GACJ,gEAAA;AAaK,SAAS,UAAA,CAAW,SAAS,EAAA,EAAY;AAC9C,EAAA,MAAM,GAAA,GAAMC,cAAA,EAAM,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACpC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,GAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AACrD,IAAA,MAAA,IAAU,MAAA,CAAO,IAAA,GAAO,MAAA,CAAO,MAAM,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,MAAA;AACT;;;ACSO,IAAM,yBAAN,MAGyD;AAAA,EACrD,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,QAAA;AAAA,EAET,YAAY,QAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,IAAI,CAAC,OAAA,IAAW,EAAE,iBAAA,IAAqB,OAAA,CAAA,EAAU;AAC/C,MAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,IAC1E;AAEA,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,EAAA,IAAM,UAAA,EAAW;AAC3C,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAA;AAAA,MACnC,OAAA,CAAQ;AAAA,KACV;AACA,IAAA,MAAM,aAAA,GAAgB,QAAQ,aAAA,IAAiB,GAAA;AAE/C,IAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,MACd,SAAA;AAAA,MACA,QAAA;AAAA,MACA,IAAA,CAAK,QAAA;AAAA,MACL,OAAA,CAAQ,eAAA;AAAA,MACR;AAAA,KACF;AAEA,IAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,MAAA,KAAA,MAAW,CAAC,MAAM,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,EAAG;AAClE,QAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC1C;AACA,MAAA,KAAA,MAAW,CAAA,IAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,EAAa,EAAG;AACzC,QAAA,IAAI,EAAE,IAAA,KAAS,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,EAAE,KAAK,CAAA;AAAA,MAC7C;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,OAAA;AAAA,MACA,WAAA,EAAa;AAAA,QACX,SAAA;AAAA,QACA,QAAA;AAAA,QACA,iBAAiB,OAAA,CAAQ,eAAA;AAAA,QACzB;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEA,MAAM,GAAA,GAAsB;AAC1B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAAA,EAE/B;AAAA,EAEA,MAAM,KAAA,GAAuB;AAAA,EAE7B;AAAA,EAEA,MAAM,KAAK,UAAA,EAAoC;AAC7C,IAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,EACnC;AAAA,EAEA,MAAM,QAAA,GAA2B;AAC/B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAA0B;AAC9B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACF;AC3GA,eAAsB,yBACpB,MAAA,EACY;AACZ,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAIC,gBAAA,CAAQ,SAAQ,CAAE,IAAA;AAChD,EAAA,MAAM,SAAS,MAAA,CAAO,SAAA;AAAA,IACpB,iBAAA,CAAkB,UAAA;AAAA,IAClB,iBAAA,CAAkB;AAAA,GACpB;AACA,EAAA,OAAO,MAAA,CAAO,MAAS,eAAe,CAAA;AACxC;;;ACsBO,SAAS,kBAAA,CAMd,MAAA,EACA,QAAA,EACA,OAAA,EAQA;AACA,EAAA,OAAO,OAAO,MAAM,OAAA,KAAY;AAC9B,IAAA,MAAM,KAAA,GACJ,MAAM,wBAAA,CAA2D,MAAM,CAAA;AAEzE,IAAA,MAAM,EAAE,SAAA,EAAW,QAAA,EAAU,eAAA,EAAiB,eAAc,GAAI,KAAA;AAChE,IAAA,IAAI,CAAC,QAAA,IAAY,CAAC,SAAA,EAAW;AAC3B,MAAA,OAAO;AAAA,QACL,YAAA,EAAc,CAAA,iDAAA,EAAoD,OAAA,CAAQ,QAAQ,CAAA,iCAAA,CAAA;AAAA,QAClF,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,MACd,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA,CAAS,QAAA;AAAA,MACT,eAAA;AAAA,MACA,aAAA,IAAiB;AAAA,KACnB;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,IAAA,EAAM,EAAE,GAAG,OAAA,EAAS,SAAS,CAAA;AAC5D,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,EAAA,CAAG,YAAA,EAAa;AAE1C,IAAA,OAAO;AAAA,MACL,cAAc,QAAA,CAAS,YAAA;AAAA,MACvB,IAAA,EAAM;AAAA,QACJ,GAAI,QAAA,CAAS,IAAA,IAAQ,EAAC;AAAA,QACtB,aAAA,EAAe;AAAA;AACjB,KACF;AAAA,EACF,CAAA;AACF;;;AClEO,SAAS,mBAAA,CACd,cACA,OAAA,EACS;AACT,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,QAAA,GAAA,CAAY,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,CAAC,OAAO,CAAA,EAAG,GAAA,CAAI,YAAY,CAAA;AAChF,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,OAAO,KAAA,CAAM,QAAA;AACnB,IAAA,MAAM,OAAO,IAAA,EAAM,QAAA;AACnB,IAAA,OAAO,OAAO,SAAS,QAAA,IAAY,QAAA,CAAS,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACjE,CAAC,CAAA;AACH;AAKO,SAAS,iBAAA,CACd,cACA,OAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,aAAa,OAAO,CAAA;AAClC,EAAA,OAAO,IAAA,CAAK,MAAA,CAAO,CAAC,KAAA,KAAU;AAC5B,IAAA,MAAM,OAAO,KAAA,CAAM,QAAA;AACnB,IAAA,MAAM,OAAO,IAAA,EAAM,QAAA;AACnB,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,IAAI,CAAA;AAAA,EAC/C,CAAC,CAAA;AACH;AAcO,SAAS,YAAA,CACd,cACA,OAAA,EACS;AACT,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,iBAAiB,OAAO,CAAA;AACtC,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,MAAM,GAAG,CAAA,CAAE,OAAO,OAAO,CAAA;AACrD,IAAA,OAAO,SAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,CAAE,KAAK,KAAK,CAAA;AAAA,EACzC,CAAC,CAAA;AACH;AAMA,SAAS,aAAa,OAAA,EAA6C;AACjE,EAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAClC,IAAA,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,CAAC,MAAM,CAAA,KAAM,OAAA;AACtB;AAEA,SAAS,iBAAiB,OAAA,EAA6C;AACrE,EAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA,KAAM,OAAA;AAChD,EAAA,MAAM,KAAK,IAAI,MAAA;AAAA,IACb,GAAA,GAAM,QAAQ,OAAA,CAAQ,mBAAA,EAAqB,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,IAAI,CAAA,GAAI;AAAA,GAC5E;AACA,EAAA,OAAO,CAAC,CAAA,KAAM,EAAA,CAAG,IAAA,CAAK,CAAC,CAAA;AACzB;;;AC7EA,IAAM,qBAAN,MAIA;AAAA,EASE,YACW,EAAA,EACT,IAAA,EACA,QAAA,EACA,GAAA,EACA,gBAAgB,GAAA,EAChB;AALS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AAMT,IAAA,IAAA,CAAK,KAAK,IAAI,wBAAA,CAAyB,IAAA,EAAM,QAAA,EAAU,KAAK,aAAa,CAAA;AAAA,EAC3E;AAAA,EAhBS,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAYT,MAAM,IAAA,CAAK,QAAA,EAAkB,QAAA,EAA6C;AACxE,IAAA,MAAM,IAAI,yBAAyB,MAAM,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,OAAA,GAAyB;AAAA,EAE/B;AACF,CAAA;AAaO,SAAS,qBAId,EAAA,EACA,IAAA,EACA,QAAA,EACA,GAAA,EACA,gBAAgB,GAAA,EACa;AAC7B,EAAA,OAAO,IAAI,kBAAA,CAAmB,EAAA,EAAI,IAAA,EAAM,QAAA,EAAU,KAAK,aAAa,CAAA;AACtE","file":"index.cjs","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n  /** Optional state to merge into the workflow's `AgentState` via the session. */\n  stateUpdate?: Record<string, unknown>;\n}\n\nexport interface SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n  pause(sandboxId: string, ttlSeconds?: number): Promise<void>;\n  snapshot(sandboxId: string): Promise<SandboxSnapshot>;\n  restore(snapshot: SandboxSnapshot): Promise<Sandbox>;\n  fork(sandboxId: string): Promise<Sandbox>;\n}\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\nexport interface SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> {\n  createSandbox(\n    options?: TOptions\n  ): Promise<{ sandboxId: string; stateUpdate?: Record<string, unknown> }>;\n  destroySandbox(sandboxId: string): Promise<void>;\n  pauseSandbox(sandboxId: string): Promise<void>;\n  snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;\n  forkSandbox(sandboxId: string): Promise<string>;\n}\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> = {\n  [K in keyof SandboxOps<TOptions> as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<TOptions>[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\nimport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  TreeMutation,\n} from \"./types\";\n\n/** Normalize a path against the provided workspace base. */\nfunction normalisePath(p: string, workspaceBase = \"/\"): string {\n  return posix.resolve(workspaceBase, p);\n}\n\n/** Return the parent directory of a normalised path (\"/a/b\" → \"/a\"). */\nfunction parentDir(p: string): string {\n  const idx = p.lastIndexOf(\"/\");\n  return idx <= 0 ? \"/\" : p.slice(0, idx);\n}\n\n/**\n * Collect the set of implicit directory paths from a flat file list.\n * E.g. \"/a/b/c.ts\" contributes \"/a/b\", \"/a\", \"/\".\n */\nfunction inferDirectories(\n  entries: { path: string }[],\n  workspaceBase: string\n): Set<string> {\n  const dirs = new Set<string>();\n  dirs.add(\"/\");\n  for (const entry of entries) {\n    let dir = parentDir(normalisePath(entry.path, workspaceBase));\n    while (dir !== \"/\" && !dirs.has(dir)) {\n      dirs.add(dir);\n      dir = parentDir(dir);\n    }\n    dirs.add(\"/\");\n  }\n  return dirs;\n}\n\n/**\n * Ephemeral {@link SandboxFileSystem} backed by a {@link FileResolver}.\n *\n * Created fresh for each tool invocation from the current workflow file tree.\n * Directory structure is inferred from file paths. All mutations are tracked\n * and can be retrieved via {@link getMutations} after the handler completes.\n */\nexport class VirtualSandboxFileSystem<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements SandboxFileSystem {\n  readonly workspaceBase: string;\n  private entries: Map<string, FileEntry<TMeta>>;\n  private directories: Set<string>;\n  private mutations: TreeMutation<TMeta>[] = [];\n\n  constructor(\n    tree: FileEntry<TMeta>[],\n    private resolver: FileResolver<TCtx, TMeta>,\n    private ctx: TCtx,\n    workspaceBase = \"/\",\n  ) {\n    this.workspaceBase = normalisePath(workspaceBase);\n    this.entries = new Map(\n      tree.map((e) => [normalisePath(e.path, this.workspaceBase), e])\n    );\n    this.directories = inferDirectories(tree, this.workspaceBase);\n  }\n\n  /** Return all mutations accumulated during this invocation. */\n  getMutations(): TreeMutation<TMeta>[] {\n    return this.mutations;\n  }\n\n  /** Look up a file entry by virtual path. */\n  getEntry(path: string): FileEntry<TMeta> | undefined {\n    return this.entries.get(normalisePath(path, this.workspaceBase));\n  }\n\n  // --------------------------------------------------------------------------\n  // Read operations — delegate to resolver lazily\n  // --------------------------------------------------------------------------\n\n  async readFile(path: string): Promise<string> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (!entry) throw new Error(`ENOENT: no such file: ${path}`);\n    return this.resolver.readFile(entry.id, this.ctx, entry.metadata);\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (!entry) throw new Error(`ENOENT: no such file: ${path}`);\n    return this.resolver.readFileBuffer(entry.id, this.ctx, entry.metadata);\n  }\n\n  // --------------------------------------------------------------------------\n  // Metadata operations — pure, resolved from the tree\n  // --------------------------------------------------------------------------\n\n  async exists(path: string): Promise<boolean> {\n    const norm = normalisePath(path, this.workspaceBase);\n    return this.entries.has(norm) || this.directories.has(norm);\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (entry) {\n      return {\n        isFile: true,\n        isDirectory: false,\n        isSymbolicLink: false,\n        size: entry.size,\n        mtime: new Date(entry.mtime),\n      };\n    }\n    if (this.directories.has(norm)) {\n      return {\n        isFile: false,\n        isDirectory: true,\n        isSymbolicLink: false,\n        size: 0,\n        mtime: new Date(),\n      };\n    }\n    throw new Error(`ENOENT: no such file or directory: ${path}`);\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = normalisePath(path, this.workspaceBase);\n    if (!this.directories.has(norm)) {\n      throw new Error(`ENOENT: no such directory: ${path}`);\n    }\n    const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n    const names = new Set<string>();\n\n    for (const p of this.entries.keys()) {\n      if (p.startsWith(prefix)) {\n        const rest = p.slice(prefix.length);\n        const seg = rest.split(\"/\")[0];\n        if (seg) names.add(seg);\n      }\n    }\n    for (const d of this.directories) {\n      if (d.startsWith(prefix) && d !== norm) {\n        const rest = d.slice(prefix.length);\n        const seg = rest.split(\"/\")[0];\n        if (seg) names.add(seg);\n      }\n    }\n    return [...names].sort();\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const names = await this.readdir(path);\n    const norm = normalisePath(path, this.workspaceBase);\n    const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n\n    return names.map((name) => {\n      const full = prefix + name;\n      const isFile = this.entries.has(full);\n      const isDirectory = this.directories.has(full);\n      return { name, isFile, isDirectory, isSymbolicLink: false };\n    });\n  }\n\n  // --------------------------------------------------------------------------\n  // Write operations — delegate to resolver, record mutations\n  // --------------------------------------------------------------------------\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const existing = this.entries.get(norm);\n\n    if (existing) {\n      await this.resolver.writeFile(\n        existing.id,\n        content,\n        this.ctx,\n        existing.metadata\n      );\n      const size =\n        typeof content === \"string\"\n          ? new TextEncoder().encode(content).byteLength\n          : content.byteLength;\n      const updated: FileEntry<TMeta> = {\n        ...existing,\n        size,\n        mtime: new Date().toISOString(),\n      };\n      this.entries.set(norm, updated);\n      this.mutations.push({ type: \"update\", path: norm, entry: updated });\n    } else {\n      const entry = await this.resolver.createFile(norm, content, this.ctx);\n      const normalised = { ...entry, path: norm };\n      this.entries.set(norm, normalised);\n      this.addParentDirectories(norm);\n      this.mutations.push({ type: \"add\", entry: normalised });\n    }\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const existing = this.entries.get(norm);\n\n    if (!existing) {\n      return this.writeFile(path, content);\n    }\n\n    const current = await this.resolver.readFile(\n      existing.id,\n      this.ctx,\n      existing.metadata\n    );\n    const appended =\n      typeof content === \"string\"\n        ? current + content\n        : current + new TextDecoder().decode(content);\n    await this.resolver.writeFile(\n      existing.id,\n      appended,\n      this.ctx,\n      existing.metadata\n    );\n\n    const size = new TextEncoder().encode(appended).byteLength;\n    const updated: FileEntry<TMeta> = {\n      ...existing,\n      size,\n      mtime: new Date().toISOString(),\n    };\n    this.entries.set(norm, updated);\n    this.mutations.push({ type: \"update\", path: norm, entry: updated });\n  }\n\n  async mkdir(\n    _path: string,\n    _options?: { recursive?: boolean }\n  ): Promise<void> {\n    const norm = normalisePath(_path, this.workspaceBase);\n    if (this.directories.has(norm)) return;\n\n    if (_options?.recursive) {\n      this.addParentDirectories(norm + \"/placeholder\");\n      this.directories.add(norm);\n    } else {\n      const parent = parentDir(norm);\n      if (!this.directories.has(parent)) {\n        throw new Error(`ENOENT: no such directory: ${parent}`);\n      }\n      this.directories.add(norm);\n    }\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n\n    if (entry) {\n      await this.resolver.deleteFile(entry.id, this.ctx, entry.metadata);\n      this.entries.delete(norm);\n      this.mutations.push({ type: \"remove\", path: norm });\n      return;\n    }\n\n    if (this.directories.has(norm)) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${path}`);\n      }\n      const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n      for (const [p, e] of this.entries) {\n        if (p.startsWith(prefix)) {\n          await this.resolver.deleteFile(e.id, this.ctx, e.metadata);\n          this.entries.delete(p);\n          this.mutations.push({ type: \"remove\", path: p });\n        }\n      }\n      for (const d of this.directories) {\n        if (d.startsWith(prefix)) this.directories.delete(d);\n      }\n      this.directories.delete(norm);\n      return;\n    }\n\n    if (!options?.force) {\n      throw new Error(`ENOENT: no such file or directory: ${path}`);\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    _options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = normalisePath(src, this.workspaceBase);\n    const normDest = normalisePath(dest, this.workspaceBase);\n\n    const entry = this.entries.get(normSrc);\n    if (entry) {\n      const content = await this.resolver.readFile(\n        entry.id,\n        this.ctx,\n        entry.metadata\n      );\n      await this.writeFile(normDest, content);\n      return;\n    }\n\n    if (!this.directories.has(normSrc)) {\n      throw new Error(`ENOENT: no such file or directory: ${src}`);\n    }\n    if (!_options?.recursive) {\n      throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n    }\n\n    const prefix = normSrc === \"/\" ? \"/\" : normSrc + \"/\";\n    for (const [p, e] of this.entries) {\n      if (p.startsWith(prefix)) {\n        const relative = p.slice(normSrc.length);\n        const content = await this.resolver.readFile(\n          e.id,\n          this.ctx,\n          e.metadata\n        );\n        await this.writeFile(normDest + relative, content);\n      }\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    await this.cp(src, dest, { recursive: true });\n    await this.rm(src, { recursive: true });\n  }\n\n  // --------------------------------------------------------------------------\n  // Unsupported\n  // --------------------------------------------------------------------------\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(normalisePath(base, this.workspaceBase), path);\n  }\n\n  // --------------------------------------------------------------------------\n  // Helpers\n  // --------------------------------------------------------------------------\n\n  private addParentDirectories(filePath: string): void {\n    let dir = parentDir(normalisePath(filePath, this.workspaceBase));\n    while (!this.directories.has(dir)) {\n      this.directories.add(dir);\n      dir = parentDir(dir);\n    }\n  }\n}\n","import { uuid4 } from \"@temporalio/workflow\";\n\nconst BASE62 =\n  \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n/**\n * Generate a compact, workflow-deterministic identifier.\n *\n * Uses Temporal's `uuid4()` internally (seeded by the workflow's RNG),\n * then re-encodes the hex bytes into a base-62 alphabet for a shorter,\n * more token-efficient identifier (~3 tokens vs ~10 for a full UUID).\n *\n * Suitable for thread IDs, child workflow IDs, or any workflow-scoped identifier.\n *\n * @param length - Number of base-62 characters (default 12, ~71 bits of entropy)\n */\nexport function getShortId(length = 12): string {\n  const hex = uuid4().replace(/-/g, \"\");\n  let result = \"\";\n  for (let i = 0; i < length; i++) {\n    const byte = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n    result += BASE62[byte % BASE62.length];\n  }\n  return result;\n}\n","import type {\n  SandboxCapabilities,\n  SandboxCreateResult,\n  SandboxProvider,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { getShortId } from \"../../../lib/thread/id\";\nimport { createVirtualSandbox } from \"./index\";\nimport type {\n  FileEntryMetadata,\n  FileResolver,\n  VirtualSandboxCreateOptions,\n} from \"./types\";\n\n/**\n * Stateless {@link SandboxProvider} backed by a {@link FileResolver}.\n *\n * The provider holds **no internal state**. All sandbox state (sandboxId,\n * fileTree, resolverContext, workspaceBase) is returned as a `stateUpdate` from\n * {@link create} and merged into the workflow's `AgentState` by the session.\n * {@link withVirtualSandbox} reads this state back on every tool invocation.\n *\n * @example\n * ```typescript\n * const provider = new VirtualSandboxProvider(resolver);\n * const manager = new SandboxManager(provider);\n *\n * export const activities = {\n *   ...manager.createActivities(\"CodingAgent\"),\n *   readFile: withVirtualSandbox(client, provider, readHandler),\n * };\n * ```\n */\nexport class VirtualSandboxProvider<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements SandboxProvider<VirtualSandboxCreateOptions<TCtx>> {\n  readonly id = \"virtual\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: false,\n    persistence: true,\n  };\n\n  readonly resolver: FileResolver<TCtx, TMeta>;\n\n  constructor(resolver: FileResolver<TCtx, TMeta>) {\n    this.resolver = resolver;\n  }\n\n  async create(\n    options?: VirtualSandboxCreateOptions<TCtx>\n  ): Promise<SandboxCreateResult> {\n    if (!options || !(\"resolverContext\" in options)) {\n      throw new Error(\"VirtualSandboxProvider.create requires resolverContext\");\n    }\n\n    const sandboxId = options.id ?? getShortId();\n    const fileTree = await this.resolver.resolveEntries(\n      options.resolverContext\n    );\n    const workspaceBase = options.workspaceBase ?? \"/\";\n\n    const sandbox = createVirtualSandbox(\n      sandboxId,\n      fileTree,\n      this.resolver,\n      options.resolverContext,\n      workspaceBase,\n    );\n\n    if (options.initialFiles) {\n      for (const [path, content] of Object.entries(options.initialFiles)) {\n        await sandbox.fs.writeFile(path, content);\n      }\n      for (const m of sandbox.fs.getMutations()) {\n        if (m.type === \"add\") fileTree.push(m.entry);\n      }\n    }\n\n    return {\n      sandbox,\n      stateUpdate: {\n        sandboxId,\n        fileTree,\n        resolverContext: options.resolverContext,\n        workspaceBase,\n      },\n    };\n  }\n\n  async get(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"get (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n\n  async destroy(): Promise<void> {\n    // No-op — no internal state to clean up\n  }\n\n  async pause(): Promise<void> {\n    // No-op — virtual sandbox state lives in workflow AgentState\n  }\n\n  async fork(_sandboxId: string): Promise<never> {\n    throw new Error(\"Not implemented\");\n  }\n\n  async snapshot(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"snapshot (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n\n  async restore(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"restore (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n}\n","import { Context } from \"@temporalio/activity\";\nimport type { WorkflowClient } from \"@temporalio/client\";\nimport type { BaseAgentState, RunAgentConfig } from \"./types\";\nimport type {\n  ActivityToolHandler,\n  RouterContext,\n  ToolHandlerResponse,\n} from \"./tool-router/types\";\n\n/**\n * Query the parent workflow's state from within an activity.\n * Resolves the workflow handle from the current activity context.\n */\nexport async function queryParentWorkflowState<T>(\n  client: WorkflowClient\n): Promise<T> {\n  const { workflowExecution } = Context.current().info;\n  const handle = client.getHandle(\n    workflowExecution.workflowId,\n    workflowExecution.runId\n  );\n  return handle.query<T>(\"getAgentState\");\n}\n\n/**\n * Wraps a handler into a `RunAgentActivity` by auto-fetching the parent\n * workflow's agent state before each invocation.\n *\n * @example\n * ```typescript\n * import { createRunAgentActivity } from 'zeitlich';\n * import { createLangChainModelInvoker } from 'zeitlich/adapters/thread/langchain';\n *\n * const invoker = createLangChainModelInvoker({ redis, model });\n * return { runAgent: createRunAgentActivity(client, invoker) };\n * ```\n */\nexport function createRunAgentActivity<R, S extends BaseAgentState = BaseAgentState>(\n  client: WorkflowClient,\n  handler: (config: RunAgentConfig & { state: S }) => Promise<R>,\n): (config: RunAgentConfig) => Promise<R> {\n  return async (config: RunAgentConfig) => {\n    const state = await queryParentWorkflowState<S>(client);\n    return handler({ ...config, state });\n  };\n}\n\n/**\n * Context injected into tool handlers created via {@link withParentWorkflowState}.\n */\nexport interface AgentStateContext<S extends BaseAgentState = BaseAgentState> extends RouterContext {\n  state: S;\n}\n\n/**\n * Wraps a tool handler into an `ActivityToolHandler` by auto-fetching the\n * parent workflow's agent state before each invocation.\n *\n * @typeParam S - Custom agent state type (defaults to `BaseAgentState`)\n *\n * @example\n * ```typescript\n * import { withParentWorkflowState, type AgentStateContext } from 'zeitlich';\n *\n * // With custom state:\n * interface MyState extends BaseAgentState { customField: string }\n * const myHandler = withParentWorkflowState<MyArgs, MyResult, MyState>(\n *   client,\n *   async (args, ctx) => {\n *     console.log(ctx.state.customField);\n *     return { toolResponse: 'done', data: null };\n *   },\n * );\n * ```\n */\nexport function withParentWorkflowState<TArgs, TResult, S extends BaseAgentState = BaseAgentState>(\n  client: WorkflowClient,\n  handler: (\n    args: TArgs,\n    context: AgentStateContext<S>,\n  ) => Promise<ToolHandlerResponse<TResult>>,\n): ActivityToolHandler<TArgs, TResult> {\n  return async (args, context) => {\n    const state = await queryParentWorkflowState<S>(client);\n    return handler(args, { ...context, state });\n  };\n}\n","import type { WorkflowClient } from \"@temporalio/client\";\nimport { queryParentWorkflowState } from \"../../../lib/activity\";\nimport type { ActivityToolHandler } from \"../../../lib/tool-router/types\";\nimport type {\n  FileEntryMetadata,\n  TreeMutation,\n  VirtualSandboxContext,\n  VirtualSandboxState,\n} from \"./types\";\nimport type { VirtualSandboxProvider } from \"./provider\";\nimport { createVirtualSandbox } from \"./index\";\n\n/**\n * Wraps a tool handler that needs a virtual sandbox, automatically querying\n * the parent workflow for the current file tree and resolver context.\n *\n * On each invocation the wrapper:\n * 1. Queries the workflow's `AgentState` for `fileTree`, `resolverContext`, and `workspaceBase`\n * 2. Creates an ephemeral {@link VirtualSandbox} from tree + provider's resolver\n * 3. Runs the inner handler\n * 4. Returns the handler's result together with any {@link TreeMutation}s\n *\n * The consumer applies mutations back to workflow state via a post-tool hook.\n *\n * @param client    - Temporal `WorkflowClient` for querying the parent workflow\n * @param agentName - Agent name (used to derive the state query name)\n * @param provider  - {@link VirtualSandboxProvider} (wraps the resolver)\n * @param handler   - Inner handler expecting a {@link VirtualSandboxContext}\n *\n * @example\n * ```typescript\n * import { withVirtualSandbox, type VirtualSandboxContext } from 'zeitlich';\n *\n * const readHandler: ActivityToolHandler<FileReadArgs, ReadResult, VirtualSandboxContext> =\n *   async (args, { sandbox }) => {\n *     const content = await sandbox.fs.readFile(args.path);\n *     return { toolResponse: content, data: { path: args.path, content } };\n *   };\n *\n * // At activity registration:\n * const provider = new VirtualSandboxProvider(resolver);\n * const handler = withVirtualSandbox(client, \"myAgent\", provider, readHandler);\n * ```\n */\nexport function withVirtualSandbox<\n  TArgs,\n  TResult,\n  TCtx,\n  TMeta = FileEntryMetadata,\n>(\n  client: WorkflowClient,\n  provider: VirtualSandboxProvider<TCtx, TMeta>,\n  handler: ActivityToolHandler<\n    TArgs,\n    TResult,\n    VirtualSandboxContext<TCtx, TMeta>\n  >\n): ActivityToolHandler<\n  TArgs,\n  (TResult & { treeMutations: TreeMutation<TMeta>[] }) | null\n> {\n  return async (args, context) => {\n    const state =\n      await queryParentWorkflowState<VirtualSandboxState<TCtx, TMeta>>(client);\n\n    const { sandboxId, fileTree, resolverContext, workspaceBase } = state;\n    if (!fileTree || !sandboxId) {\n      return {\n        toolResponse: `Error: No fileTree/sandboxId in agent state. The ${context.toolName} tool requires a virtual sandbox.`,\n        data: null,\n      };\n    }\n\n    const sandbox = createVirtualSandbox(\n      sandboxId,\n      fileTree,\n      provider.resolver,\n      resolverContext,\n      workspaceBase ?? \"/\",\n    );\n    const response = await handler(args, { ...context, sandbox });\n    const mutations = sandbox.fs.getMutations();\n\n    return {\n      toolResponse: response.toolResponse,\n      data: {\n        ...(response.data ?? {}),\n        treeMutations: mutations,\n      } as TResult & { treeMutations: TreeMutation<TMeta>[] },\n    };\n  };\n}\n","import type { FileEntry } from \"./types\";\n\n/**\n * Structural constraint: accepts any `AgentStateManager<T>` whose custom\n * state includes `fileTree: FileEntry<TMeta>[]`.\n */\nexport interface FileTreeAccessor<TMeta> {\n  get(key: \"fileTree\"): FileEntry<TMeta>[];\n}\n\n/**\n * Check whether any file in the tree has a `metadata.mimeType` that matches\n * the given pattern.\n *\n * Patterns:\n * - Exact: `\"application/pdf\"`\n * - Wildcard type: `\"image/*\"`\n *\n * Useful for conditionally enabling tools:\n *\n * ```ts\n * { enabled: hasFileWithMimeType(stateManager, \"image/*\") }\n * { enabled: hasFileWithMimeType(stateManager, [\"image/*\", \"application/pdf\"]) }\n * ```\n */\nexport function hasFileWithMimeType<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string | string[],\n): boolean {\n  const tree = stateManager.get(\"fileTree\");\n  const matchers = (Array.isArray(pattern) ? pattern : [pattern]).map(buildMatcher);\n  return tree.some((entry) => {\n    const meta = entry.metadata as Record<string, unknown> | undefined;\n    const mime = meta?.mimeType;\n    return typeof mime === \"string\" && matchers.some((m) => m(mime));\n  });\n}\n\n/**\n * Return all entries whose `metadata.mimeType` matches the given pattern.\n */\nexport function filesWithMimeType<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string,\n): FileEntry<TMeta>[] {\n  const tree = stateManager.get(\"fileTree\");\n  const match = buildMatcher(pattern);\n  return tree.filter((entry) => {\n    const meta = entry.metadata as Record<string, unknown> | undefined;\n    const mime = meta?.mimeType;\n    return typeof mime === \"string\" && match(mime);\n  });\n}\n\n/**\n * Check whether the tree contains a directory whose name matches the given\n * pattern. Directories are inferred from file paths.\n *\n * Patterns:\n * - Exact: `\"src\"`\n * - Glob with `*` wildcard: `\"test*\"`, `\"*.generated\"`\n *\n * ```ts\n * { enabled: hasDirectory(stateManager, \"test*\") }\n * ```\n */\nexport function hasDirectory<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string,\n): boolean {\n  const tree = stateManager.get(\"fileTree\");\n  const match = buildGlobMatcher(pattern);\n  return tree.some((entry) => {\n    const segments = entry.path.split(\"/\").filter(Boolean);\n    return segments.slice(0, -1).some(match);\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Internal matchers\n// ---------------------------------------------------------------------------\n\nfunction buildMatcher(pattern: string): (value: string) => boolean {\n  if (pattern.endsWith(\"/*\")) {\n    const prefix = pattern.slice(0, -1);\n    return (v) => v.startsWith(prefix);\n  }\n  return (v) => v === pattern;\n}\n\nfunction buildGlobMatcher(pattern: string): (value: string) => boolean {\n  if (!pattern.includes(\"*\")) return (v) => v === pattern;\n  const re = new RegExp(\n    \"^\" + pattern.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\").replace(/\\*/g, \".*\") + \"$\",\n  );\n  return (v) => re.test(v);\n}\n","import type {\n  Sandbox,\n  SandboxCapabilities,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { VirtualSandboxFileSystem } from \"./filesystem\";\nimport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  VirtualSandbox,\n} from \"./types\";\n\n// ============================================================================\n// VirtualSandbox\n// ============================================================================\n\nclass VirtualSandboxImpl<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements Sandbox\n{\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: false,\n    persistence: true,\n  };\n\n  readonly fs: VirtualSandboxFileSystem<TCtx, TMeta>;\n\n  constructor(\n    readonly id: string,\n    tree: FileEntry<TMeta>[],\n    resolver: FileResolver<TCtx, TMeta>,\n    ctx: TCtx,\n    workspaceBase = \"/\",\n  ) {\n    this.fs = new VirtualSandboxFileSystem(tree, resolver, ctx, workspaceBase);\n  }\n\n  async exec(_command: string, _options?: ExecOptions): Promise<ExecResult> {\n    throw new SandboxNotSupportedError(\"exec\");\n  }\n\n  async destroy(): Promise<void> {\n    // Ephemeral — nothing to clean up\n  }\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\n/**\n * Create an ephemeral {@link Sandbox} from a file tree and resolver.\n *\n * Used internally by {@link withVirtualSandbox} and\n * {@link VirtualSandboxProvider}; consumers can also call this directly\n * if they need a sandbox outside the wrapper pattern.\n */\nexport function createVirtualSandbox<\n  TCtx,\n  TMeta = FileEntryMetadata,\n>(\n  id: string,\n  tree: FileEntry<TMeta>[],\n  resolver: FileResolver<TCtx, TMeta>,\n  ctx: TCtx,\n  workspaceBase = \"/\",\n): VirtualSandbox<TCtx, TMeta> {\n  return new VirtualSandboxImpl(id, tree, resolver, ctx, workspaceBase);\n}\n\n// Re-exports for convenience\nexport { VirtualSandboxFileSystem } from \"./filesystem\";\nexport { VirtualSandboxProvider } from \"./provider\";\nexport { withVirtualSandbox } from \"./with-virtual-sandbox\";\nexport { hasFileWithMimeType, filesWithMimeType, hasDirectory } from \"./queries\";\nexport type { FileTreeAccessor } from \"./queries\";\nexport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  VirtualFileTree,\n  VirtualSandboxCreateOptions,\n  VirtualSandboxState,\n  VirtualSandboxContext,\n  VirtualSandbox,\n  TreeMutation,\n} from \"./types\";\n"]}
+{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/virtual/filesystem.ts","../../../../src/lib/thread/id.ts","../../../../src/adapters/sandbox/virtual/provider.ts","../../../../src/lib/activity.ts","../../../../src/adapters/sandbox/virtual/with-virtual-sandbox.ts","../../../../src/adapters/sandbox/virtual/queries.ts","../../../../src/adapters/sandbox/virtual/index.ts"],"names":["ApplicationFailure","posix","path","uuid4","Context"],"mappings":";;;;;;;;AAkLO,IAAM,wBAAA,GAAN,cAAuCA,yBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AC3KA,SAAS,aAAA,CAAc,CAAA,EAAW,aAAA,GAAgB,GAAA,EAAa;AAC7D,EAAA,OAAOC,UAAA,CAAM,OAAA,CAAQ,aAAA,EAAe,CAAC,CAAA;AACvC;AAGA,SAAS,UAAU,CAAA,EAAmB;AACpC,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,WAAA,CAAY,GAAG,CAAA;AAC7B,EAAA,OAAO,OAAO,CAAA,GAAI,GAAA,GAAM,CAAA,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AACxC;AAMA,SAAS,gBAAA,CACP,SACA,aAAA,EACa;AACb,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,MAAM,SAAA,CAAU,aAAA,CAAc,KAAA,CAAM,IAAA,EAAM,aAAa,CAAC,CAAA;AAC5D,IAAA,OAAO,QAAQ,GAAA,IAAO,CAAC,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACpC,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,MAAA,GAAA,GAAM,UAAU,GAAG,CAAA;AAAA,IACrB;AACA,IAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AAAA,EACd;AACA,EAAA,OAAO,IAAA;AACT;AASO,IAAM,2BAAN,MAGwB;AAAA,EAM7B,WAAA,CACE,IAAA,EACQ,QAAA,EACA,GAAA,EACR,gBAAgB,GAAA,EAChB;AAHQ,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,cAAc,aAAa,CAAA;AAChD,IAAA,IAAA,CAAK,UAAU,IAAI,GAAA;AAAA,MACjB,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA,EAAG,CAAC,CAAC;AAAA,KAChE;AACA,IAAA,IAAA,CAAK,WAAA,GAAc,gBAAA,CAAiB,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AAAA,EAC9D;AAAA,EAhBS,aAAA;AAAA,EACD,OAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAmC,EAAC;AAAA;AAAA,EAgB5C,YAAA,GAAsC;AACpC,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA,EAGA,SAAS,IAAA,EAA4C;AACnD,IAAA,OAAO,KAAK,OAAA,CAAQ,GAAA,CAAI,cAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAC,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,SAAS,QAAA,CAAS,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,SAAS,cAAA,CAAe,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,OAAO,IAAA,CAAK,QAAQ,GAAA,CAAI,IAAI,KAAK,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,IAAA;AAAA,QACR,WAAA,EAAa,KAAA;AAAA,QACb,cAAA,EAAgB,KAAA;AAAA,QAChB,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,KAAA,EAAO,IAAI,IAAA,CAAK,KAAA,CAAM,KAAK;AAAA,OAC7B;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,KAAA;AAAA,QACR,WAAA,EAAa,IAAA;AAAA,QACb,cAAA,EAAgB,KAAA;AAAA,QAChB,IAAA,EAAM,CAAA;AAAA,QACN,KAAA,sBAAW,IAAA;AAAK,OAClB;AAAA,IACF;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,IAAI,CAAA,CAAE,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAE,CAAA;AAAA,IACtD;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAC3C,IAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAE9B,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAK,EAAG;AACnC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,QAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAClC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,QAAA,IAAI,GAAA,EAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAAA,MACxB;AAAA,IACF;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,IAAK,MAAM,IAAA,EAAM;AACtC,QAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAClC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,QAAA,IAAI,GAAA,EAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAAA,MACxB;AAAA,IACF;AACA,IAAA,OAAO,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,EAAK;AAAA,EACzB;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAE3C,IAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AACzB,MAAA,MAAM,OAAO,MAAA,GAAS,IAAA;AACtB,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACpC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA;AAC7C,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,WAAA,EAAa,gBAAgB,KAAA,EAAM;AAAA,IAC5D,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEtC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,KAAK,QAAA,CAAS,SAAA;AAAA,QAClB,QAAA,CAAS,EAAA;AAAA,QACT,OAAA;AAAA,QACA,IAAA,CAAK,GAAA;AAAA,QACL,QAAA,CAAS;AAAA,OACX;AACA,MAAA,MAAM,IAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,UAAA,GAClC,OAAA,CAAQ,UAAA;AACd,MAAA,MAAM,OAAA,GAA4B;AAAA,QAChC,GAAG,QAAA;AAAA,QACH,IAAA;AAAA,QACA,KAAA,EAAA,iBAAO,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAChC;AACA,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAC9B,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,EAAE,IAAA,EAAM,UAAU,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,IACpE,CAAA,MAAO;AACL,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,WAAW,IAAA,EAAM,OAAA,EAAS,KAAK,GAAG,CAAA;AACpE,MAAA,MAAM,UAAA,GAAa,EAAE,GAAG,KAAA,EAAO,MAAM,IAAA,EAAK;AAC1C,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,UAAU,CAAA;AACjC,MAAA,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAC9B,MAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,KAAA,EAAO,KAAA,EAAO,YAAY,CAAA;AAAA,IACxD;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEtC,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,MAClC,QAAA,CAAS,EAAA;AAAA,MACT,IAAA,CAAK,GAAA;AAAA,MACL,QAAA,CAAS;AAAA,KACX;AACA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,OAAA,GAAU,OAAA,GACV,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA;AAChD,IAAA,MAAM,KAAK,QAAA,CAAS,SAAA;AAAA,MAClB,QAAA,CAAS,EAAA;AAAA,MACT,QAAA;AAAA,MACA,IAAA,CAAK,GAAA;AAAA,MACL,QAAA,CAAS;AAAA,KACX;AAEA,IAAA,MAAM,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,QAAQ,CAAA,CAAE,UAAA;AAChD,IAAA,MAAM,OAAA,GAA4B;AAAA,MAChC,GAAG,QAAA;AAAA,MACH,IAAA;AAAA,MACA,KAAA,EAAA,iBAAO,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KAChC;AACA,IAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAC9B,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,EAAE,IAAA,EAAM,UAAU,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EACpE;AAAA,EAEA,MAAM,KAAA,CACJ,KAAA,EACA,QAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,EAAO,IAAA,CAAK,aAAa,CAAA;AACpD,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAEhC,IAAA,IAAI,UAAU,SAAA,EAAW;AACvB,MAAA,IAAA,CAAK,oBAAA,CAAqB,OAAO,cAAc,CAAA;AAC/C,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,IAC3B,CAAA,MAAO;AACL,MAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,MAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG;AACjC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,MAAM,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,IAAI,CAAA;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAEnC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,IAAA,CAAK,SAAS,UAAA,CAAW,KAAA,CAAM,IAAI,IAAA,CAAK,GAAA,EAAK,MAAM,QAAQ,CAAA;AACjE,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,IAAI,CAAA;AACxB,MAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,IAAA,EAAM,MAAM,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,IAAI,CAAA,CAAE,CAAA;AAAA,MACnE;AACA,MAAA,MAAM,MAAA,GAAS,IAAA,KAAS,GAAA,GAAM,GAAA,GAAM,IAAA,GAAO,GAAA;AAC3C,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AACjC,QAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,UAAA,MAAM,IAAA,CAAK,SAAS,UAAA,CAAW,CAAA,CAAE,IAAI,IAAA,CAAK,GAAA,EAAK,EAAE,QAAQ,CAAA;AACzD,UAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrB,UAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,IAAA,EAAM,GAAG,CAAA;AAAA,QACjD;AAAA,MACF;AACA,MAAA,KAAA,MAAW,CAAA,IAAK,KAAK,WAAA,EAAa;AAChC,QAAA,IAAI,EAAE,UAAA,CAAW,MAAM,GAAG,IAAA,CAAK,WAAA,CAAY,OAAO,CAAC,CAAA;AAAA,MACrD;AACA,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,IAAI,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,IAAI,CAAA,CAAE,CAAA;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,QAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,GAAA,EAAK,IAAA,CAAK,aAAa,CAAA;AACrD,IAAA,MAAM,QAAA,GAAW,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,aAAa,CAAA;AAEvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACtC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,QAClC,KAAA,CAAM,EAAA;AAAA,QACN,IAAA,CAAK,GAAA;AAAA,QACL,KAAA,CAAM;AAAA,OACR;AACA,MAAA,MAAM,IAAA,CAAK,SAAA,CAAU,QAAA,EAAU,OAAO,CAAA;AACtC,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA,EAAG;AAClC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mCAAA,EAAsC,GAAG,CAAA,CAAE,CAAA;AAAA,IAC7D;AACA,IAAA,IAAI,CAAC,UAAU,SAAA,EAAW;AACxB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,IAClE;AAEA,IAAA,MAAM,MAAA,GAAS,OAAA,KAAY,GAAA,GAAM,GAAA,GAAM,OAAA,GAAU,GAAA;AACjD,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AACjC,MAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AACxB,QAAA,MAAM,QAAA,GAAW,CAAA,CAAE,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA;AACvC,QAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,QAAA;AAAA,UAClC,CAAA,CAAE,EAAA;AAAA,UACF,IAAA,CAAK,GAAA;AAAA,UACL,CAAA,CAAE;AAAA,SACJ;AACA,QAAA,MAAM,IAAA,CAAK,SAAA,CAAU,QAAA,GAAW,QAAA,EAAU,OAAO,CAAA;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,EAAK,MAAM,EAAE,SAAA,EAAW,MAAM,CAAA;AAC5C,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAcC,MAAA,EAAsB;AAC9C,IAAA,OAAOD,WAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,IAAA,CAAK,aAAa,GAAGC,MAAI,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAMQ,qBAAqB,QAAA,EAAwB;AACnD,IAAA,IAAI,MAAM,SAAA,CAAU,aAAA,CAAc,QAAA,EAAU,IAAA,CAAK,aAAa,CAAC,CAAA;AAC/D,IAAA,OAAO,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA,EAAG;AACjC,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,GAAG,CAAA;AACxB,MAAA,GAAA,GAAM,UAAU,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AACF;AC9WA,IAAM,MAAA,GACJ,gEAAA;AAaK,SAAS,UAAA,CAAW,SAAS,EAAA,EAAY;AAC9C,EAAA,MAAM,GAAA,GAAMC,cAAA,EAAM,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACpC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,GAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AACrD,IAAA,MAAA,IAAU,MAAA,CAAO,IAAA,GAAO,MAAA,CAAO,MAAM,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,MAAA;AACT;;;ACSO,IAAM,yBAAN,MAGyD;AAAA,EACrD,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,QAAA;AAAA,EAET,YAAY,QAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,IAAI,CAAC,OAAA,IAAW,EAAE,iBAAA,IAAqB,OAAA,CAAA,EAAU;AAC/C,MAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,IAC1E;AAEA,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,EAAA,IAAM,UAAA,EAAW;AAC3C,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAA;AAAA,MACnC,OAAA,CAAQ;AAAA,KACV;AACA,IAAA,MAAM,aAAA,GAAgB,QAAQ,aAAA,IAAiB,GAAA;AAE/C,IAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,MACd,SAAA;AAAA,MACA,QAAA;AAAA,MACA,IAAA,CAAK,QAAA;AAAA,MACL,OAAA,CAAQ,eAAA;AAAA,MACR;AAAA,KACF;AAEA,IAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,MAAA,KAAA,MAAW,CAAC,MAAM,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,EAAG;AAClE,QAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,MAC1C;AACA,MAAA,KAAA,MAAW,CAAA,IAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,EAAa,EAAG;AACzC,QAAA,IAAI,EAAE,IAAA,KAAS,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,EAAE,KAAK,CAAA;AAAA,MAC7C;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,OAAA;AAAA,MACA,WAAA,EAAa;AAAA,QACX,SAAA;AAAA,QACA,QAAA;AAAA,QACA,iBAAiB,OAAA,CAAQ,eAAA;AAAA,QACzB;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEA,MAAM,GAAA,GAAsB;AAC1B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAAA,EAE/B;AAAA,EAEA,MAAM,KAAA,GAAuB;AAAA,EAE7B;AAAA,EAEA,MAAM,KAAK,UAAA,EAAoC;AAC7C,IAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,EACnC;AAAA,EAEA,MAAM,QAAA,GAA2B;AAC/B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAA0B;AAC9B,IAAA,MAAM,IAAI,wBAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACF;AC1GA,eAAsB,yBACpB,MAAA,EACY;AACZ,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAIC,gBAAA,CAAQ,SAAQ,CAAE,IAAA;AAChD,EAAA,MAAM,SAAS,MAAA,CAAO,SAAA;AAAA,IACpB,iBAAA,CAAkB,UAAA;AAAA,IAClB,iBAAA,CAAkB;AAAA,GACpB;AACA,EAAA,OAAO,MAAA,CAAO,MAAS,eAAe,CAAA;AACxC;;;ACsBO,SAAS,kBAAA,CAOd,MAAA,EACA,QAAA,EACA,OAAA,EAWA;AACA,EAAA,OAAO,OAAO,MAAM,OAAA,KAAY;AAC9B,IAAA,MAAM,KAAA,GACJ,MAAM,wBAAA,CAA2D,MAAM,CAAA;AAEzE,IAAA,MAAM,EAAE,SAAA,EAAW,QAAA,EAAU,eAAA,EAAiB,eAAc,GAAI,KAAA;AAChE,IAAA,IAAI,CAAC,QAAA,IAAY,CAAC,SAAA,EAAW;AAC3B,MAAA,OAAO;AAAA,QACL,YAAA,EAAc,CAAA,iDAAA,EAAoD,OAAA,CAAQ,QAAQ,CAAA,iCAAA,CAAA;AAAA,QAClF,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,MACd,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA,CAAS,QAAA;AAAA,MACT,eAAA;AAAA,MACA,aAAA,IAAiB;AAAA,KACnB;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,IAAA,EAAM,EAAE,GAAG,OAAA,EAAS,SAAS,CAAA;AAC5D,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,EAAA,CAAG,YAAA,EAAa;AAE1C,IAAA,OAAO;AAAA,MACL,cAAc,QAAA,CAAS,YAAA;AAAA,MACvB,IAAA,EAAM;AAAA,QACJ,GAAI,QAAA,CAAS,IAAA,IAAQ,EAAC;AAAA,QACtB,aAAA,EAAe;AAAA;AACjB,KACF;AAAA,EACF,CAAA;AACF;;;ACvEO,SAAS,mBAAA,CACd,cACA,OAAA,EACS;AACT,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,QAAA,GAAA,CAAY,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,CAAC,OAAO,CAAA,EAAG,GAAA,CAAI,YAAY,CAAA;AAChF,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,OAAO,KAAA,CAAM,QAAA;AACnB,IAAA,MAAM,OAAO,IAAA,EAAM,QAAA;AACnB,IAAA,OAAO,OAAO,SAAS,QAAA,IAAY,QAAA,CAAS,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACjE,CAAC,CAAA;AACH;AAKO,SAAS,iBAAA,CACd,cACA,OAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,aAAa,OAAO,CAAA;AAClC,EAAA,OAAO,IAAA,CAAK,MAAA,CAAO,CAAC,KAAA,KAAU;AAC5B,IAAA,MAAM,OAAO,KAAA,CAAM,QAAA;AACnB,IAAA,MAAM,OAAO,IAAA,EAAM,QAAA;AACnB,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,IAAI,CAAA;AAAA,EAC/C,CAAC,CAAA;AACH;AAcO,SAAS,YAAA,CACd,cACA,OAAA,EACS;AACT,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,iBAAiB,OAAO,CAAA;AACtC,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,MAAM,GAAG,CAAA,CAAE,OAAO,OAAO,CAAA;AACrD,IAAA,OAAO,SAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,CAAE,KAAK,KAAK,CAAA;AAAA,EACzC,CAAC,CAAA;AACH;AAMA,SAAS,aAAa,OAAA,EAA6C;AACjE,EAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAClC,IAAA,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,CAAC,MAAM,CAAA,KAAM,OAAA;AACtB;AAEA,SAAS,iBAAiB,OAAA,EAA6C;AACrE,EAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA,KAAM,OAAA;AAChD,EAAA,MAAM,KAAK,IAAI,MAAA;AAAA,IACb,GAAA,GAAM,QAAQ,OAAA,CAAQ,mBAAA,EAAqB,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,IAAI,CAAA,GAAI;AAAA,GAC5E;AACA,EAAA,OAAO,CAAC,CAAA,KAAM,EAAA,CAAG,IAAA,CAAK,CAAC,CAAA;AACzB;;;AC7EA,IAAM,qBAAN,MAIA;AAAA,EASE,YACW,EAAA,EACT,IAAA,EACA,QAAA,EACA,GAAA,EACA,gBAAgB,GAAA,EAChB;AALS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AAMT,IAAA,IAAA,CAAK,KAAK,IAAI,wBAAA,CAAyB,IAAA,EAAM,QAAA,EAAU,KAAK,aAAa,CAAA;AAAA,EAC3E;AAAA,EAhBS,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,KAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAYT,MAAM,IAAA,CAAK,QAAA,EAAkB,QAAA,EAA6C;AACxE,IAAA,MAAM,IAAI,yBAAyB,MAAM,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,OAAA,GAAyB;AAAA,EAE/B;AACF,CAAA;AAaO,SAAS,qBAId,EAAA,EACA,IAAA,EACA,QAAA,EACA,GAAA,EACA,gBAAgB,GAAA,EACa;AAC7B,EAAA,OAAO,IAAI,kBAAA,CAAmB,EAAA,EAAI,IAAA,EAAM,QAAA,EAAU,KAAK,aAAa,CAAA;AACtE","file":"index.cjs","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n  /** Optional state to merge into the workflow's `AgentState` via the session. */\n  stateUpdate?: Record<string, unknown>;\n}\n\nexport interface SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n  pause(sandboxId: string, ttlSeconds?: number): Promise<void>;\n  snapshot(sandboxId: string): Promise<SandboxSnapshot>;\n  restore(snapshot: SandboxSnapshot): Promise<Sandbox>;\n  fork(sandboxId: string): Promise<Sandbox>;\n}\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\nexport interface SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> {\n  createSandbox(\n    options?: TOptions\n  ): Promise<{ sandboxId: string; stateUpdate?: Record<string, unknown> }>;\n  destroySandbox(sandboxId: string): Promise<void>;\n  pauseSandbox(sandboxId: string): Promise<void>;\n  snapshotSandbox(sandboxId: string): Promise<SandboxSnapshot>;\n  forkSandbox(sandboxId: string): Promise<string>;\n}\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n> = {\n  [K in keyof SandboxOps<TOptions> as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<TOptions>[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\nimport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  TreeMutation,\n} from \"./types\";\n\n/** Normalize a path against the provided workspace base. */\nfunction normalisePath(p: string, workspaceBase = \"/\"): string {\n  return posix.resolve(workspaceBase, p);\n}\n\n/** Return the parent directory of a normalised path (\"/a/b\" → \"/a\"). */\nfunction parentDir(p: string): string {\n  const idx = p.lastIndexOf(\"/\");\n  return idx <= 0 ? \"/\" : p.slice(0, idx);\n}\n\n/**\n * Collect the set of implicit directory paths from a flat file list.\n * E.g. \"/a/b/c.ts\" contributes \"/a/b\", \"/a\", \"/\".\n */\nfunction inferDirectories(\n  entries: { path: string }[],\n  workspaceBase: string\n): Set<string> {\n  const dirs = new Set<string>();\n  dirs.add(\"/\");\n  for (const entry of entries) {\n    let dir = parentDir(normalisePath(entry.path, workspaceBase));\n    while (dir !== \"/\" && !dirs.has(dir)) {\n      dirs.add(dir);\n      dir = parentDir(dir);\n    }\n    dirs.add(\"/\");\n  }\n  return dirs;\n}\n\n/**\n * Ephemeral {@link SandboxFileSystem} backed by a {@link FileResolver}.\n *\n * Created fresh for each tool invocation from the current workflow file tree.\n * Directory structure is inferred from file paths. All mutations are tracked\n * and can be retrieved via {@link getMutations} after the handler completes.\n */\nexport class VirtualSandboxFileSystem<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements SandboxFileSystem {\n  readonly workspaceBase: string;\n  private entries: Map<string, FileEntry<TMeta>>;\n  private directories: Set<string>;\n  private mutations: TreeMutation<TMeta>[] = [];\n\n  constructor(\n    tree: FileEntry<TMeta>[],\n    private resolver: FileResolver<TCtx, TMeta>,\n    private ctx: TCtx,\n    workspaceBase = \"/\",\n  ) {\n    this.workspaceBase = normalisePath(workspaceBase);\n    this.entries = new Map(\n      tree.map((e) => [normalisePath(e.path, this.workspaceBase), e])\n    );\n    this.directories = inferDirectories(tree, this.workspaceBase);\n  }\n\n  /** Return all mutations accumulated during this invocation. */\n  getMutations(): TreeMutation<TMeta>[] {\n    return this.mutations;\n  }\n\n  /** Look up a file entry by virtual path. */\n  getEntry(path: string): FileEntry<TMeta> | undefined {\n    return this.entries.get(normalisePath(path, this.workspaceBase));\n  }\n\n  // --------------------------------------------------------------------------\n  // Read operations — delegate to resolver lazily\n  // --------------------------------------------------------------------------\n\n  async readFile(path: string): Promise<string> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (!entry) throw new Error(`ENOENT: no such file: ${path}`);\n    return this.resolver.readFile(entry.id, this.ctx, entry.metadata);\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (!entry) throw new Error(`ENOENT: no such file: ${path}`);\n    return this.resolver.readFileBuffer(entry.id, this.ctx, entry.metadata);\n  }\n\n  // --------------------------------------------------------------------------\n  // Metadata operations — pure, resolved from the tree\n  // --------------------------------------------------------------------------\n\n  async exists(path: string): Promise<boolean> {\n    const norm = normalisePath(path, this.workspaceBase);\n    return this.entries.has(norm) || this.directories.has(norm);\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n    if (entry) {\n      return {\n        isFile: true,\n        isDirectory: false,\n        isSymbolicLink: false,\n        size: entry.size,\n        mtime: new Date(entry.mtime),\n      };\n    }\n    if (this.directories.has(norm)) {\n      return {\n        isFile: false,\n        isDirectory: true,\n        isSymbolicLink: false,\n        size: 0,\n        mtime: new Date(),\n      };\n    }\n    throw new Error(`ENOENT: no such file or directory: ${path}`);\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = normalisePath(path, this.workspaceBase);\n    if (!this.directories.has(norm)) {\n      throw new Error(`ENOENT: no such directory: ${path}`);\n    }\n    const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n    const names = new Set<string>();\n\n    for (const p of this.entries.keys()) {\n      if (p.startsWith(prefix)) {\n        const rest = p.slice(prefix.length);\n        const seg = rest.split(\"/\")[0];\n        if (seg) names.add(seg);\n      }\n    }\n    for (const d of this.directories) {\n      if (d.startsWith(prefix) && d !== norm) {\n        const rest = d.slice(prefix.length);\n        const seg = rest.split(\"/\")[0];\n        if (seg) names.add(seg);\n      }\n    }\n    return [...names].sort();\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const names = await this.readdir(path);\n    const norm = normalisePath(path, this.workspaceBase);\n    const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n\n    return names.map((name) => {\n      const full = prefix + name;\n      const isFile = this.entries.has(full);\n      const isDirectory = this.directories.has(full);\n      return { name, isFile, isDirectory, isSymbolicLink: false };\n    });\n  }\n\n  // --------------------------------------------------------------------------\n  // Write operations — delegate to resolver, record mutations\n  // --------------------------------------------------------------------------\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const existing = this.entries.get(norm);\n\n    if (existing) {\n      await this.resolver.writeFile(\n        existing.id,\n        content,\n        this.ctx,\n        existing.metadata\n      );\n      const size =\n        typeof content === \"string\"\n          ? new TextEncoder().encode(content).byteLength\n          : content.byteLength;\n      const updated: FileEntry<TMeta> = {\n        ...existing,\n        size,\n        mtime: new Date().toISOString(),\n      };\n      this.entries.set(norm, updated);\n      this.mutations.push({ type: \"update\", path: norm, entry: updated });\n    } else {\n      const entry = await this.resolver.createFile(norm, content, this.ctx);\n      const normalised = { ...entry, path: norm };\n      this.entries.set(norm, normalised);\n      this.addParentDirectories(norm);\n      this.mutations.push({ type: \"add\", entry: normalised });\n    }\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const existing = this.entries.get(norm);\n\n    if (!existing) {\n      return this.writeFile(path, content);\n    }\n\n    const current = await this.resolver.readFile(\n      existing.id,\n      this.ctx,\n      existing.metadata\n    );\n    const appended =\n      typeof content === \"string\"\n        ? current + content\n        : current + new TextDecoder().decode(content);\n    await this.resolver.writeFile(\n      existing.id,\n      appended,\n      this.ctx,\n      existing.metadata\n    );\n\n    const size = new TextEncoder().encode(appended).byteLength;\n    const updated: FileEntry<TMeta> = {\n      ...existing,\n      size,\n      mtime: new Date().toISOString(),\n    };\n    this.entries.set(norm, updated);\n    this.mutations.push({ type: \"update\", path: norm, entry: updated });\n  }\n\n  async mkdir(\n    _path: string,\n    _options?: { recursive?: boolean }\n  ): Promise<void> {\n    const norm = normalisePath(_path, this.workspaceBase);\n    if (this.directories.has(norm)) return;\n\n    if (_options?.recursive) {\n      this.addParentDirectories(norm + \"/placeholder\");\n      this.directories.add(norm);\n    } else {\n      const parent = parentDir(norm);\n      if (!this.directories.has(parent)) {\n        throw new Error(`ENOENT: no such directory: ${parent}`);\n      }\n      this.directories.add(norm);\n    }\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = normalisePath(path, this.workspaceBase);\n    const entry = this.entries.get(norm);\n\n    if (entry) {\n      await this.resolver.deleteFile(entry.id, this.ctx, entry.metadata);\n      this.entries.delete(norm);\n      this.mutations.push({ type: \"remove\", path: norm });\n      return;\n    }\n\n    if (this.directories.has(norm)) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${path}`);\n      }\n      const prefix = norm === \"/\" ? \"/\" : norm + \"/\";\n      for (const [p, e] of this.entries) {\n        if (p.startsWith(prefix)) {\n          await this.resolver.deleteFile(e.id, this.ctx, e.metadata);\n          this.entries.delete(p);\n          this.mutations.push({ type: \"remove\", path: p });\n        }\n      }\n      for (const d of this.directories) {\n        if (d.startsWith(prefix)) this.directories.delete(d);\n      }\n      this.directories.delete(norm);\n      return;\n    }\n\n    if (!options?.force) {\n      throw new Error(`ENOENT: no such file or directory: ${path}`);\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    _options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = normalisePath(src, this.workspaceBase);\n    const normDest = normalisePath(dest, this.workspaceBase);\n\n    const entry = this.entries.get(normSrc);\n    if (entry) {\n      const content = await this.resolver.readFile(\n        entry.id,\n        this.ctx,\n        entry.metadata\n      );\n      await this.writeFile(normDest, content);\n      return;\n    }\n\n    if (!this.directories.has(normSrc)) {\n      throw new Error(`ENOENT: no such file or directory: ${src}`);\n    }\n    if (!_options?.recursive) {\n      throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n    }\n\n    const prefix = normSrc === \"/\" ? \"/\" : normSrc + \"/\";\n    for (const [p, e] of this.entries) {\n      if (p.startsWith(prefix)) {\n        const relative = p.slice(normSrc.length);\n        const content = await this.resolver.readFile(\n          e.id,\n          this.ctx,\n          e.metadata\n        );\n        await this.writeFile(normDest + relative, content);\n      }\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    await this.cp(src, dest, { recursive: true });\n    await this.rm(src, { recursive: true });\n  }\n\n  // --------------------------------------------------------------------------\n  // Unsupported\n  // --------------------------------------------------------------------------\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(normalisePath(base, this.workspaceBase), path);\n  }\n\n  // --------------------------------------------------------------------------\n  // Helpers\n  // --------------------------------------------------------------------------\n\n  private addParentDirectories(filePath: string): void {\n    let dir = parentDir(normalisePath(filePath, this.workspaceBase));\n    while (!this.directories.has(dir)) {\n      this.directories.add(dir);\n      dir = parentDir(dir);\n    }\n  }\n}\n","import { uuid4 } from \"@temporalio/workflow\";\n\nconst BASE62 =\n  \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n/**\n * Generate a compact, workflow-deterministic identifier.\n *\n * Uses Temporal's `uuid4()` internally (seeded by the workflow's RNG),\n * then re-encodes the hex bytes into a base-62 alphabet for a shorter,\n * more token-efficient identifier (~3 tokens vs ~10 for a full UUID).\n *\n * Suitable for thread IDs, child workflow IDs, or any workflow-scoped identifier.\n *\n * @param length - Number of base-62 characters (default 12, ~71 bits of entropy)\n */\nexport function getShortId(length = 12): string {\n  const hex = uuid4().replace(/-/g, \"\");\n  let result = \"\";\n  for (let i = 0; i < length; i++) {\n    const byte = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n    result += BASE62[byte % BASE62.length];\n  }\n  return result;\n}\n","import type {\n  SandboxCapabilities,\n  SandboxCreateResult,\n  SandboxProvider,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { getShortId } from \"../../../lib/thread/id\";\nimport { createVirtualSandbox } from \"./index\";\nimport type {\n  FileEntryMetadata,\n  FileResolver,\n  VirtualSandboxCreateOptions,\n} from \"./types\";\n\n/**\n * Stateless {@link SandboxProvider} backed by a {@link FileResolver}.\n *\n * The provider holds **no internal state**. All sandbox state (sandboxId,\n * fileTree, resolverContext, workspaceBase) is returned as a `stateUpdate` from\n * {@link create} and merged into the workflow's `AgentState` by the session.\n * {@link withVirtualSandbox} reads this state back on every tool invocation.\n *\n * @example\n * ```typescript\n * const provider = new VirtualSandboxProvider(resolver);\n * const manager = new SandboxManager(provider);\n *\n * export const activities = {\n *   ...manager.createActivities(\"CodingAgent\"),\n *   readFile: withVirtualSandbox(client, provider, readHandler),\n * };\n * ```\n */\nexport class VirtualSandboxProvider<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements SandboxProvider<VirtualSandboxCreateOptions<TCtx>> {\n  readonly id = \"virtual\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: false,\n    persistence: true,\n  };\n\n  readonly resolver: FileResolver<TCtx, TMeta>;\n\n  constructor(resolver: FileResolver<TCtx, TMeta>) {\n    this.resolver = resolver;\n  }\n\n  async create(\n    options?: VirtualSandboxCreateOptions<TCtx>\n  ): Promise<SandboxCreateResult> {\n    if (!options || !(\"resolverContext\" in options)) {\n      throw new Error(\"VirtualSandboxProvider.create requires resolverContext\");\n    }\n\n    const sandboxId = options.id ?? getShortId();\n    const fileTree = await this.resolver.resolveEntries(\n      options.resolverContext\n    );\n    const workspaceBase = options.workspaceBase ?? \"/\";\n\n    const sandbox = createVirtualSandbox(\n      sandboxId,\n      fileTree,\n      this.resolver,\n      options.resolverContext,\n      workspaceBase,\n    );\n\n    if (options.initialFiles) {\n      for (const [path, content] of Object.entries(options.initialFiles)) {\n        await sandbox.fs.writeFile(path, content);\n      }\n      for (const m of sandbox.fs.getMutations()) {\n        if (m.type === \"add\") fileTree.push(m.entry);\n      }\n    }\n\n    return {\n      sandbox,\n      stateUpdate: {\n        sandboxId,\n        fileTree,\n        resolverContext: options.resolverContext,\n        workspaceBase,\n      },\n    };\n  }\n\n  async get(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"get (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n\n  async destroy(): Promise<void> {\n    // No-op — no internal state to clean up\n  }\n\n  async pause(): Promise<void> {\n    // No-op — virtual sandbox state lives in workflow AgentState\n  }\n\n  async fork(_sandboxId: string): Promise<never> {\n    throw new Error(\"Not implemented\");\n  }\n\n  async snapshot(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"snapshot (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n\n  async restore(): Promise<never> {\n    throw new SandboxNotSupportedError(\n      \"restore (virtual sandbox state lives in workflow AgentState)\"\n    );\n  }\n}\n","import { Context } from \"@temporalio/activity\";\nimport type { WorkflowClient } from \"@temporalio/client\";\nimport type { BaseAgentState, RunAgentConfig } from \"./types\";\nimport type { JsonValue } from \"./state/types\";\nimport type {\n  ActivityToolHandler,\n  RouterContext,\n  ToolHandlerResponse,\n} from \"./tool-router/types\";\n\n/**\n * Query the parent workflow's state from within an activity.\n * Resolves the workflow handle from the current activity context.\n */\nexport async function queryParentWorkflowState<T>(\n  client: WorkflowClient\n): Promise<T> {\n  const { workflowExecution } = Context.current().info;\n  const handle = client.getHandle(\n    workflowExecution.workflowId,\n    workflowExecution.runId\n  );\n  return handle.query<T>(\"getAgentState\");\n}\n\n/**\n * Wraps a handler into a `RunAgentActivity` by auto-fetching the parent\n * workflow's agent state before each invocation.\n *\n * @example\n * ```typescript\n * import { createRunAgentActivity } from 'zeitlich';\n * import { createLangChainModelInvoker } from 'zeitlich/adapters/thread/langchain';\n *\n * const invoker = createLangChainModelInvoker({ redis, model });\n * return { runAgent: createRunAgentActivity(client, invoker) };\n * ```\n */\nexport function createRunAgentActivity<R, S extends BaseAgentState = BaseAgentState>(\n  client: WorkflowClient,\n  handler: (config: RunAgentConfig & { state: S }) => Promise<R>,\n): (config: RunAgentConfig) => Promise<R> {\n  return async (config: RunAgentConfig) => {\n    const state = await queryParentWorkflowState<S>(client);\n    return handler({ ...config, state });\n  };\n}\n\n/**\n * Context injected into tool handlers created via {@link withParentWorkflowState}.\n */\nexport interface AgentStateContext<S extends BaseAgentState = BaseAgentState> extends RouterContext {\n  state: S;\n}\n\n/**\n * Wraps a tool handler into an `ActivityToolHandler` by auto-fetching the\n * parent workflow's agent state before each invocation.\n *\n * @typeParam S - Custom agent state type (defaults to `BaseAgentState`)\n *\n * @example\n * ```typescript\n * import { withParentWorkflowState, type AgentStateContext } from 'zeitlich';\n *\n * // With custom state:\n * interface MyState extends BaseAgentState { customField: string }\n * const myHandler = withParentWorkflowState<MyArgs, MyResult, MyState>(\n *   client,\n *   async (args, ctx) => {\n *     console.log(ctx.state.customField);\n *     return { toolResponse: 'done', data: null };\n *   },\n * );\n * ```\n */\nexport function withParentWorkflowState<TArgs, TResult, S extends BaseAgentState = BaseAgentState, TToolResponse = JsonValue>(\n  client: WorkflowClient,\n  handler: (\n    args: TArgs,\n    context: AgentStateContext<S>,\n  ) => Promise<ToolHandlerResponse<TResult, TToolResponse>>,\n): ActivityToolHandler<TArgs, TResult, RouterContext, TToolResponse> {\n  return async (args, context) => {\n    const state = await queryParentWorkflowState<S>(client);\n    return handler(args, { ...context, state });\n  };\n}\n","import type { WorkflowClient } from \"@temporalio/client\";\nimport { queryParentWorkflowState } from \"../../../lib/activity\";\nimport type { JsonValue } from \"../../../lib/state/types\";\nimport type { ActivityToolHandler, RouterContext } from \"../../../lib/tool-router/types\";\nimport type {\n  FileEntryMetadata,\n  TreeMutation,\n  VirtualSandboxContext,\n  VirtualSandboxState,\n} from \"./types\";\nimport type { VirtualSandboxProvider } from \"./provider\";\nimport { createVirtualSandbox } from \"./index\";\n\n/**\n * Wraps a tool handler that needs a virtual sandbox, automatically querying\n * the parent workflow for the current file tree and resolver context.\n *\n * On each invocation the wrapper:\n * 1. Queries the workflow's `AgentState` for `fileTree`, `resolverContext`, and `workspaceBase`\n * 2. Creates an ephemeral {@link VirtualSandbox} from tree + provider's resolver\n * 3. Runs the inner handler\n * 4. Returns the handler's result together with any {@link TreeMutation}s\n *\n * The consumer applies mutations back to workflow state via a post-tool hook.\n *\n * @param client    - Temporal `WorkflowClient` for querying the parent workflow\n * @param agentName - Agent name (used to derive the state query name)\n * @param provider  - {@link VirtualSandboxProvider} (wraps the resolver)\n * @param handler   - Inner handler expecting a {@link VirtualSandboxContext}\n *\n * @example\n * ```typescript\n * import { withVirtualSandbox, type VirtualSandboxContext } from 'zeitlich';\n *\n * const readHandler: ActivityToolHandler<FileReadArgs, ReadResult, VirtualSandboxContext> =\n *   async (args, { sandbox }) => {\n *     const content = await sandbox.fs.readFile(args.path);\n *     return { toolResponse: content, data: { path: args.path, content } };\n *   };\n *\n * // At activity registration:\n * const provider = new VirtualSandboxProvider(resolver);\n * const handler = withVirtualSandbox(client, \"myAgent\", provider, readHandler);\n * ```\n */\nexport function withVirtualSandbox<\n  TArgs,\n  TResult,\n  TCtx,\n  TMeta = FileEntryMetadata,\n  TToolResponse = JsonValue,\n>(\n  client: WorkflowClient,\n  provider: VirtualSandboxProvider<TCtx, TMeta>,\n  handler: ActivityToolHandler<\n    TArgs,\n    TResult,\n    VirtualSandboxContext<TCtx, TMeta>,\n    TToolResponse\n  >\n): ActivityToolHandler<\n  TArgs,\n  (TResult & { treeMutations: TreeMutation<TMeta>[] }) | null,\n  RouterContext,\n  TToolResponse | string\n> {\n  return async (args, context) => {\n    const state =\n      await queryParentWorkflowState<VirtualSandboxState<TCtx, TMeta>>(client);\n\n    const { sandboxId, fileTree, resolverContext, workspaceBase } = state;\n    if (!fileTree || !sandboxId) {\n      return {\n        toolResponse: `Error: No fileTree/sandboxId in agent state. The ${context.toolName} tool requires a virtual sandbox.`,\n        data: null,\n      };\n    }\n\n    const sandbox = createVirtualSandbox(\n      sandboxId,\n      fileTree,\n      provider.resolver,\n      resolverContext,\n      workspaceBase ?? \"/\",\n    );\n    const response = await handler(args, { ...context, sandbox });\n    const mutations = sandbox.fs.getMutations();\n\n    return {\n      toolResponse: response.toolResponse,\n      data: {\n        ...(response.data ?? {}),\n        treeMutations: mutations,\n      } as TResult & { treeMutations: TreeMutation<TMeta>[] },\n    };\n  };\n}\n","import type { FileEntry } from \"./types\";\n\n/**\n * Structural constraint: accepts any `AgentStateManager<T>` whose custom\n * state includes `fileTree: FileEntry<TMeta>[]`.\n */\nexport interface FileTreeAccessor<TMeta> {\n  get(key: \"fileTree\"): FileEntry<TMeta>[];\n}\n\n/**\n * Check whether any file in the tree has a `metadata.mimeType` that matches\n * the given pattern.\n *\n * Patterns:\n * - Exact: `\"application/pdf\"`\n * - Wildcard type: `\"image/*\"`\n *\n * Useful for conditionally enabling tools:\n *\n * ```ts\n * { enabled: hasFileWithMimeType(stateManager, \"image/*\") }\n * { enabled: hasFileWithMimeType(stateManager, [\"image/*\", \"application/pdf\"]) }\n * ```\n */\nexport function hasFileWithMimeType<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string | string[],\n): boolean {\n  const tree = stateManager.get(\"fileTree\");\n  const matchers = (Array.isArray(pattern) ? pattern : [pattern]).map(buildMatcher);\n  return tree.some((entry) => {\n    const meta = entry.metadata as Record<string, unknown> | undefined;\n    const mime = meta?.mimeType;\n    return typeof mime === \"string\" && matchers.some((m) => m(mime));\n  });\n}\n\n/**\n * Return all entries whose `metadata.mimeType` matches the given pattern.\n */\nexport function filesWithMimeType<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string,\n): FileEntry<TMeta>[] {\n  const tree = stateManager.get(\"fileTree\");\n  const match = buildMatcher(pattern);\n  return tree.filter((entry) => {\n    const meta = entry.metadata as Record<string, unknown> | undefined;\n    const mime = meta?.mimeType;\n    return typeof mime === \"string\" && match(mime);\n  });\n}\n\n/**\n * Check whether the tree contains a directory whose name matches the given\n * pattern. Directories are inferred from file paths.\n *\n * Patterns:\n * - Exact: `\"src\"`\n * - Glob with `*` wildcard: `\"test*\"`, `\"*.generated\"`\n *\n * ```ts\n * { enabled: hasDirectory(stateManager, \"test*\") }\n * ```\n */\nexport function hasDirectory<TMeta>(\n  stateManager: FileTreeAccessor<TMeta>,\n  pattern: string,\n): boolean {\n  const tree = stateManager.get(\"fileTree\");\n  const match = buildGlobMatcher(pattern);\n  return tree.some((entry) => {\n    const segments = entry.path.split(\"/\").filter(Boolean);\n    return segments.slice(0, -1).some(match);\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Internal matchers\n// ---------------------------------------------------------------------------\n\nfunction buildMatcher(pattern: string): (value: string) => boolean {\n  if (pattern.endsWith(\"/*\")) {\n    const prefix = pattern.slice(0, -1);\n    return (v) => v.startsWith(prefix);\n  }\n  return (v) => v === pattern;\n}\n\nfunction buildGlobMatcher(pattern: string): (value: string) => boolean {\n  if (!pattern.includes(\"*\")) return (v) => v === pattern;\n  const re = new RegExp(\n    \"^\" + pattern.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\").replace(/\\*/g, \".*\") + \"$\",\n  );\n  return (v) => re.test(v);\n}\n","import type {\n  Sandbox,\n  SandboxCapabilities,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { VirtualSandboxFileSystem } from \"./filesystem\";\nimport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  VirtualSandbox,\n} from \"./types\";\n\n// ============================================================================\n// VirtualSandbox\n// ============================================================================\n\nclass VirtualSandboxImpl<\n  TCtx = unknown,\n  TMeta = FileEntryMetadata,\n> implements Sandbox\n{\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: false,\n    persistence: true,\n  };\n\n  readonly fs: VirtualSandboxFileSystem<TCtx, TMeta>;\n\n  constructor(\n    readonly id: string,\n    tree: FileEntry<TMeta>[],\n    resolver: FileResolver<TCtx, TMeta>,\n    ctx: TCtx,\n    workspaceBase = \"/\",\n  ) {\n    this.fs = new VirtualSandboxFileSystem(tree, resolver, ctx, workspaceBase);\n  }\n\n  async exec(_command: string, _options?: ExecOptions): Promise<ExecResult> {\n    throw new SandboxNotSupportedError(\"exec\");\n  }\n\n  async destroy(): Promise<void> {\n    // Ephemeral — nothing to clean up\n  }\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\n/**\n * Create an ephemeral {@link Sandbox} from a file tree and resolver.\n *\n * Used internally by {@link withVirtualSandbox} and\n * {@link VirtualSandboxProvider}; consumers can also call this directly\n * if they need a sandbox outside the wrapper pattern.\n */\nexport function createVirtualSandbox<\n  TCtx,\n  TMeta = FileEntryMetadata,\n>(\n  id: string,\n  tree: FileEntry<TMeta>[],\n  resolver: FileResolver<TCtx, TMeta>,\n  ctx: TCtx,\n  workspaceBase = \"/\",\n): VirtualSandbox<TCtx, TMeta> {\n  return new VirtualSandboxImpl(id, tree, resolver, ctx, workspaceBase);\n}\n\n// Re-exports for convenience\nexport { VirtualSandboxFileSystem } from \"./filesystem\";\nexport { VirtualSandboxProvider } from \"./provider\";\nexport { withVirtualSandbox } from \"./with-virtual-sandbox\";\nexport { hasFileWithMimeType, filesWithMimeType, hasDirectory } from \"./queries\";\nexport type { FileTreeAccessor } from \"./queries\";\nexport type {\n  FileEntry,\n  FileEntryMetadata,\n  FileResolver,\n  VirtualFileTree,\n  VirtualSandboxCreateOptions,\n  VirtualSandboxState,\n  VirtualSandboxContext,\n  VirtualSandbox,\n  TreeMutation,\n} from \"./types\";\n"]}