@namzu/sandbox 25.0.0 → 27.0.0

package/dist/backends/kubernetes/per-sandbox-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"per-sandbox-policy.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/per-sandbox-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EACN,KAAK,sBAAsB,EAC3B,gCAAgC,EAChC,KAAK,gCAAgC,EAQrC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEN,KAAK,gBAAgB,EAGrB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACN,KAAK,wBAAwB,EAQ7B,MAAM,cAAc,CAAA;AAErB;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,eAAe,CAAA;AAE1D,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,qBAAqB,GAC1B,wBAAwB,CAS1B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,uCAAwC,SAAQ,KAAK;IAIhE,QAAQ,CAAC,YAAY,EAAE,2BAA2B,GAAG,kCAAkC;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IALtB,SAAkB,IAAI,6CAA4C;gBAGxD,YAAY,EAAE,2BAA2B,GAAG,kCAAkC,EAC9E,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACrB,KAAK,EAAE,OAAO;CAOf;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oCAAqC,SAAQ,KAAK;IAI7D,QAAQ,CAAC,YAAY,EAAE,2BAA2B,GAAG,kCAAkC;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IALtB,SAAkB,IAAI,0CAAyC;gBAGrD,YAAY,EAAE,2BAA2B,GAAG,kCAAkC,EAC9E,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM;CAMtB;AAED;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gCAAgC,EAAE,CAAA;AA4B3C;;;;;;;GAOG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IAIvD,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAJ3B,SAAkB,IAAI,oCAAmC;gBAG/C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM;CAM3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACrC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAED,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,gCAAgC,GAC1C,qBAAqB,CA+CvB;AAED,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,GAAG;QACzC,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAA;KACrD,CAAA;IACD,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,6BAA6B,GACpC,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAiIjD"}
+{"version":3,"file":"per-sandbox-policy.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/per-sandbox-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EACN,KAAK,sBAAsB,EAC3B,gCAAgC,EAChC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EAQrC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEN,KAAK,gBAAgB,EAGrB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACN,KAAK,wBAAwB,EAQ7B,MAAM,cAAc,CAAA;AACrB,OAAO,EACN,kCAAkC,EAClC,6BAA6B,EAC7B,kCAAkC,EAOlC,MAAM,wBAAwB,CAAA;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,eAAe,CAAA;AAE1D,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,qBAAqB,GAC1B,wBAAwB,CAS1B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,uCAAwC,SAAQ,KAAK;IAIhE,QAAQ,CAAC,YAAY,EAAE,2BAA2B,GAAG,kCAAkC;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IALtB,SAAkB,IAAI,6CAA4C;gBAGxD,YAAY,EAAE,2BAA2B,GAAG,kCAAkC,EAC9E,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACrB,KAAK,EAAE,OAAO;CAOf;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oCAAqC,SAAQ,KAAK;IAI7D,QAAQ,CAAC,YAAY,EAAE,2BAA2B,GAAG,kCAAkC;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IALtB,SAAkB,IAAI,0CAAyC;gBAGrD,YAAY,EAAE,2BAA2B,GAAG,kCAAkC,EAC9E,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM;CAMtB;AAED;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gCAAgC,EAAE,CAAA;AAK3C,OAAO,EACN,kCAAkC,EAClC,6BAA6B,EAC7B,kCAAkC,GAClC,CAAA;AA4BD;;;;;;;GAOG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IAIvD,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAJ3B,SAAkB,IAAI,oCAAmC;gBAG/C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM;CAM3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACrC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAED,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,gCAAgC,EAC5C,SAAS,EAAE,MAAM,GACf,qBAAqB,CA2EvB;AAED,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,GAAG;QACzC,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAA;KACrD,CAAA;IACD,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CACtB,OAAO,EAAE,gCAAgC,EACzC,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC,IAAI,CAAC,CAAA;CAClB;AAED;;;;;;GAMG;AACH,qBAAa,yCAA0C,SAAQ,KAAK;IAIlE,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO;IAN1B,SAAkB,IAAI,+CAA8C;gBAG1D,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO;CAO1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,6BAA6B,GACpC,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAmKjD"}

package/dist/backends/kubernetes/per-sandbox-policy.js

@@ -46,7 +46,11 @@
  * operator's own baseline policy. So before the FIRST write, this module
  * proves an operator applied a `ValidatingAdmissionPolicy` and its binding,
  * and refuses with {@link KubernetesAdmissionFenceMissingError}, having
- * written nothing, if either is absent. The shipped example
+ * written nothing, if either is absent — and with
+ * {@link KubernetesAdmissionFenceInertError}, naming the field, if either
+ * exists and would not enforce (see `per-sandbox-fence.ts`: the same
+ * standard the `no-network` baseline's named-object check holds its own
+ * object to). The shipped example
  * (`k8s/manifests/validatingadmissionpolicy-cilium.yaml`) bounds the host
  * identity to this name prefix, an owner reference whose uid the name has to
  * match, ONE selector label whose VALUE is that owner's own name (the shape
@@ -56,6 +60,18 @@
  * kube-dns rule on port 53, no address-based or entity-based peers and no
  * ingress.
  *
+ * ## Verified after every write
+ *
+ * Reading the object back proves the object is the one that was sent. It says
+ * nothing about the BOUNDARY, which is the union of every policy selecting the
+ * pod: a policy applied between this sandbox's create and its grant that
+ * allows more is invisible to a read-back of this one. So after the read-back
+ * the union is enumerated again, against the baseline translation plus the
+ * policy just written (`unionEgressAllowance`), and if anything allows more
+ * the object is deleted before the error is thrown — the per-sandbox
+ * analogue of the baseline's "no sandbox is handed back". An empty list is not
+ * re-checked: a deletion only narrows.
+ *
  * ## Union, not replacement
  *
  * The cluster unions every policy selecting a pod, so what this writes ADDS
@@ -77,9 +93,10 @@
  * host answers and the disallowed one does not" is a statement about a
  * network, and it needs a cluster that enforces plus a positive control.
  */
-import { KubernetesNetworkPolicyHostError, PER_SANDBOX_NARROWING_REFUSAL, assertHostsFitNarrowing, assertUsableHost, buildCiliumEgressManifest, perSandboxEgressLabelKey, verifyEgressPolicyApplied, } from './egress-policy.js';
+import { KubernetesNetworkPolicyHostError, PER_SANDBOX_NARROWING_REFUSAL, assertHostsFitNarrowing, assertUsableHost, buildCiliumEgressManifest, narrowedHostPorts, perSandboxEgressLabelKey, verifyEgressPolicyApplied, } from './egress-policy.js';
 import { KubernetesAlreadyGoneError, KubernetesConflictError, KubernetesCredentialError, } from './k8s-client.js';
 import { SANDBOX_API_GROUP, SANDBOX_API_VERSION, SANDBOX_EXTENSIONS_API_GROUP, ciliumNetworkPolicyCollectionPath, ciliumNetworkPolicyPath, validatingAdmissionPolicyBindingPath, validatingAdmissionPolicyPath, } from './objects.js';
+import { KubernetesAdmissionFenceInertError, KubernetesPermittedHostsError, KubernetesPermittedHostsParamError, assertFenceEnforces, assertPermittedHostsFenceEnforces, assertWithinPermittedHosts, permittedHostsFenceNames, readPermittedHosts, } from './per-sandbox-fence.js';
 /**
  * Every per-sandbox policy's name starts with this, and the shipped admission
  * policy refuses one that does not.
@@ -163,6 +180,10 @@ export class KubernetesAdmissionFenceMissingError extends Error {
  * package index — keeps resolving.
  */
 export { KubernetesNetworkPolicyHostError };
+// The fence's content checks and the operator-pinned host set live in
+// `per-sandbox-fence.ts`; their errors are re-exported here so every import
+// path a per-sandbox refusal is caught by keeps resolving from one module.
+export { KubernetesAdmissionFenceInertError, KubernetesPermittedHostsError, KubernetesPermittedHostsParamError, };
 /**
  * One `allowedHosts` entry, validated and canonicalised to the bytes a
  * `CiliumNetworkPolicy` should carry.
@@ -206,13 +227,15 @@ export class KubernetesOwnerUidMissingError extends Error {
         this.namespace = namespace;
     }
 }
-export function buildAdmissionFence(client, perSandbox) {
+export function buildAdmissionFence(client, perSandbox, namespace) {
     const policyName = perSandbox.admissionPolicyName;
     const bindingName = perSandbox.admissionPolicyBindingName ?? `${policyName}-binding`;
+    const param = perSandbox.permittedHostsParam;
+    const companion = param === undefined ? undefined : permittedHostsFenceNames(perSandbox);
     let applied;
     const read = async (kind, name, path, signal) => {
         try {
-            await client.request('GET', path, undefined, signal);
+            return await client.request('GET', path, undefined, signal);
         }
         catch (err) {
             if (err instanceof KubernetesAlreadyGoneError) {
@@ -227,11 +250,23 @@ export function buildAdmissionFence(client, perSandbox) {
             throw err;
         }
     };
+    const readPair = async (policy, binding, signal) => ({
+        policyName: policy,
+        policy: await read('ValidatingAdmissionPolicy', policy, validatingAdmissionPolicyPath(policy), signal),
+        bindingName: binding,
+        binding: await read('ValidatingAdmissionPolicyBinding', binding, validatingAdmissionPolicyBindingPath(binding), signal),
+    });
     return {
         async assertApplied(signal) {
+            // Existence first, then CONTENT, and both memoized together on
+            // success: the baseline's named-object check does the same, and a
+            // fence that existed but would not enforce is refused here, with
+            // the field that failed, before anything is written.
             applied ??= (async () => {
-                await read('ValidatingAdmissionPolicy', policyName, validatingAdmissionPolicyPath(policyName), signal);
-                await read('ValidatingAdmissionPolicyBinding', bindingName, validatingAdmissionPolicyBindingPath(bindingName), signal);
+                assertFenceEnforces(await readPair(policyName, bindingName, signal), namespace, perSandbox);
+                if (param !== undefined && companion !== undefined) {
+                    assertPermittedHostsFenceEnforces(await readPair(companion.policyName, companion.bindingName, signal), namespace, perSandbox, param);
+                }
             })().catch((err) => {
                 applied = undefined;
                 throw err;
@@ -240,6 +275,27 @@ export function buildAdmissionFence(client, perSandbox) {
         },
     };
 }
+/**
+ * Raised when a per-sandbox policy was written, FAILED a post-write check, and
+ * the attempt to remove it failed too. The refusal that triggered the removal
+ * is `cause`; the policy may still be in force, and the message says so,
+ * because the one thing a caller must not conclude is that the refusal left the
+ * cluster as it found it.
+ */
+export class KubernetesPerSandboxPolicyNotRemovedError extends Error {
+    policyName;
+    path;
+    refusal;
+    removal;
+    name = 'KubernetesPerSandboxPolicyNotRemovedError';
+    constructor(policyName, path, refusal, removal) {
+        super(`kubernetes: the per-sandbox policy ${policyName} (${path}) failed verification after it was written (${refusal instanceof Error ? refusal.message : String(refusal)}) and removing it failed too (${removal instanceof Error ? removal.message : String(removal)}). It may still be in force: delete it by hand. The sandbox's own destruction also removes it, because the policy is owned by the sandbox's claim.`, { cause: refusal });
+        this.policyName = policyName;
+        this.path = path;
+        this.refusal = refusal;
+        this.removal = removal;
+    }
+}
 /**
  * Build the `setNetworkPolicy` this backend attaches to a sandbox handle.
  *
@@ -250,7 +306,7 @@ export function buildAdmissionFence(client, perSandbox) {
  * read-back exists to prevent.
  */
 export function buildPerSandboxPolicySetter(options) {
-    const { client, fence, namespace, egress, owner, selectorValue } = options;
+    const { client, fence, namespace, egress, owner, selectorValue, verifyUnion } = options;
     const perSandbox = egress.perSandbox;
     const labelKey = perSandboxEgressLabelKey(egress);
     if (labelKey === undefined) {
@@ -302,7 +358,29 @@ export function buildPerSandboxPolicySetter(options) {
         // gone means its owner was deleted underneath the call and this
         // sandbox is already being destroyed. The refusal is still right; only
         // its advice belongs to the other caller.
-        await verifyEgressPolicyApplied(client, translated);
+        //
+        // Then the boundary, not only the object: what the pod can now reach is
+        // the union of every policy selecting it, and the read-back above says
+        // nothing about a policy applied between this sandbox's create and this
+        // grant. A failure of EITHER check removes what was just written, the
+        // way the baseline's create-path checks release the claim they were
+        // about to hand back: an unverified grant left in force is the state
+        // both checks exist to prevent. A policy that held an earlier,
+        // verified list is removed too — falling back to the baseline is the
+        // narrower of the two wrong answers.
+        try {
+            await verifyEgressPolicyApplied(client, translated);
+            await verifyUnion?.(translated);
+        }
+        catch (refusal) {
+            try {
+                await remove();
+            }
+            catch (removal) {
+                throw new KubernetesPerSandboxPolicyNotRemovedError(name, path, refusal, removal);
+            }
+            throw refusal;
+        }
     };
     const remove = async () => {
         try {
@@ -366,6 +444,18 @@ export function buildPerSandboxPolicySetter(options) {
                 await remove();
                 return;
             }
+            // The operator-pinned set, read per call: it is the operator's to
+            // edit, and a stale copy would refuse (or grant) against a list that
+            // is no longer the reviewed one. Only a grant is checked — a removal
+            // can only narrow, and the companion policy does not cover DELETE
+            // for the same reason, so a missing parameter never blocks a revoke.
+            if (perSandbox.permittedHostsParam !== undefined) {
+                const param = perSandbox.permittedHostsParam;
+                const permitted = await readPermittedHosts(client, param);
+                assertWithinPermittedHosts(param, permitted, hosts, (host) => perSandbox.narrowing === undefined
+                    ? undefined
+                    : narrowedHostPorts(host, perSandbox.narrowing));
+            }
             await write(translate(hosts));
         });
         queue = run.then(() => undefined, () => undefined);

package/dist/backends/kubernetes/per-sandbox-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"per-sandbox-policy.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/per-sandbox-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAIH,OAAO,EAEN,gCAAgC,EAGhC,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,0BAA0B,EAE1B,uBAAuB,EACvB,yBAAyB,GACzB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEN,iBAAiB,EACjB,mBAAmB,EACnB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oCAAoC,EACpC,6BAA6B,GAC7B,MAAM,cAAc,CAAA;AAErB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,YAAY,CAAA;AAE1D,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,OAAO,GAAG,8BAA8B,GAAG,QAAQ,EAAE,CAAA;AACtD,CAAC;AAoBD,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B,CAC7C,KAA4B;IAE5B,OAAO;QACN,UAAU,EAAE,GACX,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,iBAChE,IAAI,mBAAmB,EAAE;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;KACd,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,uCAAwC,SAAQ,KAAK;IAIvD;IACA;IACA;IALQ,IAAI,GAAG,yCAAyC,CAAA;IAElE,YACU,YAA8E,EAC9E,UAAkB,EAClB,IAAY,EACrB,KAAc;QAEd,KAAK,CACJ,qFAAqF,YAAY,UAAU,UAAU,KAAK,IAAI,+SAA+S,EAC7a,EAAE,KAAK,EAAE,CACT,CAAA;QARQ,iBAAY,GAAZ,YAAY,CAAkE;QAC9E,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;IAOtB,CAAC;CACD;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAIpD;IACA;IACA;IALQ,IAAI,GAAG,sCAAsC,CAAA;IAE/D,YACU,YAA8E,EAC9E,UAAkB,EAClB,IAAY;QAErB,KAAK,CACJ,6DAA6D,YAAY,UAAU,UAAU,YAAY,IAAI,mUAAmU,8BAA8B,0GAA0G,CACxjB,CAAA;QANQ,iBAAY,GAAZ,YAAY,CAAkE;QAC9E,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;IAKtB,CAAC;CACD;AAED;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gCAAgC,EAAE,CAAA;AAE3C;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,gCAAgC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACrC,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC3B,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAI9C;IACA;IAJQ,IAAI,GAAG,gCAAgC,CAAA;IAEzD,YACU,UAAkB,EAClB,SAAiB;QAE1B,KAAK,CACJ,eAAe,UAAU,iBAAiB,SAAS,oYAAoY,CACvb,CAAA;QALQ,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAQ;IAK3B,CAAC;CACD;AAcD,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,UAA4C;IAE5C,MAAM,UAAU,GAAG,UAAU,CAAC,mBAAmB,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,0BAA0B,IAAI,GAAG,UAAU,UAAU,CAAA;IACpF,IAAI,OAAkC,CAAA;IACtC,MAAM,IAAI,GAAG,KAAK,EACjB,IAAsE,EACtE,IAAY,EACZ,IAAY,EACZ,MAAoB,EACJ,EAAE;QAClB,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC/C,MAAM,IAAI,oCAAoC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YACjE,CAAC;YACD,mEAAmE;YACnE,mEAAmE;YACnE,4CAA4C;YAC5C,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC9C,MAAM,IAAI,uCAAuC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;YACzE,CAAC;YACD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC,CAAA;IACD,OAAO;QACN,KAAK,CAAC,aAAa,CAAC,MAAM;YACzB,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBACvB,MAAM,IAAI,CACT,2BAA2B,EAC3B,UAAU,EACV,6BAA6B,CAAC,UAAU,CAAC,EACzC,MAAM,CACN,CAAA;gBACD,MAAM,IAAI,CACT,kCAAkC,EAClC,WAAW,EACX,oCAAoC,CAAC,WAAW,CAAC,EACjD,MAAM,CACN,CAAA;YACF,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC3B,OAAO,GAAG,SAAS,CAAA;gBACnB,MAAM,GAAG,CAAA;YACV,CAAC,CAAC,CAAA;YACF,MAAM,OAAO,CAAA;QACd,CAAC;KACD,CAAA;AACF,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAC1C,OAAsC;IAEtC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACrD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,MAAM,SAAS,GAAG,CAAC,YAA+B,EAAoC,EAAE,CACvF,yBAAyB,CAAC;QACzB,SAAS;QACT,IAAI;QACJ,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE;QAC7C,YAAY;QACZ,0DAA0D;QAC1D,iEAAiE;QACjE,mEAAmE;QACnE,UAAU,EAAE,QAAQ;QACpB,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,eAAe,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACxD,cAAc,EAAE,6BAA6B;KAC7C,CAAC,CAAA;IAEH,MAAM,KAAK,GAAG,KAAK,EAAE,UAA4C,EAAiB,EAAE;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iCAAiC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,oEAAoE;YACpE,IAAI,CAAC,CAAC,GAAG,YAAY,uBAAuB,CAAC;gBAAE,MAAM,GAAG,CAAA;YACxD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1C,CAAC;QACD,2DAA2D;QAC3D,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sCAAsC;QACtC,EAAE;QACF,oEAAoE;QACpE,qDAAqD;QACrD,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,gEAAgE;QAChE,uEAAuE;QACvE,0CAA0C;QAC1C,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpD,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,gEAAgE;YAChE,8DAA8D;YAC9D,UAAU;YACV,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,MAA4B,EAAiB,EAAE;QAC5D,kEAAkE;QAClE,+DAA+D;QAC/D,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,6CAA6C;QAC7C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAClE,gEAAgE;QAChE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,iBAAiB;QACjB,uBAAuB,CACtB,KAAK,EACL,UAAU,CAAC,SAAS;QACpB,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,0DAA0D;QAC1D,+BAA+B;QAC/B,6BAA6B,CAC7B,CAAA;QACD,yEAAyE;QACzE,sBAAsB;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjC,8DAA8D;YAC9D,kEAAkE;YAClE,wBAAwB;YACxB,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,gDAAgD;YAChD,MAAM,KAAK,CAAC,aAAa,EAAE,CAAA;YAC3B,kEAAkE;YAClE,uDAAuD;YACvD,gEAAgE;YAChE,gCAAgC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,EAAE,CAAA;gBACd,OAAM;YACP,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QACF,KAAK,GAAG,GAAG,CAAC,IAAI,CACf,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAA;QACD,MAAM,GAAG,CAAA;IACV,CAAC,CAAA;AACF,CAAC"}
+{"version":3,"file":"per-sandbox-policy.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/per-sandbox-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AAIH,OAAO,EAEN,gCAAgC,EAGhC,6BAA6B,EAC7B,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,0BAA0B,EAE1B,uBAAuB,EACvB,yBAAyB,GACzB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEN,iBAAiB,EACjB,mBAAmB,EACnB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oCAAoC,EACpC,6BAA6B,GAC7B,MAAM,cAAc,CAAA;AACrB,OAAO,EACN,kCAAkC,EAClC,6BAA6B,EAC7B,kCAAkC,EAElC,mBAAmB,EACnB,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,kBAAkB,GAClB,MAAM,wBAAwB,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,YAAY,CAAA;AAE1D,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,OAAO,GAAG,8BAA8B,GAAG,QAAQ,EAAE,CAAA;AACtD,CAAC;AAoBD,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B,CAC7C,KAA4B;IAE5B,OAAO;QACN,UAAU,EAAE,GACX,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,iBAChE,IAAI,mBAAmB,EAAE;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;KACd,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,uCAAwC,SAAQ,KAAK;IAIvD;IACA;IACA;IALQ,IAAI,GAAG,yCAAyC,CAAA;IAElE,YACU,YAA8E,EAC9E,UAAkB,EAClB,IAAY,EACrB,KAAc;QAEd,KAAK,CACJ,qFAAqF,YAAY,UAAU,UAAU,KAAK,IAAI,+SAA+S,EAC7a,EAAE,KAAK,EAAE,CACT,CAAA;QARQ,iBAAY,GAAZ,YAAY,CAAkE;QAC9E,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;IAOtB,CAAC;CACD;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAIpD;IACA;IACA;IALQ,IAAI,GAAG,sCAAsC,CAAA;IAE/D,YACU,YAA8E,EAC9E,UAAkB,EAClB,IAAY;QAErB,KAAK,CACJ,6DAA6D,YAAY,UAAU,UAAU,YAAY,IAAI,mUAAmU,8BAA8B,0GAA0G,CACxjB,CAAA;QANQ,iBAAY,GAAZ,YAAY,CAAkE;QAC9E,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;IAKtB,CAAC;CACD;AAED;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gCAAgC,EAAE,CAAA;AAE3C,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,OAAO,EACN,kCAAkC,EAClC,6BAA6B,EAC7B,kCAAkC,GAClC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,gCAAgC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACrC,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC3B,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAI9C;IACA;IAJQ,IAAI,GAAG,gCAAgC,CAAA;IAEzD,YACU,UAAkB,EAClB,SAAiB;QAE1B,KAAK,CACJ,eAAe,UAAU,iBAAiB,SAAS,oYAAoY,CACvb,CAAA;QALQ,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAQ;IAK3B,CAAC;CACD;AAcD,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,UAA4C,EAC5C,SAAiB;IAEjB,MAAM,UAAU,GAAG,UAAU,CAAC,mBAAmB,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,0BAA0B,IAAI,GAAG,UAAU,UAAU,CAAA;IACpF,MAAM,KAAK,GAAG,UAAU,CAAC,mBAAmB,CAAA;IAC5C,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAA;IACxF,IAAI,OAAkC,CAAA;IACtC,MAAM,IAAI,GAAG,KAAK,EACjB,IAAsE,EACtE,IAAY,EACZ,IAAY,EACZ,MAAoB,EACD,EAAE;QACrB,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC/C,MAAM,IAAI,oCAAoC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YACjE,CAAC;YACD,mEAAmE;YACnE,mEAAmE;YACnE,4CAA4C;YAC5C,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC9C,MAAM,IAAI,uCAAuC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;YACzE,CAAC;YACD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,EACrB,MAAc,EACd,OAAe,EACf,MAAoB,EAMlB,EAAE,CAAC,CAAC;QACN,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,MAAM,IAAI,CACjB,2BAA2B,EAC3B,MAAM,EACN,6BAA6B,CAAC,MAAM,CAAC,EACrC,MAAM,CACN;QACD,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,MAAM,IAAI,CAClB,kCAAkC,EAClC,OAAO,EACP,oCAAoC,CAAC,OAAO,CAAC,EAC7C,MAAM,CACN;KACD,CAAC,CAAA;IACF,OAAO;QACN,KAAK,CAAC,aAAa,CAAC,MAAM;YACzB,+DAA+D;YAC/D,kEAAkE;YAClE,iEAAiE;YACjE,qDAAqD;YACrD,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBACvB,mBAAmB,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;gBAC3F,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBACpD,iCAAiC,CAChC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,EACnE,SAAS,EACT,UAAU,EACV,KAAK,CACL,CAAA;gBACF,CAAC;YACF,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC3B,OAAO,GAAG,SAAS,CAAA;gBACnB,MAAM,GAAG,CAAA;YACV,CAAC,CAAC,CAAA;YACF,MAAM,OAAO,CAAA;QACd,CAAC;KACD,CAAA;AACF,CAAC;AAiCD;;;;;;GAMG;AACH,MAAM,OAAO,yCAA0C,SAAQ,KAAK;IAIzD;IACA;IACA;IACA;IANQ,IAAI,GAAG,2CAA2C,CAAA;IAEpE,YACU,UAAkB,EAClB,IAAY,EACZ,OAAgB,EAChB,OAAgB;QAEzB,KAAK,CACJ,sCAAsC,UAAU,KAAK,IAAI,+CAA+C,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,oJAAoJ,EACrZ,EAAE,KAAK,EAAE,OAAO,EAAE,CAClB,CAAA;QARQ,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAS;QAChB,YAAO,GAAP,OAAO,CAAS;IAM1B,CAAC;CACD;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAC1C,OAAsC;IAEtC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IACvF,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACrD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,MAAM,SAAS,GAAG,CAAC,YAA+B,EAAoC,EAAE,CACvF,yBAAyB,CAAC;QACzB,SAAS;QACT,IAAI;QACJ,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE;QAC7C,YAAY;QACZ,0DAA0D;QAC1D,iEAAiE;QACjE,mEAAmE;QACnE,UAAU,EAAE,QAAQ;QACpB,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,eAAe,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACxD,cAAc,EAAE,6BAA6B;KAC7C,CAAC,CAAA;IAEH,MAAM,KAAK,GAAG,KAAK,EAAE,UAA4C,EAAiB,EAAE;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iCAAiC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,oEAAoE;YACpE,IAAI,CAAC,CAAC,GAAG,YAAY,uBAAuB,CAAC;gBAAE,MAAM,GAAG,CAAA;YACxD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1C,CAAC;QACD,2DAA2D;QAC3D,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sCAAsC;QACtC,EAAE;QACF,oEAAoE;QACpE,qDAAqD;QACrD,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,gEAAgE;QAChE,uEAAuE;QACvE,0CAA0C;QAC1C,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,+DAA+D;QAC/D,qEAAqE;QACrE,qCAAqC;QACrC,IAAI,CAAC;YACJ,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;YACnD,MAAM,WAAW,EAAE,CAAC,UAAU,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,MAAM,EAAE,CAAA;YACf,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,yCAAyC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;YAClF,CAAC;YACD,MAAM,OAAO,CAAA;QACd,CAAC;IACF,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,gEAAgE;YAChE,8DAA8D;YAC9D,UAAU;YACV,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,MAA4B,EAAiB,EAAE;QAC5D,kEAAkE;QAClE,+DAA+D;QAC/D,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,6CAA6C;QAC7C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAClE,gEAAgE;QAChE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,iBAAiB;QACjB,uBAAuB,CACtB,KAAK,EACL,UAAU,CAAC,SAAS;QACpB,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,0DAA0D;QAC1D,+BAA+B;QAC/B,6BAA6B,CAC7B,CAAA;QACD,yEAAyE;QACzE,sBAAsB;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjC,8DAA8D;YAC9D,kEAAkE;YAClE,wBAAwB;YACxB,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,gDAAgD;YAChD,MAAM,KAAK,CAAC,aAAa,EAAE,CAAA;YAC3B,kEAAkE;YAClE,uDAAuD;YACvD,gEAAgE;YAChE,gCAAgC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,EAAE,CAAA;gBACd,OAAM;YACP,CAAC;YACD,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,UAAU,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,UAAU,CAAC,mBAAmB,CAAA;gBAC5C,MAAM,SAAS,GAAmB,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBACzE,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAC5D,UAAU,CAAC,SAAS,KAAK,SAAS;oBACjC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAChD,CAAA;YACF,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QACF,KAAK,GAAG,GAAG,CAAC,IAAI,CACf,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAA;QACD,MAAM,GAAG,CAAA;IACV,CAAC,CAAA;AACF,CAAC"}

package/dist/backends/kubernetes/sandbox.d.ts

@@ -26,15 +26,10 @@
  *    Presence follows configuration alone, never a probe of the cluster. See
  *    `per-sandbox-policy.ts`.
  *
- *    A WORKSPACE handle never carries it: `KubernetesWorkspace`'s create path
- *    builds its handle through `buildKubernetesSandbox` without this option,
- *    because it composes no per-sandbox pod label and tracks no owner uid for
- *    one. That is a property of the PATH and not of the configuration, so it
- *    is not answered by omission: `createKubernetesWorkspace` refuses a
- *    config carrying `egress.perSandbox` outright
- *    (`KubernetesWorkspacePerSandboxEgressConfigError`, before any request)
- *    rather than letting the option declare a capability the path never
- *    serves — see `workspace.ts`.
+ *    A WORKSPACE handle carries it on the same condition, built in
+ *    `workspace.ts` rather than here: the `Sandbox` is the owner, the pod
+ *    template carries the selector label, and a resume re-proves the fence —
+ *    see `workspace-per-sandbox.ts`.
  *
  * Absent on purpose, because the SDK's contract says a backend that cannot
  * honour an optional method must omit it rather than accept and ignore:

package/dist/backends/kubernetes/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,KAAK,EAEX,OAAO,EAOP,oBAAoB,EAOpB,MAAM,YAAY,CAAA;AAInB,OAAO,EACN,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,MAAM,mCAAmC,CAAA;AAE1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAW9D,wEAAwE;AACxE,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAJ7B,SAAkB,IAAI,qCAAoC;gBAGhD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM;CAM7B;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAInD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAJ7B,SAAkB,IAAI,gCAA+B;gBAG3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM;CAM7B;AAED,UAAU,4BAA4B;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAA;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACpC,KAAK,EAAE,8BAA8B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E;AAED;;;;;;;GAOG;AACH,UAAU,6BAA6B;IACtC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7E,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,UAAU,gCAAgC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAA;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,CAAA;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAA;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,4BAA4B,GAClE,CAAC,6BAA6B,GAAG,gCAAgC,CAAC,CAAA;AASnE;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAC5C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,mBAAmB,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAA;AAE/F;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CAqVjG"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,KAAK,EAEX,OAAO,EAOP,oBAAoB,EAOpB,MAAM,YAAY,CAAA;AAInB,OAAO,EACN,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,MAAM,mCAAmC,CAAA;AAE1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAW9D,wEAAwE;AACxE,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAJ7B,SAAkB,IAAI,qCAAoC;gBAGhD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM;CAM7B;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAInD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAJ7B,SAAkB,IAAI,gCAA+B;gBAG3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM;CAM7B;AAED,UAAU,4BAA4B;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAA;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACpC,KAAK,EAAE,8BAA8B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC1C;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E;AAED;;;;;;;GAOG;AACH,UAAU,6BAA6B;IACtC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7E,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,UAAU,gCAAgC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAA;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,CAAA;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAA;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,4BAA4B,GAClE,CAAC,6BAA6B,GAAG,gCAAgC,CAAC,CAAA;AASnE;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAC5C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,mBAAmB,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAA;AAE/F;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CAqVjG"}

package/dist/backends/kubernetes/sandbox.js

@@ -26,15 +26,10 @@
  *    Presence follows configuration alone, never a probe of the cluster. See
  *    `per-sandbox-policy.ts`.
  *
- *    A WORKSPACE handle never carries it: `KubernetesWorkspace`'s create path
- *    builds its handle through `buildKubernetesSandbox` without this option,
- *    because it composes no per-sandbox pod label and tracks no owner uid for
- *    one. That is a property of the PATH and not of the configuration, so it
- *    is not answered by omission: `createKubernetesWorkspace` refuses a
- *    config carrying `egress.perSandbox` outright
- *    (`KubernetesWorkspacePerSandboxEgressConfigError`, before any request)
- *    rather than letting the option declare a capability the path never
- *    serves — see `workspace.ts`.
+ *    A WORKSPACE handle carries it on the same condition, built in
+ *    `workspace.ts` rather than here: the `Sandbox` is the owner, the pod
+ *    template carries the selector label, and a resume re-proves the fence —
+ *    see `workspace-per-sandbox.ts`.
  *
  * Absent on purpose, because the SDK's contract says a backend that cannot
  * honour an optional method must omit it rather than accept and ignore:

package/dist/backends/kubernetes/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAmBH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EACN,8BAA8B,GAE9B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAGnD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,wEAAwE;AACxE,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAI/C;IACA;IAJQ,IAAI,GAAG,iCAAiC,CAAA;IAE1D,YACU,SAAiB,EACjB,WAAmB;QAE5B,KAAK,CACJ,sBAAsB,WAAW,wBAAwB,SAAS,+IAA+I,CACjN,CAAA;QALQ,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAAQ;IAK7B,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAI1C;IACA;IAJQ,IAAI,GAAG,4BAA4B,CAAA;IAErD,YACU,SAAiB,EACjB,WAAmB;QAE5B,KAAK,CACJ,sBAAsB,WAAW,qCAAqC,SAAS,8OAA8O,CAC7T,CAAA;QALQ,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAAQ;IAK7B,CAAC;CACD;AAoGD,SAAS,iBAAiB;IACzB,wEAAwE;IACxE,qEAAqE;IACrE,wCAAwC;IACxC,OAAO,iBAAiB,CAAA;AACzB,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiC;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAiB,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IACnC,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;IAGjD,IAAI,SAAS,GAAc,QAAQ,CAAA;IACnC,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,eAA0C,CAAA;IAC9C,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,iBAAoE,CAAA;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAA;IAE5C,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACrC,wEAAwE;IACxE,mEAAmE;IACnE,2EAA2E;IAC3E,uEAAuE;IACvE,wBAAwB;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,IAAI,8CAA8C,MAAM,CAAC,UAAU,CAAC,oUAAoU,CACva,CAAA;IACF,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,KAAK,GACV,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAC9C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,sBAAsB,CAAC;YAC3B,UAAU;YACV,KAAK;YACL,MAAM,EAAE,GAAG,EAAE;gBACZ,+DAA+D;gBAC/D,iEAAiE;gBACjE,8CAA8C;gBAC9C,IAAI,SAAS,KAAK,QAAQ;oBAAE,SAAS,GAAG,MAAM,CAAA;YAC/C,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAA;IACL,KAAK,EAAE,KAAK,EAAE,CAAA;IAEd,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACpD,IAAI,SAAS,KAAK,QAAQ;YAAE,OAAM;QAClC,IAAI,SAAS,KAAK,MAAM;YAAE,MAAM,IAAI,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACvF,MAAM,IAAI,+BAA+B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,MAAoB,EAAiB,EAAE;QACxD,IAAI,SAAS,KAAK,QAAQ;YAAE,SAAS,GAAG,UAAU,CAAA;QAClD,KAAK,EAAE,IAAI,EAAE,CAAA;QACb,IAAI,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC9C,IAAI,eAAe;YAAE,OAAO,eAAe,CAAA;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,GAAG,EAAE;YACJ,gBAAgB,GAAG,IAAI,CAAA;YACvB,SAAS,GAAG,WAAW,CAAA;QACxB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YAClB,8DAA8D;YAC9D,2DAA2D;YAC3D,iBAAiB;YACjB,IAAI,eAAe,KAAK,MAAM;gBAAE,eAAe,GAAG,SAAS,CAAA;YAC3D,MAAM,KAAK,CAAA;QACZ,CAAC,CACD,CAAA;QACD,eAAe,GAAG,MAAM,CAAA;QACxB,OAAO,MAAM,CAAA;IACd,CAAC,CAAA;IAED;;;;;OAKG;IACH,MAAM,MAAM,GAAG,GAA0C,EAAE;QAC1D,IAAI,SAAS,KAAK,QAAQ;YAAE,SAAS,GAAG,UAAU,CAAA;QAClD,iBAAiB,KAAK,IAAI,iBAAiB,CAC1C,qBAAqB,EACrB,sBAAsB,OAAO,CAAC,IAAI,aAAa,CAC/C;aACC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC7C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC;aACzC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC;YAC3B,QAAQ,EAAE,KAAc;YACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAChE,CAAC,CAAC,CAAA;QACJ,OAAO,iBAAiB,CAAA;IACzB,CAAC,CAAA;IAED;;;;OAIG;IACH,MAAM,8BAA8B,GAAG,KAAK,EAC3C,KAAqC,EACG,EAAE;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAA;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,MAAM,EAAE,CAAA;QAC/C,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,SAAkB,EAAE,CAAC;YAC7B,kEAAkE;YAClE,kEAAkE;YAClE,oBAAoB;YACpB,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aAC5E,CAAA;QACF,CAAC;IACF,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,KAAK,EAAK,SAAiB,EAAE,GAAqB,EAAc,EAAE;QACtF,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAC3B,gBAAgB,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC;YACJ,OAAO,MAAM,GAAG,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACrD,KAAK,CAAC,UAAU,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;gBAAS,CAAC;YACV,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAA;QACrD,CAAC;IACF,CAAC,CAAA;IAED,OAAO;QACN,EAAE;QACF,IAAI,MAAM;YACT,mEAAmE;YACnE,+DAA+D;YAC/D,0CAA0C;YAC1C,IAAI,SAAS,KAAK,QAAQ;gBAAE,OAAO,WAAW,CAAA;YAC9C,OAAO,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/C,CAAC;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,iBAAiB,EAAE;QAEhC,KAAK,CAAC,IAAI,CACT,OAAe,EACf,IAAe,EACf,IAAyB;YAEzB,OAAO,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACzF,CAAC;QAED;;;;;;;;;;;;;WAaG;QACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAwB;YACrD,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC7E,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACrC,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,WAAoC;YAChE,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAC5B,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;QAED;;;;;;WAMG;QACH,cAAc,CAAC,IAAY,EAAE,WAAoC;YAChE,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;YAClC,OAAO,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,cAAc;QACd,GAAG,CAAC,gBAAgB,KAAK,SAAS;YACjC,CAAC,CAAC;gBACA,gBAAgB,EAAE,KAAK,EAAE,MAA4B,EAAiB,EAAE;oBACvE,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;oBACpC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAC/B,CAAC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QAEN,KAAK,CAAC,YAAY,CAAC,eAAoC;YACtD,gBAAgB,CAAC,cAAc,CAAC,CAAA;YAChC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,CAAA;YAC9D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACvB,KAAK,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,OAAO,QAAQ,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,iBAAiB,CACtB,cAAwC;YAExC,gBAAgB,CAAC,mBAAmB,CAAC,CAAA;YACrC,OAAO,MAAM,SAAS,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QACzD,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAgB;YAC/B,OAAO,MAAM,YAAY,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;gBACjD,kEAAkE;gBAClE,8DAA8D;gBAC9D,6DAA6D;gBAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;gBAC5F,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAA;gBACpC,MAAM,OAAO,GAAuB,EAAE,CAAA;gBACtC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,OAAO;wBAAE,SAAQ;oBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;oBACjC,IAAI,GAAG,GAAG,CAAC;wBAAE,SAAQ;oBACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACxD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,SAAQ;oBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvC,CAAC;gBACD,OAAO,OAAO,CAAA;YACf,CAAC,CAAC,CAAA;QACH,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,KAAK,CAAC,CAAC,SAAS,CACf,QAAgB,EAChB,WAAoC;YAEpC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC7B,gBAAgB,IAAI,CAAC,CAAA;YACrB,IAAI,CAAC;gBACJ,KAAK,CAAC,CAAC,gBAAgB,CACtB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAChF,QAAQ,EACR,WAAW,CACX,CAAA;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,0DAA0D;gBAC1D,qDAAqD;gBACrD,gEAAgE;gBAChE,gDAAgD;gBAChD,EAAE;gBACF,4DAA4D;gBAC5D,4DAA4D;gBAC5D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACrD,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,CAAA;gBAClC,CAAC;gBACD,MAAM,KAAK,CAAA;YACZ,CAAC;oBAAS,CAAC;gBACV,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACrD,CAAC;QACF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,cAAsC;YACnD,IAAI,iBAAiB,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAA;gBAC3C,IAAI,WAAW,CAAC,QAAQ;oBAAE,OAAM;gBAChC,iBAAiB,GAAG,SAAS,CAAA;YAC9B,CAAC;YACD,oEAAoE;YACpE,4DAA4D;YAC5D,kEAAkE;YAClE,SAAS,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3D,KAAK,EAAE,IAAI,EAAE,CAAA;YACb,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC,CAAA;YACtC,KAAK,MAAM,QAAQ,IAAI,eAAe;gBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChE,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5E,SAAS,CAAC,KAAK,EAAE,CAAA;YACjB,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,cAAc;YACd,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;KACD,CAAA;AACF,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAmBH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EACN,8BAA8B,GAE9B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAGnD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,wEAAwE;AACxE,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAI/C;IACA;IAJQ,IAAI,GAAG,iCAAiC,CAAA;IAE1D,YACU,SAAiB,EACjB,WAAmB;QAE5B,KAAK,CACJ,sBAAsB,WAAW,wBAAwB,SAAS,+IAA+I,CACjN,CAAA;QALQ,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAAQ;IAK7B,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAI1C;IACA;IAJQ,IAAI,GAAG,4BAA4B,CAAA;IAErD,YACU,SAAiB,EACjB,WAAmB;QAE5B,KAAK,CACJ,sBAAsB,WAAW,qCAAqC,SAAS,8OAA8O,CAC7T,CAAA;QALQ,cAAS,GAAT,SAAS,CAAQ;QACjB,gBAAW,GAAX,WAAW,CAAQ;IAK7B,CAAC;CACD;AAoGD,SAAS,iBAAiB;IACzB,wEAAwE;IACxE,qEAAqE;IACrE,wCAAwC;IACxC,OAAO,iBAAiB,CAAA;AACzB,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiC;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAiB,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IACnC,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;IAGjD,IAAI,SAAS,GAAc,QAAQ,CAAA;IACnC,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,eAA0C,CAAA;IAC9C,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,iBAAoE,CAAA;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAA;IAE5C,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACrC,wEAAwE;IACxE,mEAAmE;IACnE,2EAA2E;IAC3E,uEAAuE;IACvE,wBAAwB;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,IAAI,8CAA8C,MAAM,CAAC,UAAU,CAAC,oUAAoU,CACva,CAAA;IACF,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,KAAK,GACV,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAC9C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,sBAAsB,CAAC;YAC3B,UAAU;YACV,KAAK;YACL,MAAM,EAAE,GAAG,EAAE;gBACZ,+DAA+D;gBAC/D,iEAAiE;gBACjE,8CAA8C;gBAC9C,IAAI,SAAS,KAAK,QAAQ;oBAAE,SAAS,GAAG,MAAM,CAAA;YAC/C,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAA;IACL,KAAK,EAAE,KAAK,EAAE,CAAA;IAEd,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACpD,IAAI,SAAS,KAAK,QAAQ;YAAE,OAAM;QAClC,IAAI,SAAS,KAAK,MAAM;YAAE,MAAM,IAAI,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACvF,MAAM,IAAI,+BAA+B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,MAAoB,EAAiB,EAAE;QACxD,IAAI,SAAS,KAAK,QAAQ;YAAE,SAAS,GAAG,UAAU,CAAA;QAClD,KAAK,EAAE,IAAI,EAAE,CAAA;QACb,IAAI,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC9C,IAAI,eAAe;YAAE,OAAO,eAAe,CAAA;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,GAAG,EAAE;YACJ,gBAAgB,GAAG,IAAI,CAAA;YACvB,SAAS,GAAG,WAAW,CAAA;QACxB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YAClB,8DAA8D;YAC9D,2DAA2D;YAC3D,iBAAiB;YACjB,IAAI,eAAe,KAAK,MAAM;gBAAE,eAAe,GAAG,SAAS,CAAA;YAC3D,MAAM,KAAK,CAAA;QACZ,CAAC,CACD,CAAA;QACD,eAAe,GAAG,MAAM,CAAA;QACxB,OAAO,MAAM,CAAA;IACd,CAAC,CAAA;IAED;;;;;OAKG;IACH,MAAM,MAAM,GAAG,GAA0C,EAAE;QAC1D,IAAI,SAAS,KAAK,QAAQ;YAAE,SAAS,GAAG,UAAU,CAAA;QAClD,iBAAiB,KAAK,IAAI,iBAAiB,CAC1C,qBAAqB,EACrB,sBAAsB,OAAO,CAAC,IAAI,aAAa,CAC/C;aACC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC7C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC;aACzC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC;YAC3B,QAAQ,EAAE,KAAc;YACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAChE,CAAC,CAAC,CAAA;QACJ,OAAO,iBAAiB,CAAA;IACzB,CAAC,CAAA;IAED;;;;OAIG;IACH,MAAM,8BAA8B,GAAG,KAAK,EAC3C,KAAqC,EACG,EAAE;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAA;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,MAAM,EAAE,CAAA;QAC/C,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,SAAkB,EAAE,CAAC;YAC7B,kEAAkE;YAClE,kEAAkE;YAClE,oBAAoB;YACpB,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aAC5E,CAAA;QACF,CAAC;IACF,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,KAAK,EAAK,SAAiB,EAAE,GAAqB,EAAc,EAAE;QACtF,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAC3B,gBAAgB,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC;YACJ,OAAO,MAAM,GAAG,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACrD,KAAK,CAAC,UAAU,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;gBAAS,CAAC;YACV,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAA;QACrD,CAAC;IACF,CAAC,CAAA;IAED,OAAO;QACN,EAAE;QACF,IAAI,MAAM;YACT,mEAAmE;YACnE,+DAA+D;YAC/D,0CAA0C;YAC1C,IAAI,SAAS,KAAK,QAAQ;gBAAE,OAAO,WAAW,CAAA;YAC9C,OAAO,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/C,CAAC;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,iBAAiB,EAAE;QAEhC,KAAK,CAAC,IAAI,CACT,OAAe,EACf,IAAe,EACf,IAAyB;YAEzB,OAAO,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACzF,CAAC;QAED;;;;;;;;;;;;;WAaG;QACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAwB;YACrD,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC7E,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACrC,CAAC;QAED;;;;;;;;WAQG;QACH,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,WAAoC;YAChE,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAC5B,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;QAED;;;;;;WAMG;QACH,cAAc,CAAC,IAAY,EAAE,WAAoC;YAChE,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;YAClC,OAAO,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,cAAc;QACd,GAAG,CAAC,gBAAgB,KAAK,SAAS;YACjC,CAAC,CAAC;gBACA,gBAAgB,EAAE,KAAK,EAAE,MAA4B,EAAiB,EAAE;oBACvE,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;oBACpC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAC/B,CAAC;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QAEN,KAAK,CAAC,YAAY,CAAC,eAAoC;YACtD,gBAAgB,CAAC,cAAc,CAAC,CAAA;YAChC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,CAAA;YAC9D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACvB,KAAK,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,OAAO,QAAQ,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,iBAAiB,CACtB,cAAwC;YAExC,gBAAgB,CAAC,mBAAmB,CAAC,CAAA;YACrC,OAAO,MAAM,SAAS,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QACzD,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAgB;YAC/B,OAAO,MAAM,YAAY,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;gBACjD,kEAAkE;gBAClE,8DAA8D;gBAC9D,6DAA6D;gBAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;gBAC5F,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAA;gBACpC,MAAM,OAAO,GAAuB,EAAE,CAAA;gBACtC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,OAAO;wBAAE,SAAQ;oBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;oBACjC,IAAI,GAAG,GAAG,CAAC;wBAAE,SAAQ;oBACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACxD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,SAAQ;oBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvC,CAAC;gBACD,OAAO,OAAO,CAAA;YACf,CAAC,CAAC,CAAA;QACH,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,KAAK,CAAC,CAAC,SAAS,CACf,QAAgB,EAChB,WAAoC;YAEpC,gBAAgB,CAAC,WAAW,CAAC,CAAA;YAC7B,gBAAgB,IAAI,CAAC,CAAA;YACrB,IAAI,CAAC;gBACJ,KAAK,CAAC,CAAC,gBAAgB,CACtB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAChF,QAAQ,EACR,WAAW,CACX,CAAA;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,0DAA0D;gBAC1D,qDAAqD;gBACrD,gEAAgE;gBAChE,gDAAgD;gBAChD,EAAE;gBACF,4DAA4D;gBAC5D,4DAA4D;gBAC5D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACrD,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,CAAA;gBAClC,CAAC;gBACD,MAAM,KAAK,CAAA;YACZ,CAAC;oBAAS,CAAC;gBACV,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACrD,CAAC;QACF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,cAAsC;YACnD,IAAI,iBAAiB,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAA;gBAC3C,IAAI,WAAW,CAAC,QAAQ;oBAAE,OAAM;gBAChC,iBAAiB,GAAG,SAAS,CAAA;YAC9B,CAAC;YACD,oEAAoE;YACpE,4DAA4D;YAC5D,kEAAkE;YAClE,SAAS,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3D,KAAK,EAAE,IAAI,EAAE,CAAA;YACb,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC,CAAA;YACtC,KAAK,MAAM,QAAQ,IAAI,eAAe;gBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChE,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5E,SAAS,CAAC,KAAK,EAAE,CAAA;YACjB,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,cAAc;YACd,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/backends/kubernetes/transport.d.ts

@@ -68,9 +68,47 @@ export declare class KubernetesAgentUnauthorizedError extends Error {
  * sessions in that pod down with them.
  */
 export declare class KubernetesAgentRetiringError extends Error {
+    /**
+     * The agent process that is fenced, when the refusal named it. Only a
+     * request sent through a pinned view carries one: it is how a caller
+     * tells "the guest I pinned is the one that is fenced" (the same id)
+     * from "a different guest stands there" (a `guest_mismatch`).
+     */
+    readonly guestBootId?: string | undefined;
     readonly name = "KubernetesAgentRetiringError";
-    constructor(message?: string);
+    constructor(message?: string, 
+    /**
+     * The agent process that is fenced, when the refusal named it. Only a
+     * request sent through a pinned view carries one: it is how a caller
+     * tells "the guest I pinned is the one that is fenced" (the same id)
+     * from "a different guest stands there" (a `guest_mismatch`).
+     */
+    guestBootId?: string | undefined);
 }
+/**
+ * The guest agent refused a pinned request before dispatching it because its
+ * own boot id is not the one the request was pinned to. Nothing ran.
+ *
+ * `guestBootId` is the id of the agent that answered, so a caller can tell a
+ * replacement (a new id) from a refusal that has nothing to do with identity.
+ * `retiring` is true when that agent is also fenced.
+ */
+export declare class KubernetesAgentGuestMismatchError extends Error {
+    readonly guestBootId: string | undefined;
+    readonly retiring: boolean;
+    readonly name = "KubernetesAgentGuestMismatchError";
+    constructor(guestBootId: string | undefined, retiring?: boolean);
+}
+/**
+ * The fresh guest boot id carried by a pinned refusal, wherever in an error's
+ * cause chain it sits — the control-plane path throws the class above, and
+ * every other path throws a plain `Error` whose message is the guest's error
+ * text, `guest_mismatch:<id>`.
+ */
+export declare function guestMismatchOf(error: unknown): {
+    readonly guestBootId: string | undefined;
+    readonly retiring: boolean;
+} | undefined;
 /**
  * Thrown when the agent's address could not be RESOLVED — the dial never
  * reached a socket because the name has no answer here.
@@ -92,6 +130,26 @@ export declare class KubernetesAgentAddressUnresolvableError extends Error {
         cause?: unknown;
     });
 }
+/**
+ * The guest REFUSED this handle's token — whichever of the two shapes that
+ * refusal happens to arrive in.
+ *
+ * `reserve-execution` and `cancel-execution` come through
+ * {@link requestChecked}, so their refusal is already a
+ * {@link KubernetesAgentUnauthorizedError}. Nothing else does:
+ * `writeFile`, `readFile`, `openTerminal` and `openTcpConnection` are the
+ * shared Firecracker transport's own paths, and each of them throws the
+ * guest's error NAME as a plain `Error` — `unauthorized` and nothing more.
+ * Two shapes for one fact is why a host could never hang a single recovery
+ * off it, and this is where they become one.
+ *
+ * The message test is exact, never a substring, and that is deliberate: the
+ * guest's refusal envelope carries the bare token `unauthorized` as its whole
+ * `error` field, while a read whose PATH contains the word, or an exec whose
+ * output is quoted into a message, does not equal it. The chain is walked
+ * because the retry wrapper and the stream paths wrap rather than replace.
+ */
+export declare function isUnauthorizedRefusal(error: unknown): boolean;
 /** The pod and process one execution reserved on — see {@link executionGuest}. */
 export interface KubernetesReservedGuest {
     /** The bind token the attempt presented, which is the pod's uid. */
@@ -514,6 +572,34 @@ export declare class KubernetesQuiesceUnconfirmedError extends Error {
     readonly name = "KubernetesQuiesceUnconfirmedError";
     constructor(reason: string, message: string);
 }
+/** One thing the guest found running when an idle-only quiesce looked. */
+export interface KubernetesQuiesceBusyProcess {
+    readonly pid: number;
+    /** The kernel's short name for the executable, never its command line. */
+    readonly command: string;
+    /** The `/proc` state letter (`R`, `S`, `D`, `Z`...). `Z` here is a zombie leader with a live thread. */
+    readonly state: string;
+}
+/** A start the agent's registries hold that `/proc` may not show yet. */
+export interface KubernetesQuiesceBusyRegistryEntry {
+    readonly source: 'execution' | 'session';
+    readonly state: string;
+}
+/**
+ * Thrown by `quiesce({ onlyIfIdle: true })` when the guest is not idle.
+ *
+ * An answer, not a failure: nothing was signalled, marked or stopped, the
+ * guest is exactly as it was, and `busy` says what was seen so the caller can
+ * decide to retry later. `busy` is capped (the guest names at most 32
+ * processes); `busyTotal` counts them all.
+ */
+export declare class KubernetesQuiesceBusyError extends Error {
+    readonly busy: readonly KubernetesQuiesceBusyProcess[];
+    readonly busyTotal: number;
+    readonly registries: readonly KubernetesQuiesceBusyRegistryEntry[];
+    readonly name = "KubernetesQuiesceBusyError";
+    constructor(busy: readonly KubernetesQuiesceBusyProcess[], busyTotal: number, registries: readonly KubernetesQuiesceBusyRegistryEntry[], message: string);
+}
 /** What the guest stopped, and how widely it was allowed to look. */
 export interface KubernetesQuiesceReport {
     /** Every process signalled, with the last signal it was actually sent. */
@@ -624,7 +710,24 @@ export declare class KubernetesAgentTransport {
     private readonly refreshHandle?;
     /** Simple pass-through operations share one transport instance. */
     private wire;
+    /** What {@link pinnedTo} builds a sibling from: everything but the hooks that follow or report a pod. */
+    private readonly siblingOptions;
     constructor(handle: KubernetesAgentHandle, options?: KubernetesTransportOptions);
+    /**
+     * A separate transport for the guest this one is bound to RIGHT NOW,
+     * whose every request is pinned to the agent process `guestBootId`.
+     *
+     * Never rebinds: it has no `refreshHandle`, so a refused token or a dead
+     * address ends the call where it stands, and it holds its own copy of the
+     * handle, so a rebind of THIS transport later cannot move it onto another
+     * pod. It reports no guest identity back either, so a pinned call cannot
+     * move the observer a workspace uses to detect restarts. Pair it with
+     * {@link supportsPinnedGuest}: against an agent without the feature the
+     * `pinned` op is refused as unknown, and nothing is dispatched.
+     */
+    pinnedTo(guestBootId: string): KubernetesAgentTransport;
+    /** Whether the guest serves the `pinned` op; see {@link PINNED_GUEST_FEATURE}. */
+    supportsPinnedGuest(signal?: AbortSignal): Promise<boolean>;
     /**
      * The shared transport's options for ONE wire, with the reply observer
      * bound to the pod that wire is talking to.
@@ -924,6 +1027,7 @@ export declare class KubernetesAgentTransport {
      */
     quiesce(options?: {
         readonly graceMs?: number;
+        readonly idleOnly?: boolean;
     }, signal?: AbortSignal): Promise<KubernetesQuiesceReport>;
     /**
      * Put everything this workspace has written onto its device.
@@ -960,6 +1064,9 @@ export declare class KubernetesAgentTransport {
      * today's behaviour and reports the gap instead of refusing to suspend.
      */
     supportsQuiesce(signal?: AbortSignal): Promise<boolean>;
+    /** Whether the guest's `quiesce` accepts `idleOnly`; see {@link QUIESCE_IDLE_FEATURE}. */
+    supportsQuiesceIdle(signal?: AbortSignal): Promise<boolean>;
+    private quiesceIdleUnsupported;
     private assertQuiesceSupported;
     private quiesceUnsupported;
     /**

package/dist/backends/kubernetes/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EACX,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EAKN,KAAK,kBAAkB,EAEvB,KAAK,YAAY,EACjB,KAAK,eAAe,EAEpB,KAAK,WAAW,EAChB,KAAK,YAAY,EAEjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAIN,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC1B,MAAM,6BAA6B,CAAA;AAapC,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAEhF;;;;;;GAMG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;gBAEzD,OAAO,SAAmb,EAC1b,OAAO,CAAC,EAAE,YAAY;CAKvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,SAAkB,IAAI,kCAAiC;gBAGtD,OAAO,SAAktB;CAI1tB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uCAAwC,SAAQ,KAAK;IAIhE,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAJtB,SAAkB,IAAI,6CAA4C;;IAGjE,wEAAwE;IAC/D,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAoQD,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACvC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,GAAG,SAAS,CAErF;AAuCD;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACzC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAChB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,sBAAsB,GAAG,cAAc,CAAC;IAC5E;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,KAAK,IAAI,CAAA;IAC/D;;;;;;;;;OASG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;CACvF;AAiBD;;;;;;;;GAQG;AACH,qBAAa,yCAA0C,SAAQ,KAAK;IAIlE,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,+CAA8C;gBAG1D,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAChC,mBAAmB,GACnB,qBAAqB,GACrB,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,SAAS,CAAA;AAEZ;;;;;;;;;GASG;AACH,qBAAa,qCAAsC,SAAQ,KAAK;IAW9D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,MAAM,EAAE,uBAAuB;IAXzC,SAAkB,IAAI,2CAA0C;IAEhE;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;gBAGjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,uBAAuB,EACxC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CAK9C;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAJ9B,SAAkB,IAAI,sCAAqC;gBAGjD,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAuMD;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;KAC7B,KAAK,IAAI,CAAA;CACV;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,6BAChB,SAAQ,kBAAkB,EACzB,IAAI,CAAC,gCAAgC,EAAE,OAAO,CAAC;IAChD;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAA;IACnC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAClC;AAID;;;;;;;;GAQG;AACH,qBAAa,kCAAmC,SAAQ,KAAK;IAI3D,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,wCAAuC;gBAGnD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED,+CAA+C;AAC/C,MAAM,MAAM,wBAAwB,GACjC,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,SAAS,CAAA;AAiBZ;;;;;;;;GAQG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAItD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB;IAJ1C,SAAkB,IAAI,mCAAkC;gBAG9C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,wBAAwB,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAED,gEAAgE;AAChE,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,eAAe;IACnE,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,UAAU,CAAC,IAAI,MAAM,GAAG,SAAS,CAAA;IACjC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,IAAI,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAA0B,SAAQ,2BAA2B;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,UAAU,IAAI,MAAM,GAAG,SAAS,CAAA;IAChC,MAAM,IAAI,IAAI,CAAA;CACd;AAED,wEAAwE;AACxE,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACzE;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,yDAAyD;AACzD,MAAM,WAAW,+BAA+B;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAChE;AAED,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC;AAED,gEAAgE;AAChE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AA6ID;;;;;;;GAOG;AAGH;;;;;;;;;GASG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,uCAAsC;gBAGlD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,MAAM,EAAE,MAAM;IAHxB,SAAkB,IAAI,uCAAsC;gBAGlD,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AA6BD;;;;;;;;;;;GAWG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,qCAAoC;gBAGhD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;GAQG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,MAAM,EAAE,MAAM;IAHxB,SAAkB,IAAI,qCAAoC;gBAGhD,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IACzD,SAAkB,IAAI,qCAAoC;CAC1D;AAED,kDAAkD;AAClD,MAAM,WAAW,qBAAqB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,+BAA+B,CAKvE;AASD,qBAAa,wBAAwB;IACpC;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAuB;IACrC,yEAAyE;IACzE,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,CAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;IACxD,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAiE;IAC/F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAA6C;IACvE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA0D;IACzF,mEAAmE;IACnE,OAAO,CAAC,IAAI,CAAqB;gBAErB,MAAM,EAAE,qBAAqB,EAAE,OAAO,GAAE,0BAA+B;IA+BnF;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;;OAKG;IACH,IAAI,OAAO,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+DG;YACW,UAAU;IAoCxB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IAKvB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAI9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;YACW,MAAM;YAaN,SAAS;IA8BvB,wEAAwE;IACxE,OAAO,CAAC,UAAU;IAIlB,oEAAoE;IACpE,OAAO,CAAC,YAAY;IASpB;;;;;;;OAOG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrD;;;;;OAKG;IACG,YAAY,CACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;;;;;;;;;;OAcG;IACG,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQvE;;;;;OAKG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAOrD;;;;;OAKG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAO/E;;;;;;;;;;;;OAYG;IACI,cAAc,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,sBAAsB,GAC9B,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;IA4B1C;;;;;;;;;;OAUG;IACG,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAahG;;;OAGG;YACW,aAAa;IAY3B;;;;;;;;OAQG;IACG,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,+BAAoC,GAC3C,OAAO,CAAC,yBAAyB,CAAC;IAiBrC;;;;;;;;;OASG;IACG,aAAa,CAClB,OAAO,EAAE,8BAA8B,EACvC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,wBAAwB,CAAC;IAyBpC,8EAA8E;IACxE,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;IAmBtF;;;;;;;;OAQG;IACG,WAAW,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;KAAO,GACtE,OAAO,CAAC,wBAAwB,CAAC;IAsBpC;;;;;;;;OAQG;IACG,WAAW,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,4BAAiC,EAC1C,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC;IAoEnC;;;;;;;;;;;;;;OAcG;IACG,OAAO,CACZ,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,EAC3C,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC;IA2BnC;;;;;;;;;;;;;;;;;OAiBG;IACG,KAAK,CACV,OAAO,GAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,EAC7C,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,qBAAqB,CAAC;IAiCjC;;;;OAIG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YAI7C,oBAAoB;IAKlC,OAAO,CAAC,gBAAgB;IAIxB;;;;OAIG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YAI/C,sBAAsB;IAKpC,OAAO,CAAC,kBAAkB;IAO1B;;;OAGG;YACW,uBAAuB;IAS/B,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIzF;;;;;;;;;OASG;IACG,IAAI,CACT,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,IAAI,CAAC,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC;IA2I7B;;;OAGG;YACW,8BAA8B;IAS5C,0EAA0E;YAC5D,eAAe;IAiB7B;;;;;;;;;;OAUG;YACW,aAAa;IAmC3B;;;;;;;OAOG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/E;;;;;;;;OAQG;IACG,eAAe,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gCAAqC,GAC5C,OAAO,CAAC,iBAAiB,CAAC;IAwB7B;;;;;;;;;;;;;;;OAeG;IACG,YAAY,CACjB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,6BAAkC,GACtC,OAAO,CAAC,iBAAiB,CAAC;IA6I7B;;;;;;;;;;;OAWG;YACW,eAAe;IA+B7B,iEAAiE;YACnD,UAAU;IAwFxB,kDAAkD;IAClD,OAAO,CAAC,QAAQ;CAuBhB"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EACX,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EAMN,KAAK,kBAAkB,EAIvB,KAAK,YAAY,EACjB,KAAK,eAAe,EAEpB,KAAK,WAAW,EAChB,KAAK,YAAY,EAEjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAIN,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC1B,MAAM,6BAA6B,CAAA;AAapC,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAEhF;;;;;;GAMG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;gBAEzD,OAAO,SAAmb,EAC1b,OAAO,CAAC,EAAE,YAAY;CAKvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IAKrD;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM;IAV9B,SAAkB,IAAI,kCAAiC;gBAGtD,OAAO,SAAktB;IACztB;;;;;OAKG;IACM,WAAW,CAAC,EAAE,MAAM,YAAA;CAI9B;AAED;;;;;;;GAOG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS;IACxC,QAAQ,CAAC,QAAQ;IAJlB,SAAkB,IAAI,uCAAsC;gBAGlD,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,QAAQ,UAAQ;CAM1B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC9B,KAAK,EAAE,OAAO,GACZ;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CActF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uCAAwC,SAAQ,KAAK;IAIhE,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAJtB,SAAkB,IAAI,6CAA4C;;IAGjE,wEAAwE;IAC/D,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAoLD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQ7D;AAqDD,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACvC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,GAAG,SAAS,CAErF;AAmDD;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACzC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,0BAChB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,sBAAsB,GAAG,cAAc,CAAC;IAC5E;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,KAAK,IAAI,CAAA;IAC/D;;;;;;;;;OASG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;CACvF;AAiBD;;;;;;;;GAQG;AACH,qBAAa,yCAA0C,SAAQ,KAAK;IAIlE,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,+CAA8C;gBAG1D,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAChC,mBAAmB,GACnB,qBAAqB,GACrB,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,SAAS,CAAA;AAEZ;;;;;;;;;GASG;AACH,qBAAa,qCAAsC,SAAQ,KAAK;IAW9D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,MAAM,EAAE,uBAAuB;IAXzC,SAAkB,IAAI,2CAA0C;IAEhE;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;gBAGjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,uBAAuB,EACxC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CAK9C;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAJ9B,SAAkB,IAAI,sCAAqC;gBAGjD,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAuMD;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;KAC7B,KAAK,IAAI,CAAA;CACV;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,6BAChB,SAAQ,kBAAkB,EACzB,IAAI,CAAC,gCAAgC,EAAE,OAAO,CAAC;IAChD;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAA;IACnC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAClC;AAID;;;;;;;;GAQG;AACH,qBAAa,kCAAmC,SAAQ,KAAK;IAI3D,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,wCAAuC;gBAGnD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED,+CAA+C;AAC/C,MAAM,MAAM,wBAAwB,GACjC,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,SAAS,CAAA;AAiBZ;;;;;;;;GAQG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAItD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB;IAJ1C,SAAkB,IAAI,mCAAkC;gBAG9C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,wBAAwB,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9B;AAED,gEAAgE;AAChE,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,eAAe;IACnE,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,UAAU,CAAC,IAAI,MAAM,GAAG,SAAS,CAAA;IACjC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,IAAI,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAA0B,SAAQ,2BAA2B;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,UAAU,IAAI,MAAM,GAAG,SAAS,CAAA;IAChC,MAAM,IAAI,IAAI,CAAA;CACd;AAED,wEAAwE;AACxE,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACzE;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,yDAAyD;AACzD,MAAM,WAAW,+BAA+B;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAChE;AAED,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC;AAED,gEAAgE;AAChE,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AA6ID;;;;;;;GAOG;AAGH;;;;;;;;;GASG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,uCAAsC;gBAGlD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,MAAM,EAAE,MAAM;IAHxB,SAAkB,IAAI,uCAAsC;gBAGlD,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED,0EAA0E;AAC1E,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,wGAAwG;IACxG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED,yEAAyE;AACzE,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAA;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAInD,QAAQ,CAAC,IAAI,EAAE,SAAS,4BAA4B,EAAE;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,UAAU,EAAE,SAAS,kCAAkC,EAAE;IALnE,SAAkB,IAAI,gCAA+B;gBAG3C,IAAI,EAAE,SAAS,4BAA4B,EAAE,EAC7C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,kCAAkC,EAAE,EAClE,OAAO,EAAE,MAAM;CAIhB;AAoCD,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AA6BD;;;;;;;;;;;GAWG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,OAAO,EAAE,MAAM;IAHzB,SAAkB,IAAI,qCAAoC;gBAGhD,OAAO,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;GAQG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,MAAM,EAAE,MAAM;IAHxB,SAAkB,IAAI,qCAAoC;gBAGhD,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IACzD,SAAkB,IAAI,qCAAoC;CAC1D;AAED,kDAAkD;AAClD,MAAM,WAAW,qBAAqB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,+BAA+B,CAKvE;AASD,qBAAa,wBAAwB;IACpC;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAuB;IACrC,yEAAyE;IACzE,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,CAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;IACxD,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAiE;IAC/F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAA6C;IACvE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA0D;IACzF,mEAAmE;IACnE,OAAO,CAAC,IAAI,CAAqB;IACjC,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;gBAE/C,MAAM,EAAE,qBAAqB,EAAE,OAAO,GAAE,0BAA+B;IAgCnF;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB;IAOvD,kFAAkF;IAC5E,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;;OAKG;IACH,IAAI,OAAO,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+DG;YACW,UAAU;IAoCxB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IAKvB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAI9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;YACW,MAAM;YAaN,SAAS;IA8BvB,wEAAwE;IACxE,OAAO,CAAC,UAAU;IAIlB,oEAAoE;IACpE,OAAO,CAAC,YAAY;IASpB;;;;;;;OAOG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrD;;;;;OAKG;IACG,YAAY,CACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;;;;;;;;;;OAcG;IACG,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQvE;;;;;OAKG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAOrD;;;;;OAKG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAO/E;;;;;;;;;;;;OAYG;IACI,cAAc,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,sBAAsB,GAC9B,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;IA4B1C;;;;;;;;;;OAUG;IACG,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAahG;;;OAGG;YACW,aAAa;IAY3B;;;;;;;;OAQG;IACG,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,+BAAoC,GAC3C,OAAO,CAAC,yBAAyB,CAAC;IAiBrC;;;;;;;;;OASG;IACG,aAAa,CAClB,OAAO,EAAE,8BAA8B,EACvC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,wBAAwB,CAAC;IAyBpC,8EAA8E;IACxE,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;IAmBtF;;;;;;;;OAQG;IACG,WAAW,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;KAAO,GACtE,OAAO,CAAC,wBAAwB,CAAC;IAsBpC;;;;;;;;OAQG;IACG,WAAW,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,4BAAiC,EAC1C,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC;IAoEnC;;;;;;;;;;;;;;OAcG;IACG,OAAO,CACZ,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,EACxE,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC;IAkDnC;;;;;;;;;;;;;;;;;OAiBG;IACG,KAAK,CACV,OAAO,GAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,EAC7C,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,qBAAqB,CAAC;IAiCjC;;;;OAIG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YAI7C,oBAAoB;IAKlC,OAAO,CAAC,gBAAgB;IAIxB;;;;OAIG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7D,0FAA0F;IACpF,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjE,OAAO,CAAC,sBAAsB;YAOhB,sBAAsB;IAKpC,OAAO,CAAC,kBAAkB;IAO1B;;;OAGG;YACW,uBAAuB;IAS/B,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIzF;;;;;;;;;OASG;IACG,IAAI,CACT,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,IAAI,CAAC,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC;IA2I7B;;;OAGG;YACW,8BAA8B;IAS5C,0EAA0E;YAC5D,eAAe;IAiB7B;;;;;;;;;;OAUG;YACW,aAAa;IAmC3B;;;;;;;OAOG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/E;;;;;;;;OAQG;IACG,eAAe,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gCAAqC,GAC5C,OAAO,CAAC,iBAAiB,CAAC;IAwB7B;;;;;;;;;;;;;;;OAeG;IACG,YAAY,CACjB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,6BAAkC,GACtC,OAAO,CAAC,iBAAiB,CAAC;IA6I7B;;;;;;;;;;;OAWG;YACW,eAAe;IA+B7B,iEAAiE;YACnD,UAAU;IAwFxB,kDAAkD;IAClD,OAAO,CAAC,QAAQ;CAuBhB"}