@vorionsys/platform-core 0.1.0

package/dist/cognigate/sandbox/types.d.ts

@@ -0,0 +1,376 @@
+/**
+ * Sandbox Types
+ *
+ * Type definitions for Cognigate execution sandbox, network isolation,
+ * and filesystem policies.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Network access levels by trust tier
+ */
+export declare enum NetworkAccessLevel {
+    /** No network access (localhost only) */
+    NONE = "NONE",
+    /** Internal APIs only (allowlist) */
+    INTERNAL = "INTERNAL",
+    /** External APIs (policy-governed) */
+    EXTERNAL = "EXTERNAL",
+    /** Cross-agent communication */
+    CROSS_AGENT = "CROSS_AGENT",
+    /** Full network access (monitored) */
+    FULL = "FULL"
+}
+/**
+ * Filesystem access levels by trust tier
+ */
+export declare enum FilesystemAccessLevel {
+    /** Read-only sandbox with no persistence */
+    READONLY_SANDBOX = "READONLY_SANDBOX",
+    /** Scoped to agent workspace only */
+    WORKSPACE = "WORKSPACE",
+    /** Workspace + approved mount points */
+    EXTENDED = "EXTENDED",
+    /** Full filesystem access (audited) */
+    FULL = "FULL"
+}
+/**
+ * Trust tier capability mappings
+ */
+export interface TierCapabilities {
+    networkAccess: NetworkAccessLevel;
+    filesystemAccess: FilesystemAccessLevel;
+    maxMemoryMb: number;
+    maxCpuPercent: number;
+    maxExecutionMs: number;
+    allowedEgressDomains: string[];
+    allowedMountPaths: string[];
+    canSpawnSubprocesses: boolean;
+    canAccessSecrets: boolean;
+    canCommunicateWithAgents: boolean;
+}
+/**
+ * Default capabilities by trust tier
+ */
+export declare const TIER_CAPABILITIES: Record<number, TierCapabilities>;
+/**
+ * Sandbox runtime type
+ */
+export declare enum SandboxRuntime {
+    /** Docker container with seccomp */
+    DOCKER = "DOCKER",
+    /** gVisor for stronger isolation */
+    GVISOR = "GVISOR",
+    /** Firecracker microVM */
+    FIRECRACKER = "FIRECRACKER",
+    /** WebAssembly runtime */
+    WASM = "WASM",
+    /** No isolation (T7 only, monitored) */
+    NONE = "NONE"
+}
+/**
+ * Sandbox configuration for an execution
+ */
+export interface SandboxConfig {
+    /** Unique sandbox ID */
+    sandboxId: string;
+    /** Agent CAR ID */
+    carId: string;
+    /** Current trust tier */
+    trustTier: number;
+    /** Runtime type */
+    runtime: SandboxRuntime;
+    /** Capabilities based on tier */
+    capabilities: TierCapabilities;
+    /** Network policy */
+    networkPolicy: NetworkPolicy;
+    /** Filesystem policy */
+    filesystemPolicy: FilesystemPolicy;
+    /** Resource limits */
+    resourceLimits: ResourceLimits;
+    /** Execution context */
+    context: ExecutionContext;
+}
+/**
+ * Network policy for a sandbox
+ */
+export interface NetworkPolicy {
+    /** Access level */
+    accessLevel: NetworkAccessLevel;
+    /** Allowed egress domains/IPs */
+    allowedEgress: EgressRule[];
+    /** Blocked egress (deny list) */
+    blockedEgress: string[];
+    /** DNS policy */
+    dnsPolicy: DnsPolicy;
+    /** mTLS requirements */
+    mtlsRequired: boolean;
+    /** Rate limits */
+    rateLimits: NetworkRateLimits;
+}
+/**
+ * Egress rule for network access
+ */
+export interface EgressRule {
+    /** Destination pattern (domain, IP, CIDR) */
+    destination: string;
+    /** Allowed ports */
+    ports: number[];
+    /** Protocol (tcp, udp, both) */
+    protocol: 'tcp' | 'udp' | 'both';
+    /** Description */
+    description?: string;
+}
+/**
+ * DNS policy for sandbox
+ */
+export interface DnsPolicy {
+    /** DNS servers to use */
+    servers: string[];
+    /** Allowed domains to resolve */
+    allowedDomains: string[];
+    /** Use internal DNS only */
+    internalOnly: boolean;
+}
+/**
+ * Network rate limits
+ */
+export interface NetworkRateLimits {
+    /** Max requests per minute */
+    requestsPerMinute: number;
+    /** Max bytes out per minute */
+    egressBytesPerMinute: number;
+    /** Max concurrent connections */
+    maxConnections: number;
+}
+/**
+ * Filesystem policy for a sandbox
+ */
+export interface FilesystemPolicy {
+    /** Access level */
+    accessLevel: FilesystemAccessLevel;
+    /** Root directory for sandbox */
+    sandboxRoot: string;
+    /** Mounted volumes */
+    mounts: MountConfig[];
+    /** Overlay filesystem config */
+    overlay: OverlayConfig;
+    /** Secrets injection */
+    secrets: SecretMount[];
+    /** Disk quotas */
+    quotas: DiskQuotas;
+}
+/**
+ * Mount configuration
+ */
+export interface MountConfig {
+    /** Host path (or volume name) */
+    source: string;
+    /** Container path */
+    target: string;
+    /** Read-only flag */
+    readonly: boolean;
+    /** Mount type */
+    type: 'bind' | 'volume' | 'tmpfs';
+    /** Additional options */
+    options?: string[];
+}
+/**
+ * Overlay filesystem configuration
+ */
+export interface OverlayConfig {
+    /** Base image/layer */
+    baseLayer: string;
+    /** Ephemeral upper layer */
+    ephemeral: boolean;
+    /** Persist changes to work layer */
+    persistWork: boolean;
+    /** Work directory */
+    workDir: string;
+}
+/**
+ * Secret mount (memory-only)
+ */
+export interface SecretMount {
+    /** Secret name */
+    name: string;
+    /** Environment variable name (if env) */
+    envVar?: string;
+    /** File path (if file) */
+    filePath?: string;
+    /** Mount type */
+    type: 'env' | 'file' | 'memory';
+}
+/**
+ * Disk quotas
+ */
+export interface DiskQuotas {
+    /** Max disk usage in bytes */
+    maxBytes: number;
+    /** Max inodes */
+    maxInodes: number;
+    /** Warn threshold (0-1) */
+    warnThreshold: number;
+}
+/**
+ * Resource limits for a sandbox
+ */
+export interface ResourceLimits {
+    /** Max memory in MB */
+    memoryMb: number;
+    /** Max CPU percentage (0-100) */
+    cpuPercent: number;
+    /** Max execution time in ms */
+    executionMs: number;
+    /** Max PIDs */
+    maxPids: number;
+    /** Max open files */
+    maxOpenFiles: number;
+    /** OOM kill enabled */
+    oomKillEnabled: boolean;
+}
+/**
+ * Execution context for sandbox
+ */
+export interface ExecutionContext {
+    /** Tenant ID */
+    tenantId: string;
+    /** Request ID for tracing */
+    requestId: string;
+    /** User ID (if applicable) */
+    userId?: string;
+    /** Parent agent ACI (if delegated) */
+    parentAci?: string;
+    /** Environment variables */
+    environment: Record<string, string>;
+    /** Execution metadata */
+    metadata: Record<string, unknown>;
+}
+/**
+ * Sandbox state
+ */
+export declare enum SandboxState {
+    CREATING = "CREATING",
+    READY = "READY",
+    RUNNING = "RUNNING",
+    PAUSED = "PAUSED",
+    STOPPING = "STOPPING",
+    STOPPED = "STOPPED",
+    FAILED = "FAILED",
+    DESTROYED = "DESTROYED"
+}
+/**
+ * Sandbox instance
+ */
+export interface SandboxInstance {
+    /** Sandbox ID */
+    id: string;
+    /** Configuration */
+    config: SandboxConfig;
+    /** Current state */
+    state: SandboxState;
+    /** Container/VM ID */
+    runtimeId?: string;
+    /** IP address */
+    ipAddress?: string;
+    /** Port mappings */
+    ports: Record<number, number>;
+    /** Resource usage */
+    resourceUsage: ResourceUsage;
+    /** Created timestamp */
+    createdAt: Date;
+    /** Started timestamp */
+    startedAt?: Date;
+    /** Stopped timestamp */
+    stoppedAt?: Date;
+    /** Exit code */
+    exitCode?: number;
+    /** Error message */
+    error?: string;
+}
+/**
+ * Current resource usage
+ */
+export interface ResourceUsage {
+    memoryBytes: number;
+    cpuPercent: number;
+    diskBytes: number;
+    networkBytesIn: number;
+    networkBytesOut: number;
+    openFiles: number;
+    processCount: number;
+}
+/**
+ * Sandbox execution result
+ */
+export interface SandboxExecutionResult {
+    /** Sandbox ID */
+    sandboxId: string;
+    /** Success flag */
+    success: boolean;
+    /** Exit code */
+    exitCode: number;
+    /** Stdout output */
+    stdout: string;
+    /** Stderr output */
+    stderr: string;
+    /** Execution duration in ms */
+    durationMs: number;
+    /** Resource usage summary */
+    resourceUsage: ResourceUsage;
+    /** Network activity log */
+    networkActivity: NetworkActivityLog[];
+    /** Filesystem activity log */
+    filesystemActivity: FilesystemActivityLog[];
+    /** Violations detected */
+    violations: PolicyViolation[];
+    /** Attestation data for trust scoring */
+    attestationData: SandboxAttestationData;
+}
+/**
+ * Network activity log entry
+ */
+export interface NetworkActivityLog {
+    timestamp: Date;
+    direction: 'egress' | 'ingress';
+    destination: string;
+    port: number;
+    protocol: string;
+    bytes: number;
+    allowed: boolean;
+    blockedReason?: string;
+}
+/**
+ * Filesystem activity log entry
+ */
+export interface FilesystemActivityLog {
+    timestamp: Date;
+    operation: 'read' | 'write' | 'delete' | 'create' | 'chmod';
+    path: string;
+    bytes?: number;
+    allowed: boolean;
+    blockedReason?: string;
+}
+/**
+ * Policy violation
+ */
+export interface PolicyViolation {
+    timestamp: Date;
+    type: 'network' | 'filesystem' | 'resource' | 'security';
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    description: string;
+    details: Record<string, unknown>;
+    action: 'logged' | 'blocked' | 'terminated';
+}
+/**
+ * Attestation data from sandbox execution
+ */
+export interface SandboxAttestationData {
+    executionSuccess: boolean;
+    resourceCompliance: boolean;
+    networkCompliance: boolean;
+    filesystemCompliance: boolean;
+    violationCount: number;
+    violationSeverity: 'none' | 'low' | 'medium' | 'high' | 'critical';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cognigate/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/cognigate/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,yCAAyC;IACzC,IAAI,SAAS;IAEb,qCAAqC;IACrC,QAAQ,aAAa;IAErB,sCAAsC;IACtC,QAAQ,aAAa;IAErB,gCAAgC;IAChC,WAAW,gBAAgB;IAE3B,sCAAsC;IACtC,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,qBAAqB;IAC/B,4CAA4C;IAC5C,gBAAgB,qBAAqB;IAErC,qCAAqC;IACrC,SAAS,cAAc;IAEvB,wCAAwC;IACxC,QAAQ,aAAa;IAErB,uCAAuC;IACvC,IAAI,SAAS;CACd;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,kBAAkB,CAAC;IAClC,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAiG9D,CAAC;AAMF;;GAEG;AACH,oBAAY,cAAc;IACxB,oCAAoC;IACpC,MAAM,WAAW;IAEjB,oCAAoC;IACpC,MAAM,WAAW;IAEjB,0BAA0B;IAC1B,WAAW,gBAAgB;IAE3B,0BAA0B;IAC1B,IAAI,SAAS;IAEb,wCAAwC;IACxC,IAAI,SAAS;CACd;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAElB,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IAEd,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAElB,mBAAmB;IACnB,OAAO,EAAE,cAAc,CAAC;IAExB,iCAAiC;IACjC,YAAY,EAAE,gBAAgB,CAAC;IAE/B,qBAAqB;IACrB,aAAa,EAAE,aAAa,CAAC;IAE7B,wBAAwB;IACxB,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC,sBAAsB;IACtB,cAAc,EAAE,cAAc,CAAC;IAE/B,wBAAwB;IACxB,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mBAAmB;IACnB,WAAW,EAAE,kBAAkB,CAAC;IAEhC,iCAAiC;IACjC,aAAa,EAAE,UAAU,EAAE,CAAC;IAE5B,iCAAiC;IACjC,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,iBAAiB;IACjB,SAAS,EAAE,SAAS,CAAC;IAErB,wBAAwB;IACxB,YAAY,EAAE,OAAO,CAAC;IAEtB,kBAAkB;IAClB,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IAEpB,oBAAoB;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,gCAAgC;IAChC,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAEjC,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,yBAAyB;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAElB,iCAAiC;IACjC,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,4BAA4B;IAC5B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAE1B,+BAA+B;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAE7B,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,WAAW,EAAE,qBAAqB,CAAC;IAEnC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IAEpB,sBAAsB;IACtB,MAAM,EAAE,WAAW,EAAE,CAAC;IAEtB,gCAAgC;IAChC,OAAO,EAAE,aAAa,CAAC;IAEvB,wBAAwB;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;IAEvB,kBAAkB;IAClB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IAEf,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IAEf,qBAAqB;IACrB,QAAQ,EAAE,OAAO,CAAC;IAElB,iBAAiB;IACjB,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAElC,yBAAyB;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;IAElB,4BAA4B;IAC5B,SAAS,EAAE,OAAO,CAAC;IAEnB,oCAAoC;IACpC,WAAW,EAAE,OAAO,CAAC;IAErB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,iBAAiB;IACjB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAElB,2BAA2B;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IAEpB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAEhB,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC;IAErB,uBAAuB;IACvB,cAAc,EAAE,OAAO,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAMD;;GAEG;AACH,oBAAY,YAAY;IACtB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IAEX,oBAAoB;IACpB,MAAM,EAAE,aAAa,CAAC;IAEtB,oBAAoB;IACpB,KAAK,EAAE,YAAY,CAAC;IAEpB,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9B,qBAAqB;IACrB,aAAa,EAAE,aAAa,CAAC;IAE7B,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,wBAAwB;IACxB,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB,wBAAwB;IACxB,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAElB,mBAAmB;IACnB,OAAO,EAAE,OAAO,CAAC;IAEjB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IAEf,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IAEf,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IAEnB,6BAA6B;IAC7B,aAAa,EAAE,aAAa,CAAC;IAE7B,2BAA2B;IAC3B,eAAe,EAAE,kBAAkB,EAAE,CAAC;IAEtC,8BAA8B;IAC9B,kBAAkB,EAAE,qBAAqB,EAAE,CAAC;IAE5C,0BAA0B;IAC1B,UAAU,EAAE,eAAe,EAAE,CAAC;IAE9B,yCAAyC;IACzC,eAAe,EAAE,sBAAsB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,CAAC;IACzD,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACpE"}

package/dist/cognigate/sandbox/types.js

@@ -0,0 +1,179 @@
+/**
+ * Sandbox Types
+ *
+ * Type definitions for Cognigate execution sandbox, network isolation,
+ * and filesystem policies.
+ *
+ * @packageDocumentation
+ */
+// ============================================================================
+// Trust Tier Capabilities
+// ============================================================================
+/**
+ * Network access levels by trust tier
+ */
+export var NetworkAccessLevel;
+(function (NetworkAccessLevel) {
+    /** No network access (localhost only) */
+    NetworkAccessLevel["NONE"] = "NONE";
+    /** Internal APIs only (allowlist) */
+    NetworkAccessLevel["INTERNAL"] = "INTERNAL";
+    /** External APIs (policy-governed) */
+    NetworkAccessLevel["EXTERNAL"] = "EXTERNAL";
+    /** Cross-agent communication */
+    NetworkAccessLevel["CROSS_AGENT"] = "CROSS_AGENT";
+    /** Full network access (monitored) */
+    NetworkAccessLevel["FULL"] = "FULL";
+})(NetworkAccessLevel || (NetworkAccessLevel = {}));
+/**
+ * Filesystem access levels by trust tier
+ */
+export var FilesystemAccessLevel;
+(function (FilesystemAccessLevel) {
+    /** Read-only sandbox with no persistence */
+    FilesystemAccessLevel["READONLY_SANDBOX"] = "READONLY_SANDBOX";
+    /** Scoped to agent workspace only */
+    FilesystemAccessLevel["WORKSPACE"] = "WORKSPACE";
+    /** Workspace + approved mount points */
+    FilesystemAccessLevel["EXTENDED"] = "EXTENDED";
+    /** Full filesystem access (audited) */
+    FilesystemAccessLevel["FULL"] = "FULL";
+})(FilesystemAccessLevel || (FilesystemAccessLevel = {}));
+/**
+ * Default capabilities by trust tier
+ */
+export const TIER_CAPABILITIES = {
+    0: {
+        networkAccess: NetworkAccessLevel.NONE,
+        filesystemAccess: FilesystemAccessLevel.READONLY_SANDBOX,
+        maxMemoryMb: 256,
+        maxCpuPercent: 25,
+        maxExecutionMs: 30000,
+        allowedEgressDomains: [],
+        allowedMountPaths: [],
+        canSpawnSubprocesses: false,
+        canAccessSecrets: false,
+        canCommunicateWithAgents: false,
+    },
+    1: {
+        networkAccess: NetworkAccessLevel.NONE,
+        filesystemAccess: FilesystemAccessLevel.READONLY_SANDBOX,
+        maxMemoryMb: 512,
+        maxCpuPercent: 25,
+        maxExecutionMs: 60000,
+        allowedEgressDomains: [],
+        allowedMountPaths: [],
+        canSpawnSubprocesses: false,
+        canAccessSecrets: false,
+        canCommunicateWithAgents: false,
+    },
+    2: {
+        networkAccess: NetworkAccessLevel.INTERNAL,
+        filesystemAccess: FilesystemAccessLevel.WORKSPACE,
+        maxMemoryMb: 512,
+        maxCpuPercent: 50,
+        maxExecutionMs: 120000,
+        allowedEgressDomains: ['*.internal', 'localhost'],
+        allowedMountPaths: ['/workspace'],
+        canSpawnSubprocesses: false,
+        canAccessSecrets: false,
+        canCommunicateWithAgents: false,
+    },
+    3: {
+        networkAccess: NetworkAccessLevel.INTERNAL,
+        filesystemAccess: FilesystemAccessLevel.WORKSPACE,
+        maxMemoryMb: 1024,
+        maxCpuPercent: 50,
+        maxExecutionMs: 300000,
+        allowedEgressDomains: ['*.internal', 'localhost'],
+        allowedMountPaths: ['/workspace', '/data'],
+        canSpawnSubprocesses: false,
+        canAccessSecrets: true,
+        canCommunicateWithAgents: false,
+    },
+    4: {
+        networkAccess: NetworkAccessLevel.EXTERNAL,
+        filesystemAccess: FilesystemAccessLevel.WORKSPACE,
+        maxMemoryMb: 2048,
+        maxCpuPercent: 75,
+        maxExecutionMs: 600000,
+        allowedEgressDomains: ['*'], // Policy-governed
+        allowedMountPaths: ['/workspace', '/data', '/cache'],
+        canSpawnSubprocesses: true,
+        canAccessSecrets: true,
+        canCommunicateWithAgents: false,
+    },
+    5: {
+        networkAccess: NetworkAccessLevel.CROSS_AGENT,
+        filesystemAccess: FilesystemAccessLevel.EXTENDED,
+        maxMemoryMb: 4096,
+        maxCpuPercent: 100,
+        maxExecutionMs: 1800000,
+        allowedEgressDomains: ['*'],
+        allowedMountPaths: ['/workspace', '/data', '/cache', '/shared'],
+        canSpawnSubprocesses: true,
+        canAccessSecrets: true,
+        canCommunicateWithAgents: true,
+    },
+    6: {
+        networkAccess: NetworkAccessLevel.CROSS_AGENT,
+        filesystemAccess: FilesystemAccessLevel.EXTENDED,
+        maxMemoryMb: 8192,
+        maxCpuPercent: 100,
+        maxExecutionMs: 3600000,
+        allowedEgressDomains: ['*'],
+        allowedMountPaths: ['/workspace', '/data', '/cache', '/shared', '/admin'],
+        canSpawnSubprocesses: true,
+        canAccessSecrets: true,
+        canCommunicateWithAgents: true,
+    },
+    7: {
+        networkAccess: NetworkAccessLevel.FULL,
+        filesystemAccess: FilesystemAccessLevel.FULL,
+        maxMemoryMb: -1, // Unlimited
+        maxCpuPercent: 100,
+        maxExecutionMs: -1, // Unlimited
+        allowedEgressDomains: ['*'],
+        allowedMountPaths: ['*'],
+        canSpawnSubprocesses: true,
+        canAccessSecrets: true,
+        canCommunicateWithAgents: true,
+    },
+};
+// ============================================================================
+// Sandbox Configuration
+// ============================================================================
+/**
+ * Sandbox runtime type
+ */
+export var SandboxRuntime;
+(function (SandboxRuntime) {
+    /** Docker container with seccomp */
+    SandboxRuntime["DOCKER"] = "DOCKER";
+    /** gVisor for stronger isolation */
+    SandboxRuntime["GVISOR"] = "GVISOR";
+    /** Firecracker microVM */
+    SandboxRuntime["FIRECRACKER"] = "FIRECRACKER";
+    /** WebAssembly runtime */
+    SandboxRuntime["WASM"] = "WASM";
+    /** No isolation (T7 only, monitored) */
+    SandboxRuntime["NONE"] = "NONE";
+})(SandboxRuntime || (SandboxRuntime = {}));
+// ============================================================================
+// Sandbox Lifecycle
+// ============================================================================
+/**
+ * Sandbox state
+ */
+export var SandboxState;
+(function (SandboxState) {
+    SandboxState["CREATING"] = "CREATING";
+    SandboxState["READY"] = "READY";
+    SandboxState["RUNNING"] = "RUNNING";
+    SandboxState["PAUSED"] = "PAUSED";
+    SandboxState["STOPPING"] = "STOPPING";
+    SandboxState["STOPPED"] = "STOPPED";
+    SandboxState["FAILED"] = "FAILED";
+    SandboxState["DESTROYED"] = "DESTROYED";
+})(SandboxState || (SandboxState = {}));
+//# sourceMappingURL=types.js.map

package/dist/cognigate/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/cognigate/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,kBAeX;AAfD,WAAY,kBAAkB;IAC5B,yCAAyC;IACzC,mCAAa,CAAA;IAEb,qCAAqC;IACrC,2CAAqB,CAAA;IAErB,sCAAsC;IACtC,2CAAqB,CAAA;IAErB,gCAAgC;IAChC,iDAA2B,CAAA;IAE3B,sCAAsC;IACtC,mCAAa,CAAA;AACf,CAAC,EAfW,kBAAkB,KAAlB,kBAAkB,QAe7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,qBAYX;AAZD,WAAY,qBAAqB;IAC/B,4CAA4C;IAC5C,8DAAqC,CAAA;IAErC,qCAAqC;IACrC,gDAAuB,CAAA;IAEvB,wCAAwC;IACxC,8CAAqB,CAAA;IAErB,uCAAuC;IACvC,sCAAa,CAAA;AACf,CAAC,EAZW,qBAAqB,KAArB,qBAAqB,QAYhC;AAkBD;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAqC;IACjE,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,IAAI;QACtC,gBAAgB,EAAE,qBAAqB,CAAC,gBAAgB;QACxD,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,KAAK;QACrB,oBAAoB,EAAE,EAAE;QACxB,iBAAiB,EAAE,EAAE;QACrB,oBAAoB,EAAE,KAAK;QAC3B,gBAAgB,EAAE,KAAK;QACvB,wBAAwB,EAAE,KAAK;KAChC;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,IAAI;QACtC,gBAAgB,EAAE,qBAAqB,CAAC,gBAAgB;QACxD,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,KAAK;QACrB,oBAAoB,EAAE,EAAE;QACxB,iBAAiB,EAAE,EAAE;QACrB,oBAAoB,EAAE,KAAK;QAC3B,gBAAgB,EAAE,KAAK;QACvB,wBAAwB,EAAE,KAAK;KAChC;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,QAAQ;QAC1C,gBAAgB,EAAE,qBAAqB,CAAC,SAAS;QACjD,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,oBAAoB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;QACjD,iBAAiB,EAAE,CAAC,YAAY,CAAC;QACjC,oBAAoB,EAAE,KAAK;QAC3B,gBAAgB,EAAE,KAAK;QACvB,wBAAwB,EAAE,KAAK;KAChC;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,QAAQ;QAC1C,gBAAgB,EAAE,qBAAqB,CAAC,SAAS;QACjD,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,oBAAoB,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;QACjD,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;QAC1C,oBAAoB,EAAE,KAAK;QAC3B,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,KAAK;KAChC;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,QAAQ;QAC1C,gBAAgB,EAAE,qBAAqB,CAAC,SAAS;QACjD,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,oBAAoB,EAAE,CAAC,GAAG,CAAC,EAAE,kBAAkB;QAC/C,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC;QACpD,oBAAoB,EAAE,IAAI;QAC1B,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,KAAK;KAChC;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,WAAW;QAC7C,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ;QAChD,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,GAAG;QAClB,cAAc,EAAE,OAAO;QACvB,oBAAoB,EAAE,CAAC,GAAG,CAAC;QAC3B,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC/D,oBAAoB,EAAE,IAAI;QAC1B,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;KAC/B;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,WAAW;QAC7C,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ;QAChD,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,GAAG;QAClB,cAAc,EAAE,OAAO;QACvB,oBAAoB,EAAE,CAAC,GAAG,CAAC;QAC3B,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;QACzE,oBAAoB,EAAE,IAAI;QAC1B,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;KAC/B;IACD,CAAC,EAAE;QACD,aAAa,EAAE,kBAAkB,CAAC,IAAI;QACtC,gBAAgB,EAAE,qBAAqB,CAAC,IAAI;QAC5C,WAAW,EAAE,CAAC,CAAC,EAAE,YAAY;QAC7B,aAAa,EAAE,GAAG;QAClB,cAAc,EAAE,CAAC,CAAC,EAAE,YAAY;QAChC,oBAAoB,EAAE,CAAC,GAAG,CAAC;QAC3B,iBAAiB,EAAE,CAAC,GAAG,CAAC;QACxB,oBAAoB,EAAE,IAAI;QAC1B,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;KAC/B;CACF,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,cAeX;AAfD,WAAY,cAAc;IACxB,oCAAoC;IACpC,mCAAiB,CAAA;IAEjB,oCAAoC;IACpC,mCAAiB,CAAA;IAEjB,0BAA0B;IAC1B,6CAA2B,CAAA;IAE3B,0BAA0B;IAC1B,+BAAa,CAAA;IAEb,wCAAwC;IACxC,+BAAa,CAAA;AACf,CAAC,EAfW,cAAc,KAAd,cAAc,QAezB;AA+PD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,YASX;AATD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,+BAAe,CAAA;IACf,mCAAmB,CAAA;IACnB,iCAAiB,CAAA;IACjB,qCAAqB,CAAA;IACrB,mCAAmB,CAAA;IACnB,iCAAiB,CAAA;IACjB,uCAAuB,CAAA;AACzB,CAAC,EATW,YAAY,KAAZ,YAAY,QASvB"}

package/dist/common/adapters/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Adapter System for Redis Optionality
+ *
+ * This module exports all adapter interfaces and implementations,
+ * allowing Vorion to run with either Redis-backed or in-memory
+ * implementations of queues, caches, locks, sessions, and rate limiting.
+ *
+ * Usage:
+ * ```typescript
+ * import { getAdapterProvider } from './common/adapters';
+ *
+ * const provider = getAdapterProvider();
+ * const cache = provider.getCacheAdapter();
+ * await cache.set('key', 'value', 300);
+ * ```
+ *
+ * Or use convenience functions:
+ * ```typescript
+ * import { getCacheAdapter, getQueueAdapter } from './common/adapters';
+ *
+ * const cache = getCacheAdapter();
+ * const queue = getQueueAdapter('my-queue');
+ * ```
+ *
+ * @packageDocumentation
+ */
+export type { QueueJobOptions, JobCounts, Job, JobHandler, IQueueAdapter, ICacheAdapter, LockOptions, LockResult, ILockAdapter, Session, CreateSessionInput, ISessionStoreAdapter, RateLimitResult, IRateLimitAdapter, AdapterHealthStatus, AdapterProvider, } from './types.js';
+export { MemoryQueueAdapter, createMemoryQueueAdapter, } from './memory-queue.js';
+export { MemoryCacheAdapter, createMemoryCacheAdapter, getMemoryCacheAdapter, resetMemoryCacheAdapter, type MemoryCacheOptions, } from './memory-cache.js';
+export { MemoryLockAdapter, createMemoryLockAdapter, getMemoryLockAdapter, resetMemoryLockAdapter, } from './memory-lock.js';
+export { MemorySessionStoreAdapter, createMemorySessionStoreAdapter, getMemorySessionStoreAdapter, resetMemorySessionStoreAdapter, type MemorySessionStoreOptions, } from './memory-session.js';
+export { MemoryRateLimitAdapter, createMemoryRateLimitAdapter, getMemoryRateLimitAdapter, resetMemoryRateLimitAdapter, type MemoryRateLimitOptions, } from './memory-ratelimit.js';
+export { getAdapterProvider, createAdapterProvider, resetAdapterProvider, type AdapterProviderConfig, getQueueAdapter, getCacheAdapter, getLockAdapter, getSessionStoreAdapter, getRateLimitAdapter, } from './provider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/common/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,YAAY,EAEV,eAAe,EACf,SAAS,EACT,GAAG,EACH,UAAU,EACV,aAAa,EAGb,aAAa,EAGb,WAAW,EACX,UAAU,EACV,YAAY,EAGZ,OAAO,EACP,kBAAkB,EAClB,oBAAoB,EAGpB,eAAe,EACf,iBAAiB,EAGjB,mBAAmB,EACnB,eAAe,GAChB,MAAM,YAAY,CAAC;AAOpB,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,4BAA4B,EAC5B,8BAA8B,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,qBAAqB,EAG1B,eAAe,EACf,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAC"}

package/dist/common/adapters/index.js

@@ -0,0 +1,46 @@
+/**
+ * Adapter System for Redis Optionality
+ *
+ * This module exports all adapter interfaces and implementations,
+ * allowing Vorion to run with either Redis-backed or in-memory
+ * implementations of queues, caches, locks, sessions, and rate limiting.
+ *
+ * Usage:
+ * ```typescript
+ * import { getAdapterProvider } from './common/adapters';
+ *
+ * const provider = getAdapterProvider();
+ * const cache = provider.getCacheAdapter();
+ * await cache.set('key', 'value', 300);
+ * ```
+ *
+ * Or use convenience functions:
+ * ```typescript
+ * import { getCacheAdapter, getQueueAdapter } from './common/adapters';
+ *
+ * const cache = getCacheAdapter();
+ * const queue = getQueueAdapter('my-queue');
+ * ```
+ *
+ * @packageDocumentation
+ */
+// =============================================================================
+// MEMORY IMPLEMENTATIONS
+// =============================================================================
+// Queue
+export { MemoryQueueAdapter, createMemoryQueueAdapter, } from './memory-queue.js';
+// Cache
+export { MemoryCacheAdapter, createMemoryCacheAdapter, getMemoryCacheAdapter, resetMemoryCacheAdapter, } from './memory-cache.js';
+// Lock
+export { MemoryLockAdapter, createMemoryLockAdapter, getMemoryLockAdapter, resetMemoryLockAdapter, } from './memory-lock.js';
+// Session
+export { MemorySessionStoreAdapter, createMemorySessionStoreAdapter, getMemorySessionStoreAdapter, resetMemorySessionStoreAdapter, } from './memory-session.js';
+// Rate Limit
+export { MemoryRateLimitAdapter, createMemoryRateLimitAdapter, getMemoryRateLimitAdapter, resetMemoryRateLimitAdapter, } from './memory-ratelimit.js';
+// =============================================================================
+// PROVIDER
+// =============================================================================
+export { getAdapterProvider, createAdapterProvider, resetAdapterProvider, 
+// Convenience functions
+getQueueAdapter, getCacheAdapter, getLockAdapter, getSessionStoreAdapter, getRateLimitAdapter, } from './provider.js';
+//# sourceMappingURL=index.js.map

package/dist/common/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/common/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAoCH,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,QAAQ;AACR,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,QAAQ;AACR,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAE3B,OAAO;AACP,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,UAAU;AACV,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,4BAA4B,EAC5B,8BAA8B,GAE/B,MAAM,qBAAqB,CAAC;AAE7B,aAAa;AACb,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,GAE5B,MAAM,uBAAuB,CAAC;AAE/B,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB;AAGpB,wBAAwB;AACxB,eAAe,EACf,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAC"}