@vorionsys/security 1.0.0

package/dist/cognigate/resource-state-provider.js

@@ -0,0 +1,195 @@
+/**
+ * Cognigate Redis Resource State Provider
+ *
+ * Implements distributed resource tracking using Redis.
+ * Uses atomic Lua scripts for consistency under concurrent access.
+ *
+ * @packageDocumentation
+ * @module @vorion/cognigate/resource-state-provider
+ */
+import { getRedis } from '../common/redis.js';
+import { createLogger } from '../common/logger.js';
+import { INCREMENT_AND_CHECK_LUA, UPDATE_MEMORY_PEAK_LUA, GET_RESOURCE_SNAPSHOT_LUA, CHECK_LIMITS_LUA, INIT_EXECUTION_LUA, INCREMENT_CPU_TIME_LUA, CLEANUP_EXECUTION_LUA, } from './lua-scripts.js';
+const logger = createLogger({ component: 'cognigate-resource-state' });
+/**
+ * Violation type mapping from Lua script return values
+ */
+const VIOLATION_TYPES = {
+    0: null,
+    1: 'memory_exceeded',
+    2: 'cpu_exceeded',
+    3: 'timeout_exceeded',
+    4: 'network_limit_exceeded',
+    5: 'filesystem_limit_exceeded',
+};
+/**
+ * Violation type descriptions
+ */
+const VIOLATION_DESCRIPTIONS = {
+    memory_exceeded: 'Memory limit exceeded',
+    cpu_exceeded: 'CPU time limit exceeded',
+    timeout_exceeded: 'Execution timeout exceeded',
+    network_limit_exceeded: 'Network request limit exceeded',
+    filesystem_limit_exceeded: 'File system operation limit exceeded',
+};
+/**
+ * Redis-based resource state provider for distributed execution tracking.
+ *
+ * Uses Redis HASH structures for efficient storage and Lua scripts
+ * for atomic operations that prevent race conditions.
+ */
+export class RedisResourceStateProvider {
+    redis;
+    keyPrefix = 'cognigate:exec:';
+    constructor(deps = {}) {
+        this.redis = deps.redis ?? getRedis();
+    }
+    /**
+     * Build the Redis key for an execution
+     */
+    buildKey(executionId) {
+        return `${this.keyPrefix}${executionId}`;
+    }
+    /**
+     * Initialize execution tracking with limits and TTL
+     */
+    async initExecution(executionId, limits, ttlMs) {
+        const key = this.buildKey(executionId);
+        const startTime = Date.now();
+        const ttlSeconds = Math.ceil(ttlMs / 1000) + 60; // Add buffer for cleanup
+        await this.redis.eval(INIT_EXECUTION_LUA, 1, key, startTime.toString(), ttlSeconds.toString(), limits.maxMemoryMb.toString(), limits.maxCpuPercent.toString(), limits.timeoutMs.toString(), (limits.maxNetworkRequests ?? -1).toString(), (limits.maxFileSystemOps ?? -1).toString());
+        logger.debug({ executionId, limits, ttlMs }, 'Execution state initialized');
+    }
+    /**
+     * Record memory usage sample, updating peak if higher
+     */
+    async recordMemoryUsage(executionId, memoryMb) {
+        const key = this.buildKey(executionId);
+        await this.redis.eval(UPDATE_MEMORY_PEAK_LUA, 1, key, memoryMb.toString());
+    }
+    /**
+     * Get peak memory usage for an execution
+     */
+    async getPeakMemory(executionId) {
+        const key = this.buildKey(executionId);
+        const value = await this.redis.hget(key, 'memoryPeakMb');
+        return value ? parseFloat(value) : 0;
+    }
+    /**
+     * Atomically increment CPU time and return new total
+     */
+    async incrementCpuTime(executionId, deltaMs) {
+        const key = this.buildKey(executionId);
+        const result = await this.redis.eval(INCREMENT_CPU_TIME_LUA, 1, key, deltaMs.toString());
+        return result;
+    }
+    /**
+     * Get total CPU time for an execution
+     */
+    async getCpuTimeMs(executionId) {
+        const key = this.buildKey(executionId);
+        const value = await this.redis.hget(key, 'cpuTimeMs');
+        return value ? parseFloat(value) : 0;
+    }
+    /**
+     * Atomically increment network request count and check limit
+     */
+    async incrementNetworkRequests(executionId, limit) {
+        const key = this.buildKey(executionId);
+        const result = await this.redis.eval(INCREMENT_AND_CHECK_LUA, 1, key, 'networkRequests', '1', limit.toString());
+        const [allowed, current] = result;
+        return { allowed: allowed === 1, current };
+    }
+    /**
+     * Get current network request count
+     */
+    async getNetworkRequestCount(executionId) {
+        const key = this.buildKey(executionId);
+        const value = await this.redis.hget(key, 'networkRequests');
+        return value ? parseInt(value, 10) : 0;
+    }
+    /**
+     * Atomically increment file system operation count and check limit
+     */
+    async incrementFileSystemOps(executionId, limit) {
+        const key = this.buildKey(executionId);
+        const result = await this.redis.eval(INCREMENT_AND_CHECK_LUA, 1, key, 'fileSystemOps', '1', limit.toString());
+        const [allowed, current] = result;
+        return { allowed: allowed === 1, current };
+    }
+    /**
+     * Get current file system operation count
+     */
+    async getFileSystemOpCount(executionId) {
+        const key = this.buildKey(executionId);
+        const value = await this.redis.hget(key, 'fileSystemOps');
+        return value ? parseInt(value, 10) : 0;
+    }
+    /**
+     * Check if execution should be terminated based on resource limits
+     */
+    async shouldTerminate(executionId, limits) {
+        const key = this.buildKey(executionId);
+        const currentTime = Date.now();
+        // Calculate effective CPU time limit based on percent and elapsed time
+        // This allows for burst usage while maintaining overall limit
+        const startTime = await this.redis.hget(key, 'startTime');
+        const elapsedMs = startTime ? currentTime - parseInt(startTime, 10) : 0;
+        const cpuTimeLimit = (limits.maxCpuPercent / 100) * elapsedMs;
+        const result = await this.redis.eval(CHECK_LIMITS_LUA, 1, key, limits.maxMemoryMb.toString(), cpuTimeLimit.toString(), (limits.maxNetworkRequests ?? -1).toString(), (limits.maxFileSystemOps ?? -1).toString(), currentTime.toString(), limits.timeoutMs.toString());
+        const [shouldTerminate, violationType, currentValue, limit] = result;
+        if (shouldTerminate === 1) {
+            const violation = VIOLATION_TYPES[violationType];
+            const reason = violation
+                ? `${VIOLATION_DESCRIPTIONS[violation]}: ${currentValue} exceeds limit of ${limit}`
+                : 'Unknown violation';
+            logger.warn({ executionId, violation, currentValue, limit }, 'Resource limit violation detected');
+            return {
+                terminate: true,
+                reason,
+                violation: violation ?? undefined,
+            };
+        }
+        return { terminate: false };
+    }
+    /**
+     * Clean up execution tracking and return final usage metrics
+     */
+    async cleanupExecution(executionId) {
+        const key = this.buildKey(executionId);
+        const result = await this.redis.eval(CLEANUP_EXECUTION_LUA, 1, key);
+        const [memoryPeakMb, cpuTimeMs, wallTimeMs, networkRequests, fileSystemOps] = result;
+        logger.debug({ executionId, memoryPeakMb, cpuTimeMs, wallTimeMs, networkRequests, fileSystemOps }, 'Execution state cleaned up');
+        return {
+            memoryPeakMb,
+            cpuTimeMs,
+            wallTimeMs,
+            networkRequests,
+            fileSystemOps,
+        };
+    }
+    /**
+     * Get a snapshot of all resource metrics
+     */
+    async getResourceSnapshot(executionId) {
+        const key = this.buildKey(executionId);
+        const currentTime = Date.now();
+        const result = await this.redis.eval(GET_RESOURCE_SNAPSHOT_LUA, 1, key);
+        const [memoryPeakMb, cpuTimeMs, networkRequests, fileSystemOps, startTime] = result;
+        const wallTimeMs = startTime > 0 ? currentTime - startTime : 0;
+        return {
+            memoryPeakMb,
+            cpuTimeMs,
+            networkRequests,
+            fileSystemOps,
+            wallTimeMs,
+        };
+    }
+}
+/**
+ * Create a Redis resource state provider instance
+ */
+export function createResourceStateProvider(deps = {}) {
+    return new RedisResourceStateProvider(deps);
+}
+//# sourceMappingURL=resource-state-provider.js.map

package/dist/cognigate/resource-state-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-state-provider.js","sourceRoot":"","sources":["../../src/cognigate/resource-state-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC,CAAC;AAUvE;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,cAAc;IACjB,CAAC,EAAE,kBAAkB;IACrB,CAAC,EAAE,wBAAwB;IAC3B,CAAC,EAAE,2BAA2B;CACtB,CAAC;AAEX;;GAEG;AACH,MAAM,sBAAsB,GAA2B;IACrD,eAAe,EAAE,uBAAuB;IACxC,YAAY,EAAE,yBAAyB;IACvC,gBAAgB,EAAE,4BAA4B;IAC9C,sBAAsB,EAAE,gCAAgC;IACxD,yBAAyB,EAAE,sCAAsC;CAClE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAAQ;IACb,SAAS,GAAG,iBAAiB,CAAC;IAE/C,YAAY,OAA+C,EAAE;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,WAAe;QAC9B,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,WAAW,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAe,EAAE,MAAsB,EAAE,KAAa;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,yBAAyB;QAE1E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,kBAAkB,EAClB,CAAC,EACD,GAAG,EACH,SAAS,CAAC,QAAQ,EAAE,EACpB,UAAU,CAAC,QAAQ,EAAE,EACrB,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,EAC7B,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAC/B,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAC3B,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAC5C,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC3C,CAAC;QAEF,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,EAC9B,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAe,EAAE,QAAgB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,sBAAsB,EACtB,CAAC,EACD,GAAG,EACH,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAe;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAe,EAAE,OAAe;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,sBAAsB,EACtB,CAAC,EACD,GAAG,EACH,OAAO,CAAC,QAAQ,EAAE,CACT,CAAC;QAEZ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,WAAe;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,WAAe,EACf,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,uBAAuB,EACvB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,GAAG,EACH,KAAK,CAAC,QAAQ,EAAE,CACG,CAAC;QAEtB,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,WAAe;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,WAAe,EACf,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,uBAAuB,EACvB,CAAC,EACD,GAAG,EACH,eAAe,EACf,GAAG,EACH,KAAK,CAAC,QAAQ,EAAE,CACG,CAAC;QAEtB,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,WAAe;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,WAAe,EACf,MAAsB;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,gBAAgB,EAChB,CAAC,EACD,GAAG,EACH,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,EAC7B,YAAY,CAAC,QAAQ,EAAE,EACvB,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAC5C,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAC1C,WAAW,CAAC,QAAQ,EAAE,EACtB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CACQ,CAAC;QAEtC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC;QAErE,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,aAA6C,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,YAAY,qBAAqB,KAAK,EAAE;gBACnF,CAAC,CAAC,mBAAmB,CAAC;YAExB,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAC/C,mCAAmC,CACpC,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,MAAM;gBACN,SAAS,EAAE,SAAS,IAAI,SAAS;aAClC,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAe;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,qBAAqB,EACrB,CAAC,EACD,GAAG,CACwC,CAAC;QAE9C,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,GAAG,MAAM,CAAC;QAErF,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,EACpF,4BAA4B,CAC7B,CAAC;QAEF,OAAO;YACL,YAAY;YACZ,SAAS;YACT,UAAU;YACV,eAAe;YACf,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAe;QAOvC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,yBAAyB,EACzB,CAAC,EACD,GAAG,CACwC,CAAC;QAE9C,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC;QACpF,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/D,OAAO;YACL,YAAY;YACZ,SAAS;YACT,eAAe;YACf,aAAa;YACb,UAAU;SACX,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA+C,EAAE;IAEjD,OAAO,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC"}

package/dist/cognigate/resource-tracker.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Cognigate Resource Tracker
+ *
+ * Local resource tracking with polling for memory and CPU usage.
+ * Uses AbortController for termination signaling.
+ *
+ * @packageDocumentation
+ * @module @vorion/cognigate/resource-tracker
+ */
+import type { ID } from '../common/types.js';
+import type { ResourceLimits, ResourceUsage, ResourceStateProvider, TerminationReason } from './types.js';
+/**
+ * Resource tracker options
+ */
+export interface ResourceTrackerOptions {
+    /** Polling interval in milliseconds (default: 100ms) */
+    pollIntervalMs?: number;
+    /** Resource state provider for distributed tracking */
+    stateProvider?: ResourceStateProvider;
+}
+/**
+ * Resource tracker for monitoring execution resource usage.
+ *
+ * Features:
+ * - Polls memory via process.memoryUsage() at configurable intervals
+ * - Tracks CPU via process.cpuUsage() deltas
+ * - Uses AbortController for termination signaling
+ * - Reports to optional distributed state provider
+ */
+export declare class ResourceTracker {
+    private readonly executionId;
+    private readonly limits;
+    private readonly pollIntervalMs;
+    private readonly stateProvider?;
+    private readonly abortController;
+    private pollTimer;
+    private startTime;
+    private lastCpuUsage;
+    private totalCpuTimeMs;
+    private peakMemoryMb;
+    private terminated;
+    private terminationReason?;
+    constructor(executionId: ID, limits: ResourceLimits, options?: ResourceTrackerOptions);
+    /**
+     * Get the abort signal for termination
+     */
+    get signal(): AbortSignal;
+    /**
+     * Check if execution has been terminated
+     */
+    isTerminated(): boolean;
+    /**
+     * Get termination reason if terminated
+     */
+    getTerminationReason(): TerminationReason | undefined;
+    /**
+     * Start resource tracking
+     */
+    start(): Promise<void>;
+    /**
+     * Stop resource tracking
+     */
+    stop(): Promise<ResourceUsage>;
+    /**
+     * Terminate execution with reason
+     */
+    terminate(reason: string, violation?: string): void;
+    /**
+     * Poll current resource usage
+     */
+    private poll;
+    /**
+     * Check resource limits locally (when no distributed state provider)
+     */
+    private checkLocalLimits;
+    /**
+     * Get current resource usage snapshot
+     */
+    getCurrentUsage(): ResourceUsage;
+}
+/**
+ * Create a resource tracker instance
+ */
+export declare function createResourceTracker(executionId: ID, limits: ResourceLimits, options?: ResourceTrackerOptions): ResourceTracker;
+//# sourceMappingURL=resource-tracker.d.ts.map

package/dist/cognigate/resource-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-tracker.d.ts","sourceRoot":"","sources":["../../src/cognigate/resource-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAS1G;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAK;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAElD,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,iBAAiB,CAAC,CAAoB;gBAG5C,WAAW,EAAE,EAAE,EACf,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,sBAA2B;IAStC;;OAEG;IACH,IAAI,MAAM,IAAI,WAAW,CAExB;IAED;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,oBAAoB,IAAI,iBAAiB,GAAG,SAAS;IAIrD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC;IAiCpC;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAuBnD;;OAEG;YACW,IAAI;IA4ClB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA+BxB;;OAEG;IACH,eAAe,IAAI,aAAa;CASjC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,EAAE,EACf,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAEjB"}

package/dist/cognigate/resource-tracker.js

@@ -0,0 +1,216 @@
+/**
+ * Cognigate Resource Tracker
+ *
+ * Local resource tracking with polling for memory and CPU usage.
+ * Uses AbortController for termination signaling.
+ *
+ * @packageDocumentation
+ * @module @vorion/cognigate/resource-tracker
+ */
+import { createLogger } from '../common/logger.js';
+const logger = createLogger({ component: 'cognigate-resource-tracker' });
+/**
+ * Default polling interval for resource monitoring (100ms)
+ */
+const DEFAULT_POLL_INTERVAL_MS = 100;
+/**
+ * Resource tracker for monitoring execution resource usage.
+ *
+ * Features:
+ * - Polls memory via process.memoryUsage() at configurable intervals
+ * - Tracks CPU via process.cpuUsage() deltas
+ * - Uses AbortController for termination signaling
+ * - Reports to optional distributed state provider
+ */
+export class ResourceTracker {
+    executionId;
+    limits;
+    pollIntervalMs;
+    stateProvider;
+    abortController;
+    pollTimer = null;
+    startTime = 0;
+    lastCpuUsage = null;
+    totalCpuTimeMs = 0;
+    peakMemoryMb = 0;
+    terminated = false;
+    terminationReason;
+    constructor(executionId, limits, options = {}) {
+        this.executionId = executionId;
+        this.limits = limits;
+        this.pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+        this.stateProvider = options.stateProvider;
+        this.abortController = new AbortController();
+    }
+    /**
+     * Get the abort signal for termination
+     */
+    get signal() {
+        return this.abortController.signal;
+    }
+    /**
+     * Check if execution has been terminated
+     */
+    isTerminated() {
+        return this.terminated;
+    }
+    /**
+     * Get termination reason if terminated
+     */
+    getTerminationReason() {
+        return this.terminationReason;
+    }
+    /**
+     * Start resource tracking
+     */
+    async start() {
+        if (this.pollTimer) {
+            logger.warn({ executionId: this.executionId }, 'Resource tracker already started');
+            return;
+        }
+        this.startTime = Date.now();
+        this.lastCpuUsage = process.cpuUsage();
+        // Initialize distributed state if provider available
+        if (this.stateProvider) {
+            await this.stateProvider.initExecution(this.executionId, this.limits, this.limits.timeoutMs + 60000 // TTL with buffer
+            );
+        }
+        // Start polling
+        this.pollTimer = setInterval(() => {
+            this.poll().catch((error) => {
+                logger.error({ executionId: this.executionId, error }, 'Resource polling error');
+            });
+        }, this.pollIntervalMs);
+        // Do initial poll immediately
+        await this.poll();
+        logger.debug({ executionId: this.executionId, limits: this.limits, pollIntervalMs: this.pollIntervalMs }, 'Resource tracking started');
+    }
+    /**
+     * Stop resource tracking
+     */
+    async stop() {
+        if (this.pollTimer) {
+            clearInterval(this.pollTimer);
+            this.pollTimer = null;
+        }
+        // Final poll to capture latest metrics
+        await this.poll();
+        const wallTimeMs = Date.now() - this.startTime;
+        // Get final metrics from distributed state if available
+        if (this.stateProvider) {
+            try {
+                return await this.stateProvider.cleanupExecution(this.executionId);
+            }
+            catch (error) {
+                logger.warn({ executionId: this.executionId, error }, 'Failed to cleanup distributed state, using local metrics');
+            }
+        }
+        // Return local metrics
+        return {
+            memoryPeakMb: this.peakMemoryMb,
+            cpuTimeMs: this.totalCpuTimeMs,
+            wallTimeMs,
+            networkRequests: 0, // Network tracking handled by interceptors
+            fileSystemOps: 0, // FS tracking handled by interceptors
+        };
+    }
+    /**
+     * Terminate execution with reason
+     */
+    terminate(reason, violation) {
+        if (this.terminated) {
+            return;
+        }
+        this.terminated = true;
+        this.terminationReason = {
+            violation: violation ?? 'timeout_exceeded',
+            reason,
+            currentValue: 0,
+            limit: 0,
+            terminatedAt: new Date().toISOString(),
+        };
+        // Signal abort to any listeners
+        this.abortController.abort(new Error(reason));
+        logger.warn({ executionId: this.executionId, reason, violation }, 'Execution terminated');
+    }
+    /**
+     * Poll current resource usage
+     */
+    async poll() {
+        if (this.terminated) {
+            return;
+        }
+        // Sample memory usage
+        const memUsage = process.memoryUsage();
+        const currentMemoryMb = memUsage.heapUsed / (1024 * 1024);
+        if (currentMemoryMb > this.peakMemoryMb) {
+            this.peakMemoryMb = currentMemoryMb;
+        }
+        // Calculate CPU time delta
+        const currentCpuUsage = process.cpuUsage(this.lastCpuUsage ?? undefined);
+        const cpuDeltaMs = (currentCpuUsage.user + currentCpuUsage.system) / 1000;
+        this.totalCpuTimeMs += cpuDeltaMs;
+        this.lastCpuUsage = process.cpuUsage();
+        // Report to distributed state
+        if (this.stateProvider) {
+            try {
+                await Promise.all([
+                    this.stateProvider.recordMemoryUsage(this.executionId, currentMemoryMb),
+                    cpuDeltaMs > 0 ? this.stateProvider.incrementCpuTime(this.executionId, cpuDeltaMs) : Promise.resolve(),
+                ]);
+                // Check if should terminate
+                const result = await this.stateProvider.shouldTerminate(this.executionId, this.limits);
+                if (result.terminate && !this.terminated) {
+                    this.terminate(result.reason ?? 'Resource limit exceeded', result.violation);
+                }
+            }
+            catch (error) {
+                logger.warn({ executionId: this.executionId, error }, 'Failed to report to distributed state');
+            }
+        }
+        else {
+            // Local limit checking
+            this.checkLocalLimits();
+        }
+    }
+    /**
+     * Check resource limits locally (when no distributed state provider)
+     */
+    checkLocalLimits() {
+        const wallTimeMs = Date.now() - this.startTime;
+        // Check timeout
+        if (wallTimeMs > this.limits.timeoutMs) {
+            this.terminate(`Execution timeout exceeded: ${wallTimeMs}ms > ${this.limits.timeoutMs}ms`, 'timeout_exceeded');
+            return;
+        }
+        // Check memory
+        if (this.peakMemoryMb > this.limits.maxMemoryMb) {
+            this.terminate(`Memory limit exceeded: ${this.peakMemoryMb.toFixed(2)}MB > ${this.limits.maxMemoryMb}MB`, 'memory_exceeded');
+            return;
+        }
+        // Check CPU (percent of wall time)
+        const allowedCpuMs = (this.limits.maxCpuPercent / 100) * wallTimeMs;
+        if (this.totalCpuTimeMs > allowedCpuMs) {
+            this.terminate(`CPU time limit exceeded: ${this.totalCpuTimeMs.toFixed(2)}ms > ${allowedCpuMs.toFixed(2)}ms (${this.limits.maxCpuPercent}% of wall time)`, 'cpu_exceeded');
+        }
+    }
+    /**
+     * Get current resource usage snapshot
+     */
+    getCurrentUsage() {
+        return {
+            memoryPeakMb: this.peakMemoryMb,
+            cpuTimeMs: this.totalCpuTimeMs,
+            wallTimeMs: Date.now() - this.startTime,
+            networkRequests: 0,
+            fileSystemOps: 0,
+        };
+    }
+}
+/**
+ * Create a resource tracker instance
+ */
+export function createResourceTracker(executionId, limits, options = {}) {
+    return new ResourceTracker(executionId, limits, options);
+}
+//# sourceMappingURL=resource-tracker.js.map

package/dist/cognigate/resource-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-tracker.js","sourceRoot":"","sources":["../../src/cognigate/resource-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAInD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC,CAAC;AAEzE;;GAEG;AACH,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAYrC;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IACT,WAAW,CAAK;IAChB,MAAM,CAAiB;IACvB,cAAc,CAAS;IACvB,aAAa,CAAyB;IACtC,eAAe,CAAkB;IAE1C,SAAS,GAA0C,IAAI,CAAC;IACxD,SAAS,GAAW,CAAC,CAAC;IACtB,YAAY,GAA2B,IAAI,CAAC;IAC5C,cAAc,GAAW,CAAC,CAAC;IAC3B,YAAY,GAAW,CAAC,CAAC;IACzB,UAAU,GAAY,KAAK,CAAC;IAC5B,iBAAiB,CAAqB;IAE9C,YACE,WAAe,EACf,MAAsB,EACtB,UAAkC,EAAE;QAEpC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACzE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,kCAAkC,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEvC,qDAAqD;QACrD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CACpC,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,kBAAkB;aACjD,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,EACxC,wBAAwB,CACzB,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAExB,8BAA8B;QAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAC3F,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/C,wDAAwD;QACxD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,EACxC,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,UAAU;YACV,eAAe,EAAE,CAAC,EAAE,2CAA2C;YAC/D,aAAa,EAAE,CAAC,EAAE,sCAAsC;SACzD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc,EAAE,SAAkB;QAC1C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG;YACvB,SAAS,EAAG,SAA4C,IAAI,kBAAkB;YAC9E,MAAM;YACN,YAAY,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;YACR,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QAEF,gCAAgC;QAChC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAE9C,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EACpD,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,sBAAsB;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAE1D,IAAI,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;QACtC,CAAC;QAED,2BAA2B;QAC3B,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1E,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEvC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC;oBACvE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;iBACvG,CAAC,CAAC;gBAEH,4BAA4B;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvF,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,yBAAyB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,EACxC,uCAAuC,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uBAAuB;YACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/C,gBAAgB;QAChB,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CACZ,+BAA+B,UAAU,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAC1E,kBAAkB,CACnB,CAAC;YACF,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,SAAS,CACZ,0BAA0B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EACzF,iBAAiB,CAClB,CAAC;YACF,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC;QACpE,IAAI,IAAI,CAAC,cAAc,GAAG,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CACZ,4BAA4B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,iBAAiB,EAC1I,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;YACvC,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAe,EACf,MAAsB,EACtB,UAAkC,EAAE;IAEpC,OAAO,IAAI,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC"}