@knpkv/herdr-fleet 0.2.0 → 0.4.0

package/README.md

@@ -2,10 +2,12 @@
 
 Fleet job protocol and local decision authority for Herdr hosts.
 
-The host that receives a job owns its durable SQLite record and every state transition. Risky work starts as `pending_approval`; approval is bound to the job's canonical hash and one-time nonce. Rejection and expiry clear that nonce. Safe work queues immediately. Recovery resumes queued jobs and expires stale approvals without moving authority to a coordinator.
+The host that receives a job owns its durable SQLite record and every state transition. Risky work starts as `pending_approval`; approval is bound to the job's canonical hash and one-time nonce. Rejection and expiry clear that nonce. Safe work queues immediately. `submit` takes a `SubmissionProvenance`, defaulting to `authenticated_remote`. With `verified_local_listener`, the `nix.*` and `agent.*` kinds in `LocalListenerApprovalExemptKind` queue without approval; Work authority kinds and `browser.mcp.recover` still start as `pending_approval`. The exempt list is typed to exclude every Work kind, so adding one fails to compile. Recovery resumes queued jobs and expires stale approvals without moving authority to a coordinator.
 
 `JobRecord.hash` persists a lowercase hex SHA-256 digest. Its canonical JSON input contains the host, actor, payload discriminant, and every identity field for that variant: `ref` for `nix.apply`; `repository`, `prompt`, `mode`, and the optional `channel` for `agent.delegate`; `session` and `message` for `agent.message`; no extra field for `nix.check` or `browser.mcp.recover`. Raw credentials and provider secrets never enter this hash or the persisted job payload.
 
+`AgentDelegate.mode` is the explicit model-dispatch intent. `consult` is a bounded Luna consultation at medium reasoning effort; `transition_summary` is a Luna summary at low effort. `review` and `work`, including coding, recovery, escalation, mutation, and public-contract changes, remain Sol work at high effort. Status and wait use their non-delegating operations and never become model dispatches. Adapters must switch on this required discriminator; prompt inference and a default route are invalid.
+
 The package exports:
 
 - Schema contracts for configuration, jobs, status, and agent inventory
@@ -18,8 +20,20 @@ The package exports:
 
 `HostConfiguration.machines` stores `{ host, nodeId }` for every fleet machine. Both fields must be unique. Tailscale adapters use the stable node ID as authority and treat the hostname only as a consistency check.
 
-Callers provide `HostOperations`. This keeps Nix, Git, and Herdr command execution out of the protocol package.
+`HostConfiguration.workBindAddress` is the explicit IPv4 address for the local-only Work listener. It defaults to loopback; wildcard addresses are invalid. The Work and local listeners must use distinct ports when `crossHost` is disabled.
+
+`HostConfiguration.lanWork` is an opt-in LAN Work listener configuration with an explicit bind `address`, browser `host`, and TCP `port`. Its port must not collide with the local, Work, or approval listeners. The approvals runtime exposes only the read-only Work pairing boundary on this listener; it prints a five-minute single-use code after startup, accepts pairing only from the exact configured origin, and keeps approvals, Connect, chat, secrets, agent control, and job submission unavailable. LAN Work uses plain HTTP and therefore requires a trusted LAN or an authenticated TLS boundary before credentials cross an untrusted link.
+
+Callers provide `HostOperations`. This keeps Nix, Git, and Herdr command execution out of the protocol package. `run` and `runCoordinatorChat` receive the accepted job ID and actor after the fleet service has enforced submission and approval. They also receive a typed lifecycle callback. Existing synchronous adapters may ignore these trailing arguments. A durable adapter supplies `recovery.matches` and `recovery.resume`, calls `accepted` once with its receipt before returning, then calls `terminal` once after the coordinator persists `settled`, `delivery_failed`, or `task_failed`. Fleet marks the job durable before invoking the adapter, stores the receipt in `acceptedReceipt`, and keeps the wrapper running between acceptance and terminal observation. If receipt validation or persistence fails after the adapter calls `accepted`, Fleet leaves the job running with a null receipt so restart recovery can idempotently rejoin the committed coordinator request. After restart, `recovery.resume` receives the deterministic job ID, either the persisted receipt or `null`, and the exact persisted worker identity or `null`. The `null` receipt case must idempotently rejoin or complete submission across a crash between the coordinator commit and Fleet receipt persistence. When a worker is present, recovery reattaches that worker and replays `workerStarted` without prompting or discovering another worker. Exact replay is accepted only during recovery, with Fleet host casing normalized; a different agent, pane, name, or relationship remains a conflict. The job ID and actor remain the idempotency and command-identity inputs.
+
+Work authority jobs (`work.reconcile`, `work.admit`, `work.recover`, `work.reassign`) run only through a composed Work adapter. That adapter is wired by the host's operations composer, not by the default operations. An adapter declares the kinds it executes in `HostOperations.workJobKinds`. `submit` refuses any other Work kind with `FleetOperationUnavailableError` before a job or approval request exists, so an approver is never asked to approve a job that this host cannot run. When `workJobKinds` is absent, the host runs no Work kinds.
+
+Fleet stores a bounded terminal summary, not the coordinator's authoritative result. Pass coordinator results and failure details through `summarizeHostOperationTerminalDetail` before calling `terminal`; the authoritative full value remains in the coordinator event store. Summaries are limited to 20,000 UTF-8 bytes so successful coordinator-chat results retain the existing `CoordinatorReply` contract. The lifecycle callback validates its receipt and terminal schema before persistence, so every admitted value fits the complete Fleet record envelope.
+
+The receipt is client-visible: Fleet stores it in both `acceptedReceipt` and `result`, and authorized raw `JobRecord` job and history responses expose both fields. Durable adapters must emit a normalized client-safe identifier. Provider callback URLs, bearer tokens, credentials, and other server-private locators are invalid receipt material. A matched durable operation that returns without calling `accepted` fails with `fleet.operation_acceptance_missing` and stays recoverable. `recovery.resume` must register observation through the hostd-owned lifetime function and return promptly; it must not wait for a terminal event, because hostd completes recovery before opening listeners.
 
 When an `agent.delegate` worker starts, `JobRecord` persists its exact identity and matching `AgentConnectTarget` in the same transition. Records before start, including pending, rejected, expired, and failed-before-start jobs, contain neither field. Terminal observation time remains separate and appears only after that exact started job succeeds or fails.
 
 `agent.delegate.prompt` and `agent.message.message` are capped at the exported `jobTextMaxLength` (16 KiB). Repository, session, and ref fields have smaller identifier/path bounds. These limits keep every schema-valid payload executable through the host command adapter without crossing the operating system's single-argument limit after JSON escaping and UTF-8 encoding.
+
+Recovery with a persisted worker rejects `terminal` until the adapter has replayed that exact worker through `workerStarted`. Relationship-free coordinator roots are valid only for consultation and transition summaries; review and work still require an exact delegated-child relationship even when the job uses the coordinator-chat channel.

package/dist/config.d.ts

@@ -7,7 +7,13 @@ export declare const loadConfiguration: (path: string) => Effect.Effect<{
     readonly crossHost: boolean;
     readonly port: number;
     readonly localPort: number;
+    readonly workBindAddress?: string;
     readonly approvalPort: number;
+    readonly lanWork?: {
+        readonly address: string;
+        readonly host: string;
+        readonly port: number;
+    };
     readonly allowedUsers: readonly string[];
     readonly approvalNodes: readonly string[];
     readonly machines: readonly {

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAU,MAAM,QAAQ,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA4B7B,CAAA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAU,MAAM,QAAQ,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA4B7B,CAAA"}

package/dist/errors.d.ts

@@ -37,6 +37,13 @@ declare const FleetApprovalError_base: Schema.Class<FleetApprovalError, Schema.T
 }>, import("effect/Cause").YieldableError>;
 export declare class FleetApprovalError extends FleetApprovalError_base {
 }
+declare const FleetOperationUnavailableError_base: Schema.Class<FleetOperationUnavailableError, Schema.TaggedStruct<"FleetOperationUnavailableError", {
+    readonly kind: Schema.String;
+    readonly detail: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** The host cannot execute this job kind, so it is refused before any approval request exists. */
+export declare class FleetOperationUnavailableError extends FleetOperationUnavailableError_base {
+}
 declare const FleetOperationError_base: Schema.Class<FleetOperationError, Schema.TaggedStruct<"FleetOperationError", {
     readonly operation: Schema.String;
     readonly detail: Schema.String;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAE/B,qBAAa,oBAAqB,SAAQ,yBAGzC;CAAG;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;;AAEJ,qBAAa,eAAgB,SAAQ,oBAOpC;CAAG;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;;AAEJ,qBAAa,kBAAmB,SAAQ,uBAGvC;CAAG;;;;;;AAEJ,qBAAa,mBAAoB,SAAQ,wBAOxC;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;;AAEJ,qBAAa,yBAA0B,SAAQ,8BAO9C;CAAG;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAG3C;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;AAEJ,qBAAa,2BAA4B,SAAQ,gCAMhD;CAAG"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAE/B,qBAAa,oBAAqB,SAAQ,yBAGzC;CAAG;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;;AAEJ,qBAAa,eAAgB,SAAQ,oBAOpC;CAAG;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAG1C;CAAG;;;;;AAEJ,qBAAa,kBAAmB,SAAQ,uBAGvC;CAAG;;;;;AAEJ,kGAAkG;AAClG,qBAAa,8BAA+B,SAAQ,mCAGnD;CAAG;;;;;;AAEJ,qBAAa,mBAAoB,SAAQ,wBAOxC;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;;AAEJ,qBAAa,yBAA0B,SAAQ,8BAO9C;CAAG;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAG3C;CAAG;;;;;;AAEJ,qBAAa,sBAAuB,SAAQ,2BAO3C;CAAG;;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;;AAEJ,qBAAa,uBAAwB,SAAQ,4BAG5C;CAAG;;;;;AAEJ,qBAAa,2BAA4B,SAAQ,gCAMhD;CAAG"}

package/dist/errors.js

@@ -17,6 +17,9 @@ export class FleetJobNotFoundError extends Schema.TaggedError()("FleetJobNotFoun
 }
 export class FleetApprovalError extends Schema.TaggedError()("FleetApprovalError", { jobId: Schema.String, detail: Schema.String }) {
 }
+/** The host cannot execute this job kind, so it is refused before any approval request exists. */
+export class FleetOperationUnavailableError extends Schema.TaggedError()("FleetOperationUnavailableError", { kind: Schema.String, detail: Schema.String }) {
+}
 export class FleetOperationError extends Schema.TaggedError()("FleetOperationError", {
     operation: Schema.String,
     detail: Schema.String,

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAClF,sBAAsB,EACtB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CACxE,iBAAiB,EACjB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAC9E,oBAAoB,EACpB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAChD;CAAG;AAEJ,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAChF,qBAAqB,EACrB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;CAC9D,CACF;CAAG;AAEJ,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAC5F,2BAA2B,EAC3B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/C;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7D;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAClD;CAAG;AAEJ,MAAM,OAAO,2BAA4B,SAAQ,MAAM,CAAC,WAAW,EAA+B,CAChG,6BAA6B,EAC7B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;CACpD,CACF;CAAG"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAClF,sBAAsB,EACtB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CACxE,iBAAiB,EACjB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,EAAyB,CACpF,uBAAuB,EACvB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAC9E,oBAAoB,EACpB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAChD;CAAG;AAEJ,kGAAkG;AAClG,MAAM,OAAO,8BAA+B,SAAQ,MAAM,CAAC,WAAW,EAAkC,CACtG,gCAAgC,EAChC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/C;CAAG;AAEJ,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAChF,qBAAqB,EACrB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;CAC9D,CACF;CAAG;AAEJ,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAC5F,2BAA2B,EAC3B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/C;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7D;CAAG;AAEJ,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAClD;CAAG;AAEJ,MAAM,OAAO,2BAA4B,SAAQ,MAAM,CAAC,WAAW,EAA+B,CAChG,6BAA6B,EAC7B;IACE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;CACpD,CACF;CAAG"}

package/dist/hash.d.ts

@@ -1,5 +1,11 @@
 import { Crypto, Effect } from "effect";
 import { FleetOperationError } from "./errors.js";
+import type { JobPayload } from "./model.js";
+/**
+ * The exact payload text bound into a job's approval hash. Approval displays
+ * use it to prove that every hash-bound field is shown to the approver.
+ */
+export declare const canonicalJobPayload: (payload: JobPayload) => string;
 export declare const jobHash: (host: string, actor: string, payload: {
     readonly kind: "nix.check";
 } | {
@@ -9,12 +15,136 @@ export declare const jobHash: (host: string, actor: string, payload: {
     readonly kind: "agent.delegate";
     readonly repository: string;
     readonly prompt: string;
-    readonly mode: "consult" | "review" | "work";
+    readonly mode: "consult" | "review" | "transition_summary" | "work";
     readonly channel?: "coordinator_chat";
 } | {
     readonly kind: "agent.message";
     readonly session: string;
     readonly message: string;
+} | {
+    readonly kind: "work.reconcile";
+    readonly repository: string;
+    readonly pullRequest: number;
+    readonly goalId: string;
+    readonly laneId: string;
+    readonly operationId: string;
+    readonly expectedRevision: number;
+    readonly expectedHead: string;
+    readonly newHead: string;
+    readonly expectedOwner: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly expectedGoalEventId: string;
+    readonly bindingDispatchRequestId: string;
+    readonly sessionId: string;
+    readonly expectedWork: string;
+    readonly worker: {
+        readonly host: string;
+        readonly agentId: string;
+        readonly name: string;
+        readonly paneId: string;
+        readonly relationship?: {
+            readonly parentAgentId: string;
+            readonly relation: "delegated" | "pair" | "review";
+        };
+    };
+    readonly worktree: string;
+    readonly branch: string;
+} | {
+    readonly kind: "work.admit";
+    readonly repository: string;
+    readonly pullRequest: number;
+    readonly reviewUrl: string;
+    readonly goalId: string;
+    readonly laneId: string;
+    readonly operationId: string;
+    readonly expectedAbsenceToken: string;
+    readonly head: string;
+    readonly baseHead: string;
+    readonly owner: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly sessionId: string;
+    readonly expectedWork: string;
+    readonly worker: {
+        readonly host: string;
+        readonly agentId: string;
+        readonly name: string;
+        readonly paneId: string;
+        readonly relationship?: {
+            readonly parentAgentId: string;
+            readonly relation: "delegated" | "pair" | "review";
+        };
+    };
+    readonly worktree: string;
+    readonly branch: string;
+    readonly title: string;
+    readonly summary: string;
+    readonly detail: string;
+} | {
+    readonly kind: "work.recover";
+    readonly repository: string;
+    readonly pullRequest: number;
+    readonly reviewUrl: string;
+    readonly goalId: string;
+    readonly laneId: string;
+    readonly operationId: string;
+    readonly expectedGoalEventId: string;
+    readonly expectedGoalUpdatedAt: number;
+    readonly expectedHistoryToken: string;
+    readonly head: string;
+    readonly baseHead: string;
+    readonly owner: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly sessionId: string;
+    readonly expectedWork: string;
+    readonly worker: {
+        readonly host: string;
+        readonly agentId: string;
+        readonly name: string;
+        readonly paneId: string;
+        readonly relationship?: {
+            readonly parentAgentId: string;
+            readonly relation: "delegated" | "pair" | "review";
+        };
+    };
+    readonly worktree: string;
+    readonly branch: string;
+} | {
+    readonly kind: "work.reassign";
+    readonly goalId: string;
+    readonly from: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly to: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly toAgent: {
+        readonly _tag: "clear";
+    } | {
+        readonly _tag: "keep";
+    } | {
+        readonly _tag: "set";
+        readonly agent: {
+            readonly host: string;
+            readonly agentId: string;
+            readonly name: string;
+            readonly paneId: string;
+            readonly relationship?: {
+                readonly parentAgentId: string;
+                readonly relation: "delegated" | "pair" | "review";
+            };
+        };
+    };
+    readonly reason: string;
+    readonly expectedGoalEventId: string;
+    readonly expectedGoalUpdatedAt: number;
 } | {
     readonly kind: "browser.mcp.recover";
 }) => Effect.Effect<string, FleetOperationError, Crypto.Crypto>;

package/dist/hash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAY,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAsBjD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;+DAkBlB,CAAA"}
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI5C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,YAAa,UAAU,KAAG,MAwIzD,CAAA;AAED,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+DAkBlB,CAAA"}

package/dist/hash.js

@@ -1,7 +1,12 @@
-import { Crypto, Effect, Encoding } from "effect";
+import { Crypto, Effect } from "effect";
+import { Hex } from "effect/encoding";
 import { FleetOperationError } from "./errors.js";
 const text = (value) => JSON.stringify(value);
-const canonicalPayload = (payload) => {
+/**
+ * The exact payload text bound into a job's approval hash. Approval displays
+ * use it to prove that every hash-bound field is shown to the approver.
+ */
+export const canonicalJobPayload = (payload) => {
     switch (payload.kind) {
         case "browser.mcp.recover":
             return `{"kind":${text(payload.kind)}}`;
@@ -13,16 +18,135 @@ const canonicalPayload = (payload) => {
             return `{"channel":${payload.channel === undefined ? "null" : text(payload.channel)},"kind":${text(payload.kind)},"mode":${text(payload.mode)},"prompt":${text(payload.prompt)},"repository":${text(payload.repository)}}`;
         case "agent.message":
             return `{"kind":${text(payload.kind)},"message":${text(payload.message)},"session":${text(payload.session)}}`;
+        case "work.reconcile":
+            return JSON.stringify({
+                kind: payload.kind,
+                repository: payload.repository,
+                pullRequest: payload.pullRequest,
+                goalId: payload.goalId,
+                laneId: payload.laneId,
+                operationId: payload.operationId,
+                expectedRevision: payload.expectedRevision,
+                expectedHead: payload.expectedHead,
+                newHead: payload.newHead,
+                expectedOwner: { id: payload.expectedOwner.id, name: payload.expectedOwner.name },
+                expectedGoalEventId: payload.expectedGoalEventId,
+                bindingDispatchRequestId: payload.bindingDispatchRequestId,
+                sessionId: payload.sessionId,
+                expectedWork: payload.expectedWork,
+                worker: {
+                    host: payload.worker.host,
+                    agentId: payload.worker.agentId,
+                    name: payload.worker.name,
+                    paneId: payload.worker.paneId,
+                    relationship: payload.worker.relationship === undefined ? null : {
+                        parentAgentId: payload.worker.relationship.parentAgentId,
+                        relation: payload.worker.relationship.relation
+                    }
+                },
+                worktree: payload.worktree,
+                branch: payload.branch
+            });
+        case "work.admit":
+            return JSON.stringify({
+                kind: payload.kind,
+                repository: payload.repository,
+                pullRequest: payload.pullRequest,
+                reviewUrl: payload.reviewUrl,
+                goalId: payload.goalId,
+                laneId: payload.laneId,
+                operationId: payload.operationId,
+                expectedAbsenceToken: payload.expectedAbsenceToken,
+                head: payload.head,
+                baseHead: payload.baseHead,
+                owner: { id: payload.owner.id, name: payload.owner.name },
+                sessionId: payload.sessionId,
+                expectedWork: payload.expectedWork,
+                worker: {
+                    host: payload.worker.host,
+                    agentId: payload.worker.agentId,
+                    name: payload.worker.name,
+                    paneId: payload.worker.paneId,
+                    relationship: payload.worker.relationship === undefined ? null : {
+                        parentAgentId: payload.worker.relationship.parentAgentId,
+                        relation: payload.worker.relationship.relation
+                    }
+                },
+                worktree: payload.worktree,
+                branch: payload.branch,
+                title: payload.title,
+                summary: payload.summary,
+                detail: payload.detail
+            });
+        case "work.recover":
+            return JSON.stringify({
+                kind: payload.kind,
+                repository: payload.repository,
+                pullRequest: payload.pullRequest,
+                reviewUrl: payload.reviewUrl,
+                goalId: payload.goalId,
+                laneId: payload.laneId,
+                operationId: payload.operationId,
+                expectedGoalEventId: payload.expectedGoalEventId,
+                expectedGoalUpdatedAt: payload.expectedGoalUpdatedAt,
+                expectedHistoryToken: payload.expectedHistoryToken,
+                head: payload.head,
+                baseHead: payload.baseHead,
+                owner: { id: payload.owner.id, name: payload.owner.name },
+                sessionId: payload.sessionId,
+                expectedWork: payload.expectedWork,
+                worker: {
+                    host: payload.worker.host,
+                    agentId: payload.worker.agentId,
+                    name: payload.worker.name,
+                    paneId: payload.worker.paneId,
+                    relationship: payload.worker.relationship === undefined
+                        ? null
+                        : {
+                            parentAgentId: payload.worker.relationship.parentAgentId,
+                            relation: payload.worker.relationship.relation
+                        }
+                },
+                worktree: payload.worktree,
+                branch: payload.branch
+            });
+        case "work.reassign":
+            return JSON.stringify({
+                kind: payload.kind,
+                goalId: payload.goalId,
+                from: { id: payload.from.id, name: payload.from.name },
+                to: { id: payload.to.id, name: payload.to.name },
+                toAgent: payload.toAgent._tag === "set"
+                    ? {
+                        _tag: payload.toAgent._tag,
+                        agent: {
+                            host: payload.toAgent.agent.host,
+                            agentId: payload.toAgent.agent.agentId,
+                            name: payload.toAgent.agent.name,
+                            paneId: payload.toAgent.agent.paneId,
+                            relationship: payload.toAgent.agent.relationship === undefined
+                                ? null
+                                : {
+                                    parentAgentId: payload.toAgent.agent.relationship.parentAgentId,
+                                    relation: payload.toAgent.agent.relationship.relation
+                                }
+                        }
+                    }
+                    : { _tag: payload.toAgent._tag },
+                reason: payload.reason,
+                expectedGoalEventId: payload.expectedGoalEventId,
+                expectedGoalUpdatedAt: payload.expectedGoalUpdatedAt
+            });
     }
 };
 export const jobHash = Effect.fn("Fleet.jobHash")(function* (host, actor, payload) {
     const cryptoService = yield* Crypto.Crypto;
-    const canonical = `{"actor":${text(actor)},"host":${text(host)},"payload":${canonicalPayload(payload)}}`;
+    const canonical = `{"actor":${text(actor)},"host":${text(host)},"payload":${canonicalJobPayload(payload)}}`;
     const digest = yield* cryptoService.digest("SHA-256", new TextEncoder().encode(canonical)).pipe(Effect.mapError((cause) => new FleetOperationError({
         cause,
         detail: "could not hash fleet job payload",
         operation: "fleet.job_hash"
     })));
-    return Encoding.encodeHex(digest);
+    return Hex.encode(digest);
 });
 //# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -1 +1 @@
-{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAE7D,MAAM,gBAAgB,GAAG,CAAC,OAAmB,EAAU,EAAE;IACvD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,qBAAqB;YACxB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA;QACpE,KAAK,gBAAgB;YACnB,OAAO,cAAc,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WACjF,IAAI,CAAC,OAAO,CAAC,IAAI,CACnB,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAA;QAC5G,KAAK,eAAe;YAClB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAA;IACjH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EACzD,IAAY,EACZ,KAAa,EACb,OAAmB;IAEnB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAC1C,MAAM,SAAS,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAA;IACxG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,KAAK;QACL,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CACL,CACF,CAAA;IACD,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AACnC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAmB,EAAU,EAAE;IACjE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,qBAAqB;YACxB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA;QACzC,KAAK,WAAW;YACd,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA;QACpE,KAAK,gBAAgB;YACnB,OAAO,cAAc,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WACjF,IAAI,CACF,OAAO,CAAC,IAAI,CAEhB,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAA;QAC5G,KAAK,eAAe;YAClB,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAA;QAC/G,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE;gBACjF,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;gBAC1D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;oBAC/B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;oBAC7B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC/D,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa;wBACxD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;qBAC/C;iBACF;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;QACJ,KAAK,YAAY;YACf,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;gBAClD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;oBAC/B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;oBAC7B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC/D,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa;wBACxD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;qBAC/C;iBACF;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;QACJ,KAAK,cAAc;YACjB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;gBACpD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;gBAClD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;oBAC/B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;oBAC7B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;wBACrD,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC;4BACA,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa;4BACxD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;yBAC/C;iBACJ;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;QACJ,KAAK,eAAe;YAClB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;gBACtD,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;gBAChD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK;oBACrC,CAAC,CAAC;wBACA,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;wBAC1B,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;4BAChC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;4BACtC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;4BAChC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;4BACpC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;gCAC5D,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC;oCACA,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa;oCAC/D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ;iCACtD;yBACJ;qBACF;oBACD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;aACrD,CAAC,CAAA;IACN,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EACzD,IAAY,EACZ,KAAa,EACb,OAAmB;IAEnB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAC1C,MAAM,SAAS,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAA;IAC3G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,KAAK;QACL,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CACL,CACF,CAAA;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC,CAAC,CAAA"}