@sentropic/h2a-cli 0.75.0 → 0.79.0

package/dist/runtime/blockage/notifiers.js

@@ -1,74 +0,0 @@
-/**
- * Blockage delivery adapters (DEC-092, EVO-3 Phase B). Connected peers already
- * get the `peer.blocked`/`peer.unblocked` MCP push (DEC-052) — these adapters
- * are for waking **disconnected** peers, mirroring the drumbeat relauncher
- * adapters (DEC-091). The real per-host wake command is install-time config
- * (D6 / EVO-1); here is the in-repo abstraction + the agy polling fallback,
- * behind an injectable runtime so it is unit-testable with no host.
- */
-import { spawnSync } from "node:child_process";
-export const defaultNotifierRuntime = {
-    run(file, args) {
-        const res = spawnSync(file, [...args], { stdio: "ignore" });
-        return res.status === 0;
-    }
-};
-/** Dry-run default: only logs what it would deliver. */
-export function loggingNotifier(write) {
-    return {
-        notify(blockage, peer) {
-            write(`blockage: would notify ${peer.instance}${peer.host ? ` (${peer.host})` : ""} of ${blockage.instance} blocked: ${blockage.reason}`);
-            return true;
-        }
-    };
-}
-/**
- * Wake a disconnected peer by running a configured per-host command. The
- * template substitutes `{instance}` (the blocked agent), `{reason}` and
- * `{peer}` (the peer being woken). The actual command per host (claude wake /
- * codex remote-control / gemini hooks) is supplied at install time (D6).
- */
-export function commandNotifier(options) {
-    const runtime = options.runtime ?? defaultNotifierRuntime;
-    return {
-        notify(blockage, peer) {
-            if (options.command.length === 0)
-                return false;
-            const subst = (s) => s
-                .replaceAll("{instance}", blockage.instance)
-                .replaceAll("{reason}", blockage.reason)
-                .replaceAll("{peer}", peer.instance);
-            const [file, ...args] = options.command.map(subst);
-            const ok = runtime.run(file, args);
-            options.log?.(`blockage[command]: notify ${peer.instance} of ${blockage.instance} → ${file} (${ok ? "ok" : "failed"})`);
-            return ok;
-        }
-    };
-}
-/**
- * The agy fallback: agy has no background daemon (capability matrix), so it
- * cannot be woken — its imported plugin polls `h2a blockage list` instead. This
- * adapter therefore declines (push is a no-op); it exists so a chain can mark a
- * peer as "poll-only" explicitly rather than silently dropping it.
- */
-export function pollingNotifier(options = {}) {
-    return {
-        notify(blockage, peer) {
-            options.log?.(`blockage[polling]: ${peer.instance} is poll-only (no daemon) — will see ${blockage.instance} via 'h2a blockage list'`);
-            return false;
-        }
-    };
-}
-/** Try each adapter in order; the first to deliver wins. */
-export function chainNotifier(...notifiers) {
-    return {
-        async notify(blockage, peer) {
-            for (const n of notifiers) {
-                if (await n.notify(blockage, peer))
-                    return true;
-            }
-            return false;
-        }
-    };
-}
-//# sourceMappingURL=notifiers.js.map

package/dist/runtime/blockage/notifiers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notifiers.js","sourceRoot":"","sources":["../../../src/runtime/blockage/notifiers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAsB/C,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,GAAG,CAAC,IAAI,EAAE,IAAI;QACZ,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF,CAAC;AAMF,wDAAwD;AACxD,MAAM,UAAU,eAAe,CAAC,KAA6B;IAC3D,OAAO;QACL,MAAM,CAAC,QAAQ,EAAE,IAAI;YACnB,KAAK,CACH,0BAA0B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,QAAQ,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,EAAE,CACnI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAI/B;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC;IAC1D,OAAO;QACL,MAAM,CAAC,QAAQ,EAAE,IAAI;YACnB,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC/C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAClC,CAAC;iBACE,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC;iBAC3C,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC;iBACvC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,EAAE,CACX,6BAA6B,IAAI,CAAC,QAAQ,OAAO,QAAQ,CAAC,QAAQ,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CACzG,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAAiC,EAAE;IACjE,OAAO;QACL,MAAM,CAAC,QAAQ,EAAE,IAAI;YACnB,OAAO,CAAC,GAAG,EAAE,CACX,sBAAsB,IAAI,CAAC,QAAQ,wCAAwC,QAAQ,CAAC,QAAQ,0BAA0B,CACvH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,GAAG,SAAsC;IACrE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI;YACzB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YAClD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/blockage/registry.d.ts

@@ -1,30 +0,0 @@
-/**
- * Durable blockage registry (DEC-092, EVO-3). Parallel to the drumbeat
- * registry: a peer's blockage must outlive the ~15s presence sweep so other
- * agents can see it and help. Stored at `<root>/.h2a/blockage/<safe-instance>.json`.
- * The `NotificationDispatcher` diffs this directory to push `peer.blocked` /
- * `peer.unblocked` to subscribed peers (DEC-052).
- */
-import type { H2ABlockage } from "@sentropic/h2a";
-export interface RaiseBlockageInput {
-    readonly instance: string;
-    readonly scope: string;
-    readonly reason: string;
-    readonly needs?: string;
-}
-/**
- * Raise (upsert) a blockage. A fresh raise clears any prior resolution — the
- * agent is blocked again, on possibly a new reason.
- */
-export declare function raiseBlockage(root: string, input: RaiseBlockageInput, now?: number): H2ABlockage;
-export declare function readBlockage(root: string, instance: string): H2ABlockage | undefined;
-export declare function listBlockages(root: string): H2ABlockage[];
-/**
- * Resolve a blockage (idempotent). Returns the resolved blockage, or undefined
- * if the instance has none recorded. Re-resolving keeps the first resolution.
- */
-export declare function resolveBlockage(root: string, instance: string, options?: {
-    by?: string;
-    now?: number;
-}): H2ABlockage | undefined;
-//# sourceMappingURL=registry.d.ts.map

package/dist/runtime/blockage/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/runtime/blockage/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAYlD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,kBAAkB,EACzB,GAAG,GAAE,MAAmB,GACvB,WAAW,CAWb;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAQpF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAmBzD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1C,WAAW,GAAG,SAAS,CAWzB"}

package/dist/runtime/blockage/registry.js

@@ -1,86 +0,0 @@
-/**
- * Durable blockage registry (DEC-092, EVO-3). Parallel to the drumbeat
- * registry: a peer's blockage must outlive the ~15s presence sweep so other
- * agents can see it and help. Stored at `<root>/.h2a/blockage/<safe-instance>.json`.
- * The `NotificationDispatcher` diffs this directory to push `peer.blocked` /
- * `peer.unblocked` to subscribed peers (DEC-052).
- */
-import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { localStorePaths, safePathSegment } from "../local-files/paths.js";
-function entryFile(root, instance) {
-    return join(localStorePaths(root).blockage, `${safePathSegment(instance)}.json`);
-}
-function ensureDir(root) {
-    mkdirSync(localStorePaths(root).blockage, { recursive: true });
-}
-/**
- * Raise (upsert) a blockage. A fresh raise clears any prior resolution — the
- * agent is blocked again, on possibly a new reason.
- */
-export function raiseBlockage(root, input, now = Date.now()) {
-    ensureDir(root);
-    const blockage = {
-        instance: input.instance,
-        scope: input.scope,
-        reason: input.reason,
-        ...(input.needs ? { needs: input.needs } : {}),
-        raisedAt: new Date(now).toISOString()
-    };
-    writeFileSync(entryFile(root, input.instance), `${JSON.stringify(blockage, null, 2)}\n`, "utf8");
-    return blockage;
-}
-export function readBlockage(root, instance) {
-    const file = entryFile(root, instance);
-    if (!existsSync(file))
-        return undefined;
-    try {
-        return JSON.parse(readFileSync(file, "utf8"));
-    }
-    catch {
-        return undefined;
-    }
-}
-export function listBlockages(root) {
-    const dir = localStorePaths(root).blockage;
-    let names;
-    try {
-        names = readdirSync(dir);
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return [];
-        throw err;
-    }
-    const out = [];
-    for (const name of names) {
-        if (!name.endsWith(".json"))
-            continue;
-        try {
-            out.push(JSON.parse(readFileSync(join(dir, name), "utf8")));
-        }
-        catch {
-            // skip malformed
-        }
-    }
-    return out;
-}
-/**
- * Resolve a blockage (idempotent). Returns the resolved blockage, or undefined
- * if the instance has none recorded. Re-resolving keeps the first resolution.
- */
-export function resolveBlockage(root, instance, options = {}) {
-    const current = readBlockage(root, instance);
-    if (!current)
-        return undefined;
-    if (current.resolvedAt !== undefined)
-        return current;
-    const resolved = {
-        ...current,
-        resolvedAt: new Date(options.now ?? Date.now()).toISOString(),
-        ...(options.by ? { resolvedBy: options.by } : {})
-    };
-    writeFileSync(entryFile(root, instance), `${JSON.stringify(resolved, null, 2)}\n`, "utf8");
-    return resolved;
-}
-//# sourceMappingURL=registry.js.map

package/dist/runtime/blockage/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/runtime/blockage/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE3E,SAAS,SAAS,CAAC,IAAY,EAAE,QAAgB;IAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAAyB,EACzB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAgB;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,QAAgB,EAChB,UAAyC,EAAE;IAE3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACrD,MAAM,QAAQ,GAAgB;QAC5B,GAAG,OAAO;QACV,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QAC7D,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IACF,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runtime/deploy/k8s-sidecar.d.ts

@@ -1,92 +0,0 @@
-/**
- * Kubernetes sidecar manifest renderer (DEC-058 / Scenario A of DEC-056).
- *
- * Produces a `containers` + `volumes` fragment that can be merged into an
- * existing Pod spec (typically a `remote` session Pod) so the
- * runtime CLI container and an `h2a mcp-serve` sidecar share the same
- * `<root>/.h2a/` directory through an `emptyDir`.
- *
- * Two image modes:
- *
- * - `npm-runtime` (default) — uses a generic `node:22-alpine` image and
- *   `npm i -g @sentropic/h2a-cli@<version>` at Pod start. No custom image
- *   to build. Trade-off: ~10s install latency on Pod start. Suitable for
- *   PoC and demos.
- *
- * - explicit image reference (e.g. `ghcr.io/rhanka/h2a-cli:0.1.20`) — uses
- *   the given image which is expected to provide `h2a` on PATH. No install
- *   at runtime. Suitable for production once a real image is published.
- *
- * The renderer is pure: no I/O, no filesystem access. The caller decides
- * whether to print the YAML or merge it into an existing manifest.
- */
-export interface K8sSidecarOptions {
-    /**
-     * Instance id to declare to h2a at session open. Defaults to a placeholder
-     * of `remote:${SESSION_ID}` if running inside the
-     * `@sentropic/remote` context — that env var is expected to be
-     * injected by the parent control plane.
-     */
-    readonly instance?: string;
-    /**
-     * Host hint passed to `h2a_session_open`. Defaults to "remote".
-     */
-    readonly host?: string;
-    /**
-     * Filesystem path where `<root>/.h2a/` lives inside the session Pod.
-     * Default `/workspace/.h2a`, matching `remote`'s PVC mount.
-     */
-    readonly root?: string;
-    /**
-     * Image strategy: `"npm-runtime"` (default) or a concrete OCI image
-     * reference (e.g. `"ghcr.io/rhanka/h2a-cli:0.1.20"`).
-     */
-    readonly image?: string;
-    /**
-     * Version pinned for the `npm i -g` line when `image = "npm-runtime"`.
-     * Defaults to `latest`. Pin to a known X.Y.Z for reproducible Pods.
-     */
-    readonly cliVersion?: string;
-    /**
-     * Sidecar container name. Default `h2a-mcp`.
-     */
-    readonly containerName?: string;
-    /**
-     * Shared volume name. Default `h2a-workspace`. The caller is responsible
-     * for ensuring the main runtime container mounts the same volume at the
-     * same path.
-     */
-    readonly volumeName?: string;
-    /**
-     * Resource requests/limits. Conservative defaults aligned with the
-     * `sentropic-remote` tenant contract (DEC-056).
-     */
-    readonly resources?: {
-        readonly requests?: {
-            cpu?: string;
-            memory?: string;
-        };
-        readonly limits?: {
-            cpu?: string;
-            memory?: string;
-        };
-    };
-}
-export interface K8sSidecarFragment {
-    /** Container spec to append to `spec.containers[]`. */
-    readonly container: Record<string, unknown>;
-    /** Volume spec to append to `spec.volumes[]`. */
-    readonly volume: Record<string, unknown>;
-    /** Volume mount the caller must also append to the main runtime container. */
-    readonly mainContainerVolumeMount: Record<string, unknown>;
-    /** Convenience: the rendered YAML of the full fragment. */
-    readonly yaml: string;
-}
-/**
- * Render a sidecar fragment suitable for merging into a `remote`
- * session Pod (or any host Pod that runs an interactive CLI and wants to
- * coordinate via h2a). Returns both the structured pieces (for programmatic
- * merging) and a YAML rendering (for `--print` style CLI use).
- */
-export declare function renderK8sSidecar(options?: K8sSidecarOptions): K8sSidecarFragment;
-//# sourceMappingURL=k8s-sidecar.d.ts.map

package/dist/runtime/deploy/k8s-sidecar.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s-sidecar.d.ts","sourceRoot":"","sources":["../../../src/runtime/deploy/k8s-sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AA8GD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,GAAE,iBAAsB,GAC9B,kBAAkB,CA+CpB"}

package/dist/runtime/deploy/k8s-sidecar.js

@@ -1,166 +0,0 @@
-/**
- * Kubernetes sidecar manifest renderer (DEC-058 / Scenario A of DEC-056).
- *
- * Produces a `containers` + `volumes` fragment that can be merged into an
- * existing Pod spec (typically a `remote` session Pod) so the
- * runtime CLI container and an `h2a mcp-serve` sidecar share the same
- * `<root>/.h2a/` directory through an `emptyDir`.
- *
- * Two image modes:
- *
- * - `npm-runtime` (default) — uses a generic `node:22-alpine` image and
- *   `npm i -g @sentropic/h2a-cli@<version>` at Pod start. No custom image
- *   to build. Trade-off: ~10s install latency on Pod start. Suitable for
- *   PoC and demos.
- *
- * - explicit image reference (e.g. `ghcr.io/rhanka/h2a-cli:0.1.20`) — uses
- *   the given image which is expected to provide `h2a` on PATH. No install
- *   at runtime. Suitable for production once a real image is published.
- *
- * The renderer is pure: no I/O, no filesystem access. The caller decides
- * whether to print the YAML or merge it into an existing manifest.
- */
-function defaultResources() {
-    return {
-        requests: { cpu: "50m", memory: "64Mi" },
-        limits: { cpu: "200m", memory: "256Mi" }
-    };
-}
-function buildCommand(imageStrategy, cliVersion, root) {
-    if (imageStrategy === "npm-runtime") {
-        return {
-            command: ["sh", "-c"],
-            args: [
-                [
-                    "set -euo pipefail",
-                    `npm i -g @sentropic/h2a-cli@${cliVersion}`,
-                    `mkdir -p ${root}`,
-                    `h2a init --root ${root} || true`,
-                    `exec h2a mcp-serve --root ${root}`
-                ].join(" && ")
-            ]
-        };
-    }
-    // Pre-built image case: assume `h2a` is on PATH.
-    return {
-        command: ["sh", "-c"],
-        args: [
-            [
-                "set -euo pipefail",
-                `mkdir -p ${root}`,
-                `h2a init --root ${root} || true`,
-                `exec h2a mcp-serve --root ${root}`
-            ].join(" && ")
-        ]
-    };
-}
-function renderYamlFragment(container, volume, mount) {
-    // A small hand-rolled YAML renderer keeps us dependency-free (no js-yaml).
-    // Format is intentionally vertical and indent-stable so a `kubectl apply`
-    // diff stays readable.
-    const lines = [];
-    lines.push("# h2a sidecar fragment — append to your session Pod spec");
-    lines.push("# (Scenario A of DEC-056 / DEC-058)");
-    lines.push("");
-    lines.push("spec:");
-    lines.push("  containers:");
-    lines.push(`    - name: ${container.name}`);
-    lines.push(`      image: ${container.image}`);
-    const cmd = container.command;
-    lines.push(`      command: ${JSON.stringify(cmd)}`);
-    const args = container.args;
-    lines.push(`      args:`);
-    for (const arg of args) {
-        lines.push(`        - ${JSON.stringify(arg)}`);
-    }
-    const env = container.env;
-    if (env.length > 0) {
-        lines.push("      env:");
-        for (const e of env) {
-            lines.push(`        - name: ${e.name}`);
-            lines.push(`          value: ${JSON.stringify(e.value)}`);
-        }
-    }
-    const mounts = container.volumeMounts;
-    lines.push("      volumeMounts:");
-    for (const m of mounts) {
-        lines.push(`        - name: ${m.name}`);
-        lines.push(`          mountPath: ${m.mountPath}`);
-    }
-    const res = container.resources;
-    if (res) {
-        lines.push("      resources:");
-        if (res.requests) {
-            lines.push("        requests:");
-            if (res.requests.cpu)
-                lines.push(`          cpu: ${res.requests.cpu}`);
-            if (res.requests.memory)
-                lines.push(`          memory: ${res.requests.memory}`);
-        }
-        if (res.limits) {
-            lines.push("        limits:");
-            if (res.limits.cpu)
-                lines.push(`          cpu: ${res.limits.cpu}`);
-            if (res.limits.memory)
-                lines.push(`          memory: ${res.limits.memory}`);
-        }
-    }
-    lines.push("");
-    lines.push("  # Also append this volume mount to the runtime CLI container:");
-    lines.push(`  #   - name: ${mount.name}`);
-    lines.push(`  #     mountPath: ${mount.mountPath}`);
-    lines.push("");
-    lines.push("  volumes:");
-    lines.push(`    - name: ${volume.name}`);
-    lines.push("      emptyDir: {}");
-    lines.push("");
-    return lines.join("\n");
-}
-/**
- * Render a sidecar fragment suitable for merging into a `remote`
- * session Pod (or any host Pod that runs an interactive CLI and wants to
- * coordinate via h2a). Returns both the structured pieces (for programmatic
- * merging) and a YAML rendering (for `--print` style CLI use).
- */
-export function renderK8sSidecar(options = {}) {
-    const containerName = options.containerName ?? "h2a-mcp";
-    const volumeName = options.volumeName ?? "h2a-workspace";
-    const root = options.root ?? "/workspace/.h2a";
-    const image = options.image && options.image !== "npm-runtime"
-        ? options.image
-        : "node:22-alpine";
-    const imageStrategy = options.image ?? "npm-runtime";
-    const cliVersion = options.cliVersion ?? "latest";
-    const host = options.host ?? "remote";
-    const instance = options.instance ?? "remote:${SESSION_ID:-unknown}";
-    const resources = options.resources ?? defaultResources();
-    const { command, args } = buildCommand(imageStrategy, cliVersion, root);
-    const container = {
-        name: containerName,
-        image,
-        command,
-        args,
-        env: [
-            { name: "H2A_INSTANCE", value: instance },
-            { name: "H2A_HOST", value: host },
-            { name: "H2A_ROOT", value: root }
-        ],
-        volumeMounts: [{ name: volumeName, mountPath: root }],
-        resources
-    };
-    const volume = {
-        name: volumeName,
-        emptyDir: {}
-    };
-    const mainContainerVolumeMount = {
-        name: volumeName,
-        mountPath: root
-    };
-    return {
-        container,
-        volume,
-        mainContainerVolumeMount,
-        yaml: renderYamlFragment(container, volume, mainContainerVolumeMount)
-    };
-}
-//# sourceMappingURL=k8s-sidecar.js.map

package/dist/runtime/deploy/k8s-sidecar.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s-sidecar.js","sourceRoot":"","sources":["../../../src/runtime/deploy/k8s-sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA4DH,SAAS,gBAAgB;IACvB,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QACxC,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,aAAqB,EACrB,UAAkB,EAClB,IAAY;IAEZ,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YACrB,IAAI,EAAE;gBACJ;oBACE,mBAAmB;oBACnB,+BAA+B,UAAU,EAAE;oBAC3C,YAAY,IAAI,EAAE;oBAClB,mBAAmB,IAAI,UAAU;oBACjC,6BAA6B,IAAI,EAAE;iBACpC,CAAC,IAAI,CAAC,MAAM,CAAC;aACf;SACF,CAAC;IACJ,CAAC;IACD,iDAAiD;IACjD,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QACrB,IAAI,EAAE;YACJ;gBACE,mBAAmB;gBACnB,YAAY,IAAI,EAAE;gBAClB,mBAAmB,IAAI,UAAU;gBACjC,6BAA6B,IAAI,EAAE;aACpC,CAAC,IAAI,CAAC,MAAM,CAAC;SACf;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAkC,EAClC,MAA+B,EAC/B,KAA8B;IAE9B,2EAA2E;IAC3E,0EAA0E;IAC1E,uBAAuB;IACvB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAmB,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAgB,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,GAA6C,CAAC;IACpE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,YAGvB,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAA2C,CAAC;IAClE,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM;gBACrB,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;gBACnB,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA6B,EAAE;IAE/B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC;IAC/C,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa;QAC9C,CAAC,CAAC,OAAO,CAAC,KAAK;QACf,CAAC,CAAC,gBAAgB,CAAC;IACvB,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,+BAA+B,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAE1D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAExE,MAAM,SAAS,GAA4B;QACzC,IAAI,EAAE,aAAa;QACnB,KAAK;QACL,OAAO;QACP,IAAI;QACJ,GAAG,EAAE;YACH,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE;YACzC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;YACjC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;SAClC;QACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrD,SAAS;KACV,CAAC;IAEF,MAAM,MAAM,GAA4B;QACtC,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,MAAM,wBAAwB,GAA4B;QACxD,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,OAAO;QACL,SAAS;QACT,MAAM;QACN,wBAAwB;QACxB,IAAI,EAAE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,wBAAwB,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/runtime/deploy/k8s-tenant.d.ts

@@ -1,86 +0,0 @@
-/**
- * Kubernetes cluster-tenant manifest renderer (DEC-067 / Scenario B of DEC-056).
- *
- * Where the sidecar renderer (DEC-058, Scenario A) injects an `h2a mcp-serve`
- * container into someone else's session Pod, the tenant renderer stands h2a up
- * as its own namespaced tenant with a shared **ReadWriteMany** store that
- * multiple Pods — potentially on different nodes — coordinate through. That
- * cross-Pod concurrency is only safe because the Deployment runs the store in
- * lease-lock mode (DEC-065/066) via `H2A_LOCK_MODE=lease`.
- *
- * The output is a complete multi-document manifest (Namespace + ResourceQuota
- * + PVC + Deployment) ready for `kubectl apply -f -`, not a fragment to merge.
- *
- * The renderer is pure: no I/O, no filesystem access. The caller decides
- * whether to print the YAML or write it to disk.
- */
-export interface K8sTenantOptions {
-    /**
-     * Kubernetes namespace for the tenant. Default `h2a`. The namespace is
-     * created by the manifest (a `Namespace` document is always emitted).
-     */
-    readonly namespace?: string;
-    /**
-     * Image strategy: `"npm-runtime"` (default) installs the CLI from npm onto a
-     * generic `node:22-alpine` base at Pod start; any other value is treated as a
-     * concrete OCI reference (e.g. `"ghcr.io/rhanka/h2a-cli:0.1.28"`) that
-     * already provides `h2a` on PATH.
-     */
-    readonly image?: string;
-    /**
-     * Version pinned for the `npm i -g` line when `image = "npm-runtime"`.
-     * Default `latest`. Pin to a known X.Y.Z for reproducible Pods.
-     */
-    readonly cliVersion?: string;
-    /**
-     * Mount path for the shared store inside each Pod. Default `/workspace/.h2a`.
-     */
-    readonly root?: string;
-    /**
-     * Number of coordinating Pods. Default 2 — the smallest replica count that
-     * actually exercises cross-Pod locking (the whole point of Scenario B).
-     */
-    readonly replicas?: number;
-    /**
-     * Requested size of the RWX PVC. Default `1Gi`.
-     */
-    readonly storage?: string;
-    /**
-     * `storageClassName` for the PVC. Must back a ReadWriteMany volume. Default
-     * unset (cluster default StorageClass); on Scaleway pass e.g. `"scw-bssd"`'s
-     * RWX-capable class. Left unset so the manifest stays portable.
-     */
-    readonly storageClass?: string;
-    /**
-     * Lease duration (ms) injected as `H2A_LEASE_MS`. Must exceed the longest
-     * critical section plus inter-host clock skew. Default 30000 (DEC-065).
-     */
-    readonly leaseMs?: number;
-    /**
-     * Per-Pod resource requests/limits. Conservative defaults.
-     */
-    readonly resources?: {
-        readonly requests?: {
-            cpu?: string;
-            memory?: string;
-        };
-        readonly limits?: {
-            cpu?: string;
-            memory?: string;
-        };
-    };
-}
-export interface K8sTenantManifest {
-    /** Structured documents in apply order (for programmatic consumers). */
-    readonly documents: ReadonlyArray<Record<string, unknown>>;
-    /** Convenience: the rendered multi-document YAML. */
-    readonly yaml: string;
-}
-/**
- * Render a complete cluster-tenant manifest for Scenario B of DEC-056: a
- * namespaced h2a Deployment backed by a shared ReadWriteMany store whose
- * cross-Pod concurrency is made safe by the lease lock (DEC-065/066), turned
- * on through the `H2A_LOCK_MODE=lease` env the Deployment injects.
- */
-export declare function renderK8sTenant(options?: K8sTenantOptions): K8sTenantManifest;
-//# sourceMappingURL=k8s-tenant.d.ts.map

package/dist/runtime/deploy/k8s-tenant.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s-tenant.d.ts","sourceRoot":"","sources":["../../../src/runtime/deploy/k8s-tenant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAwJD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,iBAAiB,CAkGjF"}