@sentropic/h2a-runtime 0.81.0

package/dist/forward.d.ts

@@ -0,0 +1,66 @@
+/**
+ * `remote forward` — expose a port of a session Pod on the local machine via
+ * `kubectl port-forward`. This is the low-level transport that serves the
+ * `uat-expose` capability (see protocol `uat-exposure-policy`): it lets you reach
+ * any web UI running inside a session Pod (a mail/UAT control UI, a dev server…)
+ * at http://localhost:<localPort>.
+ *
+ * The forward runs in the FOREGROUND until Ctrl-C (unlike the control-plane
+ * tunnel in tunnel.ts, which is a detached, pidfile-managed background child):
+ * here the user explicitly wants a live, visible session they tear down by hand.
+ *
+ * Pure, unit-tested helpers (no I/O) build the kubectl argv and the local URL;
+ * the impure runner wires them to a child process + SIGINT.
+ */
+import { listRemoteSessions } from "./attach.js";
+/** A leading ~ is expanded to the user's home dir (matches tunnel.ts/sync.ts). */
+export declare function expandHome(p: string): string;
+/** Pod name for a session id (matches the orchestrator: `session-<id>`). */
+export declare function sessionPodName(sessionId: string): string;
+/**
+ * `localPort:podPort` when a local port is given, else just `podPort` — kubectl
+ * then picks a free local port equal to (or, if taken, near) the pod port.
+ */
+export declare function portMapping(podPort: number, localPort?: number): string;
+/**
+ * Build the `kubectl port-forward` argv (without the leading "kubectl").
+ * Pure so it can be asserted in tests without touching the cluster.
+ */
+export declare function buildPortForwardArgs(args: {
+    namespace: string;
+    sessionId: string;
+    podPort: number;
+    localPort?: number;
+    address?: string;
+}): string[];
+/** Local URL the user can open once the forward is up. */
+export declare function localForwardUrl(podPort: number, localPort?: number): string;
+export type ForwardOptions = {
+    sessionId: string;
+    podPort: number;
+    localPort?: number;
+    address?: string;
+    /** Injectable for tests; defaults to the real listRemoteSessions. */
+    listSessions?: typeof listRemoteSessions;
+    /** Control-plane URL (needed to list sessions). */
+    remoteUrl: string;
+    stderr?: NodeJS.WriteStream;
+    stdout?: NodeJS.WriteStream;
+};
+/**
+ * Verify the session exists on the control-plane. Returns an error message
+ * (string) when it does NOT, or undefined when it does. Pure aside from the
+ * injected lister, so the "unknown session" path is unit-testable with a mock.
+ */
+export declare function ensureSessionExists(opts: {
+    sessionId: string;
+    remoteUrl: string;
+    listSessions: typeof listRemoteSessions;
+}): Promise<string | undefined>;
+/**
+ * Run `kubectl port-forward` in the FOREGROUND until Ctrl-C. Returns the process
+ * exit code: 0 on a clean SIGINT teardown, non-zero if kubectl itself failed.
+ * Verifies the session exists first; resolves with 1 (after printing) if not.
+ */
+export declare function forwardSessionPort(opts: ForwardOptions): Promise<number>;
+//# sourceMappingURL=forward.d.ts.map

package/dist/forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.d.ts","sourceRoot":"","sources":["../src/forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,EAAE,CAUX;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACzC,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,kBAAkB,CAAC;CACzC,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS9B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAqC9E"}

package/dist/forward.js

@@ -0,0 +1,141 @@
+/**
+ * `remote forward` — expose a port of a session Pod on the local machine via
+ * `kubectl port-forward`. This is the low-level transport that serves the
+ * `uat-expose` capability (see protocol `uat-exposure-policy`): it lets you reach
+ * any web UI running inside a session Pod (a mail/UAT control UI, a dev server…)
+ * at http://localhost:<localPort>.
+ *
+ * The forward runs in the FOREGROUND until Ctrl-C (unlike the control-plane
+ * tunnel in tunnel.ts, which is a detached, pidfile-managed background child):
+ * here the user explicitly wants a live, visible session they tear down by hand.
+ *
+ * Pure, unit-tested helpers (no I/O) build the kubectl argv and the local URL;
+ * the impure runner wires them to a child process + SIGINT.
+ */
+import { spawn } from "node:child_process";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getTunnel } from "./config.js";
+import { listRemoteSessions } from "./attach.js";
+/** A leading ~ is expanded to the user's home dir (matches tunnel.ts/sync.ts). */
+export function expandHome(p) {
+    return p.startsWith("~") ? join(homedir(), p.slice(1)) : p;
+}
+/** Pod name for a session id (matches the orchestrator: `session-<id>`). */
+export function sessionPodName(sessionId) {
+    return `session-${sessionId}`;
+}
+/**
+ * `localPort:podPort` when a local port is given, else just `podPort` — kubectl
+ * then picks a free local port equal to (or, if taken, near) the pod port.
+ */
+export function portMapping(podPort, localPort) {
+    return localPort === undefined ? String(podPort) : `${localPort}:${podPort}`;
+}
+/**
+ * Build the `kubectl port-forward` argv (without the leading "kubectl").
+ * Pure so it can be asserted in tests without touching the cluster.
+ */
+export function buildPortForwardArgs(args) {
+    const { namespace, sessionId, podPort, localPort, address } = args;
+    return [
+        "-n",
+        namespace,
+        "port-forward",
+        `--address=${address ?? "127.0.0.1"}`,
+        `pod/${sessionPodName(sessionId)}`,
+        portMapping(podPort, localPort),
+    ];
+}
+/** Local URL the user can open once the forward is up. */
+export function localForwardUrl(podPort, localPort) {
+    return `http://localhost:${localPort ?? podPort}`;
+}
+/**
+ * Verify the session exists on the control-plane. Returns an error message
+ * (string) when it does NOT, or undefined when it does. Pure aside from the
+ * injected lister, so the "unknown session" path is unit-testable with a mock.
+ */
+export async function ensureSessionExists(opts) {
+    const sessions = await opts.listSessions(opts.remoteUrl);
+    const found = sessions.some((s) => s.id === opts.sessionId);
+    if (found)
+        return undefined;
+    const known = sessions.map((s) => s.id);
+    return (`no remote session "${opts.sessionId}"` +
+        (known.length > 0 ? ` (live: ${known.join(", ")})` : " (no live sessions)"));
+}
+/**
+ * Run `kubectl port-forward` in the FOREGROUND until Ctrl-C. Returns the process
+ * exit code: 0 on a clean SIGINT teardown, non-zero if kubectl itself failed.
+ * Verifies the session exists first; resolves with 1 (after printing) if not.
+ */
+export async function forwardSessionPort(opts) {
+    const stderr = opts.stderr ?? process.stderr;
+    const stdout = opts.stdout ?? process.stdout;
+    const tunnel = getTunnel();
+    if (!tunnel) {
+        stderr.write("[remote] forward needs a tunnel configured (remote config tunnel …)\n");
+        return 1;
+    }
+    const listSessions = opts.listSessions ?? listRemoteSessions;
+    const missing = await ensureSessionExists({
+        sessionId: opts.sessionId,
+        remoteUrl: opts.remoteUrl,
+        listSessions,
+    });
+    if (missing) {
+        stderr.write(`[remote] ${missing}\n`);
+        return 1;
+    }
+    const args = buildPortForwardArgs({
+        namespace: tunnel.namespace,
+        sessionId: opts.sessionId,
+        podPort: opts.podPort,
+        ...(opts.localPort !== undefined ? { localPort: opts.localPort } : {}),
+        ...(opts.address !== undefined ? { address: opts.address } : {}),
+    });
+    const url = localForwardUrl(opts.podPort, opts.localPort);
+    stderr.write(`[remote] forwarding ${sessionPodName(opts.sessionId)} :${opts.podPort} → ${url}\n` +
+        `[remote] open ${url} — Ctrl-C to stop\n`);
+    return runPortForward(tunnel, args, stdout, stderr);
+}
+/**
+ * Spawn kubectl, pipe its output through, and turn Ctrl-C into a clean teardown
+ * (SIGINT → kill the child → resolve 0). Kept separate so forwardSessionPort
+ * stays readable; the env/KUBECONFIG wiring mirrors tunnel.ts.
+ */
+function runPortForward(tunnel, args, stdout, stderr) {
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    return new Promise((resolve) => {
+        const child = spawn("kubectl", [...args], {
+            stdio: ["ignore", "pipe", "pipe"],
+            env,
+        });
+        child.stdout?.pipe(stdout);
+        child.stderr?.pipe(stderr);
+        let interrupted = false;
+        const onSigint = () => {
+            interrupted = true;
+            child.kill("SIGINT");
+        };
+        process.on("SIGINT", onSigint);
+        const cleanup = () => {
+            process.removeListener("SIGINT", onSigint);
+        };
+        child.on("error", (err) => {
+            cleanup();
+            stderr.write(`[remote] kubectl port-forward failed: ${err.message}\n`);
+            resolve(1);
+        });
+        child.on("close", (code) => {
+            cleanup();
+            // A SIGINT teardown is the expected, successful end of a foreground
+            // forward — report 0 even though kubectl exits non-zero on the signal.
+            resolve(interrupted ? 0 : code ?? 0);
+        });
+    });
+}
+//# sourceMappingURL=forward.js.map

package/dist/forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.js","sourceRoot":"","sources":["../src/forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,WAAW,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,SAAkB;IAC7D,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACnE,OAAO;QACL,IAAI;QACJ,SAAS;QACT,cAAc;QACd,aAAa,OAAO,IAAI,WAAW,EAAE;QACrC,OAAO,cAAc,CAAC,SAAS,CAAC,EAAE;QAClC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAkB;IACjE,OAAO,oBAAoB,SAAS,IAAI,OAAO,EAAE,CAAC;AACpD,CAAC;AAeD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAIzC;IACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,KAAK;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxC,OAAO,CACL,sBAAsB,IAAI,CAAC,SAAS,GAAG;QACvC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CACV,uEAAuE,CACxE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;KACb,CAAC,CAAC;IACH,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CACV,uBAAuB,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,MAAM,GAAG,IAAI;QACjF,iBAAiB,GAAG,qBAAqB,CAC5C,CAAC;IAEF,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,MAAoB,EACpB,IAA2B,EAC3B,MAA0B,EAC1B,MAA0B;IAE1B,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtE,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACxC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG;SACJ,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACvE,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,oEAAoE;YACpE,uEAAuE;YACvE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gitdiff.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Git workspace alignment check for `remote diff --files`: compare the LOCAL
+ * workspace's git state with the session Pod's ($WORKSPACE_PATH), via kubectl
+ * exec. Only HEAD shas, branch names and modified file NAMES cross the wire —
+ * never any file content.
+ */
+export type GitStat = {
+    head: string;
+    branch: string;
+    /** Modified/untracked file names from `git status --porcelain` (names only). */
+    dirty: string[];
+};
+/** File names (only) out of `git status --porcelain` output. */
+export declare function parsePorcelain(out: string): string[];
+/** Git state of the LOCAL workspace directory (or undefined if not a repo). */
+export declare function localGitStat(workspacePath: string): GitStat | undefined;
+/** Git state of the Pod's $WORKSPACE_PATH (computed in-Pod, names only). */
+export declare function remoteGitStat(sessionId: string): GitStat | undefined;
+export type Ancestry = "local-ahead" | "remote-ahead" | "unknown";
+/**
+ * Which HEAD descends from the other, resolved with LOCAL git objects only
+ * (the remote HEAD is usually known locally after a fetch; otherwise unknown).
+ */
+export declare function localAncestry(workspacePath: string, localHead: string, remoteHead: string): Ancestry;
+export type GitVerdict = {
+    state: "in-sync" | "local-ahead" | "remote-ahead" | "diverged" | "missing";
+    detail: string;
+};
+/** Pure verdict from both git states (+ HEAD ancestry when heads differ). */
+export declare function gitAlignment(local: GitStat | undefined, remote: GitStat | undefined, ancestry?: Ancestry): GitVerdict;
+//# sourceMappingURL=gitdiff.d.ts.map

package/dist/gitdiff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitdiff.d.ts","sourceRoot":"","sources":["../src/gitdiff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAMF,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAUpD;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAUvE;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAmCpE;AAED,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAElE;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,QAAQ,CAQV;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3E,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAQF,6EAA6E;AAC7E,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,GAAG,SAAS,EAC1B,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,GAAE,QAAoB,GAC7B,UAAU,CAmCZ"}

package/dist/gitdiff.js

@@ -0,0 +1,133 @@
+/**
+ * Git workspace alignment check for `remote diff --files`: compare the LOCAL
+ * workspace's git state with the session Pod's ($WORKSPACE_PATH), via kubectl
+ * exec. Only HEAD shas, branch names and modified file NAMES cross the wire —
+ * never any file content.
+ */
+import { spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getTunnel } from "./config.js";
+function expandHome(p) {
+    return p.startsWith("~") ? join(homedir(), p.slice(1)) : p;
+}
+/** File names (only) out of `git status --porcelain` output. */
+export function parsePorcelain(out) {
+    const files = [];
+    for (const line of out.split("\n")) {
+        if (line.trim() === "")
+            continue;
+        let p = line.slice(3); // "XY <path>"
+        const arrow = p.indexOf(" -> "); // rename: "old -> new" — keep the new name
+        if (arrow !== -1)
+            p = p.slice(arrow + 4);
+        files.push(p.replace(/^"(.*)"$/, "$1"));
+    }
+    return files;
+}
+/** Git state of the LOCAL workspace directory (or undefined if not a repo). */
+export function localGitStat(workspacePath) {
+    const run = (args) => spawnSync("git", ["-C", workspacePath, ...args], { encoding: "utf8" });
+    const head = run(["rev-parse", "HEAD"]);
+    if (head.status !== 0)
+        return undefined;
+    return {
+        head: head.stdout.trim(),
+        branch: run(["rev-parse", "--abbrev-ref", "HEAD"]).stdout.trim(),
+        dirty: parsePorcelain(run(["status", "--porcelain"]).stdout),
+    };
+}
+/** Git state of the Pod's $WORKSPACE_PATH (computed in-Pod, names only). */
+export function remoteGitStat(sessionId) {
+    const tunnel = getTunnel();
+    if (!tunnel)
+        return undefined;
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    const script = `cd "$WORKSPACE_PATH" || exit 1; ` +
+        `git rev-parse HEAD 2>/dev/null || exit 1; ` +
+        `git rev-parse --abbrev-ref HEAD 2>/dev/null; ` +
+        `git status --porcelain 2>/dev/null`;
+    const r = spawnSync("kubectl", [
+        "-n",
+        tunnel.namespace,
+        "exec",
+        `session-${sessionId}`,
+        "-c",
+        "session-agent",
+        "--",
+        "bash",
+        "-lc",
+        script,
+    ], { encoding: "utf8", env });
+    if (r.status !== 0)
+        return undefined;
+    const lines = r.stdout.split("\n");
+    const head = (lines[0] ?? "").trim();
+    if (!head)
+        return undefined;
+    return {
+        head,
+        branch: (lines[1] ?? "").trim(),
+        dirty: parsePorcelain(lines.slice(2).join("\n")),
+    };
+}
+/**
+ * Which HEAD descends from the other, resolved with LOCAL git objects only
+ * (the remote HEAD is usually known locally after a fetch; otherwise unknown).
+ */
+export function localAncestry(workspacePath, localHead, remoteHead) {
+    const isAncestor = (a, b) => spawnSync("git", ["-C", workspacePath, "merge-base", "--is-ancestor", a, b], {
+        encoding: "utf8",
+    }).status === 0;
+    if (isAncestor(remoteHead, localHead))
+        return "local-ahead";
+    if (isAncestor(localHead, remoteHead))
+        return "remote-ahead";
+    return "unknown";
+}
+function names(files) {
+    return files.length <= 4
+        ? files.join(", ")
+        : `${files.slice(0, 4).join(", ")}, +${files.length - 4} more`;
+}
+/** Pure verdict from both git states (+ HEAD ancestry when heads differ). */
+export function gitAlignment(local, remote, ancestry = "unknown") {
+    if (!local && !remote)
+        return { state: "missing", detail: "no git repo either side" };
+    if (!remote) {
+        return { state: "missing", detail: "Pod workspace is not a git repo (or unreachable)" };
+    }
+    if (!local)
+        return { state: "missing", detail: "local workspace is not a git repo" };
+    const sameHead = local.head === remote.head;
+    const branchTxt = local.branch === remote.branch
+        ? `branch ${local.branch}`
+        : `branch ${local.branch} (local) vs ${remote.branch} (remote)`;
+    const headTxt = sameHead
+        ? `HEAD ${local.head.slice(0, 7)} identical`
+        : `HEAD differs: ${local.head.slice(0, 7)} (local) vs ${remote.head.slice(0, 7)} (remote)`;
+    const dirtyTxt = [
+        local.dirty.length > 0 ? `local modified: ${names(local.dirty)}` : "local clean",
+        remote.dirty.length > 0 ? `remote modified: ${names(remote.dirty)}` : "remote clean",
+    ].join("; ");
+    const detail = `${headTxt} [${branchTxt}] — ${dirtyTxt}`;
+    if (sameHead) {
+        if (local.dirty.length === 0 && remote.dirty.length === 0)
+            return { state: "in-sync", detail };
+        if (remote.dirty.length === 0)
+            return { state: "local-ahead", detail };
+        if (local.dirty.length === 0)
+            return { state: "remote-ahead", detail };
+        return { state: "diverged", detail: `${detail} (both sides modified)` };
+    }
+    if (ancestry === "local-ahead" && remote.dirty.length === 0) {
+        return { state: "local-ahead", detail: `${detail} (remote HEAD is an ancestor of local)` };
+    }
+    if (ancestry === "remote-ahead" && local.dirty.length === 0) {
+        return { state: "remote-ahead", detail: `${detail} (local HEAD is an ancestor of remote)` };
+    }
+    return { state: "diverged", detail };
+}
+//# sourceMappingURL=gitdiff.js.map

package/dist/gitdiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitdiff.js","sourceRoot":"","sources":["../src/gitdiff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AASxC,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;QAC5E,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,aAAqB;IAChD,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAC7B,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAChE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,MAAM,GACV,kCAAkC;QAClC,4CAA4C;QAC5C,+CAA+C;QAC/C,oCAAoC,CAAC;IACvC,MAAM,CAAC,GAAG,SAAS,CACjB,SAAS,EACT;QACE,IAAI;QACJ,MAAM,CAAC,SAAS;QAChB,MAAM;QACN,WAAW,SAAS,EAAE;QACtB,IAAI;QACJ,eAAe;QACf,IAAI;QACJ,MAAM;QACN,KAAK;QACL,MAAM;KACP,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAC1B,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC/B,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,SAAiB,EACjB,UAAkB;IAElB,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAC1C,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE;QAC3E,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAClB,IAAI,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,aAAa,CAAC;IAC5D,IAAI,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC;QAAE,OAAO,cAAc,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,SAAS,KAAK,CAAC,KAAe;IAC5B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAC1B,KAA0B,EAC1B,MAA2B,EAC3B,WAAqB,SAAS;IAE9B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACtF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAErF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;IAC5C,MAAM,SAAS,GACb,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAC5B,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE;QAC1B,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,eAAe,MAAM,CAAC,MAAM,WAAW,CAAC;IACpE,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY;QAC5C,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC;IAC7F,MAAM,QAAQ,GAAG;QACf,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc;KACrF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC;IAEzD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACvD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,wCAAwC,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,QAAQ,KAAK,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,wCAAwC,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC"}

package/dist/h2a-bridge.d.ts

@@ -0,0 +1,102 @@
+/**
+ * h2a bridge (`remote h2a bridge`): connect the LOCAL h2a agent network — a
+ * file store under ~/h2a-workspace/.h2a where agents exchange JSON envelopes
+ * by dropping them into inbox/<instance-dir>/ — with a remote session Pod, so
+ * the Pod's agent is reachable/wakeable from the local bus and vice versa.
+ *
+ * Everything rides `kubectl exec` against the configured tunnel (same pattern
+ * as soft-refresh/sync), base64 on the wire — encoded exactly ONCE per
+ * direction, never double-encoded. Two flows per pass:
+ *
+ *  PULL  Pod → local: envelopes the Pod's agent EMITTED toward non-Pod
+ *        instances (every Pod inbox/<dir>/ except the Pod's own instances')
+ *        land in the same-named local inbox dir.
+ *  PUSH  local → Pod: envelopes locally addressed TO the Pod's instances
+ *        (local inbox/<pod-instance-dir>/) land in the Pod's inbox.
+ *
+ * Idempotent by FILE NAME: a file that already exists on the destination is
+ * skipped — never overwritten. The bridge NEVER deletes anything on either
+ * side: acks/cleanup belong to h2a itself, the bridge is transport only.
+ *
+ * The Pod's instances are the union of a default mapping
+ * `<tool>:remote:<sessionId>` (tool from the session profile) and whatever is
+ * registered in the Pod's own registry/instances.jsonl. Instance ids map to
+ * inbox dir names by encoding ":" as "__" (h2a convention, e.g.
+ * `claude:remote:abc123` → `claude__remote__abc123`).
+ *
+ * A Pod without ~/h2a-workspace/.h2a gets the skeleton (inbox/) plus a
+ * README.md documenting the envelope-drop convention, so agents in the Pod
+ * can participate by writing plain JSON files — no h2a binary required.
+ */
+/** h2a store root in the Pod, relative to $HOME (used as "$HOME/<this>"). */
+export declare const H2A_POD_ROOT = "h2a-workspace/.h2a";
+/** Local h2a store root (the agent network's shared filesystem). */
+export declare function defaultLocalH2aRoot(): string;
+/** Inbox dir name for an instance id — h2a encodes ":" as "__" on disk. */
+export declare function instanceInboxDir(instance: string): string;
+/** Default h2a instance id for a session Pod's agent: <tool>:remote:<sessionId>. */
+export declare function defaultPodInstance(sessionId: string, profile?: string): string;
+export type BridgeFile = {
+    dir: string;
+    file: string;
+};
+export type BridgePlan = {
+    /** Pod → local: new envelopes the Pod's agent emitted toward non-Pod instances. */
+    pull: BridgeFile[];
+    /** local → Pod: new envelopes locally addressed to the Pod's instances. */
+    push: BridgeFile[];
+    /** Files already present on their destination — skipped, NEVER overwritten. */
+    skipped: number;
+    /** Entries with unsafe/malformed names, ignored entirely. */
+    ignored: number;
+};
+/**
+ * Pure sync plan: given the two inbox listings ("dir/file" entries) and the
+ * set of inbox dirs owned by the Pod's instances, decide what moves where.
+ * No deletion exists in the model — the plan can only copy or skip.
+ */
+export declare function planBridge(args: {
+    podFiles: ReadonlyArray<string>;
+    localFiles: ReadonlyArray<string>;
+    podInstanceDirs: ReadonlySet<string>;
+}): BridgePlan;
+/**
+ * Parse the single listing exec's output: an `==INSTANCES==` section (one
+ * registered instance id per line, from the Pod's registry/instances.jsonl)
+ * then a `==FILES==` section ("dir/file" per line, relative to the Pod's
+ * inbox/). Anything before the first marker (login-shell noise) is ignored.
+ */
+export declare function parsePodListing(out: string): {
+    instances: string[];
+    files: string[];
+};
+export type H2aBridgeOptions = {
+    /** Session profile (claude/codex/…) for the default Pod instance mapping. */
+    profile?: string;
+    /** Local h2a store root (default ~/h2a-workspace/.h2a; tests: a scratch dir). */
+    localRoot?: string;
+    stderr?: NodeJS.WriteStream;
+};
+export type H2aBridgeResult = {
+    sessionId: string;
+    /** New envelopes copied Pod → local. */
+    pulled: number;
+    /** New envelopes copied local → Pod. */
+    pushed: number;
+    /** Already-present (or destination-existing) files left untouched. */
+    skipped: number;
+    /** Per-file transfer errors (the pass continues; details on stderr). */
+    failed: number;
+    /** true when the Pod's ~/h2a-workspace/.h2a skeleton was created this pass. */
+    scaffolded: boolean;
+    /** Inbox dirs treated as the Pod's own (push targets, excluded from pull). */
+    podInstanceDirs: string[];
+};
+/**
+ * One bridge pass for a session Pod: scaffold the Pod store if missing, list
+ * both sides, then PULL new Pod-emitted envelopes and PUSH new locally
+ * addressed ones. Returns counters only — envelope content is transferred
+ * verbatim but never printed.
+ */
+export declare function bridgeSession(sessionId: string, options?: H2aBridgeOptions): Promise<H2aBridgeResult>;
+//# sourceMappingURL=h2a-bridge.d.ts.map

package/dist/h2a-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"h2a-bridge.d.ts","sourceRoot":"","sources":["../src/h2a-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAeH,6EAA6E;AAC7E,eAAO,MAAM,YAAY,uBAAuB,CAAC;AAEjD,oEAAoE;AACpE,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAyBD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAER;AAUD,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,MAAM,MAAM,UAAU,GAAG;IACvB,mFAAmF;IACnF,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,2EAA2E;IAC3E,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACtC,GAAG,UAAU,CA8Cb;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG;IAC5C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAmBA;AA4DD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;IACpB,8EAA8E;IAC9E,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAmBF;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAuI1B"}