@sentropic/h2a-runtime 0.81.0

package/dist/h2a-bridge.js

@@ -0,0 +1,333 @@
+/**
+ * h2a bridge (`remote h2a bridge`): connect the LOCAL h2a agent network — a
+ * file store under ~/h2a-workspace/.h2a where agents exchange JSON envelopes
+ * by dropping them into inbox/<instance-dir>/ — with a remote session Pod, so
+ * the Pod's agent is reachable/wakeable from the local bus and vice versa.
+ *
+ * Everything rides `kubectl exec` against the configured tunnel (same pattern
+ * as soft-refresh/sync), base64 on the wire — encoded exactly ONCE per
+ * direction, never double-encoded. Two flows per pass:
+ *
+ *  PULL  Pod → local: envelopes the Pod's agent EMITTED toward non-Pod
+ *        instances (every Pod inbox/<dir>/ except the Pod's own instances')
+ *        land in the same-named local inbox dir.
+ *  PUSH  local → Pod: envelopes locally addressed TO the Pod's instances
+ *        (local inbox/<pod-instance-dir>/) land in the Pod's inbox.
+ *
+ * Idempotent by FILE NAME: a file that already exists on the destination is
+ * skipped — never overwritten. The bridge NEVER deletes anything on either
+ * side: acks/cleanup belong to h2a itself, the bridge is transport only.
+ *
+ * The Pod's instances are the union of a default mapping
+ * `<tool>:remote:<sessionId>` (tool from the session profile) and whatever is
+ * registered in the Pod's own registry/instances.jsonl. Instance ids map to
+ * inbox dir names by encoding ":" as "__" (h2a convention, e.g.
+ * `claude:remote:abc123` → `claude__remote__abc123`).
+ *
+ * A Pod without ~/h2a-workspace/.h2a gets the skeleton (inbox/) plus a
+ * README.md documenting the envelope-drop convention, so agents in the Pod
+ * can participate by writing plain JSON files — no h2a binary required.
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getTunnel } from "./config.js";
+/** h2a store root in the Pod, relative to $HOME (used as "$HOME/<this>"). */
+export const H2A_POD_ROOT = "h2a-workspace/.h2a";
+/** Local h2a store root (the agent network's shared filesystem). */
+export function defaultLocalH2aRoot() {
+    return join(homedir(), "h2a-workspace", ".h2a");
+}
+/** Inbox dir name for an instance id — h2a encodes ":" as "__" on disk. */
+export function instanceInboxDir(instance) {
+    return instance.replace(/:/g, "__");
+}
+/**
+ * Tool segment of the default Pod instance, from the session profile (same
+ * mapping as the local registry's coerceRegistryTool; unknown profiles keep
+ * their own name so the dir stays predictable).
+ */
+function profileTool(profile) {
+    switch (profile) {
+        case "claude":
+        case "claude-code":
+            return "claude";
+        case "codex":
+            return "codex";
+        case "agy":
+        case "antigravity":
+            return "agy";
+        case "gemini":
+        case "mistral":
+            return profile;
+        default:
+            return profile && profile.length > 0 ? profile : "claude";
+    }
+}
+/** Default h2a instance id for a session Pod's agent: <tool>:remote:<sessionId>. */
+export function defaultPodInstance(sessionId, profile) {
+    return `${profileTool(profile)}:remote:${sessionId}`;
+}
+/**
+ * Names embedded in kubectl-exec scripts are restricted to this shape (the
+ * observed h2a convention: `claude__track__abc/env__...json`). Anything else
+ * — path tricks, quotes, whitespace — is IGNORED, never executed.
+ */
+const SAFE_ENTRY = /^[A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*\.json$/;
+/**
+ * Pure sync plan: given the two inbox listings ("dir/file" entries) and the
+ * set of inbox dirs owned by the Pod's instances, decide what moves where.
+ * No deletion exists in the model — the plan can only copy or skip.
+ */
+export function planBridge(args) {
+    const { podInstanceDirs } = args;
+    const split = (entry) => {
+        const slash = entry.indexOf("/");
+        return { dir: entry.slice(0, slash), file: entry.slice(slash + 1) };
+    };
+    let skipped = 0;
+    let ignored = 0;
+    const podSet = new Set();
+    const pull = [];
+    const push = [];
+    for (const entry of args.podFiles) {
+        if (!SAFE_ENTRY.test(entry)) {
+            ignored += 1;
+            continue;
+        }
+        podSet.add(entry);
+    }
+    const localSet = new Set();
+    for (const entry of args.localFiles) {
+        if (!SAFE_ENTRY.test(entry)) {
+            ignored += 1;
+            continue;
+        }
+        localSet.add(entry);
+    }
+    // PULL: Pod inbox dirs that are NOT the Pod's own — outbound envelopes.
+    for (const entry of podSet) {
+        const f = split(entry);
+        if (podInstanceDirs.has(f.dir))
+            continue; // the Pod's own inbox: inbound, not pulled
+        if (localSet.has(entry))
+            skipped += 1;
+        else
+            pull.push(f);
+    }
+    // PUSH: local envelopes addressed to the Pod's instances.
+    for (const entry of localSet) {
+        const f = split(entry);
+        if (!podInstanceDirs.has(f.dir))
+            continue;
+        if (podSet.has(entry))
+            skipped += 1;
+        else
+            push.push(f);
+    }
+    return { pull, push, skipped, ignored };
+}
+/**
+ * Parse the single listing exec's output: an `==INSTANCES==` section (one
+ * registered instance id per line, from the Pod's registry/instances.jsonl)
+ * then a `==FILES==` section ("dir/file" per line, relative to the Pod's
+ * inbox/). Anything before the first marker (login-shell noise) is ignored.
+ */
+export function parsePodListing(out) {
+    const instances = [];
+    const files = [];
+    let section = "none";
+    for (const raw of out.split("\n")) {
+        const line = raw.trim();
+        if (line === "==INSTANCES==") {
+            section = "instances";
+            continue;
+        }
+        if (line === "==FILES==") {
+            section = "files";
+            continue;
+        }
+        if (line.length === 0)
+            continue;
+        if (section === "instances")
+            instances.push(line);
+        else if (section === "files")
+            files.push(line);
+    }
+    return { instances, files };
+}
+function expandHome(p) {
+    return p.startsWith("~") ? join(homedir(), p.slice(1)) : p;
+}
+/** Exec a bash -lc script in the session-agent container. Throws on non-zero. */
+function execPod(tunnel, pod, script, input) {
+    const args = ["-n", tunnel.namespace, "exec"];
+    if (input !== undefined)
+        args.push("-i");
+    args.push(pod, "-c", "session-agent", "--", "bash", "-lc", script);
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    const r = spawnSync("kubectl", args, {
+        encoding: "utf8",
+        env,
+        maxBuffer: 64 * 1024 * 1024,
+        ...(input !== undefined ? { input } : {}),
+    });
+    if (r.status !== 0) {
+        // stderr only (kubectl/bash diagnostics) — never envelope content.
+        throw new Error(`kubectl exec failed: ${(r.stderr || "").trim().slice(0, 200)}`);
+    }
+    return r.stdout;
+}
+/**
+ * README dropped in the Pod when the skeleton is created: documents the
+ * envelope-drop convention so agents in the Pod can join the h2a network by
+ * writing plain JSON files, with no h2a binary installed.
+ */
+function podReadme(podInboxDir) {
+    return [
+        "# h2a store (bridged)",
+        "",
+        "This directory is an h2a file store kept in sync with the operator's",
+        "local ~/h2a-workspace/.h2a by `remote h2a bridge` (no h2a binary needed",
+        "in this Pod).",
+        "",
+        "To MESSAGE another agent, write a JSON envelope",
+        '  { "protocol": "sentropic.h2a", "version": "0.1", "id": "env:<ts>:<slug>",',
+        '    "type": "event", "actor": { "instance", "role", "scope" }, "body", "createdAt" }',
+        "to inbox/<instance-dir>/env__<ts>__<slug>.json, where <instance-dir> is",
+        'the target instance id with ":" replaced by "__"',
+        "(claude:track:abc -> claude__track__abc).",
+        "",
+        `Your own inbox is inbox/${podInboxDir}/ — check it for new envelopes.`,
+        "The bridge never deletes files; acks/cleanup belong to h2a on the local",
+        "side. Existing file names are never overwritten.",
+        "",
+    ].join("\n");
+}
+/** List local inbox entries as "dir/file" (missing store = empty listing). */
+function listLocalInbox(localRoot) {
+    const inbox = join(localRoot, "inbox");
+    if (!existsSync(inbox))
+        return [];
+    const entries = [];
+    for (const dir of readdirSync(inbox, { withFileTypes: true })) {
+        if (!dir.isDirectory())
+            continue;
+        for (const f of readdirSync(join(inbox, dir.name), {
+            withFileTypes: true,
+        })) {
+            if (f.isFile() && f.name.endsWith(".json"))
+                entries.push(`${dir.name}/${f.name}`);
+        }
+    }
+    return entries;
+}
+/**
+ * One bridge pass for a session Pod: scaffold the Pod store if missing, list
+ * both sides, then PULL new Pod-emitted envelopes and PUSH new locally
+ * addressed ones. Returns counters only — envelope content is transferred
+ * verbatim but never printed.
+ */
+export async function bridgeSession(sessionId, options = {}) {
+    const stderr = options.stderr ?? process.stderr;
+    const tunnel = getTunnel();
+    if (!tunnel) {
+        throw new Error("h2a bridge needs a tunnel configured (remote config tunnel …)");
+    }
+    const pod = `session-${sessionId}`;
+    const localRoot = options.localRoot ?? defaultLocalH2aRoot();
+    const podInbox = `$HOME/${H2A_POD_ROOT}/inbox`;
+    const defaultDir = instanceInboxDir(defaultPodInstance(sessionId, options.profile));
+    // 1. Pod skeleton: create inbox/ + README on first contact, so Pod agents
+    // can drop envelopes even without the h2a binary. Never touches an existing
+    // store.
+    const scaffold = execPod(tunnel, pod, [
+        `root="$HOME/${H2A_POD_ROOT}"`,
+        `if [ -d "$root/inbox" ]; then echo h2a-store-exists; else`,
+        `mkdir -p "$root/inbox/${defaultDir}"`,
+        `cat > "$root/README.md" <<'H2ADOC'`,
+        podReadme(defaultDir),
+        `H2ADOC`,
+        `echo h2a-store-created`,
+        `fi`,
+    ].join("\n"));
+    const scaffolded = scaffold.includes("h2a-store-created");
+    // 2. One listing exec: the Pod's registered instances + its inbox files.
+    const listing = parsePodListing(execPod(tunnel, pod, [
+        `cd "$HOME/${H2A_POD_ROOT}" 2>/dev/null || exit 0`,
+        `echo ==INSTANCES==`,
+        `sed -n 's/.*"instance"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' registry/instances.jsonl 2>/dev/null`,
+        `echo ==FILES==`,
+        `shopt -s nullglob`,
+        `for f in inbox/*/*.json; do printf '%s\\n' "\${f#inbox/}"; done`,
+    ].join("\n")));
+    const podInstanceDirs = new Set([defaultDir]);
+    for (const instance of listing.instances) {
+        podInstanceDirs.add(instanceInboxDir(instance));
+    }
+    // 3. Plan: pure decision over the two listings.
+    const plan = planBridge({
+        podFiles: listing.files,
+        localFiles: listLocalInbox(localRoot),
+        podInstanceDirs,
+    });
+    if (plan.ignored > 0) {
+        stderr.write(`[remote] h2a bridge ${sessionId}: ignored ${plan.ignored} unsafe inbox entry name(s)\n`);
+    }
+    let pulled = 0;
+    let pushed = 0;
+    let skipped = plan.skipped;
+    let failed = 0;
+    // 4. PULL Pod → local (encoded ONCE in the Pod, decoded ONCE here).
+    for (const f of plan.pull) {
+        const dst = join(localRoot, "inbox", f.dir, f.file);
+        if (existsSync(dst)) {
+            skipped += 1; // appeared since the listing — never overwrite
+            continue;
+        }
+        try {
+            const b64 = execPod(tunnel, pod, `base64 < "${podInbox}/${f.dir}/${f.file}" | tr -d '\\n'`);
+            mkdirSync(join(localRoot, "inbox", f.dir), { recursive: true });
+            writeFileSync(dst, Buffer.from(b64.trim(), "base64"));
+            pulled += 1;
+        }
+        catch (error) {
+            failed += 1;
+            stderr.write(`[remote] h2a bridge ${sessionId}: pull ${f.dir}/${f.file} failed: ${String(error instanceof Error ? error.message : error).slice(0, 160)}\n`);
+        }
+    }
+    // 5. PUSH local → Pod (encoded ONCE here, decoded ONCE in the Pod; the Pod
+    // side re-checks existence so a racing writer is never overwritten).
+    for (const f of plan.push) {
+        const src = join(localRoot, "inbox", f.dir, f.file);
+        try {
+            const payload = readFileSync(src).toString("base64");
+            const out = execPod(tunnel, pod, [
+                `d="${podInbox}/${f.dir}"; f="$d/${f.file}"`,
+                `mkdir -p "$d"`,
+                `if [ -e "$f" ]; then echo h2a-exists; else base64 -d > "$f" && echo h2a-written; fi`,
+            ].join("\n"), payload);
+            if (out.includes("h2a-written"))
+                pushed += 1;
+            else
+                skipped += 1;
+        }
+        catch (error) {
+            failed += 1;
+            stderr.write(`[remote] h2a bridge ${sessionId}: push ${f.dir}/${f.file} failed: ${String(error instanceof Error ? error.message : error).slice(0, 160)}\n`);
+        }
+    }
+    return {
+        sessionId,
+        pulled,
+        pushed,
+        skipped,
+        failed,
+        scaffolded,
+        podInstanceDirs: [...podInstanceDirs].sort(),
+    };
+}
+//# sourceMappingURL=h2a-bridge.js.map

package/dist/h2a-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"h2a-bridge.js","sourceRoot":"","sources":["../src/h2a-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAE3D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEjD,oEAAoE;AACpE,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAA2B;IAC9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK,CAAC;QACX,KAAK,aAAa;YAChB,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,OAAgB;IAEhB,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GACd,gEAAgE,CAAC;AAenE;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAI1B;IACC,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAc,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAiB,EAAE,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,wEAAwE;IACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,2CAA2C;QACrF,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC;;YACjC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC;;YAC/B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAIzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAmC,MAAM,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,OAAO,GAAG,WAAW,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,OAAO,GAAG,OAAO,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,OAAO,KAAK,WAAW;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7C,IAAI,OAAO,KAAK,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CACd,MAAoB,EACpB,GAAW,EACX,MAAc,EACd,KAAc;IAEd,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG;QACH,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,mEAAmE;QACnE,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,WAAmB;IACpC,OAAO;QACL,uBAAuB;QACvB,EAAE;QACF,sEAAsE;QACtE,yEAAyE;QACzE,eAAe;QACf,EAAE;QACF,iDAAiD;QACjD,6EAA6E;QAC7E,sFAAsF;QACtF,yEAAyE;QACzE,kDAAkD;QAClD,2CAA2C;QAC3C,EAAE;QACF,2BAA2B,WAAW,iCAAiC;QACvE,yEAAyE;QACzE,kDAAkD;QAClD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AA0BD,8EAA8E;AAC9E,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;YAAE,SAAS;QACjC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACjD,aAAa,EAAE,IAAI;SACpB,CAAC,EAAE,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,UAA4B,EAAE;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,SAAS,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,SAAS,YAAY,QAAQ,CAAC;IAC/C,MAAM,UAAU,GAAG,gBAAgB,CACjC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAC/C,CAAC;IAEF,0EAA0E;IAC1E,4EAA4E;IAC5E,SAAS;IACT,MAAM,QAAQ,GAAG,OAAO,CACtB,MAAM,EACN,GAAG,EACH;QACE,eAAe,YAAY,GAAG;QAC9B,2DAA2D;QAC3D,yBAAyB,UAAU,GAAG;QACtC,oCAAoC;QACpC,SAAS,CAAC,UAAU,CAAC;QACrB,QAAQ;QACR,wBAAwB;QACxB,IAAI;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAE1D,yEAAyE;IACzE,MAAM,OAAO,GAAG,eAAe,CAC7B,OAAO,CACL,MAAM,EACN,GAAG,EACH;QACE,aAAa,YAAY,yBAAyB;QAClD,oBAAoB;QACpB,4GAA4G;QAC5G,gBAAgB;QAChB,mBAAmB;QACnB,iEAAiE;KAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CACF,CAAC;IAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC,KAAK;QACvB,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC;QACrC,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CACV,uBAAuB,SAAS,aAAa,IAAI,CAAC,OAAO,+BAA+B,CACzF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,oEAAoE;IACpE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,CAAC,CAAC,+CAA+C;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CACjB,MAAM,EACN,GAAG,EACH,aAAa,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,iBAAiB,CAC1D,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,CAAC,KAAK,CACV,uBAAuB,SAAS,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,YAAY,MAAM,CACzE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,qEAAqE;IACrE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,OAAO,CACjB,MAAM,EACN,GAAG,EACH;gBACE,MAAM,QAAQ,IAAI,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,GAAG;gBAC5C,eAAe;gBACf,qFAAqF;aACtF,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,OAAO,CACR,CAAC;YACF,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,CAAC,CAAC;;gBACxC,OAAO,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,CAAC,KAAK,CACV,uBAAuB,SAAS,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,YAAY,MAAM,CACzE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;QACT,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,UAAU;QACV,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE;KAC7C,CAAC;AACJ,CAAC"}

package/dist/h2a-jobs.d.ts

@@ -0,0 +1,235 @@
+/**
+ * h2a job callback + decision channel — P3 of cross-type agent delegation.
+ *
+ * Pure helpers (builders + parsing + instance derivation) plus a thin fs layer
+ * to DROP an envelope into a local h2a inbox. The bridge (`remote h2a bridge`)
+ * already transports envelopes pod↔local and is idempotent by file name, so
+ * everything here is best-effort: an undelivered envelope never blocks a job.
+ *
+ *  - `job.done`        agent → PARENT, when a delegated job terminates (body:
+ *                      {jobId, type, state, exitCode?, summary?, resultRef?}).
+ *  - `decision.requested`  agent → PARENT, when the job needs a human/parent
+ *                      decision (body: {jobId, question, options?}).
+ *  - `decision.reply`  PARENT → agent, the answer (body: {jobId, answer}).
+ *
+ * Envelopes mirror the on-disk h2a shape exactly (the format `h2a-bridge.ts`
+ * documents in the Pod README): {protocol, version, id, type, actor:{instance,
+ * role, scope}, to, body, createdAt}. They drop into
+ * `<localRoot>/inbox/<recipient-dir>/env__<ts>__<slug>.json`, where the dir is
+ * the recipient instance id with ":" → "__" — the bridge's SAFE_ENTRY shape.
+ *
+ * SECURITY: jobId / answer / question ride structured argv → the envelope body,
+ * NEVER a shell string. jobId is `assertSafeName`-checked before it becomes a
+ * file slug. The bridge itself re-validates every entry name (SAFE_ENTRY).
+ *
+ * KNOWN LIMIT — depends on agent behavior: a delegated interactive agent must
+ * CHOOSE to call its h2a MCP tool (h2a_inbox / write an envelope) to read a
+ * `decision.reply` or to emit a `decision.requested`. We build the channel and
+ * the transport; we cannot force the agent to use it. `job.done` for an
+ * interactive job is independent of that (it rides the SessionEnd hook), and
+ * for headless rides reconciliation — neither needs the agent to cooperate.
+ */
+import { type DelegateType } from "./delegate.js";
+import type { JobState, RegistryEntry } from "./registry.js";
+export declare const H2A_PROTOCOL = "sentropic.h2a";
+export declare const H2A_VERSION = "0.1";
+/** The P3 envelope types (the spec's vocabulary, on the envelope `type` field). */
+export type JobEnvelopeType = "job.done" | "decision.requested" | "decision.reply";
+export type EnvelopeActor = {
+    instance: string;
+    role: string;
+    scope: string;
+};
+export type H2aEnvelope<TBody> = {
+    protocol: typeof H2A_PROTOCOL;
+    version: typeof H2A_VERSION;
+    id: string;
+    type: JobEnvelopeType;
+    actor: EnvelopeActor;
+    /** Recipient instance id (who this envelope is addressed to). */
+    to: string;
+    body: TBody;
+    createdAt: string;
+};
+export type JobDoneBody = {
+    jobId: string;
+    /** The agent type (claude/codex/agy) so the parent need not re-look-up. */
+    type: DelegateType;
+    state: JobState;
+    exitCode?: number;
+    summary?: string;
+    resultRef?: string;
+};
+export type DecisionRequestedBody = {
+    jobId: string;
+    question: string;
+    options?: string[];
+};
+export type DecisionReplyBody = {
+    jobId: string;
+    answer: string;
+};
+/**
+ * The h2a INSTANCE id of a delegated job's agent — the inbox a `decision.reply`
+ * must reach, and the `actor.instance` on envelopes the job emits.
+ *  - remote (kind:"remote"): the Pod default mapping `<tool>:remote:<sessionId>`
+ *    (same as `h2a-bridge.ts` defaultPodInstance), so the bridge already routes
+ *    to/from it.
+ *  - local: `<tool>:job:<jobId>` — a stable, predictable instance for the local
+ *    job's h2a side-window. jobId already passed assertSafeName at delegate time.
+ * Pure, exported for tests.
+ */
+export declare function jobInstance(entry: Pick<RegistryEntry, "tool" | "kind" | "id" | "remoteId">): string;
+/**
+ * The PARENT instance to address a callback to: the explicit `callbackTo`
+ * recorded on the job at delegate time (`--parent`/`--on-done`), else undefined
+ * (no parent → no callback is emitted; best-effort). Pure, exported for tests.
+ */
+export declare function parentInstance(entry: Pick<RegistryEntry, "callbackTo">): string | undefined;
+/** The `actor.instance` an envelope carries, or undefined when malformed. Pure. */
+export declare function envelopeActorInstance(envelope: H2aEnvelope<unknown>): string | undefined;
+/**
+ * Is `envelope`'s sender the instance we EXPECT for this job? `expectedInstance`
+ * is the job's `jobInstance(...)` (for job.done / decision.requested ABOUT the
+ * job) or the job's recorded parent (for decision.reply). An undefined expected
+ * instance means we can't verify (no job/parent on record) → reject (fail
+ * closed). Pure, exported for tests.
+ */
+export declare function isEnvelopeFromExpected(envelope: H2aEnvelope<unknown>, expectedInstance: string | undefined): boolean;
+/** On-disk file name for an envelope — matches the bridge's SAFE_ENTRY shape. */
+export declare function envelopeFileName(kind: JobEnvelopeType, jobId: string, ts: number): string;
+/**
+ * STABLE (timestamp-free) file name for a `job.done` callback: ONE per job, so
+ * the SessionEnd hook and the reconcile loop can BOTH attempt the emit and the
+ * second one is a no-op (dropEnvelope skips an existing file; the bridge skips
+ * by file name too). Idempotency by name, exactly the bridge's contract.
+ */
+export declare function jobDoneFileName(jobId: string): string;
+/**
+ * Build a `job.done` envelope: emitted BY the job's agent, addressed TO the
+ * parent. The body carries jobId/type/state and optional exitCode/summary/
+ * resultRef. Pure, exported for tests (ts/id are injected for determinism).
+ */
+export declare function buildJobDoneEnvelope(args: {
+    job: Pick<RegistryEntry, "tool" | "kind" | "id" | "remoteId">;
+    to: string;
+    state: JobState;
+    exitCode?: number;
+    summary?: string;
+    resultRef?: string;
+    nowMs?: number;
+}): H2aEnvelope<JobDoneBody>;
+/**
+ * Build a `decision.requested` envelope: emitted BY the job's agent, addressed
+ * TO the parent. Pure, exported for tests.
+ */
+export declare function buildDecisionRequested(args: {
+    job: Pick<RegistryEntry, "tool" | "kind" | "id" | "remoteId">;
+    to: string;
+    question: string;
+    options?: string[];
+    nowMs?: number;
+}): H2aEnvelope<DecisionRequestedBody>;
+/**
+ * Build a `decision.reply` envelope: emitted BY the parent, addressed TO the
+ * job's agent inbox. The `answer` is opaque text — passed straight through, no
+ * shell concat. Pure, exported for tests.
+ */
+export declare function buildDecisionReply(args: {
+    job: Pick<RegistryEntry, "tool" | "kind" | "id" | "remoteId">;
+    parentInstance: string;
+    answer: string;
+    nowMs?: number;
+}): H2aEnvelope<DecisionReplyBody>;
+export type DropResult = {
+    /** Absolute path written (or that already existed). */
+    path: string;
+    /** false when the file already existed — never overwritten. */
+    written: boolean;
+};
+/**
+ * Drop an envelope into `<localRoot>/inbox/<to-dir>/<fileName>`, where <to-dir>
+ * is `envelope.to` with ":" → "__". Idempotent by FILE NAME (an existing file is
+ * left untouched — same contract as the bridge). The jobId in the file name is
+ * already assertSafeName-checked by the caller. Returns where it landed.
+ */
+export declare function dropEnvelope(envelope: H2aEnvelope<unknown>, fileName: string, localRoot?: string): DropResult;
+export type PendingDecision = {
+    jobId: string;
+    question: string;
+    options?: string[];
+    /** The envelope id, so a future ack/reply can reference it. */
+    envelopeId: string;
+};
+/**
+ * Resolver: the expected `actor.instance` for an envelope about `jobId`, by
+ * envelope type. For `job.done`/`decision.requested` (ABOUT the job) it is the
+ * job's own `jobInstance(...)`; for `decision.reply` (FROM the parent) it is the
+ * job's recorded parent. Returns undefined when the job is unknown → the
+ * envelope is rejected (fail closed). The CLI builds this off the registry.
+ */
+export type ExpectedInstanceResolver = (jobId: string, type: JobEnvelopeType) => string | undefined;
+/**
+ * AUTHENTICATE a flat list of job envelopes (S1): keep only those whose claimed
+ * `actor.instance` matches the instance the addressed job is known to use (per
+ * the resolver). A forged cross-job envelope (wrong actor) is DROPPED. Envelopes
+ * that aren't one of our job types pass through untouched (they're not our
+ * concern here). Pure over (envelopes, resolver), exported for tests.
+ */
+export declare function authenticateJobEnvelopes(envelopes: ReadonlyArray<H2aEnvelope<unknown>>, expectedInstanceOf: ExpectedInstanceResolver): H2aEnvelope<unknown>[];
+/**
+ * From a flat list of (fileName, rawJson) envelopes found in the PARENT's inbox
+ * and the JOB inboxes, return the `decision.requested` that have NO matching
+ * `decision.reply` yet (same jobId). Pure, exported for tests — the fs read is
+ * done by the caller so this stays deterministic.
+ *
+ * A reply is matched to a request by jobId (the channel is one open decision per
+ * job at a time; P4 may add a per-request id). `repliedJobIds` is the set of
+ * jobIds for which a `decision.reply` exists anywhere we can see.
+ */
+export declare function pendingDecisions(envelopes: ReadonlyArray<H2aEnvelope<unknown>>, repliedJobIds: ReadonlySet<string>): PendingDecision[];
+/** The set of jobIds that already have a `decision.reply` in `envelopes`. Pure. */
+export declare function repliedDecisionJobIds(envelopes: ReadonlyArray<H2aEnvelope<unknown>>): Set<string>;
+/**
+ * Read every envelope under `<localRoot>/inbox/**` (one dir level deep, the h2a
+ * layout). The fs read is isolated HERE so the listing/matching above stays
+ * pure. Missing store → empty. Never throws on a bad file (skips it).
+ */
+export declare function readInboxEnvelopes(localRoot?: string): H2aEnvelope<unknown>[];
+/**
+ * Does the job have an UNANSWERED `decision.requested`? Used by `jobs status` to
+ * show `awaiting-decision`. Pure over the envelope list, exported for tests.
+ */
+export declare function isAwaitingDecision(jobId: string, envelopes: ReadonlyArray<H2aEnvelope<unknown>>): boolean;
+/**
+ * One-line render of a pending decision for `jobs decisions` — jobId + question
+ * only (no raw envelope body beyond the essentials, per the security note).
+ * Pure, exported for tests.
+ */
+export declare function renderPendingDecisions(decisions: ReadonlyArray<PendingDecision>): string;
+export type EmitJobDoneResult = {
+    emitted: true;
+    path: string;
+    written: boolean;
+    to: string;
+} | {
+    emitted: false;
+    reason: "no-parent" | "error";
+    error?: string;
+};
+/**
+ * Best-effort: emit a `job.done` envelope for a finished job into the parent's
+ * local inbox. No-op (emitted:false, "no-parent") when the job has no recorded
+ * `callbackTo` — a job delegated without a parent simply has nobody to notify.
+ * NEVER throws: any fs/build error is swallowed into emitted:false so a callback
+ * failure can't take down the SessionEnd hook or the reconcile loop.
+ */
+export declare function emitJobDone(job: RegistryEntry, args?: {
+    state: JobState;
+    exitCode?: number;
+    summary?: string;
+    resultRef?: string;
+    localRoot?: string;
+    nowMs?: number;
+}): EmitJobDoneResult;
+//# sourceMappingURL=h2a-jobs.d.ts.map

package/dist/h2a-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"h2a-jobs.d.ts","sourceRoot":"","sources":["../src/h2a-jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAWH,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7D,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAC5C,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC,mFAAmF;AACnF,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEnF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,KAAK,IAAI;IAC/B,QAAQ,EAAE,OAAO,YAAY,CAAC;IAC9B,OAAO,EAAE,OAAO,WAAW,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,aAAa,CAAC;IACrB,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAKF;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC,GAC9D,MAAM,CAKR;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,GACvC,MAAM,GAAG,SAAS,CAGpB;AA8BD,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,GAC7B,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAC9B,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC,OAAO,CAGT;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,WAAW,CAAC,WAAW,CAAC,CAoB3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAiBrC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAgBjC;AAMD,MAAM,MAAM,UAAU,GAAG;IACvB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,MAA8B,GACxC,UAAU,CAOZ;AAMD,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAoBF;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,KAClB,MAAM,GAAG,SAAS,CAAC;AAExB;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAC9C,kBAAkB,EAAE,wBAAwB,GAC3C,WAAW,CAAC,OAAO,CAAC,EAAE,CAoBxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAC9C,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,GACjC,eAAe,EAAE,CAkBnB;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAC7C,GAAG,CAAC,MAAM,CAAC,CAQb;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,GAAE,MAA8B,GACxC,WAAW,CAAC,OAAO,CAAC,EAAE,CAoBxB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAC7C,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,aAAa,CAAC,eAAe,CAAC,GACxC,MAAM,CAQR;AAMD,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE;IACJ,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACoB,GACpC,iBAAiB,CA0BnB"}