@sentropic/h2a-runtime 0.81.0

package/dist/sync.js

@@ -0,0 +1,302 @@
+/**
+ * Conversation sync between local and a session Pod (`remote sync`): copy the
+ * conversation .jsonl in either direction over `kubectl exec`, base64 on the
+ * wire (encoded exactly ONCE — never double-encode, that was a real bug), with
+ * an ahead-GUARD so the side that has MORE of the conversation is never
+ * silently overwritten (--force to override), and a `.bak-<epoch>` backup of
+ * whatever gets overwritten, taken BEFORE writing. Conversation content is
+ * transferred verbatim but never printed.
+ */
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { getTunnel } from "./config.js";
+import { encodeCwd, localConvStat, remoteConvStat } from "./convsync.js";
+const CLAUDE_PROJECTS = ".claude/projects";
+/**
+ * Pure GUARD: never overwrite the side that has MORE of the conversation.
+ * `pull` overwrites local → refuse if local is ahead; `push` overwrites the
+ * Pod → refuse if remote is ahead. `--force` overrides (a backup is still
+ * taken either way).
+ */
+export function decideSyncAction(args) {
+    const { localLines, remoteLines, direction, force } = args;
+    if (force)
+        return { allow: true };
+    if (direction === "pull" && localLines > remoteLines) {
+        return {
+            allow: false,
+            reason: `local conversation is ahead (${localLines} vs ${remoteLines} lines) — ` +
+                `pull would lose ${localLines - remoteLines} local line(s). ` +
+                `Push instead, or re-run with --force to overwrite local anyway.`,
+        };
+    }
+    if (direction === "push" && remoteLines > localLines) {
+        return {
+            allow: false,
+            reason: `remote conversation is ahead (${remoteLines} vs ${localLines} lines) — ` +
+                `push would lose ${remoteLines - localLines} remote line(s). ` +
+                `Pull instead, or re-run with --force to overwrite remote anyway.`,
+        };
+    }
+    return { allow: true };
+}
+/** Local path of a conversation file for a workspace (claude cwd encoding). */
+export function localConvFile(workspacePath, convId, home = homedir()) {
+    return join(home, CLAUDE_PROJECTS, encodeCwd(workspacePath), `${convId}.jsonl`);
+}
+/** Pod-side conversation path, relative to $HOME (used as "$HOME/<rel>"). */
+export function remoteConvRel(workspacePath, convId) {
+    return `${CLAUDE_PROJECTS}/${encodeCwd(workspacePath)}/${convId}.jsonl`;
+}
+function expandHome(p) {
+    return p.startsWith("~") ? join(homedir(), p.slice(1)) : p;
+}
+/** Exec a bash -lc script in the session-agent container. Throws on non-zero. */
+function execPod(tunnel, pod, script, input) {
+    const args = ["-n", tunnel.namespace, "exec"];
+    if (input !== undefined)
+        args.push("-i");
+    args.push(pod, "-c", "session-agent", "--", "bash", "-lc", script);
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    const r = spawnSync("kubectl", args, {
+        encoding: "utf8",
+        env,
+        maxBuffer: 512 * 1024 * 1024, // conversations can be many MB of base64
+        ...(input !== undefined ? { input } : {}),
+    });
+    if (r.status !== 0) {
+        // stderr only (kubectl/bash diagnostics) — never conversation content.
+        throw new Error(`kubectl exec failed: ${(r.stderr || "").trim().slice(0, 200)}`);
+    }
+    return r.stdout;
+}
+/** Like execPod but never throws — returns {stdout, status}. */
+export function execPodRaw(tunnel, pod, script, input) {
+    const args = ["-n", tunnel.namespace, "exec"];
+    if (input !== undefined)
+        args.push("-i");
+    args.push(pod, "-c", "session-agent", "--", "bash", "-lc", script);
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    const r = spawnSync("kubectl", args, {
+        encoding: "utf8",
+        env,
+        maxBuffer: 512 * 1024 * 1024,
+        ...(input !== undefined ? { input } : {}),
+    });
+    return { stdout: r.stdout ?? "", status: r.status ?? 1 };
+}
+/** Non-empty line count of a local file (same convention as convsync). */
+function countLines(file) {
+    if (!existsSync(file))
+        return 0;
+    return readFileSync(file, "utf8").split("\n").filter(Boolean).length;
+}
+function sha256Bytes(buf) {
+    return createHash("sha256").update(buf).digest("hex");
+}
+function convSyncStatePath(convId, home = homedir()) {
+    return join(home, ".remote", "conv-sync-state", convId + ".json");
+}
+export function readConvSyncState(convId, home) {
+    const p = convSyncStatePath(convId, home);
+    if (!existsSync(p))
+        return undefined;
+    try {
+        return JSON.parse(readFileSync(p, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function writeConvSyncState(state, convId, home) {
+    const p = convSyncStatePath(convId, home);
+    mkdirSync(dirname(p), { recursive: true });
+    // Atomic write: temp file in the same dir as target so rename is same-fs.
+    const tmp = `${p}.tmp`;
+    writeFileSync(tmp, JSON.stringify(state));
+    renameSync(tmp, p);
+}
+/**
+ * Copy the conversation .jsonl between local and the Pod. `pull`: Pod → local
+ * (guard: refuse if local is ahead). `push`: local → Pod (guard: refuse if
+ * remote is ahead). Both back up the overwritten file as `.bak-<epoch>` first.
+ */
+export function syncConversation(args) {
+    const { sessionId, workspacePath, direction, force } = args;
+    const tunnel = getTunnel();
+    if (!tunnel) {
+        throw new Error("sync needs a tunnel configured (remote config tunnel …)");
+    }
+    const pod = `session-${sessionId}`;
+    const epoch = Math.floor(Date.now() / 1000);
+    if (direction === "pull") {
+        const remote = remoteConvStat(sessionId, workspacePath);
+        if (!remote) {
+            return { ok: false, reason: "remote has no conversation (or the Pod is unreachable)" };
+        }
+        const dst = localConvFile(workspacePath, remote.convId);
+        const localLines = countLines(dst);
+        const decision = decideSyncAction({
+            localLines,
+            remoteLines: remote.lines,
+            direction,
+            force,
+        });
+        if (!decision.allow)
+            return { ok: false, reason: decision.reason };
+        const rel = remoteConvRel(workspacePath, remote.convId);
+        // --- Incremental path (Phase B1) - pull ---
+        const pullState = readConvSyncState(remote.convId);
+        if (pullState && pullState.offset > 0) {
+            if (existsSync(dst)) {
+                const localBuf = readFileSync(dst);
+                if (localBuf.length >= pullState.offset) {
+                    const localPrefixHash = sha256Bytes(localBuf.slice(0, pullState.offset));
+                    if (localPrefixHash === pullState.prefixHash) {
+                        // Fetch only the tail from pod
+                        const deltaB64Result = execPodRaw(tunnel, pod, `f="$HOME/${rel}"; ` +
+                            `actual=$(head -c ${pullState.offset} "$f" 2>/dev/null | sha256sum | cut -d' ' -f1); ` +
+                            `if [ "$actual" = "${pullState.prefixHash}" ]; then tail -c +${pullState.offset + 1} "$f" | base64 | tr -d '\\n'; else exit 42; fi`);
+                        if (deltaB64Result.status === 0 && deltaB64Result.stdout.trim()) {
+                            const delta = Buffer.from(deltaB64Result.stdout.trim(), "base64");
+                            const newBuf = Buffer.concat([localBuf, delta]);
+                            writeFileSync(dst, newBuf);
+                            const newHash = sha256Bytes(newBuf);
+                            writeConvSyncState({
+                                offset: newBuf.length,
+                                prefixHash: newHash,
+                                generation: pullState.generation + 1,
+                                updatedAt: new Date().toISOString(),
+                            }, remote.convId);
+                            return {
+                                ok: true,
+                                direction,
+                                convId: remote.convId,
+                                lines: { local: localLines, remote: remote.lines },
+                                backup: undefined,
+                                written: dst,
+                                incremental: true,
+                            };
+                        }
+                    }
+                }
+            }
+        }
+        // --- End incremental pull path — fallback to whole-file ---
+        // Encoded ONCE in the Pod, decoded ONCE here — never re-encode.
+        const b64 = execPod(tunnel, pod, `base64 < "$HOME/${rel}" | tr -d '\\n'`);
+        const buf = Buffer.from(b64.trim(), "base64");
+        let backup;
+        if (existsSync(dst)) {
+            backup = `${dst}.bak-${epoch}`;
+            copyFileSync(dst, backup); // BEFORE overwriting
+        }
+        mkdirSync(dirname(dst), { recursive: true });
+        writeFileSync(dst, buf);
+        // Persist sync state for future incremental syncs.
+        writeConvSyncState({
+            offset: buf.length,
+            prefixHash: sha256Bytes(buf),
+            generation: (readConvSyncState(remote.convId)?.generation ?? 0) + 1,
+            updatedAt: new Date().toISOString(),
+        }, remote.convId);
+        return {
+            ok: true,
+            direction,
+            convId: remote.convId,
+            lines: { local: localLines, remote: remote.lines },
+            backup,
+            written: dst,
+            incremental: false,
+        };
+    }
+    // push: local → Pod.
+    const local = localConvStat(workspacePath);
+    if (!local) {
+        return { ok: false, reason: "no local conversation for this workspace" };
+    }
+    const src = localConvFile(workspacePath, local.convId);
+    const rel = remoteConvRel(workspacePath, local.convId);
+    const probe = execPod(tunnel, pod, `f="$HOME/${rel}"; if [ -f "$f" ]; then printf 'yes\\t%s' "$(wc -l <"$f")"; else printf 'no\\t0'; fi`)
+        .trim()
+        .split("\t");
+    const remoteExists = probe[0] === "yes";
+    const remoteLines = Number(probe[1] ?? 0) || 0;
+    const decision = decideSyncAction({
+        localLines: local.lines,
+        remoteLines,
+        direction,
+        force,
+    });
+    if (!decision.allow)
+        return { ok: false, reason: decision.reason };
+    // --- Incremental path (Phase B1) ---
+    const state = readConvSyncState(local.convId);
+    if (state && state.offset > 0 && state.offset <= local.bytes) {
+        const fullBuf = readFileSync(src);
+        const localPrefixHash = sha256Bytes(fullBuf.slice(0, state.offset));
+        if (localPrefixHash === state.prefixHash) {
+            // Local prefix is intact. Check pod prefix AND append atomically (anti-TOCTOU).
+            const delta = fullBuf.slice(state.offset);
+            const deltaB64 = delta.toString("base64");
+            const result = execPodRaw(tunnel, pod, 
+            // head -c reads <offset> bytes, sha256sum -c checks against expected hash.
+            // If mismatch → exit 42 (not 1, to distinguish from other errors).
+            // If match → base64 -d appends the delta.
+            `f="$HOME/${rel}"; ` +
+                `actual=$(head -c ${state.offset} "$f" 2>/dev/null | sha256sum | cut -d' ' -f1); ` +
+                `if [ "$actual" = "${state.prefixHash}" ]; then base64 -d >> "$f"; else exit 42; fi`, deltaB64);
+            if (result.status === 0) {
+                const newHash = sha256Bytes(fullBuf);
+                writeConvSyncState({
+                    offset: fullBuf.length,
+                    prefixHash: newHash,
+                    generation: state.generation + 1,
+                    updatedAt: new Date().toISOString(),
+                }, local.convId);
+                return {
+                    ok: true,
+                    direction,
+                    convId: local.convId,
+                    lines: { local: local.lines, remote: remoteLines },
+                    backup: undefined,
+                    written: `$HOME/${rel}`,
+                    incremental: true,
+                };
+            }
+            // rc=42 = prefix mismatch on pod side → fallthrough to whole-file
+            // rc=anything else → also fallthrough (don't throw; let whole-file handle it)
+        }
+    }
+    // --- End incremental path — fallback to whole-file below ---
+    // Encoded ONCE here, decoded ONCE in the Pod — never re-encode (historical
+    // double-encoding bug: the file would end up containing base64 text).
+    const payload = readFileSync(src).toString("base64");
+    const backupCmd = remoteExists ? `cp -p "$f" "$f.bak-${epoch}" && ` : "";
+    execPod(tunnel, pod, `f="$HOME/${rel}"; mkdir -p "$(dirname "$f")" && ${backupCmd}base64 -d > "$f"`, payload);
+    // Persist sync state for future incremental syncs.
+    const fullContent = readFileSync(src);
+    writeConvSyncState({
+        offset: fullContent.length,
+        prefixHash: sha256Bytes(fullContent),
+        generation: (readConvSyncState(local.convId)?.generation ?? 0) + 1,
+        updatedAt: new Date().toISOString(),
+    }, local.convId);
+    return {
+        ok: true,
+        direction,
+        convId: local.convId,
+        lines: { local: local.lines, remote: remoteLines },
+        backup: remoteExists ? `$HOME/${rel}.bak-${epoch}` : undefined,
+        written: `$HOME/${rel}`,
+        incremental: false,
+    };
+}
+//# sourceMappingURL=sync.js.map

package/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAM3C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC3D,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClC,IAAI,SAAS,KAAK,MAAM,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EACJ,gCAAgC,UAAU,OAAO,WAAW,YAAY;gBACxE,mBAAmB,UAAU,GAAG,WAAW,kBAAkB;gBAC7D,iEAAiE;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EACJ,iCAAiC,WAAW,OAAO,UAAU,YAAY;gBACzE,mBAAmB,WAAW,GAAG,UAAU,mBAAmB;gBAC9D,kEAAkE;SACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,MAAc,EACd,OAAe,OAAO,EAAE;IAExB,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC;AAClF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,MAAc;IACjE,OAAO,GAAG,eAAe,IAAI,SAAS,CAAC,aAAa,CAAC,IAAI,MAAM,QAAQ,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CACd,MAAoB,EACpB,GAAW,EACX,MAAc,EACd,KAAc;IAEd,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG;QACH,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,yCAAyC;QACvE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,uEAAuE;QACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU,CACxB,MAAoB,EACpB,GAAW,EACX,MAAc,EACd,KAAc;IAEd,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE;QACnC,QAAQ,EAAE,MAAM;QAChB,GAAG;QACH,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC5B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACvE,CAAC;AAcD,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAe,OAAO,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,IAAa;IAEb,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,MAAc,EACd,IAAa;IAEb,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC5D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,SAAS,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE5C,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC;YAChC,UAAU;YACV,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,SAAS;YACT,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,6CAA6C;QAC7C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACxC,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;oBACzE,IAAI,eAAe,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;wBAC7C,+BAA+B;wBAC/B,MAAM,cAAc,GAAG,UAAU,CAC/B,MAAM,EACN,GAAG,EACH,YAAY,GAAG,KAAK;4BAClB,oBAAoB,SAAS,CAAC,MAAM,kDAAkD;4BACtF,qBAAqB,SAAS,CAAC,UAAU,sBAAsB,SAAS,CAAC,MAAM,GAAG,CAAC,gDAAgD,CACtI,CAAC;wBACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;4BAChE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;4BAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;4BAChD,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;4BAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;4BACpC,kBAAkB,CAChB;gCACE,MAAM,EAAE,MAAM,CAAC,MAAM;gCACrB,UAAU,EAAE,OAAO;gCACnB,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,CAAC;gCACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;6BACpC,EACD,MAAM,CAAC,MAAM,CACd,CAAC;4BACF,OAAO;gCACL,EAAE,EAAE,IAAI;gCACR,SAAS;gCACT,MAAM,EAAE,MAAM,CAAC,MAAM;gCACrB,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE;gCAClD,MAAM,EAAE,SAAS;gCACjB,OAAO,EAAE,GAAG;gCACZ,WAAW,EAAE,IAAI;6BAClB,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,6DAA6D;QAC7D,gEAAgE;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAA0B,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,GAAG,QAAQ,KAAK,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB;QAClD,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,mDAAmD;QACnD,kBAAkB,CAChB;YACE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC;YAC5B,UAAU,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;YACnE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,MAAM,CAAC,MAAM,CACd,CAAC;QACF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE;YAClD,MAAM;YACN,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CACnB,MAAM,EACN,GAAG,EACH,YAAY,GAAG,sFAAsF,CACtG;SACE,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAChC,UAAU,EAAE,KAAK,CAAC,KAAK;QACvB,WAAW;QACX,SAAS;QACT,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnE,sCAAsC;IACtC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,eAAe,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC,gFAAgF;YAChF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,UAAU,CACvB,MAAM,EACN,GAAG;YACH,2EAA2E;YAC3E,mEAAmE;YACnE,0CAA0C;YAC1C,YAAY,GAAG,KAAK;gBAClB,oBAAoB,KAAK,CAAC,MAAM,kDAAkD;gBAClF,qBAAqB,KAAK,CAAC,UAAU,+CAA+C,EACtF,QAAQ,CACT,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBACrC,kBAAkB,CAChB;oBACE,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,OAAO;oBACnB,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;oBAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,EACD,KAAK,CAAC,MAAM,CACb,CAAC;gBACF,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,SAAS;oBACT,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;oBAClD,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,SAAS,GAAG,EAAE;oBACvB,WAAW,EAAE,IAAI;iBAClB,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,8EAA8E;QAChF,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,sBAAsB,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,CACL,MAAM,EACN,GAAG,EACH,YAAY,GAAG,oCAAoC,SAAS,kBAAkB,EAC9E,OAAO,CACR,CAAC;IACF,mDAAmD;IACnD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,kBAAkB,CAChB;QACE,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC;QACpC,UAAU,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;QAClE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,EACD,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;QAClD,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,OAAO,EAAE,SAAS,GAAG,EAAE;QACvB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC"}

package/dist/throttle-signatures.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Rate-limit ("throttled") DETECTION for HEADLESS LOCAL delegated jobs
+ * (reliability slice 1).
+ *
+ * When a delegated agent CLI hits a TRANSIENT provider rate-limit it exits ≠0
+ * and (without this) is marked `failed` — indistinguishable from a real bug, no
+ * retry. This module turns the tail of a finished headless job's `output.log`
+ * into a throttle verdict so the conductor can auto-resume with backoff instead
+ * of giving up.
+ *
+ * PURE + conservative by design:
+ *  - We scan only the LAST ~60 lines (the caller passes the already-extracted
+ *    tail — `tailLines` here only re-bounds it defensively).
+ *  - We require the PROVIDER-ERROR SHAPE, not a bare keyword: the model itself
+ *    may print "rate limit" mid-sentence while explaining something, and that
+ *    must NOT be read as a throttle. Each tool's table lists regexes anchored to
+ *    the way THAT provider's CLI emits the error (an `API Error:` / `Error:`
+ *    prefix, a leading bullet, a line that IS the error rather than prose).
+ *
+ * SCOPE: headless LOCAL only. The remote/kubectl path and interactive tmux panes
+ * are phase 2 (see TODOs in index.ts); the signatures here are reused verbatim
+ * when those land — only the tail SOURCE changes (kubectl logs / capture-pane).
+ */
+import type { DelegateType } from "./delegate.js";
+export type ThrottleVerdict = {
+    throttled: boolean;
+    /** A short, human-readable tag for the matched signature (for `throttle.lastSignature`). */
+    signature?: string;
+};
+/** Default tail window (lines) — providers print the rate-limit line near the end. */
+export declare const THROTTLE_TAIL_LINES = 60;
+/**
+ * Decide whether the tail of a finished headless job's output indicates a
+ * transient PROVIDER rate-limit (throttle), vs a real failure. Case-insensitive,
+ * line-anchored, conservative (provider-error shape required). Scans only the
+ * last `tailLines` lines. Pure, exported for tests.
+ *
+ * @param tailText the captured tail of `output.log` (caller passes ~last 60
+ *   lines; we re-bound defensively so an over-long buffer can't widen the scan).
+ * @param type the delegate tool (claude | codex | agy) — selects the table.
+ */
+export declare function detectThrottle(tailText: string, type: DelegateType, tailLines?: number): ThrottleVerdict;
+//# sourceMappingURL=throttle-signatures.d.ts.map

package/dist/throttle-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle-signatures.d.ts","sourceRoot":"","sources":["../src/throttle-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AA+EtC;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,YAAY,EAClB,SAAS,GAAE,MAA4B,GACtC,eAAe,CAajB"}

package/dist/throttle-signatures.js

@@ -0,0 +1,116 @@
+/**
+ * Rate-limit ("throttled") DETECTION for HEADLESS LOCAL delegated jobs
+ * (reliability slice 1).
+ *
+ * When a delegated agent CLI hits a TRANSIENT provider rate-limit it exits ≠0
+ * and (without this) is marked `failed` — indistinguishable from a real bug, no
+ * retry. This module turns the tail of a finished headless job's `output.log`
+ * into a throttle verdict so the conductor can auto-resume with backoff instead
+ * of giving up.
+ *
+ * PURE + conservative by design:
+ *  - We scan only the LAST ~60 lines (the caller passes the already-extracted
+ *    tail — `tailLines` here only re-bounds it defensively).
+ *  - We require the PROVIDER-ERROR SHAPE, not a bare keyword: the model itself
+ *    may print "rate limit" mid-sentence while explaining something, and that
+ *    must NOT be read as a throttle. Each tool's table lists regexes anchored to
+ *    the way THAT provider's CLI emits the error (an `API Error:` / `Error:`
+ *    prefix, a leading bullet, a line that IS the error rather than prose).
+ *
+ * SCOPE: headless LOCAL only. The remote/kubectl path and interactive tmux panes
+ * are phase 2 (see TODOs in index.ts); the signatures here are reused verbatim
+ * when those land — only the tail SOURCE changes (kubectl logs / capture-pane).
+ */
+/** Default tail window (lines) — providers print the rate-limit line near the end. */
+export const THROTTLE_TAIL_LINES = 60;
+/**
+ * Per-tool signature tables. Each regex targets ONE line of the CLI's stderr as
+ * the provider's transport layer prints it. Conservatism guard: every pattern
+ * requires either an error prefix (`API Error:`, `Error:`, a leading `·`/bullet),
+ * an HTTP status token (`429`), or the provider's exact transient-error phrasing
+ * — never a lone word that could appear in normal model output.
+ */
+const SIGNATURES = {
+    claude: [
+        // `API Error: Server is temporarily limiting requests (not your usage
+        // limit) · Rate limited` — the canonical transient claude throttle.
+        {
+            tag: "claude:temporarily-limiting",
+            re: /\btemporarily limiting requests\b/i,
+        },
+        // An `API Error:` / `Error:` line carrying a rate-limit / overloaded / 429
+        // — the error PREFIX is what keeps prose ("the rate limit is 5/min") out.
+        {
+            tag: "claude:rate-limited",
+            re: /(?:api )?error.*\b(?:rate[\s-]?limit(?:ed|ing)?|overloaded|429)\b/i,
+        },
+        // The provider's bulleted transient marker: `· Rate limited` / `· 429`.
+        {
+            tag: "claude:bullet-rate-limited",
+            re: /(?:·|•|·)\s*(?:rate[\s-]?limited|429|overloaded)\b/i,
+        },
+        // A line that IS just the HTTP status the gateway returns on overload.
+        {
+            tag: "claude:http-429",
+            re: /\b(?:http\s*)?(?:status\s*)?429\b.*\b(?:too many requests|rate)/i,
+        },
+    ],
+    codex: [
+        // codex prints `Rate limit reached` / `Rate limit reached for …`.
+        {
+            tag: "codex:rate-limit-reached",
+            re: /\brate limit reached\b/i,
+        },
+        // codex transport error carrying a 429 / rate-limit.
+        {
+            tag: "codex:rate-limited",
+            re: /error.*\b(?:rate[\s-]?limit(?:ed)?|429)\b/i,
+        },
+        {
+            tag: "codex:stream-429",
+            re: /\bstream error\b.*\b429\b/i,
+        },
+    ],
+    agy: [
+        // agy (antigravity) equivalent — quota/rate-limit on a `RESOURCE_EXHAUSTED`
+        // / `429` transport error (the Gemini-family transient shape).
+        {
+            tag: "agy:resource-exhausted",
+            re: /\bresource[\s_-]?exhausted\b/i,
+        },
+        {
+            tag: "agy:rate-limited",
+            re: /error.*\b(?:rate[\s-]?limit(?:ed)?|quota exceeded|429)\b/i,
+        },
+        {
+            tag: "agy:rate-limit-reached",
+            re: /\brate limit\b.*\b(?:reached|exceeded)\b/i,
+        },
+    ],
+};
+/**
+ * Decide whether the tail of a finished headless job's output indicates a
+ * transient PROVIDER rate-limit (throttle), vs a real failure. Case-insensitive,
+ * line-anchored, conservative (provider-error shape required). Scans only the
+ * last `tailLines` lines. Pure, exported for tests.
+ *
+ * @param tailText the captured tail of `output.log` (caller passes ~last 60
+ *   lines; we re-bound defensively so an over-long buffer can't widen the scan).
+ * @param type the delegate tool (claude | codex | agy) — selects the table.
+ */
+export function detectThrottle(tailText, type, tailLines = THROTTLE_TAIL_LINES) {
+    if (!tailText)
+        return { throttled: false };
+    const lines = tailText.split(/\r?\n/);
+    const scan = lines.slice(Math.max(0, lines.length - tailLines));
+    const table = SIGNATURES[type];
+    for (const line of scan) {
+        for (const sig of table) {
+            if (sig.re.test(line)) {
+                return { throttled: true, signature: sig.tag };
+            }
+        }
+    }
+    return { throttled: false };
+}
+//# sourceMappingURL=throttle-signatures.js.map

package/dist/throttle-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle-signatures.js","sourceRoot":"","sources":["../src/throttle-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAUH,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAatC;;;;;;GAMG;AACH,MAAM,UAAU,GAA6D;IAC3E,MAAM,EAAE;QACN,sEAAsE;QACtE,oEAAoE;QACpE;YACE,GAAG,EAAE,6BAA6B;YAClC,EAAE,EAAE,oCAAoC;SACzC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E;YACE,GAAG,EAAE,qBAAqB;YAC1B,EAAE,EAAE,oEAAoE;SACzE;QACD,wEAAwE;QACxE;YACE,GAAG,EAAE,4BAA4B;YACjC,EAAE,EAAE,qDAAqD;SAC1D;QACD,uEAAuE;QACvE;YACE,GAAG,EAAE,iBAAiB;YACtB,EAAE,EAAE,kEAAkE;SACvE;KACF;IACD,KAAK,EAAE;QACL,kEAAkE;QAClE;YACE,GAAG,EAAE,0BAA0B;YAC/B,EAAE,EAAE,yBAAyB;SAC9B;QACD,qDAAqD;QACrD;YACE,GAAG,EAAE,oBAAoB;YACzB,EAAE,EAAE,4CAA4C;SACjD;QACD;YACE,GAAG,EAAE,kBAAkB;YACvB,EAAE,EAAE,4BAA4B;SACjC;KACF;IACD,GAAG,EAAE;QACH,4EAA4E;QAC5E,+DAA+D;QAC/D;YACE,GAAG,EAAE,wBAAwB;YAC7B,EAAE,EAAE,+BAA+B;SACpC;QACD;YACE,GAAG,EAAE,kBAAkB;YACvB,EAAE,EAAE,2DAA2D;SAChE;QACD;YACE,GAAG,EAAE,wBAAwB;YAC7B,EAAE,EAAE,2CAA2C;SAChD;KACF;CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,IAAkB,EAClB,YAAoB,mBAAmB;IAEvC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC"}