@actana/sdk 0.2.2

package/dist/core-link-transport.d.ts

@@ -0,0 +1,177 @@
+import type { CoreLinkEvent, CoreLinkRequestFrame, CoreLinkResponseFrame, CoreLinkStreamFrame } from "./core-link-frames.ts";
+import type { CoreLinkSocketFactory } from "./core-link-socket.ts";
+/** The Core's opening frame on every connection — protocol version, capability. */
+export type CoreLinkReadyFrame = Extract<CoreLinkResponseFrame, {
+    type: "ready";
+}>;
+/** One PTY's bytes. Unsolicited; keyed by `ptyId`; carries a `seq`. */
+export type CoreLinkDataFrame = Extract<CoreLinkStreamFrame, {
+    type: "data";
+}>;
+/** A PTY's exit. Unsolicited; keyed by `ptyId`. */
+export type CoreLinkExitFrame = Extract<CoreLinkStreamFrame, {
+    type: "exit";
+}>;
+/** The Core accepted this connection's bearer. */
+export type CoreLinkAuthOkFrame = Extract<CoreLinkResponseFrame, {
+    type: "authOk";
+}>;
+/** The Core refused this connection's bearer, and is about to close the socket. */
+export type CoreLinkAuthErrorFrame = Extract<CoreLinkResponseFrame, {
+    type: "authError";
+}>;
+/** Why the Core refused a bearer. */
+export type CoreLinkAuthErrorReason = CoreLinkAuthErrorFrame["reason"];
+/**
+ * What a transport tells its owner. Every one is optional and none may throw
+ * anything the transport is expected to survive — a listener's failure must not
+ * take a connection down, so each is called inside a guard.
+ */
+export type CoreLinkTransportHandlers = {
+    /** The socket is open. Nothing has been authenticated yet. */
+    onOpen?: () => void;
+    /**
+     * The transport may now be written to: the socket is open and, when a bearer
+     * was configured, the Core has accepted it. This is where an owner sends the
+     * frames a fresh connection owes — `reclaim`, `subscribe`, a re-subscription
+     * — and they go out ahead of whatever the owner had queued.
+     */
+    onWritable?: () => void;
+    /** Frame one, on every connection (see this module's header). */
+    onReady?: (frame: CoreLinkReadyFrame) => void;
+    /** One PTY's bytes, parsed once, here. */
+    onData?: (frame: CoreLinkDataFrame) => void;
+    /** One PTY's exit, parsed once, here. */
+    onExit?: (frame: CoreLinkExitFrame) => void;
+    /** One event off the Core's monotonic log — replayed or live, same frame. */
+    onEvent?: (event: CoreLinkEvent) => void;
+    /** End of the `subscribe` replay tail; live push resumes after it. */
+    onEventsReplayed?: (lastEventId: number) => void;
+    onAuthOk?: (frame: CoreLinkAuthOkFrame) => void;
+    onAuthError?: (reason: CoreLinkAuthErrorReason) => void;
+    /**
+     * The socket is gone, with the reason the `error` event carried if it carried
+     * one. In-flight requests have already been rejected by the time this runs.
+     */
+    onClose?: (reason?: string) => void;
+};
+export type CoreLinkHeartbeatOptions = {
+    /** Ping cadence. Default {@link DEFAULT_HEARTBEAT_INTERVAL_MS}. */
+    intervalMs?: number;
+    /** Declare the peer dead after this long with no frame. Default {@link DEFAULT_HEARTBEAT_TIMEOUT_MS}. */
+    timeoutMs?: number;
+};
+export type CoreLinkTransportOptions = {
+    /** The URL to dial. Reported back on errors; the factory is what opens it. */
+    url: string;
+    /** How to open the socket. See {@link CoreLinkSocketFactory}. */
+    createSocket: CoreLinkSocketFactory;
+    /**
+     * The signed bearer `{coreId, exp, sig}` from the registration blob (ADR
+     * 0002), presented in the `auth` frame the instant the socket opens. Every
+     * real Core requires one — there is no trusted transport left to omit it on
+     * (ADR 0010). Omitted, the transport is writable as soon as the socket opens,
+     * which is the loopback rig and the test.
+     */
+    bearer?: string | null;
+    /**
+     * Arm the heartbeat on this connection. Off by default, and deliberately so:
+     * a one-shot client that connects, asks and exits has nothing to keep alive,
+     * and the durable entry point turns it on because a link that must survive an
+     * idle hour is the case it exists for (#129 D6).
+     *
+     * Only a socket that can actually send a ping participates — see
+     * {@link CoreLinkSocket.ping}.
+     */
+    heartbeat?: CoreLinkHeartbeatOptions | false;
+    handlers?: CoreLinkTransportHandlers;
+};
+/**
+ * Heartbeat cadence. A remote Core's core link runs over the open internet, so
+ * it crosses NATs and stateful firewalls that silently drop idle flows — an
+ * agent sitting at its prompt sends nothing for minutes, which is exactly the
+ * traffic pattern those boxes reap. Without a heartbeat the drop is invisible:
+ * TCP has no keepalive here, so the client keeps believing it is connected,
+ * keystrokes are written into a dead socket, and requests hang for their full
+ * timeout while the Core happily streams output nobody receives. Pinging every
+ * 15s keeps the flow alive AND detects death within one window.
+ */
+export declare const DEFAULT_HEARTBEAT_INTERVAL_MS = 15000;
+/** Declare the peer dead after this long with no frame of any kind (3 pings). */
+export declare const DEFAULT_HEARTBEAT_TIMEOUT_MS = 45000;
+/** The message a request rejects with when its socket died before the answer. */
+export declare const CONNECTION_LOST_MESSAGE = "core-link connection lost";
+/**
+ * One core-link connection. Constructed open-ended: the socket is dialed
+ * immediately, and the handlers passed in are the only way anything gets out of
+ * it. Not reusable — a transport is one socket, and a client that wants another
+ * builds another.
+ */
+export declare class CoreLinkTransport {
+    private readonly handlers;
+    private readonly bearer;
+    private readonly heartbeatOpts;
+    private socket;
+    private reqSeq;
+    private readonly pending;
+    private opened;
+    private authenticated;
+    private disposed;
+    /** The reason the socket died, off the `error` event, for the close report. */
+    private lastError;
+    private ready;
+    private heartbeatTimer;
+    /** Epoch ms of the last frame received (message OR pong) on this connection. */
+    private lastInboundAt;
+    /** Injectable clock so a fake-timer test can drive the heartbeat. */
+    private readonly now;
+    constructor(opts: CoreLinkTransportOptions);
+    private wire;
+    /** True while this connection can carry a frame — open, and authenticated if it must be. */
+    get writable(): boolean;
+    /** True once the Core has accepted this connection's bearer. */
+    get isAuthenticated(): boolean;
+    /** This connection's `ready` frame, or null before it lands. */
+    get readyFrame(): CoreLinkReadyFrame | null;
+    /**
+     * Send a request frame and resolve with the Core's answer — **frames both
+     * ways**, errors included, because a router forwarding on behalf of somebody
+     * else needs the frame rather than an exception (that is the Panel's shape,
+     * and `CoreClient` is what turns a failure frame into a rejection).
+     *
+     * The `reqId` on the frame passed in is ignored: this transport owns
+     * correlation on its own socket and returns the frame carrying the id it
+     * assigned. Rejects if the socket dies before the answer arrives; never times
+     * out on its own — a deadline is the caller's policy, and the caller above
+     * this one has one.
+     */
+    request(frame: CoreLinkRequestFrame): Promise<CoreLinkResponseFrame>;
+    /**
+     * Send a frame and forget it. For the frames whose answer is a *stream* rather
+     * than a response — `subscribe`, whose reply is the replay tail and the
+     * `eventsReplayed` marker — and for the ones nothing waits on by design.
+     * Returns the assigned `reqId`, or null when the transport could not take it.
+     */
+    send(frame: CoreLinkRequestFrame, reqIdPrefix?: string): string | null;
+    /** Hang up. Idempotent; fires no `onClose`, because this is not the Core going away. */
+    close(): void;
+    private nextReqId;
+    private write;
+    private onMessage;
+    private rejectAll;
+    /**
+     * Arm the heartbeat for a freshly opened socket. Only a transport that can
+     * actually send a ping participates; a socket without one is left alone
+     * rather than being torn down for failing to answer pings nobody sent.
+     */
+    private startHeartbeat;
+    private stopHeartbeat;
+    /**
+     * Run an owner's callback. A listener that throws must not take the
+     * connection with it — half the callbacks here run inside a socket event, and
+     * an exception escaping one of those is an unhandled rejection at best and a
+     * connection stuck half-established at worst.
+     */
+    private guard;
+}
+//# sourceMappingURL=core-link-transport.d.ts.map

package/dist/core-link-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-link-transport.d.ts","sourceRoot":"","sources":["../src/core-link-transport.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AACnF,uEAAuE;AACvE,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC/E,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC/E,kDAAkD;AAClD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC;AACrF,mFAAmF;AACnF,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAC3F,qCAAqC;AACrC,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;IACxB,iEAAiE;IACjE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC9C,0CAA0C;IAC1C,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC5C,yCAAyC;IACzC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC5C,6EAA6E;IAC7E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IACzC,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAChD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACxD;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yGAAyG;IACzG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,YAAY,EAAE,qBAAqB,CAAC;IACpC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,wBAAwB,GAAG,KAAK,CAAC;IAC7C,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AACpD,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAOnE;;;;;GAKG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAS;IACzB,+EAA+E;IAC/E,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,cAAc,CAA+C;IACrE,gFAAgF;IAChF,OAAO,CAAC,aAAa,CAAK;IAC1B,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkC;gBAE1C,IAAI,EAAE,wBAAwB;IAoB1C,OAAO,CAAC,IAAI;IAqDZ,4FAA4F;IAC5F,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,gEAAgE;IAChE,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED,gEAAgE;IAChE,IAAI,UAAU,IAAI,kBAAkB,GAAG,IAAI,CAE1C;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAYpE;;;;;OAKG;IACH,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,SAAM,GAAG,MAAM,GAAG,IAAI;IAMnE,wFAAwF;IACxF,KAAK,IAAI,IAAI;IAkBb,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,KAAK;IAab,OAAO,CAAC,SAAS;IA+GjB,OAAO,CAAC,SAAS;IAQjB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IA+BtB,OAAO,CAAC,aAAa;IAOrB;;;;;OAKG;IACH,OAAO,CAAC,KAAK;CAOd"}

package/dist/core-link-transport.js

@@ -0,0 +1,432 @@
+// One core link, from the client's side of it: one socket, one Core.
+//
+// Extracted from the Panel's `PtyCoreLinkClient` (issue 153, #129 D1/D2/D6) —
+// which was `packages/panel/src/server/core-link/client.ts`, deleted in #156 when
+// the Panel moved onto this package, so this is where that code lives now.
+// That class did four separable jobs at once — frame the wire, correlate
+// requests, keep a link alive across drops, and expose a typed API. This module
+// is the first of those two: **the machinery of one connection**, with no
+// opinion about what happens when it ends.
+//
+// Everything that outlives a socket lives above it: `CoreClient` owns the typed
+// methods and the outbound queue, and `DurableCoreClient` owns reconnection.
+// One transport is one socket's whole life, which is what makes the difference
+// between the two entry points a difference in *who re-opens*, rather than two
+// implementations of a wire.
+//
+// Three things about this protocol shape the code below, and each has cost
+// somebody a debugging session:
+//
+//   1. **The Core speaks first, unsolicited.** `ready` is frame one on every
+//      connection and answers no request — a transport that treats the first
+//      inbound message as a response to something it sent waits forever. It is
+//      surfaced as {@link CoreLinkTransportHandlers.onReady}.
+//   2. **`auth` must be the first frame sent**, or the Core answers
+//      `not-authenticated` and closes the socket. So nothing else may go out on
+//      open: a subscribe, a reclaim, a caller's RPC all queue behind it, and the
+//      transport does not report itself {@link CoreLinkTransport.writable} until
+//      `authOk` lands.
+//   3. **`data` and `exit` arrive unsolicited too**, carrying a `ptyId` and no
+//      `reqId`. They are surfaced as frames, parsed once, here — a caller that
+//      re-parses a raw message is a caller that will disagree with this one.
+/**
+ * Heartbeat cadence. A remote Core's core link runs over the open internet, so
+ * it crosses NATs and stateful firewalls that silently drop idle flows — an
+ * agent sitting at its prompt sends nothing for minutes, which is exactly the
+ * traffic pattern those boxes reap. Without a heartbeat the drop is invisible:
+ * TCP has no keepalive here, so the client keeps believing it is connected,
+ * keystrokes are written into a dead socket, and requests hang for their full
+ * timeout while the Core happily streams output nobody receives. Pinging every
+ * 15s keeps the flow alive AND detects death within one window.
+ */
+export const DEFAULT_HEARTBEAT_INTERVAL_MS = 15_000;
+/** Declare the peer dead after this long with no frame of any kind (3 pings). */
+export const DEFAULT_HEARTBEAT_TIMEOUT_MS = 45_000;
+/** The message a request rejects with when its socket died before the answer. */
+export const CONNECTION_LOST_MESSAGE = "core-link connection lost";
+/**
+ * One core-link connection. Constructed open-ended: the socket is dialed
+ * immediately, and the handlers passed in are the only way anything gets out of
+ * it. Not reusable — a transport is one socket, and a client that wants another
+ * builds another.
+ */
+export class CoreLinkTransport {
+    handlers;
+    bearer;
+    heartbeatOpts;
+    socket = null;
+    reqSeq = 0;
+    pending = new Map();
+    opened = false;
+    authenticated = false;
+    disposed = false;
+    /** The reason the socket died, off the `error` event, for the close report. */
+    lastError;
+    ready = null;
+    heartbeatTimer = null;
+    /** Epoch ms of the last frame received (message OR pong) on this connection. */
+    lastInboundAt = 0;
+    /** Injectable clock so a fake-timer test can drive the heartbeat. */
+    now = () => Date.now();
+    constructor(opts) {
+        this.handlers = opts.handlers ?? {};
+        this.bearer = opts.bearer ?? null;
+        this.heartbeatOpts = opts.heartbeat === false ? null : (opts.heartbeat ?? null);
+        let socket;
+        try {
+            socket = opts.createSocket(opts.url);
+        }
+        catch (err) {
+            // A factory that throws — a malformed URL, a TLS material the runtime
+            // refuses — is a connection that closed before it opened, reported on the
+            // one channel an owner is already listening to.
+            this.disposed = true;
+            const reason = err instanceof Error ? err.message : String(err);
+            queueMicrotask(() => this.guard(() => this.handlers.onClose?.(reason)));
+            return;
+        }
+        this.socket = socket;
+        this.wire(socket);
+    }
+    wire(socket) {
+        socket.on("open", () => {
+            if (this.disposed)
+                return;
+            this.opened = true;
+            this.authenticated = false;
+            this.startHeartbeat(socket);
+            this.guard(() => this.handlers.onOpen?.());
+            // The auth frame, first, before anything else this transport or its owner
+            // wants to say. See this module's header, trap 2.
+            if (this.bearer) {
+                this.write({ type: "auth", reqId: this.nextReqId("auth"), bearer: this.bearer });
+            }
+            else {
+                this.guard(() => this.handlers.onWritable?.());
+            }
+        });
+        socket.on("message", (raw) => {
+            this.lastInboundAt = this.now();
+            this.onMessage(raw);
+        });
+        // Pong frames prove the peer is alive during an idle stretch. Only the Node
+        // `ws` transport surfaces them; a browser WebSocket answers pings in the
+        // engine and never tells us, which is why the heartbeat only arms where
+        // `ping` exists at all.
+        socket.on("pong", () => {
+            this.lastInboundAt = this.now();
+        });
+        socket.on("error", (err) => {
+            // The close handler drives everything; errors are ordinary during a Core
+            // restart. All that is kept is the reason, so the close report can say
+            // something better than "it closed" — a TLS rejection and an
+            // ECONNREFUSED both arrive here and then close silently.
+            this.lastError = err instanceof Error ? err.message : String(err);
+        });
+        socket.on("close", () => {
+            const wasDisposed = this.disposed;
+            this.opened = false;
+            this.authenticated = false;
+            this.stopHeartbeat();
+            // Every request written to this socket can never be answered now, so
+            // failing them here is the difference between a caller retrying at once
+            // and one waiting out its full timeout first.
+            this.rejectAll(CONNECTION_LOST_MESSAGE);
+            this.socket = null;
+            if (wasDisposed)
+                return;
+            this.disposed = true;
+            this.guard(() => this.handlers.onClose?.(this.lastError));
+        });
+    }
+    /** True while this connection can carry a frame — open, and authenticated if it must be. */
+    get writable() {
+        return !this.disposed && this.opened && (this.bearer === null || this.authenticated);
+    }
+    /** True once the Core has accepted this connection's bearer. */
+    get isAuthenticated() {
+        return this.authenticated;
+    }
+    /** This connection's `ready` frame, or null before it lands. */
+    get readyFrame() {
+        return this.ready;
+    }
+    /**
+     * Send a request frame and resolve with the Core's answer — **frames both
+     * ways**, errors included, because a router forwarding on behalf of somebody
+     * else needs the frame rather than an exception (that is the Panel's shape,
+     * and `CoreClient` is what turns a failure frame into a rejection).
+     *
+     * The `reqId` on the frame passed in is ignored: this transport owns
+     * correlation on its own socket and returns the frame carrying the id it
+     * assigned. Rejects if the socket dies before the answer arrives; never times
+     * out on its own — a deadline is the caller's policy, and the caller above
+     * this one has one.
+     */
+    request(frame) {
+        if (!this.writable)
+            return Promise.reject(new Error(CONNECTION_LOST_MESSAGE));
+        const reqId = this.nextReqId("r");
+        return new Promise((resolve, reject) => {
+            this.pending.set(reqId, { resolve, reject });
+            if (!this.write({ ...frame, reqId })) {
+                this.pending.delete(reqId);
+                reject(new Error(CONNECTION_LOST_MESSAGE));
+            }
+        });
+    }
+    /**
+     * Send a frame and forget it. For the frames whose answer is a *stream* rather
+     * than a response — `subscribe`, whose reply is the replay tail and the
+     * `eventsReplayed` marker — and for the ones nothing waits on by design.
+     * Returns the assigned `reqId`, or null when the transport could not take it.
+     */
+    send(frame, reqIdPrefix = "s") {
+        if (!this.writable)
+            return null;
+        const reqId = this.nextReqId(reqIdPrefix);
+        return this.write({ ...frame, reqId }) ? reqId : null;
+    }
+    /** Hang up. Idempotent; fires no `onClose`, because this is not the Core going away. */
+    close() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        this.stopHeartbeat();
+        this.rejectAll("core-link client closed");
+        const socket = this.socket;
+        this.socket = null;
+        this.opened = false;
+        this.authenticated = false;
+        if (socket) {
+            try {
+                socket.close();
+            }
+            catch {
+                /* best effort — the socket is going away either way */
+            }
+        }
+    }
+    nextReqId(prefix) {
+        return `${prefix}${++this.reqSeq}`;
+    }
+    write(frame) {
+        const socket = this.socket;
+        if (!socket || !this.opened)
+            return false;
+        try {
+            socket.send(JSON.stringify(frame));
+            return true;
+        }
+        catch {
+            // The close handler takes it from here — it is the one place that fails
+            // in-flight requests and tells the owner.
+            return false;
+        }
+    }
+    onMessage(raw) {
+        let msg;
+        try {
+            msg = JSON.parse(typeof raw === "string" ? raw : String(raw));
+        }
+        catch {
+            return;
+        }
+        if (!msg || typeof msg.type !== "string")
+            return;
+        switch (msg.type) {
+            // ─── The three unsolicited streams ───
+            case "ready": {
+                // Kept as the frame rather than picked apart: the version gate and the
+                // `multiConnection` capability are both read off it upstairs, and a
+                // transport that pre-digested it would have to grow a field per
+                // capability the `ready` frame ever gains.
+                this.ready = {
+                    type: "ready",
+                    version: typeof msg.version === "string" ? msg.version : "",
+                    ...(msg.multiConnection !== undefined
+                        ? { multiConnection: msg.multiConnection }
+                        : {}),
+                };
+                this.guard(() => this.handlers.onReady?.(this.ready));
+                return;
+            }
+            case "data": {
+                const ptyId = typeof msg.ptyId === "string" ? msg.ptyId : "";
+                if (!ptyId)
+                    return;
+                const frame = {
+                    type: "data",
+                    ptyId,
+                    data: typeof msg.data === "string" ? msg.data : "",
+                    seq: typeof msg.seq === "number" ? msg.seq : 0,
+                };
+                this.guard(() => this.handlers.onData?.(frame));
+                return;
+            }
+            case "exit": {
+                const ptyId = typeof msg.ptyId === "string" ? msg.ptyId : "";
+                if (!ptyId)
+                    return;
+                const frame = {
+                    type: "exit",
+                    ptyId,
+                    exitCode: typeof msg.exitCode === "number" ? msg.exitCode : 0,
+                    ...(typeof msg.signal === "number" ? { signal: msg.signal } : {}),
+                };
+                this.guard(() => this.handlers.onExit?.(frame));
+                return;
+            }
+            // ─── The event log ───
+            case "event": {
+                const event = parseEvent(msg.event);
+                if (!event)
+                    return;
+                this.guard(() => this.handlers.onEvent?.(event));
+                return;
+            }
+            case "eventsReplayed": {
+                const lastEventId = typeof msg.lastEventId === "number" ? msg.lastEventId : 0;
+                this.guard(() => this.handlers.onEventsReplayed?.(lastEventId));
+                return;
+            }
+            case "subscribeAck":
+                // Informational — the event stream and its `eventsReplayed` marker
+                // follow, and they are what a subscriber is waiting for.
+                return;
+            // ─── Bearer auth ───
+            case "authOk": {
+                this.authenticated = true;
+                const frame = {
+                    type: "authOk",
+                    reqId: typeof msg.reqId === "string" ? msg.reqId : "",
+                    coreId: typeof msg.coreId === "string" ? msg.coreId : "",
+                    exp: typeof msg.exp === "number" ? msg.exp : 0,
+                };
+                // The owner's turn first: a fresh connection owes the Core a `reclaim`
+                // and a `subscribe`, and both must precede whatever requests were
+                // waiting for this socket, so the replay tail arrives before the
+                // answers to them.
+                this.guard(() => this.handlers.onAuthOk?.(frame));
+                this.guard(() => this.handlers.onWritable?.());
+                return;
+            }
+            case "authError": {
+                const reason = msg.reason === "expired" || msg.reason === "bad-signature" || msg.reason === "malformed"
+                    ? msg.reason
+                    : "malformed";
+                this.authenticated = false;
+                this.guard(() => this.handlers.onAuthError?.(reason));
+                // The Core closes the socket right after this frame; the close handler
+                // is what reports the connection's end. An expired bearer keeps failing
+                // until a reissued blob is pasted — that is the designed "reissuing is a
+                // machine-side operation" property (ADR 0003).
+                return;
+            }
+            default:
+                break;
+        }
+        // ─── Everything else is an answer, correlated by reqId ───
+        const reqId = typeof msg.reqId === "string" ? msg.reqId : null;
+        if (!reqId)
+            return;
+        const pending = this.pending.get(reqId);
+        if (!pending)
+            return;
+        this.pending.delete(reqId);
+        pending.resolve(msg);
+    }
+    rejectAll(reason) {
+        if (this.pending.size === 0)
+            return;
+        const err = new Error(reason);
+        const pending = [...this.pending.values()];
+        this.pending.clear();
+        for (const p of pending)
+            p.reject(err);
+    }
+    /**
+     * Arm the heartbeat for a freshly opened socket. Only a transport that can
+     * actually send a ping participates; a socket without one is left alone
+     * rather than being torn down for failing to answer pings nobody sent.
+     */
+    startHeartbeat(socket) {
+        this.stopHeartbeat();
+        if (!this.heartbeatOpts || !socket.ping)
+            return;
+        const intervalMs = this.heartbeatOpts.intervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;
+        const timeoutMs = this.heartbeatOpts.timeoutMs ?? DEFAULT_HEARTBEAT_TIMEOUT_MS;
+        this.lastInboundAt = this.now();
+        this.heartbeatTimer = setInterval(() => {
+            if (this.socket !== socket) {
+                this.stopHeartbeat();
+                return;
+            }
+            if (this.now() - this.lastInboundAt > timeoutMs) {
+                // Half-open: the peer stopped answering. A graceful close would wait for
+                // a FIN that is never coming, so destroy the socket and let the close
+                // handler run the ordinary path.
+                this.stopHeartbeat();
+                try {
+                    socket.terminate ? socket.terminate() : socket.close();
+                }
+                catch {
+                    /* already gone — the close handler still fires */
+                }
+                return;
+            }
+            try {
+                socket.ping?.();
+            }
+            catch {
+                /* the close handler will take it from here */
+            }
+        }, intervalMs);
+    }
+    stopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = null;
+        }
+    }
+    /**
+     * Run an owner's callback. A listener that throws must not take the
+     * connection with it — half the callbacks here run inside a socket event, and
+     * an exception escaping one of those is an unhandled rejection at best and a
+     * connection stuck half-established at worst.
+     */
+    guard(fn) {
+        try {
+            fn();
+        }
+        catch {
+            /* a listener's failure is not this connection's failure */
+        }
+    }
+}
+/**
+ * Read an `event` frame's payload into a {@link CoreLinkEvent}, or null.
+ *
+ * Field-by-field rather than a cast, because this is the one frame whose body
+ * is a nested object from another process's database: an `eventId` that is
+ * missing or zero would silently corrupt the cursor that decides what gets
+ * replayed after the next reconnect, so it is the one field whose absence
+ * rejects the frame outright.
+ */
+function parseEvent(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const e = raw;
+    const eventId = typeof e.eventId === "number" ? e.eventId : NaN;
+    if (!Number.isFinite(eventId) || eventId <= 0)
+        return null;
+    return {
+        eventId,
+        ts: typeof e.ts === "number" ? e.ts : 0,
+        kind: typeof e.kind === "string" ? e.kind : "",
+        ptyId: typeof e.ptyId === "string" ? e.ptyId : null,
+        taskId: typeof e.taskId === "string" ? e.taskId : null,
+        payload: typeof e.payload === "string" ? e.payload : "{}",
+    };
+}
+//# sourceMappingURL=core-link-transport.js.map

package/dist/core-link-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-link-transport.js","sourceRoot":"","sources":["../src/core-link-transport.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,kFAAkF;AAClF,2EAA2E;AAC3E,yEAAyE;AACzE,gFAAgF;AAChF,0EAA0E;AAC1E,2CAA2C;AAC3C,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,6BAA6B;AAC7B,EAAE;AACF,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,8DAA8D;AAC9D,oEAAoE;AACpE,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,uBAAuB;AACvB,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AA0F7E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAOnE;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAA4B;IACpC,MAAM,CAAgB;IACtB,aAAa,CAAkC;IACxD,MAAM,GAA0B,IAAI,CAAC;IACrC,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,MAAM,GAAG,KAAK,CAAC;IACf,aAAa,GAAG,KAAK,CAAC;IACtB,QAAQ,GAAG,KAAK,CAAC;IACzB,+EAA+E;IACvE,SAAS,CAAqB;IAC9B,KAAK,GAA8B,IAAI,CAAC;IACxC,cAAc,GAA0C,IAAI,CAAC;IACrE,gFAAgF;IACxE,aAAa,GAAG,CAAC,CAAC;IAC1B,qEAAqE;IACpD,GAAG,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAEtD,YAAY,IAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QAChF,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,0EAA0E;YAC1E,gDAAgD;YAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,MAAsB;QACjC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,0EAA0E;YAC1E,kDAAkD;YAClD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,yEAAyE;YACzE,uEAAuE;YACvE,6DAA6D;YAC7D,yDAAyD;YACzD,IAAI,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,qEAAqE;YACrE,wEAAwE;YACxE,8CAA8C;YAC9C,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,WAAW;gBAAE,OAAO;YACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4FAA4F;IAC5F,IAAI,QAAQ;QACV,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvF,CAAC;IAED,gEAAgE;IAChE,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,KAA2B;QACjC,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAA0B,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,KAA2B,EAAE,WAAW,GAAG,GAAG;QACjD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAA0B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,CAAC;IAED,wFAAwF;IACxF,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,MAAc;QAC9B,OAAO,GAAG,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,KAA2B;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,0CAA0C;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAY;QAC5B,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAA4B,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAEjD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,wCAAwC;YACxC,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,uEAAuE;gBACvE,oEAAoE;gBACpE,gEAAgE;gBAChE,2CAA2C;gBAC3C,IAAI,CAAC,KAAK,GAAG;oBACX,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;oBAC3D,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAwD,EAAE;wBACnF,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,MAAM,KAAK,GAAsB;oBAC/B,IAAI,EAAE,MAAM;oBACZ,KAAK;oBACL,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAClD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBAC/C,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,MAAM,KAAK,GAAsB;oBAC/B,IAAI,EAAE,MAAM;oBACZ,KAAK;oBACL,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC7D,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,wBAAwB;YACxB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,KAAK,cAAc;gBACjB,mEAAmE;gBACnE,yDAAyD;gBACzD,OAAO;YAET,sBAAsB;YACtB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,MAAM,KAAK,GAAwB;oBACjC,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;oBACrD,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;oBACxD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBAC/C,CAAC;gBACF,uEAAuE;gBACvE,kEAAkE;gBAClE,iEAAiE;gBACjE,mBAAmB;gBACnB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;oBACtF,CAAC,CAAC,GAAG,CAAC,MAAM;oBACZ,CAAC,CAAC,WAAW,CAAC;gBAClB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,uEAAuE;gBACvE,wEAAwE;gBACxE,yEAAyE;gBACzE,+CAA+C;gBAC/C,OAAO;YACT,CAAC;YACD;gBACE,MAAM;QACV,CAAC;QAED,4DAA4D;QAC5D,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,GAAuC,CAAC,CAAC;IAC3D,CAAC;IAEO,SAAS,CAAC,MAAc;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAsB;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,IAAI,6BAA6B,CAAC;QAClF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,4BAA4B,CAAC;QAC/E,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,SAAS,EAAE,CAAC;gBAChD,yEAAyE;gBACzE,sEAAsE;gBACtE,iCAAiC;gBACjC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACjB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,EAAc;QAC1B,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO;QACL,OAAO;QACP,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9C,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACnD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACtD,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;KAC1D,CAAC;AACJ,CAAC"}