@cotal-ai/core 0.3.2 → 0.5.0

package/dist/connector.d.ts

@@ -1,4 +1,5 @@
 import type { Extension } from "./registry.js";
+import type { McpServerSpec } from "./connector-config.js";
 /** Identity + mesh coordinates the manager hands a connector to launch an agent. */
 export interface LaunchOpts {
     space: string;
@@ -20,6 +21,16 @@ export interface LaunchOpts {
      *  that support an auto-submitted first prompt (Claude Code) deliver it; others
      *  ignore it. Used to make a driving session greet the operator on launch. */
     prompt?: string;
+    /** Mirror this session's transcript to `tr-<name>` so peers/observers can read what
+     *  the agent actually did (sets `COTAL_TRANSCRIPT`). Defaults to OFF; set `true` to
+     *  opt in — surfaced as the `--transcript` flag on `cotal spawn` / `cotal start`. */
+    transcript?: boolean;
+    /** Operator MCP servers to SHARE with this agent, resolved from the cotal config by the caller
+     *  (see {@link connectorServers}). Keyed by server name, `.mcp.json`-shaped, with `${VAR}`
+     *  secret refs intact. A connector renders them into its own host format; the default is none
+     *  (Claude launches isolated with `--strict-mcp-config`). Connectors that don't support sharing
+     *  throw on a non-empty map rather than silently dropping it. */
+    mcpServers?: Record<string, McpServerSpec>;
 }
 /** A recipe for starting an agent as a mesh node — command, args, and extra env. */
 export interface LaunchSpec {

package/dist/connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;8EAE0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;mDAC+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;wEAEoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;kFAE8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;+CAG2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C;;;+DAG2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B"}
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;8EAE0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;mDAC+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;wEAEoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;kFAE8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;yFAEqF;IACrF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;qEAIiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC5C;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;+CAG2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C;;;+DAG2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B"}

package/dist/endpoint.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from "node:events";
-import type { AgentCard, ChannelConfig, ControlReply, ControlRequest, ControlRequestInit, EndpointRef, Part, Presence, PresenceStatus, CotalMessage } from "./types.js";
+import type { AgentCard, ChannelConfig, ControlReply, ControlRequest, ControlRequestInit, EndpointRef, Part, Presence, PresenceStatus, AttentionMode, ChannelMode, CotalMessage } from "./types.js";
 export declare const DEFAULT_SERVER = "nats://127.0.0.1:4222";
 /** Space joined when none is given on the CLI (the `cotal-<space>` cmux tab, etc.). */
 export declare const DEFAULT_SPACE = "main";
@@ -33,6 +33,9 @@ export interface EndpointOptions {
     watchPresence?: boolean;
     /** Create inbound stream consumers (DM / chat / anycast). Default true; a pure observer sets false. */
     consume?: boolean;
+    /** Initial per-channel attention overrides to publish in presence from the first heartbeat (the
+     *  connector's file-default seed). Mirror only — never read back into delivery. */
+    channelModes?: Record<string, ChannelMode>;
     /** How long an unacked (un-surfaced) message waits before redelivery (ms). */
     ackWaitMs?: number;
     /** Retire this instance's durable consumers after it's been gone this long (ms). */
@@ -47,14 +50,6 @@ export interface ChannelMember {
     role?: string;
     live: boolean;
 }
-/**
- * Events: "message" (CotalMessage), "presence" (PresenceEvent), "roster" (Presence[]), "error" (Error).
- *
- * Callers MUST attach an "error" listener before `start()`: async faults (incl. NATS
- * permission denials, surfaced via `watchStatus`) are emitted as "error", and Node throws
- * synchronously on an unhandled "error" — a missing listener turns any such fault into a
- * process crash instead of a logged denial.
- */
 export declare class CotalEndpoint extends EventEmitter {
     readonly card: AgentCard;
     readonly space: string;
@@ -77,6 +72,11 @@ export declare class CotalEndpoint extends EventEmitter {
     private jsm?;
     private kv?;
     private channelKv?;
+    /** Plane-3 durable-membership registry KV — lazily opened by the privileged (manager) endpoint. */
+    private membersKv?;
+    /** When set, this endpoint hosts the Plane-3 fan-out writer + trusted reader (the manager). `aclFor`
+     *  maps an owner id to its current read ACL (`allowSubscribe`) for the reader's re-authorization. */
+    private plane3?;
     /** Live local cache of the channel registry (key = channel token), kept by a KV watch. */
     private readonly channelConfigs;
     private channelDefaults;
@@ -85,17 +85,115 @@ export declare class CotalEndpoint extends EventEmitter {
      *  a lagging joiner + dedups the backfill overlap). Keyed by the subscription pattern (may be
      *  wildcard), so the drop matches every concrete channel the pattern subsumes. */
     private readonly joinSeq;
+    /** Serializes history reads ({@link collectHistory}): they share the fixed per-instance
+     *  `chathist_<id>` consumer, so overlapping reads would delete/recreate it under one another. */
+    private histLock;
     private readonly subs;
     private readonly streamMsgs;
+    /** Per-channel native core subscriptions (SPEC v0.3) — the manager-free live read path for boot +
+     *  runtime channels (there is no per-instance chat durable). Keyed by channel so leave unsubscribes
+     *  just one. */
+    private readonly chatSubs;
+    /** Channels whose core-sub the broker refused (async sub.allow violation) — read by the
+     *  broker-confirmed join: a denied subscribe is NOT a successful join (SPEC conformance #13). */
+    private readonly chatSubDenied;
+    /** Channels this session has a Plane-3 durable backstop for (per-channel join GENERATION, from
+     *  durableJoin, so leave passes it back for the stale-leave guard). A durable channel's core-sub is
+     *  NOT coverage-dropped — it stays a live wake-hint, dedup-coalesced with the Plane-3 durable copy by
+     *  id-dedup. Drives the durable-state surface + routes leave to `durableLeave`. PERSISTS across
+     *  reconnect (like `this.channels`): the membership record + the `dlv_<id>` durable are persistent so
+     *  the backstop survives a reconnect on its own; the agent can't re-read the privileged members KV,
+     *  so this in-memory mirror is kept, not rebuilt. Cleared only on full stop. */
+    private readonly plane3Channels;
+    /** Channels whose live sub was REFUSED while they held a Plane-3 durable membership, whose §7
+     *  tombstone has not yet confirmed (channel → join generation). {@link closeRefusedMembership} retries
+     *  the tombstone until it lands; until then this is a `durable-unclosed` state surfaced via
+     *  {@link pendingDurableLeaves} (the connector shows it in `cotal_channels`, never as ordinary
+     *  absence). Persists across reconnect; cleared on tombstone success or full stop. */
+    private readonly pendingDurableLeave;
+    /** Chat-join subjects currently being broker-confirmed. An out-of-ACL subscribe among these trips an
+     *  EXPECTED async permission violation that joinChannel turns into a clean throw, so watchStatus
+     *  suppresses it rather than surfacing a spurious connection error. */
+    private readonly confirmingChatSubs;
+    /** True until the first successful connect completes its boot backfill — distinguishes first-connect
+     *  (backfill the boot channels' history) from a reconnect (reopen the core-subs, no re-backfill).
+     *  Persists across reconnect (NOT connection-scoped). Replaces the legacy chat-durable consumed-cursor
+     *  signal now that there is no per-instance chat durable. */
+    private firstConnect;
     private heartbeatTimer?;
     private sweepTimer?;
     private readonly roster;
     private status;
     private activity?;
+    /** Mirror of the connector's authoritative attention state, published in presence (advisory). The
+     *  endpoint never reads these back into delivery — they exist only to broadcast. */
+    private attentionMode?;
+    private channelModes?;
     private stopped;
+    /** In-flight rebuild (drain+rebind) — serializes manual reconnect, the supervisor's
+     *  closed(), and reestablishLoop so only ONE rebuild runs at a time (a second trigger
+     *  coalesces onto the shared promise, never starts a parallel connectAndBind). */
+    private rebuildPromise?;
+    /** True only during the null window of a rebuild (this.nc unset) — user-facing ops then
+     *  throw a "reconnecting" message instead of the misleading "endpoint not started". */
+    private reconnecting;
+    /** One reestablishLoop at a time; concurrent triggers coalesce via rebuild(). */
+    private reestablishing;
+    /** Interruptible backoff for reestablishLoop — reconnect()/stop() resolves this to retry
+     *  now instead of awaiting the full retryMs. */
+    private backoffResolve?;
+    private backoffTimer?;
+    private readonly retryMs;
     constructor(opts: EndpointOptions);
     ref(): EndpointRef;
     start(): Promise<void>;
+    /** Open the connection and bind everything that hangs off it: status watch, presence
+     *  watch + heartbeat, channel registry, and the durable consumers. Re-runnable — a
+     *  reconnect calls it again after {@link clearConnectionScoped}; every binding is
+     *  idempotent (durables bind by name, JetStream dedups by msgID, KV opens are idempotent). */
+    private connectAndBind;
+    /** Tear down everything {@link connectAndBind} (re)creates, so a rebind can't leak a
+     *  second heartbeat, double-pump a consumer, or keep stale roster ghosts. Caller-owned
+     *  subs (tap/serve) are left alone — they aren't rebuilt here. */
+    private clearConnectionScoped;
+    /** If stop() ran during a rebuild's `await connectAndBind`, the just-bound connection +
+     *  heartbeat + supervisor would be left live on a stopped endpoint. Tear that fresh
+     *  connection back down and report it. Reads `this.nc` in its own scope (a bare `this.nc`
+     *  in doRebuild narrows to `never` via TS inlining connectAndBind's assignment). Returns
+     *  true iff it tore something down (caller bails out of the rebuild). */
+    private tearDownIfStopped;
+    /** Watch for a terminal close (nats.js has exhausted its own reconnect) and rebuild.
+     *  Our own stop()/drain also resolves closed(), so the `stopped` guard keeps a clean
+     *  shutdown from re-establishing. The identity guard (`this.nc !== nc`) no-ops a STALE
+     *  supervisor — one whose connection reconnect()/rebuild already replaced — so only a
+     *  close of the CURRENT connection triggers a rebuild. The rebuild itself is serialized
+     *  with the manual path via {@link rebuild}. */
+    private superviseConnection;
+    /** Single serialized rebuild: drain the old connection and rebind via {@link connectAndBind},
+     *  guarded so concurrent triggers (manual {@link reconnect}, the supervisor's closed(), the
+     *  retry loop) coalesce onto ONE in-flight rebuild instead of racing two connectAndBinds and
+     *  leaking a connection. Returns the shared promise; a second caller gets the in-flight one. */
+    private rebuild;
+    /** The transition: stop the connection-scoped timers FIRST (so nothing live touches
+     *  this.nc during the null window), drop the connection refs, drain the old nc, then
+     *  rebind + re-arm the supervisor on the fresh connection. clearConnectionScoped is
+     *  idempotent, so connectAndBind's own call here is a noop. */
+    private doRebuild;
+    /** Rebuild with backoff until it sticks or we're stopped. Interruptible: a manual
+     *  {@link reconnect} kicks the backoff so the next attempt runs immediately instead of
+     *  awaiting the full retryMs. One loop at a time ({@link reestablishing}); concurrent
+     *  triggers coalesce via {@link rebuild}. */
+    private reestablishLoop;
+    /** Cut an in-flight reestablish backoff short so the next attempt runs immediately, and
+     *  clear its timer so it can't fire later on a stopped/restarted loop. */
+    private kickBackoff;
+    /** Manual reconnect: tear down the current connection and rebuild, WITHOUT the permanent
+     *  stop (stopped/stopping stay false). Serialized with the self-heal supervisor via
+     *  {@link rebuild}, and interruptible — if a backoff is in flight, kick it so the attempt
+     *  is now, not in retryMs. Throws if stopped. On failure, leaves {@link reestablishLoop}
+     *  running in the background so the endpoint never stays dead, and rethrows so the caller
+     *  can report it. */
+    reconnect(): Promise<void>;
     stop(): Promise<void>;
     /** Multicast: broadcast to everyone on a channel. */
     multicast(text: string, opts?: {
@@ -130,6 +228,18 @@ export declare class CotalEndpoint extends EventEmitter {
     getRoster(): Presence[];
     setActivity(activity: string): Promise<void>;
     setStatus(status: PresenceStatus): Promise<void>;
+    /** Publish the agent's global attention mode into presence (advisory observability). Mirror only —
+     *  delivery decisions stay in the connector's authoritative state. */
+    setAttention(attention: AttentionMode): Promise<void>;
+    /** Publish the agent's per-channel attention overrides into presence (advisory). An empty map drops
+     *  the field. Mirror only — never read back into delivery. */
+    setChannelModes(modes: Record<string, ChannelMode>): Promise<void>;
+    /** Overlay the host's live model onto the card's display-only `meta.model` and republish presence.
+     *  For connectors that learn the actual model only *after* launch (e.g. Claude Code's `SessionStart`
+     *  hook payload) rather than from an operator pin. Display-only discovery metadata; a no-op when the
+     *  value is empty or already current (no redundant publish). The mutated card is read live by every
+     *  later publish, so even a pre-connect call surfaces on the first presence write. */
+    setCardModel(model: string): Promise<void>;
     /** This channel's registry config from the live local cache (undefined if unset). */
     getChannelConfig(channel: string): ChannelConfig | undefined;
     /** Effective replay-on-join policy for a channel: per-channel override ?? space default ??
@@ -138,19 +248,24 @@ export declare class CotalEndpoint extends EventEmitter {
     /** The channels this endpoint is currently subscribed to (live — reflects join/leave). */
     joinedChannels(): string[];
     /**
-     * Join a channel mid-session: add it to our chat durable's `filter_subjects` (same durable,
-     * same ack-floor, no teardown — `update` rides the self-scoped create grant), capture the
-     * stream frontier as this channel's join watermark, and backfill its history if replay is on.
-     * Idempotent: re-joining a channel already in our filter is a no-op (no re-backfill). Returns
-     * the number of historical messages backfilled (emitted as `historical` "message" events).
+     * Join a channel mid-session: open a native core subscription (manager-free live read, broker-
+     * confirmed against `sub.allow`), capture the stream frontier as the join watermark, backfill its
+     * history if replay is on, and — for a `durable`-class channel under a manager — request a Plane-3
+     * durable backstop. Idempotent: re-joining is a no-op (no re-backfill). Returns the backfill count +
+     * whether the durable backstop is active (+ a `reason` when a durable channel couldn't get one).
      */
     joinChannel(channel: string): Promise<{
         joined: boolean;
         backfilled: number;
+        durable: boolean;
+        reason?: string;
     }>;
-    /** Leave a channel mid-session: drop it from the durable's `filter_subjects`. Refuses to leave
-     *  the *last* channel (an empty filter would match every chat subject — the opposite of
-     *  leaving). Returns whether anything changed. */
+    /** Leave a channel mid-session — MANAGER-FREE for the live read: close the core subscription. For a
+     *  Plane-3 durable channel, the membership is tombstoned FIRST at the leave cursor (SPEC §7: leave is
+     *  a hard read boundary for the backstop — a pre-leave entry stays deliverable, `seq > leaveCursor` is
+     *  denied). FAIL-CLOSED: if the tombstone can't be confirmed the call throws and the leave is NOT
+     *  applied (live sub stays up, local mirror intact) so the caller can retry — never close the live
+     *  read while the backstop keeps delivering. */
     leaveChannel(channel: string): Promise<{
         left: boolean;
     }>;
@@ -163,20 +278,15 @@ export declare class CotalEndpoint extends EventEmitter {
         config?: ChannelConfig;
     }[]>;
     /**
-     * Who is subscribed to a channel — **broker truth, not self-report**. In Cotal a peer
-     * joins a channel by creating a chat-stream durable consumer (`chat_<id>`,
-     * `filter_subjects` = its channels), so `consumers.list(CHAT)` already records the real
-     * membership; we join it with presence so a lingering durable for a gone peer shows as a
-     * stale ghost (`live: false`) rather than a phantom listener.
-     *
-     * `channelMembers("review")` → that channel's members; `channelMembers()` → every channel
-     * mapped to its members. A member on a wildcard (`team.>`) counts for every concrete
-     * channel it subsumes (`team.backend`) — membership is the *effective subscription*.
-     *
-     * Privileged read: `consumers.list` needs `$JS.API.CONSUMER.LIST.<chat stream>`, which only
-     * the allow-all manager profile holds today (agents, observer, and admin are all denied), so
-     * this is not an agent-facing capability — serving it from a dashboard profile is a one-line
-     * ACL grant away.
+     * Who is a durable member of a channel — read from the privileged members registry (Plane-3),
+     * joined with presence for liveness (a member whose peer is gone but lingering shows `live:false`,
+     * not a phantom). Only CURRENT, ACTIVATED members (non-tombstoned, and past activation catch-up — a
+     * join still completing or that failed catch-up reported durable:false and stays hidden here until
+     * confirmed, so this surface never overstates membership). A wildcard registry channel would count for
+     * the concrete channels it subsumes, but durable membership is per-concrete-channel, so records are
+     * concrete. `live`-class channels carry no durable record — membership there is the live core-sub,
+     * not tracked here. Privileged read (the members KV is manager-write/read; agents hold no grant), so
+     * it is served by the manager, not an agent capability.
      */
     channelMembers(channel: string): Promise<ChannelMember[]>;
     channelMembers(): Promise<Map<string, ChannelMember[]>>;
@@ -203,10 +313,29 @@ export declare class CotalEndpoint extends EventEmitter {
      * denial is never mistaken for absence (which already has a benign cause: MCP reconnect).
      */
     private watchStatus;
+    /** The error message for a guard that finds the endpoint unbound: "reconnecting" during a
+     *  rebuild's null window OR an inter-retry backoff (so a concurrent op reports the real
+     *  reason, not "not started" — `reestablishing` spans the whole retry loop incl. backoff),
+     *  else "endpoint not started" (genuine pre-start). */
+    private notLiveMsg;
     private publishMsg;
     /** Create the three backing streams for this space (idempotent). Open-mode lazy create;
      *  the same definitions are used by `cotal up` at privileged setup. */
     private ensureStreams;
+    /**
+     * Privileged: write an agent's BOOT durable membership — each `durable`-class channel in its boot
+     * subscribe set gets a Plane-3 durable-active record (via {@link durableJoinFor}: cursor capture +
+     * activation catch-up), so it receives durable backstop copies from boot exactly like a runtime
+     * `durableJoin`. `live`-class (and non-concrete) channels are skipped. Idempotent.
+     *
+     * Writes the durable RECORDS with the caller's privileged creds — it does NOT require this endpoint
+     * to host the runtime fan-out/reader loops (a space-level manager service), so EVERY auth launcher
+     * provisions identically: the manager AND the short-lived `cotal spawn` provisioner both write boot
+     * records, which the space's manager then delivers (no silent no-op — that would hide a boot
+     * membership; AGENTS.md "no fallbacks"). A space running no manager is live-only for everyone (the
+     * records exist; nothing delivers them until a manager hosts the loops).
+     */
+    provisionMembership(targetId: string, channels: string[]): Promise<void>;
     /**
      * Privileged: pre-create an agent's DM inbox durable (auth mode), so the agent can BIND
      * it without holding CONSUMER.CREATE on DM_<space>. The creator sets the filter to
@@ -215,6 +344,14 @@ export declare class CotalEndpoint extends EventEmitter {
      * safe to call again on manager restart. The caller must be permissive on DM_<space>.
      */
     provisionDmInbox(targetId: string): Promise<void>;
+    /**
+     * Privileged: pre-create an agent's bind-only Plane-3 DELIVER durable (`dlv_<id>`, filtered to
+     * `dlv.<id>`), so the agent can BIND its per-member durable handoff without holding CONSUMER.CREATE
+     * on the DLV stream. Same bind-only model as {@link provisionDmInbox}: the creator sets the filter,
+     * the agent never does. The trusted reader transfers re-authorized copies onto `dlv.<id>`; the agent
+     * acks them via native JetStream (SPEC §8). Idempotent. The caller must be permissive on DLV.
+     */
+    provisionDlvInbox(targetId: string): Promise<void>;
     /**
      * Privileged: pre-create a role's shared TASK work-queue durable (auth mode), so agents
      * of that role can BIND it without holding CONSUMER.CREATE on TASK_<space>. The creator
@@ -222,6 +359,124 @@ export declare class CotalEndpoint extends EventEmitter {
      * Idempotent per role. The caller must be permissive on TASK_<space>.
      */
     provisionTaskQueue(role: string): Promise<void>;
+    /** Lazily open the privileged members registry KV (manager / open-mode self). */
+    private membersRegistry;
+    /** Privileged: one owner's NON-TOMBSTONED durable memberships as `{channel, generation, activated}` —
+     *  the manager serves this to a connecting agent (via the `listMemberships` self-service op). The agent
+     *  hydrates its leave mirror from the ACTIVATED ones (the confirmed backstops), but the non-activated
+     *  ones are returned too so `leaveChannel` can discover + close a record that still routes under the
+     *  pure-interval predicate (a crash-stuck pending activation) — without reading the privileged KV. */
+    ownerMemberships(owner: string): Promise<{
+        channel: string;
+        generation: number;
+        activated: boolean;
+    }[]>;
+    /** Effective delivery class read AUTHORITATIVELY from the registry KV (not the watch cache) — so a
+     *  `live`→`durable` flip is seen by fan-out without a cache-propagation gap (red-team MED-3). */
+    private deliveryClassFresh;
+    /** Collision-safe `@mention` → owner-id resolution: a name that resolves to exactly one present
+     *  peer wins; 0 or >1 matches drop (never fan a directed durable copy to an unrelated same-named
+     *  bystander — red-team LOW; SPEC §4 unique instance id). */
+    private resolveOwnerByName;
+    /** Publish one fan-out entry into an owner's mixed inbox, idempotent via `Nats-Msg-Id`
+     *  (`<msgId>:<owner>:<generation>`) so a catch-up copy and a racing fan-out copy collapse. */
+    private publishDinbox;
+    /** The fan-out consumer's delivered stream-seq — the activation-fence upper bound (red-team
+     *  BLOCKER-1: the shared fan-out cursor advances independently of the stream frontier). */
+    private fanoutDeliveredSeq;
+    /**
+     * Privileged durable-JOIN write (the manager calls this after validating channel ⊆ allowSubscribe;
+     * {@link provisionMembership} calls it at provision time for boot channels): capture `joinCursor`,
+     * commit a `durable-active` record (CAS + generation bump), then ACTIVATION CATCH-UP idempotently
+     * copies `(joinCursor, fence]` into the owner inbox where `fence = max(frontier, fanoutDelivered)` —
+     * fan-out owns `seq > fence`. Idempotent against a timeout-retry (an already-activated membership
+     * no-ops). Returns `{durable:false}` (honest degrade) only if the catch-up window was evicted.
+     *
+     * This writes durable KV + dinbox state with the caller's privileged creds; it does NOT require THIS
+     * endpoint to host the fan-out/reader loops (those are a space-level manager service). So a
+     * short-lived provisioner can write a boot membership a separate long-lived manager then delivers.
+     */
+    durableJoinFor(owner: string, channel: string): Promise<{
+        durable: boolean;
+        reason?: string;
+        generation?: number;
+    }>;
+    /** Privileged durable-LEAVE write: tombstone the membership at `leaveCursor = frontier` so the
+     *  backstop denies `seq > leaveCursor` while a pre-leave entry stays deliverable (SPEC §7 interval). */
+    durableLeaveFor(owner: string, channel: string, expectedGeneration?: number): Promise<void>;
+    /** Idempotently copy the eligible chat messages in `(fromSeqExcl, toSeqIncl]` for `channel` into the
+     *  owner inbox, via a DEDICATED per-(owner,join) ephemeral consumer (NOT the agent-scoped
+     *  `chathist_<id>`/`histLock` — red-team HIGH-8). `evicted` ⇒ the oldest eligible seq aged out under
+     *  `discard=Old` (the start seq could not be served), a durable shortfall the caller surfaces. */
+    private catchupCopy;
+    /** Start the Plane-3 fan-out writer + trusted reader on THIS (privileged) endpoint. `aclFor` maps an
+     *  owner id to its current read ACL for the reader's re-authorization (the manager passes its managed
+     *  set). Call once after connect; idempotent durable creation lets it resume on a manager restart. */
+    startPlane3(aclFor: (owner: string) => string[] | undefined): Promise<void>;
+    /** (Re)bind the Plane-3 fan-out writer + trusted reader. Idempotent — the durables resume from their
+     *  cursor. Called by {@link startPlane3} once AND by {@link connectAndBind} on every (re)connect, so
+     *  a manager-endpoint reconnect RE-ARMS the backstop. Without this, a broker blip would silently kill
+     *  the loops while `durableJoinFor` kept reporting `durable:true` (the impl-review's BLOCKER-1). No-op
+     *  unless this endpoint hosts Plane-3 (`this.plane3` set). */
+    private armPlane3;
+    /** Fan-out loop: bind the privileged `fanout` durable on CHAT and route each message (routing only —
+     *  the trusted reader is the auth gate). */
+    private runFanout;
+    /** Route ONE chat message to eligible owners' mixed inboxes. `durable` channel → its `durable-active`
+     *  members within interval; `live` channel → `@mention` targets authorized to read it (ACL only).
+     *  Members KV is scanned FRESH per message (no cache — red-team BLOCKER-1 catch-up correctness). */
+    private fanOutMessage;
+    /** Trusted-reader loop: bind the single privileged `reader` durable over `dinbox.>` and re-authorize
+     *  + transfer each entry. */
+    private runReader;
+    /** Re-authorize ONE mixed-inbox entry and transfer it to the owner's DELIVER store. Deny (drop) on a
+     *  revoked/narrowed ACL or out-of-interval seq; on transfer success, ack the mixed entry (durability
+     *  has moved to DLV — an §8 equivalent per-member at-least-once mechanism). The agent acks DLV. */
+    private readerHandle;
+    /** Agent-side: bind + pump our pre-created Plane-3 DELIVER durable (`dlv_<id>`). Every message here is
+     *  manager-written (DLV is manager-write-only, broker-enforced) and is a CHANNEL message by contract
+     *  (the backstop never carries DMs), so `kind=channel` is path-derived (SPEC §4) and the body is
+     *  trusted (no spoof-guard). `durable:true` — real JetStream ack, coalesced with the core-sub live
+     *  copy by `MeshAgent.ingest`. No-op when the durable isn't present (open mode / not provisioned). */
+    private pumpDlv;
+    /** Agent-side: request a Plane-3 durable backstop for a channel via the manager (ctl.self). Throws
+     *  when no privileged writer is present (open / manager-less). 30s timeout — activation catch-up may
+     *  run before the reply (the window is small, but a busy channel can take more than the 5s default). */
+    durableJoinChannel(channel: string): Promise<{
+        durable: boolean;
+        reason?: string;
+        generation?: number;
+    }>;
+    /** Agent-side: release a Plane-3 durable backstop (tombstone membership at the leave cursor). Passes
+     *  the join generation so a stale leave can't tombstone a newer rejoin (the manager validates it). */
+    durableLeaveChannel(channel: string, generation?: number): Promise<void>;
+    /** Fail-closed async cleanup for a channel forced out by a LATE sub.allow refusal (the broker revoked
+     *  the live read). The sync sub callback can't await, so this RETRIES the Plane-3 tombstone with capped
+     *  backoff UNTIL IT SUCCEEDS (or the endpoint stops) — the §7 boundary always closes once the manager
+     *  is reachable, never a silent give-up. While pending, the channel is tracked in
+     *  {@link pendingDurableLeave} and surfaced via {@link pendingDurableLeaves} (the connector shows it in
+     *  `cotal_channels` as `durable-unclosed`, never ordinary absence). The generation is kept the whole
+     *  time. Authoritative closure of a revoked membership is also the manager's job (revocation). */
+    private closeRefusedMembership;
+    /** Channels with a Plane-3 durable membership whose §7 tombstone is still pending after a refused live
+     *  sub (see {@link closeRefusedMembership}) — surfaced by the connector as a `durable-unclosed` state so
+     *  it is never presented as ordinary "not subscribed". */
+    pendingDurableLeaves(): string[];
+    /** A control request that found NO responder — open / manager-less (no privileged control plane),
+     *  distinct from a responder that errored. nats.js surfaces it as NoRespondersError, or a RequestError
+     *  whose `isNoResponders()` is true. */
+    private isNoResponders;
+    /** Agent-side: this session's CURRENT durable memberships (channel + join generation) from the
+     *  manager — the agent holds no read on the privileged members KV. `undefined` ⇒ NO control responder
+     *  (open / manager-less, so there is no Plane-3 and no memberships). THROWS on a responder-present RPC
+     *  failure, so a caller can FAIL-CLOSED rather than mistaking a transient error for "no membership". */
+    private fetchMemberships;
+    /** Agent-side: seed `plane3Channels` with this session's boot durable memberships + generations on
+     *  first connect (the agent holds no read on the privileged members KV). A best-effort OPTIMIZATION: it
+     *  pre-fills the leave-generation mirror + the durable-state surface. If it can't (a transient manager
+     *  error), {@link leaveChannel} re-resolves the generation on demand and fails closed there — so a
+     *  missed hydration never silently leaves a boot durable channel untombstonable. */
+    private hydrateMemberships;
     /** Lazily obtain a JetStream manager — so a non-consuming endpoint (e.g. the supervisor,
      *  consume:false) can still pre-create others' durables. */
     private manager;
@@ -229,6 +484,18 @@ export declare class CotalEndpoint extends EventEmitter {
     private startConsumers;
     /** Drive one consumer: decode, drop our own echo, and hand each message to listeners with ack control. */
     private pump;
+    /** Open a native core subscription to a channel's live feed (the manager-free live read path,
+     *  broker-enforced by `sub.allow`). At-most-once — no replay, no ack; it is the live delivery for
+     *  every channel (boot + runtime). For a `durable` channel it is also the low-latency wake-hint
+     *  alongside the Plane-3 durable copy, coalesced by the receiver's id-dedup. Drops our own echo +
+     *  spoofed senders. */
+    private subscribeChat;
+    /** Close a channel's core subscription (manager-free leave). */
+    private unsubscribeChat;
+    /** Confirm a just-opened core subscription was accepted by the broker. A `sub.allow` violation is
+     *  async in NATS, so flush (round-trips the SUB) then settle briefly to let the refusal land — a
+     *  denied subscribe must not read as a successful join (SPEC conformance #13). */
+    private confirmChatSub;
     /** The highest join watermark among the joined subscriptions that cover `concreteChannel`
      *  (a wildcard sub like `team.>` covers `team.backend`), or undefined if none — the tail
      *  drops a chat message with `seq <= ` this. */
@@ -240,8 +507,8 @@ export declare class CotalEndpoint extends EventEmitter {
      *  focus-watermark a connector captures on entering `focus` (recall reads ambient after it). */
     chatFrontier(): Promise<number>;
     /** Phase 1 of a join — arm each channel's tail-drop watermark at the current frontier. MUST run
-     *  BEFORE the filter flip (consumers.update, or pump on a fresh create) so the tail can never
-     *  carry a just-joined message un-watermarked — which would double-emit it (live + backfill).
+     *  BEFORE opening the core subscription so the live tail can never carry a just-joined message
+     *  un-watermarked — which would double-emit it (live + backfill).
      *  Returns the per-channel frontiers for {@link backfillArmed}. */
     private armJoin;
     /** Phase 2 of a join — backfill each armed channel's history up to its frontier (replay-gated),
@@ -251,11 +518,23 @@ export declare class CotalEndpoint extends EventEmitter {
      *  — the authoritative read for a join decision (a join is infrequent, and at startup the async
      *  cache may not have caught up). Falls to the built-in default only with no registry open. */
     private joinPolicyFresh;
-    /** Read a channel's retained history up to `upToSeq` via JetStream **Direct Get** (a read
-     *  verb — no consumer create, so it rides a read-only grant) and emit each message as a
-     *  `historical` "message" event. `sinceMs` bounds how far back via a native Direct-Get
+    /**
+     * Read retained chat history on ONE channel subject through a name-scoped, single-filter
+     * EPHEMERAL pull consumer — the broker-contained replacement for the removed Direct Get. The
+     * create rides `$JS.API.CONSUMER.CREATE.<CHAT>.<chathist_id>.<subject>`, whose trailing filter
+     * token nats-server pins to the request body (JSConsumerCreateFilterSubjectMismatchErr, code
+     * 10131) — so an agent can only ever replay a channel its `allowSubscribe` grants. Single filter
+     * only (plural isn't ACL-constrainable); `AckPolicy.None` + `mem_storage` so it leaves no durable
+     * state, and it is deleted right after. Returns raw messages in stream order from `start`,
+     * stopping once past `untilSeq` (exclusive of it) or after `limit`. The per-instance name means
+     * calls must be serial — every reader here awaits to completion, so they are.
+     */
+    private collectHistory;
+    private collectHistoryInner;
+    /** Read a channel's retained history up to `upToSeq` (the join frontier) and emit each message
+     *  as a `historical` "message" event. `sinceMs` bounds how far back via a native consumer
      *  `start_time` (now − window); unset ⇒ the full retained window. New messages (`seq > upToSeq`)
-     *  are skipped — the live tail owns them. Pages the batch API; the ack handle is a no-op. */
+     *  are skipped — the live tail owns them. Reads through the contained {@link collectHistory}. */
     private backfillChannel;
     /**
      * Replay-gated pull of a channel's retained ambient from `sinceSeq` (exclusive) forward — the
@@ -266,8 +545,8 @@ export declare class CotalEndpoint extends EventEmitter {
      *
      * Honors the **same** per-channel replay gate as join-backfill ({@link joinPolicyFresh}): a
      * `replay=off` channel returns nothing, so `focus` can't become a history bypass for a channel
-     * that denies replay to everyone else (chat is `allow_direct` with no broker-level ACL, so this
-     * app gate is the entire boundary).
+     * that denies replay to everyone else (the read ACL bounds *which* channels recall can touch; this
+     * app gate bounds *whether* a permitted channel replays).
      */
     recallChannel(channel: string, sinceSeq: number): Promise<{
         messages: CotalMessage[];
@@ -282,7 +561,8 @@ export declare class CotalEndpoint extends EventEmitter {
      *  traffic.) */
     private channelDropped;
     /** Sequence of the earliest message still retained on a channel subject (any sender), or
-     *  undefined if nothing is retained. One 1-message Direct Get — used for the recall drop marker. */
+     *  undefined if nothing is retained. One message through the contained {@link collectHistory} —
+     *  used for the recall drop marker. */
     private channelOldestSeq;
     private publishPresence;
     private startPresenceWatch;
@@ -293,6 +573,10 @@ export declare class CotalEndpoint extends EventEmitter {
     private handleChannelEntry;
     private handleKvEntry;
     private applyPresence;
+    /** Materialize an OFFLINE presence record: drop the advisory attention fields. An offline peer must
+     *  not show a stale `[focus]` or "locally muted #x" hint — SPEC: attention removed on offline sweep,
+     *  channel modes reset on restart. card/activity/ts are kept. */
+    private toOffline;
     /** Mark a known peer offline (on KV delete/purge), keeping it in the roster. */
     private markOffline;
     private sweep;
@@ -305,6 +589,13 @@ interface AuthOpts {
     creds?: string;
     tls?: boolean;
 }
+/** True when a failure is a NATS *permission denial* — the subject is forbidden to this
+ *  endpoint's creds — rather than a missing responder or a timeout. The two need opposite
+ *  fixes (grant the capability vs. start/await the service), so callers (e.g. a control
+ *  request that can't reach the manager) must tell them apart instead of defaulting to
+ *  "service down". Unwraps a wrapped `cause` and falls back to the server's error text, since
+ *  a denied publish can surface either as the typed error or inside a request rejection. */
+export declare function isPermissionDenied(e: unknown): boolean;
 /** Whether a NATS server is *running* at `servers`. True on a successful connect AND on an
  *  auth rejection — an auth error means a server is there, just refusing these creds (so the
  *  caller should surface the real auth failure, not a misleading "server down", and `up`

package/dist/endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA0B3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,YAAY,EACb,MAAM,YAAY,CAAC;AAgCpB,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;oFACgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;gBAGZ,IAAI,EAAE,eAAe;IA4BjC,GAAG,IAAI,WAAW;IAIZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwDtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA6B3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;kGAE8F;IAC9F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP,2DAA2D;IAC3D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,GACrE,IAAI;IAwCP,6EAA6E;IACvE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IAaxB,SAAS,IAAI,QAAQ,EAAE;IAMjB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMvC,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAkBpF;;sDAEkD;IAC5C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAe/D;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA2B9F;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IA0D7D,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;YAWL,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAK3B;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IA+E5B,0GAA0G;YAC5F,IAAI;IAyDlB;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAS7B;;;;iGAI6F;YAC/E,eAAe;IAoD7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA2C1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;wGACoG;YACtF,gBAAgB;YAgBhB,eAAe;YAWf,kBAAkB;IAQhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAqCrB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAYd;AAiCD,gFAAgF;AAChF,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA2BD;;;;qDAIqD;AACrD,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAclB"}
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA8B3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EAIb,MAAM,YAAY,CAAC;AAqDpB,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;oFACgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;uFACmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAoBD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,mGAAmG;IACnG,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB;yGACqG;IACrG,OAAO,CAAC,MAAM,CAAC,CAAsD;IACrE,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD;;oBAEgB;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD;;;;;;oFAMgF;IAChF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D;;;;0FAIsF;IACtF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE;;2EAEuE;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAC,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB;;sFAEkF;IAClF,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC;2FACuF;IACvF,OAAO,CAAC,YAAY,CAAS;IAC7B,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAS;IAC/B;oDACgD;IAChD,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;gBAGpB,IAAI,EAAE,eAAe;IAmCjC,GAAG,IAAI,WAAW;IAIZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;kGAG8F;YAChF,cAAc;IAkE5B;;sEAEkE;IAClE,OAAO,CAAC,qBAAqB;IAiC7B;;;;6EAIyE;YAC3D,iBAAiB;IAa/B;;;;;oDAKgD;IAChD,OAAO,CAAC,mBAAmB;IAe3B;;;oGAGgG;IAChG,OAAO,CAAC,OAAO;IASf;;;mEAG+D;YACjD,SAAS;IA2BvB;;;iDAG6C;YAC/B,eAAe;IAqB7B;8EAC0E;IAC1E,OAAO,CAAC,WAAW;IAQnB;;;;;yBAKqB;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;kGAE8F;IAC9F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP,2DAA2D;IAC3D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,GACrE,IAAI;IAwCP,6EAA6E;IACvE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IAaxB,SAAS,IAAI,QAAQ,EAAE;IAMjB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD;0EACsE;IAChE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D;kEAC8D;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;;0FAIsF;IAChF,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShD,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMvC,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;OAMG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDtF;;;;;oDAKgD;IAC1C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IA0B/D;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA2B9F;;;;;;;;;;OAUG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAqC7D,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;2DAGuD;IACvD,OAAO,CAAC,UAAU;YAMJ,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAK3B;;;;;;;;;;;;OAYG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9E;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;;;;;OAMG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxD;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,iFAAiF;YACnE,eAAe;IAM7B;;;;0GAIsG;IAChG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAO7G;qGACiG;YACnF,kBAAkB;IAShC;;iEAE6D;IAC7D,OAAO,CAAC,kBAAkB;IAK1B;kGAC8F;YAChF,aAAa;IAO3B;+FAC2F;YAC7E,kBAAkB;IAKhC;;;;;;;;;;;OAWG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiDtE;4GACwG;IAClG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjG;;;sGAGkG;YACpF,WAAW;IA4CzB;;0GAEsG;IAChG,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjF;;;;kEAI8D;YAChD,SAAS;IAOvB;gDAC4C;YAC9B,SAAS;IAcvB;;wGAEoG;YACtF,aAAa;IA0B3B;iCAC6B;YACf,SAAS;IAcvB;;uGAEmG;YACrF,YAAY;IAiD1B;;;;0GAIsG;YACxF,OAAO;IAkBrB;;4GAEwG;IAClG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9G;0GACsG;IAChG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9E;;;;;;sGAMkG;YACpF,sBAAsB;IAoBpC;;8DAE0D;IAC1D,oBAAoB,IAAI,MAAM,EAAE;IAIhC;;4CAEwC;IACxC,OAAO,CAAC,cAAc;IAItB;;;4GAGwG;YAC1F,gBAAgB;IAY9B;;;;wFAIoF;YACtE,kBAAkB;IAchC;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IA6D5B,0GAA0G;YAC5F,IAAI;IA+DlB;;;;2BAIuB;IACvB,OAAO,CAAC,aAAa;IAyDrB,gEAAgE;IAChE,OAAO,CAAC,eAAe;IAcvB;;sFAEkF;YACpE,cAAc;IAU5B;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAY7B;;;;;;;;;;OAUG;YACW,cAAc;YAad,mBAAmB;IA+CjC;;;qGAGiG;YACnF,eAAe;IA6B7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA8B1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;;2CAEuC;YACzB,gBAAgB;YAWhB,eAAe;YAiBf,kBAAkB;IAQhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAyCrB;;qEAEiE;IACjE,OAAO,CAAC,SAAS;IAIjB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAad;AA+BD,gFAAgF;AAChF,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA2BD;;;;;4FAK4F;AAC5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAItD;AAED;;;;qDAIqD;AACrD,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAclB"}