@cotal-ai/core 0.4.0 → 0.5.0

package/dist/endpoint.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from "node:events";
-import type { AgentCard, ChannelConfig, ControlReply, ControlRequest, ControlRequestInit, EndpointRef, Part, Presence, PresenceStatus, CotalMessage } from "./types.js";
+import type { AgentCard, ChannelConfig, ControlReply, ControlRequest, ControlRequestInit, EndpointRef, Part, Presence, PresenceStatus, AttentionMode, ChannelMode, CotalMessage } from "./types.js";
 export declare const DEFAULT_SERVER = "nats://127.0.0.1:4222";
 /** Space joined when none is given on the CLI (the `cotal-<space>` cmux tab, etc.). */
 export declare const DEFAULT_SPACE = "main";
@@ -33,6 +33,9 @@ export interface EndpointOptions {
     watchPresence?: boolean;
     /** Create inbound stream consumers (DM / chat / anycast). Default true; a pure observer sets false. */
     consume?: boolean;
+    /** Initial per-channel attention overrides to publish in presence from the first heartbeat (the
+     *  connector's file-default seed). Mirror only — never read back into delivery. */
+    channelModes?: Record<string, ChannelMode>;
     /** How long an unacked (un-surfaced) message waits before redelivery (ms). */
     ackWaitMs?: number;
     /** Retire this instance's durable consumers after it's been gone this long (ms). */
@@ -47,18 +50,6 @@ export interface ChannelMember {
     role?: string;
     live: boolean;
 }
-/**
- * Events: "message" (CotalMessage), "presence" (PresenceEvent), "roster" (Presence[]), "error" (Error),
- * "connection" ({ connected: boolean }) — true on every successful (re)bind (initial start, manual
- * reconnect, AND background self-heal), false the moment the connection drops (rebuild null window /
- * terminal close). Lets an in-process agent track connectedness off the endpoint's own (re)binds
- * instead of an imperative flag the self-heal path can't reach.
- *
- * Callers MUST attach an "error" listener before `start()`: async faults (incl. NATS
- * permission denials, surfaced via `watchStatus`) are emitted as "error", and Node throws
- * synchronously on an unhandled "error" — a missing listener turns any such fault into a
- * process crash instead of a logged denial.
- */
 export declare class CotalEndpoint extends EventEmitter {
     readonly card: AgentCard;
     readonly space: string;
@@ -81,6 +72,11 @@ export declare class CotalEndpoint extends EventEmitter {
     private jsm?;
     private kv?;
     private channelKv?;
+    /** Plane-3 durable-membership registry KV — lazily opened by the privileged (manager) endpoint. */
+    private membersKv?;
+    /** When set, this endpoint hosts the Plane-3 fan-out writer + trusted reader (the manager). `aclFor`
+     *  maps an owner id to its current read ACL (`allowSubscribe`) for the reader's re-authorization. */
+    private plane3?;
     /** Live local cache of the channel registry (key = channel token), kept by a KV watch. */
     private readonly channelConfigs;
     private channelDefaults;
@@ -94,11 +90,45 @@ export declare class CotalEndpoint extends EventEmitter {
     private histLock;
     private readonly subs;
     private readonly streamMsgs;
+    /** Per-channel native core subscriptions (SPEC v0.3) — the manager-free live read path for boot +
+     *  runtime channels (there is no per-instance chat durable). Keyed by channel so leave unsubscribes
+     *  just one. */
+    private readonly chatSubs;
+    /** Channels whose core-sub the broker refused (async sub.allow violation) — read by the
+     *  broker-confirmed join: a denied subscribe is NOT a successful join (SPEC conformance #13). */
+    private readonly chatSubDenied;
+    /** Channels this session has a Plane-3 durable backstop for (per-channel join GENERATION, from
+     *  durableJoin, so leave passes it back for the stale-leave guard). A durable channel's core-sub is
+     *  NOT coverage-dropped — it stays a live wake-hint, dedup-coalesced with the Plane-3 durable copy by
+     *  id-dedup. Drives the durable-state surface + routes leave to `durableLeave`. PERSISTS across
+     *  reconnect (like `this.channels`): the membership record + the `dlv_<id>` durable are persistent so
+     *  the backstop survives a reconnect on its own; the agent can't re-read the privileged members KV,
+     *  so this in-memory mirror is kept, not rebuilt. Cleared only on full stop. */
+    private readonly plane3Channels;
+    /** Channels whose live sub was REFUSED while they held a Plane-3 durable membership, whose §7
+     *  tombstone has not yet confirmed (channel → join generation). {@link closeRefusedMembership} retries
+     *  the tombstone until it lands; until then this is a `durable-unclosed` state surfaced via
+     *  {@link pendingDurableLeaves} (the connector shows it in `cotal_channels`, never as ordinary
+     *  absence). Persists across reconnect; cleared on tombstone success or full stop. */
+    private readonly pendingDurableLeave;
+    /** Chat-join subjects currently being broker-confirmed. An out-of-ACL subscribe among these trips an
+     *  EXPECTED async permission violation that joinChannel turns into a clean throw, so watchStatus
+     *  suppresses it rather than surfacing a spurious connection error. */
+    private readonly confirmingChatSubs;
+    /** True until the first successful connect completes its boot backfill — distinguishes first-connect
+     *  (backfill the boot channels' history) from a reconnect (reopen the core-subs, no re-backfill).
+     *  Persists across reconnect (NOT connection-scoped). Replaces the legacy chat-durable consumed-cursor
+     *  signal now that there is no per-instance chat durable. */
+    private firstConnect;
     private heartbeatTimer?;
     private sweepTimer?;
     private readonly roster;
     private status;
     private activity?;
+    /** Mirror of the connector's authoritative attention state, published in presence (advisory). The
+     *  endpoint never reads these back into delivery — they exist only to broadcast. */
+    private attentionMode?;
+    private channelModes?;
     private stopped;
     /** In-flight rebuild (drain+rebind) — serializes manual reconnect, the supervisor's
      *  closed(), and reestablishLoop so only ONE rebuild runs at a time (a second trigger
@@ -198,6 +228,18 @@ export declare class CotalEndpoint extends EventEmitter {
     getRoster(): Presence[];
     setActivity(activity: string): Promise<void>;
     setStatus(status: PresenceStatus): Promise<void>;
+    /** Publish the agent's global attention mode into presence (advisory observability). Mirror only —
+     *  delivery decisions stay in the connector's authoritative state. */
+    setAttention(attention: AttentionMode): Promise<void>;
+    /** Publish the agent's per-channel attention overrides into presence (advisory). An empty map drops
+     *  the field. Mirror only — never read back into delivery. */
+    setChannelModes(modes: Record<string, ChannelMode>): Promise<void>;
+    /** Overlay the host's live model onto the card's display-only `meta.model` and republish presence.
+     *  For connectors that learn the actual model only *after* launch (e.g. Claude Code's `SessionStart`
+     *  hook payload) rather than from an operator pin. Display-only discovery metadata; a no-op when the
+     *  value is empty or already current (no redundant publish). The mutated card is read live by every
+     *  later publish, so even a pre-connect call surfaces on the first presence write. */
+    setCardModel(model: string): Promise<void>;
     /** This channel's registry config from the live local cache (undefined if unset). */
     getChannelConfig(channel: string): ChannelConfig | undefined;
     /** Effective replay-on-join policy for a channel: per-channel override ?? space default ??
@@ -206,29 +248,27 @@ export declare class CotalEndpoint extends EventEmitter {
     /** The channels this endpoint is currently subscribed to (live — reflects join/leave). */
     joinedChannels(): string[];
     /**
-     * Join a channel mid-session: add it to our chat durable's `filter_subjects` (same durable,
-     * same ack-floor, no teardown — `update` rides the self-scoped create grant), capture the
-     * stream frontier as this channel's join watermark, and backfill its history if replay is on.
-     * Idempotent: re-joining a channel already in our filter is a no-op (no re-backfill). Returns
-     * the number of historical messages backfilled (emitted as `historical` "message" events).
+     * Join a channel mid-session: open a native core subscription (manager-free live read, broker-
+     * confirmed against `sub.allow`), capture the stream frontier as the join watermark, backfill its
+     * history if replay is on, and — for a `durable`-class channel under a manager — request a Plane-3
+     * durable backstop. Idempotent: re-joining is a no-op (no re-backfill). Returns the backfill count +
+     * whether the durable backstop is active (+ a `reason` when a durable channel couldn't get one).
      */
     joinChannel(channel: string): Promise<{
         joined: boolean;
         backfilled: number;
+        durable: boolean;
+        reason?: string;
     }>;
-    /** Leave a channel mid-session: drop it from the durable's `filter_subjects`. Refuses to leave
-     *  the *last* channel (an empty filter would match every chat subject — the opposite of
-     *  leaving). Returns whether anything changed. */
+    /** Leave a channel mid-session — MANAGER-FREE for the live read: close the core subscription. For a
+     *  Plane-3 durable channel, the membership is tombstoned FIRST at the leave cursor (SPEC §7: leave is
+     *  a hard read boundary for the backstop — a pre-leave entry stays deliverable, `seq > leaveCursor` is
+     *  denied). FAIL-CLOSED: if the tombstone can't be confirmed the call throws and the leave is NOT
+     *  applied (live sub stays up, local mirror intact) so the caller can retry — never close the live
+     *  read while the backstop keeps delivering. */
     leaveChannel(channel: string): Promise<{
         left: boolean;
     }>;
-    /** Move the chat live-tail durable to a new channel set. OPEN mode self-serves the
-     *  `consumers.update` (the agent owns its durable). AUTH mode is bind-only — the agent has no
-     *  UPDATE grant — so it sends a mediated control request to the manager, which validates the set
-     *  ⊆ its `allowSubscribe` before moving the filter. Throws clearly when no privileged responder is
-     *  present: a manager-less standalone auth session is fixed to its boot subscribe set — a
-     *  documented limitation, not a silent degrade. */
-    private setChatFilter;
     /** One coherent channel model for dashboards: every channel that has messages OR a registry
      *  entry (configured-but-empty), each tagged with its {@link ChannelConfig}. Works even on
      *  observer endpoints (no consumers needed). */
@@ -238,20 +278,15 @@ export declare class CotalEndpoint extends EventEmitter {
         config?: ChannelConfig;
     }[]>;
     /**
-     * Who is subscribed to a channel — **broker truth, not self-report**. In Cotal a peer
-     * joins a channel by creating a chat-stream durable consumer (`chat_<id>`,
-     * `filter_subjects` = its channels), so `consumers.list(CHAT)` already records the real
-     * membership; we join it with presence so a lingering durable for a gone peer shows as a
-     * stale ghost (`live: false`) rather than a phantom listener.
-     *
-     * `channelMembers("review")` → that channel's members; `channelMembers()` → every channel
-     * mapped to its members. A member on a wildcard (`team.>`) counts for every concrete
-     * channel it subsumes (`team.backend`) — membership is the *effective subscription*.
-     *
-     * Privileged read: `consumers.list` needs `$JS.API.CONSUMER.LIST.<chat stream>`, which only
-     * the allow-all manager profile holds today (agents, observer, and admin are all denied), so
-     * this is not an agent-facing capability — serving it from a dashboard profile is a one-line
-     * ACL grant away.
+     * Who is a durable member of a channel — read from the privileged members registry (Plane-3),
+     * joined with presence for liveness (a member whose peer is gone but lingering shows `live:false`,
+     * not a phantom). Only CURRENT, ACTIVATED members (non-tombstoned, and past activation catch-up — a
+     * join still completing or that failed catch-up reported durable:false and stays hidden here until
+     * confirmed, so this surface never overstates membership). A wildcard registry channel would count for
+     * the concrete channels it subsumes, but durable membership is per-concrete-channel, so records are
+     * concrete. `live`-class channels carry no durable record — membership there is the live core-sub,
+     * not tracked here. Privileged read (the members KV is manager-write/read; agents hold no grant), so
+     * it is served by the manager, not an agent capability.
      */
     channelMembers(channel: string): Promise<ChannelMember[]>;
     channelMembers(): Promise<Map<string, ChannelMember[]>>;
@@ -288,20 +323,19 @@ export declare class CotalEndpoint extends EventEmitter {
      *  the same definitions are used by `cotal up` at privileged setup. */
     private ensureStreams;
     /**
-     * Privileged: pre-create an agent's bind-only chat live-tail durable (auth mode), filtered to its
-     * `subscribe` set, so the agent can BIND it without holding CONSUMER.CREATE/UPDATE on CHAT — its
-     * live read can't be self-widened past `allowSubscribe`. The creator sets the filter; the agent
-     * never does (mirrors {@link provisionDmInbox}). Idempotent. The caller must be permissive on CHAT.
-     */
-    provisionChatDurable(targetId: string, subscribe: string[]): Promise<void>;
-    /**
-     * Privileged: move an agent's bind-only chat durable to a new channel set — the write half of the
-     * mediated join/leave. The manager calls this AFTER validating the set ⊆ the agent's
-     * `allowSubscribe`; the agent itself has no UPDATE grant, so this trusted path is the only way its
-     * live filter moves. The filter is rebuilt from channel names here (not from agent-supplied
-     * subjects) so a caller can't smuggle a hand-built filter.
+     * Privileged: write an agent's BOOT durable membership — each `durable`-class channel in its boot
+     * subscribe set gets a Plane-3 durable-active record (via {@link durableJoinFor}: cursor capture +
+     * activation catch-up), so it receives durable backstop copies from boot exactly like a runtime
+     * `durableJoin`. `live`-class (and non-concrete) channels are skipped. Idempotent.
+     *
+     * Writes the durable RECORDS with the caller's privileged creds — it does NOT require this endpoint
+     * to host the runtime fan-out/reader loops (a space-level manager service), so EVERY auth launcher
+     * provisions identically: the manager AND the short-lived `cotal spawn` provisioner both write boot
+     * records, which the space's manager then delivers (no silent no-op — that would hide a boot
+     * membership; AGENTS.md "no fallbacks"). A space running no manager is live-only for everyone (the
+     * records exist; nothing delivers them until a manager hosts the loops).
      */
-    setChatFilterFor(targetId: string, channels: string[]): Promise<void>;
+    provisionMembership(targetId: string, channels: string[]): Promise<void>;
     /**
      * Privileged: pre-create an agent's DM inbox durable (auth mode), so the agent can BIND
      * it without holding CONSUMER.CREATE on DM_<space>. The creator sets the filter to
@@ -310,6 +344,14 @@ export declare class CotalEndpoint extends EventEmitter {
      * safe to call again on manager restart. The caller must be permissive on DM_<space>.
      */
     provisionDmInbox(targetId: string): Promise<void>;
+    /**
+     * Privileged: pre-create an agent's bind-only Plane-3 DELIVER durable (`dlv_<id>`, filtered to
+     * `dlv.<id>`), so the agent can BIND its per-member durable handoff without holding CONSUMER.CREATE
+     * on the DLV stream. Same bind-only model as {@link provisionDmInbox}: the creator sets the filter,
+     * the agent never does. The trusted reader transfers re-authorized copies onto `dlv.<id>`; the agent
+     * acks them via native JetStream (SPEC §8). Idempotent. The caller must be permissive on DLV.
+     */
+    provisionDlvInbox(targetId: string): Promise<void>;
     /**
      * Privileged: pre-create a role's shared TASK work-queue durable (auth mode), so agents
      * of that role can BIND it without holding CONSUMER.CREATE on TASK_<space>. The creator
@@ -317,6 +359,124 @@ export declare class CotalEndpoint extends EventEmitter {
      * Idempotent per role. The caller must be permissive on TASK_<space>.
      */
     provisionTaskQueue(role: string): Promise<void>;
+    /** Lazily open the privileged members registry KV (manager / open-mode self). */
+    private membersRegistry;
+    /** Privileged: one owner's NON-TOMBSTONED durable memberships as `{channel, generation, activated}` —
+     *  the manager serves this to a connecting agent (via the `listMemberships` self-service op). The agent
+     *  hydrates its leave mirror from the ACTIVATED ones (the confirmed backstops), but the non-activated
+     *  ones are returned too so `leaveChannel` can discover + close a record that still routes under the
+     *  pure-interval predicate (a crash-stuck pending activation) — without reading the privileged KV. */
+    ownerMemberships(owner: string): Promise<{
+        channel: string;
+        generation: number;
+        activated: boolean;
+    }[]>;
+    /** Effective delivery class read AUTHORITATIVELY from the registry KV (not the watch cache) — so a
+     *  `live`→`durable` flip is seen by fan-out without a cache-propagation gap (red-team MED-3). */
+    private deliveryClassFresh;
+    /** Collision-safe `@mention` → owner-id resolution: a name that resolves to exactly one present
+     *  peer wins; 0 or >1 matches drop (never fan a directed durable copy to an unrelated same-named
+     *  bystander — red-team LOW; SPEC §4 unique instance id). */
+    private resolveOwnerByName;
+    /** Publish one fan-out entry into an owner's mixed inbox, idempotent via `Nats-Msg-Id`
+     *  (`<msgId>:<owner>:<generation>`) so a catch-up copy and a racing fan-out copy collapse. */
+    private publishDinbox;
+    /** The fan-out consumer's delivered stream-seq — the activation-fence upper bound (red-team
+     *  BLOCKER-1: the shared fan-out cursor advances independently of the stream frontier). */
+    private fanoutDeliveredSeq;
+    /**
+     * Privileged durable-JOIN write (the manager calls this after validating channel ⊆ allowSubscribe;
+     * {@link provisionMembership} calls it at provision time for boot channels): capture `joinCursor`,
+     * commit a `durable-active` record (CAS + generation bump), then ACTIVATION CATCH-UP idempotently
+     * copies `(joinCursor, fence]` into the owner inbox where `fence = max(frontier, fanoutDelivered)` —
+     * fan-out owns `seq > fence`. Idempotent against a timeout-retry (an already-activated membership
+     * no-ops). Returns `{durable:false}` (honest degrade) only if the catch-up window was evicted.
+     *
+     * This writes durable KV + dinbox state with the caller's privileged creds; it does NOT require THIS
+     * endpoint to host the fan-out/reader loops (those are a space-level manager service). So a
+     * short-lived provisioner can write a boot membership a separate long-lived manager then delivers.
+     */
+    durableJoinFor(owner: string, channel: string): Promise<{
+        durable: boolean;
+        reason?: string;
+        generation?: number;
+    }>;
+    /** Privileged durable-LEAVE write: tombstone the membership at `leaveCursor = frontier` so the
+     *  backstop denies `seq > leaveCursor` while a pre-leave entry stays deliverable (SPEC §7 interval). */
+    durableLeaveFor(owner: string, channel: string, expectedGeneration?: number): Promise<void>;
+    /** Idempotently copy the eligible chat messages in `(fromSeqExcl, toSeqIncl]` for `channel` into the
+     *  owner inbox, via a DEDICATED per-(owner,join) ephemeral consumer (NOT the agent-scoped
+     *  `chathist_<id>`/`histLock` — red-team HIGH-8). `evicted` ⇒ the oldest eligible seq aged out under
+     *  `discard=Old` (the start seq could not be served), a durable shortfall the caller surfaces. */
+    private catchupCopy;
+    /** Start the Plane-3 fan-out writer + trusted reader on THIS (privileged) endpoint. `aclFor` maps an
+     *  owner id to its current read ACL for the reader's re-authorization (the manager passes its managed
+     *  set). Call once after connect; idempotent durable creation lets it resume on a manager restart. */
+    startPlane3(aclFor: (owner: string) => string[] | undefined): Promise<void>;
+    /** (Re)bind the Plane-3 fan-out writer + trusted reader. Idempotent — the durables resume from their
+     *  cursor. Called by {@link startPlane3} once AND by {@link connectAndBind} on every (re)connect, so
+     *  a manager-endpoint reconnect RE-ARMS the backstop. Without this, a broker blip would silently kill
+     *  the loops while `durableJoinFor` kept reporting `durable:true` (the impl-review's BLOCKER-1). No-op
+     *  unless this endpoint hosts Plane-3 (`this.plane3` set). */
+    private armPlane3;
+    /** Fan-out loop: bind the privileged `fanout` durable on CHAT and route each message (routing only —
+     *  the trusted reader is the auth gate). */
+    private runFanout;
+    /** Route ONE chat message to eligible owners' mixed inboxes. `durable` channel → its `durable-active`
+     *  members within interval; `live` channel → `@mention` targets authorized to read it (ACL only).
+     *  Members KV is scanned FRESH per message (no cache — red-team BLOCKER-1 catch-up correctness). */
+    private fanOutMessage;
+    /** Trusted-reader loop: bind the single privileged `reader` durable over `dinbox.>` and re-authorize
+     *  + transfer each entry. */
+    private runReader;
+    /** Re-authorize ONE mixed-inbox entry and transfer it to the owner's DELIVER store. Deny (drop) on a
+     *  revoked/narrowed ACL or out-of-interval seq; on transfer success, ack the mixed entry (durability
+     *  has moved to DLV — an §8 equivalent per-member at-least-once mechanism). The agent acks DLV. */
+    private readerHandle;
+    /** Agent-side: bind + pump our pre-created Plane-3 DELIVER durable (`dlv_<id>`). Every message here is
+     *  manager-written (DLV is manager-write-only, broker-enforced) and is a CHANNEL message by contract
+     *  (the backstop never carries DMs), so `kind=channel` is path-derived (SPEC §4) and the body is
+     *  trusted (no spoof-guard). `durable:true` — real JetStream ack, coalesced with the core-sub live
+     *  copy by `MeshAgent.ingest`. No-op when the durable isn't present (open mode / not provisioned). */
+    private pumpDlv;
+    /** Agent-side: request a Plane-3 durable backstop for a channel via the manager (ctl.self). Throws
+     *  when no privileged writer is present (open / manager-less). 30s timeout — activation catch-up may
+     *  run before the reply (the window is small, but a busy channel can take more than the 5s default). */
+    durableJoinChannel(channel: string): Promise<{
+        durable: boolean;
+        reason?: string;
+        generation?: number;
+    }>;
+    /** Agent-side: release a Plane-3 durable backstop (tombstone membership at the leave cursor). Passes
+     *  the join generation so a stale leave can't tombstone a newer rejoin (the manager validates it). */
+    durableLeaveChannel(channel: string, generation?: number): Promise<void>;
+    /** Fail-closed async cleanup for a channel forced out by a LATE sub.allow refusal (the broker revoked
+     *  the live read). The sync sub callback can't await, so this RETRIES the Plane-3 tombstone with capped
+     *  backoff UNTIL IT SUCCEEDS (or the endpoint stops) — the §7 boundary always closes once the manager
+     *  is reachable, never a silent give-up. While pending, the channel is tracked in
+     *  {@link pendingDurableLeave} and surfaced via {@link pendingDurableLeaves} (the connector shows it in
+     *  `cotal_channels` as `durable-unclosed`, never ordinary absence). The generation is kept the whole
+     *  time. Authoritative closure of a revoked membership is also the manager's job (revocation). */
+    private closeRefusedMembership;
+    /** Channels with a Plane-3 durable membership whose §7 tombstone is still pending after a refused live
+     *  sub (see {@link closeRefusedMembership}) — surfaced by the connector as a `durable-unclosed` state so
+     *  it is never presented as ordinary "not subscribed". */
+    pendingDurableLeaves(): string[];
+    /** A control request that found NO responder — open / manager-less (no privileged control plane),
+     *  distinct from a responder that errored. nats.js surfaces it as NoRespondersError, or a RequestError
+     *  whose `isNoResponders()` is true. */
+    private isNoResponders;
+    /** Agent-side: this session's CURRENT durable memberships (channel + join generation) from the
+     *  manager — the agent holds no read on the privileged members KV. `undefined` ⇒ NO control responder
+     *  (open / manager-less, so there is no Plane-3 and no memberships). THROWS on a responder-present RPC
+     *  failure, so a caller can FAIL-CLOSED rather than mistaking a transient error for "no membership". */
+    private fetchMemberships;
+    /** Agent-side: seed `plane3Channels` with this session's boot durable memberships + generations on
+     *  first connect (the agent holds no read on the privileged members KV). A best-effort OPTIMIZATION: it
+     *  pre-fills the leave-generation mirror + the durable-state surface. If it can't (a transient manager
+     *  error), {@link leaveChannel} re-resolves the generation on demand and fails closed there — so a
+     *  missed hydration never silently leaves a boot durable channel untombstonable. */
+    private hydrateMemberships;
     /** Lazily obtain a JetStream manager — so a non-consuming endpoint (e.g. the supervisor,
      *  consume:false) can still pre-create others' durables. */
     private manager;
@@ -324,6 +484,18 @@ export declare class CotalEndpoint extends EventEmitter {
     private startConsumers;
     /** Drive one consumer: decode, drop our own echo, and hand each message to listeners with ack control. */
     private pump;
+    /** Open a native core subscription to a channel's live feed (the manager-free live read path,
+     *  broker-enforced by `sub.allow`). At-most-once — no replay, no ack; it is the live delivery for
+     *  every channel (boot + runtime). For a `durable` channel it is also the low-latency wake-hint
+     *  alongside the Plane-3 durable copy, coalesced by the receiver's id-dedup. Drops our own echo +
+     *  spoofed senders. */
+    private subscribeChat;
+    /** Close a channel's core subscription (manager-free leave). */
+    private unsubscribeChat;
+    /** Confirm a just-opened core subscription was accepted by the broker. A `sub.allow` violation is
+     *  async in NATS, so flush (round-trips the SUB) then settle briefly to let the refusal land — a
+     *  denied subscribe must not read as a successful join (SPEC conformance #13). */
+    private confirmChatSub;
     /** The highest join watermark among the joined subscriptions that cover `concreteChannel`
      *  (a wildcard sub like `team.>` covers `team.backend`), or undefined if none — the tail
      *  drops a chat message with `seq <= ` this. */
@@ -335,8 +507,8 @@ export declare class CotalEndpoint extends EventEmitter {
      *  focus-watermark a connector captures on entering `focus` (recall reads ambient after it). */
     chatFrontier(): Promise<number>;
     /** Phase 1 of a join — arm each channel's tail-drop watermark at the current frontier. MUST run
-     *  BEFORE the filter flip (consumers.update, or pump on a fresh create) so the tail can never
-     *  carry a just-joined message un-watermarked — which would double-emit it (live + backfill).
+     *  BEFORE opening the core subscription so the live tail can never carry a just-joined message
+     *  un-watermarked — which would double-emit it (live + backfill).
      *  Returns the per-channel frontiers for {@link backfillArmed}. */
     private armJoin;
     /** Phase 2 of a join — backfill each armed channel's history up to its frontier (replay-gated),
@@ -401,6 +573,10 @@ export declare class CotalEndpoint extends EventEmitter {
     private handleChannelEntry;
     private handleKvEntry;
     private applyPresence;
+    /** Materialize an OFFLINE presence record: drop the advisory attention fields. An offline peer must
+     *  not show a stale `[focus]` or "locally muted #x" hint — SPEC: attention removed on offline sweep,
+     *  channel modes reset on restart. card/activity/ts are kept. */
+    private toOffline;
     /** Mark a known peer offline (on KV delete/purge), keeping it in the roster. */
     private markOffline;
     private sweep;

package/dist/endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4B3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,YAAY,EACb,MAAM,YAAY,CAAC;AAkCpB,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;oFACgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB;;sFAEkF;IAClF,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC;2FACuF;IACvF,OAAO,CAAC,YAAY,CAAS;IAC7B,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAS;IAC/B;oDACgD;IAChD,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;gBAGpB,IAAI,EAAE,eAAe;IAgCjC,GAAG,IAAI,WAAW;IAIZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;kGAG8F;YAChF,cAAc;IA6D5B;;sEAEkE;IAClE,OAAO,CAAC,qBAAqB;IAuB7B;;;;6EAIyE;YAC3D,iBAAiB;IAa/B;;;;;oDAKgD;IAChD,OAAO,CAAC,mBAAmB;IAe3B;;;oGAGgG;IAChG,OAAO,CAAC,OAAO;IASf;;;mEAG+D;YACjD,SAAS;IA2BvB;;;iDAG6C;YAC/B,eAAe;IAqB7B;8EAC0E;IAC1E,OAAO,CAAC,WAAW;IAQnB;;;;;yBAKqB;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;kGAE8F;IAC9F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP,2DAA2D;IAC3D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,GACrE,IAAI;IAwCP,6EAA6E;IACvE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IAaxB,SAAS,IAAI,QAAQ,EAAE;IAMjB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMvC,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAkBpF;;sDAEkD;IAC5C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAa/D;;;;;uDAKmD;YACrC,aAAa;IAuB3B;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA2B9F;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IA0D7D,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAWnB;;;2DAGuD;IACvD,OAAO,CAAC,UAAU;YAMJ,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAK3B;;;;;OAKG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhF;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3E;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IAkG5B,0GAA0G;YAC5F,IAAI;IAyDlB;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAY7B;;;;;;;;;;OAUG;YACW,cAAc;YAad,mBAAmB;IA+CjC;;;qGAGiG;YACnF,eAAe;IA6B7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA8B1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;;2CAEuC;YACzB,gBAAgB;YAWhB,eAAe;YAWf,kBAAkB;IAQhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAqCrB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAYd;AAiCD,gFAAgF;AAChF,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA2BD;;;;;4FAK4F;AAC5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAItD;AAED;;;;qDAIqD;AACrD,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAclB"}
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA8B3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EAIb,MAAM,YAAY,CAAC;AAqDpB,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;oFACgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;uFACmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAoBD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,mGAAmG;IACnG,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB;yGACqG;IACrG,OAAO,CAAC,MAAM,CAAC,CAAsD;IACrE,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD;;oBAEgB;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD;;;;;;oFAMgF;IAChF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D;;;;0FAIsF;IACtF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE;;2EAEuE;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAC,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB;;sFAEkF;IAClF,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC;2FACuF;IACvF,OAAO,CAAC,YAAY,CAAS;IAC7B,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAS;IAC/B;oDACgD;IAChD,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;gBAGpB,IAAI,EAAE,eAAe;IAmCjC,GAAG,IAAI,WAAW;IAIZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;kGAG8F;YAChF,cAAc;IAkE5B;;sEAEkE;IAClE,OAAO,CAAC,qBAAqB;IAiC7B;;;;6EAIyE;YAC3D,iBAAiB;IAa/B;;;;;oDAKgD;IAChD,OAAO,CAAC,mBAAmB;IAe3B;;;oGAGgG;IAChG,OAAO,CAAC,OAAO;IASf;;;mEAG+D;YACjD,SAAS;IA2BvB;;;iDAG6C;YAC/B,eAAe;IAqB7B;8EAC0E;IAC1E,OAAO,CAAC,WAAW;IAQnB;;;;;yBAKqB;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;kGAE8F;IAC9F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP,2DAA2D;IAC3D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,GACrE,IAAI;IAwCP,6EAA6E;IACvE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IAaxB,SAAS,IAAI,QAAQ,EAAE;IAMjB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD;0EACsE;IAChE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D;kEAC8D;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;;0FAIsF;IAChF,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShD,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAMvC,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;OAMG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDtF;;;;;oDAKgD;IAC1C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IA0B/D;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA2B9F;;;;;;;;;;OAUG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAqC7D,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;2DAGuD;IACvD,OAAO,CAAC,UAAU;YAMJ,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAK3B;;;;;;;;;;;;OAYG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9E;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;;;;;OAMG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxD;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,iFAAiF;YACnE,eAAe;IAM7B;;;;0GAIsG;IAChG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAO7G;qGACiG;YACnF,kBAAkB;IAShC;;iEAE6D;IAC7D,OAAO,CAAC,kBAAkB;IAK1B;kGAC8F;YAChF,aAAa;IAO3B;+FAC2F;YAC7E,kBAAkB;IAKhC;;;;;;;;;;;OAWG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiDtE;4GACwG;IAClG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjG;;;sGAGkG;YACpF,WAAW;IA4CzB;;0GAEsG;IAChG,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjF;;;;kEAI8D;YAChD,SAAS;IAOvB;gDAC4C;YAC9B,SAAS;IAcvB;;wGAEoG;YACtF,aAAa;IA0B3B;iCAC6B;YACf,SAAS;IAcvB;;uGAEmG;YACrF,YAAY;IAiD1B;;;;0GAIsG;YACxF,OAAO;IAkBrB;;4GAEwG;IAClG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9G;0GACsG;IAChG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9E;;;;;;sGAMkG;YACpF,sBAAsB;IAoBpC;;8DAE0D;IAC1D,oBAAoB,IAAI,MAAM,EAAE;IAIhC;;4CAEwC;IACxC,OAAO,CAAC,cAAc;IAItB;;;4GAGwG;YAC1F,gBAAgB;IAY9B;;;;wFAIoF;YACtE,kBAAkB;IAchC;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IA6D5B,0GAA0G;YAC5F,IAAI;IA+DlB;;;;2BAIuB;IACvB,OAAO,CAAC,aAAa;IAyDrB,gEAAgE;IAChE,OAAO,CAAC,eAAe;IAcvB;;sFAEkF;YACpE,cAAc;IAU5B;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAY7B;;;;;;;;;;OAUG;YACW,cAAc;YAad,mBAAmB;IA+CjC;;;qGAGiG;YACnF,eAAe;IA6B7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA8B1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;;2CAEuC;YACzB,gBAAgB;YAWhB,eAAe;YAiBf,kBAAkB;IAQhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAyCrB;;qEAEiE;IACjE,OAAO,CAAC,SAAS;IAIjB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAad;AA+BD,gFAAgF;AAChF,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA2BD;;;;;4FAK4F;AAC5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAItD;AAED;;;;qDAIqD;AACrD,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAclB"}