@evomap/evolver 1.89.10 → 1.89.12

package/src/gep/hubFetch.js

@@ -1 +1,608 @@
-const _0x1f8294=_0x176a;(function(_0x4e51b5,_0x2cfafa){const _0x26fa14=_0x176a,_0x539368=_0x4e51b5();while(!![]){try{const _0x452700=-parseInt(_0x26fa14(0x2c3,'\x78\x6b\x40\x78'))/(0x25*0x40+0x2102+0x2a41*-0x1)+-parseInt(_0x26fa14(0x277,'\x58\x77\x79\x56'))/(0x1d*-0x49+-0x1814+0x205b)*(-parseInt(_0x26fa14(0x1f5,'\x42\x77\x4c\x59'))/(-0x8ec*0x1+0x334*0x1+0x5bb))+-parseInt(_0x26fa14(0x290,'\x55\x48\x39\x70'))/(0xb41*-0x3+0x283*0x2+0x1cc1*0x1)+parseInt(_0x26fa14(0x23f,'\x75\x39\x62\x39'))/(-0xad9*-0x1+0x1bd4+-0x26a8)+-parseInt(_0x26fa14(0x22d,'\x66\x65\x41\x2a'))/(-0x8d6+-0x1565+-0x5*-0x60d)+-parseInt(_0x26fa14(0x225,'\x56\x54\x4d\x70'))/(-0x16a2*-0x1+-0x10af*0x1+-0x5ec)+parseInt(_0x26fa14(0x228,'\x43\x5d\x68\x4b'))/(-0x1*-0x1fd0+-0x1bda+-0x1f7*0x2)*(parseInt(_0x26fa14(0x268,'\x42\x4b\x4e\x79'))/(0x1*-0x61b+-0x2*0xfb+-0x40d*-0x2));if(_0x452700===_0x2cfafa)break;else _0x539368['push'](_0x539368['shift']());}catch(_0x1cf50a){_0x539368['push'](_0x539368['shift']());}}}(_0x2aad,-0x108c2d+0xce6fd+0xd407e));const _0x3adb93=require('\x68\x74\x74\x70\x73'),{Agent:_0x22fb3b,fetch:_0x4908d7,buildConnector:_0xae5bd3}=require(_0x1f8294(0x27f,'\x55\x75\x25\x69')),_0x198431={};_0x198431[_0x1f8294(0x241,'\x74\x38\x69\x6a')+_0x1f8294(0x22c,'\x2a\x45\x52\x54')+'\x65\x64']=!![],_0x198431[_0x1f8294(0x2be,'\x66\x76\x34\x30')]=0x2710,_0x198431[_0x1f8294(0x260,'\x56\x25\x42\x57')+_0x1f8294(0x2a2,'\x42\x4b\x4e\x79')]=!![],_0x198431[_0x1f8294(0x218,'\x23\x32\x74\x71')+_0x1f8294(0x1fd,'\x56\x54\x4d\x70')+_0x1f8294(0x217,'\x30\x30\x51\x63')+_0x1f8294(0x2a8,'\x63\x29\x61\x48')]=0xfa;const _0x3f8219=_0x198431,_0x383e58=_0xae5bd3(_0x3f8219);function _0x176a(_0x115f8a,_0x3e1d6e){_0x115f8a=_0x115f8a-(-0x30d*-0x5+-0x172d+0x9ce);const _0xb12495=_0x2aad();let _0x507662=_0xb12495[_0x115f8a];if(_0x176a['\x68\x65\x76\x4b\x78\x6f']===undefined){var _0x64acaa=function(_0x2769c2){const _0x440e46='\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2b\x2f\x3d';let _0x19d615='',_0xb2eb0c='',_0x361d15=_0x19d615+_0x64acaa,_0x1e50ee=(''+function(){return-0x6a1*0x3+0xa99+0x94a;})['\x69\x6e\x64\x65\x78\x4f\x66']('\x0a')!==-(0x604+0x2e6+-0x8e9*0x1);for(let _0x2ea428=0x13b+-0x5*0x251+0xa5a,_0x5e6f59,_0x512a18,_0x4c102a=-0x46c*0x1+0x1*0x20b+0x261;_0x512a18=_0x2769c2['\x63\x68\x61\x72\x41\x74'](_0x4c102a++);~_0x512a18&&(_0x5e6f59=_0x2ea428%(0x1*-0x3b5+0x2575*0x1+-0x21bc)?_0x5e6f59*(0x1*-0x166b+-0x10ca+0x111*0x25)+_0x512a18:_0x512a18,_0x2ea428++%(0x3*0x10b+0x5f5+-0x912))?_0x19d615+=_0x1e50ee||_0x361d15['\x63\x68\x61\x72\x43\x6f\x64\x65\x41\x74'](_0x4c102a+(0x2146*-0x1+-0x3b*0x29+0x2ac3))-(-0x942+-0x13fb+0x1d47)!==-0xeb4+0x5*0x374+-0x290?String['\x66\x72\x6f\x6d\x43\x68\x61\x72\x43\x6f\x64\x65'](0x1*0x1a4a+0x4b1*0x7+-0x3a22*0x1&_0x5e6f59>>(-(0x1b68*0x1+-0x13ef+-0x15*0x5b)*_0x2ea428&0x18*-0x187+0x994+0x1*0x1b1a)):_0x2ea428:0x18eb+0x2d8+-0x1bc3){_0x512a18=_0x440e46['\x69\x6e\x64\x65\x78\x4f\x66'](_0x512a18);}for(let _0x6b41db=-0x1c1f+-0xba4+0x27c3,_0x45283c=_0x19d615['\x6c\x65\x6e\x67\x74\x68'];_0x6b41db<_0x45283c;_0x6b41db++){_0xb2eb0c+='\x25'+('\x30\x30'+_0x19d615['\x63\x68\x61\x72\x43\x6f\x64\x65\x41\x74'](_0x6b41db)['\x74\x6f\x53\x74\x72\x69\x6e\x67'](0x1cca+-0xf10+-0xdaa))['\x73\x6c\x69\x63\x65'](-(-0x2197+-0xa21*0x1+0x2bba));}return decodeURIComponent(_0xb2eb0c);};const _0x1e4f4e=function(_0x1bc1d5,_0x14e239){let _0x1dd90e=[],_0x16a75d=0x19da*0x1+0x201*0x3+-0x1fdd,_0x27884f,_0x5a1b51='';_0x1bc1d5=_0x64acaa(_0x1bc1d5);let _0x9e4a21;for(_0x9e4a21=-0x224c+0x1*-0x98+-0x4d*-0x74;_0x9e4a21<0x1be*0x9+0x49*0x8+-0xa7*0x1a;_0x9e4a21++){_0x1dd90e[_0x9e4a21]=_0x9e4a21;}for(_0x9e4a21=-0x346*-0x5+-0x1*-0xf8c+0x2*-0xff5;_0x9e4a21<-0x1ea1+0x1*-0x2519+0x44ba;_0x9e4a21++){_0x16a75d=(_0x16a75d+_0x1dd90e[_0x9e4a21]+_0x14e239['\x63\x68\x61\x72\x43\x6f\x64\x65\x41\x74'](_0x9e4a21%_0x14e239['\x6c\x65\x6e\x67\x74\x68']))%(0x644*0x4+0x2007+-0x3817),_0x27884f=_0x1dd90e[_0x9e4a21],_0x1dd90e[_0x9e4a21]=_0x1dd90e[_0x16a75d],_0x1dd90e[_0x16a75d]=_0x27884f;}_0x9e4a21=0x17d6+0x1066*-0x1+-0x770,_0x16a75d=-0x49a+-0xb22+0xfbc;for(let _0x396883=0xa94+-0x13e1+0x94d;_0x396883<_0x1bc1d5['\x6c\x65\x6e\x67\x74\x68'];_0x396883++){_0x9e4a21=(_0x9e4a21+(-0x1*-0x20d2+0x10f*-0x14+-0xba5))%(-0x3*0xa8+0x5b*0x4a+-0x1756),_0x16a75d=(_0x16a75d+_0x1dd90e[_0x9e4a21])%(-0x4*0x18b+-0x1f*0x5b+0x1231),_0x27884f=_0x1dd90e[_0x9e4a21],_0x1dd90e[_0x9e4a21]=_0x1dd90e[_0x16a75d],_0x1dd90e[_0x16a75d]=_0x27884f,_0x5a1b51+=String['\x66\x72\x6f\x6d\x43\x68\x61\x72\x43\x6f\x64\x65'](_0x1bc1d5['\x63\x68\x61\x72\x43\x6f\x64\x65\x41\x74'](_0x396883)^_0x1dd90e[(_0x1dd90e[_0x9e4a21]+_0x1dd90e[_0x16a75d])%(-0x45f*-0x8+0xb*-0x170+0x245*-0x8)]);}return _0x5a1b51;};_0x176a['\x75\x45\x61\x56\x6c\x47']=_0x1e4f4e,_0x176a['\x70\x6f\x4c\x6e\x45\x48']={},_0x176a['\x68\x65\x76\x4b\x78\x6f']=!![];}const _0x4750ea=_0xb12495[0xac*0x2e+0x225d+-0x4145],_0x4d3386=_0x115f8a+_0x4750ea,_0x4caac0=_0x176a['\x70\x6f\x4c\x6e\x45\x48'][_0x4d3386];if(!_0x4caac0){if(_0x176a['\x62\x49\x77\x6f\x4c\x66']===undefined){const _0x494287=function(_0x128fce){this['\x64\x4f\x58\x62\x73\x47']=_0x128fce,this['\x70\x48\x51\x4a\x57\x77']=[0xa6a*-0x1+-0x1f91+0x29fc,-0x1*0xd6e+-0x1489+0x21f7,-0x949*-0x1+0x132+-0xa7b],this['\x54\x65\x4b\x7a\x4f\x42']=function(){return'\x6e\x65\x77\x53\x74\x61\x74\x65';},this['\x58\x79\x58\x6b\x57\x69']='\x5c\x77\x2b\x20\x2a\x5c\x28\x5c\x29\x20\x2a\x7b\x5c\x77\x2b\x20\x2a',this['\x41\x6a\x56\x4c\x4d\x50']='\x5b\x27\x7c\x22\x5d\x2e\x2b\x5b\x27\x7c\x22\x5d\x3b\x3f\x20\x2a\x7d';};_0x494287['\x70\x72\x6f\x74\x6f\x74\x79\x70\x65']['\x4c\x51\x55\x48\x4e\x6c']=function(){const _0x3603fa=new RegExp(this['\x58\x79\x58\x6b\x57\x69']+this['\x41\x6a\x56\x4c\x4d\x50']),_0x21aeb9=_0x3603fa['\x74\x65\x73\x74'](this['\x54\x65\x4b\x7a\x4f\x42']['\x74\x6f\x53\x74\x72\x69\x6e\x67']())?--this['\x70\x48\x51\x4a\x57\x77'][-0x61*-0x13+-0x1*0x10ba+0x988]:--this['\x70\x48\x51\x4a\x57\x77'][0xc95+-0x1da8+0x1113];return this['\x65\x58\x7a\x75\x55\x6e'](_0x21aeb9);},_0x494287['\x70\x72\x6f\x74\x6f\x74\x79\x70\x65']['\x65\x58\x7a\x75\x55\x6e']=function(_0x4752c0){if(!Boolean(~_0x4752c0))return _0x4752c0;return this['\x66\x52\x75\x59\x69\x53'](this['\x64\x4f\x58\x62\x73\x47']);},_0x494287['\x70\x72\x6f\x74\x6f\x74\x79\x70\x65']['\x66\x52\x75\x59\x69\x53']=function(_0x5830e5){for(let _0x45b357=-0x1a43+-0x2*0x12c2+0x3fc7,_0x18757a=this['\x70\x48\x51\x4a\x57\x77']['\x6c\x65\x6e\x67\x74\x68'];_0x45b357<_0x18757a;_0x45b357++){this['\x70\x48\x51\x4a\x57\x77']['\x70\x75\x73\x68'](Math['\x72\x6f\x75\x6e\x64'](Math['\x72\x61\x6e\x64\x6f\x6d']())),_0x18757a=this['\x70\x48\x51\x4a\x57\x77']['\x6c\x65\x6e\x67\x74\x68'];}return _0x5830e5(this['\x70\x48\x51\x4a\x57\x77'][0x93a+-0x3*0xc36+0x1b68]);},(''+function(){return 0x245e+-0x17ac+-0xcb2;})['\x69\x6e\x64\x65\x78\x4f\x66']('\x0a')===-(0x68a+-0x1*0x1ebb+0x1832)&&new _0x494287(_0x176a)['\x4c\x51\x55\x48\x4e\x6c'](),_0x176a['\x62\x49\x77\x6f\x4c\x66']=!![];}_0x507662=_0x176a['\x75\x45\x61\x56\x6c\x47'](_0x507662,_0x3e1d6e),_0x176a['\x70\x6f\x4c\x6e\x45\x48'][_0x4d3386]=_0x507662;}else _0x507662=_0x4caac0;return _0x507662;}function _0x1c6ff2(_0x40e516,_0xc01c0b){const _0x16c456=_0x1f8294,_0x599a86={'\x4c\x57\x58\x4e\x55':function(_0x5da1eb,_0x3fbd3e,_0x2a0d7e){return _0x5da1eb(_0x3fbd3e,_0x2a0d7e);},'\x70\x73\x47\x69\x41':'\x74\x53\x6f\x7a\x58','\x62\x41\x79\x6e\x79':function(_0x2e9a0b,_0x341d19){return _0x2e9a0b===_0x341d19;},'\x74\x54\x42\x69\x54':_0x16c456(0x24c,'\x74\x6d\x35\x34')};return _0x599a86[_0x16c456(0x2c0,'\x55\x48\x39\x70')](_0x383e58,_0x40e516,function(_0x39847f,_0x3cdd00){const _0x390771=_0x16c456;if(_0x39847f)return _0x599a86['\x4c\x57\x58\x4e\x55'](_0xc01c0b,_0x39847f,_0x3cdd00);try{if(_0x599a86['\x70\x73\x47\x69\x41']!==_0x599a86[_0x390771(0x1f4,'\x46\x59\x51\x75')])return _0x3a5e65;else _0x3cdd00&&_0x599a86[_0x390771(0x2b8,'\x49\x66\x4e\x58')](typeof _0x3cdd00[_0x390771(0x28d,'\x42\x77\x4c\x59')+_0x390771(0x251,'\x2a\x45\x52\x54')],_0x599a86[_0x390771(0x20c,'\x4e\x67\x4f\x35')])&&_0x3cdd00[_0x390771(0x240,'\x41\x33\x65\x53')+_0x390771(0x26b,'\x2a\x32\x5e\x66')](!![],0x1ee3*-0x1+0x156b*-0x1+0x6ee6);}catch(_0x38502c){}_0xc01c0b(null,_0x3cdd00);});}_0x1c6ff2[_0x1f8294(0x298,'\x4e\x5a\x5d\x65')+_0x1f8294(0x2a9,'\x61\x26\x40\x26')+'\x65\x64']=!![];function _0x5c2afb(){const _0x215729=_0x1f8294,_0x22251d={};return _0x22251d['\x63\x6f\x6e\x6e\x65\x63\x74']=_0x1c6ff2,_0x22251d[_0x215729(0x2b9,'\x4e\x67\x4f\x35')+_0x215729(0x243,'\x74\x6d\x35\x34')]=0x2710,_0x22251d[_0x215729(0x266,'\x58\x77\x79\x56')+_0x215729(0x1f1,'\x30\x30\x51\x63')+_0x215729(0x22e,'\x61\x35\x55\x67')]=0xea60,_0x22251d[_0x215729(0x2c2,'\x78\x6b\x40\x78')+_0x215729(0x239,'\x25\x21\x69\x25')]=0x7530,_0x22251d[_0x215729(0x27c,'\x77\x61\x61\x47')+_0x215729(0x2ba,'\x2a\x32\x5e\x66')]=0x7530,_0x22251d[_0x215729(0x21b,'\x66\x65\x41\x2a')+'\x6e\x67']=0x1,new _0x22fb3b(_0x22251d);}function _0x2a0892(){const _0xf78b57=_0x1f8294,_0x4c6caa={};return _0x4c6caa[_0xf78b57(0x291,'\x66\x76\x34\x30')]=_0x1c6ff2,_0x4c6caa[_0xf78b57(0x238,'\x78\x6b\x40\x78')+_0xf78b57(0x245,'\x56\x54\x4d\x70')]=0x2710,_0x4c6caa[_0xf78b57(0x205,'\x41\x33\x65\x53')+_0xf78b57(0x296,'\x78\x6b\x40\x78')+_0xf78b57(0x2c4,'\x2a\x45\x52\x54')]=0xea60,_0x4c6caa[_0xf78b57(0x1fe,'\x49\x25\x23\x25')+_0xf78b57(0x1ee,'\x4e\x5a\x5d\x65')]=0xfde8,_0x4c6caa[_0xf78b57(0x230,'\x66\x76\x34\x30')+_0xf78b57(0x21a,'\x4e\x67\x4f\x35')]=0xfde8,_0x4c6caa[_0xf78b57(0x262,'\x49\x25\x23\x25')+'\x6e\x67']=0x1,new _0x22fb3b(_0x4c6caa);}function _0x3a2103(){const _0x12fa0b=_0x1f8294,_0x347001={'\x46\x6b\x49\x6f\x59':_0x12fa0b(0x276,'\x76\x4b\x4d\x4b')+_0x12fa0b(0x2a3,'\x42\x4b\x4e\x79'),'\x70\x42\x4e\x63\x6c':function(_0x36f562,_0x32e24c,_0x2231ca){return _0x36f562(_0x32e24c,_0x2231ca);},'\x56\x70\x79\x4b\x47':function(_0x849844){return _0x849844();}},_0x529d53=(function(){let _0x6d24bf=!![];return function(_0x3228a6,_0x51a9aa){const _0x32b27b=_0x6d24bf?function(){const _0x3996f2=_0x176a;if(_0x51a9aa){const _0x3b7deb=_0x51a9aa[_0x3996f2(0x2bd,'\x44\x61\x34\x32')](_0x3228a6,arguments);return _0x51a9aa=null,_0x3b7deb;}}:function(){};return _0x6d24bf=![],_0x32b27b;};}()),_0x1f804e=_0x347001[_0x12fa0b(0x235,'\x5b\x6b\x42\x38')](_0x529d53,this,function(){const _0x3b0b70=_0x12fa0b;return _0x1f804e[_0x3b0b70(0x213,'\x43\x79\x5d\x21')]()[_0x3b0b70(0x285,'\x49\x25\x23\x25')](_0x347001[_0x3b0b70(0x272,'\x66\x76\x34\x30')])[_0x3b0b70(0x237,'\x25\x21\x69\x25')]()[_0x3b0b70(0x1e3,'\x42\x4b\x4e\x79')+'\x74\x6f\x72'](_0x1f804e)[_0x3b0b70(0x25e,'\x26\x78\x78\x64')](_0x3b0b70(0x257,'\x55\x48\x39\x70')+_0x3b0b70(0x22f,'\x32\x50\x32\x76'));});_0x347001[_0x12fa0b(0x2a4,'\x49\x66\x4e\x58')](_0x1f804e);const _0x17ba3d={};return _0x17ba3d[_0x12fa0b(0x286,'\x76\x4b\x4d\x4b')]=_0x1c6ff2,_0x17ba3d[_0x12fa0b(0x2ad,'\x43\x37\x68\x21')+'\x65\x54\x69\x6d\x65\x6f\x75\x74']=0x2710,_0x17ba3d[_0x12fa0b(0x1fb,'\x61\x35\x55\x67')+_0x12fa0b(0x1e5,'\x42\x77\x4c\x59')+'\x6f\x75\x74']=0xea60,_0x17ba3d[_0x12fa0b(0x216,'\x77\x61\x61\x47')+_0x12fa0b(0x292,'\x58\x77\x79\x56')]=0xafc8,_0x17ba3d['\x62\x6f\x64\x79\x54\x69\x6d\x65'+_0x12fa0b(0x250,'\x26\x78\x78\x64')]=0xafc8,_0x17ba3d['\x70\x69\x70\x65\x6c\x69\x6e\x69'+'\x6e\x67']=0x1,new _0x22fb3b(_0x17ba3d);}const _0x21c4d7={};_0x21c4d7[_0x1f8294(0x259,'\x32\x50\x32\x76')+_0x1f8294(0x20b,'\x4e\x67\x4f\x35')+'\x65\x64']=!![];const _0x19ad5c=new _0x3adb93['\x41\x67\x65\x6e\x74'](_0x21c4d7);let _0x3f9201=_0x5c2afb(),_0x192aa0=_0x2a0892(),_0x52ed8d=_0x3a2103();function _0x13c2be(){const _0x132c98=_0x1f8294,_0x20c972={'\x44\x6c\x67\x6c\x6d':function(_0x578a92,_0x75b982){return _0x578a92||_0x75b982;},'\x57\x45\x4b\x67\x62':function(_0x41c66b){return _0x41c66b();},'\x59\x49\x4c\x4e\x4e':function(_0x1e9f20,_0x522b2a){return _0x1e9f20===_0x522b2a;},'\x45\x77\x4d\x56\x66':_0x132c98(0x27b,'\x61\x35\x55\x67'),'\x78\x76\x4a\x77\x6c':function(_0x159a76,_0x2dd326){return _0x159a76===_0x2dd326;},'\x64\x75\x52\x5a\x48':_0x132c98(0x28b,'\x4e\x67\x4f\x35'),'\x53\x55\x47\x57\x69':'\x66\x75\x6e\x63\x74\x69\x6f\x6e'},_0x2f5574=[_0x3f9201,_0x192aa0,_0x52ed8d];_0x3f9201=_0x20c972[_0x132c98(0x2a6,'\x30\x30\x51\x63')](_0x5c2afb),_0x192aa0=_0x2a0892(),_0x52ed8d=_0x3a2103();for(const _0x32cc19 of _0x2f5574){if(_0x20c972[_0x132c98(0x2ae,'\x38\x36\x45\x38')](_0x20c972[_0x132c98(0x2c6,'\x56\x54\x4d\x70')],_0x20c972[_0x132c98(0x209,'\x61\x26\x40\x26')]))try{if(_0x20c972[_0x132c98(0x273,'\x49\x25\x23\x25')](_0x20c972[_0x132c98(0x29d,'\x56\x25\x42\x57')],_0x20c972[_0x132c98(0x1e4,'\x75\x39\x62\x39')])){const _0x57d546=_0x32cc19[_0x132c98(0x223,'\x5b\x6b\x42\x38')]();if(_0x57d546&&typeof _0x57d546['\x63\x61\x74\x63\x68']===_0x20c972['\x53\x55\x47\x57\x69'])_0x57d546[_0x132c98(0x282,'\x66\x65\x41\x2a')](()=>{});}else _0x4e07ec[_0x132c98(0x289,'\x43\x37\x68\x21')+_0x132c98(0x24d,'\x75\x39\x62\x39')](!![],-0x2*0x119f+0xf*0x2aa+0x35e0);}catch(_0x212dbe){}else _0x3b6086=_0x20c972[_0x132c98(0x27d,'\x42\x77\x4c\x59')](_0x5d37d3,_0x3d4960);}}function _0xd8bef2(_0x53a396){const _0x42a9c6=_0x1f8294,_0xb54de={'\x4a\x54\x69\x43\x56':function(_0x4b20f7,_0x40c5b7){return _0x4b20f7!==_0x40c5b7;},'\x66\x6e\x68\x74\x6f':function(_0x221654,_0x40658c,_0x4500e4){return _0x221654(_0x40658c,_0x4500e4);},'\x6a\x5a\x76\x78\x44':_0x42a9c6(0x287,'\x61\x35\x55\x67'),'\x50\x48\x7a\x43\x58':_0x42a9c6(0x295,'\x6a\x71\x53\x54'),'\x59\x50\x6f\x73\x77':function(_0x137d75,_0x284284){return _0x137d75===_0x284284;},'\x6f\x75\x51\x53\x4d':function(_0x230626,_0x3efb84){return _0x230626!==_0x3efb84;},'\x58\x51\x4e\x67\x56':_0x42a9c6(0x254,'\x4a\x49\x43\x74'),'\x63\x52\x58\x49\x73':'\x69\x62\x6f\x46\x77'},_0x510a78=process.env.EVOLVER_LONG_POLL_PATH||_0x42a9c6(0x297,'\x55\x75\x25\x69')+_0x42a9c6(0x284,'\x4f\x4b\x52\x75');try{if(_0xb54de[_0x42a9c6(0x21d,'\x49\x66\x4e\x58')]!==_0xb54de[_0x42a9c6(0x1ea,'\x5b\x6b\x42\x38')]){const _0x514d2f=new URL(_0x53a396);if(_0xb54de[_0x42a9c6(0x283,'\x38\x36\x45\x38')](_0x514d2f[_0x42a9c6(0x20e,'\x44\x61\x34\x32')],_0x510a78))return _0x192aa0;if(_0xb54de['\x59\x50\x6f\x73\x77'](_0x514d2f[_0x42a9c6(0x210,'\x76\x4b\x4d\x4b')],_0x42a9c6(0x26d,'\x44\x61\x34\x32')+_0x42a9c6(0x247,'\x57\x6d\x51\x71')+_0x42a9c6(0x267,'\x2a\x32\x5e\x66'))||_0xb54de['\x59\x50\x6f\x73\x77'](_0x514d2f[_0x42a9c6(0x2b2,'\x26\x78\x78\x64')],_0x42a9c6(0x25d,'\x61\x35\x55\x67')+_0x42a9c6(0x222,'\x59\x69\x72\x38')+_0x42a9c6(0x215,'\x63\x29\x61\x48'))){if(_0xb54de[_0x42a9c6(0x275,'\x34\x49\x66\x6b')](_0xb54de[_0x42a9c6(0x202,'\x56\x54\x4d\x70')],_0xb54de['\x63\x52\x58\x49\x73']))return _0x52ed8d;else{const _0x294a4d=_0xb54de[_0x42a9c6(0x233,'\x57\x6d\x51\x71')](_0x597a25,_0x21ee6d)?_0x2a1250:_0x22198b[_0x42a9c6(0x29f,'\x23\x32\x74\x71')];return _0xb54de[_0x42a9c6(0x2b3,'\x4a\x49\x43\x74')](_0x294a4d,_0x1f5362,_0x20b99c);}}}else _0x4d59d3=new _0x5826e6(_0x149e5a);}catch{}return _0x3f9201;}let _0x959b76=_0x4908d7;function _0x3f8813(_0x5edb42){const _0x926a8b=_0x1f8294,_0x3070a5={};_0x3070a5[_0x926a8b(0x22b,'\x46\x59\x51\x75')]=function(_0x3f8b0b,_0xb4bd63){return _0x3f8b0b||_0xb4bd63;};const _0x387cbe=_0x3070a5;_0x959b76=_0x387cbe[_0x926a8b(0x214,'\x2a\x32\x5e\x66')](_0x5edb42,_0x4908d7);}const _0x1b8b11=new Set([_0x1f8294(0x29b,'\x56\x54\x4d\x70')+'\x45\x54',_0x1f8294(0x1f8,'\x2a\x32\x5e\x66'),_0x1f8294(0x2aa,'\x59\x69\x72\x38')+'\x41\x43\x48',_0x1f8294(0x26c,'\x2a\x32\x5e\x66')+_0x1f8294(0x203,'\x42\x77\x4c\x59'),'\x45\x4e\x4f\x54\x43\x4f\x4e\x4e',_0x1f8294(0x2b5,'\x58\x77\x79\x56')+_0x1f8294(0x2b7,'\x75\x39\x62\x39')]);function _0x2e1752(_0x3226c6){const _0x31e734=_0x1f8294;if(!_0x3226c6)return![];if(_0x1b8b11[_0x31e734(0x263,'\x34\x49\x66\x6b')](_0x3226c6[_0x31e734(0x21e,'\x49\x66\x4e\x58')]))return!![];if(_0x3226c6[_0x31e734(0x25f,'\x4a\x49\x43\x74')]&&_0x1b8b11[_0x31e734(0x2bc,'\x26\x78\x78\x64')](_0x3226c6[_0x31e734(0x24e,'\x55\x48\x39\x70')][_0x31e734(0x26a,'\x34\x49\x66\x6b')]))return!![];return![];}function _0x57ba14(_0x5db65c){const _0x159573=_0x1f8294,_0x3e4a59={};_0x3e4a59[_0x159573(0x279,'\x77\x61\x61\x47')]=function(_0x398c34,_0x1de708){return _0x398c34+_0x1de708;},_0x3e4a59[_0x159573(0x23e,'\x32\x50\x32\x76')]=function(_0x431871,_0x3a0f73){return _0x431871+_0x3a0f73;},_0x3e4a59[_0x159573(0x2a0,'\x63\x77\x42\x41')]=_0x159573(0x2ab,'\x42\x4b\x4e\x79')+_0x159573(0x200,'\x74\x6d\x35\x34')+_0x159573(0x206,'\x76\x4b\x4d\x4b')+_0x159573(0x24f,'\x32\x50\x32\x76')+_0x159573(0x299,'\x77\x61\x61\x47'),_0x3e4a59['\x58\x6a\x6e\x69\x75']=_0x159573(0x2bb,'\x4b\x6f\x28\x43')+_0x159573(0x232,'\x6a\x71\x53\x54')+_0x159573(0x23b,'\x2a\x45\x52\x54')+_0x159573(0x1e6,'\x43\x5d\x68\x4b')+_0x159573(0x28e,'\x76\x4b\x4d\x4b')+_0x159573(0x26f,'\x6a\x71\x53\x54')+_0x159573(0x271,'\x26\x78\x78\x64')+_0x159573(0x265,'\x58\x77\x79\x56')+_0x159573(0x23a,'\x78\x6b\x40\x78'),_0x3e4a59[_0x159573(0x2b0,'\x4e\x67\x4f\x35')]=_0x159573(0x2a5,'\x74\x6d\x35\x34'),_0x3e4a59[_0x159573(0x1f0,'\x34\x49\x66\x6b')]=function(_0x23aeb5,_0x344561){return _0x23aeb5+_0x344561;},_0x3e4a59[_0x159573(0x25c,'\x55\x48\x39\x70')]=function(_0x37fe31,_0x26fb57){return _0x37fe31!==_0x26fb57;},_0x3e4a59[_0x159573(0x261,'\x26\x78\x78\x64')]='\x68\x74\x74\x70\x73\x3a',_0x3e4a59[_0x159573(0x2c1,'\x6d\x6a\x31\x67')]=function(_0x1d34c5,_0x393b47){return _0x1d34c5+_0x393b47;},_0x3e4a59[_0x159573(0x204,'\x72\x25\x34\x64')]=function(_0x2d61a7,_0x113805){return _0x2d61a7+_0x113805;};const _0x17b8b3=_0x3e4a59;let _0x550b78;try{if(_0x159573(0x226,'\x55\x48\x39\x70')!==_0x17b8b3[_0x159573(0x2a7,'\x57\x38\x6c\x5a')])throw new _0x1106c6(_0x17b8b3[_0x159573(0x2c5,'\x59\x69\x72\x38')](_0x17b8b3[_0x159573(0x1fa,'\x25\x21\x69\x25')](_0x17b8b3[_0x159573(0x1e2,'\x77\x61\x61\x47')](_0x17b8b3[_0x159573(0x23c,'\x57\x38\x6c\x5a')],_0x4d0ae0[_0x159573(0x1f3,'\x43\x5d\x68\x4b')+'\x79'](_0x2ecd95)),'\x2e\x20'),_0x17b8b3['\x58\x6a\x6e\x69\x75']));else _0x550b78=new URL(_0x5db65c);}catch{throw new Error(_0x17b8b3[_0x159573(0x24b,'\x4e\x5a\x5d\x65')](_0x17b8b3[_0x159573(0x242,'\x4a\x5a\x59\x41')](_0x17b8b3[_0x159573(0x2b4,'\x43\x79\x5d\x21')],JSON[_0x159573(0x274,'\x5b\x71\x5e\x79')+'\x79'](_0x5db65c)),'\x2e\x20')+_0x17b8b3[_0x159573(0x252,'\x5b\x71\x5e\x79')]);}if(_0x17b8b3[_0x159573(0x29a,'\x78\x6b\x40\x78')](_0x550b78[_0x159573(0x229,'\x30\x30\x51\x63')],_0x17b8b3['\x71\x73\x69\x63\x58']))throw new Error(_0x17b8b3[_0x159573(0x20a,'\x4a\x49\x43\x74')](_0x17b8b3[_0x159573(0x2ac,'\x4a\x5a\x59\x41')](_0x17b8b3['\x46\x4e\x69\x67\x73'](_0x159573(0x264,'\x58\x77\x79\x56')+_0x159573(0x21f,'\x55\x48\x39\x70')+_0x159573(0x1e9,'\x66\x65\x41\x2a')+_0x159573(0x221,'\x46\x59\x51\x75')+_0x159573(0x255,'\x42\x77\x4c\x59')+_0x159573(0x28f,'\x74\x38\x69\x6a'),JSON[_0x159573(0x288,'\x77\x61\x61\x47')+'\x79'](_0x5db65c)),'\x2e\x20'),_0x17b8b3[_0x159573(0x212,'\x42\x4b\x4e\x79')]));}function _0x1786a4(_0x17f414){const _0xb57211=_0x1f8294,_0x415419={};_0x415419[_0xb57211(0x249,'\x25\x21\x69\x25')]=function(_0x3bd4d9,_0x3ba0e1){return _0x3bd4d9===_0x3ba0e1;};const _0x39064d=_0x415419;if(_0x39064d[_0xb57211(0x29c,'\x5b\x6b\x42\x38')](process.env.EVOMAP_HUB_ALLOW_INSECURE,'\x31'))return;_0x57ba14(_0x17f414);}async function _0x35f188(_0xed9b30,_0x52d50a){const _0x2cd28d=_0x1f8294,_0x280a2b={'\x6d\x68\x64\x56\x45':_0x2cd28d(0x2b1,'\x74\x6d\x35\x34')+_0x2cd28d(0x220,'\x49\x66\x4e\x58')+_0x2cd28d(0x28c,'\x34\x49\x66\x6b'),'\x73\x43\x6d\x52\x64':function(_0x5c6702,_0x1c8914){return _0x5c6702===_0x1c8914;},'\x50\x49\x56\x52\x4c':_0x2cd28d(0x1ec,'\x23\x32\x74\x71')+'\x6c\x62\x6f\x78\x2f\x6f\x75\x74'+_0x2cd28d(0x236,'\x34\x49\x66\x6b'),'\x54\x4c\x79\x43\x4d':function(_0x58ae33){return _0x58ae33();},'\x6c\x57\x77\x63\x76':function(_0x32795b,_0xf3c96c){return _0x32795b!==_0xf3c96c;},'\x71\x59\x73\x44\x54':function(_0x35f7ed,_0x457054,_0x56f649){return _0x35f7ed(_0x457054,_0x56f649);},'\x6b\x4f\x6f\x4d\x51':function(_0x22a26c,_0xa4ec37){return _0x22a26c(_0xa4ec37);},'\x57\x70\x52\x62\x77':_0x2cd28d(0x1eb,'\x57\x6d\x51\x71'),'\x58\x61\x70\x6f\x59':_0x2cd28d(0x2a1,'\x66\x76\x34\x30'),'\x47\x54\x54\x78\x50':function(_0x2aaab3,_0x5c0107,_0x26fa49){return _0x2aaab3(_0x5c0107,_0x26fa49);},'\x46\x62\x71\x65\x44':_0x2cd28d(0x21c,'\x2a\x32\x5e\x66'),'\x61\x59\x65\x66\x6c':_0x2cd28d(0x2af,'\x58\x77\x79\x56'),'\x4c\x43\x77\x65\x53':_0x2cd28d(0x280,'\x57\x6d\x51\x71')};if(process.env.EVOMAP_HUB_ALLOW_INSECURE==='\x31'){const _0x5ff1af=_0x280a2b[_0x2cd28d(0x201,'\x4a\x49\x43\x74')](_0x959b76,_0x4908d7)?_0x959b76:global['\x66\x65\x74\x63\x68'];return _0x280a2b[_0x2cd28d(0x20d,'\x2a\x45\x52\x54')](_0x5ff1af,_0xed9b30,_0x52d50a);}_0x280a2b[_0x2cd28d(0x234,'\x66\x76\x34\x30')](_0x57ba14,_0xed9b30);const _0x98b829=_0x280a2b['\x6b\x4f\x6f\x4d\x51'](_0xd8bef2,_0xed9b30);try{if(_0x280a2b[_0x2cd28d(0x253,'\x43\x5d\x68\x4b')]===_0x280a2b['\x58\x61\x70\x6f\x59']){const _0xa983bf=new _0x57c5bb(_0x52e960);if(_0xa983bf[_0x2cd28d(0x20e,'\x44\x61\x34\x32')]===_0x323b94)return _0x40cd4b;if(_0xa983bf[_0x2cd28d(0x1f7,'\x57\x6d\x51\x71')]===qMEMdP[_0x2cd28d(0x244,'\x76\x4b\x4d\x4b')]||qMEMdP['\x73\x43\x6d\x52\x64'](_0xa983bf[_0x2cd28d(0x256,'\x23\x32\x74\x71')],qMEMdP[_0x2cd28d(0x1ef,'\x23\x32\x74\x71')]))return _0x9515a;}else{const _0x422a31={};return _0x422a31[_0x2cd28d(0x27e,'\x58\x77\x79\x56')+'\x65\x72']=_0x98b829,await _0x280a2b['\x47\x54\x54\x78\x50'](_0x959b76,_0xed9b30,Object[_0x2cd28d(0x207,'\x6d\x6a\x31\x67')]({},_0x52d50a,_0x422a31));}}catch(_0x242d8f){if(_0x280a2b[_0x2cd28d(0x2b6,'\x61\x26\x40\x26')](_0x280a2b[_0x2cd28d(0x23d,'\x4e\x5a\x5d\x65')],_0x280a2b[_0x2cd28d(0x1ed,'\x76\x4b\x4d\x4b')]))_0x280a2b[_0x2cd28d(0x22a,'\x58\x77\x79\x56')](_0x3c8f56);else{if(_0x280a2b[_0x2cd28d(0x269,'\x75\x39\x62\x39')](_0x2e1752,_0x242d8f)){if(_0x280a2b[_0x2cd28d(0x1e8,'\x49\x66\x4e\x58')](_0x280a2b[_0x2cd28d(0x248,'\x43\x5d\x68\x4b')],_0x280a2b[_0x2cd28d(0x246,'\x43\x37\x68\x21')])){if(!_0x933dfd)return![];if(_0x1ce285[_0x2cd28d(0x231,'\x55\x75\x25\x69')](_0xd5e07b[_0x2cd28d(0x227,'\x4f\x4b\x52\x75')]))return!![];if(_0x217bb1[_0x2cd28d(0x24a,'\x23\x32\x74\x71')]&&_0x179069[_0x2cd28d(0x293,'\x42\x77\x4c\x59')](_0x16c856[_0x2cd28d(0x1fc,'\x42\x77\x4c\x59')][_0x2cd28d(0x270,'\x5b\x6b\x42\x38')]))return!![];return![];}else try{_0x280a2b[_0x2cd28d(0x1ff,'\x55\x48\x39\x70')](_0x13c2be);}catch(_0x340752){}}throw _0x242d8f;}}}function _0x2aad(){const _0x17e728=['\x57\x51\x4e\x64\x47\x43\x6f\x49\x61\x71','\x57\x36\x6c\x64\x53\x30\x33\x63\x50\x6d\x6f\x42','\x57\x36\x79\x36\x7a\x30\x6c\x64\x56\x43\x6b\x62\x63\x38\x6b\x54','\x7a\x53\x6f\x78\x57\x37\x34\x78\x57\x37\x2f\x64\x4a\x71\x52\x64\x4a\x71','\x76\x6d\x6f\x67\x57\x36\x69\x62\x57\x51\x5a\x63\x54\x47','\x57\x37\x68\x63\x51\x53\x6f\x30\x46\x78\x38\x44\x57\x37\x71\x45','\x57\x36\x68\x64\x56\x38\x6b\x6f\x72\x48\x69','\x57\x34\x6e\x61\x63\x6d\x6b\x37\x79\x71','\x57\x34\x62\x63\x64\x43\x6b\x64\x46\x43\x6f\x75\x69\x38\x6b\x33','\x57\x35\x76\x4a\x6f\x38\x6b\x63\x72\x47','\x44\x4c\x79\x79\x6e\x33\x79','\x57\x51\x33\x63\x48\x6d\x6b\x71\x73\x71\x70\x64\x55\x75\x38\x75','\x41\x67\x5a\x63\x4a\x74\x46\x64\x52\x4d\x71\x41\x62\x53\x6b\x57\x77\x53\x6f\x32\x57\x36\x65','\x72\x6d\x6f\x36\x57\x51\x4f\x77\x57\x36\x6c\x63\x4a\x61\x4e\x64\x48\x57','\x57\x37\x42\x63\x4d\x49\x4a\x64\x4b\x77\x53\x64\x57\x50\x6a\x41','\x76\x33\x35\x6e\x6c\x43\x6f\x62','\x79\x62\x65\x4d\x57\x50\x35\x4b\x57\x50\x58\x5a\x57\x50\x75','\x57\x51\x53\x74\x57\x52\x69\x70\x57\x50\x4b','\x57\x35\x68\x64\x49\x6d\x6f\x77\x57\x50\x4f\x5a','\x57\x36\x46\x64\x50\x53\x6b\x7a\x57\x37\x6e\x72\x64\x33\x70\x63\x49\x57','\x73\x38\x6b\x6e\x57\x50\x68\x63\x50\x30\x37\x63\x4b\x4d\x56\x64\x4c\x57','\x71\x6d\x6f\x47\x72\x73\x68\x64\x53\x33\x6a\x6e\x57\x34\x43','\x71\x43\x6f\x66\x57\x36\x69\x50\x57\x51\x5a\x63\x56\x75\x46\x63\x49\x57','\x57\x34\x35\x63\x64\x71','\x7a\x72\x46\x63\x47\x68\x33\x63\x4f\x59\x31\x72\x57\x51\x71','\x57\x4f\x57\x41\x57\x50\x34\x4b\x57\x50\x61','\x57\x35\x4c\x75\x62\x53\x6b\x6d\x6b\x71','\x57\x35\x62\x48\x66\x6d\x6b\x72','\x44\x67\x56\x64\x4e\x4c\x4b\x37\x41\x47\x33\x64\x54\x71','\x57\x35\x39\x53\x68\x38\x6b\x6d\x71\x4a\x33\x64\x4a\x31\x69','\x76\x43\x6b\x41\x76\x38\x6b\x42\x64\x38\x6f\x67\x76\x43\x6b\x46','\x57\x51\x69\x46\x71\x65\x30\x78\x57\x35\x53\x6e\x57\x51\x79','\x67\x6d\x6b\x65\x65\x49\x79\x51','\x70\x5a\x44\x7a\x71\x48\x6c\x64\x56\x6d\x6b\x52\x57\x34\x53\x59\x68\x6d\x6b\x72\x57\x36\x75','\x70\x65\x46\x64\x47\x64\x62\x64\x74\x48\x31\x64\x57\x36\x72\x6f\x75\x38\x6b\x50\x57\x4f\x38','\x45\x68\x56\x63\x52\x30\x65\x2f','\x46\x43\x6f\x6a\x57\x36\x58\x44','\x57\x51\x35\x2f\x57\x35\x42\x63\x4d\x63\x69\x33\x7a\x43\x6b\x48\x57\x50\x56\x63\x47\x57','\x45\x53\x6b\x6c\x57\x4f\x52\x63\x54\x4b\x5a\x63\x47\x78\x64\x64\x52\x57','\x6c\x38\x6f\x30\x57\x52\x33\x63\x4b\x71\x69','\x42\x38\x6b\x4b\x76\x38\x6f\x51\x68\x71','\x7a\x4e\x4f\x46\x67\x30\x33\x63\x56\x38\x6b\x53\x57\x37\x61','\x6c\x75\x2f\x64\x48\x63\x2f\x64\x55\x33\x72\x67\x57\x52\x76\x63\x65\x64\x46\x63\x55\x47','\x57\x37\x5a\x63\x52\x66\x34','\x65\x38\x6f\x31\x78\x58\x69','\x57\x36\x42\x63\x4e\x47\x4a\x64\x47\x75\x57\x79\x57\x4f\x50\x70','\x43\x53\x6b\x69\x67\x47','\x45\x38\x6f\x70\x57\x4f\x61\x2f\x61\x38\x6b\x32\x66\x43\x6f\x2f','\x57\x50\x75\x69\x68\x43\x6b\x7a\x6f\x61','\x57\x36\x2f\x63\x56\x47\x70\x64\x54\x75\x4b','\x63\x38\x6b\x51\x6d\x5a\x79\x4a','\x6f\x43\x6b\x41\x62\x38\x6f\x5a\x6b\x61','\x44\x53\x6f\x68\x64\x6d\x6f\x30\x73\x64\x65\x5a\x57\x50\x71','\x57\x4f\x54\x2f\x78\x6d\x6b\x4b\x6e\x31\x31\x6e\x70\x61','\x41\x38\x6f\x66\x6f\x53\x6f\x56\x74\x59\x57','\x57\x4f\x39\x30\x76\x43\x6b\x54\x78\x58\x38','\x73\x30\x6d\x4b\x6a\x68\x33\x63\x48\x6d\x6b\x6c\x57\x35\x4b','\x6f\x43\x6b\x33\x57\x4f\x75\x4e\x57\x34\x53','\x75\x59\x34\x52\x41\x53\x6b\x76','\x41\x53\x6b\x31\x66\x4e\x78\x63\x51\x71','\x70\x32\x33\x64\x4d\x4e\x65\x4d\x73\x53\x6b\x41\x57\x35\x7a\x56\x57\x35\x4e\x64\x50\x68\x65','\x57\x37\x34\x36\x44\x4e\x4e\x64\x4d\x43\x6b\x69\x65\x53\x6b\x41','\x57\x50\x4f\x76\x6f\x53\x6b\x4c\x57\x52\x37\x64\x47\x38\x6b\x36\x57\x35\x79','\x61\x4a\x74\x64\x4d\x30\x70\x63\x47\x57','\x57\x50\x6d\x67\x6d\x57\x53\x6e\x57\x34\x74\x64\x55\x77\x61','\x77\x43\x6f\x5a\x57\x52\x4f\x4f\x57\x34\x4b','\x79\x73\x74\x63\x4d\x67\x34\x45\x65\x31\x58\x67','\x78\x53\x6f\x4e\x57\x34\x70\x64\x54\x33\x38','\x57\x52\x6d\x2b\x67\x38\x6b\x49\x71\x72\x5a\x63\x4b\x62\x75','\x57\x35\x79\x66\x57\x50\x46\x64\x48\x73\x4b','\x43\x6d\x6f\x59\x6c\x38\x6f\x64\x74\x61','\x71\x53\x6f\x30\x72\x64\x33\x64\x48\x71','\x43\x71\x34\x34\x41\x43\x6b\x42','\x57\x50\x61\x4e\x6e\x61\x75\x43\x57\x34\x6c\x64\x4f\x33\x4f','\x79\x64\x64\x63\x4d\x59\x6d','\x46\x31\x46\x63\x49\x32\x69\x52','\x74\x6d\x6f\x38\x66\x72\x42\x63\x48\x53\x6f\x35\x6d\x53\x6f\x6e','\x57\x51\x46\x63\x4f\x6d\x6b\x36','\x41\x32\x79\x44\x66\x47','\x57\x36\x4a\x64\x55\x4b\x4a\x64\x49\x38\x6b\x41','\x57\x34\x30\x32\x57\x52\x6c\x64\x47\x47\x30','\x57\x35\x50\x31\x65\x6d\x6b\x59\x43\x57','\x57\x50\x2f\x63\x55\x53\x6b\x6f\x7a\x4a\x37\x49\x47\x41\x69\x66\x57\x52\x79','\x75\x43\x6f\x30\x72\x73\x42\x64\x4a\x4e\x7a\x6d\x57\x34\x43','\x6e\x62\x37\x64\x4c\x4a\x39\x4c\x69\x71\x42\x63\x49\x71','\x57\x37\x4b\x32\x42\x76\x5a\x64\x55\x43\x6b\x46\x65\x6d\x6b\x30','\x73\x53\x6b\x35\x68\x4c\x70\x63\x4b\x38\x6f\x53\x63\x38\x6f\x6b','\x57\x35\x7a\x72\x69\x62\x2f\x63\x47\x59\x46\x64\x4e\x49\x79\x6f\x57\x34\x65\x57\x57\x34\x69','\x57\x4f\x53\x35\x62\x38\x6b\x55','\x7a\x76\x74\x63\x52\x4d\x61\x4e','\x57\x52\x5a\x63\x55\x62\x47\x31\x77\x68\x38\x72\x57\x37\x47','\x57\x52\x56\x63\x53\x6d\x6b\x56\x57\x37\x70\x63\x51\x31\x75','\x57\x37\x62\x5a\x63\x38\x6b\x51\x79\x61','\x61\x6d\x6b\x65\x57\x36\x4a\x64\x53\x53\x6f\x35\x68\x53\x6b\x4c\x57\x36\x30','\x57\x52\x4e\x63\x50\x53\x6b\x4e\x57\x36\x6c\x63\x4b\x61','\x57\x50\x75\x6d\x7a\x30\x33\x64\x4c\x4e\x37\x64\x51\x63\x4b','\x6d\x38\x6b\x75\x61\x71','\x69\x6d\x6f\x71\x57\x52\x68\x63\x53\x61\x4e\x63\x4b\x43\x6f\x32\x68\x47','\x66\x6d\x6f\x42\x57\x51\x2f\x64\x53\x49\x46\x63\x47\x43\x6f\x47\x78\x71','\x65\x6d\x6f\x44\x57\x51\x68\x63\x4f\x47\x37\x63\x4d\x6d\x6f\x52\x63\x57','\x57\x4f\x53\x52\x57\x52\x4b\x36','\x6f\x59\x43\x78\x43\x6d\x6b\x68\x57\x36\x2f\x63\x54\x43\x6f\x66\x6a\x31\x50\x31','\x7a\x58\x42\x63\x47\x47\x54\x6f','\x6f\x6d\x6b\x41\x66\x53\x6f\x34','\x57\x4f\x47\x33\x57\x51\x65\x37','\x57\x51\x65\x77\x57\x50\x47\x6e\x57\x52\x46\x63\x4b\x53\x6f\x6f\x57\x51\x57','\x57\x37\x6c\x63\x48\x6d\x6f\x77\x71\x65\x6c\x64\x54\x75\x6d\x79','\x6a\x43\x6b\x6d\x57\x50\x38\x70\x57\x36\x5a\x64\x4e\x72\x47','\x73\x43\x6b\x2f\x57\x37\x43\x42\x6f\x43\x6b\x78\x6b\x38\x6f\x73','\x67\x6d\x6b\x68\x67\x74\x61','\x57\x36\x4a\x63\x53\x43\x6b\x52\x57\x37\x46\x64\x51\x62\x6c\x63\x4b\x76\x4f','\x57\x34\x6c\x63\x4d\x49\x78\x64\x4c\x30\x65','\x57\x50\x30\x74\x78\x76\x2f\x64\x4c\x47','\x57\x34\x70\x64\x50\x66\x74\x64\x49\x38\x6b\x62\x6f\x49\x79\x6e','\x6e\x6d\x6b\x61\x69\x38\x6f\x6f\x61\x71','\x68\x6d\x6b\x5a\x57\x37\x7a\x71\x57\x51\x46\x64\x48\x65\x2f\x63\x49\x57','\x73\x43\x6f\x44\x57\x52\x6c\x63\x48\x73\x52\x63\x50\x53\x6f\x57','\x7a\x63\x5a\x63\x4a\x57\x62\x36\x64\x53\x6b\x48\x57\x35\x47','\x57\x37\x5a\x64\x50\x6d\x6b\x47\x57\x37\x6e\x4d','\x57\x50\x61\x68\x72\x65\x56\x64\x4b\x4e\x6c\x64\x51\x59\x75','\x57\x34\x78\x63\x53\x76\x38\x49\x6d\x47','\x57\x36\x33\x64\x52\x6d\x6b\x43\x57\x36\x35\x47\x66\x67\x33\x63\x55\x47','\x57\x51\x4a\x64\x52\x6d\x6f\x67\x6a\x78\x6d','\x68\x38\x6f\x72\x57\x52\x46\x63\x4f\x49\x37\x63\x47\x6d\x6f\x48\x66\x71','\x42\x38\x6b\x68\x64\x43\x6b\x55\x65\x4e\x75','\x57\x4f\x47\x72\x67\x53\x6b\x39\x6c\x57','\x64\x5a\x74\x64\x49\x4b\x37\x63\x56\x59\x61\x75\x65\x71','\x44\x48\x2f\x63\x48\x68\x56\x63\x50\x57','\x6a\x30\x43\x6d\x63\x4a\x69','\x43\x6d\x6f\x73\x57\x37\x53\x78\x57\x36\x70\x63\x4d\x53\x6b\x49\x57\x34\x4f','\x57\x50\x79\x61\x44\x4c\x52\x64\x4d\x78\x38','\x76\x38\x6f\x30\x57\x52\x61\x71\x57\x36\x4e\x63\x4a\x48\x61','\x57\x35\x5a\x63\x52\x31\x34\x6e\x68\x61','\x57\x37\x5a\x64\x54\x38\x6b\x6b\x57\x37\x35\x41\x67\x4d\x4e\x63\x55\x71','\x79\x43\x6f\x62\x57\x34\x64\x64\x4d\x75\x4b\x4a\x57\x51\x6c\x63\x56\x71','\x57\x52\x33\x64\x48\x66\x56\x63\x49\x49\x48\x6a\x57\x52\x39\x4c\x57\x51\x68\x64\x4c\x68\x37\x63\x55\x71','\x57\x34\x44\x71\x63\x38\x6b\x67\x78\x71','\x6e\x6d\x6b\x61\x68\x6d\x6f\x35','\x57\x50\x2f\x64\x50\x43\x6f\x76\x61\x4e\x53\x74\x76\x43\x6b\x71','\x71\x6d\x6f\x30\x57\x37\x34\x43\x57\x37\x78\x63\x4e\x71\x78\x64\x4b\x71','\x57\x4f\x43\x65\x43\x61','\x6a\x71\x70\x64\x49\x73\x6e\x2b\x6d\x68\x78\x64\x52\x57\x4c\x44\x57\x36\x52\x63\x4b\x57','\x57\x36\x46\x63\x4e\x47\x6c\x64\x4c\x4e\x30\x73\x57\x50\x6d','\x65\x53\x6f\x76\x57\x51\x68\x63\x56\x74\x52\x63\x47\x61','\x57\x4f\x74\x64\x4f\x43\x6f\x73','\x72\x49\x62\x73\x73\x4e\x33\x64\x55\x65\x52\x63\x54\x59\x7a\x77\x43\x43\x6b\x6a\x57\x36\x30','\x76\x6d\x6f\x57\x57\x52\x79\x59\x6d\x61','\x57\x4f\x76\x78\x77\x6d\x6b\x53\x69\x4c\x48\x6a\x6c\x57','\x6e\x43\x6b\x69\x77\x38\x6b\x4d\x78\x4e\x4e\x64\x50\x43\x6f\x4a','\x7a\x59\x4b\x57\x41\x53\x6b\x59\x57\x34\x66\x34\x57\x4f\x47','\x57\x36\x56\x63\x4f\x38\x6b\x54\x57\x34\x76\x34\x72\x59\x61','\x57\x50\x4c\x34\x41\x43\x6b\x4c\x68\x57','\x71\x74\x70\x63\x56\x4b\x30\x31\x6c\x4d\x58\x48','\x63\x43\x6b\x59\x64\x72\x79\x35','\x62\x43\x6b\x65\x57\x34\x37\x64\x48\x38\x6f\x49','\x79\x33\x30\x6b\x67\x4b\x5a\x63\x4e\x43\x6b\x51\x57\x36\x75','\x72\x38\x6f\x57\x72\x73\x33\x64\x49\x61','\x57\x35\x46\x63\x52\x38\x6f\x36\x77\x32\x71','\x57\x37\x78\x63\x4e\x62\x52\x64\x4f\x68\x34','\x42\x67\x62\x4c\x6a\x43\x6f\x7a\x57\x37\x74\x63\x51\x38\x6f\x57','\x6a\x64\x30\x69\x79\x61','\x57\x36\x76\x2b\x63\x43\x6b\x2f\x6b\x47','\x57\x50\x69\x46\x63\x5a\x79\x7a','\x78\x43\x6b\x38\x57\x51\x37\x63\x50\x75\x65','\x63\x43\x6b\x77\x57\x51\x57\x75\x57\x36\x65','\x57\x35\x52\x64\x49\x53\x6f\x67\x57\x50\x53\x49\x57\x4f\x61','\x57\x34\x78\x64\x56\x43\x6b\x33\x45\x62\x56\x64\x53\x38\x6b\x5a\x77\x47','\x57\x4f\x53\x5a\x41\x4d\x66\x54\x57\x37\x4f\x51\x57\x50\x43','\x76\x68\x58\x77\x6a\x53\x6f\x59\x57\x37\x4a\x63\x53\x38\x6f\x51','\x69\x5a\x52\x64\x4f\x77\x74\x63\x49\x61','\x45\x43\x6f\x62\x57\x35\x68\x64\x4f\x4d\x30\x51\x57\x52\x56\x63\x49\x47','\x6a\x31\x34\x56\x6e\x57\x53','\x69\x53\x6f\x5a\x57\x4f\x37\x63\x48\x58\x57','\x57\x36\x48\x4c\x70\x38\x6b\x73\x73\x47','\x57\x35\x4b\x5a\x41\x61\x44\x68\x57\x34\x42\x64\x52\x78\x30','\x57\x52\x4a\x63\x54\x6d\x6b\x36\x57\x36\x4e\x63\x50\x4c\x5a\x64\x4e\x66\x69','\x57\x37\x76\x38\x66\x53\x6b\x54\x41\x47','\x42\x71\x30\x41\x57\x51\x62\x4b','\x6c\x53\x6f\x32\x57\x4f\x64\x63\x4a\x71\x52\x63\x50\x53\x6f\x71\x69\x47','\x57\x35\x46\x64\x49\x38\x6b\x55\x71\x48\x61','\x78\x58\x42\x63\x52\x47\x31\x41\x6c\x47','\x57\x35\x66\x70\x63\x43\x6b\x41\x66\x61','\x57\x34\x50\x73\x68\x6d\x6b\x42\x75\x38\x6f\x6b\x69\x38\x6b\x37','\x57\x4f\x53\x52\x57\x51\x6d','\x57\x34\x37\x63\x50\x6d\x6f\x52\x41\x53\x6f\x50\x57\x35\x66\x42\x57\x37\x69','\x57\x51\x64\x63\x54\x6d\x6b\x39','\x57\x52\x5a\x63\x4c\x43\x6b\x75\x74\x72\x71','\x57\x37\x64\x63\x4d\x61\x68\x64\x4e\x78\x43\x65\x57\x50\x6d','\x41\x53\x6f\x48\x6d\x53\x6f\x57\x76\x48\x34\x59\x57\x4f\x65','\x75\x67\x68\x63\x50\x4c\x38\x42','\x7a\x43\x6f\x4e\x57\x36\x43\x6b\x57\x51\x38','\x57\x4f\x48\x2f\x77\x6d\x6b\x57\x65\x30\x6e\x78\x68\x47','\x57\x35\x47\x49\x63\x38\x6f\x4c\x72\x47\x62\x6b\x63\x59\x6d\x2f\x57\x4f\x74\x63\x54\x71','\x41\x68\x4f\x46','\x57\x52\x30\x41\x44\x31\x66\x51','\x71\x71\x46\x63\x56\x66\x75\x44','\x57\x35\x33\x64\x51\x53\x6b\x41\x57\x35\x72\x54','\x42\x68\x54\x6e\x6e\x38\x6f\x61\x57\x36\x2f\x63\x53\x53\x6f\x51','\x41\x63\x5a\x63\x56\x58\x58\x78','\x57\x4f\x4e\x64\x4a\x43\x6f\x61\x6d\x75\x4f\x46\x73\x6d\x6b\x30','\x57\x35\x38\x66\x57\x52\x78\x64\x53\x4a\x39\x63\x6e\x43\x6f\x55','\x75\x43\x6f\x4a\x57\x51\x34\x72\x57\x37\x37\x63\x4d\x72\x43','\x57\x35\x39\x7a\x62\x38\x6b\x78\x67\x57','\x72\x5a\x6c\x64\x4b\x68\x78\x63\x55\x4a\x44\x6c\x57\x36\x30','\x6b\x38\x6b\x47\x62\x58\x79\x78','\x57\x4f\x38\x34\x6f\x6d\x6b\x51\x61\x47','\x64\x53\x6f\x30\x61\x59\x2f\x63\x4a\x33\x50\x61\x57\x34\x53','\x76\x43\x6f\x63\x57\x52\x53\x79\x57\x36\x61','\x46\x63\x65\x2f\x79\x6d\x6b\x4b\x57\x34\x65','\x43\x43\x6f\x43\x7a\x58\x5a\x64\x52\x61','\x70\x38\x6b\x33\x65\x6d\x6f\x37\x62\x47','\x42\x38\x6b\x30\x57\x4f\x74\x63\x55\x4e\x46\x63\x49\x33\x6c\x64\x50\x47','\x6c\x53\x6f\x71\x78\x38\x6f\x2f\x6b\x76\x74\x64\x53\x53\x6f\x50\x61\x38\x6f\x54','\x57\x36\x4b\x59\x57\x50\x6c\x64\x49\x72\x71\x79\x42\x43\x6b\x4f','\x75\x6d\x6b\x41\x44\x43\x6f\x73\x6a\x47','\x57\x35\x33\x63\x55\x43\x6b\x73\x46\x73\x50\x61\x74\x53\x6b\x36\x57\x51\x2f\x64\x4a\x43\x6b\x6e\x57\x35\x69','\x72\x43\x6b\x68\x76\x6d\x6f\x75\x66\x43\x6f\x72\x72\x6d\x6b\x4e','\x57\x51\x38\x39\x61\x6d\x6b\x59\x61\x62\x74\x63\x4b\x58\x69','\x57\x51\x65\x71\x57\x50\x69\x6b\x57\x51\x46\x63\x49\x6d\x6f\x78\x57\x52\x61','\x57\x37\x5a\x64\x50\x53\x6f\x36\x57\x52\x78\x64\x55\x30\x2f\x64\x47\x33\x54\x39\x72\x78\x43','\x43\x43\x6f\x70\x62\x38\x6f\x4b\x41\x61','\x57\x37\x4a\x63\x56\x65\x38\x4b\x6e\x4e\x34\x7a\x57\x36\x43','\x57\x4f\x2f\x64\x4f\x43\x6f\x75\x6f\x4e\x53','\x7a\x57\x74\x63\x54\x32\x69\x77\x66\x75\x76\x6c','\x57\x4f\x30\x61\x44\x4b\x5a\x64\x4e\x32\x78\x64\x54\x72\x71','\x73\x68\x52\x63\x48\x31\x69\x64','\x57\x50\x34\x70\x45\x49\x34\x44\x57\x34\x4e\x63\x52\x65\x65','\x57\x37\x39\x66\x63\x43\x6b\x36\x43\x57','\x78\x63\x68\x63\x56\x32\x71\x54'];_0x2aad=function(){return _0x17e728;};return _0x2aad();}const _0x8c87a0={};_0x8c87a0[_0x1f8294(0x278,'\x75\x39\x62\x39')]=_0x35f188,_0x8c87a0[_0x1f8294(0x29e,'\x2a\x45\x52\x54')+'\x6c']=_0x13c2be,_0x8c87a0[_0x1f8294(0x281,'\x4a\x5a\x59\x41')+_0x1f8294(0x211,'\x66\x76\x34\x30')+_0x1f8294(0x258,'\x41\x33\x65\x53')+'\x72']=_0x2e1752,_0x8c87a0[_0x1f8294(0x208,'\x63\x77\x42\x41')+_0x1f8294(0x26e,'\x57\x38\x6c\x5a')]=_0x57ba14,_0x8c87a0[_0x1f8294(0x1f6,'\x46\x59\x51\x75')+_0x1f8294(0x27a,'\x49\x25\x23\x25')]=_0x1786a4,_0x8c87a0['\x73\x74\x72\x69\x63\x74\x48\x74'+_0x1f8294(0x219,'\x6d\x6a\x31\x67')]=_0x19ad5c,_0x8c87a0['\x5f\x73\x65\x74\x46\x65\x74\x63'+_0x1f8294(0x2bf,'\x25\x21\x69\x25')+_0x1f8294(0x25b,'\x57\x6d\x51\x71')]=_0x3f8813,module[_0x1f8294(0x1e7,'\x76\x4b\x4d\x4b')]=_0x8c87a0;
+// hubFetch -- single chokepoint for every Hub-facing HTTP call.
+//
+// Two protections, both bypassable only via EVOMAP_HUB_ALLOW_INSECURE=1:
+//
+//   1. URL schema check.  Rejects anything that does not parse as https://.
+//      This catches every misconfigured / attacker-supplied env var even
+//      when the caller bypassed resolveHubUrl() and read process.env
+//      directly (httpTransportSend / getHubUrl() / per-call opts.hubUrl /
+//      proxy this.hubUrl all reach here).
+//
+//   2. TLS verification.  Built-in fetch validates certificates by default,
+//      but NODE_TLS_REJECT_UNAUTHORIZED=0 disables that globally.  Passing
+//      an explicit undici.Agent with connect.rejectUnauthorized:true as
+//      the dispatcher makes Hub traffic immune to that env var.
+//
+// Escape hatch: EVOMAP_HUB_ALLOW_INSECURE=1 disables BOTH protections (used
+// for local dev / mock hubs on http:// or with self-signed certs).  Any
+// value other than exactly "1" is treated as absent.
+
+// Use BOTH Agent and fetch from the same undici package.  Node's global
+// fetch is built on an internal undici, and an Agent created from the
+// installed `undici` package is not interface-compatible with it — mixing
+// them yields `UND_ERR_INVALID_ARG: invalid onRequestStart method` at
+// request time.  Pulling fetch from the same package keeps them in sync.
+const https = require('https');
+const { TextDecoder } = require('util');
+const { Agent, fetch: undiciFetch, buildConnector } = require('undici');
+
+const HUB_ERROR_TEXT_MAX_BYTES = 8 * 1024;
+const HUB_JSON_TEXT_MAX_BYTES = 4 * 1024 * 1024;
+const HUB_UNREACHABLE_BACKOFF_BASE_MS = 60_000;
+const HUB_UNREACHABLE_BACKOFF_MAX_MS = 10 * 60_000;
+
+class HubUnreachableError extends Error {
+  constructor(message, details = {}) {
+    super(message);
+    this.name = 'HubUnreachableError';
+    this.code = 'HUB_UNREACHABLE';
+    this.statusCode = details.statusCode || null;
+    this.contentType = details.contentType || '';
+    this.bodySnippet = details.bodySnippet || '';
+    this.context = details.context || '';
+  }
+}
+
+// Cap idle keep-alive well below consumer-router NAT eviction (typically
+// 60-300s). undici's default keepAliveTimeout is 600s, which means after an
+// idle period the next request reuses a socket the NAT has already silently
+// dropped and only fails after AbortSignal timeout — a major contributor to
+// post-idle heartbeat death. headers/bodyTimeout are bounded so a wedged
+// socket cannot stall the heartbeat indefinitely.
+// Connect options shared between agents.
+//   - rejectUnauthorized: TLS verification, immune to NODE_TLS_REJECT_UNAUTHORIZED=0.
+//   - timeout: TCP+TLS handshake deadline.
+//   - Hub traffic defaults to IPv4-first: try an IPv4 socket first, then fall
+//     back to dual-stack Happy Eyeballs if IPv4 cannot connect. Real-world
+//     VPN/TUN setups often route IPv4 through the intended exit while leaving
+//     IPv6 on the local ISP path; Cloudflare country rules then see a CN IPv6
+//     and block otherwise valid Hub calls. Set EVOMAP_HUB_IP_FAMILY=auto to
+//     restore dual-stack Happy Eyeballs as the primary path, or ipv4-only to
+//     disable fallback for controlled networks.
+function _resolveHubIpFamily() {
+  const raw = String(process.env.EVOMAP_HUB_IP_FAMILY || 'ipv4first').trim().toLowerCase();
+  if (raw === 'ipv4' || raw === 'v4' || raw === '4' || raw === 'ipv4first' || raw === 'ipv4-first') return 'ipv4first';
+  if (raw === 'ipv4only' || raw === 'ipv4-only') return 'ipv4only';
+  if (raw === 'auto' || raw === 'dualstack' || raw === 'dual-stack') return 'auto';
+  throw new Error('[hubFetch] EVOMAP_HUB_IP_FAMILY must be "ipv4", "ipv4-only", or "auto" — got ' + JSON.stringify(process.env.EVOMAP_HUB_IP_FAMILY));
+}
+
+const _hubIpFamily = _resolveHubIpFamily();
+const _CONNECT_TIMEOUT_MS = 10_000;
+const _IPV4FIRST_PRIMARY_CONNECT_TIMEOUT_MS = 2_500;
+const _baseConnectOpts = {
+  rejectUnauthorized: true,
+  timeout: _CONNECT_TIMEOUT_MS,
+};
+const _ipv4OnlyConnectOpts = {
+  ..._baseConnectOpts,
+  family: 4,
+  autoSelectFamily: false,
+};
+// In ipv4first mode the IPv4-only connector is a probe, not the whole
+// heartbeat budget. Keep it short so fallback Happy Eyeballs still has
+// time to connect before the 10s application-layer deadline fires.
+const _ipv4FirstPrimaryConnectOpts = {
+  ..._ipv4OnlyConnectOpts,
+  timeout: _IPV4FIRST_PRIMARY_CONNECT_TIMEOUT_MS,
+};
+const _autoConnectOpts = {
+  ..._baseConnectOpts,
+  autoSelectFamily: true,
+  autoSelectFamilyAttemptTimeout: 250,
+};
+const _connectOpts = _hubIpFamily === 'auto'
+  ? _autoConnectOpts
+  : (_hubIpFamily === 'ipv4only' ? _ipv4OnlyConnectOpts : _ipv4FirstPrimaryConnectOpts);
+
+const _IPV4_FALLBACK_CODES = new Set([
+  'EADDRNOTAVAIL',
+  'EAI_AGAIN',
+  'ECONNREFUSED',
+  'ETIMEDOUT',
+  'ENETUNREACH',
+  'EHOSTUNREACH',
+  'ENOTFOUND',
+  'UND_ERR_CONNECT_TIMEOUT',
+]);
+
+function _shouldFallbackFromIpv4(err) {
+  if (_hubIpFamily !== 'ipv4first') return false;
+  const code = err && (err.code || (err.cause && err.cause.code));
+  return _IPV4_FALLBACK_CODES.has(code);
+}
+
+// Round-8 (§21.6): wrap undici's built-in connector so we can enable
+// OS-level TCP keepalive on the underlying socket. macOS default
+// TCP_KEEPIDLE is 7200s -- way too long for our 10s heartbeat
+// AbortSignal to ever benefit from kernel-level dead-socket detection.
+// undici's keepAliveTimeout (10s above) trims sockets that have been
+// idle in our pool, but a socket that is freshly idle (1-9s) and gets
+// silently NAT-evicted during the macOS sleep window is reused on
+// wake, the next request hangs until the AbortSignal trips, and the
+// dispatcher pool fills with "destroying" sockets that pin capacity.
+// With setKeepAlive(true, 15_000) the kernel fires TCP keepalive
+// probes after 15s of socket idle, sees the silent drop within a few
+// probe intervals, and surfaces ECONNRESET to the next read -- so
+// reuse of a dead socket fails fast instead of hanging until app-
+// layer timeout. rejectUnauthorized, connect.timeout, and the selected
+// IP-family policy all still apply because we delegate to buildConnector(opts).
+const _primaryConnect = buildConnector(_connectOpts);
+const _fallbackConnect = _hubIpFamily === 'ipv4first' ? buildConnector(_autoConnectOpts) : null;
+function _connectWithKeepAlive(opts, cb) {
+  function done(err, socket) {
+    if (err) return cb(err, socket);
+    try {
+      if (socket && typeof socket.setKeepAlive === 'function') {
+        socket.setKeepAlive(true, 15_000);
+      }
+    } catch (_) { /* never block connect on a setKeepAlive failure */ }
+    cb(null, socket);
+  }
+
+  return _primaryConnect(opts, function (err, socket) {
+    if (err && _fallbackConnect && _shouldFallbackFromIpv4(err)) {
+      return _fallbackConnect(opts, done);
+    }
+    return done(err, socket);
+  });
+}
+// Marker so the #160 TLS-pinning contract (dispatcher.options.connect
+// .rejectUnauthorized === true) remains introspectable now that
+// `connect` is a function wrapping buildConnector(_connectOpts) instead
+// of a plain options object. The actual TLS pinning is enforced by
+// _connectOpts above; this property only mirrors that intent for tests
+// and readers.
+_connectWithKeepAlive.rejectUnauthorized = true;
+
+function _makeStrictAgent() {
+  return new Agent({
+    connect: _connectWithKeepAlive,
+    keepAliveTimeout: 10_000,
+    keepAliveMaxTimeout: 60_000,
+    headersTimeout: 30_000,
+    bodyTimeout: 30_000,
+    pipelining: 1,
+  });
+}
+
+function _makeLongPollAgent() {
+  return new Agent({
+    connect: _connectWithKeepAlive,
+    keepAliveTimeout: 10_000,
+    keepAliveMaxTimeout: 60_000,
+    headersTimeout: 65_000,
+    bodyTimeout: 65_000,
+    pipelining: 1,
+  });
+}
+
+function _makeMailboxAgent() {
+  return new Agent({
+    connect: _connectWithKeepAlive,
+    keepAliveTimeout: 10_000,
+    keepAliveMaxTimeout: 60_000,
+    // Sits just above the highest mailbox AbortSignal (inbound=35s) so the
+    // app-layer signal is the authority on cancellation, while still
+    // bounding wedged-socket lifetime well below "forever".
+    headersTimeout: 45_000,
+    bodyTimeout: 45_000,
+    pipelining: 1,
+  });
+}
+
+function _getHubFetchConfigForTest() {
+  return {
+    hubIpFamily: _hubIpFamily,
+    connectTimeoutMs: _CONNECT_TIMEOUT_MS,
+    ipv4FirstPrimaryConnectTimeoutMs: _IPV4FIRST_PRIMARY_CONNECT_TIMEOUT_MS,
+    connectOpts: { ..._connectOpts },
+    primaryConnectOpts: { ..._connectOpts },
+    fallbackConnectOpts: _fallbackConnect ? { ..._autoConnectOpts } : null,
+  };
+}
+
+// Default agent for short hub calls (heartbeat, hello, transport, publish).
+// Header/body timeouts (30s) are bounded so a wedged socket cannot stall
+// the heartbeat loop (HEARTBEAT_TIMEOUT_MS=10s leaves a 3x margin).
+// keepAliveTimeout is well below consumer-router NAT eviction (typically
+// 60-300s) so the next call after an idle period gets a fresh socket
+// rather than reusing one the NAT has silently dropped.
+// Backward-compatible Node native `https.Agent` export for callers that still
+// build their own `https.request(...)` transport. New Hub clients should route
+// through hubFetch so TLS and IP-family policy stay centralized.
+const _strictHttpsAgent = new https.Agent({ rejectUnauthorized: true });
+
+// Long-poll agent for /a2a/events/poll. The application-layer
+// AbortSignal.timeout for that path is 60s (EVENT_POLL_TIMEOUT_MS), but
+// _strictAgent's headersTimeout=30s would otherwise fire first and abort
+// every long poll at 30s -- the hub gets no chance to deliver an event
+// that arrives in the 30-55s window. Headers/body timeouts here sit just
+// above the app-layer 60s ceiling so the AbortSignal is the visible
+// timeout signal.
+// Mailbox agent for /a2a/mailbox/inbound (35s AbortSignal) and
+// /a2a/mailbox/outbound (30s AbortSignal). _strictAgent's 30s
+// headers/bodyTimeout would fire AT OR BEFORE those app signals,
+// silently capping inbound at 30s (regression vs main where _strictAgent
+// had undici defaults ~300s) and racing with outbound's identical 30s
+// signal. The 45s ceiling here keeps the app-layer AbortSignal as the
+// authority while still bounding a wedged socket.
+let _strictAgent = _makeStrictAgent();
+let _longPollAgent = _makeLongPollAgent();
+let _mailboxAgent = _makeMailboxAgent();
+
+// Drain and rebuild both undici agents. Called from the index.js SIGCONT
+// handler on macOS resume: undici's keepAliveTimeout is measured from
+// "socket goes idle" on libuv's monotonic clock, which freezes through
+// sleep. The next post-wake request can therefore reuse a socket the
+// NAT silently dropped during the suspend window and only fail after the
+// 30s headersTimeout -- well above HEARTBEAT_TIMEOUT_MS (10s). The
+// AbortSignal trips first but the socket may linger in the pool's
+// "destroying" state, pinning capacity. Closing both agents forces all
+// idle sockets shut and frees the per-host autoSelectFamily cache so a
+// stale "v6 wins" decision from before sleep does not stick when v6 is
+// now black-holed. In-flight requests still finish on their existing
+// socket (close() does not abort them). Cheap to call -- safe to invoke
+// even if nothing changed.
+function drainPool() {
+  const old = [_strictAgent, _longPollAgent, _mailboxAgent];
+  _strictAgent = _makeStrictAgent();
+  _longPollAgent = _makeLongPollAgent();
+  _mailboxAgent = _makeMailboxAgent();
+  for (const agent of old) {
+    try {
+      // Agent.close() returns a Promise that resolves when all in-flight
+      // requests finish. We do not await it -- the new agents already
+      // serve fresh calls, and the old ones drain naturally.
+      const p = agent.close();
+      if (p && typeof p.catch === 'function') p.catch(() => {});
+    } catch (_) {}
+  }
+}
+
+function _pickDispatcher(url) {
+  // Three dispatcher pools, picked by exact path match:
+  //   - /a2a/events/poll              -> _longPollAgent (65s timeouts)
+  //   - /a2a/mailbox/{inbound,outbound} -> _mailboxAgent (45s timeouts)
+  //   - everything else               -> _strictAgent (30s timeouts)
+  //
+  // The split exists because each path has a different app-layer
+  // AbortSignal ceiling: event poll = 60s, mailbox inbound = 35s, mailbox
+  // outbound = 30s (racy against strict's 30s), heartbeat / hello /
+  // transport = <= 10s. The strict agent's 30s headers/bodyTimeout
+  // would otherwise fire BEFORE the longer app signals, silently
+  // capping those paths and making AbortSignal cosmetic. Mailbox /
+  // long-poll dispatchers keep the app-layer signal as the visible
+  // timeout while still bounding wedged-socket lifetime.
+  //
+  // Match on path (not host) to avoid coupling to a specific hub URL.
+  //
+  // Round-6 (§19.8): previously the matcher accepted both
+  // `pathname === '/a2a/events/poll'` AND `pathname.endsWith('/a2a/events/poll')`.
+  // The endsWith branch was a needless widening that also caught
+  // unrelated paths such as `/admin/a2a/events/poll`, `/v2/a2a/events/poll`,
+  // or any future hub path that happens to end with the same suffix --
+  // those would silently inherit the 65s long-poll timeout when they
+  // should fail fast on the 30s strict timeout. Use exact match only.
+  // For hub deployments mounted under a base path (rare; not in the
+  // current hub repo), set EVOLVER_LONG_POLL_PATH to override.
+  const longPollPath = process.env.EVOLVER_LONG_POLL_PATH || '/a2a/events/poll';
+  try {
+    const u = new URL(url);
+    if (u.pathname === longPollPath) {
+      return _longPollAgent;
+    }
+    if (u.pathname === '/a2a/mailbox/inbound' || u.pathname === '/a2a/mailbox/outbound') {
+      return _mailboxAgent;
+    }
+  } catch {
+    // fall through to strict
+  }
+  return _strictAgent;
+}
+
+// Test seam: lets unit tests swap in a mock fetch without forking the call
+// path.  Production code must NEVER reassign this from outside the module.
+let _fetchImpl = undiciFetch;
+function _setFetchImplForTest(fn) { _fetchImpl = fn || undiciFetch; }
+
+// Error codes that indicate a network-layer disruption rather than an
+// application-layer error.  On Linux, a NetworkManager reconnect, VPN
+// re-establishment, or WiFi hand-off invalidates the 5-tuples of all
+// existing TCP connections in the undici pool.  The kernel surfaces the
+// break as one of these codes on the next read/write; undici wraps them
+// in Error objects but preserves the original .code property.
+//
+// When we see one of these we call drainPool() so the *next* request
+// gets a freshly connected socket instead of reusing a dead one, then
+// re-throw so the caller's existing error path still fires normally.
+// ECONNRESET -- TCP RST received (NM reconnect, VPN teardown)
+// ENETDOWN    -- network interface went offline
+// ENETUNREACH -- no route to host (transient during re-IP)
+// EHOSTUNREACH-- host unreachable (routing table flush)
+// ENOTCONN    -- socket not connected (rare but seen on interface bounce)
+// UND_ERR_SOCKET -- undici's own wrapper for abrupt socket closure
+const _NETWORK_DISRUPTION_CODES = new Set([
+  'ECONNRESET',
+  'ECONNREFUSED',
+  'ENETDOWN',
+  'ENETUNREACH',
+  'EHOSTUNREACH',
+  'EAI_AGAIN',
+  'ENOTFOUND',
+  'ENOTCONN',
+  'ETIMEDOUT',
+  'ABORT_ERR',
+  'UND_ERR_SOCKET',
+  'UND_ERR_CONNECT_TIMEOUT',
+  'UND_ERR_HEADERS_TIMEOUT',
+  'UND_ERR_BODY_TIMEOUT',
+]);
+
+function _isNetworkDisruptionError(err) {
+  if (!err) return false;
+  // undici may carry the original code either on err.code or on err.cause.code
+  if (_NETWORK_DISRUPTION_CODES.has(err.code)) return true;
+  if (err.cause && _NETWORK_DISRUPTION_CODES.has(err.cause.code)) return true;
+  return false;
+}
+
+function isHubUnreachableError(err) {
+  if (!err) return false;
+  if (err instanceof HubUnreachableError || err.code === 'HUB_UNREACHABLE') return true;
+  if (_isNetworkDisruptionError(err)) return true;
+  if (err.name === 'AbortError' || err.name === 'TimeoutError') return true;
+  if (err.cause && (err.cause.name === 'AbortError' || err.cause.name === 'TimeoutError')) return true;
+  return false;
+}
+
+function hubUnreachableBackoffMs(failureCount) {
+  const n = Math.max(1, Number(failureCount) || 1);
+  return Math.min(
+    HUB_UNREACHABLE_BACKOFF_BASE_MS * Math.pow(2, n - 1),
+    HUB_UNREACHABLE_BACKOFF_MAX_MS
+  );
+}
+
+function hubResponseContentType(res) {
+  const headers = res && res.headers;
+  if (!headers) return '';
+  let value = '';
+  try {
+    if (typeof headers.get === 'function') {
+      value = headers.get('content-type') || headers.get('Content-Type') || '';
+    } else if (typeof headers === 'object') {
+      value = headers['content-type'] || headers['Content-Type'] || '';
+    }
+  } catch (_) {
+    value = '';
+  }
+  return String(value || '').toLowerCase();
+}
+
+function isHubApiResponse(res) {
+  const contentType = hubResponseContentType(res);
+  if (!contentType) return true;
+  return contentType.includes('json');
+}
+
+function isHubUnreachableResponse(res) {
+  if (!res) return false;
+  const status = Number(res.status || 0);
+  const contentType = hubResponseContentType(res);
+  if (!contentType) return false;
+  if (isHubApiResponse(res)) return false;
+  if (status >= 200 && status < 300) return true;
+  return status === 401 || status === 403 || status === 408 || status === 429 || status >= 500;
+}
+
+async function drainHubResponse(res) {
+  try {
+    if (res && res.body && typeof res.body.cancel === 'function') {
+      await res.body.cancel().catch(() => {});
+    }
+  } catch (_) {
+    // Best-effort cleanup only; never turn body cleanup into a caller error.
+  }
+}
+
+function _truncateUtf8(text, maxBytes) {
+  const buf = Buffer.from(String(text || ''), 'utf8');
+  if (buf.length <= maxBytes) return String(text || '');
+  return buf.subarray(0, maxBytes).toString('utf8') + '\n...[truncated]';
+}
+
+async function readHubResponseText(res, options = {}) {
+  if (!res) return '';
+  const maxBytes = Math.max(0, Number(options.maxBytes) || HUB_ERROR_TEXT_MAX_BYTES);
+
+  if (res.body && typeof res.body.getReader === 'function') {
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    const chunks = [];
+    let total = 0;
+    let truncated = false;
+    try {
+      while (true) {
+        const part = await reader.read();
+        if (part.done) break;
+        const value = part.value instanceof Uint8Array
+          ? part.value
+          : Buffer.from(part.value || '');
+        const remaining = maxBytes - total;
+        if (remaining > 0) {
+          const slice = value.subarray(0, remaining);
+          chunks.push(slice);
+          total += slice.byteLength;
+        }
+        // Only truncate when a chunk genuinely OVERFLOWS the remaining
+        // capacity. A chunk that fills the buffer exactly (byteLength ===
+        // remaining, total === maxBytes) must NOT be flagged truncated: the
+        // stream may end cleanly on the next read. Flagging it appended
+        // `...[truncated]` to a complete body, which broke JSON.parse for a
+        // response sitting exactly on the 4MB cap. When remaining hits 0, any
+        // subsequent non-empty chunk (byteLength > 0 > remaining 0) trips this.
+        if (value.byteLength > remaining) {
+          truncated = true;
+          try { await reader.cancel(); } catch (_) {}
+          break;
+        }
+      }
+    } catch (err) {
+      try { await reader.cancel(); } catch (_) {}
+      throw err;
+    } finally {
+      try { reader.releaseLock(); } catch (_) {}
+    }
+    const text = decoder.decode(Buffer.concat(chunks, total));
+    return truncated ? text + '\n...[truncated]' : text;
+  }
+
+  if (typeof res.text === 'function') {
+    try {
+      return _truncateUtf8(await res.text(), maxBytes);
+    } catch (err) {
+      await drainHubResponse(res);
+      throw err;
+    }
+  }
+
+  await drainHubResponse(res);
+  return '';
+}
+
+async function readHubResponseJson(res, options = {}) {
+  const text = await readHubResponseText(res, {
+    maxBytes: options.maxBytes || HUB_JSON_TEXT_MAX_BYTES,
+  });
+  return JSON.parse(text);
+}
+
+async function throwIfHubUnreachableResponse(res, context = 'hub') {
+  if (!isHubUnreachableResponse(res)) return;
+  const contentType = hubResponseContentType(res);
+  let bodyText = '';
+  try {
+    bodyText = await readHubResponseText(res, { maxBytes: HUB_ERROR_TEXT_MAX_BYTES });
+  } catch (err) {
+    bodyText = `[body read failed: ${err && err.message || err}]`;
+  }
+  const bodySnippet = _truncateUtf8(String(bodyText || '').replace(/\s+/g, ' ').trim(), 512);
+  const statusCode = Number(res.status || 0) || null;
+  const label = contentType || 'unknown content-type';
+  throw new HubUnreachableError(
+    `${context} returned a non-API Hub response (${statusCode || 'unknown status'}, ${label})`,
+    { statusCode, contentType, bodySnippet, context }
+  );
+}
+
+function _validateHubUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error(
+      '[hubFetch] Hub URL is not a valid URL: ' + JSON.stringify(url) + '. ' +
+      'Set EVOMAP_HUB_ALLOW_INSECURE=1 to bypass (local dev / mock hub only).'
+    );
+  }
+  if (parsed.protocol !== 'https:') {
+    throw new Error(
+      '[hubFetch] Hub URL must use https:// — got ' + JSON.stringify(url) + '. ' +
+      'Set EVOMAP_HUB_ALLOW_INSECURE=1 to bypass (local dev / mock hub only).'
+    );
+  }
+}
+
+// Public scheme-only guard for callers that already manage their own HTTP
+// transport (Node's `http`/`https` modules, the platform `fetch`, etc.) and
+// just want to honour the same "https-only unless EVOMAP_HUB_ALLOW_INSECURE=1"
+// posture hubFetch enforces. Throws synchronously on bad input — match
+// _validateHubUrl's throw semantics so call sites can wrap in try/catch.
+//
+// Use this instead of bare URL/fetch when you cannot route through hubFetch
+// (e.g. the existing src/atp/atpExecute.js and src/atp/hubClient.js paths
+// that use http.request / native fetch directly).
+function enforceHubScheme(url) {
+  if (process.env.EVOMAP_HUB_ALLOW_INSECURE === '1') return;
+  _validateHubUrl(url);
+}
+
+// async so synchronous validation throws become Promise rejections — every
+// caller already awaits / .then()s the result, and this makes the function
+// behave uniformly for `assert.rejects(...)` in tests.
+async function hubFetch(url, options) {
+  if (process.env.EVOMAP_HUB_ALLOW_INSECURE === '1') {
+    // Insecure mode is documented as "local dev / mock hub on http:// or
+    // self-signed cert". In that mode use the platform fetch — Node's
+    // built-in global.fetch is identical engine to undici, but keeping it
+    // as the platform lookup lets tests that stub `global.fetch = mockImpl`
+    // intercept the call without forking through _setFetchImplForTest. If
+    // a test has explicitly installed the seam, honor that — the explicit
+    // override wins over the implicit global lookup.
+    const insecureFetch = (_fetchImpl !== undiciFetch) ? _fetchImpl : global.fetch;
+    return insecureFetch(url, options);
+  }
+  _validateHubUrl(url);
+  // Object.assign last-wins is intentional: a caller-supplied dispatcher
+  // would defeat the TLS guard, so we always force ours.  No current caller
+  // passes one; revisit if that changes.
+  const dispatcher = _pickDispatcher(url);
+  try {
+    return await _fetchImpl(url, Object.assign({}, options, { dispatcher }));
+  } catch (err) {
+    // On Linux a NetworkManager reconnect, VPN re-establishment, or WiFi
+    // hand-off silently invalidates all existing TCP sockets in the undici
+    // pool.  The kernel surfaces the break as a network-disruption error
+    // code on the next read/write.  Without drainPool() the next request
+    // reuses another dead socket from the same pool and suffers the same
+    // error again.  Draining here lets the *next* call open a fresh
+    // connection immediately without waiting for the heartbeat's normal
+    // interval or the drift-detector's 2*interval poke window.
+    //
+    // We call drainPool() synchronously before re-throwing so the caller's
+    // existing error path (heartbeat .catch, poll .catch, etc.) fires as
+    // normal -- this is purely a pool-hygiene side-effect, not a retry.
+    if (isHubUnreachableError(err)) {
+      try {
+        drainPool();
+      } catch (_) { /* never block the throw on a pool-drain failure */ }
+    }
+    throw err;
+  }
+}
+
+module.exports = {
+  hubFetch,
+  drainPool,
+  HubUnreachableError,
+  drainHubResponse,
+  hubResponseContentType,
+  hubUnreachableBackoffMs,
+  isHubApiResponse,
+  isHubUnreachableError,
+  isHubUnreachableResponse,
+  readHubResponseJson,
+  readHubResponseText,
+  throwIfHubUnreachableResponse,
+  _isNetworkDisruptionError,
+  _validateHubUrl,
+  enforceHubScheme,
+  // For callers that must build their own HTTP transport. The Node
+  // native case (`https.request(...)`) needs an Agent pinned to
+  // rejectUnauthorized:true so a global `NODE_TLS_REJECT_UNAUTHORIZED=0`
+  // cannot weaken the Hub channel; pass `strictHttpsAgent` as
+  // `options.agent`. Skip when `EVOMAP_HUB_ALLOW_INSECURE=1`, matching
+  // hubFetch's own escape-hatch behaviour.
+  //
+  // For fetch-based callers do NOT pair a hand-rolled Agent with
+  // `global.fetch`: `global.fetch` is backed by Node's *internal*
+  // undici, and an Agent from the installed `undici` package crashes
+  // it with `UND_ERR_INVALID_ARG: invalid onRequestStart method`
+  // (see the warning at the top of this file). Route through
+  // `hubFetch()` itself instead — it already applies the dispatcher
+  // from the right undici copy.
+  strictHttpsAgent: _strictHttpsAgent,
+  _getHubFetchConfigForTest,
+  _setFetchImplForTest,
+};