@kdonev/termscape 0.1.0

package/dist/remote/peer-serve.js

@@ -0,0 +1,274 @@
+import { randomUUID } from 'node:crypto';
+import { PeerRequest, PEER_SCHEMA_VERSION, } from '../protocol/index.js';
+import { HUB_VERSION } from '../hub.js';
+/**
+ * The answering half of the hub-to-hub link: it serves requests about *this*
+ * hub's sessions and pushes its state changes.
+ *
+ * It is deliberately independent of who opened the socket. An SSH-deployed hub
+ * accepts a socket on `/peer` and runs this over it; a hub that ran the join
+ * installer dials out and runs the very same thing over the socket it opened.
+ * That split is the whole reason enrollment can invert the direction of the
+ * connection without the canvas-owning hub noticing.
+ *
+ * It is also this hub's *uplink*: the one link back to the canvas it was
+ * attached to. Answering is most of what it does, but not all — it holds the
+ * directory the canvas sends of who else is out there, and it can ask the
+ * canvas to deliver a message to any of them. Without those an agent here can
+ * neither see nor reach anything beyond this machine.
+ */
+/** How long a relayed ask waits for the canvas to report what happened. */
+const RELAY_TIMEOUT_MS = 15_000;
+export function createPeerServer(hub, clientToken) {
+    const sockets = new Set();
+    /** Which addresses each peer asked to stream output for. */
+    const attached = new Map();
+    /**
+     * Who else is on the canvas, as the canvas last described it. Replaced
+     * wholesale on every `directory`, so an agent that went away over there
+     * cannot linger here.
+     */
+    let directory = [];
+    /** Asks sent to the canvas and still waiting for their answer. */
+    const relays = new Map();
+    const send = (ws, msg) => {
+        if (ws.readyState === ws.OPEN)
+            ws.send(JSON.stringify(msg));
+    };
+    hub.on('session', (s) => {
+        for (const ws of sockets)
+            send(ws, { t: 'sessionUpserted', session: s });
+    });
+    hub.on('removed', (_id, address) => {
+        // Peers address sessions by name, not by this hub's internal id, which is
+        // why the address travels with the event rather than being looked up
+        // after the row is already gone.
+        if (!address)
+            return;
+        for (const ws of sockets)
+            send(ws, { t: 'sessionRemoved', address });
+    });
+    hub.on('data', (sessionId, chunk) => {
+        if (sockets.size === 0)
+            return;
+        const s = hub.sessions.get(sessionId);
+        if (!s)
+            return;
+        for (const ws of sockets) {
+            if (attached.get(ws)?.has(s.address)) {
+                send(ws, { t: 'output', address: s.address, data: chunk });
+            }
+        }
+    });
+    function serve(socket, opts = {}) {
+        // A dialled-out link authenticated itself in its own hello, so there is no
+        // second token to check here; an accepted one must present ours first.
+        let authed = opts.preAuthed ?? false;
+        if (authed) {
+            sockets.add(socket);
+            attached.set(socket, new Set());
+        }
+        socket.on('message', async (raw) => {
+            let parsed;
+            try {
+                parsed = PeerRequest.safeParse(JSON.parse(raw.toString('utf8')));
+            }
+            catch {
+                return;
+            }
+            if (!parsed.success)
+                return;
+            const req = parsed.data;
+            if (!authed) {
+                if (req.t !== 'hello' || req.token !== clientToken) {
+                    socket.close();
+                    return;
+                }
+                authed = true;
+                sockets.add(socket);
+                attached.set(socket, new Set());
+                send(socket, {
+                    t: 'welcome',
+                    hubVersion: HUB_VERSION,
+                    schemaVersion: PEER_SCHEMA_VERSION,
+                });
+                return;
+            }
+            if (req.t === 'hello')
+                return;
+            const ok = (result) => send(socket, { t: 'ok', id: req.id, result });
+            const err = (message) => send(socket, { t: 'err', id: req.id, message });
+            try {
+                switch (req.t) {
+                    case 'listSessions':
+                        return ok(hub.sessions.list());
+                    case 'directory':
+                        // Replaced wholesale: this is the canvas's whole view, minus our
+                        // own agents, and a merge would keep agents it has dropped.
+                        directory = req.agents;
+                        return ok({ agents: req.agents.length });
+                    case 'relayResult': {
+                        const p = relays.get(req.relayId);
+                        if (!p)
+                            return ok({ unknown: req.relayId });
+                        relays.delete(req.relayId);
+                        clearTimeout(p.timer);
+                        if (req.ok)
+                            p.resolve(req.result);
+                        else
+                            p.reject(new Error(req.error ?? 'the canvas could not do that'));
+                        return ok({ ok: true });
+                    }
+                    case 'deliver': {
+                        // The originating hub already authenticated the sender, so its
+                        // reported `from` is trusted. Attribution is still applied here,
+                        // so the receiving agent sees the true origin address.
+                        const r = hub.router.send(req.from, req.to, req.body);
+                        return r.delivered ? ok({ delivered: true }) : err(r.error ?? 'delivery failed');
+                    }
+                    case 'readScreen': {
+                        const target = hub.sessions.getByAddress(req.address);
+                        if (!target)
+                            return err(`no agent at address "${req.address}"`);
+                        const pty = hub.sessions.pty(target.id);
+                        return ok({
+                            address: req.address,
+                            running: pty?.running ?? false,
+                            screen: pty ? pty.tailLines(req.lines ?? 40) : '(not running)',
+                        });
+                    }
+                    case 'startSession': {
+                        let ws = hub.store.getWorkspaceByName(req.workspaceName);
+                        if (!ws)
+                            ws = hub.createWorkspace(req.workspaceName, req.rootPath, null);
+                        const s = await hub.startSession({
+                            workspaceId: ws.id,
+                            profile: req.profile,
+                            name: req.name,
+                        });
+                        return ok(s);
+                    }
+                    case 'shutdown':
+                        // Answer first: the canvas hub is waiting, and a moment later
+                        // this process is gone. Whoever owns the process lifecycle
+                        // listens for this; nothing here calls process.exit, so an
+                        // in-process test hub is not taken down with it.
+                        ok({ stopping: true });
+                        setTimeout(() => hub.emit('peerShutdown'), 50);
+                        return;
+                    case 'stopSession': {
+                        const t = hub.sessions.getByAddress(req.address);
+                        if (!t)
+                            return err(`no agent at address "${req.address}"`);
+                        hub.sessions.stop(t.id);
+                        return ok({ stopped: req.address });
+                    }
+                    case 'removeSession': {
+                        const t = hub.sessions.getByAddress(req.address);
+                        // Already gone is the outcome that was asked for, not an error:
+                        // the canvas retries deferred removals and must not stall on one
+                        // that a previous attempt already applied.
+                        if (!t)
+                            return ok({ removed: req.address });
+                        hub.sessions.remove(t.id);
+                        return ok({ removed: req.address });
+                    }
+                    case 'resumeSession': {
+                        const t = hub.sessions.getByAddress(req.address);
+                        if (!t)
+                            return err(`no agent at address "${req.address}"`);
+                        return ok(await hub.sessions.resume(t.id));
+                    }
+                    case 'attach': {
+                        attached.get(socket)?.add(req.address);
+                        const t = hub.sessions.getByAddress(req.address);
+                        if (t) {
+                            const snap = hub.sessions.snapshotForAttach(t.id);
+                            if (snap)
+                                send(socket, { t: 'output', address: req.address, data: snap.serialized });
+                        }
+                        return ok({ attached: req.address });
+                    }
+                    case 'detach':
+                        attached.get(socket)?.delete(req.address);
+                        return ok({ detached: req.address });
+                    case 'input': {
+                        const t = hub.sessions.getByAddress(req.address);
+                        if (!t)
+                            return err(`no agent at address "${req.address}"`);
+                        hub.sessions.write(t.id, req.data);
+                        return ok({ ok: true });
+                    }
+                    case 'resize': {
+                        const t = hub.sessions.getByAddress(req.address);
+                        if (!t)
+                            return err(`no agent at address "${req.address}"`);
+                        hub.sessions.resize(t.id, req.cols, req.rows);
+                        return ok({ ok: true });
+                    }
+                }
+            }
+            catch (e) {
+                err(e.message);
+            }
+        });
+        socket.on('close', () => {
+            sockets.delete(socket);
+            attached.delete(socket);
+            // Nothing left to answer a relay, and a caller waiting on one would
+            // otherwise sit there until the timeout for no reason.
+            if (sockets.size === 0) {
+                directory = [];
+                for (const [, p] of relays) {
+                    clearTimeout(p.timer);
+                    p.reject(new Error('the link to the canvas closed'));
+                }
+                relays.clear();
+            }
+        });
+    }
+    return {
+        serve,
+        get size() {
+            return sockets.size;
+        },
+        get attached() {
+            return sockets.size > 0;
+        },
+        agents() {
+            return sockets.size > 0 ? directory : [];
+        },
+        /**
+         * Hand something to the canvas to do. Only the canvas knows where every
+         * address on it lives, so this is the only way an agent here reaches one
+         * anywhere else — including on the machine the canvas itself runs on.
+         */
+        ask(ask) {
+            const socket = [...sockets].find((ws) => ws.readyState === ws.OPEN);
+            if (!socket)
+                return Promise.reject(new Error('not attached to a canvas'));
+            const relayId = randomUUID();
+            return new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    relays.delete(relayId);
+                    reject(new Error('the canvas did not answer'));
+                }, RELAY_TIMEOUT_MS);
+                relays.set(relayId, { resolve: (v) => resolve(v), reject, timer });
+                send(socket, { t: 'relay', relayId, ask });
+            });
+        },
+        closeAll() {
+            for (const ws of sockets) {
+                try {
+                    ws.terminate();
+                }
+                catch {
+                    // Already gone.
+                }
+            }
+            sockets.clear();
+            attached.clear();
+        },
+    };
+}
+//# sourceMappingURL=peer-serve.js.map

package/dist/remote/peer-serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-serve.js","sourceRoot":"","sources":["../../src/remote/peer-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,mBAAmB,GAKpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;;;;;;;;;;;;GAeG;AAEH,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAwBhC,MAAM,UAAU,gBAAgB,CAAC,GAAQ,EAAE,WAAmB;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD;;;;OAIG;IACH,IAAI,SAAS,GAAgB,EAAE,CAAC;IAChC,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;IAEJ,MAAM,IAAI,GAAG,CAAC,EAAa,EAAE,GAAiB,EAAQ,EAAE;QACtD,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;YAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAU,EAAE,EAAE;QAC/B,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAW,EAAE,OAAsB,EAAE,EAAE;QACxD,0EAA0E;QAC1E,qEAAqE;QACrE,iCAAiC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAE;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,KAAK,CAAC,MAAiB,EAAE,OAAgC,EAAE;QAClE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;YAExB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBACnD,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM,EAAE;oBACX,CAAC,EAAE,SAAS;oBACZ,UAAU,EAAE,WAAW;oBACvB,aAAa,EAAE,mBAAmB;iBACnC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO;YAE9B,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjF,IAAI,CAAC;gBACH,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;oBACd,KAAK,cAAc;wBACjB,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;oBAEjC,KAAK,WAAW;wBACd,iEAAiE;wBACjE,4DAA4D;wBAC5D,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;wBACvB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBAE3C,KAAK,aAAa,CAAC,CAAC,CAAC;wBACnB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBAClC,IAAI,CAAC,CAAC;4BAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBAC3B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBACtB,IAAI,GAAG,CAAC,EAAE;4BAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;4BAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,8BAA8B,CAAC,CAAC,CAAC;wBACtE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1B,CAAC;oBAED,KAAK,SAAS,CAAC,CAAC,CAAC;wBACf,+DAA+D;wBAC/D,iEAAiE;wBACjE,uDAAuD;wBACvD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;wBACtD,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC;oBACnF,CAAC;oBAED,KAAK,YAAY,CAAC,CAAC,CAAC;wBAClB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACtD,IAAI,CAAC,MAAM;4BAAE,OAAO,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;wBAChE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBACxC,OAAO,EAAE,CAAC;4BACR,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK;4BAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe;yBAC/D,CAAC,CAAC;oBACL,CAAC;oBAED,KAAK,cAAc,CAAC,CAAC,CAAC;wBACpB,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBACzD,IAAI,CAAC,EAAE;4BAAE,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBACzE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC;4BAC/B,WAAW,EAAE,EAAE,CAAC,EAAE;4BAClB,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,IAAI,EAAE,GAAG,CAAC,IAAI;yBACf,CAAC,CAAC;wBACH,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;oBACf,CAAC;oBAED,KAAK,UAAU;wBACb,8DAA8D;wBAC9D,2DAA2D;wBAC3D,2DAA2D;wBAC3D,iDAAiD;wBACjD,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;wBACvB,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC/C,OAAO;oBAET,KAAK,aAAa,CAAC,CAAC,CAAC;wBACnB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,IAAI,CAAC,CAAC;4BAAE,OAAO,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;wBAC3D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACxB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtC,CAAC;oBAED,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,gEAAgE;wBAChE,iEAAiE;wBACjE,2CAA2C;wBAC3C,IAAI,CAAC,CAAC;4BAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC5C,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC1B,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtC,CAAC;oBAED,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,IAAI,CAAC,CAAC;4BAAE,OAAO,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;wBAC3D,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC7C,CAAC;oBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;wBACd,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACvC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,IAAI,CAAC,EAAE,CAAC;4BACN,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BAClD,IAAI,IAAI;gCAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;wBACvF,CAAC;wBACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvC,CAAC;oBAED,KAAK,QAAQ;wBACX,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBAC1C,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAEvC,KAAK,OAAO,CAAC,CAAC,CAAC;wBACb,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,IAAI,CAAC,CAAC;4BAAE,OAAO,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;wBAC3D,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;wBACnC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1B,CAAC;oBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;wBACd,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACjD,IAAI,CAAC,CAAC;4BAAE,OAAO,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;wBAC3D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;wBAC9C,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxB,oEAAoE;YACpE,uDAAuD;YACvD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,SAAS,GAAG,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;oBAC3B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK;QACL,IAAI,IAAI;YACN,OAAO,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM;YACJ,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,CAAC;QAED;;;;WAIG;QACH,GAAG,CAAI,GAAiB;YACtB,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAE1E,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACvB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACjD,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,QAAQ;YACN,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;YACH,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/remote/peer.d.ts

@@ -0,0 +1,62 @@
+import { EventEmitter } from 'node:events';
+import { WebSocket } from 'ws';
+import { type PeerRequest } from '../protocol/index.js';
+export interface PeerOptions {
+    hostId: string;
+    /**
+     * Loopback URL of the tunnelled remote hub, e.g. ws://127.0.0.1:51234/peer.
+     * Absent for an enrolled host: it dialled us, and we have no way to dial it.
+     */
+    url?: string;
+    token?: string;
+    hubVersion: string;
+}
+/**
+ * Requesting half of the hub-to-hub link — the side that owns the canvas.
+ *
+ * It gets its socket one of two ways. `connect()` dials an SSH-deployed hub
+ * through its tunnel and reconnects with backoff, because the whole point of a
+ * daemon rather than an ssh subprocess is that sessions survive the link
+ * dropping. `adopt()` takes a socket an enrolled host opened towards us; there
+ * is nothing to dial on a drop, so we wait for it to come back and adopt the
+ * new socket instead.
+ *
+ * Either way, once the socket is live this class behaves identically: it
+ * re-subscribes and re-fetches the peer's session list, so the canvas
+ * repopulates on its own.
+ */
+export declare class PeerConnection extends EventEmitter {
+    private readonly opts;
+    private ws;
+    private readonly pending;
+    private readonly attached;
+    private closed;
+    private backoff;
+    private _connected;
+    private _remoteVersion;
+    constructor(opts: PeerOptions);
+    get connected(): boolean;
+    get remoteVersion(): string | null;
+    get hostId(): string;
+    /** True when this peer dialled us and we cannot dial it back. */
+    get inbound(): boolean;
+    connect(): void;
+    /**
+     * Take over a socket an enrolling host opened towards us. Its hello was
+     * already validated by the join endpoint, and we already answered `welcome`,
+     * so there is no handshake left to run here — go straight to the connected
+     * state the welcome path would have reached.
+     */
+    adopt(socket: WebSocket, remoteVersion: string): void;
+    /** Everything that must happen once a socket is usable, either way in. */
+    private onLive;
+    private onMessage;
+    private failAllPending;
+    /** Send a request and await its reply. */
+    request<T = unknown>(req: PeerRequest): Promise<T>;
+    refresh(): Promise<void>;
+    attach(address: string): Promise<void>;
+    detach(address: string): Promise<void>;
+    close(): void;
+}
+//# sourceMappingURL=peer.d.ts.map

package/dist/remote/peer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../src/remote/peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAGL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,SAAQ,YAAY;IASlC,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAO;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,cAAc,CAAuB;gBAEhB,IAAI,EAAE,WAAW;IAI9C,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,IAAI,CAEjC;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,iEAAiE;IACjE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,OAAO,IAAI,IAAI;IAsCf;;;;;OAKG;IACH,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAiCrD,0EAA0E;IAC1E,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,SAAS;IAmEjB,OAAO,CAAC,cAAc;IAQtB,0CAA0C;IAC1C,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAoB5C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAYxB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,KAAK,IAAI,IAAI;CAYd"}

package/dist/remote/peer.js

@@ -0,0 +1,250 @@
+import { EventEmitter } from 'node:events';
+import { randomUUID } from 'node:crypto';
+import { WebSocket } from 'ws';
+import { PEER_SCHEMA_VERSION, PeerResponse, } from '../protocol/index.js';
+const REQUEST_TIMEOUT_MS = 20_000;
+/**
+ * Requesting half of the hub-to-hub link — the side that owns the canvas.
+ *
+ * It gets its socket one of two ways. `connect()` dials an SSH-deployed hub
+ * through its tunnel and reconnects with backoff, because the whole point of a
+ * daemon rather than an ssh subprocess is that sessions survive the link
+ * dropping. `adopt()` takes a socket an enrolled host opened towards us; there
+ * is nothing to dial on a drop, so we wait for it to come back and adopt the
+ * new socket instead.
+ *
+ * Either way, once the socket is live this class behaves identically: it
+ * re-subscribes and re-fetches the peer's session list, so the canvas
+ * repopulates on its own.
+ */
+export class PeerConnection extends EventEmitter {
+    opts;
+    ws = null;
+    pending = new Map();
+    attached = new Set();
+    closed = false;
+    backoff = 500;
+    _connected = false;
+    _remoteVersion = null;
+    constructor(opts) {
+        super();
+        this.opts = opts;
+    }
+    get connected() {
+        return this._connected;
+    }
+    get remoteVersion() {
+        return this._remoteVersion;
+    }
+    get hostId() {
+        return this.opts.hostId;
+    }
+    /** True when this peer dialled us and we cannot dial it back. */
+    get inbound() {
+        return !this.opts.url;
+    }
+    connect() {
+        if (this.closed)
+            return;
+        if (!this.opts.url) {
+            throw new Error(`host ${this.opts.hostId} enrolled itself; it dials us`);
+        }
+        const ws = new WebSocket(this.opts.url);
+        this.ws = ws;
+        ws.on('open', () => {
+            ws.send(JSON.stringify({
+                t: 'hello',
+                token: this.opts.token ?? '',
+                hubVersion: this.opts.hubVersion,
+                schemaVersion: PEER_SCHEMA_VERSION,
+            }));
+        });
+        ws.on('message', (raw) => this.onMessage(raw));
+        ws.on('close', () => {
+            this.ws = null;
+            const wasConnected = this._connected;
+            this._connected = false;
+            this.failAllPending('peer connection closed');
+            if (wasConnected)
+                this.emit('disconnected');
+            if (this.closed)
+                return;
+            setTimeout(() => this.connect(), this.backoff);
+            this.backoff = Math.min(this.backoff * 2, 15_000);
+        });
+        ws.on('error', (err) => {
+            this.emit('error', err);
+            ws.close();
+        });
+    }
+    /**
+     * Take over a socket an enrolling host opened towards us. Its hello was
+     * already validated by the join endpoint, and we already answered `welcome`,
+     * so there is no handshake left to run here — go straight to the connected
+     * state the welcome path would have reached.
+     */
+    adopt(socket, remoteVersion) {
+        if (this.closed) {
+            socket.close();
+            return;
+        }
+        this.ws = socket;
+        socket.on('message', (raw) => this.onMessage(raw));
+        socket.on('close', () => {
+            // Ignore a socket we already replaced with a newer one. A null `ws`
+            // means close() ran, which is ours to finish, not to skip.
+            if (this.ws && this.ws !== socket)
+                return;
+            this.ws = null;
+            const wasConnected = this._connected;
+            this._connected = false;
+            this.failAllPending('peer connection closed');
+            if (wasConnected)
+                this.emit('disconnected');
+            // No redial: the host reaches us, not the other way round. It will come
+            // back on its own backoff and be adopted again.
+        });
+        socket.on('error', (err) => {
+            this.emit('error', err);
+            socket.close();
+        });
+        this._connected = true;
+        this._remoteVersion = remoteVersion;
+        this.emit('connected', remoteVersion);
+        this.onLive();
+    }
+    /** Everything that must happen once a socket is usable, either way in. */
+    onLive() {
+        for (const address of this.attached) {
+            // A session that vanished while the link was down cannot be re-attached,
+            // and that is not a reason to fail anything: drop it and carry on.
+            void this.request({ t: 'attach', id: randomUUID(), address }).catch(() => {
+                this.attached.delete(address);
+            });
+        }
+        void this.refresh();
+    }
+    onMessage(raw) {
+        let parsed;
+        try {
+            parsed = PeerResponse.safeParse(JSON.parse(raw.toString('utf8')));
+        }
+        catch {
+            return;
+        }
+        if (!parsed.success)
+            return;
+        const msg = parsed.data;
+        switch (msg.t) {
+            case 'welcome': {
+                // Refuse a peer we cannot speak to correctly rather than half-working.
+                if (msg.schemaVersion !== PEER_SCHEMA_VERSION) {
+                    this.emit('error', new Error(`peer schema mismatch: remote hub ${msg.hubVersion} speaks v${msg.schemaVersion}, ` +
+                        `this hub speaks v${PEER_SCHEMA_VERSION}. Redeploy the remote hub.`));
+                    this.close();
+                    return;
+                }
+                this._connected = true;
+                this._remoteVersion = msg.hubVersion;
+                this.backoff = 500;
+                this.emit('connected', msg.hubVersion);
+                // Re-establish attachments that predate this connection.
+                this.onLive();
+                return;
+            }
+            case 'ok':
+            case 'err': {
+                const p = this.pending.get(msg.id);
+                if (!p)
+                    return;
+                this.pending.delete(msg.id);
+                clearTimeout(p.timer);
+                if (msg.t === 'ok')
+                    p.resolve(msg.result);
+                else
+                    p.reject(new Error(msg.message));
+                return;
+            }
+            case 'sessions':
+                this.emit('sessions', msg.sessions);
+                return;
+            case 'sessionUpserted':
+                this.emit('sessionUpserted', msg.session);
+                return;
+            case 'sessionRemoved':
+                this.emit('sessionRemoved', msg.address);
+                return;
+            case 'output':
+                this.emit('output', msg.address, msg.data);
+                return;
+            // This peer asking us to act on an address it cannot resolve itself.
+            // Answered with a `relayResult` request rather than an `ok`, because the
+            // request channel runs the other way: it is not replying to us here, it
+            // is asking, and we answer.
+            case 'relay':
+                this.emit('relay', msg.relayId, msg.ask);
+                return;
+        }
+    }
+    failAllPending(reason) {
+        for (const [, p] of this.pending) {
+            clearTimeout(p.timer);
+            p.reject(new Error(reason));
+        }
+        this.pending.clear();
+    }
+    /** Send a request and await its reply. */
+    request(req) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            return Promise.reject(new Error(`host ${this.opts.hostId} is not connected`));
+        }
+        const id = 'id' in req ? req.id : randomUUID();
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new Error(`peer request "${req.t}" timed out`));
+            }, REQUEST_TIMEOUT_MS);
+            timer.unref?.();
+            this.pending.set(id, {
+                resolve: resolve,
+                reject,
+                timer,
+            });
+            this.ws.send(JSON.stringify(req));
+        });
+    }
+    async refresh() {
+        try {
+            const sessions = await this.request({
+                t: 'listSessions',
+                id: randomUUID(),
+            });
+            this.emit('sessions', sessions);
+        }
+        catch (err) {
+            this.emit('error', err);
+        }
+    }
+    async attach(address) {
+        this.attached.add(address);
+        await this.request({ t: 'attach', id: randomUUID(), address });
+    }
+    async detach(address) {
+        this.attached.delete(address);
+        await this.request({ t: 'detach', id: randomUUID(), address });
+    }
+    close() {
+        this.closed = true;
+        this.failAllPending('peer closed');
+        const wasConnected = this._connected;
+        this._connected = false;
+        this.ws?.close();
+        this.ws = null;
+        // Closing a peer is a disconnection like any other. Without this the
+        // socket's own close handler sees _connected already false and stays
+        // quiet, leaving the host row claiming to be connected.
+        if (wasConnected)
+            this.emit('disconnected');
+    }
+}
+//# sourceMappingURL=peer.js.map

package/dist/remote/peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../src/remote/peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,YAAY,GAGb,MAAM,qBAAqB,CAAC;AAmB7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IASjB;IARrB,EAAE,GAAqB,IAAI,CAAC;IACnB,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAG,GAAG,CAAC;IACd,UAAU,GAAG,KAAK,CAAC;IACnB,cAAc,GAAkB,IAAI,CAAC;IAE7C,YAA6B,IAAiB;QAC5C,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAAa;IAE9C,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAC1B,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO;QACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACxB,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QAEb,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,CAAC,EAAE,OAAO;gBACV,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;gBAChC,aAAa,EAAE,mBAAmB;aACb,CAAC,CACzB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvD,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC;YAC9C,IAAI,YAAY;gBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxB,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAiB,EAAE,aAAqB;QAC5C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC;QAEjB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAE3D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,oEAAoE;YACpE,2DAA2D;YAC3D,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO;YAC1C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC;YAC9C,IAAI,YAAY;gBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5C,wEAAwE;YACxE,gDAAgD;QAClD,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,0EAA0E;IAClE,MAAM;QACZ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,yEAAyE;YACzE,mEAAmE;YACnE,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;QAExB,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;YACd,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,uEAAuE;gBACvE,IAAI,GAAG,CAAC,aAAa,KAAK,mBAAmB,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,CACP,OAAO,EACP,IAAI,KAAK,CACP,oCAAoC,GAAG,CAAC,UAAU,YAAY,GAAG,CAAC,aAAa,IAAI;wBACjF,oBAAoB,mBAAmB,4BAA4B,CACtE,CACF,CAAC;oBACF,IAAI,CAAC,KAAK,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,UAAU,CAAC;gBACrC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACvC,yDAAyD;gBACzD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,KAAK,IAAI,CAAC;YACV,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,CAAC;oBAAE,OAAO;gBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;oBACrC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,KAAK,UAAU;gBACb,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,QAAqB,CAAC,CAAC;gBACjD,OAAO;YACT,KAAK,iBAAiB;gBACpB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAkB,CAAC,CAAC;gBACrD,OAAO;YACT,KAAK,gBAAgB;gBACnB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzC,OAAO;YACT,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3C,OAAO;YAET,qEAAqE;YACrE,yEAAyE;YACzE,wEAAwE;YACxE,4BAA4B;YAC5B,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO;QACX,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,0CAA0C;IAC1C,OAAO,CAAc,GAAgB;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC/C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACzD,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,OAA+B;gBACxC,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAY;gBAC7C,CAAC,EAAE,cAAc;gBACjB,EAAE,EAAE,UAAU,EAAE;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAY,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,qEAAqE;QACrE,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,YAAY;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;CACF"}