@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/buttons.js

@@ -0,0 +1,346 @@
+import { randomUUID, createHash } from "node:crypto";
+import { REPLY_BUTTON_TTL_MS, replyButtonClickText } from "../reply-buttons.js";
+import { pollCounts, pollResultsText } from "../reply-polls.js";
+import { buttonsDigest, validHubAnswerButtons } from "./buttons-model.js";
+import { personKeyString } from "./identity.js";
+import { HubProtocolError } from "./validation.js";
+import { exposureOf, grantApplies, grantOf, readExposure, readGrant } from "./catalog.js";
+import { readMessage } from "./policy.js";
+import { personFromString } from "./http/core.js";
+export { buttonsDigest } from "./buttons-model.js";
+export const HUB_BUTTONS_MIGRATION = Object.freeze({ component: "s8-buttons", version: 1, up(db) {
+        db.exec(`CREATE TABLE hub_answer_buttons (
+    id TEXT PRIMARY KEY, room_id TEXT NOT NULL, message_id TEXT NOT NULL UNIQUE, answer_id TEXT NOT NULL,
+    digest TEXT NOT NULL, created_at INTEGER NOT NULL, expires_at INTEGER NOT NULL,
+    state TEXT NOT NULL CHECK(state IN ('open','chosen','closed','expired')), revision INTEGER NOT NULL DEFAULT 1,
+    chosen_index INTEGER, closed_at INTEGER, ballot_ref TEXT,
+    result_state TEXT NOT NULL CHECK(result_state IN ('none','owed','held','queued','cancelled')),
+    result_key TEXT NOT NULL, result_message_id TEXT, retry_at INTEGER NOT NULL DEFAULT 0
+  );
+  CREATE INDEX hub_buttons_due ON hub_answer_buttons(state, expires_at);
+  CREATE INDEX hub_buttons_results ON hub_answer_buttons(result_state, retry_at);
+  CREATE TABLE hub_button_operations (
+    room_id TEXT NOT NULL, idempotency_key TEXT NOT NULL, set_id TEXT NOT NULL, digest TEXT NOT NULL,
+    receipt TEXT NOT NULL, PRIMARY KEY(room_id, idempotency_key)
+  );`);
+    } });
+const receiptOf = (m) => ({ messageId: m.id, contentDigest: m.content_digest, stage: m.stage, sequence: Math.max(1, m.member_sequence), at: m.stage_at });
+const uuid = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+const RETRY_MS = 30_000;
+const BATCH = 32;
+export class HubButtonsService {
+    core;
+    queue;
+    timer = null;
+    stopped = false;
+    draining = null;
+    deadlineBackoffUntil = 0;
+    resultsBackoffUntil = 0;
+    constructor(core, queue) {
+        this.core = core;
+        this.queue = queue;
+    }
+    row(db, id) { return db.prepare("SELECT * FROM hub_answer_buttons WHERE id=?").get(id); }
+    check() { if (this.stopped)
+        throw new HubProtocolError("unavailable"); this.core.check(); }
+    /** Called with the accepted answer's own transaction. Metadata has already been bound by its exact release lease. */
+    record(db, tx, msg, answer, now) {
+        if (!answer.buttons)
+            return;
+        if (!validHubAnswerButtons(answer.buttons))
+            throw new HubProtocolError("invalid");
+        const b = answer.buttons;
+        db.prepare(`INSERT INTO hub_answer_buttons(id,room_id,message_id,answer_id,digest,created_at,expires_at,state,result_state,result_key)
+      VALUES(?,?,?,?,?,?,?,'open','none',?)`).run(b.id, msg.room_id, msg.id, answer.answerId, buttonsDigest(b), now, now + (b.poll ? b.poll.seconds * 1000 : REPLY_BUTTON_TTL_MS), randomUUID());
+        this.audit(tx, msg, "buttons.offered", "completed", answer.releaseLease.decisionId, { kind: "member", fleetId: msg.fleet_id });
+    }
+    source(db, row) {
+        const msg = readMessage(db, row.message_id);
+        if (!msg || msg.room_id !== row.room_id || msg.answer_id !== row.answer_id || msg.stage !== "answered" || !msg.answer_ref)
+            throw new HubProtocolError("stale");
+        const payload = this.core.deps.content.get(msg.answer_ref), b = payload?.buttons;
+        if (!b)
+            throw new HubProtocolError("expired");
+        if (!validHubAnswerButtons(b) || b.id !== row.id || buttonsDigest(b) !== row.digest)
+            throw new HubProtocolError("uncertain");
+        return { msg, buttons: b };
+    }
+    /** A published answer's continuation has its own bounded lifetime; current source identities/revisions never change. */
+    authorized(db, row, now) {
+        const data = this.source(db, row), msg = data.msg;
+        const room = db.prepare("SELECT * FROM hub_rooms WHERE id=?").get(row.room_id);
+        const e = readExposure(db, msg.exposure_id), g = readGrant(db, msg.grant_id);
+        if (!room || room.state !== "active" || room.asker !== msg.asker || room.exposure_id !== msg.exposure_id || room.grant_id !== msg.grant_id
+            || room.owner_at_creation !== msg.owner || !e || !g)
+            throw new HubProtocolError("revoked");
+        const exposure = exposureOf(e), grant = grantOf(g);
+        if (exposure.revision !== msg.exposure_revision || grant.revision !== msg.grant_revision)
+            throw new HubProtocolError("stale");
+        if (exposure.fleetId !== msg.fleet_id || personKeyString(exposure.owner) !== msg.owner || exposure.state !== "published"
+            || !grantApplies(grant, exposure, personFromString(msg.asker), now))
+            throw new HubProtocolError("revoked");
+        return data;
+    }
+    ballot(row, asker) {
+        if (!row.ballot_ref)
+            return undefined;
+        const b = this.core.deps.content.get(row.ballot_ref)?.pollBallot;
+        if (!b || b.setId !== row.id || b.roomId !== row.room_id || b.messageId !== row.message_id || b.voter !== asker
+            || !Array.isArray(b.options) || !b.options.every(i => Number.isInteger(i) && i >= 0 && i < 10)
+            || new Set(b.options).size !== b.options.length || typeof b.voter !== "string" || typeof b.name !== "string" || !Number.isSafeInteger(b.at))
+            throw new HubProtocolError("expired");
+        return b;
+    }
+    audit(tx, msg, action, result, requestId, actor, contentRef) {
+        this.core.audit(tx, { requestId, actor, action, result, messageId: msg.id, roomId: msg.room_id, fleetId: msg.fleet_id,
+            exposureId: msg.exposure_id, ownerAtEvent: personFromString(msg.owner), grantId: msg.grant_id, grantRevision: msg.grant_revision,
+            ...(contentRef ? { contentRef } : {}) });
+    }
+    view(db, messageId) {
+        const row = db.prepare("SELECT * FROM hub_answer_buttons WHERE message_id=?").get(messageId);
+        if (!row)
+            return undefined;
+        let data;
+        try {
+            data = this.source(db, row);
+        }
+        catch {
+            return undefined;
+        } // retention never reconstructs choices from a browser
+        const b = data.buttons, ballot = this.ballot(row, data.msg.asker), now = this.core.now();
+        if (!b.poll) {
+            const person = row.chosen_index === null ? undefined : db.prepare("SELECT display_name FROM hub_people WHERE person=?").get(data.msg.asker);
+            return { id: b.id, labels: [...b.labels], state: row.state === "open" && now >= row.expires_at ? "expired" : row.state,
+                ...(row.chosen_index !== null ? { chosen: row.chosen_index, by: person?.display_name ?? data.msg.asker } : {}) };
+        }
+        const closed = row.state !== "open", ballots = ballot?.options.length ? [ballot] : [];
+        return { id: b.id, labels: [...b.labels], state: closed ? "closed" : "open", poll: {
+                deadline: row.expires_at, answered: ballots.length, multi: b.poll.multi, reveal: b.poll.reveal, rev: row.revision,
+                ...(closed || b.poll.reveal === "live" ? { counts: pollCounts(b.labels.length, ballots) } : {}),
+                ...(closed && b.poll.showVoters ? { voters: b.labels.map((_, i) => ballots.filter(v => v.options.includes(i)).map(v => v.name)) } : {}),
+            } };
+    }
+    async click(ctx, roomId, input) {
+        this.check();
+        if (Object.keys(input).some(k => !["setId", "index", "options", "idempotencyKey"].includes(k))
+            || typeof input.setId !== "string" || !/^[a-f0-9]{32}$/.test(input.setId) || typeof input.idempotencyKey !== "string" || !uuid.test(input.idempotencyKey))
+            throw new HubProtocolError("invalid");
+        const setId = input.setId, key = input.idempotencyKey;
+        const asker = await ctx.requirePerson(), me = personKeyString(asker);
+        this.check();
+        const first = this.core.atomic(db => {
+            const row = this.row(db, setId);
+            if (!row || row.room_id !== roomId)
+                throw new HubProtocolError("not-found");
+            const data = this.source(db, row);
+            if (data.msg.asker !== me)
+                throw new HubProtocolError("denied");
+            return { ...data.msg, buttonRevision: row.revision };
+        });
+        if (!(await this.core.eligible(personFromString(first.owner))))
+            throw new HubProtocolError("revoked");
+        const actor = await ctx.current();
+        if (actor.kind !== "directory" || personKeyString(actor.person) !== me)
+            throw new HubProtocolError("denied");
+        const auditActor = { kind: "person", person: asker };
+        this.check();
+        const out = this.core.atomic((db, tx) => {
+            const row = this.row(db, setId);
+            if (!row || row.room_id !== roomId)
+                throw new HubProtocolError("not-found");
+            const { msg, buttons: b } = this.authorized(db, row, this.core.now());
+            if (msg.asker !== me)
+                throw new HubProtocolError("denied");
+            const options = input.options;
+            let picked;
+            if (b.poll) {
+                if (input.index !== undefined || !Array.isArray(options) || options.length > b.labels.length || !options.every(i => Number.isInteger(i) && i >= 0 && i < b.labels.length)
+                    || new Set(options).size !== options.length || !b.poll.multi && options.length !== 1)
+                    throw new HubProtocolError("invalid");
+                picked = [...options].sort((a, b) => a - b);
+            }
+            else {
+                if (options !== undefined || !Number.isInteger(input.index) || input.index < 0 || input.index >= b.labels.length)
+                    throw new HubProtocolError("invalid");
+                picked = [input.index];
+            }
+            const digest = createHash("sha256").update(JSON.stringify([setId, !!b.poll, picked])).digest("hex");
+            const dup = db.prepare("SELECT * FROM hub_button_operations WHERE room_id=? AND idempotency_key=?").get(roomId, key);
+            if (dup) {
+                if (dup.set_id !== setId || dup.digest !== digest)
+                    throw new HubProtocolError("conflict");
+                return { receipt: JSON.parse(dup.receipt), fleetId: null };
+            }
+            if (row.state !== "open" || this.core.now() >= row.expires_at)
+                throw new HubProtocolError("expired");
+            if (row.revision !== first.buttonRevision)
+                throw new HubProtocolError("conflict"); // a delayed vote cannot overwrite a newer ballot
+            let receipt;
+            if (!b.poll) {
+                // A public click key belongs to the button-operation namespace, not a previous typed question.
+                receipt = this.queue.insert(db, tx, { roomId, asker, idempotencyKey: row.result_key, requestId: ctx.requestId,
+                    text: replyButtonClickText({ label: b.labels[picked[0]], value: b.values?.[picked[0]] ?? b.labels[picked[0]] }), actor: auditActor });
+                db.prepare("UPDATE hub_answer_buttons SET state='chosen',chosen_index=?,closed_at=?,revision=revision+1 WHERE id=? AND state='open'").run(picked[0], this.core.now(), row.id);
+                this.audit(tx, msg, "buttons.chosen", "completed", ctx.requestId, auditActor);
+            }
+            else {
+                const person = db.prepare("SELECT display_name FROM hub_people WHERE person=?").get(me);
+                const ref = this.core.deps.content.put(tx, { pollBallot: { voter: me, name: person?.display_name ?? me, options: picked, at: this.core.now(),
+                        setId, roomId, messageId: msg.id } });
+                this.audit(tx, msg, "poll.voted", "completed", ctx.requestId, auditActor, ref);
+                db.prepare("UPDATE hub_answer_buttons SET ballot_ref=?,revision=revision+1 WHERE id=?").run(ref, row.id);
+                receipt = receiptOf(msg); // the ballot is durable; a multi-choice poll queues results only at its deadline
+                if (!b.poll.multi) {
+                    this.closeRow(db, tx, row, msg, this.core.now());
+                    receipt = this.queueResults(db, tx, this.row(db, row.id), ctx.requestId);
+                }
+            }
+            db.prepare("INSERT INTO hub_button_operations VALUES(?,?,?,?,?)").run(roomId, key, setId, digest, JSON.stringify(receipt));
+            return { receipt, fleetId: msg.fleet_id };
+        });
+        this.arm();
+        if (out.fleetId)
+            this.queue.flush(out.fleetId);
+        return out.receipt;
+    }
+    closeRow(db, tx, row, msg, now) {
+        const poll = this.source(db, row).buttons.poll;
+        const changed = db.prepare("UPDATE hub_answer_buttons SET state=?,closed_at=?,result_state=?,revision=revision+1 WHERE id=? AND state='open'")
+            .run(poll ? "closed" : "expired", now, poll ? "owed" : "none", row.id).changes;
+        if (changed)
+            this.audit(tx, msg, poll ? "poll.closed" : "buttons.expired", "completed", randomUUID(), { kind: "local-host" });
+    }
+    queueResults(db, tx, row, requestId) {
+        const { msg, buttons: b } = this.authorized(db, row, this.core.now());
+        if (!b.poll || row.closed_at === null || !["owed", "held"].includes(row.result_state))
+            throw new HubProtocolError("conflict");
+        const ballot = this.ballot(row, msg.asker);
+        const choices = b.labels.map((label, i) => ({ label, value: b.values?.[i] ?? label }));
+        let text = pollResultsText({ id: row.id, buttons: choices, createdAt: row.created_at, expiresAt: row.expires_at }, b.poll, ballot?.options.length ? [ballot] : [], row.closed_at);
+        if (!b.poll.multi && ballot && row.closed_at < row.expires_at) {
+            const lines = text.split("\n");
+            lines[0] = lines[0].replace(/closed early by close_poll after \d+ s/, "closed after the asker's vote");
+            text = lines.join("\n");
+        }
+        const receipt = this.queue.insert(db, tx, { roomId: row.room_id, asker: personFromString(msg.asker), idempotencyKey: row.result_key, text, requestId, actor: { kind: "local-host" } });
+        db.prepare("UPDATE hub_answer_buttons SET result_state='queued',result_message_id=? WHERE id=?").run(receipt.messageId, row.id);
+        this.audit(tx, msg, "poll.results", "completed", requestId, { kind: "local-host" });
+        return receipt;
+    }
+    /** Synchronous closure/arming is independent of LDAP, delivery and every previous poll's pending result. */
+    async sweep() {
+        this.check();
+        try {
+            this.core.atomic((db, tx) => {
+                const due = db.prepare("SELECT * FROM hub_answer_buttons WHERE state='open' AND expires_at<=? ORDER BY expires_at,id LIMIT ?").all(this.core.now(), BATCH);
+                for (const row of due) {
+                    const msg = readMessage(db, row.message_id);
+                    if (!msg)
+                        throw new HubProtocolError("uncertain");
+                    // Missing retained content becomes inert. It is never reconstructed from untrusted input.
+                    if (!msg.answer_ref || !this.core.deps.content.get(msg.answer_ref)?.buttons) {
+                        db.prepare("UPDATE hub_answer_buttons SET state='expired',closed_at=?,result_state='cancelled',revision=revision+1 WHERE id=?").run(this.core.now(), row.id);
+                        this.audit(tx, msg, "buttons.expired", "completed", randomUUID(), { kind: "local-host" });
+                    }
+                    else
+                        this.closeRow(db, tx, row, msg, this.core.now());
+                }
+            });
+            this.deadlineBackoffUntil = 0;
+        }
+        catch (err) {
+            this.deadlineBackoffUntil = this.core.now() + RETRY_MS;
+            this.arm();
+            throw err;
+        }
+        this.arm();
+        if (this.draining)
+            return this.draining;
+        const run = this.drainResults();
+        this.draining = run;
+        try {
+            await run;
+        }
+        finally {
+            if (this.draining === run)
+                this.draining = null;
+            if (!this.stopped && this.core.live())
+                this.arm();
+        }
+    }
+    async drainResults() {
+        if (this.core.now() < this.resultsBackoffUntil)
+            return;
+        const rows = this.core.atomic(db => db.prepare("SELECT * FROM hub_answer_buttons WHERE result_state IN ('owed','held') AND retry_at<=? ORDER BY closed_at,id LIMIT ?").all(this.core.now(), BATCH));
+        for (const first of rows) {
+            this.check();
+            try {
+                const msg = this.core.atomic(db => this.source(db, first).msg);
+                if (!(await this.core.eligible(personFromString(msg.asker))) || !(await this.core.eligible(personFromString(msg.owner))))
+                    throw new HubProtocolError("unavailable");
+                this.check();
+                const fleetId = this.core.atomic((db, tx) => {
+                    const row = this.row(db, first.id);
+                    if (!["owed", "held"].includes(row.result_state))
+                        return null;
+                    this.queueResults(db, tx, row, randomUUID());
+                    return msg.fleet_id;
+                });
+                if (fleetId)
+                    this.queue.flush(fleetId);
+            }
+            catch (err) {
+                this.check();
+                const code = err instanceof HubProtocolError ? err.code : "unavailable";
+                try {
+                    this.core.atomic((db, tx) => {
+                        const row = this.row(db, first.id);
+                        if (!row || !["owed", "held"].includes(row.result_state))
+                            return;
+                        const cancelled = ["expired", "revoked", "stale", "denied", "not-found"].includes(code);
+                        const msg = readMessage(db, row.message_id);
+                        if (!msg)
+                            throw new HubProtocolError("uncertain");
+                        if (cancelled || row.result_state !== "held")
+                            this.audit(tx, msg, "poll.results", "held", randomUUID(), { kind: "local-host" });
+                        db.prepare("UPDATE hub_answer_buttons SET result_state=?,retry_at=? WHERE id=?").run(cancelled ? "cancelled" : "held", this.core.now() + RETRY_MS, row.id);
+                    });
+                }
+                catch {
+                    // Even the hold audit can fail with a full disk. Keep results owed, back off in memory, never spin or
+                    // claim admission. Deadlines for other polls still have their independent schedule.
+                    this.resultsBackoffUntil = this.core.now() + RETRY_MS;
+                    break;
+                }
+            }
+        }
+    }
+    arm() {
+        if (this.stopped || !this.core.live())
+            return;
+        if (this.timer)
+            clearTimeout(this.timer);
+        let at;
+        try {
+            const next = this.core.atomic(db => db.prepare(`SELECT
+        (SELECT MIN(expires_at) FROM hub_answer_buttons WHERE state='open') AS deadline,
+        (SELECT MIN(retry_at) FROM hub_answer_buttons WHERE result_state IN ('owed','held')) AS results`).get());
+            const times = [next.deadline === null ? null : Math.max(next.deadline, this.deadlineBackoffUntil),
+                this.draining || next.results === null ? null : Math.max(next.results, this.resultsBackoffUntil)].filter((v) => v !== null);
+            at = times.length ? Math.min(...times) : null;
+        }
+        catch {
+            at = this.core.now() + RETRY_MS;
+        }
+        this.timer = at === null ? null : setTimeout(() => {
+            this.timer = null;
+            void this.sweep().catch(() => { if (!this.stopped && this.core.live())
+                this.arm(); });
+        }, Math.min(2_147_483_647, Math.max(1, at - this.core.now())));
+        this.timer?.unref();
+    }
+    start() { this.arm(); void this.sweep().catch(() => { }); }
+    async close() { this.stopped = true; if (this.timer)
+        clearTimeout(this.timer); this.timer = null; await this.draining?.catch(() => { }); }
+}
+//# sourceMappingURL=buttons.js.map

package/dist/hub/buttons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buttons.js","sourceRoot":"","sources":["../../src/hub/buttons.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAmB,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAgB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,EAAqB;QAChH,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;KAaL,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,CAAC;AAeL,MAAM,SAAS,GAAG,CAAC,CAAa,EAAc,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,KAA4B,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACzM,MAAM,IAAI,GAAG,gEAAgE,CAAC;AAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,MAAM,OAAO,iBAAiB;IAMC,IAAI;IAA4B,KAAK;IAL1D,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAyB,IAAI,CAAC;IACtC,oBAAoB,GAAG,CAAC,CAAC;IACzB,mBAAmB,GAAG,CAAC,CAAC;IAChC,YAA6B,IAAa,EAAmB,KAAsB;oBAAtD,IAAI;qBAA4B,KAAK;IAAoB,CAAC;IAC/E,GAAG,CAAC,EAAqB,EAAE,EAAU,IAAqB,OAAO,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC,CAAC,CAAC;IACxJ,KAAK,KAAW,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEzG,qHAAqH;IACrH,MAAM,CAAC,EAAqB,EAAE,EAAS,EAAE,GAAe,EAAE,MAAiB,EAAE,GAAW;QACtF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,EAAE,CAAC,OAAO,CAAC;4CAC6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAC3G,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjI,CAAC;IAEO,MAAM,CAAC,EAAqB,EAAE,GAAQ;QAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/J,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC;QACjF,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7H,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,wHAAwH;IAChH,UAAU,CAAC,EAAqB,EAAE,GAAQ,EAAE,GAAW;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAClD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAqB,CAAC;QACnG,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;eACrI,IAAI,CAAC,iBAAiB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9H,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW;eACnH,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;IACO,MAAM,CAAC,GAAQ,EAAE,KAAa;QACpC,IAAI,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;QACjE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;eAC1G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;eAC3F,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrL,OAAO,CAAC,CAAC;IACX,CAAC;IACO,KAAK,CAAC,EAAS,EAAE,GAAe,EAAE,MAAc,EAAE,MAAgC,EAAE,SAAiB,EAC3G,KAA8B,EAAE,UAAmB;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ;YACnH,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc;YAChI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,EAAqB,EAAE,SAAiB;QAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAoB,CAAC;QAChH,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,IAA6C,CAAC;QAClD,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC,CAAC,sDAAsD;QACvH,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAyC,CAAC;YACpL,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;gBACpH,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrH,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,KAAK,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE;gBACjF,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ;gBACjH,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/F,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxI,EAAE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,MAAc,EAAE,KAA8B;QAChF,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;eACzF,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnM,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3J,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7G,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC7G,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtE,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,MAAgB,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;uBACpK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC9H,MAAM,GAAG,CAAC,GAAG,OAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAK,KAAK,CAAC,KAAgB,GAAG,CAAC,IAAK,KAAK,CAAC,KAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;oBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAChL,MAAM,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpG,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAoE,CAAC;YACxL,IAAI,GAAG,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;YACjL,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrG,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,cAAc;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,iDAAiD;YACpI,IAAI,OAAmB,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACZ,+FAA+F;gBAC/F,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;oBAC3G,IAAI,EAAE,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAE,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC7I,EAAE,CAAC,OAAO,CAAC,yHAAyH,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9K,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyC,CAAC;gBAChI,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;wBAC1I,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC/E,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzG,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,iFAAiF;gBAC3G,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACjD,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3H,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAEO,QAAQ,CAAC,EAAqB,EAAE,EAAS,EAAE,GAAQ,EAAE,GAAe,EAAE,GAAW;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,kHAAkH,CAAC;aAC3I,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;QACjF,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAChI,CAAC;IACO,YAAY,CAAC,EAAqB,EAAE,EAAS,EAAE,GAAQ,EAAE,SAAiB;QAChF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9H,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QACvF,IAAI,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EACvH,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,wCAAwC,EAAE,+BAA+B,CAAC,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnK,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACvL,EAAE,CAAC,OAAO,CAAC,oFAAoF,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChI,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;gBAChC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,sGAAsG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAU,CAAC;gBACpK,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC5C,IAAI,CAAC,GAAG;wBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBAClD,0FAA0F;oBAC1F,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;wBAC5E,EAAE,CAAC,OAAO,CAAC,mHAAmH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC7J,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC5F,CAAC;;wBAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;QAAC,CAAC;QACpC,OAAO,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,MAAM,GAAG,CAAC;QAAC,CAAC;QAC9F,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACrD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,CAAC;IACpI,CAAC;IACO,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,mBAAmB;YAAE,OAAO;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,sHAAsH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC;QAC7M,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBACpK,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;oBAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAE,CAAC;oBACpC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;wBAAE,OAAO,IAAI,CAAC;oBAC9D,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO,GAAG,CAAC,QAAQ,CAAC;gBACpE,CAAC,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,GAAG,YAAY,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;gBACxE,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;wBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;wBAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;4BAAE,OAAO;wBACrG,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACxF,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;wBAAC,IAAI,CAAC,GAAG;4BAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;wBAC/F,IAAI,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM;4BAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;wBAChI,EAAE,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7J,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBACX,sGAAsG;oBACtG,oFAAoF;oBACpF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;oBAAC,MAAM;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QAC9C,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,EAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC;;wGAEmD,CAAC,CAAC,GAAG,EAAyD,CAAC,CAAC;YAClK,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC;gBAC/F,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC3I,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,KAAK,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CACzJ"}

package/dist/hub/catalog.d.ts

@@ -0,0 +1,74 @@
+import type Database from "better-sqlite3";
+import type { HubExposure, HubExposureSnapshot, HubGrant, HubRequestContext, PersonKey } from "./types.js";
+import type { HubLinkContext } from "./server.js";
+import { type HubCore } from "./http/core.js";
+/** P1 grants last at most this long; the owner chooses within it. */
+export declare const GRANT_MAX_MS: number;
+interface ExposureRow {
+    id: string;
+    fleet_id: string;
+    owner: string;
+    display_name: string;
+    revision: number;
+    state: HubExposure["state"];
+    data_view_id: string;
+    allowed_tools: string;
+    policy_digest: string;
+    frozen_through: number;
+}
+interface GrantRow {
+    id: string;
+    revision: number;
+    owner: string;
+    exposure_id: string;
+    exposure_revision: number;
+    approved_by: string;
+    approved_at: number;
+    subject: string;
+    permissions: string;
+    starts_at: number;
+    expires_at: number;
+    state: HubGrant["state"];
+}
+export declare function exposureOf(row: ExposureRow): HubExposure;
+export declare function grantOf(row: GrantRow): HubGrant;
+export declare const readExposure: (db: Database.Database, id: string) => ExposureRow | undefined;
+export declare const readGrant: (db: Database.Database, id: string) => GrantRow | undefined;
+/** Whether a grant lets `asker` ask `exposure` right now (exact revision, window, state, permission). */
+export declare function grantApplies(grant: HubGrant, exposure: HubExposure, asker: PersonKey, now: number): boolean;
+export interface HubCatalogView {
+    mine: readonly (HubExposure & {
+        grants: readonly (HubGrant & {
+            subjectName: string;
+            subjectLogin: string;
+        })[];
+    })[];
+    askable: readonly {
+        exposure: HubExposure;
+        grant: HubGrant;
+        ownerName: string;
+    }[];
+}
+export declare class HubCatalogService {
+    private readonly core;
+    constructor(core: HubCore);
+    /** A member's complete catalog revision, from its authenticated link (S1 already refused another fleet or owner). */
+    receiveSnapshot(snapshot: HubExposureSnapshot, link: HubLinkContext): void;
+    /** What this person may see: their own exposures (with the grants on them) and what is granted to them now. */
+    visible(ctx: HubRequestContext): Promise<HubCatalogView>;
+    /** Grant one known Hub person `ask` on the owner's exposure at the revision the owner saw. */
+    grant(ctx: HubRequestContext, input: {
+        exposureId: string;
+        exposureRevision: number;
+        login: string;
+        days: number;
+    }): Promise<HubGrant>;
+    /** The owner withdraws a grant (narrowing: always allowed) against the revision they saw; its rooms close. */
+    revokeGrant(ctx: HubRequestContext, id: string, revision: number): Promise<void>;
+    /**
+     * Freeze an exposure on the Hub (narrowing only): its owner or the Hub administrator. It holds every revision up to
+     * the current one; the member re-consenting a newer revision lifts it.
+     */
+    freeze(ctx: HubRequestContext, id: string, revision: number, admin: boolean): Promise<void>;
+}
+export {};