@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/member/agent-mode.js

@@ -0,0 +1,23 @@
+/**
+ * Hub P1 representative agent (docs/design/hub-representative-agent.md, decision f619f813): the one exposure
+ * descriptor P1 publishes. The owner shares an existing fleet agent; Hub questions reach it through normal delivery.
+ * The v1 wire shape is kept, filled with fixed values:
+ *
+ *   providerId "agent" (member-local) · dataViewId "agent" · allowedTools [] · policyDigest sha256(canonical {mode, agent})
+ *
+ * `agent` is the stable local instance name, never its label. The empty tool list means no Hub-delegated tool phases;
+ * the agent keeps its ordinary Settings tools. Anything else (a legacy container row) is never this descriptor.
+ */
+import { canonicalArguments, sha256 } from "../identity.js";
+export const HUB_AGENT_MODE = "agent";
+/** The policy digest of `agent`'s representative exposure. */
+export function agentPolicyDigest(agent) {
+    return sha256(canonicalArguments({ mode: HUB_AGENT_MODE, agent }));
+}
+/** True only for the exact representative tuple of its own agent (S5 delivers on nothing else). */
+export function isAgentDescriptor(local) {
+    const e = local.exposure;
+    return local.providerId === HUB_AGENT_MODE && e.dataViewId === HUB_AGENT_MODE && Array.isArray(e.allowedTools)
+        && e.allowedTools.length === 0 && e.policyDigest === agentPolicyDigest(local.agent);
+}
+//# sourceMappingURL=agent-mode.js.map

package/dist/hub/member/agent-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-mode.js","sourceRoot":"","sources":["../../../src/hub/member/agent-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,CAAC,MAAM,cAAc,GAAG,OAAgB,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,MAAM,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,KAAkE;IAClG,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,OAAO,KAAK,CAAC,UAAU,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;WACzG,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/dist/hub/member/attachments.d.ts

@@ -0,0 +1,29 @@
+import type { HubAttachmentChunk, HubAttachmentRef } from "../types.js";
+export interface HubMemberFilesOptions {
+    /** The AgEnD state dir (the reply tool's rule) and an agent's inbox / scratch folder under it. */
+    stateDir: string;
+    inboxDir(agent: string): string | null;
+    scratchDir(agent: string): string | null;
+}
+export type HubFileFetch = (id: string, offset: number) => Promise<HubAttachmentChunk>;
+export type HubFilePut = (chunk: HubAttachmentChunk) => Promise<void>;
+export declare class HubMemberFiles {
+    private readonly options;
+    private readonly limits;
+    constructor(options: HubMemberFilesOptions);
+    /** Pull each file whole, check its size and SHA-256, write it into the agent's inbox; returns the lines for the text. */
+    receive(agent: string, messageId: string, files: readonly HubAttachmentRef[], fetch: HubFileFetch): Promise<string[]>;
+    /** The agent's files for its answer, copied and typed; refused as a whole with a reason the agent can act on. */
+    prepare(agent: string, paths: readonly string[]): Promise<{
+        ref: HubAttachmentRef;
+        bytes: Buffer;
+    }[]>;
+    /** Push one prepared file in order, one chunk in flight. */
+    send(file: {
+        ref: HubAttachmentRef;
+        bytes: Buffer;
+    }, put: HubFilePut): Promise<void>;
+}
+/** A refusal the agent sees as its report_result error (a fixable request, not a link failure). */
+export declare class HubFileRefusal extends Error {
+}

package/dist/hub/member/attachments.js

@@ -0,0 +1,107 @@
+/**
+ * Member side of Hub attachments (attachments-v1, #3226 D):
+ * - a question's files are pulled chunk by chunk and written into the representative agent's inbox, then named in the
+ *   question text exactly as fleet chat uploads are (`[📎 File: NAME → PATH]`, `[📷 Image: PATH]`);
+ * - an answer's files are the agent's own paths, copied under the reply tool's rule (snapshotReplyFile: no symlink,
+ *   nothing under the AgEnD state dir but inbox/, a regular file within the limit), then typed by name and magic bytes
+ *   and pushed before the answer that names them.
+ */
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { mkdir, open, readFile, rm } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { constants } from "node:fs";
+import { HUB_ATTACHMENT_CHUNK, attachmentName } from "../protocol.js";
+import { HubProtocolError } from "../validation.js";
+import { attachmentLimits, classifyAttachment, isInlineImage } from "../attachments/limits.js";
+import { snapshotReplyFile } from "../../web-reply-files.js";
+const sha = (b) => createHash("sha256").update(b).digest("hex");
+export class HubMemberFiles {
+    options;
+    limits = attachmentLimits();
+    constructor(options) {
+        this.options = options;
+    }
+    /** Pull each file whole, check its size and SHA-256, write it into the agent's inbox; returns the lines for the text. */
+    async receive(agent, messageId, files, fetch) {
+        const inbox = this.options.inboxDir(agent);
+        if (!inbox || files.length > this.limits.files || files.reduce((n, f) => n + f.size, 0) > this.limits.messageBytes)
+            throw new HubProtocolError("invalid");
+        await mkdir(inbox, { recursive: true, mode: 0o700 });
+        const lines = [];
+        for (const [i, f] of files.entries()) {
+            if (f.size > this.limits.fileBytes || !attachmentName.safeParse(f.name).success)
+                throw new HubProtocolError("invalid");
+            const parts = [];
+            let got = 0;
+            while (got < f.size) {
+                const c = await fetch(f.id, got);
+                const data = Buffer.from(c.data, "base64");
+                if (c.id !== f.id || c.offset !== got || c.total !== f.size || c.sha256 !== f.sha256 || data.length === 0 || data.length > HUB_ATTACHMENT_CHUNK || got + data.length > f.size)
+                    throw new HubProtocolError("invalid");
+                parts.push(data);
+                got += data.length;
+            }
+            const bytes = Buffer.concat(parts);
+            if (sha(bytes) !== f.sha256)
+                throw new HubProtocolError("invalid");
+            const kind = classifyAttachment(f.name, bytes.subarray(0, 64));
+            if ("refused" in kind || kind.mime !== f.mime)
+                throw new HubProtocolError("invalid");
+            // The stored name is opaque and bounded: the whole message id and the file's position (a retried hand-off rewrites the
+            // same file; another message never can), plus the plain extension. The display name stays in the line for the agent.
+            const ext = /\.([a-z0-9]{1,10})$/i.exec(f.name)?.[1]?.toLowerCase();
+            const path = join(inbox, `hub-${messageId}-${i + 1}${ext ? `.${ext}` : ""}`);
+            const fh = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | (constants.O_NOFOLLOW ?? 0), 0o600);
+            try {
+                await fh.writeFile(bytes);
+            }
+            finally {
+                await fh.close();
+            }
+            lines.push(isInlineImage(f.mime) ? `[📷 Image: ${path}]` : `[📎 File: ${f.name} → ${path}]`);
+        }
+        return lines;
+    }
+    /** The agent's files for its answer, copied and typed; refused as a whole with a reason the agent can act on. */
+    async prepare(agent, paths) {
+        if (paths.length > this.limits.files)
+            throw new HubFileRefusal(`at most ${this.limits.files} files`);
+        const scratch = this.options.scratchDir(agent);
+        if (!scratch)
+            throw new HubFileRefusal("this agent cannot send files");
+        const out = [];
+        for (const path of paths) {
+            const id = randomBytes(16).toString("hex");
+            const copy = await snapshotReplyFile(path, scratch, id, { stateDir: this.options.stateDir, maxFileBytes: this.limits.fileBytes, maxDirBytes: this.limits.messageBytes * 2 });
+            if (!copy.ok)
+                throw new HubFileRefusal(`${basename(path)}: ${copy.reason}`);
+            let bytes;
+            try {
+                bytes = await readFile(copy.path);
+            }
+            finally {
+                await rm(copy.path, { force: true });
+            }
+            const name = basename(path);
+            if (!attachmentName.safeParse(name).success)
+                throw new HubFileRefusal(`${name}: not a plain file name`);
+            const kind = classifyAttachment(name, bytes.subarray(0, 64));
+            if ("refused" in kind)
+                throw new HubFileRefusal(`${name}: ${kind.refused === "type-not-allowed" ? "this type is not allowed (PNG, JPEG, GIF, WebP, PDF, txt, md, csv, json, docx, xlsx, pptx, html)" : kind.refused === "image-mismatch" ? "not the image its name says" : "empty"}`);
+            out.push({ ref: { id: randomUUID(), name, size: bytes.length, mime: kind.mime, sha256: sha(bytes) }, bytes });
+        }
+        if (out.reduce((n, f) => n + f.bytes.length, 0) > this.limits.messageBytes)
+            throw new HubFileRefusal(`more than ${this.limits.messageBytes / 1024 / 1024} MB together`);
+        return out;
+    }
+    /** Push one prepared file in order, one chunk in flight. */
+    async send(file, put) {
+        for (let offset = 0; offset < file.bytes.length; offset += HUB_ATTACHMENT_CHUNK) {
+            await put({ id: file.ref.id, offset, total: file.ref.size, sha256: file.ref.sha256, data: file.bytes.subarray(offset, offset + HUB_ATTACHMENT_CHUNK).toString("base64") });
+        }
+    }
+}
+/** A refusal the agent sees as its report_result error (a fixable request, not a link failure). */
+export class HubFileRefusal extends Error {
+}
+//# sourceMappingURL=attachments.js.map

package/dist/hub/member/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/hub/member/attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAUhF,MAAM,OAAO,cAAc;IAEI,OAAO;IADnB,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAC7C,YAA6B,OAA8B;uBAA9B,OAAO;IAA0B,CAAC;IAE/D,yHAAyH;IACzH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,SAAiB,EAAE,KAAkC,EAAE,KAAmB;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1J,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACvH,MAAM,KAAK,GAAa,EAAE,CAAC;YAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC3C,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;oBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACrN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/D,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrF,uHAAuH;YACvH,qHAAqH;YACrH,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7H,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAAwB;QACnD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,8BAA8B,CAAC,CAAC;QACvE,MAAM,GAAG,GAA+C,EAAE,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7K,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;YACxG,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7D,IAAI,SAAS,IAAI,IAAI;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,kGAAkG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACtR,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,cAAc,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,GAAG,IAAI,cAAc,CAAC,CAAC;QACxK,OAAO,GAAG,CAAC;IACb,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,IAAI,CAAC,IAA8C,EAAE,GAAe;QACxE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAChF,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7K,CAAC;IACH,CAAC;CACF;AACD,mGAAmG;AACnG,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG"}

package/dist/hub/member/exposure-api.d.ts

@@ -0,0 +1,87 @@
+/**
+ * S3c (S-55): what the member's Settings card reads and does with its exposures — the projection S3a's client expects
+ * (docs/design/hub-ui-client.md "HubExposureView", widened with web-claude: `choices` and `pending`) and the owner's
+ * three operations. Local-owner only; the HTTP routes (settings-api.ts) refuse the public link, and publish/revise run
+ * only as a confirmed Settings replay. Built by S5's member composition from the store, the sender and the agents.
+ *
+ * P1 shares a representative agent (docs/design/hub-representative-agent.md): the owner picks one of this fleet's
+ * configured agents, and the only descriptor published is agent-mode.ts's exact tuple. The DTO keeps its shape for a
+ * tab loaded before the change: `choices.dataViews` is the one "agent" entry and `choices.tools` is empty (an old
+ * picker needs a tool, so it cannot publish), `policy.tools` is [], and refusals stay inside HubExposureError.
+ * A legacy (container) mapping stays durable and withdrawable but says `republish_required` until the owner shares the
+ * agent again through the same confirmed, revision-checked publish; it is never converted silently.
+ */
+import type { HubExecutionReadiness, HubLocalExposure } from "../execution/service.js";
+import { type HubExposureStore } from "./exposures.js";
+export interface HubExposureView {
+    agent: string;
+    display: string;
+    exposureId: string | null;
+    revision: number;
+    state: "published" | "withdrawn" | "frozen";
+    policy: {
+        dataView: string;
+        tools: string[];
+    } | null;
+    enforceable: boolean;
+    reason?: string;
+    /** What the owner can share for this agent: the agent itself (one "agent" entry) and no Hub tools. */
+    choices: {
+        dataViews: Array<{
+            id: string;
+            label: string;
+        }>;
+        tools: Array<{
+            name: string;
+            label: string;
+        }>;
+    };
+    /** A publish waiting for the owner's Settings confirmation (the confirmation layer's), or null. */
+    pending: {
+        expiresAt: number;
+    } | null;
+}
+/** One of this fleet's configured agents, as normal delivery addresses it (`name`) and the owner sees it (`display`). */
+export interface HubMemberAgent {
+    name: string;
+    display: string;
+}
+export interface HubPublishInput {
+    agent: string;
+    dataViewId: string;
+    tools: string[];
+    expectedRevision: number;
+}
+export interface HubMemberExposureApi {
+    list(): HubExposureView[];
+    /** The confirmation's summary for a publish (checked: a refusal throws HubExposureRefusal). */
+    preview(input: unknown): {
+        summary: string[];
+    };
+    /** Publish or revise (run only after the owner confirmed). */
+    publish(input: unknown): HubExposureView;
+    /** Withdraw at once: ok once the restrictive state is saved; the Hub learns it with the next snapshot ("pending"). */
+    withdraw(exposureId: string, expectedRevision: number): Promise<{
+        remote: "pending";
+    }>;
+}
+/** A publish request, strictly: unknown keys, odd types or a non-whole revision are refused (unknown_agent covers a bad name). */
+export declare function publishInput(raw: unknown): HubPublishInput;
+export declare function createHubMemberExposureApi(deps: {
+    store: HubExposureStore;
+    /** This fleet's configured agents that normal delivery accepts (never the Hub's inventory, never the Hub daemon). */
+    agents(): HubMemberAgent[];
+    /** S1: after a commit, the snapshot to the Hub (pending). */
+    afterCommit(): Promise<unknown>;
+    /** The confirmation layer's pending publish for an agent, if any. */
+    pending?(agent: string): {
+        expiresAt: number;
+    } | null;
+    /**
+     * S5's representative adapter: asked after this API's own check passes, before the stage and again INSIDE the atomic
+     * publish transaction (where it may record the agent's lifecycle against candidate.consentId). Its refusal refuses
+     * the publish (not_enforceable) and drops the candidate. Absent (no delivery path composed yet): nothing is
+     * shareable — every row is enforceable:false, reason "delivery_unavailable", and publish is refused (#3146 r1).
+     */
+    readinessCandidate?(candidate: HubLocalExposure): HubExecutionReadiness;
+}): HubMemberExposureApi;

package/dist/hub/member/exposure-api.js

@@ -0,0 +1,64 @@
+import { HUB_AGENT_MODE, isAgentDescriptor } from "./agent-mode.js";
+import { HubExposureRefusal, publishExposure } from "./exposures.js";
+/** A publish request, strictly: unknown keys, odd types or a non-whole revision are refused (unknown_agent covers a bad name). */
+export function publishInput(raw) {
+    const r = raw;
+    if (!r || typeof r !== "object" || Array.isArray(r) || Object.keys(r).some((k) => !["agent", "dataViewId", "tools", "expectedRevision"].includes(k)))
+        throw new HubExposureRefusal("conflict");
+    if (typeof r.agent !== "string" || !r.agent || typeof r.dataViewId !== "string" || !Array.isArray(r.tools) || !r.tools.every((t) => typeof t === "string")
+        || !Number.isSafeInteger(r.expectedRevision) || r.expectedRevision < 0)
+        throw new HubExposureRefusal("conflict");
+    return { agent: r.agent, dataViewId: r.dataViewId, tools: r.tools, expectedRevision: r.expectedRevision };
+}
+export function createHubMemberExposureApi(deps) {
+    const agentOf = (name) => deps.agents().find((a) => a.name === name) ?? null;
+    /** Publish readiness (asked again inside the atomic publish): the exact descriptor of a still-configured agent. */
+    const readiness = (c) => {
+        if (!isAgentDescriptor(c))
+            return { ok: false, reasonCode: "policy-unavailable" };
+        if (!agentOf(c.agent))
+            return { ok: false, reasonCode: "provider-unavailable" };
+        return deps.readinessCandidate ? deps.readinessCandidate(c) : { ok: false, reasonCode: "provider-unavailable" };
+    };
+    const viewOf = (a) => {
+        const row = deps.store.list().find((r) => r.agent === a.name), c = row?.committed ?? null, e = c?.exposure ?? null;
+        const legacy = !!c && !!e && e.state !== "withdrawn" && !isAgentDescriptor(c);
+        const reason = legacy ? "republish_required" : !deps.readinessCandidate ? "delivery_unavailable" : null;
+        return { agent: a.name, display: a.display, exposureId: e?.id ?? null, revision: e?.revision ?? 0, state: e?.state ?? "withdrawn",
+            policy: e && e.state !== "withdrawn" ? { dataView: e.dataViewId, tools: [...e.allowedTools] } : null,
+            enforceable: !reason, ...(reason ? { reason } : {}),
+            choices: { dataViews: [{ id: HUB_AGENT_MODE, label: a.display }], tools: [] }, pending: deps.pending?.(a.name) ?? null };
+    };
+    const checked = (raw) => {
+        const input = publishInput(raw), a = agentOf(input.agent);
+        if (!a)
+            throw new HubExposureRefusal("unknown_agent");
+        // A tab from before P1's change may still send a document view: nothing but the agent itself is shareable.
+        if (input.dataViewId !== HUB_AGENT_MODE)
+            throw new HubExposureRefusal("unknown_view");
+        if (input.tools.length !== 0)
+            throw new HubExposureRefusal("not_enforceable");
+        return { input, a };
+    };
+    return {
+        list: () => deps.agents().map(viewOf),
+        preview(raw) {
+            const { input, a } = checked(raw);
+            return { summary: [`Share "${a.display}" with the Hub`, "Hub questions go to this agent's own conversation, with its folder and Settings tools",
+                    `Revision: ${input.expectedRevision + 1}`] };
+        },
+        publish(raw) {
+            const { input, a } = checked(raw);
+            publishExposure(deps.store, { agent: a.name, providerId: HUB_AGENT_MODE, displayName: a.display, dataViewId: HUB_AGENT_MODE, allowedTools: [],
+                expectedRevision: input.expectedRevision }, readiness);
+            void deps.afterCommit().catch(() => { });
+            return viewOf(a);
+        },
+        async withdraw(exposureId, expectedRevision) {
+            deps.store.withdraw(exposureId, expectedRevision);
+            void deps.afterCommit().catch(() => { });
+            return { remote: "pending" };
+        },
+    };
+}
+//# sourceMappingURL=exposure-api.js.map

package/dist/hub/member/exposure-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure-api.js","sourceRoot":"","sources":["../../../src/hub/member/exposure-api.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAyB,MAAM,gBAAgB,CAAC;AAwB5F,kIAAkI;AAClI,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/L,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;WACrJ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAK,CAAC,CAAC,gBAA2B,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/H,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,CAAC;AAClI,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAe1C;IACC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IACrF,mHAAmH;IACnH,MAAM,SAAS,GAAG,CAAC,CAAmB,EAAyB,EAAE;QAC/D,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC;IAClH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,CAAiB,EAAmB,EAAE;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;QACnH,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,WAAW;YAC/H,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YACpG,WAAW,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7H,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,CAAC;QACtD,2GAA2G;QAC3G,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc;YAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;QACtF,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtB,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;QACrC,OAAO,CAAC,GAAG;YACT,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,OAAO,gBAAgB,EAAE,uFAAuF;oBAC7I,aAAa,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,GAAG;YACT,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;gBAC3I,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC;YACzD,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/hub/member/exposures.d.ts

@@ -0,0 +1,123 @@
+/**
+ * S3c (S-55, docs/design/hub-s3c-exposures.md): the member's exposure store — the owner's locally approved exposure
+ * policy/context mappings (hub.md §4), in the member DB (hub-member/<hubId>/member.sqlite) with its own version floor.
+ *
+ * - One exposure per local agent: a COMMITTED mapping (what S1 admission and S4 read) and at most one STAGED candidate
+ *   (the next revision, never visible to admission or execution: its exposure.state is "withdrawn" until the atomic
+ *   publish promotes it). Publish = stage → S4 readinessCandidate → recheck → atomic promote; withdraw narrows at once.
+ * - Every change: check (meta revision == floor), work, audit in THIS transaction, raise the floor, bump the revision
+ *   (the snapshot revision: it never repeats with other content, and never rolls back). A failure after a write marks
+ *   the store failed (uncertain) until restart.
+ * - snapshot(): the complete current set the Hub mirrors — published (and frozen) exposures; a withdrawn one is left
+ *   out, which the Hub's receiveSnapshot reads as withdrawn. Never staged rows, never instance inventory.
+ * No file opening or migration on import; composition (S5) supplies the DB, floor, audit and the views registry.
+ */
+import type Database from "better-sqlite3";
+import type { HubVersionFloor } from "../store.js";
+import type { HubAuditRecord, HubExposure, HubExposureSnapshot } from "../types.js";
+import { type HubDocumentView } from "../execution/views.js";
+import type { HubExecutionReadiness, HubLocalExposure } from "../execution/service.js";
+import type { HubMigration } from "../db.js";
+import type { HubMemberLink } from "../client.js";
+/** P1: at most this many published exposures a member (protocol: the snapshot's 64). */
+export declare const HUB_EXPOSURE_MAX = 64;
+export declare const HUB_EXPOSURE_MIGRATION: HubMigration;
+/** The member's binding a mapping is made under: the paired owner and fleet (null: not paired). */
+export interface HubExposureBinding {
+    owner: HubExposure["owner"];
+    fleetId: string;
+}
+export interface HubExposureStoreOptions {
+    floor: HubVersionFloor;
+    /** S5's member-local audit (raw-db store: appendInTransaction). */
+    audit: {
+        appendInTransaction(record: HubAuditRecord, database: Database.Database): void;
+    };
+    /** The current pairing's owner and fleet, or null. */
+    binding(): HubExposureBinding | null;
+    /** The exact registry S4 gets (built by S5 from durable owner-approved snapshots). */
+    views: ReadonlyMap<string, HubDocumentView>;
+    now?: () => number;
+}
+export interface HubExposureInput {
+    agent: string;
+    providerId: string;
+    displayName: string;
+    dataViewId: string;
+    allowedTools: readonly string[];
+    /** The committed revision the owner saw (0: none yet). */
+    expectedRevision: number;
+}
+export type HubExposureError = "not_paired" | "unknown_agent" | "unknown_view" | "not_enforceable" | "conflict" | "limit";
+export declare class HubExposureRefusal extends Error {
+    readonly code: HubExposureError;
+    constructor(code: HubExposureError);
+}
+/** One row for the owner's list (the UI's view is made from it). */
+export interface HubExposureRow {
+    agent: string;
+    committed: HubLocalExposure | null;
+    staged: HubLocalExposure | null;
+}
+export declare class HubExposureStore {
+    readonly database: Database.Database;
+    private readonly options;
+    private failed;
+    constructor(database: Database.Database, options: HubExposureStoreOptions);
+    /** A new member set only: floor 0 and no meta row (S5 initializes every floor of the set together). */
+    initialize(): void;
+    /** The store revision (== the floor), or uncertain. */
+    check(): number;
+    private change;
+    private rowOf;
+    private rowById;
+    /** S1 admission: the COMMITTED exposure only (a staged candidate is never visible; a withdrawn one says so). */
+    exposure(id: string): HubExposure | null;
+    /** S4: the committed mapping while published or frozen; withdrawn (or none): null — fenced. */
+    localExposure(id: string): HubLocalExposure | null;
+    /** The complete set the Hub mirrors at this revision (published and frozen; withdrawn left out). */
+    snapshot(): HubExposureSnapshot;
+    list(): HubExposureRow[];
+    /**
+     * Stage the next revision of `agent`'s exposure (or its first): a candidate S4 can judge (readinessCandidate) and
+     * nobody can admit (state "withdrawn" until publish). Refused: not paired, a descriptor that is neither the exact
+     * representative agent nor an approved view (agent-mode.ts), a committed revision other than the one the owner saw (conflict), more than HUB_EXPOSURE_MAX published.
+     */
+    stage(input: HubExposureInput): HubLocalExposure;
+    /**
+     * The atomic publish: in ONE transaction, recheck that the staged candidate is exactly `candidate`, the committed
+     * revision is still the one before it, the binding and the view's policy digest are unchanged, and S4's readiness
+     * (called again here, immediately before the write) still holds; then promote it to the committed, published mapping.
+     */
+    publish(candidate: HubLocalExposure, ready: (candidate: HubLocalExposure) => HubExecutionReadiness): HubLocalExposure;
+    /** Drop a staged candidate (a refused readiness, a cancelled confirmation); the committed mapping is untouched. */
+    discard(id: string): void;
+    /**
+     * Withdraw at once (narrowing needs no consent): the committed mapping becomes withdrawn at the next revision (S1
+     * admission then refuses, S4 sees null), any staged candidate goes. `expectedRevision`: the one the owner saw.
+     */
+    withdraw(id: string, expectedRevision: number): HubLocalExposure;
+    private published;
+}
+/**
+ * The owner's publish, end to end: stage → S4 readinessCandidate (capability evidence, not consent) → recheck and
+ * atomic publish (readiness asked again inside it). A refusal at any step drops the candidate and leaves the committed
+ * mapping as it was.
+ */
+export declare function publishExposure(store: HubExposureStore, input: HubExposureInput, ready: (candidate: HubLocalExposure) => HubExecutionReadiness): HubLocalExposure;
+/**
+ * The snapshot to the Hub through S1 (Sentinel's rules, S-55 Q2): `{ v:1, type:"exposure.snapshot", requestId: fresh,
+ * linkEpoch: the link's, payload: store.snapshot() }`.
+ * - `publishSnapshot(link)`: S-56's handshake step, before the link is ready (`link.send`); it remembers the link.
+ * - `afterCommit()`: after an owner's publish or withdraw, on that link while it is current; otherwise the next
+ *   handshake carries it. Socket acceptance is all a send proves (no ack frame): the owner is told "pending".
+ * Never an older revision than one sent (the store's revision only goes up, and this checks it); the same revision is
+ * sent again on a new link (metadata retry, never input replay); a fresh requestId every time; the link is checked
+ * again after the await, and a send on an old link promotes nothing.
+ */
+export declare function exposureSnapshotSender(store: Pick<HubExposureStore, "snapshot">): {
+    publishSnapshot(l: HubMemberLink): Promise<void>;
+    afterCommit(): Promise<"pending">;
+    /** The highest revision handed to a current link (socket acceptance only). */
+    sentRevision: () => number;
+};