@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/member-journal.js

@@ -0,0 +1,336 @@
+import { createCipheriv, createDecipheriv, randomBytes, randomUUID } from "node:crypto";
+import { z } from "zod";
+import { messageContentDigest, sha256, verifyLease } from "./identity.js";
+import { questionSchema, answerSchema, receiptSchema, HUB_LIMITS } from "./protocol.js";
+import { buttonsDigest } from "./buttons-model.js";
+import { parseStrictJson, validated, HubProtocolError, uuid, hash, epoch } from "./validation.js";
+// Retain two independently bounded frames: JSON escaping can make their combined payload larger than one frame.
+const PAYLOAD_LIMIT = 2 * HUB_LIMITS.frame + 4096;
+const rowSchema = z.strictObject({ messageId: uuid, contentDigest: hash, contextDigest: hash, operationId: uuid,
+    payload: z.string().max(Math.ceil(PAYLOAD_LIMIT * 4 / 3) + 128), stage: z.enum(["preparing", "queued", "delivered", "consumed", "answered", "rejected", "cancelled", "failed", "uncertain"]),
+    sequence: epoch, at: epoch, deliveryId: uuid.nullable(), inputIntent: uuid.nullable(), ackedSequence: epoch });
+const pageLimit = z.number().int().min(1).max(128).default(128);
+const knownPage = z.strictObject({ afterMessageId: uuid.optional(), limit: pageLimit });
+const receiptsPage = z.strictObject({ afterSequence: epoch.default(0), limit: pageLimit });
+export function migrateHubMemberJournal(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS hub_member_meta(singleton INTEGER PRIMARY KEY CHECK(singleton=1), revision INTEGER NOT NULL, receipt_sequence INTEGER NOT NULL, revocation_version INTEGER NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_member_messages(message_id TEXT PRIMARY KEY, value TEXT NOT NULL);`);
+}
+export const HUB_MEMBER_JOURNAL_MIGRATION = Object.freeze({ component: "s1-member-journal", version: 1, up: migrateHubMemberJournal });
+/** Signature refresh may change time/nonce/revocation but cannot redirect a previously admitted question. */
+export function questionContextDigest(q) {
+    const e = q.identity;
+    return sha256(JSON.stringify(["agend-hub-message-v1", e.issuer, e.issuerKeyId, e.messageId, e.asker.realm, e.asker.objectId,
+        e.owner.realm, e.owner.objectId, e.destinationFleetId, e.exposureId, e.roomId, e.grantId, e.grantRevision, e.exposureRevision, e.contentDigest]));
+}
+export class HubMemberJournal {
+    db;
+    options;
+    failed = false;
+    constructor(db, options) {
+        this.db = db;
+        this.options = options;
+        validated(uuid, options.hubId);
+        if (options.encryptionKey.length !== 32)
+            throw new HubProtocolError();
+    }
+    now() { return this.options.now?.() ?? Date.now(); }
+    initialize() {
+        if (this.options.floor.read() !== 0 || this.db.prepare("SELECT 1 FROM hub_member_meta").get())
+            throw new HubProtocolError("conflict");
+        this.db.prepare("INSERT INTO hub_member_meta VALUES(1,0,0,0)").run();
+    }
+    meta() {
+        if (this.failed)
+            throw new HubProtocolError("uncertain");
+        const m = this.db.prepare("SELECT revision,receipt_sequence,revocation_version FROM hub_member_meta WHERE singleton=1").get();
+        if (!m || ![m.revision, m.receipt_sequence, m.revocation_version].every(n => Number.isSafeInteger(n) && n >= 0) || this.options.floor.read() !== m.revision) {
+            this.failed = true;
+            throw new HubProtocolError("uncertain");
+        }
+        return m;
+    }
+    change(fn) {
+        let writing = false;
+        try {
+            return this.db.transaction(() => {
+                const m = this.meta(), result = fn();
+                writing = true;
+                this.options.floor.raise(m.revision + 1);
+                this.db.prepare("UPDATE hub_member_meta SET revision=? WHERE singleton=1").run(m.revision + 1);
+                return result;
+            }).immediate();
+        }
+        catch (error) {
+            if (writing)
+                this.failed = true;
+            throw error;
+        }
+    }
+    row(messageId) {
+        this.meta();
+        validated(uuid, messageId);
+        const r = this.db.prepare("SELECT value FROM hub_member_messages WHERE message_id=?").get(messageId);
+        if (!r)
+            return null;
+        const row = validated(rowSchema, parseStrictJson(r.value, 1024 * 1024));
+        if (row.messageId !== messageId || row.ackedSequence > row.sequence || row.sequence > this.meta().receipt_sequence
+            || row.stage === "preparing" && (row.sequence !== 0 || row.deliveryId !== null || row.inputIntent !== null)
+            || ["delivered", "consumed", "answered"].includes(row.stage) && !row.inputIntent
+            || row.stage !== "preparing" && row.sequence === 0)
+            throw new HubProtocolError("uncertain");
+        return row;
+    }
+    write(row) { validated(rowSchema, row); this.db.prepare("INSERT INTO hub_member_messages VALUES(?,?) ON CONFLICT(message_id) DO UPDATE SET value=excluded.value").run(row.messageId, JSON.stringify(row)); }
+    source(messageId) { return `hub:${this.options.hubId}:${messageId}`; }
+    aad(row) { return Buffer.from(JSON.stringify(["agend-hub-local-payload-v1", this.options.hubId, row.messageId, row.contentDigest, row.contextDigest])); }
+    encrypt(value, row) {
+        const iv = randomBytes(12), cipher = createCipheriv("aes-256-gcm", this.options.encryptionKey, iv);
+        cipher.setAAD(this.aad(row));
+        const bytes = Buffer.concat([cipher.update(JSON.stringify(value), "utf8"), cipher.final()]);
+        return [iv, cipher.getAuthTag(), bytes].map(b => b.toString("base64url")).join(".");
+    }
+    decrypt(row) {
+        try {
+            const parts = row.payload.split(".");
+            if (parts.length !== 3 || parts.some(p => !/^[A-Za-z0-9_-]+$/.test(p)))
+                throw Error();
+            const [iv, tag, bytes] = parts.map(p => Buffer.from(p, "base64url"));
+            if (iv.length !== 12 || tag.length !== 16)
+                throw Error();
+            const cipher = createDecipheriv("aes-256-gcm", this.options.encryptionKey, iv);
+            cipher.setAAD(this.aad(row));
+            cipher.setAuthTag(tag);
+            const payload = validated(z.strictObject({ question: questionSchema, answer: answerSchema.optional() }), parseStrictJson(Buffer.concat([cipher.update(bytes), cipher.final()]), PAYLOAD_LIMIT));
+            if (payload.question.identity.messageId !== row.messageId || payload.question.identity.contentDigest !== row.contentDigest || questionContextDigest(payload.question) !== row.contextDigest)
+                throw Error();
+            return payload;
+        }
+        catch {
+            this.failed = true;
+            throw new HubProtocolError("uncertain");
+        }
+    }
+    prepare(question) {
+        const q = validated(questionSchema, question);
+        if (q.identity.issuer !== this.options.hubId || q.identity.contentDigest !== messageContentDigest("question", q.text, { attachments: q.attachments }))
+            throw new HubProtocolError("denied");
+        return this.change(() => {
+            const existing = this.row(q.identity.messageId);
+            if (existing) {
+                if (existing.contentDigest !== q.identity.contentDigest || existing.contextDigest !== questionContextDigest(q))
+                    throw new HubProtocolError("conflict");
+                this.decrypt(existing);
+                return { operationId: existing.operationId, receipt: this.receipt(existing) };
+            }
+            if (this.db.prepare("SELECT COUNT(*) AS n FROM hub_member_messages").get().n >= 4096)
+                throw new HubProtocolError("backpressure");
+            const row = { messageId: q.identity.messageId, contentDigest: q.identity.contentDigest, contextDigest: questionContextDigest(q),
+                operationId: randomUUID(), payload: "", stage: "preparing", sequence: 0, at: this.now(), deliveryId: null, inputIntent: null, ackedSequence: 0 };
+            row.payload = this.encrypt({ question: q }, row);
+            this.write(row);
+            return { operationId: row.operationId, receipt: null };
+        });
+    }
+    receipt(row) {
+        if (row.stage === "preparing")
+            return null;
+        return validated(receiptSchema, { messageId: row.messageId, contentDigest: row.contentDigest, stage: row.stage,
+            sequence: row.sequence, at: row.at, ...(row.deliveryId ? { memberDeliveryId: row.deliveryId } : {}) });
+    }
+    advance(row, stage) {
+        const m = this.meta();
+        row.stage = stage;
+        row.at = this.now();
+        row.sequence = m.receipt_sequence + 1;
+        this.db.prepare("UPDATE hub_member_meta SET receipt_sequence=? WHERE singleton=1").run(row.sequence);
+        this.write(row);
+        return this.receipt(row);
+    }
+    authorize(row, request, lease, fence) {
+        if (!fence.current() || request.messageId !== row.messageId || fence.revocationVersion < this.meta().revocation_version)
+            throw new HubProtocolError("stale");
+        const data = this.decrypt(row);
+        if (request.exposureRevision !== data.question.identity.exposureRevision)
+            throw new HubProtocolError("stale");
+        verifyLease(lease, request, { ...fence, now: this.now() });
+        return data;
+    }
+    commitAdmission(question, request, lease, fence) {
+        return this.change(() => {
+            const row = this.row(question.identity.messageId);
+            if (!row || row.contextDigest !== questionContextDigest(question) || row.operationId !== request.operationId || request.phase !== "admit" || !fence.current())
+                throw new HubProtocolError("stale");
+            this.authorize(row, request, lease, fence);
+            if (row.stage !== "preparing")
+                return this.receipt(row);
+            const existing = this.options.outbox.lookup(this.db, question, this.source(row.messageId));
+            if (existing)
+                throw new HubProtocolError("uncertain"); // a source row without our atomic receipt is inconsistent, never re-admitted
+            const deliveryId = validated(uuid, this.options.outbox.insert(this.db, question, this.source(row.messageId)));
+            if (!fence.current())
+                throw new HubProtocolError("stale");
+            row.deliveryId = deliveryId;
+            return this.advance(row, "queued");
+        });
+    }
+    /**
+     * The admitted question for its representative hand-off (docs/design/hub-representative-agent.md): only while it is
+     * queued with no input intent, i.e. before anything reached the agent. Later stages never re-read the text.
+     */
+    queuedQuestion(messageId) {
+        const row = this.row(messageId);
+        if (!row || row.stage !== "queued" || row.inputIntent)
+            throw new HubProtocolError("uncertain");
+        return this.decrypt(row).question;
+    }
+    markInputIntent(messageId, request, lease, fence) {
+        this.change(() => {
+            const row = this.row(messageId);
+            if (!row || row.stage !== "queued" || row.inputIntent || request.phase !== "begin" || request.messageId !== messageId || !fence.current())
+                throw new HubProtocolError("uncertain");
+            this.authorize(row, request, lease, fence);
+            row.inputIntent = request.operationId;
+            this.write(row);
+        });
+    }
+    recordEvidence(messageId, stage) {
+        return this.change(() => {
+            const row = this.row(messageId);
+            const allows = stage === "delivered" ? row?.stage === "queued" : stage === "consumed" ? row?.stage === "delivered" : row && ["queued", "uncertain"].includes(row.stage);
+            if (!row || !row.inputIntent || !allows)
+                throw new HubProtocolError("uncertain");
+            return this.advance(row, stage);
+        });
+    }
+    saveAnswer(answer, request, fence) {
+        const a = validated(answerSchema, answer);
+        return this.change(() => {
+            const row = this.row(a.messageId);
+            if (!row || !row.inputIntent || !["consumed", "uncertain", "answered"].includes(row.stage) || !fence.current()
+                || request.phase !== "release-answer" || request.answer.answerId !== a.answerId || request.answer.contentDigest !== a.contentDigest || messageContentDigest("answer", a.text, { attachments: a.attachments, buttonsDigest: buttonsDigest(a.buttons) }) !== a.contentDigest)
+                throw new HubProtocolError("denied");
+            const data = this.authorize(row, request, a.releaseLease, fence);
+            if (data.answer) {
+                if (data.answer.answerId !== a.answerId || data.answer.contentDigest !== a.contentDigest)
+                    throw new HubProtocolError("conflict");
+                return this.receipt(row);
+            }
+            data.answer = a;
+            row.payload = this.encrypt(data, row);
+            return this.advance(row, "answered");
+        });
+    }
+    recoverInterruptedInputs() {
+        return this.change(() => {
+            const receipts = [];
+            for (const r of this.db.prepare("SELECT message_id FROM hub_member_messages").all()) {
+                const row = this.row(r.message_id);
+                this.decrypt(row);
+                if (row.inputIntent && row.stage === "queued")
+                    receipts.push(this.advance(row, "uncertain"));
+            }
+            return receipts;
+        });
+    }
+    reconcile(after, ids) {
+        validated(epoch, after);
+        if (ids.length > 128)
+            throw new HubProtocolError("backpressure");
+        this.meta();
+        const out = [];
+        for (const id of ids) {
+            validated(uuid, id.messageId);
+            validated(hash, id.contentDigest);
+            const row = this.row(id.messageId);
+            if (!row)
+                continue;
+            if (row.contentDigest !== id.contentDigest)
+                throw new HubProtocolError("conflict");
+            this.decrypt(row);
+            const receipt = this.receipt(row);
+            if (receipt && receipt.sequence > after)
+                out.push(receipt);
+        }
+        return out.sort((a, b) => a.sequence - b.sequence);
+    }
+    /** Bounded metadata only; never expose stored question/answer bytes to composition. */
+    knownMessages(input = {}) {
+        const page = validated(knownPage, input);
+        this.meta();
+        const rows = this.db.prepare("SELECT message_id FROM hub_member_messages WHERE message_id>? ORDER BY message_id LIMIT ?").all(page.afterMessageId ?? "", page.limit + 1);
+        const messages = rows.slice(0, page.limit).map(id => {
+            const row = this.row(id.message_id);
+            if (!row)
+                throw new HubProtocolError("uncertain");
+            this.decrypt(row);
+            return { messageId: row.messageId, contentDigest: row.contentDigest };
+        });
+        return { messages, nextAfterMessageId: rows.length > page.limit ? messages.at(-1).messageId : null };
+    }
+    unackedReceipts(input = {}) {
+        const page = validated(receiptsPage, input);
+        this.meta();
+        const rows = this.db.prepare(`SELECT message_id FROM hub_member_messages
+      WHERE json_extract(value,'$.stage')!='preparing' AND json_extract(value,'$.sequence')>json_extract(value,'$.ackedSequence')
+      AND json_extract(value,'$.sequence')>? ORDER BY json_extract(value,'$.sequence') LIMIT ?`).all(page.afterSequence, page.limit + 1);
+        const receipts = rows.slice(0, page.limit).map(id => {
+            const row = this.row(id.message_id);
+            if (!row)
+                throw new HubProtocolError("uncertain");
+            this.decrypt(row);
+            const receipt = this.receipt(row);
+            if (!receipt || row.ackedSequence >= row.sequence || receipt.sequence <= page.afterSequence)
+                throw new HubProtocolError("uncertain");
+            return receipt;
+        });
+        return { receipts, nextAfterSequence: receipts.at(-1)?.sequence ?? page.afterSequence, more: rows.length > page.limit };
+    }
+    revocationVersion() { return this.meta().revocation_version; }
+    /** A welcome version is a durable lower bound, never a lease or a fabricated scoped revocation. */
+    observeRevocationVersion(version) {
+        validated(epoch, version);
+        const current = this.revocationVersion();
+        if (version < current)
+            throw new HubProtocolError("stale");
+        if (version === current)
+            return;
+        this.change(() => { this.db.prepare("UPDATE hub_member_meta SET revocation_version=? WHERE singleton=1").run(version); });
+    }
+    acknowledge(receipt) {
+        const r = validated(receiptSchema, receipt), row = this.row(r.messageId);
+        if (!row || row.contentDigest !== r.contentDigest || r.sequence > row.sequence)
+            throw new HubProtocolError("conflict");
+        // Older committed evidence may arrive after local evidence advanced. Ignore it, never ACK/downgrade the newer row.
+        if (r.sequence < row.sequence)
+            return;
+        if (row.stage !== r.stage)
+            throw new HubProtocolError("conflict");
+        if (row.ackedSequence === r.sequence)
+            return;
+        this.change(() => { row.ackedSequence = r.sequence; this.write(row); });
+    }
+    fence(revocation, fenceLocal) {
+        return this.change(() => {
+            const m = this.meta();
+            if (revocation.revocationVersion < m.revocation_version)
+                throw new HubProtocolError("stale");
+            const results = [];
+            for (const r of this.db.prepare("SELECT message_id FROM hub_member_messages").all()) {
+                const row = this.row(r.message_id), e = this.decrypt(row).question.identity, scope = revocation.scope;
+                const matches = scope.kind === "fleet" ? scope.fleetId === e.destinationFleetId : scope.kind === "exposure" ? scope.exposureId === e.exposureId : scope.kind === "grant" ? scope.grantId === e.grantId : scope.personId === `${e.asker.realm}/${e.asker.objectId}` || scope.personId === `${e.owner.realm}/${e.owner.objectId}`;
+                if (matches && !["cancelled", "rejected", "failed"].includes(row.stage)) {
+                    fenceLocal(row.messageId);
+                    // Existing positive delivery/consumption/answer evidence is never downgraded by a policy change.
+                    if (["delivered", "consumed", "answered"].includes(row.stage))
+                        results.push(this.receipt(row));
+                    else
+                        results.push(this.advance(row, row.inputIntent ? "uncertain" : "cancelled"));
+                }
+            }
+            this.db.prepare("UPDATE hub_member_meta SET revocation_version=? WHERE singleton=1").run(revocation.revocationVersion);
+            return results;
+        });
+    }
+}
+//# sourceMappingURL=member-journal.js.map

package/dist/hub/member-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-journal.js","sourceRoot":"","sources":["../../src/hub/member-journal.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGlG,gHAAgH;AAChH,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC;AAClD,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;IAC7G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5L,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAmBjH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAChE,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAI3F,MAAM,UAAU,uBAAuB,CAAC,EAAqB;IAC3D,EAAE,CAAC,IAAI,CAAC;sGAC4F,CAAC,CAAC;AACxG,CAAC;AACD,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACvI,6GAA6G;AAC7G,MAAM,UAAU,qBAAqB,CAAC,CAAc;IAClD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ;QACzH,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AACtJ,CAAC;AACD,MAAM,OAAO,gBAAgB;IAEE,EAAE;IAAsC,OAAO;IADpE,MAAM,GAAG,KAAK,CAAC;IACvB,YAA6B,EAAqB,EAAmB,OAA0B;kBAAlE,EAAE;uBAAsC,OAAO;QAC1E,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACxG,CAAC;IACO,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpE,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACtI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,CAAC;IACO,IAAI;QACV,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAC,GAAG,EAA4F,CAAC;QACxN,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IACzO,CAAC;IACO,MAAM,CAAI,EAAW;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAC/F,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAChH,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACnF,CAAC;IACO,GAAG,CAAC,SAAiB;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,SAAS,CAAkC,CAAC;QAC/K,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB;eACtL,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;eACxG,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW;eAC7E,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IAC5G,CAAC;IACO,KAAK,CAAC,GAAQ,IAAU,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvN,MAAM,CAAC,SAAiB,IAAY,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IACtF,GAAG,CAAC,GAA+D,IAAY,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,4BAA4B,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7N,OAAO,CAAC,KAAoD,EAAE,GAA+D;QACnI,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjI,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IACO,OAAO,CAAC,GAAQ;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;YAC5H,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;YAAC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,KAAK,EAAE,CAAC;YAC/H,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrI,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YAChM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,aAAa;gBAAE,MAAM,KAAK,EAAE,CAAC;YAC3M,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;IAC1E,CAAC;IACD,OAAO,CAAC,QAAqB;QAC3B,MAAM,CAAC,GAAG,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,KAAK,oBAAoB,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3O,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACvJ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxG,CAAC;YACD,IAAK,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,IAAI,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACpJ,MAAM,GAAG,GAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBAClI,WAAW,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YACnJ,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5H,CAAC,CAAC,CAAC;IACL,CAAC;IACO,OAAO,CAAC,GAAQ;QACtB,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YAC5G,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACO,OAAO,CAAC,GAAQ,EAAE,KAAyC;QACjE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC;IACnJ,CAAC;IACO,SAAS,CAAC,GAAQ,EAAE,OAAgC,EAAE,KAA4B,EAAE,KAA2E;QACrK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,kBAAkB;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7J,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9G,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAC1E,CAAC;IACD,eAAe,CAAC,QAAqB,EAAE,OAAgC,EAAE,KAA4B,EAAE,KAA2E;QAChL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,qBAAqB,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACnM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3F,IAAI,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,6EAA6E;YACpI,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9G,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;YAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IACD;;;OAGG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACpC,CAAC;IACD,eAAe,CAAC,SAAiB,EAAE,OAAgC,EAAE,KAA4B,EAAE,KAA2E;QAC5K,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;IACL,CAAC;IACD,cAAc,CAAC,SAAiB,EAAE,KAA6C;QAC7E,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,MAAiB,EAAE,OAAgC,EAAE,KAA2E;QACzI,MAAM,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;mBAC5I,OAAO,CAAC,KAAK,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,oBAAoB,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,aAAa;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACnT,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACjI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC;IACD,wBAAwB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,QAAQ,GAAiB,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,EAA8B,EAAE,CAAC;gBAChH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvD,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,KAAa,EAAE,GAA4D;QACnF,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvG,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YACrG,IAAI,CAAC,GAAG;gBAAE,SAAS;YAAC,IAAI,GAAG,CAAC,aAAa,KAAK,EAAE,CAAC,aAAa;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,GAAG,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,uFAAuF;IACvF,aAAa,CAAC,KAAK,GAAgD,EAAE;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAA6B,CAAC;QACrM,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1G,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxG,CAAC;IACD,eAAe,CAAC,KAAK,GAA+C,EAAE;QACpE,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;+FAE8D,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAA6B,CAAC;QACjK,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,OAAO,CAAC;QAC1L,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1H,CAAC;IACD,iBAAiB,KAAa,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtE,mGAAmG;IACnG,wBAAwB,CAAC,OAAe;QACtC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACpE,IAAI,OAAO,GAAG,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO;QAC5F,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC;IACD,WAAW,CAAC,OAAmB;QAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACvH,mHAAmH;QACnH,IAAI,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ;YAAE,OAAO;QACtC,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,UAAyB,EAAE,UAAuC;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,UAAU,CAAC,iBAAiB,GAAG,CAAC,CAAC,kBAAkB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACpH,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,EAA8B,EAAE,CAAC;gBAChH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAE,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;gBACvG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAChU,IAAI,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC1B,iGAAiG;oBACjG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC,CAAC;;wBAC3F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,OAAO,CAAC;QACzI,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/hub/member-reconciliation.d.ts

@@ -0,0 +1,14 @@
+import type { HubMemberLink } from "./client.js";
+import type { HubMemberJournal } from "./member-journal.js";
+export declare const HUB_HANDSHAKE_LIMITS: Readonly<{
+    exchanges: 8192;
+    timeoutMs: 30000;
+}>;
+export interface HubMemberHandshakeOptions {
+    journal: HubMemberJournal;
+    /** S3c's complete current consent-ready snapshot. Use this link, not the ready-gated client. */
+    publishSnapshot(link: HubMemberLink): Promise<void>;
+    /** Monotonic clock, injectable for inert deadline tests. */
+    now?: () => number;
+}
+export declare function createHubMemberHandshake(options: HubMemberHandshakeOptions): (link: HubMemberLink) => Promise<void>;

package/dist/hub/member-reconciliation.js

@@ -0,0 +1,97 @@
+/** Metadata-only reconnect barrier. Never replays question text, answers, tools or provider input. */
+import { randomUUID } from "node:crypto";
+import { canonicalArguments } from "./identity.js";
+import { serverFrameSchema } from "./protocol.js";
+import { HubProtocolError, validated } from "./validation.js";
+// The journal holds at most 4096 messages. Allow one receipt per row plus bounded history paging;
+// a peer with excessive history or a changing local journal must retry rather than hang startup.
+export const HUB_HANDSHAKE_LIMITS = Object.freeze({ exchanges: 8192, timeoutMs: 30_000 });
+export function createHubMemberHandshake(options) {
+    return async (link) => {
+        const now = options.now ?? (() => performance.now()), deadline = now() + HUB_HANDSHAKE_LIMITS.timeoutMs;
+        const epoch = link.linkEpoch, version = link.revocationVersion;
+        let exchanges = 0;
+        const check = () => {
+            if (!link.current() || link.linkEpoch !== epoch || link.revocationVersion !== version)
+                throw new HubProtocolError("stale");
+            if (now() >= deadline)
+                throw new HubProtocolError("unavailable");
+        };
+        const bounded = async (run) => {
+            check();
+            let timer;
+            try {
+                const result = await Promise.race([run(), new Promise((_resolve, reject) => {
+                        timer = setTimeout(() => reject(new HubProtocolError("unavailable")), Math.max(1, deadline - now()));
+                        timer.unref();
+                    })]);
+                check();
+                return result;
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        };
+        const exchange = async (frame, type) => {
+            check();
+            if (++exchanges > HUB_HANDSHAKE_LIMITS.exchanges)
+                throw new HubProtocolError("backpressure");
+            const response = validated(serverFrameSchema, await bounded(() => link.exchange(frame, type)));
+            if (response.type !== type || response.requestId !== frame.requestId || response.linkEpoch !== epoch)
+                throw new HubProtocolError("stale");
+            return response;
+        };
+        check();
+        // Welcome is a durable lower bound, not an authorization lease or a fabricated scoped revoke.
+        options.journal.observeRevocationVersion(version);
+        await bounded(() => options.publishSnapshot(link));
+        let afterMessageId, afterReceiptSequence = 0;
+        do {
+            check();
+            const page = options.journal.knownMessages({ afterMessageId });
+            for (;;) {
+                const response = await exchange({ v: 1, type: "reconcile", requestId: randomUUID(), linkEpoch: epoch,
+                    payload: { afterReceiptSequence, messages: [...page.messages] } }, "reconcile");
+                if (response.type !== "reconcile")
+                    throw new HubProtocolError();
+                let next = afterReceiptSequence;
+                // Hub history is global to this fleet, not filtered by this page's known IDs.
+                for (const receipt of response.payload.receipts) {
+                    if (receipt.sequence <= next)
+                        throw new HubProtocolError("conflict");
+                    next = receipt.sequence;
+                }
+                if (response.payload.nextReceiptSequence !== next || response.payload.more && next === afterReceiptSequence)
+                    throw new HubProtocolError("conflict");
+                for (const receipt of response.payload.receipts) {
+                    check();
+                    options.journal.acknowledge(receipt);
+                }
+                afterReceiptSequence = next;
+                if (!response.payload.more)
+                    break;
+            }
+            afterMessageId = page.nextAfterMessageId ?? undefined;
+        } while (afterMessageId);
+        let afterSequence = 0;
+        for (;;) {
+            check();
+            const page = options.journal.unackedReceipts({ afterSequence });
+            if (!page.receipts.length)
+                break;
+            for (const receipt of page.receipts) {
+                const response = await exchange({ v: 1, type: "receipt", requestId: randomUUID(), linkEpoch: epoch, payload: receipt }, "receipt");
+                if (response.type !== "receipt" || canonicalArguments(response.payload) !== canonicalArguments(receipt))
+                    throw new HubProtocolError("conflict");
+                check();
+                options.journal.acknowledge(receipt);
+            }
+            // A newer local stage may have appeared during the await, even on the last original page.
+            afterSequence = page.nextAfterSequence;
+        }
+        check();
+        if (options.journal.revocationVersion() !== version || options.journal.unackedReceipts({}).receipts.length)
+            throw new HubProtocolError("stale");
+    };
+}
+//# sourceMappingURL=member-reconciliation.js.map

package/dist/hub/member-reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-reconciliation.js","sourceRoot":"","sources":["../../src/hub/member-reconciliation.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAI9D,kGAAkG;AAClG,iGAAiG;AACjG,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAQ1F,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,OAAO,KAAK,EAAC,IAAI,EAAC,EAAE;QAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC;QACxG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAAC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3H,IAAI,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,EAAK,GAAqB,EAAc,EAAE;YAC7D,KAAK,EAAE,CAAC;YAAC,IAAI,KAAiC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;wBAChF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;wBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACtH,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC;YAC/B,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAqB,EAAE,IAA4B,EAAE,EAAE;YAC7E,KAAK,EAAE,CAAC;YAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/F,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1I,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,KAAK,EAAE,CAAC;QACR,8FAA8F;QAC9F,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,cAAkC,EAAE,oBAAoB,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC;YACF,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;YACxE,SAAS,CAAC;gBACR,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK;oBAClG,OAAO,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;gBAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBAChE,IAAI,IAAI,GAAG,oBAAoB,CAAC;gBAChC,8EAA8E;gBAC9E,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAChD,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI;wBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBACrE,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC1B,CAAC;gBACD,IAAI,QAAQ,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,KAAK,oBAAoB;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACpJ,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBACnG,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI;oBAAE,MAAM;YACpC,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,kBAAkB,IAAI,SAAS,CAAC;QACxD,CAAC,QAAQ,cAAc,EAAE;QACzB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,SAAS,CAAC;YACR,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,MAAM;YACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;gBACnI,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAChJ,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;YACD,0FAA0F;YAC1F,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACzC,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/hub/mount.d.ts

@@ -0,0 +1,39 @@
+/** Narrow composition gate. No network/store/key/directory import or I/O on the ordinary off path. */
+import type { HubMode } from "./types.js";
+export interface HubMountedService {
+    start(): Promise<void>;
+    fence(): void;
+    close(): Promise<void>;
+}
+export interface HubMountOptions {
+    home: string;
+    /** S5's pure hub/init/plan-digest.ts canonical config projection. Never hash a caller-selected subset. */
+    planDigest(configuration: Record<string, unknown>): string;
+    createServer(configuration: Record<string, unknown>, current: () => boolean): Promise<HubMountedService>;
+    /** Must validate the member's locally confirmed private pairing receipt; YAML alone is insufficient. */
+    createMember(configuration: Record<string, unknown>, current: () => boolean): Promise<HubMountedService>;
+    hold(reason: "initialization" | "member-pairing" | "service-unavailable"): void;
+}
+export declare class HubMount implements HubMode {
+    private readonly options;
+    private generation;
+    private serverOn;
+    private memberOn;
+    private server;
+    private member;
+    private transition;
+    private enqueue;
+    private drain;
+    constructor(options: HubMountOptions);
+    epoch(): number;
+    serverEnabled(): boolean;
+    memberEnabled(): boolean;
+    /** Revocation is synchronous, before asynchronous stop/import/start work. */
+    fence(): void;
+    close(): Promise<void>;
+    apply(input: {
+        hub?: unknown;
+        hub_member?: unknown;
+    }): Promise<void>;
+    private applyOwned;
+}