@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/representative.js

@@ -0,0 +1,528 @@
+/**
+ * Hub P1 representative agent (docs/design/hub-representative-agent.md): the member's only execution path. An admitted
+ * Hub question goes to the existing fleet agent the owner published, through ordinary cross-instance delivery; the
+ * agent answers with report_result on the Hub-issued correlation id. No sandbox, provider, view or per-asker session.
+ *
+ * The adapter is S1's journal outbox (the source row is written in the journal's own admission transaction) and the
+ * driver after it: begin lease + input intent immediately before the IPC hand-off (FleetManager's beforeInput), delivery
+ * evidence, the frozen answer under the exact release lease, and the receipts/answer frames back over the member link.
+ * Never a resend: an interrupted or uncertain hand-off holds in Needs-you.
+ */
+import { randomUUID } from "node:crypto";
+import { canonicalArguments, messageContentDigest, personKeyString } from "./identity.js";
+import { HubFileRefusal } from "./member/attachments.js";
+import { questionContextDigest } from "./member-journal.js";
+import { answerSchema, questionSchema } from "./protocol.js";
+import { buttonsDigest, prepareHubAnswerButtons } from "./buttons-model.js";
+import { HubProtocolError, plain, validated } from "./validation.js";
+/** The S3 agent tuple (one copy, S3c's): routing, readiness and the store can never disagree. */
+export { HUB_AGENT_MODE as HUB_AGENT_PROVIDER, agentPolicyDigest, isAgentDescriptor as isAgentTuple } from "./member/agent-mode.js";
+import { isAgentDescriptor as isAgentTuple } from "./member/agent-mode.js";
+/** The reserved report_result target for Hub answers. Only a live Hub-issued correlation id from its agent matches. */
+export { HUB_REPORT_TARGET } from "../hub-report-target.js";
+import { HUB_REPORT_TARGET } from "../hub-report-target.js";
+export const HUB_ANSWER_MAX = 128 * 1024;
+const HELD_MAX = 256;
+class HubButtonRefusal extends Error {
+}
+export function migrateHubRepresentative(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS hub_representative_questions(
+      source TEXT PRIMARY KEY, id TEXT NOT NULL UNIQUE, message_id TEXT NOT NULL UNIQUE, digest TEXT NOT NULL,
+      exposure_id TEXT NOT NULL, revision INTEGER NOT NULL, consent_id TEXT NOT NULL, agent TEXT NOT NULL, token TEXT NOT NULL,
+      state TEXT NOT NULL, cid TEXT UNIQUE, answer TEXT, reason TEXT, at INTEGER NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_representative_consents(consent_id TEXT PRIMARY KEY, agent TEXT NOT NULL, token TEXT NOT NULL);`);
+}
+export const HUB_REPRESENTATIVE_MIGRATION = Object.freeze({ component: "s5-representative", version: 1, up: migrateHubRepresentative });
+const LIVE = ["queued", "dispatching", "input", "delivered", "answering"];
+/** A saved answer whose transmission or acknowledgement failed is held too (visible), never resent. */
+const HOLDABLE = [...LIVE, "answered"];
+export class HubRepresentativeExecution {
+    options;
+    closed = false;
+    recovered = false;
+    running = new Set();
+    receiptsTail = Promise.resolve();
+    constructor(options) {
+        this.options = options;
+    }
+    now() { return this.options.now?.() ?? Date.now(); }
+    row(where, value) {
+        return this.options.db.prepare(`SELECT * FROM hub_representative_questions WHERE ${where}=?`).get(value) ?? null;
+    }
+    setState(row, state, from, extra = {}) {
+        const db = this.options.db;
+        const result = db.prepare(`UPDATE hub_representative_questions SET state=?, at=?${extra.reason !== undefined ? ", reason=@reason" : ""}${extra.cid !== undefined ? ", cid=@cid" : ""}${extra.answer !== undefined ? ", answer=@answer" : ""}
+      WHERE id=@id AND state IN (${from.map(s => `'${s}'`).join(",")})`)
+            .run(state, this.now(), { id: row.id, ...(extra.reason !== undefined ? { reason: extra.reason } : {}), ...(extra.cid !== undefined ? { cid: extra.cid } : {}), ...(extra.answer !== undefined ? { answer: extra.answer } : {}) });
+        if (result.changes !== 1)
+            return false;
+        row.state = state;
+        if (extra.cid !== undefined)
+            row.cid = extra.cid;
+        if (extra.reason !== undefined)
+            row.reason = extra.reason;
+        return true;
+    }
+    /** The exposure, consent and agent lifecycle the question was admitted under — all still exactly current. */
+    currentFor(row) {
+        if (this.closed)
+            return false;
+        const b = this.options.binding();
+        if (!b.current())
+            return false;
+        const local = this.options.localExposure(row.exposure_id);
+        if (!local || local.exposure.state !== "published" || local.exposure.revision !== row.revision || local.consentId !== row.consent_id
+            || local.agent !== row.agent || !isAgentTuple(local) || local.exposure.fleetId !== b.fleetId || personKeyString(local.exposure.owner) !== personKeyString(b.owner))
+            return false;
+        return this.consentToken(row.consent_id) === row.token && this.options.agentToken(row.agent) === row.token;
+    }
+    consentToken(consentId) {
+        return this.options.db.prepare("SELECT token FROM hub_representative_consents WHERE consent_id=?").get(consentId)?.token ?? null;
+    }
+    fenceOf(row) {
+        const b = this.options.binding();
+        return { current: () => b.current() && this.currentFor(row), linkEpoch: b.linkEpoch, revocationVersion: b.revocationVersion };
+    }
+    /** Readiness for a published mapping: the agent tuple, this owner/fleet, the agent deliverable now. */
+    readiness(exposureId, expectedRevision) {
+        const local = this.options.localExposure(exposureId);
+        if (!local || local.exposure.state !== "published" || local.exposure.revision !== expectedRevision)
+            return { ok: false, reasonCode: "stale" };
+        return this.ready(local);
+    }
+    /**
+     * Capability check for a candidate. S3c asks it again inside the atomic publish transaction: there (only), the agent's
+     * current lifecycle token is recorded against the candidate's consent id, so a later replacement, retarget or mode
+     * change no longer matches it and needs an explicit republish.
+     */
+    readinessCandidate(candidate) {
+        if (candidate.exposure.state !== "withdrawn")
+            return { ok: false, reasonCode: "policy-unavailable" };
+        const ready = this.ready(candidate);
+        if (ready.ok && this.options.db.inTransaction) {
+            this.options.db.prepare("INSERT INTO hub_representative_consents VALUES(?,?,?) ON CONFLICT(consent_id) DO UPDATE SET agent=excluded.agent, token=excluded.token")
+                .run(candidate.consentId, candidate.agent, this.options.agentToken(candidate.agent));
+        }
+        return ready;
+    }
+    ready(local) {
+        if (!isAgentTuple(local))
+            return { ok: false, reasonCode: "policy-unavailable" };
+        const b = this.options.binding();
+        if (local.exposure.fleetId !== b.fleetId || personKeyString(local.exposure.owner) !== personKeyString(b.owner))
+            return { ok: false, reasonCode: "stale" };
+        if (this.options.agentToken(local.agent) === null)
+            return { ok: false, reasonCode: "provider-unavailable" };
+        return { ok: true, policyDigest: local.exposure.policyDigest, exposureRevision: local.exposure.revision };
+    }
+    /** No provider exists in P1: nothing to explain. */
+    providerReason() { return null; }
+    /** S1's journal outbox: the unique source row, in the journal's own admission transaction. */
+    restrictedOutbox() {
+        const db = this.options.db;
+        const checkSource = (q, source) => {
+            if (source !== `hub:${q.identity.issuer}:${q.identity.messageId}`)
+                throw new HubProtocolError("denied");
+        };
+        return {
+            insert: (tx, question, source) => {
+                if (this.closed || !this.recovered)
+                    throw new HubProtocolError("unavailable");
+                if (tx !== db || !db.inTransaction)
+                    throw new HubProtocolError("denied");
+                const q = validated(questionSchema, question);
+                checkSource(q, source);
+                const local = this.options.localExposure(q.identity.exposureId);
+                if (!local || local.exposure.state !== "published" || local.exposure.revision !== q.identity.exposureRevision || !isAgentTuple(local))
+                    throw new HubProtocolError("denied");
+                const token = this.options.agentToken(local.agent);
+                if (token === null || this.consentToken(local.consentId) !== token)
+                    throw new HubProtocolError("denied");
+                if (db.prepare("SELECT COUNT(*) AS n FROM hub_representative_questions WHERE state IN ('queued','dispatching','input','delivered','answering')").get().n >= 4096) {
+                    throw new HubProtocolError("backpressure");
+                }
+                const id = randomUUID();
+                db.prepare("INSERT INTO hub_representative_questions(source,id,message_id,digest,exposure_id,revision,consent_id,agent,token,state,at) VALUES(?,?,?,?,?,?,?,?,?,'queued',?)")
+                    .run(source, id, q.identity.messageId, questionContextDigest(q), local.exposure.id, local.exposure.revision, local.consentId, local.agent, token, this.now());
+                this.options.audit({ action: "representative.queued", result: "completed", messageId: q.identity.messageId, exposureId: local.exposure.id }, db);
+                // Delivery starts only after the admission transaction commits (a rolled-back insert leaves no row to find).
+                setImmediate(() => this.pump());
+                return id;
+            },
+            lookup: (tx, question, source) => {
+                if (tx !== db)
+                    throw new HubProtocolError("denied");
+                checkSource(question, source);
+                const row = this.row("source", source);
+                if (row && row.digest !== questionContextDigest(question))
+                    throw new HubProtocolError("conflict");
+                return row?.id ?? null;
+            },
+        };
+    }
+    /**
+     * Startup. The journal's own recovery runs first (queued + input intent → uncertain). Then a row that was dispatching
+     * goes back to the queue ONLY if the journal still has it queued with no input intent (a crash between the intent and
+     * the representative's own transition is uncertain and held, never a fresh queue item); anything past it is held.
+     */
+    recover() {
+        if (this.recovered)
+            throw new HubProtocolError("conflict");
+        const db = this.options.db;
+        this.options.journal.recoverInterruptedInputs();
+        for (const row of db.prepare("SELECT * FROM hub_representative_questions WHERE state IN ('dispatching','input','delivered','answering','answered')").all()) {
+            let untouched = false;
+            if (row.state === "dispatching") {
+                try {
+                    this.question(row);
+                    untouched = true;
+                }
+                catch {
+                    untouched = false;
+                }
+            }
+            if (untouched)
+                db.prepare("UPDATE hub_representative_questions SET state='queued', cid=NULL WHERE id=? AND state='dispatching'").run(row.id);
+            else
+                this.hold(row, "uncertain");
+        }
+        this.recovered = true;
+        this.options.attentionChanged();
+    }
+    /**
+     * Deliver queued questions the link can authorize now (after commits, on each completed handshake, and again as each
+     * dispatch settles, so a backlog larger than one page keeps draining). Input-bearing work is never picked up again.
+     */
+    pump() {
+        if (this.closed || !this.recovered || !this.options.link())
+            return;
+        let rows;
+        try {
+            rows = this.options.db.prepare("SELECT * FROM hub_representative_questions WHERE state='queued' ORDER BY at LIMIT 64").all();
+        }
+        catch (err) {
+            this.options.log("warn", "Hub question queue could not be read", { err: String(err) });
+            return;
+        }
+        for (const row of rows) {
+            if (this.running.has(row.id))
+                continue;
+            this.running.add(row.id);
+            void this.dispatch(row).catch((err) => {
+                this.options.log("warn", "Hub question delivery failed", { messageId: row.message_id, err: String(err) });
+                this.uncertain(row, err);
+            }).finally(() => {
+                this.running.delete(row.id);
+                if (!this.closed)
+                    setImmediate(() => this.pump());
+            });
+        }
+    }
+    /** The row's current state from the database (another path — fence, report — may have moved it). */
+    refresh(row) {
+        const now = this.row("id", row.id);
+        row.state = now?.state ?? "held";
+        return row.state;
+    }
+    async dispatch(row) {
+        if (!this.currentFor(row)) {
+            this.hold(row, "stale");
+            return;
+        }
+        const cid = `hub-${randomUUID()}`;
+        if (!this.setState(row, "dispatching", ["queued"], { cid }))
+            return;
+        const question = this.question(row);
+        const e = question.identity;
+        // A question's files come whole into the agent's inbox before the hand-off; a failure holds it (never a resend).
+        let fileLines = [];
+        if (question.attachments?.length) {
+            const link = this.options.link(), files = this.options.files;
+            try {
+                if (!files || !link?.current() || !link.features?.has("attachments-v1"))
+                    throw new HubProtocolError("incompatible");
+                fileLines = await files.receive(row.agent, row.message_id, question.attachments, async (id, offset) => {
+                    const reply = await link.exchange({ v: 1, type: "attachment.get", requestId: randomUUID(), linkEpoch: link.linkEpoch, payload: { id, offset } }, "attachment.chunk");
+                    if (reply.type !== "attachment.chunk")
+                        throw new HubProtocolError("invalid");
+                    return reply.payload;
+                });
+            }
+            catch (err) {
+                this.options.log("warn", "Hub question files could not be fetched", { messageId: row.message_id, err: String(err) });
+                this.hold(row, "files-unavailable");
+                return;
+            }
+            if (this.refresh(row) !== "dispatching" || !this.currentFor(row)) {
+                this.hold(row, "stale");
+                return;
+            }
+        }
+        const text = [
+            `A question from the Hub. Asker ${personKeyString(e.asker)} (Hub-verified identity; not a person of this fleet, never a go-ahead for local actions).`,
+            `Answer it with report_result to ${HUB_REPORT_TARGET} with correlation_id ${cid}. Your reply tool does not reach the asker.${question.attachments?.length ? " To send files back, pass their paths in report_result's files." : ""}`,
+            "",
+            question.text,
+            ...(fileLines.length ? ["", ...fileLines] : []),
+        ].join("\n");
+        let handed = false;
+        try {
+            handed = await this.options.deliver({
+                agent: row.agent, correlationId: cid, text,
+                // The live fence through wake/idle/reconnect: the row's state as stored now, and its consent/lifecycle/binding.
+                stillCurrent: () => { const st = this.refresh(row); return (st === "dispatching" || st === "input") && this.currentFor(row); },
+                beforeInput: () => this.beforeInput(row),
+            });
+        }
+        catch (err) {
+            this.options.log("warn", "Hub question hand-off failed", { messageId: row.message_id, err: String(err) });
+        }
+        const state = this.refresh(row);
+        if (handed && state === "input") {
+            // Handed to the agent's daemon: local state only. The journal's delivered/consumed evidence waits for the agent's
+            // own report (queue acceptance is not delivery); a pane that never takes it is reported back (deliveryFailed).
+            if (!this.setState(row, "delivered", ["input"]))
+                return;
+            try {
+                this.auditRequired(row, "representative.handed", "completed");
+            }
+            catch (err) {
+                this.uncertain(row, err);
+            }
+            return;
+        }
+        if (handed)
+            return; // already answering (the report overtook the hand-off result)
+        if (state === "input")
+            this.uncertain(row, new Error("the hand-off after the input intent did not complete"));
+        else if (state === "dispatching")
+            this.hold(row, "unavailable");
+    }
+    /** The fleet's last step before input (at the connected hand-off): consent and lifecycle again, the begin lease, spent at once. */
+    async beforeInput(row) {
+        try {
+            if (this.refresh(row) !== "dispatching" || !this.currentFor(row)) {
+                this.hold(row, "stale");
+                return false;
+            }
+            const request = { messageId: row.message_id, operationId: randomUUID(), exposureRevision: row.revision, phase: "begin" };
+            const lease = await this.options.authorize(request);
+            if (this.refresh(row) !== "dispatching" || !this.currentFor(row)) {
+                this.hold(row, "stale");
+                return false;
+            }
+            this.options.journal.markInputIntent(row.message_id, request, lease, this.fenceOf(row));
+            if (!this.setState(row, "input", ["dispatching"]))
+                throw new HubProtocolError("uncertain");
+            return true;
+        }
+        catch (err) {
+            // After the intent was written, a failed transition is uncertain (never re-queued); before it, a plain hold.
+            let intent = false;
+            try {
+                this.question(row);
+            }
+            catch {
+                intent = true;
+            }
+            if (intent)
+                this.uncertain(row, err);
+            else
+                this.hold(row, "unavailable");
+            this.options.log("warn", "Hub question held before input", { messageId: row.message_id, err: String(err) });
+            return false;
+        }
+    }
+    /**
+     * The outbound hook: a report_result to HUB_REPORT_TARGET. Returns null when the correlation id is not a live Hub id
+     * issued to this caller (the call then takes its ordinary route); otherwise consumes it once and releases the answer.
+     * callerCurrent: the reporting daemon generation is still the agent's current one (asked again before every release step).
+     */
+    report(input) {
+        if (this.closed || !input.correlationId.startsWith("hub-"))
+            return null;
+        const row = this.row("cid", input.correlationId);
+        if (!row || row.agent !== input.caller)
+            return null;
+        const was = row.state;
+        // Consume once, synchronously: a second report on the same id finds it no longer live.
+        if (!this.setState(row, "answering", ["input", "delivered"]))
+            return null;
+        return this.release(row, was, input.text, input.callerCurrent ?? (() => true), input.extras ?? {});
+    }
+    async release(row, was, raw, callerCurrent, extras) {
+        let saved = false, evidenced = false, disclosed = false;
+        const live = () => {
+            if (!callerCurrent() || this.refresh(row) !== (saved ? "answered" : "answering") || !this.currentFor(row))
+                throw new HubProtocolError("stale");
+        };
+        try {
+            const text = validated(plain(HUB_ANSWER_MAX), raw);
+            if (!text.trim())
+                throw new HubProtocolError("invalid");
+            live();
+            // Snapshot choices before any file or authorization await. They are part of the exact released answer.
+            const buttons = prepareHubAnswerButtons(extras.buttons, extras.poll);
+            const buttonLink = buttons ? this.options.link() : null;
+            if (buttons && (!buttonLink?.current() || !buttonLink.features?.has("buttons-v1")))
+                throw new HubButtonRefusal();
+            // The agent's files (D): copied under the reply tool's rule, then pushed to the Hub before the answer names them.
+            let attachments;
+            if (extras.files?.length) {
+                const link = this.options.link(), files = this.options.files;
+                if (!files || !link?.current() || !link.features?.has("attachments-v1"))
+                    throw new HubFileRefusal("this Hub can't receive files yet; answer with text only");
+                const prepared = await files.prepare(row.agent, extras.files);
+                live();
+                for (const file of prepared)
+                    await files.send(file, async (chunk) => {
+                        const ack = await link.exchange({ v: 1, type: "attachment.put", requestId: randomUUID(), linkEpoch: link.linkEpoch, payload: chunk }, "attachment.ack");
+                        if (ack.type !== "attachment.ack" || ack.payload.id !== chunk.id || ack.payload.offset !== chunk.offset)
+                            throw new HubProtocolError("uncertain");
+                    });
+                attachments = prepared.map(f => f.ref);
+                live();
+            }
+            if (buttons && (!buttonLink?.current() || this.options.link() !== buttonLink || !buttonLink.features?.has("buttons-v1")))
+                throw new HubProtocolError("stale");
+            evidenced = true;
+            const journal = this.options.journal;
+            // The agent's own report is the evidence that the question reached it and was taken up.
+            journal.recordEvidence(row.message_id, "delivered");
+            journal.recordEvidence(row.message_id, "consumed");
+            // F: buttons/poll join here (their payload field and buttonsDigest into messageContentDigest).
+            // Freeze the answer's id, bytes and digest before asking for the release lease for exactly them.
+            const answerId = randomUUID(), contentDigest = messageContentDigest("answer", text, { attachments, buttonsDigest: buttonsDigest(buttons) });
+            this.options.db.prepare("UPDATE hub_representative_questions SET answer=? WHERE id=?").run(JSON.stringify({ answerId, contentDigest }), row.id);
+            live();
+            const request = { messageId: row.message_id, operationId: randomUUID(), exposureRevision: row.revision, phase: "release-answer", answer: { answerId, contentDigest } };
+            const releaseLease = await this.options.authorize(request);
+            live();
+            if (buttons && (!buttonLink?.current() || this.options.link() !== buttonLink || !buttonLink.features?.has("buttons-v1")))
+                throw new HubProtocolError("stale");
+            const answer = validated(answerSchema, { messageId: row.message_id, answerId, text, contentDigest, releaseLease,
+                ...(attachments?.length ? { attachments } : {}), ...(buttons ? { buttons } : {}) });
+            // Required audit BEFORE anything is saved or disclosed: its failure stops the release (held, nothing sent).
+            this.auditRequired(row, "representative.release", "completed");
+            journal.saveAnswer(answer, request, this.fenceOf(row));
+            saved = true;
+            if (!this.setState(row, "answered", ["answering"]))
+                throw new HubProtocolError("stale");
+            live();
+            const link = this.options.link();
+            if (!link || !link.current())
+                throw new HubProtocolError("unavailable");
+            disclosed = true;
+            const reply = await link.exchange({ v: 1, type: "answer", requestId: randomUUID(), linkEpoch: link.linkEpoch, payload: answer }, "receipt");
+            if (reply.type !== "receipt" || reply.payload.messageId !== row.message_id || reply.payload.stage !== "answered")
+                throw new HubProtocolError("uncertain");
+            // The answered state and its audit commit together; a failure leaves a visible hold, never a silent success.
+            this.options.db.transaction(() => {
+                if (!this.setState(row, "released", ["answered"]))
+                    throw new HubProtocolError("stale");
+                this.options.audit({ action: "representative.answered", result: "completed", messageId: row.message_id, exposureId: row.exposure_id }, this.options.db);
+            }).immediate();
+            this.pushReceipts();
+            return { ok: true, message: "Delivered to the Hub asker." };
+        }
+        catch (err) {
+            const code = err instanceof HubProtocolError ? err.code : "uncertain";
+            if (!saved && !evidenced && err instanceof HubButtonRefusal) {
+                this.setState(row, was === "input" ? "delivered" : was, ["answering"]);
+                return { ok: false, message: "Not sent: this Hub can't send buttons yet. Report text only with the same correlation_id." };
+            }
+            if (!saved && !evidenced && err instanceof HubFileRefusal) {
+                // A file the agent can fix (a state-dir path, a refused type, too large): the question stays open on the same id.
+                this.setState(row, was === "input" ? "delivered" : was, ["answering"]);
+                return { ok: false, message: `Not sent: ${err.message}. Report again with the same correlation_id.` };
+            }
+            if (!saved && code === "invalid" && !evidenced) {
+                // A malformed report (empty or oversized) is the agent's to fix: the question stays open on the same id.
+                this.setState(row, was === "input" ? "delivered" : was, ["answering"]);
+                return { ok: false, message: `Not sent: the answer must be 1 to ${HUB_ANSWER_MAX} bytes of plain text. Report again with the same correlation_id.` };
+            }
+            this.uncertain(row, err);
+            return { ok: false, message: disclosed
+                    ? "Sent to the Hub, but its acknowledgement is uncertain; it is not sent again. The owner sees it in Needs you."
+                    : "Not delivered to the Hub asker: the question is no longer open (withdrawn, revoked, replaced, or the Hub is unreachable). The owner sees it in Needs you." };
+        }
+        finally {
+            this.options.attentionChanged();
+        }
+    }
+    /** Local evidence to the Hub, in order, each ACK recorded. A failure waits for the next handshake (it sends the rest). */
+    pushReceipts() {
+        this.receiptsTail = this.receiptsTail.then(async () => {
+            const link = this.options.link();
+            if (!link || !link.current())
+                return;
+            for (;;) {
+                const page = this.options.journal.unackedReceipts({});
+                if (!page.receipts.length)
+                    return;
+                for (const receipt of page.receipts) {
+                    const reply = await link.exchange({ v: 1, type: "receipt", requestId: randomUUID(), linkEpoch: link.linkEpoch, payload: receipt }, "receipt");
+                    if (reply.type !== "receipt" || canonicalArguments(reply.payload) !== canonicalArguments(receipt))
+                        throw new HubProtocolError("conflict");
+                    this.options.journal.acknowledge(receipt);
+                }
+            }
+        }).catch((err) => this.options.log("info", "Hub receipts wait for the next handshake", { err: String(err) }));
+    }
+    question(row) {
+        // The journal's encrypted copy is the only question text this side keeps (readable only while queued, before input).
+        const question = this.options.journal.queuedQuestion(row.message_id);
+        if (questionContextDigest(question) !== row.digest)
+            throw new HubProtocolError("uncertain");
+        return question;
+    }
+    /** A required audit record (its own transaction): a failure throws to the caller. */
+    auditRequired(row, action, result, reasonCode) {
+        this.options.db.transaction(() => this.options.audit({ action, result, messageId: row.message_id, exposureId: row.exposure_id, ...(reasonCode ? { reasonCode } : {}) }, this.options.db)).immediate();
+    }
+    /** A hold always lands (state first); its audit record is attempted and a failure is logged. */
+    hold(row, reason) {
+        if (!this.setState(row, "held", HOLDABLE, { reason }))
+            return;
+        try {
+            this.auditRequired(row, "representative.held", "held", reason);
+        }
+        catch (err) {
+            this.options.log("warn", "Hub audit append failed", { action: "representative.held", err: String(err) });
+        }
+        this.options.attentionChanged();
+    }
+    uncertain(row, err) {
+        this.options.log("warn", "Hub question uncertain", { messageId: row.message_id, err: String(err) });
+        // The journal can mark uncertain only before an answer was saved; a saved-but-unacknowledged answer stays answered there.
+        try {
+            if (["dispatching", "input", "delivered", "answering"].includes(this.refresh(row)))
+                this.options.journal.recordEvidence(row.message_id, "uncertain");
+        }
+        catch { /* already past the stages the journal can mark uncertain */ }
+        this.hold(row, "uncertain");
+        this.pushReceipts();
+    }
+    /** The agent's daemon could not get the question into its pane after accepting it: uncertain, never resent. */
+    deliveryFailed(correlationId, agent) {
+        const row = correlationId.startsWith("hub-") ? this.row("cid", correlationId) : null;
+        if (!row || row.agent !== agent || !["input", "delivered"].includes(row.state))
+            return;
+        this.uncertain(row, new Error("the agent's pane did not take the question"));
+    }
+    /** Off / withdraw / revoke / link replacement for one message: its correlation id stops being live at once. */
+    fence(messageId, reasonCode = "revoked") {
+        const row = this.row("message_id", messageId);
+        if (row)
+            this.hold(row, reasonCode);
+    }
+    attentionItems() {
+        const rows = this.options.db.prepare(`SELECT * FROM hub_representative_questions WHERE state='held' ORDER BY at DESC LIMIT ${HELD_MAX}`).all();
+        return rows.map(r => ({ id: `hold:${r.id}`, kind: "hold", agent: r.agent, messageId: r.message_id, exposureId: r.exposure_id, since: r.at }));
+    }
+    async close() {
+        this.closed = true;
+        await this.receiptsTail;
+    }
+}
+//# sourceMappingURL=representative.js.map

package/dist/hub/representative.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"representative.js","sourceRoot":"","sources":["../../src/hub/representative.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAU,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,cAAc,EAAuB,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAmD,MAAM,qBAAqB,CAAC;AAC7G,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAKrE,iGAAiG;AACjG,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,IAAI,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACpI,OAAO,EAAE,iBAAiB,IAAI,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3E,uHAAuH;AACvH,OAAO,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAA+C,MAAM,yBAAyB,CAAC;AACzG,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,gBAAiB,SAAQ,KAAK;CAAG;AAEvC,MAAM,UAAU,wBAAwB,CAAC,EAAqB;IAC5D,EAAE,CAAC,IAAI,CAAC;;;;mIAIyH,CAAC,CAAC;AACrI,CAAC;AACD,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,CAAC;AAOxI,MAAM,IAAI,GAAqB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAC5F,uGAAuG;AACvG,MAAM,QAAQ,GAAqB,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC;AAwCzD,MAAM,OAAO,0BAA0B;IAKR,OAAO;IAJ5B,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;IACT,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACxD,YAA6B,OAAiC;uBAAjC,OAAO;IAA6B,CAAC;IAE1D,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,KAA6C,EAAE,KAAa;QACtE,OAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAqB,IAAI,IAAI,CAAC;IACxI,CAAC;IACO,QAAQ,CAAC,GAAQ,EAAE,KAAY,EAAE,IAAsB,EAAE,KAAK,GAAuD,EAAE;QAC7H,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,wDAAwD,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;mCAC5M,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;aACjE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpO,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/H,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6GAA6G;IACrG,UAAU,CAAC,GAAQ;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU;eAC/H,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnL,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC;IAC7G,CAAC;IACO,YAAY,CAAC,SAAiB;QACpC,OAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAmC,EAAE,KAAK,IAAI,IAAI,CAAC;IACtK,CAAC;IACO,OAAO,CAAC,GAAQ;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAChI,CAAC;IAED,uGAAuG;IACvG,SAAS,CAAC,UAAkB,EAAE,gBAAwB;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC9I,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD;;;;OAIG;IACH,kBAAkB,CAAC,SAA2B;QAC5C,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,wIAAwI,CAAC;iBAC9J,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACO,KAAK,CAAC,KAAuB;QACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;QACjF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1J,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC;QAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5G,CAAC;IACD,oDAAoD;IACpD,cAAc,KAAW,OAAO,IAAI,CAAC,CAAC,CAAC;IAEvC,8FAA8F;IAC9F,gBAAgB;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,CAAC,CAAc,EAAE,MAAc,EAAE,EAAE;YACrD,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1G,CAAC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAC/B,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBAC9E,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACzE,MAAM,CAAC,GAAG,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;gBAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACtE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC5K,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACzG,IAAK,EAAE,CAAC,OAAO,CAAC,gIAAgI,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBACpL,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;gBACxB,EAAE,CAAC,OAAO,CAAC,iKAAiK,CAAC;qBAC1K,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjJ,6GAA6G;gBAC7G,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAC/B,IAAI,EAAE,KAAK,EAAE;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACpD,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACvC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClG,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;YACzB,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,sHAAsH,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;YACpK,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS,GAAG,KAAK,CAAC;gBAAC,CAAC;YAAC,CAAC;YAC/G,IAAI,SAAS;gBAAE,EAAE,CAAC,OAAO,CAAC,qGAAqG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;gBACxI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO;QACnE,IAAI,IAAW,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,EAAW,CAAC;QAAC,CAAC;QAC9I,OAAO,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sCAAsC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1G,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oGAAoG;IAC5F,OAAO,CAAC,GAAQ;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,MAAM,CAAC;QACjC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAQ;QAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;YAAE,OAAO;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC5B,iHAAiH;QACjH,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7D,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,gBAAgB,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBACpH,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;oBACpG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;oBACrK,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;wBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBAC7E,OAAO,KAAK,CAAC,OAAO,CAAC;gBACvB,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,yCAAyC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrH,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAAC,OAAO;YAC9C,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;QACxG,CAAC;QACD,MAAM,IAAI,GAAG;YACX,kCAAkC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,2FAA2F;YACrJ,mCAAmC,iBAAiB,wBAAwB,GAAG,8CAA8C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC,CAAC,EAAE,EAAE;YACpO,EAAE;YACF,QAAQ,CAAC,IAAI;YACb,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAClC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI;gBAC1C,gHAAgH;gBAChH,YAAY,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,aAAa,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9H,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAChC,kHAAkH;YAClH,+GAA+G;YAC/G,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACxD,IAAI,CAAC;gBAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,uBAAuB,EAAE,WAAW,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAChH,OAAO;QACT,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,CAAC,8DAA8D;QAClF,IAAI,KAAK,KAAK,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;aACzG,IAAI,KAAK,KAAK,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClE,CAAC;IAED,mIAAmI;IAC3H,KAAK,CAAC,WAAW,CAAC,GAAQ;QAChC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YAC5G,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAClJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YAC5G,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6GAA6G;YAC7G,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;YACpD,IAAI,MAAM;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;gBAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAgC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5G,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAuH;QAC5H,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;QACtB,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAQ,EAAE,GAAU,EAAE,GAAW,EAAE,aAA4B,EAAE,MAAuB;QAC5G,IAAI,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjJ,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC;YACP,uGAAuG;YACvG,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,IAAI,OAAO,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACjH,kHAAkH;YAClH,IAAI,WAAqC,CAAC;YAC1C,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,gBAAgB,CAAC;oBAAE,MAAM,IAAI,cAAc,CAAC,yDAAyD,CAAC,CAAC;gBAC7J,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9D,IAAI,EAAE,CAAC;gBACP,KAAK,MAAM,IAAI,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;wBAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;wBACxJ,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;4BAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBACnJ,CAAC,CAAC,CAAC;gBACH,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,EAAE,CAAC;YACT,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9J,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrC,wFAAwF;YACxF,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACnD,+FAA+F;YAC/F,iGAAiG;YACjG,MAAM,QAAQ,GAAG,UAAU,EAAE,EAAE,aAAa,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5I,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChJ,IAAI,EAAE,CAAC;YACP,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;YAChM,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC;YACP,IAAI,OAAO,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9J,MAAM,MAAM,GAAc,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY;gBACxH,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACtF,4GAA4G;YAC5G,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,wBAAwB,EAAE,WAAW,CAAC,CAAC;YAC/D,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxF,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACxE,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;YAC5I,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC1J,6GAA6G;YAC7G,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACvF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1J,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;YACtE,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2FAA2F,EAAE,CAAC;YAC7H,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAC1D,kHAAkH;gBAClH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,GAAG,CAAC,OAAO,8CAA8C,EAAE,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/C,yGAAyG;gBACzG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,cAAc,kEAAkE,EAAE,CAAC;YACvJ,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS;oBACpC,CAAC,CAAC,8GAA8G;oBAChH,CAAC,CAAC,2JAA2J,EAAE,CAAC;QACpK,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAAC,CAAC;IAChD,CAAC;IAED,0HAA0H;IAClH,YAAY;QAClB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YACrC,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;oBAAE,OAAO;gBAClC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC9I,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC;wBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBAC1I,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAqB,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,0CAA0C,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;IAEO,QAAQ,CAAC,GAAQ;QACvB,qHAAqH;QACrH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,qFAAqF;IAC7E,aAAa,CAAC,GAAQ,EAAE,MAAc,EAAE,MAAuC,EAAE,UAAmB;QAC1G,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACxM,CAAC;IACD,gGAAgG;IACxF,IAAI,CAAC,GAAQ,EAAE,MAAc;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC;YAAE,OAAO;QAC9D,IAAI,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QACvE,OAAO,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACzH,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC;IACO,SAAS,CAAC,GAAQ,EAAE,GAAY;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,0HAA0H;QAC1H,IAAI,CAAC;YAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QAC7J,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,+GAA+G;IAC/G,cAAc,CAAC,aAAqB,EAAE,KAAa;QACjD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACvF,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,SAAiB,EAAE,UAAU,GAAG,SAAS;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IACD,cAAc;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,wFAAwF,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAW,CAAC;QACxJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzJ,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;CACF"}

package/dist/hub/retention.d.ts

@@ -0,0 +1,17 @@
+/** Owner Settings policy in the private Hub DB. The sealed config supplies the initial values only. */
+import type Database from "better-sqlite3";
+import { type HubRetentionPolicy, type HubRetentionView } from "../hub-retention-policy.js";
+import type { HubMigration } from "./db.js";
+import type { HubAuditStore } from "./audit/index.js";
+export interface HubRetentionControl {
+    read(): HubRetentionView;
+    update(input: unknown, current: () => boolean): HubRetentionView;
+}
+export declare function retentionMigration(hubId: string, initial: HubRetentionPolicy): HubMigration;
+export declare function createHubRetentionControl(options: {
+    db: Database.Database;
+    hubId: string;
+    audit: Pick<HubAuditStore, "appendInTransaction">;
+    current(): boolean;
+    now(): number;
+}): HubRetentionControl;

package/dist/hub/retention.js

@@ -0,0 +1,45 @@
+import { randomUUID } from "node:crypto";
+import { parseHubRetention } from "../hub-retention-policy.js";
+export function retentionMigration(hubId, initial) {
+    const policy = parseHubRetention({ ...initial, revision: 1 });
+    return { component: "s5-retention", version: 1, up(db) {
+            db.exec(`CREATE TABLE hub_retention(singleton INTEGER PRIMARY KEY CHECK(singleton=1), hub_id TEXT NOT NULL,
+      content_days INTEGER NOT NULL CHECK(content_days BETWEEN 1 AND 3650),
+      event_days INTEGER NOT NULL CHECK(event_days BETWEEN 1 AND 3650), revision INTEGER NOT NULL CHECK(revision>=1));`);
+            db.prepare("INSERT INTO hub_retention VALUES(1, ?, ?, ?, 1)").run(hubId, policy.contentDays, policy.eventDays);
+        } };
+}
+export function createHubRetentionControl(options) {
+    const { db } = options;
+    const assert = (current = () => true) => { if (!options.current() || !current())
+        throw Error("unavailable"); };
+    const read = () => {
+        assert();
+        const row = db.prepare("SELECT hub_id, content_days, event_days, revision FROM hub_retention WHERE singleton=1").get();
+        if (!row || row.hub_id !== options.hubId)
+            throw Error("retention_unavailable");
+        return parseHubRetention({ contentDays: row.content_days, eventDays: row.event_days, revision: row.revision });
+    };
+    read(); // Missing/corrupt state never resets to a longer initial retention.
+    return { read, update(input, current) {
+            const next = parseHubRetention(input);
+            return db.transaction(() => {
+                assert(current);
+                const before = read();
+                if (before.revision !== next.revision || before.revision >= Number.MAX_SAFE_INTEGER)
+                    throw Error("conflict");
+                if (before.contentDays === next.contentDays && before.eventDays === next.eventDays)
+                    return before;
+                const revision = before.revision + 1;
+                const result = options.audit.appendInTransaction({ id: randomUUID(), sequence: revision, at: options.now(), requestId: randomUUID(),
+                    actor: { kind: "local-host" }, action: "retention.changed", result: "completed", policyVersion: revision,
+                    reasonCode: `content-${next.contentDays}-events-${next.eventDays}` }, db);
+                if (result && typeof result.then === "function")
+                    throw Error("retention_audit_unavailable");
+                assert(current);
+                db.prepare("UPDATE hub_retention SET content_days=?, event_days=?, revision=? WHERE singleton=1").run(next.contentDays, next.eventDays, revision);
+                return { contentDays: next.contentDays, eventDays: next.eventDays, revision };
+            }).immediate();
+        } };
+}
+//# sourceMappingURL=retention.js.map