@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/catalog.js

@@ -0,0 +1,195 @@
+/**
+ * AgEnD Hub P1, slice 3: the exposure catalog and grants (hub.md §4, §5; seams with S1/S4 on cid-hub-s3-readiness).
+ *
+ * The Hub's exposure rows MIRROR what each member's owner approved. A member only publishes what its own S4 readiness
+ * accepted. The Hub never asks S4 and never infers "enforceable" from a row being there.
+ * - Snapshots are complete, monotonic catalog revisions per fleet. A newer accepted snapshot replaces the fleet's
+ *   catalog: an exposure missing from it is withdrawn. An older snapshot is refused and can never revive consent. A
+ *   repeat of the current revision is accepted only when byte-identical.
+ * - An exposure's own revision never goes backwards.
+ * - The Hub may narrow or freeze, never widen. A Hub-side freeze holds every revision up to the one it froze; only a
+ *   newer revision re-consented on the member lifts it.
+ * - A grant binds one person to one exact exposure id and revision. A new exposure revision leaves old grants
+ *   inapplicable until the owner grants again. Only the exposure's owner grants or revokes, against the revision shown.
+ * - Private-agent non-enumeration: a person sees the exposures they own, and the published ones granted to them now.
+ *   They never see others.
+ */
+import { createHash, randomUUID } from "node:crypto";
+import { HubProtocolError } from "./validation.js";
+import { personKeyString } from "./identity.js";
+import { personByLogin, personFromString } from "./http/core.js";
+/** P1 grants last at most this long; the owner chooses within it. */
+export const GRANT_MAX_MS = 365 * 24 * 60 * 60_000;
+const PERMISSIONS = ["ask", "read-own-room"];
+export function exposureOf(row) {
+    return { id: row.id, fleetId: row.fleet_id, owner: personFromString(row.owner), displayName: row.display_name, revision: row.revision,
+        state: row.frozen_through >= row.revision && row.state === "published" ? "frozen" : row.state,
+        dataViewId: row.data_view_id, allowedTools: JSON.parse(row.allowed_tools), policyDigest: row.policy_digest };
+}
+export function grantOf(row) {
+    return { id: row.id, revision: row.revision, owner: personFromString(row.owner), exposureId: row.exposure_id, exposureRevision: row.exposure_revision,
+        approvedBy: personFromString(row.approved_by), approvedAt: row.approved_at, subject: { kind: "person", person: personFromString(row.subject) },
+        permissions: JSON.parse(row.permissions), startsAt: row.starts_at, expiresAt: row.expires_at, state: row.state };
+}
+export const readExposure = (db, id) => db.prepare("SELECT * FROM hub_exposures WHERE id=?").get(id);
+export const readGrant = (db, id) => db.prepare("SELECT * FROM hub_grants WHERE id=?").get(id);
+/** The canonical bytes of a snapshot: a repeat of a revision must match them exactly. */
+const snapshotDigest = (s) => createHash("sha256").update(JSON.stringify([s.revision, [...s.exposures].sort((a, b) => (a.id < b.id ? -1 : 1))
+        .map((e) => [e.id, e.fleetId, e.owner.realm, e.owner.objectId, e.displayName, e.revision, e.state, e.dataViewId, [...e.allowedTools], e.policyDigest])])).digest("hex");
+/** Whether a grant lets `asker` ask `exposure` right now (exact revision, window, state, permission). */
+export function grantApplies(grant, exposure, asker, now) {
+    return grant.state === "active" && grant.exposureId === exposure.id && grant.exposureRevision === exposure.revision
+        && personKeyString(grant.subject.person) === personKeyString(asker) && personKeyString(grant.owner) === personKeyString(exposure.owner)
+        && grant.startsAt <= now && now < grant.expiresAt && grant.permissions.includes("ask");
+}
+export class HubCatalogService {
+    core;
+    constructor(core) {
+        this.core = core;
+    }
+    /** A member's complete catalog revision, from its authenticated link (S1 already refused another fleet or owner). */
+    receiveSnapshot(snapshot, link) {
+        const now = this.core.now(), owner = personKeyString(link.owner), dig = snapshotDigest(snapshot);
+        const ids = new Set();
+        for (const e of snapshot.exposures) {
+            if (e.fleetId !== link.fleetId || personKeyString(e.owner) !== owner || ids.has(e.id))
+                throw new HubProtocolError("denied");
+            ids.add(e.id);
+        }
+        if (!link.current())
+            throw new HubProtocolError("stale");
+        this.core.atomic((db, tx) => {
+            const cursor = db.prepare("SELECT revision, digest FROM hub_catalog_cursor WHERE fleet_id=?").get(link.fleetId);
+            if (cursor && snapshot.revision < cursor.revision)
+                throw new HubProtocolError("stale");
+            if (cursor && snapshot.revision === cursor.revision) {
+                if (cursor.digest !== dig)
+                    throw new HubProtocolError("conflict");
+                return; // the same revision again: nothing changes
+            }
+            for (const e of snapshot.exposures) {
+                const old = readExposure(db, e.id);
+                if (old && (old.fleet_id !== link.fleetId || old.owner !== owner))
+                    throw new HubProtocolError("denied");
+                if (old && e.revision < old.revision)
+                    throw new HubProtocolError("stale");
+                if (old && e.revision === old.revision && (old.policy_digest !== e.policyDigest || old.data_view_id !== e.dataViewId
+                    || old.allowed_tools !== JSON.stringify([...e.allowedTools])))
+                    throw new HubProtocolError("conflict");
+            }
+            const listed = new Set(snapshot.exposures.map((e) => e.id));
+            const absent = db.prepare("SELECT id FROM hub_exposures WHERE fleet_id=? AND state<>'withdrawn'").all(link.fleetId)
+                .filter((r) => !listed.has(r.id));
+            for (const r of absent)
+                db.prepare("UPDATE hub_exposures SET state='withdrawn', updated_at=? WHERE id=?").run(now, r.id);
+            // Leaving "published" (withdrawn by absence or by state) ends its grants and rooms: a later re-publish, even at the
+            // same revision, needs the owner to grant again — consent never revives from history.
+            const ended = [...absent.map((r) => r.id), ...snapshot.exposures.filter((e) => e.state !== "published").map((e) => e.id)];
+            for (const id of ended) {
+                db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE exposure_id=? AND state='active'").run(id);
+                db.prepare("UPDATE hub_rooms SET state='closed' WHERE exposure_id=? AND state<>'closed'").run(id);
+            }
+            for (const e of snapshot.exposures) {
+                db.prepare(`INSERT INTO hub_exposures(id, fleet_id, owner, display_name, revision, state, data_view_id, allowed_tools, policy_digest, updated_at)
+          VALUES(?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET display_name=excluded.display_name, revision=excluded.revision, state=excluded.state,
+          data_view_id=excluded.data_view_id, allowed_tools=excluded.allowed_tools, policy_digest=excluded.policy_digest, updated_at=excluded.updated_at`)
+                    .run(e.id, e.fleetId, owner, e.displayName, e.revision, e.state, e.dataViewId, JSON.stringify([...e.allowedTools]), e.policyDigest, now);
+            }
+            db.prepare(`INSERT INTO hub_catalog_cursor(fleet_id, revision, digest, at) VALUES(?,?,?,?)
+        ON CONFLICT(fleet_id) DO UPDATE SET revision=excluded.revision, digest=excluded.digest, at=excluded.at`).run(link.fleetId, snapshot.revision, dig, now);
+            this.core.audit(tx, { requestId: randomUUID(), actor: { kind: "member", fleetId: link.fleetId }, action: "exposure.snapshot", result: "completed",
+                fleetId: link.fleetId, ownerAtEvent: link.owner, reasonCode: absent.length ? "withdrawn" : undefined });
+        });
+    }
+    /** What this person may see: their own exposures (with the grants on them) and what is granted to them now. */
+    async visible(ctx) {
+        const person = await ctx.requirePerson(), me = personKeyString(person), now = this.core.now();
+        return this.core.atomic((db) => {
+            const names = (id) => db.prepare("SELECT display_name, login_label FROM hub_people WHERE person=?").get(id);
+            const mine = db.prepare("SELECT * FROM hub_exposures WHERE owner=? AND state<>'withdrawn' ORDER BY display_name").all(me).map((row) => {
+                const grants = db.prepare("SELECT * FROM hub_grants WHERE exposure_id=? AND state='active' AND expires_at>? ORDER BY approved_at").all(row.id, now)
+                    .map((g) => { const n = names(g.subject); return { ...grantOf(g), subjectName: n?.display_name ?? "", subjectLogin: n?.login_label ?? "" }; });
+                return { ...exposureOf(row), grants };
+            });
+            const askable = [];
+            for (const g of db.prepare("SELECT * FROM hub_grants WHERE subject=? AND state='active' AND expires_at>?").all(me, now)) {
+                const row = readExposure(db, g.exposure_id);
+                if (!row)
+                    continue;
+                const exposure = exposureOf(row), grant = grantOf(g);
+                if (exposure.state !== "published" || !grantApplies(grant, exposure, person, now))
+                    continue;
+                askable.push({ exposure, grant, ownerName: names(row.owner)?.display_name ?? "" });
+            }
+            return { mine, askable };
+        });
+    }
+    /** Grant one known Hub person `ask` on the owner's exposure at the revision the owner saw. */
+    async grant(ctx, input) {
+        const owner = await ctx.requirePerson(), me = personKeyString(owner), now = this.core.now();
+        if (!Number.isSafeInteger(input.days) || input.days < 1 || input.days * 86_400_000 > GRANT_MAX_MS)
+            throw new HubProtocolError("invalid");
+        // Unknown, shared or renamed-away labels are refused: a name never stands for an id (personByLogin).
+        const subject = await personByLogin(this.core, input.login);
+        const subjectId = subject ? personKeyString(subject) : null;
+        if (!subject || !subjectId || subjectId === me)
+            throw new HubProtocolError("not-found");
+        await ctx.current();
+        const grant = { id: randomUUID(), revision: 1, owner, exposureId: input.exposureId, exposureRevision: input.exposureRevision,
+            approvedBy: owner, approvedAt: now, subject: { kind: "person", person: subject }, permissions: [...PERMISSIONS],
+            startsAt: now, expiresAt: now + input.days * 86_400_000, state: "active" };
+        this.core.atomic((db, tx) => {
+            const row = readExposure(db, input.exposureId);
+            if (!row || row.owner !== me)
+                throw new HubProtocolError("not-found");
+            const exposure = exposureOf(row);
+            if (exposure.revision !== input.exposureRevision)
+                throw new HubProtocolError("conflict");
+            if (exposure.state !== "published")
+                throw new HubProtocolError("denied");
+            for (const g of db.prepare("SELECT id FROM hub_grants WHERE exposure_id=? AND subject=? AND state='active' AND exposure_revision=?").all(exposure.id, subjectId, exposure.revision))
+                db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE id=?").run(g.id); // one live grant per person and revision
+            db.prepare(`INSERT INTO hub_grants(id, revision, owner, exposure_id, exposure_revision, approved_by, approved_at, subject, permissions, starts_at, expires_at, state)
+        VALUES(?,?,?,?,?,?,?,?,?,?,?, 'active')`).run(grant.id, 1, me, exposure.id, exposure.revision, me, now, subjectId, JSON.stringify(grant.permissions), grant.startsAt, grant.expiresAt);
+            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person: owner }, action: "grant.created", result: "completed",
+                fleetId: exposure.fleetId, exposureId: exposure.id, ownerAtEvent: owner, grantId: grant.id, grantRevision: 1 });
+        });
+        return grant;
+    }
+    /** The owner withdraws a grant (narrowing: always allowed) against the revision they saw; its rooms close. */
+    async revokeGrant(ctx, id, revision) {
+        const owner = await ctx.requirePerson(), me = personKeyString(owner);
+        this.core.atomic((db, tx) => {
+            const g = readGrant(db, id);
+            if (!g || g.owner !== me)
+                throw new HubProtocolError("not-found");
+            if (g.revision !== revision)
+                throw new HubProtocolError("conflict");
+            if (g.state === "revoked")
+                return;
+            db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE id=?").run(id);
+            db.prepare("UPDATE hub_rooms SET state='closed' WHERE grant_id=?").run(id);
+            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person: owner }, action: "grant.revoked", result: "completed",
+                exposureId: g.exposure_id, ownerAtEvent: owner, grantId: id, grantRevision: revision + 1 });
+        });
+    }
+    /**
+     * Freeze an exposure on the Hub (narrowing only): its owner or the Hub administrator. It holds every revision up to
+     * the current one; the member re-consenting a newer revision lifts it.
+     */
+    async freeze(ctx, id, revision, admin) {
+        const actor = admin ? await ctx.requireAdmin() : null;
+        const person = actor?.kind === "directory" ? actor.person : await ctx.requirePerson();
+        this.core.atomic((db, tx) => {
+            const row = readExposure(db, id);
+            if (!row || (!admin && row.owner !== personKeyString(person)))
+                throw new HubProtocolError("not-found");
+            if (row.revision !== revision)
+                throw new HubProtocolError("conflict");
+            db.prepare("UPDATE hub_exposures SET frozen_through=MAX(frozen_through, ?), updated_at=? WHERE id=?").run(row.revision, this.core.now(), id);
+            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person }, action: "exposure.frozen", result: "completed",
+                fleetId: row.fleet_id, exposureId: id, ownerAtEvent: personFromString(row.owner) });
+        });
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/hub/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/hub/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAgB,MAAM,gBAAgB,CAAC;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACnD,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,eAAe,CAAU,CAAC;AAKtD,MAAM,UAAU,UAAU,CAAC,GAAgB;IACzC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACnI,KAAK,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAC7F,UAAU,EAAE,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;AAC7H,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,GAAa;IACnC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;QACnJ,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC9I,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA4B,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAChJ,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAqB,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA4B,CAAC;AAC3J,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAqB,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;AAClJ,yFAAyF;AACzF,MAAM,cAAc,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/J,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE1K,yGAAyG;AACzG,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,QAAqB,EAAE,KAAgB,EAAE,GAAW;IAChG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,QAAQ;WAC9G,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;WACpI,KAAK,CAAC,QAAQ,IAAI,GAAG,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAOD,MAAM,OAAO,iBAAiB;IACC,IAAI;IAAjC,YAA6B,IAAa;oBAAb,IAAI;IAAY,CAAC;IAE9C,qHAAqH;IACrH,eAAe,CAAC,QAA6B,EAAE,IAAoB;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5H,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAqD,CAAC;YACpK,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvF,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,OAAO,CAA4C,2CAA2C;YAChG,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACxG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ;oBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC1E,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;uBAC/G,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAsB;iBACtI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACzH,oHAAoH;YACpH,sFAAsF;YACtF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1H,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,EAAE,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxH,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACnC,EAAE,CAAC,OAAO,CAAC;;yJAEsI,CAAC;qBAC/I,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC7I,CAAC;YACD,EAAE,CAAC,OAAO,CAAC;+GAC8F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1J,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW;gBAC/I,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,OAAO,CAAC,GAAsB;QAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9F,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,EAAE,CAA8D,CAAC;YACjL,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,EAAE,CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvJ,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAgB;qBAChK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjJ,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAoE,EAAE,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAe,EAAE,CAAC;gBACtI,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG;oBAAE,SAAS;gBAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC;oBAAE,SAAS;gBAC5F,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,KAAoF;QACtH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU,GAAG,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzI,qGAAqG;QACrG,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAa,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACpI,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC/G,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACzF,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAqB;gBACrM,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAG,yCAAyC;YAC5I,EAAE,CAAC,OAAO,CAAC;gDAC+B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzL,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW;gBACpI,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,WAAW,CAAC,GAAsB,EAAE,EAAU,EAAE,QAAgB;QACpE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO;YAClC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5F,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW;gBACpI,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAsB,EAAE,EAAU,EAAE,QAAgB,EAAE,KAAc;QAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,EAAE,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7I,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW;gBAC/H,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/hub/client.d.ts

@@ -0,0 +1,69 @@
+import { type HubMemberProfile } from "./profile.js";
+import type { HubAuthorizationLease, HubAuthorizationRequest, HubMemberFrame, HubServerFrame, HubMemberTransport } from "./types.js";
+export declare class HubAuthorizationError extends Error {
+    readonly code: "denied" | "unavailable" | "stale";
+    readonly reasonCode: string;
+    constructor(code: "denied" | "unavailable" | "stale", reasonCode: string);
+}
+export interface HubMemberLink {
+    readonly linkEpoch: number;
+    readonly revocationVersion: number;
+    readonly profile: HubMemberProfile;
+    /** The optional features both ends listed: this member's offer ∩ the Hub's welcome (empty for an older Hub). */
+    readonly features: ReadonlySet<string>;
+    current(): boolean;
+    send(frame: HubMemberFrame): Promise<void>;
+    exchange(frame: HubMemberFrame, responseType: HubServerFrame["type"]): Promise<HubServerFrame>;
+}
+export interface HubClientOptions {
+    home: string;
+    hubId: string;
+    memberOrigin: string;
+    current(): boolean;
+    /** Must durably reconcile the current revocation version and journal BEFORE returning. No input here. */
+    reconcile(link: HubMemberLink): Promise<void>;
+    receive(frame: Exclude<HubServerFrame, {
+        type: "welcome";
+    }>, link: HubMemberLink): Promise<void>;
+    hold(code: "unavailable" | "invalid" | "backpressure" | "replaced" | "revoked" | "key-changed"): void;
+    now?: () => number;
+    random?: () => number;
+    /** The optional features this member offers (tests use a smaller list to stand in for an older member). */
+    capabilities?: readonly string[];
+}
+export declare class HubMemberClient implements HubMemberTransport {
+    private readonly options;
+    private profile;
+    private link;
+    private view;
+    private pending;
+    private deferred;
+    private deferredBytes;
+    private workTail;
+    private queuedWork;
+    private queuedWorkBytes;
+    private timer;
+    private stopped;
+    private attempt;
+    private connecting;
+    private opening;
+    private ready;
+    private epoch;
+    private revocation;
+    private firstResolve;
+    private firstReject;
+    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
+    constructor(options: HubClientOptions);
+    private current;
+    start(): Promise<void>;
+    private connect;
+    private receive;
+    private dispatch;
+    private exchange;
+    send(frame: HubMemberFrame): Promise<void>;
+    authorize(request: HubAuthorizationRequest): Promise<HubAuthorizationLease>;
+    private reconnect;
+    private rejectPending;
+    fence(): void;
+    close(): Promise<void>;
+}

package/dist/hub/client.js

@@ -0,0 +1,300 @@
+/** Outbound-only pinned member connection. Reconnect reconciles; it never repeats an input/tool operation. */
+import { WebSocket } from "ws";
+import { randomUUID } from "node:crypto";
+import { HUB_CAPABILITIES, HUB_LIMITS, HUB_OPTIONAL_CAPABILITIES, HUB_PATHS, parseServerFrame, encodeMemberFrame } from "./protocol.js";
+import { HubSocket } from "./socket.js";
+import { HubProtocolError } from "./validation.js";
+import { pinnedHubAgent, HubTlsIdentityError } from "./tls.js";
+import { verifyLease } from "./identity.js";
+import { HubMemberProfileStore } from "./profile.js";
+export class HubAuthorizationError extends Error {
+    code;
+    reasonCode;
+    constructor(code, reasonCode) {
+        super(`Hub authorization ${code}`);
+        this.code = code;
+        this.reasonCode = reasonCode;
+    }
+}
+export class HubMemberClient {
+    options;
+    profile = null;
+    link = null;
+    view = null;
+    pending = new Map();
+    deferred = [];
+    deferredBytes = 0;
+    workTail = Promise.resolve();
+    queuedWork = 0;
+    queuedWorkBytes = 0;
+    timer = null;
+    stopped = false;
+    attempt = 0;
+    connecting = false;
+    opening = null;
+    ready = false;
+    epoch = 0;
+    revocation = 0;
+    firstResolve = null;
+    firstReject = null;
+    bootId = randomUUID();
+    constructor(options) {
+        this.options = options;
+    }
+    current() { return !this.stopped && this.options.current(); }
+    async start() {
+        if (!this.current() || this.profile)
+            throw new HubAuthorizationError("unavailable", "unavailable");
+        this.profile = new HubMemberProfileStore(this.options.home, this.options.hubId).readProfile();
+        if (this.profile.hub.memberOrigin !== this.options.memberOrigin) {
+            this.options.hold("key-changed");
+            throw new HubAuthorizationError("stale", "stale");
+        }
+        await new Promise((resolve, reject) => { this.firstResolve = resolve; this.firstReject = reject; this.connect(); });
+    }
+    connect() {
+        if (!this.current() || !this.profile || this.connecting)
+            return;
+        this.connecting = true;
+        this.ready = false;
+        this.deferred = [];
+        this.deferredBytes = 0;
+        const profile = this.profile, handshake = randomUUID();
+        const endpoint = new URL(HUB_PATHS.connect, profile.hub.memberOrigin);
+        endpoint.protocol = "wss:";
+        const agent = pinnedHubAgent(profile.hub, () => this.current());
+        const ws = new WebSocket(endpoint, { headers: { Authorization: `Bearer ${profile.credential}` }, agent,
+            followRedirects: false, handshakeTimeout: HUB_LIMITS.rpcTimeout, maxPayload: HUB_LIMITS.frame, perMessageDeflate: false });
+        this.opening = ws;
+        let connected = false, finished = false;
+        const failed = (error) => {
+            if (finished)
+                return;
+            finished = true;
+            this.connecting = false;
+            if (this.opening === ws)
+                this.opening = null;
+            agent.destroy();
+            if (!this.current())
+                return;
+            if (error instanceof HubTlsIdentityError) {
+                this.options.hold("key-changed");
+                this.stopped = true;
+            }
+            if (!connected) {
+                if (!this.stopped)
+                    this.options.hold("unavailable");
+                this.firstReject?.(new HubAuthorizationError("unavailable", "unavailable"));
+                this.firstReject = this.firstResolve = null;
+                this.reconnect();
+            }
+        };
+        ws.once("error", failed);
+        ws.once("close", () => failed());
+        ws.once("open", () => {
+            if (!this.current()) {
+                ws.terminate();
+                return;
+            }
+            this.opening = null;
+            connected = true;
+            this.connecting = false;
+            let link;
+            const handshakeTimer = setTimeout(() => link.end(), HUB_LIMITS.rpcTimeout);
+            handshakeTimer.unref();
+            link = new HubSocket(ws, { current: () => this.current() && this.link === link, parse: parseServerFrame, encode: encodeMemberFrame,
+                receive: frame => this.receive(frame, link, handshake, handshakeTimer), closed: code => {
+                    clearTimeout(handshakeTimer);
+                    const wasStopped = this.stopped;
+                    if (code === "replaced" || code === "revoked")
+                        this.stopped = true;
+                    if (this.link !== link)
+                        return;
+                    this.link = null;
+                    this.view = null;
+                    this.ready = false;
+                    this.deferred = [];
+                    this.deferredBytes = 0;
+                    this.rejectPending();
+                    if (!wasStopped)
+                        this.options.hold(code);
+                    this.firstReject?.(new HubAuthorizationError("unavailable", code));
+                    this.firstReject = this.firstResolve = null;
+                    this.reconnect();
+                } });
+            this.link = link;
+            void link.send({ v: 1, type: "hello", requestId: handshake, linkEpoch: 0,
+                payload: { supportedVersions: [1], capabilities: [...HUB_CAPABILITIES, ...(this.options.capabilities ?? HUB_OPTIONAL_CAPABILITIES)], memberBootId: this.bootId } }).catch(() => link.end());
+        });
+    }
+    async receive(frame, link, handshake, timeout) {
+        if (!link.current())
+            return;
+        if (!this.view) {
+            if (frame.type === "welcome" && frame.requestId === handshake && frame.payload.hubId !== this.profile.hub.hubId) {
+                this.fence();
+                this.options.hold("key-changed");
+                return;
+            }
+            if (frame.type !== "welcome" || frame.requestId !== handshake || frame.payload.hubId !== this.profile.hub.hubId || frame.payload.fleetId !== this.profile.fleetId
+                || frame.linkEpoch !== frame.payload.linkEpoch || frame.payload.revocationVersion < this.revocation)
+                throw new HubProtocolError("stale");
+            clearTimeout(timeout);
+            this.epoch = frame.linkEpoch;
+            this.revocation = frame.payload.revocationVersion;
+            const profile = this.profile, epoch = this.epoch;
+            const self = this, offered = this.options.capabilities ?? HUB_OPTIONAL_CAPABILITIES;
+            const features = new Set(offered.includes("welcome-caps-v1") ? offered.filter(c => frame.payload.capabilities?.includes(c)) : []);
+            const view = { profile: structuredClone(profile), linkEpoch: epoch, features, get revocationVersion() { return self.revocation; },
+                current: () => this.current() && this.link === link && this.view === view && this.epoch === epoch && link.current(),
+                send: value => {
+                    if (!view.current() || value.linkEpoch !== epoch || value.type === "hello")
+                        return Promise.reject(new HubAuthorizationError("stale", "stale"));
+                    if (value.type === "exposure.quota" && !features.has("quota-band-v1"))
+                        return Promise.reject(new HubAuthorizationError("unavailable", "incompatible"));
+                    return link.send(value);
+                },
+                exchange: (value, type) => this.exchange(value, type, view) };
+            this.view = view;
+            // Do not await reconciliation on the receive queue: its RPC response arrives on that queue.
+            void this.options.reconcile(view).then(async () => {
+                if (!view.current())
+                    return;
+                this.ready = true;
+                this.attempt = 0;
+                this.firstResolve?.();
+                this.firstReject = this.firstResolve = null;
+                const queued = this.deferred.splice(0);
+                this.deferredBytes = 0;
+                for (const waiting of queued) {
+                    if (!view.current())
+                        return;
+                    await this.dispatch(waiting, view);
+                }
+            }).catch(error => link.end(error instanceof HubProtocolError && error.code === "backpressure" ? "backpressure" : "unavailable"));
+            return;
+        }
+        const view = this.view;
+        if (frame.type === "welcome" || frame.linkEpoch !== this.epoch)
+            throw new HubProtocolError("stale");
+        const pending = this.pending.get(frame.requestId);
+        if (pending) {
+            if (frame.type !== pending.expected)
+                throw new HubProtocolError();
+            clearTimeout(pending.timer);
+            this.pending.delete(frame.requestId);
+            pending.resolve(frame);
+            return;
+        }
+        if (frame.type === "authorize.result" || frame.type === "reconcile")
+            throw new HubProtocolError();
+        if (!this.ready) {
+            const bytes = Buffer.byteLength(JSON.stringify(frame));
+            if (this.deferred.length + this.queuedWork >= HUB_LIMITS.pending || this.deferredBytes + this.queuedWorkBytes + bytes > HUB_LIMITS.sendQueue)
+                throw new HubProtocolError("backpressure");
+            this.deferredBytes += bytes;
+            this.deferred.push(frame);
+            return;
+        }
+        await this.dispatch(frame, view);
+    }
+    async dispatch(frame, view) {
+        if (!view.current() || frame.type === "welcome")
+            throw new HubProtocolError("stale");
+        if (frame.type === "revoke") {
+            if (frame.payload.revocationVersion < this.revocation)
+                throw new HubProtocolError("stale");
+            this.revocation = frame.payload.revocationVersion;
+        }
+        if (frame.type === "question") {
+            if (frame.payload.identity.issuer !== view.profile.hub.hubId || frame.payload.identity.issuerKeyId !== view.profile.issuerKeyId) {
+                this.fence();
+                this.options.hold("key-changed");
+                return;
+            }
+            // Admission awaits authorize() on this very socket. Queue work separately so its reply (or a
+            // revocation) can be processed; never block the control receive queue behind external work.
+            const bytes = Buffer.byteLength(JSON.stringify(frame));
+            if (this.queuedWork + this.deferred.length >= HUB_LIMITS.pending || this.queuedWorkBytes + this.deferredBytes + bytes > HUB_LIMITS.sendQueue)
+                throw new HubProtocolError("backpressure");
+            this.queuedWork++;
+            this.queuedWorkBytes += bytes;
+            this.workTail = this.workTail.then(async () => {
+                if (view.current())
+                    await this.options.receive(frame, view);
+            }).catch(error => {
+                if (view.current())
+                    this.link?.end(error instanceof HubProtocolError && error.code === "backpressure" ? "backpressure" : "unavailable");
+            }).finally(() => { this.queuedWork--; this.queuedWorkBytes -= bytes; });
+            return;
+        }
+        await this.options.receive(frame, view);
+    }
+    async exchange(frame, expected, view) {
+        if (!view.current() || this.pending.has(frame.requestId) || this.pending.size >= HUB_LIMITS.pending)
+            throw new HubAuthorizationError("unavailable", "backpressure");
+        const result = new Promise((resolve, reject) => {
+            const timer = setTimeout(() => { this.pending.delete(frame.requestId); reject(new HubAuthorizationError("unavailable", "uncertain")); }, HUB_LIMITS.rpcTimeout);
+            timer.unref();
+            this.pending.set(frame.requestId, { expected, resolve, reject, timer });
+        });
+        void view.send(frame).catch(() => { const p = this.pending.get(frame.requestId); if (p) {
+            clearTimeout(p.timer);
+            this.pending.delete(frame.requestId);
+            p.reject(new HubAuthorizationError("unavailable", "uncertain"));
+        } });
+        return result;
+    }
+    async send(frame) {
+        if (!this.ready || !this.view?.current())
+            throw new HubAuthorizationError("unavailable", "unavailable");
+        await this.view.send(frame);
+    }
+    async authorize(request) {
+        const view = this.view;
+        if (!this.ready || !view?.current())
+            throw new HubAuthorizationError("unavailable", "unavailable");
+        const result = await this.exchange({ v: 1, type: "authorize.request", requestId: randomUUID(), linkEpoch: this.epoch, payload: request }, "authorize.result", view);
+        if (!view.current() || result.type !== "authorize.result")
+            throw new HubAuthorizationError("stale", "stale");
+        if (!result.payload.ok)
+            throw new HubAuthorizationError("denied", result.payload.reasonCode);
+        try {
+            return verifyLease(result.payload.lease, request, { linkEpoch: this.epoch, revocationVersion: this.revocation, now: this.options.now?.() ?? Date.now() });
+        }
+        catch {
+            throw new HubAuthorizationError("stale", "stale");
+        }
+    }
+    reconnect() {
+        if (!this.current() || this.timer)
+            return;
+        const base = Math.min(30_000, 250 * 2 ** Math.min(this.attempt++, 7));
+        this.timer = setTimeout(() => { this.timer = null; this.connect(); }, Math.floor(base * (1 + (this.options.random?.() ?? Math.random()) * 0.25)));
+        this.timer.unref();
+    }
+    rejectPending() {
+        for (const p of this.pending.values()) {
+            clearTimeout(p.timer);
+            p.reject(new HubAuthorizationError("unavailable", "uncertain"));
+        }
+        this.pending.clear();
+    }
+    fence() {
+        this.stopped = true;
+        this.ready = false;
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.timer = null;
+        this.opening?.terminate();
+        this.opening = null;
+        this.link?.end();
+        this.link = null;
+        this.view = null;
+        this.rejectPending();
+        this.firstReject?.(new HubAuthorizationError("unavailable", "unavailable"));
+        this.firstReject = this.firstResolve = null;
+    }
+    async close() { this.fence(); }
+}
+//# sourceMappingURL=client.js.map

package/dist/hub/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/hub/client.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxI,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAyB,MAAM,cAAc,CAAC;AAE5E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB,IAAI;IAA+C,UAAU;IAAlF,YAAqB,IAAwC,EAAW,UAAkB;QAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;oBAA5G,IAAI;0BAA+C,UAAU;IAAgD,CAAC;CACpI;AAoBD,MAAM,OAAO,eAAe;IAqBG,OAAO;IApB5B,OAAO,GAA4B,IAAI,CAAC;IACxC,IAAI,GAAqD,IAAI,CAAC;IAC9D,IAAI,GAAyB,IAAI,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,QAAQ,GAAqB,EAAE,CAAC;IAChC,aAAa,GAAG,CAAC,CAAC;IAClB,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,UAAU,GAAG,CAAC,CAAC;IACf,eAAe,GAAG,CAAC,CAAC;IACpB,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,CAAC,CAAC;IACZ,UAAU,GAAG,KAAK,CAAC;IACnB,OAAO,GAAqB,IAAI,CAAC;IACjC,KAAK,GAAG,KAAK,CAAC;IACd,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAwB,IAAI,CAAC;IACzC,WAAW,GAAoC,IAAI,CAAC;IACnD,MAAM,GAAG,UAAU,EAAE,CAAC;IAC/B,YAA6B,OAAyB;uBAAzB,OAAO;IAAqB,CAAC;IAClD,OAAO,KAAc,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9F,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACzJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC;IACO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAChE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC;QAClG,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK;YACpG,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7H,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,SAAS,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE;YACjC,IAAI,QAAQ;gBAAE,OAAO;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAC7C,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YAC5B,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;YACpG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;QACtN,CAAC,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAChH,IAAI,IAAgD,CAAC;YACrD,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YACnG,IAAI,GAAG,IAAI,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB;gBAChI,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACrF,YAAY,CAAC,cAAc,CAAC,CAAC;oBAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC9D,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACnE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;wBAAE,OAAO;oBAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;oBAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;oBAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;oBACnG,IAAI,CAAC,aAAa,EAAE,CAAC;oBAAC,IAAI,CAAC,UAAU;wBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpM,CAAC,EAAE,CAAC,CAAC;YACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;gBACtE,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChM,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAA+C,EAAE,SAAiB,EAAE,OAAuB;QACtI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACjH,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAQ,CAAC,OAAO;mBAC9J,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3I,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACvG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAQ,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC;YACpF,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvJ,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,iBAAiB,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9I,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE;gBACnH,IAAI,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC/I,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;oBACvJ,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;gBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,4FAA4F;YAC5F,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;oBAAE,OAAO;gBAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC/D,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;wBAAE,OAAO;oBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;YACpG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACjI,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;YAClE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QACpG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,GAAG,KAAK,GAAG,UAAU,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACzL,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QACjE,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,KAAqB,EAAE,IAAmB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAChI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO;YACzD,CAAC;YACD,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,GAAG,KAAK,GAAG,UAAU,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACzL,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC;YACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5C,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACf,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC1I,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,KAAqB,EAAE,QAAgC,EAAE,IAAmB;QACjG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpK,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/K,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7N,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAqB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvI,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAAgC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACpK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB;YAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7F,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAClK,MAAM,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC;IACO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACxK,CAAC;IACO,aAAa;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC1J,CAAC;IACD,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACrG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IACvP,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC/C"}