@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/compose/member.d.ts

@@ -0,0 +1,139 @@
+import { HubStateError, type HubHoldCode, type HubStateSet } from "../db.js";
+import type { HubMountedService } from "../mount.js";
+import { HubMemberAdmissionAdapter } from "../admission.js";
+import { type HubMemberLink } from "../client.js";
+import { HubMemberJournal } from "../member-journal.js";
+import { type HubMemberProfile } from "../profile.js";
+import type { HubServerFrame } from "../types.js";
+import { type HubViewSource } from "./views.js";
+import { type HubReportOutcome, type HubRepresentativeDelivery } from "../representative.js";
+import { type HubProviderSetupReason } from "../execution/provider-setup.js";
+export declare function memberSet(hubId: string): HubStateSet;
+type Execution = typeof import("../execution/index.js");
+type Exposures = typeof import("../member/exposures.js");
+type ExposureApi = typeof import("../member/exposure-api.js");
+/** The slices the member side needs, imported lazily inside the factory. Missing: hub-incomplete, before any I/O. */
+export interface HubMemberComponents {
+    execution?: () => Promise<Execution>;
+    exposures?: () => Promise<{
+        store: Exposures;
+        api: ExposureApi;
+    }>;
+    /** S4b: only consulted when the owner configured hub_member.execution.provider. */
+    provider?: () => Promise<{
+        createHubCliProvider: typeof import("../execution/cli-provider.js").createHubCliProvider;
+        createHubModelBroker: typeof import("../execution/model-broker.js").createHubModelBroker;
+    }>;
+}
+export interface HubMemberFactoryOptions {
+    home: string;
+    components: HubMemberComponents;
+    /** S3c's current binding (its pairing state): the Hub id, or null when unpaired or disconnected. */
+    boundHub(): string | null;
+    /** The owner's local agents, each with the S4 provider it would run under (null: none). */
+    agents(): import("../member/exposure-api.js").HubMemberAgent[];
+    views?: HubViewSource;
+    /** P1's representative mode: the fleet's ordinary delivery, the agent lifecycle token and the report_result hook. */
+    representative: HubRepresentativeHost;
+    attachExposures(api: import("../member/exposure-api.js").HubMemberExposureApi | null): void;
+    attachAttention(read: (() => import("../../needs-you.js").HubExecutionAttentionInput[]) | null): void;
+    pokeAttention(): void;
+    /** The member link as S3c's pairing view shows it: online after a completed handshake, revoked when the Hub said so. */
+    linkState?(state: "online" | "offline" | "revoked"): void;
+    report(code: HubHoldCode, detail: string): void;
+    /**
+     * A non-fatal hold while the member keeps running (the provider could not be set up: every exposure stays
+     * unavailable). `reason` is a bounded setup reason (PROVIDER_SETUP_REASONS) for localized guidance.
+     */
+    notice?(code: HubHoldCode, reason: ProviderSetupReason, detail: string): void;
+    log(level: "info" | "warn", message: string, meta?: Record<string, unknown>): void;
+    now?: () => number;
+}
+export interface HubRepresentativeHost {
+    /** Derive only a coarse band from this agent's local CLI/profile. Never hands exact usage to the Hub layer. */
+    quota?(agent: string): Promise<import("../types.js").HubQuota>;
+    /** Ordinary cross-instance delivery to the published agent, with beforeInput run immediately before the IPC hand-off. */
+    deliver(input: HubRepresentativeDelivery): Promise<boolean>;
+    /** The agent's current lifecycle token (null: not a deliverable agent now). */
+    agentToken(agent: string): string | null;
+    /** attachments-v1: the agent's inbox for a question's files and its own paths for an answer's (absent: no files). */
+    files?: import("../member/attachments.js").HubMemberFilesOptions;
+    /** The report_result hook for HUB_REPORT_TARGET and the pane-failure hook for its correlation ids (null: detached). */
+    attachReports(handler: ((input: {
+        correlationId: string;
+        caller: string;
+        text: string;
+        callerCurrent(): boolean;
+        extras?: import("../../hub-report-target.js").HubReportExtras;
+    }) => Promise<HubReportOutcome> | null) | null, failed: ((correlationId: string, agent: string) => void) | null): void;
+}
+/** Bounded provider-setup reasons: S4's own list (src/hub/execution/provider-setup.ts); S4 owns the guidance text. */
+export declare const PROVIDER_SETUP_REASONS: readonly ["engine-unavailable", "engine-unsupported", "image-unconfigured", "image-mismatch", "credential-unconfigured", "unavailable"];
+export type ProviderSetupReason = HubProviderSetupReason;
+export declare class HubProviderSetupError extends HubStateError {
+    readonly reason: ProviderSetupReason;
+    constructor(reason: ProviderSetupReason, message: string);
+}
+/** The bounded reason of any provider-setup failure: S4b's typed `.reason` when it is one of ours, else "unavailable". */
+export declare function providerSetupReason(err: unknown): ProviderSetupReason;
+interface ProviderConfig {
+    backend: "claude" | "codex";
+    imageId: string;
+    model: string;
+    credentialRef: string;
+    dockerSocket?: string;
+}
+/** hub_member.execution.provider, strictly (agreed with S4b, hub-s54-provider-composition). Absent: null. */
+export declare function providerConfig(cfg: Record<string, unknown>, hubId: string): ProviderConfig | null;
+/**
+ * The member's captured binding for S4 (and S1 admission): the pairing's identity plus the link it was captured on.
+ * relink() starts a new generation for every (re)connect; a binding captured earlier then reads current() === false,
+ * as it does after fence(). S4 keeps binding objects across awaits, so this is what fences its in-flight work.
+ */
+export declare function createMemberBinding(deps: {
+    hubId: string;
+    profile: Pick<HubMemberProfile, "issuerKeyId" | "fleetId" | "owner" | "hub">;
+    live(): boolean;
+    revocationFloor(): number;
+}): {
+    relink(l: HubMemberLink): void;
+    fence(): void;
+    link: () => HubMemberLink | null;
+    binding(): Readonly<{
+        hubId: string;
+        issuerKeyId: string;
+        issuerPublicKey: import("node:crypto").KeyObject;
+        fleetId: string;
+        owner: {
+            realm: string;
+            objectId: string;
+        };
+        revocationVersion: number;
+        generation: number;
+        linkEpoch: number;
+        current: () => boolean;
+    }>;
+};
+/**
+ * S5's receive routing for the member link (agreed with S1, hub-s51-compose): question → admit → the receipt on the
+ * same link, answering the question's own requestId; revoke → fence; receipt (the Hub's ACK) → journal.acknowledge;
+ * anything else is refused. Never ordinary fleet delivery.
+ */
+export declare function createMemberReceive(deps: {
+    admission: Pick<HubMemberAdmissionAdapter, "admit" | "fence">;
+    journal: Pick<HubMemberJournal, "acknowledge">;
+    live(): boolean;
+    log(level: "info" | "warn", message: string, meta?: Record<string, unknown>): void;
+}): (frame: Exclude<HubServerFrame, {
+    type: "welcome";
+}>, l: HubMemberLink) => Promise<void>;
+/**
+ * Disconnect while the member side is not running (held, or never composed): withdraw every published exposure in the
+ * member's own store, so consent never outlives the disconnect (a later re-pair to the same Hub republishes nothing).
+ * Never composed (no member state): nothing was published. A partial set throws (the disconnect reports "unsaved").
+ */
+export declare function withdrawMemberExposuresOffline(home: string, hubId: string, now?: () => number): Promise<number>;
+export declare function createHubMemberFactory(options: HubMemberFactoryOptions): ((cfg: Record<string, unknown>, current: () => boolean) => Promise<HubMountedService>) & {
+    drain: () => Promise<void>;
+};
+export {};

package/dist/hub/compose/member.js

@@ -0,0 +1,450 @@
+/**
+ * S5b member factory (S-51 PR 2b; docs/design/hub-composition.md §5 "Member"). Called by S1's HubMount for an enabled
+ * hub_member, and only for a current, non-disconnected binding (S3c's pairing state). Builds, in order:
+ *   member DB + every migration → floors and keys (first creation only) → member-local audit → S1 journal (its
+ *   restricted outbox forwards to S4 once S4 exists) → S3c exposure store → S4 restricted execution (+ the optional
+ *   S4b provider, only when the owner configured one) → recover() → S1 admission + client with #3116's handshake and
+ *   S5's receive routing → the exposure API and Needs-you attention attached to the fleet.
+ * Either the whole service comes back or nothing stays open; unconfirmed cleanup stays owned (drain()).
+ * The data-view registry comes from a HubViewSource: EMPTY until the owner-approval flow exists (§7 Q2), so nothing
+ * is publishable or askable — fail closed.
+ */
+import { createPublicKey, randomBytes } from "node:crypto";
+import { closeSync, openSync, writeSync } from "node:fs";
+import { createHubAudit, HUB_AUDIT_MIGRATION } from "../audit/index.js";
+import { applyHubMigrations, bindHubInstance, HUB_INSTANCE_MIGRATION, HubStateError, inspectStateSet, openHubDatabase, } from "../db.js";
+import { ensurePrivateDirectory, readPrivateFile } from "../private-files.js";
+import { HubMemberAdmissionAdapter } from "../admission.js";
+import { HubMemberClient } from "../client.js";
+import { HUB_MEMBER_JOURNAL_MIGRATION, HubMemberJournal } from "../member-journal.js";
+import { createHubMemberHandshake } from "../member-reconciliation.js";
+import { HubMemberProfileStore } from "../profile.js";
+import { createQuotaPublisher } from "../member/quota.js";
+import { HubFileVersionFloor } from "../version-floor.js";
+import { EMPTY_VIEW_SOURCE } from "./views.js";
+import { HUB_REPRESENTATIVE_MIGRATION, HubRepresentativeExecution } from "../representative.js";
+import { HUB_PROVIDER_SETUP_REASONS, hubProviderSetupReason } from "../execution/provider-setup.js";
+import { HubMemberFiles } from "../member/attachments.js";
+export function memberSet(hubId) {
+    const base = `hub-member/${hubId}`;
+    return Object.freeze({
+        database: `${base}/member.sqlite`,
+        floors: Object.freeze([`${base}/floors/journal`, `${base}/floors/execution`, `${base}/floors/s3c-exposures`]),
+        keys: Object.freeze([`${base}/keys/journal.key`, `${base}/keys/content.key`]),
+    });
+}
+/** Ordered cleanup that stops at the first unconfirmed step (same rules as the server factory). */
+class Teardown {
+    steps = [];
+    add(name, run) {
+        this.steps.push({ name, run, done: false });
+    }
+    async run() {
+        for (let i = this.steps.length - 1; i >= 0; i -= 1) {
+            const step = this.steps[i];
+            if (step.done)
+                continue;
+            try {
+                await step.run();
+                step.done = true;
+            }
+            catch (err) {
+                throw new HubStateError("service-unavailable", `Hub member cleanup of ${step.name} is unconfirmed: ${err.message}`);
+            }
+        }
+    }
+}
+function createKeyFile(home, rel) {
+    ensurePrivateDirectory(home, rel.slice(0, rel.lastIndexOf("/")));
+    const fd = openSync(`${home}/${rel}`, "wx", 0o600);
+    try {
+        writeSync(fd, randomBytes(32).toString("base64"));
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function readKey(home, rel) {
+    const key = Buffer.from(readPrivateFile(home, rel, 256).trim(), "base64");
+    if (key.length !== 32)
+        throw new HubStateError("hub-storage", `${rel} is not a 32-byte key`);
+    return key;
+}
+/** Bounded provider-setup reasons: S4's own list (src/hub/execution/provider-setup.ts); S4 owns the guidance text. */
+export const PROVIDER_SETUP_REASONS = HUB_PROVIDER_SETUP_REASONS;
+export class HubProviderSetupError extends HubStateError {
+    reason;
+    constructor(reason, message) {
+        super("hub-provider-unavailable", message);
+        this.reason = reason;
+        this.name = "HubProviderSetupError";
+    }
+}
+/** The bounded reason of any provider-setup failure: S4b's typed `.reason` when it is one of ours, else "unavailable". */
+export function providerSetupReason(err) {
+    if (err instanceof HubProviderSetupError)
+        return err.reason;
+    return hubProviderSetupReason(err) ?? "unavailable";
+}
+const PROVIDER_KEYS = new Set(["backend", "imageId", "model", "credentialRef", "dockerSocket"]);
+/** hub_member.execution.provider, strictly (agreed with S4b, hub-s54-provider-composition). Absent: null. */
+export function providerConfig(cfg, hubId) {
+    const execution = cfg.execution;
+    if (execution === undefined)
+        return null;
+    const provider = execution && typeof execution === "object" ? execution.provider : undefined;
+    if (provider === undefined)
+        return null;
+    const p = provider;
+    const bad = (why, reason = "unavailable") => {
+        throw new HubProviderSetupError(reason, `hub_member.execution.provider: ${why}`);
+    };
+    if (!p || typeof p !== "object" || Array.isArray(p))
+        bad("must be an object");
+    for (const k of Object.keys(p))
+        if (!PROVIDER_KEYS.has(k))
+            bad(`unknown setting "${k}"`);
+    if (p.backend !== "claude" && p.backend !== "codex")
+        bad('backend must be "claude" or "codex"');
+    if (typeof p.imageId !== "string" || !/^sha256:[0-9a-f]{64}$/.test(p.imageId))
+        bad("imageId must be sha256:<64 hex>", "image-unconfigured");
+    if (typeof p.model !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/.test(p.model))
+        bad("model is not a model id");
+    if (p.credentialRef !== `file:hub-member/${hubId}/secrets/model-api`)
+        bad(`credentialRef must be file:hub-member/${hubId}/secrets/model-api`, "credential-unconfigured");
+    if (p.dockerSocket !== undefined && (typeof p.dockerSocket !== "string" || !/^\/(var\/)?run\/[A-Za-z0-9._/-]+\.sock$/.test(p.dockerSocket))) {
+        bad("dockerSocket must be a local unix socket under /var/run or /run");
+    }
+    return p;
+}
+const execAction = (kind) => `execution.${kind.toLowerCase().replace(/[^a-z0-9.-]/g, "-")}`.slice(0, 128);
+/**
+ * The member's captured binding for S4 (and S1 admission): the pairing's identity plus the link it was captured on.
+ * relink() starts a new generation for every (re)connect; a binding captured earlier then reads current() === false,
+ * as it does after fence(). S4 keeps binding objects across awaits, so this is what fences its in-flight work.
+ */
+export function createMemberBinding(deps) {
+    let generation = 0;
+    let link = null;
+    const issuerPublicKey = createPublicKey(deps.profile.hub.issuerPublicKey);
+    return {
+        relink(l) {
+            link = l;
+            generation += 1;
+        },
+        fence() {
+            generation += 1;
+        },
+        link: () => link,
+        binding() {
+            const gen = generation;
+            const captured = link;
+            return Object.freeze({
+                hubId: deps.hubId,
+                issuerKeyId: deps.profile.issuerKeyId,
+                issuerPublicKey,
+                fleetId: deps.profile.fleetId,
+                owner: deps.profile.owner,
+                revocationVersion: captured?.revocationVersion ?? deps.revocationFloor(),
+                generation: gen,
+                linkEpoch: captured?.linkEpoch ?? 0,
+                current: () => deps.live() && generation === gen && (captured === null || (link === captured && captured.current())),
+            });
+        },
+    };
+}
+/**
+ * S5's receive routing for the member link (agreed with S1, hub-s51-compose): question → admit → the receipt on the
+ * same link, answering the question's own requestId; revoke → fence; receipt (the Hub's ACK) → journal.acknowledge;
+ * anything else is refused. Never ordinary fleet delivery.
+ */
+export function createMemberReceive(deps) {
+    return async (frame, l) => {
+        if (!deps.live() || !l.current())
+            return;
+        if (frame.type === "question") {
+            const receipt = await deps.admission.admit(frame.payload);
+            if (!l.current())
+                return;
+            await l.send({ v: 1, type: "receipt", requestId: frame.requestId, linkEpoch: l.linkEpoch, payload: receipt });
+            return;
+        }
+        if (frame.type === "revoke")
+            return deps.admission.fence(frame.payload);
+        if (frame.type === "receipt")
+            return deps.journal.acknowledge(frame.payload);
+        deps.log("warn", "Hub frame not expected on the member", { type: frame.type });
+        throw new HubStateError("service-unavailable", `unexpected ${frame.type} frame`);
+    };
+}
+/**
+ * Disconnect while the member side is not running (held, or never composed): withdraw every published exposure in the
+ * member's own store, so consent never outlives the disconnect (a later re-pair to the same Hub republishes nothing).
+ * Never composed (no member state): nothing was published. A partial set throws (the disconnect reports "unsaved").
+ */
+export async function withdrawMemberExposuresOffline(home, hubId, now = Date.now) {
+    const set = memberSet(hubId);
+    if (inspectStateSet(home, set) === "new")
+        return 0;
+    const mod = await import("../member/exposures.js");
+    const db = openHubDatabase(home, set.database, { create: false });
+    try {
+        const audit = createHubAudit({ db, contentKey: readKey(home, set.keys[1]), now });
+        const store = new mod.HubExposureStore(db, { floor: new HubFileVersionFloor(home, set.floors[2]), audit, binding: () => null, views: new Map(), now });
+        let withdrawn = 0;
+        for (const row of store.list()) {
+            const committed = row.committed;
+            if (committed && committed.exposure.state === "published") {
+                store.withdraw(committed.exposure.id, committed.exposure.revision);
+                withdrawn += 1;
+            }
+        }
+        return withdrawn;
+    }
+    finally {
+        db.close();
+    }
+}
+export function createHubMemberFactory(options) {
+    const now = options.now ?? Date.now;
+    const views = options.views ?? EMPTY_VIEW_SOURCE;
+    let unconfirmed = null;
+    const createMember = async function createMember(cfg, current) {
+        if (unconfirmed) {
+            try {
+                await unconfirmed.run();
+                unconfirmed = null;
+            }
+            catch (err) {
+                options.report("service-unavailable", err.message);
+                throw err;
+            }
+        }
+        const teardown = new Teardown();
+        const fail = async (err) => {
+            try {
+                await teardown.run();
+            }
+            catch (cleanupErr) {
+                unconfirmed = teardown;
+                options.report("service-unavailable", cleanupErr.message);
+                throw cleanupErr;
+            }
+            options.report(err instanceof HubStateError ? err.code : "service-unavailable", err.message);
+            throw err;
+        };
+        try {
+            // 0. Every slice present and a current binding, before any I/O.
+            if (!options.components.execution || !options.components.exposures) {
+                throw new HubStateError("hub-incomplete", "the Hub member side (S4 / S3c) is not in this build");
+            }
+            const hubId = options.boundHub();
+            if (!hubId)
+                throw new HubStateError("hub-member-pairing", "this fleet is not paired with a Hub (or was disconnected)");
+            let profile;
+            try {
+                profile = new HubMemberProfileStore(options.home, hubId).readProfile();
+            }
+            catch (err) {
+                throw new HubStateError("hub-member-pairing", `the Hub pairing is missing or invalid: ${err.message}`);
+            }
+            const [execution, exposureMods] = await Promise.all([options.components.execution(), options.components.exposures()]);
+            // 1. The member state set: new (create all) or complete (open); partial is refused.
+            const set = memberSet(hubId);
+            const state = inspectStateSet(options.home, set);
+            const db = openHubDatabase(options.home, set.database, { create: state === "new" });
+            teardown.add("the member database", () => db.close());
+            const [journalFloor, executionFloor, exposureFloor] = set.floors.map((f) => new HubFileVersionFloor(options.home, f));
+            if (state === "new") {
+                for (const floor of [journalFloor, executionFloor, exposureFloor])
+                    floor.initialize();
+                for (const key of set.keys)
+                    createKeyFile(options.home, key);
+            }
+            applyHubMigrations(db, [
+                HUB_INSTANCE_MIGRATION,
+                HUB_AUDIT_MIGRATION,
+                HUB_MEMBER_JOURNAL_MIGRATION,
+                { component: "s4-execution", version: 1, up: execution.migrateHubExecution },
+                exposureMods.store.HUB_EXPOSURE_MIGRATION,
+                HUB_REPRESENTATIVE_MIGRATION,
+            ]);
+            bindHubInstance(db, hubId, state, now());
+            // 2. Member-local audit; S1, S4 and S3c append inside their own transactions on this DB.
+            const audit = createHubAudit({ db, contentKey: readKey(options.home, set.keys[1]), now });
+            // 3. S1 journal: its restricted outbox forwards to S4's, callable only once S4 exists and has recovered.
+            let outbox = null;
+            const forwarding = {
+                insert: (...args) => {
+                    if (!outbox)
+                        throw new HubStateError("service-unavailable", "the restricted outbox is not ready");
+                    return outbox.insert(...args);
+                },
+                lookup: (...args) => {
+                    if (!outbox)
+                        throw new HubStateError("service-unavailable", "the restricted outbox is not ready");
+                    return outbox.lookup(...args);
+                },
+            };
+            const journal = new HubMemberJournal(db, { hubId, encryptionKey: readKey(options.home, set.keys[0]), floor: journalFloor, outbox: forwarding, now });
+            // 4. S3c exposure store over the approved views (empty until §7 Q2: nothing is publishable).
+            const registry = views.load();
+            const exposures = new exposureMods.store.HubExposureStore(db, {
+                floor: exposureFloor,
+                audit,
+                binding: () => (profile ? { owner: profile.owner, fleetId: profile.fleetId } : null),
+                views: registry,
+                now,
+            });
+            // 5. P1's only execution path: the representative adapter (docs/design/hub-representative-agent.md). No S4 service
+            // or S4b provider is constructed; an old hub_member.execution.provider block is ignored (one info line, no hold).
+            if (state === "new") {
+                journal.initialize();
+                exposures.initialize();
+            }
+            if (cfg.execution?.provider !== undefined) {
+                options.log("info", "hub_member.execution.provider is ignored: P1 Hub answers come from the published agent (representative mode)");
+            }
+            let fenced = false;
+            const live = () => !fenced && current();
+            const links = createMemberBinding({
+                hubId,
+                profile,
+                live,
+                revocationFloor: () => journal.revocationVersion(),
+            });
+            const binding = links.binding;
+            let client = null;
+            let online = null;
+            const service = new HubRepresentativeExecution({
+                db,
+                journal,
+                binding,
+                localExposure: (id) => exposures.localExposure(id),
+                agentToken: (agent) => options.representative.agentToken(agent),
+                authorize: (request) => (client ? client.authorize(request) : Promise.reject(new HubStateError("service-unavailable", "not connected"))),
+                link: () => (online && online.current() && links.link() === online ? online : null),
+                deliver: (input) => options.representative.deliver(input),
+                ...(options.representative.files ? { files: new HubMemberFiles(options.representative.files) } : {}),
+                audit: (event, database) => audit.appendInTransaction({
+                    id: randomBytes(16).toString("hex"),
+                    sequence: 0,
+                    at: now(),
+                    requestId: event.messageId ?? "s5-representative",
+                    actor: { kind: "local-host" },
+                    action: event.action,
+                    result: event.result,
+                    policyVersion: 0,
+                    ...(event.messageId ? { messageId: event.messageId } : {}),
+                    ...(event.exposureId ? { exposureId: event.exposureId } : {}),
+                    ...(event.reasonCode ? { reasonCode: event.reasonCode.slice(0, 64) } : {}),
+                }, database),
+                attentionChanged: () => options.pokeAttention(),
+                log: options.log,
+                now,
+            });
+            teardown.add("the representative adapter", () => service.close());
+            service.recover();
+            outbox = service.restrictedOutbox();
+            // 6. S1 admission + client: #3116's handshake on (re)connect, S5's receive routing.
+            const sender = exposureMods.store.exposureSnapshotSender(exposures);
+            const quota = createQuotaPublisher({
+                exposures: () => exposures.list().flatMap(row => row.committed?.exposure.state === "published"
+                    ? [{ exposureId: row.committed.exposure.id, agent: row.agent }] : []),
+                read: agent => options.representative.quota?.(agent) ?? Promise.resolve({ band: "unknown" }),
+                now,
+            });
+            teardown.add("quota updates", () => quota.stop());
+            const handshake = createHubMemberHandshake({ journal, publishSnapshot: (l) => sender.publishSnapshot(l) });
+            const admission = new HubMemberAdmissionAdapter({
+                journal,
+                transport: { start: async () => { }, send: (f) => client.send(f), authorize: (r) => client.authorize(r), close: async () => { } },
+                binding: () => {
+                    const captured = links.link();
+                    return { profile, linkEpoch: captured?.linkEpoch ?? 0, revocationVersion: captured?.revocationVersion ?? journal.revocationVersion(), current: () => live() && !!captured && links.link() === captured && captured.current() };
+                },
+                exposure: (id) => exposures.exposure(id),
+                fenceLocal: (messageId) => service.fence(messageId),
+                hold: (messageId, reason) => options.log("warn", "Hub question held", { messageId, reason }),
+                now,
+            });
+            const receive = createMemberReceive({ admission, journal, live, log: options.log });
+            client = new HubMemberClient({
+                home: options.home,
+                hubId,
+                memberOrigin: profile.hub.memberOrigin,
+                current: live,
+                reconcile: async (l) => {
+                    links.relink(l);
+                    online = null;
+                    await handshake(l);
+                    if (l.current() && live()) {
+                        online = l;
+                        quota.start(l);
+                        options.linkState?.("online");
+                        // Questions admitted while offline (or before a restart, with no input yet) go out on this link.
+                        service.pump();
+                    }
+                },
+                receive,
+                hold: (code) => {
+                    quota.stop();
+                    options.linkState?.(code === "revoked" ? "revoked" : "offline");
+                    options.log("warn", "Hub link held", { code });
+                },
+                now,
+            });
+            teardown.add("the Hub connection", () => client?.close());
+            const api = exposureMods.api.createHubMemberExposureApi({
+                store: exposures,
+                // P1 representative agent (docs/design/hub-representative-agent.md): the owner shares a configured agent.
+                agents: options.agents,
+                afterCommit: () => sender.afterCommit(),
+                // S5's readiness: the agent's lifecycle token, recorded against the consent inside S3c's atomic publish.
+                readinessCandidate: (candidate) => service.readinessCandidate(candidate),
+            });
+            return {
+                async start() {
+                    if (!live())
+                        throw new HubStateError("service-unavailable", "the Hub member was switched off while starting");
+                    options.attachAttention(() => service.attentionItems());
+                    options.attachExposures(api);
+                    options.representative.attachReports((input) => service.report(input), (cid, agent) => service.deliveryFailed(cid, agent));
+                    teardown.add("the fleet attachments", () => {
+                        options.representative.attachReports(null, null);
+                        options.attachExposures(null);
+                        options.attachAttention(null);
+                    });
+                    await client.start();
+                },
+                fence() {
+                    fenced = true;
+                    quota.stop();
+                    links.fence();
+                    client?.fence();
+                    options.representative.attachReports(null, null);
+                    options.attachExposures(null);
+                    options.linkState?.("offline");
+                },
+                async close() {
+                    fenced = true;
+                    await teardown.run();
+                },
+                /** Diagnostics seams (not part of HubMountedService). */
+                binding,
+                representative: service,
+            };
+        }
+        catch (err) {
+            return fail(err);
+        }
+    };
+    const drain = async () => {
+        if (!unconfirmed)
+            return;
+        await unconfirmed.run();
+        unconfirmed = null;
+    };
+    return Object.assign(createMember, { drain });
+}
+//# sourceMappingURL=member.js.map

package/dist/hub/compose/member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member.js","sourceRoot":"","sources":["../../../src/hub/compose/member.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAsB,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,eAAe,EACf,eAAe,GAGhB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAsB,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAA4B,MAAM,sBAAsB,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAsB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAyD,MAAM,sBAAsB,CAAC;AACvJ,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAA+B,MAAM,gCAAgC,CAAC;AACjI,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,cAAc,KAAK,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,GAAG,IAAI,gBAAgB;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,iBAAiB,EAAE,GAAG,IAAI,mBAAmB,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC7G,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,mBAAmB,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AA0DD,mGAAmG;AACnG,MAAM,QAAQ;IACK,KAAK,GAA0D,EAAE,CAAC;IACnF,GAAG,CAAC,IAAY,EAAE,GAAkB;QAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,GAAG;QACP,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI;gBAAE,SAAS;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,yBAAyB,IAAI,CAAC,IAAI,oBAAqB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACjI,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,GAAW;IAC9C,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,GAAG,GAAG,uBAAuB,CAAC,CAAC;IAC7F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sHAAsH;AACtH,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAEjE,MAAM,OAAO,qBAAsB,SAAQ,aAAa;IACjC,MAAM;IAA3B,YAAqB,MAA2B,EAAE,OAAe;QAC/D,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;sBADxB,MAAM;QAEzB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AACD,0HAA0H;AAC1H,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC5D,OAAO,sBAAsB,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC;AACtD,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;AAShG,6GAA6G;AAC7G,MAAM,UAAU,cAAc,CAAC,GAA4B,EAAE,KAAa;IACxE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,SAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1H,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,MAAM,GAAwB,aAAa,EAAS,EAAE;QAC9E,MAAM,IAAI,qBAAqB,CAAC,MAAM,EAAE,kCAAkC,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,iCAAiC,EAAE,oBAAoB,CAAC,CAAC;IAC5I,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,aAAa,KAAK,mBAAmB,KAAK,oBAAoB;QAAE,GAAG,CAAC,yCAAyC,KAAK,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;IACzK,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC5I,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAA8B,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAElH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAKnC;IACC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1E,OAAO;QACL,MAAM,CAAC,CAAgB;YACrB,IAAI,GAAG,CAAC,CAAC;YACT,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,KAAK;YACH,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;QAChB,OAAO;YACL,MAAM,GAAG,GAAG,UAAU,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;gBACrC,eAAe;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,IAAI,IAAI,CAAC,eAAe,EAAE;gBACxE,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC;gBACnC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;aACrH,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAKnC;IACC,OAAO,KAAK,EAAE,KAAmD,EAAE,CAAgB,EAAiB,EAAE;QACpG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE;YAAE,OAAO;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE;gBAAE,OAAO;YACzB,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9G,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,sCAAsC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,cAAc,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC;IACnF,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAAY,EAAE,KAAa,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAC5G,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxJ,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAChC,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1D,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnE,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;IACjD,IAAI,WAAW,GAAoB,IAAI,CAAC;IAExC,MAAM,YAAY,GAAG,KAAK,UAAU,YAAY,CAAC,GAA4B,EAAE,OAAsB;QACnG,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;gBACxB,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBAC9D,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAY,EAAkB,EAAE;YAClD,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,WAAW,GAAG,QAAQ,CAAC;gBACvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAG,UAAoB,CAAC,OAAO,CAAC,CAAC;gBACrE,MAAM,UAAU,CAAC;YACnB,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACxG,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC;QACF,IAAI,CAAC;YACH,gEAAgE;YAChE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBACnE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,qDAAqD,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,2DAA2D,CAAC,CAAC;YACvH,IAAI,OAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,0CAA2C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAEtH,oFAAoF;YACpF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,MAAM,EAAE,GAAsB,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;YACvG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtH,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,KAAK,MAAM,KAAK,IAAI,CAAC,YAAa,EAAE,cAAe,EAAE,aAAc,CAAC;oBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI;oBAAE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,kBAAkB,CAAC,EAAE,EAAE;gBACrB,sBAAsB;gBACtB,mBAAmB;gBACnB,4BAA4B;gBAC5B,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,mBAAmB,EAAE;gBAC5E,YAAY,CAAC,KAAK,CAAC,sBAAsB;gBACzC,4BAA4B;aAC7B,CAAC,CAAC;YACH,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAEzC,yFAAyF;YACzF,MAAM,KAAK,GAAkB,cAAc,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAE1G,yGAAyG;YACzG,IAAI,MAAM,GAA+B,IAAI,CAAC;YAC9C,MAAM,UAAU,GAAwB;gBACtC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;oBAClB,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;oBAClG,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChC,CAAC;gBACD,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;oBAClB,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;oBAClG,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChC,CAAC;aACF,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,KAAK,EAAE,YAAa,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YAEvJ,6FAA6F;YAC7F,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE;gBAC5D,KAAK,EAAE,aAAc;gBACrB,KAAK;gBACL,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpF,KAAK,EAAE,QAAQ;gBACf,GAAG;aACJ,CAAC,CAAC;YAEH,mHAAmH;YACnH,kHAAkH;YAClH,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrB,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,CAAC;YACD,IAAK,GAA8C,CAAC,SAAS,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,8GAA8G,CAAC,CAAC;YACtI,CAAC;YACD,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,mBAAmB,CAAC;gBAChC,KAAK;gBACL,OAAO;gBACP,IAAI;gBACJ,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE;aACnD,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,MAAM,GAA2B,IAAI,CAAC;YAC1C,IAAI,MAAM,GAAyB,IAAI,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;gBAC7C,EAAE;gBACF,OAAO;gBACP,OAAO;gBACP,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC/D,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,CAAC;gBACxI,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzD,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpG,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CACzB,KAAK,CAAC,mBAAmB,CACvB;oBACE,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACnC,QAAQ,EAAE,CAAC;oBACX,EAAE,EAAE,GAAG,EAAE;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,mBAAmB;oBACjD,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;oBAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,aAAa,EAAE,CAAC;oBAChB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzD,EACnB,QAAQ,CACT;gBACH,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE;gBAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG;aACJ,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAEpC,oFAAoF;YACpF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC;gBACjC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,KAAK,WAAW;oBAC5F,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC5F,GAAG;aACJ,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3G,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC;gBAC9C,OAAO;gBACP,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;gBACjI,OAAO,EAAE,GAAG,EAAE;oBACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC9B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjO,CAAC;gBACD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxC,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBACnD,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;gBAC5F,GAAG;aACJ,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACpF,MAAM,GAAG,IAAI,eAAe,CAAC;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK;gBACL,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;gBACtC,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBACrB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAChB,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;oBACnB,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;wBAC1B,MAAM,GAAG,CAAC,CAAC;wBACX,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBACf,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;wBAC9B,iGAAiG;wBACjG,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC;gBACD,OAAO;gBACP,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBACb,KAAK,CAAC,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAChE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,GAAG;aACJ,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1D,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC;gBACtD,KAAK,EAAE,SAAS;gBAChB,0GAA0G;gBAC1G,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBACvC,yGAAyG;gBACzG,kBAAkB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC;aACzE,CAAC,CAAC;YAEH,OAAO;gBACL,KAAK,CAAC,KAAK;oBACT,IAAI,CAAC,IAAI,EAAE;wBAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;oBAC9G,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;oBACxD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;oBAC7B,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC3H,QAAQ,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE;wBACzC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACjD,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;wBAC9B,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAChC,CAAC,CAAC,CAAC;oBACH,MAAM,MAAO,CAAC,KAAK,EAAE,CAAC;gBACxB,CAAC;gBACD,KAAK;oBACH,MAAM,GAAG,IAAI,CAAC;oBACd,KAAK,CAAC,IAAI,EAAE,CAAC;oBACb,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM,EAAE,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACjD,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC9B,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBACD,KAAK,CAAC,KAAK;oBACT,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACvB,CAAC;gBACD,yDAAyD;gBACzD,OAAO;gBACP,cAAc,EAAE,OAAO;aACuB,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACxB,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC"}