@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/http/compose.js

@@ -0,0 +1,518 @@
+/**
+ * AgEnD Hub P1, slice 3 (server side): S3's composition entry (docs/design/hub-composition.md §5 step 5, §6).
+ *
+ * `createHubHttp(deps)` → `{ handle, receive, close }` plus `HUB_HTTP_MIGRATIONS`. S5's server factory imports this file
+ * lazily, only with `hub.enabled` on and the manifest sealed; nothing here runs on the ordinary off path.
+ *
+ * - `handle(req, res)` serves the Hub web listener (its own origin; never the fleet's):
+ *   - `/hub/v1/*`, with methods enumerated per path;
+ *   - the Hub workspace pages (`/`, `/web`, `/ui`, `/ui/hub*`), drawn Hub-only;
+ *   - the Hub's lazy modules under `/ui/js/` and the app's public `/assets/`.
+ *   Anything else returns false (the ordinary not-found is S5's). It reads exactly one cookie,
+ *   `__Host-agend_hub_<hubId>`, and never a fleet cookie, bearer token or member credential.
+ * - `receive(frame, link)` is S1's HubServer callback for an authenticated member link.
+ * - `close()` forgets the links. S5 closes the DB.
+ */
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { HubProtocolError, parseStrictJson } from "../validation.js";
+import { personKeyString } from "../identity.js";
+import { HubSessions, hubClearCookie, hubSetCookie } from "../sessions.js";
+import { HubCatalogService } from "../catalog.js";
+import { HubPolicyService } from "../policy.js";
+import { HubRoomsService } from "../rooms.js";
+import { HubAttachmentRefused } from "../attachments/store.js";
+import { HubQuotaService } from "../quota.js";
+import { HubCore, personByLogin } from "./core.js";
+import { HUB_HTTP_MIGRATIONS } from "./schema.js";
+import { serveHubWorkspaceShell } from "../../web-api.js";
+import { servePublicAsset } from "../../auth-api.js";
+export { HUB_HTTP_MIGRATIONS };
+/** S5's lazy entry (HubHttpEntry): this module itself — `createHubHttp` and `migrations`. */
+export const migrations = HUB_HTTP_MIGRATIONS;
+/** The Hub's lazy modules a Hub page may load (the fleet's /ui/js/ modules are never served here). */
+export const HUB_UI_MODULES = Object.freeze(["panel-hub.js", "hub-client.js", "hub-strings.js", "hub-chat-store.js", "hub-chat-strings.js", "hub-quota.js", "hub-owner-strings.js", "hub-button-actions.js"]);
+const BODY_LIMIT = 96 * 1024;
+const UPLOADS_PER_SESSION = 2, UPLOADS_TOTAL = 8;
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+const HEX64 = /^[a-f0-9]{64}$/;
+const API_HEADERS = { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "no-referrer", "Content-Security-Policy": "default-src 'none'; frame-ancestors 'none'" };
+class SignedOut extends Error {
+}
+class HttpError extends Error {
+    status;
+    code;
+    constructor(status, code) {
+        super(code);
+        this.status = status;
+        this.code = code;
+    }
+}
+const STATUS = { invalid: 400, denied: 403, revoked: 403, "not-found": 404, conflict: 409, stale: 409, expired: 410,
+    backpressure: 429, unavailable: 503, uncertain: 503, incompatible: 400 };
+function send(res, status, body, headers = {}) {
+    if (res.headersSent || res.writableEnded)
+        return;
+    res.writeHead(status, { ...API_HEADERS, ...headers });
+    res.end(JSON.stringify(body));
+}
+async function readBody(req) {
+    const type = String(req.headers["content-type"] ?? "").split(";")[0].trim().toLowerCase();
+    if (type !== "application/json" || req.headers["content-encoding"] !== undefined)
+        throw new HttpError(415, "invalid");
+    const chunks = [];
+    let bytes = 0;
+    for await (const part of req) {
+        const b = Buffer.from(part);
+        bytes += b.length;
+        if (bytes > BODY_LIMIT) {
+            req.destroy();
+            throw new HttpError(413, "invalid");
+        }
+        chunks.push(b);
+    }
+    const value = parseStrictJson(Buffer.concat(chunks), BODY_LIMIT);
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new HubProtocolError("invalid");
+    return value;
+}
+/** The upload's name: X-File-Name, percent-encoded UTF-8, one path segment. */
+function fileName(v) {
+    let name;
+    try {
+        name = typeof v === "string" && v.length <= 1024 ? decodeURIComponent(v) : "";
+    }
+    catch {
+        name = "";
+    }
+    if (!name || Buffer.byteLength(name, "utf8") > 255 || /[\\/\u0000-\u001f\u007f]/.test(name) || name.startsWith(".") || name.trim() !== name)
+        throw new HubProtocolError("invalid");
+    return name;
+}
+/** A raw request body, never decoded, cut off past `limit` bytes. */
+async function readRaw(req, limit) {
+    if (req.headers["content-encoding"] !== undefined)
+        throw new HttpError(415, "invalid");
+    const declared = req.headers["content-length"];
+    if (declared !== undefined && (!/^\d{1,10}$/.test(declared) || Number(declared) > limit)) {
+        req.resume();
+        throw new HttpError(413, "too-large");
+    }
+    const chunks = [];
+    let bytes = 0;
+    for await (const part of req) {
+        const b = Buffer.from(part);
+        bytes += b.length;
+        if (bytes > limit) {
+            req.destroy();
+            throw new HttpError(413, "too-large");
+        }
+        chunks.push(b);
+    }
+    if (bytes === 0)
+        throw new HubProtocolError("invalid");
+    return Buffer.concat(chunks);
+}
+const str = (v, max = 256) => { if (typeof v !== "string" || !v || v.length > max)
+    throw new HubProtocolError("invalid"); return v; };
+const uuid = (v) => { if (typeof v !== "string" || !UUID.test(v))
+    throw new HubProtocolError("invalid"); return v; };
+const int = (v) => { const n = typeof v === "string" && /^\d{1,15}$/.test(v) ? Number(v) : v; if (!Number.isSafeInteger(n) || n < 0)
+    throw new HubProtocolError("invalid"); return n; };
+/** Build S3's HTTP handler and member receiver over S5's deps. `sql` is S5's `hubTxDatabase`. */
+export function createHubHttp(deps, sql) {
+    const core = new HubCore(deps, sql);
+    const sessions = new HubSessions(core), catalog = new HubCatalogService(core), policy = new HubPolicyService(core);
+    const rooms = new HubRoomsService(core, policy);
+    const quota = new HubQuotaService(core);
+    const uiDir = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "ui");
+    let closed = false;
+    const live = () => !closed && core.live();
+    /** Upload bodies being read now, per session and in all (each up to the file limit in memory). */
+    const uploading = new Map();
+    let uploadingTotal = 0;
+    /** One API request: method and path enumerated, mutations same-origin with the session's CSRF token. */
+    async function api(req, res, path, query) {
+        const method = req.method ?? "GET";
+        if (!live())
+            throw new HubProtocolError("unavailable");
+        const ctx = sessions.context(req);
+        const mutation = method !== "GET" && method !== "HEAD";
+        if (mutation && !sessions.sameOrigin(req))
+            throw new HttpError(403, "cross-site");
+        /** A session for this request (the second check after the body re-runs it inside each service call). */
+        const signedIn = () => { const s = sessions.session(ctx.token); if (!s)
+            throw new SignedOut(); return s; };
+        const csrf = () => { const s = signedIn(); if (!sessions.csrfOk(req, s.token))
+            throw new HttpError(403, "csrf"); return s; };
+        const body = async () => { const b = await readBody(req); if (!live())
+            throw new HubProtocolError("unavailable"); return b; };
+        const guard = async (work) => {
+            try {
+                return await work();
+            }
+            catch (e) {
+                if (e instanceof HubProtocolError && e.code === "revoked" && !sessions.session(ctx.token))
+                    throw new SignedOut();
+                throw e;
+            }
+        };
+        const m = (re) => re.exec(path);
+        let r;
+        if (path === "/hub/v1/session") {
+            if (method === "GET") {
+                const s = sessions.session(ctx.token);
+                return send(res, 200, s ? { signedIn: true, displayName: s.displayName, login: s.login, admin: s.admin, csrf: s.csrf, hub: { name: deps.config.name } }
+                    : { signedIn: false, hub: { name: deps.config.name } });
+            }
+            if (method === "POST") {
+                const b = await body();
+                const out = await sessions.signIn(b.login, b.password);
+                const { csrf: token, ...view } = out.view;
+                return send(res, 200, { signedIn: true, displayName: view.displayName, login: view.login, admin: view.admin, csrf: token, hub: { name: deps.config.name } }, { "Set-Cookie": hubSetCookie(deps.config.hubId, out.token, out.maxAgeMs) });
+            }
+            if (method === "DELETE") {
+                csrf();
+                sessions.signOut(ctx.token);
+                return send(res, 200, { signedIn: false }, { "Set-Cookie": hubClearCookie(deps.config.hubId) });
+            }
+            throw new HttpError(405, "method");
+        }
+        if (path === "/hub/v1/exposures" || path === "/hub/v1/grants") {
+            if (method === "GET") {
+                signedIn();
+                const view = await guard(() => catalog.visible(ctx));
+                return send(res, 200, { ...view, mine: view.mine.map(e => ({ ...e, quotaVisible: quota.visible(e.id), ...quota.projection(e.id) })) });
+            }
+            if (path === "/hub/v1/grants" && method === "POST") {
+                csrf();
+                const b = await body();
+                const g = await guard(() => catalog.grant(ctx, { exposureId: uuid(b.exposureId), exposureRevision: int(b.exposureRevision), login: str(b.login), days: int(b.days) }));
+                return send(res, 200, { grant: g });
+            }
+            throw new HttpError(405, "method");
+        }
+        if ((r = m(/^\/hub\/v1\/grants\/([^/]+)$/))) {
+            if (method !== "DELETE")
+                throw new HttpError(405, "method");
+            csrf();
+            await guard(() => catalog.revokeGrant(ctx, uuid(r[1]), int(query.get("revision"))));
+            return send(res, 200, { ok: true });
+        }
+        // #3226 C: who asked the owner's agent and when (no content), for its owner only.
+        if ((r = m(/^\/hub\/v1\/exposures\/([^/]+)\/activity$/))) {
+            if (method !== "GET")
+                throw new HttpError(405, "method");
+            signedIn();
+            return send(res, 200, { activity: await guard(() => rooms.activity(ctx, uuid(r[1]))) });
+        }
+        if ((r = m(/^\/hub\/v1\/exposures\/([^/]+)\/freeze$/))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            await guard(() => catalog.freeze(ctx, uuid(r[1]), int(b.revision), false));
+            return send(res, 200, { ok: true });
+        }
+        if ((r = m(/^\/hub\/v1\/exposures\/([^/]+)\/quota$/))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            if (typeof b.visible !== "boolean" || Object.keys(b).some(k => !["revision", "visible"].includes(k)))
+                throw new HubProtocolError("invalid");
+            const exposureId = uuid(r[1]);
+            await guard(() => quota.setVisible(ctx, exposureId, int(b.revision), b.visible));
+            return send(res, 200, { quotaVisible: b.visible, ...quota.projection(exposureId) });
+        }
+        if (path === "/hub/v1/rooms") {
+            if (method === "GET") {
+                signedIn();
+                return send(res, 200, { rooms: (await guard(() => rooms.list(ctx))).map(room => ({ ...room, ...quota.roomProjection(room) })) });
+            }
+            if (method === "POST") {
+                csrf();
+                const b = await body();
+                const room = await guard(() => rooms.open(ctx, uuid(b.exposureId), uuid(b.grantId)));
+                return send(res, 200, { room: { id: room.id, exposureId: room.exposureId, grantId: room.grantId, state: room.state, exposureName: room.exposure.displayName, features: rooms.features(room.exposure.fleetId), ...quota.projection(room.exposureId) } });
+            }
+            throw new HttpError(405, "method");
+        }
+        if ((r = m(/^\/hub\/v1\/rooms\/([^/]+)\/buttons$/))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            return send(res, 200, { receipt: await guard(() => rooms.buttons.click(ctx, uuid(r[1]), b)) });
+        }
+        if ((r = m(/^\/hub\/v1\/rooms\/([^/]+)\/messages$/))) {
+            const roomId = uuid(r[1]);
+            if (method === "GET") {
+                const s = signedIn();
+                // #3226 B + G: the room comes with its entries, fresh each poll — its view (state, grant's end, what its link
+                // negotiated) and its quota projection (G; absent when hidden or not shared).
+                const entries = await guard(() => rooms.read(ctx, roomId, int(query.get("after") ?? "0"), s.sessionId));
+                const view = await guard(() => rooms.view(ctx, roomId));
+                return send(res, 200, { entries, room: { ...view, ...quota.roomProjection(view) } });
+            }
+            if (method === "POST") {
+                csrf();
+                const b = await body();
+                const files = b.files === undefined ? [] : Array.isArray(b.files) && b.files.length <= 10 ? b.files.map(uuid) : (() => { throw new HubProtocolError("invalid"); })();
+                return send(res, 200, { receipt: await guard(() => rooms.ask(ctx, roomId, uuid(b.idempotencyKey), typeof b.text === "string" ? b.text : "", files)) });
+            }
+            throw new HttpError(405, "method");
+        }
+        // attachments-v1: the asker's upload (raw body, streamed under the file limit) and the room's files.
+        if ((r = m(/^\/hub\/v1\/rooms\/([^/]+)\/files$/))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            // Nothing of the body is read until the request is admitted: a closed connection, never a buffer, for a refusal.
+            res.once("finish", () => { if (!req.readableEnded)
+                req.destroy(); });
+            const roomId = uuid(r[1]);
+            const s = csrf();
+            const store = deps.attachments;
+            if (!store)
+                throw new HubProtocolError("incompatible");
+            const name = fileName(req.headers["x-file-name"]);
+            const declared = req.headers["content-length"];
+            if (declared === undefined || !/^\d{1,10}$/.test(declared))
+                throw new HttpError(411, "length-required");
+            if (Number(declared) > store.limits.fileBytes)
+                throw new HttpError(413, "too-large");
+            // At most UPLOADS_PER_SESSION bodies per session and UPLOADS_TOTAL in all are read at once.
+            if ((uploading.get(s.sessionId) ?? 0) >= UPLOADS_PER_SESSION || uploadingTotal >= UPLOADS_TOTAL)
+                throw new HubProtocolError("backpressure");
+            uploading.set(s.sessionId, (uploading.get(s.sessionId) ?? 0) + 1);
+            uploadingTotal++;
+            try {
+                await guard(() => rooms.uploadAdmit(ctx, roomId, Number(declared)));
+                const bytes = await readRaw(req, Number(declared));
+                if (!live())
+                    throw new HubProtocolError("unavailable");
+                if (bytes.length !== Number(declared))
+                    throw new HubProtocolError("invalid");
+                return send(res, 200, { file: await guard(() => rooms.upload(ctx, roomId, name, bytes)) });
+            }
+            finally {
+                const n = (uploading.get(s.sessionId) ?? 1) - 1;
+                if (n > 0)
+                    uploading.set(s.sessionId, n);
+                else
+                    uploading.delete(s.sessionId);
+                uploadingTotal--;
+            }
+        }
+        if ((r = m(/^\/hub\/v1\/rooms\/([^/]+)\/files\/([^/]+)$/))) {
+            if (method !== "GET")
+                throw new HttpError(405, "method");
+            const roomId = uuid(r[1]), fileId = uuid(r[2]);
+            signedIn();
+            const file = await guard(() => rooms.download(ctx, roomId, fileId));
+            // Never executed or sniffed: a download, in a sandbox; only a magic-checked image may show inline when asked.
+            const inline = query.get("inline") === "1" && file.image;
+            res.writeHead(200, { "Content-Type": file.mime, "Content-Length": String(file.bytes.length), "X-Content-Type-Options": "nosniff",
+                "Content-Security-Policy": "default-src 'none'; sandbox", "Cache-Control": "no-store", "Referrer-Policy": "no-referrer", "Cross-Origin-Resource-Policy": "same-origin",
+                "Content-Disposition": `${inline ? "inline" : "attachment"}; filename*=UTF-8''${encodeURIComponent(file.name)}` });
+            res.end(file.bytes);
+            return;
+        }
+        if (path === "/hub/v1/audit") {
+            if (method !== "GET")
+                throw new HttpError(405, "method");
+            signedIn();
+            const exposureId = query.get("exposureId"), after = query.get("after");
+            return send(res, 200, { records: await guard(() => deps.audit.read(ctx, { ...(exposureId ? { exposureId: uuid(exposureId) } : {}), ...(after ? { after: int(after) } : {}) })) });
+        }
+        if (path === "/hub/v1/pairings") {
+            if (method !== "GET")
+                throw new HttpError(405, "method");
+            signedIn();
+            const me = personKeyString(await guard(() => ctx.requirePerson())), now = core.now();
+            const mine = deps.store.read().pairings.filter((p) => p.state === "pending" && p.expiresAt > now && personKeyString(p.owner) === me)
+                .map((p) => ({ id: p.id, fingerprint: p.fingerprint, expiresAt: p.expiresAt, ownerConfirmed: p.ownerConfirmed, adminApproved: p.adminApproved }));
+            return send(res, 200, { pairings: mine });
+        }
+        if ((r = m(/^\/hub\/v1\/pairings\/([^/]+)\/confirm$/))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            const fp = str(b.fingerprint, 64);
+            if (!HEX64.test(fp))
+                throw new HubProtocolError("invalid");
+            await guard(() => deps.pairing.confirmOwner(ctx, uuid(r[1]), fp));
+            return send(res, 200, { ok: true });
+        }
+        if (path.startsWith("/hub/v1/admin/"))
+            return admin(req, res, path, ctx, method, signedIn, csrf, body, guard);
+        throw new HttpError(404, "not-found");
+    }
+    async function admin(req, res, path, ctx, method, signedIn, csrf, body, guard) {
+        let r;
+        if (path === "/hub/v1/admin/overview") {
+            if (method !== "GET")
+                throw new HttpError(405, "method");
+            signedIn();
+            await guard(() => ctx.requireAdmin());
+            const state = deps.store.read(), now = core.now();
+            const name = (key) => {
+                const id = personKeyString(key);
+                const row = core.atomic((db) => db.prepare("SELECT display_name, login_label FROM hub_people WHERE person=?").get(id));
+                return row ? { name: row.display_name, login: row.login_label } : null;
+            };
+            return send(res, 200, {
+                fleets: state.fleets.map((f) => ({ id: f.id, status: f.status, generation: f.generation, owner: name(f.owner) })),
+                pairings: state.pairings.filter((p) => p.expiresAt > now && (p.state === "offered" || p.state === "pending"))
+                    .map((p) => ({ id: p.id, state: p.state, expiresAt: p.expiresAt, fingerprint: p.fingerprint, ownerConfirmed: p.ownerConfirmed, adminApproved: p.adminApproved, owner: name(p.owner) })),
+            });
+        }
+        if (path === "/hub/v1/admin/pairings") {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            const login = str(b.login).trim();
+            await guard(() => ctx.requireAdmin());
+            const owner = await personByLogin(core, login);
+            if (!owner)
+                throw new HubProtocolError("not-found");
+            const offer = await guard(() => deps.pairing.create(ctx, owner));
+            return send(res, 200, offer);
+        }
+        if ((r = /^\/hub\/v1\/admin\/pairings\/([^/]+)\/approve$/.exec(path))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            const fp = str(b.fingerprint, 64);
+            if (!HEX64.test(fp))
+                throw new HubProtocolError("invalid");
+            await guard(() => deps.pairing.approve(ctx, uuid(r[1]), fp));
+            return send(res, 200, { ok: true });
+        }
+        if ((r = /^\/hub\/v1\/admin\/fleets\/([^/]+)\/revoke$/.exec(path))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            await guard(() => deps.pairing.revoke(ctx, uuid(r[1])));
+            return send(res, 200, { ok: true });
+        }
+        if ((r = /^\/hub\/v1\/admin\/exposures\/([^/]+)\/freeze$/.exec(path))) {
+            if (method !== "POST")
+                throw new HttpError(405, "method");
+            csrf();
+            const b = await body();
+            await guard(() => catalog.freeze(ctx, uuid(r[1]), int(b.revision), true));
+            return send(res, 200, { ok: true });
+        }
+        void req;
+        throw new HttpError(404, "not-found");
+    }
+    function fail(res, e) {
+        if (e instanceof SignedOut)
+            return send(res, 401, { code: "signed-out" });
+        if (e instanceof HttpError)
+            return send(res, e.status, { code: e.code });
+        if (e instanceof HubAttachmentRefused)
+            return send(res, 415, { code: e.refusal });
+        if (e instanceof HubProtocolError) {
+            const status = STATUS[e.code] ?? 400;
+            return send(res, status, { code: e.code }, status === 429 ? { "Retry-After": "10" } : {});
+        }
+        send(res, 500, { code: "unavailable" });
+    }
+    function handle(req, res) {
+        let url;
+        try {
+            url = new URL(req.url ?? "/", "http://hub.invalid");
+        }
+        catch {
+            return false;
+        }
+        const path = url.pathname, method = req.method ?? "GET";
+        if (path.startsWith("/hub/v1/")) {
+            void api(req, res, path, url.searchParams).catch((e) => fail(res, e));
+            return true;
+        }
+        if (method !== "GET" && method !== "HEAD")
+            return false;
+        if (!live()) {
+            send(res, 503, { code: "unavailable" });
+            return true;
+        }
+        if (path === "/") {
+            res.writeHead(302, { Location: "/ui/hub", "Cache-Control": "no-store" });
+            res.end();
+            return true;
+        }
+        if (path === "/web" || path === "/ui" || path === "/ui/hub" || path === "/ui/hub/exposures" || path === "/ui/hub/admin") {
+            serveHubWorkspaceShell(res, { name: deps.config.name, preview: deps.preview });
+            return true;
+        }
+        if (path.startsWith("/ui/js/")) {
+            const file = path.slice("/ui/js/".length);
+            if (!HUB_UI_MODULES.includes(file))
+                return false;
+            try {
+                const js = readFileSync(join(uiDir, file));
+                res.writeHead(200, { "Content-Type": "application/javascript; charset=utf-8", "X-Content-Type-Options": "nosniff", "Cache-Control": "no-cache" });
+                res.end(js);
+            }
+            catch {
+                send(res, 404, { code: "not-found" });
+            }
+            return true;
+        }
+        if (path.startsWith("/assets/"))
+            return servePublicAsset(res, path.slice("/assets/".length));
+        return false;
+    }
+    async function receive(frame, link) {
+        if (!live() || !link.current())
+            throw new HubProtocolError("stale");
+        rooms.noteLink(link);
+        quota.noteLink(link);
+        const reply = { v: 1, requestId: frame.requestId, linkEpoch: link.linkEpoch };
+        switch (frame.type) {
+            case "exposure.snapshot":
+                catalog.receiveSnapshot(frame.payload, link);
+                quota.prune();
+                return;
+            case "exposure.quota":
+                quota.receive(frame.payload, link);
+                return;
+            case "receipt": return { ...reply, type: "receipt", payload: rooms.receipt(frame.payload, link) };
+            case "answer": return { ...reply, type: "receipt", payload: await rooms.answer(frame.payload, link) };
+            case "authorize.request": return { ...reply, type: "authorize.result", payload: await policy.authorize(frame.payload, link) };
+            case "reconcile": {
+                const page = rooms.reconcile(frame.payload, link);
+                // The link becomes ready once S1 has sent this last page; questions follow it (retrying briefly until it is).
+                if (!page.more)
+                    flushSoon(link);
+                return { ...reply, type: "reconcile", payload: page };
+            }
+            case "attachment.get": return { ...reply, type: "attachment.chunk", payload: await rooms.attachmentGet(frame.payload, link) };
+            case "attachment.put": return { ...reply, type: "attachment.ack", payload: rooms.attachmentPut(frame.payload, link) };
+            case "error": return;
+        }
+    }
+    function flushSoon(link, attempt = 0) {
+        const t = setTimeout(() => {
+            if (!live() || !link.current())
+                return;
+            void rooms.flush(link.fleetId).then((sent) => { if (!sent && attempt < 5)
+                flushSoon(link, attempt + 1); }, () => { });
+        }, attempt === 0 ? 0 : 100 * attempt);
+        t.unref?.();
+    }
+    rooms.buttons.start();
+    return {
+        handle, receive,
+        async close() { closed = true; await rooms.buttons.close(); rooms.forget(); quota.close(); },
+    };
+}
+//# sourceMappingURL=compose.js.map

package/dist/hub/http/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/hub/http/compose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAG9C,sGAAsG;AACtG,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,cAAc,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAC9M,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7B,MAAM,mBAAmB,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,gEAAgE,CAAC;AAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,WAAW,GAAG,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS;IACvI,iBAAiB,EAAE,aAAa,EAAE,yBAAyB,EAAE,4CAA4C,EAAW,CAAC;AAQvH,MAAM,SAAU,SAAQ,KAAK;CAAG;AAChC,MAAM,SAAU,SAAQ,KAAK;IAAwB,MAAM;IAAmB,IAAI;IAAlD,YAAqB,MAAc,EAAW,IAAY;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;sBAArD,MAAM;oBAAmB,IAAI;IAAyB,CAAC;CAAE;AAC9G,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG;IACzI,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;AAE3E,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,OAAO,GAA2B,EAAE;IACpG,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO;IACjD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3F,IAAI,IAAI,KAAK,kBAAkB,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtH,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACvG,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC;IAAC,CAAC;IAC3G,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnL,OAAO,IAAI,CAAC;AACd,CAAC;AACD,qEAAqE;AACrE,KAAK,UAAU,OAAO,CAAC,GAAoB,EAAE,KAAa;IACxD,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAClJ,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG,EAAU,EAAE,GAAG,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;IAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACvJ,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE,GAAG,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACtI,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAK,CAAY,GAAG,CAAC;IAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAW,CAAC,CAAC,CAAC,CAAC;AAE/N,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,GAAkB;IACjE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,kGAAkG;IAClG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAAC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEpE,wGAAwG;IACxG,KAAK,UAAU,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY,EAAE,KAAsB;QAChG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;QACvD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClF,wGAAwG;QACxG,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9H,MAAM,KAAK,GAAG,KAAK,EAAK,IAAsB,EAAc,EAAE;YAC5D,IAAI,CAAC;gBAAC,OAAO,MAAM,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;gBAAC,MAAM,CAAC,CAAC;YAAC,CAAC;QACvK,CAAC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAyB,CAAC;QAE9B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;oBACrJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACvD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EACzJ,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAClK,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9D,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,QAAQ,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACzI,CAAC;YACD,IAAI,IAAI,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACnD,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5D,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpI,CAAC;QACD,kFAAkF;QAClF,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,2CAA2C,CAAC,CAAC,EAAE,CAAC;YACzD,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,yCAAyC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,wCAAwC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC5I,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAkB,CAAC,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAAC,QAAQ,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACvK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1P,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;gBACrB,8GAA8G;gBAC9G,8EAA8E;gBAC9E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACzJ,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,qGAAqG;QACrG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,iHAAiH;YACjH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACxG,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACrF,4FAA4F;YAC5F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,mBAAmB,IAAI,cAAc,IAAI,aAAa;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC5I,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,cAAc,EAAE,CAAC;YACpF,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBAC3G,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;;oBAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAC,cAAc,EAAE,CAAC;YAClJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,6CAA6C,CAAC,CAAC,EAAE,CAAC;YAC3D,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,8GAA8G;YAC9G,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC;YACzD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,wBAAwB,EAAE,SAAS;gBAC9H,yBAAyB,EAAE,6BAA6B,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,8BAA8B,EAAE,aAAa;gBACtK,qBAAqB,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QAC9B,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACpL,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;iBACjI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACpJ,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,yCAAyC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9G,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY,EAAE,GAAuC,EAAE,MAAc,EACnI,QAAuB,EAAE,IAAmB,EAAE,IAA4C,EAAE,KAA6C;QACzI,IAAI,CAAyB,CAAC;QAC9B,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACtC,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,CAAC,GAAwC,EAAE,EAAE;gBACxD,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,EAAE,CAA8D,CAAC,CAAC;gBACpL,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,CAAC,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjH,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;qBAC1G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC1L,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACtC,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClJ,CAAC;QACD,KAAK,GAAG,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,IAAI,CAAC,GAAmB,EAAE,CAAU;QAC3C,IAAI,CAAC,YAAY,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY,oBAAoB;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACrC,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACvD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACxD,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACvH,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YACxH,sBAAsB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,uCAAuC,EAAE,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClJ,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAAiD,EAAE,IAAoB;QAC5F,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACvF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,mBAAmB;gBAAE,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAC9F,KAAK,gBAAgB;gBAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO;YAClE,KAAK,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAClG,KAAK,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YACtG,KAAK,mBAAmB,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9H,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClD,8GAA8G;gBAC9G,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,CAAC;YACD,KAAK,gBAAgB,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9H,KAAK,gBAAgB,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YACtH,KAAK,OAAO,EAAE,OAAO;QACvB,CAAC;IACH,CAAC;IACD,SAAS,SAAS,CAAC,IAAoB,EAAE,OAAO,GAAG,CAAC;QAClD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YACvC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvH,CAAC,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;QACtC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAC7F,CAAC;AACJ,CAAC"}

package/dist/hub/http/core.d.ts

@@ -0,0 +1,49 @@
+import type Database from "better-sqlite3";
+import type { HubAuditRecord, HubTx, PersonKey } from "../types.js";
+import type { HubHttpDeps, HubTxDatabase } from "./deps.js";
+export type HubAuditEvent = Omit<HubAuditRecord, "id" | "sequence" | "at" | "policyVersion"> & {
+    at?: number;
+};
+/** At most this many directory checks in flight per person, and in all; more is backpressure (429), never a cached allow. */
+export declare const DIRECTORY_PER_PERSON = 4;
+export declare const DIRECTORY_TOTAL = 32;
+export declare class HubCore {
+    readonly deps: HubHttpDeps;
+    private readonly sql;
+    private readonly inflight;
+    private total;
+    constructor(deps: HubHttpDeps, sql: HubTxDatabase);
+    now(): number;
+    /** Refuses once the server is fenced (and before every write: a stale continuation never commits). */
+    live(): boolean;
+    check(): void;
+    /** One synchronous unit of work on the Hub DB; a promise returned from `work` is refused. */
+    atomic<T>(work: (db: Database.Database, tx: HubTx) => T): T;
+    /** Audit inside the caller's transaction: a failed append aborts the whole unit (hub.md §4). */
+    audit(tx: HubTx, event: HubAuditEvent): void;
+    revocationVersion(): number;
+    /**
+     * A fresh directory eligibility check (no allow-cache). Ineligible or unreachable is denied; the person's row records
+     * what was seen. Bounded per person and in all — over the bound is "backpressure".
+     */
+    eligible(person: PersonKey): Promise<boolean>;
+    /**
+     * The person as the directory has them now (its current login and name), or null when they are not eligible. The
+     * person's row takes the current login label, so a rename never leaves an old label pointing at them.
+     */
+    current(person: PersonKey): Promise<{
+        login: string;
+        displayName?: string;
+    } | null>;
+}
+export declare const personFromRow: (row: {
+    realm: string;
+    object_id: string;
+}) => PersonKey;
+export declare function personFromString(id: string): PersonKey;
+/**
+ * A login label → the one Hub person it names NOW: exactly one row carries it (a shared or unknown label is refused),
+ * and the directory's current login for that person is still that label (a rename — and a colleague later given the old
+ * login — never redirects a grant or a pairing to the wrong person). Null otherwise.
+ */
+export declare function personByLogin(core: HubCore, login: string): Promise<PersonKey | null>;