@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/runtime.d.ts

@@ -0,0 +1,106 @@
+/**
+ * S5b lifecycle (S-51; docs/design/hub-composition.md §2). FleetManager imports this module only when a Hub switch is
+ * on (or a runtime is already live) and calls:
+ *   apply(config) on start and on every configuration change (reload, Settings save, rollback),
+ *   fence() synchronously when the fleet starts stopping, close() inside its drain.
+ *
+ * apply() is serialized (later calls coalesce to the newest configuration) and a no-op when the effective Hub view is
+ * unchanged. A change fences first, then closes, then mounts again through S1's HubMount (which verifies the sealed
+ * manifest). Failures never throw into the fleet: they become one visible hold with a reason code.
+ */
+import { type HubDirectory, type HubDirectoryConfig } from "./directory/index.js";
+import { type HubMountedService } from "./mount.js";
+import { type HubHttpEntry, type HubServerComponents } from "./compose/server.js";
+import { type HubMemberComponents, type HubMemberFactoryOptions } from "./compose/member.js";
+import type { HubViewSource } from "./compose/views.js";
+/** The member side's slices (S4, S3c, S4b), imported lazily only inside the member factory. */
+export declare const MEMBER_COMPONENTS: HubMemberComponents;
+/** What the fleet gives the member side (FleetManager): its binding, agents and attachment points. */
+export type HubMemberHost = Pick<HubMemberFactoryOptions, "boundHub" | "agents" | "representative" | "attachExposures" | "attachAttention" | "pokeAttention" | "linkState"> & {
+    views?: HubViewSource;
+};
+/**
+ * The Hub web service (S3b, src/hub/http/compose.ts), imported lazily only inside the server factory. S3b takes
+ * S5's hubTxDatabase as its second argument.
+ */
+export declare const S3B_HTTP_ENTRY: () => Promise<HubHttpEntry>;
+import { type HubHoldCode } from "./db.js";
+export interface HubHold {
+    side: "server" | "member";
+    code: HubHoldCode;
+    detail: string;
+    since: number;
+    /** A bounded setup reason (provider holds) for localized guidance; never raw error text. */
+    reason?: string;
+}
+export interface HubRuntimeOptions {
+    home: string;
+    log(level: "info" | "warn", message: string, meta?: Record<string, unknown>): void;
+    /** Called whenever the hold set changes (FleetManager re-renders its status / Needs-you). */
+    onHoldsChanged?(holds: readonly HubHold[]): void;
+    now?: () => number;
+    /** Test seams. */
+    components?: HubServerComponents;
+    createDirectory?: (config: HubDirectoryConfig, secrets: {
+        bindPassword: string;
+    }) => HubDirectory;
+    /** The fleet's side of a Hub membership; absent: the member side holds hub-incomplete. */
+    member?: HubMemberHost;
+    memberComponents?: HubMemberComponents;
+    createServer?: (cfg: Record<string, unknown>, current: () => boolean) => Promise<HubMountedService>;
+    createMember?: (cfg: Record<string, unknown>, current: () => boolean) => Promise<HubMountedService>;
+}
+export type HubServerHealth = "off" | "starting" | "ready" | "unavailable" | "stopped";
+type HubConfigView = {
+    hub?: unknown;
+    hub_member?: unknown;
+};
+/** True when the raw config turns either Hub switch on (the only thing FleetManager checks before importing us). */
+export declare function hubSwitchesOn(raw: HubConfigView | null | undefined): boolean;
+/** What a reload compares: switches, sealed settings, local preview opt-in, and the member section as written. */
+export declare function effectiveHubView(raw: HubConfigView | null | undefined): string;
+export declare class HubRuntime {
+    private readonly options;
+    private browserCertificateControl;
+    browserCertificateSettings(): import("./browser-certificate.js").HubBrowserCertificateControl | null;
+    private retentionControl;
+    retentionSettings(): import("./retention.js").HubRetentionControl | null;
+    private readonly mount;
+    private view;
+    /** The newest configuration view asked for (admitted), which may still be waiting behind a running apply. */
+    private admitted;
+    private running;
+    private pending;
+    private lastConfig;
+    private stopped;
+    private holds;
+    /** The most specific reason a factory reported for the side currently being mounted. */
+    private reported;
+    private mounting;
+    /** Retries cleanup a failed server creation could not confirm (never handed to HubMount). */
+    private readonly drainServer;
+    /** The member factory's leftover (same rules), drained when the member switch is off and on Stop. */
+    private readonly drainMember;
+    /** A leftover whose cleanup is still unconfirmed: every later Off (even an unchanged one) and Stop retries it. */
+    private leftover;
+    constructor(options: HubRuntimeOptions);
+    currentHolds(): readonly HubHold[];
+    /** Availability of the configured local server mount, not a directory/link/model or remote-reachability probe. */
+    serverHealth(expected: unknown): HubServerHealth;
+    private addHold;
+    private clearHolds;
+    /** Serialized: one apply at a time; calls made meanwhile coalesce to the newest configuration. */
+    apply(config: HubConfigView): Promise<void>;
+    private applyOnce;
+    /**
+     * The member's binding changed outside the configuration (a pairing was claimed, disconnected or cancelled): rebuild
+     * from the last configuration, fencing first, even though its text is unchanged.
+     */
+    refresh(): Promise<void>;
+    /** Synchronous: no new admission, dispatch or listener work from here on. */
+    fence(): void;
+    close(): Promise<void>;
+    /** Off/Stop: confirm a failed creation's cleanup; while it still fails it stays owned and held (and Stop rejects). */
+    private drainLeftovers;
+}
+export {};

package/dist/hub/runtime.js

@@ -0,0 +1,298 @@
+/**
+ * S5b lifecycle (S-51; docs/design/hub-composition.md §2). FleetManager imports this module only when a Hub switch is
+ * on (or a runtime is already live) and calls:
+ *   apply(config) on start and on every configuration change (reload, Settings save, rollback),
+ *   fence() synchronously when the fleet starts stopping, close() inside its drain.
+ *
+ * apply() is serialized (later calls coalesce to the newest configuration) and a no-op when the effective Hub view is
+ * unchanged. A change fences first, then closes, then mounts again through S1's HubMount (which verifies the sealed
+ * manifest). Failures never throw into the fleet: they become one visible hold with a reason code.
+ */
+import { createHubDirectory } from "./directory/index.js";
+import { hubPlanDigest } from "./init/plan-digest.js";
+import { hubPreviewReloadKey } from "./preview.js";
+import { HubMount } from "./mount.js";
+import { createHubServerFactory } from "./compose/server.js";
+import { createHubMemberFactory } from "./compose/member.js";
+/** The member side's slices (S4, S3c, S4b), imported lazily only inside the member factory. */
+export const MEMBER_COMPONENTS = {
+    execution: () => import("./execution/index.js"),
+    exposures: async () => {
+        const [store, api] = await Promise.all([import("./member/exposures.js"), import("./member/exposure-api.js")]);
+        return { store, api };
+    },
+    provider: async () => {
+        const [cli, broker] = await Promise.all([import("./execution/cli-provider.js"), import("./execution/model-broker.js")]);
+        return { createHubCliProvider: cli.createHubCliProvider, createHubModelBroker: broker.createHubModelBroker };
+    },
+};
+/**
+ * The Hub web service (S3b, src/hub/http/compose.ts), imported lazily only inside the server factory. S3b takes
+ * S5's hubTxDatabase as its second argument.
+ */
+export const S3B_HTTP_ENTRY = async () => {
+    const s3 = await import("./http/compose.js");
+    return { migrations: s3.migrations, createHubHttp: (deps) => s3.createHubHttp(deps, hubTxDatabase) };
+};
+import { hubTxDatabase } from "./db.js";
+const obj = (v) => (v && typeof v === "object" && !Array.isArray(v) ? v : undefined);
+/** True when the raw config turns either Hub switch on (the only thing FleetManager checks before importing us). */
+export function hubSwitchesOn(raw) {
+    return obj(raw?.hub)?.enabled === true || obj(raw?.hub_member)?.enabled === true;
+}
+/** What a reload compares: switches, sealed settings, local preview opt-in, and the member section as written. */
+export function effectiveHubView(raw) {
+    const hub = obj(raw?.hub);
+    const member = obj(raw?.hub_member);
+    return JSON.stringify({
+        server: hub?.enabled === true ? hubPlanDigest(hub) : null,
+        preview: hub?.enabled === true ? hubPreviewReloadKey(hub.web) : null,
+        member: member?.enabled === true ? JSON.stringify(member) : null,
+    });
+}
+const MOUNT_CODE = {
+    initialization: "hub-unsealed",
+    "member-pairing": "hub-member-pairing",
+    "service-unavailable": "service-unavailable",
+};
+export class HubRuntime {
+    options;
+    browserCertificateControl = null;
+    browserCertificateSettings() { return this.browserCertificateControl; }
+    retentionControl = null;
+    retentionSettings() { return this.retentionControl; }
+    mount;
+    view = null;
+    /** The newest configuration view asked for (admitted), which may still be waiting behind a running apply. */
+    admitted = null;
+    running = null;
+    pending = null;
+    lastConfig = null;
+    stopped = false;
+    holds = [];
+    /** The most specific reason a factory reported for the side currently being mounted. */
+    reported = null;
+    mounting = null;
+    /** Retries cleanup a failed server creation could not confirm (never handed to HubMount). */
+    drainServer;
+    /** The member factory's leftover (same rules), drained when the member switch is off and on Stop. */
+    drainMember;
+    /** A leftover whose cleanup is still unconfirmed: every later Off (even an unchanged one) and Stop retries it. */
+    leftover = false;
+    constructor(options) {
+        this.options = options;
+        const now = options.now ?? Date.now;
+        const composed = options.createServer
+            ? null
+            : createHubServerFactory({
+                home: options.home,
+                components: options.components ?? { http: S3B_HTTP_ENTRY },
+                createDirectory: options.createDirectory ?? createHubDirectory,
+                browserCertificateReady: control => {
+                    this.browserCertificateControl = control;
+                    return () => { if (this.browserCertificateControl === control)
+                        this.browserCertificateControl = null; };
+                },
+                retentionReady: control => {
+                    this.retentionControl = control;
+                    return () => { if (this.retentionControl === control)
+                        this.retentionControl = null; };
+                },
+                report: (code, detail) => {
+                    this.reported = { side: "server", code, detail };
+                },
+                log: options.log,
+                now,
+            });
+        this.drainServer = composed ? () => composed.drain() : async () => { };
+        const serverFactory = options.createServer ?? composed;
+        const memberComposed = options.createMember || !options.member
+            ? null
+            : createHubMemberFactory({
+                home: options.home,
+                components: options.memberComponents ?? MEMBER_COMPONENTS,
+                ...options.member,
+                ...(options.member.views ? { views: options.member.views } : {}),
+                report: (code, detail) => {
+                    this.reported = { side: "member", code, detail };
+                },
+                // Non-fatal: the member keeps running (no provider); the hold stays until the member is rebuilt.
+                notice: (code, reason, detail) => this.addHold({ side: "member", code, detail, reason, since: now() }),
+                log: options.log,
+                now,
+            });
+        const memberFactory = options.createMember ??
+            memberComposed ??
+            (async () => {
+                this.reported = { side: "member", code: "hub-incomplete", detail: "the Hub member side is not wired in this fleet" };
+                throw new Error("hub-incomplete");
+            });
+        this.drainMember = memberComposed ? () => memberComposed.drain() : async () => { };
+        this.mount = new HubMount({
+            home: options.home,
+            planDigest: hubPlanDigest,
+            createServer: (cfg, current) => {
+                this.mounting = "server";
+                return serverFactory(cfg, current);
+            },
+            createMember: (cfg, current) => {
+                this.mounting = "member";
+                return memberFactory(cfg, current);
+            },
+            hold: (reason) => {
+                const side = this.mounting ?? "server";
+                const specific = this.reported && this.reported.side === side ? this.reported : null;
+                this.addHold({ side, code: specific?.code ?? MOUNT_CODE[reason], detail: specific?.detail ?? reason, since: now() });
+                this.reported = null;
+            },
+        });
+    }
+    currentHolds() {
+        return this.holds;
+    }
+    /** Availability of the configured local server mount, not a directory/link/model or remote-reachability probe. */
+    serverHealth(expected) {
+        const server = obj(expected);
+        if (server?.enabled !== true)
+            return "off";
+        if (this.stopped)
+            return "stopped";
+        // serverEnabled is an admission fence set before the factory/start awaits: it is not readiness on its own.
+        if (this.running || this.pending || this.admitted === null)
+            return "starting";
+        if (this.view === null)
+            return "unavailable";
+        try {
+            // Compare the captured immutable view, not lastConfig's caller-owned object, which can change in place.
+            const view = JSON.parse(this.view);
+            if (hubPlanDigest(server) !== view.server || hubPreviewReloadKey(server.web) !== view.preview)
+                return "starting";
+        }
+        catch {
+            return "unavailable";
+        }
+        return this.mount.serverEnabled() ? "ready" : "unavailable";
+    }
+    addHold(hold) {
+        this.holds = [...this.holds.filter((h) => h.side !== hold.side), hold];
+        this.options.log("warn", "Hub unavailable", { side: hold.side, code: hold.code, detail: hold.detail });
+        this.options.onHoldsChanged?.(this.holds);
+    }
+    clearHolds() {
+        if (this.holds.length === 0)
+            return;
+        this.holds = [];
+        this.options.onHoldsChanged?.(this.holds);
+    }
+    /** Serialized: one apply at a time; calls made meanwhile coalesce to the newest configuration. */
+    apply(config) {
+        if (this.stopped)
+            return Promise.resolve();
+        const view = effectiveHubView(config);
+        if (view !== this.admitted) {
+            this.admitted = view;
+            if (this.running) {
+                // A changed configuration revokes the current generation now, even while a factory or start is still held:
+                // S1's fence is synchronous, and a held service must not start for a configuration that is already gone.
+                this.mount.fence();
+                this.view = null; // whatever is applied next is applied for real (A → B → A must not look unchanged)
+            }
+        }
+        this.pending = { hub: config.hub, hub_member: config.hub_member };
+        this.lastConfig = this.pending;
+        if (!this.running) {
+            this.running = (async () => {
+                try {
+                    while (this.pending && !this.stopped) {
+                        const next = this.pending;
+                        this.pending = null;
+                        await this.applyOnce(next);
+                    }
+                }
+                finally {
+                    this.running = null;
+                }
+            })();
+        }
+        return this.running;
+    }
+    async applyOnce(config) {
+        const view = effectiveHubView(config);
+        if (view === this.view) {
+            if (this.leftover)
+                await this.drainLeftovers({ server: obj(config.hub)?.enabled !== true, member: obj(config.hub_member)?.enabled !== true });
+            return;
+        }
+        this.view = view;
+        this.clearHolds();
+        this.reported = null;
+        try {
+            await this.mount.apply(config); // fences, closes the previous services, then mounts what is on
+            await this.drainLeftovers({ server: obj(config.hub)?.enabled !== true, member: obj(config.hub_member)?.enabled !== true });
+        }
+        catch (err) {
+            // HubMount already raised its hold (service-unavailable on an unconfirmed cleanup).
+            this.options.log("warn", "Hub apply did not finish cleanly", { err: err.message });
+            this.view = null; // the next apply retries from scratch
+        }
+        finally {
+            this.mounting = null;
+        }
+    }
+    /**
+     * The member's binding changed outside the configuration (a pairing was claimed, disconnected or cancelled): rebuild
+     * from the last configuration, fencing first, even though its text is unchanged.
+     */
+    refresh() {
+        if (this.stopped || !this.lastConfig)
+            return Promise.resolve();
+        this.admitted = null;
+        this.view = null;
+        if (this.running)
+            this.mount.fence();
+        return this.apply(this.lastConfig);
+    }
+    /** Synchronous: no new admission, dispatch or listener work from here on. */
+    fence() {
+        this.stopped = true;
+        this.pending = null;
+        this.mount.fence();
+    }
+    async close() {
+        this.fence();
+        try {
+            await this.running;
+        }
+        catch {
+            /* already reported */
+        }
+        await this.mount.close();
+        await this.drainLeftovers({ server: true, member: true }, true);
+    }
+    /** Off/Stop: confirm a failed creation's cleanup; while it still fails it stays owned and held (and Stop rejects). */
+    async drainLeftovers(sides, rethrow = false) {
+        if (!sides.server && !sides.member)
+            return;
+        try {
+            if (sides.server)
+                await this.drainServer();
+            if (sides.member)
+                await this.drainMember();
+            if (this.leftover) {
+                this.leftover = false;
+                const rest = this.holds.filter((h) => !(h.code === "service-unavailable" && ((h.side === "server" && sides.server) || (h.side === "member" && sides.member))));
+                if (rest.length !== this.holds.length) {
+                    this.holds = rest;
+                    this.options.onHoldsChanged?.(this.holds);
+                }
+            }
+        }
+        catch (err) {
+            this.leftover = true;
+            this.addHold({ side: sides.server ? "server" : "member", code: "service-unavailable", detail: err.message, since: (this.options.now ?? Date.now)() });
+            if (rethrow)
+                throw err;
+        }
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/hub/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/hub/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,kBAAkB,EAA8C,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,QAAQ,EAA0B,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAA+C,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAE,sBAAsB,EAA0D,MAAM,qBAAqB,CAAC;AAGrH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,iBAAiB,GAAwB;IACpD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAC/C,SAAS,EAAE,KAAK,IAAI,EAAE;QACpB,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAC9G,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,QAAQ,EAAE,KAAK,IAAI,EAAE;QACnB,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,EAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;QACxH,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAC/G,CAAC;CACF,CAAC;AAOF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAA2B,EAAE;IAC9D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7C,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;AACvG,CAAC,CAAC;AACF,OAAO,EAAE,aAAa,EAAoB,MAAM,SAAS,CAAC;AA+B1D,MAAM,GAAG,GAAG,CAAC,CAAU,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEhK,oHAAoH;AACpH,MAAM,UAAU,aAAa,CAAC,GAAqC;IACjE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AACnF,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,gBAAgB,CAAC,GAAqC;IACpE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;QACpE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;KACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,GAAqF;IACnG,cAAc,EAAE,cAAc;IAC9B,gBAAgB,EAAE,oBAAoB;IACtC,qBAAqB,EAAE,qBAAqB;CAC7C,CAAC;AAEF,MAAM,OAAO,UAAU;IAwBQ,OAAO;IAvB5B,yBAAyB,GAA2E,IAAI,CAAC;IACjH,0BAA0B,KAA6E,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACvI,gBAAgB,GAAwD,IAAI,CAAC;IACrF,iBAAiB,KAA0D,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACzF,KAAK,CAAW;IACzB,IAAI,GAAkB,IAAI,CAAC;IACnC,6GAA6G;IACrG,QAAQ,GAAkB,IAAI,CAAC;IAC/B,OAAO,GAAyB,IAAI,CAAC;IACrC,OAAO,GAAyB,IAAI,CAAC;IACrC,UAAU,GAAyB,IAAI,CAAC;IACxC,OAAO,GAAG,KAAK,CAAC;IAChB,KAAK,GAAc,EAAE,CAAC;IAC9B,wFAAwF;IAChF,QAAQ,GAA4E,IAAI,CAAC;IACzF,QAAQ,GAA+B,IAAI,CAAC;IACpD,6FAA6F;IAC5E,WAAW,CAAsB;IAClD,qGAAqG;IACpF,WAAW,CAAsB;IAClD,kHAAkH;IAC1G,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,OAA0B;uBAA1B,OAAO;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY;YACnC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,sBAAsB,CAAC;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE;gBAC1D,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,kBAAkB;gBAC9D,uBAAuB,EAAE,OAAO,CAAC,EAAE;oBACjC,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC;oBACzC,OAAO,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,yBAAyB,KAAK,OAAO;wBAAE,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1G,CAAC;gBACD,cAAc,EAAE,OAAO,CAAC,EAAE;oBACxB,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;oBAChC,OAAO,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO;wBAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxF,CAAC;gBACH,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBACvB,IAAI,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACnD,CAAC;gBACC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG;aACJ,CAAC,CAAC;QACP,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,QAAS,CAAC;QACxD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM;YAC5D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,sBAAsB,CAAC;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,gBAAgB,IAAI,iBAAiB;gBACzD,GAAG,OAAO,CAAC,MAAM;gBACjB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBACvB,IAAI,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACnD,CAAC;gBACD,iGAAiG;gBACjG,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;gBACtG,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG;aACJ,CAAC,CAAC;QACP,MAAM,aAAa,GACjB,OAAO,CAAC,YAAY;YACpB,cAAc;YACd,CAAC,KAAK,IAAI,EAAE;gBACV,IAAI,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,aAAa;YACzB,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACzB,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACzB,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACf,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;gBACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACvB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,kHAAkH;IAClH,YAAY,CAAC,QAAiB;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACnC,2GAA2G;QAC3G,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QAC7C,IAAI,CAAC;YACH,wGAAwG;YACxG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC;QACnH,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,aAAa,CAAC;QAAC,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9D,CAAC;IAEO,OAAO,CAAC,IAAa;QAC3B,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,MAAqB;QACzB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,2GAA2G;gBAC3G,yGAAyG;gBACzG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,mFAAmF;YACvG,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;wBAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;wBACpB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAqB;QAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9I,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,+DAA+D;YAC/F,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oFAAoF;YACpF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,sCAAsC;QAC1D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,6EAA6E;IAC7E,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,sHAAsH;IAC9G,KAAK,CAAC,cAAc,CAAC,KAA2C,EAAE,OAAO,GAAG,KAAK;QACvF,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAC3C,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/J,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;oBAClB,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjK,IAAI,OAAO;gBAAE,MAAM,GAAG,CAAC;QACzB,CAAC;IACH,CAAC;CAEF"}

package/dist/hub/server.d.ts

@@ -0,0 +1,56 @@
+import type { AddressInfo } from "node:net";
+import type { HubMemberFrame, HubServerFrame, PersonKey } from "./types.js";
+import { type HubLinkCloseCode } from "./socket.js";
+import { HubPairingService } from "./pairing.js";
+/** `features`: the optional features both ends listed (the member's hello ∩ this Hub's), set once at hello. */
+export interface HubLinkContext {
+    fleetId: string;
+    owner: PersonKey;
+    linkEpoch: number;
+    current(): boolean;
+    readonly features: ReadonlySet<string>;
+}
+export interface HubServerOptions {
+    home: string;
+    hubId: string;
+    memberOrigin: string;
+    listen: {
+        host: string;
+        port: number;
+    };
+    pairing: HubPairingService;
+    current(): boolean;
+    /** S3/S5 authorize and atomically audit before returning a reply. Throwing never falls through to fleet tools. */
+    receive(frame: Exclude<HubMemberFrame, {
+        type: "hello";
+    }>, context: HubLinkContext): Promise<HubServerFrame | void>;
+    hold(fleetId: string | null, code: HubLinkCloseCode): void;
+    /** The optional features this Hub offers (tests use a smaller list to stand in for an older Hub). */
+    capabilities?: readonly string[];
+}
+export declare class HubServer {
+    private readonly options;
+    private server;
+    private wss;
+    private connections;
+    private sockets;
+    private stopped;
+    private accepting;
+    private handshakes;
+    constructor(options: HubServerOptions);
+    private current;
+    address(): AddressInfo | null;
+    start(): Promise<void>;
+    private machine;
+    private response;
+    private body;
+    private http;
+    private upgrade;
+    private receive;
+    send(fleetId: string, frame: HubServerFrame): Promise<void>;
+    /** The enabled optional features of a fleet's ready link, or null while it has none. */
+    features(fleetId: string): ReadonlySet<string> | null;
+    fenceFleet(fleetId: string, reason?: "replaced" | "revoked"): void;
+    fence(): void;
+    close(): Promise<void>;
+}