@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/hub/catalog.js

@@ -1,195 +0,0 @@
-/**
- * AgEnD Hub P1, slice 3: the exposure catalog and grants (hub.md §4, §5; seams with S1/S4 on cid-hub-s3-readiness).
- *
- * The Hub's exposure rows MIRROR what each member's owner approved. A member only publishes what its own S4 readiness
- * accepted. The Hub never asks S4 and never infers "enforceable" from a row being there.
- * - Snapshots are complete, monotonic catalog revisions per fleet. A newer accepted snapshot replaces the fleet's
- *   catalog: an exposure missing from it is withdrawn. An older snapshot is refused and can never revive consent. A
- *   repeat of the current revision is accepted only when byte-identical.
- * - An exposure's own revision never goes backwards.
- * - The Hub may narrow or freeze, never widen. A Hub-side freeze holds every revision up to the one it froze; only a
- *   newer revision re-consented on the member lifts it.
- * - A grant binds one person to one exact exposure id and revision. A new exposure revision leaves old grants
- *   inapplicable until the owner grants again. Only the exposure's owner grants or revokes, against the revision shown.
- * - Private-agent non-enumeration: a person sees the exposures they own, and the published ones granted to them now.
- *   They never see others.
- */
-import { createHash, randomUUID } from "node:crypto";
-import { HubProtocolError } from "./validation.js";
-import { personKeyString } from "./identity.js";
-import { personByLogin, personFromString } from "./http/core.js";
-/** P1 grants last at most this long; the owner chooses within it. */
-export const GRANT_MAX_MS = 365 * 24 * 60 * 60_000;
-const PERMISSIONS = ["ask", "read-own-room"];
-export function exposureOf(row) {
-    return { id: row.id, fleetId: row.fleet_id, owner: personFromString(row.owner), displayName: row.display_name, revision: row.revision,
-        state: row.frozen_through >= row.revision && row.state === "published" ? "frozen" : row.state,
-        dataViewId: row.data_view_id, allowedTools: JSON.parse(row.allowed_tools), policyDigest: row.policy_digest };
-}
-export function grantOf(row) {
-    return { id: row.id, revision: row.revision, owner: personFromString(row.owner), exposureId: row.exposure_id, exposureRevision: row.exposure_revision,
-        approvedBy: personFromString(row.approved_by), approvedAt: row.approved_at, subject: { kind: "person", person: personFromString(row.subject) },
-        permissions: JSON.parse(row.permissions), startsAt: row.starts_at, expiresAt: row.expires_at, state: row.state };
-}
-export const readExposure = (db, id) => db.prepare("SELECT * FROM hub_exposures WHERE id=?").get(id);
-export const readGrant = (db, id) => db.prepare("SELECT * FROM hub_grants WHERE id=?").get(id);
-/** The canonical bytes of a snapshot: a repeat of a revision must match them exactly. */
-const snapshotDigest = (s) => createHash("sha256").update(JSON.stringify([s.revision, [...s.exposures].sort((a, b) => (a.id < b.id ? -1 : 1))
-        .map((e) => [e.id, e.fleetId, e.owner.realm, e.owner.objectId, e.displayName, e.revision, e.state, e.dataViewId, [...e.allowedTools], e.policyDigest])])).digest("hex");
-/** Whether a grant lets `asker` ask `exposure` right now (exact revision, window, state, permission). */
-export function grantApplies(grant, exposure, asker, now) {
-    return grant.state === "active" && grant.exposureId === exposure.id && grant.exposureRevision === exposure.revision
-        && personKeyString(grant.subject.person) === personKeyString(asker) && personKeyString(grant.owner) === personKeyString(exposure.owner)
-        && grant.startsAt <= now && now < grant.expiresAt && grant.permissions.includes("ask");
-}
-export class HubCatalogService {
-    core;
-    constructor(core) {
-        this.core = core;
-    }
-    /** A member's complete catalog revision, from its authenticated link (S1 already refused another fleet or owner). */
-    receiveSnapshot(snapshot, link) {
-        const now = this.core.now(), owner = personKeyString(link.owner), dig = snapshotDigest(snapshot);
-        const ids = new Set();
-        for (const e of snapshot.exposures) {
-            if (e.fleetId !== link.fleetId || personKeyString(e.owner) !== owner || ids.has(e.id))
-                throw new HubProtocolError("denied");
-            ids.add(e.id);
-        }
-        if (!link.current())
-            throw new HubProtocolError("stale");
-        this.core.atomic((db, tx) => {
-            const cursor = db.prepare("SELECT revision, digest FROM hub_catalog_cursor WHERE fleet_id=?").get(link.fleetId);
-            if (cursor && snapshot.revision < cursor.revision)
-                throw new HubProtocolError("stale");
-            if (cursor && snapshot.revision === cursor.revision) {
-                if (cursor.digest !== dig)
-                    throw new HubProtocolError("conflict");
-                return; // the same revision again: nothing changes
-            }
-            for (const e of snapshot.exposures) {
-                const old = readExposure(db, e.id);
-                if (old && (old.fleet_id !== link.fleetId || old.owner !== owner))
-                    throw new HubProtocolError("denied");
-                if (old && e.revision < old.revision)
-                    throw new HubProtocolError("stale");
-                if (old && e.revision === old.revision && (old.policy_digest !== e.policyDigest || old.data_view_id !== e.dataViewId
-                    || old.allowed_tools !== JSON.stringify([...e.allowedTools])))
-                    throw new HubProtocolError("conflict");
-            }
-            const listed = new Set(snapshot.exposures.map((e) => e.id));
-            const absent = db.prepare("SELECT id FROM hub_exposures WHERE fleet_id=? AND state<>'withdrawn'").all(link.fleetId)
-                .filter((r) => !listed.has(r.id));
-            for (const r of absent)
-                db.prepare("UPDATE hub_exposures SET state='withdrawn', updated_at=? WHERE id=?").run(now, r.id);
-            // Leaving "published" (withdrawn by absence or by state) ends its grants and rooms: a later re-publish, even at the
-            // same revision, needs the owner to grant again — consent never revives from history.
-            const ended = [...absent.map((r) => r.id), ...snapshot.exposures.filter((e) => e.state !== "published").map((e) => e.id)];
-            for (const id of ended) {
-                db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE exposure_id=? AND state='active'").run(id);
-                db.prepare("UPDATE hub_rooms SET state='closed' WHERE exposure_id=? AND state<>'closed'").run(id);
-            }
-            for (const e of snapshot.exposures) {
-                db.prepare(`INSERT INTO hub_exposures(id, fleet_id, owner, display_name, revision, state, data_view_id, allowed_tools, policy_digest, updated_at)
-          VALUES(?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET display_name=excluded.display_name, revision=excluded.revision, state=excluded.state,
-          data_view_id=excluded.data_view_id, allowed_tools=excluded.allowed_tools, policy_digest=excluded.policy_digest, updated_at=excluded.updated_at`)
-                    .run(e.id, e.fleetId, owner, e.displayName, e.revision, e.state, e.dataViewId, JSON.stringify([...e.allowedTools]), e.policyDigest, now);
-            }
-            db.prepare(`INSERT INTO hub_catalog_cursor(fleet_id, revision, digest, at) VALUES(?,?,?,?)
-        ON CONFLICT(fleet_id) DO UPDATE SET revision=excluded.revision, digest=excluded.digest, at=excluded.at`).run(link.fleetId, snapshot.revision, dig, now);
-            this.core.audit(tx, { requestId: randomUUID(), actor: { kind: "member", fleetId: link.fleetId }, action: "exposure.snapshot", result: "completed",
-                fleetId: link.fleetId, ownerAtEvent: link.owner, reasonCode: absent.length ? "withdrawn" : undefined });
-        });
-    }
-    /** What this person may see: their own exposures (with the grants on them) and what is granted to them now. */
-    async visible(ctx) {
-        const person = await ctx.requirePerson(), me = personKeyString(person), now = this.core.now();
-        return this.core.atomic((db) => {
-            const names = (id) => db.prepare("SELECT display_name, login_label FROM hub_people WHERE person=?").get(id);
-            const mine = db.prepare("SELECT * FROM hub_exposures WHERE owner=? AND state<>'withdrawn' ORDER BY display_name").all(me).map((row) => {
-                const grants = db.prepare("SELECT * FROM hub_grants WHERE exposure_id=? AND state='active' AND expires_at>? ORDER BY approved_at").all(row.id, now)
-                    .map((g) => { const n = names(g.subject); return { ...grantOf(g), subjectName: n?.display_name ?? "", subjectLogin: n?.login_label ?? "" }; });
-                return { ...exposureOf(row), grants };
-            });
-            const askable = [];
-            for (const g of db.prepare("SELECT * FROM hub_grants WHERE subject=? AND state='active' AND expires_at>?").all(me, now)) {
-                const row = readExposure(db, g.exposure_id);
-                if (!row)
-                    continue;
-                const exposure = exposureOf(row), grant = grantOf(g);
-                if (exposure.state !== "published" || !grantApplies(grant, exposure, person, now))
-                    continue;
-                askable.push({ exposure, grant, ownerName: names(row.owner)?.display_name ?? "" });
-            }
-            return { mine, askable };
-        });
-    }
-    /** Grant one known Hub person `ask` on the owner's exposure at the revision the owner saw. */
-    async grant(ctx, input) {
-        const owner = await ctx.requirePerson(), me = personKeyString(owner), now = this.core.now();
-        if (!Number.isSafeInteger(input.days) || input.days < 1 || input.days * 86_400_000 > GRANT_MAX_MS)
-            throw new HubProtocolError("invalid");
-        // Unknown, shared or renamed-away labels are refused: a name never stands for an id (personByLogin).
-        const subject = await personByLogin(this.core, input.login);
-        const subjectId = subject ? personKeyString(subject) : null;
-        if (!subject || !subjectId || subjectId === me)
-            throw new HubProtocolError("not-found");
-        await ctx.current();
-        const grant = { id: randomUUID(), revision: 1, owner, exposureId: input.exposureId, exposureRevision: input.exposureRevision,
-            approvedBy: owner, approvedAt: now, subject: { kind: "person", person: subject }, permissions: [...PERMISSIONS],
-            startsAt: now, expiresAt: now + input.days * 86_400_000, state: "active" };
-        this.core.atomic((db, tx) => {
-            const row = readExposure(db, input.exposureId);
-            if (!row || row.owner !== me)
-                throw new HubProtocolError("not-found");
-            const exposure = exposureOf(row);
-            if (exposure.revision !== input.exposureRevision)
-                throw new HubProtocolError("conflict");
-            if (exposure.state !== "published")
-                throw new HubProtocolError("denied");
-            for (const g of db.prepare("SELECT id FROM hub_grants WHERE exposure_id=? AND subject=? AND state='active' AND exposure_revision=?").all(exposure.id, subjectId, exposure.revision))
-                db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE id=?").run(g.id); // one live grant per person and revision
-            db.prepare(`INSERT INTO hub_grants(id, revision, owner, exposure_id, exposure_revision, approved_by, approved_at, subject, permissions, starts_at, expires_at, state)
-        VALUES(?,?,?,?,?,?,?,?,?,?,?, 'active')`).run(grant.id, 1, me, exposure.id, exposure.revision, me, now, subjectId, JSON.stringify(grant.permissions), grant.startsAt, grant.expiresAt);
-            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person: owner }, action: "grant.created", result: "completed",
-                fleetId: exposure.fleetId, exposureId: exposure.id, ownerAtEvent: owner, grantId: grant.id, grantRevision: 1 });
-        });
-        return grant;
-    }
-    /** The owner withdraws a grant (narrowing: always allowed) against the revision they saw; its rooms close. */
-    async revokeGrant(ctx, id, revision) {
-        const owner = await ctx.requirePerson(), me = personKeyString(owner);
-        this.core.atomic((db, tx) => {
-            const g = readGrant(db, id);
-            if (!g || g.owner !== me)
-                throw new HubProtocolError("not-found");
-            if (g.revision !== revision)
-                throw new HubProtocolError("conflict");
-            if (g.state === "revoked")
-                return;
-            db.prepare("UPDATE hub_grants SET state='revoked', revision=revision+1 WHERE id=?").run(id);
-            db.prepare("UPDATE hub_rooms SET state='closed' WHERE grant_id=?").run(id);
-            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person: owner }, action: "grant.revoked", result: "completed",
-                exposureId: g.exposure_id, ownerAtEvent: owner, grantId: id, grantRevision: revision + 1 });
-        });
-    }
-    /**
-     * Freeze an exposure on the Hub (narrowing only): its owner or the Hub administrator. It holds every revision up to
-     * the current one; the member re-consenting a newer revision lifts it.
-     */
-    async freeze(ctx, id, revision, admin) {
-        const actor = admin ? await ctx.requireAdmin() : null;
-        const person = actor?.kind === "directory" ? actor.person : await ctx.requirePerson();
-        this.core.atomic((db, tx) => {
-            const row = readExposure(db, id);
-            if (!row || (!admin && row.owner !== personKeyString(person)))
-                throw new HubProtocolError("not-found");
-            if (row.revision !== revision)
-                throw new HubProtocolError("conflict");
-            db.prepare("UPDATE hub_exposures SET frozen_through=MAX(frozen_through, ?), updated_at=? WHERE id=?").run(row.revision, this.core.now(), id);
-            this.core.audit(tx, { requestId: ctx.requestId, actor: { kind: "person", person }, action: "exposure.frozen", result: "completed",
-                fleetId: row.fleet_id, exposureId: id, ownerAtEvent: personFromString(row.owner) });
-        });
-    }
-}
-//# sourceMappingURL=catalog.js.map

package/dist/hub/catalog.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/hub/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAgB,MAAM,gBAAgB,CAAC;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACnD,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,eAAe,CAAU,CAAC;AAKtD,MAAM,UAAU,UAAU,CAAC,GAAgB;IACzC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACnI,KAAK,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAC7F,UAAU,EAAE,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;AAC7H,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,GAAa;IACnC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;QACnJ,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC9I,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA4B,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAChJ,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAqB,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA4B,CAAC;AAC3J,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAqB,EAAE,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;AAClJ,yFAAyF;AACzF,MAAM,cAAc,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/J,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE1K,yGAAyG;AACzG,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,QAAqB,EAAE,KAAgB,EAAE,GAAW;IAChG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,QAAQ;WAC9G,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;WACpI,KAAK,CAAC,QAAQ,IAAI,GAAG,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAOD,MAAM,OAAO,iBAAiB;IACC,IAAI;IAAjC,YAA6B,IAAa;oBAAb,IAAI;IAAY,CAAC;IAE9C,qHAAqH;IACrH,eAAe,CAAC,QAA6B,EAAE,IAAoB;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5H,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAqD,CAAC;YACpK,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvF,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,OAAO,CAA4C,2CAA2C;YAChG,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACxG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ;oBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC1E,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;uBAC/G,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAsB;iBACtI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACzH,oHAAoH;YACpH,sFAAsF;YACtF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1H,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,EAAE,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxH,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACnC,EAAE,CAAC,OAAO,CAAC;;yJAEsI,CAAC;qBAC/I,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC7I,CAAC;YACD,EAAE,CAAC,OAAO,CAAC;+GAC8F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1J,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW;gBAC/I,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,OAAO,CAAC,GAAsB;QAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9F,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,EAAE,CAA8D,CAAC;YACjL,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,EAAE,CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvJ,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAgB;qBAChK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjJ,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAoE,EAAE,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAe,EAAE,CAAC;gBACtI,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG;oBAAE,SAAS;gBAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC;oBAAE,SAAS;gBAC5F,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,KAAoF;QACtH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU,GAAG,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzI,qGAAqG;QACrG,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAa,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACpI,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC/G,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACzF,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAqB;gBACrM,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAG,yCAAyC;YAC5I,EAAE,CAAC,OAAO,CAAC;gDAC+B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzL,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW;gBACpI,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,WAAW,CAAC,GAAsB,EAAE,EAAU,EAAE,QAAgB;QACpE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO;YAClC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5F,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW;gBACpI,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAsB,EAAE,EAAU,EAAE,QAAgB,EAAE,KAAc;QAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,EAAE,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7I,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW;gBAC/H,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/hub/client.d.ts

@@ -1,69 +0,0 @@
-import { type HubMemberProfile } from "./profile.js";
-import type { HubAuthorizationLease, HubAuthorizationRequest, HubMemberFrame, HubServerFrame, HubMemberTransport } from "./types.js";
-export declare class HubAuthorizationError extends Error {
-    readonly code: "denied" | "unavailable" | "stale";
-    readonly reasonCode: string;
-    constructor(code: "denied" | "unavailable" | "stale", reasonCode: string);
-}
-export interface HubMemberLink {
-    readonly linkEpoch: number;
-    readonly revocationVersion: number;
-    readonly profile: HubMemberProfile;
-    /** The optional features both ends listed: this member's offer ∩ the Hub's welcome (empty for an older Hub). */
-    readonly features: ReadonlySet<string>;
-    current(): boolean;
-    send(frame: HubMemberFrame): Promise<void>;
-    exchange(frame: HubMemberFrame, responseType: HubServerFrame["type"]): Promise<HubServerFrame>;
-}
-export interface HubClientOptions {
-    home: string;
-    hubId: string;
-    memberOrigin: string;
-    current(): boolean;
-    /** Must durably reconcile the current revocation version and journal BEFORE returning. No input here. */
-    reconcile(link: HubMemberLink): Promise<void>;
-    receive(frame: Exclude<HubServerFrame, {
-        type: "welcome";
-    }>, link: HubMemberLink): Promise<void>;
-    hold(code: "unavailable" | "invalid" | "backpressure" | "replaced" | "revoked" | "key-changed"): void;
-    now?: () => number;
-    random?: () => number;
-    /** The optional features this member offers (tests use a smaller list to stand in for an older member). */
-    capabilities?: readonly string[];
-}
-export declare class HubMemberClient implements HubMemberTransport {
-    private readonly options;
-    private profile;
-    private link;
-    private view;
-    private pending;
-    private deferred;
-    private deferredBytes;
-    private workTail;
-    private queuedWork;
-    private queuedWorkBytes;
-    private timer;
-    private stopped;
-    private attempt;
-    private connecting;
-    private opening;
-    private ready;
-    private epoch;
-    private revocation;
-    private firstResolve;
-    private firstReject;
-    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
-    constructor(options: HubClientOptions);
-    private current;
-    start(): Promise<void>;
-    private connect;
-    private receive;
-    private dispatch;
-    private exchange;
-    send(frame: HubMemberFrame): Promise<void>;
-    authorize(request: HubAuthorizationRequest): Promise<HubAuthorizationLease>;
-    private reconnect;
-    private rejectPending;
-    fence(): void;
-    close(): Promise<void>;
-}

package/dist/hub/client.js

@@ -1,300 +0,0 @@
-/** Outbound-only pinned member connection. Reconnect reconciles; it never repeats an input/tool operation. */
-import { WebSocket } from "ws";
-import { randomUUID } from "node:crypto";
-import { HUB_CAPABILITIES, HUB_LIMITS, HUB_OPTIONAL_CAPABILITIES, HUB_PATHS, parseServerFrame, encodeMemberFrame } from "./protocol.js";
-import { HubSocket } from "./socket.js";
-import { HubProtocolError } from "./validation.js";
-import { pinnedHubAgent, HubTlsIdentityError } from "./tls.js";
-import { verifyLease } from "./identity.js";
-import { HubMemberProfileStore } from "./profile.js";
-export class HubAuthorizationError extends Error {
-    code;
-    reasonCode;
-    constructor(code, reasonCode) {
-        super(`Hub authorization ${code}`);
-        this.code = code;
-        this.reasonCode = reasonCode;
-    }
-}
-export class HubMemberClient {
-    options;
-    profile = null;
-    link = null;
-    view = null;
-    pending = new Map();
-    deferred = [];
-    deferredBytes = 0;
-    workTail = Promise.resolve();
-    queuedWork = 0;
-    queuedWorkBytes = 0;
-    timer = null;
-    stopped = false;
-    attempt = 0;
-    connecting = false;
-    opening = null;
-    ready = false;
-    epoch = 0;
-    revocation = 0;
-    firstResolve = null;
-    firstReject = null;
-    bootId = randomUUID();
-    constructor(options) {
-        this.options = options;
-    }
-    current() { return !this.stopped && this.options.current(); }
-    async start() {
-        if (!this.current() || this.profile)
-            throw new HubAuthorizationError("unavailable", "unavailable");
-        this.profile = new HubMemberProfileStore(this.options.home, this.options.hubId).readProfile();
-        if (this.profile.hub.memberOrigin !== this.options.memberOrigin) {
-            this.options.hold("key-changed");
-            throw new HubAuthorizationError("stale", "stale");
-        }
-        await new Promise((resolve, reject) => { this.firstResolve = resolve; this.firstReject = reject; this.connect(); });
-    }
-    connect() {
-        if (!this.current() || !this.profile || this.connecting)
-            return;
-        this.connecting = true;
-        this.ready = false;
-        this.deferred = [];
-        this.deferredBytes = 0;
-        const profile = this.profile, handshake = randomUUID();
-        const endpoint = new URL(HUB_PATHS.connect, profile.hub.memberOrigin);
-        endpoint.protocol = "wss:";
-        const agent = pinnedHubAgent(profile.hub, () => this.current());
-        const ws = new WebSocket(endpoint, { headers: { Authorization: `Bearer ${profile.credential}` }, agent,
-            followRedirects: false, handshakeTimeout: HUB_LIMITS.rpcTimeout, maxPayload: HUB_LIMITS.frame, perMessageDeflate: false });
-        this.opening = ws;
-        let connected = false, finished = false;
-        const failed = (error) => {
-            if (finished)
-                return;
-            finished = true;
-            this.connecting = false;
-            if (this.opening === ws)
-                this.opening = null;
-            agent.destroy();
-            if (!this.current())
-                return;
-            if (error instanceof HubTlsIdentityError) {
-                this.options.hold("key-changed");
-                this.stopped = true;
-            }
-            if (!connected) {
-                if (!this.stopped)
-                    this.options.hold("unavailable");
-                this.firstReject?.(new HubAuthorizationError("unavailable", "unavailable"));
-                this.firstReject = this.firstResolve = null;
-                this.reconnect();
-            }
-        };
-        ws.once("error", failed);
-        ws.once("close", () => failed());
-        ws.once("open", () => {
-            if (!this.current()) {
-                ws.terminate();
-                return;
-            }
-            this.opening = null;
-            connected = true;
-            this.connecting = false;
-            let link;
-            const handshakeTimer = setTimeout(() => link.end(), HUB_LIMITS.rpcTimeout);
-            handshakeTimer.unref();
-            link = new HubSocket(ws, { current: () => this.current() && this.link === link, parse: parseServerFrame, encode: encodeMemberFrame,
-                receive: frame => this.receive(frame, link, handshake, handshakeTimer), closed: code => {
-                    clearTimeout(handshakeTimer);
-                    const wasStopped = this.stopped;
-                    if (code === "replaced" || code === "revoked")
-                        this.stopped = true;
-                    if (this.link !== link)
-                        return;
-                    this.link = null;
-                    this.view = null;
-                    this.ready = false;
-                    this.deferred = [];
-                    this.deferredBytes = 0;
-                    this.rejectPending();
-                    if (!wasStopped)
-                        this.options.hold(code);
-                    this.firstReject?.(new HubAuthorizationError("unavailable", code));
-                    this.firstReject = this.firstResolve = null;
-                    this.reconnect();
-                } });
-            this.link = link;
-            void link.send({ v: 1, type: "hello", requestId: handshake, linkEpoch: 0,
-                payload: { supportedVersions: [1], capabilities: [...HUB_CAPABILITIES, ...(this.options.capabilities ?? HUB_OPTIONAL_CAPABILITIES)], memberBootId: this.bootId } }).catch(() => link.end());
-        });
-    }
-    async receive(frame, link, handshake, timeout) {
-        if (!link.current())
-            return;
-        if (!this.view) {
-            if (frame.type === "welcome" && frame.requestId === handshake && frame.payload.hubId !== this.profile.hub.hubId) {
-                this.fence();
-                this.options.hold("key-changed");
-                return;
-            }
-            if (frame.type !== "welcome" || frame.requestId !== handshake || frame.payload.hubId !== this.profile.hub.hubId || frame.payload.fleetId !== this.profile.fleetId
-                || frame.linkEpoch !== frame.payload.linkEpoch || frame.payload.revocationVersion < this.revocation)
-                throw new HubProtocolError("stale");
-            clearTimeout(timeout);
-            this.epoch = frame.linkEpoch;
-            this.revocation = frame.payload.revocationVersion;
-            const profile = this.profile, epoch = this.epoch;
-            const self = this, offered = this.options.capabilities ?? HUB_OPTIONAL_CAPABILITIES;
-            const features = new Set(offered.includes("welcome-caps-v1") ? offered.filter(c => frame.payload.capabilities?.includes(c)) : []);
-            const view = { profile: structuredClone(profile), linkEpoch: epoch, features, get revocationVersion() { return self.revocation; },
-                current: () => this.current() && this.link === link && this.view === view && this.epoch === epoch && link.current(),
-                send: value => {
-                    if (!view.current() || value.linkEpoch !== epoch || value.type === "hello")
-                        return Promise.reject(new HubAuthorizationError("stale", "stale"));
-                    if (value.type === "exposure.quota" && !features.has("quota-band-v1"))
-                        return Promise.reject(new HubAuthorizationError("unavailable", "incompatible"));
-                    return link.send(value);
-                },
-                exchange: (value, type) => this.exchange(value, type, view) };
-            this.view = view;
-            // Do not await reconciliation on the receive queue: its RPC response arrives on that queue.
-            void this.options.reconcile(view).then(async () => {
-                if (!view.current())
-                    return;
-                this.ready = true;
-                this.attempt = 0;
-                this.firstResolve?.();
-                this.firstReject = this.firstResolve = null;
-                const queued = this.deferred.splice(0);
-                this.deferredBytes = 0;
-                for (const waiting of queued) {
-                    if (!view.current())
-                        return;
-                    await this.dispatch(waiting, view);
-                }
-            }).catch(error => link.end(error instanceof HubProtocolError && error.code === "backpressure" ? "backpressure" : "unavailable"));
-            return;
-        }
-        const view = this.view;
-        if (frame.type === "welcome" || frame.linkEpoch !== this.epoch)
-            throw new HubProtocolError("stale");
-        const pending = this.pending.get(frame.requestId);
-        if (pending) {
-            if (frame.type !== pending.expected)
-                throw new HubProtocolError();
-            clearTimeout(pending.timer);
-            this.pending.delete(frame.requestId);
-            pending.resolve(frame);
-            return;
-        }
-        if (frame.type === "authorize.result" || frame.type === "reconcile")
-            throw new HubProtocolError();
-        if (!this.ready) {
-            const bytes = Buffer.byteLength(JSON.stringify(frame));
-            if (this.deferred.length + this.queuedWork >= HUB_LIMITS.pending || this.deferredBytes + this.queuedWorkBytes + bytes > HUB_LIMITS.sendQueue)
-                throw new HubProtocolError("backpressure");
-            this.deferredBytes += bytes;
-            this.deferred.push(frame);
-            return;
-        }
-        await this.dispatch(frame, view);
-    }
-    async dispatch(frame, view) {
-        if (!view.current() || frame.type === "welcome")
-            throw new HubProtocolError("stale");
-        if (frame.type === "revoke") {
-            if (frame.payload.revocationVersion < this.revocation)
-                throw new HubProtocolError("stale");
-            this.revocation = frame.payload.revocationVersion;
-        }
-        if (frame.type === "question") {
-            if (frame.payload.identity.issuer !== view.profile.hub.hubId || frame.payload.identity.issuerKeyId !== view.profile.issuerKeyId) {
-                this.fence();
-                this.options.hold("key-changed");
-                return;
-            }
-            // Admission awaits authorize() on this very socket. Queue work separately so its reply (or a
-            // revocation) can be processed; never block the control receive queue behind external work.
-            const bytes = Buffer.byteLength(JSON.stringify(frame));
-            if (this.queuedWork + this.deferred.length >= HUB_LIMITS.pending || this.queuedWorkBytes + this.deferredBytes + bytes > HUB_LIMITS.sendQueue)
-                throw new HubProtocolError("backpressure");
-            this.queuedWork++;
-            this.queuedWorkBytes += bytes;
-            this.workTail = this.workTail.then(async () => {
-                if (view.current())
-                    await this.options.receive(frame, view);
-            }).catch(error => {
-                if (view.current())
-                    this.link?.end(error instanceof HubProtocolError && error.code === "backpressure" ? "backpressure" : "unavailable");
-            }).finally(() => { this.queuedWork--; this.queuedWorkBytes -= bytes; });
-            return;
-        }
-        await this.options.receive(frame, view);
-    }
-    async exchange(frame, expected, view) {
-        if (!view.current() || this.pending.has(frame.requestId) || this.pending.size >= HUB_LIMITS.pending)
-            throw new HubAuthorizationError("unavailable", "backpressure");
-        const result = new Promise((resolve, reject) => {
-            const timer = setTimeout(() => { this.pending.delete(frame.requestId); reject(new HubAuthorizationError("unavailable", "uncertain")); }, HUB_LIMITS.rpcTimeout);
-            timer.unref();
-            this.pending.set(frame.requestId, { expected, resolve, reject, timer });
-        });
-        void view.send(frame).catch(() => { const p = this.pending.get(frame.requestId); if (p) {
-            clearTimeout(p.timer);
-            this.pending.delete(frame.requestId);
-            p.reject(new HubAuthorizationError("unavailable", "uncertain"));
-        } });
-        return result;
-    }
-    async send(frame) {
-        if (!this.ready || !this.view?.current())
-            throw new HubAuthorizationError("unavailable", "unavailable");
-        await this.view.send(frame);
-    }
-    async authorize(request) {
-        const view = this.view;
-        if (!this.ready || !view?.current())
-            throw new HubAuthorizationError("unavailable", "unavailable");
-        const result = await this.exchange({ v: 1, type: "authorize.request", requestId: randomUUID(), linkEpoch: this.epoch, payload: request }, "authorize.result", view);
-        if (!view.current() || result.type !== "authorize.result")
-            throw new HubAuthorizationError("stale", "stale");
-        if (!result.payload.ok)
-            throw new HubAuthorizationError("denied", result.payload.reasonCode);
-        try {
-            return verifyLease(result.payload.lease, request, { linkEpoch: this.epoch, revocationVersion: this.revocation, now: this.options.now?.() ?? Date.now() });
-        }
-        catch {
-            throw new HubAuthorizationError("stale", "stale");
-        }
-    }
-    reconnect() {
-        if (!this.current() || this.timer)
-            return;
-        const base = Math.min(30_000, 250 * 2 ** Math.min(this.attempt++, 7));
-        this.timer = setTimeout(() => { this.timer = null; this.connect(); }, Math.floor(base * (1 + (this.options.random?.() ?? Math.random()) * 0.25)));
-        this.timer.unref();
-    }
-    rejectPending() {
-        for (const p of this.pending.values()) {
-            clearTimeout(p.timer);
-            p.reject(new HubAuthorizationError("unavailable", "uncertain"));
-        }
-        this.pending.clear();
-    }
-    fence() {
-        this.stopped = true;
-        this.ready = false;
-        if (this.timer)
-            clearTimeout(this.timer);
-        this.timer = null;
-        this.opening?.terminate();
-        this.opening = null;
-        this.link?.end();
-        this.link = null;
-        this.view = null;
-        this.rejectPending();
-        this.firstReject?.(new HubAuthorizationError("unavailable", "unavailable"));
-        this.firstReject = this.firstResolve = null;
-    }
-    async close() { this.fence(); }
-}
-//# sourceMappingURL=client.js.map

package/dist/hub/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/hub/client.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACxI,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAyB,MAAM,cAAc,CAAC;AAE5E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB,IAAI;IAA+C,UAAU;IAAlF,YAAqB,IAAwC,EAAW,UAAkB;QAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;oBAA5G,IAAI;0BAA+C,UAAU;IAAgD,CAAC;CACpI;AAoBD,MAAM,OAAO,eAAe;IAqBG,OAAO;IApB5B,OAAO,GAA4B,IAAI,CAAC;IACxC,IAAI,GAAqD,IAAI,CAAC;IAC9D,IAAI,GAAyB,IAAI,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,QAAQ,GAAqB,EAAE,CAAC;IAChC,aAAa,GAAG,CAAC,CAAC;IAClB,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,UAAU,GAAG,CAAC,CAAC;IACf,eAAe,GAAG,CAAC,CAAC;IACpB,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,CAAC,CAAC;IACZ,UAAU,GAAG,KAAK,CAAC;IACnB,OAAO,GAAqB,IAAI,CAAC;IACjC,KAAK,GAAG,KAAK,CAAC;IACd,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAwB,IAAI,CAAC;IACzC,WAAW,GAAoC,IAAI,CAAC;IACnD,MAAM,GAAG,UAAU,EAAE,CAAC;IAC/B,YAA6B,OAAyB;uBAAzB,OAAO;IAAqB,CAAC;IAClD,OAAO,KAAc,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9F,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACzJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,CAAC;IACO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAChE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC;QAClG,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK;YACpG,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7H,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,SAAS,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE;YACjC,IAAI,QAAQ;gBAAE,OAAO;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAC7C,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YAC5B,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;YACpG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;QACtN,CAAC,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAChH,IAAI,IAAgD,CAAC;YACrD,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YACnG,IAAI,GAAG,IAAI,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB;gBAChI,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACrF,YAAY,CAAC,cAAc,CAAC,CAAC;oBAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC9D,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACnE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;wBAAE,OAAO;oBAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;oBAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;oBAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;oBACnG,IAAI,CAAC,aAAa,EAAE,CAAC;oBAAC,IAAI,CAAC,UAAU;wBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpM,CAAC,EAAE,CAAC,CAAC;YACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;gBACtE,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChM,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAA+C,EAAE,SAAiB,EAAE,OAAuB;QACtI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACjH,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAQ,CAAC,OAAO;mBAC9J,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3I,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACvG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAQ,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC;YACpF,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvJ,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,iBAAiB,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9I,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE;gBACnH,IAAI,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC/I,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;oBACvJ,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;gBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,4FAA4F;YAC5F,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;oBAAE,OAAO;gBAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACxG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC/D,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;wBAAE,OAAO;oBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;YACpG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACjI,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;YAClE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QACpG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,GAAG,KAAK,GAAG,UAAU,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACzL,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QACjE,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,KAAqB,EAAE,IAAmB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAChI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO;YACzD,CAAC;YACD,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,GAAG,KAAK,GAAG,UAAU,CAAC,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACzL,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC;YACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC5C,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACf,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC1I,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,KAAqB,EAAE,QAAgC,EAAE,IAAmB;QACjG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpK,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/K,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7N,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAqB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvI,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAAgC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACpK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB;YAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7F,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAClK,MAAM,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC;IACO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACxK,CAAC;IACO,aAAa;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC1J,CAAC;IACD,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACrG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IACvP,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC/C"}