@tapflowio/relay 0.28.0 → 0.29.0

package/dist/admission/HostBootGate.js

@@ -0,0 +1,388 @@
+import { isSettled, SETTLE } from './settle.js';
+/** Numbers and their sources: L2 admission plan, appendix 숫자 결정. */
+export const GATE_DEFAULTS = {
+    bootMs: 180_000,
+    settleCapMs: 120_000,
+    noSampleMs: 90_000,
+    humanWaitMs: 60_000,
+    reboundMs: 30_000,
+    agingCount: 3,
+    agingWindowMs: 45_000,
+    recentRefusalMs: 60_000,
+};
+/**
+ * Two agents on one Mac each report every 5 s, and each report is the host's CPU averaged since that agent's
+ * previous one. Taking both would make `SETTLE.samples` mean half the time it was measured at, so a report
+ * closer than this to the last one taken is skipped.
+ */
+const MIN_SAMPLE_GAP_MS = 4_000;
+export class HostBootGate {
+    now;
+    timing;
+    hosts = new Map();
+    constructor(now, timing = GATE_DEFAULTS) {
+        this.now = now;
+        this.timing = timing;
+    }
+    admit(req) {
+        const fx = [];
+        const host = this.host(req.hostKey);
+        const now = this.now();
+        if (host.reservation?.sessionId === req.sessionId) {
+            // The same person asked again (a reconnect re-sends its boot). Keep their place and their clock.
+            fx.push({ kind: 'withdraw', sessionId: req.sessionId, requestId: host.reservation.requestId, why: 'replaced', message: host.reservation.message });
+            if (req.cost === 'warm') {
+                host.reservation = null;
+                fx.push(this.deliverOf(req));
+            }
+            else {
+                host.reservation = { ...host.reservation, requestId: req.requestId, message: req.message, reason: this.waitReason(host) };
+                fx.push(this.waitingOf(host.reservation));
+            }
+            return fx;
+        }
+        if (host.slot?.sessionId === req.sessionId) {
+            // A re-boot of the device already holding the slot: the agent supersedes its own boot, and the Mac is
+            // paying for one boot, not two. The slot follows the newest correlator so only its failure releases it.
+            Object.assign(host.slot, { requestId: req.requestId, phase: 'booting', since: now, readyAt: null, samples: [], droppedFirst: false, reboundAt: null });
+            fx.push(this.deliverOf(req));
+            return fx;
+        }
+        if (req.cost === 'warm') {
+            fx.push(this.deliverOf(req));
+            return fx;
+        }
+        // Below the same-session and warm branches on purpose: a re-boot of the slot's own device and a device already up
+        // add no boot to the Mac, and refusing the first would orphan the slot until its boot timeout.
+        const critical = this.isCritical(host);
+        const windowOpen = host.agingWindowUntil !== null;
+        if (req.booterClass === 'automated') {
+            if (critical) {
+                host.lastAutomatedRefusalAt = now;
+                fx.push({ kind: 'refuse', sessionId: req.sessionId, requestId: req.requestId, reason: 'host-memory-critical', message: req.message });
+            }
+            else if (host.slot === null && (windowOpen || host.reservation === null)) {
+                this.takeSlot(host, req);
+                host.humanStreak = 0;
+                host.agingWindowUntil = null;
+                fx.push(this.deliverOf(req));
+            }
+            else {
+                host.lastAutomatedRefusalAt = now;
+                fx.push({ kind: 'refuse', sessionId: req.sessionId, requestId: req.requestId, reason: 'host-booting', message: req.message });
+            }
+            return fx;
+        }
+        if (host.slot === null && !windowOpen && !critical) {
+            this.takeSlot(host, req);
+            this.noteHumanGrant(host);
+            fx.push(this.deliverOf(req));
+        }
+        else if (host.reservation === null) {
+            host.reservation = { sessionId: req.sessionId, requestId: req.requestId, message: req.message, since: now, reason: this.waitReason(host) };
+            fx.push(this.waitingOf(host.reservation));
+        }
+        else {
+            // The one place is taken. A second person at once is rare enough to let through rather than queue.
+            fx.push({ kind: 'log', event: 'overlap', hostKey: req.hostKey, sessionId: req.sessionId });
+            const held = host.reservation;
+            if (host.slot === null && critical) {
+                // The free slot goes to whoever asked first: the held person goes now, and this one takes their place.
+                host.reservation = { sessionId: req.sessionId, requestId: req.requestId, message: req.message, since: now, reason: this.waitReason(host) };
+                this.deliverAnyway(host, held, fx);
+                fx.push(this.waitingOf(host.reservation));
+            }
+            else {
+                this.deliverAnyway(host, req, fx);
+            }
+        }
+        return fx;
+    }
+    onEvent(ev) {
+        const fx = [];
+        switch (ev.kind) {
+            case 'ready': {
+                const found = this.slotOf(ev.sessionId);
+                if (found) {
+                    if (ev.cold === false) {
+                        // Charged as cold, and the agent found the device running: nothing to wait for.
+                        this.release(found.key, found.host, fx);
+                    }
+                    else {
+                        Object.assign(found.host.slot, { phase: 'settling', readyAt: this.now(), samples: [], droppedFirst: false, lastSampleAt: null });
+                    }
+                }
+                else if (ev.cold === true) {
+                    // Let through as warm, and the agent had to bring it up after all (stopped between our view and its).
+                    const host = this.host(ev.hostKey);
+                    if (host.slot === null) {
+                        const now = this.now();
+                        host.slot = { sessionId: ev.sessionId, requestId: '', phase: 'settling', since: now, readyAt: now, samples: [], droppedFirst: false, lastSampleAt: null, reboundAt: null };
+                    }
+                    else {
+                        fx.push({ kind: 'log', event: 'overlap', hostKey: ev.hostKey, sessionId: ev.sessionId });
+                    }
+                }
+                break;
+            }
+            case 'sample': {
+                const slot = this.hosts.get(ev.hostKey)?.slot;
+                if (!slot || slot.phase !== 'settling')
+                    break;
+                const now = this.now();
+                if (slot.lastSampleAt !== null && now - slot.lastSampleAt < MIN_SAMPLE_GAP_MS)
+                    break;
+                if (slot.lastSampleAt !== null && now - slot.lastSampleAt > SETTLE.freshMs)
+                    slot.samples = [];
+                slot.lastSampleAt = now;
+                if (!slot.droppedFirst) {
+                    slot.droppedFirst = true;
+                    break;
+                }
+                slot.samples.push(ev.cpuPercent);
+                if (isSettled(slot.samples))
+                    this.release(ev.hostKey, this.host(ev.hostKey), fx);
+                break;
+            }
+            case 'pressure': {
+                const host = this.host(ev.hostKey);
+                const now = this.now();
+                if (ev.critical) {
+                    const was = this.isCritical(host);
+                    host.criticalUntil = now + SETTLE.freshMs;
+                    if (!was) {
+                        fx.push({ kind: 'log', event: 'memory-critical', hostKey: ev.hostKey });
+                        if (host.agingWindowUntil !== null)
+                            host.windowLeftMs = Math.max(0, host.agingWindowUntil - now);
+                        this.refreshWaiting(host, fx);
+                    }
+                }
+                else if (host.criticalUntil !== null) {
+                    host.criticalUntil = null;
+                    this.criticalEnded(host, fx);
+                }
+                break;
+            }
+            case 'boot-error': {
+                const found = this.slotOf(ev.sessionId);
+                if (found && (ev.requestId === undefined || ev.requestId === found.host.slot.requestId)) {
+                    this.release(found.key, found.host, fx);
+                }
+                break;
+            }
+            case 'shutdown-done':
+            case 'session-removed': {
+                this.withdrawHeld(ev.sessionId, fx);
+                const found = this.slotOf(ev.sessionId);
+                if (found)
+                    this.release(found.key, found.host, fx);
+                break;
+            }
+            case 'browser-closed':
+                this.withdrawHeld(ev.sessionId, fx);
+                break;
+            case 'rebound': {
+                const found = this.slotOf(ev.sessionId);
+                if (found)
+                    found.host.slot.reboundAt = this.now();
+                break;
+            }
+            default: {
+                const never = ev;
+                throw new Error(`unhandled gate event ${JSON.stringify(never)}`);
+            }
+        }
+        return fx;
+    }
+    /** Act on every deadline that has passed. */
+    tick() {
+        const fx = [];
+        const now = this.now();
+        const t = this.timing;
+        for (const [key, host] of this.hosts) {
+            // First, so a reservation the expiry frees goes out in this same tick.
+            if (host.criticalUntil !== null && now >= host.criticalUntil) {
+                host.criticalUntil = null;
+                fx.push({ kind: 'log', event: 'memory-critical-stale', hostKey: key });
+                this.criticalEnded(host, fx);
+            }
+            const slot = host.slot;
+            if (slot) {
+                let expired = null;
+                // Only while booting: once the device is up its slot runs on the settle clocks, and the automated clients
+                // re-boot after a rebind only when their next step needs it, so a settling device would be released early.
+                if (slot.phase === 'booting' && slot.reboundAt !== null && now >= slot.reboundAt + t.reboundMs)
+                    expired = 'rebound-abandoned';
+                else if (slot.phase === 'booting' && now >= slot.since + t.bootMs)
+                    expired = 'boot-timeout';
+                else if (slot.phase === 'settling' && slot.readyAt !== null) {
+                    if (now >= slot.readyAt + t.settleCapMs)
+                        expired = 'settle-timeout';
+                    else if (slot.lastSampleAt === null && now >= slot.readyAt + t.noSampleMs)
+                        expired = 'no-samples';
+                }
+                if (expired) {
+                    fx.push({ kind: 'log', event: expired, hostKey: key, sessionId: slot.sessionId });
+                    this.release(key, host, fx);
+                }
+            }
+            // Not while critical: automation is refused then, so the window would run out with nobody able to use it.
+            // `criticalEnded` starts it again.
+            if (host.agingWindowUntil !== null && now >= host.agingWindowUntil && !this.isCritical(host)) {
+                host.agingWindowUntil = null;
+                host.humanStreak = 0;
+                this.dispatchReservation(host, fx);
+            }
+            const held = host.reservation;
+            if (held && now >= held.since + t.humanWaitMs) {
+                host.reservation = null;
+                fx.push({ kind: 'log', event: 'human-wait-expired', hostKey: key, sessionId: held.sessionId });
+                this.deliverAnyway(host, held, fx);
+            }
+        }
+        return fx;
+    }
+    /**
+     * What `admit` would answer an automated cold boot on this Mac now — `null` for go — without recording anything.
+     * A lease tries Macs in turn, and an `admit` per candidate would stamp a refusal on each Mac it passed over: that
+     * stamp is what opens an aging window for automation, so people on those Macs would be made to wait for a boot
+     * that went elsewhere. Mirrors the automated branch of `admit` and must move with it.
+     */
+    wouldRefuseAutomated(hostKey) {
+        const host = this.hosts.get(hostKey);
+        if (!host)
+            return null;
+        if (this.isCritical(host))
+            return 'host-memory-critical';
+        return host.slot === null && (host.agingWindowUntil !== null || host.reservation === null) ? null : 'host-booting';
+    }
+    /** Whether a cold boot is being paid for on this Mac now. The relay pauses its CPU join gate while it is. */
+    isBooting(hostKey) {
+        return this.hosts.get(hostKey)?.slot != null;
+    }
+    release(key, host, fx) {
+        host.slot = null;
+        const now = this.now();
+        const automationWaiting = host.lastAutomatedRefusalAt !== null && now - host.lastAutomatedRefusalAt <= this.timing.recentRefusalMs;
+        if (automationWaiting && host.humanStreak >= this.timing.agingCount) {
+            host.agingWindowUntil = now + this.timing.agingWindowMs;
+            fx.push({ kind: 'log', event: 'aging-window', hostKey: key });
+            return;
+        }
+        this.dispatchReservation(host, fx);
+    }
+    criticalEnded(host, fx) {
+        // A window that opened during critical gets its whole length; one that was running gets what it had left.
+        if (host.agingWindowUntil !== null)
+            host.agingWindowUntil = this.now() + (host.windowLeftMs ?? this.timing.agingWindowMs);
+        host.windowLeftMs = null;
+        this.dispatchReservation(host, fx);
+        this.refreshWaiting(host, fx);
+    }
+    /**
+     * A boot let through regardless — a second person while the reservation is taken, or a person whose wait ran
+     * out. With the slot free it takes the slot, so the boot is tracked to its settle like any other: free here means
+     * the Mac was critical, and letting it through slotless would let the next automated boot start beside it the
+     * moment pressure cleared. An open aging window keeps it slotless only while automation can use that slot; under
+     * critical pressure it cannot, and a window frozen by critical can outlast a person's wait.
+     */
+    deliverAnyway(host, req, fx) {
+        if (host.slot === null && (host.agingWindowUntil === null || this.isCritical(host))) {
+            this.takeSlot(host, req);
+            this.noteHumanGrant(host);
+        }
+        fx.push({ kind: 'deliver', sessionId: req.sessionId, requestId: req.requestId, message: req.message });
+    }
+    isCritical(host) {
+        return host.criticalUntil !== null && this.now() < host.criticalUntil;
+    }
+    waitReason(host) {
+        return this.isCritical(host) ? 'host-memory-critical' : 'host-booting';
+    }
+    /** Tell a held person when what they wait for has changed, keeping their place and clock. Called on each change of
+     *  pressure, since that is the only thing `waitReason` reads. */
+    refreshWaiting(host, fx) {
+        const held = host.reservation;
+        if (!held)
+            return;
+        const reason = this.waitReason(host);
+        if (reason === held.reason)
+            return;
+        held.reason = reason;
+        fx.push(this.waitingOf(held));
+    }
+    waitingOf(held) {
+        return { kind: 'waiting', sessionId: held.sessionId, requestId: held.requestId, until: held.since + this.timing.humanWaitMs, reason: held.reason, message: held.message };
+    }
+    dispatchReservation(host, fx) {
+        const held = host.reservation;
+        if (!held || host.slot !== null || host.agingWindowUntil !== null || this.isCritical(host))
+            return;
+        host.reservation = null;
+        this.takeSlot(host, held);
+        this.noteHumanGrant(host);
+        fx.push({ kind: 'deliver', sessionId: held.sessionId, requestId: held.requestId, message: held.message });
+    }
+    noteHumanGrant(host) {
+        const automationWaiting = host.lastAutomatedRefusalAt !== null && this.now() - host.lastAutomatedRefusalAt <= this.timing.recentRefusalMs;
+        host.humanStreak = automationWaiting ? host.humanStreak + 1 : 0;
+    }
+    withdrawHeld(sessionId, fx) {
+        for (const host of this.hosts.values()) {
+            if (host.reservation?.sessionId !== sessionId)
+                continue;
+            fx.push({ kind: 'withdraw', sessionId, requestId: host.reservation.requestId, why: 'cancelled', message: host.reservation.message });
+            host.reservation = null;
+        }
+    }
+    takeSlot(host, req) {
+        host.slot = { sessionId: req.sessionId, requestId: req.requestId, phase: 'booting', since: this.now(), readyAt: null, samples: [], droppedFirst: false, lastSampleAt: null, reboundAt: null };
+    }
+    deliverOf(req) {
+        return { kind: 'deliver', sessionId: req.sessionId, requestId: req.requestId, message: req.message };
+    }
+    slotOf(sessionId) {
+        for (const [key, host] of this.hosts)
+            if (host.slot?.sessionId === sessionId)
+                return { key, host };
+        return null;
+    }
+    host(key) {
+        let host = this.hosts.get(key);
+        if (!host) {
+            host = { slot: null, reservation: null, humanStreak: 0, lastAutomatedRefusalAt: null, agingWindowUntil: null, criticalUntil: null, windowLeftMs: null };
+            this.hosts.set(key, host);
+        }
+        return host;
+    }
+    /** When `tick()` must next run, or null when nothing is pending. */
+    nextDeadline() {
+        const t = this.timing;
+        let next = null;
+        const consider = (at) => { if (next === null || at < next)
+            next = at; };
+        for (const host of this.hosts.values()) {
+            const slot = host.slot;
+            if (slot) {
+                if (slot.phase === 'booting' && slot.reboundAt !== null)
+                    consider(slot.reboundAt + t.reboundMs);
+                if (slot.phase === 'booting')
+                    consider(slot.since + t.bootMs);
+                else if (slot.readyAt !== null) {
+                    consider(slot.readyAt + t.settleCapMs);
+                    if (slot.lastSampleAt === null)
+                        consider(slot.readyAt + t.noSampleMs);
+                }
+            }
+            if (host.criticalUntil !== null)
+                consider(host.criticalUntil);
+            // A window does not run out while critical, and a past deadline here would spin the relay's timer.
+            if (host.agingWindowUntil !== null && !this.isCritical(host))
+                consider(host.agingWindowUntil);
+            if (host.reservation)
+                consider(host.reservation.since + t.humanWaitMs);
+        }
+        return next;
+    }
+}
+//# sourceMappingURL=HostBootGate.js.map

package/dist/admission/HostBootGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostBootGate.js","sourceRoot":"","sources":["../../src/admission/HostBootGate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAgD/C,oEAAoE;AACpE,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,MAAM,EAAE,OAAO;IACf,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,MAAM;CACxB,CAAA;AAsFD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAE/B,MAAM,OAAO,YAAY;IAIJ;IACA;IAJF,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAA;IAEnD,YACmB,GAAiB,EACjB,SAAqB,aAAa;QADlC,QAAG,GAAH,GAAG,CAAc;QACjB,WAAM,GAAN,MAAM,CAA4B;IAClD,CAAC;IAEJ,KAAK,CAAC,GAAmB;QACvB,MAAM,EAAE,GAAgB,EAAE,CAAA;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,IAAI,IAAI,CAAC,WAAW,EAAE,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAClD,iGAAiG;YACjG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YAClJ,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;gBACvB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAA;gBACzH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;YAC3C,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAC3C,sGAAsG;YACtG,wGAAwG;YACxG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACtJ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5B,OAAO,EAAE,CAAA;QACX,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5B,OAAO,EAAE,CAAA;QACX,CAAC;QAED,kHAAkH;QAClH,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAA;QACjD,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,sBAAsB,GAAG,GAAG,CAAA;gBACjC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YACvI,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBACxB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;gBACpB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;gBAC5B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,sBAAsB,GAAG,GAAG,CAAA;gBACjC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/H,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACxB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;YACzB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QAC9B,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAA;YAC1I,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3C,CAAC;aAAM,CAAC;YACN,mGAAmG;YACnG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAA;YAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;YAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;gBACnC,uGAAuG;gBACvG,IAAI,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAA;gBAC1I,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;gBAClC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;YAC3C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,CAAC,EAAa;QACnB,MAAM,EAAE,GAAgB,EAAE,CAAA;QAC1B,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,EAAE,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBACtB,gFAAgF;wBAChF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;oBACzC,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;oBACnI,CAAC;gBACH,CAAC;qBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC5B,sGAAsG;oBACtG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;oBAClC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;wBACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;oBAC5K,CAAC;yBAAM,CAAC;wBACN,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;oBAC1F,CAAC;gBACH,CAAC;gBACD,MAAK;YACP,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAA;gBAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;oBAAE,MAAK;gBAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,iBAAiB;oBAAE,MAAK;gBACpF,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;gBAC7F,IAAI,CAAC,YAAY,GAAG,GAAG,CAAA;gBACvB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBAAC,MAAK;gBAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAA;gBAChC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;gBAChF,MAAK;YACP,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;oBAChB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;oBACjC,IAAI,CAAC,aAAa,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAA;oBACzC,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;wBACvE,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI;4BAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAA;wBAChG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;oBAC/B,CAAC;gBACH,CAAC;qBAAM,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;oBACzB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC9B,CAAC;gBACD,MAAK;YACP,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBACzC,CAAC;gBACD,MAAK;YACP,CAAC;YACD,KAAK,eAAe,CAAC;YACrB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,IAAI,KAAK;oBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAClD,MAAK;YACP,CAAC;YACD,KAAK,gBAAgB;gBACnB,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;gBACnC,MAAK;YACP,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;gBACvC,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBAClD,MAAK;YACP,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,KAAK,GAAU,EAAE,CAAA;gBACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,6CAA6C;IAC7C,IAAI;QACF,MAAM,EAAE,GAAgB,EAAE,CAAA;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,uEAAuE;YACvE,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC7D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;gBACzB,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;gBACtE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC9B,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;YACtB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,OAAO,GAAwB,IAAI,CAAA;gBACvC,0GAA0G;gBAC1G,2GAA2G;gBAC3G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS;oBAAE,OAAO,GAAG,mBAAmB,CAAA;qBACxH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM;oBAAE,OAAO,GAAG,cAAc,CAAA;qBACtF,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC5D,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,WAAW;wBAAE,OAAO,GAAG,gBAAgB,CAAA;yBAC9D,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU;wBAAE,OAAO,GAAG,YAAY,CAAA;gBACnG,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;oBACjF,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC7B,CAAC;YACH,CAAC;YACD,0GAA0G;YAC1G,mCAAmC;YACnC,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7F,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;gBAC5B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;gBACpB,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;YAC7B,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;gBACvB,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;gBAC9F,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,OAAe;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,sBAAsB,CAAA;QACxD,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAA;IACpH,CAAC;IAED,6GAA6G;IAC7G,SAAS,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;IAC9C,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,IAAa,EAAE,EAAe;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAA;QAClI,IAAI,iBAAiB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpE,IAAI,CAAC,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAA;YACvD,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,OAAM;QACR,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACpC,CAAC;IAEO,aAAa,CAAC,IAAa,EAAE,EAAe;QAClD,0GAA0G;QAC1G,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI;YAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACzH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,IAAa,EAAE,GAAyD,EAAE,EAAe;QAC7G,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACxB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IACxG,CAAC;IAEO,UAAU,CAAC,IAAa;QAC9B,OAAO,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAA;IACvE,CAAC;IAEO,UAAU,CAAC,IAAa;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAAA;IACxE,CAAC;IAED;qEACiE;IACzD,cAAc,CAAC,IAAa,EAAE,EAAe;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;QAC7B,IAAI,CAAC,IAAI;YAAE,OAAM;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAM;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/B,CAAC;IAEO,SAAS,CAAC,IAAa;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IAC3K,CAAC;IAEO,mBAAmB,CAAC,IAAa,EAAE,EAAe;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAM;QAClG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACzB,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3G,CAAC;IAEO,cAAc,CAAC,IAAa;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAA;QACzI,IAAI,CAAC,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IAEO,YAAY,CAAC,SAAiB,EAAE,EAAe;QACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,WAAW,EAAE,SAAS,KAAK,SAAS;gBAAE,SAAQ;YACvD,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YACpI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACzB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,IAAa,EAAE,GAA6C;QAC3E,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC/L,CAAC;IAEO,SAAS,CAAC,GAAmB;QACnC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAA;IACtG,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;QAClG,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,IAAI,CAAC,GAAW;QACtB,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;YACvJ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,oEAAoE;IACpE,YAAY;QACV,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA;QACrB,IAAI,IAAI,GAAkB,IAAI,CAAA;QAC9B,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAQ,EAAE,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,GAAG,IAAI;YAAE,IAAI,GAAG,EAAE,CAAA,CAAC,CAAC,CAAA;QACpF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;YACtB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;oBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;gBAC/F,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;qBACxD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,CAAA;oBACtC,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;wBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAA;gBACvE,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC7D,mGAAmG;YACnG,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC7F,IAAI,IAAI,CAAC,WAAW;gBAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/dist/admission/capacity.d.ts

@@ -0,0 +1,51 @@
+/**
+ * How many devices automation may keep up on one Mac, and which idle one goes to make room.
+ *
+ * A boot is what hurts the other sessions on a Mac; a device that has settled does not (`settle.ts`). But devices
+ * add up: 4 iOS simulators on an 8 GB Mac and 9 devices on a 32 GB one kept a person's session at baseline, and
+ * nothing past that was measured. Automation is what piles them up — a flow run or an MCP client ends with
+ * `session:leave`, which leaves the device running — so it is automation that is capped. A person is never counted,
+ * never refused and never has a device shut down for this.
+ *
+ * Pure: the relay hands in the Mac's devices and carries out the answer.
+ */
+/** One device on the Mac, as the cap sees it. */
+export interface CapacityDevice {
+    sessionId: string;
+    /** Android emulators weigh 2: one fills memory like two simulators (M2). */
+    platform: string;
+    /** Started by automation and still up, or being started by it now. */
+    automated: boolean;
+    /** Up and settled enough to be shut down, rather than booting. */
+    booted: boolean;
+    /** Someone holds the session, or watches it. Never shut down. */
+    inUse: boolean;
+    /** The relay can reach its agent, so a shutdown would arrive. */
+    reachable: boolean;
+    /** When automation started it; the oldest goes first. */
+    bootedAt: number;
+}
+export type CapacityPlan = {
+    ok: true;
+    evict: string[];
+} | {
+    ok: false;
+};
+export declare function deviceWeight(platform: string): number;
+/** The default cap: half the Mac's memory in GB, between 1 and 8 (8 GB → 4, the measured point). */
+export declare function defaultCap(memTotalMB: number): number;
+/**
+ * Whether `requester` may cold-boot under `cap`, and which idle automation devices must go first. The requester's
+ * own weight is left out of what is already up: a re-boot of a device automation already runs adds nothing.
+ */
+/**
+ * The one device to shut down when an automated boot is refused because the Mac's memory is critical: the oldest idle
+ * automation device, or none. One per refusal, so memory is freed a device at a time while the client retries, and
+ * stops as soon as the pressure lifts.
+ */
+export declare function idleToFree(devices: readonly CapacityDevice[], requesterId: string): string | null;
+export declare function planCapacity(devices: readonly CapacityDevice[], requester: {
+    sessionId: string;
+    platform: string;
+}, cap: number): CapacityPlan;
+//# sourceMappingURL=capacity.d.ts.map

package/dist/admission/capacity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacity.d.ts","sourceRoot":"","sources":["../../src/admission/capacity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iDAAiD;AACjD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAA;IAChB,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAA;IAClB,kEAAkE;IAClE,MAAM,EAAE,OAAO,CAAA;IACf,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAA;IAClB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAA;AAExE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,oGAAoG;AACpG,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIjG;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,SAAS,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAY9I"}

package/dist/admission/capacity.js

@@ -0,0 +1,49 @@
+/**
+ * How many devices automation may keep up on one Mac, and which idle one goes to make room.
+ *
+ * A boot is what hurts the other sessions on a Mac; a device that has settled does not (`settle.ts`). But devices
+ * add up: 4 iOS simulators on an 8 GB Mac and 9 devices on a 32 GB one kept a person's session at baseline, and
+ * nothing past that was measured. Automation is what piles them up — a flow run or an MCP client ends with
+ * `session:leave`, which leaves the device running — so it is automation that is capped. A person is never counted,
+ * never refused and never has a device shut down for this.
+ *
+ * Pure: the relay hands in the Mac's devices and carries out the answer.
+ */
+export function deviceWeight(platform) {
+    return platform === 'android' ? 2 : 1;
+}
+/** The default cap: half the Mac's memory in GB, between 1 and 8 (8 GB → 4, the measured point). */
+export function defaultCap(memTotalMB) {
+    return Math.min(8, Math.max(1, Math.floor(memTotalMB / 1024 / 2)));
+}
+/**
+ * Whether `requester` may cold-boot under `cap`, and which idle automation devices must go first. The requester's
+ * own weight is left out of what is already up: a re-boot of a device automation already runs adds nothing.
+ */
+/**
+ * The one device to shut down when an automated boot is refused because the Mac's memory is critical: the oldest idle
+ * automation device, or none. One per refusal, so memory is freed a device at a time while the client retries, and
+ * stops as soon as the pressure lifts.
+ */
+export function idleToFree(devices, requesterId) {
+    const idle = devices.filter((d) => d.automated && d.booted && !d.inUse && d.reachable && d.sessionId !== requesterId);
+    if (idle.length === 0)
+        return null;
+    return idle.reduce((a, b) => (b.bootedAt < a.bootedAt ? b : a)).sessionId;
+}
+export function planCapacity(devices, requester, cap) {
+    const counted = devices.filter((d) => d.automated && d.sessionId !== requester.sessionId);
+    let over = counted.reduce((sum, d) => sum + deviceWeight(d.platform), 0) + deviceWeight(requester.platform) - cap;
+    if (over <= 0)
+        return { ok: true, evict: [] };
+    const evict = [];
+    const idle = counted.filter((d) => d.booted && !d.inUse && d.reachable).sort((a, b) => a.bootedAt - b.bootedAt);
+    for (const d of idle) {
+        if (over <= 0)
+            break;
+        evict.push(d.sessionId);
+        over -= deviceWeight(d.platform);
+    }
+    return over <= 0 ? { ok: true, evict } : { ok: false };
+}
+//# sourceMappingURL=capacity.js.map

package/dist/admission/capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacity.js","sourceRoot":"","sources":["../../src/admission/capacity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqBH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;GAGG;AACH;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAkC,EAAE,WAAmB;IAChF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAA;IACrH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAkC,EAAE,SAAkD,EAAE,GAAW;IAC9H,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,CAAC,CAAA;IACzF,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAA;IACjH,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC/G,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,IAAI,CAAC;YAAE,MAAK;QACpB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACvB,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;AACxD,CAAC"}

package/dist/admission/classifyBoot.d.ts

@@ -0,0 +1,17 @@
+import type { DeviceStatus } from '@tapflowio/agent-core';
+import type { DeviceBoot, ServiceTier } from '@tapflowio/protocol';
+/**
+ * Whether a boot will cost the Mac a boot: `cold` brings a device up, `warm` finds it running and only opens a
+ * stream. Decided before the boot is forwarded, because that is when the gate has to charge it — the agent's
+ * own answer (`device:ready.payload.cold`) comes after, and corrects this one in the gate when they differ.
+ *
+ * `deviceStatus` is what the relay last heard: the agent's list at registration, then `booted` on every ready and
+ * `shutdown` on every shutdown. Only `'full-erase'` restarts a running device; `'app-only'`, which the dashboard
+ * sends on every boot, does not.
+ *
+ * **A running device on another service tier than the boot asks for is cold too**: the agent restarts it onto the
+ * tier (`IOSAgent.handleDeviceBoot`, `retier`). Compared only when both sides are known — a boot that asks for
+ * none takes whatever the device has, and a device whose tier is `unsupported` or unreported cannot change.
+ */
+export declare function classifyBoot(deviceStatus: DeviceStatus, payload: Pick<DeviceBoot['payload'], 'resetMode' | 'serviceTier'>, currentTier: ServiceTier | 'unsupported' | undefined): 'cold' | 'warm';
+//# sourceMappingURL=classifyBoot.d.ts.map

package/dist/admission/classifyBoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBoot.d.ts","sourceRoot":"","sources":["../../src/admission/classifyBoot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEzD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAElE;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAC1B,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,EACjE,WAAW,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,GACnD,MAAM,GAAG,MAAM,CAKjB"}

package/dist/admission/classifyBoot.js

@@ -0,0 +1,23 @@
+import { sameServiceTier } from '@tapflowio/agent-core/utils';
+/**
+ * Whether a boot will cost the Mac a boot: `cold` brings a device up, `warm` finds it running and only opens a
+ * stream. Decided before the boot is forwarded, because that is when the gate has to charge it — the agent's
+ * own answer (`device:ready.payload.cold`) comes after, and corrects this one in the gate when they differ.
+ *
+ * `deviceStatus` is what the relay last heard: the agent's list at registration, then `booted` on every ready and
+ * `shutdown` on every shutdown. Only `'full-erase'` restarts a running device; `'app-only'`, which the dashboard
+ * sends on every boot, does not.
+ *
+ * **A running device on another service tier than the boot asks for is cold too**: the agent restarts it onto the
+ * tier (`IOSAgent.handleDeviceBoot`, `retier`). Compared only when both sides are known — a boot that asks for
+ * none takes whatever the device has, and a device whose tier is `unsupported` or unreported cannot change.
+ */
+export function classifyBoot(deviceStatus, payload, currentTier) {
+    if (deviceStatus !== 'booted' || payload.resetMode === 'full-erase')
+        return 'cold';
+    const asked = payload.serviceTier;
+    if (asked && currentTier && currentTier !== 'unsupported' && !sameServiceTier(currentTier, asked))
+        return 'cold';
+    return 'warm';
+}
+//# sourceMappingURL=classifyBoot.js.map

package/dist/admission/classifyBoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBoot.js","sourceRoot":"","sources":["../../src/admission/classifyBoot.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAC1B,YAA0B,EAC1B,OAAiE,EACjE,WAAoD;IAEpD,IAAI,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY;QAAE,OAAO,MAAM,CAAA;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAA;IACjC,IAAI,KAAK,IAAI,WAAW,IAAI,WAAW,KAAK,aAAa,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAChH,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/admission/hostKey.d.ts

@@ -0,0 +1,10 @@
+import type { Session } from '../SessionManager.js';
+/**
+ * Which Mac a session's device runs on. The boot gate counts per Mac, not per agent socket: an iOS and an Android
+ * agent on one Mac page against the same memory. Both agents send the machine's IOPlatformUUID as `agentId`; an
+ * agent that predates it is keyed by its name, so two old agents on one Mac are counted apart — a residual gap,
+ * accepted because it fails open (two boots at once, as before) rather than shut. The session id is the last
+ * resort for an agent with neither, which gates that one session against nothing.
+ */
+export declare function hostKeyOf(session: Pick<Session, 'id' | 'agentId' | 'agentName'>): string;
+//# sourceMappingURL=hostKey.d.ts.map

package/dist/admission/hostKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostKey.d.ts","sourceRoot":"","sources":["../../src/admission/hostKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,SAAS,GAAG,WAAW,CAAC,GAAG,MAAM,CAIxF"}

package/dist/admission/hostKey.js

@@ -0,0 +1,13 @@
+/**
+ * Which Mac a session's device runs on. The boot gate counts per Mac, not per agent socket: an iOS and an Android
+ * agent on one Mac page against the same memory. Both agents send the machine's IOPlatformUUID as `agentId`; an
+ * agent that predates it is keyed by its name, so two old agents on one Mac are counted apart — a residual gap,
+ * accepted because it fails open (two boots at once, as before) rather than shut. The session id is the last
+ * resort for an agent with neither, which gates that one session against nothing.
+ */
+export function hostKeyOf(session) {
+    // `||`, not `??`: the register schema defaults a missing `agentName` to `''`, and an empty key would put every
+    // such agent, on whatever Mac, behind one slot.
+    return session.agentId || session.agentName || `session:${session.id}`;
+}
+//# sourceMappingURL=hostKey.js.map

package/dist/admission/hostKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostKey.js","sourceRoot":"","sources":["../../src/admission/hostKey.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAsD;IAC9E,+GAA+G;IAC/G,gDAAgD;IAChD,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,WAAW,OAAO,CAAC,EAAE,EAAE,CAAA;AACxE,CAAC"}