agent-comms 2.20.2 → 2.21.1

package/dist/core/room-lifecycle.js

@@ -0,0 +1,459 @@
+/**
+ * RoomLifecycle — room CRUD and the requester's own outbound half of the wire protocol: create/get/list, join/leave (local CRDT mutation for an already-known room, or a real wire-level room.join/room.leave round trip via joinRemoteRoom/leaveRemoteRoom when this store's own identity isn't yet admitted), invite/decline, membership-grant revocation, kick, and destroy. Split out of mesh-store.ts to reduce it under the repo's max-lines cap.
+ */
+import { deviceIdFromHex, deviceIdToHex, } from "wire-mesh-core/domain/device-id";
+import { mintCapabilityToken, mintRevocationEntry, } from "wire-mesh-core/domain/tokens";
+import { roomJoinOkSchema, roomMembersOkSchema, } from "wire-mesh-core/generated/protocol";
+import { dmRoomPath, ownerNamedRoomPath, parseRoomPath, slugRoomName, } from "./room-path.js";
+import { ROOM_MEMBER_CAPABILITY } from "./room-token-verification.js";
+import { deleteIssuedRoomGrant, deleteRoomToken, loadIssuedRoomGrant, loadRoomTokens, saveIssuedRoomGrant, saveRoomToken, } from "./identity-store.js";
+import { randomId } from "./random-id.js";
+import { CommsError } from "./store.js";
+import { ROOM_TOKEN_LIFETIME_MS } from "./mesh-store-shared.js";
+import { inviterAgentExtension, parseRoomStateExtension, roomStateExtension, } from "./room-wire-extensions.js";
+export class RoomLifecycle {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Mints and persists the room owner's own self-signed room:member grant: issuer = bearer = owner, no parent, delegationsRemaining: 0. This is deliberately NOT the parent every later member grant chains through -- a delegations-remaining: 0 parent cannot mint any child at all (mintCapabilityToken refuses a child whose own delegationsRemaining isn't strictly less than its parent's, and there is no value less than 0), so a later join/invite grant is its own independent, parent-less, owner-issued root-level token instead (still satisfying the "chain roots at the path's own owner" obligation, since rootIssuer is just the token's own issuer when it carries no parent). This root grant exists purely so the owner has a token to present for its own room actions, uniformly with every other member, per the design's own "every code path that checks membership does the same thing regardless of who it is checking" reasoning.
+     */
+    async mintOwnerRootGrant(roomPath, owner) {
+        const { identity, clock, slot } = this.deps.requireIdentity();
+        const verdict = await mintCapabilityToken({
+            identity,
+            clock,
+            tokenId: randomId(),
+            bearer: deviceIdFromHex(owner),
+            capability: "room:member",
+            scope: { kind: "room", path: roomPath },
+            expires: clock.now() + ROOM_TOKEN_LIFETIME_MS,
+            delegationsRemaining: 0,
+        });
+        if (!verdict.ok) {
+            throw new Error(`MeshStore: failed to mint room owner grant for ${roomPath}: ${verdict.reason}`);
+        }
+        saveRoomToken(slot, roomPath, verdict.token);
+    }
+    async createRoom(opts) {
+        // slugRoomName sanitises an arbitrary caller-supplied name (e.g. from a live create_room tool call, not just an internal cwd basename) into the room-path grammar's [A-Za-z0-9_-]+ charset -- createRoom is the one choke point every room creation goes through, so this is the right place to do it rather than trusting every caller to have pre-slugged, the way the old bare-name id never required at all.
+        const slugName = slugRoomName(opts.name);
+        const localName = opts.type === "secret" ? `_${slugName}` : slugName;
+        const id = ownerNamedRoomPath(opts.owner, localName);
+        if (this.deps.rooms.has(id))
+            throw new CommsError(`Room ${id} already exists`, "ROOM_EXISTS");
+        // Every room creation this store performs is local: opts.owner is always this bridge's own identity (create_room's caller passes ctx.agentId, and one bridge process is one agent is one device), so minting the owner's own root grant here always signs under the identity this store was wired with, never someone else's.
+        await this.mintOwnerRootGrant(id, opts.owner);
+        const room = {
+            id,
+            version: 1,
+            name: slugName,
+            type: opts.type,
+            owner: opts.owner,
+            createdAt: new Date().toISOString(),
+            description: opts.description,
+            members: [opts.owner],
+            invited: [],
+            memberJoins: { [opts.owner]: 1 },
+            memberLeaves: {},
+            invitedJoins: {},
+            invitedLeaves: {},
+            federated: opts.federated ?? false,
+        };
+        this.deps.rooms.set(id, room);
+        this.deps.messages.set(id, []);
+        await this.deps.deliveryEngine.broadcastPatch({
+            type: "room_upsert",
+            room,
+        });
+        return room;
+    }
+    async getRoom(id) {
+        await Promise.resolve();
+        return this.deps.rooms.get(id);
+    }
+    async listRooms(requesterId) {
+        await Promise.resolve();
+        const result = [];
+        for (const room of this.deps.rooms.values()) {
+            if (room.type === "secret" && !room.members.includes(requesterId))
+                continue;
+            result.push(room);
+        }
+        return result;
+    }
+    /**
+     * The remote-join path: roomPath names an owner-named room this store has never seen replicated, so joining it means sending a real wire-level room.join request to the room's own owner and persisting whatever grant comes back, rather than mutating already-known local state. Only ever called for this store's own local agent (one bridge is one agent is one device, per the design's own organising fact) -- there is no wire mechanism by which this node could join a room on a different local agent's behalf.
+     */
+    async joinRemoteRoom(roomPath, agentId) {
+        if (agentId !== this.deps.getPeerId()) {
+            throw new CommsError(`Room ${roomPath} not found`, "ROOM_NOT_FOUND");
+        }
+        const parsed = parseRoomPath(roomPath);
+        if (parsed.kind !== "owner-named") {
+            throw new CommsError(`Room ${roomPath} not found`, "ROOM_NOT_FOUND");
+        }
+        const outcome = await this.deps
+            .requireTransport()
+            .sendRoomRequest(parsed.owner, { verb: ROOM_MEMBER_CAPABILITY, params: { verb: "room.join" } }, { kind: "room", path: roomPath });
+        if (outcome.result !== "ok") {
+            throw new CommsError(`Join request for ${roomPath} was refused (${outcome.code})`, "JOIN_REFUSED");
+        }
+        const parsedOutcome = roomJoinOkSchema.safeParse(outcome);
+        if (!parsedOutcome.success) {
+            throw new CommsError(`Join response for ${roomPath} was malformed`, "MALFORMED_RESPONSE");
+        }
+        const { "granted-token": grantedToken, members: memberList } = parsedOutcome.data;
+        const { slot } = this.deps.requireIdentity();
+        saveRoomToken(slot, roomPath, grantedToken);
+        const members = memberList.map((member) => deviceIdToHex(member.device));
+        const roomState = parseRoomStateExtension(parsedOutcome.data["room-state"]);
+        const room = {
+            id: roomPath,
+            version: 1,
+            name: roomState?.name ?? parsed.localName,
+            // Falls back to "public" only against a peer running without the room-state extension (an older version); this joiner is always in `members` by construction regardless, so a stale "public" classification here never hides the room from its own member -- the one place type is read (listRooms' secret-room filter).
+            type: roomState?.type ?? "public",
+            owner: parsed.owner,
+            createdAt: new Date().toISOString(),
+            description: roomState?.description ?? "",
+            members,
+            invited: [],
+            memberJoins: Object.fromEntries(members.map((member) => [member, 1])),
+            memberLeaves: {},
+            invitedJoins: {},
+            invitedLeaves: {},
+            federated: false,
+        };
+        this.deps.rooms.set(roomPath, room);
+        this.deps.messages.set(roomPath, []);
+        return room;
+    }
+    /**
+     * Refreshes this store's own local copy of a named room's membership and room-state via a real room.members request (P3.6): the same information room.join's own response carries at admission time, available on demand for a member whose local copy may have drifted (a kick, an invite, a rename since it joined). Sent to the room's own owner, the authoritative source for that room's real state. Named rooms only, matching joinRemoteRoom's own restriction -- a DM's "membership" is already fully known from the path itself (the sorted pair of exactly two participants), and this codebase has no Room-object representation for a DM to refresh into (DM state lives in this.dms, keyed by message history, not this.rooms). Throws if this store holds no room:member token for roomPath -- refreshing membership presupposes already being a member, the same NOT_A_MEMBER contract sendRoomMessageDirected already uses.
+     */
+    async refreshRoomMembers(roomPath) {
+        const parsed = parseRoomPath(roomPath);
+        if (parsed.kind !== "owner-named") {
+            throw new CommsError(`Room ${roomPath} not found`, "ROOM_NOT_FOUND");
+        }
+        const { slot } = this.deps.requireIdentity();
+        const token = loadRoomTokens(slot)[roomPath];
+        if (token === undefined) {
+            throw new CommsError(`No room:member token for ${roomPath}`, "NOT_MEMBER");
+        }
+        const outcome = await this.deps
+            .requireTransport()
+            .sendRoomRequest(parsed.owner, { verb: ROOM_MEMBER_CAPABILITY, params: { verb: "room.members" } }, { kind: "room", path: roomPath }, token);
+        if (outcome.result !== "ok") {
+            throw new CommsError(`room.members refresh for ${roomPath} failed (${outcome.code})`, "REFRESH_FAILED");
+        }
+        const parsedOutcome = roomMembersOkSchema.safeParse(outcome);
+        if (!parsedOutcome.success) {
+            throw new CommsError(`room.members response for ${roomPath} was malformed`, "MALFORMED_RESPONSE");
+        }
+        const members = parsedOutcome.data.members.map((member) => deviceIdToHex(member.device));
+        const roomState = parseRoomStateExtension(parsedOutcome.data["room-state"]);
+        const existing = this.deps.rooms.get(roomPath);
+        const room = {
+            id: roomPath,
+            version: (existing?.version ?? 0) + 1,
+            name: roomState?.name ?? existing?.name ?? parsed.localName,
+            type: roomState?.type ?? existing?.type ?? "public",
+            owner: parsed.owner,
+            createdAt: existing?.createdAt ?? new Date().toISOString(),
+            description: roomState?.description ?? existing?.description ?? "",
+            members,
+            invited: existing?.invited ?? [],
+            memberJoins: Object.fromEntries(members.map((member) => [member, 1])),
+            memberLeaves: {},
+            invitedJoins: existing?.invitedJoins ?? {},
+            invitedLeaves: existing?.invitedLeaves ?? {},
+            federated: existing?.federated ?? false,
+        };
+        this.deps.rooms.set(roomPath, room);
+        return room;
+    }
+    /**
+     * The requester's own half of section 6's two-round DM consent flow: sends an ungated room.join scoped to dmRoomPath(this, counterpart) directly to the counterpart, records having initiated it so the counterpart's own reciprocal room.join back auto-approves rather than surfacing as a fresh, unsolicited request, and persists whatever grant comes back. Deliberately outside the CommsStore interface, like connection approval, since it is a wire-mesh-specific concern FileStore has no equivalent for. Safe to call again for the same counterpart later (e.g. after an earlier request expired or was rejected) -- it always sends a fresh request rather than checking for an existing token first.
+     */
+    async requestDmAccess(counterpart) {
+        const dmPath = dmRoomPath(this.deps.getPeerId(), counterpart);
+        this.deps.dmRequestsInitiatedByMe.add(dmPath);
+        const outcome = await this.deps
+            .requireTransport()
+            .sendRoomRequest(counterpart, { verb: ROOM_MEMBER_CAPABILITY, params: { verb: "room.join" } }, { kind: "room", path: dmPath });
+        if (outcome.result !== "ok") {
+            throw new CommsError(`DM access request to ${counterpart} was refused (${outcome.code})`, "JOIN_REFUSED");
+        }
+        const parsedOutcome = roomJoinOkSchema.safeParse(outcome);
+        if (!parsedOutcome.success) {
+            throw new CommsError(`DM access response from ${counterpart} was malformed`, "MALFORMED_RESPONSE");
+        }
+        const { slot } = this.deps.requireIdentity();
+        saveRoomToken(slot, dmPath, parsedOutcome.data["granted-token"]);
+    }
+    /**
+     * Joins a room. For this store's own identity, "already known locally" is not the right gate for skipping real admission: the legacy full-state-sync replicates a room's metadata to every mesh-connected peer the moment it's created, well before that peer has ever been admitted, so a room already present in this.rooms says nothing about whether this store actually holds a valid room:member token for it. The real gate is that token's presence -- absent, this always goes through joinRemoteRoom's real wire-level admission regardless of what this.rooms already knows, so a peer that merely heard about a room never mistakes hearing about it for having joined it. Joining on behalf of a DIFFERENT agentId (this store's own convergence/admin bookkeeping, exercised directly by state-sync-convergence.test.ts) is untouched -- that's a pure local CRDT mutation with no admission concept at all.
+     */
+    async joinRoom(roomId, agentId) {
+        const peerId = this.deps.getPeerId();
+        if (agentId === peerId) {
+            const { slot } = this.deps.requireIdentity();
+            if (loadRoomTokens(slot)[roomId] === undefined) {
+                return this.joinRemoteRoom(roomId, agentId);
+            }
+        }
+        const room = this.deps.rooms.get(roomId);
+        if (!room)
+            return this.joinRemoteRoom(roomId, agentId);
+        const alreadyMember = room.members.includes(agentId);
+        if (!alreadyMember && room.type !== "public") {
+            if (!room.invited.includes(agentId) && room.owner !== agentId) {
+                throw new CommsError(`Not invited to room ${roomId}`, "NOT_INVITED");
+            }
+        }
+        this.deps.deliveryEngine.bump(room);
+        this.deps.deliveryEngine.recordMemberOp(room, "member", "join", agentId);
+        if (alreadyMember || room.type !== "public") {
+            // Consuming an invitation (or re-joining) retires the invited entry.
+            this.deps.deliveryEngine.recordMemberOp(room, "invited", "leave", agentId);
+        }
+        this.deps.deliveryEngine.refreshMembership(room);
+        this.deps.rooms.set(roomId, room);
+        const agent = this.deps.agents.get(agentId);
+        if (agent && !agent.subscribedRooms.includes(roomId)) {
+            agent.subscribedRooms.push(roomId);
+            this.deps.deliveryEngine.bump(agent);
+            this.deps.agents.set(agentId, agent);
+            await this.deps.deliveryEngine.broadcastPatch({
+                type: "agent_upsert",
+                agent,
+            });
+        }
+        await this.deps.deliveryEngine.broadcastPatch({
+            type: "room_upsert",
+            room,
+        });
+        // Send current member list to the joining agent
+        const members = [];
+        for (const memberId of room.members) {
+            const memberAgent = this.deps.agents.get(memberId);
+            if (memberAgent) {
+                members.push({
+                    id: memberAgent.id,
+                    name: memberAgent.name,
+                    status: memberAgent.status,
+                });
+            }
+        }
+        await this.deps.deliveryEngine.deliverLocallyAndBroadcast(agentId, {
+            type: "room_members",
+            room: roomId,
+            members,
+        });
+        // Notify existing members of the join
+        await this.deps.deliveryEngine.deliverToRoom(roomId, {
+            type: "member_joined",
+            room: roomId,
+            agent: agentId,
+        }, agentId);
+        // Notify federated links if the room is federated
+        if (room.federated) {
+            const agentName = agent?.name ?? agentId;
+            await this.deps.federation.broadcastRoomJoin(roomId, agentId, agentName);
+        }
+        return room;
+    }
+    /**
+     * Leaves a room. For this store's own identity leaving a room it does not itself own, the local Room object is only ever this store's own static snapshot from when it joined or was invited (P3.6/P3.8) -- mutating it directly, as the legacy branch below does, would tell nobody but this store itself. The real effect needs a wire round trip to the room's own owner instead, so this always defers to leaveRemoteRoom in that case. Leaving on behalf of a DIFFERENT agentId, or the owner leaving their own room (this store's own authoritative copy), is untouched -- that is the legacy CRDT mutation state-sync-convergence.test.ts exercises directly.
+     */
+    async leaveRoom(roomId, agentId) {
+        const room = this.deps.rooms.get(roomId);
+        if (!room)
+            throw new CommsError(`Room ${roomId} not found`, "ROOM_NOT_FOUND");
+        const peerId = this.deps.getPeerId();
+        if (agentId === peerId && room.owner !== peerId) {
+            return this.leaveRemoteRoom(roomId, room.owner);
+        }
+        this.deps.deliveryEngine.bump(room);
+        this.deps.deliveryEngine.recordMemberOp(room, "member", "leave", agentId);
+        this.deps.deliveryEngine.refreshMembership(room);
+        this.deps.rooms.set(roomId, room);
+        const agent = this.deps.agents.get(agentId);
+        if (agent) {
+            agent.subscribedRooms = agent.subscribedRooms.filter((id) => id !== roomId);
+            this.deps.agents.set(agentId, agent);
+            await this.deps.deliveryEngine.broadcastPatch({
+                type: "agent_upsert",
+                agent,
+            });
+        }
+        await this.deps.deliveryEngine.broadcastPatch({
+            type: "room_upsert",
+            room,
+        });
+        await this.deps.deliveryEngine.deliverToRoom(roomId, {
+            type: "member_left",
+            room: roomId,
+            agent: agentId,
+        });
+        // Notify federated links if the room is federated
+        if (room.federated) {
+            await this.deps.federation.broadcastRoomLeave(roomId, agentId);
+        }
+        if (room.members.length === 0 && room.owner === agentId) {
+            await this.destroyRoom(roomId, agentId);
+        }
+    }
+    /**
+     * The remote-leave path: roomPath names a room this store is a member of but does not own, so leaving for real means telling the owner over a real, wire-authenticated room.leave rather than mutating a local Room record nobody else reads. Also declineInvite's own mechanism (P3.8): the moment a target receives an invite (handleRoomInvite), it already holds a real, persisted room:member token exactly as if it had joined -- declining is simply leaving before ever really participating, and the owner's own receiving side (handleRoomLeave) tells the two cases apart by checking its own membership/invited lists, not by a separate verb. reason rides room.leave's own open extension tail so the owner can still surface a real decline reason without a second wire shape.
+     */
+    async leaveRemoteRoom(roomPath, ownerId, reason) {
+        const { slot } = this.deps.requireIdentity();
+        const token = loadRoomTokens(slot)[roomPath];
+        if (token === undefined) {
+            throw new CommsError(`No room:member token for ${roomPath}`, "NOT_MEMBER");
+        }
+        const params = {
+            verb: "room.leave",
+            ...(reason !== undefined ? { reason } : {}),
+        };
+        const outcome = await this.deps
+            .requireTransport()
+            .sendRoomRequest(ownerId, { verb: ROOM_MEMBER_CAPABILITY, params }, { kind: "room", path: roomPath }, token);
+        if (outcome.result !== "ok") {
+            throw new CommsError(`Leaving ${roomPath} failed (${outcome.code})`, "LEAVE_FAILED");
+        }
+        deleteRoomToken(slot, roomPath);
+        this.deps.rooms.delete(roomPath);
+        this.deps.messages.delete(roomPath);
+    }
+    /**
+     * Invites targetId to roomId, over a real, wire-authenticated room.invite (P3.8): mints a fresh room:member grant for the target, records its own token-id the same way admitRoomJoin does (kickFromRoom can revoke an invited member's own grant exactly as it can a joined one), and pushes the grant to the target directly in the invite request itself -- room.invite is deliberately ungated (the room's own owner needs no capability to invite, per core/room's design), so the target's own verification of the embedded token is what proves this invite is genuine, not anything about the connection it arrived on. Retains the local CRDT invited-list bookkeeping (still this store's own record of who it has invited) but no longer broadcasts it: the target learns of the invite from the real request, not a mesh-wide patch.
+     */
+    async inviteToRoom(roomId, targetId, inviterId) {
+        const room = this.deps.rooms.get(roomId);
+        if (!room)
+            throw new CommsError(`Room ${roomId} not found`, "ROOM_NOT_FOUND");
+        if (room.owner !== inviterId)
+            throw new CommsError("Only the room owner can invite", "NOT_OWNER");
+        this.deps.deliveryEngine.bump(room);
+        if (!room.invited.includes(targetId) && !room.members.includes(targetId)) {
+            this.deps.deliveryEngine.recordMemberOp(room, "invited", "join", targetId);
+        }
+        this.deps.deliveryEngine.refreshMembership(room);
+        this.deps.rooms.set(roomId, room);
+        const { identity, clock, slot } = this.deps.requireIdentity();
+        const tokenId = randomId();
+        const verdict = await mintCapabilityToken({
+            identity,
+            clock,
+            tokenId,
+            bearer: deviceIdFromHex(targetId),
+            capability: ROOM_MEMBER_CAPABILITY,
+            scope: { kind: "room", path: roomId },
+            expires: clock.now() + ROOM_TOKEN_LIFETIME_MS,
+            delegationsRemaining: 0,
+        });
+        if (!verdict.ok) {
+            throw new CommsError(`Failed to mint an invite grant for ${targetId}`, "MINT_FAILED");
+        }
+        saveIssuedRoomGrant(slot, roomId, targetId, tokenId);
+        const inviter = this.deps.agents.get(inviterId);
+        const params = {
+            verb: "room.invite",
+            invitee: deviceIdFromHex(targetId),
+            token: verdict.token,
+            ...roomStateExtension(room),
+            ...(inviter !== undefined ? inviterAgentExtension(inviter) : {}),
+        };
+        const outcome = await this.deps
+            .requireTransport()
+            .sendRoomRequest(targetId, { verb: ROOM_MEMBER_CAPABILITY, params }, { kind: "room", path: roomId });
+        if (outcome.result !== "ok") {
+            throw new CommsError(`Invite to ${targetId} for ${roomId} failed (${outcome.code})`, "INVITE_FAILED");
+        }
+    }
+    /**
+     * Declines a pending invite, over the same real room.leave request leaveRemoteRoom already sends for an actual leave (P3.8): the moment this store received the invite (handleRoomInvite), it already holds a real, persisted room:member token, so declining before ever really participating is simply leaving early -- the owner's own receiving side (handleRoomLeave) tells the two cases apart from its own membership/invited lists, not from a separate verb. Uses parseRoomPath rather than any locally cached Room record to find the owner to leave, since handleRoomInvite never constructs one -- there is nothing here to read a room.owner field off in the first place.
+     */
+    async declineInvite(roomId, agentId, reason) {
+        // Every real caller declines on its own behalf (tool.ts always passes ctx.agentId, which for a real bridge process is always this.peerId, per the design's own "one bridge is one agent is one device" organising fact) -- there is no remote-decline-on-someone-else's-behalf mechanism, so a mismatch here means the caller itself is confused about whose invite it is declining.
+        if (agentId !== this.deps.getPeerId()) {
+            throw new CommsError(`Cannot decline an invite on behalf of ${agentId}`, "NOT_SELF");
+        }
+        const parsed = parseRoomPath(roomId);
+        if (parsed.kind !== "owner-named") {
+            throw new CommsError(`Room ${roomId} not found`, "ROOM_NOT_FOUND");
+        }
+        return this.leaveRemoteRoom(roomId, parsed.owner, reason);
+    }
+    /**
+     * Revokes memberId's own room:member grant for roomId for real, if this identity ever recorded issuing one: mints a revocation-entry for its token-id, records it in this store's own RevocationView immediately, announces it to every connected peer, and forgets the issued-grant record (a later re-admission mints and records a genuinely fresh one rather than leaving a stale entry alongside it). Silently does nothing when no issued-grant record exists (a grant predating this bookkeeping, or a member who was never actually admitted a token at all) -- shared by kickFromRoom (owner-initiated) and RoomProtocol's own handleRoomLeave (member-initiated, including a decline), which calls this via a deferred closure since RoomProtocol is constructed before RoomLifecycle exists.
+     */
+    async revokeMemberGrant(roomId, memberId) {
+        const { identity, clock, slot, revocation } = this.deps.requireIdentity();
+        const tokenId = loadIssuedRoomGrant(slot, roomId, memberId);
+        if (tokenId === undefined)
+            return;
+        const entry = await mintRevocationEntry({
+            identity,
+            tokenId,
+            revokedAt: clock.now(),
+        });
+        await revocation.record(entry, { identity });
+        await this.deps.requireTransport().broadcastRevocation([entry]);
+        deleteIssuedRoomGrant(slot, roomId, memberId);
+    }
+    /**
+     * Kicks targetId from roomId. Beyond the legacy CRDT membership removal (retired in P3.8 along with every other non-message broadcastPatch caller), this revokes the member's own room:member grant for real: mints a revocation-entry for the token-id this identity recorded when it admitted them (admitRoomJoin's own saveIssuedRoomGrant), records it in this store's own RevocationView immediately (so this identity's own future verifications see the kick without waiting on its own gossip), and announces it to every connected peer so each one's independent verification of the target's token -- not just this room's owner -- also starts failing as "revoked" from here on. Silently skips the revocation step (kick still happens; only the token-side enforcement doesn't) when no issued-grant record exists for this member, e.g. a grant predating this bookkeeping.
+     */
+    async kickFromRoom(roomId, targetId, kickerId) {
+        const room = this.deps.rooms.get(roomId);
+        if (!room)
+            throw new CommsError(`Room ${roomId} not found`, "ROOM_NOT_FOUND");
+        if (room.owner !== kickerId)
+            throw new CommsError("Only the room owner can kick", "NOT_OWNER");
+        await this.revokeMemberGrant(roomId, targetId);
+        this.deps.deliveryEngine.bump(room);
+        this.deps.deliveryEngine.recordMemberOp(room, "member", "leave", targetId);
+        this.deps.deliveryEngine.recordMemberOp(room, "invited", "leave", targetId);
+        this.deps.deliveryEngine.refreshMembership(room);
+        this.deps.rooms.set(roomId, room);
+        await this.deps.deliveryEngine.broadcastPatch({
+            type: "room_upsert",
+            room,
+        });
+    }
+    /**
+     * Destroys roomId, revoking every member's own room:member grant for real first (P3.8) -- the same revocation machinery kickFromRoom already uses, since destroying a room out from under its members is exactly as much a membership revocation as kicking them individually would be, just for all of them at once. Room-existence notification (agent_upsert/room_delete) stays on the legacy broadcastPatch for now: replacing it needs the same broader informational-events redesign the rest of P3.8 already tracks as separate, larger work, not something this specific fix should improvise alone.
+     */
+    async destroyRoom(roomId, agentId) {
+        const room = this.deps.rooms.get(roomId);
+        if (!room)
+            throw new CommsError(`Room ${roomId} not found`, "ROOM_NOT_FOUND");
+        if (room.owner !== agentId)
+            throw new CommsError("Only the room owner can destroy", "NOT_OWNER");
+        for (const memberId of room.members) {
+            await this.revokeMemberGrant(roomId, memberId);
+            const member = this.deps.agents.get(memberId);
+            if (member) {
+                member.subscribedRooms = member.subscribedRooms.filter((id) => id !== roomId);
+                this.deps.agents.set(memberId, member);
+                await this.deps.deliveryEngine.broadcastPatch({
+                    type: "agent_upsert",
+                    agent: member,
+                });
+            }
+        }
+        this.deps.rooms.delete(roomId);
+        this.deps.messages.delete(roomId);
+        await this.deps.deliveryEngine.broadcastPatch({
+            type: "room_delete",
+            roomId,
+        });
+    }
+}
+//# sourceMappingURL=room-lifecycle.js.map

package/dist/core/room-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-lifecycle.js","sourceRoot":"","sources":["../../src/core/room-lifecycle.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAoCnC,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAExD;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC9B,QAAgB,EAChB,KAAa;QAEb,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;YACxC,QAAQ;YACR,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,aAAa;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,sBAAsB;YAC7C,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,kDAAkD,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAMhB;QACC,iZAAiZ;QACjZ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAEnE,8TAA8T;QAC9T,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAS;YACjB,EAAE;YACF,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACrB,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;YAChC,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;SACnC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,aAAa;YACnB,IAAI;SACL,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAmB;QACjC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAW,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC/D,SAAS;YACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAC1B,QAAgB,EAChB,OAAe;QAEf,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,UAAU,CAAC,QAAQ,QAAQ,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,UAAU,CAAC,QAAQ,QAAQ,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI;aAC5B,gBAAgB,EAAE;aAClB,eAAe,CACd,MAAM,CAAC,KAAK,EACZ,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CACjC,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAClB,oBAAoB,QAAQ,iBAAiB,OAAO,CAAC,IAAI,GAAG,EAC5D,cAAc,CACf,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,qBAAqB,QAAQ,gBAAgB,EAC7C,oBAAoB,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,GAC1D,aAAa,CAAC,IAAI,CAAC;QAErB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,uBAAuB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,QAAQ;YACZ,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,MAAM,CAAC,SAAS;YACzC,yTAAyT;YACzT,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,QAAQ;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,EAAE;YACzC,OAAO;YACP,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,UAAU,CAAC,QAAQ,QAAQ,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAClB,4BAA4B,QAAQ,EAAE,EACtC,YAAY,CACb,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI;aAC5B,gBAAgB,EAAE;aAClB,eAAe,CACd,MAAM,CAAC,KAAK,EACZ,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAClE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAChC,KAAK,CACN,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAClB,4BAA4B,QAAQ,YAAY,OAAO,CAAC,IAAI,GAAG,EAC/D,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,6BAA6B,QAAQ,gBAAgB,EACrD,oBAAoB,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACxD,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7B,CAAC;QACF,MAAM,SAAS,GAAG,uBAAuB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,QAAQ;YACZ,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC;YACrC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,MAAM,CAAC,SAAS;YAC3D,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,QAAQ;YACnD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1D,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,QAAQ,EAAE,WAAW,IAAI,EAAE;YAClE,OAAO;YACP,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,EAAE;YAC1C,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,EAAE;YAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,KAAK;SACxC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI;aAC5B,gBAAgB,EAAE;aAClB,eAAe,CACd,WAAW,EACX,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAC/B,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAClB,wBAAwB,WAAW,iBAAiB,OAAO,CAAC,IAAI,GAAG,EACnE,cAAc,CACf,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,2BAA2B,WAAW,gBAAgB,EACtD,oBAAoB,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAAe;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7C,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEvD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC9D,MAAM,IAAI,UAAU,CAAC,uBAAuB,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,qEAAqE;YACrE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CACrC,IAAI,EACJ,SAAS,EACT,OAAO,EACP,OAAO,CACR,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAElC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;gBAC5C,IAAI,EAAE,cAAc;gBACpB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,aAAa;YACnB,IAAI;SACL,CAAC,CAAC;QAEH,gDAAgD;QAChD,MAAM,OAAO,GAAwD,EAAE,CAAC;QACxE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,OAAO,EAAE;YACjE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,MAAM;YACZ,OAAO;SACR,CAAC,CAAC;QAEH,sCAAsC;QACtC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAC1C,MAAM,EACN;YACE,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO;SACf,EACD,OAAO,CACR,CAAC;QAEF,kDAAkD;QAClD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC;YACzC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAe;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,UAAU,CAAC,QAAQ,MAAM,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAElC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;gBAC5C,IAAI,EAAE,cAAc;gBACpB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,aAAa;YACnB,IAAI;SACL,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE;YACnD,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QAEH,kDAAkD;QAClD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,OAAe,EACf,MAAe;QAEf,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAClB,4BAA4B,QAAQ,EAAE,EACtC,YAAY,CACb,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,YAAY;YAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI;aAC5B,gBAAgB,EAAE;aAClB,eAAe,CACd,OAAO,EACP,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,EACxC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAChC,KAAK,CACN,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAClB,WAAW,QAAQ,YAAY,OAAO,CAAC,IAAI,GAAG,EAC9C,cAAc,CACf,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,QAAgB,EAChB,SAAiB;QAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,UAAU,CAAC,QAAQ,MAAM,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAC1B,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CACrC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAElC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;YACxC,QAAQ;YACR,KAAK;YACL,OAAO;YACP,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC;YACjC,UAAU,EAAE,sBAAsB;YAClC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,sBAAsB;YAC7C,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,UAAU,CAClB,sCAAsC,QAAQ,EAAE,EAChD,aAAa,CACd,CAAC;QACJ,CAAC;QACD,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,kBAAkB,CAAC,IAAI,CAAC;YAC3B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI;aAC5B,gBAAgB,EAAE;aAClB,eAAe,CACd,QAAQ,EACR,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,EACxC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAC/B,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAClB,aAAa,QAAQ,QAAQ,MAAM,YAAY,OAAO,CAAC,IAAI,GAAG,EAC9D,eAAe,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,OAAe,EACf,MAAc;QAEd,qXAAqX;QACrX,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,UAAU,CAClB,yCAAyC,OAAO,EAAE,EAClD,UAAU,CACX,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,UAAU,CAAC,QAAQ,MAAM,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,QAAgB;QACtD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,QAAgB,EAChB,QAAgB;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,UAAU,CAAC,QAAQ,MAAM,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAC;QAEpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,aAAa;YACnB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,OAAe;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,UAAU,CAAC,QAAQ,MAAM,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YACxB,MAAM,IAAI,UAAU,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;QAEvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM,CACtB,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;oBAC5C,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,aAAa;YACnB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/room-messaging.d.ts

@@ -0,0 +1,31 @@
+/**
+ * RoomMessaging — the sending side of room messages and DMs: sendRoomMessage/sendDm fan out one directed, wire-authenticated room.send per member via RoomProtocol's own retry-queueing sendRoomRequestToMember (P3.5), and readRoomMessages reads back a room's local history. Split out of mesh-store.ts to reduce it under the repo's max-lines cap.
+ */
+import type { MeshStoreIdentity } from "./mesh-store-shared.js";
+import type { RoomProtocol } from "./room-protocol.js";
+import type { FederationManager } from "./federation.js";
+import type { AgentIdentity, DmMessage, Room, RoomMessage, StreamingBehavior } from "./types.js";
+/** The state and collaborators RoomMessaging needs from MeshStore. rooms/messages/dms/agents are direct references into MeshStore's own fields; roomProtocol and federation are the already-constructed instances (construction order: ... -> roomProtocol -> roomMessaging -> ...), narrowed to what sending a message or DM ever needs. */
+export interface RoomMessagingDeps {
+    rooms: Map<string, Room>;
+    messages: Map<string, RoomMessage[]>;
+    dms: Map<string, DmMessage[]>;
+    agents: Map<string, AgentIdentity>;
+    requireIdentity: () => MeshStoreIdentity;
+    roomProtocol: Pick<RoomProtocol, "sendRoomRequestToMember">;
+    federation: Pick<FederationManager, "forwardRoomMessage">;
+}
+export declare class RoomMessaging {
+    private readonly deps;
+    constructor(deps: RoomMessagingDeps);
+    /**
+     * Sends a room message via a real, wire-authenticated room.send fan-out (P3.5): one directed request per member, each carrying this sender's own persisted room:member token, rather than the legacy broadcastPatch's full-state replication. A member unreachable right now is queued for retry (see sendRoomRequestToMember/flushPendingRoomRequests) instead of blocking or failing the whole send -- delivery to any one recipient is independent of every other.
+     */
+    sendRoomMessage(roomId: string, from: string, content: string, replyTo?: string, streamingBehavior?: StreamingBehavior): Promise<RoomMessage>;
+    readRoomMessages(roomId: string, since?: string): Promise<RoomMessage[]>;
+    /**
+     * Sends a DM via the same wire-authenticated room.send fan-out sendRoomMessage uses (P3.5): a DM is just a dm-shaped room path with exactly one other member, so it rides the identical mechanism rather than a separate one. Self-DM is the one exception -- a purely local scratchpad note that never leaves the process, so it needs no token and no wire round trip at all.
+     */
+    sendDm(from: string, to: string, content: string, streamingBehavior?: StreamingBehavior): Promise<DmMessage>;
+}
+//# sourceMappingURL=room-messaging.d.ts.map

package/dist/core/room-messaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-messaging.d.ts","sourceRoot":"","sources":["../../src/core/room-messaging.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,IAAI,EACJ,WAAW,EACX,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,6UAA6U;AAC7U,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnC,eAAe,EAAE,MAAM,iBAAiB,CAAC;IACzC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC5D,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;CAC3D;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,iBAAiB;IAEpD;;OAEG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,WAAW,CAAC;IA8DjB,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,EAAE,CAAC;IAOzB;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,SAAS,CAAC;CAoDtB"}