@adcp/sdk 14.0.0-beta.12 → 14.0.0-beta.13

package/dist/lib/server/decisioning/runtime/postgres-task-registry.d.mts

@@ -5,7 +5,7 @@
  * restart and doesn't share state across instances behind a load balancer —
  * fine for tests and local dev, broken for production HITL paths
  * (`createMediaBuyTask`, `syncCreativesTask`, etc.). Wire this in via
- * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool }) })`
+ * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool, namespace }) })`
  * to persist task lifecycle across requests, processes, and crashes.
  *
  * @example
@@ -19,13 +19,14 @@
  *
  * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
  *
- * // Run once at boot — idempotent CREATE TABLE IF NOT EXISTS.
- * await pool.query(getDecisioningTaskRegistryMigration());
+ * const taskRegistryNamespace = 'tenant:my-agent';
+ * // Run once at boot, using the same trusted namespace as the registry.
+ * await pool.query(getDecisioningTaskRegistryMigration({ namespace: taskRegistryNamespace }));
  *
  * const server = createAdcpServerFromPlatform(platform, {
  *   name: 'My Ad Network',
  *   version: '1.0.0',
- *   taskRegistry: createPostgresTaskRegistry({ pool }),
+ *   taskRegistry: createPostgresTaskRegistry({ pool, namespace: taskRegistryNamespace }),
  * });
  * ```
  *
@@ -59,6 +60,8 @@ export interface PgQueryable {
 export interface CreatePostgresTaskRegistryOptions {
     /** A `pg.Pool` instance (or any `PgQueryable`). */
     pool: PgQueryable;
+    /** Trusted deployment/tenant namespace. Use a distinct value per hosted tenant. */
+    namespace: string;
     /**
      * Table name. Defaults to `'adcp_decisioning_tasks'` (vendor-prefixed to
      * avoid collisions with the MCP-level `adcp_mcp_tasks` table from
@@ -80,12 +83,13 @@ export interface CreatePostgresTaskRegistryOptions {
  * @example
  * ```typescript
  * import { getDecisioningTaskRegistryMigration } from '@adcp/sdk/server/decisioning';
- * await pool.query(getDecisioningTaskRegistryMigration());
- * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks' }));
+ * await pool.query(getDecisioningTaskRegistryMigration({ namespace: tenantId }));
+ * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks', namespace: tenantId }));
  * ```
  */
-export declare function getDecisioningTaskRegistryMigration(options?: {
+export declare function getDecisioningTaskRegistryMigration(options: {
     tableName?: string;
+    namespace: string;
 }): string;
 /**
  * Build a Postgres-backed `TaskRegistry`.
@@ -95,19 +99,9 @@ export declare function getDecisioningTaskRegistryMigration(options?: {
  * is enforced via SQL `WHERE status = 'submitted'` predicates so concurrent
  * webhook deliveries can't race to overwrite each other.
  *
- * **Multi-tenant deployments — accountId namespacing.** When sharing a
- * single Postgres registry across tenants in a `TenantRegistry`
- * deployment (one table for all tenants), prefix `account_id` per-tenant
- * to prevent cross-tenant collisions. If tenant A and tenant B both
- * resolve a buyer to literal `account_id: 'acme'`, their tasks land in
- * the same row keyspace and `tasks_get` can't distinguish ownership
- * by `account_id` alone (the tenant boundary upstream IS protected by
- * `accounts.resolve(ref, ctx)` returning each tenant's own Account, but
- * the registry sees the same `acme` string in both rows). Recommended
- * pattern: adopters' `accounts.resolve` returns
- * `id: \`tenant_${tenantId}_${accountId}\`` so the table-level keys
- * stay distinct. Alternative: separate `tableName` per tenant, one
- * `createPostgresTaskRegistry({ pool, tableName })` per `TenantRegistry`
- * tenant — heavier ops, stronger isolation.
+ * **Multi-tenant deployments.** `namespace` is a trusted deployment/tenant
+ * partition and participates in every query plus the primary key. Construct
+ * one registry per tenant with a stable unique namespace; never derive it
+ * from buyer request parameters. Tenants may safely share the same table.
  */
 export declare function createPostgresTaskRegistry(opts: CreatePostgresTaskRegistryOptions): TaskRegistry;

package/dist/lib/server/decisioning/runtime/postgres-task-registry.d.ts

@@ -5,7 +5,7 @@
  * restart and doesn't share state across instances behind a load balancer —
  * fine for tests and local dev, broken for production HITL paths
  * (`createMediaBuyTask`, `syncCreativesTask`, etc.). Wire this in via
- * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool }) })`
+ * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool, namespace }) })`
  * to persist task lifecycle across requests, processes, and crashes.
  *
  * @example
@@ -19,13 +19,14 @@
  *
  * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
  *
- * // Run once at boot — idempotent CREATE TABLE IF NOT EXISTS.
- * await pool.query(getDecisioningTaskRegistryMigration());
+ * const taskRegistryNamespace = 'tenant:my-agent';
+ * // Run once at boot, using the same trusted namespace as the registry.
+ * await pool.query(getDecisioningTaskRegistryMigration({ namespace: taskRegistryNamespace }));
  *
  * const server = createAdcpServerFromPlatform(platform, {
  *   name: 'My Ad Network',
  *   version: '1.0.0',
- *   taskRegistry: createPostgresTaskRegistry({ pool }),
+ *   taskRegistry: createPostgresTaskRegistry({ pool, namespace: taskRegistryNamespace }),
  * });
  * ```
  *
@@ -59,6 +60,8 @@ export interface PgQueryable {
 export interface CreatePostgresTaskRegistryOptions {
     /** A `pg.Pool` instance (or any `PgQueryable`). */
     pool: PgQueryable;
+    /** Trusted deployment/tenant namespace. Use a distinct value per hosted tenant. */
+    namespace: string;
     /**
      * Table name. Defaults to `'adcp_decisioning_tasks'` (vendor-prefixed to
      * avoid collisions with the MCP-level `adcp_mcp_tasks` table from
@@ -80,12 +83,13 @@ export interface CreatePostgresTaskRegistryOptions {
  * @example
  * ```typescript
  * import { getDecisioningTaskRegistryMigration } from '@adcp/sdk/server/decisioning';
- * await pool.query(getDecisioningTaskRegistryMigration());
- * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks' }));
+ * await pool.query(getDecisioningTaskRegistryMigration({ namespace: tenantId }));
+ * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks', namespace: tenantId }));
  * ```
  */
-export declare function getDecisioningTaskRegistryMigration(options?: {
+export declare function getDecisioningTaskRegistryMigration(options: {
     tableName?: string;
+    namespace: string;
 }): string;
 /**
  * Build a Postgres-backed `TaskRegistry`.
@@ -95,20 +99,10 @@ export declare function getDecisioningTaskRegistryMigration(options?: {
  * is enforced via SQL `WHERE status = 'submitted'` predicates so concurrent
  * webhook deliveries can't race to overwrite each other.
  *
- * **Multi-tenant deployments — accountId namespacing.** When sharing a
- * single Postgres registry across tenants in a `TenantRegistry`
- * deployment (one table for all tenants), prefix `account_id` per-tenant
- * to prevent cross-tenant collisions. If tenant A and tenant B both
- * resolve a buyer to literal `account_id: 'acme'`, their tasks land in
- * the same row keyspace and `tasks_get` can't distinguish ownership
- * by `account_id` alone (the tenant boundary upstream IS protected by
- * `accounts.resolve(ref, ctx)` returning each tenant's own Account, but
- * the registry sees the same `acme` string in both rows). Recommended
- * pattern: adopters' `accounts.resolve` returns
- * `id: \`tenant_${tenantId}_${accountId}\`` so the table-level keys
- * stay distinct. Alternative: separate `tableName` per tenant, one
- * `createPostgresTaskRegistry({ pool, tableName })` per `TenantRegistry`
- * tenant — heavier ops, stronger isolation.
+ * **Multi-tenant deployments.** `namespace` is a trusted deployment/tenant
+ * partition and participates in every query plus the primary key. Construct
+ * one registry per tenant with a stable unique namespace; never derive it
+ * from buyer request parameters. Tenants may safely share the same table.
  */
 export declare function createPostgresTaskRegistry(opts: CreatePostgresTaskRegistryOptions): TaskRegistry;
 //# sourceMappingURL=postgres-task-registry.d.ts.map

package/dist/lib/server/decisioning/runtime/postgres-task-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-task-registry.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/postgres-task-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAIH,OAAO,KAAK,EAAc,YAAY,EAAc,MAAM,iBAAiB,CAAC;AAE5E;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAChH;AAED,MAAM,WAAW,iCAAiC;IAChD,mDAAmD;IACnD,IAAI,EAAE,WAAW,CAAC;IAClB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA4DD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA0C5F;AAkCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,iCAAiC,GAAG,YAAY,CA8GhG"}
+{"version":3,"file":"postgres-task-registry.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/postgres-task-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAIH,OAAO,KAAK,EAAc,YAAY,EAAiC,MAAM,iBAAiB,CAAC;AAE/F;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAChH;AAED,MAAM,WAAW,iCAAiC;IAChD,mDAAmD;IACnD,IAAI,EAAE,WAAW,CAAC;IAClB,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAoF9G;AAkCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,iCAAiC,GAAG,YAAY,CAsIhG"}

package/dist/lib/server/decisioning/runtime/postgres-task-registry.js

@@ -25,10 +25,18 @@ module.exports = __toCommonJS(postgres_task_registry_exports);
 var import_node_crypto = require("node:crypto");
 const DEFAULT_TABLE = "adcp_decisioning_tasks";
 const VALID_IDENTIFIER = /^[a-z_][a-z0-9_]*$/;
+const VALID_NAMESPACE = /^[A-Za-z0-9_.:-]{1,255}$/;
 function assertValidIdentifier(name) {
-  if (!VALID_IDENTIFIER.test(name)) {
+  if (!VALID_IDENTIFIER.test(name) || Buffer.byteLength(name, "utf8") > 40) {
     throw new Error(
-      `Invalid table name "${name}": must be lowercase letters, digits, or underscores, starting with a letter or underscore.`
+      `Invalid table name "${name}": must be lowercase letters, digits, or underscores, starting with a letter or underscore, and at most 40 bytes.`
+    );
+  }
+}
+function assertValidNamespace(namespace) {
+  if (typeof namespace !== "string" || !VALID_NAMESPACE.test(namespace)) {
+    throw new Error(
+      "Invalid registry namespace: namespace is required and must be 1-255 ASCII letters, digits, dots, underscores, colons, or hyphens."
     );
   }
 }
@@ -51,14 +59,17 @@ function safeStringify(value, taskId) {
   }
 }
 function getDecisioningTaskRegistryMigration(options) {
+  assertValidNamespace(options?.namespace);
   const table = options?.tableName ?? DEFAULT_TABLE;
   assertValidIdentifier(table);
+  const namespace = options.namespace;
   return `
 CREATE TABLE IF NOT EXISTS ${table} (
-  task_id         TEXT PRIMARY KEY,
+  registry_namespace TEXT NOT NULL DEFAULT '${namespace}',
+  task_id         TEXT NOT NULL,
   tool            TEXT NOT NULL,
   account_id      TEXT NOT NULL,
-  owner_scope     TEXT,
+  owner_scope     TEXT NOT NULL,
   status          TEXT NOT NULL DEFAULT 'submitted',
   status_message  TEXT,
   result          JSONB,
@@ -89,6 +100,45 @@ CREATE INDEX IF NOT EXISTS idx_${table}_status_created
 ALTER TABLE ${table}
   ADD COLUMN IF NOT EXISTS owner_scope TEXT;
 
+ALTER TABLE ${table}
+  ADD COLUMN IF NOT EXISTS registry_namespace TEXT NOT NULL DEFAULT '__adcp_legacy_unscoped__';
+
+UPDATE ${table}
+  SET registry_namespace = '${namespace}'
+  WHERE registry_namespace = '__adcp_legacy_unscoped__';
+
+ALTER TABLE ${table}
+  ALTER COLUMN registry_namespace SET DEFAULT '${namespace}';
+
+UPDATE ${table}
+  SET owner_scope = 'account:' || account_id
+  WHERE owner_scope IS NULL;
+
+ALTER TABLE ${table}
+  ALTER COLUMN owner_scope SET NOT NULL;
+
+DO $$
+DECLARE
+  current_primary_key TEXT;
+BEGIN
+  PERFORM pg_advisory_xact_lock(hashtext('adcp-task-registry:${table}'));
+  SELECT conname INTO current_primary_key
+    FROM pg_constraint
+    WHERE conrelid = '${table}'::regclass AND contype = 'p';
+  IF current_primary_key IS NOT NULL AND current_primary_key <> '${table}_scope_pkey' THEN
+    EXECUTE format('ALTER TABLE %I DROP CONSTRAINT %I', '${table}', current_primary_key);
+  END IF;
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = '${table}_scope_pkey'
+      AND conrelid = '${table}'::regclass
+  ) THEN
+    ALTER TABLE ${table}
+      ADD CONSTRAINT ${table}_scope_pkey
+      PRIMARY KEY (registry_namespace, account_id, owner_scope, task_id);
+  END IF;
+END $$;
+
 CREATE INDEX IF NOT EXISTS idx_${table}_owner_account
   ON ${table}(owner_scope, account_id);
 `.trim();
@@ -113,18 +163,22 @@ function createPostgresTaskRegistry(opts) {
   const table = opts.tableName ?? DEFAULT_TABLE;
   assertValidIdentifier(table);
   const pool = opts.pool;
+  const namespace = opts.namespace;
+  assertValidNamespace(namespace);
   const backgrounds = /* @__PURE__ */ new Map();
   return {
+    scopeVersion: 1,
     async create(createOpts) {
       const taskId = createOpts.overrideTaskId ?? `task_${(0, import_node_crypto.randomUUID)()}`;
       const result = await pool.query(
-        `INSERT INTO ${table} (task_id, tool, account_id, owner_scope, status, has_webhook) VALUES ($1, $2, $3, $4, 'submitted', $5) ON CONFLICT (task_id) DO NOTHING`,
+        `INSERT INTO ${table} (task_id, tool, account_id, owner_scope, status, has_webhook, registry_namespace) VALUES ($1, $2, $3, $4, 'submitted', $5, $6) ON CONFLICT (registry_namespace, account_id, owner_scope, task_id) DO NOTHING`,
         [
           taskId,
           createOpts.tool,
           createOpts.accountId,
           createOpts.ownerScope ?? `account:${createOpts.accountId}`,
-          createOpts.hasWebhook === true
+          createOpts.hasWebhook === true,
+          namespace
         ]
       );
       if ((result.rowCount ?? 0) === 0) {
@@ -132,73 +186,89 @@ function createPostgresTaskRegistry(opts) {
       }
       return { taskId };
     },
-    async getTask(taskId) {
+    async getTask(taskId, scope) {
       const { rows } = await pool.query(
         `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at
-         FROM ${table} WHERE task_id = $1`,
-        [taskId]
+         FROM ${table} WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4`,
+        [taskId, namespace, scope.accountId, scope.ownerScope]
       );
       if (rows.length === 0) return null;
       return rowToRecord(rows[0]);
     },
+    async _getTaskUnsafe(taskId) {
+      const { rows } = await pool.query(
+        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at
+         FROM ${table} WHERE task_id = $1 AND registry_namespace = $2 LIMIT 2`,
+        [taskId, namespace]
+      );
+      if (rows.length !== 1) return null;
+      return rowToRecord(rows[0]);
+    },
     async list(listOpts) {
-      if (listOpts.ownerScope === void 0) return { tasks: [] };
       const { rows } = await pool.query(
         `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at
          FROM ${table}
-         WHERE account_id = $1 AND (owner_scope = $2 OR (owner_scope IS NULL AND $2 = $3))
+         WHERE registry_namespace = $1 AND account_id = $2 AND owner_scope = $3
          ORDER BY created_at DESC, task_id DESC`,
-        [listOpts.accountId, listOpts.ownerScope, `account:${listOpts.accountId}`]
+        [namespace, listOpts.accountId, listOpts.ownerScope]
       );
       return { tasks: rows.map((row) => rowToRecord(row)) };
     },
-    async complete(taskId, result) {
+    async complete(taskId, scope, result) {
       const json = safeStringify(result, taskId);
       assertResultSize(json, taskId);
       await pool.query(
         `UPDATE ${table}
-         SET status = 'completed', result = $2::jsonb, updated_at = NOW()
-         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
-        [taskId, json]
+         SET status = 'completed', result = $5::jsonb, updated_at = NOW()
+         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4
+           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
+        [taskId, namespace, scope.accountId, scope.ownerScope, json]
       );
     },
-    async fail(taskId, error, result) {
+    async fail(taskId, scope, error, result) {
       const errorJson = safeStringify(error, taskId);
       const resultJson = result === void 0 ? void 0 : safeStringify(result, taskId);
       assertResultSize(errorJson, taskId);
       if (resultJson !== void 0) assertResultSize(resultJson, taskId);
       await pool.query(
         `UPDATE ${table}
-         SET status = 'failed', error = $2::jsonb, result = $3::jsonb, status_message = $4, updated_at = NOW()
-         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
-        [taskId, errorJson, resultJson ?? null, error.message]
+         SET status = 'failed', error = $5::jsonb, result = $6::jsonb, status_message = $7, updated_at = NOW()
+         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4
+           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
+        [taskId, namespace, scope.accountId, scope.ownerScope, errorJson, resultJson ?? null, error.message]
       );
     },
-    async updateProgress(taskId, progress) {
+    async updateProgress(taskId, scope, progress) {
       const json = safeStringify(progress, taskId);
       await pool.query(
         `UPDATE ${table}
-         SET progress = $2::jsonb,
+         SET progress = $5::jsonb,
              status = CASE WHEN status = 'submitted' THEN 'working' ELSE status END,
              updated_at = NOW()
-         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
-        [taskId, json]
+         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4
+           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,
+        [taskId, namespace, scope.accountId, scope.ownerScope, json]
       );
     },
-    _registerBackground(taskId, completion) {
+    _registerBackground(taskId, scope, completion) {
+      const backgroundKey = JSON.stringify([scope.accountId, scope.ownerScope, taskId]);
       const composed = completion.then(
         () => {
-          if (backgrounds.get(taskId) === composed) backgrounds.delete(taskId);
+          if (backgrounds.get(backgroundKey) === composed) backgrounds.delete(backgroundKey);
         },
         () => {
-          if (backgrounds.get(taskId) === composed) backgrounds.delete(taskId);
+          if (backgrounds.get(backgroundKey) === composed) backgrounds.delete(backgroundKey);
         }
       );
-      backgrounds.set(taskId, composed);
+      backgrounds.set(backgroundKey, composed);
     },
-    async awaitTask(taskId) {
-      const pending = backgrounds.get(taskId);
+    async awaitTask(taskId, scope) {
+      const pending = backgrounds.get(JSON.stringify([scope.accountId, scope.ownerScope, taskId]));
       if (pending) await pending;
+    },
+    async _awaitTaskUnsafe(taskId) {
+      const pending = Array.from(backgrounds.entries()).filter(([key]) => JSON.parse(key)[2] === taskId).map(([, completion]) => completion);
+      await Promise.all(pending);
     }
   };
 }

package/dist/lib/server/decisioning/runtime/postgres-task-registry.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/decisioning/runtime/postgres-task-registry.ts"],"sourcesContent":["/**\n * PostgreSQL-backed `TaskRegistry` for the v6.0 decisioning runtime.\n *\n * The default `createInMemoryTaskRegistry()` loses task state on process\n * restart and doesn't share state across instances behind a load balancer —\n * fine for tests and local dev, broken for production HITL paths\n * (`createMediaBuyTask`, `syncCreativesTask`, etc.). Wire this in via\n * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool }) })`\n * to persist task lifecycle across requests, processes, and crashes.\n *\n * @example\n * ```typescript\n * import { Pool } from 'pg';\n * import {\n *   createAdcpServerFromPlatform,\n *   createPostgresTaskRegistry,\n *   getDecisioningTaskRegistryMigration,\n * } from '@adcp/sdk/server/decisioning';\n *\n * const pool = new Pool({ connectionString: process.env.DATABASE_URL });\n *\n * // Run once at boot — idempotent CREATE TABLE IF NOT EXISTS.\n * await pool.query(getDecisioningTaskRegistryMigration());\n *\n * const server = createAdcpServerFromPlatform(platform, {\n *   name: 'My Ad Network',\n *   version: '1.0.0',\n *   taskRegistry: createPostgresTaskRegistry({ pool }),\n * });\n * ```\n *\n * **Background-completion lifecycle.** `_registerBackground` / `awaitTask`\n * are PROCESS-LOCAL — promises don't serialize. When a HITL `*Task` method\n * is invoked, the returned promise lives on the originating process; if\n * that process restarts before the method completes, the task record stays\n * in `submitted` state in Postgres but no `awaitTask` resolution is\n * possible from a different instance. Production HITL flows that span\n * process boundaries should drive completion via webhook → an explicit\n * `complete()` / `fail()` call from the webhook handler, not via\n * `awaitTask`. The MCP `tasks/get` wire path reads via `getTask` and is\n * already cross-instance.\n *\n * Status: Preview / 6.0.\n *\n * @public\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type { AdcpStructuredError, TaskHandoffProgress } from '../async-outcome';\nimport type { TaskRecord, TaskRegistry, TaskStatus } from './task-registry';\n\n/**\n * Minimal subset of the `pg.Pool` interface used by the registry.\n * Mirrors `PgQueryable` in `postgres-task-store.ts` so callers can pass\n * pools, transaction wrappers, or any pg-compatible query executor.\n */\nexport interface PgQueryable {\n  query(text: string, values?: unknown[]): Promise<{ rows: Record<string, unknown>[]; rowCount: number | null }>;\n}\n\nexport interface CreatePostgresTaskRegistryOptions {\n  /** A `pg.Pool` instance (or any `PgQueryable`). */\n  pool: PgQueryable;\n  /**\n   * Table name. Defaults to `'adcp_decisioning_tasks'` (vendor-prefixed to\n   * avoid collisions with the MCP-level `adcp_mcp_tasks` table from\n   * `PostgresTaskStore` and any consumer tables).\n   *\n   * Must match `^[a-z_][a-z0-9_]*$` — schema-qualified names are not\n   * supported by this validator. Set search_path on the pool if you need\n   * a non-default schema.\n   */\n  tableName?: string;\n}\n\n/** Default table name — vendor-prefixed to avoid collisions. */\nconst DEFAULT_TABLE = 'adcp_decisioning_tasks';\n\n/** Validates a SQL identifier to prevent injection via table names. */\nconst VALID_IDENTIFIER = /^[a-z_][a-z0-9_]*$/;\n\nfunction assertValidIdentifier(name: string): void {\n  if (!VALID_IDENTIFIER.test(name)) {\n    throw new Error(\n      `Invalid table name \"${name}\": must be lowercase letters, digits, ` +\n        `or underscores, starting with a letter or underscore.`\n    );\n  }\n}\n\n/**\n * Cap on `result` / `error` JSONB column size. Adopter `*Task` returns are\n * written verbatim — a buggy or malicious adopter handing back a 1GB\n * result would OOM the Node process before pg complains. 4MB matches the\n * default Postgres `toast` row threshold and gives plenty of headroom for\n * legitimate task payloads.\n *\n * **This cap protects the DB write path only.** Adopter code that\n * serializes `result` / `error` for logs, metrics, or downstream services\n * MUST impose its own size cap — `JSON.stringify(result)` in a logger\n * call is unbounded.\n */\nconst MAX_RESULT_BYTES = 4 * 1024 * 1024;\n\nfunction assertResultSize(json: string, taskId: string): void {\n  // `Buffer.byteLength` is utf-8 byte length, which is what Postgres stores.\n  if (Buffer.byteLength(json, 'utf8') > MAX_RESULT_BYTES) {\n    throw new Error(\n      `Task ${taskId}: result/error JSON exceeds ${MAX_RESULT_BYTES} bytes ` +\n        `(adopter *Task method returned an oversized payload — investigate ` +\n        `whether the body should be persisted via blob storage and referenced).`\n    );\n  }\n}\n\n/**\n * Wrap `JSON.stringify` with a clearer error when the adopter `*Task`\n * return contains circular references. Default `TypeError: Converting\n * circular structure to JSON` doesn't surface the task id; this version\n * bubbles a registry-write error pointing at the adopter return shape.\n */\nfunction safeStringify(value: unknown, taskId: string): string {\n  try {\n    return JSON.stringify(value);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    throw new Error(\n      `Task ${taskId}: adopter *Task return is not JSON-serializable: ${msg}. ` +\n        `Strip circular refs / non-plain-data before returning from your *Task method.`\n    );\n  }\n}\n\n/**\n * Generate the SQL DDL for the decisioning task registry table.\n *\n * Run once at boot (idempotent — `CREATE TABLE IF NOT EXISTS`). Constraint\n * and index names are derived from the table name to avoid collisions when\n * multiple registries share the same database.\n *\n * @example\n * ```typescript\n * import { getDecisioningTaskRegistryMigration } from '@adcp/sdk/server/decisioning';\n * await pool.query(getDecisioningTaskRegistryMigration());\n * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks' }));\n * ```\n */\nexport function getDecisioningTaskRegistryMigration(options?: { tableName?: string }): string {\n  const table = options?.tableName ?? DEFAULT_TABLE;\n  assertValidIdentifier(table);\n  return `\nCREATE TABLE IF NOT EXISTS ${table} (\n  task_id         TEXT PRIMARY KEY,\n  tool            TEXT NOT NULL,\n  account_id      TEXT NOT NULL,\n  owner_scope     TEXT,\n  status          TEXT NOT NULL DEFAULT 'submitted',\n  status_message  TEXT,\n  result          JSONB,\n  error           JSONB,\n  progress        JSONB,\n  has_webhook     BOOLEAN NOT NULL DEFAULT FALSE,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n  updated_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n\n  CONSTRAINT ${table}_valid_status CHECK (\n    -- Framework-written values: 'submitted' (initial), 'working'\n    -- (after first updateProgress() call), 'completed' / 'failed'\n    -- (terminal). The other 5 spec-defined states ('input-required',\n    -- 'canceled', 'rejected', 'auth-required', 'unknown') are reserved\n    -- for adopter-emitted transitions via the v6.1\n    -- \\`taskRegistry.transition()\\` API; the v6.1 migration will widen\n    -- this CHECK.\n    status IN ('submitted', 'working', 'completed', 'failed')\n  )\n);\n\nCREATE INDEX IF NOT EXISTS idx_${table}_account_id\n  ON ${table}(account_id);\n\nCREATE INDEX IF NOT EXISTS idx_${table}_status_created\n  ON ${table}(status, created_at);\n\nALTER TABLE ${table}\n  ADD COLUMN IF NOT EXISTS owner_scope TEXT;\n\nCREATE INDEX IF NOT EXISTS idx_${table}_owner_account\n  ON ${table}(owner_scope, account_id);\n`.trim();\n}\n\ninterface DbTaskRow {\n  task_id: string;\n  tool: string;\n  account_id: string;\n  owner_scope: string | null;\n  status: TaskStatus;\n  status_message: string | null;\n  result: unknown;\n  error: AdcpStructuredError | null;\n  progress: TaskHandoffProgress | null;\n  has_webhook: boolean;\n  created_at: Date;\n  updated_at: Date;\n}\n\nfunction rowToRecord<TResult>(row: DbTaskRow): TaskRecord<TResult> {\n  return {\n    taskId: row.task_id,\n    tool: row.tool,\n    accountId: row.account_id,\n    ...(row.owner_scope ? { ownerScope: row.owner_scope } : {}),\n    status: row.status,\n    ...(row.status_message !== null && { statusMessage: row.status_message }),\n    ...(row.result !== null && row.result !== undefined && { result: row.result as TResult }),\n    ...(row.error !== null && row.error !== undefined && { error: row.error }),\n    ...(row.progress !== null && row.progress !== undefined && { progress: row.progress }),\n    ...(row.has_webhook && { hasWebhook: true }),\n    createdAt: row.created_at.toISOString(),\n    updatedAt: row.updated_at.toISOString(),\n  };\n}\n\n/**\n * Build a Postgres-backed `TaskRegistry`.\n *\n * Idempotency: `complete()` and `fail()` are no-ops on already-terminal\n * tasks, matching `createInMemoryTaskRegistry()`. The terminal-state guard\n * is enforced via SQL `WHERE status = 'submitted'` predicates so concurrent\n * webhook deliveries can't race to overwrite each other.\n *\n * **Multi-tenant deployments — accountId namespacing.** When sharing a\n * single Postgres registry across tenants in a `TenantRegistry`\n * deployment (one table for all tenants), prefix `account_id` per-tenant\n * to prevent cross-tenant collisions. If tenant A and tenant B both\n * resolve a buyer to literal `account_id: 'acme'`, their tasks land in\n * the same row keyspace and `tasks_get` can't distinguish ownership\n * by `account_id` alone (the tenant boundary upstream IS protected by\n * `accounts.resolve(ref, ctx)` returning each tenant's own Account, but\n * the registry sees the same `acme` string in both rows). Recommended\n * pattern: adopters' `accounts.resolve` returns\n * `id: \\`tenant_${tenantId}_${accountId}\\`` so the table-level keys\n * stay distinct. Alternative: separate `tableName` per tenant, one\n * `createPostgresTaskRegistry({ pool, tableName })` per `TenantRegistry`\n * tenant — heavier ops, stronger isolation.\n */\nexport function createPostgresTaskRegistry(opts: CreatePostgresTaskRegistryOptions): TaskRegistry {\n  const table = opts.tableName ?? DEFAULT_TABLE;\n  assertValidIdentifier(table);\n  const pool = opts.pool;\n\n  // Process-local background tracking — see file header note. Promises\n  // can't be persisted; cross-instance HITL completion happens via\n  // webhook → explicit complete()/fail(), not via awaitTask.\n  const backgrounds = new Map<string, Promise<void>>();\n\n  return {\n    async create(createOpts: {\n      tool: string;\n      accountId: string;\n      ownerScope?: string;\n      hasWebhook?: boolean;\n      overrideTaskId?: string;\n    }): Promise<{ taskId: string }> {\n      const taskId = createOpts.overrideTaskId ?? `task_${randomUUID()}`;\n      const result = await pool.query(\n        `INSERT INTO ${table} (task_id, tool, account_id, owner_scope, status, has_webhook) VALUES ($1, $2, $3, $4, 'submitted', $5) ON CONFLICT (task_id) DO NOTHING`,\n        [\n          taskId,\n          createOpts.tool,\n          createOpts.accountId,\n          createOpts.ownerScope ?? `account:${createOpts.accountId}`,\n          createOpts.hasWebhook === true,\n        ]\n      );\n      if ((result.rowCount ?? 0) === 0) {\n        throw new Error(`task_id already registered: ${taskId}`);\n      }\n      return { taskId };\n    },\n\n    async getTask<TResult = unknown>(taskId: string): Promise<TaskRecord<TResult> | null> {\n      const { rows } = await pool.query(\n        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at\n         FROM ${table} WHERE task_id = $1`,\n        [taskId]\n      );\n      if (rows.length === 0) return null;\n      return rowToRecord<TResult>(rows[0] as unknown as DbTaskRow);\n    },\n\n    async list(listOpts: { accountId: string; ownerScope?: string }): Promise<{ tasks: TaskRecord[] }> {\n      if (listOpts.ownerScope === undefined) return { tasks: [] };\n      const { rows } = await pool.query(\n        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at\n         FROM ${table}\n         WHERE account_id = $1 AND (owner_scope = $2 OR (owner_scope IS NULL AND $2 = $3))\n         ORDER BY created_at DESC, task_id DESC`,\n        [listOpts.accountId, listOpts.ownerScope, `account:${listOpts.accountId}`]\n      );\n      return { tasks: rows.map(row => rowToRecord(row as unknown as DbTaskRow)) };\n    },\n\n    async complete<TResult>(taskId: string, result: TResult): Promise<void> {\n      const json = safeStringify(result, taskId);\n      assertResultSize(json, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET status = 'completed', result = $2::jsonb, updated_at = NOW()\n         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, json]\n      );\n    },\n\n    async fail(taskId: string, error: AdcpStructuredError, result?: unknown): Promise<void> {\n      const errorJson = safeStringify(error, taskId);\n      const resultJson = result === undefined ? undefined : safeStringify(result, taskId);\n      assertResultSize(errorJson, taskId);\n      if (resultJson !== undefined) assertResultSize(resultJson, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET status = 'failed', error = $2::jsonb, result = $3::jsonb, status_message = $4, updated_at = NOW()\n         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, errorJson, resultJson ?? null, error.message]\n      );\n    },\n\n    async updateProgress(taskId: string, progress: TaskHandoffProgress): Promise<void> {\n      const json = safeStringify(progress, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET progress = $2::jsonb,\n             status = CASE WHEN status = 'submitted' THEN 'working' ELSE status END,\n             updated_at = NOW()\n         WHERE task_id = $1 AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, json]\n      );\n    },\n\n    _registerBackground(taskId: string, completion: Promise<void>): void {\n      const composed: Promise<void> = completion.then(\n        () => {\n          if (backgrounds.get(taskId) === composed) backgrounds.delete(taskId);\n        },\n        () => {\n          if (backgrounds.get(taskId) === composed) backgrounds.delete(taskId);\n        }\n      );\n      backgrounds.set(taskId, composed);\n    },\n\n    async awaitTask(taskId: string): Promise<void> {\n      const pending = backgrounds.get(taskId);\n      if (pending) await pending;\n    },\n  } satisfies TaskRegistry;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+CA,yBAA2B;AA6B3B,MAAM,gBAAgB;AAGtB,MAAM,mBAAmB;AAEzB,SAAS,sBAAsB,MAAoB;AACjD,MAAI,CAAC,iBAAiB,KAAK,IAAI,GAAG;AAChC,UAAM,IAAI;AAAA,MACR,uBAAuB,IAAI;AAAA,IAE7B;AAAA,EACF;AACF;AAcA,MAAM,mBAAmB,IAAI,OAAO;AAEpC,SAAS,iBAAiB,MAAc,QAAsB;AAE5D,MAAI,OAAO,WAAW,MAAM,MAAM,IAAI,kBAAkB;AACtD,UAAM,IAAI;AAAA,MACR,QAAQ,MAAM,+BAA+B,gBAAgB;AAAA,IAG/D;AAAA,EACF;AACF;AAQA,SAAS,cAAc,OAAgB,QAAwB;AAC7D,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR,QAAQ,MAAM,oDAAoD,GAAG;AAAA,IAEvE;AAAA,EACF;AACF;AAgBO,SAAS,oCAAoC,SAA0C;AAC5F,QAAM,QAAQ,SAAS,aAAa;AACpC,wBAAsB,KAAK;AAC3B,SAAO;AAAA,6BACoB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAcnB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAYa,KAAK;AAAA,OAC/B,KAAK;AAAA;AAAA,iCAEqB,KAAK;AAAA,OAC/B,KAAK;AAAA;AAAA,cAEE,KAAK;AAAA;AAAA;AAAA,iCAGc,KAAK;AAAA,OAC/B,KAAK;AAAA,EACV,KAAK;AACP;AAiBA,SAAS,YAAqB,KAAqC;AACjE,SAAO;AAAA,IACL,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,GAAI,IAAI,cAAc,EAAE,YAAY,IAAI,YAAY,IAAI,CAAC;AAAA,IACzD,QAAQ,IAAI;AAAA,IACZ,GAAI,IAAI,mBAAmB,QAAQ,EAAE,eAAe,IAAI,eAAe;AAAA,IACvE,GAAI,IAAI,WAAW,QAAQ,IAAI,WAAW,UAAa,EAAE,QAAQ,IAAI,OAAkB;AAAA,IACvF,GAAI,IAAI,UAAU,QAAQ,IAAI,UAAU,UAAa,EAAE,OAAO,IAAI,MAAM;AAAA,IACxE,GAAI,IAAI,aAAa,QAAQ,IAAI,aAAa,UAAa,EAAE,UAAU,IAAI,SAAS;AAAA,IACpF,GAAI,IAAI,eAAe,EAAE,YAAY,KAAK;AAAA,IAC1C,WAAW,IAAI,WAAW,YAAY;AAAA,IACtC,WAAW,IAAI,WAAW,YAAY;AAAA,EACxC;AACF;AAyBO,SAAS,2BAA2B,MAAuD;AAChG,QAAM,QAAQ,KAAK,aAAa;AAChC,wBAAsB,KAAK;AAC3B,QAAM,OAAO,KAAK;AAKlB,QAAM,cAAc,oBAAI,IAA2B;AAEnD,SAAO;AAAA,IACL,MAAM,OAAO,YAMmB;AAC9B,YAAM,SAAS,WAAW,kBAAkB,YAAQ,+BAAW,CAAC;AAChE,YAAM,SAAS,MAAM,KAAK;AAAA,QACxB,eAAe,KAAK;AAAA,QACpB;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW,cAAc,WAAW,WAAW,SAAS;AAAA,UACxD,WAAW,eAAe;AAAA,QAC5B;AAAA,MACF;AACA,WAAK,OAAO,YAAY,OAAO,GAAG;AAChC,cAAM,IAAI,MAAM,+BAA+B,MAAM,EAAE;AAAA,MACzD;AACA,aAAO,EAAE,OAAO;AAAA,IAClB;AAAA,IAEA,MAAM,QAA2B,QAAqD;AACpF,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAAA,QAC1B;AAAA,gBACQ,KAAK;AAAA,QACb,CAAC,MAAM;AAAA,MACT;AACA,UAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,aAAO,YAAqB,KAAK,CAAC,CAAyB;AAAA,IAC7D;AAAA,IAEA,MAAM,KAAK,UAAwF;AACjG,UAAI,SAAS,eAAe,OAAW,QAAO,EAAE,OAAO,CAAC,EAAE;AAC1D,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAAA,QAC1B;AAAA,gBACQ,KAAK;AAAA;AAAA;AAAA,QAGb,CAAC,SAAS,WAAW,SAAS,YAAY,WAAW,SAAS,SAAS,EAAE;AAAA,MAC3E;AACA,aAAO,EAAE,OAAO,KAAK,IAAI,SAAO,YAAY,GAA2B,CAAC,EAAE;AAAA,IAC5E;AAAA,IAEA,MAAM,SAAkB,QAAgB,QAAgC;AACtE,YAAM,OAAO,cAAc,QAAQ,MAAM;AACzC,uBAAiB,MAAM,MAAM;AAC7B,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA,QAGf,CAAC,QAAQ,IAAI;AAAA,MACf;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAgB,OAA4B,QAAiC;AACtF,YAAM,YAAY,cAAc,OAAO,MAAM;AAC7C,YAAM,aAAa,WAAW,SAAY,SAAY,cAAc,QAAQ,MAAM;AAClF,uBAAiB,WAAW,MAAM;AAClC,UAAI,eAAe,OAAW,kBAAiB,YAAY,MAAM;AACjE,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA,QAGf,CAAC,QAAQ,WAAW,cAAc,MAAM,MAAM,OAAO;AAAA,MACvD;AAAA,IACF;AAAA,IAEA,MAAM,eAAe,QAAgB,UAA8C;AACjF,YAAM,OAAO,cAAc,UAAU,MAAM;AAC3C,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,QAKf,CAAC,QAAQ,IAAI;AAAA,MACf;AAAA,IACF;AAAA,IAEA,oBAAoB,QAAgB,YAAiC;AACnE,YAAM,WAA0B,WAAW;AAAA,QACzC,MAAM;AACJ,cAAI,YAAY,IAAI,MAAM,MAAM,SAAU,aAAY,OAAO,MAAM;AAAA,QACrE;AAAA,QACA,MAAM;AACJ,cAAI,YAAY,IAAI,MAAM,MAAM,SAAU,aAAY,OAAO,MAAM;AAAA,QACrE;AAAA,MACF;AACA,kBAAY,IAAI,QAAQ,QAAQ;AAAA,IAClC;AAAA,IAEA,MAAM,UAAU,QAA+B;AAC7C,YAAM,UAAU,YAAY,IAAI,MAAM;AACtC,UAAI,QAAS,OAAM;AAAA,IACrB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/decisioning/runtime/postgres-task-registry.ts"],"sourcesContent":["/**\n * PostgreSQL-backed `TaskRegistry` for the v6.0 decisioning runtime.\n *\n * The default `createInMemoryTaskRegistry()` loses task state on process\n * restart and doesn't share state across instances behind a load balancer —\n * fine for tests and local dev, broken for production HITL paths\n * (`createMediaBuyTask`, `syncCreativesTask`, etc.). Wire this in via\n * `createAdcpServerFromPlatform({ taskRegistry: createPostgresTaskRegistry({ pool, namespace }) })`\n * to persist task lifecycle across requests, processes, and crashes.\n *\n * @example\n * ```typescript\n * import { Pool } from 'pg';\n * import {\n *   createAdcpServerFromPlatform,\n *   createPostgresTaskRegistry,\n *   getDecisioningTaskRegistryMigration,\n * } from '@adcp/sdk/server/decisioning';\n *\n * const pool = new Pool({ connectionString: process.env.DATABASE_URL });\n *\n * const taskRegistryNamespace = 'tenant:my-agent';\n * // Run once at boot, using the same trusted namespace as the registry.\n * await pool.query(getDecisioningTaskRegistryMigration({ namespace: taskRegistryNamespace }));\n *\n * const server = createAdcpServerFromPlatform(platform, {\n *   name: 'My Ad Network',\n *   version: '1.0.0',\n *   taskRegistry: createPostgresTaskRegistry({ pool, namespace: taskRegistryNamespace }),\n * });\n * ```\n *\n * **Background-completion lifecycle.** `_registerBackground` / `awaitTask`\n * are PROCESS-LOCAL — promises don't serialize. When a HITL `*Task` method\n * is invoked, the returned promise lives on the originating process; if\n * that process restarts before the method completes, the task record stays\n * in `submitted` state in Postgres but no `awaitTask` resolution is\n * possible from a different instance. Production HITL flows that span\n * process boundaries should drive completion via webhook → an explicit\n * `complete()` / `fail()` call from the webhook handler, not via\n * `awaitTask`. The MCP `tasks/get` wire path reads via `getTask` and is\n * already cross-instance.\n *\n * Status: Preview / 6.0.\n *\n * @public\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type { AdcpStructuredError, TaskHandoffProgress } from '../async-outcome';\nimport type { TaskRecord, TaskRegistry, TaskRegistryScope, TaskStatus } from './task-registry';\n\n/**\n * Minimal subset of the `pg.Pool` interface used by the registry.\n * Mirrors `PgQueryable` in `postgres-task-store.ts` so callers can pass\n * pools, transaction wrappers, or any pg-compatible query executor.\n */\nexport interface PgQueryable {\n  query(text: string, values?: unknown[]): Promise<{ rows: Record<string, unknown>[]; rowCount: number | null }>;\n}\n\nexport interface CreatePostgresTaskRegistryOptions {\n  /** A `pg.Pool` instance (or any `PgQueryable`). */\n  pool: PgQueryable;\n  /** Trusted deployment/tenant namespace. Use a distinct value per hosted tenant. */\n  namespace: string;\n  /**\n   * Table name. Defaults to `'adcp_decisioning_tasks'` (vendor-prefixed to\n   * avoid collisions with the MCP-level `adcp_mcp_tasks` table from\n   * `PostgresTaskStore` and any consumer tables).\n   *\n   * Must match `^[a-z_][a-z0-9_]*$` — schema-qualified names are not\n   * supported by this validator. Set search_path on the pool if you need\n   * a non-default schema.\n   */\n  tableName?: string;\n}\n\n/** Default table name — vendor-prefixed to avoid collisions. */\nconst DEFAULT_TABLE = 'adcp_decisioning_tasks';\n\n/** Validates a SQL identifier to prevent injection via table names. */\nconst VALID_IDENTIFIER = /^[a-z_][a-z0-9_]*$/;\nconst VALID_NAMESPACE = /^[A-Za-z0-9_.:-]{1,255}$/;\n\nfunction assertValidIdentifier(name: string): void {\n  if (!VALID_IDENTIFIER.test(name) || Buffer.byteLength(name, 'utf8') > 40) {\n    throw new Error(\n      `Invalid table name \"${name}\": must be lowercase letters, digits, ` +\n        `or underscores, starting with a letter or underscore, and at most 40 bytes.`\n    );\n  }\n}\n\nfunction assertValidNamespace(namespace: unknown): asserts namespace is string {\n  if (typeof namespace !== 'string' || !VALID_NAMESPACE.test(namespace)) {\n    throw new Error(\n      'Invalid registry namespace: namespace is required and must be 1-255 ASCII letters, digits, dots, underscores, colons, or hyphens.'\n    );\n  }\n}\n\n/**\n * Cap on `result` / `error` JSONB column size. Adopter `*Task` returns are\n * written verbatim — a buggy or malicious adopter handing back a 1GB\n * result would OOM the Node process before pg complains. 4MB matches the\n * default Postgres `toast` row threshold and gives plenty of headroom for\n * legitimate task payloads.\n *\n * **This cap protects the DB write path only.** Adopter code that\n * serializes `result` / `error` for logs, metrics, or downstream services\n * MUST impose its own size cap — `JSON.stringify(result)` in a logger\n * call is unbounded.\n */\nconst MAX_RESULT_BYTES = 4 * 1024 * 1024;\n\nfunction assertResultSize(json: string, taskId: string): void {\n  // `Buffer.byteLength` is utf-8 byte length, which is what Postgres stores.\n  if (Buffer.byteLength(json, 'utf8') > MAX_RESULT_BYTES) {\n    throw new Error(\n      `Task ${taskId}: result/error JSON exceeds ${MAX_RESULT_BYTES} bytes ` +\n        `(adopter *Task method returned an oversized payload — investigate ` +\n        `whether the body should be persisted via blob storage and referenced).`\n    );\n  }\n}\n\n/**\n * Wrap `JSON.stringify` with a clearer error when the adopter `*Task`\n * return contains circular references. Default `TypeError: Converting\n * circular structure to JSON` doesn't surface the task id; this version\n * bubbles a registry-write error pointing at the adopter return shape.\n */\nfunction safeStringify(value: unknown, taskId: string): string {\n  try {\n    return JSON.stringify(value);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    throw new Error(\n      `Task ${taskId}: adopter *Task return is not JSON-serializable: ${msg}. ` +\n        `Strip circular refs / non-plain-data before returning from your *Task method.`\n    );\n  }\n}\n\n/**\n * Generate the SQL DDL for the decisioning task registry table.\n *\n * Run once at boot (idempotent — `CREATE TABLE IF NOT EXISTS`). Constraint\n * and index names are derived from the table name to avoid collisions when\n * multiple registries share the same database.\n *\n * @example\n * ```typescript\n * import { getDecisioningTaskRegistryMigration } from '@adcp/sdk/server/decisioning';\n * await pool.query(getDecisioningTaskRegistryMigration({ namespace: tenantId }));\n * await pool.query(getDecisioningTaskRegistryMigration({ tableName: 'my_tasks', namespace: tenantId }));\n * ```\n */\nexport function getDecisioningTaskRegistryMigration(options: { tableName?: string; namespace: string }): string {\n  assertValidNamespace(options?.namespace);\n  const table = options?.tableName ?? DEFAULT_TABLE;\n  assertValidIdentifier(table);\n  const namespace = options.namespace;\n  return `\nCREATE TABLE IF NOT EXISTS ${table} (\n  registry_namespace TEXT NOT NULL DEFAULT '${namespace}',\n  task_id         TEXT NOT NULL,\n  tool            TEXT NOT NULL,\n  account_id      TEXT NOT NULL,\n  owner_scope     TEXT NOT NULL,\n  status          TEXT NOT NULL DEFAULT 'submitted',\n  status_message  TEXT,\n  result          JSONB,\n  error           JSONB,\n  progress        JSONB,\n  has_webhook     BOOLEAN NOT NULL DEFAULT FALSE,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n  updated_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n\n  CONSTRAINT ${table}_valid_status CHECK (\n    -- Framework-written values: 'submitted' (initial), 'working'\n    -- (after first updateProgress() call), 'completed' / 'failed'\n    -- (terminal). The other 5 spec-defined states ('input-required',\n    -- 'canceled', 'rejected', 'auth-required', 'unknown') are reserved\n    -- for adopter-emitted transitions via the v6.1\n    -- \\`taskRegistry.transition()\\` API; the v6.1 migration will widen\n    -- this CHECK.\n    status IN ('submitted', 'working', 'completed', 'failed')\n  )\n);\n\nCREATE INDEX IF NOT EXISTS idx_${table}_account_id\n  ON ${table}(account_id);\n\nCREATE INDEX IF NOT EXISTS idx_${table}_status_created\n  ON ${table}(status, created_at);\n\nALTER TABLE ${table}\n  ADD COLUMN IF NOT EXISTS owner_scope TEXT;\n\nALTER TABLE ${table}\n  ADD COLUMN IF NOT EXISTS registry_namespace TEXT NOT NULL DEFAULT '__adcp_legacy_unscoped__';\n\nUPDATE ${table}\n  SET registry_namespace = '${namespace}'\n  WHERE registry_namespace = '__adcp_legacy_unscoped__';\n\nALTER TABLE ${table}\n  ALTER COLUMN registry_namespace SET DEFAULT '${namespace}';\n\nUPDATE ${table}\n  SET owner_scope = 'account:' || account_id\n  WHERE owner_scope IS NULL;\n\nALTER TABLE ${table}\n  ALTER COLUMN owner_scope SET NOT NULL;\n\nDO $$\nDECLARE\n  current_primary_key TEXT;\nBEGIN\n  PERFORM pg_advisory_xact_lock(hashtext('adcp-task-registry:${table}'));\n  SELECT conname INTO current_primary_key\n    FROM pg_constraint\n    WHERE conrelid = '${table}'::regclass AND contype = 'p';\n  IF current_primary_key IS NOT NULL AND current_primary_key <> '${table}_scope_pkey' THEN\n    EXECUTE format('ALTER TABLE %I DROP CONSTRAINT %I', '${table}', current_primary_key);\n  END IF;\n  IF NOT EXISTS (\n    SELECT 1 FROM pg_constraint\n    WHERE conname = '${table}_scope_pkey'\n      AND conrelid = '${table}'::regclass\n  ) THEN\n    ALTER TABLE ${table}\n      ADD CONSTRAINT ${table}_scope_pkey\n      PRIMARY KEY (registry_namespace, account_id, owner_scope, task_id);\n  END IF;\nEND $$;\n\nCREATE INDEX IF NOT EXISTS idx_${table}_owner_account\n  ON ${table}(owner_scope, account_id);\n`.trim();\n}\n\ninterface DbTaskRow {\n  task_id: string;\n  tool: string;\n  account_id: string;\n  owner_scope: string | null;\n  status: TaskStatus;\n  status_message: string | null;\n  result: unknown;\n  error: AdcpStructuredError | null;\n  progress: TaskHandoffProgress | null;\n  has_webhook: boolean;\n  created_at: Date;\n  updated_at: Date;\n}\n\nfunction rowToRecord<TResult>(row: DbTaskRow): TaskRecord<TResult> {\n  return {\n    taskId: row.task_id,\n    tool: row.tool,\n    accountId: row.account_id,\n    ...(row.owner_scope ? { ownerScope: row.owner_scope } : {}),\n    status: row.status,\n    ...(row.status_message !== null && { statusMessage: row.status_message }),\n    ...(row.result !== null && row.result !== undefined && { result: row.result as TResult }),\n    ...(row.error !== null && row.error !== undefined && { error: row.error }),\n    ...(row.progress !== null && row.progress !== undefined && { progress: row.progress }),\n    ...(row.has_webhook && { hasWebhook: true }),\n    createdAt: row.created_at.toISOString(),\n    updatedAt: row.updated_at.toISOString(),\n  };\n}\n\n/**\n * Build a Postgres-backed `TaskRegistry`.\n *\n * Idempotency: `complete()` and `fail()` are no-ops on already-terminal\n * tasks, matching `createInMemoryTaskRegistry()`. The terminal-state guard\n * is enforced via SQL `WHERE status = 'submitted'` predicates so concurrent\n * webhook deliveries can't race to overwrite each other.\n *\n * **Multi-tenant deployments.** `namespace` is a trusted deployment/tenant\n * partition and participates in every query plus the primary key. Construct\n * one registry per tenant with a stable unique namespace; never derive it\n * from buyer request parameters. Tenants may safely share the same table.\n */\nexport function createPostgresTaskRegistry(opts: CreatePostgresTaskRegistryOptions): TaskRegistry {\n  const table = opts.tableName ?? DEFAULT_TABLE;\n  assertValidIdentifier(table);\n  const pool = opts.pool;\n  const namespace = opts.namespace;\n  assertValidNamespace(namespace);\n\n  // Process-local background tracking — see file header note. Promises\n  // can't be persisted; cross-instance HITL completion happens via\n  // webhook → explicit complete()/fail(), not via awaitTask.\n  const backgrounds = new Map<string, Promise<void>>();\n\n  return {\n    scopeVersion: 1,\n    async create(createOpts: {\n      tool: string;\n      accountId: string;\n      ownerScope?: string;\n      hasWebhook?: boolean;\n      overrideTaskId?: string;\n    }): Promise<{ taskId: string }> {\n      const taskId = createOpts.overrideTaskId ?? `task_${randomUUID()}`;\n      const result = await pool.query(\n        `INSERT INTO ${table} (task_id, tool, account_id, owner_scope, status, has_webhook, registry_namespace) VALUES ($1, $2, $3, $4, 'submitted', $5, $6) ON CONFLICT (registry_namespace, account_id, owner_scope, task_id) DO NOTHING`,\n        [\n          taskId,\n          createOpts.tool,\n          createOpts.accountId,\n          createOpts.ownerScope ?? `account:${createOpts.accountId}`,\n          createOpts.hasWebhook === true,\n          namespace,\n        ]\n      );\n      if ((result.rowCount ?? 0) === 0) {\n        throw new Error(`task_id already registered: ${taskId}`);\n      }\n      return { taskId };\n    },\n\n    async getTask<TResult = unknown>(taskId: string, scope: TaskRegistryScope): Promise<TaskRecord<TResult> | null> {\n      const { rows } = await pool.query(\n        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at\n         FROM ${table} WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4`,\n        [taskId, namespace, scope.accountId, scope.ownerScope]\n      );\n      if (rows.length === 0) return null;\n      return rowToRecord<TResult>(rows[0] as unknown as DbTaskRow);\n    },\n\n    async _getTaskUnsafe<TResult = unknown>(taskId: string): Promise<TaskRecord<TResult> | null> {\n      const { rows } = await pool.query(\n        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at\n         FROM ${table} WHERE task_id = $1 AND registry_namespace = $2 LIMIT 2`,\n        [taskId, namespace]\n      );\n      if (rows.length !== 1) return null;\n      return rowToRecord<TResult>(rows[0] as unknown as DbTaskRow);\n    },\n\n    async list(listOpts: { accountId: string; ownerScope: string }): Promise<{ tasks: TaskRecord[] }> {\n      const { rows } = await pool.query(\n        `SELECT task_id, tool, account_id, owner_scope, status, status_message, result, error, progress, has_webhook, created_at, updated_at\n         FROM ${table}\n         WHERE registry_namespace = $1 AND account_id = $2 AND owner_scope = $3\n         ORDER BY created_at DESC, task_id DESC`,\n        [namespace, listOpts.accountId, listOpts.ownerScope]\n      );\n      return { tasks: rows.map(row => rowToRecord(row as unknown as DbTaskRow)) };\n    },\n\n    async complete<TResult>(taskId: string, scope: TaskRegistryScope, result: TResult): Promise<void> {\n      const json = safeStringify(result, taskId);\n      assertResultSize(json, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET status = 'completed', result = $5::jsonb, updated_at = NOW()\n         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4\n           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, namespace, scope.accountId, scope.ownerScope, json]\n      );\n    },\n\n    async fail(taskId: string, scope: TaskRegistryScope, error: AdcpStructuredError, result?: unknown): Promise<void> {\n      const errorJson = safeStringify(error, taskId);\n      const resultJson = result === undefined ? undefined : safeStringify(result, taskId);\n      assertResultSize(errorJson, taskId);\n      if (resultJson !== undefined) assertResultSize(resultJson, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET status = 'failed', error = $5::jsonb, result = $6::jsonb, status_message = $7, updated_at = NOW()\n         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4\n           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, namespace, scope.accountId, scope.ownerScope, errorJson, resultJson ?? null, error.message]\n      );\n    },\n\n    async updateProgress(taskId: string, scope: TaskRegistryScope, progress: TaskHandoffProgress): Promise<void> {\n      const json = safeStringify(progress, taskId);\n      await pool.query(\n        `UPDATE ${table}\n         SET progress = $5::jsonb,\n             status = CASE WHEN status = 'submitted' THEN 'working' ELSE status END,\n             updated_at = NOW()\n         WHERE task_id = $1 AND registry_namespace = $2 AND account_id = $3 AND owner_scope = $4\n           AND status NOT IN ('completed', 'failed', 'rejected', 'canceled')`,\n        [taskId, namespace, scope.accountId, scope.ownerScope, json]\n      );\n    },\n\n    _registerBackground(taskId: string, scope: TaskRegistryScope, completion: Promise<void>): void {\n      const backgroundKey = JSON.stringify([scope.accountId, scope.ownerScope, taskId]);\n      const composed: Promise<void> = completion.then(\n        () => {\n          if (backgrounds.get(backgroundKey) === composed) backgrounds.delete(backgroundKey);\n        },\n        () => {\n          if (backgrounds.get(backgroundKey) === composed) backgrounds.delete(backgroundKey);\n        }\n      );\n      backgrounds.set(backgroundKey, composed);\n    },\n\n    async awaitTask(taskId: string, scope: TaskRegistryScope): Promise<void> {\n      const pending = backgrounds.get(JSON.stringify([scope.accountId, scope.ownerScope, taskId]));\n      if (pending) await pending;\n    },\n\n    async _awaitTaskUnsafe(taskId: string): Promise<void> {\n      const pending = Array.from(backgrounds.entries())\n        .filter(([key]) => (JSON.parse(key) as [string, string, string])[2] === taskId)\n        .map(([, completion]) => completion);\n      await Promise.all(pending);\n    },\n  } satisfies TaskRegistry;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgDA,yBAA2B;AA+B3B,MAAM,gBAAgB;AAGtB,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AAExB,SAAS,sBAAsB,MAAoB;AACjD,MAAI,CAAC,iBAAiB,KAAK,IAAI,KAAK,OAAO,WAAW,MAAM,MAAM,IAAI,IAAI;AACxE,UAAM,IAAI;AAAA,MACR,uBAAuB,IAAI;AAAA,IAE7B;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,WAAiD;AAC7E,MAAI,OAAO,cAAc,YAAY,CAAC,gBAAgB,KAAK,SAAS,GAAG;AACrE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAcA,MAAM,mBAAmB,IAAI,OAAO;AAEpC,SAAS,iBAAiB,MAAc,QAAsB;AAE5D,MAAI,OAAO,WAAW,MAAM,MAAM,IAAI,kBAAkB;AACtD,UAAM,IAAI;AAAA,MACR,QAAQ,MAAM,+BAA+B,gBAAgB;AAAA,IAG/D;AAAA,EACF;AACF;AAQA,SAAS,cAAc,OAAgB,QAAwB;AAC7D,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,SAAS,KAAK;AACZ,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR,QAAQ,MAAM,oDAAoD,GAAG;AAAA,IAEvE;AAAA,EACF;AACF;AAgBO,SAAS,oCAAoC,SAA4D;AAC9G,uBAAqB,SAAS,SAAS;AACvC,QAAM,QAAQ,SAAS,aAAa;AACpC,wBAAsB,KAAK;AAC3B,QAAM,YAAY,QAAQ;AAC1B,SAAO;AAAA,6BACoB,KAAK;AAAA,8CACY,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,eAcxC,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAYa,KAAK;AAAA,OAC/B,KAAK;AAAA;AAAA,iCAEqB,KAAK;AAAA,OAC/B,KAAK;AAAA;AAAA,cAEE,KAAK;AAAA;AAAA;AAAA,cAGL,KAAK;AAAA;AAAA;AAAA,SAGV,KAAK;AAAA,8BACgB,SAAS;AAAA;AAAA;AAAA,cAGzB,KAAK;AAAA,iDAC8B,SAAS;AAAA;AAAA,SAEjD,KAAK;AAAA;AAAA;AAAA;AAAA,cAIA,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+DAO4C,KAAK;AAAA;AAAA;AAAA,wBAG5C,KAAK;AAAA,mEACsC,KAAK;AAAA,2DACb,KAAK;AAAA;AAAA;AAAA;AAAA,uBAIzC,KAAK;AAAA,wBACJ,KAAK;AAAA;AAAA,kBAEX,KAAK;AAAA,uBACA,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,iCAKK,KAAK;AAAA,OAC/B,KAAK;AAAA,EACV,KAAK;AACP;AAiBA,SAAS,YAAqB,KAAqC;AACjE,SAAO;AAAA,IACL,QAAQ,IAAI;AAAA,IACZ,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,GAAI,IAAI,cAAc,EAAE,YAAY,IAAI,YAAY,IAAI,CAAC;AAAA,IACzD,QAAQ,IAAI;AAAA,IACZ,GAAI,IAAI,mBAAmB,QAAQ,EAAE,eAAe,IAAI,eAAe;AAAA,IACvE,GAAI,IAAI,WAAW,QAAQ,IAAI,WAAW,UAAa,EAAE,QAAQ,IAAI,OAAkB;AAAA,IACvF,GAAI,IAAI,UAAU,QAAQ,IAAI,UAAU,UAAa,EAAE,OAAO,IAAI,MAAM;AAAA,IACxE,GAAI,IAAI,aAAa,QAAQ,IAAI,aAAa,UAAa,EAAE,UAAU,IAAI,SAAS;AAAA,IACpF,GAAI,IAAI,eAAe,EAAE,YAAY,KAAK;AAAA,IAC1C,WAAW,IAAI,WAAW,YAAY;AAAA,IACtC,WAAW,IAAI,WAAW,YAAY;AAAA,EACxC;AACF;AAeO,SAAS,2BAA2B,MAAuD;AAChG,QAAM,QAAQ,KAAK,aAAa;AAChC,wBAAsB,KAAK;AAC3B,QAAM,OAAO,KAAK;AAClB,QAAM,YAAY,KAAK;AACvB,uBAAqB,SAAS;AAK9B,QAAM,cAAc,oBAAI,IAA2B;AAEnD,SAAO;AAAA,IACL,cAAc;AAAA,IACd,MAAM,OAAO,YAMmB;AAC9B,YAAM,SAAS,WAAW,kBAAkB,YAAQ,+BAAW,CAAC;AAChE,YAAM,SAAS,MAAM,KAAK;AAAA,QACxB,eAAe,KAAK;AAAA,QACpB;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW,cAAc,WAAW,WAAW,SAAS;AAAA,UACxD,WAAW,eAAe;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AACA,WAAK,OAAO,YAAY,OAAO,GAAG;AAChC,cAAM,IAAI,MAAM,+BAA+B,MAAM,EAAE;AAAA,MACzD;AACA,aAAO,EAAE,OAAO;AAAA,IAClB;AAAA,IAEA,MAAM,QAA2B,QAAgB,OAA+D;AAC9G,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAAA,QAC1B;AAAA,gBACQ,KAAK;AAAA,QACb,CAAC,QAAQ,WAAW,MAAM,WAAW,MAAM,UAAU;AAAA,MACvD;AACA,UAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,aAAO,YAAqB,KAAK,CAAC,CAAyB;AAAA,IAC7D;AAAA,IAEA,MAAM,eAAkC,QAAqD;AAC3F,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAAA,QAC1B;AAAA,gBACQ,KAAK;AAAA,QACb,CAAC,QAAQ,SAAS;AAAA,MACpB;AACA,UAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,aAAO,YAAqB,KAAK,CAAC,CAAyB;AAAA,IAC7D;AAAA,IAEA,MAAM,KAAK,UAAuF;AAChG,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK;AAAA,QAC1B;AAAA,gBACQ,KAAK;AAAA;AAAA;AAAA,QAGb,CAAC,WAAW,SAAS,WAAW,SAAS,UAAU;AAAA,MACrD;AACA,aAAO,EAAE,OAAO,KAAK,IAAI,SAAO,YAAY,GAA2B,CAAC,EAAE;AAAA,IAC5E;AAAA,IAEA,MAAM,SAAkB,QAAgB,OAA0B,QAAgC;AAChG,YAAM,OAAO,cAAc,QAAQ,MAAM;AACzC,uBAAiB,MAAM,MAAM;AAC7B,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA;AAAA,QAIf,CAAC,QAAQ,WAAW,MAAM,WAAW,MAAM,YAAY,IAAI;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAgB,OAA0B,OAA4B,QAAiC;AAChH,YAAM,YAAY,cAAc,OAAO,MAAM;AAC7C,YAAM,aAAa,WAAW,SAAY,SAAY,cAAc,QAAQ,MAAM;AAClF,uBAAiB,WAAW,MAAM;AAClC,UAAI,eAAe,OAAW,kBAAiB,YAAY,MAAM;AACjE,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA;AAAA,QAIf,CAAC,QAAQ,WAAW,MAAM,WAAW,MAAM,YAAY,WAAW,cAAc,MAAM,MAAM,OAAO;AAAA,MACrG;AAAA,IACF;AAAA,IAEA,MAAM,eAAe,QAAgB,OAA0B,UAA8C;AAC3G,YAAM,OAAO,cAAc,UAAU,MAAM;AAC3C,YAAM,KAAK;AAAA,QACT,UAAU,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMf,CAAC,QAAQ,WAAW,MAAM,WAAW,MAAM,YAAY,IAAI;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,oBAAoB,QAAgB,OAA0B,YAAiC;AAC7F,YAAM,gBAAgB,KAAK,UAAU,CAAC,MAAM,WAAW,MAAM,YAAY,MAAM,CAAC;AAChF,YAAM,WAA0B,WAAW;AAAA,QACzC,MAAM;AACJ,cAAI,YAAY,IAAI,aAAa,MAAM,SAAU,aAAY,OAAO,aAAa;AAAA,QACnF;AAAA,QACA,MAAM;AACJ,cAAI,YAAY,IAAI,aAAa,MAAM,SAAU,aAAY,OAAO,aAAa;AAAA,QACnF;AAAA,MACF;AACA,kBAAY,IAAI,eAAe,QAAQ;AAAA,IACzC;AAAA,IAEA,MAAM,UAAU,QAAgB,OAAyC;AACvE,YAAM,UAAU,YAAY,IAAI,KAAK,UAAU,CAAC,MAAM,WAAW,MAAM,YAAY,MAAM,CAAC,CAAC;AAC3F,UAAI,QAAS,OAAM;AAAA,IACrB;AAAA,IAEA,MAAM,iBAAiB,QAA+B;AACpD,YAAM,UAAU,MAAM,KAAK,YAAY,QAAQ,CAAC,EAC7C,OAAO,CAAC,CAAC,GAAG,MAAO,KAAK,MAAM,GAAG,EAA+B,CAAC,MAAM,MAAM,EAC7E,IAAI,CAAC,CAAC,EAAE,UAAU,MAAM,UAAU;AACrC,YAAM,QAAQ,IAAI,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;","names":[]}