@aglyn/tenant-data-admin 1.0.0-beta.223 → 1.0.0-beta.224

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/tenant-data-admin",
-  "version": "1.0.0-beta.223",
+  "version": "1.0.0-beta.224",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,12 +25,12 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.223",
-    "@aglyn/shared-util-email": "1.0.0-beta.223",
-    "@aglyn/shared-util-fbserver": "1.0.0-beta.223",
-    "@aglyn/shared-util-first-touch": "1.0.0-beta.223",
-    "@aglyn/shared-util-http": "1.0.0-beta.223",
-    "@aglyn/shared-util-tools": "1.0.0-beta.223",
+    "@aglyn/aglyn": "1.0.0-beta.224",
+    "@aglyn/shared-util-email": "1.0.0-beta.224",
+    "@aglyn/shared-util-fbserver": "1.0.0-beta.224",
+    "@aglyn/shared-util-first-touch": "1.0.0-beta.224",
+    "@aglyn/shared-util-http": "1.0.0-beta.224",
+    "@aglyn/shared-util-tools": "1.0.0-beta.224",
     "@msgpack/msgpack": "^3.1.3",
     "@swc/helpers": "0.5.23",
     "sharp": "^0.35.5",

package/src/lib/server/render-monitor.d.ts

@@ -33,7 +33,7 @@ export declare const RENDER_MONITOR_DEFAULT_THRESHOLD = 2;
  * screen slug would, not a reserved or rewritten route.
  */
 export declare const RENDER_PROBE_ISR_PREFIX = "/aglyn-render-probe-";
-export type RenderProbeKind = 'dynamic' | 'isr';
+export type RenderProbeKind = 'dynamic' | 'isr' | 'page';
 export interface RenderProbeSpec {
     kind: RenderProbeKind;
     /** The path to request, given a fresh nonce. */
@@ -67,6 +67,68 @@ export interface RenderProbeVerdict {
  * document finished streaming, `/_next/static/` that our build produced it.
  */
 export declare function gradeRenderProbe(response: RenderProbeResponse, expectStatus: number): RenderProbeVerdict;
+/**
+ * The pages Aglyn's own console renders fresh when `RENDER_MONITOR_PAGES` is
+ * unset: the canary's real client pages (`tools/scripts/lib/prod-canary.mjs`
+ * `DEFAULT_TENANT_HOSTS`), images, reusable components, repeats and a form
+ * between them. Applied ONLY on that console deployment (`VERCEL_PROJECT_ID`),
+ * so no other install ever requests them.
+ */
+export declare const PLATFORM_RENDER_PAGES: string;
+/** Aglyn's console project on Vercel, the one deployment the list above is for. */
+export declare const PLATFORM_CONSOLE_VERCEL_PROJECT_ID = "prj_gEzxEXc0Lhs81rmaXIg2a1GbsDfl";
+/**
+ * The tenant's production project domain on Vercel: follows every promote and
+ * rollback, honors `?tenantHost=`, and is reachable only with the bypass.
+ */
+export declare const PLATFORM_RENDER_ORIGIN = "https://aglyn-tenant-aglyn.vercel.app";
+/**
+ * Spelling number `n` of one site: a `?tenantHost=` value that resolves to
+ * that site and is a `[host]` route segment no other number produces, so the
+ * page it asks for has no cache entry to come from.
+ *
+ *  - `{sub}.{apex}` → the full name, letters upper-cased by the bits of `n`,
+ *    then one trailing dot per exhausted round of cases.
+ *  - any other name → `cname--{name}`, recased the same way and cycling after
+ *    `2 ** letters` (that form keeps trailing dots), with the prefix left
+ *    lower-case because the canonical-domain redirect tests the raw segment.
+ *
+ * MUST stay identical to `freshHostSpelling` in
+ * `tools/scripts/lib/prod-canary.mjs`; `apps/tenant/specs/probe-host-spelling.spec.ts`
+ * pins both against `normalizeHostAlias`.
+ */
+export declare function freshHostSpelling(host: string, n: number, apex?: string): string;
+/**
+ * The spelling number for a run at `nowMs`: minutes since 2026-10-01, so it
+ * never repeats on one deployment — a `{sub}.aglyn.app` name of 18 letters
+ * gains its first trailing dot after half a year.
+ */
+export declare function renderSpellingNumber(nowMs: number): number;
+/** One watched site's real pages. */
+export interface RenderMonitorPages {
+    /** The site's public origin, which keys its state document. */
+    origin: string;
+    host: string;
+    paths: string[];
+}
+/**
+ * `"a.example.app b.example.app/services, https://b.example.app/contact"` →
+ * one entry per host, paths merged, `/` when an entry names none. Entries that
+ * are not a hostname are dropped, as `RENDER_MONITOR_ORIGINS` drops them.
+ */
+export declare function parseRenderMonitorPages(text: string | undefined | null): RenderMonitorPages[];
+/**
+ * Which real pages the monitor renders, and through which origin.
+ *
+ * `RENDER_MONITOR_PAGES` (same grammar as the canary's `CANARY_TENANT_HOSTS`)
+ * and `RENDER_MONITOR_RENDER_ORIGIN`, else — on Aglyn's own console only —
+ * `PLATFORM_RENDER_PAGES` through `PLATFORM_RENDER_ORIGIN`. `off` (here or in
+ * `RENDER_MONITOR_ORIGINS`) renders none. No render origin, no pages.
+ */
+export declare function resolveRenderMonitorPages(env: Readonly<Record<string, string | undefined>>): {
+    renderOrigin: string;
+    pages: RenderMonitorPages[];
+};
 /** A configured value as an origin, or '' when it is not one. */
 export declare function originOf(value: string | undefined | null): string;
 /**
@@ -145,6 +207,11 @@ type RaiseAlert = (type: string, options: {
     dedupeKey?: string;
     context?: Record<string, string | number>;
 }) => Promise<unknown>;
+/**
+ * The `page` probe's URL for one run: this run's page of the site's list
+ * (rotating every five-minute slot), under this run's spelling of the site.
+ */
+export declare function pageProbeUrl(renderOrigin: string, site: RenderMonitorPages, slot: number, spelling: number): string;
 /**
  * One run: render every target, record each site's state, raise the edge.
  *

package/src/lib/server/render-monitor.js

@@ -50,9 +50,29 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * `operatorHealthState/render-monitor--<host>`, beside every other health
  * check, so Staff → Operator alerts lists it with its status and since when.
  *
- * Nothing here names an Aglyn host: the default target is the install's own
- * demonstration site label under its own tenant apex, the convention the
- * middleware and the render canaries already follow.
+ * Nothing here names an Aglyn host for anyone else: the default target is the
+ * install's own demonstration site label under its own tenant apex, the
+ * convention the middleware and the render canaries already follow. The one
+ * exception is `PLATFORM_RENDER_PAGES` below, which applies on Aglyn's own
+ * console deployment and nowhere else.
+ *
+ * ## Real pages, rendered fresh (AGL-3571)
+ *
+ * The two probes above draw the layout. They do not draw a page BODY, and
+ * beta.223 hung only on page bodies with an image in them (an ancestor walk
+ * looped on the page root, AGL-3565): `demo` has no images and the not-found
+ * page has no body, so this monitor read green through it. So a third probe,
+ * `page`, renders a real published page through the full ISR path — through
+ * the tenant's `*.vercel.app` production domain (`RENDER_MONITOR_RENDER_ORIGIN`),
+ * which honors `?tenantHost=` and sits behind Deployment Protection, naming
+ * the site with a spelling no cache holds (`freshHostSpelling`). The cache key
+ * includes the `[host]` segment, and `normalizeHostAlias` resolves every
+ * spelling to the same site. Without the automation bypass the render origin
+ * answers its sign-in redirect, so no `page` probe is made at all.
+ *
+ * One page per site per run, rotating through that site's list: a platform
+ * break fails every page with an image, so every run, and alerts as fast as
+ * before; a break on one page alone is seen on its turn.
  */ /** The state documents' collection: the health checks' own. */ const RENDER_MONITOR_COLLECTION = 'operatorHealthState';
 /** Every render monitor document id starts with this. */ export const RENDER_MONITOR_CHECK_PREFIX = 'render-monitor--';
 /** The beat id `/api/health/crons` reads for the scheduled run. */ export const RENDER_MONITOR_JOB_ID = 'render-monitor';
@@ -162,6 +182,121 @@ export const RENDER_PROBES = [
         detail: 'rendered'
     };
 }
+/**
+ * The pages Aglyn's own console renders fresh when `RENDER_MONITOR_PAGES` is
+ * unset: the canary's real client pages (`tools/scripts/lib/prod-canary.mjs`
+ * `DEFAULT_TENANT_HOSTS`), images, reusable components, repeats and a form
+ * between them. Applied ONLY on that console deployment (`VERCEL_PROJECT_ID`),
+ * so no other install ever requests them.
+ */ export const PLATFORM_RENDER_PAGES = [
+    'ready-to-roll.aglyn.app/',
+    'edr-construction.aglyn.app/',
+    'edr-construction.aglyn.app/services',
+    'edr-construction.aglyn.app/contact'
+].join(' ');
+/** Aglyn's console project on Vercel, the one deployment the list above is for. */ export const PLATFORM_CONSOLE_VERCEL_PROJECT_ID = 'prj_gEzxEXc0Lhs81rmaXIg2a1GbsDfl';
+/**
+ * The tenant's production project domain on Vercel: follows every promote and
+ * rollback, honors `?tenantHost=`, and is reachable only with the bypass.
+ */ export const PLATFORM_RENDER_ORIGIN = 'https://aglyn-tenant-aglyn.vercel.app';
+/** The middleware's custom-domain sentinel (`apps/tenant/utils/get-host.ts`). */ const CNAME_HOST_PREFIX = 'cname--';
+/** Letters past this are never recased, so the bit arithmetic stays in 32 bits. */ const MAX_SPELLING_BITS = 30;
+function spellingLetters(host) {
+    return [
+        ...host.toLowerCase()
+    ].map((char, index)=>/[a-z]/.test(char) ? index : -1).filter((index)=>index >= 0).slice(0, MAX_SPELLING_BITS);
+}
+/**
+ * Spelling number `n` of one site: a `?tenantHost=` value that resolves to
+ * that site and is a `[host]` route segment no other number produces, so the
+ * page it asks for has no cache entry to come from.
+ *
+ *  - `{sub}.{apex}` → the full name, letters upper-cased by the bits of `n`,
+ *    then one trailing dot per exhausted round of cases.
+ *  - any other name → `cname--{name}`, recased the same way and cycling after
+ *    `2 ** letters` (that form keeps trailing dots), with the prefix left
+ *    lower-case because the canonical-domain redirect tests the raw segment.
+ *
+ * MUST stay identical to `freshHostSpelling` in
+ * `tools/scripts/lib/prod-canary.mjs`; `apps/tenant/specs/probe-host-spelling.spec.ts`
+ * pins both against `normalizeHostAlias`.
+ */ export function freshHostSpelling(host, n, apex = TENANT_APEX) {
+    const subdomain = host.endsWith(`.${apex}`);
+    const prefix = subdomain ? '' : CNAME_HOST_PREFIX;
+    const chars = [
+        ...host.toLowerCase()
+    ];
+    const letters = spellingLetters(host);
+    const capacity = 2 ** letters.length;
+    const value = Math.max(0, Math.floor(Number(n) || 0));
+    const bits = value % capacity;
+    letters.forEach((index, bit)=>{
+        if (Math.floor(bits / 2 ** bit) % 2 === 1) chars[index] = chars[index].toUpperCase();
+    });
+    const dots = subdomain ? '.'.repeat(Math.floor(value / capacity)) : '';
+    return `${prefix}${chars.join('')}${dots}`;
+}
+/**
+ * The spelling number for a run at `nowMs`: minutes since 2026-10-01, so it
+ * never repeats on one deployment — a `{sub}.aglyn.app` name of 18 letters
+ * gains its first trailing dot after half a year.
+ */ export function renderSpellingNumber(nowMs) {
+    return Math.max(1, Math.floor((nowMs - Date.UTC(2026, 9, 1)) / 60000));
+}
+/**
+ * `"a.example.app b.example.app/services, https://b.example.app/contact"` →
+ * one entry per host, paths merged, `/` when an entry names none. Entries that
+ * are not a hostname are dropped, as `RENDER_MONITOR_ORIGINS` drops them.
+ */ export function parseRenderMonitorPages(text) {
+    const byHost = new Map();
+    for (const raw of String(text != null ? text : '').split(/[\s,]+/)){
+        var _byHost_get;
+        const entry = raw.trim().replace(/^https?:\/\//i, '');
+        if (!entry) continue;
+        const slash = entry.indexOf('/');
+        const host = (slash === -1 ? entry : entry.slice(0, slash)).toLowerCase();
+        if (!/^[a-z0-9-]+(\.[a-z0-9-]+)+$/.test(host)) continue;
+        const path = slash === -1 ? '/' : entry.slice(slash).replace(/\/+$/, '') || '/';
+        const paths = (_byHost_get = byHost.get(host)) != null ? _byHost_get : [];
+        if (!paths.includes(path)) paths.push(path);
+        byHost.set(host, paths);
+    }
+    return [
+        ...byHost
+    ].map(([host, paths])=>({
+            origin: `https://${host}`,
+            host,
+            paths
+        }));
+}
+/**
+ * Which real pages the monitor renders, and through which origin.
+ *
+ * `RENDER_MONITOR_PAGES` (same grammar as the canary's `CANARY_TENANT_HOSTS`)
+ * and `RENDER_MONITOR_RENDER_ORIGIN`, else — on Aglyn's own console only —
+ * `PLATFORM_RENDER_PAGES` through `PLATFORM_RENDER_ORIGIN`. `off` (here or in
+ * `RENDER_MONITOR_ORIGINS`) renders none. No render origin, no pages.
+ */ export function resolveRenderMonitorPages(env) {
+    var _env_RENDER_MONITOR_PAGES, _env_RENDER_MONITOR_ORIGINS;
+    const off = /^(off|none|false|0)$/i;
+    const raw = String((_env_RENDER_MONITOR_PAGES = env['RENDER_MONITOR_PAGES']) != null ? _env_RENDER_MONITOR_PAGES : '').trim();
+    if (off.test(raw) || off.test(String((_env_RENDER_MONITOR_ORIGINS = env['RENDER_MONITOR_ORIGINS']) != null ? _env_RENDER_MONITOR_ORIGINS : '').trim())) {
+        return {
+            renderOrigin: '',
+            pages: []
+        };
+    }
+    const platform = env['VERCEL_PROJECT_ID'] === PLATFORM_CONSOLE_VERCEL_PROJECT_ID;
+    const renderOrigin = originOf(env['RENDER_MONITOR_RENDER_ORIGIN']) || (platform ? PLATFORM_RENDER_ORIGIN : '');
+    const pages = parseRenderMonitorPages(raw || (platform ? PLATFORM_RENDER_PAGES : ''));
+    return renderOrigin ? {
+        renderOrigin,
+        pages
+    } : {
+        renderOrigin: '',
+        pages: []
+    };
+}
 /** A configured value as an origin, or '' when it is not one. */ export function originOf(value) {
     const trimmed = String(value != null ? value : '').trim().replace(/\/+$/, '');
     return /^https?:\/\/[^/\s?#]+$/i.test(trimmed) ? trimmed.toLowerCase() : '';
@@ -184,10 +319,13 @@ export const RENDER_PROBES = [
     const label = String((_env_AGLYN_TENANT_DEMO = env['AGLYN_TENANT_DEMO']) != null ? _env_AGLYN_TENANT_DEMO : '').trim() || 'demo';
     const demo = originOf(env['OPERATOR_HEALTH_TENANT_ORIGIN']) || originOf(`https://${label}.${apex}`);
     const listed = raw.split(/[\s,]+/).map((value)=>originOf(value)).filter(Boolean);
+    // A site whose pages are rendered is watched whole: its layout probes too.
+    const paged = resolveRenderMonitorPages(env).pages.map((page)=>page.origin);
     return [
         ...new Set([
             demo,
-            ...listed
+            ...listed,
+            ...paged
         ].filter(Boolean))
     ];
 }
@@ -269,11 +407,20 @@ function describeDuration(ms) {
     const rest = minutes % 60;
     return rest ? `${hours} h ${rest} min` : `${hours} h`;
 }
+/**
+ * The `page` probe's URL for one run: this run's page of the site's list
+ * (rotating every five-minute slot), under this run's spelling of the site.
+ */ export function pageProbeUrl(renderOrigin, site, slot, spelling) {
+    var _site_paths_;
+    const path = (_site_paths_ = site.paths[Math.abs(slot) % site.paths.length]) != null ? _site_paths_ : '/';
+    const url = new URL(path, renderOrigin);
+    url.searchParams.set('tenantHost', freshHostSpelling(site.host, spelling));
+    return url.toString();
+}
 function probeLine(row) {
     return `${row.kind} ${new URL(row.url).pathname}: ${row.detail} (${row.ms} ms)`;
 }
-/** Fetch and grade one probe. Never throws. */ async function runProbe(origin, spec, options) {
-    const url = `${origin}${spec.path(options.nonce)}`;
+/** Fetch and grade one probe. Never throws. */ async function runProbe(url, spec, options) {
     const startedAt = options.clock();
     try {
         var _response_headers_get;
@@ -323,7 +470,7 @@ function probeLine(row) {
  * A dry run fetches and grades and writes nothing, so a person can ask
  * "what would the monitor see right now" without moving its state.
  */ export async function runRenderMonitor(options = {}) {
-    var _options_env, _options_now, _options_store, _options_raise, _env_RENDER_MONITOR_FAILURE_THRESHOLD, _options_nonce;
+    var _options_env, _options_now, _options_store, _options_raise, _env_RENDER_MONITOR_FAILURE_THRESHOLD, _options_nonce, _options_fetcher, _options_headers, _options_timeoutMs;
     const env = (_options_env = options.env) != null ? _options_env : process.env;
     const clock = (_options_now = options.now) != null ? _options_now : Date.now;
     const store = (_options_store = options.store) != null ? _options_store : firestoreStore;
@@ -332,24 +479,38 @@ function probeLine(row) {
     const parsedThreshold = Number.parseInt(String((_env_RENDER_MONITOR_FAILURE_THRESHOLD = env['RENDER_MONITOR_FAILURE_THRESHOLD']) != null ? _env_RENDER_MONITOR_FAILURE_THRESHOLD : ''), 10);
     const threshold = Number.isFinite(parsedThreshold) && parsedThreshold >= 1 ? parsedThreshold : RENDER_MONITOR_DEFAULT_THRESHOLD;
     const nonce = (_options_nonce = options.nonce) != null ? _options_nonce : ()=>`${clock().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
+    const probeOptions = {
+        fetcher: (_options_fetcher = options.fetcher) != null ? _options_fetcher : fetch,
+        headers: (_options_headers = options.headers) != null ? _options_headers : {},
+        timeoutMs: (_options_timeoutMs = options.timeoutMs) != null ? _options_timeoutMs : RENDER_MONITOR_TIMEOUT_MS,
+        clock
+    };
+    // Real pages need the render origin AND the bypass that gets past its
+    // Deployment Protection; without both a `page` probe could only fail.
+    const { renderOrigin, pages } = resolveRenderMonitorPages(env);
+    const canRenderPages = Boolean(renderOrigin && probeOptions.headers['x-vercel-protection-bypass']);
+    const runAt = clock();
+    const slot = Math.floor(runAt / 300000);
     const sites = await Promise.all(resolveRenderMonitorTargets(env).map(async (origin)=>{
-        const probes = await Promise.all(RENDER_PROBES.map((spec)=>{
-            var _options_fetcher, _options_headers, _options_timeoutMs;
-            return runProbe(origin, spec, {
-                fetcher: (_options_fetcher = options.fetcher) != null ? _options_fetcher : fetch,
-                headers: (_options_headers = options.headers) != null ? _options_headers : {},
-                nonce: nonce(),
-                timeoutMs: (_options_timeoutMs = options.timeoutMs) != null ? _options_timeoutMs : RENDER_MONITOR_TIMEOUT_MS,
-                clock
-            });
-        }));
+        const layoutProbes = RENDER_PROBES.map((spec)=>runProbe(`${origin}${spec.path(nonce())}`, spec, probeOptions));
+        const site = canRenderPages ? pages.find((page)=>page.origin === origin) : undefined;
+        const pageProbe = site ? [
+            runProbe(pageProbeUrl(renderOrigin, site, slot, renderSpellingNumber(runAt)), {
+                kind: 'page',
+                expectStatus: 200
+            }, probeOptions)
+        ] : [];
+        const probes = await Promise.all([
+            ...layoutProbes,
+            ...pageProbe
+        ]);
         const ok = probes.every((probe)=>probe.ok);
-        const site = {
+        const result = {
             origin,
             ok,
             probes
         };
-        if (dryRun) return site;
+        if (dryRun) return result;
         const host = new URL(origin).host;
         const failing = probes.filter((probe)=>!probe.ok);
         const detail = ok ? 'Fresh renders pass.' : failing.map(probeLine).join('; ');
@@ -374,9 +535,9 @@ function probeLine(row) {
                     })
                 };
             });
-            site.status = next.status;
-            site.consecutiveFailures = next.consecutiveFailures;
-            site.transition = transition;
+            result.status = next.status;
+            result.consecutiveFailures = next.consecutiveFailures;
+            result.transition = transition;
             if (transition === 'failing') {
                 await raise('system.siteRenderFailing', {
                     dedupeKey: host,
@@ -397,10 +558,10 @@ function probeLine(row) {
                 });
             }
         } catch (error) {
-            site.error = error instanceof Error ? error.message : String(error);
+            result.error = error instanceof Error ? error.message : String(error);
             console.error(`[render-monitor] ${host} could not be recorded`, error);
         }
-        return site;
+        return result;
     }));
     return {
         dryRun,

package/src/lib/server/render-monitor.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/render-monitor.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { TENANT_APEX } from '@aglyn/aglyn/app-utils/tenant-apex'\nimport type { OperatorHealthStateDoc } from './operator-health'\n\n/**\n * THE RENDER MONITOR (AGL-3568): does a published site still render a page\n * that was not already in a cache?\n *\n * On 2026-10-05 every uncached page render on the published-site runtime\n * hung to the platform's 60 s limit for 28 minutes, and nothing alerted. The\n * three monitors that existed each missed it for its own reason:\n *\n *  - the GitHub uptime probe is scheduled every 15 minutes and GitHub ran it\n *    four times that day, none of them during the outage;\n *  - its page rows fetch `/`, which the ISR cache answers, so a visitor's\n *    page that was cached still loaded and the row stayed green;\n *  - `/api/health/render/site` runs the page LOADER in-process and never the\n *    site layout, which is where the request was stuck.\n *\n * So this fetches pages over HTTP, from the console (a different deployment\n * from the one it watches), on Cloud Scheduler every five minutes, and asks\n * for two pages no cache can answer:\n *\n *  - `dynamic` — `/search`, a route every site has that renders on every\n *    request (`force-dynamic`) inside the full site layout. A 200 that is a\n *    complete document proves the layout and head ran just now.\n *  - `isr` — a path nobody has ever requested, under the catch-all page.\n *    A never-seen path is the one request the ISR cache cannot answer, so it\n *    renders in the same static context every published page renders in,\n *    which is the context the 2026-09-09 outage only appeared in. It is a\n *    404 by construction, and the site's own not-found page is drawn inside\n *    the same layout, so a complete 404 document is a pass.\n *\n * A site that fails `threshold` runs in a row raises\n * `system.siteRenderFailing` once; the first passing run after that raises\n * `system.siteRenderRecovered` once. The state lives in\n * `operatorHealthState/render-monitor--<host>`, beside every other health\n * check, so Staff → Operator alerts lists it with its status and since when.\n *\n * Nothing here names an Aglyn host: the default target is the install's own\n * demonstration site label under its own tenant apex, the convention the\n * middleware and the render canaries already follow.\n */\n\n/** The state documents' collection: the health checks' own. */\nconst RENDER_MONITOR_COLLECTION = 'operatorHealthState'\n\n/** Every render monitor document id starts with this. */\nexport const RENDER_MONITOR_CHECK_PREFIX = 'render-monitor--'\n\n/** The beat id `/api/health/crons` reads for the scheduled run. */\nexport const RENDER_MONITOR_JOB_ID = 'render-monitor'\n\n/**\n * How long one page fetch may take. Well under the 60 s a platform function\n * may run, so a hung render is graded here as a timeout rather than waiting\n * for the platform's 504, and well under the route's own `maxDuration`.\n */\nexport const RENDER_MONITOR_TIMEOUT_MS = 25_000\n\n/** Failing runs in a row before the alert goes out. */\nexport const RENDER_MONITOR_DEFAULT_THRESHOLD = 2\n\n/**\n * The prefix of the never-requested path the `isr` probe asks for. A\n * lowercase slug on purpose: it must reach the catch-all page like any\n * screen slug would, not a reserved or rewritten route.\n */\nexport const RENDER_PROBE_ISR_PREFIX = '/aglyn-render-probe-'\n\nexport type RenderProbeKind = 'dynamic' | 'isr'\n\nexport interface RenderProbeSpec {\n  kind: RenderProbeKind\n  /** The path to request, given a fresh nonce. */\n  path: (nonce: string) => string\n  /** The status a healthy render answers with. */\n  expectStatus: number\n}\n\nexport const RENDER_PROBES: readonly RenderProbeSpec[] = [\n  { kind: 'dynamic', path: () => '/search', expectStatus: 200 },\n  {\n    kind: 'isr',\n    path: (nonce) => `${RENDER_PROBE_ISR_PREFIX}${nonce}`,\n    expectStatus: 404,\n  },\n]\n\n/** One fetched response, reduced to what grading reads. */\nexport interface RenderProbeResponse {\n  status: number\n  contentType?: string | null\n  body?: string\n  location?: string | null\n  /** `x-vercel-cache` on Vercel, `x-nextjs-cache` on a plain `next start`. */\n  cacheState?: string | null\n}\n\nexport interface RenderProbeVerdict {\n  ok: boolean\n  /** Bot protection answered instead of the site. */\n  challenged: boolean\n  /** A stable code; `ok` on a pass. */\n  code: string\n  detail: string\n}\n\n/** Vercel's challenge interstitial, matched on the body like the front doors. */\nconst CHECKPOINT_MARKER = /Vercel Security Checkpoint/i\n\n/**\n * Cache states that mean the bytes came out of a store. A probe meant to\n * prove a render cannot pass on one of these, whatever the status.\n */\nconst CACHED_STATES = new Set(['HIT', 'STALE', 'PRERENDER'])\n\n/**\n * Grade one probe response. Pure.\n *\n * The page markers are the front doors' (`tools/scripts/lib/front-door.mjs`)\n * and for their reason: structural, never site copy. `</html>` proves the\n * document finished streaming, `/_next/static/` that our build produced it.\n */\nexport function gradeRenderProbe(\n  response: RenderProbeResponse,\n  expectStatus: number,\n): RenderProbeVerdict {\n  const body = response.body ?? ''\n  if (CHECKPOINT_MARKER.test(body)) {\n    return {\n      ok: false,\n      challenged: true,\n      code: 'challenged',\n      detail: `bot protection answered (HTTP ${response.status}) instead of the site; check AGLYN_PROBE_TOKEN on the console`,\n    }\n  }\n  if (response.status >= 300 && response.status < 400) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'redirected',\n      detail: `redirected to ${response.location ?? '?'}, so no page was rendered`,\n    }\n  }\n  if (response.status !== expectStatus) {\n    return {\n      ok: false,\n      challenged: false,\n      code: `http-${response.status}`,\n      detail: `HTTP ${response.status}`,\n    }\n  }\n  if (!/text\\/html/i.test(response.contentType ?? '')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'not-html',\n      detail: `not HTML (${response.contentType || 'no content-type'})`,\n    }\n  }\n  if (!body.includes('</html>')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'incomplete',\n      detail: 'the document never finished (no </html>)',\n    }\n  }\n  if (!body.includes('/_next/static/')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'not-our-render',\n      detail: 'no Next asset references, so the app did not render it',\n    }\n  }\n  const cache = String(response.cacheState ?? '').trim().toUpperCase()\n  if (CACHED_STATES.has(cache)) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'served-from-cache',\n      detail: `served from cache (${cache}), so it proves no render`,\n    }\n  }\n  return { ok: true, challenged: false, code: 'ok', detail: 'rendered' }\n}\n\n/** A configured value as an origin, or '' when it is not one. */\nexport function originOf(value: string | undefined | null): string {\n  const trimmed = String(value ?? '').trim().replace(/\\/+$/, '')\n  return /^https?:\\/\\/[^/\\s?#]+$/i.test(trimmed) ? trimmed.toLowerCase() : ''\n}\n\n/**\n * Which sites the monitor renders, from the console's environment.\n *\n * 1. The install's demonstration site: `OPERATOR_HEALTH_TENANT_ORIGIN` when\n *    set (the one published site the operator alerts tick already watches),\n *    else `https://<AGLYN_TENANT_DEMO or demo>.<tenant apex>`.\n * 2. Plus every origin in `RENDER_MONITOR_ORIGINS`, comma separated.\n *\n * `RENDER_MONITOR_ORIGINS=off` watches nothing, for an install with no\n * published site to watch. Values that are not origins are dropped.\n */\nexport function resolveRenderMonitorTargets(\n  env: Readonly<Record<string, string | undefined>>,\n): string[] {\n  const raw = String(env['RENDER_MONITOR_ORIGINS'] ?? '').trim()\n  if (/^(off|none|false|0)$/i.test(raw)) return []\n  const apex =\n    String(env['NEXT_PUBLIC_TENANT_DOMAIN'] ?? '').trim() || TENANT_APEX\n  const label = String(env['AGLYN_TENANT_DEMO'] ?? '').trim() || 'demo'\n  const demo =\n    originOf(env['OPERATOR_HEALTH_TENANT_ORIGIN']) ||\n    originOf(`https://${label}.${apex}`)\n  const listed = raw\n    .split(/[\\s,]+/)\n    .map((value) => originOf(value))\n    .filter(Boolean)\n  return [...new Set([demo, ...listed].filter(Boolean))]\n}\n\n/** The state document id for one origin. */\nexport function renderMonitorCheckId(origin: string): string {\n  return `${RENDER_MONITOR_CHECK_PREFIX}${new URL(origin).host}`\n}\n\n/** One render monitor state document. */\nexport interface RenderMonitorStateDoc extends OperatorHealthStateDoc {\n  origin: string\n  /** Failing runs in a row, reset by any passing run. */\n  consecutiveFailures: number\n  /** When the current run of failures began; null while passing. */\n  failingSinceMs: number | null\n  lastOkAtMs: number | null\n}\n\nexport type RenderMonitorTransition = 'failing' | 'recovered' | null\n\n/**\n * The next state for one site, given what this run saw. Pure.\n *\n * The status turns `degraded` only once `threshold` runs in a row have\n * failed, so one slow cold start or one dropped connection says nothing. It\n * turns back on the first passing run, because a render that works is\n * proof, and a recovery held back is a recovery nobody hears about.\n */\nexport function nextRenderMonitorState(\n  prior: Partial<RenderMonitorStateDoc> | null,\n  observation: { ok: boolean; detail: string },\n  context: { origin: string; label: string; threshold: number; now: number },\n): { next: RenderMonitorStateDoc; transition: RenderMonitorTransition } {\n  const { origin, label, threshold, now } = context\n  const checkId = renderMonitorCheckId(origin)\n  const detail = String(observation.detail ?? '').slice(0, 1_000)\n  const wasDegraded = prior?.status === 'degraded'\n  if (observation.ok) {\n    return {\n      next: {\n        checkId,\n        label,\n        origin,\n        status: 'ok',\n        sinceMs: !wasDegraded && prior?.sinceMs ? prior.sinceMs : now,\n        detail,\n        updatedAtMs: now,\n        consecutiveFailures: 0,\n        failingSinceMs: null,\n        lastOkAtMs: now,\n      },\n      transition: wasDegraded ? 'recovered' : null,\n    }\n  }\n  const failures = (prior?.consecutiveFailures ?? 0) + 1\n  const failingSinceMs = prior?.failingSinceMs ?? now\n  const degraded = wasDegraded || failures >= Math.max(1, threshold)\n  return {\n    next: {\n      checkId,\n      label,\n      origin,\n      status: degraded ? 'degraded' : 'ok',\n      sinceMs: degraded\n        ? wasDegraded && prior?.sinceMs\n          ? prior.sinceMs\n          : failingSinceMs\n        : (prior?.sinceMs ?? now),\n      detail,\n      updatedAtMs: now,\n      consecutiveFailures: failures,\n      failingSinceMs,\n      lastOkAtMs: prior?.lastOkAtMs ?? null,\n    },\n    transition: degraded && !wasDegraded ? 'failing' : null,\n  }\n}\n\n/** One probe as the report shows it. */\nexport interface RenderProbeRow extends RenderProbeVerdict {\n  kind: RenderProbeKind\n  url: string\n  ms: number\n  httpStatus: number | null\n}\n\n/** One site's result for a run. */\nexport interface RenderMonitorSiteResult {\n  origin: string\n  ok: boolean\n  probes: RenderProbeRow[]\n  /** The state written; absent on a dry run or a failed write. */\n  status?: 'ok' | 'degraded'\n  consecutiveFailures?: number\n  transition?: RenderMonitorTransition\n  error?: string\n}\n\nexport interface RenderMonitorReport {\n  dryRun: boolean\n  threshold: number\n  sites: RenderMonitorSiteResult[]\n}\n\n/** The read-modify-write of one site's state, as one transaction. */\nexport type RenderMonitorStore = <T>(\n  checkId: string,\n  work: (prior: Partial<RenderMonitorStateDoc> | null) => {\n    next: RenderMonitorStateDoc\n    result: T\n  },\n) => Promise<T>\n\n/**\n * The default store: one Firestore transaction on the site's document, so\n * two overlapping runs cannot both decide they saw the edge.\n */\nconst firestoreStore: RenderMonitorStore = async (checkId, work) => {\n  const { default: firebaseAdmin } = await import('./firebase-admin')\n  const db = firebaseAdmin.app().firestore()\n  const ref = db.collection(RENDER_MONITOR_COLLECTION).doc(checkId)\n  return db.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    const prior = snapshot.exists\n      ? (snapshot.data() as Partial<RenderMonitorStateDoc>)\n      : null\n    const { next, result } = work(prior)\n    transaction.set(ref, next)\n    return result\n  })\n}\n\ntype RaiseAlert = (\n  type: string,\n  options: { dedupeKey?: string; context?: Record<string, string | number> },\n) => Promise<unknown>\n\nconst defaultRaise: RaiseAlert = async (type, options) => {\n  const { raiseOperatorAlert } = await import('./operator-alerts')\n  return raiseOperatorAlert(type, options)\n}\n\nfunction describeDuration(ms: number): string {\n  const minutes = Math.max(1, Math.round(ms / 60_000))\n  if (minutes < 60) return `${minutes} min`\n  const hours = Math.floor(minutes / 60)\n  const rest = minutes % 60\n  return rest ? `${hours} h ${rest} min` : `${hours} h`\n}\n\nfunction probeLine(row: RenderProbeRow): string {\n  return `${row.kind} ${new URL(row.url).pathname}: ${row.detail} (${row.ms} ms)`\n}\n\n/** Fetch and grade one probe. Never throws. */\nasync function runProbe(\n  origin: string,\n  spec: RenderProbeSpec,\n  options: {\n    fetcher: typeof fetch\n    headers: Record<string, string>\n    nonce: string\n    timeoutMs: number\n    clock: () => number\n  },\n): Promise<RenderProbeRow> {\n  const url = `${origin}${spec.path(options.nonce)}`\n  const startedAt = options.clock()\n  try {\n    const response = await options.fetcher(url, {\n      redirect: 'manual',\n      cache: 'no-store',\n      headers: {\n        'user-agent': 'aglyn-render-monitor',\n        accept: 'text/html,application/xhtml+xml',\n        ...options.headers,\n      },\n      signal: AbortSignal.timeout(options.timeoutMs),\n    })\n    const body = await response.text()\n    const verdict = gradeRenderProbe(\n      {\n        status: response.status,\n        contentType: response.headers.get('content-type'),\n        body,\n        location: response.headers.get('location'),\n        cacheState:\n          response.headers.get('x-vercel-cache') ??\n          response.headers.get('x-nextjs-cache'),\n      },\n      spec.expectStatus,\n    )\n    return {\n      kind: spec.kind,\n      url,\n      ms: options.clock() - startedAt,\n      httpStatus: response.status,\n      ...verdict,\n    }\n  } catch (error) {\n    const name = (error as { name?: string } | null)?.name\n    const timedOut = name === 'TimeoutError' || name === 'AbortError'\n    return {\n      kind: spec.kind,\n      url,\n      ms: options.clock() - startedAt,\n      httpStatus: null,\n      ok: false,\n      challenged: false,\n      code: timedOut ? 'timeout' : 'unreachable',\n      detail: timedOut\n        ? `no complete page in ${Math.round(options.timeoutMs / 1_000)} s`\n        : `unreachable (${(error as { cause?: { code?: string } } | null)?.cause?.code ?? name ?? 'error'})`,\n    }\n  }\n}\n\n/**\n * One run: render every target, record each site's state, raise the edge.\n *\n * A dry run fetches and grades and writes nothing, so a person can ask\n * \"what would the monitor see right now\" without moving its state.\n */\nexport async function runRenderMonitor(\n  options: {\n    dryRun?: boolean\n    env?: Readonly<Record<string, string | undefined>>\n    fetcher?: typeof fetch\n    /** Our own edge's bypass headers, from the caller's environment. */\n    headers?: Record<string, string>\n    now?: () => number\n    nonce?: () => string\n    timeoutMs?: number\n    store?: RenderMonitorStore\n    raise?: RaiseAlert\n  } = {},\n): Promise<RenderMonitorReport> {\n  const env = options.env ?? process.env\n  const clock = options.now ?? Date.now\n  const store = options.store ?? firestoreStore\n  const raise = options.raise ?? defaultRaise\n  const dryRun = Boolean(options.dryRun)\n  const parsedThreshold = Number.parseInt(\n    String(env['RENDER_MONITOR_FAILURE_THRESHOLD'] ?? ''),\n    10,\n  )\n  const threshold =\n    Number.isFinite(parsedThreshold) && parsedThreshold >= 1\n      ? parsedThreshold\n      : RENDER_MONITOR_DEFAULT_THRESHOLD\n  const nonce =\n    options.nonce ??\n    (() => `${clock().toString(36)}${Math.random().toString(36).slice(2, 8)}`)\n\n  const sites = await Promise.all(\n    resolveRenderMonitorTargets(env).map(\n      async (origin): Promise<RenderMonitorSiteResult> => {\n        const probes = await Promise.all(\n          RENDER_PROBES.map((spec) =>\n            runProbe(origin, spec, {\n              fetcher: options.fetcher ?? fetch,\n              headers: options.headers ?? {},\n              nonce: nonce(),\n              timeoutMs: options.timeoutMs ?? RENDER_MONITOR_TIMEOUT_MS,\n              clock,\n            }),\n          ),\n        )\n        const ok = probes.every((probe) => probe.ok)\n        const site: RenderMonitorSiteResult = { origin, ok, probes }\n        if (dryRun) return site\n        const host = new URL(origin).host\n        const failing = probes.filter((probe) => !probe.ok)\n        const detail = ok\n          ? 'Fresh renders pass.'\n          : failing.map(probeLine).join('; ')\n        try {\n          const now = clock()\n          const { next, transition, failingSinceMs } = await store(\n            renderMonitorCheckId(origin),\n            (prior) => {\n              const decided = nextRenderMonitorState(\n                prior,\n                { ok, detail },\n                {\n                  origin,\n                  label: `Page rendering on ${host}`,\n                  threshold,\n                  now,\n                },\n              )\n              return {\n                next: decided.next,\n                result: {\n                  ...decided,\n                  // When the failures a recovery ends began.\n                  failingSinceMs: prior?.failingSinceMs ?? prior?.sinceMs ?? now,\n                },\n              }\n            },\n          )\n          site.status = next.status\n          site.consecutiveFailures = next.consecutiveFailures\n          site.transition = transition\n          if (transition === 'failing') {\n            await raise('system.siteRenderFailing', {\n              dedupeKey: host,\n              context: {\n                site: host,\n                failures: next.consecutiveFailures,\n                since: describeDuration(now - next.sinceMs),\n                detail,\n              },\n            })\n          } else if (transition === 'recovered') {\n            await raise('system.siteRenderRecovered', {\n              dedupeKey: host,\n              context: {\n                site: host,\n                duration: describeDuration(now - failingSinceMs),\n              },\n            })\n          }\n        } catch (error) {\n          site.error = error instanceof Error ? error.message : String(error)\n          console.error(`[render-monitor] ${host} could not be recorded`, error)\n        }\n        return site\n      },\n    ),\n  )\n  return { dryRun, threshold, sites }\n}\n"],"names":["TENANT_APEX","RENDER_MONITOR_COLLECTION","RENDER_MONITOR_CHECK_PREFIX","RENDER_MONITOR_JOB_ID","RENDER_MONITOR_TIMEOUT_MS","RENDER_MONITOR_DEFAULT_THRESHOLD","RENDER_PROBE_ISR_PREFIX","RENDER_PROBES","kind","path","expectStatus","nonce","CHECKPOINT_MARKER","CACHED_STATES","Set","gradeRenderProbe","response","body","test","ok","challenged","code","detail","status","location","contentType","includes","cache","String","cacheState","trim","toUpperCase","has","originOf","value","trimmed","replace","toLowerCase","resolveRenderMonitorTargets","env","raw","apex","label","demo","listed","split","map","filter","Boolean","renderMonitorCheckId","origin","URL","host","nextRenderMonitorState","prior","observation","context","threshold","now","checkId","slice","wasDegraded","next","sinceMs","updatedAtMs","consecutiveFailures","failingSinceMs","lastOkAtMs","transition","failures","degraded","Math","max","firestoreStore","work","default","firebaseAdmin","db","app","firestore","ref","collection","doc","runTransaction","transaction","snapshot","get","exists","data","result","set","defaultRaise","type","options","raiseOperatorAlert","describeDuration","ms","minutes","round","hours","floor","rest","probeLine","row","url","pathname","runProbe","spec","startedAt","clock","fetcher","redirect","headers","accept","signal","AbortSignal","timeout","timeoutMs","text","verdict","httpStatus","error","name","timedOut","cause","runRenderMonitor","process","Date","store","raise","dryRun","parsedThreshold","Number","parseInt","isFinite","toString","random","sites","Promise","all","probes","fetch","every","probe","site","failing","join","decided","dedupeKey","since","duration","Error","message","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,QAAQ,qCAAoC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GAED,6DAA6D,GAC7D,MAAMC,4BAA4B;AAElC,uDAAuD,GACvD,OAAO,MAAMC,8BAA8B,mBAAkB;AAE7D,iEAAiE,GACjE,OAAO,MAAMC,wBAAwB,iBAAgB;AAErD;;;;CAIC,GACD,OAAO,MAAMC,4BAA4B,MAAM;AAE/C,qDAAqD,GACrD,OAAO,MAAMC,mCAAmC,EAAC;AAEjD;;;;CAIC,GACD,OAAO,MAAMC,0BAA0B,uBAAsB;AAY7D,OAAO,MAAMC,gBAA4C;IACvD;QAAEC,MAAM;QAAWC,MAAM,IAAM;QAAWC,cAAc;IAAI;IAC5D;QACEF,MAAM;QACNC,MAAM,CAACE,QAAU,GAAGL,0BAA0BK,OAAO;QACrDD,cAAc;IAChB;CACD,CAAA;AAqBD,+EAA+E,GAC/E,MAAME,oBAAoB;AAE1B;;;CAGC,GACD,MAAMC,gBAAgB,IAAIC,IAAI;IAAC;IAAO;IAAS;CAAY;AAE3D;;;;;;CAMC,GACD,OAAO,SAASC,iBACdC,QAA6B,EAC7BN,YAAoB;QAEPM,gBAyBWA,uBAwBHA;IAjDrB,MAAMC,QAAOD,iBAAAA,SAASC,IAAI,YAAbD,iBAAiB;IAC9B,IAAIJ,kBAAkBM,IAAI,CAACD,OAAO;QAChC,OAAO;YACLE,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,8BAA8B,EAAEN,SAASO,MAAM,CAAC,6DAA6D,CAAC;QACzH;IACF;IACA,IAAIP,SAASO,MAAM,IAAI,OAAOP,SAASO,MAAM,GAAG,KAAK;YAKxBP;QAJ3B,OAAO;YACLG,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,cAAc,GAAEN,qBAAAA,SAASQ,QAAQ,YAAjBR,qBAAqB,IAAI,yBAAyB,CAAC;QAC9E;IACF;IACA,IAAIA,SAASO,MAAM,KAAKb,cAAc;QACpC,OAAO;YACLS,IAAI;YACJC,YAAY;YACZC,MAAM,CAAC,KAAK,EAAEL,SAASO,MAAM,EAAE;YAC/BD,QAAQ,CAAC,KAAK,EAAEN,SAASO,MAAM,EAAE;QACnC;IACF;IACA,IAAI,CAAC,cAAcL,IAAI,EAACF,wBAAAA,SAASS,WAAW,YAApBT,wBAAwB,KAAK;QACnD,OAAO;YACLG,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,UAAU,EAAEN,SAASS,WAAW,IAAI,kBAAkB,CAAC,CAAC;QACnE;IACF;IACA,IAAI,CAACR,KAAKS,QAAQ,CAAC,YAAY;QAC7B,OAAO;YACLP,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ;QACV;IACF;IACA,IAAI,CAACL,KAAKS,QAAQ,CAAC,mBAAmB;QACpC,OAAO;YACLP,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ;QACV;IACF;IACA,MAAMK,QAAQC,QAAOZ,uBAAAA,SAASa,UAAU,YAAnBb,uBAAuB,IAAIc,IAAI,GAAGC,WAAW;IAClE,IAAIlB,cAAcmB,GAAG,CAACL,QAAQ;QAC5B,OAAO;YACLR,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,mBAAmB,EAAEK,MAAM,yBAAyB,CAAC;QAChE;IACF;IACA,OAAO;QAAER,IAAI;QAAMC,YAAY;QAAOC,MAAM;QAAMC,QAAQ;IAAW;AACvE;AAEA,+DAA+D,GAC/D,OAAO,SAASW,SAASC,KAAgC;IACvD,MAAMC,UAAUP,OAAOM,gBAAAA,QAAS,IAAIJ,IAAI,GAAGM,OAAO,CAAC,QAAQ;IAC3D,OAAO,0BAA0BlB,IAAI,CAACiB,WAAWA,QAAQE,WAAW,KAAK;AAC3E;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASC,4BACdC,GAAiD;QAE9BA,6BAGVA,gCACYA;IAJrB,MAAMC,MAAMZ,QAAOW,8BAAAA,GAAG,CAAC,yBAAyB,YAA7BA,8BAAiC,IAAIT,IAAI;IAC5D,IAAI,wBAAwBZ,IAAI,CAACsB,MAAM,OAAO,EAAE;IAChD,MAAMC,OACJb,QAAOW,iCAAAA,GAAG,CAAC,4BAA4B,YAAhCA,iCAAoC,IAAIT,IAAI,MAAM9B;IAC3D,MAAM0C,QAAQd,QAAOW,yBAAAA,GAAG,CAAC,oBAAoB,YAAxBA,yBAA4B,IAAIT,IAAI,MAAM;IAC/D,MAAMa,OACJV,SAASM,GAAG,CAAC,gCAAgC,KAC7CN,SAAS,CAAC,QAAQ,EAAES,MAAM,CAAC,EAAED,MAAM;IACrC,MAAMG,SAASJ,IACZK,KAAK,CAAC,UACNC,GAAG,CAAC,CAACZ,QAAUD,SAASC,QACxBa,MAAM,CAACC;IACV,OAAO;WAAI,IAAIlC,IAAI;YAAC6B;eAASC;SAAO,CAACG,MAAM,CAACC;KAAU;AACxD;AAEA,0CAA0C,GAC1C,OAAO,SAASC,qBAAqBC,MAAc;IACjD,OAAO,GAAGhD,8BAA8B,IAAIiD,IAAID,QAAQE,IAAI,EAAE;AAChE;AAcA;;;;;;;CAOC,GACD,OAAO,SAASC,uBACdC,KAA4C,EAC5CC,WAA4C,EAC5CC,OAA0E;QAIpDD;IAFtB,MAAM,EAAEL,MAAM,EAAER,KAAK,EAAEe,SAAS,EAAEC,GAAG,EAAE,GAAGF;IAC1C,MAAMG,UAAUV,qBAAqBC;IACrC,MAAM5B,SAASM,QAAO2B,sBAAAA,YAAYjC,MAAM,YAAlBiC,sBAAsB,IAAIK,KAAK,CAAC,GAAG;IACzD,MAAMC,cAAcP,CAAAA,yBAAAA,MAAO/B,MAAM,MAAK;IACtC,IAAIgC,YAAYpC,EAAE,EAAE;QAClB,OAAO;YACL2C,MAAM;gBACJH;gBACAjB;gBACAQ;gBACA3B,QAAQ;gBACRwC,SAAS,CAACF,gBAAeP,yBAAAA,MAAOS,OAAO,IAAGT,MAAMS,OAAO,GAAGL;gBAC1DpC;gBACA0C,aAAaN;gBACbO,qBAAqB;gBACrBC,gBAAgB;gBAChBC,YAAYT;YACd;YACAU,YAAYP,cAAc,cAAc;QAC1C;IACF;IACA,MAAMQ,WAAW,SAACf,yBAAAA,MAAOW,mBAAmB,mBAAI,KAAK;IACrD,MAAMC,0BAAiBZ,yBAAAA,MAAOY,cAAc,oBAAIR;IAChD,MAAMY,WAAWT,eAAeQ,YAAYE,KAAKC,GAAG,CAAC,GAAGf;IACxD,OAAO;QACLK,MAAM;YACJH;YACAjB;YACAQ;YACA3B,QAAQ+C,WAAW,aAAa;YAChCP,SAASO,WACLT,gBAAeP,yBAAAA,MAAOS,OAAO,IAC3BT,MAAMS,OAAO,GACbG,0BACDZ,yBAAAA,MAAOS,OAAO,oBAAIL;YACvBpC;YACA0C,aAAaN;YACbO,qBAAqBI;YACrBH;YACAC,UAAU,WAAEb,yBAAAA,MAAOa,UAAU,oBAAI;QACnC;QACAC,YAAYE,YAAY,CAACT,cAAc,YAAY;IACrD;AACF;AAqCA;;;CAGC,GACD,MAAMY,iBAAqC,OAAOd,SAASe;IACzD,MAAM,EAAEC,SAASC,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC;IAChD,MAAMC,KAAKD,cAAcE,GAAG,GAAGC,SAAS;IACxC,MAAMC,MAAMH,GAAGI,UAAU,CAAChF,2BAA2BiF,GAAG,CAACvB;IACzD,OAAOkB,GAAGM,cAAc,CAAC,OAAOC;QAC9B,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACN;QACvC,MAAM1B,QAAQ+B,SAASE,MAAM,GACxBF,SAASG,IAAI,KACd;QACJ,MAAM,EAAE1B,IAAI,EAAE2B,MAAM,EAAE,GAAGf,KAAKpB;QAC9B8B,YAAYM,GAAG,CAACV,KAAKlB;QACrB,OAAO2B;IACT;AACF;AAOA,MAAME,eAA2B,OAAOC,MAAMC;IAC5C,MAAM,EAAEC,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC;IAC5C,OAAOA,mBAAmBF,MAAMC;AAClC;AAEA,SAASE,iBAAiBC,EAAU;IAClC,MAAMC,UAAU1B,KAAKC,GAAG,CAAC,GAAGD,KAAK2B,KAAK,CAACF,KAAK;IAC5C,IAAIC,UAAU,IAAI,OAAO,GAAGA,QAAQ,IAAI,CAAC;IACzC,MAAME,QAAQ5B,KAAK6B,KAAK,CAACH,UAAU;IACnC,MAAMI,OAAOJ,UAAU;IACvB,OAAOI,OAAO,GAAGF,MAAM,GAAG,EAAEE,KAAK,IAAI,CAAC,GAAG,GAAGF,MAAM,EAAE,CAAC;AACvD;AAEA,SAASG,UAAUC,GAAmB;IACpC,OAAO,GAAGA,IAAI/F,IAAI,CAAC,CAAC,EAAE,IAAI2C,IAAIoD,IAAIC,GAAG,EAAEC,QAAQ,CAAC,EAAE,EAAEF,IAAIjF,MAAM,CAAC,EAAE,EAAEiF,IAAIP,EAAE,CAAC,IAAI,CAAC;AACjF;AAEA,6CAA6C,GAC7C,eAAeU,SACbxD,MAAc,EACdyD,IAAqB,EACrBd,OAMC;IAED,MAAMW,MAAM,GAAGtD,SAASyD,KAAKlG,IAAI,CAACoF,QAAQlF,KAAK,GAAG;IAClD,MAAMiG,YAAYf,QAAQgB,KAAK;IAC/B,IAAI;YAmBI7F;QAlBN,MAAMA,WAAW,MAAM6E,QAAQiB,OAAO,CAACN,KAAK;YAC1CO,UAAU;YACVpF,OAAO;YACPqF,SAAS;gBACP,cAAc;gBACdC,QAAQ;eACLpB,QAAQmB,OAAO;YAEpBE,QAAQC,YAAYC,OAAO,CAACvB,QAAQwB,SAAS;QAC/C;QACA,MAAMpG,OAAO,MAAMD,SAASsG,IAAI;QAChC,MAAMC,UAAUxG,iBACd;YACEQ,QAAQP,SAASO,MAAM;YACvBE,aAAaT,SAASgG,OAAO,CAAC1B,GAAG,CAAC;YAClCrE;YACAO,UAAUR,SAASgG,OAAO,CAAC1B,GAAG,CAAC;YAC/BzD,UAAU,GACRb,wBAAAA,SAASgG,OAAO,CAAC1B,GAAG,CAAC,6BAArBtE,wBACAA,SAASgG,OAAO,CAAC1B,GAAG,CAAC;QACzB,GACAqB,KAAKjG,YAAY;QAEnB,OAAO;YACLF,MAAMmG,KAAKnG,IAAI;YACfgG;YACAR,IAAIH,QAAQgB,KAAK,KAAKD;YACtBY,YAAYxG,SAASO,MAAM;WACxBgG;IAEP,EAAE,OAAOE,OAAO;YAaQ;YAAA;QAZtB,MAAMC,OAAQD,yBAAD,AAACA,MAAoCC,IAAI;QACtD,MAAMC,WAAWD,SAAS,kBAAkBA,SAAS;QACrD,OAAO;YACLlH,MAAMmG,KAAKnG,IAAI;YACfgG;YACAR,IAAIH,QAAQgB,KAAK,KAAKD;YACtBY,YAAY;YACZrG,IAAI;YACJC,YAAY;YACZC,MAAMsG,WAAW,YAAY;YAC7BrG,QAAQqG,WACJ,CAAC,oBAAoB,EAAEpD,KAAK2B,KAAK,CAACL,QAAQwB,SAAS,GAAG,MAAO,EAAE,CAAC,GAChE,CAAC,aAAa,GAAE,gBAACI,0BAAD,eAAA,AAACA,MAAgDG,KAAK,qBAAtD,aAAwDvG,IAAI,oBAAIqG,gBAAhE,OAAwE,QAAQ,CAAC,CAAC;QACxG;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeG,iBACpBhC,UAWI,CAAC,CAAC;QAEMA,cACEA,cACAA,gBACAA,gBAGLtD,uCAQPsD;IAdF,MAAMtD,OAAMsD,eAAAA,QAAQtD,GAAG,YAAXsD,eAAeiC,QAAQvF,GAAG;IACtC,MAAMsE,SAAQhB,eAAAA,QAAQnC,GAAG,YAAXmC,eAAekC,KAAKrE,GAAG;IACrC,MAAMsE,SAAQnC,iBAAAA,QAAQmC,KAAK,YAAbnC,iBAAiBpB;IAC/B,MAAMwD,SAAQpC,iBAAAA,QAAQoC,KAAK,YAAbpC,iBAAiBF;IAC/B,MAAMuC,SAASlF,QAAQ6C,QAAQqC,MAAM;IACrC,MAAMC,kBAAkBC,OAAOC,QAAQ,CACrCzG,QAAOW,wCAAAA,GAAG,CAAC,mCAAmC,YAAvCA,wCAA2C,KAClD;IAEF,MAAMkB,YACJ2E,OAAOE,QAAQ,CAACH,oBAAoBA,mBAAmB,IACnDA,kBACA9H;IACN,MAAMM,SACJkF,iBAAAA,QAAQlF,KAAK,YAAbkF,iBACC,IAAM,GAAGgB,QAAQ0B,QAAQ,CAAC,MAAMhE,KAAKiE,MAAM,GAAGD,QAAQ,CAAC,IAAI3E,KAAK,CAAC,GAAG,IAAI;IAE3E,MAAM6E,QAAQ,MAAMC,QAAQC,GAAG,CAC7BrG,4BAA4BC,KAAKO,GAAG,CAClC,OAAOI;QACL,MAAM0F,SAAS,MAAMF,QAAQC,GAAG,CAC9BpI,cAAcuC,GAAG,CAAC,CAAC6D;gBAENd,kBACAA,kBAEEA;mBAJba,SAASxD,QAAQyD,MAAM;gBACrBG,OAAO,GAAEjB,mBAAAA,QAAQiB,OAAO,YAAfjB,mBAAmBgD;gBAC5B7B,OAAO,GAAEnB,mBAAAA,QAAQmB,OAAO,YAAfnB,mBAAmB,CAAC;gBAC7BlF,OAAOA;gBACP0G,SAAS,GAAExB,qBAAAA,QAAQwB,SAAS,YAAjBxB,qBAAqBzF;gBAChCyG;YACF;;QAGJ,MAAM1F,KAAKyH,OAAOE,KAAK,CAAC,CAACC,QAAUA,MAAM5H,EAAE;QAC3C,MAAM6H,OAAgC;YAAE9F;YAAQ/B;YAAIyH;QAAO;QAC3D,IAAIV,QAAQ,OAAOc;QACnB,MAAM5F,OAAO,IAAID,IAAID,QAAQE,IAAI;QACjC,MAAM6F,UAAUL,OAAO7F,MAAM,CAAC,CAACgG,QAAU,CAACA,MAAM5H,EAAE;QAClD,MAAMG,SAASH,KACX,wBACA8H,QAAQnG,GAAG,CAACwD,WAAW4C,IAAI,CAAC;QAChC,IAAI;YACF,MAAMxF,MAAMmD;YACZ,MAAM,EAAE/C,IAAI,EAAEM,UAAU,EAAEF,cAAc,EAAE,GAAG,MAAM8D,MACjD/E,qBAAqBC,SACrB,CAACI;oBAgBqBA;gBAfpB,MAAM6F,UAAU9F,uBACdC,OACA;oBAAEnC;oBAAIG;gBAAO,GACb;oBACE4B;oBACAR,OAAO,CAAC,kBAAkB,EAAEU,MAAM;oBAClCK;oBACAC;gBACF;gBAEF,OAAO;oBACLI,MAAMqF,QAAQrF,IAAI;oBAClB2B,QAAQ,aACH0D;wBACH,2CAA2C;wBAC3CjF,cAAc,GAAEZ,gBAAAA,yBAAAA,MAAOY,cAAc,oBAAIZ,yBAAAA,MAAOS,OAAO,YAAvCT,OAA2CI;;gBAE/D;YACF;YAEFsF,KAAKzH,MAAM,GAAGuC,KAAKvC,MAAM;YACzByH,KAAK/E,mBAAmB,GAAGH,KAAKG,mBAAmB;YACnD+E,KAAK5E,UAAU,GAAGA;YAClB,IAAIA,eAAe,WAAW;gBAC5B,MAAM6D,MAAM,4BAA4B;oBACtCmB,WAAWhG;oBACXI,SAAS;wBACPwF,MAAM5F;wBACNiB,UAAUP,KAAKG,mBAAmB;wBAClCoF,OAAOtD,iBAAiBrC,MAAMI,KAAKC,OAAO;wBAC1CzC;oBACF;gBACF;YACF,OAAO,IAAI8C,eAAe,aAAa;gBACrC,MAAM6D,MAAM,8BAA8B;oBACxCmB,WAAWhG;oBACXI,SAAS;wBACPwF,MAAM5F;wBACNkG,UAAUvD,iBAAiBrC,MAAMQ;oBACnC;gBACF;YACF;QACF,EAAE,OAAOuD,OAAO;YACduB,KAAKvB,KAAK,GAAGA,iBAAiB8B,QAAQ9B,MAAM+B,OAAO,GAAG5H,OAAO6F;YAC7DgC,QAAQhC,KAAK,CAAC,CAAC,iBAAiB,EAAErE,KAAK,sBAAsB,CAAC,EAAEqE;QAClE;QACA,OAAOuB;IACT;IAGJ,OAAO;QAAEd;QAAQzE;QAAWgF;IAAM;AACpC"}
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/render-monitor.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { TENANT_APEX } from '@aglyn/aglyn/app-utils/tenant-apex'\nimport type { OperatorHealthStateDoc } from './operator-health'\n\n/**\n * THE RENDER MONITOR (AGL-3568): does a published site still render a page\n * that was not already in a cache?\n *\n * On 2026-10-05 every uncached page render on the published-site runtime\n * hung to the platform's 60 s limit for 28 minutes, and nothing alerted. The\n * three monitors that existed each missed it for its own reason:\n *\n *  - the GitHub uptime probe is scheduled every 15 minutes and GitHub ran it\n *    four times that day, none of them during the outage;\n *  - its page rows fetch `/`, which the ISR cache answers, so a visitor's\n *    page that was cached still loaded and the row stayed green;\n *  - `/api/health/render/site` runs the page LOADER in-process and never the\n *    site layout, which is where the request was stuck.\n *\n * So this fetches pages over HTTP, from the console (a different deployment\n * from the one it watches), on Cloud Scheduler every five minutes, and asks\n * for two pages no cache can answer:\n *\n *  - `dynamic` — `/search`, a route every site has that renders on every\n *    request (`force-dynamic`) inside the full site layout. A 200 that is a\n *    complete document proves the layout and head ran just now.\n *  - `isr` — a path nobody has ever requested, under the catch-all page.\n *    A never-seen path is the one request the ISR cache cannot answer, so it\n *    renders in the same static context every published page renders in,\n *    which is the context the 2026-09-09 outage only appeared in. It is a\n *    404 by construction, and the site's own not-found page is drawn inside\n *    the same layout, so a complete 404 document is a pass.\n *\n * A site that fails `threshold` runs in a row raises\n * `system.siteRenderFailing` once; the first passing run after that raises\n * `system.siteRenderRecovered` once. The state lives in\n * `operatorHealthState/render-monitor--<host>`, beside every other health\n * check, so Staff → Operator alerts lists it with its status and since when.\n *\n * Nothing here names an Aglyn host for anyone else: the default target is the\n * install's own demonstration site label under its own tenant apex, the\n * convention the middleware and the render canaries already follow. The one\n * exception is `PLATFORM_RENDER_PAGES` below, which applies on Aglyn's own\n * console deployment and nowhere else.\n *\n * ## Real pages, rendered fresh (AGL-3571)\n *\n * The two probes above draw the layout. They do not draw a page BODY, and\n * beta.223 hung only on page bodies with an image in them (an ancestor walk\n * looped on the page root, AGL-3565): `demo` has no images and the not-found\n * page has no body, so this monitor read green through it. So a third probe,\n * `page`, renders a real published page through the full ISR path — through\n * the tenant's `*.vercel.app` production domain (`RENDER_MONITOR_RENDER_ORIGIN`),\n * which honors `?tenantHost=` and sits behind Deployment Protection, naming\n * the site with a spelling no cache holds (`freshHostSpelling`). The cache key\n * includes the `[host]` segment, and `normalizeHostAlias` resolves every\n * spelling to the same site. Without the automation bypass the render origin\n * answers its sign-in redirect, so no `page` probe is made at all.\n *\n * One page per site per run, rotating through that site's list: a platform\n * break fails every page with an image, so every run, and alerts as fast as\n * before; a break on one page alone is seen on its turn.\n */\n\n/** The state documents' collection: the health checks' own. */\nconst RENDER_MONITOR_COLLECTION = 'operatorHealthState'\n\n/** Every render monitor document id starts with this. */\nexport const RENDER_MONITOR_CHECK_PREFIX = 'render-monitor--'\n\n/** The beat id `/api/health/crons` reads for the scheduled run. */\nexport const RENDER_MONITOR_JOB_ID = 'render-monitor'\n\n/**\n * How long one page fetch may take. Well under the 60 s a platform function\n * may run, so a hung render is graded here as a timeout rather than waiting\n * for the platform's 504, and well under the route's own `maxDuration`.\n */\nexport const RENDER_MONITOR_TIMEOUT_MS = 25_000\n\n/** Failing runs in a row before the alert goes out. */\nexport const RENDER_MONITOR_DEFAULT_THRESHOLD = 2\n\n/**\n * The prefix of the never-requested path the `isr` probe asks for. A\n * lowercase slug on purpose: it must reach the catch-all page like any\n * screen slug would, not a reserved or rewritten route.\n */\nexport const RENDER_PROBE_ISR_PREFIX = '/aglyn-render-probe-'\n\nexport type RenderProbeKind = 'dynamic' | 'isr' | 'page'\n\nexport interface RenderProbeSpec {\n  kind: RenderProbeKind\n  /** The path to request, given a fresh nonce. */\n  path: (nonce: string) => string\n  /** The status a healthy render answers with. */\n  expectStatus: number\n}\n\nexport const RENDER_PROBES: readonly RenderProbeSpec[] = [\n  { kind: 'dynamic', path: () => '/search', expectStatus: 200 },\n  {\n    kind: 'isr',\n    path: (nonce) => `${RENDER_PROBE_ISR_PREFIX}${nonce}`,\n    expectStatus: 404,\n  },\n]\n\n/** One fetched response, reduced to what grading reads. */\nexport interface RenderProbeResponse {\n  status: number\n  contentType?: string | null\n  body?: string\n  location?: string | null\n  /** `x-vercel-cache` on Vercel, `x-nextjs-cache` on a plain `next start`. */\n  cacheState?: string | null\n}\n\nexport interface RenderProbeVerdict {\n  ok: boolean\n  /** Bot protection answered instead of the site. */\n  challenged: boolean\n  /** A stable code; `ok` on a pass. */\n  code: string\n  detail: string\n}\n\n/** Vercel's challenge interstitial, matched on the body like the front doors. */\nconst CHECKPOINT_MARKER = /Vercel Security Checkpoint/i\n\n/**\n * Cache states that mean the bytes came out of a store. A probe meant to\n * prove a render cannot pass on one of these, whatever the status.\n */\nconst CACHED_STATES = new Set(['HIT', 'STALE', 'PRERENDER'])\n\n/**\n * Grade one probe response. Pure.\n *\n * The page markers are the front doors' (`tools/scripts/lib/front-door.mjs`)\n * and for their reason: structural, never site copy. `</html>` proves the\n * document finished streaming, `/_next/static/` that our build produced it.\n */\nexport function gradeRenderProbe(\n  response: RenderProbeResponse,\n  expectStatus: number,\n): RenderProbeVerdict {\n  const body = response.body ?? ''\n  if (CHECKPOINT_MARKER.test(body)) {\n    return {\n      ok: false,\n      challenged: true,\n      code: 'challenged',\n      detail: `bot protection answered (HTTP ${response.status}) instead of the site; check AGLYN_PROBE_TOKEN on the console`,\n    }\n  }\n  if (response.status >= 300 && response.status < 400) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'redirected',\n      detail: `redirected to ${response.location ?? '?'}, so no page was rendered`,\n    }\n  }\n  if (response.status !== expectStatus) {\n    return {\n      ok: false,\n      challenged: false,\n      code: `http-${response.status}`,\n      detail: `HTTP ${response.status}`,\n    }\n  }\n  if (!/text\\/html/i.test(response.contentType ?? '')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'not-html',\n      detail: `not HTML (${response.contentType || 'no content-type'})`,\n    }\n  }\n  if (!body.includes('</html>')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'incomplete',\n      detail: 'the document never finished (no </html>)',\n    }\n  }\n  if (!body.includes('/_next/static/')) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'not-our-render',\n      detail: 'no Next asset references, so the app did not render it',\n    }\n  }\n  const cache = String(response.cacheState ?? '').trim().toUpperCase()\n  if (CACHED_STATES.has(cache)) {\n    return {\n      ok: false,\n      challenged: false,\n      code: 'served-from-cache',\n      detail: `served from cache (${cache}), so it proves no render`,\n    }\n  }\n  return { ok: true, challenged: false, code: 'ok', detail: 'rendered' }\n}\n\n/**\n * The pages Aglyn's own console renders fresh when `RENDER_MONITOR_PAGES` is\n * unset: the canary's real client pages (`tools/scripts/lib/prod-canary.mjs`\n * `DEFAULT_TENANT_HOSTS`), images, reusable components, repeats and a form\n * between them. Applied ONLY on that console deployment (`VERCEL_PROJECT_ID`),\n * so no other install ever requests them.\n */\nexport const PLATFORM_RENDER_PAGES = [\n  'ready-to-roll.aglyn.app/',\n  'edr-construction.aglyn.app/',\n  'edr-construction.aglyn.app/services',\n  'edr-construction.aglyn.app/contact',\n].join(' ')\n\n/** Aglyn's console project on Vercel, the one deployment the list above is for. */\nexport const PLATFORM_CONSOLE_VERCEL_PROJECT_ID = 'prj_gEzxEXc0Lhs81rmaXIg2a1GbsDfl'\n\n/**\n * The tenant's production project domain on Vercel: follows every promote and\n * rollback, honors `?tenantHost=`, and is reachable only with the bypass.\n */\nexport const PLATFORM_RENDER_ORIGIN = 'https://aglyn-tenant-aglyn.vercel.app'\n\n/** The middleware's custom-domain sentinel (`apps/tenant/utils/get-host.ts`). */\nconst CNAME_HOST_PREFIX = 'cname--'\n\n/** Letters past this are never recased, so the bit arithmetic stays in 32 bits. */\nconst MAX_SPELLING_BITS = 30\n\nfunction spellingLetters(host: string): number[] {\n  return [...host.toLowerCase()]\n    .map((char, index) => (/[a-z]/.test(char) ? index : -1))\n    .filter((index) => index >= 0)\n    .slice(0, MAX_SPELLING_BITS)\n}\n\n/**\n * Spelling number `n` of one site: a `?tenantHost=` value that resolves to\n * that site and is a `[host]` route segment no other number produces, so the\n * page it asks for has no cache entry to come from.\n *\n *  - `{sub}.{apex}` → the full name, letters upper-cased by the bits of `n`,\n *    then one trailing dot per exhausted round of cases.\n *  - any other name → `cname--{name}`, recased the same way and cycling after\n *    `2 ** letters` (that form keeps trailing dots), with the prefix left\n *    lower-case because the canonical-domain redirect tests the raw segment.\n *\n * MUST stay identical to `freshHostSpelling` in\n * `tools/scripts/lib/prod-canary.mjs`; `apps/tenant/specs/probe-host-spelling.spec.ts`\n * pins both against `normalizeHostAlias`.\n */\nexport function freshHostSpelling(host: string, n: number, apex: string = TENANT_APEX): string {\n  const subdomain = host.endsWith(`.${apex}`)\n  const prefix = subdomain ? '' : CNAME_HOST_PREFIX\n  const chars = [...host.toLowerCase()]\n  const letters = spellingLetters(host)\n  const capacity = 2 ** letters.length\n  const value = Math.max(0, Math.floor(Number(n) || 0))\n  const bits = value % capacity\n  letters.forEach((index, bit) => {\n    if (Math.floor(bits / 2 ** bit) % 2 === 1) chars[index] = chars[index].toUpperCase()\n  })\n  const dots = subdomain ? '.'.repeat(Math.floor(value / capacity)) : ''\n  return `${prefix}${chars.join('')}${dots}`\n}\n\n/**\n * The spelling number for a run at `nowMs`: minutes since 2026-10-01, so it\n * never repeats on one deployment — a `{sub}.aglyn.app` name of 18 letters\n * gains its first trailing dot after half a year.\n */\nexport function renderSpellingNumber(nowMs: number): number {\n  return Math.max(1, Math.floor((nowMs - Date.UTC(2026, 9, 1)) / 60_000))\n}\n\n/** One watched site's real pages. */\nexport interface RenderMonitorPages {\n  /** The site's public origin, which keys its state document. */\n  origin: string\n  host: string\n  paths: string[]\n}\n\n/**\n * `\"a.example.app b.example.app/services, https://b.example.app/contact\"` →\n * one entry per host, paths merged, `/` when an entry names none. Entries that\n * are not a hostname are dropped, as `RENDER_MONITOR_ORIGINS` drops them.\n */\nexport function parseRenderMonitorPages(text: string | undefined | null): RenderMonitorPages[] {\n  const byHost = new Map<string, string[]>()\n  for (const raw of String(text ?? '').split(/[\\s,]+/)) {\n    const entry = raw.trim().replace(/^https?:\\/\\//i, '')\n    if (!entry) continue\n    const slash = entry.indexOf('/')\n    const host = (slash === -1 ? entry : entry.slice(0, slash)).toLowerCase()\n    if (!/^[a-z0-9-]+(\\.[a-z0-9-]+)+$/.test(host)) continue\n    const path = slash === -1 ? '/' : entry.slice(slash).replace(/\\/+$/, '') || '/'\n    const paths = byHost.get(host) ?? []\n    if (!paths.includes(path)) paths.push(path)\n    byHost.set(host, paths)\n  }\n  return [...byHost].map(([host, paths]) => ({ origin: `https://${host}`, host, paths }))\n}\n\n/**\n * Which real pages the monitor renders, and through which origin.\n *\n * `RENDER_MONITOR_PAGES` (same grammar as the canary's `CANARY_TENANT_HOSTS`)\n * and `RENDER_MONITOR_RENDER_ORIGIN`, else — on Aglyn's own console only —\n * `PLATFORM_RENDER_PAGES` through `PLATFORM_RENDER_ORIGIN`. `off` (here or in\n * `RENDER_MONITOR_ORIGINS`) renders none. No render origin, no pages.\n */\nexport function resolveRenderMonitorPages(\n  env: Readonly<Record<string, string | undefined>>,\n): { renderOrigin: string; pages: RenderMonitorPages[] } {\n  const off = /^(off|none|false|0)$/i\n  const raw = String(env['RENDER_MONITOR_PAGES'] ?? '').trim()\n  if (off.test(raw) || off.test(String(env['RENDER_MONITOR_ORIGINS'] ?? '').trim())) {\n    return { renderOrigin: '', pages: [] }\n  }\n  const platform = env['VERCEL_PROJECT_ID'] === PLATFORM_CONSOLE_VERCEL_PROJECT_ID\n  const renderOrigin =\n    originOf(env['RENDER_MONITOR_RENDER_ORIGIN']) || (platform ? PLATFORM_RENDER_ORIGIN : '')\n  const pages = parseRenderMonitorPages(raw || (platform ? PLATFORM_RENDER_PAGES : ''))\n  return renderOrigin ? { renderOrigin, pages } : { renderOrigin: '', pages: [] }\n}\n\n/** A configured value as an origin, or '' when it is not one. */\nexport function originOf(value: string | undefined | null): string {\n  const trimmed = String(value ?? '').trim().replace(/\\/+$/, '')\n  return /^https?:\\/\\/[^/\\s?#]+$/i.test(trimmed) ? trimmed.toLowerCase() : ''\n}\n\n/**\n * Which sites the monitor renders, from the console's environment.\n *\n * 1. The install's demonstration site: `OPERATOR_HEALTH_TENANT_ORIGIN` when\n *    set (the one published site the operator alerts tick already watches),\n *    else `https://<AGLYN_TENANT_DEMO or demo>.<tenant apex>`.\n * 2. Plus every origin in `RENDER_MONITOR_ORIGINS`, comma separated.\n *\n * `RENDER_MONITOR_ORIGINS=off` watches nothing, for an install with no\n * published site to watch. Values that are not origins are dropped.\n */\nexport function resolveRenderMonitorTargets(\n  env: Readonly<Record<string, string | undefined>>,\n): string[] {\n  const raw = String(env['RENDER_MONITOR_ORIGINS'] ?? '').trim()\n  if (/^(off|none|false|0)$/i.test(raw)) return []\n  const apex =\n    String(env['NEXT_PUBLIC_TENANT_DOMAIN'] ?? '').trim() || TENANT_APEX\n  const label = String(env['AGLYN_TENANT_DEMO'] ?? '').trim() || 'demo'\n  const demo =\n    originOf(env['OPERATOR_HEALTH_TENANT_ORIGIN']) ||\n    originOf(`https://${label}.${apex}`)\n  const listed = raw\n    .split(/[\\s,]+/)\n    .map((value) => originOf(value))\n    .filter(Boolean)\n  // A site whose pages are rendered is watched whole: its layout probes too.\n  const paged = resolveRenderMonitorPages(env).pages.map((page) => page.origin)\n  return [...new Set([demo, ...listed, ...paged].filter(Boolean))]\n}\n\n/** The state document id for one origin. */\nexport function renderMonitorCheckId(origin: string): string {\n  return `${RENDER_MONITOR_CHECK_PREFIX}${new URL(origin).host}`\n}\n\n/** One render monitor state document. */\nexport interface RenderMonitorStateDoc extends OperatorHealthStateDoc {\n  origin: string\n  /** Failing runs in a row, reset by any passing run. */\n  consecutiveFailures: number\n  /** When the current run of failures began; null while passing. */\n  failingSinceMs: number | null\n  lastOkAtMs: number | null\n}\n\nexport type RenderMonitorTransition = 'failing' | 'recovered' | null\n\n/**\n * The next state for one site, given what this run saw. Pure.\n *\n * The status turns `degraded` only once `threshold` runs in a row have\n * failed, so one slow cold start or one dropped connection says nothing. It\n * turns back on the first passing run, because a render that works is\n * proof, and a recovery held back is a recovery nobody hears about.\n */\nexport function nextRenderMonitorState(\n  prior: Partial<RenderMonitorStateDoc> | null,\n  observation: { ok: boolean; detail: string },\n  context: { origin: string; label: string; threshold: number; now: number },\n): { next: RenderMonitorStateDoc; transition: RenderMonitorTransition } {\n  const { origin, label, threshold, now } = context\n  const checkId = renderMonitorCheckId(origin)\n  const detail = String(observation.detail ?? '').slice(0, 1_000)\n  const wasDegraded = prior?.status === 'degraded'\n  if (observation.ok) {\n    return {\n      next: {\n        checkId,\n        label,\n        origin,\n        status: 'ok',\n        sinceMs: !wasDegraded && prior?.sinceMs ? prior.sinceMs : now,\n        detail,\n        updatedAtMs: now,\n        consecutiveFailures: 0,\n        failingSinceMs: null,\n        lastOkAtMs: now,\n      },\n      transition: wasDegraded ? 'recovered' : null,\n    }\n  }\n  const failures = (prior?.consecutiveFailures ?? 0) + 1\n  const failingSinceMs = prior?.failingSinceMs ?? now\n  const degraded = wasDegraded || failures >= Math.max(1, threshold)\n  return {\n    next: {\n      checkId,\n      label,\n      origin,\n      status: degraded ? 'degraded' : 'ok',\n      sinceMs: degraded\n        ? wasDegraded && prior?.sinceMs\n          ? prior.sinceMs\n          : failingSinceMs\n        : (prior?.sinceMs ?? now),\n      detail,\n      updatedAtMs: now,\n      consecutiveFailures: failures,\n      failingSinceMs,\n      lastOkAtMs: prior?.lastOkAtMs ?? null,\n    },\n    transition: degraded && !wasDegraded ? 'failing' : null,\n  }\n}\n\n/** One probe as the report shows it. */\nexport interface RenderProbeRow extends RenderProbeVerdict {\n  kind: RenderProbeKind\n  url: string\n  ms: number\n  httpStatus: number | null\n}\n\n/** One site's result for a run. */\nexport interface RenderMonitorSiteResult {\n  origin: string\n  ok: boolean\n  probes: RenderProbeRow[]\n  /** The state written; absent on a dry run or a failed write. */\n  status?: 'ok' | 'degraded'\n  consecutiveFailures?: number\n  transition?: RenderMonitorTransition\n  error?: string\n}\n\nexport interface RenderMonitorReport {\n  dryRun: boolean\n  threshold: number\n  sites: RenderMonitorSiteResult[]\n}\n\n/** The read-modify-write of one site's state, as one transaction. */\nexport type RenderMonitorStore = <T>(\n  checkId: string,\n  work: (prior: Partial<RenderMonitorStateDoc> | null) => {\n    next: RenderMonitorStateDoc\n    result: T\n  },\n) => Promise<T>\n\n/**\n * The default store: one Firestore transaction on the site's document, so\n * two overlapping runs cannot both decide they saw the edge.\n */\nconst firestoreStore: RenderMonitorStore = async (checkId, work) => {\n  const { default: firebaseAdmin } = await import('./firebase-admin')\n  const db = firebaseAdmin.app().firestore()\n  const ref = db.collection(RENDER_MONITOR_COLLECTION).doc(checkId)\n  return db.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    const prior = snapshot.exists\n      ? (snapshot.data() as Partial<RenderMonitorStateDoc>)\n      : null\n    const { next, result } = work(prior)\n    transaction.set(ref, next)\n    return result\n  })\n}\n\ntype RaiseAlert = (\n  type: string,\n  options: { dedupeKey?: string; context?: Record<string, string | number> },\n) => Promise<unknown>\n\nconst defaultRaise: RaiseAlert = async (type, options) => {\n  const { raiseOperatorAlert } = await import('./operator-alerts')\n  return raiseOperatorAlert(type, options)\n}\n\nfunction describeDuration(ms: number): string {\n  const minutes = Math.max(1, Math.round(ms / 60_000))\n  if (minutes < 60) return `${minutes} min`\n  const hours = Math.floor(minutes / 60)\n  const rest = minutes % 60\n  return rest ? `${hours} h ${rest} min` : `${hours} h`\n}\n\n/**\n * The `page` probe's URL for one run: this run's page of the site's list\n * (rotating every five-minute slot), under this run's spelling of the site.\n */\nexport function pageProbeUrl(\n  renderOrigin: string,\n  site: RenderMonitorPages,\n  slot: number,\n  spelling: number,\n): string {\n  const path = site.paths[Math.abs(slot) % site.paths.length] ?? '/'\n  const url = new URL(path, renderOrigin)\n  url.searchParams.set('tenantHost', freshHostSpelling(site.host, spelling))\n  return url.toString()\n}\n\nfunction probeLine(row: RenderProbeRow): string {\n  return `${row.kind} ${new URL(row.url).pathname}: ${row.detail} (${row.ms} ms)`\n}\n\n/** Fetch and grade one probe. Never throws. */\nasync function runProbe(\n  url: string,\n  spec: { kind: RenderProbeKind; expectStatus: number },\n  options: {\n    fetcher: typeof fetch\n    headers: Record<string, string>\n    timeoutMs: number\n    clock: () => number\n  },\n): Promise<RenderProbeRow> {\n  const startedAt = options.clock()\n  try {\n    const response = await options.fetcher(url, {\n      redirect: 'manual',\n      cache: 'no-store',\n      headers: {\n        'user-agent': 'aglyn-render-monitor',\n        accept: 'text/html,application/xhtml+xml',\n        ...options.headers,\n      },\n      signal: AbortSignal.timeout(options.timeoutMs),\n    })\n    const body = await response.text()\n    const verdict = gradeRenderProbe(\n      {\n        status: response.status,\n        contentType: response.headers.get('content-type'),\n        body,\n        location: response.headers.get('location'),\n        cacheState:\n          response.headers.get('x-vercel-cache') ??\n          response.headers.get('x-nextjs-cache'),\n      },\n      spec.expectStatus,\n    )\n    return {\n      kind: spec.kind,\n      url,\n      ms: options.clock() - startedAt,\n      httpStatus: response.status,\n      ...verdict,\n    }\n  } catch (error) {\n    const name = (error as { name?: string } | null)?.name\n    const timedOut = name === 'TimeoutError' || name === 'AbortError'\n    return {\n      kind: spec.kind,\n      url,\n      ms: options.clock() - startedAt,\n      httpStatus: null,\n      ok: false,\n      challenged: false,\n      code: timedOut ? 'timeout' : 'unreachable',\n      detail: timedOut\n        ? `no complete page in ${Math.round(options.timeoutMs / 1_000)} s`\n        : `unreachable (${(error as { cause?: { code?: string } } | null)?.cause?.code ?? name ?? 'error'})`,\n    }\n  }\n}\n\n/**\n * One run: render every target, record each site's state, raise the edge.\n *\n * A dry run fetches and grades and writes nothing, so a person can ask\n * \"what would the monitor see right now\" without moving its state.\n */\nexport async function runRenderMonitor(\n  options: {\n    dryRun?: boolean\n    env?: Readonly<Record<string, string | undefined>>\n    fetcher?: typeof fetch\n    /** Our own edge's bypass headers, from the caller's environment. */\n    headers?: Record<string, string>\n    now?: () => number\n    nonce?: () => string\n    timeoutMs?: number\n    store?: RenderMonitorStore\n    raise?: RaiseAlert\n  } = {},\n): Promise<RenderMonitorReport> {\n  const env = options.env ?? process.env\n  const clock = options.now ?? Date.now\n  const store = options.store ?? firestoreStore\n  const raise = options.raise ?? defaultRaise\n  const dryRun = Boolean(options.dryRun)\n  const parsedThreshold = Number.parseInt(\n    String(env['RENDER_MONITOR_FAILURE_THRESHOLD'] ?? ''),\n    10,\n  )\n  const threshold =\n    Number.isFinite(parsedThreshold) && parsedThreshold >= 1\n      ? parsedThreshold\n      : RENDER_MONITOR_DEFAULT_THRESHOLD\n  const nonce =\n    options.nonce ??\n    (() => `${clock().toString(36)}${Math.random().toString(36).slice(2, 8)}`)\n\n  const probeOptions = {\n    fetcher: options.fetcher ?? fetch,\n    headers: options.headers ?? {},\n    timeoutMs: options.timeoutMs ?? RENDER_MONITOR_TIMEOUT_MS,\n    clock,\n  }\n  // Real pages need the render origin AND the bypass that gets past its\n  // Deployment Protection; without both a `page` probe could only fail.\n  const { renderOrigin, pages } = resolveRenderMonitorPages(env)\n  const canRenderPages = Boolean(\n    renderOrigin && probeOptions.headers['x-vercel-protection-bypass'],\n  )\n  const runAt = clock()\n  const slot = Math.floor(runAt / 300_000)\n\n  const sites = await Promise.all(\n    resolveRenderMonitorTargets(env).map(\n      async (origin): Promise<RenderMonitorSiteResult> => {\n        const layoutProbes = RENDER_PROBES.map((spec) =>\n          runProbe(`${origin}${spec.path(nonce())}`, spec, probeOptions),\n        )\n        const site = canRenderPages ? pages.find((page) => page.origin === origin) : undefined\n        const pageProbe = site\n          ? [\n              runProbe(\n                pageProbeUrl(renderOrigin, site, slot, renderSpellingNumber(runAt)),\n                { kind: 'page', expectStatus: 200 },\n                probeOptions,\n              ),\n            ]\n          : []\n        const probes = await Promise.all([...layoutProbes, ...pageProbe])\n        const ok = probes.every((probe) => probe.ok)\n        const result: RenderMonitorSiteResult = { origin, ok, probes }\n        if (dryRun) return result\n        const host = new URL(origin).host\n        const failing = probes.filter((probe) => !probe.ok)\n        const detail = ok\n          ? 'Fresh renders pass.'\n          : failing.map(probeLine).join('; ')\n        try {\n          const now = clock()\n          const { next, transition, failingSinceMs } = await store(\n            renderMonitorCheckId(origin),\n            (prior) => {\n              const decided = nextRenderMonitorState(\n                prior,\n                { ok, detail },\n                {\n                  origin,\n                  label: `Page rendering on ${host}`,\n                  threshold,\n                  now,\n                },\n              )\n              return {\n                next: decided.next,\n                result: {\n                  ...decided,\n                  // When the failures a recovery ends began.\n                  failingSinceMs: prior?.failingSinceMs ?? prior?.sinceMs ?? now,\n                },\n              }\n            },\n          )\n          result.status = next.status\n          result.consecutiveFailures = next.consecutiveFailures\n          result.transition = transition\n          if (transition === 'failing') {\n            await raise('system.siteRenderFailing', {\n              dedupeKey: host,\n              context: {\n                site: host,\n                failures: next.consecutiveFailures,\n                since: describeDuration(now - next.sinceMs),\n                detail,\n              },\n            })\n          } else if (transition === 'recovered') {\n            await raise('system.siteRenderRecovered', {\n              dedupeKey: host,\n              context: {\n                site: host,\n                duration: describeDuration(now - failingSinceMs),\n              },\n            })\n          }\n        } catch (error) {\n          result.error = error instanceof Error ? error.message : String(error)\n          console.error(`[render-monitor] ${host} could not be recorded`, error)\n        }\n        return result\n      },\n    ),\n  )\n  return { dryRun, threshold, sites }\n}\n"],"names":["TENANT_APEX","RENDER_MONITOR_COLLECTION","RENDER_MONITOR_CHECK_PREFIX","RENDER_MONITOR_JOB_ID","RENDER_MONITOR_TIMEOUT_MS","RENDER_MONITOR_DEFAULT_THRESHOLD","RENDER_PROBE_ISR_PREFIX","RENDER_PROBES","kind","path","expectStatus","nonce","CHECKPOINT_MARKER","CACHED_STATES","Set","gradeRenderProbe","response","body","test","ok","challenged","code","detail","status","location","contentType","includes","cache","String","cacheState","trim","toUpperCase","has","PLATFORM_RENDER_PAGES","join","PLATFORM_CONSOLE_VERCEL_PROJECT_ID","PLATFORM_RENDER_ORIGIN","CNAME_HOST_PREFIX","MAX_SPELLING_BITS","spellingLetters","host","toLowerCase","map","char","index","filter","slice","freshHostSpelling","n","apex","subdomain","endsWith","prefix","chars","letters","capacity","length","value","Math","max","floor","Number","bits","forEach","bit","dots","repeat","renderSpellingNumber","nowMs","Date","UTC","parseRenderMonitorPages","text","byHost","Map","raw","split","entry","replace","slash","indexOf","paths","get","push","set","origin","resolveRenderMonitorPages","env","off","renderOrigin","pages","platform","originOf","trimmed","resolveRenderMonitorTargets","label","demo","listed","Boolean","paged","page","renderMonitorCheckId","URL","nextRenderMonitorState","prior","observation","context","threshold","now","checkId","wasDegraded","next","sinceMs","updatedAtMs","consecutiveFailures","failingSinceMs","lastOkAtMs","transition","failures","degraded","firestoreStore","work","default","firebaseAdmin","db","app","firestore","ref","collection","doc","runTransaction","transaction","snapshot","exists","data","result","defaultRaise","type","options","raiseOperatorAlert","describeDuration","ms","minutes","round","hours","rest","pageProbeUrl","site","slot","spelling","abs","url","searchParams","toString","probeLine","row","pathname","runProbe","spec","startedAt","clock","fetcher","redirect","headers","accept","signal","AbortSignal","timeout","timeoutMs","verdict","httpStatus","error","name","timedOut","cause","runRenderMonitor","process","store","raise","dryRun","parsedThreshold","parseInt","isFinite","random","probeOptions","fetch","canRenderPages","runAt","sites","Promise","all","layoutProbes","find","undefined","pageProbe","probes","every","probe","failing","decided","dedupeKey","since","duration","Error","message","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,QAAQ,qCAAoC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DC,GAED,6DAA6D,GAC7D,MAAMC,4BAA4B;AAElC,uDAAuD,GACvD,OAAO,MAAMC,8BAA8B,mBAAkB;AAE7D,iEAAiE,GACjE,OAAO,MAAMC,wBAAwB,iBAAgB;AAErD;;;;CAIC,GACD,OAAO,MAAMC,4BAA4B,MAAM;AAE/C,qDAAqD,GACrD,OAAO,MAAMC,mCAAmC,EAAC;AAEjD;;;;CAIC,GACD,OAAO,MAAMC,0BAA0B,uBAAsB;AAY7D,OAAO,MAAMC,gBAA4C;IACvD;QAAEC,MAAM;QAAWC,MAAM,IAAM;QAAWC,cAAc;IAAI;IAC5D;QACEF,MAAM;QACNC,MAAM,CAACE,QAAU,GAAGL,0BAA0BK,OAAO;QACrDD,cAAc;IAChB;CACD,CAAA;AAqBD,+EAA+E,GAC/E,MAAME,oBAAoB;AAE1B;;;CAGC,GACD,MAAMC,gBAAgB,IAAIC,IAAI;IAAC;IAAO;IAAS;CAAY;AAE3D;;;;;;CAMC,GACD,OAAO,SAASC,iBACdC,QAA6B,EAC7BN,YAAoB;QAEPM,gBAyBWA,uBAwBHA;IAjDrB,MAAMC,QAAOD,iBAAAA,SAASC,IAAI,YAAbD,iBAAiB;IAC9B,IAAIJ,kBAAkBM,IAAI,CAACD,OAAO;QAChC,OAAO;YACLE,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,8BAA8B,EAAEN,SAASO,MAAM,CAAC,6DAA6D,CAAC;QACzH;IACF;IACA,IAAIP,SAASO,MAAM,IAAI,OAAOP,SAASO,MAAM,GAAG,KAAK;YAKxBP;QAJ3B,OAAO;YACLG,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,cAAc,GAAEN,qBAAAA,SAASQ,QAAQ,YAAjBR,qBAAqB,IAAI,yBAAyB,CAAC;QAC9E;IACF;IACA,IAAIA,SAASO,MAAM,KAAKb,cAAc;QACpC,OAAO;YACLS,IAAI;YACJC,YAAY;YACZC,MAAM,CAAC,KAAK,EAAEL,SAASO,MAAM,EAAE;YAC/BD,QAAQ,CAAC,KAAK,EAAEN,SAASO,MAAM,EAAE;QACnC;IACF;IACA,IAAI,CAAC,cAAcL,IAAI,EAACF,wBAAAA,SAASS,WAAW,YAApBT,wBAAwB,KAAK;QACnD,OAAO;YACLG,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,UAAU,EAAEN,SAASS,WAAW,IAAI,kBAAkB,CAAC,CAAC;QACnE;IACF;IACA,IAAI,CAACR,KAAKS,QAAQ,CAAC,YAAY;QAC7B,OAAO;YACLP,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ;QACV;IACF;IACA,IAAI,CAACL,KAAKS,QAAQ,CAAC,mBAAmB;QACpC,OAAO;YACLP,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ;QACV;IACF;IACA,MAAMK,QAAQC,QAAOZ,uBAAAA,SAASa,UAAU,YAAnBb,uBAAuB,IAAIc,IAAI,GAAGC,WAAW;IAClE,IAAIlB,cAAcmB,GAAG,CAACL,QAAQ;QAC5B,OAAO;YACLR,IAAI;YACJC,YAAY;YACZC,MAAM;YACNC,QAAQ,CAAC,mBAAmB,EAAEK,MAAM,yBAAyB,CAAC;QAChE;IACF;IACA,OAAO;QAAER,IAAI;QAAMC,YAAY;QAAOC,MAAM;QAAMC,QAAQ;IAAW;AACvE;AAEA;;;;;;CAMC,GACD,OAAO,MAAMW,wBAAwB;IACnC;IACA;IACA;IACA;CACD,CAACC,IAAI,CAAC,KAAI;AAEX,iFAAiF,GACjF,OAAO,MAAMC,qCAAqC,mCAAkC;AAEpF;;;CAGC,GACD,OAAO,MAAMC,yBAAyB,wCAAuC;AAE7E,+EAA+E,GAC/E,MAAMC,oBAAoB;AAE1B,iFAAiF,GACjF,MAAMC,oBAAoB;AAE1B,SAASC,gBAAgBC,IAAY;IACnC,OAAO;WAAIA,KAAKC,WAAW;KAAG,CAC3BC,GAAG,CAAC,CAACC,MAAMC,QAAW,QAAQ1B,IAAI,CAACyB,QAAQC,QAAQ,CAAC,GACpDC,MAAM,CAAC,CAACD,QAAUA,SAAS,GAC3BE,KAAK,CAAC,GAAGR;AACd;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASS,kBAAkBP,IAAY,EAAEQ,CAAS,EAAEC,OAAejD,WAAW;IACnF,MAAMkD,YAAYV,KAAKW,QAAQ,CAAC,CAAC,CAAC,EAAEF,MAAM;IAC1C,MAAMG,SAASF,YAAY,KAAKb;IAChC,MAAMgB,QAAQ;WAAIb,KAAKC,WAAW;KAAG;IACrC,MAAMa,UAAUf,gBAAgBC;IAChC,MAAMe,WAAW,KAAKD,QAAQE,MAAM;IACpC,MAAMC,QAAQC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,OAAOb,MAAM;IAClD,MAAMc,OAAOL,QAAQF;IACrBD,QAAQS,OAAO,CAAC,CAACnB,OAAOoB;QACtB,IAAIN,KAAKE,KAAK,CAACE,OAAO,KAAKE,OAAO,MAAM,GAAGX,KAAK,CAACT,MAAM,GAAGS,KAAK,CAACT,MAAM,CAACb,WAAW;IACpF;IACA,MAAMkC,OAAOf,YAAY,IAAIgB,MAAM,CAACR,KAAKE,KAAK,CAACH,QAAQF,aAAa;IACpE,OAAO,GAAGH,SAASC,MAAMnB,IAAI,CAAC,MAAM+B,MAAM;AAC5C;AAEA;;;;CAIC,GACD,OAAO,SAASE,qBAAqBC,KAAa;IAChD,OAAOV,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAAC,AAACQ,CAAAA,QAAQC,KAAKC,GAAG,CAAC,MAAM,GAAG,EAAC,IAAK;AACjE;AAUA;;;;CAIC,GACD,OAAO,SAASC,wBAAwBC,IAA+B;IACrE,MAAMC,SAAS,IAAIC;IACnB,KAAK,MAAMC,OAAO/C,OAAO4C,eAAAA,OAAQ,IAAII,KAAK,CAAC,UAAW;YAOtCH;QANd,MAAMI,QAAQF,IAAI7C,IAAI,GAAGgD,OAAO,CAAC,iBAAiB;QAClD,IAAI,CAACD,OAAO;QACZ,MAAME,QAAQF,MAAMG,OAAO,CAAC;QAC5B,MAAMxC,OAAO,AAACuC,CAAAA,UAAU,CAAC,IAAIF,QAAQA,MAAM/B,KAAK,CAAC,GAAGiC,MAAK,EAAGtC,WAAW;QACvE,IAAI,CAAC,8BAA8BvB,IAAI,CAACsB,OAAO;QAC/C,MAAM/B,OAAOsE,UAAU,CAAC,IAAI,MAAMF,MAAM/B,KAAK,CAACiC,OAAOD,OAAO,CAAC,QAAQ,OAAO;QAC5E,MAAMG,SAAQR,cAAAA,OAAOS,GAAG,CAAC1C,iBAAXiC,cAAoB,EAAE;QACpC,IAAI,CAACQ,MAAMvD,QAAQ,CAACjB,OAAOwE,MAAME,IAAI,CAAC1E;QACtCgE,OAAOW,GAAG,CAAC5C,MAAMyC;IACnB;IACA,OAAO;WAAIR;KAAO,CAAC/B,GAAG,CAAC,CAAC,CAACF,MAAMyC,MAAM,GAAM,CAAA;YAAEI,QAAQ,CAAC,QAAQ,EAAE7C,MAAM;YAAEA;YAAMyC;QAAM,CAAA;AACtF;AAEA;;;;;;;CAOC,GACD,OAAO,SAASK,0BACdC,GAAiD;QAG9BA,2BACkBA;IAFrC,MAAMC,MAAM;IACZ,MAAMb,MAAM/C,QAAO2D,4BAAAA,GAAG,CAAC,uBAAuB,YAA3BA,4BAA+B,IAAIzD,IAAI;IAC1D,IAAI0D,IAAItE,IAAI,CAACyD,QAAQa,IAAItE,IAAI,CAACU,QAAO2D,8BAAAA,GAAG,CAAC,yBAAyB,YAA7BA,8BAAiC,IAAIzD,IAAI,KAAK;QACjF,OAAO;YAAE2D,cAAc;YAAIC,OAAO,EAAE;QAAC;IACvC;IACA,MAAMC,WAAWJ,GAAG,CAAC,oBAAoB,KAAKpD;IAC9C,MAAMsD,eACJG,SAASL,GAAG,CAAC,+BAA+B,KAAMI,CAAAA,WAAWvD,yBAAyB,EAAC;IACzF,MAAMsD,QAAQnB,wBAAwBI,OAAQgB,CAAAA,WAAW1D,wBAAwB,EAAC;IAClF,OAAOwD,eAAe;QAAEA;QAAcC;IAAM,IAAI;QAAED,cAAc;QAAIC,OAAO,EAAE;IAAC;AAChF;AAEA,+DAA+D,GAC/D,OAAO,SAASE,SAASnC,KAAgC;IACvD,MAAMoC,UAAUjE,OAAO6B,gBAAAA,QAAS,IAAI3B,IAAI,GAAGgD,OAAO,CAAC,QAAQ;IAC3D,OAAO,0BAA0B5D,IAAI,CAAC2E,WAAWA,QAAQpD,WAAW,KAAK;AAC3E;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASqD,4BACdP,GAAiD;QAE9BA,6BAGVA,gCACYA;IAJrB,MAAMZ,MAAM/C,QAAO2D,8BAAAA,GAAG,CAAC,yBAAyB,YAA7BA,8BAAiC,IAAIzD,IAAI;IAC5D,IAAI,wBAAwBZ,IAAI,CAACyD,MAAM,OAAO,EAAE;IAChD,MAAM1B,OACJrB,QAAO2D,iCAAAA,GAAG,CAAC,4BAA4B,YAAhCA,iCAAoC,IAAIzD,IAAI,MAAM9B;IAC3D,MAAM+F,QAAQnE,QAAO2D,yBAAAA,GAAG,CAAC,oBAAoB,YAAxBA,yBAA4B,IAAIzD,IAAI,MAAM;IAC/D,MAAMkE,OACJJ,SAASL,GAAG,CAAC,gCAAgC,KAC7CK,SAAS,CAAC,QAAQ,EAAEG,MAAM,CAAC,EAAE9C,MAAM;IACrC,MAAMgD,SAAStB,IACZC,KAAK,CAAC,UACNlC,GAAG,CAAC,CAACe,QAAUmC,SAASnC,QACxBZ,MAAM,CAACqD;IACV,2EAA2E;IAC3E,MAAMC,QAAQb,0BAA0BC,KAAKG,KAAK,CAAChD,GAAG,CAAC,CAAC0D,OAASA,KAAKf,MAAM;IAC5E,OAAO;WAAI,IAAIvE,IAAI;YAACkF;eAASC;eAAWE;SAAM,CAACtD,MAAM,CAACqD;KAAU;AAClE;AAEA,0CAA0C,GAC1C,OAAO,SAASG,qBAAqBhB,MAAc;IACjD,OAAO,GAAGnF,8BAA8B,IAAIoG,IAAIjB,QAAQ7C,IAAI,EAAE;AAChE;AAcA;;;;;;;CAOC,GACD,OAAO,SAAS+D,uBACdC,KAA4C,EAC5CC,WAA4C,EAC5CC,OAA0E;QAIpDD;IAFtB,MAAM,EAAEpB,MAAM,EAAEU,KAAK,EAAEY,SAAS,EAAEC,GAAG,EAAE,GAAGF;IAC1C,MAAMG,UAAUR,qBAAqBhB;IACrC,MAAM/D,SAASM,QAAO6E,sBAAAA,YAAYnF,MAAM,YAAlBmF,sBAAsB,IAAI3D,KAAK,CAAC,GAAG;IACzD,MAAMgE,cAAcN,CAAAA,yBAAAA,MAAOjF,MAAM,MAAK;IACtC,IAAIkF,YAAYtF,EAAE,EAAE;QAClB,OAAO;YACL4F,MAAM;gBACJF;gBACAd;gBACAV;gBACA9D,QAAQ;gBACRyF,SAAS,CAACF,gBAAeN,yBAAAA,MAAOQ,OAAO,IAAGR,MAAMQ,OAAO,GAAGJ;gBAC1DtF;gBACA2F,aAAaL;gBACbM,qBAAqB;gBACrBC,gBAAgB;gBAChBC,YAAYR;YACd;YACAS,YAAYP,cAAc,cAAc;QAC1C;IACF;IACA,MAAMQ,WAAW,SAACd,yBAAAA,MAAOU,mBAAmB,mBAAI,KAAK;IACrD,MAAMC,0BAAiBX,yBAAAA,MAAOW,cAAc,oBAAIP;IAChD,MAAMW,WAAWT,eAAeQ,YAAY5D,KAAKC,GAAG,CAAC,GAAGgD;IACxD,OAAO;QACLI,MAAM;YACJF;YACAd;YACAV;YACA9D,QAAQgG,WAAW,aAAa;YAChCP,SAASO,WACLT,gBAAeN,yBAAAA,MAAOQ,OAAO,IAC3BR,MAAMQ,OAAO,GACbG,0BACDX,yBAAAA,MAAOQ,OAAO,oBAAIJ;YACvBtF;YACA2F,aAAaL;YACbM,qBAAqBI;YACrBH;YACAC,UAAU,WAAEZ,yBAAAA,MAAOY,UAAU,oBAAI;QACnC;QACAC,YAAYE,YAAY,CAACT,cAAc,YAAY;IACrD;AACF;AAqCA;;;CAGC,GACD,MAAMU,iBAAqC,OAAOX,SAASY;IACzD,MAAM,EAAEC,SAASC,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC;IAChD,MAAMC,KAAKD,cAAcE,GAAG,GAAGC,SAAS;IACxC,MAAMC,MAAMH,GAAGI,UAAU,CAAC/H,2BAA2BgI,GAAG,CAACpB;IACzD,OAAOe,GAAGM,cAAc,CAAC,OAAOC;QAC9B,MAAMC,WAAW,MAAMD,YAAYjD,GAAG,CAAC6C;QACvC,MAAMvB,QAAQ4B,SAASC,MAAM,GACxBD,SAASE,IAAI,KACd;QACJ,MAAM,EAAEvB,IAAI,EAAEwB,MAAM,EAAE,GAAGd,KAAKjB;QAC9B2B,YAAY/C,GAAG,CAAC2C,KAAKhB;QACrB,OAAOwB;IACT;AACF;AAOA,MAAMC,eAA2B,OAAOC,MAAMC;IAC5C,MAAM,EAAEC,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC;IAC5C,OAAOA,mBAAmBF,MAAMC;AAClC;AAEA,SAASE,iBAAiBC,EAAU;IAClC,MAAMC,UAAUpF,KAAKC,GAAG,CAAC,GAAGD,KAAKqF,KAAK,CAACF,KAAK;IAC5C,IAAIC,UAAU,IAAI,OAAO,GAAGA,QAAQ,IAAI,CAAC;IACzC,MAAME,QAAQtF,KAAKE,KAAK,CAACkF,UAAU;IACnC,MAAMG,OAAOH,UAAU;IACvB,OAAOG,OAAO,GAAGD,MAAM,GAAG,EAAEC,KAAK,IAAI,CAAC,GAAG,GAAGD,MAAM,EAAE,CAAC;AACvD;AAEA;;;CAGC,GACD,OAAO,SAASE,aACdzD,YAAoB,EACpB0D,IAAwB,EACxBC,IAAY,EACZC,QAAgB;QAEHF;IAAb,MAAM1I,QAAO0I,eAAAA,KAAKlE,KAAK,CAACvB,KAAK4F,GAAG,CAACF,QAAQD,KAAKlE,KAAK,CAACzB,MAAM,CAAC,YAA9C2F,eAAkD;IAC/D,MAAMI,MAAM,IAAIjD,IAAI7F,MAAMgF;IAC1B8D,IAAIC,YAAY,CAACpE,GAAG,CAAC,cAAcrC,kBAAkBoG,KAAK3G,IAAI,EAAE6G;IAChE,OAAOE,IAAIE,QAAQ;AACrB;AAEA,SAASC,UAAUC,GAAmB;IACpC,OAAO,GAAGA,IAAInJ,IAAI,CAAC,CAAC,EAAE,IAAI8F,IAAIqD,IAAIJ,GAAG,EAAEK,QAAQ,CAAC,EAAE,EAAED,IAAIrI,MAAM,CAAC,EAAE,EAAEqI,IAAId,EAAE,CAAC,IAAI,CAAC;AACjF;AAEA,6CAA6C,GAC7C,eAAegB,SACbN,GAAW,EACXO,IAAqD,EACrDpB,OAKC;IAED,MAAMqB,YAAYrB,QAAQsB,KAAK;IAC/B,IAAI;YAmBIhJ;QAlBN,MAAMA,WAAW,MAAM0H,QAAQuB,OAAO,CAACV,KAAK;YAC1CW,UAAU;YACVvI,OAAO;YACPwI,SAAS;gBACP,cAAc;gBACdC,QAAQ;eACL1B,QAAQyB,OAAO;YAEpBE,QAAQC,YAAYC,OAAO,CAAC7B,QAAQ8B,SAAS;QAC/C;QACA,MAAMvJ,OAAO,MAAMD,SAASwD,IAAI;QAChC,MAAMiG,UAAU1J,iBACd;YACEQ,QAAQP,SAASO,MAAM;YACvBE,aAAaT,SAASmJ,OAAO,CAACjF,GAAG,CAAC;YAClCjE;YACAO,UAAUR,SAASmJ,OAAO,CAACjF,GAAG,CAAC;YAC/BrD,UAAU,GACRb,wBAAAA,SAASmJ,OAAO,CAACjF,GAAG,CAAC,6BAArBlE,wBACAA,SAASmJ,OAAO,CAACjF,GAAG,CAAC;QACzB,GACA4E,KAAKpJ,YAAY;QAEnB,OAAO;YACLF,MAAMsJ,KAAKtJ,IAAI;YACf+I;YACAV,IAAIH,QAAQsB,KAAK,KAAKD;YACtBW,YAAY1J,SAASO,MAAM;WACxBkJ;IAEP,EAAE,OAAOE,OAAO;YAaQ;YAAA;QAZtB,MAAMC,OAAQD,yBAAD,AAACA,MAAoCC,IAAI;QACtD,MAAMC,WAAWD,SAAS,kBAAkBA,SAAS;QACrD,OAAO;YACLpK,MAAMsJ,KAAKtJ,IAAI;YACf+I;YACAV,IAAIH,QAAQsB,KAAK,KAAKD;YACtBW,YAAY;YACZvJ,IAAI;YACJC,YAAY;YACZC,MAAMwJ,WAAW,YAAY;YAC7BvJ,QAAQuJ,WACJ,CAAC,oBAAoB,EAAEnH,KAAKqF,KAAK,CAACL,QAAQ8B,SAAS,GAAG,MAAO,EAAE,CAAC,GAChE,CAAC,aAAa,GAAE,gBAACG,0BAAD,eAAA,AAACA,MAAgDG,KAAK,qBAAtD,aAAwDzJ,IAAI,oBAAIuJ,gBAAhE,OAAwE,QAAQ,CAAC,CAAC;QACxG;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeG,iBACpBrC,UAWI,CAAC,CAAC;QAEMA,cACEA,cACAA,gBACAA,gBAGLnD,uCAQPmD,gBAISA,kBACAA,kBACEA;IApBb,MAAMnD,OAAMmD,eAAAA,QAAQnD,GAAG,YAAXmD,eAAesC,QAAQzF,GAAG;IACtC,MAAMyE,SAAQtB,eAAAA,QAAQ9B,GAAG,YAAX8B,eAAerE,KAAKuC,GAAG;IACrC,MAAMqE,SAAQvC,iBAAAA,QAAQuC,KAAK,YAAbvC,iBAAiBlB;IAC/B,MAAM0D,SAAQxC,iBAAAA,QAAQwC,KAAK,YAAbxC,iBAAiBF;IAC/B,MAAM2C,SAASjF,QAAQwC,QAAQyC,MAAM;IACrC,MAAMC,kBAAkBvH,OAAOwH,QAAQ,CACrCzJ,QAAO2D,wCAAAA,GAAG,CAAC,mCAAmC,YAAvCA,wCAA2C,KAClD;IAEF,MAAMoB,YACJ9C,OAAOyH,QAAQ,CAACF,oBAAoBA,mBAAmB,IACnDA,kBACA/K;IACN,MAAMM,SACJ+H,iBAAAA,QAAQ/H,KAAK,YAAb+H,iBACC,IAAM,GAAGsB,QAAQP,QAAQ,CAAC,MAAM/F,KAAK6H,MAAM,GAAG9B,QAAQ,CAAC,IAAI3G,KAAK,CAAC,GAAG,IAAI;IAE3E,MAAM0I,eAAe;QACnBvB,OAAO,GAAEvB,mBAAAA,QAAQuB,OAAO,YAAfvB,mBAAmB+C;QAC5BtB,OAAO,GAAEzB,mBAAAA,QAAQyB,OAAO,YAAfzB,mBAAmB,CAAC;QAC7B8B,SAAS,GAAE9B,qBAAAA,QAAQ8B,SAAS,YAAjB9B,qBAAqBtI;QAChC4J;IACF;IACA,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,EAAEvE,YAAY,EAAEC,KAAK,EAAE,GAAGJ,0BAA0BC;IAC1D,MAAMmG,iBAAiBxF,QACrBT,gBAAgB+F,aAAarB,OAAO,CAAC,6BAA6B;IAEpE,MAAMwB,QAAQ3B;IACd,MAAMZ,OAAO1F,KAAKE,KAAK,CAAC+H,QAAQ;IAEhC,MAAMC,QAAQ,MAAMC,QAAQC,GAAG,CAC7BhG,4BAA4BP,KAAK7C,GAAG,CAClC,OAAO2C;QACL,MAAM0G,eAAexL,cAAcmC,GAAG,CAAC,CAACoH,OACtCD,SAAS,GAAGxE,SAASyE,KAAKrJ,IAAI,CAACE,UAAU,EAAEmJ,MAAM0B;QAEnD,MAAMrC,OAAOuC,iBAAiBhG,MAAMsG,IAAI,CAAC,CAAC5F,OAASA,KAAKf,MAAM,KAAKA,UAAU4G;QAC7E,MAAMC,YAAY/C,OACd;YACEU,SACEX,aAAazD,cAAc0D,MAAMC,MAAMjF,qBAAqBwH,SAC5D;gBAAEnL,MAAM;gBAAQE,cAAc;YAAI,GAClC8K;SAEH,GACD,EAAE;QACN,MAAMW,SAAS,MAAMN,QAAQC,GAAG,CAAC;eAAIC;eAAiBG;SAAU;QAChE,MAAM/K,KAAKgL,OAAOC,KAAK,CAAC,CAACC,QAAUA,MAAMlL,EAAE;QAC3C,MAAMoH,SAAkC;YAAElD;YAAQlE;YAAIgL;QAAO;QAC7D,IAAIhB,QAAQ,OAAO5C;QACnB,MAAM/F,OAAO,IAAI8D,IAAIjB,QAAQ7C,IAAI;QACjC,MAAM8J,UAAUH,OAAOtJ,MAAM,CAAC,CAACwJ,QAAU,CAACA,MAAMlL,EAAE;QAClD,MAAMG,SAASH,KACX,wBACAmL,QAAQ5J,GAAG,CAACgH,WAAWxH,IAAI,CAAC;QAChC,IAAI;YACF,MAAM0E,MAAMoD;YACZ,MAAM,EAAEjD,IAAI,EAAEM,UAAU,EAAEF,cAAc,EAAE,GAAG,MAAM8D,MACjD5E,qBAAqBhB,SACrB,CAACmB;oBAgBqBA;gBAfpB,MAAM+F,UAAUhG,uBACdC,OACA;oBAAErF;oBAAIG;gBAAO,GACb;oBACE+D;oBACAU,OAAO,CAAC,kBAAkB,EAAEvD,MAAM;oBAClCmE;oBACAC;gBACF;gBAEF,OAAO;oBACLG,MAAMwF,QAAQxF,IAAI;oBAClBwB,QAAQ,aACHgE;wBACH,2CAA2C;wBAC3CpF,cAAc,GAAEX,gBAAAA,yBAAAA,MAAOW,cAAc,oBAAIX,yBAAAA,MAAOQ,OAAO,YAAvCR,OAA2CI;;gBAE/D;YACF;YAEF2B,OAAOhH,MAAM,GAAGwF,KAAKxF,MAAM;YAC3BgH,OAAOrB,mBAAmB,GAAGH,KAAKG,mBAAmB;YACrDqB,OAAOlB,UAAU,GAAGA;YACpB,IAAIA,eAAe,WAAW;gBAC5B,MAAM6D,MAAM,4BAA4B;oBACtCsB,WAAWhK;oBACXkE,SAAS;wBACPyC,MAAM3G;wBACN8E,UAAUP,KAAKG,mBAAmB;wBAClCuF,OAAO7D,iBAAiBhC,MAAMG,KAAKC,OAAO;wBAC1C1F;oBACF;gBACF;YACF,OAAO,IAAI+F,eAAe,aAAa;gBACrC,MAAM6D,MAAM,8BAA8B;oBACxCsB,WAAWhK;oBACXkE,SAAS;wBACPyC,MAAM3G;wBACNkK,UAAU9D,iBAAiBhC,MAAMO;oBACnC;gBACF;YACF;QACF,EAAE,OAAOwD,OAAO;YACdpC,OAAOoC,KAAK,GAAGA,iBAAiBgC,QAAQhC,MAAMiC,OAAO,GAAGhL,OAAO+I;YAC/DkC,QAAQlC,KAAK,CAAC,CAAC,iBAAiB,EAAEnI,KAAK,sBAAsB,CAAC,EAAEmI;QAClE;QACA,OAAOpC;IACT;IAGJ,OAAO;QAAE4C;QAAQxE;QAAWiF;IAAM;AACpC"}