@opengeni/db 3.7.4 → 4.0.0-canary.0

package/dist/{chunk-SZAWDXQC.js → chunk-CJROYHSC.js}

@@ -2,7 +2,7 @@ import {
   rawRows,
   withRlsContext,
   withWorkspaceRls
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-UFAMOUWL.js";
 import {
   connections,
   creditLedgerEntries,
@@ -14,7 +14,7 @@ import {
   workspaceVideoGenerationPolicies,
   workspaceVideoGenerationQuotas,
   workspaces
-} from "./chunk-O56DM5GZ.js";
+} from "./chunk-QM6YOWHZ.js";
 
 // src/video-generation.ts
 import {
@@ -992,4 +992,4 @@ export {
   mediaGenerationResultForStoredOperation,
   getVideoGenerationOperationSummary
 };
-//# sourceMappingURL=chunk-SZAWDXQC.js.map
+//# sourceMappingURL=chunk-CJROYHSC.js.map

package/dist/{chunk-DZCYW2WT.js → chunk-MX6V5F65.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-UFAMOUWL.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-DZCYW2WT.js.map
+//# sourceMappingURL=chunk-MX6V5F65.js.map

package/dist/{chunk-S3TDDCS2.js → chunk-N5VXJ4I2.js}

@@ -1,14 +1,30 @@
 import {
-  withRlsContext
-} from "./chunk-F6PBS6WE.js";
+  withRlsContext,
+  withSessionActivityRlsContext
+} from "./chunk-UFAMOUWL.js";
 import {
   sandboxRetainedProcesses,
   sessionBackgroundCommands,
+  sessionEvents,
   sessions
-} from "./chunk-O56DM5GZ.js";
+} from "./chunk-QM6YOWHZ.js";
 
 // src/session-background-commands.ts
 import { and, desc, eq, inArray, sql } from "drizzle-orm";
+var SESSION_BACKGROUND_COMMAND_REASON_MAX_BYTES = 512;
+function boundedSessionBackgroundCommandReason(value, label) {
+  const normalized = value.trim();
+  let bounded = "";
+  let bytes = 0;
+  for (const character of normalized) {
+    const characterBytes = Buffer.byteLength(character, "utf8");
+    if (bytes + characterBytes > SESSION_BACKGROUND_COMMAND_REASON_MAX_BYTES) break;
+    bounded += character;
+    bytes += characterBytes;
+  }
+  if (!bounded) throw new Error(`${label} must not be empty`);
+  return bounded;
+}
 function commandPreview(value) {
   const normalized = value.replace(/\s+/g, " ").trim();
   return Array.from(normalized).slice(0, 512).join("");
@@ -210,8 +226,10 @@ function connectedClaimIdentityWhere(claim) {
   );
 }
 async function recordConnectedMachineBackgroundCommandProof(db, input) {
-  const reason = input.proof.reason.trim().slice(0, 512);
-  if (!reason) throw new Error("Connected command proof reason must not be empty");
+  const reason = boundedSessionBackgroundCommandReason(
+    input.proof.reason,
+    "Connected command proof reason"
+  );
   if (input.proof.outcome === "exited" && input.proof.exitCode === null) {
     throw new Error("Connected command exit proof requires an exit code");
   }
@@ -266,41 +284,46 @@ async function deferConnectedMachineBackgroundCommandReconciliation(db, input) {
     }
   );
 }
-async function settleClaimedConnectedMachineBackgroundCommand(db, input) {
-  return await withRlsContext(
+async function settleClaimedConnectedMachineBackgroundCommandWithMutation(db, input, mutateTerminal) {
+  return await withSessionActivityRlsContext(
     db,
     { accountId: input.claim.accountId, workspaceId: input.claim.workspaceId },
-    async (scopedDb) => {
-      const rows = await scopedDb.execute(sql`
-        update ${sessionBackgroundCommands} command set
-          state = command.reconcile_proof_outcome,
-          exit_code = case
-            when command.reconcile_proof_outcome = 'exited'
-              then command.reconcile_proof_exit_code
-            else null
-          end,
-          settlement_reason = command.reconcile_proof_reason,
-          settled_at = command.reconcile_proof_observed_at,
-          reconcile_claim_id = null,
-          reconcile_claimed_at = null,
-          last_reconcile_outcome = 'settled_' || command.reconcile_proof_outcome,
-          updated_at = clock_timestamp()
-        where command.id = ${input.claim.commandId}
-          and command.account_id = ${input.claim.accountId}
-          and command.workspace_id = ${input.claim.workspaceId}
-          and command.session_id = ${input.claim.sessionId}
-          and command.provider = 'connected_machine'
-          and command.control_workspace_id = ${input.claim.controlWorkspaceId}
-          and command.enrollment_id = ${input.claim.enrollmentId}
-          and command.connection_instance_id = ${input.claim.connectionInstanceId}
-          and command.op_id = ${input.claim.opId}
-          and command.reconcile_claim_id = ${input.claim.claimId}
-          and command.state in ('running', 'stopping')
-          and command.reconcile_proof_outcome in ('exited', 'lost')
-          and command.reconcile_proof_observed_at is not null
-        returning command.id
-      `);
-      return rows.length === 1;
+    async (tx) => {
+      await mutateTerminal.prepare(tx);
+      const rows = await tx.execute(sql`
+          update ${sessionBackgroundCommands} command set
+            state = command.reconcile_proof_outcome,
+            exit_code = case
+              when command.reconcile_proof_outcome = 'exited'
+                then command.reconcile_proof_exit_code
+              else null
+            end,
+            settlement_reason = command.reconcile_proof_reason,
+            settled_at = command.reconcile_proof_observed_at,
+            reconcile_claim_id = null,
+            reconcile_claimed_at = null,
+            last_reconcile_outcome = 'settled_' || command.reconcile_proof_outcome,
+            updated_at = clock_timestamp()
+          where command.id = ${input.claim.commandId}
+            and command.account_id = ${input.claim.accountId}
+            and command.workspace_id = ${input.claim.workspaceId}
+            and command.session_id = ${input.claim.sessionId}
+            and command.provider = 'connected_machine'
+            and command.control_workspace_id = ${input.claim.controlWorkspaceId}
+            and command.enrollment_id = ${input.claim.enrollmentId}
+            and command.connection_instance_id = ${input.claim.connectionInstanceId}
+            and command.op_id = ${input.claim.opId}
+            and command.reconcile_claim_id = ${input.claim.claimId}
+            and command.state in ('running', 'stopping')
+            and command.reconcile_proof_outcome in ('exited', 'lost')
+            and command.reconcile_proof_observed_at is not null
+          returning command.id
+        `);
+      if (rows.length !== 1) return false;
+      const [row] = await tx.select().from(sessionBackgroundCommands).where(eq(sessionBackgroundCommands.id, input.claim.commandId)).limit(1);
+      if (!row) throw new Error("Settled Connected Machine command disappeared");
+      await mutateTerminal.commit(tx, mapCommand(row));
+      return true;
     }
   );
 }
@@ -427,47 +450,75 @@ async function requestWorkspaceBackgroundCommandCancellationsInTransaction(db, i
   `);
   return Number(rows[0]?.commandCount ?? 0);
 }
-async function settleSessionBackgroundCommandForRetainedProcess(db, input) {
-  return await withRlsContext(
-    db,
-    { accountId: input.accountId, workspaceId: input.workspaceId },
-    async (scopedDb) => {
-      const [row] = await scopedDb.update(sessionBackgroundCommands).set({
-        state: input.outcome,
-        exitCode: input.outcome === "exited" ? input.exitCode : null,
-        settlementReason: input.reason.slice(0, 512),
-        settledAt: /* @__PURE__ */ new Date(),
-        reconcileClaimId: null,
-        reconcileClaimedAt: null,
-        lastReconcileOutcome: `settled_${input.outcome}`,
-        updatedAt: /* @__PURE__ */ new Date()
-      }).where(
-        and(
-          eq(sessionBackgroundCommands.workspaceId, input.workspaceId),
-          eq(sessionBackgroundCommands.sessionId, input.sessionId),
-          eq(sessionBackgroundCommands.retainedProcessId, input.retainedProcessId),
-          inArray(sessionBackgroundCommands.state, ["running", "stopping"])
-        )
-      ).returning();
-      return row ? mapCommand(row) : null;
-    }
+async function settleSessionBackgroundCommandForRetainedProcessInTransaction(tx, input, mutateTerminal) {
+  const reason = boundedSessionBackgroundCommandReason(
+    input.reason,
+    "Managed command settlement reason"
   );
+  await mutateTerminal.prepare(tx);
+  const [updatedRow] = await tx.update(sessionBackgroundCommands).set({
+    state: input.outcome,
+    exitCode: input.outcome === "exited" ? input.exitCode : null,
+    settlementReason: reason,
+    settledAt: /* @__PURE__ */ new Date(),
+    reconcileClaimId: null,
+    reconcileClaimedAt: null,
+    lastReconcileOutcome: `settled_${input.outcome}`,
+    updatedAt: /* @__PURE__ */ new Date()
+  }).where(
+    and(
+      eq(sessionBackgroundCommands.workspaceId, input.workspaceId),
+      eq(sessionBackgroundCommands.sessionId, input.sessionId),
+      eq(sessionBackgroundCommands.retainedProcessId, input.retainedProcessId),
+      inArray(sessionBackgroundCommands.state, ["running", "stopping"])
+    )
+  ).returning();
+  let row = updatedRow;
+  if (!row) {
+    const [current] = await tx.select().from(sessionBackgroundCommands).where(
+      and(
+        eq(sessionBackgroundCommands.workspaceId, input.workspaceId),
+        eq(sessionBackgroundCommands.sessionId, input.sessionId),
+        eq(sessionBackgroundCommands.retainedProcessId, input.retainedProcessId)
+      )
+    ).for("update").limit(1);
+    if (!current) return null;
+    if (current.state !== input.outcome || current.exitCode !== (input.outcome === "exited" ? input.exitCode : null)) {
+      throw new Error("Managed background command terminal state conflicts with process proof");
+    }
+    const [existingEvent] = await tx.select({ id: sessionEvents.id }).from(sessionEvents).where(
+      and(
+        eq(sessionEvents.workspaceId, input.workspaceId),
+        eq(sessionEvents.sessionId, input.sessionId),
+        eq(sessionEvents.type, "session.command.finished"),
+        sql`${sessionEvents.payload} ->> 'commandId' = ${current.id}`
+      )
+    ).limit(1);
+    if (existingEvent) return mapCommand(current);
+    row = current;
+  }
+  const command = mapCommand(row);
+  await mutateTerminal.commit(tx, command);
+  return command;
 }
-async function settleConnectedMachineSessionBackgroundCommand(db, input) {
-  return await withRlsContext(
+async function settleConnectedMachineSessionBackgroundCommandWithMutation(db, input, mutateTerminal) {
+  const reason = boundedSessionBackgroundCommandReason(
+    input.reason,
+    "Connected command settlement reason"
+  );
+  if (input.outcome === "exited" && input.exitCode === null) {
+    throw new Error("Connected command exit settlement requires an exit code");
+  }
+  if (input.outcome === "lost" && input.exitCode !== null) {
+    throw new Error("Connected command loss settlement cannot carry an exit code");
+  }
+  return await withSessionActivityRlsContext(
     db,
     { accountId: input.accountId, workspaceId: input.workspaceId },
-    async (scopedDb) => {
+    async (tx) => {
+      await mutateTerminal.prepare(tx);
       const settledAt = /* @__PURE__ */ new Date();
-      const reason = input.reason.trim().slice(0, 512);
-      if (!reason) throw new Error("Connected command settlement reason must not be empty");
-      if (input.outcome === "exited" && input.exitCode === null) {
-        throw new Error("Connected command exit settlement requires an exit code");
-      }
-      if (input.outcome === "lost" && input.exitCode !== null) {
-        throw new Error("Connected command loss settlement cannot carry an exit code");
-      }
-      const [row] = await scopedDb.update(sessionBackgroundCommands).set({
+      const [row] = await tx.update(sessionBackgroundCommands).set({
         state: input.outcome,
         exitCode: input.outcome === "exited" ? input.exitCode : null,
         settlementReason: reason,
@@ -493,12 +544,33 @@ async function settleConnectedMachineSessionBackgroundCommand(db, input) {
           inArray(sessionBackgroundCommands.state, ["running", "stopping"])
         )
       ).returning();
+      if (!row) return null;
+      const command = mapCommand(row);
+      await mutateTerminal.commit(tx, command);
+      return command;
+    }
+  );
+}
+async function getSessionBackgroundCommand(db, input) {
+  return await withRlsContext(
+    db,
+    { accountId: input.accountId, workspaceId: input.workspaceId },
+    async (scopedDb) => {
+      const [row] = await scopedDb.select().from(sessionBackgroundCommands).where(
+        and(
+          eq(sessionBackgroundCommands.workspaceId, input.workspaceId),
+          eq(sessionBackgroundCommands.sessionId, input.sessionId),
+          eq(sessionBackgroundCommands.id, input.commandId)
+        )
+      ).limit(1);
       return row ? mapCommand(row) : null;
     }
   );
 }
 
 export {
+  SESSION_BACKGROUND_COMMAND_REASON_MAX_BYTES,
+  boundedSessionBackgroundCommandReason,
   backgroundCommandActivityForSessions,
   listSessionBackgroundCommands,
   insertManagedSessionBackgroundCommandInTransaction,
@@ -506,11 +578,12 @@ export {
   claimConnectedMachineSessionBackgroundCommands,
   recordConnectedMachineBackgroundCommandProof,
   deferConnectedMachineBackgroundCommandReconciliation,
-  settleClaimedConnectedMachineBackgroundCommand,
+  settleClaimedConnectedMachineBackgroundCommandWithMutation,
   requestSessionBackgroundCommandCancellation,
   requestSessionBackgroundCommandCancellationsInTransaction,
   requestWorkspaceBackgroundCommandCancellationsInTransaction,
-  settleSessionBackgroundCommandForRetainedProcess,
-  settleConnectedMachineSessionBackgroundCommand
+  settleSessionBackgroundCommandForRetainedProcessInTransaction,
+  settleConnectedMachineSessionBackgroundCommandWithMutation,
+  getSessionBackgroundCommand
 };
-//# sourceMappingURL=chunk-S3TDDCS2.js.map
+//# sourceMappingURL=chunk-N5VXJ4I2.js.map

package/dist/chunk-N5VXJ4I2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-background-commands.ts"],"sourcesContent":["import type {\n  SessionBackgroundCommand,\n  SessionBackgroundCommandActivity,\n} from \"@opengeni/contracts\";\nimport { and, desc, eq, inArray, sql } from \"drizzle-orm\";\n\nimport type { Database, SessionActivityDatabase } from \"./database\";\nimport { withRlsContext, withSessionActivityRlsContext } from \"./database\";\nimport * as schema from \"./schema\";\n\nexport type ConnectedMachineBackgroundCommandProof = {\n  outcome: \"exited\" | \"lost\";\n  exitCode: number | null;\n  reason: string;\n  observedAt: Date;\n};\n\nexport const SESSION_BACKGROUND_COMMAND_REASON_MAX_BYTES = 512;\n\nexport function boundedSessionBackgroundCommandReason(value: string, label: string): string {\n  const normalized = value.trim();\n  let bounded = \"\";\n  let bytes = 0;\n  for (const character of normalized) {\n    const characterBytes = Buffer.byteLength(character, \"utf8\");\n    if (bytes + characterBytes > SESSION_BACKGROUND_COMMAND_REASON_MAX_BYTES) break;\n    bounded += character;\n    bytes += characterBytes;\n  }\n  if (!bounded) throw new Error(`${label} must not be empty`);\n  return bounded;\n}\n\nexport type SessionBackgroundCommandTerminalMutation = {\n  prepare: (tx: SessionActivityDatabase) => Promise<void>;\n  commit: (tx: SessionActivityDatabase, command: SessionBackgroundCommand) => Promise<void>;\n};\n\nexport type ConnectedMachineBackgroundCommandClaim = {\n  commandId: string;\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  claimId: string;\n  state: \"running\" | \"stopping\";\n  controlWorkspaceId: string;\n  enrollmentId: string;\n  connectionInstanceId: string;\n  opId: string;\n  reconcileAttempts: number;\n  proof: ConnectedMachineBackgroundCommandProof | null;\n};\n\ntype ConnectedMachineBackgroundCommandClaimRow = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  commandId: string;\n  claimId: string;\n  commandState: string;\n  controlWorkspaceId: string;\n  enrollmentId: string;\n  connectionInstanceId: string;\n  opId: string;\n  reconcileAttempts: number | string;\n  reconcileProofOutcome: string | null;\n  reconcileProofExitCode: number | string | null;\n  reconcileProofReason: string | null;\n  reconcileProofObservedAt: Date | string | null;\n};\n\nfunction commandPreview(value: string): string {\n  const normalized = value.replace(/\\s+/g, \" \").trim();\n  return Array.from(normalized).slice(0, 512).join(\"\");\n}\n\nfunction mapCommand(\n  row: typeof schema.sessionBackgroundCommands.$inferSelect,\n): SessionBackgroundCommand {\n  return {\n    id: row.id,\n    workspaceId: row.workspaceId,\n    sessionId: row.sessionId,\n    provider: row.provider,\n    state: row.state,\n    commandPreview: row.commandPreview,\n    cancelRequestedAt: row.cancelRequestedAt?.toISOString() ?? null,\n    exitCode: row.exitCode ?? null,\n    settlementReason: row.settlementReason ?? null,\n    startedAt: row.startedAt.toISOString(),\n    settledAt: row.settledAt?.toISOString() ?? null,\n    updatedAt: row.updatedAt.toISOString(),\n  };\n}\n\nexport async function backgroundCommandActivityForSessions(\n  db: Database,\n  input: { accountId: string; workspaceId: string; sessionIds: string[] },\n): Promise<Map<string, SessionBackgroundCommandActivity>> {\n  if (input.sessionIds.length === 0) return new Map();\n  return await withRlsContext(\n    db,\n    { accountId: input.accountId, workspaceId: input.workspaceId },\n    async (scopedDb) => {\n      const rows = await scopedDb\n        .select({\n          sessionId: schema.sessionBackgroundCommands.sessionId,\n          count: sql<number>`count(*)::int`,\n          stoppingCount: sql<number>`count(*) filter (where ${schema.sessionBackgroundCommands.state} = 'stopping')::int`,\n        })\n        .from(schema.sessionBackgroundCommands)\n        .where(\n          and(\n            eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n            inArray(schema.sessionBackgroundCommands.sessionId, input.sessionIds),\n            inArray(schema.sessionBackgroundCommands.state, [\"running\", \"stopping\"]),\n          ),\n        )\n        .groupBy(schema.sessionBackgroundCommands.sessionId);\n      return new Map(\n        rows.map((row) => [\n          row.sessionId,\n          {\n            state: Number(row.stoppingCount) > 0 ? (\"stopping\" as const) : (\"running\" as const),\n            count: Number(row.count),\n          },\n        ]),\n      );\n    },\n  );\n}\n\nexport async function listSessionBackgroundCommands(\n  db: Database,\n  input: { accountId: string; workspaceId: string; sessionId: string },\n): Promise<SessionBackgroundCommand[]> {\n  return await withRlsContext(\n    db,\n    { accountId: input.accountId, workspaceId: input.workspaceId },\n    async (scopedDb) => {\n      const rows = await scopedDb\n        .select()\n        .from(schema.sessionBackgroundCommands)\n        .where(\n          and(\n            eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n            eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n          ),\n        )\n        .orderBy(\n          desc(schema.sessionBackgroundCommands.startedAt),\n          desc(schema.sessionBackgroundCommands.id),\n        )\n        .limit(1000);\n      return rows.map(mapCommand);\n    },\n  );\n}\n\n/** @internal Caller must already hold the canonical session/control fence. */\nexport async function insertManagedSessionBackgroundCommandInTransaction(\n  db: Database,\n  input: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    commandId: string;\n    retainedProcessId: string;\n    command: string;\n  },\n): Promise<SessionBackgroundCommand> {\n  const [process] = await db\n    .select({\n      accountId: schema.sandboxRetainedProcesses.accountId,\n      workspaceId: schema.sandboxRetainedProcesses.workspaceId,\n      sessionId: schema.sandboxRetainedProcesses.sessionId,\n      state: schema.sandboxRetainedProcesses.state,\n    })\n    .from(schema.sandboxRetainedProcesses)\n    .where(eq(schema.sandboxRetainedProcesses.id, input.retainedProcessId))\n    .for(\"update\")\n    .limit(1);\n  if (\n    !process ||\n    process.accountId !== input.accountId ||\n    process.workspaceId !== input.workspaceId ||\n    process.sessionId !== input.sessionId ||\n    process.state !== \"active\"\n  ) {\n    throw new Error(\"Managed background command requires its exact active retained process\");\n  }\n  const [row] = await db\n    .insert(schema.sessionBackgroundCommands)\n    .values({\n      id: input.commandId,\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sessionId: input.sessionId,\n      provider: \"managed\",\n      state: \"running\",\n      retainedProcessId: input.retainedProcessId,\n      commandPreview: commandPreview(input.command),\n    })\n    .onConflictDoUpdate({\n      target: schema.sessionBackgroundCommands.retainedProcessId,\n      targetWhere: sql`${schema.sessionBackgroundCommands.retainedProcessId} is not null`,\n      set: { updatedAt: new Date() },\n    })\n    .returning();\n  if (!row) throw new Error(\"Managed background command adoption returned no row\");\n  if (\n    row.accountId !== input.accountId ||\n    row.workspaceId !== input.workspaceId ||\n    row.sessionId !== input.sessionId ||\n    row.provider !== \"managed\" ||\n    row.retainedProcessId !== input.retainedProcessId\n  ) {\n    throw new Error(\"Managed background command adoption conflicted with another identity\");\n  }\n  return mapCommand(row);\n}\n\n/** @internal Caller must already hold the canonical exact-attempt fence. */\nexport async function insertConnectedMachineSessionBackgroundCommandInTransaction(\n  db: Database,\n  input: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    commandId: string;\n    controlWorkspaceId: string;\n    enrollmentId: string;\n    connectionInstanceId: string;\n    opId: string;\n    command: string;\n  },\n): Promise<SessionBackgroundCommand> {\n  const [row] = await db\n    .insert(schema.sessionBackgroundCommands)\n    .values({\n      id: input.commandId,\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sessionId: input.sessionId,\n      provider: \"connected_machine\",\n      state: \"running\",\n      controlWorkspaceId: input.controlWorkspaceId,\n      enrollmentId: input.enrollmentId,\n      connectionInstanceId: input.connectionInstanceId,\n      opId: input.opId,\n      commandPreview: commandPreview(input.command),\n    })\n    .onConflictDoUpdate({\n      target: [\n        schema.sessionBackgroundCommands.controlWorkspaceId,\n        schema.sessionBackgroundCommands.enrollmentId,\n        schema.sessionBackgroundCommands.connectionInstanceId,\n        schema.sessionBackgroundCommands.opId,\n      ],\n      targetWhere: sql`${schema.sessionBackgroundCommands.provider} = 'connected_machine'`,\n      set: { updatedAt: new Date() },\n    })\n    .returning();\n  if (!row) throw new Error(\"Connected Machine background command adoption returned no row\");\n  if (\n    row.accountId !== input.accountId ||\n    row.workspaceId !== input.workspaceId ||\n    row.sessionId !== input.sessionId ||\n    row.provider !== \"connected_machine\" ||\n    row.controlWorkspaceId !== input.controlWorkspaceId ||\n    row.enrollmentId !== input.enrollmentId ||\n    row.connectionInstanceId !== input.connectionInstanceId ||\n    row.opId !== input.opId\n  ) {\n    throw new Error(\n      \"Connected Machine background command adoption conflicted with another identity\",\n    );\n  }\n  return mapCommand(row);\n}\n\n/** Claim exact Connected Machine locators globally for provider reconciliation.\n * The SECURITY DEFINER SQL function owns the bounded SKIP LOCKED inventory;\n * claim expiry is coordination recovery only and never implies command loss. */\nexport async function claimConnectedMachineSessionBackgroundCommands(\n  db: Database,\n  input: { claimId: string; limit: number; claimTtlMs: number },\n): Promise<ConnectedMachineBackgroundCommandClaim[]> {\n  if (!Number.isSafeInteger(input.limit) || input.limit < 1 || input.limit > 100) {\n    throw new Error(\"Connected command reconciliation limit must be between 1 and 100\");\n  }\n  if (\n    !Number.isSafeInteger(input.claimTtlMs) ||\n    input.claimTtlMs < 0 ||\n    input.claimTtlMs > 3_600_000\n  ) {\n    throw new Error(\"Connected command reconciliation claim TTL is invalid\");\n  }\n  const rows = await db.execute<ConnectedMachineBackgroundCommandClaimRow>(sql`\n    select account_id as \"accountId\",\n      workspace_id as \"workspaceId\",\n      session_id as \"sessionId\",\n      command_id as \"commandId\",\n      claim_id as \"claimId\",\n      command_state as \"commandState\",\n      control_workspace_id as \"controlWorkspaceId\",\n      enrollment_id as \"enrollmentId\",\n      connection_instance_id as \"connectionInstanceId\",\n      op_id as \"opId\",\n      reconcile_attempts as \"reconcileAttempts\",\n      reconcile_proof_outcome as \"reconcileProofOutcome\",\n      reconcile_proof_exit_code as \"reconcileProofExitCode\",\n      reconcile_proof_reason as \"reconcileProofReason\",\n      reconcile_proof_observed_at as \"reconcileProofObservedAt\"\n    from opengeni_private.claim_connected_machine_background_commands(\n      ${input.claimId}::uuid, ${input.limit}::integer, ${input.claimTtlMs}::bigint\n    )\n  `);\n  return rows.map((row: ConnectedMachineBackgroundCommandClaimRow) => {\n    if (row.commandState !== \"running\" && row.commandState !== \"stopping\") {\n      throw new Error(`Connected command claim returned invalid state ${row.commandState}`);\n    }\n    const proof =\n      row.reconcileProofOutcome === null\n        ? null\n        : row.reconcileProofOutcome === \"exited\" || row.reconcileProofOutcome === \"lost\"\n          ? {\n              outcome: row.reconcileProofOutcome,\n              exitCode:\n                row.reconcileProofExitCode === null ? null : Number(row.reconcileProofExitCode),\n              reason: row.reconcileProofReason!,\n              observedAt:\n                row.reconcileProofObservedAt instanceof Date\n                  ? row.reconcileProofObservedAt\n                  : new Date(row.reconcileProofObservedAt!),\n            }\n          : (() => {\n              throw new Error(\n                `Connected command claim returned invalid proof ${row.reconcileProofOutcome}`,\n              );\n            })();\n    return {\n      commandId: row.commandId,\n      accountId: row.accountId,\n      workspaceId: row.workspaceId,\n      sessionId: row.sessionId,\n      claimId: row.claimId,\n      state: row.commandState,\n      controlWorkspaceId: row.controlWorkspaceId,\n      enrollmentId: row.enrollmentId,\n      connectionInstanceId: row.connectionInstanceId,\n      opId: row.opId,\n      reconcileAttempts: Number(row.reconcileAttempts),\n      proof,\n    };\n  });\n}\n\nfunction connectedClaimIdentityWhere(claim: ConnectedMachineBackgroundCommandClaim) {\n  return and(\n    eq(schema.sessionBackgroundCommands.id, claim.commandId),\n    eq(schema.sessionBackgroundCommands.accountId, claim.accountId),\n    eq(schema.sessionBackgroundCommands.workspaceId, claim.workspaceId),\n    eq(schema.sessionBackgroundCommands.sessionId, claim.sessionId),\n    eq(schema.sessionBackgroundCommands.provider, \"connected_machine\"),\n    eq(schema.sessionBackgroundCommands.controlWorkspaceId, claim.controlWorkspaceId),\n    eq(schema.sessionBackgroundCommands.enrollmentId, claim.enrollmentId),\n    eq(schema.sessionBackgroundCommands.connectionInstanceId, claim.connectionInstanceId),\n    eq(schema.sessionBackgroundCommands.opId, claim.opId),\n    eq(schema.sessionBackgroundCommands.reconcileClaimId, claim.claimId),\n    inArray(schema.sessionBackgroundCommands.state, [\"running\", \"stopping\"]),\n  );\n}\n\n/** Checkpoint one exact terminal provider observation before lifecycle settlement.\n * A retry may reuse an identical proof; a divergent proof is a hard identity fault. */\nexport async function recordConnectedMachineBackgroundCommandProof(\n  db: Database,\n  input: {\n    claim: ConnectedMachineBackgroundCommandClaim;\n    proof: ConnectedMachineBackgroundCommandProof;\n  },\n): Promise<void> {\n  const reason = boundedSessionBackgroundCommandReason(\n    input.proof.reason,\n    \"Connected command proof reason\",\n  );\n  if (input.proof.outcome === \"exited\" && input.proof.exitCode === null) {\n    throw new Error(\"Connected command exit proof requires an exit code\");\n  }\n  if (input.proof.outcome === \"lost\" && input.proof.exitCode !== null) {\n    throw new Error(\"Connected command loss proof cannot carry an exit code\");\n  }\n  await withRlsContext(\n    db,\n    { accountId: input.claim.accountId, workspaceId: input.claim.workspaceId },\n    async (scopedDb) => {\n      const [current] = await scopedDb\n        .select()\n        .from(schema.sessionBackgroundCommands)\n        .where(connectedClaimIdentityWhere(input.claim))\n        .for(\"update\")\n        .limit(1);\n      if (!current) throw new Error(\"Connected command proof was fenced by newer lifecycle state\");\n      if (current.reconcileProofOutcome !== null) {\n        const observedAt = current.reconcileProofObservedAt?.getTime() ?? null;\n        if (\n          current.reconcileProofOutcome !== input.proof.outcome ||\n          current.reconcileProofExitCode !== input.proof.exitCode ||\n          current.reconcileProofReason !== reason ||\n          observedAt !== input.proof.observedAt.getTime()\n        ) {\n          throw new Error(\"Connected command reconciliation proof conflicts with durable proof\");\n        }\n        return;\n      }\n      const rows = await scopedDb\n        .update(schema.sessionBackgroundCommands)\n        .set({\n          reconcileProofOutcome: input.proof.outcome,\n          reconcileProofExitCode: input.proof.exitCode,\n          reconcileProofReason: reason,\n          reconcileProofObservedAt: input.proof.observedAt,\n          lastReconcileOutcome: `proof_${input.proof.outcome}`,\n          updatedAt: new Date(),\n        })\n        .where(connectedClaimIdentityWhere(input.claim))\n        .returning({ id: schema.sessionBackgroundCommands.id });\n      if (rows.length !== 1) {\n        throw new Error(\"Connected command proof lost its exact claim during checkpoint\");\n      }\n    },\n  );\n}\n\nexport async function deferConnectedMachineBackgroundCommandReconciliation(\n  db: Database,\n  input: {\n    claim: ConnectedMachineBackgroundCommandClaim;\n    outcome: string;\n    retryAfterMs: number;\n  },\n): Promise<boolean> {\n  if (!Number.isSafeInteger(input.retryAfterMs) || input.retryAfterMs < 0) {\n    throw new Error(\"Connected command reconciliation retry delay is invalid\");\n  }\n  const outcome = input.outcome.trim().slice(0, 64);\n  if (!outcome) throw new Error(\"Connected command reconciliation outcome must not be empty\");\n  return await withRlsContext(\n    db,\n    { accountId: input.claim.accountId, workspaceId: input.claim.workspaceId },\n    async (scopedDb) => {\n      const rows = await scopedDb\n        .update(schema.sessionBackgroundCommands)\n        .set({\n          reconcileAfter: new Date(Date.now() + input.retryAfterMs),\n          reconcileClaimId: null,\n          reconcileClaimedAt: null,\n          lastReconcileOutcome: outcome,\n          updatedAt: new Date(),\n        })\n        .where(connectedClaimIdentityWhere(input.claim))\n        .returning({ id: schema.sessionBackgroundCommands.id });\n      return rows.length === 1;\n    },\n  );\n}\n\n/** Settle only from the proof already checkpointed under this exact claim. */\nexport async function settleClaimedConnectedMachineBackgroundCommandWithMutation(\n  db: Database,\n  input: { claim: ConnectedMachineBackgroundCommandClaim },\n  mutateTerminal: SessionBackgroundCommandTerminalMutation,\n): Promise<boolean> {\n  return await withSessionActivityRlsContext(\n    db,\n    { accountId: input.claim.accountId, workspaceId: input.claim.workspaceId },\n    async (tx) => {\n      await mutateTerminal.prepare(tx);\n      const rows = await tx.execute<{ id: string }>(sql`\n          update ${schema.sessionBackgroundCommands} command set\n            state = command.reconcile_proof_outcome,\n            exit_code = case\n              when command.reconcile_proof_outcome = 'exited'\n                then command.reconcile_proof_exit_code\n              else null\n            end,\n            settlement_reason = command.reconcile_proof_reason,\n            settled_at = command.reconcile_proof_observed_at,\n            reconcile_claim_id = null,\n            reconcile_claimed_at = null,\n            last_reconcile_outcome = 'settled_' || command.reconcile_proof_outcome,\n            updated_at = clock_timestamp()\n          where command.id = ${input.claim.commandId}\n            and command.account_id = ${input.claim.accountId}\n            and command.workspace_id = ${input.claim.workspaceId}\n            and command.session_id = ${input.claim.sessionId}\n            and command.provider = 'connected_machine'\n            and command.control_workspace_id = ${input.claim.controlWorkspaceId}\n            and command.enrollment_id = ${input.claim.enrollmentId}\n            and command.connection_instance_id = ${input.claim.connectionInstanceId}\n            and command.op_id = ${input.claim.opId}\n            and command.reconcile_claim_id = ${input.claim.claimId}\n            and command.state in ('running', 'stopping')\n            and command.reconcile_proof_outcome in ('exited', 'lost')\n            and command.reconcile_proof_observed_at is not null\n          returning command.id\n        `);\n      if (rows.length !== 1) return false;\n      const [row] = await tx\n        .select()\n        .from(schema.sessionBackgroundCommands)\n        .where(eq(schema.sessionBackgroundCommands.id, input.claim.commandId))\n        .limit(1);\n      if (!row) throw new Error(\"Settled Connected Machine command disappeared\");\n      await mutateTerminal.commit(tx, mapCommand(row));\n      return true;\n    },\n  );\n}\n\nexport async function requestSessionBackgroundCommandCancellation(\n  db: Database,\n  input: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    commandId: string;\n    subjectId: string;\n  },\n): Promise<{ command: SessionBackgroundCommand | null; accepted: boolean }> {\n  return await withRlsContext(\n    db,\n    { accountId: input.accountId, workspaceId: input.workspaceId },\n    async (scopedDb) =>\n      await scopedDb.transaction(async (tx) => {\n        const [current] = await tx\n          .select()\n          .from(schema.sessionBackgroundCommands)\n          .where(\n            and(\n              eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n              eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n              eq(schema.sessionBackgroundCommands.id, input.commandId),\n            ),\n          )\n          .for(\"update\")\n          .limit(1);\n        if (!current) return { command: null, accepted: false };\n        if (current.state !== \"running\") {\n          return { command: mapCommand(current), accepted: false };\n        }\n        const [updated] = await tx\n          .update(schema.sessionBackgroundCommands)\n          .set({\n            state: \"stopping\",\n            cancelRequestedAt: new Date(),\n            cancelRequestedBy: input.subjectId.slice(0, 1024),\n            reconcileAfter: new Date(),\n            reconcileClaimId: null,\n            reconcileClaimedAt: null,\n            updatedAt: new Date(),\n          })\n          .where(eq(schema.sessionBackgroundCommands.id, current.id))\n          .returning();\n        if (current.retainedProcessId) {\n          await tx\n            .update(schema.sandboxRetainedProcesses)\n            .set({ reconcileAfter: new Date(), lastReconcileOutcome: \"cancel_requested\" })\n            .where(\n              and(\n                eq(schema.sandboxRetainedProcesses.id, current.retainedProcessId),\n                eq(schema.sandboxRetainedProcesses.state, \"active\"),\n                sql`${schema.sandboxRetainedProcesses.reconcileClaimId} is null`,\n              ),\n            );\n        }\n        return { command: mapCommand(updated!), accepted: true };\n      }),\n  );\n}\n\n/**\n * Transfer every active command in one or more session subtrees to the\n * provider-neutral stopping state inside the caller's existing control\n * transaction. The workspace-control mutation already excludes concurrent\n * session-tree changes, so the recursive walk and state transition are one\n * atomic Pause/Cancel effect. Steer deliberately never calls this seam.\n */\nexport async function requestSessionBackgroundCommandCancellationsInTransaction(\n  db: Database,\n  input: {\n    workspaceId: string;\n    rootSessionIds: string[];\n    subjectId: string;\n  },\n): Promise<number> {\n  const rootSessionIds = [...new Set(input.rootSessionIds)];\n  if (rootSessionIds.length === 0) return 0;\n  const rows = await db.execute<{ commandCount: number | string }>(sql`\n    with recursive roots(id) as (\n      values ${sql.join(\n        rootSessionIds.map((sessionId) => sql`(${sessionId}::uuid)`),\n        sql`, `,\n      )}\n    ), subtree(id, path, cycle) as (\n      select session.id, array[session.id]::uuid[], false\n      from roots root\n      join ${schema.sessions} session\n        on session.workspace_id = ${input.workspaceId}\n       and session.id = root.id\n      union all\n      select child.id, parent.path || child.id, child.id = any(parent.path)\n      from subtree parent\n      join ${schema.sessions} child\n        on child.workspace_id = ${input.workspaceId}\n       and child.parent_session_id = parent.id\n      where not parent.cycle\n    ), stopped as (\n      update ${schema.sessionBackgroundCommands} command set\n        state = 'stopping',\n        cancel_requested_at = clock_timestamp(),\n        cancel_requested_by = left(${input.subjectId}, 1024),\n        reconcile_after = clock_timestamp(),\n        reconcile_claim_id = null,\n        reconcile_claimed_at = null,\n        updated_at = clock_timestamp()\n      where command.workspace_id = ${input.workspaceId}\n        and command.session_id in (select id from subtree where not cycle)\n        and command.state = 'running'\n      returning command.retained_process_id\n    ), nudged as (\n      update ${schema.sandboxRetainedProcesses} process set\n        reconcile_after = clock_timestamp(),\n        reconcile_claim_id = null,\n        reconcile_claimed_at = null,\n        last_reconcile_outcome = 'cancel_requested'\n      where process.id in (\n        select stopped.retained_process_id\n        from stopped\n        where stopped.retained_process_id is not null\n      )\n        and process.state = 'active'\n      returning process.id\n    )\n    select count(*)::integer as \"commandCount\" from stopped\n  `);\n  return Number(rows[0]?.commandCount ?? 0);\n}\n\n/** Workspace Pause owns every active command in that workspace. */\nexport async function requestWorkspaceBackgroundCommandCancellationsInTransaction(\n  db: Database,\n  input: { workspaceId: string; subjectId: string },\n): Promise<number> {\n  const rows = await db.execute<{ commandCount: number | string }>(sql`\n    with stopped as (\n      update ${schema.sessionBackgroundCommands} command set\n        state = 'stopping',\n        cancel_requested_at = clock_timestamp(),\n        cancel_requested_by = left(${input.subjectId}, 1024),\n        reconcile_after = clock_timestamp(),\n        reconcile_claim_id = null,\n        reconcile_claimed_at = null,\n        updated_at = clock_timestamp()\n      where command.workspace_id = ${input.workspaceId}\n        and command.state = 'running'\n      returning command.retained_process_id\n    ), nudged as (\n      update ${schema.sandboxRetainedProcesses} process set\n        reconcile_after = clock_timestamp(),\n        reconcile_claim_id = null,\n        reconcile_claimed_at = null,\n        last_reconcile_outcome = 'cancel_requested'\n      where process.id in (\n        select stopped.retained_process_id\n        from stopped\n        where stopped.retained_process_id is not null\n      )\n        and process.state = 'active'\n      returning process.id\n    )\n    select count(*)::integer as \"commandCount\" from stopped\n  `);\n  return Number(rows[0]?.commandCount ?? 0);\n}\n\nexport async function settleSessionBackgroundCommandForRetainedProcessInTransaction(\n  tx: SessionActivityDatabase,\n  input: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    retainedProcessId: string;\n    outcome: \"exited\" | \"lost\";\n    exitCode: number | null;\n    reason: string;\n  },\n  mutateTerminal: SessionBackgroundCommandTerminalMutation,\n): Promise<SessionBackgroundCommand | null> {\n  const reason = boundedSessionBackgroundCommandReason(\n    input.reason,\n    \"Managed command settlement reason\",\n  );\n  await mutateTerminal.prepare(tx);\n  const [updatedRow] = await tx\n    .update(schema.sessionBackgroundCommands)\n    .set({\n      state: input.outcome,\n      exitCode: input.outcome === \"exited\" ? input.exitCode : null,\n      settlementReason: reason,\n      settledAt: new Date(),\n      reconcileClaimId: null,\n      reconcileClaimedAt: null,\n      lastReconcileOutcome: `settled_${input.outcome}`,\n      updatedAt: new Date(),\n    })\n    .where(\n      and(\n        eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n        eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n        eq(schema.sessionBackgroundCommands.retainedProcessId, input.retainedProcessId),\n        inArray(schema.sessionBackgroundCommands.state, [\"running\", \"stopping\"]),\n      ),\n    )\n    .returning();\n  let row = updatedRow;\n  if (!row) {\n    const [current] = await tx\n      .select()\n      .from(schema.sessionBackgroundCommands)\n      .where(\n        and(\n          eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n          eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n          eq(schema.sessionBackgroundCommands.retainedProcessId, input.retainedProcessId),\n        ),\n      )\n      .for(\"update\")\n      .limit(1);\n    if (!current) return null;\n    if (\n      current.state !== input.outcome ||\n      current.exitCode !== (input.outcome === \"exited\" ? input.exitCode : null)\n    ) {\n      throw new Error(\"Managed background command terminal state conflicts with process proof\");\n    }\n    const [existingEvent] = await tx\n      .select({ id: schema.sessionEvents.id })\n      .from(schema.sessionEvents)\n      .where(\n        and(\n          eq(schema.sessionEvents.workspaceId, input.workspaceId),\n          eq(schema.sessionEvents.sessionId, input.sessionId),\n          eq(schema.sessionEvents.type, \"session.command.finished\"),\n          sql`${schema.sessionEvents.payload} ->> 'commandId' = ${current.id}`,\n        ),\n      )\n      .limit(1);\n    if (existingEvent) return mapCommand(current);\n    row = current;\n  }\n  const command = mapCommand(row);\n  await mutateTerminal.commit(tx, command);\n  return command;\n}\n\nexport async function settleConnectedMachineSessionBackgroundCommandWithMutation(\n  db: Database,\n  input: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    commandId: string;\n    controlWorkspaceId: string;\n    enrollmentId: string;\n    connectionInstanceId: string;\n    opId: string;\n    outcome: \"exited\" | \"lost\";\n    exitCode: number | null;\n    reason: string;\n  },\n  mutateTerminal: SessionBackgroundCommandTerminalMutation,\n): Promise<SessionBackgroundCommand | null> {\n  const reason = boundedSessionBackgroundCommandReason(\n    input.reason,\n    \"Connected command settlement reason\",\n  );\n  if (input.outcome === \"exited\" && input.exitCode === null) {\n    throw new Error(\"Connected command exit settlement requires an exit code\");\n  }\n  if (input.outcome === \"lost\" && input.exitCode !== null) {\n    throw new Error(\"Connected command loss settlement cannot carry an exit code\");\n  }\n  return await withSessionActivityRlsContext(\n    db,\n    { accountId: input.accountId, workspaceId: input.workspaceId },\n    async (tx) => {\n      await mutateTerminal.prepare(tx);\n      const settledAt = new Date();\n      const [row] = await tx\n        .update(schema.sessionBackgroundCommands)\n        .set({\n          state: input.outcome,\n          exitCode: input.outcome === \"exited\" ? input.exitCode : null,\n          settlementReason: reason,\n          settledAt,\n          reconcileClaimId: null,\n          reconcileClaimedAt: null,\n          reconcileProofOutcome: input.outcome,\n          reconcileProofExitCode: input.outcome === \"exited\" ? input.exitCode : null,\n          reconcileProofReason: reason,\n          reconcileProofObservedAt: settledAt,\n          lastReconcileOutcome: `settled_${input.outcome}`,\n          updatedAt: new Date(),\n        })\n        .where(\n          and(\n            eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n            eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n            eq(schema.sessionBackgroundCommands.id, input.commandId),\n            eq(schema.sessionBackgroundCommands.provider, \"connected_machine\"),\n            eq(schema.sessionBackgroundCommands.controlWorkspaceId, input.controlWorkspaceId),\n            eq(schema.sessionBackgroundCommands.enrollmentId, input.enrollmentId),\n            eq(schema.sessionBackgroundCommands.connectionInstanceId, input.connectionInstanceId),\n            eq(schema.sessionBackgroundCommands.opId, input.opId),\n            inArray(schema.sessionBackgroundCommands.state, [\"running\", \"stopping\"]),\n          ),\n        )\n        .returning();\n      if (!row) return null;\n      const command = mapCommand(row);\n      await mutateTerminal.commit(tx, command);\n      return command;\n    },\n  );\n}\n\nexport async function getSessionBackgroundCommand(\n  db: Database,\n  input: { accountId: string; workspaceId: string; sessionId: string; commandId: string },\n): Promise<SessionBackgroundCommand | null> {\n  return await withRlsContext(\n    db,\n    { accountId: input.accountId, workspaceId: input.workspaceId },\n    async (scopedDb) => {\n      const [row] = await scopedDb\n        .select()\n        .from(schema.sessionBackgroundCommands)\n        .where(\n          and(\n            eq(schema.sessionBackgroundCommands.workspaceId, input.workspaceId),\n            eq(schema.sessionBackgroundCommands.sessionId, input.sessionId),\n            eq(schema.sessionBackgroundCommands.id, input.commandId),\n          ),\n        )\n        .limit(1);\n      return row ? mapCommand(row) : null;\n    },\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAIA,SAAS,KAAK,MAAM,IAAI,SAAS,WAAW;AAarC,IAAM,8CAA8C;AAEpD,SAAS,sCAAsC,OAAe,OAAuB;AAC1F,QAAM,aAAa,MAAM,KAAK;AAC9B,MAAI,UAAU;AACd,MAAI,QAAQ;AACZ,aAAW,aAAa,YAAY;AAClC,UAAM,iBAAiB,OAAO,WAAW,WAAW,MAAM;AAC1D,QAAI,QAAQ,iBAAiB,4CAA6C;AAC1E,eAAW;AACX,aAAS;AAAA,EACX;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB;AAC1D,SAAO;AACT;AAwCA,SAAS,eAAe,OAAuB;AAC7C,QAAM,aAAa,MAAM,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACnD,SAAO,MAAM,KAAK,UAAU,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE;AACrD;AAEA,SAAS,WACP,KAC0B;AAC1B,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,IACf,UAAU,IAAI;AAAA,IACd,OAAO,IAAI;AAAA,IACX,gBAAgB,IAAI;AAAA,IACpB,mBAAmB,IAAI,mBAAmB,YAAY,KAAK;AAAA,IAC3D,UAAU,IAAI,YAAY;AAAA,IAC1B,kBAAkB,IAAI,oBAAoB;AAAA,IAC1C,WAAW,IAAI,UAAU,YAAY;AAAA,IACrC,WAAW,IAAI,WAAW,YAAY,KAAK;AAAA,IAC3C,WAAW,IAAI,UAAU,YAAY;AAAA,EACvC;AACF;AAEA,eAAsB,qCACpB,IACA,OACwD;AACxD,MAAI,MAAM,WAAW,WAAW,EAAG,QAAO,oBAAI,IAAI;AAClD,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,YAAY;AAAA,IAC7D,OAAO,aAAa;AAClB,YAAM,OAAO,MAAM,SAChB,OAAO;AAAA,QACN,WAAkB,0BAA0B;AAAA,QAC5C,OAAO;AAAA,QACP,eAAe,6BAA4C,0BAA0B,KAAK;AAAA,MAC5F,CAAC,EACA,KAAY,yBAAyB,EACrC;AAAA,QACC;AAAA,UACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,UAClE,QAAe,0BAA0B,WAAW,MAAM,UAAU;AAAA,UACpE,QAAe,0BAA0B,OAAO,CAAC,WAAW,UAAU,CAAC;AAAA,QACzE;AAAA,MACF,EACC,QAAe,0BAA0B,SAAS;AACrD,aAAO,IAAI;AAAA,QACT,KAAK,IAAI,CAAC,QAAQ;AAAA,UAChB,IAAI;AAAA,UACJ;AAAA,YACE,OAAO,OAAO,IAAI,aAAa,IAAI,IAAK,aAAwB;AAAA,YAChE,OAAO,OAAO,IAAI,KAAK;AAAA,UACzB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,IACA,OACqC;AACrC,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,YAAY;AAAA,IAC7D,OAAO,aAAa;AAClB,YAAM,OAAO,MAAM,SAChB,OAAO,EACP,KAAY,yBAAyB,EACrC;AAAA,QACC;AAAA,UACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,UAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,QAChE;AAAA,MACF,EACC;AAAA,QACC,KAAY,0BAA0B,SAAS;AAAA,QAC/C,KAAY,0BAA0B,EAAE;AAAA,MAC1C,EACC,MAAM,GAAI;AACb,aAAO,KAAK,IAAI,UAAU;AAAA,IAC5B;AAAA,EACF;AACF;AAGA,eAAsB,mDACpB,IACA,OAQmC;AACnC,QAAM,CAAC,OAAO,IAAI,MAAM,GACrB,OAAO;AAAA,IACN,WAAkB,yBAAyB;AAAA,IAC3C,aAAoB,yBAAyB;AAAA,IAC7C,WAAkB,yBAAyB;AAAA,IAC3C,OAAc,yBAAyB;AAAA,EACzC,CAAC,EACA,KAAY,wBAAwB,EACpC,MAAM,GAAU,yBAAyB,IAAI,MAAM,iBAAiB,CAAC,EACrE,IAAI,QAAQ,EACZ,MAAM,CAAC;AACV,MACE,CAAC,WACD,QAAQ,cAAc,MAAM,aAC5B,QAAQ,gBAAgB,MAAM,eAC9B,QAAQ,cAAc,MAAM,aAC5B,QAAQ,UAAU,UAClB;AACA,UAAM,IAAI,MAAM,uEAAuE;AAAA,EACzF;AACA,QAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAc,yBAAyB,EACvC,OAAO;AAAA,IACN,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,UAAU;AAAA,IACV,OAAO;AAAA,IACP,mBAAmB,MAAM;AAAA,IACzB,gBAAgB,eAAe,MAAM,OAAO;AAAA,EAC9C,CAAC,EACA,mBAAmB;AAAA,IAClB,QAAe,0BAA0B;AAAA,IACzC,aAAa,MAAa,0BAA0B,iBAAiB;AAAA,IACrE,KAAK,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,EAC/B,CAAC,EACA,UAAU;AACb,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,qDAAqD;AAC/E,MACE,IAAI,cAAc,MAAM,aACxB,IAAI,gBAAgB,MAAM,eAC1B,IAAI,cAAc,MAAM,aACxB,IAAI,aAAa,aACjB,IAAI,sBAAsB,MAAM,mBAChC;AACA,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,WAAW,GAAG;AACvB;AAGA,eAAsB,4DACpB,IACA,OAWmC;AACnC,QAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAc,yBAAyB,EACvC,OAAO;AAAA,IACN,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,UAAU;AAAA,IACV,OAAO;AAAA,IACP,oBAAoB,MAAM;AAAA,IAC1B,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,MAAM,MAAM;AAAA,IACZ,gBAAgB,eAAe,MAAM,OAAO;AAAA,EAC9C,CAAC,EACA,mBAAmB;AAAA,IAClB,QAAQ;AAAA,MACC,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,IACnC;AAAA,IACA,aAAa,MAAa,0BAA0B,QAAQ;AAAA,IAC5D,KAAK,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,EAC/B,CAAC,EACA,UAAU;AACb,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+DAA+D;AACzF,MACE,IAAI,cAAc,MAAM,aACxB,IAAI,gBAAgB,MAAM,eAC1B,IAAI,cAAc,MAAM,aACxB,IAAI,aAAa,uBACjB,IAAI,uBAAuB,MAAM,sBACjC,IAAI,iBAAiB,MAAM,gBAC3B,IAAI,yBAAyB,MAAM,wBACnC,IAAI,SAAS,MAAM,MACnB;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,WAAW,GAAG;AACvB;AAKA,eAAsB,+CACpB,IACA,OACmD;AACnD,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,KAAK,MAAM,QAAQ,KAAK,MAAM,QAAQ,KAAK;AAC9E,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,MACE,CAAC,OAAO,cAAc,MAAM,UAAU,KACtC,MAAM,aAAa,KACnB,MAAM,aAAa,MACnB;AACA,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,OAAO,MAAM,GAAG,QAAmD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAiBnE,MAAM,OAAO,WAAW,MAAM,KAAK,cAAc,MAAM,UAAU;AAAA;AAAA,GAEtE;AACD,SAAO,KAAK,IAAI,CAAC,QAAmD;AAClE,QAAI,IAAI,iBAAiB,aAAa,IAAI,iBAAiB,YAAY;AACrE,YAAM,IAAI,MAAM,kDAAkD,IAAI,YAAY,EAAE;AAAA,IACtF;AACA,UAAM,QACJ,IAAI,0BAA0B,OAC1B,OACA,IAAI,0BAA0B,YAAY,IAAI,0BAA0B,SACtE;AAAA,MACE,SAAS,IAAI;AAAA,MACb,UACE,IAAI,2BAA2B,OAAO,OAAO,OAAO,IAAI,sBAAsB;AAAA,MAChF,QAAQ,IAAI;AAAA,MACZ,YACE,IAAI,oCAAoC,OACpC,IAAI,2BACJ,IAAI,KAAK,IAAI,wBAAyB;AAAA,IAC9C,KACC,MAAM;AACL,YAAM,IAAI;AAAA,QACR,kDAAkD,IAAI,qBAAqB;AAAA,MAC7E;AAAA,IACF,GAAG;AACX,WAAO;AAAA,MACL,WAAW,IAAI;AAAA,MACf,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,SAAS,IAAI;AAAA,MACb,OAAO,IAAI;AAAA,MACX,oBAAoB,IAAI;AAAA,MACxB,cAAc,IAAI;AAAA,MAClB,sBAAsB,IAAI;AAAA,MAC1B,MAAM,IAAI;AAAA,MACV,mBAAmB,OAAO,IAAI,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,4BAA4B,OAA+C;AAClF,SAAO;AAAA,IACL,GAAU,0BAA0B,IAAI,MAAM,SAAS;AAAA,IACvD,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,IAC9D,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,IAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,IAC9D,GAAU,0BAA0B,UAAU,mBAAmB;AAAA,IACjE,GAAU,0BAA0B,oBAAoB,MAAM,kBAAkB;AAAA,IAChF,GAAU,0BAA0B,cAAc,MAAM,YAAY;AAAA,IACpE,GAAU,0BAA0B,sBAAsB,MAAM,oBAAoB;AAAA,IACpF,GAAU,0BAA0B,MAAM,MAAM,IAAI;AAAA,IACpD,GAAU,0BAA0B,kBAAkB,MAAM,OAAO;AAAA,IACnE,QAAe,0BAA0B,OAAO,CAAC,WAAW,UAAU,CAAC;AAAA,EACzE;AACF;AAIA,eAAsB,6CACpB,IACA,OAIe;AACf,QAAM,SAAS;AAAA,IACb,MAAM,MAAM;AAAA,IACZ;AAAA,EACF;AACA,MAAI,MAAM,MAAM,YAAY,YAAY,MAAM,MAAM,aAAa,MAAM;AACrE,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,MAAI,MAAM,MAAM,YAAY,UAAU,MAAM,MAAM,aAAa,MAAM;AACnE,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,QAAM;AAAA,IACJ;AAAA,IACA,EAAE,WAAW,MAAM,MAAM,WAAW,aAAa,MAAM,MAAM,YAAY;AAAA,IACzE,OAAO,aAAa;AAClB,YAAM,CAAC,OAAO,IAAI,MAAM,SACrB,OAAO,EACP,KAAY,yBAAyB,EACrC,MAAM,4BAA4B,MAAM,KAAK,CAAC,EAC9C,IAAI,QAAQ,EACZ,MAAM,CAAC;AACV,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6DAA6D;AAC3F,UAAI,QAAQ,0BAA0B,MAAM;AAC1C,cAAM,aAAa,QAAQ,0BAA0B,QAAQ,KAAK;AAClE,YACE,QAAQ,0BAA0B,MAAM,MAAM,WAC9C,QAAQ,2BAA2B,MAAM,MAAM,YAC/C,QAAQ,yBAAyB,UACjC,eAAe,MAAM,MAAM,WAAW,QAAQ,GAC9C;AACA,gBAAM,IAAI,MAAM,qEAAqE;AAAA,QACvF;AACA;AAAA,MACF;AACA,YAAM,OAAO,MAAM,SAChB,OAAc,yBAAyB,EACvC,IAAI;AAAA,QACH,uBAAuB,MAAM,MAAM;AAAA,QACnC,wBAAwB,MAAM,MAAM;AAAA,QACpC,sBAAsB;AAAA,QACtB,0BAA0B,MAAM,MAAM;AAAA,QACtC,sBAAsB,SAAS,MAAM,MAAM,OAAO;AAAA,QAClD,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC,EACA,MAAM,4BAA4B,MAAM,KAAK,CAAC,EAC9C,UAAU,EAAE,IAAW,0BAA0B,GAAG,CAAC;AACxD,UAAI,KAAK,WAAW,GAAG;AACrB,cAAM,IAAI,MAAM,gEAAgE;AAAA,MAClF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,qDACpB,IACA,OAKkB;AAClB,MAAI,CAAC,OAAO,cAAc,MAAM,YAAY,KAAK,MAAM,eAAe,GAAG;AACvE,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,MAAM,GAAG,EAAE;AAChD,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4DAA4D;AAC1F,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,MAAM,WAAW,aAAa,MAAM,MAAM,YAAY;AAAA,IACzE,OAAO,aAAa;AAClB,YAAM,OAAO,MAAM,SAChB,OAAc,yBAAyB,EACvC,IAAI;AAAA,QACH,gBAAgB,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,YAAY;AAAA,QACxD,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,QACpB,sBAAsB;AAAA,QACtB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC,EACA,MAAM,4BAA4B,MAAM,KAAK,CAAC,EAC9C,UAAU,EAAE,IAAW,0BAA0B,GAAG,CAAC;AACxD,aAAO,KAAK,WAAW;AAAA,IACzB;AAAA,EACF;AACF;AAGA,eAAsB,2DACpB,IACA,OACA,gBACkB;AAClB,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,MAAM,WAAW,aAAa,MAAM,MAAM,YAAY;AAAA,IACzE,OAAO,OAAO;AACZ,YAAM,eAAe,QAAQ,EAAE;AAC/B,YAAM,OAAO,MAAM,GAAG,QAAwB;AAAA,mBAC1B,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BAapB,MAAM,MAAM,SAAS;AAAA,uCACb,MAAM,MAAM,SAAS;AAAA,yCACnB,MAAM,MAAM,WAAW;AAAA,uCACzB,MAAM,MAAM,SAAS;AAAA;AAAA,iDAEX,MAAM,MAAM,kBAAkB;AAAA,0CACrC,MAAM,MAAM,YAAY;AAAA,mDACf,MAAM,MAAM,oBAAoB;AAAA,kCACjD,MAAM,MAAM,IAAI;AAAA,+CACH,MAAM,MAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,SAKzD;AACH,UAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,YAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAO,EACP,KAAY,yBAAyB,EACrC,MAAM,GAAU,0BAA0B,IAAI,MAAM,MAAM,SAAS,CAAC,EACpE,MAAM,CAAC;AACV,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+CAA+C;AACzE,YAAM,eAAe,OAAO,IAAI,WAAW,GAAG,CAAC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAsB,4CACpB,IACA,OAO0E;AAC1E,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,YAAY;AAAA,IAC7D,OAAO,aACL,MAAM,SAAS,YAAY,OAAO,OAAO;AACvC,YAAM,CAAC,OAAO,IAAI,MAAM,GACrB,OAAO,EACP,KAAY,yBAAyB,EACrC;AAAA,QACC;AAAA,UACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,UAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,UAC9D,GAAU,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACzD;AAAA,MACF,EACC,IAAI,QAAQ,EACZ,MAAM,CAAC;AACV,UAAI,CAAC,QAAS,QAAO,EAAE,SAAS,MAAM,UAAU,MAAM;AACtD,UAAI,QAAQ,UAAU,WAAW;AAC/B,eAAO,EAAE,SAAS,WAAW,OAAO,GAAG,UAAU,MAAM;AAAA,MACzD;AACA,YAAM,CAAC,OAAO,IAAI,MAAM,GACrB,OAAc,yBAAyB,EACvC,IAAI;AAAA,QACH,OAAO;AAAA,QACP,mBAAmB,oBAAI,KAAK;AAAA,QAC5B,mBAAmB,MAAM,UAAU,MAAM,GAAG,IAAI;AAAA,QAChD,gBAAgB,oBAAI,KAAK;AAAA,QACzB,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC,EACA,MAAM,GAAU,0BAA0B,IAAI,QAAQ,EAAE,CAAC,EACzD,UAAU;AACb,UAAI,QAAQ,mBAAmB;AAC7B,cAAM,GACH,OAAc,wBAAwB,EACtC,IAAI,EAAE,gBAAgB,oBAAI,KAAK,GAAG,sBAAsB,mBAAmB,CAAC,EAC5E;AAAA,UACC;AAAA,YACE,GAAU,yBAAyB,IAAI,QAAQ,iBAAiB;AAAA,YAChE,GAAU,yBAAyB,OAAO,QAAQ;AAAA,YAClD,MAAa,yBAAyB,gBAAgB;AAAA,UACxD;AAAA,QACF;AAAA,MACJ;AACA,aAAO,EAAE,SAAS,WAAW,OAAQ,GAAG,UAAU,KAAK;AAAA,IACzD,CAAC;AAAA,EACL;AACF;AASA,eAAsB,0DACpB,IACA,OAKiB;AACjB,QAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,MAAM,cAAc,CAAC;AACxD,MAAI,eAAe,WAAW,EAAG,QAAO;AACxC,QAAM,OAAO,MAAM,GAAG,QAA2C;AAAA;AAAA,eAEpD,IAAI;AAAA,IACX,eAAe,IAAI,CAAC,cAAc,OAAO,SAAS,SAAS;AAAA,IAC3D;AAAA,EACF,CAAC;AAAA;AAAA;AAAA;AAAA,aAIa,QAAQ;AAAA,oCACQ,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,aAKjC,QAAQ;AAAA,kCACM,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA,eAI7B,yBAAyB;AAAA;AAAA;AAAA,qCAGV,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,qCAKf,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,eAKhC,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAc3C;AACD,SAAO,OAAO,KAAK,CAAC,GAAG,gBAAgB,CAAC;AAC1C;AAGA,eAAsB,4DACpB,IACA,OACiB;AACjB,QAAM,OAAO,MAAM,GAAG,QAA2C;AAAA;AAAA,eAE7C,yBAAyB;AAAA;AAAA;AAAA,qCAGV,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,qCAKf,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA,eAIhC,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAc3C;AACD,SAAO,OAAO,KAAK,CAAC,GAAG,gBAAgB,CAAC;AAC1C;AAEA,eAAsB,8DACpB,IACA,OASA,gBAC0C;AAC1C,QAAM,SAAS;AAAA,IACb,MAAM;AAAA,IACN;AAAA,EACF;AACA,QAAM,eAAe,QAAQ,EAAE;AAC/B,QAAM,CAAC,UAAU,IAAI,MAAM,GACxB,OAAc,yBAAyB,EACvC,IAAI;AAAA,IACH,OAAO,MAAM;AAAA,IACb,UAAU,MAAM,YAAY,WAAW,MAAM,WAAW;AAAA,IACxD,kBAAkB;AAAA,IAClB,WAAW,oBAAI,KAAK;AAAA,IACpB,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,sBAAsB,WAAW,MAAM,OAAO;AAAA,IAC9C,WAAW,oBAAI,KAAK;AAAA,EACtB,CAAC,EACA;AAAA,IACC;AAAA,MACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,MAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,MAC9D,GAAU,0BAA0B,mBAAmB,MAAM,iBAAiB;AAAA,MAC9E,QAAe,0BAA0B,OAAO,CAAC,WAAW,UAAU,CAAC;AAAA,IACzE;AAAA,EACF,EACC,UAAU;AACb,MAAI,MAAM;AACV,MAAI,CAAC,KAAK;AACR,UAAM,CAAC,OAAO,IAAI,MAAM,GACrB,OAAO,EACP,KAAY,yBAAyB,EACrC;AAAA,MACC;AAAA,QACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,QAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,QAC9D,GAAU,0BAA0B,mBAAmB,MAAM,iBAAiB;AAAA,MAChF;AAAA,IACF,EACC,IAAI,QAAQ,EACZ,MAAM,CAAC;AACV,QAAI,CAAC,QAAS,QAAO;AACrB,QACE,QAAQ,UAAU,MAAM,WACxB,QAAQ,cAAc,MAAM,YAAY,WAAW,MAAM,WAAW,OACpE;AACA,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC1F;AACA,UAAM,CAAC,aAAa,IAAI,MAAM,GAC3B,OAAO,EAAE,IAAW,cAAc,GAAG,CAAC,EACtC,KAAY,aAAa,EACzB;AAAA,MACC;AAAA,QACE,GAAU,cAAc,aAAa,MAAM,WAAW;AAAA,QACtD,GAAU,cAAc,WAAW,MAAM,SAAS;AAAA,QAClD,GAAU,cAAc,MAAM,0BAA0B;AAAA,QACxD,MAAa,cAAc,OAAO,sBAAsB,QAAQ,EAAE;AAAA,MACpE;AAAA,IACF,EACC,MAAM,CAAC;AACV,QAAI,cAAe,QAAO,WAAW,OAAO;AAC5C,UAAM;AAAA,EACR;AACA,QAAM,UAAU,WAAW,GAAG;AAC9B,QAAM,eAAe,OAAO,IAAI,OAAO;AACvC,SAAO;AACT;AAEA,eAAsB,2DACpB,IACA,OAaA,gBAC0C;AAC1C,QAAM,SAAS;AAAA,IACb,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI,MAAM,YAAY,YAAY,MAAM,aAAa,MAAM;AACzD,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,MAAI,MAAM,YAAY,UAAU,MAAM,aAAa,MAAM;AACvD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,YAAY;AAAA,IAC7D,OAAO,OAAO;AACZ,YAAM,eAAe,QAAQ,EAAE;AAC/B,YAAM,YAAY,oBAAI,KAAK;AAC3B,YAAM,CAAC,GAAG,IAAI,MAAM,GACjB,OAAc,yBAAyB,EACvC,IAAI;AAAA,QACH,OAAO,MAAM;AAAA,QACb,UAAU,MAAM,YAAY,WAAW,MAAM,WAAW;AAAA,QACxD,kBAAkB;AAAA,QAClB;AAAA,QACA,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,QACpB,uBAAuB,MAAM;AAAA,QAC7B,wBAAwB,MAAM,YAAY,WAAW,MAAM,WAAW;AAAA,QACtE,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,QAC1B,sBAAsB,WAAW,MAAM,OAAO;AAAA,QAC9C,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC,EACA;AAAA,QACC;AAAA,UACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,UAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,UAC9D,GAAU,0BAA0B,IAAI,MAAM,SAAS;AAAA,UACvD,GAAU,0BAA0B,UAAU,mBAAmB;AAAA,UACjE,GAAU,0BAA0B,oBAAoB,MAAM,kBAAkB;AAAA,UAChF,GAAU,0BAA0B,cAAc,MAAM,YAAY;AAAA,UACpE,GAAU,0BAA0B,sBAAsB,MAAM,oBAAoB;AAAA,UACpF,GAAU,0BAA0B,MAAM,MAAM,IAAI;AAAA,UACpD,QAAe,0BAA0B,OAAO,CAAC,WAAW,UAAU,CAAC;AAAA,QACzE;AAAA,MACF,EACC,UAAU;AACb,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,UAAU,WAAW,GAAG;AAC9B,YAAM,eAAe,OAAO,IAAI,OAAO;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAsB,4BACpB,IACA,OAC0C;AAC1C,SAAO,MAAM;AAAA,IACX;AAAA,IACA,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,YAAY;AAAA,IAC7D,OAAO,aAAa;AAClB,YAAM,CAAC,GAAG,IAAI,MAAM,SACjB,OAAO,EACP,KAAY,yBAAyB,EACrC;AAAA,QACC;AAAA,UACE,GAAU,0BAA0B,aAAa,MAAM,WAAW;AAAA,UAClE,GAAU,0BAA0B,WAAW,MAAM,SAAS;AAAA,UAC9D,GAAU,0BAA0B,IAAI,MAAM,SAAS;AAAA,QACzD;AAAA,MACF,EACC,MAAM,CAAC;AACV,aAAO,MAAM,WAAW,GAAG,IAAI;AAAA,IACjC;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-U4WPPEBH.js → chunk-NLFHMPUB.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-UFAMOUWL.js";
 
 // src/canonical-human-identities.ts
 import { createHash } from "crypto";
@@ -309,4 +309,4 @@ export {
   getCanonicalHumanIdentityProjection,
   applyCanonicalHumanIdentityOperation
 };
-//# sourceMappingURL=chunk-U4WPPEBH.js.map
+//# sourceMappingURL=chunk-NLFHMPUB.js.map

package/dist/{chunk-5NNCGFQY.js → chunk-P6NSEG2S.js}

@@ -5,7 +5,7 @@ import {
   withWorkspaceRls,
   withWorkspaceSubjectRls,
   withWorkspaceSubjectSessionActivityRls
-} from "./chunk-F6PBS6WE.js";
+} from "./chunk-UFAMOUWL.js";
 
 // src/session-tenancy.ts
 import { createHash } from "crypto";
@@ -481,4 +481,4 @@ export {
   forkSessionContent,
   replayAppliedSessionFork
 };
-//# sourceMappingURL=chunk-5NNCGFQY.js.map
+//# sourceMappingURL=chunk-P6NSEG2S.js.map